last executing test programs: 19m36.656592477s ago: executing program 32 (id=2143): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid_for_children\x00') setns(r0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x6, 0x0) socket(0x15, 0x5, 0x0) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @multicast}, 0x6a) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x80000000000000d4, 0x1, 0x6, 0x0, 0x5, 0x4, 0x2, {0xffffffff, 0x20000000010000}, 0x5, 0x6, 0xfffffffffffffffd, 0xb, 0x0, 0x9, 0x81, 0xfffffffffbff628e, 0x800000a747, 0xdead, 0x804}) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x28000, 0x0) connect$auto(0x3, 0x0, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x2c, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454d9, 0x38) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r2, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f00000009c0)={0x38, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x2f, 0x0, 0x1, [@typed={0x14, 0x42, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0xf7}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40c4}, 0xc000) getpgid$auto(0x0) ioctl$auto_XFS_IOC_FREESP(r1, 0x4030580b, &(0x7f0000000080)={0x3, 0x5e, 0x0, 0x9, 0xff, 0xffffffffffffffff}) msgctl$auto_IPC_SET(0xd9, 0x1, &(0x7f0000000180)={{0x100, 0xee01, 0xee00, 0x40, 0xfffff528, 0x5, 0xfff8}, &(0x7f00000000c0)=0x28, &(0x7f0000000140)=0x50, 0x7fffffffffffffff, 0x9, 0x1, 0x8, 0x3, 0x7fff, 0x5, 0xb1, @inferred=0xffffffffffffffff}) shmctl$auto_SHM_STAT_ANY(0x5, 0xf, &(0x7f0000000340)={{0xf, 0xee01, 0xffffffffffffffff, 0x2, 0xf6, 0xc, 0x9}, 0x7, 0x1ff, 0x4f707524, 0x10, @raw=0xfffffffd, @raw=0x401, 0x7fff, 0x0, &(0x7f0000000200)="792ea06b9477d93f794337d102fcaf67c55031081507fc04d74871cc9666113ca2caae2307c3a5b981de1f0aa62c65a4e1e3da59c79355aea2e7833ea691a25c6eb994aa9c1c426491005440afbc59925b5998abb21012f69cf048fad6c7603538398b9c515dd4b8faad827d1694b2e28f873365fbb7159065b5495103c6a94cd3b0c36dc1d6eb9d489d4c41e7d2b775f27750979f12473fc65a60268bddf93a7dad91d9", &(0x7f00000002c0)="d812f33501353188563ec0fda1dc8d87e5d3c8c75538c49652e9eb6dc6c5958c7db1818aeae7f0ace3961560996204d8d60e401bdd9bbd6ee53f1f8b719d9fc13ee72e3de3"}) 8m40.983361183s ago: executing program 33 (id=4624): mmap$auto(0x0, 0x2020009, 0x3, 0x15, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) brk$auto(0x7fffffffafff) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20004994}, 0x4000884) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/bcachefs/parameters/verify_btree_ondisk\x00', 0x41102, 0x0) sendfile$auto(r3, r3, 0x0, 0x1) mmap$auto(0x0, 0xc6, 0xdc, 0x17, 0x2, 0x8) write$auto(0x6, 0x0, 0x100000001) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x42, 0x0) r5 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r7, @ANYRES8=r6, @ANYRES32, @ANYRES64=r4, @ANYRES64=0x0, @ANYRESHEX=r0], 0x18}}, 0x80) recvmmsg$auto(r5, 0x0, 0x4, 0x6586, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/ext4/sda1/msg_count\x00', 0x80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r8, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/net/erspan0/queues/tx-0/byte_queue_limits/stall_cnt\x00', 0xc2481, 0x0) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000000c0)={0x48, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x5}, @ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x809}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0xf}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x3}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r7, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x70, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1ff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x431}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffff44f}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x163bef2c9db009ef}, 0x2000c010) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) 3m33.300582547s ago: executing program 3 (id=6070): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/1:5/min_bytes\x00', 0x88282, 0x0) r1 = openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim6/take_snapshot\x00', 0x680800, 0x0) sendfile$auto(r1, r0, 0x0, 0x1ff) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0x148) unlinkat$auto(r2, &(0x7f0000000040)='./file0\x00', 0x3) 3m33.299832027s ago: executing program 3 (id=6071): ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) shutdown$auto(0xffffffffffffffff, 0x2) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto_VHOST_NET_SET_BACKEND(r1, 0x4008af30, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x8, 0x13, 0x0, 0xfb5) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000000)) pread64$auto(r0, 0x0, 0x7ff, 0x400) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYBLOB="000226bd7000fedbdf25030000000800030009000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a000500aaaaaaaaaa370000080004001000000008000200", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8800) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) 3m32.414133814s ago: executing program 3 (id=6075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = setfsuid$auto(0x0) setuid$auto(r2) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000100)={0x2e0, r1, 0x100, 0x7, 0x25dfdbfd, {}, [@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x92, 0xe8, "660715a05dbdc4e960285f112b3ab5159aef4e8f35020b007e9ddfbe779493edc78de0c505fedb0a52588da8b76d35c265cef4a3cbe5d517409aca7b30aa83877d70467a612e9966c1ebdcc679d2b450223ef8b1b63d45a96f82deb403cd46492aa3e798a362bf2535cb801d45bd5fe256b782e31bc5a028796e7c4fedcc130aa28c10031717ffa590de389e519c"}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x1ac, 0x124, 0x0, 0x1, [@typed={0x8, 0x28, 0x0, 0x0, @uid=r2}, @nested={0x1a0, 0xd2, 0x0, 0x1, [@generic="cf9d4547a9811c2c47b2bf025c4936e99eb0319dae4143cd80f11cddaf7f413ecb19115bb1444b2b1d01ef8e4f1972b1d22f10fd2bfcb83847f86e4b09fa231f2a1260f42ca18e348f8b840711674852d16a7298cba50a878244b47d04c43adebf64a3a1543eb3db8b50555c3d827d3f84f598e1d2d63eb6f555790b74eab445acc302f75a616c41d510d627fab3b6f89bdccea4657c22dd", @typed={0x14, 0xd2, 0x0, 0x0, @ipv6=@private1}, @generic="a4d8c6cb375ca9963d072771226cc4ebed4ee4fb7441772b29c75abb421cbed3eb300ea4ac0dc50b6a42768e8d197000920b0c9babab8df67f105d7003b663dfd27c33a83ccef86574fd6dd9fac7d85ca8a4e27e900f6fbe1c9da39affc0f78d770bfb13c2bec84c48ad0edcb5f59fe4f9cf1db07ca43353bc7e1f42cf39fd22ff95373c524170fe08837a64c2b34ac67f93fc8564ac2f3b7fb91c34c5fdd811e459c519ea060ac0338ea0b64db507e3c9550a5656358a84e578996ca1986b6ddd153c88606f2b96a05f2a64fdddfc59448f32da1888afda21965bdc4a9ad21b142731157c1fbcfc6aa5aee1b73c7fa8"]}]}, @NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1ff}, @NL80211_ATTR_MLO_TTLM_DLINK={0x65, 0x148, "195a5e97d94f99371a39396bf11b054fe26ae507d7357e3d6e32f24f32935129c21089fcccce45342bd23f8720fde7fa59b5b1b01fa4e2cb04ddf0cc0bc972ed677748e5f5eb7f614adbeff518cec631dce41971d34aeb6f5846f0c0f5fa01d1e7"}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x86b4}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x40815}, 0x8080) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) ioctl$auto_UI_SET_ABSBIT(r3, 0x40045567, &(0x7f0000000000)=0x8a) 3m32.223607792s ago: executing program 3 (id=6077): socket(0x10, 0x2, 0x0) socket(0xa, 0x5, 0x0) r0 = setfsuid$auto(0xee00) setreuid$auto(r0, 0x0) msgctl$auto_MSG_INFO(0x875, 0xc, &(0x7f0000000180)={{0x2, 0xee00, 0x0, 0x9, 0x401, 0x0, 0x1}, 0x0, 0x0, 0x9, 0x7, 0x4, 0x5, 0x9, 0x200, 0x8, 0x5, @inferred=0xffffffffffffffff, @raw=0xcb}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) write$auto(0x3, 0x0, 0xfdef) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan1/retrans_time\x00', 0x242, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r3, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = ioctl$auto_NS_GET_NSTYPE(r2, 0xb703, 0x0) read$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(r4, &(0x7f0000000100), 0x0) sendfile$auto(r2, r2, 0x0, 0x200) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x96934967338325c9, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', 0x20c01, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) sysfs$auto(0x2, 0x2, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x80000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x100000001, 0xffffffffffffff7f, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x6, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x141, 0x0) 3m31.147698235s ago: executing program 3 (id=6084): ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) shutdown$auto(0xffffffffffffffff, 0x2) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x5) ioctl$auto_VHOST_NET_SET_BACKEND(r1, 0x4008af30, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x8, 0x13, 0x0, 0xfb5) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000000)) pread64$auto(r0, 0x0, 0x7ff, 0x400) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030009000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a000500aaaaaaaaaa370000080004001000000008000200", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8800) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) 3m30.182806002s ago: executing program 3 (id=6088): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2302, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000380), 0x401, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40010) sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01032cb57000fbe0df250a00000006000100170000e22bbf3fcf4040e070d0a6c62bafb8b3938f741015ce0156a21b6f4cb954cc6997af8bcebab6f9750e9de4e13ad295a4a40b1f972a575ed0c60d2ad237fefa6f70376eea9faf614cb39a850102438891c057f9f18c9354443f0a2193218d9aedd7c184f02435d6ba18f1a094965b6c8bbcefedd757427b0f12fa88b487dc3caa09810b3d9975fe78a4e6b21c8b1fe8c72d133fc060265d076309551060c8b03837140c0faf0f3677128a290423d1c01c5628538c8b96dbb99fa36cee4be947c9d7e920f9bc9a592f51a3ec86f2856daa583df930493ccc"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r5) r8 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r7) r10 = fcntl$auto_F_GETOWN(r5, 0x9, 0x2) sendmsg$auto_NL80211_CMD_ABORT_SCAN(r8, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x19c, r9, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DATA={0x7, 0x7, "987774"}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [@typed={0x8, 0xff, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}}]}, @NL80211_ATTR_TX_RATES={0x174, 0x5a, 0x0, 0x1, [@generic="b5a406e3056aff8fd00e696f0b7aaeca4e6a28d7cc50a5acaf4ebb41e43f5384d3150e354df3847f67d44cbca3dfae5c9e914552003a9a16994dff3fe18c55938e574a9ceeebde24c63c9859872b7a0c9c79b9a946a2cef17de44de4", @nested={0x112, 0xc0, 0x0, 0x1, [@generic="9bd3bda8879c07049c51c4345bfcda00f2f13cfc7b970b199639e1fd8e284f2042cdb5eb7b0a5f5cda36fc50e5", @typed={0x8, 0xb7, 0x0, 0x0, @pid=r10}, @typed={0x8, 0x14c, 0x0, 0x0, @u32=0xfff}, @generic="2333dda8d62cc2460b9de469f826c38fe7c6060f1eb54ae26bbdf8d706f2752903656149a5b91ef5c1cbfa92526f8bf358b015e1c7d5b7dd4888767c0a35a28ccf87455e56eecc0505c27e36fd97119d48454bf47b86c01f721b8d48d840dd89c19cb657ec0fb8e5753897e97bd7cfd0447ecfa466fcc347cb42da109f35b27cc40a5d8bcd8108fba71106108ab905edd6c5cc", @typed={0x8, 0x5, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x14, 0x35, 0x0, 0x0, @ipv6=@private0}, @generic="ec10863b38c205a771e242090a24959c66be37ecc7a73ebb45c44fa5c72bc84a4da8"]}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000019c0)={0x13e8, r9, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x13}, @NL80211_ATTR_MLO_SUPPORT={0x4}, @NL80211_ATTR_MLD_ADDR={0x47, 0x13a, "151ed19672125137f1027f29abfee69021f512252cb285ab2d814ea607eea6ebf5a1fb1ac7aad77e6fcc2ef93bdd650c5d432ee83d55362f8d53d2fffb5d02400229e0"}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x14db}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x115c, 0x124, 0x0, 0x1, [@typed={0x8, 0x25, 0x0, 0x0, @u32=0x20000000}, @typed={0x8, 0x85, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x79, 0x8a, 0x0, 0x0, @binary="321fd6739c59ae614013d010177dcfca2c9c1699745d2c297d67a93c162ddfdae42396418d1ae7537ff6716a02c01d337428a93cb8b099880af286ff7e9129a114612180445f28a74434d629f17f360e9cf7862050b407364e8620cd78fe649db120361058a16795842f88ce61fe68c33235e8a3d7"}, @nested={0x1020, 0x3, 0x0, 0x1, [@nested={0x4, 0xa8}, @generic="8740ab9abbf555c855b3d04129a8317135a5424a", @nested={0x4, 0xd2}, @generic="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"]}, @generic="10ae29c89096cc47f70e6b561e25721d2ef91ef3ce89b9ed3b059d355324df37000d0a9d25c5a6234f28eb6537b2a6d2896d178e547848d0de143562ca83b6669e90433e2ef94e5c11be0a388ebd831f790b9bf3c250d8a71e4bda786b258f2c5f927bc689bccbc2059cc2a3", @nested={0x40, 0x5e, 0x0, 0x1, [@nested={0x4, 0xc4}, @typed={0x14, 0xd5, 0x0, 0x0, @ipv6=@empty}, @typed={0x14, 0x73, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x26, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x4, 0x37}, @nested={0x4, 0x49}]}]}, @NL80211_ATTR_PMKR0_NAME={0xac, 0x102, "58ac2f1f0144099386404a5491961ae952fab89b4ab81158a78b0f75f255ac8300a137d3da65b9e90400204db4cadc4acb2c9f08208d6a1a0366be0a33ed7a2f730485a7da50a878351e6b03d4b029721cbada474cc6407a3e5dd7aaee7706d0b0d14111944807c323da4c5f3796113cb50d1abd07d432605b97ef2ceac983a68b6c02f388301fb1aa2ef18234b90ea08fd814fad6dc62fb8e8216b0fc857d8c866f359ec012a7df"}, @NL80211_ATTR_PMKID={0xa5, 0x55, "0bca43b58cfe59a100bf704815777dbecc69c9035b3b9cebcd8be1946a4152a34c2a7cbb6d91e7cda2549a718d226651c420df85cd8906f460a285de7fd7bd84190fd49f8bcb0b5c8ecfc9615dde7c5d89ed8f07f468958b46feb86c7978f9da682ccdb200a7edfc16963300bca9bb011dbc9821ce757c220414d9e9e8d9afe8c0c54170bfa663fe5068ccd4321e9f533ef9d37155a04ae591b7c20dcaf8b9da73"}, @NL80211_ATTR_PREV_BSSID={0xc5, 0x4f, "1b4d276f2826b594e734f57529ae4a889bdbb883bd4f8910a195d35a0435fa64d43c4b3b6cb819737f4258a0aa86a036721c8536b464bb931f052f76cc9481a60173b98d32c1730256a340668def947d5a7571ea7dc1fc99e87b48025718baa67e1024df1b78df5197141d1c7ba78e7e834cffa6016a0b8aa2eb7fef7430dd8a42f3bc32cc8a0c3d6c6bf701fb2b3abfe10880b9a6cfd1514f8f19570e13215c05f0bda5c6e0a9b848eef12b4d6a153801327c8d252181b8b21bb31ba0838da39a"}]}, 0x13e8}, 0x1, 0x0, 0x0, 0x44082}, 0x4008004) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)={0x3c, r2, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x6, 0x0, 0x1, [@generic="b14e1007"]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x20048880) close_range$auto(r1, r3, 0x3f5) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ptyx2\x00', 0x10002, 0x0) 3m15.06783413s ago: executing program 34 (id=6088): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2302, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000380), 0x401, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40010) sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01032cb57000fbe0df250a00000006000100170000e22bbf3fcf4040e070d0a6c62bafb8b3938f741015ce0156a21b6f4cb954cc6997af8bcebab6f9750e9de4e13ad295a4a40b1f972a575ed0c60d2ad237fefa6f70376eea9faf614cb39a850102438891c057f9f18c9354443f0a2193218d9aedd7c184f02435d6ba18f1a094965b6c8bbcefedd757427b0f12fa88b487dc3caa09810b3d9975fe78a4e6b21c8b1fe8c72d133fc060265d076309551060c8b03837140c0faf0f3677128a290423d1c01c5628538c8b96dbb99fa36cee4be947c9d7e920f9bc9a592f51a3ec86f2856daa583df930493ccc"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r5) r8 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r7) r10 = fcntl$auto_F_GETOWN(r5, 0x9, 0x2) sendmsg$auto_NL80211_CMD_ABORT_SCAN(r8, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x19c, r9, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DATA={0x7, 0x7, "987774"}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [@typed={0x8, 0xff, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}}]}, @NL80211_ATTR_TX_RATES={0x174, 0x5a, 0x0, 0x1, [@generic="b5a406e3056aff8fd00e696f0b7aaeca4e6a28d7cc50a5acaf4ebb41e43f5384d3150e354df3847f67d44cbca3dfae5c9e914552003a9a16994dff3fe18c55938e574a9ceeebde24c63c9859872b7a0c9c79b9a946a2cef17de44de4", @nested={0x112, 0xc0, 0x0, 0x1, [@generic="9bd3bda8879c07049c51c4345bfcda00f2f13cfc7b970b199639e1fd8e284f2042cdb5eb7b0a5f5cda36fc50e5", @typed={0x8, 0xb7, 0x0, 0x0, @pid=r10}, @typed={0x8, 0x14c, 0x0, 0x0, @u32=0xfff}, @generic="2333dda8d62cc2460b9de469f826c38fe7c6060f1eb54ae26bbdf8d706f2752903656149a5b91ef5c1cbfa92526f8bf358b015e1c7d5b7dd4888767c0a35a28ccf87455e56eecc0505c27e36fd97119d48454bf47b86c01f721b8d48d840dd89c19cb657ec0fb8e5753897e97bd7cfd0447ecfa466fcc347cb42da109f35b27cc40a5d8bcd8108fba71106108ab905edd6c5cc", @typed={0x8, 0x5, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x14, 0x35, 0x0, 0x0, @ipv6=@private0}, @generic="ec10863b38c205a771e242090a24959c66be37ecc7a73ebb45c44fa5c72bc84a4da8"]}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000019c0)={0x13e8, r9, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x13}, @NL80211_ATTR_MLO_SUPPORT={0x4}, @NL80211_ATTR_MLD_ADDR={0x47, 0x13a, "151ed19672125137f1027f29abfee69021f512252cb285ab2d814ea607eea6ebf5a1fb1ac7aad77e6fcc2ef93bdd650c5d432ee83d55362f8d53d2fffb5d02400229e0"}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x14db}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x115c, 0x124, 0x0, 0x1, [@typed={0x8, 0x25, 0x0, 0x0, @u32=0x20000000}, @typed={0x8, 0x85, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0x79, 0x8a, 0x0, 0x0, @binary="321fd6739c59ae614013d010177dcfca2c9c1699745d2c297d67a93c162ddfdae42396418d1ae7537ff6716a02c01d337428a93cb8b099880af286ff7e9129a114612180445f28a74434d629f17f360e9cf7862050b407364e8620cd78fe649db120361058a16795842f88ce61fe68c33235e8a3d7"}, @nested={0x1020, 0x3, 0x0, 0x1, [@nested={0x4, 0xa8}, @generic="8740ab9abbf555c855b3d04129a8317135a5424a", @nested={0x4, 0xd2}, @generic="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"]}, @generic="10ae29c89096cc47f70e6b561e25721d2ef91ef3ce89b9ed3b059d355324df37000d0a9d25c5a6234f28eb6537b2a6d2896d178e547848d0de143562ca83b6669e90433e2ef94e5c11be0a388ebd831f790b9bf3c250d8a71e4bda786b258f2c5f927bc689bccbc2059cc2a3", @nested={0x40, 0x5e, 0x0, 0x1, [@nested={0x4, 0xc4}, @typed={0x14, 0xd5, 0x0, 0x0, @ipv6=@empty}, @typed={0x14, 0x73, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x26, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x4, 0x37}, @nested={0x4, 0x49}]}]}, @NL80211_ATTR_PMKR0_NAME={0xac, 0x102, "58ac2f1f0144099386404a5491961ae952fab89b4ab81158a78b0f75f255ac8300a137d3da65b9e90400204db4cadc4acb2c9f08208d6a1a0366be0a33ed7a2f730485a7da50a878351e6b03d4b029721cbada474cc6407a3e5dd7aaee7706d0b0d14111944807c323da4c5f3796113cb50d1abd07d432605b97ef2ceac983a68b6c02f388301fb1aa2ef18234b90ea08fd814fad6dc62fb8e8216b0fc857d8c866f359ec012a7df"}, @NL80211_ATTR_PMKID={0xa5, 0x55, "0bca43b58cfe59a100bf704815777dbecc69c9035b3b9cebcd8be1946a4152a34c2a7cbb6d91e7cda2549a718d226651c420df85cd8906f460a285de7fd7bd84190fd49f8bcb0b5c8ecfc9615dde7c5d89ed8f07f468958b46feb86c7978f9da682ccdb200a7edfc16963300bca9bb011dbc9821ce757c220414d9e9e8d9afe8c0c54170bfa663fe5068ccd4321e9f533ef9d37155a04ae591b7c20dcaf8b9da73"}, @NL80211_ATTR_PREV_BSSID={0xc5, 0x4f, "1b4d276f2826b594e734f57529ae4a889bdbb883bd4f8910a195d35a0435fa64d43c4b3b6cb819737f4258a0aa86a036721c8536b464bb931f052f76cc9481a60173b98d32c1730256a340668def947d5a7571ea7dc1fc99e87b48025718baa67e1024df1b78df5197141d1c7ba78e7e834cffa6016a0b8aa2eb7fef7430dd8a42f3bc32cc8a0c3d6c6bf701fb2b3abfe10880b9a6cfd1514f8f19570e13215c05f0bda5c6e0a9b848eef12b4d6a153801327c8d252181b8b21bb31ba0838da39a"}]}, 0x13e8}, 0x1, 0x0, 0x0, 0x44082}, 0x4008004) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)={0x3c, r2, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x6, 0x0, 0x1, [@generic="b14e1007"]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x20048880) close_range$auto(r1, r3, 0x3f5) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000680)='/dev/ptyx2\x00', 0x10002, 0x0) 3m14.670994507s ago: executing program 5 (id=6161): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) (async) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) fcntl$auto_F_SET_RW_HINT(r1, 0x40c, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(0x3, 0x0, 0xffd8) rseq$auto(0x0, 0x8000, 0x7, 0x6) (async) rseq$auto(0x0, 0x8000, 0x7, 0x6) mincore$auto(0xa8, 0x0, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x125400, 0x0) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x48054) clone3$auto(&(0x7f0000000080)={0x5, 0xa, 0xff, 0xfffffffffffffffc, 0x4, 0x127f, 0x4, 0x100, 0x9, 0x127, 0x7}, 0xf9) (async) r2 = clone3$auto(&(0x7f0000000080)={0x5, 0xa, 0xff, 0xfffffffffffffffc, 0x4, 0x127f, 0x4, 0x100, 0x9, 0x127, 0x7}, 0xf9) fcntl$auto(r0, 0xefffffff, r2) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_pid\x00', 0xa0241, 0x0) write$auto(0x3, 0x0, 0x7a) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) (async) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) 3m11.537819047s ago: executing program 5 (id=6171): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x560, 0x400, 0x9}]}) 3m11.475402543s ago: executing program 5 (id=6173): setrlimit$auto(0x0, &(0x7f0000000000)={0x1, 0xfb3}) (async) setrlimit$auto(0x0, &(0x7f0000000040)={0x3346, 0xffffffffffffffff}) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) bpf$auto(0x8, &(0x7f0000000280)=@bpf_attr_7={@btf_id=0x2, 0x6, 0x40000023}, 0x96) (async) ioctl$auto_BLKRRPART(r0, 0x125f, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) arch_prctl$auto(0x5005, 0x9) (async) mmap$auto(0x0, 0x20008, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sysfs$auto(0x2, 0x1, 0x0) (async) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000004) (async) lstat$auto(0x0, &(0x7f0000000180)={0xe, 0x0, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x5, 0x0, 0x7, 0x4, 0x3}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x404000, 0x0) write$auto_seq_oss_f_ops_seq_oss(r4, &(0x7f0000000080)="f8540ba2b2e8b2979f50dd7aee82a7602fd517d011a211a5a2d9e50115d69dd538d7e75e6772b172a2269c5adf29f4843a79a3b916b4599bc9b008fe21f8f15c8127571e1ec92f41fb0178177fe61160c36f8229fd7fd261212feebb498bf06155c6cb1f0a092f92225ab50d0e08b62c15224d513a2e3cfc8be1570dc48729a3dc2098a3a0c21f883a38a69a0cac960a3c80333751ed44871ae13de3a0f7254748d769916e84ceb32144e5d645ce2ee7949aa643db71ef4bfaa10655ce68da6d262cd0af45092f12e39469f233e3af03da33d49954", 0xd5) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) (async) socket(0x2b, 0x1, 0x1) (async) r5 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) readv$auto(r5, &(0x7f0000000580)={0x0, 0x1}, 0x1) 3m11.145734571s ago: executing program 5 (id=6174): ioctl$auto_BTRFS_IOC_SEND_32(0xffffffffffffffff, 0x40449426, &(0x7f00000002c0)={@inferred, 0x8, 0xfffffffa, 0xfffffffffffffea2, 0x80, 0x3, "853850c3258654d8a1170d273f3a4405132c3673e99b6ef20fbaff2a"}) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, &(0x7f0000000140)={&(0x7f0000000000)="75069306718961289362e447303b5943cb6da353036498c823d4148aeeec98ef1d3c18058651f24eb225ecce17d85d22e4bae47c749fb6da2f5267c2daeb5eaec03b57c3c82ae241c3c6d0ddd2fd220443ef2cd1bde1726c1c5608763de0c70b8b2c44c6b5ff5be2fc1d7ae88f4c29e4e63f543cdc4e3122dab03c9d8934e1947870dddcfc87a9a65d0a36faa2691a4cb3c04e3e4a38cebcf6ce3ffcea8aea93617c8887bf47345489346803c41c0bac9e55d851388657f48debb807c036e0be4858", 0xd7c9}, 0x200, 0x2, 0xffffffff) clone3$auto(0x0, 0x40) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x7fb, 0xa70, 0x10000003, 0x17, 0xfffffffffffffffa, 0x8004) mmap$auto(0x7, 0x40009, 0xb41, 0x9b72, 0xffffffffffffffff, 0x28000) socketpair$auto(0x40000000, 0x202, 0x40, 0x0) setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) mmap$auto(0x0, 0xfff, 0x8000000000df, 0x9b72, 0x400, 0x28000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100)=""/192, 0xc0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) munlock$auto(0xffff, 0x1) sendmsg$auto_TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000009c0)=ANY=[@ANYBLOB="68130000", @ANYBLOB="a6f72cb22c52"], 0x1368}, 0x1, 0x0, 0x0, 0x80000}, 0x20000) mq_getsetattr$auto(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x101, 0x5, 0xfffffffffffffffa}, 0x0) 3m10.915762606s ago: executing program 5 (id=6175): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/008/001\x00', 0xa901, 0x0) socket(0xa, 0x1, 0x100) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mem\x00', 0x402, 0x0) sendfile$auto(0xffffffffffffffff, r1, &(0x7f0000001300)=0xfffffffefffffffb, 0x9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) r2 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r2, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) ioctl$auto(0x3, 0xc0585605, 0x38) ioctl$auto_USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000140)={0x0, 0x5517, 0x0}) syz_clone3(&(0x7f0000000200)={0x202000a80, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100), {0xb}, &(0x7f00000002c0)=""/4096, 0x1000, &(0x7f0000000180)=""/36, &(0x7f00000001c0)=[r3], 0x1}, 0x58) process_madvise$auto_MADV_KEEPONFORK(r4, &(0x7f0000001340)={&(0x7f00000012c0)="f1cfb77a6ce11c8586e1b740462685a3a02267238ed78d0ee3b9db433fcee3a99141a02d8eb3b9e6c8057a4fbde53e3133cff9058079fdc189c64893cc2e64299e4d22b1", 0x1}, 0x0, 0x13, 0x2) 3m10.664665213s ago: executing program 5 (id=6177): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) timer_create$auto(0x9, 0x0, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x400000000f, 0x10007}, {0x9}}, 0x0) timer_gettime$auto(0x0, 0x0) r0 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x29, 0x20, 0x0, 0x8002) mprotect$auto(0x0, 0x806121, 0x6) mmap$auto(0x0, 0xe97f, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) msgctl$auto_IPC_RMID(0x10, 0x0, &(0x7f0000000440)={{0x7, 0x0, 0x0, 0x10004, 0x3, 0x3, 0x2}, 0x0, 0x0, 0x3ff, 0xfffffffffffffffc, 0x2b, 0x200, 0x3, 0x47, 0x6, 0x7, @inferred=0xffffffffffffffff}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1d, 0x2, 0x7) sendfile$auto(r1, r1, &(0x7f0000000100)=0x81, 0xfffffffffffffffb) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4}, 0x6a) sendto$auto(r2, 0x0, 0x6fffff5, 0xfffbfff8, &(0x7f0000000440)=@can={0x1d, r5}, 0x36) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r6, 0x0, 0x20) r7 = socket(0x2, 0x1, 0x106) bind$auto(r7, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r7) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r8, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x24, r9, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x5}, @NL80211_ATTR_HE_BSS_COLOR={0x8, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x140, r9, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xdc, 0xbe, "295a1d02cbdbf5304902d0c204661eaf9d72467a88fad9e03465123d7dfffe61e6de2016fb4f1503d30b16e4509f400e8c1783c037daa5ad0b416f6adab65b59c78a848a98b6298c69eb521c0c0b19cdb1afde24b3679c259e754c76cad033242deadcb083727ae50624f6ae2c3e0736dc02a25f6960bcc482a4c592163d7f30d5fea42cebcd84c742722e4a7a08cb119d88ba6bdb10fb1e292658f4e892789a38123adc3bceddd718d55783042bfd65c68aaef92eaeddcf5ec9611b4333b45f152721b5b462bbc4362c0601e3caeae24db4aec13a0a33a0"}, @NL80211_ATTR_PMK={0x3f, 0xfe, "71f4fcf706c5eaba6fe79622874d28cef727c03b9b1575c3982c4f85f1ac5abe4a2c19a0691279f2d1b3baf1344116aab93d865262e2b51a4153fe"}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x3}]}, 