last executing test programs: 2m56.023700569s ago: executing program 1 (id=1299): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) futex$auto(0x0, 0x0, 0x2948, 0x0, 0x0, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) close_range$auto(0x2, 0x8, 0x0) eventfd$auto(0x3) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/mtu\x00', 0x10b042, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) socketpair$auto(0x809, 0x2, 0x9, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x6) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0xfc, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0xe8, 0x3, 0x0, 0x1, [@typed={0x8, 0xc2, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x4, 0x2a}, @typed={0x4, 0x11}, @typed={0x8, 0x2e, 0x0, 0x0, @fd=r2}, @generic="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c", @nested={0x2c, 0x5, 0x0, 0x1, [@nested={0x28, 0x63, 0x0, 0x1, [@nested={0x24, 0x9e, 0x0, 0x1, [@typed={0x8, 0x5a, 0x0, 0x0, @str='/}!\x00'}, @nested={0x10, 0x86, 0x0, 0x1, [@typed={0xc, 0xd, 0x0, 0x0, @u64=0x6}]}, @nested={0x8, 0xc9, 0x0, 0x1, [@typed={0x4, 0x1b, 0x0, 0x0, @binary}]}]}]}]}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x2404c810) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) writev$auto(0x0, 0x0, 0xb) quotactl$auto(0x0, 0xfffffffffffffffc, 0x7, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(0x3, 0x80047456, 0x38) 2m54.437853526s ago: executing program 1 (id=1302): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) ioctl$auto(r1, 0x80845663, r1) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x490, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_OFFLOAD={0x269, 0x9, 0x0, 0x1, [@generic="49676b779b2a77a76a060bcd388839c7617a6c0e91505ef4d22e19af93c01df84cf62f00fdf276ac90aa6a448119459bacf16021823ca082454feaf2980e3d4280983336206e0e2bcd304c93c4349168eb968d0f7bdb80a4ac8726e67ac74f5aa17c75abe2e53abed76b3df15090dd50617324cd40d35d04a56ea2cf92b49c748c7e870c12b8835b0c495387e462b728f45daaa02dd2ee3fd577a5796e864e6782b77adc00f13bf3c7d9aad4ecbe8c348b9ed0", @typed={0x16, 0x50, 0x0, 0x0, @str='/dev/input/event1\x00'}, @generic="a62f85abfccfb6b3610b017dbe9f76ac1ff1968b7e9f181348393c747a9fd06325fb950abba24db680a3c0823bc0c7cfd50a2c502a43861176e4e6718dc77fb2b7713b322767d55a85c18d7999a7982e84ae3023ea05e317f8f6742a24f851d6267668adcfab330438f4be7100d2d5a347548f2e5eee2ed1bb5f263d45cc51f008ae913029bbe7f7ee95d6369e3842262ce7ecba99656007d0a4b396d20624fca65a3e773ffdba6236a337b88ba86ea430b1fd2d09d6edb6e4849ceef933d721fffe5f8e51b9531e0cdfe12ae6cc3de9a63841aee0904c05cd9005c0a5c7e17e324798c2c401", @generic="d66561711abf9ea0da97e1ab7327e6f61b786c335d43254a5255802396c0308963a4a84c80ca1d66bcd13f74f54702835494b330e0ca6448d84216c7419810673a33efd44af8b6133ae64f33bf312909fa5a04f78cb135e45553f8ea12384db4b9777a2b791be159d44a0b3f8466e1a74d91adba10728326e55225e157128f7e1522acccc77bae19cd76133c2a3391fd2405f52f12a5bf12a602f92bf7789b3dc8a85afa713447c23a79cfedbde4e4a2a1df3ea2"]}, @MACSEC_ATTR_OFFLOAD={0x205, 0x9, 0x0, 0x1, [@nested={0xc, 0x8b, 0x0, 0x1, [@typed={0x6, 0xd6, 0x0, 0x0, @str=')\x00'}]}, @generic="984d5707fc7f308e4f1bb513c28243af784351615c4e5f795e1dedacf7d10672fb74558096367c9b4db543bcfed7f41fe8ab7cc4b41178e2d71cfda4d85eb1021f9dc3b8c4467cec90019d16824ff8c322f32875ccfef02230599283a0c2c81b93fcdaaab9ab48f25ed10e9d5387aebabb40b01f5fcfbceb6ab14beaf20602c0f907acefb53e86f9d4f93c82e6640b27c61f53c6975044ba63fd60c211df7f46dbf638c8eca9ca", @generic="23bd765ba00bbec253b36d6a5f3a40f73385feb2a0431994e48ca0d75c7b25254acc4ea272b2ea173d4e341ca30db368ebca048a45c02d55d68cbbd90d53a73c6035751f68239d14e2dd4a7c76113454ad29d7ef6d4239bbe270a9acdf01a73abf6beeb93f4f", @generic="4a72bbb8a567f6c4302e05294febc489e8ae3320eea30a2eaaba56181f87d53be52fbd874fdd2a3bf9913b2e1bc67ee31ff43c23f8bb1c805cfb3017960569b7d337125d0ad395fca95ee845533edb90fe0bf1e6b2eaae8ec29fcd672bc6cf1d37e13f74ffbda8f79e65b03e5b7dbf0309ac259da3bfb636ded58958be6b3d6ef5d8940c3afcab02628df2a202d18c62d884274c55f1ed7634cf03a57d4293b7a336970f625cdc0f7eb7e78fe8cef83c22a02b4f44dde1d6712714860de2ece6d753077544bcbc2b79ce303ae70d8544abdf23ad1e8ce25819b29030a6db0a977d2409311550276d"]}]}, 0x490}, 0x1, 0x0, 0x0, 0x40014}, 0x48845) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socketcall$auto(0x8000, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) 2m52.915987602s ago: executing program 1 (id=1307): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) r0 = socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x197317332562c27d, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/module/ati_remote2/parameters/channel_mask\x00', 0x400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000580)=""/273, 0xfffffffffffffef0) prctl$auto(0x3e, 0x1, 0x0, 0x4, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000340)='\xa8\xeb\"<\xa7\x99\xda\x82Q`5#n>}\xfc\x1d\xbd\xfb\x8e\x18\xb2\x89\x10\x95~\x9cxF\xd8\xf3t\n\xc9\x85\x9b\xac\xa9q\xf1\xec\xa15\x03\xe9\xc3\xa4h\xf1\x9a\xac\xc2\x90\xe6\x91\xf4\xe7\xdd\xdcr\x1dI\xc0<\n\x9d\x9des\xbc\xdc\xa6\x06AE\xe6\x02\x02d(N\x8f0\'\xfe\xfb\xc9UAM\xda8\xee\xd6\xcep\xbc\x16\xb3S\x85-\x80\xd3\xc0\xd4\x90\x80\xa8\x16\xc4\xd5\xfe\xbb3\x01\xbc\xa0\x8e\x1b\x87\xeeH\x00\xfdg\xa2\xf3\x15\xc2\x1b\xf1l\x10b\xedd\xdek\xb3\x00'/154, 0x20000000004) sysfs$auto(0x2, 0x23, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/set_event\x00', 0x6088c3, 0x0) write$auto(r2, 0x0, 0x4) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x88900, 0x0) ioctl$auto_IOC_PR_RELEASE(r3, 0x401070ca, 0x0) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x10, 0x3, 0x7) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0xffffffffffffffff, 0xc0000001, 0x8}, 0x6f4) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000001c0)='/de\x03\x00\x00\x00dio1\x00\xc1\x8cL\x92\x11\xac\x8dL\x8e\xf8&\x88\x11\xa1\xc6/=U/$?9A\x10\x99\xb8\xac\x1c\x17\xab\xfc*F\x9e\xc5\x8e\x85\xf78!\x06.B\xf2\xcaY\x14\xcd\xe2_5~+[b\f8\x9e\x809\x06\x00'/95, 0x8000000000000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x48402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x1, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0xc, 0x2, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x1, 0x5, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) 2m51.357024793s ago: executing program 1 (id=1310): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x18b800, 0x0) mmap$auto(0x9, 0x20009, 0xe2, 0xeb1, 0xf6f6, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0x80) socket(0x23, 0x1, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b03, 0x0) ioperm$auto(0x1, 0x3, 0x2) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002480), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MON_GET(r2, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x8080) socket(0x2b, 0x1, 0x0) mmap$auto(0x2000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x100008001) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x250a, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x1ff, 0x7f8, 0x3, 0x9, 0x9, 0xffffffffffffffff, 0x20010180, 0xa}, 0xa8) 2m48.166321232s ago: executing program 1 (id=1318): open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mq_getsetattr$auto(0xd, &(0x7f0000000200)={0x0, 0x5, 0x7f, 0x10}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_7={@link_id=0x1, 0x3, 0x3}, 0x6f3) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x3, 0x6) socket(0x11, 0x80003, 0x300) socket(0x10, 0x2, 0x0) ioctl$auto(0xc8, 0xffffffff800454dd, 0x4000000000008) socket(0x2, 0x3, 0x2) socket(0x2, 0x3, 0x104) socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto(0x0, 0x0, 0x0) timer_settime$auto(0x0, 0x803, &(0x7f0000000000)={{0x800000008, 0xa}, {0x9, 0x2}}, 0x0) timer_gettime$auto(0x0, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) 2m47.547490539s ago: executing program 1 (id=1320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x14, 0x1, "5e1f970f497f9f23d63e72850177cde9"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900), 0x0) getrandom$auto(0x0, 0x3, 0x80000001) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) keyctl$auto(0xe, 0x1, 0x1, 0x4, 0x6) msync$auto(0x110c230000, 0x200001, 0x6) 2m35.949937558s ago: executing program 0 (id=1356): r0 = open(&(0x7f0000000000)='./file0\x00', 0x333dc0, 0x84) ioperm$auto(0x2, 0x3, 0x1) clone$auto(0x1ff, 0x3, 0x0, 0xfffffffffffffffd, 0xffffffff00000000) ioperm$auto(0x2, 0x8000, 0x2b325536) close_range$auto(0x0, 0xfffff004, 0x2) mmap$auto(0x0, 0xc5, 0xdf, 0xeb3, r0, 0x6) r1 = socket(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) openat$auto_supply_map_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setsockopt$auto(r2, 0x10003, 0x1, 0x0, 0x1c) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x200, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0xf, r2, @relative_fd, 0xe600}, 0xf) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/rose2/duplex\x00', 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x8640, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 2m35.297281692s ago: executing program 0 (id=1357): mmap$auto(0xfffffffffffffffc, 0x7, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0x401, 0x8001) getcwd$auto(0x0, 0xffffffffffffffff) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000001380), 0x448000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x6, &(0x7f0000000000), 0xffffffff) pread64$auto(r0, 0x0, 0xffffffffefffffff, 0xf) socket(0x18, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x2) r1 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x204, 0x1a00) read$auto(r1, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x480c0, 0x28, 0x3}, 0x18) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x6) readv$auto(r2, &(0x7f0000000000)={0x0, 0x9}, 0x200) read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, &(0x7f00000020c0)=""/4093, 0xffd) r3 = socket(0xa, 0x5, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(r3, 0x8946, 0x24) 2m32.046124627s ago: executing program 32 (id=1320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x14, 0x1, "5e1f970f497f9f23d63e72850177cde9"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900), 0x0) getrandom$auto(0x0, 0x3, 0x80000001) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) keyctl$auto(0xe, 0x1, 0x1, 0x4, 0x6) msync$auto(0x110c230000, 0x200001, 0x6) 2m29.90497453s ago: executing program 0 (id=1368): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80502, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000000340)="2a3f9218659200008a677517d554c80b25c30000000000000071dde0152c549d44cf790bd304059e64ec347e9b173c52324e7de19a503727fe47d78e0bc2c5590e61b5d86887240d03bca3460f12f2107274ade4e6e53a728e346cef781b623364989314a43e5fd9e20e24417d6b21117b3308557a7b2aa2cb541dea5cb3b6a521b869ac5ff14cb52c4487dd3a3f4a81ff5957aa1109af5a3a1ce466381cc21fea0c67d8a165f29a6b9537b178bfdd013443481ba707ba4632e0478b951e619775f83f13b36d6426", 0xc8) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) futex$auto(0x0, 0xfff, 0x5, 0x0, 0x0, 0x802) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000004c0), r3) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd30, &(0x7f00000019c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf25150000000c00018008000100", @ANYRES32=r2, @ANYBLOB="71d18e60a0afd7ab3576971ab82f4247051e421d451dd76d6afba29686b88e7a28c733f1967d31d26a4bb3663448c30e8466d2c5f86b5e1cd02c4bc627be6d219b290fa61ab9"], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x315, 0x1, 0x4, 0x7352, 0x3c, 0x65f, 0x1ffde, 0x7ff, 0x3, 0x2, 0x9, 0xfffffffe, 0x4000006, 0x4, 0xb6, 0x80000000009, 0x6, 0x10003, 0xb, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) ioctl$auto_BLKGETDISKSEQ(r5, 0x80081280, &(0x7f0000000480)=0x302) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x4085}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xf, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x401, 0x1003, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x8009, 0xb, 0x200000100106}) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000240)={0xff, 0x1, 0x7, 0xba0, 0x1}) setgroups$auto(0xa1, &(0x7f0000000000)=0x8005ea) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80001, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) r7 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000003fc0)='/dev/bus/usb/017/001\x00', 0xa300, 0x0) ioctl$auto_MON_IOCX_GETX(r7, 0x4018920a, &(0x7f0000000080)={&(0x7f0000000000)={0x7fff, 0xc9, 0x6, 0x5, 0x65, 0x5, 0x7, 0xa, 0x40, 0x100, 0x31a, 0x5, 0x3, @setup="9fef6bd13c8f6103", 0x6, 0x7, 0x6d}, 0x0, 0x9}) ioctl$auto_MON_IOCX_GET(r7, 0x40189206, &(0x7f0000000180)={&(0x7f0000000040)={0x5, 0x33, 0x5, 0x1, 0xd3, 0x6, 0x3, 0x5, 0x6, 0x10000, 0x9, 0x5, 0xab, @setup="3dbaee61062d841d", 0x0, 0xbd, 0x10, 0x3}, 0x0, 0x6}) socket(0x10, 0x2, 0x0) 2m29.242324641s ago: executing program 0 (id=1373): io_uring_register$auto(0xffffffffffffffff, 0x1f, 0x0, 0x1) r0 = socket(0x2, 0x1, 0x106) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x18000, 0x3, 0xdf, 0x4000009b72, 0x7, 0x6) connect$auto(0x3, &(0x7f0000000080)=@rc={0x1f, @none, 0xf}, 0x54) mmap$auto(0x8, 0xe983, 0xd, 0xeb1, r2, 0x8000) recvmmsg$auto(r1, 0x0, 0x10000, 0x9, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x7, 0x8, 0x0, 0x0, 0x8) pselect6$auto(0xce9e, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x10000008001, 0x4000000000002bc8, 0x3fd6d3f5, 0x0, 0x2, 0xffffffff, 0x5, 0x0, 0x8c3, 0x2, 0x2a, 0x7]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_clk_dump_fops_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/clk/clk_dump\x00', 0xe00, 0x0) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, r4, 0x8000000000008000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r5, 0x0, 0x100082) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xf29950c519090d84}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T!