0x140}, 0x1, 0x0, 0x0, 0x48004}, 0x10) writev$auto(r1, &(0x7f0000000200)={0x0, 0x3}, 0x3) ioctl$auto_CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) keyctl$auto(0x16, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) 2m55.58049097s ago: executing program 35 (id=6177): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) timer_create$auto(0x9, 0x0, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x400000000f, 0x10007}, {0x9}}, 0x0) timer_gettime$auto(0x0, 0x0) r0 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x29, 0x20, 0x0, 0x8002) mprotect$auto(0x0, 0x806121, 0x6) mmap$auto(0x0, 0xe97f, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) msgctl$auto_IPC_RMID(0x10, 0x0, &(0x7f0000000440)={{0x7, 0x0, 0x0, 0x10004, 0x3, 0x3, 0x2}, 0x0, 0x0, 0x3ff, 0xfffffffffffffffc, 0x2b, 0x200, 0x3, 0x47, 0x6, 0x7, @inferred=0xffffffffffffffff}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1d, 0x2, 0x7) sendfile$auto(r1, r1, &(0x7f0000000100)=0x81, 0xfffffffffffffffb) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4}, 0x6a) sendto$auto(r2, 0x0, 0x6fffff5, 0xfffbfff8, &(0x7f0000000440)=@can={0x1d, r5}, 0x36) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r6, 0x0, 0x20) r7 = socket(0x2, 0x1, 0x106) bind$auto(r7, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r7) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r8, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x24, r9, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x5}, @NL80211_ATTR_HE_BSS_COLOR={0x8, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x140, r9, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xdc, 0xbe, "295a1d02cbdbf5304902d0c204661eaf9d72467a88fad9e03465123d7dfffe61e6de2016fb4f1503d30b16e4509f400e8c1783c037daa5ad0b416f6adab65b59c78a848a98b6298c69eb521c0c0b19cdb1afde24b3679c259e754c76cad033242deadcb083727ae50624f6ae2c3e0736dc02a25f6960bcc482a4c592163d7f30d5fea42cebcd84c742722e4a7a08cb119d88ba6bdb10fb1e292658f4e892789a38123adc3bceddd718d55783042bfd65c68aaef92eaeddcf5ec9611b4333b45f152721b5b462bbc4362c0601e3caeae24db4aec13a0a33a0"}, @NL80211_ATTR_PMK={0x3f, 0xfe, "71f4fcf706c5eaba6fe79622874d28cef727c03b9b1575c3982c4f85f1ac5abe4a2c19a0691279f2d1b3baf1344116aab93d865262e2b51a4153fe"}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x3}]}, 0x140}, 0x1, 0x0, 0x0, 0x48004}, 0x10) writev$auto(r1, &(0x7f0000000200)={0x0, 0x3}, 0x3) ioctl$auto_CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) keyctl$auto(0x16, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) 2m31.133781614s ago: executing program 2 (id=6345): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7) r0 = socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) sendfile$auto(r2, r1, 0x0, 0x7) mmap$auto(0x0, 0x48de6aa000, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="2586f2bd7000fedbdf2504000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c9d0}, 0x4080) r3 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x440c0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000300)={{&(0x7f0000000640)="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", 0xffffffff, 0x0, 0x21, 0x0, 0x1, 0x19}, 0x8}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), r0) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f35", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01032dbd7000ffdbdf2ca900fffcdeae7729308a7e09ea3775d7050931fda4b39a63ea5df83cef29f26340de073d1cbbb67621ad3ae7005e928f5b8077824b9b517db548e9dcfb507b38f8410d4b81b5f8f550cd6f4c0033c1a12cb110770aef7c53b542bf27f77a7af194eb13cc883edd140bb190895a26d0de1c15f9893615c6c75f0970b3b5ef5be560a8a3f2bed8bf664fb8beeaa66ffc5dd6e3985fd579b6f723158d14b1e44684c0defbba040ba4309b7890c33c96f0c03308f975299da2872aeae21506bf31"], 0x14}}, 0x400c0) r4 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) pkey_free$auto(0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f00000001c0)) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 2m29.65044619s ago: executing program 2 (id=6349): mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x3c41, 0x0) r0 = getpid() r1 = gettid() r2 = open(0x0, 0x80400, 0xb5d1af1605322dd2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20006, 0x4, 0xeb1, 0xffffffffffffffff, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) read$auto_lowpan_enable_fops_(r2, &(0x7f00000002c0)=""/120, 0x78) rt_tgsigqueueinfo$auto(r0, r1, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffe, @_sigsys={0x0, 0x2, 0xffffffff}}}) 2m28.805869493s ago: executing program 2 (id=6351): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0xab5, 0x3) madvise$auto(0x8dffffff, 0xf663, 0x15) 2m28.506809815s ago: executing program 2 (id=6353): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ustat$auto(0x801, 0x0) keyctl$auto(0x1d, 0xfffffffffffffffd, 0x2, 0x628, 0xfffffffffffffffd) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x64000}, 0x18800) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001280)={&(0x7f0000000080)={0x238, r1, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_MAC={0xb1, 0x6, "904d1d1e5449f6898ad516b69ddc71a87757f2057c1559ab223676aa2289ef04003975178f52086209fff83eeb752bbc1a7305a9e98c337dd0af92583bb5f2dd2fa286946e3991a6003be09a68f912bdaa79062b5a0b0dfb93082f62321bfe274b29e41e0b7a074f7afa6af7d499d9071894b68f725f0d3a8fa4f22b1b6a66ed5db76a04953b9ec71e88bede7788adc29af871461fbba39590c2809d3c8d2952fb920dc104ba420e095c8b3071"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_EMA_RNR_ELEMS={0x166, 0x145, 0x0, 0x1, [@typed={0xc, 0x2e, 0x0, 0x0, @u64=0xdb8}, @typed={0x5a, 0x7a, 0x0, 0x0, @binary="427d3b6019823addcd329ee77b0ea58892ecbf9344ab82af77d8355a4e80ef9cf31f7f606ab55ac4c2a53e3e3f316c75c8c54756f4652901089b337dda0c23cf7e3f7b2b2bf34fce3d5f9549be098d112b4564c9c163"}, @generic="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"]}]}, 0x238}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) 2m28.13181837s ago: executing program 2 (id=6355): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ram3\x00', 0x8001, 0x0) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) sendfile$auto(r0, r1, 0x0, 0x5a0) (async) close_range$auto(0x2, r0, 0x0) personality$auto(0xfffff032) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (async) mount$auto(0x0, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x3378, 0x0) (async) ppoll$auto(&(0x7f0000001ac0)={r1, 0x4, 0x9}, 0x9, &(0x7f0000001b00)={0xf2, 0x9}, &(0x7f0000001b40)={0x3}, 0x8) 2m27.505557921s ago: executing program 2 (id=6357): socket(0x2, 0x3, 0xa) (async) mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) socket(0x11, 0x80003, 0x300) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/swradio14\x00', 0x80, 0x0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000000)=""/194, 0x70800) (async, rerun: 32) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async, rerun: 32) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x88442, 0x0) (async) read$auto(0x3, 0x0, 0x30) modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10) r1 = gettid() rt_sigqueueinfo$auto(r1, 0x10, &(0x7f0000000000)={@siginfo_0_0={0x7, 0x7, 0xfffffffa, @_rt={r1, 0x0, @sival_ptr=0x0}}}) clone3$auto(0x0, 0x9) (async) clone$auto(0x1000, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x5) (async) clone$auto(0x3, 0x0, &(0x7f0000000080)=0x100, 0x0, 0x0) 2m14.421193421s ago: executing program 7 (id=6413): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x800005411, 0x38) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') r3 = ioctl$NS_GET_PARENT(r2, 0xb701, 0x0) sendfile$auto(r1, r1, 0x0, 0x8000001) r4 = socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) listen$auto(r1, 0x6ba) mprotect$auto(0x2000, 0x8, 0x5) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) recvmmsg$auto(r4, 0x0, 0x10003, 0x4000006, 0x0) readv$auto(r0, &(0x7f00000000c0)={&(0x7f0000000000)="4fbcce280f6601820baaa427a8d8e40c926493548c936ac9131a73", 0x4}, 0x5) ioctl$auto_VHOST_SET_LOG_FD2(0xffffffffffffffff, 0x4004af07, &(0x7f0000000140)=r3) writev$auto(r5, &(0x7f00000001c0)={0x0, 0x1007111}, 0x4) 2m13.52094231s ago: executing program 7 (id=6417): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) r0 = prctl$auto(0x34, 0x1, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x400, 0x408) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getdents$auto(r1, 0x0, 0x400018) ioperm$auto(0x3428, 0x80, 0x4) socket(0xa, 0x6, 0x0) openat$auto_fops_atomic_t_(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) mknod$auto(0x0, 0x1081, 0x3) r2 = creat$auto(0x0, 0x1000) creat$auto(0x0, 0x8d00) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYBLOB='j\x00Q'], 0x1ac}, 0x1, 0x0, 0x0, 0x4048800}, 0x2004c090) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x500000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="100029bd7000ffdbdf259700000008000a010400000006001a012a00000008003700000000000600ab00ffff000004002d010400d1000400ec00"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xb4, r6, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x10}, @NL80211_ATTR_REG_ALPHA2={0x97, 0x21, "2929090a91d3c1cab53d41631702d1e95e302f1ceef0144dd65d9c2f4345e1e36670e3bc03a55607adc32823ce296d41ec4739c627a27f981463dc7e6d1b650ba74b341406198d6d73d8d7734332681f56f79bf71da70d6ab02e2e0664f3df4af4f50387bd31c29d39f0b1cc696b8427ac1f1116e6b15a9721d32aff6a0cc9fefc02016404094b1f18e3ab676e7e1a2c39c706"}]}, 0xb4}}, 0x10) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) setsockopt$auto(0x400000000000003, 0x29, 0x2a, 0xffffffffffffffff, 0x3) r7 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x401, 0x0) write$auto_event_inject_fops_trace(r7, &(0x7f0000000340)="86f18d0adbd4747360bcf61393858cf6781899c18fa7dd0156cccb414c807b77c5f11b6567e8c14f7045fef2342e2c814c2029be594b5fffc7dfc0ad510a2e6153497f3775ab7a613423300120f76913aba63f4baf62caaffcb07c2ee070ba5f410e07931666c4995d664ffe910ee79152ba5fd52b177c86ff7ba17a3244b5e06232c272fa7790dced03ee6826ea040440f08616c550a2c67f40c21bdb4666d827d7237a0732eb62b0ab42d2e2638dbe907554a74232c6586fdf17cdcee5", 0xbe) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) futex_waitv$auto(0x0, 0x1, 0x0, 0x0, 0x7) 2m13.247802164s ago: executing program 7 (id=6419): r0 = socket(0xa, 0x2, 0x0) setsockopt$auto(r0, 0x29, 0x30, 0x0, 0x56b) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SNDCTL_TMR_START(r1, 0x5402, &(0x7f0000000080)="0d79619bdfeee45ab5af224b8ad64a69034b646cfce4ca06") ioctl$auto_SNDCTL_DSP_SETDUPLEX(r1, 0x5016, &(0x7f0000000000)="68516c0ee1f92036d33d240afd2e301ad6ddc5349784210f727b9c5b6a220f59d030683c32086e3d796be858783274848a54fdf523b55ea085f9decfcd1403e5f8767a8943f150d9aad7b25f5cdfca3530fb6fa654610c9be542062cea8286eb63636eb1daecea50c4e35cc9229944fecc127464305876d3aa37d0a1047b") 2m13.16199682s ago: executing program 7 (id=6420): mremap$auto(0x110c230000, 0x4, 0x4, 0x7, 0x100000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) (async) ioctl$auto(0x3, 0x5606, 0x38) (async) sysfs$auto(0x2, 0x4, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) (async) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = socket(0x2, 0x1, 0x106) (rerun: 64) setsockopt$auto(r3, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) (async) bind$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x3, @multicast1}, 0x6a) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async, rerun: 32) ioctl$auto(r0, 0x4b64, r2) 2m12.793767148s ago: executing program 7 (id=6423): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0x0, 0xb, 0xffb, 0x8000000008011, 0x3, 0x10000000000) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/mountinfo\x00', 0x40001, 0x0) r0 = epoll_create$auto(0x20003f) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/ip_mr_cache\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000140)=""/41, 0x29) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r3, 0x3b8e, r2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/mode\x00', 0x121102, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x9488, 0x3, 0x15f4da09, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x80881, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) gettimeofday$auto(&(0x7f0000000080)={0x0, 0x100}, 0x0) 2m12.441118914s ago: executing program 36 (id=6357): socket(0x2, 0x3, 0xa) (async) mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) socket(0x11, 0x80003, 0x300) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/swradio14\x00', 0x80, 0x0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000000)=""/194, 0x70800) (async, rerun: 32) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async, rerun: 32) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x88442, 0x0) (async) read$auto(0x3, 0x0, 0x30) modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10) r1 = gettid() rt_sigqueueinfo$auto(r1, 0x10, &(0x7f0000000000)={@siginfo_0_0={0x7, 0x7, 0xfffffffa, @_rt={r1, 0x0, @sival_ptr=0x0}}}) clone3$auto(0x0, 0x9) (async) clone$auto(0x1000, 0x9, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x5) (async) clone$auto(0x3, 0x0, &(0x7f0000000080)=0x100, 0x0, 0x0) 2m12.061287734s ago: executing program 7 (id=6429): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948f, 0x803, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f0000004440)) ioctl$auto_VHOST_SET_LOG_FD2(0xffffffffffffffff, 0x4004af07, &(0x7f00000001c0)=0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r3, 0x8000) r4 = open_by_handle_at$auto(r1, &(0x7f00000002c0)={0x1a, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b"}, 0x7d) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x63af, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000008000000a, 0x40000402, 0x6, 0x7, 0xffffffff80000004, 0x8000000002009, 0x6, 0x2400001000ff}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r5 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setsockopt$auto(r4, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) geteuid() sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040840}, 0x200000c0) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001b00)=ANY=[@ANYBLOB="20010000", @ANYRES16=r6, @ANYBLOB="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"], 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0x140) 1m56.785309889s ago: executing program 37 (id=6429): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948f, 0x803, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f0000004440)) ioctl$auto_VHOST_SET_LOG_FD2(0xffffffffffffffff, 0x4004af07, &(0x7f00000001c0)=0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r3, 0x8000) r4 = open_by_handle_at$auto(r1, &(0x7f00000002c0)={0x1a, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b"}, 0x7d) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x63af, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000008000000a, 0x40000402, 0x6, 0x7, 0xffffffff80000004, 0x8000000002009, 0x6, 0x2400001000ff}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r5 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setsockopt$auto(r4, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) geteuid() sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040840}, 0x200000c0) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001b00)=ANY=[@ANYBLOB="20010000", @ANYRES16=r6, @ANYBLOB="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"], 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0x140) 1m44.206754206s ago: executing program 9 (id=6559): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r2) r5 = getpgid(0x0) kcmp$auto(r5, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)={0x1ec, r4, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_MLO_TTLM_DLINK={0x46, 0x148, "dc266fcebd92e437b03d6f7bf9019872a79c693a679ed22accb537c0e7b86a6641f38fba40c4623d6f5d31e08fa592572d8f8631d0b241452f8273acea88c518c6d7"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x586}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x9b, 0xac, "d5fb21b57f2aaef65f36010e3597d5a0d707fcc310c0f13f1ebf22f33ea9b602785d17a91c243cad82c39a98c0b2c14d849b4d627d5b63d863515931d690f629ad36f02ec82d5b866f3516187c3c764608ab53564ab8391b5b6ef78588cd1757d4795d34a59aa5569eb281557d56c9bee8d12c5c78e163ae057bf565ac20223d3123715a0c847638ac41ab7833bd8ce06fef549ad461d6"}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x6}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc8, 0x6e, 0x0, 0x1, [@nested={0x4f, 0x13, 0x0, 0x1, [@typed={0x4, 0x6a}, @nested={0x4, 0x6b}, @typed={0x4, 0x144}, @generic="c25faa73bf97721b2e7fe95143b1df4243d7a1b6348b90f3b218e0a0770aa4e1b489e623f5ff856b54ee388a6b8dadd4eb04a8", @typed={0xc, 0x1f, 0x0, 0x0, @u64=0x7}]}, @typed={0x8, 0xb7, 0x0, 0x0, @str='nbw\x00'}, @nested={0xc, 0x82, 0x0, 0x1, [@typed={0x8, 0xba, 0x0, 0x0, @str='nbd\x00'}]}, @typed={0x8, 0x76, 0x0, 0x0, @pid}, @generic="e7fed39ede5a371933e7fd1b87624b55242ce4d8eab04a041132fca87ae98fd6f3816f22b7375da30264a7fac13ac1b2f59c9532f047221377b5a8dd820d71d88349fcb2f489f09ba9b5b50d2ab37fe61d64ed2877e38d6d"]}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x7}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x1}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x48080}, 0x20000010) syz_genetlink_get_family_id$auto_nlbl_mgmt(0x0, r2) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x44, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x1020}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x700}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto_HDIO_GETGEO(r6, 0x301, &(0x7f00000001c0)) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r1, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x6}, 0x803}, 0x10a, 0x6, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r7 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) ioctl$auto_PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 1m43.127450332s ago: executing program 9 (id=6564): r0 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim2/psample/enable\x00', 0x101882, 0x0) write$auto_nsim_psample_enable_fops_psample(r0, &(0x7f00000005c0)="59c91998", 0x4) 1m42.975052128s ago: executing program 9 (id=6565): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r0) sendmsg$auto_NET_SHAPER_CMD_GROUP(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000600)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x60000000, 0x44000}, 0x14) 1m42.777998868s ago: executing program 9 (id=6567): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x14, r3, 0x1, 0x70bd31, 0x25dfdbfd}, 0x14}}, 0x24048084) 1m42.580604594s ago: executing program 9 (id=6569): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) pidfd_open$auto(0x1, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) clone$auto(0x12051c, 0x40000006, 0xfffffffffffffffd, 0xffffffffffffffff, 0x80000001) pivot_root$auto(&(0x7f0000000100)='..\x00', &(0x7f0000000340)='.\x00z\x86E\xb8\xf1\xcbx\xf6cu<\x0e\xd8\xa5\xcd~\xaf\x80\xd3\xf4\xe5\x02\xf9q p\xe2\x8b\xc0\xedf\xba\x16*\x8ar\xa0\'$A\xe5\xc5\x89\xcb\xd5\xac\x98,\xd4Pycv\xdd\xa1\x84\xfb\xe9\r\x82\x15P*IM\xf7.\xf3v\x85Q\xbc:\xef\xd5\x1a\x9e\xbck\x1d\x114^\x1b\x02\xa1\xb0(\xa2\xdb\xbc\x1a\t\x94\x14\xbb\xc8\xfa\x18I\xff\x7f\xab\xf0\x8f\xd3Gr\xfb5\xf1,\x11\x052u&\xde\x9aF\n\xf0\x06\xfc\x1b\x17\x82%\x14\xb3\x19\x13\f\xbe_\xfdi\x17\xfcv\x82*\xbf<\xfa5\xfd\x8b\x1d\x99\a`\xde\xf4\x8a,\tP) \xf4\xdc\r\x17x\xc6\x18Y\xeaaUY\xeb\xd2\x81\xbare\x00\x8e\xfdA\x93\xb9\xac\xf1\x0eq\x85\xd9\x90\x8a%K\x95\x8fm\v\x98y\x9bc-\xa7;\x117\x19)\x04\xb4\nJ\x0e\x1b\x97e\xee\xdb\xc3\xca\xfe\xa7y\x12\xff\xce') fsopen$auto(0x0, 0x1) socket(0x10, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='-\x00', @ANYBLOB=']'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) shutdown$auto(r0, 0x8) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/thread-self/net/rpc/auth.unix.gid/content\x00', 0xaa102, 0x0) read$auto(r1, 0x0, 0x35cb) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x8, 0x11, 0xe13, 0x81, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0x8627, 0x9, 0x20000800001, 0x3, 0x6, 0x7, 0x6, 0x7, 0x0, 0xffffffee, 0x2a17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe]}, 0x9, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x45, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4068890}, 0x800) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 1m42.388960622s ago: executing program 9 (id=6570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_psample(&(0x7f0000007a40), 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007ac0)={&(0x7f0000007a80)={0x14, r1, 0x311, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 1m33.93968832s ago: executing program 1 (id=6608): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) gettid() setregid$auto(0xffffffffffffffff, 0x0) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) timer_settime$auto(0x0, 0x801, &(0x7f0000000000)={{0xa6, 0x7}, {0x0, 0x3}}, 0x0) timer_delete$auto(0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) close_range$auto(0x2, 0x8, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r1, 0x0, 0x7, 0x4cbd5d) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000300)={0x401, &(0x7f00000002c0)={0x8ed, 0x0, 0x80, @inferred=r1}}) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') mknod$auto(&(0x7f0000000080)='./file1\x00', 0xb, 0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, r3, 0x13, 0x70bd26, 0xffffffff, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x440c0}, 0x20040894) r6 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r8, r7, 0x4, 0x1, r6, @relative_id=0x13, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) 1m33.676341616s ago: executing program 1 (id=6609): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r0, &(0x7f0000000000)="632d1bfe595046ab5c40bd7563307acb6d16baef6176e669a216aae183cccafdd80500ffffffff060000feffffffffffffff000000000000", 0x38) 1m33.330334445s ago: executing program 1 (id=6610): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) r1 = waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000180)={@_si_pad}, 0xedd8, &(0x7f00000002c0)={{0x3, 0x1e}, {0x80000001, 0x1a2e5150}, 0x5, 0x6, 0x1, 0x6, 0x6, 0x4, 0x10000, 0xc, 0x2, 0x2, 0x6, 0x7, 0x10001, 0x8001}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000380)={{@inferred=r1, 0xf0ee, 0x20009, 0x7fff, "790eaa833e6fc65b6b3cf7050200000000000000dafc1e64010043eeb0b0530300000000000e00", @raw=0x1}, 0x4, 0x2, 0x3, @inferred=r1, @integer={0x21, 0x7ff, 0x2}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df87075ec551194bb0bd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a9942cbcc1"}) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1ff, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dri/renderD128\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x178ab487) pread64$auto(0xffffffffffffffff, 0x0, 0x101fb, 0x8800000005) mmap$auto(0x0, 0x2, 0x16, 0x40eb2, 0x401, 0x300000000000) r3 = ioctl$auto_TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, &(0x7f0000001000)=0x4) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000000)="4c91f2c388274610e12c861bb2bfd9800e9b874b853fe2e685482c8d73f4f3954757095a41e68c0b5d0e2ff61c07dca6944cb534a7e0964f482648d8e5a6e82f24d03fa0bb465f0bbad37d238c4a68079269aa73b6120723c649476f509b5b", 0x5f) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001080), 0xffffffffffffffff) mkdir$auto(&(0x7f00000002c0)='./file0\x00', 0x3) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) rename$auto(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004040}, 0x40) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe4180, 0x0) sysfs$auto(0x2, 0x1f, 0x0) r5 = socket(0x2, 0x801, 0x106) r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYBLOB="01002dbd7000000800020000000000fa0000dfffffffffffffff00", @ANYRES32=0x0, @ANYBLOB="0d0001002f6465762f6b766d00000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x8010) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r5, 0x11c, 0x2, 0x0, 0x0) unshare$auto(0x40000080) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x9, &(0x7f0000000000)) ioctl$auto(0x3, 0xae60, 0x10000000000402) 1m32.701059225s ago: executing program 1 (id=6617): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) (async) ioctl$auto(0xffffffffffffffff, 0x8912, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 64) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) madvise$auto(0x0, 0x2003f0, 0x15) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x242000, 0x0) write$auto_snd_pcm_oss_f_reg_pcm_oss(r1, &(0x7f0000000200)="5ba342c1c90db31c8cbb724b5204af6d2418a7b7b64019701b31a3cbda5aefd33b60d165fac3a62814d5860dbeef10b81500e9fa9d9981e790ab8a9cd9c4304a9e42e859151f07606660930abf2ea4a29d64b3286e0c61d3c432d398cb75c28115a9882f68ef1cf3e6a7e30371a7f5", 0x6f) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) r2 = getpid() openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/security/tomoyo/domain_policy\x00', 0xc0081, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) (async, rerun: 64) read$auto(0xffffffffffffffff, 0x0, 0x20000000) (async, rerun: 64) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) (async) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) prctl$auto(0x3e, 0x10, r2, 0xfffffffffffffffd, 0x6) (async, rerun: 64) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (rerun: 64) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) ioctl$auto(0x1, 0x541b, 0x8) ioctl$auto_BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, 0x0) 1m31.457463112s ago: executing program 1 (id=6622): read$auto_cgwb_debug_stats_fops_(0xffffffffffffffff, &(0x7f00000000c0)=""/154, 0x9a) socket(0x2, 0x1, 0x0) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002480), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r0, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000003680)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="2f172abd70000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x8080) r2 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x101200, 0x0) read$auto_force_wakeup_fops_hci_vhci(r2, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x6) clone$auto(0x81000005, 0x6, 0xfffffffffffffffd, 0xffffffffffffffff, 0x80000001) 1m30.728590329s ago: executing program 1 (id=6626): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1008}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xbb9781547bbcad7f}, 0x4004800) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.6/usb21/21-0:1.0/usb21-port4/state\x00', 0x13b742, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x7ffc) close_range$auto(0x0, 0x5, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) r3 = epoll_create$auto(0x3e) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000640)='/proc/execdomains\x00', 0x0, 0x0) prctl$auto(0x4a, 0x108, 0x0, 0x0, 0x2) pread64$auto(r4, 0x0, 0x100000001, 0x400000000000100) sendfile$auto(r2, r2, 0x0, 0x200) 1m27.363798684s ago: executing program 38 (id=6570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_psample(&(0x7f0000007a40), 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007ac0)={&(0x7f0000007a80)={0x14, r1, 0x311, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 1m15.516488489s ago: executing program 39 (id=6626): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1008}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xbb9781547bbcad7f}, 0x4004800) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.6/usb21/21-0:1.0/usb21-port4/state\x00', 0x13b742, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x7ffc) close_range$auto(0x0, 0x5, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) r3 = epoll_create$auto(0x3e) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000640)='/proc/execdomains\x00', 0x0, 0x0) prctl$auto(0x4a, 0x108, 0x0, 0x0, 0x2) pread64$auto(r4, 0x0, 0x100000001, 0x400000000000100) sendfile$auto(r2, r2, 0x0, 0x200) 28.400670392s ago: executing program 4 (id=6872): openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/manager\x00', 0x8200, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000140), r0) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyt7\x00', 0x101100, 0x0) read$auto(0x3, 0x0, 0x7) r1 = eventfd$auto(0x0) write$auto_evdev_fops_evdev(r1, &(0x7f0000000040), 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x1, 0x800000ffff, 0x9b72, 0x7, 0x200000000028000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(0x0, 0x6) shmctl$auto_SHM_UNLOCK(0x200, 0xc, 0x0) r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r4, 0x0, 0x0, 0x0, 0x1000) rename$auto(0x0, 0x0) r5 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x10042, 0x0) ppoll$auto(&(0x7f0000000040)={r5, 0xfffc, 0x8}, 0x4, 0x0, 0x0, 0x8) rename$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='./file1\x00') setsockopt$auto(0xffffffffffffffff, 0x104000000000010e, 0xa, 0x0, 0x400) ioctl$auto_BTRFS_IOC_DEVICES_READY(0xffffffffffffffff, 0x90009427, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) 27.929336291s ago: executing program 8 (id=6878): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000001b40)='/sys/kernel/debug/dri/vkms/Virtual-1/force\x00', 0x149c40, 0x0) readv$auto(0x3, &(0x7f0000003080)={&(0x7f0000003040), 0x4}, 0x9) socket(0xa, 0x3, 0xff) r0 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x5, 0xa, 0x1000009, 0x5f, 0x4, 0x3}, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fddbdf254f0000001c18d27fb90055009da6b8c2443745ef10de92b9528279a9a0000000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20048014) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r1, 0x0, 0x40000) r3 = timerfd_create$auto(0x6, 0x4) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r0) sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, r4, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20004040) sendmsg$auto_NL80211_CMD_DEL_PMK(r1, 0x0, 0xa040) socket(0xa, 0x3, 0x100) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) socket(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset$auto(&(0x7f0000000040)={0x80, 0x6000, 0xff}, 0x8000000000000001, 0x80) r5 = socket(0xa, 0x3, 0x2f) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027b4839f3015398d3b61", @ANYRES32, @ANYRES32=r5, @ANYRES64], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r6 = socket(0x2, 0x80000, 0x1) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 26.652575535s ago: executing program 8 (id=6881): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x4000000, 0x0) set_mempolicy$auto(0x5, &(0x7f0000000000)=0x200, 0x3) (async) mmap$auto(0x100000000000b71f, 0x4, 0x4, 0xfffffffffffffffc, 0xffffffffffffffff, 0x6) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) socket(0x2, 0x801, 0x100) (async) preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0xbbf, 0x69bf) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cec23\x00', 0x98903, 0x0) (async) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @empty}, 0x51) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000300)='/d\x00'/12, 0x100000a3d9) sysfs$auto(0x2, 0x10000000000000e, 0x0) (async) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x218141, 0x0) connect$auto(r0, &(0x7f0000000000)=@generic={0xa, "00001600"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x848000000015, 0x805, 0x0) (async) socket(0xa, 0x3, 0x100) socketpair$auto(0xb, 0xd, 0xfffffffd, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x88000, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) mmap$auto(0x78d50216, 0x3, 0xfffffffffffffffe, 0x800000000801f, 0x3, 0x7f) (async) ioctl$auto_TCFLSH2(r2, 0x8924, 0x0) 25.946400949s ago: executing program 4 (id=6882): socket(0xa, 0x3, 0x3b) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r0, 0x15, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) sendfile$auto(r1, 0xffffffffffffffff, 0x0, 0x1) getsockopt$auto(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r2 = openat$auto_hwflags_ops_debugfs(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, r2, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r3, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) (fail_nth: 89) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) 24.331730156s ago: executing program 4 (id=6892): r0 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, r0, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/virtual/block/ram4/queue/io_poll\x00', 0x103300, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001680)=""/59, 0x3b) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bdi/43:192/wb_stats\x00', 0x40, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0) prctl$auto(0x43, 0x80000000000000, 0x0, 0x2, 0x0) socket(0x2, 0x2, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/pcmC1D0p\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4c0c6}, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) mmap$auto(0x40000000000000, 0x7fffffffffffffff, 0x400, 0xeb1, 0xffffffffffffffff, 0x64f) close_range$auto(0x2, 0x8, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r3, &(0x7f0000000040)=""/4096, 0xfffffe82) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x1, 0x19) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/devices\x00', 0x600, 0x0) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sg0\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_BLKSECTGET2(r4, 0x1267, 0x0) 24.193811948s ago: executing program 8 (id=6894): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r0, &(0x7f0000000000)="632d1bfe595046ab5c40bd7563307acb6d16baef6176e669a216aae183cccafdd80500ffffffff0600000000fe00"/56, 0x38) 24.010384039s ago: executing program 8 (id=6895): ioctl$auto_BTRFS_IOC_SEND_32(0xffffffffffffffff, 0x40449426, &(0x7f00000002c0)={@inferred, 0x8, 0xfffffffa, 0xfffffffffffffea2, 0x80, 0x3, "853850c3258654d8a1170d273f3a4405132c3673e99b6ef20fbaff2a"}) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, 0x0, 0x200, 0x2, 0xffffffff) clone3$auto(0x0, 0x40) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x7, 0x40009, 0xb41, 0x9b72, 0xffffffffffffffff, 0x28000) socketpair$auto(0x40000000, 0x202, 0x40, 0x0) setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) mmap$auto(0x0, 0xfff, 0x8000000000df, 0x9b72, 0x400, 0x28000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100)=""/192, 0xc0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/ip_forward\x00', 0x2002, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) munlock$auto(0xffff, 0x1) sendmsg$auto_TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000009c0)=ANY=[@ANYBLOB="68130000", @ANYBLOB="a6f72cb22c52"], 0x1368}, 0x1, 0x0, 0x0, 0x80000}, 0x20000) mq_getsetattr$auto(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x101, 0x5, 0xfffffffffffffffa}, 0x0) 21.845808793s ago: executing program 4 (id=6898): socket(0x10, 0x2, 0x4) unshare$auto(0x40000080) socket(0xa, 0x1, 0x84) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x840, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0xa2040, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd, 0x5, 0x948b, 0x445f, 0x15f4da0a, 0x1, 0x81, 0x300000000000000, 0x7fffffff, 0x7, 0x0, 0x9, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_fops_u32_ro_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim6/ports/3/bpf_offloaded_id\x00', 0x10000, 0x0) setuid$auto(0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x6) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000180)={0x15, 0x3, 0x1, @raw=0xaa}}) mmap$auto(0x3, 0xffff, 0x100000001, 0x7fffffffffffffff, r0, 0x4) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2, 0x0) geteuid() mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x400000000008000) 20.507274657s ago: executing program 8 (id=6902): r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mem\x00', 0x402, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x401, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100000000000000000008000200", @ANYRES32, @ANYBLOB="060006ff05000000080003"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000440)="671f264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532", 0x1a) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, 0x0, 0x24004000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x84) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x0, 0x4, 0xffb, 0x8000000008012, 0x3, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0x5) sysfs$auto(0x2, 0x2, 0x0) fsmount$auto(0x4, 0x0, 0x200003) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/nbd3/queue/iosched/front_merges\x00', 0x2041, 0x0) write$auto(r2, &(0x7f0000000140)='7\x00\xb1\x9a\xc0\xf9\xc0e\xd2T\xbe\xb6I\x9d\xd9\x18\xf5\x91\xbfq\xfe\xf2\x9a\x02\x9fC0xb\xccW(\xc1n+\n|5\xa5\x9c=^\xf1\x11H\x1c\xf73\x16\xd2\a\xfaw\xcc\xf1\xff7\xab\xa1\xeaF\x04\x17\x99\xd3\xd1\x83\xccG^\xbbdC\x8a\n\x88\xbcW@+\xafD\xd1\x8a\xc13W\xf66\x86\xe5\xee\xa7\x1d\x0f\x90\x00\xcf\xdb\xf5\xbf\xd4\xc8\x84\xb3\xeeb\xb0\xc7kN\x80\x93\xfd\x89\xe1\xc9tp\xd4jm\x7f\xf0a\xc3\x02\x14\xcf\xcf\\e!\a\x82\t,\xa7\x00\xbd&\xcax\xf8P\xc1\x8f\x87\x83\x0f\x93z', 0x1) sendfile$auto(0xffffffffffffffff, r0, &(0x7f0000001300)=0xfffffffefffffffb, 0x9) 20.111115996s ago: executing program 8 (id=6903): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_psample(&(0x7f0000007a40), 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r0, 0x0, 0x0) mknod$auto(&(0x7f0000002000)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x8001, 0xffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) 20.03492661s ago: executing program 4 (id=6904): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x6d8940, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsopen$auto(&(0x7f0000000000)='/dev/userio\x00', 0x9) readv$auto(r1, &(0x7f0000000080)={0x0, 0x3}, 0x8) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x83c1, 0x4400) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mount$auto(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x100000, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) creat$auto(&(0x7f0000000040)='X))\x00', 0x5) creat$auto(&(0x7f0000000000)='X))\x00', 0x401) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r0) r2 = socket(0xa, 0x1, 0x100) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfc}, 0x14}}, 0x20000000) r3 = eventfd2$auto(0x6af3, 0x800) readv$auto(r3, &(0x7f0000000580)={0x0, 0x29e4}, 0xe8) read$auto_fops_u8_(r3, &(0x7f0000001e40)=""/109, 0x6d) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) 19.224331027s ago: executing program 0 (id=6908): r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf251c08000014000400bd"], 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x48d0) 19.156066019s ago: executing program 4 (id=6909): r0 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f00000000c0)=0x2) mmap$auto(0xb, 0x1d9277d6, 0xe1, 0xcb4, r0, 0x10000000005) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) (async) read$auto(r1, 0x0, 0x20) (async) socket(0x2, 0x3, 0x2) (async) setsockopt$auto(0x3, 0x0, 0xd1, 0xfffffffffffffffc, 0xfd72) (async) pipe$auto(0x0) (async) r2 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) (async) r3 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x80044943, 0x0) (async) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x507e02, 0x0) sendfile$auto(r4, r4, 0x0, 0x4) (async) ioctl$auto_I2C_SMBUS(r2, 0x720, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) (async) sendto$auto(0x3, 0x0, 0x34000, 0x13f, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x20800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000ec0)=""/4096, 0x300) 19.047961765s ago: executing program 0 (id=6910): r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) pwrite64$auto(r0, &(0x7f0000000480)='/dev/vcsa\x00\x84\xbd\xe3\xa8\xaf\xd0E>IY\x1cPw+\x85\xdf\xa2\xfd\xf1\x80\xc6\xde>KC\x931\xf7vvjlm\xae\xf8\xc3\xa8\xbe\xdc9|\xfe}\xaf\x9e\'\xef\x84\xa8\xd3eX\x8f\x00q\xca\xfe\xa8<\'~\xec\x0f\xc9\x91\x86\x19\x97}\xba\x1f\x1a\xf8\x15\x8a?\xe0\xeb\xfaOS\x11\x964\xd58\xf9q\xdc\xce\t\f\xa3\xc7\x84j\x15\x81\x16\xbb\x8d\xa9\x04\xc4\x03W(\xbc\x03N\x95\xb8\x1b&,\xeb\x94\xc2p}u#\xd22[\xfe@\xfa`\x8c\xa8&\xb3\xbe\x12R\xd1V\xd0\xd4\xb1\x8b\xf3\x86\xd2\xba\r\x8a~]\\wg=\raRc\xb8\xf0\x9e\xc7D\xde\xa6;\x7f\x90\xf8\xf3\xc8f\xa1\n\x8b\xd6\xd5\xc6-\xf6X\x8cS\x10\x98)D\xb7\xf2\b\xfa\xad\xa43\x9dI9d\x152\x96\xd7\x9f\x9e\t^\x827\xfe\xb1!Z\x12\xf9\x1e\x9b\xef\xd5\xb7\x17\x8f\xc8]\x9f\x1b\xfa\xd3\xf6\xc9\x9e\x1fl6\x02*\xe1iD\xa7\x1f\x8a\xaf\x919\x8ee\xb4\x13\x05\xf1\x04>\r\x80*j&\x9de\v\xfd\x9b\xd0\xb8y\xa2\xa7\x85\x87*\x00\xea\xe1c\xda\x11\xbcF\xc5\xe0T\x9c\xe9\xd2\xc9\xea\f\x9bt\x18\xc5\xa0o\xae\x91X\t\x8a\x91', 0x7b05, 0x7) r1 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0xe77, 0x0, 0x0, 0x1, 0xb) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001b00)=ANY=[@ANYBLOB="20010000", @ANYRES16=r2, @ANYBLOB="010025bd7000fedbdf257e000000000066004e21000000002680000002000400000000006300000000000000010009000000000001000400000000000200070000000000980006000000000014010f000000000007001f5198dea666bad033b7aea5d7529adf1ae5607ef3d022c60a57cd1649952c00000080004dec6ee46088e64587adba9ba7537f79f056fbd60490f11a3498560bfa783badf6fa39e3aa9815705e629beb9573271a53f5c4ee3859bf0313d7dad665a019c4e908768bb5b896533bbd3b39e4768150289646864a302e8ded90a5b83ada85575e6657023fb727d3723ff97af53540e2fbc15e85a0c6a5644432b997ba3bdc423b0be181bf0d501cf098551e7b2ce99ac721bf9145ebc91fe7c9230b30f9b88ac5b2c404ddfac531ea9fcaf6d514daf8c13a9f382059488c3280a13754303b49d3eddff53520086a38cbb1075e09f556c208c26f727717e52ad91b929b37df820ffca5a077087bc540d3c30fa84b5986b17605e72c7af63bd4264355ec1e043e6ae397fd5b925bc6ee277f7e42b305fbe861e8e9974efb062206bd7fef4b13f19f926c090b1367e4599ea549d1e97c1c2b214d06c5de3e7dc0bae99b9030f72ae011f303fa7ea798a612fd252f9e9c238f07ccc755d8c4aff22798a08e567e0b8f3975fc1b30522f1b82ed37fecc8927a2f8265cb2423f4272359a5b097f54bdb65f51f0911ca880641493cce6f3f00edfefe3d7f007bc5c57214dde959740b9e0a70b28d191e10eb5c3eccfdf045407c80e026f4e9fe766eca822b77df002210db69f60480ae2e21fced2bf22dde077e0ccbe2e05f58ba0db3d9f6469382574a23009202a928c2e7a67623eeeb3976036936871d6056bca11541ed5d795853e233149c9ea3e3d478b5e35cf5e551002a79ac8a33d81b60fde70ccbf125c4b4243160db218068b7a2db851b3dfad23f584b6db1b9ec1428635f27d4bb08cb9b0d4d9c725595fbd59622038dc6cb2f70282ae273c9927dfc884b8e99578c897e90ffeec2c4f3b1e4c5cadc23ff40dd06e618b0f798c0d4a87c7728de7b03a7a8021dcdbd1f4c8b29ea50d2130cf3099a8b37a4d894a5020bc583feaf86c00b8d917567b988f875af819935a325517e76850262d5558ff1fcf9f5b7b26a9645bb26d20104227757359a6e52317edbdd2fde26c3b3f26ee6e2714d9668cfafe1f1c83c24d7e3b55127b38315b1b9053d3ed9561c14e0cf3b173f89e739337a63e5d13fb97466b9b36556adb4af4e9b18d4778c369692333cb70c72d968aff999fe3f08690fdc345eceedb90782bc907b20d4a06867f2930ebb553494aeceabf2f33f1295753241986835af90226970a126a27d9c1f3a04f9b917fa57524fb70f161e619ab83cff4edceef04362c497dc4804af7e7837a4b4241521a2cb28a08fe7001ce941a8cf3f2a4266dbc5fd02c56a5a16fe2a0af334673588ea9b161c65b7ab9a67e4808f1e8c6cf55641a97082348e1e31ed07154364d1fb134e988d32277a2c5224985ab2e3b518c927af3338cfeab947dc38466b8e58f40402d97417a895d335dcd5ccf6ed33ba8a54c80ea0cfe0c66993e86f8b2699d860ff1b2d00db394a18a92e0ed026737e46d52978bae076c156be5e6530222fe8c93c8e4ecd29bfd1823b2730515eb3e99ecb867e0117fafafb495f34fe5c82c7af4e163ef7c543d5327b011b65e661db58838a0821f66c65a9b2d598fe497d778ced9bb1c48369c70a3ab32dd9626f0b575d47a0b7398fcaebce8048504cc3ebcc4498894bf079758aa008906c570f9a4ce0c5faefd8326dde933dccf7a2896a3b86ceb8add2b7f69943b006c8ca893916b156458c9dd28e1e21770e7ba6d7fb8ebdde22ff23346cd0f6d0c90a093fae2f128f759418402b13fae56d033f6adde7442b46db3aedb8665718b37055df3b0710f5e31ea2e04abbca71d7c8cc71325a1124d38c4245587ff29c5e0f1cbfdf7b865099a395dd9c2f7e29200bda2c2b20b17b7f33e1c277c57925b59aca80821a48085b7eab507385849a0e22c2ac4a526e7b786fd9442fd2df0eb05cb1df98795853536dc12b6fea234a4c32a57059049c0dedee032615da106c88fe54e73226cb88b4863c1f905dac6dffd4e5e53873f746e19ee631e8cab802ef174df5cb6e88e513aa10a0e1dd7d43075bc19b94491b9cb8fe1efac7d300e4c6253d42198c94f76fef50405405c348b9bfe0c4e09b6668655baaff6d464b20c5db5aa72b6e5345aa6af3c2b2e508ab94ed2f3ae27947c30f6c9435396cccca249745963693d456f0b13551ebd2714a5d2aa5eec9d61d2d6b9aba3d482f4c49906435b1d783f381a7180a5077358717dfc2e117d31e141382b11db23fb0c7d8ec13b0e2e542cfe4b44f2e9b0a440dcf9143f3be9494f3bc2004047e86405b4190fb667d269f2a7d1c48509fbdc3bb3e99d6f68a309ffff000006007347b9c70c7a48913b05957bbb9826fc681df1b98ace4a88eebe405b8400e41aa87a86c1aca27323448d0dfed2b28ecfa7d65c7264311080712e8fa3874f7ee38b02120b885602b84d954479702f51ac45a331dfe2ef76c45014c84415189885b9c9613c2acb7a41c6ace876ee5af4fc50407fc3361a128a2e59e60f11b47277c9a5f3cbe0424d3886a3a3a0f40c5ef46d2b331ca3d83f2f444bc6998d06926c6a1cb162ef14fb7ab2ee731fdc7f0fc553a3c07226a2160d350ed7f30000360103e17d2b53cce133a6674f5b8600a49a8403c6bdfd3e0c464ed8a2fe254a5939fb09cb1dc350c9230c189febda65557207893e11deb595e622008d945c914692afa24b99bf04b003881b9fc35a628e8a1f7dd36490920c7ce2dbffcf61124f39b5329db3d8f56f48af0b3b31b588771b14d045e0ea69404cf54596db22abd3d35b4f3d484faa4ac1eca1bbbe82ed861aee4715f465c010e98899929b521dea88b03c97f8d005000000987004d3b262d91b7e4b6d005ebb201517953c89225c186080b4836ccb358d624f4b134a11c7ec39e49d80d2c40312c250508a0e8c0969f1fe6830e50c3f2623b31882a5409300737b3fe096e8da90fa050194db696c605c6f82e18f9fc334aa232483df49ed13478a9bd48a"], 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0x140) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000080)={0x3a4, r2, 0x1, 0x8, 0x25dfdbfe, {}, [@NL80211_ATTR_SAR_SPEC={0x384, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS={0xa8, 0x2, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x302b}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1ff}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x101}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x400}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1ff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xf}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xf9}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS={0x1e4, 0x2, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x200}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x10}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x10}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8c}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xb16}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x16}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfffffffc}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4a9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xffffff80}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7fff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7fff}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9a}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x80000001}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8001}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xd}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4a}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x483b4d5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x80000000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8001}]}]}, @NL80211_SAR_ATTR_SPECS={0xb4, 0x2, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xe2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8e}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x56f}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4ffa}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xe}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}]}]}, @NL80211_SAR_ATTR_SPECS={0x30, 0x2, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x80}]}]}]}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 18.829108019s ago: executing program 0 (id=6913): seccomp$auto(0x3, 0x2, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video20\x00', 0x80000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd10/range\x00', 0x70004, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/ping_group_range\x00', 0x202, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) sendmsg$auto_BATADV_CMD_GET_VLAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00022abd7000fcdbdf2511000000080036000000ffff10bfb0506bb26c"], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4008090) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x64e000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8080, 0x0) r3 = prctl$auto(0xdd7e, 0x1, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000480)='/Eev/auDio1\x00VI\xa3\xaa\xb1;\x9d\xb8\x85\xe7l\x99\x02\xfe\xb3\xad\xb8r\xafU\xb9\xd01J\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x91\x90\xfb\xe3#\xd6B\x8d\xab\xd7\xcd\xb1\xdb\xe9\x7f\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z\xc4\xb0v\xea\x92D5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb\xff\xff\xff\x7f\xe2\xae,\x95k8\x83\xcf\xc5,\xd3S\xbf1\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x00\x00\x19R\t\x00\x00\x00\x00\x00\x00\x00\xe8\xfb\x00`\xc2\xcezU\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3', 0x100000a3da) mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/tty/tty2/power/runtime_active_time\x00', 0xf5292a190ad5cf67, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) unshare$auto(0x40000080) mmap$auto(0x0, 0x6, 0x4000000000df, 0xeb1, 0x401, 0x20000008000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x0) madvise$auto(0x4, 0xffffffffffff0005, 0x1b) sendfile$auto(0x2, 0x3, 0x0, 0xc3df) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) 17.269768516s ago: executing program 0 (id=6914): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram15\x00', 0x14f602, 0x0) mlockall$auto(0x5) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x400, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80001, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001080)='/proc/thread-self/net/rxrpc/locals\x00', 0x40080, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r2) sendmsg$auto_WG_CMD_GET_DEVICE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000e33d6a7e3b52fa04e5a671f5963dc2910f6892530107c790ced2d8beb1417805958b913fabad43e16f3159b6965d425b013a8528c06a3db97d5e5d0b644a1a7e6f753b90984007a4d484121eacb44284d34c22061013563e37e2c167ca8354b0c0a182426724e82a712f678b6581532f756172d8157ad537a64e7a9c589efd62b17d932fb55a9466ca30d1", @ANYRES16=r3, @ANYBLOB="030727bd7000fcd9df2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4) sendmsg$auto_WG_CMD_SET_DEVICE(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r3, @ANYBLOB="100028bd7000fddbdf2501000000d90003000fc4f28bcef8bfa9addfb2fde2caf0037f51dd21ac573bdb788abf8bb79b34b7a4c0ce6ac54f9f9a5d05c88615c94abfc0aacf6cb050cc7e6fde56af4473164b50e16538c6c80bf54339a93f73ba2aa1ac3237a717e0aec7d1425babecda704d61937b547ffff69c52f9f5fa8f82c1a4fe34447a8f98ff1a8619d664baec412725d67c40f73fe461acf4348446ed91a343f91a88da64f9e213278c90531fa7e801db094eee92281ddc6bfb231fb58cea21d77d75cf09fe7760c578a8aeb8485ae08fdeee05d2e5a0030d29e6936d1c9e6845f7d8245b56ede30000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x20004040}, 0x800) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001c00)=""/4111, 0x100f) mmap$auto(0x0, 0x2020009, 0x20000000000003, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000001040), 0x880, 0x0) close_range$auto(0xffffffffffffffff, r4, 0x80000001) r5 = socket(0x10, 0x2, 0x0) setuid$auto(0xe) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="18052bbd7000ffdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040), 0xfc2}, 0x2, &(0x7f00000002c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) 15.754979552s ago: executing program 0 (id=6918): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x6d8940, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsopen$auto(&(0x7f0000000000)='/dev/userio\x00', 0x9) readv$auto(r1, &(0x7f0000000080)={0x0, 0x3}, 0x8) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x83c1, 0x4400) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mount$auto(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x100000, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) creat$auto(&(0x7f0000000040)='X))\x00', 0x5) creat$auto(&(0x7f0000000000)='X))\x00', 0x401) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r0) r2 = socket(0xa, 0x1, 0x100) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfc}, 0x14}}, 0x20000000) r3 = eventfd2$auto(0x6af3, 0x800) readv$auto(r3, &(0x7f0000000580)={0x0, 0x29e4}, 0xe8) read$auto_fops_u8_(r3, &(0x7f0000001e40)=""/109, 0x6d) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) 15.432684844s ago: executing program 0 (id=6920): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_psample(&(0x7f0000007a40), 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r0, &(0x7f0000007b00)={0x0, 0x0, &(0x7f0000007ac0)={&(0x7f0000007a80)={0x14, r1, 0x311, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0xfffff000, 0x0, 0xf0}, 0x0) 5.025239902s ago: executing program 40 (id=6903): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_psample(&(0x7f0000007a40), 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r0, 0x0, 0x0) mknod$auto(&(0x7f0000002000)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x8001, 0xffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) 4.102795805s ago: executing program 41 (id=6909): r0 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f00000000c0)=0x2) mmap$auto(0xb, 0x1d9277d6, 0xe1, 0xcb4, r0, 0x10000000005) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) (async) read$auto(r1, 0x0, 0x20) (async) socket(0x2, 0x3, 0x2) (async) setsockopt$auto(0x3, 0x0, 0xd1, 0xfffffffffffffffc, 0xfd72) (async) pipe$auto(0x0) (async) r2 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) (async) r3 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x80044943, 0x0) (async) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x507e02, 0x0) sendfile$auto(r4, r4, 0x0, 0x4) (async) ioctl$auto_I2C_SMBUS(r2, 0x720, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) (async) sendto$auto(0x3, 0x0, 0x34000, 0x13f, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x20800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000ec0)=""/4096, 0x300) 2.092918077s