\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0xd4}, 0x20008840) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x100000000000037, 0x0) fsopen$auto(0x0, 0x125) mmap$auto(0x0, 0x2020009, 0xc, 0x11, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x801, 0x106) setsockopt$auto(r3, 0x6, 0x7, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x2, 0x3, 0xa) sendto$auto(0x3, 0x0, 0xf, 0x10, &(0x7f0000000140)=@in={0x2, 0x0, @empty}, 0x19) socketpair$auto(0x1, 0x40000102, 0x8000000000000000, 0x0) 2m27.812197791s ago: executing program 0 (id=1375): mmap$auto(0xfffffffffffffffc, 0x7, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0x401, 0x8001) getcwd$auto(0x0, 0xffffffffffffffff) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000001380), 0x448000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x6, &(0x7f0000000000), 0xffffffff) pread64$auto(r0, 0x0, 0xffffffffefffffff, 0xf) socket(0x18, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x2) r1 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x204, 0x1a00) read$auto(r1, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x480c0, 0x28, 0x3}, 0x18) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x6) readv$auto(r2, &(0x7f0000000000)={0x0, 0x9}, 0x200) read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, &(0x7f00000020c0)=""/4093, 0xffd) r3 = socket(0xa, 0x5, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(r3, 0x8946, 0x24) 2m23.916640096s ago: executing program 0 (id=1387): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x0, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) (rerun: 32) 2m8.652751564s ago: executing program 33 (id=1387): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x0, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x870bd2b, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) (rerun: 32) 1m10.070681188s ago: executing program 5 (id=1635): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYRESOCT, @ANYRES16], 0x28}}, 0x4000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r4) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) write$auto(r5, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xadTt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\t\x00\x00\x00\x00\x00\x00\x00\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00,\x8a*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\xb3\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\n\xf2\b\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4\x01\xb2\xa9pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\xe61\x8c\xf2\xec\xe8\xf0\xe0\xe5Ya\xa4\f\x95\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c8) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/authorized\x00', 0x10b142, 0x0) write$auto(r6, &(0x7f00000007c0)='0\x00\xb9:\xaa\xc1\r\x02T\xf5\b\x00\x00\x00\x00\x00\x00\x00\xa1\xd0\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xcc!\"\xa6\"jH\xcd\x10&b/\x9a\xf1w\xddS\x87\xd1vi\xa9\xeaM\x1dY\xa6\x8d\xf2\\\xac\xe1\xcf\xf7\xff\xff\x148\t\xba\xa0Z\x00M\xbcHM{\xa9\xf1R3X\xdfMbe\t\t\x86\x11v\xa2W\x93m\xd9\x93\x98.7Z\xe7|\x9f\x88\x05\x9ej\xc5\xfaT\xa0\x9a\\i\xd1\xb3\x02\xfa\xfeaq\x8d\xf1\xba\xaf\xcc\xce\xb2\xd3~TR\xf1\xad\xd0\x90n\xb6\xd0\xfc(p\xa3\xabk\x19\xcb\xfda\xff&\xad1\x95\xc5\xa9Gb\xe3\xa4\xf1\xe2\x91\x0e\x91iy\xba%+=\xb7\xd3D,\x19\b\x00\x00\x00\x00\x00\x00\x00\xadG\x94\v\xff\xa4\xfc\x95\x00By\xe9\x80\xd3U\xcd9\xe0\xbc\x8cK\xf3\xfd\x89\xda\xaeH.\xe3\x95Xbw\x02\x99\x03\x00\x00\x00\x00\x00\x00\x00\xaf\xc3\x89\x91\x19\xfc+\xe9l\xd3\xf5\x00\x00\x00\x00\x00\x00\x00\x85%c\xa6\x0f\xcfI\xb4a\x1d\xc4\x8f\x12X\xdf\xc2\xd7\x8e\xf4\xb9_\xf6\x10\xfc\x9b\xce\xab\xcf\xa9_\x88\xf4\x1b\x12\x12N\f\x84\r\vsI\x86\xe9\xe6J\xb8\xe4\x8f\x02\x9e\xf45\xd9\xf1\xbd\xfd\x97\xd8OU\t\x9e2K\xe2*~\x9dIe\x00\x00\x00\x00\x00\x00\xce;E\x8c\x05~\x1f\xa5\xa4\x9d\xf6\'\xc4\xf7\xa3\xf2\xfb\x85z>\xd71\xb8\x83\x8e\xa9c6I\x8f\x00\xb2\x03\xfd3\xb8\xe9Xo\xaa\xaeg\xb3\x9e\x8fM:\xa5\x1c \xbe\xfe\"\xa1\x11\xf4~\xa1\x90D/e\xe1\xb1C:}\xd2\x9dT\xc1\xd6[Ld\x06\xee\xc6\xe4\x99uT\xfdl\x94\xe1:\'2aO\xf1\xfa8l\n\xe0l\x1c\x89\xd7U\x99\xe9d?\x04\xd8\xf3\x9c\xd8t\x88@\x89\x15p\x84\xad\xa3V=,U\xa4_\xb9\xa7\xd7O\x91\xb2\x03\xbe\xd5\xa8\x03o\x0e\xa7\x93\xabubg\x10\x19\x82D\xa7\xae9\xf1\xc0\n\xfe;n)OAV\xfe\x8fE-\xea\x7fzO0\xde\xc0WK\xe1\x9b\xfe\xbfR\x8c$p\xf0\xe4\xa5\xbe_\x8d:\xd6\xc5\xf5\x80+\xe6O', 0x81) io_uring_setup$auto(0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x3ab42, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuacct.usage_all\x00', 0x101800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000080)=""/27, 0x1b) statmount$auto(0x0, &(0x7f0000000a00)={0x8, 0x1001, 0x9, 0x3, 0x12, 0x93f, 0x1fee1, 0xffffffff, 0x6, 0xfffffffffffffffe, 0x9, 0x9, 0x8005, 0x7, 0xaf, 0x9, 0x5, 0xf, 0x8, 0x4, 0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, [0x8, 0x1, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7fffffffffff, 0x9, 0x0, 0x0, 0x10, 0x0, 0x831c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x0, 0x1, 0x8000000000000001], "aa464c8c96d6d3ae6272767bcce849b9f15f31e49dd67a1c937ef300524fc6c51326defedfdf5234dbc713a1b2194592e0df5005b0b6eabd34e9cfc3dd2f4eadcd380e8ce71027ab68f7379fd638490c512d7ddf63d91dd968ffbbcea01e5960a8717ca0ea37e04cf7024fca8e601ec86158125d"}, 0x1fe, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="11002d", @ANYBLOB='<\x00\x00\x00', @ANYRESHEX=0x0, @ANYRESHEX=r3], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r8 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x69) read$auto_dfs_cpu_ops_debugfs(r2, &(0x7f0000001240)=""/237, 0xed) connect$auto(0x3, &(0x7f0000000140)=@generic={0x21, "f7856effc0693c6ea6853930f947"}, 0x56) ioctl$auto_SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) 1m8.945381844s ago: executing program 5 (id=1640): socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, 0x0, 0x5, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vidtv.0/i2c-0/new_device\x00', 0x4a001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000180)="12b3", 0x2) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) shmctl$auto_IPC_RMID(0x8, 0x0, &(0x7f0000001140)={{0x2, 0xee01, 0x0, 0xaaa0, 0x6, 0x10001, 0x6}, 0xa, 0x1, 0x0, 0xfffffffffffffff8, @inferred, @inferred, 0x0, 0x0, &(0x7f0000000040)="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", &(0x7f0000001040)="cc1a42cbeeafa28c0926510f240799cf61d2b377af8ae3f05cb77222b6f1186d798e44e2c7df1fc5fa08091785a543e0bb80f00991d3c9a9f69bacfc3710176ead7e961fe1897de8d437ed0e2fbd2423a2a66a0e9c40701bd40a70daf911287d2c9ddc9235a7b7e9214463d7c216525cade8bd11b41b59c43821b1a4a72092239808f73bc2c66a063a336c09a1e05465085143e511a9aa0b8675ba0f66dfda015ce11b2cbc51aab87279dca092c50237ea474dad7e14a8e998d212ec2a1ca53a3fcda845bc4f6839dd33273b8af8c5c6fe2b9c"}) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x622340, 0x0) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) memfd_secret$auto(0x0) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000002180), 0x100, 0x0) eventfd$auto(0x3) pipe$auto(0x0) socket(0xa, 0x2, 0x88) socketpair$auto(0x1e, 0x1, 0x4, 0x0) lsm_list_modules$auto(&(0x7f00000011c0)=0x65d, &(0x7f0000001200)=0x9, 0xb0b) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TCFLSH2(r2, 0x80044704, 0x0) 1m8.255368427s ago: executing program 5 (id=1642): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/tty0/active\x00', 0x103280, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003800)=""/168, 0xa8) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xd, 0x10000, 0x7, 0x3, 0x7ffffffd, 0xffffffffffffffff, [], {0x6, 0x1ff, 0x8c48, 0x2a2, 0x100, 0x7ffffffb, 0x101, 0x6, 0x3}, {0x100, 0x1, 0x0, 0x5, 0x3, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8300f000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) write$auto(0xca, &(0x7f0000000040)='\x04\"\x00\x00\x00\x00\xa6\xb8\xd8\xc6\xb05>ha9\x89|d\x00\x00\x00\x00\x00\x00', 0xd) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x141401, 0x0) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000fb, 0xa, 0x4, 0xaab, 0x5, 0x10000]}, 0x0, 0x0) sendfile$auto(r2, r2, 0x0, 0x400000000003) r3 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) preadv$auto(r3, &(0x7f0000000200)={0x0, 0x101}, 0x9, 0x1ff, 0x5) getsockopt$auto(r1, 0x2, 0x70, &(0x7f0000000000)='\x00', &(0x7f0000000040)=0x9) 1m7.936579138s ago: executing program 5 (id=1645): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"58f99464", 0x8, 0x6, 0x1, 0x3, 0x5, "4bb69ec4b3f4c14539898e4c5682f5", "347f00", "a630df9d", "a0ed9959", ["cd9196b8fe1a8a7eb90401a9", "2f9c30017721de33c560b95a", "d3fe6c55a78d6932211c9b69", "ea334f1f1e5e27a1320d6edb"]}) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000180)="6da6b940dfe114cacac8b7cca871a393aaf922f69708e077a3ff54d760f973198c7f36202c9afdaf7bc2eb57e0") close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf250300000004000800100003800c000a000700000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) select$auto(0x4, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0xfffffffffffffff9, 0x9, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x271e, 0xfffffffffffffffc, 0x0) 1m7.501154921s ago: executing program 5 (id=1650): mmap$auto(0x0, 0x7, 0xe3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r0 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6, 0xffffffffffffffff, 0xffffffffffffffff}, 0xf) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x202, 0x0) ioctl$auto_BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x3, 0x50}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/tx-0/byte_queue_limits/stall_cnt\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) write$auto(0x3, 0x0, 0xfdef) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r7, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x80}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @empty=0x3f}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x3a}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) r8 = fcntl$getown(r2, 0x9) kcmp$auto_KCMP_FILE(r8, 0x0, 0x0, r1, r3) r9 = socket(0xa, 0x2, 0x88) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) r13 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/open_files\x00', 0x502, 0x0) pread64$auto(r13, 0x0, 0x100000001, 0x100) io_uring_register$auto_IORING_REGISTER_PERSONALITY(r10, 0x9, &(0x7f0000000080)="032991939652deddec520afb41", 0x19) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r12, r11, 0x4, 0x1, r9, @relative_id=0x13, 0xe600}, 0xf) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mount$auto(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x100000, 0x0) r14 = socket(0xa, 0x2, 0x0) setsockopt$auto(r14, 0x29, 0x19, 0x0, 0x56b) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cpu/1/cpuid\x00', 0xa200, 0x0) 1m7.278425496s ago: executing program 5 (id=1651): r0 = openat$auto_hwsim_simulate_radar_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy9/hwsim/dfs_simulate_radar\x00', 0x4448c0, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/dynamic_events\x00', 0xadcb779d29d94bf3, 0x0) mmap$auto(0x0, 0x803, 0xdf, 0xeba, r1, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) read$auto(r0, &(0x7f0000000200)='\x00', 0x7) move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) listmount$auto(&(0x7f0000000040)={0x200, @inferred, 0x7f, 0x81, 0x400}, 0x0, 0xf, 0x5) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compaction_proactiveness\x00', 0xc0781, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000180)={"82595bc7", 0xb, 0x1, 0x6, 0x2, 0x5, "9ad5b0e4593954e5d8ae2c265dfe2e", "02a8123b", "8bf802f2", "4407eed3", ["298791499d94b70a27b164b8", "6ce072986f64440ba3e29d39", "b66c8f7cbff097fb67caeee5", "f3d94449732efd18fa051e88"]}) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy1/force_tx_status\x00', 0x81300, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x783a06, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_rts_threshold_ops_(0xffffffffffffff9c, 0x0, 0x400000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/hwsim0/addr_assign_type\x00', 0x8a01, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) r5 = socket(0x10, 0x2, 0x4) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/packets_per_slave\x00', 0x182b02, 0x0) pwrite64$auto(r6, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x15\x00p\x01\x99\x88c\x14\r>\x14\x1a\xd3\xd3\x1d\xf8?\xdb\xdb\xc1\xf5\xe3o\x8e\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\xe5}\xea\x1b\x95\xafQ;_L\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x10\x00\x00\x00\x00\x00/TX:\xfe\xe8\xe0\x96\xb1x\xc5\x1f\xd2\xe2\xf6^\xfdo\x00\x9a>T\xd5\x1e\xe3\xeb\x89q\a\xd6h\xc9\xbc\x8f\x1dBk\x95\x174\xdc\x03\x05> -\xb6\x9d[\xe42(\xe4\n\x98u\xc9\xa1\xc4Zb\x04\xc2\xf1 \x8a\xbe]\xde\xfd8u\xb4\xde\xb3\xa1T/\xdfx\x14Y\xfe\x1e\x1f\x91\x19\xb7\xfc\xcd\x7fl\xb3\xa8#\xa0\xb9P\x8d\x04C\x87\xebR\x93\x12\x18H&N\x8b\'i)\xab@\xaf\xcb\xda\x00\x067\xce\xd6V4\xc2\xeeX\xb4\xe9\f\xee\xe8\xd8\x91\x1b\xcd\x00j\x14H\xcc-\x14\xde\xaaN\x87\x8d\x9b\xa05\xacHX\xc1\xce\x91\xee\xad\r\xbe\xb2&f\xa3\xe2\x8bp\xba\x8a\"\xf1\xfc\xa13\xfe\xe0JG\xe1v\x82s}v~`X%pJ\xbf\xc3`\xa9\x8f\"l\xc7XX\xa4\xb6\x0e\xbe\xa0wy\xfe\x03n\xb5\r\xf149*(\x15\xaa\xc2\x8aB\xf1\xbb$M\xfe%\xc7\x84\xf0\xa4}bd\xac\xa8T\xda\xffm\x86\xca\x80\xde3\xa7\xba\xc7Y]\xd7\xa2\xec)\xd6\xad\xbcI\x10\xa3#\xd4/J\xa8\x14\x1b<\x04\xbd\x89\xefQf\xc0Q\x92\x92\xa7\x99\xcf\xaekR\xf5\xb7\x14r[\x9fx\xaf+\xb3@\xf4\x83\xbf\xc7e\xe7\xc2\xd6\x10\x0fk\xee)\x92\bO\xa1\x1a\x9e\xef:5\x1e\x1c\"9\xd8\xdf\xa9C\xe2SHG6\xf2\xd5.\x12]\x17J\x8b\xc52\xe9\x9e\xbc\xdc\xae\xef\xed\xf9\xa6\x9e-\x92pZ\x12j/\x1dD{\xac\x17\\O\xee\x11\x10$\x12\xfc \xb0\xb7cA;\xa1,\x040\xa7\xd9\xb2\x19@1\x92\x10\xc4\xc0\x1f\x1d\xe1\xf6\x80lW\v,\xa2\x134no\xa0\x00l\xd8\xe4\xd3\x16\xd3%\x8b\xf5\x1e\x12{\xe6\xdb\xde\a\xdedH\x90\xf7\x19\xff\xcb\xacC\xeadOf\xb8\x15\xc39\xefLt\t\x11\xa1\x0e\x85\xac\xcc+\xc0\xb4.