ago: executing program 6 (id=6950): r0 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim1/psample/enable\x00', 0x400402, 0x0) write$auto_nsim_psample_enable_fops_psample(r0, &(0x7f00000005c0)='\x00\x00\x00\x00', 0x4) 1.977836654s ago: executing program 6 (id=6951): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r0) sendmsg$auto_NET_SHAPER_CMD_GROUP(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000600)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x900000000000000, 0x44000}, 0x14) 1.914361946s ago: executing program 6 (id=6952): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7fffffffffffffff) r0 = socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b542, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) sendfile$auto(r2, r1, 0x0, 0x7) mmap$auto(0x0, 0x48de6aa000, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="13000000", @ANYRES16=0x0, @ANYBLOB="2586f2bd7000fedbdf2504000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c9d0}, 0x4080) r3 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000400)={0x0, 0xfd89, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="32d80145a1ee8d68ff18bffcd93cdf046b19add3ad1addda72955c787aea4a5440a51c2763d84385af53d4f836eb8224b5d2c139b45227e84b3f641c8b0da3510ab2fe9373fc058b7467df1ad5941e3dfa0392998da79d16ab6384a051e7092f97647704a9c1f932bf4b4af954621f37fcd3c30b5e55e6bf47a60412ff1e87294e237149770b35c6022d14011642e904f71b0d234bfcc40d004652812affc885ca50fa71f9ecb8a9d744e9c05b1971a534ea231f7e66842aba0476a6df0897c985cb08fdc0c1b804acdc62"], 0x1ac}, 0x1, 0x0, 0x0, 0xc0}, 0x440c0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000300)={{&(0x7f0000000640)="4023323b52a998fc53754442197547d986396e4ac2f991ce93879e2fbeea07fa975eb48bee358e775e6a6cb2e54acee2ef0183bef6b6e7f1890e3a4c066c8369918de3254172611a83c7b6aeb53a3539abee4c2ad6f12b337831bbbaf52c5983650e5bacaa342a99a42abaacfdb9f4d6a04de3be3a512d187885106cdfcc4c1689a559dc49bd0400000053eb770a52e744ce4a91dcc003a9223d9747abc414590b71854d97f54ae2c7bb520a969491a5b1f005c566eac9d76e18d704e44e4c9fdffc06ca1b360105327259906d669347745a04d428b2a5c2da5e23f85ef2d02da6792bf9bbb4292b4b82bcb077f2378073eb3b128f0a1db4da455d3c3fdd19b975be796383bc0038a387bf13401d0ea53c75ae071b032d667e22cbb85a4654a71fd32c151767965751bbd5655948c7230e457bfa4ad78b65f5305c6623b4aa44c56e9376db3e4e0e220dddc832ba3cec1c87055ba06a5a4cbc", 0xffffffff, 0x0, 0x21, &(0x7f00000003c0)="36d426922608a1214940a348067f49ef5a4d2096455f61a11dd81b0c0527ec1674ba4f30dbe32e7da22234e8cb9c6fe2169af82540e2e52f7391e8cc3662de9bd60f64967569142153cfe766dfc79b00e70cbf2ced9db314dd2c7ccb9c52d29ada52e587c23b324fb9a0939378550faad663c872f3cf571cf7e1a437eea1d673edc290a12a2d941d2e6e9b26840bf8423611d93270b74696a8d31d18442926c0be6dd278204adc60c01f", 0x1, 0x19}, 0x8}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), r0) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x14}}, 0x40080) r4 = socket(0x2a, 0x1, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}, 0x1, 0x0, 0x0, 0x4040815}, 0x40000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) pkey_free$auto(0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f00000001c0)) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 936.879824ms ago: executing program 6 (id=6953): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r0, &(0x7f0000000000)="632d1bfe595046ab5c40bd7563307acb6d16baef6176e669a216aae183cccafdd80500ffffffff0600000000feff00"/56, 0x38) 832.207379ms ago: executing program 6 (id=6954): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto_HDIO_GETGEO(r4, 0x301, &(0x7f00000001c0)) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="810b25bd7080fbdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x6}, 0x803}, 0x10a, 0x6, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) ioctl$auto_PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x101000, 0x0) listen$auto(r6, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/misc/userfaultfd/power/control\x00', 0x668000, 0x0) socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x0) shutdown$auto(0xffffffffffffffff, 0x2) read$auto_rng_chrdev_ops_core(r1, 0x0, 0x0) r7 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec22\x00', 0x28000, 0x0) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r0, 0xfffffffc, &(0x7f00000001c0)='/sys/devices/virtual/misc/userfaultfd/power/control\x00', 0x0, 0x4) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, 0x0) setfsgid$auto(0xee00) 48.253434ms ago: executing program 42 (id=6920): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_psample(&(0x7f0000007a40), 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r0, &(0x7f0000007b00)={0x0, 0x0, &(0x7f0000007ac0)={&(0x7f0000007a80)={0x14, r1, 0x311, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0xfffff000, 0x0, 0xf0}, 0x0) 0s ago: executing program 6 (id=6956): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x100000000010002, 0x20010, 0xe2, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2b2474e) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000080), 0x109843, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000080), 0x109843, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) socket(0x29, 0x2, 0x0) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xaa03, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xe, 0x2, 0x948b, 0x3, 0x15f4ca0a, 0x1, 0x3, 0x100000000, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) (async) write$auto(r2, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x80000001) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range$auto(0x2, r1, 0x0) (async) close_range$auto(0x2, r1, 0x0) io_uring_setup$auto(0x6, 0x0) r4 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x7fff, 0x401bf, 0x7352, 0x38, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0xa, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x88, 0x0, 0xfffffffc, 0x0, 0x0, 0x400, [0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x10000000]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) (async) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) pwritev$auto(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000380)="1da79a0e7de41652d4d1e049613c0ceb452422cbe4d6694c4cd76b5d8f5f1c87cde3", 0x79}, 0x0, 0x81, 0x9) (async) pwritev$auto(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000380)="1da79a0e7de41652d4d1e049613c0ceb452422cbe4d6694c4cd76b5d8f5f1c87cde3", 0x79}, 0x0, 0x81, 0x9) ioctl$auto_SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f00000001c0)) kernel console output (not intermixed with test programs): the MTU to 1560 would solve the problem. [ 1757.017508][T21313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1757.391257][T21313] hsr_slave_0: entered promiscuous mode [ 1757.422828][T21313] hsr_slave_1: entered promiscuous mode [ 1757.467461][T21313] debugfs: 'hsr0' already exists in 'hsr' [ 1757.506223][T21313] Cannot create hsr debugfs directory [ 1757.545714][T21737] delete_channel: no stack [ 1757.937266][T32251] Bluetooth: hci6: command tx timeout [ 1758.603582][T21822] block nbd9: NBD_DISCONNECT [ 1758.817614][T21313] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1758.879828][T21313] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1758.928512][T21313] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1758.988794][T21313] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1759.428131][T21887] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6529'. [ 1759.531812][T21313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1759.615715][T21313] 8021q: adding VLAN 0 to HW filter on device team0 [ 1759.678933][T32229] bridge0: port 1(bridge_slave_0) entered blocking state [ 1759.686083][T32229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1759.790658][ T2028] bridge0: port 2(bridge_slave_1) entered blocking state [ 1759.797792][ T2028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1759.921377][T21313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1760.003351][T21313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1760.015270][T32251] Bluetooth: hci6: command tx timeout [ 1760.547199][T21313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1760.617551][T21915] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6534'. [ 1760.682493][T21915] netlink: 'syz.6.6534': attribute type 11 has an invalid length. [ 1760.725102][T21915] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6534'. [ 1761.388392][T21313] veth0_vlan: entered promiscuous mode [ 1761.504841][T21313] veth1_vlan: entered promiscuous mode [ 1761.602528][T21313] veth0_macvtap: entered promiscuous mode [ 1761.651156][T21313] veth1_macvtap: entered promiscuous mode [ 1761.712471][T21313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1761.788959][T21313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1761.859417][T18858] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.881288][T21972] ubi0: attaching mtd0 [ 1761.904361][T21972] ubi0 error: ubi_attach_mtd_dev: bad VID header (536870975) or data offsets (536871039) [ 1761.916247][T18858] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.968293][T18858] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.011288][T18858] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1762.076723][T32251] Bluetooth: hci6: command tx timeout [ 1762.393783][ T2028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1762.458304][ T2028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1762.575880][T18883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1762.622154][T18883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1763.865811][T22046] FAULT_INJECTION: forcing a failure. [ 1763.865811][T22046] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1763.933553][T22055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6553'. [ 1763.954388][T22046] CPU: 0 UID: 0 PID: 22046 Comm: syz.9.6551 Not tainted syzkaller #0 PREEMPT(full) [ 1763.954411][T22046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1763.954421][T22046] Call Trace: [ 1763.954427][T22046] [ 1763.954434][T22046] dump_stack_lvl+0x16c/0x1f0 [ 1763.954462][T22046] should_fail_ex+0x512/0x640 [ 1763.954487][T22046] should_fail_alloc_page+0xe7/0x130 [ 1763.954509][T22046] prepare_alloc_pages+0x3c2/0x610 [ 1763.954533][T22046] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1763.954560][T22046] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1763.954587][T22046] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1763.954607][T22046] ? mas_next_slot+0x12d3/0x21b0 [ 1763.954630][T22046] ? mas_find+0x156/0x6d0 [ 1763.954642][T22046] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1763.954673][T22046] ? policy_nodemask+0xea/0x4e0 [ 1763.954694][T22046] alloc_pages_mpol+0x1fb/0x550 [ 1763.954714][T22046] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1763.954735][T22046] ? __lock_acquire+0x62e/0x1ce0 [ 1763.954756][T22046] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1763.954778][T22046] vma_alloc_folio_noprof+0xed/0x1e0 [ 1763.954799][T22046] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1763.954826][T22046] do_pte_missing+0x2230/0x3ba0 [ 1763.954842][T22046] ? find_held_lock+0x2b/0x80 [ 1763.954861][T22046] __handle_mm_fault+0x152a/0x2a50 [ 1763.954881][T22046] ? __pfx___handle_mm_fault+0x10/0x10 [ 1763.954897][T22046] ? __pte_offset_map_lock+0x174/0x310 [ 1763.954917][T22046] ? find_held_lock+0x2b/0x80 [ 1763.954936][T22046] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 1763.954962][T22046] handle_mm_fault+0x589/0xd10 [ 1763.954980][T22046] __get_user_pages+0x551/0x34a0 [ 1763.955009][T22046] ? __pfx___get_user_pages+0x10/0x10 [ 1763.955035][T22046] populate_vma_page_range+0x267/0x3f0 [ 1763.955058][T22046] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1763.955079][T22046] ? __pfx_find_vma_intersection+0x10/0x10 [ 1763.955100][T22046] ? do_mmap+0x69c/0x1210 [ 1763.955122][T22046] __mm_populate+0x1d8/0x380 [ 1763.955135][T22046] ? __pfx___mm_populate+0x10/0x10 [ 1763.955150][T22046] ? up_write+0x1b2/0x520 [ 1763.955172][T22046] vm_mmap_pgoff+0x37f/0x470 [ 1763.955194][T22046] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1763.955213][T22046] ? rcu_is_watching+0x12/0xc0 [ 1763.955227][T22046] ? kfree+0x24f/0x4d0 [ 1763.955243][T22046] ? __x64_sys_futex+0x1e0/0x4c0 [ 1763.955260][T22046] ? __x64_sys_futex+0x1e9/0x4c0 [ 1763.955280][T22046] ksys_mmap_pgoff+0x7d/0x5c0 [ 1763.955300][T22046] ? syscall_user_dispatch+0x78/0x140 [ 1763.955323][T22046] __x64_sys_mmap+0x125/0x190 [ 1763.955347][T22046] do_syscall_64+0xcd/0x4c0 [ 1763.955370][T22046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1763.955385][T22046] RIP: 0033:0x7f77a738eec9 [ 1763.955398][T22046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1763.955413][T22046] RSP: 002b:00007f77a828a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1763.955428][T22046] RAX: ffffffffffffffda RBX: 00007f77a75e5fa0 RCX: 00007f77a738eec9 [ 1763.955438][T22046] RDX: 00008000000000df RSI: 0000000000000fff RDI: 0000000000000000 [ 1763.955447][T22046] RBP: 00007f77a7411f91 R08: 0000000000000400 R09: 0000000000028000 [ 1763.955456][T22046] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1763.955465][T22046] R13: 00007f77a75e6038 R14: 00007f77a75e5fa0 R15: 00007ffcb2d04d48 [ 1763.955485][T22046] [ 1764.686774][T22062] FAULT_INJECTION: forcing a failure. [ 1764.686774][T22062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1764.703107][T22062] CPU: 0 UID: 0 PID: 22062 Comm: syz.6.6555 Not tainted syzkaller #0 PREEMPT(full) [ 1764.703129][T22062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1764.703139][T22062] Call Trace: [ 1764.703144][T22062] [ 1764.703150][T22062] dump_stack_lvl+0x16c/0x1f0 [ 1764.703177][T22062] should_fail_ex+0x512/0x640 [ 1764.703202][T22062] _copy_to_user+0x32/0xd0 [ 1764.703219][T22062] tomoyo_flush+0x161/0x520 [ 1764.703250][T22062] tomoyo_read_manager+0x320/0x550 [ 1764.703275][T22062] tomoyo_read_control+0x299/0x540 [ 1764.703291][T22062] ? __pfx_tomoyo_read+0x10/0x10 [ 1764.703311][T22062] vfs_read+0x1e4/0xcf0 [ 1764.703331][T22062] ? __pfx___mutex_lock+0x10/0x10 [ 1764.703352][T22062] ? __pfx_vfs_read+0x10/0x10 [ 1764.703373][T22062] ? __fget_files+0x20e/0x3c0 [ 1764.703395][T22062] ksys_read+0x12a/0x250 [ 1764.703410][T22062] ? __pfx_ksys_read+0x10/0x10 [ 1764.703432][T22062] do_syscall_64+0xcd/0x4c0 [ 1764.703454][T22062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1764.703469][T22062] RIP: 0033:0x7f6d03d8eec9 [ 1764.703481][T22062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1764.703495][T22062] RSP: 002b:00007f6d01ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1764.703509][T22062] RAX: ffffffffffffffda RBX: 00007f6d03fe5fa0 RCX: 00007f6d03d8eec9 [ 1764.703518][T22062] RDX: 000000000000b4d3 RSI: 0000000000000000 RDI: 0000000000000003 [ 1764.703526][T22062] RBP: 00007f6d01ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1764.703535][T22062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1764.703543][T22062] R13: 00007f6d03fe6038 R14: 00007f6d03fe5fa0 R15: 00007ffe87c81fc8 [ 1764.703562][T22062] [ 1766.312953][T22104] snd_virmidi snd_virmidi.0: control 61678:131081:32767:yªƒ>oÆ[k<÷:1 is already present [ 1767.745415][ T30] audit: type=1804 audit(109677.877:36): pid=22167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.6573" name=2F6E6577726F6F742F34302F22050820 dev="tmpfs" ino=226 res=1 errno=0 [ 1767.914766][ T30] audit: type=1800 audit(109677.877:37): pid=22167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6573" name=22050820 dev="tmpfs" ino=226 res=0 errno=0 [ 1768.231917][T22181] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1768.471428][T22208] snd_virmidi snd_virmidi.0: control 61678:131081:32767:yªƒ>oÆ[k<÷:1 is already present [ 1769.548706][T22244] FAULT_INJECTION: forcing a failure. [ 1769.548706][T22244] name failslab, interval 1, probability 0, space 0, times 0 [ 1769.594469][T22244] CPU: 0 UID: 0 PID: 22244 Comm: syz.8.6580 Not tainted syzkaller #0 PREEMPT(full) [ 1769.594492][T22244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1769.594501][T22244] Call Trace: [ 1769.594507][T22244] [ 1769.594514][T22244] dump_stack_lvl+0x16c/0x1f0 [ 1769.594541][T22244] should_fail_ex+0x512/0x640 [ 1769.594563][T22244] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1769.594583][T22244] should_failslab+0xc2/0x120 [ 1769.594603][T22244] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1769.594620][T22244] ? getname_flags.part.0+0x4c/0x550 [ 1769.594645][T22244] getname_flags.part.0+0x4c/0x550 [ 1769.594668][T22244] getname_flags+0x93/0xf0 [ 1769.594684][T22244] do_sys_openat2+0xb8/0x1d0 [ 1769.594705][T22244] ? __pfx_do_sys_openat2+0x10/0x10 [ 1769.594725][T22244] ? rcu_is_watching+0x12/0xc0 [ 1769.594746][T22244] __x64_sys_openat+0x174/0x210 [ 1769.594760][T22244] ? __pfx___x64_sys_openat+0x10/0x10 [ 1769.594774][T22244] ? syscall_user_dispatch+0x78/0x140 [ 1769.594801][T22244] do_syscall_64+0xcd/0x4c0 [ 1769.594823][T22244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1769.594838][T22244] RIP: 0033:0x7f1584f8eec9 [ 1769.594850][T22244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1769.594864][T22244] RSP: 002b:00007f1585df0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1769.594879][T22244] RAX: ffffffffffffffda RBX: 00007f15851e5fa0 RCX: 00007f1584f8eec9 [ 1769.594888][T22244] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1769.594897][T22244] RBP: 00007f1585011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1769.594906][T22244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1769.594914][T22244] R13: 00007f15851e6038 R14: 00007f15851e5fa0 R15: 00007ffd40259368 [ 1769.594932][T22244] [ 1769.775856][ C0] vkms_vblank_simulate: vblank timer overrun [ 1770.679997][T22264] netlink: 342 bytes leftover after parsing attributes in process `syz.6.6583'. [ 1770.768108][T22269] netlink: 342 bytes leftover after parsing attributes in process `syz.6.6583'. [ 1771.011208][T22288] FAULT_INJECTION: forcing a failure. [ 1771.011208][T22288] name failslab, interval 1, probability 0, space 0, times 0 [ 1771.104238][T22288] CPU: 0 UID: 0 PID: 22288 Comm: syz.1.6584 Not tainted syzkaller #0 PREEMPT(full) [ 1771.104263][T22288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1771.104273][T22288] Call Trace: [ 1771.104279][T22288] [ 1771.104286][T22288] dump_stack_lvl+0x16c/0x1f0 [ 1771.104312][T22288] should_fail_ex+0x512/0x640 [ 1771.104334][T22288] ? __kmalloc_noprof+0xbf/0x510 [ 1771.104354][T22288] ? lsm_blob_alloc+0x68/0x90 [ 1771.104366][T22288] should_failslab+0xc2/0x120 [ 1771.104385][T22288] __kmalloc_noprof+0xd2/0x510 [ 1771.104405][T22288] lsm_blob_alloc+0x68/0x90 [ 1771.104418][T22288] security_sk_alloc+0x30/0x270 [ 1771.104436][T22288] sk_prot_alloc+0x1c7/0x2a0 [ 1771.104453][T22288] sk_alloc+0x36/0xc20 [ 1771.104473][T22288] __netlink_create+0x5e/0x2c0 [ 1771.104491][T22288] ? __wake_up+0x3f/0x60 [ 1771.104508][T22288] netlink_create+0x39e/0x620 [ 1771.104526][T22288] ? __pfx_genl_bind+0x10/0x10 [ 1771.104539][T22288] ? __pfx_genl_unbind+0x10/0x10 [ 1771.104551][T22288] ? __pfx_genl_release+0x10/0x10 [ 1771.104567][T22288] __sock_create+0x335/0x8d0 [ 1771.104587][T22288] __sys_socket+0x14d/0x260 [ 1771.104604][T22288] ? __pfx___sys_socket+0x10/0x10 [ 1771.104620][T22288] ? xfd_validate_state+0x61/0x180 [ 1771.104639][T22288] ? __task_pid_nr_ns+0x17c/0x500 [ 1771.104662][T22288] __x64_sys_socket+0x72/0xb0 [ 1771.104678][T22288] ? lockdep_hardirqs_on+0x7c/0x110 [ 1771.104698][T22288] do_syscall_64+0xcd/0x4c0 [ 1771.104728][T22288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1771.104744][T22288] RIP: 0033:0x7f8beeb8eec9 [ 1771.104756][T22288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1771.104770][T22288] RSP: 002b:00007f8bef977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1771.104784][T22288] RAX: ffffffffffffffda RBX: 00007f8beede6180 RCX: 00007f8beeb8eec9 [ 1771.104794][T22288] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1771.104802][T22288] RBP: 00007f8beec11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1771.104810][T22288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1771.104819][T22288] R13: 00007f8beede6218 R14: 00007f8beede6180 R15: 00007ffd2d4cce78 [ 1771.104838][T22288] [ 1771.326811][ C0] vkms_vblank_simulate: vblank timer overrun [ 1772.779443][T22384] FAULT_INJECTION: forcing a failure. [ 1772.779443][T22384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1772.827064][T22384] CPU: 0 UID: 0 PID: 22384 Comm: syz.1.6590 Not tainted syzkaller #0 PREEMPT(full) [ 1772.827086][T22384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1772.827095][T22384] Call Trace: [ 1772.827100][T22384] [ 1772.827106][T22384] dump_stack_lvl+0x16c/0x1f0 [ 1772.827132][T22384] should_fail_ex+0x512/0x640 [ 1772.827156][T22384] _copy_to_user+0x32/0xd0 [ 1772.827173][T22384] tomoyo_flush+0x161/0x520 [ 1772.827198][T22384] tomoyo_set_string+0xaf/0xe0 [ 1772.827219][T22384] tomoyo_read_manager+0x1a1/0x550 [ 1772.827244][T22384] tomoyo_read_control+0x299/0x540 [ 1772.827259][T22384] ? __pfx_tomoyo_read+0x10/0x10 [ 1772.827280][T22384] vfs_read+0x1e4/0xcf0 [ 1772.827300][T22384] ? __pfx___mutex_lock+0x10/0x10 [ 1772.827321][T22384] ? __pfx_vfs_read+0x10/0x10 [ 1772.827342][T22384] ? __fget_files+0x20e/0x3c0 [ 1772.827364][T22384] ksys_read+0x12a/0x250 [ 1772.827381][T22384] ? __pfx_ksys_read+0x10/0x10 [ 1772.827402][T22384] do_syscall_64+0xcd/0x4c0 [ 1772.827425][T22384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1772.827440][T22384] RIP: 0033:0x7f8beeb8eec9 [ 1772.827452][T22384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1772.827466][T22384] RSP: 002b:00007f8bef9b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1772.827483][T22384] RAX: ffffffffffffffda RBX: 00007f8beede5fa0 RCX: 00007f8beeb8eec9 [ 1772.827493][T22384] RDX: 000000000000b4d3 RSI: 0000000000000000 RDI: 0000000000000003 [ 1772.827502][T22384] RBP: 00007f8bef9b9090 R08: 0000000000000000 R09: 0000000000000000 [ 1772.827511][T22384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1772.827519][T22384] R13: 00007f8beede6038 R14: 00007f8beede5fa0 R15: 00007ffd2d4cce78 [ 1772.827538][T22384] [ 1773.005092][ C0] vkms_vblank_simulate: vblank timer overrun [ 1773.497466][T22401] netlink: 186 bytes leftover after parsing attributes in process `syz.8.6594'. [ 1773.551967][T22401] netlink: 186 bytes leftover after parsing attributes in process `syz.8.6594'. [ 1773.687108][T22406] netlink: 268 bytes leftover after parsing attributes in process `syz.8.6594'. [ 1774.072045][T22416] FAULT_INJECTION: forcing a failure. [ 1774.072045][T22416] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.101193][T22416] CPU: 0 UID: 0 PID: 22416 Comm: syz.8.6597 Not tainted syzkaller #0 PREEMPT(full) [ 1774.101215][T22416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1774.101225][T22416] Call Trace: [ 1774.101231][T22416] [ 1774.101237][T22416] dump_stack_lvl+0x16c/0x1f0 [ 1774.101265][T22416] should_fail_ex+0x512/0x640 [ 1774.101287][T22416] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1774.101306][T22416] should_failslab+0xc2/0x120 [ 1774.101325][T22416] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1774.101341][T22416] ? fib_net_init+0x1a4/0x3f0 [ 1774.101357][T22416] fib_net_init+0x1a4/0x3f0 [ 1774.101370][T22416] ? __pfx___register_sysctl_table+0x10/0x10 [ 1774.101392][T22416] ? __pfx_fib_net_init+0x10/0x10 [ 1774.101404][T22416] ? lockdep_init_map_type+0x5c/0x280 [ 1774.101425][T22416] ? do_init_timer+0xc9/0x110 [ 1774.101443][T22416] ? devinet_init_net+0x5c2/0x910 [ 1774.101460][T22416] ? __pfx_fib_net_init+0x10/0x10 [ 1774.101472][T22416] ops_init+0x1e2/0x5f0 [ 1774.101496][T22416] setup_net+0x10f/0x380 [ 1774.101507][T22416] ? lockdep_init_map_type+0x5c/0x280 [ 1774.101526][T22416] ? __pfx_setup_net+0x10/0x10 [ 1774.101540][T22416] ? debug_mutex_init+0x37/0x70 [ 1774.101556][T22416] copy_net_ns+0x2a6/0x5f0 [ 1774.101573][T22416] create_new_namespaces+0x3ea/0xa90 [ 1774.101594][T22416] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1774.101612][T22416] ksys_unshare+0x45b/0xa40 [ 1774.101632][T22416] ? __pfx_ksys_unshare+0x10/0x10 [ 1774.101657][T22416] ? xfd_validate_state+0x61/0x180 [ 1774.101691][T22416] __x64_sys_unshare+0x31/0x40 [ 1774.101710][T22416] do_syscall_64+0xcd/0x4c0 [ 1774.101734][T22416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.101749][T22416] RIP: 0033:0x7f1584f8eec9 [ 1774.101761][T22416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1774.101777][T22416] RSP: 002b:00007f1585df0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1774.101792][T22416] RAX: ffffffffffffffda RBX: 00007f15851e5fa0 RCX: 00007f1584f8eec9 [ 1774.101802][T22416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1774.101810][T22416] RBP: 00007f1585011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1774.101819][T22416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1774.101828][T22416] R13: 00007f15851e6038 R14: 00007f15851e5fa0 R15: 00007ffd40259368 [ 1774.101847][T22416] [ 1775.065505][T32251] Bluetooth: hci3: unexpected event 0x02 length: 726 > 260 [ 1775.242956][T22478] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1776.231122][T22519] snd_virmidi snd_virmidi.0: control 61678:131081:32767:yªƒ>oÆ[k<÷:1 is already present [ 1777.076686][T22578] FAULT_INJECTION: forcing a failure. [ 1777.076686][T22578] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1777.109369][T22578] CPU: 0 UID: 0 PID: 22578 Comm: syz.8.6618 Not tainted syzkaller #0 PREEMPT(full) [ 1777.109391][T22578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1777.109401][T22578] Call Trace: [ 1777.109406][T22578] [ 1777.109437][T22578] dump_stack_lvl+0x16c/0x1f0 [ 1777.109464][T22578] should_fail_ex+0x512/0x640 [ 1777.109489][T22578] should_fail_alloc_page+0xe7/0x130 [ 1777.109511][T22578] prepare_alloc_pages+0x3c2/0x610 [ 1777.109535][T22578] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1777.109557][T22578] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1777.109582][T22578] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1777.109602][T22578] ? mas_next_slot+0x12d3/0x21b0 [ 1777.109623][T22578] ? mas_find+0x156/0x6d0 [ 1777.109635][T22578] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1777.109656][T22578] ? policy_nodemask+0xea/0x4e0 [ 1777.109676][T22578] alloc_pages_mpol+0x1fb/0x550 [ 1777.109695][T22578] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1777.109716][T22578] ? __lock_acquire+0x62e/0x1ce0 [ 1777.109736][T22578] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1777.109758][T22578] vma_alloc_folio_noprof+0xed/0x1e0 [ 1777.109780][T22578] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1777.109807][T22578] do_pte_missing+0x2230/0x3ba0 [ 1777.109822][T22578] ? find_held_lock+0x2b/0x80 [ 1777.109841][T22578] __handle_mm_fault+0x152a/0x2a50 [ 1777.109861][T22578] ? __pfx___handle_mm_fault+0x10/0x10 [ 1777.109878][T22578] ? __pte_offset_map_lock+0x174/0x310 [ 1777.109897][T22578] ? find_held_lock+0x2b/0x80 [ 1777.109917][T22578] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 1777.109943][T22578] handle_mm_fault+0x589/0xd10 [ 1777.109961][T22578] __get_user_pages+0x551/0x34a0 [ 1777.109989][T22578] ? __pfx___get_user_pages+0x10/0x10 [ 1777.110015][T22578] populate_vma_page_range+0x267/0x3f0 [ 1777.110039][T22578] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1777.110060][T22578] ? __pfx_find_vma_intersection+0x10/0x10 [ 1777.110081][T22578] ? do_mmap+0x69c/0x1210 [ 1777.110102][T22578] __mm_populate+0x1d8/0x380 [ 1777.110116][T22578] ? __pfx___mm_populate+0x10/0x10 [ 1777.110131][T22578] ? up_write+0x1b2/0x520 [ 1777.110152][T22578] vm_mmap_pgoff+0x37f/0x470 [ 1777.110175][T22578] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1777.110193][T22578] ? __fget_files+0x204/0x3c0 [ 1777.110213][T22578] ? __x64_sys_futex+0x1e0/0x4c0 [ 1777.110230][T22578] ? __x64_sys_futex+0x1e9/0x4c0 [ 1777.110249][T22578] ksys_mmap_pgoff+0x7d/0x5c0 [ 1777.110269][T22578] ? syscall_user_dispatch+0x78/0x140 [ 1777.110293][T22578] __x64_sys_mmap+0x125/0x190 [ 1777.110317][T22578] do_syscall_64+0xcd/0x4c0 [ 1777.110340][T22578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1777.110355][T22578] RIP: 0033:0x7f1584f8eec9 [ 1777.110367][T22578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1777.110382][T22578] RSP: 002b:00007f1585df0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1777.110396][T22578] RAX: ffffffffffffffda RBX: 00007f15851e5fa0 RCX: 00007f1584f8eec9 [ 1777.110406][T22578] RDX: 00008000000000df RSI: 0000000000000fff RDI: 0000000000000000 [ 1777.110422][T22578] RBP: 00007f1585011f91 R08: 0000000000000400 R09: 0000000000028000 [ 1777.110431][T22578] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1777.110441][T22578] R13: 00007f15851e6038 R14: 00007f15851e5fa0 R15: 00007ffd40259368 [ 1777.110460][T22578] [ 1777.706009][T22593] FAULT_INJECTION: forcing a failure. [ 1777.706009][T22593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1777.774049][T22593] CPU: 0 UID: 0 PID: 22593 Comm: syz.8.6620 Not tainted syzkaller #0 PREEMPT(full) [ 1777.774071][T22593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1777.774080][T22593] Call Trace: [ 1777.774085][T22593] [ 1777.774092][T22593] dump_stack_lvl+0x16c/0x1f0 [ 1777.774118][T22593] should_fail_ex+0x512/0x640 [ 1777.774142][T22593] _copy_from_user+0x2e/0xd0 [ 1777.774158][T22593] generic_map_update_batch+0x380/0x610 [ 1777.774185][T22593] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1777.774206][T22593] ? __might_fault+0xe3/0x190 [ 1777.774222][T22593] ? __might_fault+0x13b/0x190 [ 1777.774239][T22593] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1777.774260][T22593] bpf_map_do_batch+0x5b4/0x680 [ 1777.774279][T22593] __sys_bpf+0x4cf9/0x4de0 [ 1777.774301][T22593] ? __pfx___sys_bpf+0x10/0x10 [ 1777.774320][T22593] ? vfs_write+0x15d/0x11d0 [ 1777.774339][T22593] ? __pfx_css_rstat_updated+0x10/0x10 [ 1777.774355][T22593] ? __pfx_vfs_write+0x10/0x10 [ 1777.774382][T22593] ? ksys_write+0x1ac/0x250 [ 1777.774406][T22593] ? __pfx_ksys_write+0x10/0x10 [ 1777.774425][T22593] __x64_sys_bpf+0x78/0xc0 [ 1777.774445][T22593] ? lockdep_hardirqs_on+0x7c/0x110 [ 1777.774465][T22593] do_syscall_64+0xcd/0x4c0 [ 1777.774487][T22593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1777.774501][T22593] RIP: 0033:0x7f1584f8eec9 [ 1777.774513][T22593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1777.774527][T22593] RSP: 002b:00007f1585dcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1777.774541][T22593] RAX: ffffffffffffffda RBX: 00007f15851e6090 RCX: 00007f1584f8eec9 [ 1777.774550][T22593] RDX: 0000000000000092 RSI: 0000200000000380 RDI: 000000000000001a [ 1777.774559][T22593] RBP: 00007f1585dcf090 R08: 0000000000000000 R09: 0000000000000000 [ 1777.774567][T22593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1777.774576][T22593] R13: 00007f15851e6128 R14: 00007f15851e6090 R15: 00007ffd40259368 [ 1777.774593][T22593] [ 1777.982271][ C0] vkms_vblank_simulate: vblank timer overrun [ 1779.290725][T22658] blktrace: Concurrent blktraces are not allowed on ram7 [ 1779.376649][T22663] FAULT_INJECTION: forcing a failure. [ 1779.376649][T22663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1779.424546][T22663] CPU: 0 UID: 0 PID: 22663 Comm: syz.8.6629 Not tainted syzkaller #0 PREEMPT(full) [ 1779.424570][T22663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1779.424580][T22663] Call Trace: [ 1779.424586][T22663] [ 1779.424592][T22663] dump_stack_lvl+0x16c/0x1f0 [ 1779.424618][T22663] should_fail_ex+0x512/0x640 [ 1779.424643][T22663] strncpy_from_user+0x3b/0x2e0 [ 1779.424665][T22663] getname_flags.part.0+0x8f/0x550 [ 1779.424690][T22663] getname_flags+0x93/0xf0 [ 1779.424707][T22663] do_sys_openat2+0xb8/0x1d0 [ 1779.424728][T22663] ? __pfx_do_sys_openat2+0x10/0x10 [ 1779.424748][T22663] ? rcu_is_watching+0x12/0xc0 [ 1779.424770][T22663] __x64_sys_openat+0x174/0x210 [ 1779.424783][T22663] ? __pfx___x64_sys_openat+0x10/0x10 [ 1779.424798][T22663] ? syscall_user_dispatch+0x78/0x140 [ 1779.424824][T22663] do_syscall_64+0xcd/0x4c0 [ 1779.424847][T22663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1779.424862][T22663] RIP: 0033:0x7f1584f8eec9 [ 1779.424874][T22663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1779.424888][T22663] RSP: 002b:00007f1585df0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1779.424902][T22663] RAX: ffffffffffffffda RBX: 00007f15851e5fa0 RCX: 00007f1584f8eec9 [ 1779.424911][T22663] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1779.424921][T22663] RBP: 00007f1585011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1779.424929][T22663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1779.424938][T22663] R13: 00007f15851e6038 R14: 00007f15851e5fa0 R15: 00007ffd40259368 [ 1779.424956][T22663] [ 1779.589356][ C0] vkms_vblank_simulate: vblank timer overrun [ 1781.028721][T22687] FAULT_INJECTION: forcing a failure. [ 1781.028721][T22687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1781.078373][T22687] CPU: 0 UID: 0 PID: 22687 Comm: syz.8.6634 Not tainted syzkaller #0 PREEMPT(full) [ 1781.078398][T22687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1781.078408][T22687] Call Trace: [ 1781.078414][T22687] [ 1781.078420][T22687] dump_stack_lvl+0x16c/0x1f0 [ 1781.078446][T22687] should_fail_ex+0x512/0x640 [ 1781.078472][T22687] _copy_to_user+0x32/0xd0 [ 1781.078489][T22687] tomoyo_flush+0x161/0x520 [ 1781.078514][T22687] tomoyo_read_manager+0x320/0x550 [ 1781.078539][T22687] tomoyo_read_control+0x299/0x540 [ 1781.078555][T22687] ? __pfx_tomoyo_read+0x10/0x10 [ 1781.078576][T22687] vfs_read+0x1e4/0xcf0 [ 1781.078595][T22687] ? __pfx___mutex_lock+0x10/0x10 [ 1781.078617][T22687] ? __pfx_vfs_read+0x10/0x10 [ 1781.078638][T22687] ? __fget_files+0x20e/0x3c0 [ 1781.078659][T22687] ksys_read+0x12a/0x250 [ 1781.078675][T22687] ? __pfx_ksys_read+0x10/0x10 [ 1781.078697][T22687] do_syscall_64+0xcd/0x4c0 [ 1781.078719][T22687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1781.078735][T22687] RIP: 0033:0x7f1584f8eec9 [ 1781.078747][T22687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1781.078761][T22687] RSP: 002b:00007f1585df0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1781.078775][T22687] RAX: ffffffffffffffda RBX: 00007f15851e5fa0 RCX: 00007f1584f8eec9 [ 1781.078785][T22687] RDX: 000000000000b4d3 RSI: 0000000000000000 RDI: 0000000000000003 [ 1781.078794][T22687] RBP: 00007f1585df0090 R08: 0000000000000000 R09: 0000000000000000 [ 1781.078802][T22687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1781.078810][T22687] R13: 00007f15851e6038 R14: 00007f15851e5fa0 R15: 00007ffd40259368 [ 1781.078829][T22687] [ 1781.257538][ C0] vkms_vblank_simulate: vblank timer overrun [ 1781.926468][T22680] kexec: Could not allocate control_code_buffer [ 1782.195858][T22700] FAULT_INJECTION: forcing a failure. [ 1782.195858][T22700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1782.240311][T22700] CPU: 0 UID: 0 PID: 22700 Comm: syz.8.6639 Not tainted syzkaller #0 PREEMPT(full) [ 1782.240333][T22700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1782.240343][T22700] Call Trace: [ 1782.240349][T22700] [ 1782.240355][T22700] dump_stack_lvl+0x16c/0x1f0 [ 1782.240382][T22700] should_fail_ex+0x512/0x640 [ 1782.240406][T22700] strncpy_from_user+0x3b/0x2e0 [ 1782.240428][T22700] getname_flags.part.0+0x8f/0x550 [ 1782.240453][T22700] getname_flags+0x93/0xf0 [ 1782.240468][T22700] do_sys_openat2+0xb8/0x1d0 [ 1782.240490][T22700] ? __pfx_do_sys_openat2+0x10/0x10 [ 1782.240509][T22700] ? rcu_is_watching+0x12/0xc0 [ 1782.240531][T22700] __x64_sys_openat+0x174/0x210 [ 1782.240544][T22700] ? __pfx___x64_sys_openat+0x10/0x10 [ 1782.240558][T22700] ? syscall_user_dispatch+0x78/0x140 [ 1782.240585][T22700] do_syscall_64+0xcd/0x4c0 [ 1782.240607][T22700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1782.240622][T22700] RIP: 0033:0x7f1584f8eec9 [ 1782.240634][T22700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1782.240648][T22700] RSP: 002b:00007f1585df0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1782.240662][T22700] RAX: ffffffffffffffda RBX: 00007f15851e5fa0 RCX: 00007f1584f8eec9 [ 1782.240672][T22700] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1782.240681][T22700] RBP: 00007f1585011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1782.240690][T22700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1782.240699][T22700] R13: 00007f15851e6038 R14: 00007f15851e5fa0 R15: 00007ffd40259368 [ 1782.240717][T22700] [ 1782.593306][T22704] qrtr: Invalid version 0 [ 1782.652720][T32230] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1782.684485][T32230] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1782.704707][T32230] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1782.734614][T32230] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1782.747845][T32230] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1783.230844][T22701] chnl_net:caif_netlink_parms(): no params data found [ 1783.486888][T22701] bridge0: port 1(bridge_slave_0) entered blocking state [ 1783.518455][T22701] bridge0: port 1(bridge_slave_0) entered disabled state [ 1783.552030][T22701] bridge_slave_0: entered allmulticast mode [ 1783.570309][T22701] bridge_slave_0: entered promiscuous mode [ 1783.585402][T22701] bridge0: port 2(bridge_slave_1) entered blocking state [ 1783.603414][T22701] bridge0: port 2(bridge_slave_1) entered disabled state [ 1783.616020][T22701] bridge_slave_1: entered allmulticast mode [ 1783.632076][T22701] bridge_slave_1: entered promiscuous mode [ 1783.710143][T22701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1783.737791][T22701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1783.830760][T22701] team0: Port device team_slave_0 added [ 1783.845461][T22701] team0: Port device team_slave_1 added [ 1783.949658][T22701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1783.984390][T22701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1784.097118][T22701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1784.127168][T22701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1784.154487][T22701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1784.250702][T22701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1784.410948][T22701] hsr_slave_0: entered promiscuous mode [ 1784.432513][T22701] hsr_slave_1: entered promiscuous mode [ 1784.461357][T22701] debugfs: 'hsr0' already exists in 'hsr' [ 1784.489914][T22701] Cannot create hsr debugfs directory [ 1784.679783][T23018] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6646'. [ 1784.843733][T32230] Bluetooth: hci7: command tx timeout [ 1785.789124][T23121] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6648'. [ 1786.087133][T22701] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1786.164364][T22701] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1786.302768][T22701] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1786.355923][T22701] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1786.839576][T22701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1786.912418][T32230] Bluetooth: hci7: command tx timeout [ 1786.948154][T22701] 8021q: adding VLAN 0 to HW filter on device team0 [ 1787.006848][ T2028] bridge0: port 1(bridge_slave_0) entered blocking state [ 1787.013956][ T2028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1787.079916][ T2028] bridge0: port 2(bridge_slave_1) entered blocking state [ 1787.087138][ T2028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1787.826700][T22701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1788.053576][T22701] veth0_vlan: entered promiscuous mode [ 1788.118516][T22701] veth1_vlan: entered promiscuous mode [ 1788.241476][T22701] veth0_macvtap: entered promiscuous mode [ 1788.276554][T22701] veth1_macvtap: entered promiscuous mode [ 1788.338319][T22701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1788.385629][T22701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1788.450219][ T2028] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.479425][ T2028] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.526880][ T2028] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.546553][ T2028] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1788.710318][ T2028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1788.755013][ T2028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1788.886790][T32229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1788.925711][T32229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1788.976004][T32230] Bluetooth: hci7: command tx timeout [ 1789.696293][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1789.702722][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1790.220180][T23270] FAULT_INJECTION: forcing a failure. [ 1790.220180][T23270] name failslab, interval 1, probability 0, space 0, times 0 [ 1790.232868][T23270] CPU: 0 UID: 0 PID: 23270 Comm: syz.0.6638 Not tainted syzkaller #0 PREEMPT(full) [ 1790.232888][T23270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1790.232898][T23270] Call Trace: [ 1790.232904][T23270] [ 1790.232910][T23270] dump_stack_lvl+0x16c/0x1f0 [ 1790.232937][T23270] should_fail_ex+0x512/0x640 [ 1790.232963][T23270] should_failslab+0xc2/0x120 [ 1790.232983][T23270] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1790.233001][T23270] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1790.233022][T23270] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1790.233044][T23270] idr_get_free+0x528/0xa30 [ 1790.233070][T23270] idr_alloc_u32+0x190/0x2f0 [ 1790.233091][T23270] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1790.233112][T23270] ? lock_acquire+0x179/0x350 [ 1790.233139][T23270] idr_alloc_cyclic+0x10b/0x230 [ 1790.233160][T23270] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 1790.233178][T23270] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1790.233206][T23270] map_create+0xae3/0x1f80 [ 1790.233232][T23270] ? __pfx_map_create+0x10/0x10 [ 1790.233250][T23270] ? __might_fault+0xe3/0x190 [ 1790.233267][T23270] ? __might_fault+0xe3/0x190 [ 1790.233282][T23270] ? __might_fault+0x13b/0x190 [ 1790.233305][T23270] __sys_bpf+0x44d2/0x4de0 [ 1790.233324][T23270] ? __pfx_futex_wake+0x10/0x10 [ 1790.233345][T23270] ? __pfx___sys_bpf+0x10/0x10 [ 1790.233366][T23270] ? ksys_write+0x190/0x250 [ 1790.233386][T23270] ? do_futex+0x122/0x350 [ 1790.233404][T23270] ? __pfx_do_futex+0x10/0x10 [ 1790.233428][T23270] ? fput+0x9b/0xd0 [ 1790.233448][T23270] ? xfd_validate_state+0x61/0x180 [ 1790.233467][T23270] ? __pfx_ksys_write+0x10/0x10 [ 1790.233487][T23270] __x64_sys_bpf+0x78/0xc0 [ 1790.233507][T23270] ? lockdep_hardirqs_on+0x7c/0x110 [ 1790.233527][T23270] do_syscall_64+0xcd/0x4c0 [ 1790.233550][T23270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.233564][T23270] RIP: 0033:0x7f54e9d8eec9 [ 1790.233577][T23270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1790.233591][T23270] RSP: 002b:00007f54e7ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1790.233605][T23270] RAX: ffffffffffffffda RBX: 00007f54e9fe6090 RCX: 00007f54e9d8eec9 [ 1790.233615][T23270] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 1790.233625][T23270] RBP: 00007f54e9e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1790.233634][T23270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1790.233642][T23270] R13: 00007f54e9fe6128 R14: 00007f54e9fe6090 R15: 00007ffd5cfd91e8 [ 1790.233661][T23270] [ 1791.048600][T32230] Bluetooth: hci7: command tx timeout [ 1793.262477][T23399] FAULT_INJECTION: forcing a failure. [ 1793.262477][T23399] name failslab, interval 1, probability 0, space 0, times 0 [ 1793.383511][T23399] CPU: 0 UID: 0 PID: 23399 Comm: syz.6.6670 Not tainted syzkaller #0 PREEMPT(full) [ 1793.383534][T23399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1793.383544][T23399] Call Trace: [ 1793.383550][T23399] [ 1793.383557][T23399] dump_stack_lvl+0x16c/0x1f0 [ 1793.383584][T23399] should_fail_ex+0x512/0x640 [ 1793.383606][T23399] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1793.383627][T23399] should_failslab+0xc2/0x120 [ 1793.383646][T23399] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1793.383663][T23399] ? alloc_empty_file+0x55/0x1e0 [ 1793.383686][T23399] alloc_empty_file+0x55/0x1e0 [ 1793.383707][T23399] path_openat+0xda/0x2cb0 [ 1793.383723][T23399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.383744][T23399] ? __pfx_path_openat+0x10/0x10 [ 1793.383766][T23399] do_filp_open+0x20b/0x470 [ 1793.383783][T23399] ? __pfx_do_filp_open+0x10/0x10 [ 1793.383813][T23399] ? alloc_fd+0x471/0x7d0 [ 1793.383843][T23399] do_sys_openat2+0x11b/0x1d0 [ 1793.383866][T23399] ? __pfx_do_sys_openat2+0x10/0x10 [ 1793.383887][T23399] ? rcu_is_watching+0x12/0xc0 [ 1793.383909][T23399] __x64_sys_openat+0x174/0x210 [ 1793.383922][T23399] ? __pfx___x64_sys_openat+0x10/0x10 [ 1793.383936][T23399] ? syscall_user_dispatch+0x78/0x140 [ 1793.383963][T23399] do_syscall_64+0xcd/0x4c0 [ 1793.383986][T23399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.384000][T23399] RIP: 0033:0x7f6d03d8eec9 [ 1793.384012][T23399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1793.384026][T23399] RSP: 002b:00007f6d01ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1793.384041][T23399] RAX: ffffffffffffffda RBX: 00007f6d03fe5fa0 RCX: 00007f6d03d8eec9 [ 1793.384051][T23399] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1793.384059][T23399] RBP: 00007f6d03e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1793.384068][T23399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1793.384076][T23399] R13: 00007f6d03fe6038 R14: 00007f6d03fe5fa0 R15: 00007ffe87c81fc8 [ 1793.384094][T23399] [ 1794.988514][T11457] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1794.997895][T11457] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1795.005824][T11457] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1795.014978][T11457] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1795.022724][T11457] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1795.225658][T23432] kexec: Could not allocate control_code_buffer [ 1796.292401][T23441] chnl_net:caif_netlink_parms(): no params data found [ 1796.502759][T23599] FAULT_INJECTION: forcing a failure. [ 1796.502759][T23599] name failslab, interval 1, probability 0, space 0, times 0 [ 1796.574654][T23606] FAULT_INJECTION: forcing a failure. [ 1796.574654][T23606] name failslab, interval 1, probability 0, space 0, times 0 [ 1796.641103][T23599] CPU: 0 UID: 0 PID: 23599 Comm: syz.6.6683 Not tainted syzkaller #0 PREEMPT(full) [ 1796.641126][T23599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1796.641136][T23599] Call Trace: [ 1796.641142][T23599] [ 1796.641148][T23599] dump_stack_lvl+0x16c/0x1f0 [ 1796.641175][T23599] should_fail_ex+0x512/0x640 [ 1796.641197][T23599] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1796.641217][T23599] should_failslab+0xc2/0x120 [ 1796.641238][T23599] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1796.641256][T23599] ? sock_alloc_inode+0x25/0x1c0 [ 1796.641274][T23599] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1796.641288][T23599] sock_alloc_inode+0x25/0x1c0 [ 1796.641302][T23599] alloc_inode+0x64/0x240 [ 1796.641323][T23599] sock_alloc+0x40/0x280 [ 1796.641337][T23599] __sock_create+0xc1/0x8d0 [ 1796.641357][T23599] __sys_socket+0x14d/0x260 [ 1796.641374][T23599] ? __pfx___sys_socket+0x10/0x10 [ 1796.641391][T23599] ? xfd_validate_state+0x61/0x180 [ 1796.641411][T23599] ? __task_pid_nr_ns+0x17c/0x500 [ 1796.641434][T23599] __x64_sys_socket+0x72/0xb0 [ 1796.641450][T23599] ? lockdep_hardirqs_on+0x7c/0x110 [ 1796.641471][T23599] do_syscall_64+0xcd/0x4c0 [ 1796.641493][T23599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.641514][T23599] RIP: 0033:0x7f6d03d8eec9 [ 1796.641527][T23599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1796.641542][T23599] RSP: 002b:00007f6d01fb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1796.641557][T23599] RAX: ffffffffffffffda RBX: 00007f6d03fe6180 RCX: 00007f6d03d8eec9 [ 1796.641567][T23599] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1796.641576][T23599] RBP: 00007f6d03e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1796.641585][T23599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1796.641593][T23599] R13: 00007f6d03fe6218 R14: 00007f6d03fe6180 R15: 00007ffe87c81fc8 [ 1796.641611][T23599] [ 1796.641620][T23599] socket: no more sockets [ 1796.894604][T23606] CPU: 0 UID: 0 PID: 23606 Comm: syz.8.6684 Not tainted syzkaller #0 PREEMPT(full) [ 1796.894626][T23606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1796.894635][T23606] Call Trace: [ 1796.894641][T23606] [ 1796.894647][T23606] dump_stack_lvl+0x16c/0x1f0 [ 1796.894673][T23606] should_fail_ex+0x512/0x640 [ 1796.894695][T23606] ? __kvmalloc_node_noprof+0x124/0x620 [ 1796.894713][T23606] should_failslab+0xc2/0x120 [ 1796.894732][T23606] __kvmalloc_node_noprof+0x137/0x620 [ 1796.894748][T23606] ? __pfx___mutex_lock+0x10/0x10 [ 1796.894768][T23606] ? traverse.part.0.constprop.0+0x392/0x640 [ 1796.894787][T23606] ? traverse.part.0.constprop.0+0x392/0x640 [ 1796.894801][T23606] traverse.part.0.constprop.0+0x392/0x640 [ 1796.894817][T23606] ? aa_file_perm+0x28f/0x12e0 [ 1796.894841][T23606] seq_read_iter+0x932/0x12c0 [ 1796.894860][T23606] ? find_held_lock+0x2b/0x80 [ 1796.894876][T23606] kernfs_fop_read_iter+0x46c/0x610 [ 1796.894891][T23606] ? copy_iovec_from_user+0x131/0x170 [ 1796.894907][T23606] do_iter_readv_writev+0x743/0x9e0 [ 1796.894925][T23606] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1796.894946][T23606] ? rw_verify_area+0xcf/0x6c0 [ 1796.894962][T23606] vfs_readv+0x4cb/0x8b0 [ 1796.894981][T23606] ? __pfx_vfs_readv+0x10/0x10 [ 1796.894996][T23606] ? find_held_lock+0x2b/0x80 [ 1796.895021][T23606] ? __fget_files+0x20e/0x3c0 [ 1796.895041][T23606] ? do_preadv+0x1a6/0x270 [ 1796.895055][T23606] do_preadv+0x1a6/0x270 [ 1796.895070][T23606] ? __pfx_do_preadv+0x10/0x10 [ 1796.895090][T23606] do_syscall_64+0xcd/0x4c0 [ 1796.895113][T23606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.895128][T23606] RIP: 0033:0x7f1584f8eec9 [ 1796.895140][T23606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1796.895154][T23606] RSP: 002b:00007f1585df0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1796.895168][T23606] RAX: ffffffffffffffda RBX: 00007f15851e5fa0 RCX: 00007f1584f8eec9 [ 1796.895178][T23606] RDX: 0000000000000007 RSI: 0000200000000080 RDI: 0000000000000003 [ 1796.895186][T23606] RBP: 00007f1585df0090 R08: 00000000000069bf R09: 0000000000000000 [ 1796.895195][T23606] R10: 0000000000000bbf R11: 0000000000000246 R12: 0000000000000001 [ 1796.895203][T23606] R13: 00007f15851e6038 R14: 00007f15851e5fa0 R15: 00007ffd40259368 [ 1796.895221][T23606] [ 1797.403070][T11457] Bluetooth: hci0: command 0x0406 tx timeout [ 1797.409123][T11457] Bluetooth: hci8: command tx timeout [ 1799.343236][T23441] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.350335][T23441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1799.405845][T23441] bridge_slave_0: entered allmulticast mode [ 1799.444296][T23441] bridge_slave_0: entered promiscuous mode [ 1799.485451][T32251] Bluetooth: hci8: command tx timeout [ 1799.497999][T23441] bridge0: port 2(bridge_slave_1) entered blocking state [ 1799.535554][T23441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1799.580121][T23441] bridge_slave_1: entered allmulticast mode [ 1799.609231][T23441] bridge_slave_1: entered promiscuous mode [ 1799.802475][T23576] kexec: Could not allocate control_code_buffer [ 1799.915590][T23441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1799.990254][T23441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1800.347307][T23441] team0: Port device team_slave_0 added [ 1800.382871][T23441] team0: Port device team_slave_1 added [ 1800.636224][T23441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1800.648297][T23818] block2mtd: parameter too long [ 1800.676605][T23441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1800.802125][T23441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1800.919065][T23441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1800.955565][T23441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1801.072050][T23441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1801.311125][ T30] audit: type=1800 audit(109711.611:38): pid=23859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6703" name="members" dev="configfs" ino=168408 res=0 errno=0 [ 1801.408646][T23441] hsr_slave_0: entered promiscuous mode [ 1801.458686][T23441] hsr_slave_1: entered promiscuous mode [ 1801.464400][ T30] audit: type=1800 audit(109711.701:39): pid=23881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6703" name="members" dev="configfs" ino=168415 res=0 errno=0 [ 1801.509376][T23441] debugfs: 'hsr0' already exists in 'hsr' [ 1801.533817][T23441] Cannot create hsr debugfs directory [ 1801.556755][T32251] Bluetooth: hci8: command tx timeout [ 1803.144123][T24030] FAULT_INJECTION: forcing a failure. [ 1803.144123][T24030] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1803.245396][T24030] CPU: 0 UID: 0 PID: 24030 Comm: syz.0.6701 Not tainted syzkaller #0 PREEMPT(full) [ 1803.245420][T24030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1803.245430][T24030] Call Trace: [ 1803.245436][T24030] [ 1803.245443][T24030] dump_stack_lvl+0x16c/0x1f0 [ 1803.245470][T24030] should_fail_ex+0x512/0x640 [ 1803.245496][T24030] should_fail_alloc_page+0xe7/0x130 [ 1803.245518][T24030] prepare_alloc_pages+0x3c2/0x610 [ 1803.245543][T24030] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1803.245566][T24030] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1803.245592][T24030] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1803.245612][T24030] ? mas_next_slot+0x12d3/0x21b0 [ 1803.245633][T24030] ? mas_find+0x156/0x6d0 [ 1803.245645][T24030] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1803.245666][T24030] ? policy_nodemask+0xea/0x4e0 [ 1803.245686][T24030] alloc_pages_mpol+0x1fb/0x550 [ 1803.245706][T24030] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1803.245726][T24030] ? __lock_acquire+0x62e/0x1ce0 [ 1803.245747][T24030] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1803.245770][T24030] vma_alloc_folio_noprof+0xed/0x1e0 [ 1803.245791][T24030] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1803.245817][T24030] do_pte_missing+0x2230/0x3ba0 [ 1803.245834][T24030] ? find_held_lock+0x2b/0x80 [ 1803.245862][T24030] __handle_mm_fault+0x152a/0x2a50 [ 1803.245883][T24030] ? __pfx___handle_mm_fault+0x10/0x10 [ 1803.245900][T24030] ? __pte_offset_map_lock+0x174/0x310 [ 1803.245921][T24030] ? find_held_lock+0x2b/0x80 [ 1803.245941][T24030] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 1803.245968][T24030] handle_mm_fault+0x589/0xd10 [ 1803.245986][T24030] __get_user_pages+0x551/0x34a0 [ 1803.246015][T24030] ? __pfx___get_user_pages+0x10/0x10 [ 1803.246044][T24030] populate_vma_page_range+0x267/0x3f0 [ 1803.246068][T24030] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1803.246089][T24030] ? __pfx_find_vma_intersection+0x10/0x10 [ 1803.246111][T24030] ? do_mmap+0x69c/0x1210 [ 1803.246133][T24030] __mm_populate+0x1d8/0x380 [ 1803.246147][T24030] ? __pfx___mm_populate+0x10/0x10 [ 1803.246161][T24030] ? up_write+0x1b2/0x520 [ 1803.246184][T24030] vm_mmap_pgoff+0x37f/0x470 [ 1803.246206][T24030] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1803.246224][T24030] ? rcu_is_watching+0x12/0xc0 [ 1803.246239][T24030] ? kfree+0x24f/0x4d0 [ 1803.246255][T24030] ? __x64_sys_futex+0x1e0/0x4c0 [ 1803.246273][T24030] ? __x64_sys_futex+0x1e9/0x4c0 [ 1803.246293][T24030] ksys_mmap_pgoff+0x7d/0x5c0 [ 1803.246311][T24030] ? xfd_validate_state+0x61/0x180 [ 1803.246332][T24030] ? __sys_setsockopt+0x140/0x1a0 [ 1803.246353][T24030] __x64_sys_mmap+0x125/0x190 [ 1803.246379][T24030] do_syscall_64+0xcd/0x4c0 [ 1803.246402][T24030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1803.246417][T24030] RIP: 0033:0x7f54e9d8eec9 [ 1803.246430][T24030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1803.246445][T24030] RSP: 002b:00007f54eab40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1803.246460][T24030] RAX: ffffffffffffffda RBX: 00007f54e9fe5fa0 RCX: 00007f54e9d8eec9 [ 1803.246470][T24030] RDX: 00008000000000df RSI: 0000000000000fff RDI: 0000000000000000 [ 1803.246479][T24030] RBP: 00007f54e9e11f91 R08: 0000000000000400 R09: 0000000000028000 [ 1803.246488][T24030] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1803.246497][T24030] R13: 00007f54e9fe6038 R14: 00007f54e9fe5fa0 R15: 00007ffd5cfd91e8 [ 1803.246517][T24030] [ 1803.585705][ C0] vkms_vblank_simulate: vblank timer overrun [ 1803.648202][T32251] Bluetooth: hci8: command tx timeout [ 1804.400246][T23441] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1804.459529][T23441] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1804.530986][T23441] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1804.576916][T23441] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1804.899173][T23441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1805.008157][T23441] 8021q: adding VLAN 0 to HW filter on device team0 [ 1805.043270][T24104] netlink: 342 bytes leftover after parsing attributes in process `syz.0.6710'. [ 1805.100550][T18911] bridge0: port 1(bridge_slave_0) entered blocking state [ 1805.107714][T18911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1805.178249][T18911] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.185389][T18911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1805.196702][T24109] netlink: 342 bytes leftover after parsing attributes in process `syz.0.6710'. [ 1805.640937][T24126] FAULT_INJECTION: forcing a failure. [ 1805.640937][T24126] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1805.752919][T24126] CPU: 0 UID: 0 PID: 24126 Comm: syz.6.6712 Not tainted syzkaller #0 PREEMPT(full) [ 1805.752943][T24126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1805.752953][T24126] Call Trace: [ 1805.752959][T24126] [ 1805.752965][T24126] dump_stack_lvl+0x16c/0x1f0 [ 1805.752993][T24126] should_fail_ex+0x512/0x640 [ 1805.753018][T24126] should_fail_alloc_page+0xe7/0x130 [ 1805.753040][T24126] prepare_alloc_pages+0x3c2/0x610 [ 1805.753064][T24126] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1805.753087][T24126] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1805.753113][T24126] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1805.753133][T24126] ? mas_next_slot+0x12d3/0x21b0 [ 1805.753155][T24126] ? mas_find+0x156/0x6d0 [ 1805.753166][T24126] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1805.753188][T24126] ? policy_nodemask+0xea/0x4e0 [ 1805.753208][T24126] alloc_pages_mpol+0x1fb/0x550 [ 1805.753228][T24126] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1805.753248][T24126] ? __lock_acquire+0x62e/0x1ce0 [ 1805.753269][T24126] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1805.753291][T24126] vma_alloc_folio_noprof+0xed/0x1e0 [ 1805.753313][T24126] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1805.753339][T24126] do_pte_missing+0x2230/0x3ba0 [ 1805.753355][T24126] ? find_held_lock+0x2b/0x80 [ 1805.753373][T24126] __handle_mm_fault+0x152a/0x2a50 [ 1805.753394][T24126] ? __pfx___handle_mm_fault+0x10/0x10 [ 1805.753410][T24126] ? __pte_offset_map_lock+0x174/0x310 [ 1805.753430][T24126] ? find_held_lock+0x2b/0x80 [ 1805.753450][T24126] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 1805.753476][T24126] handle_mm_fault+0x589/0xd10 [ 1805.753495][T24126] __get_user_pages+0x551/0x34a0 [ 1805.753523][T24126] ? __pfx___get_user_pages+0x10/0x10 [ 1805.753550][T24126] populate_vma_page_range+0x267/0x3f0 [ 1805.753573][T24126] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1805.753594][T24126] ? __pfx_find_vma_intersection+0x10/0x10 [ 1805.753623][T24126] ? do_mmap+0x69c/0x1210 [ 1805.753645][T24126] __mm_populate+0x1d8/0x380 [ 1805.753660][T24126] ? __pfx___mm_populate+0x10/0x10 [ 1805.753676][T24126] ? up_write+0x1b2/0x520 [ 1805.753698][T24126] vm_mmap_pgoff+0x37f/0x470 [ 1805.753722][T24126] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1805.753740][T24126] ? rcu_is_watching+0x12/0xc0 [ 1805.753755][T24126] ? kfree+0x24f/0x4d0 [ 1805.753771][T24126] ? __x64_sys_futex+0x1e0/0x4c0 [ 1805.753788][T24126] ? __x64_sys_futex+0x1e9/0x4c0 [ 1805.753808][T24126] ksys_mmap_pgoff+0x7d/0x5c0 [ 1805.753827][T24126] ? xfd_validate_state+0x61/0x180 [ 1805.753847][T24126] ? __sys_setsockopt+0x140/0x1a0 [ 1805.753870][T24126] __x64_sys_mmap+0x125/0x190 [ 1805.753894][T24126] do_syscall_64+0xcd/0x4c0 [ 1805.753917][T24126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1805.753933][T24126] RIP: 0033:0x7f6d03d8eec9 [ 1805.753947][T24126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1805.753961][T24126] RSP: 002b:00007f6d01ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1805.753976][T24126] RAX: ffffffffffffffda RBX: 00007f6d03fe5fa0 RCX: 00007f6d03d8eec9 [ 1805.753985][T24126] RDX: 00008000000000df RSI: 0000000000000fff RDI: 0000000000000000 [ 1805.753995][T24126] RBP: 00007f6d03e11f91 R08: 0000000000000400 R09: 0000000000028000 [ 1805.754004][T24126] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1805.754012][T24126] R13: 00007f6d03fe6038 R14: 00007f6d03fe5fa0 R15: 00007ffe87c81fc8 [ 1805.754032][T24126] [ 1806.092804][ C0] vkms_vblank_simulate: vblank timer overrun [ 1807.775934][T23441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1808.133427][T24157] kexec: Could not allocate control_code_buffer [ 1808.675367][T23441] veth0_vlan: entered promiscuous mode [ 1808.728701][T23441] veth1_vlan: entered promiscuous mode [ 1808.912072][T23441] veth0_macvtap: entered promiscuous mode [ 1808.964517][T23441] veth1_macvtap: entered promiscuous mode [ 1809.031536][T23441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1809.143936][T23441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1809.216481][T18858] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1809.244036][T18858] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1809.338589][T18858] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1809.381951][T18858] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1809.733412][T18858] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1809.758929][T18858] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1809.876374][T18858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1809.948459][T18858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1810.235047][T24279] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1810.357640][T24284] netlink: 190 bytes leftover after parsing attributes in process `syz.0.6722'. [ 1811.769792][T24315] FAULT_INJECTION: forcing a failure. [ 1811.769792][T24315] name failslab, interval 1, probability 0, space 0, times 0 [ 1811.782458][T24315] CPU: 0 UID: 0 PID: 24315 Comm: syz.6.6725 Not tainted syzkaller #0 PREEMPT(full) [ 1811.782480][T24315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1811.782490][T24315] Call Trace: [ 1811.782496][T24315] [ 1811.782503][T24315] dump_stack_lvl+0x16c/0x1f0 [ 1811.782530][T24315] should_fail_ex+0x512/0x640 [ 1811.782555][T24315] should_failslab+0xc2/0x120 [ 1811.782575][T24315] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1811.782594][T24315] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1811.782616][T24315] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1811.782638][T24315] idr_get_free+0x528/0xa30 [ 1811.782664][T24315] idr_alloc_u32+0x190/0x2f0 [ 1811.782685][T24315] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1811.782706][T24315] ? lock_acquire+0x179/0x350 [ 1811.782729][T24315] idr_alloc_cyclic+0x10b/0x230 [ 1811.782749][T24315] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 1811.782767][T24315] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1811.782793][T24315] map_create+0xae3/0x1f80 [ 1811.782819][T24315] ? __pfx_map_create+0x10/0x10 [ 1811.782837][T24315] ? __might_fault+0xe3/0x190 [ 1811.782853][T24315] ? __might_fault+0xe3/0x190 [ 1811.782873][T24315] ? __might_fault+0x13b/0x190 [ 1811.782897][T24315] __sys_bpf+0x44d2/0x4de0 [ 1811.782921][T24315] ? __pfx___sys_bpf+0x10/0x10 [ 1811.782943][T24315] ? ksys_write+0x190/0x250 [ 1811.782968][T24315] ? do_futex+0x122/0x350 [ 1811.782989][T24315] ? __pfx_do_futex+0x10/0x10 [ 1811.783013][T24315] ? fput+0x9b/0xd0 [ 1811.783033][T24315] ? xfd_validate_state+0x61/0x180 [ 1811.783053][T24315] ? __pfx_ksys_write+0x10/0x10 [ 1811.783079][T24315] __x64_sys_bpf+0x78/0xc0 [ 1811.783101][T24315] ? lockdep_hardirqs_on+0x7c/0x110 [ 1811.783122][T24315] do_syscall_64+0xcd/0x4c0 [ 1811.783146][T24315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1811.783161][T24315] RIP: 0033:0x7f6d03d8eec9 [ 1811.783174][T24315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1811.783188][T24315] RSP: 002b:00007f6d01fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1811.783203][T24315] RAX: ffffffffffffffda RBX: 00007f6d03fe6090 RCX: 00007f6d03d8eec9 [ 1811.783213][T24315] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 1811.783222][T24315] RBP: 00007f6d03e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1811.783231][T24315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1811.783240][T24315] R13: 00007f6d03fe6128 R14: 00007f6d03fe6090 R15: 00007ffe87c81fc8 [ 1811.783260][T24315] [ 1814.589884][T24369] kexec: Could not allocate control_code_buffer [ 1815.015592][T24389] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1816.404837][T24427] block2mtd: Using custom MTD label '' for dev [ 1816.444870][T24424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6746'. [ 1816.465938][T24427] block2mtd: error: cannot open device [ 1817.231256][T32230] Bluetooth: hci5: command 0x0406 tx timeout [ 1817.657835][T24450] netlink: zone id is out of range [ 1817.676957][T24450] netlink: del zone limit has 4 unknown bytes [ 1818.067827][T24455] random: crng reseeded on system resumption [ 1818.361963][T24482] block2mtd: parameter too long [ 1819.956500][T24531] netlink: 186 bytes leftover after parsing attributes in process `syz.8.6756'. [ 1820.025730][T24531] netlink: 186 bytes leftover after parsing attributes in process `syz.8.6756'. [ 1820.247567][T24558] netlink: 268 bytes leftover after parsing attributes in process `syz.8.6756'. [ 1820.958311][T24590] FAULT_INJECTION: forcing a failure. [ 1820.958311][T24590] name failslab, interval 1, probability 0, space 0, times 0 [ 1820.988023][T24590] CPU: 0 UID: 0 PID: 24590 Comm: syz.0.6772 Not tainted syzkaller #0 PREEMPT(full) [ 1820.988045][T24590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1820.988055][T24590] Call Trace: [ 1820.988061][T24590] [ 1820.988067][T24590] dump_stack_lvl+0x16c/0x1f0 [ 1820.988095][T24590] should_fail_ex+0x512/0x640 [ 1820.988117][T24590] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1820.988138][T24590] should_failslab+0xc2/0x120 [ 1820.988163][T24590] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1820.988183][T24590] ? sock_alloc_inode+0x25/0x1c0 [ 1820.988201][T24590] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1820.988216][T24590] sock_alloc_inode+0x25/0x1c0 [ 1820.988231][T24590] alloc_inode+0x64/0x240 [ 1820.988252][T24590] sock_alloc+0x40/0x280 [ 1820.988266][T24590] __sock_create+0xc1/0x8d0 [ 1820.988286][T24590] __sys_socket+0x14d/0x260 [ 1820.988303][T24590] ? __pfx___sys_socket+0x10/0x10 [ 1820.988320][T24590] ? xfd_validate_state+0x61/0x180 [ 1820.988340][T24590] ? __task_pid_nr_ns+0x17c/0x500 [ 1820.988362][T24590] __x64_sys_socket+0x72/0xb0 [ 1820.988378][T24590] ? lockdep_hardirqs_on+0x7c/0x110 [ 1820.988398][T24590] do_syscall_64+0xcd/0x4c0 [ 1820.988421][T24590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1820.988435][T24590] RIP: 0033:0x7f54e9d8eec9 [ 1820.988448][T24590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1820.988463][T24590] RSP: 002b:00007f54e7ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1820.988478][T24590] RAX: ffffffffffffffda RBX: 00007f54e9fe6090 RCX: 00007f54e9d8eec9 [ 1820.988487][T24590] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1820.988496][T24590] RBP: 00007f54e9e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1820.988504][T24590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1820.988513][T24590] R13: 00007f54e9fe6128 R14: 00007f54e9fe6090 R15: 00007ffd5cfd91e8 [ 1820.988533][T24590] [ 1820.988541][T24590] socket: no more sockets [ 1821.590627][T24606] block nbd8: shutting down sockets [ 1821.976812][T24628] netlink: 342 bytes leftover after parsing attributes in process `syz.4.6780'. [ 1822.025781][T24628] netlink: 342 bytes leftover after parsing attributes in process `syz.4.6780'. [ 1822.986673][T24630] kexec: Could not allocate control_code_buffer [ 1823.942301][T24705] FAULT_INJECTION: forcing a failure. [ 1823.942301][T24705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1824.032511][T24705] CPU: 0 UID: 0 PID: 24705 Comm: syz.8.6791 Not tainted syzkaller #0 PREEMPT(full) [ 1824.032532][T24705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1824.032541][T24705] Call Trace: [ 1824.032546][T24705] [ 1824.032552][T24705] dump_stack_lvl+0x16c/0x1f0 [ 1824.032578][T24705] should_fail_ex+0x512/0x640 [ 1824.032603][T24705] _copy_to_user+0x32/0xd0 [ 1824.032620][T24705] tomoyo_flush+0x161/0x520 [ 1824.032645][T24705] tomoyo_set_string+0xaf/0xe0 [ 1824.032669][T24705] tomoyo_read_manager+0x1a1/0x550 [ 1824.032694][T24705] tomoyo_read_control+0x299/0x540 [ 1824.032710][T24705] ? __pfx_tomoyo_read+0x10/0x10 [ 1824.032731][T24705] vfs_read+0x1e4/0xcf0 [ 1824.032750][T24705] ? __pfx___mutex_lock+0x10/0x10 [ 1824.032772][T24705] ? __pfx_vfs_read+0x10/0x10 [ 1824.032792][T24705] ? __fget_files+0x20e/0x3c0 [ 1824.032814][T24705] ksys_read+0x12a/0x250 [ 1824.032829][T24705] ? __pfx_ksys_read+0x10/0x10 [ 1824.032851][T24705] do_syscall_64+0xcd/0x4c0 [ 1824.032873][T24705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1824.032888][T24705] RIP: 0033:0x7f1584f8eec9 [ 1824.032907][T24705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1824.032921][T24705] RSP: 002b:00007f1585df0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1824.032935][T24705] RAX: ffffffffffffffda RBX: 00007f15851e5fa0 RCX: 00007f1584f8eec9 [ 1824.032944][T24705] RDX: 000000000000b4d3 RSI: 0000000000000000 RDI: 0000000000000003 [ 1824.032953][T24705] RBP: 00007f1585df0090 R08: 0000000000000000 R09: 0000000000000000 [ 1824.032961][T24705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1824.032970][T24705] R13: 00007f15851e6038 R14: 00007f15851e5fa0 R15: 00007ffd40259368 [ 1824.032989][T24705] [ 1824.210721][ C0] vkms_vblank_simulate: vblank timer overrun [ 1824.255427][T24717] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6786'. [ 1825.309146][T24778] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 1827.607224][T24844] cougar: G6 mapped to space [ 1828.470939][T24860] netlink: 342 bytes leftover after parsing attributes in process `syz.0.6818'. [ 1828.513421][T24860] netlink: 342 bytes leftover after parsing attributes in process `syz.0.6818'. [ 1828.692011][T24853] FAULT_INJECTION: forcing a failure. [ 1828.692011][T24853] name failslab, interval 1, probability 0, space 0, times 0 [ 1828.704698][T24853] CPU: 0 UID: 0 PID: 24853 Comm: syz.8.6815 Not tainted syzkaller #0 PREEMPT(full) [ 1828.704718][T24853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1828.704728][T24853] Call Trace: [ 1828.704734][T24853] [ 1828.704740][T24853] dump_stack_lvl+0x16c/0x1f0 [ 1828.704767][T24853] should_fail_ex+0x512/0x640 [ 1828.704793][T24853] should_failslab+0xc2/0x120 [ 1828.704813][T24853] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1828.704831][T24853] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1828.704854][T24853] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1828.704875][T24853] idr_get_free+0x528/0xa30 [ 1828.704901][T24853] idr_alloc_u32+0x190/0x2f0 [ 1828.704922][T24853] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1828.704943][T24853] ? lock_acquire+0x179/0x350 [ 1828.704965][T24853] idr_alloc_cyclic+0x10b/0x230 [ 1828.704986][T24853] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 1828.705004][T24853] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1828.705030][T24853] map_create+0xae3/0x1f80 [ 1828.705056][T24853] ? __pfx_map_create+0x10/0x10 [ 1828.705074][T24853] ? __might_fault+0xe3/0x190 [ 1828.705090][T24853] ? __might_fault+0xe3/0x190 [ 1828.705104][T24853] ? __might_fault+0x13b/0x190 [ 1828.705127][T24853] __sys_bpf+0x44d2/0x4de0 [ 1828.705146][T24853] ? __pfx_futex_wake+0x10/0x10 [ 1828.705168][T24853] ? __pfx___sys_bpf+0x10/0x10 [ 1828.705189][T24853] ? ksys_write+0x190/0x250 [ 1828.705209][T24853] ? do_futex+0x122/0x350 [ 1828.705227][T24853] ? __pfx_do_futex+0x10/0x10 [ 1828.705252][T24853] ? fput+0x9b/0xd0 [ 1828.705272][T24853] ? xfd_validate_state+0x61/0x180 [ 1828.705292][T24853] ? __pfx_ksys_write+0x10/0x10 [ 1828.705311][T24853] __x64_sys_bpf+0x78/0xc0 [ 1828.705331][T24853] ? lockdep_hardirqs_on+0x7c/0x110 [ 1828.705352][T24853] do_syscall_64+0xcd/0x4c0 [ 1828.705375][T24853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1828.705397][T24853] RIP: 0033:0x7f1584f8eec9 [ 1828.705410][T24853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1828.705425][T24853] RSP: 002b:00007f1585dcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1828.705439][T24853] RAX: ffffffffffffffda RBX: 00007f15851e6090 RCX: 00007f1584f8eec9 [ 1828.705449][T24853] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 1828.705459][T24853] RBP: 00007f1585011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1828.705468][T24853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1828.705477][T24853] R13: 00007f15851e6128 R14: 00007f15851e6090 R15: 00007ffd40259368 [ 1828.705497][T24853] [ 1829.231415][T24875] FAULT_INJECTION: forcing a failure. [ 1829.231415][T24875] name failslab, interval 1, probability 0, space 0, times 0 [ 1829.245144][T24875] CPU: 0 UID: 0 PID: 24875 Comm: syz.8.6823 Not tainted syzkaller #0 PREEMPT(full) [ 1829.245165][T24875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1829.245174][T24875] Call Trace: [ 1829.245180][T24875] [ 1829.245187][T24875] dump_stack_lvl+0x16c/0x1f0 [ 1829.245214][T24875] should_fail_ex+0x512/0x640 [ 1829.245236][T24875] ? __kmalloc_noprof+0xbf/0x510 [ 1829.245255][T24875] ? inotify_handle_inode_event+0x1cf/0x6f0 [ 1829.245275][T24875] should_failslab+0xc2/0x120 [ 1829.245294][T24875] __kmalloc_noprof+0xd2/0x510 [ 1829.245310][T24875] ? stack_trace_save+0x8e/0xc0 [ 1829.245336][T24875] inotify_handle_inode_event+0x1cf/0x6f0 [ 1829.245360][T24875] ? __pfx_inotify_handle_inode_event+0x10/0x10 [ 1829.245380][T24875] fsnotify_handle_inode_event.isra.0+0x1e2/0x3f0 [ 1829.245400][T24875] fsnotify+0x13d6/0x1dc0 [ 1829.245420][T24875] ? __pfx_fsnotify+0x10/0x10 [ 1829.245444][T24875] __fsnotify_parent+0x7c7/0xc40 [ 1829.245464][T24875] ? __pfx___fsnotify_parent+0x10/0x10 [ 1829.245484][T24875] ? __pfx___might_resched+0x10/0x10 [ 1829.245502][T24875] ? __fput+0x30d/0xb70 [ 1829.245521][T24875] __fput+0x30d/0xb70 [ 1829.245544][T24875] task_work_run+0x14d/0x240 [ 1829.245567][T24875] ? __pfx_task_work_run+0x10/0x10 [ 1829.245588][T24875] ? __pfx___do_sys_close_range+0x10/0x10 [ 1829.245609][T24875] exit_to_user_mode_loop+0xeb/0x110 [ 1829.245631][T24875] do_syscall_64+0x41c/0x4c0 [ 1829.245656][T24875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1829.245670][T24875] RIP: 0033:0x7f1584f8eec9 [ 1829.245683][T24875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1829.245697][T24875] RSP: 002b:00007f1585df0038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1829.245711][T24875] RAX: 0000000000000000 RBX: 00007f15851e5fa0 RCX: 00007f1584f8eec9 [ 1829.245721][T24875] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 1829.245729][T24875] RBP: 00007f1585011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1829.245738][T24875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1829.245747][T24875] R13: 00007f15851e6038 R14: 00007f15851e5fa0 R15: 00007ffd40259368 [ 1829.245766][T24875] [ 1831.921014][T21984] Process accounting resumed [ 1831.939861][T21984] Process accounting resumed [ 1831.956581][T21984] Process accounting resumed [ 1831.968767][T21984] Process accounting resumed [ 1831.986387][T21984] Process accounting resumed [ 1831.997708][T21984] Process accounting resumed [ 1832.010149][T21984] Process accounting resumed [ 1832.028753][T21984] Process accounting resumed [ 1832.041025][T21984] Process accounting resumed [ 1832.054374][ T5954] Process accounting resumed [ 1832.061838][T21984] Process accounting resumed [ 1832.075621][T21984] Process accounting resumed [ 1832.091093][T21984] Process accounting resumed [ 1832.104152][T21984] Process accounting resumed [ 1832.119876][T21984] Process accounting resumed [ 1832.138977][T21984] Process accounting resumed [ 1832.149877][T21984] Process accounting resumed [ 1832.163797][T21984] Process accounting resumed [ 1832.176114][T21984] Process accounting resumed [ 1832.201603][T21984] Process accounting resumed [ 1832.215735][ T5954] Process accounting resumed [ 1832.229829][ T5038] Process accounting resumed [ 1832.237593][ T5038] Process accounting resumed [ 1832.253498][ T5038] Process accounting resumed [ 1832.263109][ T5038] Process accounting resumed [ 1832.280098][ T5038] Process accounting resumed [ 1832.295317][ T5038] Process accounting resumed [ 1832.313635][ T5038] Process accounting resumed [ 1832.327880][ T5038] Process accounting resumed [ 1832.342889][ T5038] Process accounting resumed [ 1832.353484][ T5954] Process accounting resumed [ 1832.364969][ T5038] Process accounting resumed [ 1832.433964][T24959] Process accounting resumed [ 1833.025243][T24986] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6838'. [ 1833.047548][T24933] kexec: Could not allocate control_code_buffer [ 1833.213787][T24985] FAULT_INJECTION: forcing a failure. [ 1833.213787][T24985] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1833.304675][T24985] CPU: 0 UID: 0 PID: 24985 Comm: syz.0.6839 Not tainted syzkaller #0 PREEMPT(full) [ 1833.304697][T24985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1833.304706][T24985] Call Trace: [ 1833.304712][T24985] [ 1833.304718][T24985] dump_stack_lvl+0x16c/0x1f0 [ 1833.304745][T24985] should_fail_ex+0x512/0x640 [ 1833.304769][T24985] get_futex_key+0x1d0/0x1560 [ 1833.304789][T24985] ? __pfx_get_futex_key+0x10/0x10 [ 1833.304807][T24985] ? __up_read+0x1f8/0x750 [ 1833.304832][T24985] futex_wake+0xea/0x530 [ 1833.304854][T24985] ? __pfx_futex_wake+0x10/0x10 [ 1833.304877][T24985] ? up_write+0x1b2/0x520 [ 1833.304900][T24985] do_futex+0x1e3/0x350 [ 1833.304918][T24985] ? __pfx_do_futex+0x10/0x10 [ 1833.304945][T24985] ? rcu_is_watching+0x12/0xc0 [ 1833.304960][T24985] ? kfree+0x24f/0x4d0 [ 1833.304976][T24985] __x64_sys_futex+0x1e0/0x4c0 [ 1833.304996][T24985] ? __pfx___x64_sys_futex+0x10/0x10 [ 1833.305016][T24985] ? syscall_user_dispatch+0x78/0x140 [ 1833.305044][T24985] do_syscall_64+0xcd/0x4c0 [ 1833.305067][T24985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1833.305082][T24985] RIP: 0033:0x7f54e9d8eec9 [ 1833.305098][T24985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1833.305112][T24985] RSP: 002b:00007f54eab400e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1833.305126][T24985] RAX: ffffffffffffffda RBX: 00007f54e9fe5fa8 RCX: 00007f54e9d8eec9 [ 1833.305136][T24985] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f54e9fe5fac [ 1833.305145][T24985] RBP: 00007f54e9fe5fa0 R08: 00007f54eab41000 R09: 0000000000000000 [ 1833.305154][T24985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1833.305163][T24985] R13: 00007f54e9fe6038 R14: 00007ffd5cfd9100 R15: 00007ffd5cfd91e8 [ 1833.305182][T24985] [ 1834.007754][T25008] netlink: 330 bytes leftover after parsing attributes in process `syz.8.6845'. [ 1834.160440][T25018] FAULT_INJECTION: forcing a failure. [ 1834.160440][T25018] name failslab, interval 1, probability 0, space 0, times 0 [ 1834.190613][T25017] netlink: zone id is out of range [ 1834.228455][T25017] netlink: del zone limit has 4 unknown bytes [ 1834.377926][T25018] CPU: 0 UID: 0 PID: 25018 Comm: syz.6.6844 Not tainted syzkaller #0 PREEMPT(full) [ 1834.377949][T25018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1834.377959][T25018] Call Trace: [ 1834.377964][T25018] [ 1834.377971][T25018] dump_stack_lvl+0x16c/0x1f0 [ 