\xaa3>\xc0\x96\x84\xd5\x02\xc1\x94=\xb0\xfe\xda\x1d\xe9\xa7\xe1\xcf\x80|k\xdd\x95\xc9\xb0y\xb4\xbd\xc2W\x9c\xa4\x80\x13\xbc\x7fb=y\xdb]U\xd1HC\xe1\xa7\x94q\xb0C\xb8\x86\xd0\x9d\xe0\x8aD\x91x\'\xd6\x17\xd1\x9d\x16\xa7oZ\x8a\xce:\x9e@\x04\x00\x05f+\xee\xd8\xe6D\x9e\xb18Aw\x92\xe8\xb8>\x81{', 0x8001, 0x1) close_range$auto(0x2, 0x8, 0x8000) socket(0x10, 0x2, 0xc) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r5, 0x0, 0x4000) 1m4.055909658s ago: executing program 2 (id=1665): socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/usb_storage/parameters/delay_use\x00', 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/40, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r2) sendmsg$auto_TIPC_NL_NET_SET(r2, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000040)={0x20, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44050}, 0x2) 1m3.800570715s ago: executing program 2 (id=1666): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000300)=@sco, 0x54) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x13e, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x40a, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2, 0x801, 0x106) setsockopt$auto(r1, 0x6, 0x17, 0x0, 0x9e) setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x2, 0x0) openat$auto_clk_summary_fops_(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/clk/clk_orphan_summary\x00', 0x248182, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000001c0)={[0x5, 0x2, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x528f, 0x5, 0x7, 0x6d3f, 0xa, 0x5, 0x6]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0xfffffffffffffff7, 0x8001, 0x800000000000948b, 0x3, 0x15f4da0a, 0x3, 0x4000000000000003, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x4347, 0x6]}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) clone$auto(0x1, 0x1, 0x0, 0x0, 0x2) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x5, 0xfff, 0x44eb2, 0x10006, 0x300000000000) setsockopt$auto_SO_RCVBUF(0xffffffffffffffff, 0x7fff, 0x8, &(0x7f00000002c0)='/dev/audio1\x00', 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) madvise$auto(0x110c230000, 0x8031ca, 0x9) 1m1.888214323s ago: executing program 2 (id=1669): openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0xb8642, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80002, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_genetlink_get_family_id$auto_l2tp(0x0, r1) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00002cbd7000ffdbdf2502000000060002000400000005000d000200000006001d00010000000800", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) getsockopt$auto_SO_ZEROCOPY(r0, 0x401, 0x3c, &(0x7f0000000380)='/proc/kcore\x00', &(0x7f00000003c0)=0x4) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r4, 0x1b, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r5 = socket(0x2b, 0x1, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/fail_over_mac\x00', 0x103b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x8080000001) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) io_uring_setup$auto(0x6, 0x0) r7 = socket(0x18, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x80047453, 0x0) sendmsg$auto_IPVS_CMD_SET_CONFIG(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000894}, 0x40084) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mbind$auto(0x2000, 0x100000004, 0x5, 0x0, 0xffffffffffffff39, 0xffffffff) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kcore\x00', 0x40000, 0x0) 59.776433073s ago: executing program 2 (id=1673): r0 = inotify_init1$auto(0x9) getsockopt$auto_SO_DOMAIN(r0, 0x6, 0x27, &(0x7f0000000000)='@.]{\x00', &(0x7f0000000040)=0x90) setsockopt$auto_SO_SNDBUF(r0, 0x62a, 0x7, &(0x7f0000000080)='@.]{\x00', 0x81) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x2000, 0x0) pwritev$auto(r1, &(0x7f0000000140)={&(0x7f0000000100)="96d86bf40b6262ae799efefc0dcd001dc89a3a38", 0x4}, 0x8000000000000000, 0xffffffffffff8a79, 0x7) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/pcmC1D1c\x00', 0x13e95e50ae987d0b, 0x0) r2 = openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f00000001c0), 0x32480, 0x0) fchdir$auto(r2) read$auto_mISDN_fops_timerdev(r0, &(0x7f0000000200)=""/165, 0xa5) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv6/conf/ip6_vti0/ioam6_enabled\x00', 0x441, 0x0) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/slabinfo\x00', 0x2b4901, 0x0) r5 = fcntl$auto_F_DUPFD_CLOEXEC(r2, 0x406, r4) ioctl$auto_SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000340)="f3e45a32fbf1b158738a9bec55b09c91ae88333d1de6f36555251ec864e682204e93f31a7059efec914ccc42a507960ebb3ce79866bdc2538182d506715afc536a91902f3064865b66d08bf2c809c82ba49f5e2750d90afc424f4651ef79772c17832c348447f37dbf8a3a40137f7a483d8a4deba9638303c0c1d811faf41921d66907524e219729188eacd2bd15a7419fca005cc6e58ac7e105a12d7c2436d9d5bd70377cea500fd6fceb9a484dca26eb0ae97cbc7275e12f96ca5ebe7d1b604ee96da0cfad74f54a3de2672b8f01a3e61e32ef5d4ee229217c450fb7fa0095438d7949d1481e1007ea6970628f6c") ioctl$auto(r3, 0xf, r2) ioctl$auto_IMDELTIMER(r0, 0x80044941, &(0x7f0000000440)=0x4) ioctl$auto_IMADDTIMER(r2, 0x80044940, &(0x7f0000000480)=0x269a32a7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'pimreg\x00', 0x0}) sendmsg$auto_NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x7}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) sendmmsg$auto(r1, &(0x7f0000000840)={{&(0x7f0000000640)="cd77d12e0719f67a0da5ffdabb47a31636f2bbe977ea5349a370f5b27284758a99455b972608d283b6f59e02a531a8fdc8dd39ba4688278be6b41855f9d10258fc09dfbb3fea26044bae", 0x9, &(0x7f0000000780)={&(0x7f00000006c0)="7f65cb52f2a0ee620a6bb39395e2cc07479554a5ecab01a8aa31c51bc1a95e233f6365dcee4369a2fb271d44aaac9c4c70633251fe7ca515dfc81c1c11d2480e662fc0a31d62f6bc4d8abfaee57d9eccc484792fab915a2be6a3f9841c8edd637246ede935c7410ab3acf8ca902890ce2ac20070ee6c7a665421efe732bfe6f1e1aa87599d0996b8f18f6a1939d7c2ccbd3bfbecae882b27f683f2e322cdc0dc9f910fe6be0816936505b5151606b1374779f7f92528f3"}, 0x4, &(0x7f00000007c0)="ce6541475318a2412a01999390ad1fd36da41ed79096eeb53dacc58809138e992273f47ce73af85fc47d43a3f1e1ff0f234edb76ac7ddd31e3a5a3bf6ea44b7e853f46edead675c94d7b0c6139b09055223c8a6e8a3e72e0679e2ddd30962e329f3d21a91d768ad9c7907a7f267a838e4dd37dbef0", 0x1, 0x7}, 0x9}, 0x7, 0x1) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000880)='/sys/kernel/tracing/tracing_cpumask\x00', 0x21, 0x0) syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f00000008c0), r5) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000940), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000980)={'veth0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r0, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xf4, r7, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_PSE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xea}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffffffff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PSE_HEADER={0x4}, @ETHTOOL_A_PSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x2}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @ETHTOOL_A_PSE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}, @ETHTOOL_A_PSE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xaf2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x80}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x81}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x24000800}, 0x24040008) mincore$auto(0x9, 0x10000, &(0x7f0000000b40)='ipvlan1\x00') ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r0, 0xc2604110, &(0x7f0000000b80)={0x3, [{[0x7, 0x12, 0x9, 0x0, 0x2, 0x6, 0x87, 0x3]}, {[0x10, 0x6, 0x9, 0xfa70, 0x40, 0x4e440a8b, 0x6, 0x1ff]}, {[0x8, 0x2, 0x5, 0x9, 0x7fff, 0x40, 0x5, 0x62f714f]}], [{[0x7, 0x53e8, 0x1, 0x0, 0x7, 0x1, 0x3ff, 0x1]}, {[0x9, 0x7, 0x9, 0x7, 0xfffffffd, 0x4, 0x7, 0x9]}, {[0x9, 0xe00000, 0x1, 0x81, 0x7ff, 0x401, 0x2, 0x800]}, {[0xc, 0x81, 0x17, 0x4dd5d30c, 0x583, 0x8, 0x9, 0xc]}, {[0x2, 0x80, 0x10001, 0x7, 0x1, 0x3, 0x8, 0x10001]}], [{0x1, 0x1, 0x1, 0x1, 0x1}, {0x0, 0xcd, 0x1}, {0x7fff, 0x401, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x401, 0x1}, {0x8, 0x87b, 0x0, 0x1}, {0x1, 0xfffffffd, 0x1, 0x1, 0x1}, {0x6, 0x8, 0x1}, {0x0, 0x0, 0x1}, {0xa3, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x6, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x8000}, {0x1, 0x4190, 0x0, 0x1, 0x0, 0x1}], [{0xffff, 0xfffff309, 0x1, 0x0, 0x0, 0x1}, {0x3, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x5, 0x97, 0x0, 0x0, 0x1}, {0x4, 0x100, 0x1, 0x1, 0x1, 0x1}, {0x80000001, 0x7, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1, 0x80, 0x1, 0x0, 0x1, 0x1}, {0xff, 0x3ff, 0x0, 0x1}, {0x80000000, 0x9e, 0x0, 0x1, 0x0, 0x1}], 0xc25, 0x8, 0x3, 0x81, 0x7, 0x1000, 0x7, "e41c68fa8b59026988311266056e00ef", "ccd4c9b6c8683b6f94d530b6e6d59bd9dccf96ae372fa0ec107dc88accf1a26950314751099f87559e68b5c12e18fe63"}) io_uring_setup$auto(0x3, &(0x7f0000000e00)={0xa, 0x7, 0x401, 0x6, 0x0, 0x80000000, r5, [0x9, 0x9, 0x6e], {0xcf73, 0x3, 0x5, 0xfffffffe, 0xff, 0x8000, 0x0, 0x10, 0x9}, {0x0, 0x7fffffff, 0xe, 0x1, 0x0, 0x6d, 0x10, 0x7, 0x81}}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/bus/usb/012/001\x00', 0x640000, 0x0) ioctl$auto_XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000ec0)={0x1000000, @raw=0x6119, @raw=0xea98, 0x8e000000, 0xd61, '\x00', {0x400, 0x9, 0xf499, 0xffffffffffffffff, 0xee00, 0x443, 0x4, 0x1ff, {0x6, 0x1}, {0x2, 0x2}, {0x8, 0x4}, 0x1800000000000000, 0x10000, 0x1, 0x1, 0x8, 0x9, 0x0, 0xc, 0x9, 0x5dd7, '\x00', 0x739, 0x3, 0x0, 0x800}}) setresuid$auto(0x0, r9, 0x0) 59.528387094s ago: executing program 2 (id=1675): sendmsg$auto_NETDEV_CMD_QSTATS_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4c084) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon18\x00', 0x400, 0x0) mmap$auto(0x0, 0x4000005, 0xfffffffffffffe01, 0x8051, 0x3, 0x10000000008000) mmap$auto(0xeb63, 0x53, 0x1, 0xffffffffffff8011, r0, 0x3) r1 = pidfd_open$auto(0x0, 0x5fa0) mmap$auto(0x0, 0xfffffffffffffffe, 0xd15, 0x19, r1, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x5, 0x3, 0x0, 0x0, 0x1) socket(0x25, 0x2, 0x6) mmap$auto(0x101, 0x400008, 0xdf, 0x11, 0x2, 0x8000) prctl$auto(0x3, 0x1, 0x0, 0x53, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) sendfile$auto(r2, r2, 0x0, 0x800400000000ef0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) bpf$auto(0x24, 0x0, 0xc) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x100000) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040), 0x8000, 0x1}, 0x8}, 0x1, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) close_range$auto(0x2, 0x8, 0x0) 59.399409519s ago: executing program 2 (id=1676): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)=ANY=[@ANYBLOB="ad2a9d020c805e5ec3e2bba2e75591e5e79bf6079e538eebdbfa0419687a738415e053e9f8d5b6d94103672641a901358e28341f6b4b40abe69e35"], 0x1c}, 0x1, 0x0, 0x0, 0x404c091}, 0x4004000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ppoll$auto(&(0x7f0000000040)={r1, 0xfffc, 0x8}, 0x4, &(0x7f0000000100)={0x7fffffffffffffff, 0x8}, 0x0, 0x8) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x4c0782, 0x0) r2 = epoll_create$auto(0x3e) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000140)={0x0, 0x2a, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x48080) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, r2, 0x8000) r3 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/available_events\x00', 0x400, 0x0) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)=@bpf_attr_4={0x5, r4, 0x9, r3}, 0x8001) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mq_timedreceive$auto(r5, &(0x7f0000000180)='MAC80211_HWSIM\x00', 0xfffffffffffffff5, &(0x7f00000001c0)=0x3b6b5a33, &(0x7f0000000240)={0xf9e, 0x5}) shutdown$auto(0x5, 0x0) poll$auto(0x0, 0x1, 0x45ff) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x5}, 0xffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_PEERSEC(r7, 0x1, 0x1f, 0x0, &(0x7f00000004c0)=0xffff7fff) setresgid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 58.131812263s ago: executing program 3 (id=1682): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) shmctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000000140)={{0x76, 0xee01, 0xffffffffffffffff, 0xfffff001, 0x81, 0xffffffc0}, 0x2, 0x3ac, 0x827, 0xd407, @inferred=0xffffffffffffffff, @inferred, 0x4, 0x0, &(0x7f0000000000)="b4892b589d082a68bb1eab94cf4d8f99c33ee65161c014033936d130f5a1aed03c471aa162f4b633f6992bb405b8c47f76cf9c", &(0x7f0000000040)="a57336eb72c124270c5ec2c5dd0495375af695b672b09067316c854293b2936c86702a0143ef070c6e37a8d7727be6f3d1b84550b9fc8b0800ec9eba569a1791f0ef4a06100c3fd450ac46759b1e15d2dada5ced2053a9c4659cd27b646dcf60c91fb03401f9e3de14254e21dc625ccd396f490cdd3576e5af1deb39ee7a215e5ceb31041d160c4d0ae19e26f21ebc4bf8bebd2bcc509ebf247da80ff05aa23f7a4df227982ad67a3f8819a669a1c005d37be4d2e23c65b4eeb090447d586c4d0162461dfe0e88dc7066b5353f053a6c3b834536"}) r4 = setfsgid$auto(0xee01) setresgid$auto(r4, 0x0, 0x0) shmctl$auto_SHM_STAT(0xfffffe01, 0xd, &(0x7f0000000340)={{0x9, r1, r4, 0x3, 0x1, 0x80, 0x9944}, 0x4, 0x4, 0x0, 0x6, @inferred=0xffffffffffffffff, @raw=0x2, 0x4, 0x0, &(0x7f00000001c0)="50a55b6c3737fef2c59c13cb63adb2038944000313fe0d0e5da281fa437d8b8290885a8b444365be0e96ee817a8607c2febb4389b2196c2dea37ca2e9e60fbbf84d4f7d3314683afd8f7332b9e7c2a6dac17a89925614799bebc82c87d8f7e64c0684d474cd23caa8e341697c3bdc0aa78556d64d176827d09810ef1fe627f2ef5ab137820be1d8ec39f2db47d773bc4bb99d3a47e6285a134e55e09cf71902ae42725845100b3d07183c0a722592ad88a6a02e086e7b1052f49a1fa7a06dbf8efba", &(0x7f00000002c0)="2d469a0964257071587f8f3e01d68e555f34660e32d0b7b30d3e081c639fc70c4a3168e3c866a80f5355d24051229f920ce74919bb35fc498e7d0c75cead984c2d4aafa4d5917856fb59c22a8e617cb782b81f1c67c768ce60"}) mmap$auto(0xffff8000, 0x280009, 0x5, 0x8000000008011, r0, 0x0) acct$auto(&(0x7f0000000e40)='/dev/snd/seq\x00') syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) r5 = setfsuid$auto(0xee00) r6 = setfsuid$auto(0xee01) setresuid$auto(r5, r6, r5) r7 = getpid() process_vm_readv$auto(r7, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) msgctl$auto_IPC_RMID(0xffffffff, 0x0, &(0x7f0000000440)={{0x6, r5, r2, 0x5, 0x80000001, 0xfff, 0x969}, &(0x7f00000003c0)=0x80, &(0x7f0000000400)=0xf7, 0x6, 0x2, 0x4, 0x401, 0x9, 0x7, 0x4, 0x5, @inferred=r3, @inferred=r7}) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 58.032892048s ago: executing program 3 (id=1683): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/sound/ctl-led/speaker/mode\x00', 0x182, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/sound/ctl-led/speaker/mode\x00', 0x182, 0x0) socket(0x6, 0x80000, 0x40) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) r0 = socket(0x10, 0x3, 0x2) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r0, 0x0, 0x48d0) (async) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r0, 0x0, 0x48d0) socket(0x1e, 0x1, 0x0) (async) socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) statx$auto(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x4, &(0x7f00000004c0)={0x1, 0x6, 0x0, 0x7ff, 0x0, 0x0, 0xfffb, 0x8000, 0x83, 0x0, 0x7c55, 0x34b, {0x0, 0xe}, {0x100, 0xffffffa4}, {0x81, 0x2}, {0xfff, 0xfff}, 0x1, 0x80, 0xb0, 0xfffffffb, 0x3, 0x76b3, 0x4, 0x8, 0x6, 0x20000000, 0x3, 0x4, [0x10, 0x4, 0x3, 0x523, 0x4, 0x8, 0xf, 0x1, 0x7]}) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xdffe) lstat$auto(0x0, &(0x7f0000000180)={0x10, 0xfffffffffffffffa, 0x1000, 0x63, r2, 0x0, 0x0, 0x1000000008, 0xffffffff7fffffff, 0x7fffffffffffffff, 0x5, 0x7fffffff, 0x80000000000005, 0x7, 0x7, 0x61}) (async) lstat$auto(0x0, &(0x7f0000000180)={0x10, 0xfffffffffffffffa, 0x1000, 0x63, r2, 0x0, 0x0, 0x1000000008, 0xffffffff7fffffff, 0x7fffffffffffffff, 0x5, 0x7fffffff, 0x80000000000005, 0x7, 0x7, 0x61}) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a00040011000800", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) (async) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a00040011000800", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x16c}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) (async) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x16c}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/usb/drivers/sunplus/remove_id\x00', 0xa881, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/key\x00', 0x80000, 0x0) write$auto(0x3, 0x0, 0x81) r4 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) fcntl$auto_F_DUPFD_QUERY(r4, 0x403, 0x0) 57.037166953s ago: executing program 3 (id=1684): setresgid$auto(0x0, 0x0, 0xffffffffffffffff) mmap$auto(0xe, 0x2000a, 0xdf, 0xeb4, 0x401, 0x8000) socketpair$auto(0x3, 0x0, 0x11, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x18da02, 0x0) read$auto(r0, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0x1d, 0x2, 0x6) r1 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) fchdir$auto(0xffffffffffffffff) fanotify_init$auto(0x5, 0x2000000000002) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x48400, 0x41) fchmod$auto(r2, 0x7439) mkdir$auto(0x0, 0xfee) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x22082, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000100)='./cgroup/memory.pressure\x00@w\r\xf3\xedW\xe2\"P\x01\xe8\x04\x84p2>\xd6D\"\xb0\xd9\xca\xb9\aG[N\x82S\xbbQ\xbc=\x98\x1eR\xed\xc3V\xac\xe5\x16\xbe\xbd\xf5\xb028\x86\x17\x87A\xecLT\x16W\xa7\x944\xd7\x9b\x14\x8b\x97\xf6\xba\xb4\xa1~\xff^o\x84\x8a\xe2\xea(3g\xe5}A\xa0\x83B#c\xc7j\v\x01\x00\x00\x00\x00\x00\x00vS\x1d\xec\x86\x03\xcf\xf8\x11\xf9+\xe2\x9e\xa4\xba\xe57\xcfU\xfd\x12\xab\x15\xe7\xbb&\xb3<\x93\xe72gk\xae\xcb\xb2\xe8L\xca\xed\f\x858\xb7\xd0\xb1\xfaE\xe3\xe7\x02\x00)\xd2\x7fj\x12Z>\x1b9\x8d\x98\x1a\xa0\x81\x81', 0x6bc, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x800008000) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) mincore$auto(0x1000, 0x4000000, 0x0) r4 = syz_clone(0x211, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103700, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000001080)=""/4086, 0xff6) socket(0x9, 0x8000a, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c010000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf256500000045017d801400c7000000009239d122894029a500000000000000000000000001a2c09cdd0fd7ae45484e2570a0a65c69340c00d18008004500", @ANYRES32=r1, @ANYBLOB="1001048008005000", @ANYRES32=r4, @ANYBLOB="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"], 0x15c}}, 0x40020) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) 56.02993324s ago: executing program 3 (id=1691): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000800), r0) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="d87129bd7000ffdbdf2501000000492893a6939a309608c89a9fddd8a9060978b7cdd099eea5d6f7bd2890ef4825ce0bb69961b1066df6e83650c6afdb01636fe04353acbf0a0506675ce6ee5c81b8389b744f26929afc22902586bcf73e6d15a9f08de1be17ee92cace3d0cd9cab6a1755b89f7d395328670600d383638a002a926f8fed9a01069f0d11cf76ec615c6c51f0ac36e6bb756e7a55c27628dc22a79ad8d69e205c12c5306d92eae5757c4278917723a6eeea35064b7893afeb59e41bd54cd16ff7dd55c1c647c3303a0f387d12b839380d4a5fb132780fddcb80a1f5fe4e6e31ce18c041ef3c635fff278a32fe09ab4a327"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x7) (async) bpf$auto(0x1, &(0x7f0000000080)=@bpf_attr_0={0x401, 0x2, 0x37c, 0xc, 0x7194, 0xffffffffffffffff, 0xe, "c4cff4e4de0a95db5c53840124a78a13", 0x0, 0xffffffffffffffff, 0x2, 0x9, 0x7fff, 0x8}, 0x5) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x9}, 0x3) (async) splice$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8a5b, 0x401) (async) clock_nanosleep$auto(0x2, 0x6, &(0x7f0000000840)={0x0, 0xc025}, 0x0) (async) r4 = open(0x0, 0x40bc2, 0x1c0) write$auto(r4, 0x0, 0x9) (async) sendfile$auto(r4, r4, &(0x7f0000000000)=0x1, 0xb5d) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) r5 = socket(0x21, 0x4, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000001214af"], 0x14}}, 0x4000000) (async) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000900), r0) (async) connect$auto(r0, &(0x7f0000000940)=@nl=@proc={0x10, 0x0, 0x25dfdbfd}, 0x1e) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000a00), r0) socket$nl_generic(0x10, 0x3, 0x10) 55.091816057s ago: executing program 3 (id=1694): unshare$auto(0x40000080) r0 = socket(0x28, 0x2, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000000)=0x5) fsconfig$auto_HIDEPID_NOT_PTRACEABLE(0xffffffffffffffff, 0xfffffffa, &(0x7f0000000040)='\x00', &(0x7f0000000180)="8091b64ef9a2025eae45595d45", 0x4) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x4, 0x7, 0x0, 0x400, 0x9a, "077c1315ff06c9cc9ff4956913870ef95ebcd43e985b110210346f7f05f8bd5d8b4458e71254da2aab17208e518d2a9b3c20bd53a710ce119b1b61b0"}) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x7, 0x0) r2 = prctl$auto_PR_SET_MM_ARG_START(0x8, 0x8, 0xffffffffffffffff, 0x6, 0xb) ioctl$auto_MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000600)={&(0x7f0000000240)={0x0, 0xff, 0x5, 0x1f, 0xd, 0x7, 0x8, 0x0, 0x5df23ba0, 0xffffe5ba, 0x1, 0x7, 0x6d5, @iso={0x3e2c, 0x3}, 0x2, 0x9, 0x7, 0x4}, 0x0, 0x1ff}) mount$auto(0x0, &(0x7f0000000080)='}[,&*}\x00', 0x0, 0x80000, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mknod$auto(&(0x7f00000005c0)='./file0\x00', 0x7, 0x7) read$auto(r3, 0x0, 0x1f40) r4 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/bluetooth/hci1/power\x00', 0x101142, 0x0) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000580)={r0, &(0x7f0000000280)="a2c27b0b0a2b137890c400c9e1130db304f4e81b9647072f38baf141dbc5beeeae3f7ed6e372b85cf9ea2c77af33abb54f8d062eefa967bfb7f5d940e529198cd6df57b621118d80baf06db005c2484b0c7cea4189a22c89ca88247e2c554016ad2d0ecd30a4bd5486ef0d1b929234f0aa0bceee8afc00cf9bfb1027211da74f7791f1d0baa298a8f0f69b95995ea3b7e7e9dfc41835846504abe8566daf93f0", 0x3, &(0x7f0000000380)="7160fed202dcc9c8f317d7a3e3462442af5c40a7c017a54adf12951e353bc38ac8493f813058fc48830b9afa631b3f746f98b98feeb61178b0daa30c78df37bc2ed20e78b426b38807618415343cf509573445f1da642d3a11511de1cba90c61cd6b74e306e7f08ac863fd56d9ecf590176573aeca08b23c362e80299eb1d209fd551b3ce1d54968472d22739b49298b43741b3e14cb07f9f7a6859f4bc184a6f987eeb4683b477389737a95e49ccef1aa80769489abc024b7f6bf177e2ec009d9bcd5e8fc0cfb1cc37abc43bef4858aed15e79007fb2c44bc11be86cb85e99f", 0x6892, &(0x7f0000000480)="200c2a63edaa3a441eca11a5f0ab7c9760bef891093e259d944bfa74a9d4bb66b5827bbbe411b0e53c4a3e93e9c5c539a78e0636ff70ed8c5c5a51e203de8c4980db012e1c9d10d015ecafce4090d3303d752c9443120c339601ea0133748c6e92fbd03f79ee077e52e713dfb6f50117e60ffa5c584f3dd97b234be3eb4e2c77d0e63273cc4fcaefd018bf0134205e0a69745bdf4465c56c26ff847edc68398d827b9defd2b90014843bc83ada04d6ad714e03f9ef41e7", &(0x7f0000000540)=0xd3f0}) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) 54.979740086s ago: executing program 3 (id=1695): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129882, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x181502, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40146f2c, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x140146f2c, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000140)=',\x00', 0x3) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp1\x00', 0x8001, 0x0) ioctl$auto_SNDCTL_DSP_GETIPTR(r1, 0x800c5011, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0xd) statmount$auto(0x0, 0x0, 0x2, 0xf) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x0, 0xffffffffffffffff, [], {0x9, 0x6, 0x8c48, 0x29b, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x4, 0x1a7b870a, 0x76c5, 0x5, 0x500000000}}) r2 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000d40)=""/16, 0x10) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0xfffffffffffeffff, 0xd, 0x1, 0x948d, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x86d41, 0x0) socket(0x2c, 0x3, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x610841, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:01.3/rescan\x00', 0x1a1181, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev7\x00', 0x0, 0x0) ioctl$auto(0x3, 0xc040564a, 0x38) mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 51.660087218s ago: executing program 34 (id=1651): r0 = openat$auto_hwsim_simulate_radar_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy9/hwsim/dfs_simulate_radar\x00', 0x4448c0, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/dynamic_events\x00', 0xadcb779d29d94bf3, 0x0) mmap$auto(0x0, 0x803, 0xdf, 0xeba, r1, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) read$auto(r0, &(0x7f0000000200)='\x00', 0x7) move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) listmount$auto(&(0x7f0000000040)={0x200, @inferred, 0x7f, 0x81, 0x400}, 0x0, 0xf, 0x5) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compaction_proactiveness\x00', 0xc0781, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000180)={"82595bc7", 0xb, 0x1, 0x6, 0x2, 0x5, "9ad5b0e4593954e5d8ae2c265dfe2e", "02a8123b", "8bf802f2", "4407eed3", ["298791499d94b70a27b164b8", "6ce072986f64440ba3e29d39", "b66c8f7cbff097fb67caeee5", "f3d94449732efd18fa051e88"]}) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy1/force_tx_status\x00', 0x81300, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer\x00', 0x783a06, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_rts_threshold_ops_(0xffffffffffffff9c, 0x0, 0x400000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/hwsim0/addr_assign_type\x00', 0x8a01, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) r5 = socket(0x10, 0x2, 0x4) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/packets_per_slave\x00', 0x182b02, 0x0) pwrite64$auto(r6, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x15\x00p\x01\x99\x88c\x14\r>\x14\x1a\xd3\xd3\x1d\xf8?\xdb\xdb\xc1\xf5\xe3o\x8e\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\xe5}\xea\x1b\x95\xafQ;_L\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x10\x00\x00\x00\x00\x00/TX:\xfe\xe8\xe0\x96\xb1x\xc5\x1f\xd2\xe2\xf6^\xfdo\x00\x9a>T\xd5\x1e\xe3\xeb\x89q\a\xd6h\xc9\xbc\x8f\x1dBk\x95\x174\xdc\x03\x05> -\xb6\x9d[\xe42(\xe4\n\x98u\xc9\xa1\xc4Zb\x04\xc2\xf1 \x8a\xbe]\xde\xfd8u\xb4\xde\xb3\xa1T/\xdfx\x14Y\xfe\x1e\x1f\x91\x19\xb7\xfc\xcd\x7fl\xb3\xa8#\xa0\xb9P\x8d\x04C\x87\xebR\x93\x12\x18H&N\x8b\'i)\xab@\xaf\xcb\xda\x00\x067\xce\xd6V4\xc2\xeeX\xb4\xe9\f\xee\xe8\xd8\x91\x1b\xcd\x00j\x14H\xcc-\x14\xde\xaaN\x87\x8d\x9b\xa05\xacHX\xc1\xce\x91\xee\xad\r\xbe\xb2&f\xa3\xe2\x8bp\xba\x8a\"\xf1\xfc\xa13\xfe\xe0JG\xe1v\x82s}v~`X%pJ\xbf\xc3`\xa9\x8f\"l\xc7XX\xa4\xb6\x0e\xbe\xa0wy\xfe\x03n\xb5\r\xf149*(\x15\xaa\xc2\x8aB\xf1\xbb$M\xfe%\xc7\x84\xf0\xa4}bd\xac\xa8T\xda\xffm\x86\xca\x80\xde3\xa7\xba\xc7Y]\xd7\xa2\xec)\xd6\xad\xbcI\x10\xa3#\xd4/J\xa8\x14\x1b<\x04\xbd\x89\xefQf\xc0Q\x92\x92\xa7\x99\xcf\xaekR\xf5\xb7\x14r[\x9fx\xaf+\xb3@\xf4\x83\xbf\xc7e\xe7\xc2\xd6\x10\x0fk\xee)\x92\bO\xa1\x1a\x9e\xef:5\x1e\x1c\"9\xd8\xdf\xa9C\xe2SHG6\xf2\xd5.\x12]\x17J\x8b\xc52\xe9\x9e\xbc\xdc\xae\xef\xed\xf9\xa6\x9e-\x92pZ\x12j/\x1dD{\xac\x17\\O\xee\x11\x10$\x12\xfc \xb0\xb7cA;\xa1,\x040\xa7\xd9\xb2\x19@1\x92\x10\xc4\xc0\x1f\x1d\xe1\xf6\x80lW\v,\xa2\x134no\xa0\x00l\xd8\xe4\xd3\x16\xd3%\x8b\xf5\x1e\x12{\xe6\xdb\xde\a\xdedH\x90\xf7\x19\xff\xcb\xacC\xeadOf\xb8\x15\xc39\xefLt\t\x11\xa1\x0e\x85\xac\xcc+\xc0\xb4.\xaa3>\xc0\x96\x84\xd5\x02\xc1\x94=\xb0\xfe\xda\x1d\xe9\xa7\xe1\xcf\x80|k\xdd\x95\xc9\xb0y\xb4\xbd\xc2W\x9c\xa4\x80\x13\xbc\x7fb=y\xdb]U\xd1HC\xe1\xa7\x94q\xb0C\xb8\x86\xd0\x9d\xe0\x8aD\x91x\'\xd6\x17\xd1\x9d\x16\xa7oZ\x8a\xce:\x9e@\x04\x00\x05f+\xee\xd8\xe6D\x9e\xb18Aw\x92\xe8\xb8>\x81{', 0x8001, 0x1) close_range$auto(0x2, 0x8, 0x8000) socket(0x10, 0x2, 0xc) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r5, 0x0, 0x4000) 44.089762594s ago: executing program 35 (id=1676): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000380)=ANY=[@ANYBLOB="ad2a9d020c805e5ec3e2bba2e75591e5e79bf6079e538eebdbfa0419687a738415e053e9f8d5b6d94103672641a901358e28341f6b4b40abe69e35"], 0x1c}, 0x1, 0x0, 0x0, 0x404c091}, 0x4004000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ppoll$auto(&(0x7f0000000040)={r1, 0xfffc, 0x8}, 0x4, &(0x7f0000000100)={0x7fffffffffffffff, 0x8}, 0x0, 0x8) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x4c0782, 0x0) r2 = epoll_create$auto(0x3e) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000140)={0x0, 0x2a, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x20000001}, 0x48080) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, r2, 0x8000) r3 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/available_events\x00', 0x400, 0x0) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)=@bpf_attr_4={0x5, r4, 0x9, r3}, 0x8001) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mq_timedreceive$auto(r5, &(0x7f0000000180)='MAC80211_HWSIM\x00', 0xfffffffffffffff5, &(0x7f00000001c0)=0x3b6b5a33, &(0x7f0000000240)={0xf9e, 0x5}) shutdown$auto(0x5, 0x0) poll$auto(0x0, 0x1, 0x45ff) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x5}, 0xffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_PEERSEC(r7, 0x1, 0x1f, 0x0, &(0x7f00000004c0)=0xffff7fff) setresgid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 39.402913454s ago: executing program 36 (id=1695): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129882, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x181502, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40146f2c, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x140146f2c, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000140)=',\x00', 0x3) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp1\x00', 0x8001, 0x0) ioctl$auto_SNDCTL_DSP_GETIPTR(r1, 0x800c5011, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0xd) statmount$auto(0x0, 0x0, 0x2, 0xf) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x0, 0xffffffffffffffff, [], {0x9, 0x6, 0x8c48, 0x29b, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x4, 0x1a7b870a, 0x76c5, 0x5, 0x500000000}}) r2 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000d40)=""/16, 0x10) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0xfffffffffffeffff, 0xd, 0x1, 0x948d, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x86d41, 0x0) socket(0x2c, 0x3, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x610841, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:01.3/rescan\x00', 0x1a1181, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev7\x00', 0x0, 0x0) ioctl$auto(0x3, 0xc040564a, 0x38) mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 10.639538853s ago: executing program 6 (id=1811): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) r2 = fanotify_init$auto(0x5, 0x2000000000002) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r3, 0x0, 0x1f40) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r4, &(0x7f00000000c0)={0x0, 0x7}, 0x3) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) fanotify_mark$auto(r2, 0x1, 0x803a, r2, 0x0) madvise$auto(0x110c230000, 0x1, 0x9) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r5, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) ioctl$auto_SG_SET_RESERVED_SIZE2(r1, 0x2275, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x80101, 