1834.377999][T25018] should_fail_ex+0x512/0x640 [ 1834.378021][T25018] ? __kmalloc_noprof+0xbf/0x510 [ 1834.378040][T25018] ? lsm_blob_alloc+0x68/0x90 [ 1834.378052][T25018] should_failslab+0xc2/0x120 [ 1834.378072][T25018] __kmalloc_noprof+0xd2/0x510 [ 1834.378093][T25018] lsm_blob_alloc+0x68/0x90 [ 1834.378106][T25018] security_sk_alloc+0x30/0x270 [ 1834.378123][T25018] sk_prot_alloc+0x1c7/0x2a0 [ 1834.378140][T25018] sk_alloc+0x36/0xc20 [ 1834.378160][T25018] __netlink_create+0x5e/0x2c0 [ 1834.378179][T25018] ? __wake_up+0x3f/0x60 [ 1834.378196][T25018] netlink_create+0x39e/0x620 [ 1834.378215][T25018] ? __pfx_genl_bind+0x10/0x10 [ 1834.378228][T25018] ? __pfx_genl_unbind+0x10/0x10 [ 1834.378240][T25018] ? __pfx_genl_release+0x10/0x10 [ 1834.378256][T25018] __sock_create+0x335/0x8d0 [ 1834.378277][T25018] __sys_socket+0x14d/0x260 [ 1834.378294][T25018] ? __pfx___sys_socket+0x10/0x10 [ 1834.378311][T25018] ? xfd_validate_state+0x61/0x180 [ 1834.378331][T25018] ? __task_pid_nr_ns+0x17c/0x500 [ 1834.378353][T25018] __x64_sys_socket+0x72/0xb0 [ 1834.378374][T25018] ? lockdep_hardirqs_on+0x7c/0x110 [ 1834.378395][T25018] do_syscall_64+0xcd/0x4c0 [ 1834.378420][T25018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1834.378434][T25018] RIP: 0033:0x7f6d03d8eec9 [ 1834.378447][T25018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1834.378461][T25018] RSP: 002b:00007f6d01fb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1834.378476][T25018] RAX: ffffffffffffffda RBX: 00007f6d03fe6180 RCX: 00007f6d03d8eec9 [ 1834.378486][T25018] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1834.378494][T25018] RBP: 00007f6d03e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1834.378503][T25018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1834.378511][T25018] R13: 00007f6d03fe6218 R14: 00007f6d03fe6180 R15: 00007ffe87c81fc8 [ 1834.378529][T25018] [ 1834.812393][T25036] FAULT_INJECTION: forcing a failure. [ 1834.812393][T25036] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1834.825935][T25036] CPU: 0 UID: 0 PID: 25036 Comm: syz.0.6851 Not tainted syzkaller #0 PREEMPT(full) [ 1834.825956][T25036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1834.825966][T25036] Call Trace: [ 1834.825972][T25036] [ 1834.825978][T25036] dump_stack_lvl+0x16c/0x1f0 [ 1834.826004][T25036] should_fail_ex+0x512/0x640 [ 1834.826030][T25036] should_fail_alloc_page+0xe7/0x130 [ 1834.826052][T25036] prepare_alloc_pages+0x3c2/0x610 [ 1834.826077][T25036] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1834.826099][T25036] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1834.826124][T25036] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1834.826144][T25036] ? mas_next_slot+0x12d3/0x21b0 [ 1834.826166][T25036] ? mas_find+0x156/0x6d0 [ 1834.826178][T25036] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1834.826199][T25036] ? policy_nodemask+0xea/0x4e0 [ 1834.826219][T25036] alloc_pages_mpol+0x1fb/0x550 [ 1834.826238][T25036] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1834.826259][T25036] ? __lock_acquire+0x62e/0x1ce0 [ 1834.826280][T25036] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1834.826301][T25036] vma_alloc_folio_noprof+0xed/0x1e0 [ 1834.826322][T25036] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1834.826349][T25036] do_pte_missing+0x2230/0x3ba0 [ 1834.826364][T25036] ? find_held_lock+0x2b/0x80 [ 1834.826383][T25036] __handle_mm_fault+0x152a/0x2a50 [ 1834.826404][T25036] ? __pfx___handle_mm_fault+0x10/0x10 [ 1834.826420][T25036] ? __pte_offset_map_lock+0x174/0x310 [ 1834.826440][T25036] ? find_held_lock+0x2b/0x80 [ 1834.826460][T25036] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 1834.826486][T25036] handle_mm_fault+0x589/0xd10 [ 1834.826504][T25036] __get_user_pages+0x551/0x34a0 [ 1834.826532][T25036] ? __pfx___get_user_pages+0x10/0x10 [ 1834.826558][T25036] populate_vma_page_range+0x267/0x3f0 [ 1834.826581][T25036] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1834.826603][T25036] ? __pfx_find_vma_intersection+0x10/0x10 [ 1834.826624][T25036] ? do_mmap+0x69c/0x1210 [ 1834.826645][T25036] __mm_populate+0x1d8/0x380 [ 1834.826659][T25036] ? __pfx___mm_populate+0x10/0x10 [ 1834.826674][T25036] ? up_write+0x1b2/0x520 [ 1834.826695][T25036] vm_mmap_pgoff+0x37f/0x470 [ 1834.826718][T25036] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1834.826736][T25036] ? rcu_is_watching+0x12/0xc0 [ 1834.826751][T25036] ? kfree+0x24f/0x4d0 [ 1834.826767][T25036] ? __x64_sys_futex+0x1e0/0x4c0 [ 1834.826784][T25036] ? __x64_sys_futex+0x1e9/0x4c0 [ 1834.826804][T25036] ksys_mmap_pgoff+0x7d/0x5c0 [ 1834.826824][T25036] ? syscall_user_dispatch+0x78/0x140 [ 1834.826855][T25036] __x64_sys_mmap+0x125/0x190 [ 1834.826880][T25036] do_syscall_64+0xcd/0x4c0 [ 1834.826905][T25036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1834.826920][T25036] RIP: 0033:0x7f54e9d8eec9 [ 1834.826933][T25036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1834.826948][T25036] RSP: 002b:00007f54eab40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1834.826962][T25036] RAX: ffffffffffffffda RBX: 00007f54e9fe5fa0 RCX: 00007f54e9d8eec9 [ 1834.826972][T25036] RDX: 00008000000000df RSI: 0000000000000fff RDI: 0000000000000000 [ 1834.826982][T25036] RBP: 00007f54e9e11f91 R08: 0000000000000400 R09: 0000000000028000 [ 1834.826992][T25036] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1834.827001][T25036] R13: 00007f54e9fe6038 R14: 00007f54e9fe5fa0 R15: 00007ffd5cfd91e8 [ 1834.827020][T25036] [ 1835.727575][T25049] can: request_module (can-proto-0) failed. [ 1836.204464][T25094] netlink: 13 bytes leftover after parsing attributes in process `syz.4.6863'. [ 1836.257655][T25097] random: crng reseeded on system resumption [ 1839.436075][T25154] netlink: 186 bytes leftover after parsing attributes in process `syz.8.6869'. [ 1839.814246][T25165] netlink: 186 bytes leftover after parsing attributes in process `syz.8.6869'. [ 1840.818531][T25154] netlink: 268 bytes leftover after parsing attributes in process `syz.8.6869'. [ 1841.255094][T25183] netlink: 342 bytes leftover after parsing attributes in process `syz.6.6873'. [ 1841.320902][T25183] netlink: 342 bytes leftover after parsing attributes in process `syz.6.6873'. [ 1841.695110][T25209] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6878'. [ 1842.719156][T25241] FAULT_INJECTION: forcing a failure. [ 1842.719156][T25241] name failslab, interval 1, probability 0, space 0, times 0 [ 1842.840332][T25241] CPU: 0 UID: 0 PID: 25241 Comm: syz.6.6879 Not tainted syzkaller #0 PREEMPT(full) [ 1842.840353][T25241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1842.840362][T25241] Call Trace: [ 1842.840368][T25241] [ 1842.840374][T25241] dump_stack_lvl+0x16c/0x1f0 [ 1842.840400][T25241] should_fail_ex+0x512/0x640 [ 1842.840422][T25241] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 1842.840442][T25241] should_failslab+0xc2/0x120 [ 1842.840460][T25241] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 1842.840477][T25241] ? __alloc_skb+0x2b2/0x380 [ 1842.840500][T25241] __alloc_skb+0x2b2/0x380 [ 1842.840519][T25241] ? __pfx___alloc_skb+0x10/0x10 [ 1842.840539][T25241] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1842.840560][T25241] ? __lock_acquire+0xb97/0x1ce0 [ 1842.840581][T25241] netlink_alloc_large_skb+0x69/0x130 [ 1842.840604][T25241] netlink_sendmsg+0x6a1/0xdd0 [ 1842.840628][T25241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1842.840651][T25241] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1842.840670][T25241] ____sys_sendmsg+0xa98/0xc70 [ 1842.840687][T25241] ? copy_msghdr_from_user+0x10a/0x160 [ 1842.840707][T25241] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1842.840725][T25241] ? __pfx__kstrtoull+0x10/0x10 [ 1842.840752][T25241] ___sys_sendmsg+0x134/0x1d0 [ 1842.840773][T25241] ? __pfx____sys_sendmsg+0x10/0x10 [ 1842.840802][T25241] ? find_held_lock+0x2b/0x80 [ 1842.840827][T25241] __sys_sendmmsg+0x200/0x420 [ 1842.840850][T25241] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1842.840876][T25241] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1842.840905][T25241] ? fput+0x9b/0xd0 [ 1842.840924][T25241] ? ksys_write+0x1ac/0x250 [ 1842.840940][T25241] ? __pfx_ksys_write+0x10/0x10 [ 1842.840959][T25241] __x64_sys_sendmmsg+0x9c/0x100 [ 1842.840979][T25241] ? lockdep_hardirqs_on+0x7c/0x110 [ 1842.840999][T25241] do_syscall_64+0xcd/0x4c0 [ 1842.841028][T25241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1842.841043][T25241] RIP: 0033:0x7f6d03d8eec9 [ 1842.841055][T25241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1842.841069][T25241] RSP: 002b:00007f6d01fb4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1842.841083][T25241] RAX: ffffffffffffffda RBX: 00007f6d03fe6180 RCX: 00007f6d03d8eec9 [ 1842.841093][T25241] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1842.841101][T25241] RBP: 00007f6d01fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1842.841110][T25241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1842.841118][T25241] R13: 00007f6d03fe6218 R14: 00007f6d03fe6180 R15: 00007ffe87c81fc8 [ 1842.841136][T25241] [ 1843.448203][T25243] cougar: G6 mapped to space [ 1843.716419][T25252] FAULT_INJECTION: forcing a failure. [ 1843.716419][T25252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1843.762407][T25252] CPU: 0 UID: 0 PID: 25252 Comm: syz.4.6882 Not tainted syzkaller #0 PREEMPT(full) [ 1843.762429][T25252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1843.762439][T25252] Call Trace: [ 1843.762444][T25252] [ 1843.762450][T25252] dump_stack_lvl+0x16c/0x1f0 [ 1843.762476][T25252] should_fail_ex+0x512/0x640 [ 1843.762502][T25252] _copy_from_user+0x2e/0xd0 [ 1843.762519][T25252] generic_map_update_batch+0x3e9/0x610 [ 1843.762546][T25252] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1843.762566][T25252] ? __might_fault+0xe3/0x190 [ 1843.762582][T25252] ? __might_fault+0x13b/0x190 [ 1843.762599][T25252] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1843.762619][T25252] bpf_map_do_batch+0x5b4/0x680 [ 1843.762639][T25252] __sys_bpf+0x4cf9/0x4de0 [ 1843.762661][T25252] ? __pfx___sys_bpf+0x10/0x10 [ 1843.762680][T25252] ? vfs_write+0x15d/0x11d0 [ 1843.762698][T25252] ? __pfx_css_rstat_updated+0x10/0x10 [ 1843.762714][T25252] ? __pfx_vfs_write+0x10/0x10 [ 1843.762741][T25252] ? ksys_write+0x1ac/0x250 [ 1843.762757][T25252] ? __pfx_ksys_write+0x10/0x10 [ 1843.762776][T25252] __x64_sys_bpf+0x78/0xc0 [ 1843.762796][T25252] ? lockdep_hardirqs_on+0x7c/0x110 [ 1843.762817][T25252] do_syscall_64+0xcd/0x4c0 [ 1843.762839][T25252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1843.762853][T25252] RIP: 0033:0x7f499778eec9 [ 1843.762866][T25252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1843.762880][T25252] RSP: 002b:00007f4998617038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1843.762894][T25252] RAX: ffffffffffffffda RBX: 00007f49979e6090 RCX: 00007f499778eec9 [ 1843.762903][T25252] RDX: 0000000000000092 RSI: 0000200000000380 RDI: 000000000000001a [ 1843.762912][T25252] RBP: 00007f4998617090 R08: 0000000000000000 R09: 0000000000000000 [ 1843.762921][T25252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1843.762930][T25252] R13: 00007f49979e6128 R14: 00007f49979e6090 R15: 00007ffd6e470748 [ 1843.762948][T25252] [ 1844.094764][T25258] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6883'. [ 1844.230975][T25263] FAULT_INJECTION: forcing a failure. [ 1844.230975][T25263] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1844.319851][T25263] CPU: 0 UID: 0 PID: 25263 Comm: syz.0.6885 Not tainted syzkaller #0 PREEMPT(full) [ 1844.319880][T25263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1844.319889][T25263] Call Trace: [ 1844.319895][T25263] [ 1844.319901][T25263] dump_stack_lvl+0x16c/0x1f0 [ 1844.319926][T25263] should_fail_ex+0x512/0x640 [ 1844.319951][T25263] should_fail_alloc_page+0xe7/0x130 [ 1844.319971][T25263] prepare_alloc_pages+0x3c2/0x610 [ 1844.319992][T25263] ? __lock_acquire+0x62e/0x1ce0 [ 1844.320013][T25263] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1844.320035][T25263] ? lock_acquire+0x179/0x350 [ 1844.320053][T25263] ? find_held_lock+0x2b/0x80 [ 1844.320068][T25263] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1844.320088][T25263] ? __lock_acquire+0x62e/0x1ce0 [ 1844.320111][T25263] ? __lock_acquire+0xb97/0x1ce0 [ 1844.320127][T25263] ? _parse_integer_limit+0x17f/0x1d0 [ 1844.320149][T25263] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1844.320171][T25263] ? policy_nodemask+0xea/0x4e0 [ 1844.320190][T25263] alloc_pages_mpol+0x1fb/0x550 [ 1844.320209][T25263] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1844.320232][T25263] alloc_pages_noprof+0x131/0x390 [ 1844.320251][T25263] get_free_pages_noprof+0x10/0xb0 [ 1844.320269][T25263] vcs_write+0x11a/0xdb0 [ 1844.320290][T25263] ? get_pid_task+0xfc/0x250 [ 1844.320313][T25263] ? __pfx_vcs_write+0x10/0x10 [ 1844.320328][T25263] ? common_file_perm+0x1a9/0x340 [ 1844.320347][T25263] ? bpf_lsm_file_permission+0x9/0x10 [ 1844.320367][T25263] ? security_file_permission+0x71/0x210 [ 1844.320387][T25263] ? rw_verify_area+0xcf/0x6c0 [ 1844.320403][T25263] ? __pfx_vcs_write+0x10/0x10 [ 1844.320418][T25263] vfs_write+0x2a0/0x11d0 [ 1844.320438][T25263] ? __pfx_vfs_write+0x10/0x10 [ 1844.320452][T25263] ? find_held_lock+0x2b/0x80 [ 1844.320466][T25263] ? __fget_files+0x204/0x3c0 [ 1844.320485][T25263] ? __fget_files+0x20e/0x3c0 [ 1844.320498][T25263] ? __fget_files+0x1b0/0x3c0 [ 1844.320518][T25263] __x64_sys_pwrite64+0x1eb/0x250 [ 1844.320535][T25263] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 1844.320558][T25263] do_syscall_64+0xcd/0x4c0 [ 1844.320581][T25263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1844.320596][T25263] RIP: 0033:0x7f54e9d8eec9 [ 1844.320607][T25263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1844.320621][T25263] RSP: 002b:00007f54eab40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1844.320636][T25263] RAX: ffffffffffffffda RBX: 00007f54e9fe5fa0 RCX: 00007f54e9d8eec9 [ 1844.320645][T25263] RDX: 0000000000007b05 RSI: 0000200000000480 RDI: 0000000000000003 [ 1844.320654][T25263] RBP: 00007f54eab40090 R08: 0000000000000000 R09: 0000000000000000 [ 1844.320663][T25263] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 1844.320671][T25263] R13: 00007f54e9fe6038 R14: 00007f54e9fe5fa0 R15: 00007ffd5cfd91e8 [ 1844.320689][T25263] [ 1844.691860][T25277] netlink: zone id is out of range [ 1844.697029][T25277] netlink: del zone limit has 4 unknown bytes [ 1845.320195][T25300] block2mtd: parameter too long [ 1845.372122][T25293] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1845.812092][T17041] svc: failed to register nfsdv3 RPC service (errno 512). [ 1846.075674][T17041] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1846.200450][T25297] kexec: Could not allocate control_code_buffer [ 1846.233305][T25309] FAULT_INJECTION: forcing a failure. [ 1846.233305][T25309] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1846.279087][T25309] CPU: 0 UID: 0 PID: 25309 Comm: syz.8.6895 Not tainted syzkaller #0 PREEMPT(full) [ 1846.279110][T25309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1846.279119][T25309] Call Trace: [ 1846.279125][T25309] [ 1846.279131][T25309] dump_stack_lvl+0x16c/0x1f0 [ 1846.279158][T25309] should_fail_ex+0x512/0x640 [ 1846.279184][T25309] should_fail_alloc_page+0xe7/0x130 [ 1846.279205][T25309] prepare_alloc_pages+0x3c2/0x610 [ 1846.279230][T25309] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1846.279253][T25309] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1846.279278][T25309] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1846.279298][T25309] ? mas_next_slot+0x12d3/0x21b0 [ 1846.279320][T25309] ? mas_find+0x156/0x6d0 [ 1846.279331][T25309] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1846.279352][T25309] ? policy_nodemask+0xea/0x4e0 [ 1846.279376][T25309] alloc_pages_mpol+0x1fb/0x550 [ 1846.279395][T25309] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1846.279416][T25309] ? __lock_acquire+0x62e/0x1ce0 [ 1846.279437][T25309] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1846.279459][T25309] vma_alloc_folio_noprof+0xed/0x1e0 [ 1846.279480][T25309] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1846.279507][T25309] do_pte_missing+0x2230/0x3ba0 [ 1846.279522][T25309] ? find_held_lock+0x2b/0x80 [ 1846.279541][T25309] __handle_mm_fault+0x152a/0x2a50 [ 1846.279562][T25309] ? __pfx___handle_mm_fault+0x10/0x10 [ 1846.279578][T25309] ? __pte_offset_map_lock+0x174/0x310 [ 1846.279598][T25309] ? find_held_lock+0x2b/0x80 [ 1846.279618][T25309] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 1846.279644][T25309] handle_mm_fault+0x589/0xd10 [ 1846.279663][T25309] __get_user_pages+0x551/0x34a0 [ 1846.279691][T25309] ? __pfx___get_user_pages+0x10/0x10 [ 1846.279720][T25309] populate_vma_page_range+0x267/0x3f0 [ 1846.279744][T25309] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1846.279765][T25309] ? __pfx_find_vma_intersection+0x10/0x10 [ 1846.279786][T25309] ? do_mmap+0x69c/0x1210 [ 1846.279808][T25309] __mm_populate+0x1d8/0x380 [ 1846.279822][T25309] ? __pfx___mm_populate+0x10/0x10 [ 1846.279837][T25309] ? up_write+0x1b2/0x520 [ 1846.279858][T25309] vm_mmap_pgoff+0x37f/0x470 [ 1846.279881][T25309] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1846.279900][T25309] ? rcu_is_watching+0x12/0xc0 [ 1846.279914][T25309] ? kfree+0x24f/0x4d0 [ 1846.279930][T25309] ? __x64_sys_futex+0x1e0/0x4c0 [ 1846.279957][T25309] ? __x64_sys_futex+0x1e9/0x4c0 [ 1846.279979][T25309] ksys_mmap_pgoff+0x7d/0x5c0 [ 1846.280000][T25309] ? syscall_user_dispatch+0x78/0x140 [ 1846.280024][T25309] __x64_sys_mmap+0x125/0x190 [ 1846.280048][T25309] do_syscall_64+0xcd/0x4c0 [ 1846.280071][T25309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1846.280086][T25309] RIP: 0033:0x7f1584f8eec9 [ 1846.280099][T25309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1846.280113][T25309] RSP: 002b:00007f1585df0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1846.280128][T25309] RAX: ffffffffffffffda RBX: 00007f15851e5fa0 RCX: 00007f1584f8eec9 [ 1846.280138][T25309] RDX: 00008000000000df RSI: 0000000000000fff RDI: 0000000000000000 [ 1846.280147][T25309] RBP: 00007f1585011f91 R08: 0000000000000400 R09: 0000000000028000 [ 1846.280157][T25309] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1846.280166][T25309] R13: 00007f15851e6038 R14: 00007f15851e5fa0 R15: 00007ffd40259368 [ 1846.280186][T25309] [ 1846.609449][ C0] vkms_vblank_simulate: vblank timer overrun [ 1849.215679][T25429] netlink: 330 bytes leftover after parsing attributes in process `syz.8.6902'. [ 1849.904232][T25485] netlink: 342 bytes leftover after parsing attributes in process `syz.6.6905'. [ 1849.963934][T25486] netlink: 342 bytes leftover after parsing attributes in process `syz.6.6905'. [ 1850.488579][T25501] netlink: 268 bytes leftover after parsing attributes in process `syz.0.6910'. [ 1850.824333][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1850.835311][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.728871][T25615] FAULT_INJECTION: forcing a failure. [ 1854.728871][T25615] name failslab, interval 1, probability 0, space 0, times 0 [ 1854.745016][T25615] CPU: 0 UID: 0 PID: 25615 Comm: syz.6.6921 Not tainted syzkaller #0 PREEMPT(full) [ 1854.745037][T25615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1854.745046][T25615] Call Trace: [ 1854.745053][T25615] [ 1854.745059][T25615] dump_stack_lvl+0x16c/0x1f0 [ 1854.745086][T25615] should_fail_ex+0x512/0x640 [ 1854.745108][T25615] ? __kmalloc_noprof+0xbf/0x510 [ 1854.745127][T25615] ? __register_sysctl_table+0xb3/0x1900 [ 1854.745148][T25615] should_failslab+0xc2/0x120 [ 1854.745174][T25615] __kmalloc_noprof+0xd2/0x510 [ 1854.745196][T25615] __register_sysctl_table+0xb3/0x1900 [ 1854.745217][T25615] ? is_module_address+0x5f/0xf0 [ 1854.745242][T25615] ? __pfx___register_sysctl_table+0x10/0x10 [ 1854.745262][T25615] ? is_module_address+0x69/0xf0 [ 1854.745280][T25615] ? register_net_sysctl_sz+0x228/0x3e0 [ 1854.745299][T25615] __addrconf_sysctl_register+0x1a2/0x360 [ 1854.745319][T25615] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 1854.745334][T25615] ? trace_kmalloc+0x2b/0xd0 [ 1854.745354][T25615] ? addrconf_init_net+0x1e9/0x8e0 [ 1854.745370][T25615] ? __asan_memcpy+0x3c/0x60 [ 1854.745387][T25615] addrconf_init_net+0x50c/0x8e0 [ 1854.745404][T25615] ? __pfx_addrconf_init_net+0x10/0x10 [ 1854.745420][T25615] ops_init+0x1e2/0x5f0 [ 1854.745444][T25615] setup_net+0x10f/0x380 [ 1854.745455][T25615] ? lockdep_init_map_type+0x5c/0x280 [ 1854.745475][T25615] ? __pfx_setup_net+0x10/0x10 [ 1854.745489][T25615] ? debug_mutex_init+0x37/0x70 [ 1854.745505][T25615] copy_net_ns+0x2a6/0x5f0 [ 1854.745521][T25615] create_new_namespaces+0x3ea/0xa90 [ 1854.745543][T25615] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1854.745561][T25615] ksys_unshare+0x45b/0xa40 [ 1854.745580][T25615] ? __pfx_ksys_unshare+0x10/0x10 [ 1854.745614][T25615] ? xfd_validate_state+0x61/0x180 [ 1854.745641][T25615] __x64_sys_unshare+0x31/0x40 [ 1854.745665][T25615] do_syscall_64+0xcd/0x4c0 [ 1854.745688][T25615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1854.745703][T25615] RIP: 0033:0x7f6d03d8eec9 [ 1854.745716][T25615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1854.745730][T25615] RSP: 002b:00007f6d01ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1854.745745][T25615] RAX: ffffffffffffffda RBX: 00007f6d03fe5fa0 RCX: 00007f6d03d8eec9 [ 1854.745755][T25615] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1854.745764][T25615] RBP: 00007f6d03e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1854.745774][T25615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1854.745784][T25615] R13: 00007f6d03fe6038 R14: 00007f6d03fe5fa0 R15: 00007ffe87c81fc8 [ 1854.745803][T25615] [ 1856.309151][T25648] FAULT_INJECTION: forcing a failure. [ 1856.309151][T25648] name failslab, interval 1, probability 0, space 0, times 0 [ 1856.325861][T25648] CPU: 0 UID: 0 PID: 25648 Comm: syz.6.6923 Not tainted syzkaller #0 PREEMPT(full) [ 1856.325883][T25648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1856.325893][T25648] Call Trace: [ 1856.325898][T25648] [ 1856.325904][T25648] dump_stack_lvl+0x16c/0x1f0 [ 1856.325931][T25648] should_fail_ex+0x512/0x640 [ 1856.325953][T25648] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1856.325973][T25648] should_failslab+0xc2/0x120 [ 1856.325992][T25648] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1856.326010][T25648] ? alloc_empty_file+0x55/0x1e0 [ 1856.326034][T25648] alloc_empty_file+0x55/0x1e0 [ 1856.326055][T25648] path_openat+0xda/0x2cb0 [ 1856.326071][T25648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.326092][T25648] ? __pfx_path_openat+0x10/0x10 [ 1856.326114][T25648] do_filp_open+0x20b/0x470 [ 1856.326131][T25648] ? __pfx_do_filp_open+0x10/0x10 [ 1856.326160][T25648] ? alloc_fd+0x471/0x7d0 [ 1856.326181][T25648] do_sys_openat2+0x11b/0x1d0 [ 1856.326202][T25648] ? __pfx_do_sys_openat2+0x10/0x10 [ 1856.326222][T25648] ? rcu_is_watching+0x12/0xc0 [ 1856.326243][T25648] __x64_sys_openat+0x174/0x210 [ 1856.326257][T25648] ? __pfx___x64_sys_openat+0x10/0x10 [ 1856.326271][T25648] ? syscall_user_dispatch+0x78/0x140 [ 1856.326298][T25648] do_syscall_64+0xcd/0x4c0 [ 1856.326320][T25648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.326335][T25648] RIP: 0033:0x7f6d03d8eec9 [ 1856.326347][T25648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1856.326361][T25648] RSP: 002b:00007f6d01ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1856.326376][T25648] RAX: ffffffffffffffda RBX: 00007f6d03fe5fa0 RCX: 00007f6d03d8eec9 [ 1856.326385][T25648] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1856.326394][T25648] RBP: 00007f6d03e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1856.326403][T25648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1856.326411][T25648] R13: 00007f6d03fe6038 R14: 00007f6d03fe5fa0 R15: 00007ffe87c81fc8 [ 1856.326430][T25648] [ 1856.978788][T25668] Invalid ELF header magic: != ELF [ 1857.984406][T25698] netlink: 330 bytes leftover after parsing attributes in process `syz.6.6929'. [ 1858.112547][T25721] snd_virmidi snd_virmidi.0: control 5:9:56511:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1859.277579][T25732] FAULT_INJECTION: forcing a failure. [ 1859.277579][T25732] name failslab, interval 1, probability 0, space 0, times 0 [ 1859.290255][T25732] CPU: 0 UID: 0 PID: 25732 Comm: syz.6.6932 Not tainted syzkaller #0 PREEMPT(full) [ 1859.290275][T25732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1859.290285][T25732] Call Trace: [ 1859.290290][T25732] [ 1859.290296][T25732] dump_stack_lvl+0x16c/0x1f0 [ 1859.290323][T25732] should_fail_ex+0x512/0x640 [ 1859.290349][T25732] should_failslab+0xc2/0x120 [ 1859.290369][T25732] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1859.290388][T25732] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1859.290414][T25732] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 1859.290443][T25732] idr_get_free+0x528/0xa30 [ 1859.290470][T25732] idr_alloc_u32+0x190/0x2f0 [ 1859.290491][T25732] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1859.290513][T25732] ? lock_acquire+0x179/0x350 [ 1859.290536][T25732] idr_alloc_cyclic+0x10b/0x230 [ 1859.290557][T25732] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 1859.290575][T25732] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1859.290601][T25732] map_create+0xae3/0x1f80 [ 1859.290627][T25732] ? __pfx_map_create+0x10/0x10 [ 1859.290645][T25732] ? __might_fault+0xe3/0x190 [ 1859.290661][T25732] ? __might_fault+0xe3/0x190 [ 1859.290675][T25732] ? __might_fault+0x13b/0x190 [ 1859.290698][T25732] __sys_bpf+0x44d2/0x4de0 [ 1859.290721][T25732] ? __pfx___sys_bpf+0x10/0x10 [ 1859.290742][T25732] ? ksys_write+0x190/0x250 [ 1859.290762][T25732] ? do_futex+0x122/0x350 [ 1859.290780][T25732] ? __pfx_do_futex+0x10/0x10 [ 1859.290805][T25732] ? fput+0x9b/0xd0 [ 1859.290825][T25732] ? xfd_validate_state+0x61/0x180 [ 1859.290844][T25732] ? __pfx_ksys_write+0x10/0x10 [ 1859.290864][T25732] __x64_sys_bpf+0x78/0xc0 [ 1859.290885][T25732] ? lockdep_hardirqs_on+0x7c/0x110 [ 1859.290905][T25732] do_syscall_64+0xcd/0x4c0 [ 1859.290928][T25732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1859.290943][T25732] RIP: 0033:0x7f6d03d8eec9 [ 1859.290956][T25732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1859.290971][T25732] RSP: 002b:00007f6d01fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1859.290985][T25732] RAX: ffffffffffffffda RBX: 00007f6d03fe6090 RCX: 00007f6d03d8eec9 [ 1859.290995][T25732] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 1859.291004][T25732] RBP: 00007f6d03e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1859.291013][T25732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1859.291021][T25732] R13: 00007f6d03fe6128 R14: 00007f6d03fe6090 R15: 00007ffe87c81fc8 [ 1859.291040][T25732] [ 1859.686115][T25736] FAULT_INJECTION: forcing a failure. [ 1859.686115][T25736] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1859.699603][T25736] CPU: 0 UID: 0 PID: 25736 Comm: syz.6.6933 Not tainted syzkaller #0 PREEMPT(full) [ 1859.699624][T25736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1859.699634][T25736] Call Trace: [ 1859.699640][T25736] [ 1859.699646][T25736] dump_stack_lvl+0x16c/0x1f0 [ 1859.699672][T25736] should_fail_ex+0x512/0x640 [ 1859.699698][T25736] should_fail_alloc_page+0xe7/0x130 [ 1859.699719][T25736] prepare_alloc_pages+0x3c2/0x610 [ 1859.699744][T25736] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1859.699766][T25736] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1859.699792][T25736] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1859.699811][T25736] ? mas_next_slot+0x12d3/0x21b0 [ 1859.699833][T25736] ? mas_find+0x156/0x6d0 [ 1859.699845][T25736] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1859.699866][T25736] ? policy_nodemask+0xea/0x4e0 [ 1859.699886][T25736] alloc_pages_mpol+0x1fb/0x550 [ 1859.699905][T25736] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1859.699926][T25736] ? __lock_acquire+0x62e/0x1ce0 [ 1859.699947][T25736] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1859.699969][T25736] vma_alloc_folio_noprof+0xed/0x1e0 [ 1859.699990][T25736] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1859.700017][T25736] do_pte_missing+0x2230/0x3ba0 [ 1859.700032][T25736] ? find_held_lock+0x2b/0x80 [ 1859.700055][T25736] __handle_mm_fault+0x152a/0x2a50 [ 1859.700077][T25736] ? __pfx___handle_mm_fault+0x10/0x10 [ 1859.700093][T25736] ? __pte_offset_map_lock+0x174/0x310 [ 1859.700114][T25736] ? find_held_lock+0x2b/0x80 [ 1859.700136][T25736] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 1859.700163][T25736] handle_mm_fault+0x589/0xd10 [ 1859.700182][T25736] __get_user_pages+0x551/0x34a0 [ 1859.700210][T25736] ? __pfx___get_user_pages+0x10/0x10 [ 1859.700236][T25736] populate_vma_page_range+0x267/0x3f0 [ 1859.700259][T25736] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1859.700281][T25736] ? __pfx_find_vma_intersection+0x10/0x10 [ 1859.700301][T25736] ? do_mmap+0x69c/0x1210 [ 1859.700323][T25736] __mm_populate+0x1d8/0x380 [ 1859.700337][T25736] ? __pfx___mm_populate+0x10/0x10 [ 1859.700352][T25736] ? up_write+0x1b2/0x520 [ 1859.700381][T25736] vm_mmap_pgoff+0x37f/0x470 [ 1859.700405][T25736] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1859.700424][T25736] ? rcu_is_watching+0x12/0xc0 [ 1859.700439][T25736] ? kfree+0x24f/0x4d0 [ 1859.700456][T25736] ? __x64_sys_futex+0x1e0/0x4c0 [ 1859.700474][T25736] ? __x64_sys_futex+0x1e9/0x4c0 [ 1859.700494][T25736] ksys_mmap_pgoff+0x7d/0x5c0 [ 1859.700513][T25736] ? syscall_user_dispatch+0x78/0x140 [ 1859.700537][T25736] __x64_sys_mmap+0x125/0x190 [ 1859.700561][T25736] do_syscall_64+0xcd/0x4c0 [ 1859.700584][T25736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1859.700599][T25736] RIP: 0033:0x7f6d03d8eec9 [ 1859.700612][T25736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1859.700627][T25736] RSP: 002b:00007f6d01ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1859.700641][T25736] RAX: ffffffffffffffda RBX: 00007f6d03fe5fa0 RCX: 00007f6d03d8eec9 [ 1859.700651][T25736] RDX: 00008000000000df RSI: 0000000000000fff RDI: 0000000000000000 [ 1859.700660][T25736] RBP: 00007f6d03e11f91 R08: 0000000000000400 R09: 0000000000028000 [ 1859.700669][T25736] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1859.700677][T25736] R13: 00007f6d03fe6038 R14: 00007f6d03fe5fa0 R15: 00007ffe87c81fc8 [ 1859.700696][T25736] [ 1860.283965][T25745] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6935'. [ 1860.324059][T25745] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 1860.975610][T25781] FAULT_INJECTION: forcing a failure. [ 1860.975610][T25781] name failslab, interval 1, probability 0, space 0, times 0 [ 1861.021150][T25781] CPU: 0 UID: 0 PID: 25781 Comm: syz.6.6938 Not tainted syzkaller #0 PREEMPT(full) [ 1861.021173][T25781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1861.021183][T25781] Call Trace: [ 1861.021189][T25781] [ 1861.021195][T25781] dump_stack_lvl+0x16c/0x1f0 [ 1861.021222][T25781] should_fail_ex+0x512/0x640 [ 1861.021243][T25781] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1861.021266][T25781] should_failslab+0xc2/0x120 [ 1861.021286][T25781] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1861.021302][T25781] ? kvm_dev_ioctl+0x13ce/0x1af0 [ 1861.021320][T25781] kvm_dev_ioctl+0x13ce/0x1af0 [ 1861.021340][T25781] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1861.021361][T25781] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1861.021377][T25781] __x64_sys_ioctl+0x18e/0x210 [ 1861.021401][T25781] do_syscall_64+0xcd/0x4c0 [ 1861.021423][T25781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1861.021438][T25781] RIP: 0033:0x7f6d03d8eec9 [ 1861.021451][T25781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1861.021465][T25781] RSP: 002b:00007f6d01fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1861.021480][T25781] RAX: ffffffffffffffda RBX: 00007f6d03fe6090 RCX: 00007f6d03d8eec9 [ 1861.021490][T25781] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 000000000000000a [ 1861.021498][T25781] RBP: 00007f6d03e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1861.021507][T25781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1861.021516][T25781] R13: 00007f6d03fe6128 R14: 00007f6d03fe6090 R15: 00007ffe87c81fc8 [ 1861.021535][T25781] [ 1861.835430][T25791] netlink: 330 bytes leftover after parsing attributes in process `syz.6.6940'. [ 1863.080470][T32251] Bluetooth: hci2: command 0x0406 tx timeout [ 1863.624600][T25807] FAULT_INJECTION: forcing a failure. [ 1863.624600][T25807] name failslab, interval 1, probability 0, space 0, times 0 [ 1863.637870][T25807] CPU: 0 UID: 0 PID: 25807 Comm: syz.6.6942 Not tainted syzkaller #0 PREEMPT(full) [ 1863.637892][T25807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1863.637902][T25807] Call Trace: [ 1863.637908][T25807] [ 1863.637913][T25807] dump_stack_lvl+0x16c/0x1f0 [ 1863.637939][T25807] should_fail_ex+0x512/0x640 [ 1863.637961][T25807] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1863.637981][T25807] should_failslab+0xc2/0x120 [ 1863.638001][T25807] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1863.638019][T25807] ? sock_alloc_inode+0x25/0x1c0 [ 1863.638037][T25807] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1863.638050][T25807] sock_alloc_inode+0x25/0x1c0 [ 1863.638064][T25807] alloc_inode+0x64/0x240 [ 1863.638084][T25807] sock_alloc+0x40/0x280 [ 1863.638098][T25807] __sock_create+0xc1/0x8d0 [ 1863.638117][T25807] __sys_socket+0x14d/0x260 [ 1863.638134][T25807] ? __pfx___sys_socket+0x10/0x10 [ 1863.638150][T25807] ? xfd_validate_state+0x61/0x180 [ 1863.638170][T25807] ? __task_pid_nr_ns+0x17c/0x500 [ 1863.638193][T25807] __x64_sys_socket+0x72/0xb0 [ 1863.638209][T25807] ? lockdep_hardirqs_on+0x7c/0x110 [ 1863.638229][T25807] do_syscall_64+0xcd/0x4c0 [ 1863.638252][T25807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1863.638266][T25807] RIP: 0033:0x7f6d03d8eec9 [ 1863.638279][T25807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1863.638293][T25807] RSP: 002b:00007f6d01fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1863.638314][T25807] RAX: ffffffffffffffda RBX: 00007f6d03fe6090 RCX: 00007f6d03d8eec9 [ 1863.638324][T25807] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1863.638333][T25807] RBP: 00007f6d03e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1863.638342][T25807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1863.638351][T25807] R13: 00007f6d03fe6128 R14: 00007f6d03fe6090 R15: 00007ffe87c81fc8 [ 1863.638370][T25807] [ 1863.638378][T25807] socket: no more sockets [ 1864.771024][T25816] netlink: 186 bytes leftover after parsing attributes in process `syz.6.6944'. [ 1864.838063][T25817] netlink: 186 bytes leftover after parsing attributes in process `syz.6.6944'. [ 1864.865554][T32251] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1864.876468][T32251] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1864.885889][T32251] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1864.895103][T32251] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1864.908113][T32251] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1865.069447][T25815] netlink: 268 bytes leftover after parsing attributes in process `syz.6.6944'. [ 1865.402664][T25818] chnl_net:caif_netlink_parms(): no params data found [ 1865.645621][T25818] bridge0: port 1(bridge_slave_0) entered blocking state [ 1865.678840][T25818] bridge0: port 1(bridge_slave_0) entered disabled state [ 1865.722599][T25818] bridge_slave_0: entered allmulticast mode [ 1865.752441][T25818] bridge_slave_0: entered promiscuous mode [ 1865.789530][T25818] bridge0: port 2(bridge_slave_1) entered blocking state [ 1865.812501][T25818] bridge0: port 2(bridge_slave_1) entered disabled state [ 1865.848571][T25818] bridge_slave_1: entered allmulticast mode [ 1865.889035][T25818] bridge_slave_1: entered promiscuous mode [ 1866.114803][T25818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1866.170956][T32230] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1866.182804][T32230] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1866.192499][T32230] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1866.201795][T32230] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1866.210615][T32230] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1866.240245][T25818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1866.410162][T25818] team0: Port device team_slave_0 added [ 1866.462337][T25818] team0: Port device team_slave_1 added [ 1866.567065][T25818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1866.585868][T25818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1866.644449][T25818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1866.679895][T25818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1866.698959][T25818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1866.750162][T25818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1866.836694][T25818] hsr_slave_0: entered promiscuous mode [ 1866.843056][T25818] hsr_slave_1: entered promiscuous mode [ 1866.852640][T25818] debugfs: 'hsr0' already exists in 'hsr' [ 1866.861892][T25818] Cannot create hsr debugfs directory [ 1866.976629][T32230] Bluetooth: hci9: command tx timeout [ 1867.045702][T26017] chnl_net:caif_netlink_parms(): no params data found [ 1867.198732][T26017] bridge0: port 1(bridge_slave_0) entered blocking state [ 1867.207726][T26017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1867.216560][T26017] bridge_slave_0: entered allmulticast mode [ 1867.223997][T26017] bridge_slave_0: entered promiscuous mode [ 1867.346645][T25818] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1867.412913][T26017] bridge0: port 2(bridge_slave_1) entered blocking state [ 1867.420081][T26017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1867.439000][T26017] bridge_slave_1: entered allmulticast mode [ 1867.463027][T26017] bridge_slave_1: entered promiscuous mode [ 1867.615803][T25818] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1867.681759][T26017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1867.712136][T26017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1867.765334][T25818] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1867.932115][T25818] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1867.978337][T26017] team0: Port device team_slave_0 added [ 1868.005418][T26017] team0: Port device team_slave_1 added [ 1868.115937][T26017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1868.167587][T26017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1868.243486][T26017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1868.254299][T32230] Bluetooth: hci10: command tx timeout [ 1868.284352][T26017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1868.305846][T26017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1868.386304][T26017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1868.516692][T26017] hsr_slave_0: entered promiscuous mode [ 1868.544334][T26017] hsr_slave_1: entered promiscuous mode [ 1868.559108][T26017] debugfs: 'hsr0' already exists in 'hsr' [ 1868.570699][T26017] Cannot create hsr debugfs directory [ 1868.748406][T25818] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1868.783750][T25818] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1868.818494][T25818] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1868.846845][T25818] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1868.902063][T26488] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6954'. [ 1869.046729][T32230] Bluetooth: hci9: command tx timeout [ 1869.942095][T25818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1870.208136][T25818] 8021q: adding VLAN 0 to HW filter on device team0 [ 1870.276744][T18910] bridge0: port 1(bridge_slave_0) entered blocking state [ 1870.283845][T18910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1870.316057][T32230] Bluetooth: hci10: command tx timeout [ 1870.362919][T18910] bridge0: port 2(bridge_slave_1) entered blocking state [ 1870.370053][T18910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1870.449189][T32251] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1870.462803][T32251] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1870.473918][T32251] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1870.496424][T32251] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1870.527927][T32251] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1870.880064][T26592] block2mtd: parameter too long [ 1871.115928][T32251] Bluetooth: hci9: command tx timeout [ 1871.367069][T26017] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1871.442762][T26017] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1871.479179][T26017] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1871.574537][T26017] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1871.651326][T25818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1871.884103][T26558] chnl_net:caif_netlink_parms(): no params data found [ 1871.955680][T25818] veth0_vlan: entered promiscuous mode [ 1872.192428][T25818] veth1_vlan: entered promiscuous mode [ 1872.281984][T26017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1872.368543][T26802] random: crng reseeded on system resumption [ 1872.387194][T32251] Bluetooth: hci10: command tx timeout [ 1872.472666][T26017] 8021q: adding VLAN 0 to HW filter on device team0 [ 1872.531810][T26558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1872.544098][T32251] Bluetooth: hci11: command tx timeout [ 1872.577288][T26558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1872.601063][T26558] bridge_slave_0: entered allmulticast mode [ 1872.632031][T26558] bridge_slave_0: entered promiscuous mode [ 1872.656150][T26558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1872.706761][T26558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1872.743975][T26558] bridge_slave_1: entered allmulticast mode [ 1872.756178][T26558] bridge_slave_1: entered promiscuous mode [ 1872.850364][T18883] bridge0: port 1(bridge_slave_0) entered blocking state [ 1872.857514][T18883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1872.902707][T18883] bridge0: port 2(bridge_slave_1) entered blocking state [ 1872.909846][T18883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1872.990765][T25818] veth0_macvtap: entered promiscuous mode [ 1873.056301][T26558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1873.102860][T25818] veth1_macvtap: entered promiscuous mode [ 1873.123596][T26558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1873.185738][T32251] Bluetooth: hci9: command tx timeout [ 1873.227475][T25818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1873.265637][T25818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1873.351788][T26558] team0: Port device team_slave_0 added [ 1873.364124][T18910] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.397318][T18910] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.449670][T26558] team0: Port device team_slave_1 added [ 1873.464777][T18910] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.571698][T18910] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1873.624847][T26558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1873.648245][T26558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1873.674128][ C0] vkms_vblank_simulate: vblank timer overrun [ 1873.719897][T26558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1873.743021][T26558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1873.757907][T26558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1873.800467][T26558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1873.865215][T26017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1874.060437][T26558] hsr_slave_0: entered promiscuous mode [ 1874.086842][T26558] hsr_slave_1: entered promiscuous mode [ 1874.095185][T26558] debugfs: 'hsr0' already exists in 'hsr' [ 1874.130103][T26558] Cannot create hsr debugfs directory [ 1874.221833][T18892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1874.263308][T18892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1874.374594][ T31] INFO: task syz-executor:6221 blocked for more than 143 seconds. [ 1874.382445][ T31] Not tainted syzkaller #0 [ 1874.404924][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1874.413606][ T31] task:syz-executor state:D stack:23224 pid:6221 tgid:6221 ppid:1 task_flags:0x400140 flags:0x00004004 [ 1874.454722][T32251] Bluetooth: hci10: command tx timeout [ 1874.500800][T18858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1874.526134][ T31] Call Trace: [ 1874.529449][ T31] [ 1874.532394][ T31] __schedule+0x1190/0x5de0 [ 1874.545266][T18858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1874.628118][T32251] Bluetooth: hci11: command tx timeout [ 1874.643036][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 1874.648026][ T31] ? __pfx___schedule+0x10/0x10 [ 1874.704548][ T31] ? find_held_lock+0x2b/0x80 [ 1874.709258][ T31] ? schedule+0x2d7/0x3a0 [ 1874.752875][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1874.758196][ T31] schedule+0xe7/0x3a0 [ 1874.804681][ T31] schedule_preempt_disabled+0x13/0x30 [ 1874.810183][ T31] __mutex_lock+0x81b/0x1060 [ 1874.835351][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 1874.840354][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1874.872436][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1874.877529][ T31] ? net_generic+0xea/0x2a0 [ 1874.911695][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1874.917011][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 1874.941642][ T31] nfsd_umount+0x48/0xe0 [ 1874.945947][ T31] deactivate_locked_super+0xbe/0x1a0 [ 1874.971819][ T31] deactivate_super+0xde/0x100 [ 1874.976914][ T31] cleanup_mnt+0x225/0x450 [ 1875.008296][ T31] task_work_run+0x14d/0x240 [ 1875.031527][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1875.036678][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 1875.061170][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 1875.066494][ T31] do_syscall_64+0x41c/0x4c0 [ 1875.089986][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1875.118437][ T31] RIP: 0033:0x7f62c5b901f7 [ 1875.128514][ T31] RSP: 002b:00007ffef8cf1238 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1875.163352][ T31] RAX: 0000000000000000 RBX: 00007f62c5c11d7d RCX: 00007f62c5b901f7 [ 1875.183253][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffef8cf12f0 [ 1875.200443][ T31] RBP: 00007ffef8cf12f0 R08: 0000000000000000 R09: 0000000000000000 [ 1875.225243][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffef8cf2380 [ 1875.255294][ T31] R13: 00007f62c5c11d7d R14: 00000000001a4c81 R15: 00007ffef8cf23c0 [ 1875.269941][ T31] [ 1875.290733][ T31] [ 1875.290733][ T31] Showing all locks held in the system: [ 1875.410248][ T31] 1 lock held by khungtaskd/31: [ 1875.451161][ T31] #0: ffffffff8e5c1420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1875.499689][ T31] 3 locks held by kworker/0:5/5954: [ 1875.504892][ T31] #0: ffff88801b880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1875.588245][ T31] #1: ffffc90004b8fd10 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1875.657848][ T31] #2: ffff888031b55240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1bb/0x2e80 [ 1875.727629][ T31] 2 locks held by syz-executor/6221: [ 1875.732939][ T31] #0: ffff8880530580e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1875.787678][ T31] #1: ffffffff8e9d9f48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1875.826913][ T31] 2 locks held by syz.3.6088/17041: [ 1875.832128][ T31] #0: ffffffff9042c250 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1875.901021][ T31] #1: ffffffff8e9d9f48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1875.955994][ T31] 2 locks held by syz-executor/18465: [ 1875.978013][ T31] #0: ffff8880255900e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1876.003110][ T31] #1: ffffffff8e9d9f48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1876.027409][ T31] 2 locks held by syz-executor/20363: [ 1876.032844][ T31] #0: ffff88807c3080e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1876.075599][ T31] #1: ffffffff8e9d9f48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1876.085207][ T31] 2 locks held by syz-executor/21313: [ 1876.101959][ T31] #0: ffff8880583820e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1876.134167][ T31] #1: ffffffff8e9d9f48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1876.165178][ T31] 3 locks held by kworker/0:0/21983: [ 1876.170476][ T31] #0: ffff88801b880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1876.192368][ T31] #1: ffffc90015467d10 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1876.212996][ T31] #2: ffffffff8e5cc9b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 1876.239556][ T31] 3 locks held by syz.1.6626/22648: [ 1876.249278][ T31] #0: ffffffff9042c250 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1876.274603][ T31] #1: ffff8880395e86d8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990 [ 1876.308646][ T31] #2: ffffffff8e9d9f48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xb6/0x1170 [ 1876.340622][ T31] 2 locks held by syz-executor/22701: [ 1876.358860][ T31] #0: ffff8880574bc0e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1876.384122][ T31] #1: ffffffff8e9d9f48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1876.393767][ T31] 2 locks held by syz-executor/23441: [ 1876.413913][ T31] #0: ffff88803bb180e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1876.448894][ T31] #1: ffffffff8e9d9f48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1876.483495][ T31] 4 locks held by syz.6.6871/25172: [ 1876.488733][ T31] #0: ffff8880662e4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 1876.512294][ T31] #1: ffff8880662e40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 1876.536500][ T31] #2: ffffffff905f13a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 1876.553886][ T31] #3: ffff88806ae6eb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 1876.584268][ T31] 3 locks held by syz-executor/26017: [ 1876.589651][ T31] #0: ffff88809b854dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 1876.622816][ T31] #1: ffff88809b8540b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 1876.632507][ T31] #2: ffffffff905f13a8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 1876.676826][ T31] 1 lock held by syz-executor/26558: [ 1876.682136][ T31] #0: ffffffff8e5cc9b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1876.693635][T32230] Bluetooth: hci11: command tx timeout [ 1876.712722][ T31] 4 locks held by dhcpcd-run-hook/27036: [ 1876.853426][ T31] [ 1876.855777][ T31] ============================================= [ 1876.855777][ T31] [ 1876.908498][ T31] NMI backtrace for cpu 0 [ 1876.908516][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1876.908533][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1876.908543][ T31] Call Trace: [ 1876.908548][ T31] [ 1876.908554][ T31] dump_stack_lvl+0x116/0x1f0 [ 1876.908580][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1876.908596][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 1876.908617][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1876.908639][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1876.908658][ T31] watchdog+0xf0e/0x1260 [ 1876.908682][ T31] ? __pfx_watchdog+0x10/0x10 [ 1876.908707][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1876.908729][ T31] ? __kthread_parkme+0x19e/0x250 [ 1876.908747][ T31] ? __pfx_watchdog+0x10/0x10 [ 1876.908766][ T31] kthread+0x3c5/0x780 [ 1876.908786][ T31] ? __pfx_kthread+0x10/0x10 [ 1876.908807][ T31] ? rcu_is_watching+0x12/0xc0 [ 1876.908821][ T31] ? __pfx_kthread+0x10/0x10 [ 1876.908841][ T31] ret_from_fork+0x56d/0x730 [ 1876.908862][ T31] ? __pfx_kthread+0x10/0x10 [ 1876.908881][ T31] ret_from_fork_asm+0x1a/0x30 [ 1876.908906][ T31] [ 1876.908918][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1877.030977][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1877.040068][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1877.050116][ T31] Call Trace: [ 1877.053384][ T31] [ 1877.056335][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1877.060942][ T31] vpanic+0x6e8/0x7a0 [ 1877.064913][ T31] ? __pfx_vpanic+0x10/0x10 [ 1877.069427][ T31] panic+0xca/0xd0 [ 1877.073135][ T31] ? __pfx_panic+0x10/0x10 [ 1877.077533][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 1877.083234][ T31] ? irq_work_queue+0xce/0x100 [ 1877.087984][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1877.093953][ T31] ? __wake_up_klogd.part.0+0x99/0xf0 [ 1877.099314][ T31] ? watchdog+0xd78/0x1260 [ 1877.103725][ T31] ? watchdog+0xd6b/0x1260 [ 1877.108130][ T31] watchdog+0xd89/0x1260 [ 1877.112362][ T31] ? __pfx_watchdog+0x10/0x10 [ 1877.117022][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1877.122208][ T31] ? __kthread_parkme+0x19e/0x250 [ 1877.127217][ T31] ? __pfx_watchdog+0x10/0x10 [ 1877.131882][ T31] kthread+0x3c5/0x780 [ 1877.135937][ T31] ? __pfx_kthread+0x10/0x10 [ 1877.140513][ T31] ? rcu_is_watching+0x12/0xc0 [ 1877.145257][ T31] ? __pfx_kthread+0x10/0x10 [ 1877.149836][ T31] ret_from_fork+0x56d/0x730 [ 1877.154414][ T31] ? __pfx_kthread+0x10/0x10 [ 1877.158989][ T31] ret_from_fork_asm+0x1a/0x30 [ 1877.163742][ T31] [ 1877.166805][ T31] Kernel Offset: disabled [ 1877.171111][ T31] Rebooting in 86400 seconds..