0x0) writev$auto(r7, 0x0, 0x4) bpf$auto(0x3, 0x0, 0xc) open(0x0, 0x149443, 0x100) bpf$auto(0x0, 0x0, 0x6f6) mount$auto(0x0, 0x0, 0x0, 0x200, 0x0) sendmsg$auto_BATADV_CMD_SET_MESH(r6, 0x0, 0x140080e4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, r0, 0x401, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0xb, 0x0, 0x0, @ipv6=@mcast2}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x800) 9.753731118s ago: executing program 6 (id=1817): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0x401, 0x8001) getcwd$auto(0x0, 0xffffffffffffffff) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000001380), 0x448000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mq_getsetattr$auto(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x86c5, 0x4, 0x8}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x6, &(0x7f0000000000), 0xffffffff) pread64$auto(r0, 0x0, 0xffffffffefffffff, 0xf) socket(0x18, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x2) r1 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x204, 0x1a00) read$auto(r1, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x480c0, 0x28, 0x3}, 0x18) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x6) readv$auto(r2, &(0x7f0000000000)={0x0, 0x9}, 0x200) read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, &(0x7f00000020c0)=""/4093, 0xffd) r3 = socket(0xa, 0x5, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(r3, 0x8946, 0x24) 6.991944884s ago: executing program 6 (id=1822): mmap$auto(0x0, 0x10001, 0x3f8d, 0xeb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$auto_SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, 0x0) (fail_nth: 2) 6.41952021s ago: executing program 6 (id=1827): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) readv$auto(r0, &(0x7f0000000040)={&(0x7f0000000140)="e16ec0cabf14bc2464671d0cd051846c2c096bccf7b483082b1ff4ef1e6f14199a69324b5ddc47f920d26bff76631523f37a5cdfd04c48dc30d2b24bb79fbbc22b5b57e437caa1a3dc2d91163ea0528030044fd7950cbb54514afd485516f0a20093742f08f7b5d88df3751148edff6aaa72f7e7a8b597a929e909b2c09bac325010b42c69e2d374b4424edc71e8f9ab453baf2687e4b6674366bd02f06e8d21d3ca6e4c57011dd8b4fd2788abcb5dd09b89a7159d7d6501a52da986a9124fff44b8d037a0e829870b4739a80d55536beaca3b87f9d6cc67e6baa4ed1c", 0x32}, 0x1) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0xffffff12, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r1, &(0x7f0000000000)={0x1, 0x2, 'u'}, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r2 = socket(0x1e, 0x1, 0x0) connect$auto(r2, 0x0, 0x10) r3 = socket(0xa, 0x2, 0x0) r4 = socket(0xa, 0x3, 0xff) connect$auto(r4, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x200, 0x400008, 0x200, 0x9b72, r3, 0x6) r5 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/mem\x00', 0x20401, 0x0) write$auto_proc_mem_operations_base(r5, &(0x7f0000001680)="a7", 0x80000) mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000) syz_clone3(0x0, 0xfffffffffffffc71) madvise$auto(0x1ffff000, 0x7, 0x100000000) sysfs$auto(0x2, 0x20, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) 6.308656457s ago: executing program 8 (id=1828): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0xe, 0x80000, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) r0 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/ns/cgroup\x00', 0x400, 0x0) ioctl$auto_NS_GET_TGID_IN_PIDNS(r0, 0x8004b709, &(0x7f0000000080)=0x1) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x2, 0x179, [{0x587, 0x5, 0x80000000}]}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_HPET_IE_ON(r4, 0x6801, 0x0) sendfile$auto(r1, r1, 0x0, 0x7fffe000) socket$nl_generic(0x10, 0x3, 0x10) r6 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_SEQ={0x7, 0xa, "107c4c"}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x3}, @NL80211_ATTR_WIPHY_NAME={0x5, 0x2, '\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'ip_vti0\x00'}) 5.424693098s ago: executing program 8 (id=1831): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0x401, 0x8001) getcwd$auto(0x0, 0xffffffffffffffff) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0x448000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mq_getsetattr$auto(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x86c5, 0x4, 0x8}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x6, &(0x7f0000000000), 0xffffffff) pread64$auto(r0, 0x0, 0xffffffffefffffff, 0xf) socket(0x18, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x2) r1 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x204, 0x1a00) read$auto(r1, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x480c0, 0x28, 0x3}, 0x18) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x6) readv$auto(r2, &(0x7f0000000000)={0x0, 0x9}, 0x200) read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, &(0x7f00000020c0)=""/4093, 0xffd) r3 = socket(0xa, 0x5, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(r3, 0x8946, 0x24) 5.198602206s ago: executing program 4 (id=1832): mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x2000000008000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x73) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, 0x0) write$auto(0x3, 0x0, 0xfdef) (async) readv$auto(r0, &(0x7f00000000c0)={0x0, 0xfff}, 0x3) r2 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x4, 0x7ff) r3 = socket(0xa, 0x2, 0x3a) bind$auto(r3, 0x0, 0x66) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r3, 0x0, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40008000) (async) r4 = epoll_create$auto(0x4) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video0\x00', 0x40000, 0x0) (async) write$auto_tap_fops_tap(r4, &(0x7f0000000100)="cf5d468b39d5bb05fcd0c7ad5ab368ecda7129c10a3b61d961ab419e8c5b59700f291a160aff6767e181494bed46d2a40c7c7ad62589a92f1d428ec55521ed895db2e8959316da3c4cef497360aac8b3d5911c0997939cd6a4304c", 0x5b) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002a80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010585f4e051c1cea1ee2dbceaaa0025bd7000ffdbdf251e000000187300"/42], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0xac8fe2812c61ec00) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socket(0x2, 0x1, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xa, 0x3, 0x3, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x8000]}, 0x0) (async) epoll_ctl$auto(r4, 0x1, r5, 0x0) (async) wait4$auto(r2, 0x0, 0x80000001, 0x0) 4.731572285s ago: executing program 6 (id=1834): mmap$auto(0x4, 0x4020009, 0xdf, 0xeb3, 0xffffffffffffffff, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x183041, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x93a1, 0x2000d, 0x8, 0xeb1, r0, 0x14008000) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000001bc0)="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", 0xd4f) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000200", @ANYRES16=r4, @ANYBLOB="01002abd7000fbdbdf2504000000010000002f79eadbfe0cf972f5a3d28479f92a9b221ca46c2d19fda4f47902c296fa844c12cd83f712d3c41e5d00000010842c86df03d8001a8008abd21af0daffc5678c56706b1da6d4ca16f92c2dde3d87f65e765fabb2312bf46f71f2fdea3969eec4f1f2dd66328888dc0f15860d118d50d0a7973e6c0b7d67b9067647d80f4aef0c9c8fab82e76ee49f1199124d5f30995b929e9873ea967966128e95b7d2436a2fa0622f047eac8dde8b8bf7193cfebbf9032aa59a263b9dba070c8c9c0375a15b811929af8d46fe6c5cd9920e4880df71dffc67664242cc183b71f2daff29c272dbe11db712bf5aed240f5ca741d5fe11ff00ff0de63ac401bfaea597193d02f5e4bdfbeda552ee74b987ff51ce4d8aa7e74faa2cacec126ded5369ac9cce6fe0e939c6e5a62aca280f24b4c8c100c512f2d656a754f7851a7de67a2e9a6d63ad9b2a0199751aed24809f5b44951d69f09c68e0161f98e29117c0bbd6876826e14b2cd777b2f631afae758b84c1aae8d342a1094e2ca5dcae02365ca74db7b8666fa78208ba27dd9669afe305df295aeec06dee1e6f1e6825dfb70fbfd1f05d438ff3839bc47cb35e8b2fcdfe398b5e8c793addd908b39d3900cd75924e8c00000000"], 0x54}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3f, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7efd) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) unshare$auto(0x1000000000000b) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 3.719836035s ago: executing program 4 (id=1835): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000640)='/sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x103400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000680)=""/249, 0xf9) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r3, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x0, 0x2f) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) getsid$auto(0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x40000, 0x0) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x105000, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r4, 0x4008af25, 0x0) rseq$auto(0x0, 0xfffffffe, 0x3, 0xff) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) mmap$auto(0x1, 0x40009, 0xdf, 0x13, r5, 0x7) read$auto_proc_pid_smaps_operations_internal(0xffffffffffffffff, &(0x7f00000002c0)=""/190, 0xfffffe39) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r2, 0x8040ae9f, &(0x7f0000000380)={0xdd}) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x9, 0x3, 0x16, 0x93f, 0x1ffe0, 0x3, 0x6, 0x2, 0x0, 0x5, 0xfff, 0xf, 0xb0, 0x1, 0x5, 0x7, 0x9, 0x7, 0x0, 0x0, 0x0, 0x200, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [0x6, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x10000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, 0x8000000000000001]}, 0x1fe, 0x10081) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), 0xffffffffffffffff) r7 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000380), 0x4800, 0x0) mmap$auto(0x4, 0x6, 0x9, 0x7c99, r7, 0x40) 3.500987654s ago: executing program 7 (id=1836): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x28, 0x5, 0x0) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000040), r0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x101800, 0x0) r2 = ioctl$auto_TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000040)={0xf305, &(0x7f0000000000)={0x7, 0x0, 0x4, @inferred=r1}}) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) bind$auto(r3, &(0x7f0000000080)=@nfc={0x27, 0x0, 0x1, 0x3}, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0xb, 0x3, 0x80000000) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f000000c380)={0xfffffffffffffff7, 0x0, 0x101, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x7, 0xbfb, 0x79, 0x9000000, 0x83, 0x1000}) open(&(0x7f00000000c0)='./file0\x00', 0x80000, 0x28) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/unprivileged_bpf_disabled\x00', 0x121a01, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xffffffff, 0x401, 0xfffffffffffffffa) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x10, 0x200000005, 0x20004, 0x1b7f, 0x7, 0x2) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x6, 0x3, 0x100) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) socketpair$auto(0x3, 0x8, 0x7, 0x0) ioctl$auto(0x1, 0x8983, 0x4) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) getrandom$auto(0x0, 0x6000000, 0x3) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) 3.163196762s ago: executing program 8 (id=1837): mmap$auto(0x0, 0x10001, 0x3f8d, 0xeb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) ioctl$auto_SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, 0x0) 3.043384565s ago: executing program 8 (id=1838): close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x11, 0x1, 0x0) (async) socket(0x1d, 0x1, 0x106) setsockopt$auto(0x1, 0x1, 0x4c, 0x0, 0xbb) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async, rerun: 32) r2 = socket(0xa, 0x1, 0x84) (async, rerun: 32) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) (async) getsockopt$auto(r2, 0x84, 0x16, 0x0, 0x0) r3 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$auto_I2C_SMBUS(r3, 0x720, 0xfffffffffffffffe) (async) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0x4068aea3, &(0x7f0000000080)={0xd5}) 2.975695631s ago: executing program 4 (id=1839): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000280), 0x80882, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/008/001\x00', 0x8901, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) socket(0x10, 0x2, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/lockdep\x00', 0x101000, 0x0) socket(0xa, 0x2, 0x73) socket(0x1e, 0x1, 0x0) pipe$auto(0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video33\x00', 0x80382, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c804}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) 2.750295128s ago: executing program 7 (id=1840): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x80000, 0x0) ioctl$auto_SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000040)="2f9901606e10a6dbd4ec3ed429b40349bbb6be92ddedf0da6eb6c70a7d9f6462a75de18a0d1bd5c93d7358f9ace8fd131b1dd44338ba13b6c786862488866b8f7a326b6abc3a5db7147568ec6254eda49bb946d3d023e6a5aa55e5c36a74ad7d3df9ec55217f954263c373ed22a7f1ed355168c6f32852e843211153e556191d4fc96a82e9b78c5f90a8b572f4b3cc888ed76724cdbfa829eb038129388f6d85ac2593e50d098602b18bd84c75d3204eaacb871bb45dee6ea948f28f60caf776e4a956d259fa54ddce0653c2456a819efe01474091a27ac85705") (async) mmap$auto(0xfffffffffffffffd, 0x400008, 0xe3, 0x9b71, r0, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) (async) keyctl$auto(0x1d, 0xfffffffffffffffd, 0x2, 0x628, 0xfffffffffffffffd) 2.672043328s ago: executing program 8 (id=1841): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x7, 0xffffffffffff0005, 0xd) madvise$auto(0x0, 0x80000001, 0x8) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129882, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x610841, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa) r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r0, &(0x7f0000000040)=""/4096, 0xfffffe82) madvise$auto(0x0, 0xffffffffffff0001, 0x15) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000001300)=&(0x7f0000001080)='\x8c\x82\xa5') creat$auto(&(0x7f00000010c0)=':,\x00', 0x6) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) mmap$auto(0x0, 0x10000, 0xe, 0xeb1, 0x401, 0x8000) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x501080, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) writev$auto(r1, &(0x7f0000000040)={&(0x7f0000000440)="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", 0x2}, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x640, 0x0) ioctl$auto_MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) 2.63132213s ago: executing program 4 (id=1842): mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x11}, 0x40881) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0xa6) 2.477543209s ago: executing program 7 (id=1843): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) unshare$auto(0x40000080) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) write$auto(r0, 0x0, 0xfff) write$auto(r1, 0x0, 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00', @ANYRES16=r4, @ANYBLOB="110b27bd7000fbdbdf250900000008000300", @ANYRES32=r5, @ANYBLOB="08000600e1"], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x9800) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) socket(0xa, 0x1, 0x0) ioctl$auto(0x3, 0x894b, 0x38) semget$auto(0x0, 0x13c, 0x1ff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001f00), 0xffffffffffffffff) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mounts\x00', 0x2a00, 0x0) sendmsg$auto_SMC_PNETID_ADD(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)=ANY=[@ANYBLOB="fbffffff5809241d460a586bc504b2897b58fa1a6a90e157636a39ddcd73557665580eb034a168558e9391f8bdf98a0de9ac6c1177e4dd5cc6a281d577c943279fb20a8719a7d4977c5b1193b5b0fa6373a79645deb8073da7c8990bb5fb1a2ae77d93ca4d3c8f178711a0ddcbef557aabf83735d63f7e5c7d000000000000000000000000716dec25c4ef24fb20c083562b42a39d288081992049d09de4307e225fc618a742700fd9329295fe7cf3dc2ab379e6593de77949c0301343eb40c6882a09dd6094c0", @ANYRES16=r7, @ANYBLOB="01002cbd700001dcdf25020000000c0002002b6f2a2390808b000b0001006e65746465760000"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x40d0) semtimedop$auto(0x0, &(0x7f00000000c0)={0xa, 0x81, 0x70}, 0x1f4, 0x0) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x8000, 0x36ec}, 0x1, 0x0) semctl$auto(0x0, 0x9, 0x0, 0x2) 2.386554825s ago: executing program 4 (id=1844): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/raid5wq/nice\x00', 0x80001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x101000, 0x0) select$auto(0x5, &(0x7f00000001c0)={[0x10000, 0x7, 0xc, 0x0, 0xa, 0xa, 0x4, 0x101, 0xc05f, 0x9, 0xfffffffffffffffa, 0x1ff, 0xfffffffffffffff7, 0x6, 0x4, 0x1600000000000000]}, &(0x7f0000000240)={[0x8, 0xe, 0x3, 0x8bd, 0x5, 0x8, 0x7, 0x1, 0x9cf, 0x9120, 0x3, 0x97, 0xfffffffffffffff6, 0x1, 0xa, 0x6]}, &(0x7f0000000380)={[0xffffffffffffffff, 0x2, 0x2, 0x71, 0x0, 0x1, 0x4, 0xfffffffffffffffb, 0x4, 0x100000000, 0x7, 0xae2, 0xc00, 0xfffffffffffffff8, 0xffffffffffffffff, 0x5]}, &(0x7f0000000300)={0x291, 0x9}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x101}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004044) prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7) socket(0x2, 0x80002, 0x73) pkey_free$auto(0x17) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000500)='/dev/adsp1\x00', 0x22502, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r1 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) r2 = getsockopt$auto(r1, 0x84, 0x6d, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000400)={0x8, 0x4fc, 0x5, 0x1, 0x1, 0x2f, 0x528, 0x2, 0x5, 0x8000000000000001, 0xb3f, 0x9, "2422b27674ca5e84b84562ea24362aaece522ed37cfaac55e9de03a9e95b7bf709fcc86a55cd2122c9e13bf55075edea8cde49aee4c88a40"}) 1.495644989s ago: executing program 6 (id=1845): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x5) socket(0x2b, 0x2, 0x5) r0 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) ioctl$auto(0x3, 0x40045613, r0) write$auto_cachefiles_daemon_fops_internal(r0, &(0x7f0000000140)="bfe24433877499ce6f8208396d7b666a15216216d1cf0eee2588680696bc49647b0a42240f9d8f89f5fce86e33e1a59721cfb8776217dbf0896e1617e521741691eaa86680911e837f6f9caeea6dd5c29e013a1706cc896e8d9bf49647448f4817bca6cd5e2455422aa8da2e445e76c8711d043dff473e3b45bceb823bcbeee99c41ab41e9966b8c637ec1093091fab81915754260fd5dceb81d3eaebca2c72b9ee4a0301f862bcd727417719dcdb5f5735e51d3b2c9640bb4e02de6082d363ad27742f6a322d493958c2bb763c0748a1c3f5f45dafdcb14a0a105f28a7d877186", 0xe1) r2 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r2, &(0x7f0000000080)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) get_robust_list$auto(0x1, 0x0, 0x0) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) mlock$auto(0x10fbe8, 0x4) openat$auto_ptdump_curknl_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) 1.385165291s ago: executing program 4 (id=1846): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0x401, 0x8001) getcwd$auto(0x0, 0xffffffffffffffff) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0x448000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mq_getsetattr$auto(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x86c5, 0x4, 0x8}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x6, &(0x7f0000000000), 0xffffffff) pread64$auto(r0, 0x0, 0xffffffffefffffff, 0xf) socket(0x18, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x2) r1 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x204, 0x1a00) read$auto(r1, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x480c0, 0x28, 0x3}, 0x18) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x6) readv$auto(r2, &(0x7f0000000000)={0x0, 0x9}, 0x200) read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, &(0x7f00000020c0)=""/4093, 0xffd) r3 = socket(0xa, 0x5, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(r3, 0x8946, 0x24) 1.29332971s ago: executing program 7 (id=1847): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_GET_TARGET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x248, r1, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6}, @NFC_ATTR_LLC_SDP={0xd0, 0x13, 0x0, 0x1, [@nested={0xcb, 0xaf, 0x0, 0x1, [@nested={0x4, 0x47}, @generic="92b35f91d36e4d5001a9d629231920f1f7c050699a0fea2e1a56f1a2695a8cb744cf6fc56a883581c28f51c488d85a2568e8b775cc9af4b008785ea82a8f107506c2f14c1a67078eebcac1f26a9abf5319ef57eb0daf652bc008754592cb6bfe84a59b7bda9472d2bfab98e452c5432bd8349f56138f7cf9b9982317095b585aaea7794eb8055c9c4e7af2965c0f7942fb5d2156be02c1dbba87ff904db6d745ed558cafbe1fce86cf533d4c4a64a656febe329f9220801362b670ed88381038242abb"]}]}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x9}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x3}, @NFC_ATTR_LLC_SDP={0x141, 0x13, 0x0, 0x1, [@typed={0x8, 0xad, 0x0, 0x0, @fd=r0}, @generic="70f6ec263ccd1fad1c0f7f3d0824718b181e21ffa953774f9ce2ee94cf2056150139dbc280dd1ec942978dfdf432a1e85f45200c561bd56991b6d883d5000e29ea52e440c3c56cad925eea136af6e16d7d4f5b9230046d4881408966e800b34f8c69f7f9d97b4341713deea0f6242643d6c0dbdc9205ea32", @generic="f3d4e429b40e436a5e6830deebbae5c2ec94986cc1b5be8a51669e42d9025fce46f516ef68a6681a11184a83e580418b9f93c0b6776242f08cf1cdb674afe947069b743d2b0e01171e6a94e54a71f2e7af52710398edd69ce62cc588bdece94cf53725da93344707161a1d946b1836a34cda6797610ea42d42a09e0724fd37733a51b90bc847a213221550c27edc6d9f09e83f22a4", @typed={0x14, 0x12a, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x14, 0x2c, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}, @NFC_ATTR_DEVICE_NAME={0x7, 0x2, '::K'}]}, 0x248}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) read$auto_mISDN_fops_timerdev(r0, &(0x7f0000001a00)=""/4097, 0x1001) ioctl$auto_IMADDTIMER(r0, 0x80044940, 0x0) 710.736023ms ago: executing program 7 (id=1848): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gre0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gre0\x00'}) bpf$auto(0x0, 0x0, 0x92) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r2 = socketcall$auto(0x8000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x49, 0x400, 0x100000000002}]}) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) socket(0x2, 0x801, 0x106) (async) r4 = socket(0x2, 0x801, 0x106) r5 = getsockopt$auto(r4, 0x11c, 0x3, 0x0, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r7 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r6, 0x541c, r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TUNSETSNDBUF2(r5, 0x400454d4, &(0x7f0000000300)=0x200) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r5, &(0x7f0000000340)=""/146, 0x92) (async) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r5, &(0x7f0000000340)=""/146, 0x92) sendmsg$auto_NL80211_CMD_GET_MPP(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x50, r9, 0xb01, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_HE_CAPABILITY={0x3a, 0x10d, "defe3624c0517b6bdde5e12be01417d2ff5a72a547852eb3c3a6d274301379a7c54e6758b56907f4f8047999e8c700b02ddd5bea45a6"}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x40048d0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 573.031477ms ago: executing program 8 (id=1849): r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x40, &(0x7f0000000180)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd1\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8p\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5\xe1\x9e5\xd9Y\xf0=\xdf\xe2\xf5\xdc6]\xf0JQq\x8d3\x19\n\x01\x8d\x1dL\x00t\xa3\xa7A\x16T\xb1\x03ycaS\xe6Q\xf0\xb9\xbdg', 0x110) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/245, 0xf5) ioctl$auto_FIGETBSZ(r1, 0x2, 0x0) mmap$auto(0x0, 0x10001, 0x400003f8d, 0xeb1, 0x401, 0x8000) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x40200, 0x0) openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f00000004c0), 0x101202, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$auto_SO_MARK(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x163fdb7e) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) msgctl$auto_IPC_INFO(0x7, 0x3, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x10000) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, 0x0, 0xa2500, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xeffd) ioctl$auto_SNDCTL_SYNTH_MEMAVL(r2, 0xc004510e, 0x0) 0s ago: executing program 7 (id=1850): epoll_create$auto(0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_STALL(r0, 0x550c, 0x5f) ioctl$auto(0x3, 0xffffffff40088a01, 0x1) (async) ioctl$auto(0x3, 0xffffffff40088a01, 0x1) kernel console output (not intermixed with test programs): 7214][T11144] No such timeout policy "" [ 405.242590][T11144] netlink: Failed to associated timeout policy '' [ 406.870402][T11174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1074'. [ 406.895434][T11184] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3930829162 (15723316648 ns) > initial count (10539976056 ns). Using initial count to start timer. [ 407.336066][T11189] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 409.706926][T11217] blktrace: Concurrent blktraces are not allowed on loop2 [ 410.916744][T11253] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1091'. [ 411.656402][T11254] FAULT_INJECTION: forcing a failure. [ 411.656402][T11254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.669865][T11254] CPU: 1 UID: 0 PID: 11254 Comm: syz.1.1092 Not tainted syzkaller #0 PREEMPT(full) [ 411.669891][T11254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 411.669901][T11254] Call Trace: [ 411.669908][T11254] [ 411.669914][T11254] dump_stack_lvl+0x16c/0x1f0 [ 411.669941][T11254] should_fail_ex+0x512/0x640 [ 411.669972][T11254] _copy_from_user+0x2e/0xd0 [ 411.670003][T11254] get_timespec64+0x8b/0x1b0 [ 411.670027][T11254] ? __pfx_get_timespec64+0x10/0x10 [ 411.670049][T11254] ? find_held_lock+0x2b/0x80 [ 411.670074][T11254] __x64_sys_futex+0x288/0x4c0 [ 411.670103][T11254] ? __pfx___x64_sys_futex+0x10/0x10 [ 411.670138][T11254] do_syscall_64+0xcd/0xfa0 [ 411.670161][T11254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.670180][T11254] RIP: 0033:0x7fe61f58f6c9 [ 411.670194][T11254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.670213][T11254] RSP: 002b:00007ffde9c04108 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 411.670231][T11254] RAX: ffffffffffffffda RBX: 00000000000647e8 RCX: 00007fe61f58f6c9 [ 411.670243][T11254] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe61f7e627c [ 411.670254][T11254] RBP: 0000000000000032 R08: 00007fe62040b000 R09: 0000001be9c043ff [ 411.670265][T11254] R10: 00007ffde9c04200 R11: 0000000000000246 R12: 00007fe61f7e627c [ 411.670276][T11254] R13: 00007ffde9c04200 R14: 000000000006481a R15: 00007ffde9c04220 [ 411.670298][T11254] [ 412.522094][T11274] nbd: socks must be embedded in a SOCK_ITEM attr [ 412.714419][T11278] binder: 11277:11278 ioctl c018620c 0 returned -1 [ 414.481176][T11307] nbd: socks must be embedded in a SOCK_ITEM attr [ 414.598428][T11310] No such timeout policy "" [ 414.606533][T11310] netlink: Failed to associated timeout policy '' [ 414.712869][T11312] random: crng reseeded on system resumption [ 415.223960][T11335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1112'. [ 417.322976][T11371] sp0: Synchronizing with TNC [ 420.240083][T11432] No such timeout policy "" [ 420.246598][T11432] netlink: Failed to associated timeout policy '' [ 421.696493][T11467] ERROR: Out of memory at tomoyo_memory_ok. [ 421.718064][T11467] FAULT_INJECTION: forcing a failure. [ 421.718064][T11467] name failslab, interval 1, probability 0, space 0, times 0 [ 421.731013][T11467] CPU: 1 UID: 7 PID: 11467 Comm: syz.0.1137 Not tainted syzkaller #0 PREEMPT(full) [ 421.731039][T11467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 421.731049][T11467] Call Trace: [ 421.731057][T11467] [ 421.731064][T11467] dump_stack_lvl+0x16c/0x1f0 [ 421.731092][T11467] should_fail_ex+0x512/0x640 [ 421.731124][T11467] should_failslab+0xc2/0x120 [ 421.731150][T11467] __kmalloc_cache_noprof+0x72/0x780 [ 421.731168][T11467] ? mark_held_locks+0x49/0x80 [ 421.731191][T11467] ? nsim_fib_event_nb+0x1c4/0x10d0 [ 421.731218][T11467] ? nsim_fib_event_nb+0x1c4/0x10d0 [ 421.731239][T11467] nsim_fib_event_nb+0x1c4/0x10d0 [ 421.731267][T11467] call_fib_notifier+0x3c/0x80 [ 421.731287][T11467] fib6_node_dump+0x1ea/0x320 [ 421.731308][T11467] ? __pfx_fib6_node_dump+0x10/0x10 [ 421.731335][T11467] ? do_raw_write_lock+0x11c/0x3a0 [ 421.731354][T11467] fib6_walk_continue+0x452/0x8d0 [ 421.731378][T11467] fib6_walk+0x182/0x370 [ 421.731418][T11467] fib6_tables_dump+0x222/0x370 [ 421.731445][T11467] ? __pfx_fib6_tables_dump+0x10/0x10 [ 421.731478][T11467] fib6_dump+0x48/0x60 [ 421.731500][T11467] register_fib_notifier+0x123/0x470 [ 421.731521][T11467] ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10 [ 421.731548][T11467] nsim_fib_create+0x938/0xc90 [ 421.731577][T11467] ? __pfx_nsim_fib_create+0x10/0x10 [ 421.731606][T11467] nsim_drv_probe+0xcec/0x1520 [ 421.731629][T11467] ? __pfx_nsim_drv_probe+0x10/0x10 [ 421.731654][T11467] ? kernfs_put+0x35/0x60 [ 421.731682][T11467] ? sysfs_create_link+0x68/0xc0 [ 421.731705][T11467] ? __pfx_nsim_bus_probe+0x10/0x10 [ 421.731728][T11467] really_probe+0x241/0xa90 [ 421.731756][T11467] __driver_probe_device+0x1de/0x440 [ 421.731779][T11467] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 421.731802][T11467] driver_probe_device+0x4c/0x1b0 [ 421.731828][T11467] __device_attach_driver+0x1df/0x310 [ 421.731855][T11467] ? __pfx___device_attach_driver+0x10/0x10 [ 421.731879][T11467] bus_for_each_drv+0x159/0x1e0 [ 421.731900][T11467] ? __pfx_bus_for_each_drv+0x10/0x10 [ 421.731926][T11467] __device_attach+0x1e4/0x4b0 [ 421.731951][T11467] ? __pfx___device_attach+0x10/0x10 [ 421.731977][T11467] ? do_raw_spin_unlock+0x172/0x230 [ 421.731998][T11467] bus_probe_device+0x17f/0x1c0 [ 421.732022][T11467] device_add+0x1148/0x1aa0 [ 421.732053][T11467] ? __pfx_device_add+0x10/0x10 [ 421.732080][T11467] ? lockdep_init_map_type+0x5c/0x280 [ 421.732107][T11467] ? __init_waitqueue_head+0xca/0x150 [ 421.732130][T11467] new_device_store+0x41b/0x730 [ 421.732154][T11467] ? __pfx_new_device_store+0x10/0x10 [ 421.732179][T11467] ? find_held_lock+0x2b/0x80 [ 421.732199][T11467] ? sysfs_file_kobj+0xe4/0x290 [ 421.732228][T11467] ? __pfx_new_device_store+0x10/0x10 [ 421.732265][T11467] bus_attr_store+0x74/0xb0 [ 421.732293][T11467] ? __pfx_bus_attr_store+0x10/0x10 [ 421.732320][T11467] sysfs_kf_write+0xf2/0x150 [ 421.732354][T11467] kernfs_fop_write_iter+0x3af/0x570 [ 421.732405][T11467] ? __pfx_sysfs_kf_write+0x10/0x10 [ 421.732430][T11467] do_iter_readv_writev+0x662/0x9e0 [ 421.732451][T11467] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 421.732481][T11467] vfs_writev+0x35f/0xde0 [ 421.732506][T11467] ? __pfx_vfs_writev+0x10/0x10 [ 421.732524][T11467] ? __mutex_lock+0x1c5/0x1060 [ 421.732554][T11467] ? __pfx___mutex_lock+0x10/0x10 [ 421.732586][T11467] ? __fget_files+0x20e/0x3c0 [ 421.732612][T11467] ? do_writev+0x132/0x340 [ 421.732629][T11467] do_writev+0x132/0x340 [ 421.732650][T11467] ? __pfx_do_writev+0x10/0x10 [ 421.732675][T11467] do_syscall_64+0xcd/0xfa0 [ 421.732699][T11467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.732718][T11467] RIP: 0033:0x7f5e9498f6c9 [ 421.732734][T11467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.732751][T11467] RSP: 002b:00007f5e95843038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 421.732769][T11467] RAX: ffffffffffffffda RBX: 00007f5e94be5fa0 RCX: 00007f5e9498f6c9 [ 421.732781][T11467] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000004 [ 421.732792][T11467] RBP: 00007f5e94a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 421.732802][T11467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.732813][T11467] R13: 00007f5e94be6038 R14: 00007f5e94be5fa0 R15: 00007ffdfcb42b98 [ 421.732837][T11467] [ 422.180786][T11469] No such timeout policy "" [ 422.185465][T11469] netlink: Failed to associated timeout policy '' [ 422.297317][T11467] Failed to register fib notifier [ 425.383271][T11502] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3930829162 (15723316648 ns) > initial count (10539976056 ns). Using initial count to start timer. [ 426.755317][T11467] netdevsim netdevsim511: probe with driver netdevsim failed with error -1 [ 427.382301][ T5932] Process accounting resumed [ 427.506035][T11519] FAULT_INJECTION: forcing a failure. [ 427.506035][T11519] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 427.567848][T11519] CPU: 1 UID: 0 PID: 11519 Comm: syz.0.1150 Not tainted syzkaller #0 PREEMPT(full) [ 427.567891][T11519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 427.567909][T11519] Call Trace: [ 427.567919][T11519] [ 427.567931][T11519] dump_stack_lvl+0x16c/0x1f0 [ 427.567973][T11519] should_fail_ex+0x512/0x640 [ 427.568023][T11519] should_fail_alloc_page+0xe7/0x130 [ 427.568068][T11519] prepare_alloc_pages+0x3c2/0x610 [ 427.568108][T11519] ? rcu_is_watching+0x12/0xc0 [ 427.568155][T11519] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 427.568187][T11519] ? kasan_save_stack+0x33/0x60 [ 427.568219][T11519] ? css_rstat_updated+0x1c2/0x510 [ 427.568255][T11519] ? __pfx_css_rstat_updated+0x10/0x10 [ 427.568308][T11519] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 427.568361][T11519] ? __lock_acquire+0x622/0x1c90 [ 427.568410][T11519] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 427.568463][T11519] ? policy_nodemask+0xea/0x4e0 [ 427.568508][T11519] alloc_pages_mpol+0x1fb/0x550 [ 427.568552][T11519] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 427.568607][T11519] folio_alloc_mpol_noprof+0x36/0x2f0 [ 427.568657][T11519] vma_alloc_folio_noprof+0xed/0x1e0 [ 427.568712][T11519] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 427.568773][T11519] do_pte_missing+0x2202/0x3ba0 [ 427.568820][T11519] ? find_held_lock+0x2b/0x80 [ 427.568865][T11519] __handle_mm_fault+0x1556/0x2aa0 [ 427.568927][T11519] ? __pfx___handle_mm_fault+0x10/0x10 [ 427.568976][T11519] ? __pte_offset_map_lock+0x174/0x310 [ 427.569016][T11519] ? find_held_lock+0x2b/0x80 [ 427.569062][T11519] ? follow_page_pte+0x5cf/0x1390 [ 427.569113][T11519] handle_mm_fault+0x589/0xd10 [ 427.569169][T11519] __get_user_pages+0x54e/0x3530 [ 427.569239][T11519] ? __pfx___get_user_pages+0x10/0x10 [ 427.569302][T11519] populate_vma_page_range+0x267/0x3f0 [ 427.569348][T11519] ? __pfx_populate_vma_page_range+0x10/0x10 [ 427.569389][T11519] ? __pfx_find_vma_intersection+0x10/0x10 [ 427.569432][T11519] ? do_mmap+0x69c/0x1210 [ 427.569476][T11519] __mm_populate+0x1d8/0x380 [ 427.569520][T11519] ? __pfx___mm_populate+0x10/0x10 [ 427.569567][T11519] ? up_write+0x1b2/0x520 [ 427.569616][T11519] vm_mmap_pgoff+0x37f/0x470 [ 427.569661][T11519] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 427.569719][T11519] ? __x64_sys_futex+0x1e0/0x4c0 [ 427.569758][T11519] ? __x64_sys_futex+0x1e9/0x4c0 [ 427.569805][T11519] ksys_mmap_pgoff+0x7d/0x5c0 [ 427.569843][T11519] ? xfd_validate_state+0x61/0x180 [ 427.569883][T11519] ? __pfx_do_writev+0x10/0x10 [ 427.569919][T11519] __x64_sys_mmap+0x125/0x190 [ 427.569969][T11519] do_syscall_64+0xcd/0xfa0 [ 427.570011][T11519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.570042][T11519] RIP: 0033:0x7f5e9498f6c9 [ 427.570067][T11519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.570095][T11519] RSP: 002b:00007f5e95843038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 427.570125][T11519] RAX: ffffffffffffffda RBX: 00007f5e94be5fa0 RCX: 00007f5e9498f6c9 [ 427.570145][T11519] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 427.570162][T11519] RBP: 00007f5e94a11f91 R08: 0000000000000002 R09: 0000000000008000 [ 427.570180][T11519] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 427.570199][T11519] R13: 00007f5e94be6038 R14: 00007f5e94be5fa0 R15: 00007ffdfcb42b98 [ 427.570241][T11519] [ 428.011640][T11532] qrtr: Invalid version 0 [ 428.193213][T11525] slcan: can't register candev [ 428.198416][T11525] Falling back ldisc for ttyS2. [ 432.431488][T11565] random: crng reseeded on system resumption [ 433.193582][T11569] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1159'. [ 433.313243][T11569] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.344880][T11572] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3930829162 (15723316648 ns) > initial count (10539976056 ns). Using initial count to start timer. [ 433.601618][T11569] bridge_slave_1 (unregistering): left allmulticast mode [ 433.610624][T11569] bridge_slave_1 (unregistering): left promiscuous mode [ 433.630190][T11569] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.110839][T11579] WARNING! power/level is deprecated; use power/control instead [ 434.233378][T11581] netlink: 5364 bytes leftover after parsing attributes in process `syz.2.1164'. [ 434.242657][T11581] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 435.009535][T11546] Process accounting resumed [ 435.087122][T11588] random: crng reseeded on system resumption [ 436.193366][T11618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1172'. [ 436.552881][T11623] FAULT_INJECTION: forcing a failure. [ 436.552881][T11623] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 436.587242][T11623] CPU: 1 UID: 0 PID: 11623 Comm: syz.3.1173 Not tainted syzkaller #0 PREEMPT(full) [ 436.587287][T11623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 436.587303][T11623] Call Trace: [ 436.587313][T11623] [ 436.587325][T11623] dump_stack_lvl+0x16c/0x1f0 [ 436.587368][T11623] should_fail_ex+0x512/0x640 [ 436.587420][T11623] should_fail_alloc_page+0xe7/0x130 [ 436.587461][T11623] prepare_alloc_pages+0x3c2/0x610 [ 436.587499][T11623] ? rcu_is_watching+0x12/0xc0 [ 436.587536][T11623] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 436.587582][T11623] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 436.587622][T11623] ? is_bpf_text_address+0x94/0x1a0 [ 436.587667][T11623] ? kernel_text_address+0x8d/0x100 [ 436.587697][T11623] ? __kernel_text_address+0xd/0x40 [ 436.587724][T11623] ? unwind_get_return_address+0x59/0xa0 [ 436.587757][T11623] ? arch_stack_walk+0xa6/0x100 [ 436.587798][T11623] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 436.587845][T11623] ? stack_depot_save_flags+0x29/0x9c0 [ 436.587887][T11623] ? __pfx_stack_trace_save+0x10/0x10 [ 436.587926][T11623] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 436.587978][T11623] ? policy_nodemask+0xea/0x4e0 [ 436.588022][T11623] alloc_pages_mpol+0x1fb/0x550 [ 436.588063][T11623] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 436.588116][T11623] alloc_pages_noprof+0x131/0x390 [ 436.588158][T11623] kimage_alloc_pages+0x74/0x350 [ 436.588189][T11623] kimage_alloc_control_pages+0x153/0xa00 [ 436.588232][T11623] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 436.588276][T11623] do_kexec_load+0x478/0x8a0 [ 436.588310][T11623] ? __pfx_do_kexec_load+0x10/0x10 [ 436.588345][T11623] ? _copy_from_user+0x59/0xd0 [ 436.588395][T11623] __x64_sys_kexec_load+0x1bf/0x230 [ 436.588433][T11623] do_syscall_64+0xcd/0xfa0 [ 436.588473][T11623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.588501][T11623] RIP: 0033:0x7fbedb18f6c9 [ 436.588526][T11623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.588562][T11623] RSP: 002b:00007fbedbfa3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 436.588593][T11623] RAX: ffffffffffffffda RBX: 00007fbedb3e6090 RCX: 00007fbedb18f6c9 [ 436.588613][T11623] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 436.588631][T11623] RBP: 00007fbedb211f91 R08: 0000000000000000 R09: 0000000000000000 [ 436.588649][T11623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.588665][T11623] R13: 00007fbedb3e6128 R14: 00007fbedb3e6090 R15: 00007ffc24245ee8 [ 436.588704][T11623] [ 436.588737][T11623] kexec: Could not allocate control_code_buffer [ 437.034765][T11630] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 437.117096][T11631] zswap: compressor not available [ 437.149751][T11631] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 437.826457][T11648] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3930829162 (15723316648 ns) > initial count (10539976056 ns). Using initial count to start timer. [ 440.438682][ T9684] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.784424][T11722] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1196'. [ 443.798946][T11722] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.187098][T11722] bridge_slave_1 (unregistering): left allmulticast mode [ 444.196628][T11722] bridge_slave_1 (unregistering): left promiscuous mode [ 444.217616][T11722] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.296600][T11732] futex_wake_op: syz.0.1197 tries to shift op by -2048; fix this program [ 444.441926][T11727] 0x000000000001-0x000000020000 : "" [ 444.478366][T11727] ftl_cs: FTL header corrupt! [ 444.639527][T11736] ERROR: Out of memory at tomoyo_memory_ok. [ 445.267146][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.273648][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.490577][T11454] syz.1.1130 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 447.501631][T11454] CPU: 1 UID: 0 PID: 11454 Comm: syz.1.1130 Not tainted syzkaller #0 PREEMPT(full) [ 447.501671][T11454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 447.501689][T11454] Call Trace: [ 447.501698][T11454] [ 447.501709][T11454] dump_stack_lvl+0x16c/0x1f0 [ 447.501751][T11454] dump_header+0x101/0x930 [ 447.501789][T11454] oom_kill_process+0x272/0xa40 [ 447.501825][T11454] out_of_memory+0x350/0x1700 [ 447.501867][T11454] ? __pfx_out_of_memory+0x10/0x10 [ 447.501910][T11454] mem_cgroup_out_of_memory+0x118/0x130 [ 447.501957][T11454] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 447.502013][T11454] ? do_raw_spin_unlock+0x172/0x230 [ 447.502049][T11454] try_charge_memcg+0x695/0xd30 [ 447.502098][T11454] ? __pfx_try_charge_memcg+0x10/0x10 [ 447.502153][T11454] ? __print_lock_name+0xb1/0xe0 [ 447.502186][T11454] ? rcu_read_unlock+0x17/0x60 [ 447.502252][T11454] charge_memcg+0x8a/0x230 [ 447.502291][T11454] __mem_cgroup_charge+0x2b/0x1e0 [ 447.502336][T11454] shmem_alloc_and_add_folio+0x514/0xc20 [ 447.502398][T11454] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 447.502451][T11454] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 447.502495][T11454] shmem_get_folio_gfp+0x67f/0x1610 [ 447.502539][T11454] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 447.502572][T11454] ? filemap_map_pages+0xe01/0x1b70 [ 447.502611][T11454] shmem_fault+0x1fe/0xa30 [ 447.502645][T11454] ? __pfx_shmem_fault+0x10/0x10 [ 447.502685][T11454] ? __pfx_filemap_map_pages+0x10/0x10 [ 447.502730][T11454] ? __pfx_filemap_map_pages+0x10/0x10 [ 447.502757][T11454] __do_fault+0x10d/0x490 [ 447.502793][T11454] ? __pfx_filemap_map_pages+0x10/0x10 [ 447.502820][T11454] do_pte_missing+0xf4a/0x3ba0 [ 447.502866][T11454] ? find_held_lock+0x2b/0x80 [ 447.502897][T11454] ? __handle_mm_fault+0x1529/0x2aa0 [ 447.502950][T11454] __handle_mm_fault+0x1556/0x2aa0 [ 447.503007][T11454] ? __pfx___handle_mm_fault+0x10/0x10 [ 447.503056][T11454] ? __pte_offset_map_lock+0x174/0x310 [ 447.503095][T11454] ? find_held_lock+0x2b/0x80 [ 447.503142][T11454] ? follow_page_pte+0x5cf/0x1390 [ 447.503200][T11454] handle_mm_fault+0x589/0xd10 [ 447.503254][T11454] __get_user_pages+0x54e/0x3530 [ 447.503313][T11454] ? __pfx___get_user_pages+0x10/0x10 [ 447.503353][T11454] ? __kernel_write_iter+0x5a5/0xb10 [ 447.503395][T11454] get_dump_page+0x257/0x3d0 [ 447.503434][T11454] ? __pfx_get_dump_page+0x10/0x10 [ 447.503476][T11454] ? dump_user_range+0x756/0xb70 [ 447.503514][T11454] dump_user_range+0x195/0xb70 [ 447.503554][T11454] ? __pfx_dump_user_range+0x10/0x10 [ 447.503586][T11454] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 447.503642][T11454] ? __pfx_writenote+0x10/0x10 [ 447.503686][T11454] elf_core_dump+0x29c3/0x3c00 [ 447.503741][T11454] ? __pfx_elf_core_dump+0x10/0x10 [ 447.503770][T11454] ? kasan_save_stack+0x33/0x60 [ 447.503801][T11454] ? kasan_save_track+0x14/0x30 [ 447.503832][T11454] ? __kasan_kmalloc+0xaa/0xb0 [ 447.503862][T11454] ? __kvmalloc_node_noprof+0x3a3/0x9c0 [ 447.503894][T11454] ? vfs_coredump+0x1ddc/0x5670 [ 447.503920][T11454] ? arch_do_signal_or_restart+0x8f/0x790 [ 447.503956][T11454] ? irqentry_exit_to_user_mode+0x176/0x310 [ 447.503991][T11454] ? asm_exc_page_fault+0x26/0x30 [ 447.504030][T11454] ? 0xffffffffff600000 [ 447.504130][T11454] ? vfs_coredump+0x2b9f/0x5670 [ 447.504157][T11454] vfs_coredump+0x2b9f/0x5670 [ 447.504213][T11454] ? __pfx_vfs_coredump+0x10/0x10 [ 447.504245][T11454] ? __lock_acquire+0x622/0x1c90 [ 447.504306][T11454] ? lock_acquire+0x179/0x350 [ 447.504371][T11454] ? is_bpf_text_address+0x8a/0x1a0 [ 447.504412][T11454] ? bpf_ksym_find+0x124/0x1c0 [ 447.504458][T11454] ? unwind_get_return_address+0x59/0xa0 [ 447.504491][T11454] ? arch_stack_walk+0xa6/0x100 [ 447.504539][T11454] ? stack_trace_save+0x8e/0xc0 [ 447.504573][T11454] ? __pfx_stack_trace_save+0x10/0x10 [ 447.504609][T11454] ? stack_depot_save_flags+0x29/0x9c0 [ 447.504655][T11454] ? __lock_acquire+0xb8a/0x1c90 [ 447.504771][T11454] ? proc_coredump_connector+0x2d1/0x4f0 [ 447.504802][T11454] ? __pfx_proc_coredump_connector+0x10/0x10 [ 447.504843][T11454] ? rcu_is_watching+0x12/0xc0 [ 447.504880][T11454] get_signal+0x22e1/0x26d0 [ 447.504925][T11454] ? force_sig_fault+0xc4/0x100 [ 447.504961][T11454] ? __pfx_get_signal+0x10/0x10 [ 447.505007][T11454] arch_do_signal_or_restart+0x8f/0x790 [ 447.505043][T11454] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 447.505075][T11454] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 447.505138][T11454] irqentry_exit_to_user_mode+0x176/0x310 [ 447.505177][T11454] asm_exc_page_fault+0x26/0x30 [ 447.505216][T11454] RIP: 0033:0x7fe61f58f6c9 [ 447.505246][T11454] Code: Unable to access opcode bytes at 0x7fe61f58f69f. [ 447.505259][T11454] RSP: 002b:00007fe6203e8fe8 EFLAGS: 00010206 [ 447.505283][T11454] RAX: 0000000000000000 RBX: 00007fe61f7e6090 RCX: 00007fe61f58f6c9 [ 447.505302][T11454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 447.505319][T11454] RBP: 00007fe61f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 447.505336][T11454] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 447.505353][T11454] R13: 00007fe61f7e6128 R14: 00007fe61f7e6090 R15: 00007ffde9c03fa8 [ 447.505403][T11454] [ 448.122490][T11454] memory: usage 307200kB, limit 307200kB, failcnt 29884 [ 448.129557][T11454] memory+swap: usage 431516kB, limit 9007199254740988kB, failcnt 0 [ 448.139278][T11454] kmem: usage 6044kB, limit 9007199254740988kB, failcnt 0 [ 448.154990][T11454] Memory cgroup stats for /syz1: [ 448.162808][T11454] cache 308150272 [ 448.171502][T11454] rss 90112 [ 448.174714][T11454] rss_huge 0 [ 448.177913][T11454] shmem 308150272 [ 448.181616][T11454] mapped_file 105582592 [ 448.185860][T11454] dirty 0 [ 448.188797][T11454] writeback 0 [ 448.192153][T11454] workingset_refault_anon 2402 [ 448.255297][T11454] workingset_refault_file 1219 [ 448.263204][T11454] swap 127299584 [ 448.266759][T11454] swapcached 135168 [ 448.270578][T11454] pgpgin 539044 [ 448.284244][T11454] pgpgout 465289 [ 448.287808][T11454] pgfault 363368 [ 448.291342][T11454] pgmajfault 452 [ 448.295277][T11454] inactive_anon 99934208 [ 448.299514][T11454] active_anon 208437248 [ 448.303702][T11454] inactive_file 0 [ 448.307725][T11454] active_file 0 [ 448.311180][T11454] unevictable 0 [ 448.317939][T11454] hierarchical_memory_limit 314572800 [ 448.323353][T11454] hierarchical_memsw_limit 9223372036854771712 [ 448.333772][T11454] total_cache 308150272 [ 448.337929][T11454] total_rss 90112 [ 448.341553][T11454] total_rss_huge 0 [ 448.346047][T11454] total_shmem 308150272 [ 448.350195][T11454] total_mapped_file 105582592 [ 448.354889][T11454] total_dirty 0 [ 448.360136][T11454] total_writeback 0 [ 448.364071][T11454] total_workingset_refault_anon 2402 [ 448.369347][T11454] total_workingset_refault_file 1219 [ 448.374642][T11454] total_swap 127299584 [ 448.378697][T11454] total_swapcached 135168 [ 448.383040][T11454] total_pgpgin 539044 [ 448.387012][T11454] total_pgpgout 465289 [ 448.391065][T11454] total_pgfault 363368 [ 448.395136][T11454] total_pgmajfault 452 [ 448.399196][T11454] total_inactive_anon 99934208 [ 448.403990][T11454] total_active_anon 208437248 [ 448.408653][T11454] total_inactive_file 0 [ 448.412808][T11454] total_active_file 0 [ 448.416778][T11454] total_unevictable 0 [ 448.420742][T11454] anon_cost 0 [ 448.424221][T11454] file_cost 0 [ 448.427509][T11454] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1130,pid=11444,uid=0 [ 448.443769][T11454] Memory cgroup out of memory: Killed process 11444 (syz.1.1130) total-vm:65668kB, anon-rss:0kB, file-rss:0kB, shmem-rss:48512kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 451.100072][T11808] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1216'. [ 453.706767][T11839] FAULT_INJECTION: forcing a failure. [ 453.706767][T11839] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 453.720080][T11839] CPU: 0 UID: 0 PID: 11839 Comm: syz.3.1220 Not tainted syzkaller #0 PREEMPT(full) [ 453.720106][T11839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 453.720117][T11839] Call Trace: [ 453.720125][T11839] [ 453.720132][T11839] dump_stack_lvl+0x16c/0x1f0 [ 453.720161][T11839] should_fail_ex+0x512/0x640 [ 453.720193][T11839] should_fail_alloc_page+0xe7/0x130 [ 453.720220][T11839] prepare_alloc_pages+0x3c2/0x610 [ 453.720248][T11839] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 453.720278][T11839] ? mas_find+0x156/0x6d0 [ 453.720303][T11839] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 453.720322][T11839] ? validate_mm+0x403/0x560 [ 453.720359][T11839] ? __pfx_validate_mm+0x10/0x10 [ 453.720394][T11839] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 453.720424][T11839] ? vma_wants_writenotify+0x10b/0x390 [ 453.720443][T11839] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 453.720475][T11839] ? policy_nodemask+0xea/0x4e0 [ 453.720501][T11839] alloc_pages_mpol+0x1fb/0x550 [ 453.720527][T11839] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 453.720559][T11839] alloc_pages_noprof+0x131/0x390 [ 453.720584][T11839] __pmd_alloc+0x3b/0x8b0 [ 453.720607][T11839] ? find_held_lock+0x2b/0x80 [ 453.720627][T11839] __handle_mm_fault+0xada/0x2aa0 [ 453.720662][T11839] ? __pfx___handle_mm_fault+0x10/0x10 [ 453.720710][T11839] handle_mm_fault+0x589/0xd10 [ 453.720743][T11839] __get_user_pages+0x54e/0x3530 [ 453.720777][T11839] ? __pfx___get_user_pages+0x10/0x10 [ 453.720809][T11839] populate_vma_page_range+0x267/0x3f0 [ 453.720838][T11839] ? __pfx_populate_vma_page_range+0x10/0x10 [ 453.720864][T11839] ? __pfx_find_vma_intersection+0x10/0x10 [ 453.720890][T11839] ? do_mmap+0x69c/0x1210 [ 453.720915][T11839] __mm_populate+0x1d8/0x380 [ 453.720942][T11839] ? __pfx___mm_populate+0x10/0x10 [ 453.720971][T11839] ? up_write+0x1b2/0x520 [ 453.721000][T11839] vm_mmap_pgoff+0x37f/0x470 [ 453.721026][T11839] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 453.721054][T11839] ? __x64_sys_futex+0x1e0/0x4c0 [ 453.721078][T11839] ? __x64_sys_futex+0x1e9/0x4c0 [ 453.721106][T11839] ksys_mmap_pgoff+0x7d/0x5c0 [ 453.721129][T11839] ? __pfx_do_writev+0x10/0x10 [ 453.721150][T11839] __x64_sys_mmap+0x125/0x190 [ 453.721181][T11839] do_syscall_64+0xcd/0xfa0 [ 453.721204][T11839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.721223][T11839] RIP: 0033:0x7fbedb18f6c9 [ 453.721239][T11839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.721257][T11839] RSP: 002b:00007fbedbfa3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 453.721274][T11839] RAX: ffffffffffffffda RBX: 00007fbedb3e6090 RCX: 00007fbedb18f6c9 [ 453.721286][T11839] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 453.721297][T11839] RBP: 00007fbedb211f91 R08: 0000000000000002 R09: 0000000000008000 [ 453.721307][T11839] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 453.721318][T11839] R13: 00007fbedb3e6128 R14: 00007fbedb3e6090 R15: 00007ffc24245ee8 [ 453.721341][T11839] [ 455.684258][T11851] netlink: 'syz.2.1223': attribute type 1 has an invalid length. [ 456.123629][T11857] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3930829162 (15723316648 ns) > initial count (10539976056 ns). Using initial count to start timer. [ 456.482066][T11842] syz.1.1221 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 456.536224][T11842] CPU: 0 UID: 0 PID: 11842 Comm: syz.1.1221 Not tainted syzkaller #0 PREEMPT(full) [ 456.536251][T11842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 456.536262][T11842] Call Trace: [ 456.536268][T11842] [ 456.536276][T11842] dump_stack_lvl+0x16c/0x1f0 [ 456.536309][T11842] dump_header+0x101/0x930 [ 456.536330][T11842] oom_kill_process+0x272/0xa40 [ 456.536351][T11842] out_of_memory+0x350/0x1700 [ 456.536375][T11842] ? __pfx_out_of_memory+0x10/0x10 [ 456.536399][T11842] mem_cgroup_out_of_memory+0x118/0x130 [ 456.536430][T11842] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 456.536465][T11842] ? do_raw_spin_unlock+0x172/0x230 [ 456.536486][T11842] try_charge_memcg+0x695/0xd30 [ 456.536513][T11842] ? __pfx_try_charge_memcg+0x10/0x10 [ 456.536537][T11842] ? find_held_lock+0x2b/0x80 [ 456.536556][T11842] ? rcu_read_unlock+0x17/0x60 [ 456.536587][T11842] obj_cgroup_charge_account+0x292/0x500 [ 456.536615][T11842] __memcg_slab_post_alloc_hook+0x2ea/0x940 [ 456.536645][T11842] ? kasan_save_track+0x14/0x30 [ 456.536670][T11842] kmem_cache_alloc_noprof+0x550/0x6e0 [ 456.536690][T11842] ? alloc_empty_file+0x55/0x1e0 [ 456.536720][T11842] ? alloc_empty_file+0x55/0x1e0 [ 456.536745][T11842] alloc_empty_file+0x55/0x1e0 [ 456.536772][T11842] path_openat+0xda/0x2cb0 [ 456.536799][T11842] ? __pfx_path_openat+0x10/0x10 [ 456.536821][T11842] ? __lock_acquire+0xb8a/0x1c90 [ 456.536849][T11842] do_filp_open+0x20b/0x470 [ 456.536870][T11842] ? __pfx_do_filp_open+0x10/0x10 [ 456.536907][T11842] ? alloc_fd+0x471/0x7d0 [ 456.536931][T11842] do_sys_openat2+0x11b/0x1d0 [ 456.536959][T11842] ? __pfx_do_sys_openat2+0x10/0x10 [ 456.536995][T11842] __x64_sys_openat+0x174/0x210 [ 456.537023][T11842] ? __pfx___x64_sys_openat+0x10/0x10 [ 456.537061][T11842] do_syscall_64+0xcd/0xfa0 [ 456.537085][T11842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.537104][T11842] RIP: 0033:0x7fe61f58f6c9 [ 456.537120][T11842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.537138][T11842] RSP: 002b:00007fe62040a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 456.537155][T11842] RAX: ffffffffffffffda RBX: 00007fe61f7e5fa0 RCX: 00007fe61f58f6c9 [ 456.537167][T11842] RDX: 0000000000002062 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 456.537178][T11842] RBP: 00007fe61f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 456.537189][T11842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.537200][T11842] R13: 00007fe61f7e6038 R14: 00007fe61f7e5fa0 R15: 00007ffde9c03fa8 [ 456.537223][T11842] [ 456.537230][T11842] memory: usage 307200kB, limit 307200kB, failcnt 30776 [ 456.872785][T11842] memory+swap: usage 431612kB, limit 9007199254740988kB, failcnt 0 [ 456.973683][T11842] kmem: usage 6280kB, limit 9007199254740988kB, failcnt 0 [ 457.097071][T11842] Memory cgroup stats for /syz1: [ 457.097407][T11842] cache 307871744 [ 457.314543][T11842] rss 163840 [ 457.317815][T11842] rss_huge 0 [ 457.321040][T11842] shmem 307871744 [ 457.359386][T11842] mapped_file 101576704 [ 457.378710][T11842] dirty 0 [ 457.381715][T11842] writeback 0 [ 457.432612][T11842] workingset_refault_anon 2485 [ 457.437447][T11842] workingset_refault_file 1219 [ 457.473151][T11842] swap 127397888 [ 457.487008][T11842] swapcached 36864 [ 457.490774][T11842] pgpgin 564371 [ 457.562499][T11842] pgpgout 490691 [ 457.566114][T11842] pgfault 374854 [ 457.569683][T11842] pgmajfault 452 [ 457.571621][T11880] ERROR: Out of memory at tomoyo_memory_ok. [ 457.597094][T11842] inactive_anon 153878528 [ 457.601468][T11842] active_anon 154193920 [ 457.689359][T11842] inactive_file 0 [ 457.863615][T11880] program syz.3.1230 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 457.877319][T11842] active_file 0 [ 457.880828][T11842] unevictable 0 [ 457.886967][T11842] hierarchical_memory_limit 314572800 [ 457.939984][T11842] hierarchical_memsw_limit 9223372036854771712 [ 458.039197][T11842] total_cache 307871744 [ 458.142325][T11842] total_rss 163840 [ 458.178933][T11842] total_rss_huge 0 [ 458.182897][T11842] total_shmem 307871744 [ 458.187126][T11842] total_mapped_file 101576704 [ 458.193895][T11842] total_dirty 0 [ 458.197388][T11842] total_writeback 0 [ 458.201208][T11842] total_workingset_refault_anon 2485 [ 458.206787][T11842] total_workingset_refault_file 1219 [ 458.212086][T11842] total_swap 127397888 [ 458.216201][T11842] total_swapcached 36864 [ 458.220457][T11842] total_pgpgin 564371 [ 458.224583][T11842] total_pgpgout 490691 [ 458.228666][T11842] total_pgfault 374854 [ 458.232778][T11842] total_pgmajfault 452 [ 458.236859][T11842] total_inactive_anon 153878528 [ 458.241723][T11842] total_active_anon 154193920 [ 458.538794][T11842] total_inactive_file 0 [ 458.579333][T11876] random: crng reseeded on system resumption [ 458.594785][T11842] total_active_file 0 [ 458.610269][T11842] total_unevictable 0 [ 458.676760][T11842] anon_cost 0 [ 458.708110][T11842] file_cost 0 [ 458.742951][T11842] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1130,pid=11443,uid=0 [ 458.804845][T11842] Memory cgroup out of memory: Killed process 11443 (syz.1.1130) total-vm:65668kB, anon-rss:0kB, file-rss:0kB, shmem-rss:45244kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 459.040993][T11904] block nbd9: NBD_DISCONNECT [ 459.812615][T11905] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 459.819262][T11905] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 459.825908][T11905] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 459.835180][T11905] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 461.153373][T11920] ERROR: Out of memory at tomoyo_memory_ok. [ 461.614038][T11916] ERROR: Out of memory at tomoyo_memory_ok. [ 461.824342][ T9679] Bluetooth: hci1: command 0x0c1a tx timeout [ 461.902580][ T9679] Bluetooth: hci3: command 0x040f tx timeout [ 461.908668][ T9679] Bluetooth: hci2: command 0x0c1a tx timeout [ 461.922307][T10203] Bluetooth: hci0: command 0x0c1a tx timeout [ 464.084354][T11946] No such timeout policy "" [ 464.089018][T11946] netlink: Failed to associated timeout policy '' [ 464.812897][T11951] netlink: 10060 bytes leftover after parsing attributes in process `syz.2.1238'. [ 466.166503][T11918] Process accounting paused [ 467.216000][T11976] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1244'. [ 467.394900][T11978] FAULT_INJECTION: forcing a failure. [ 467.394900][T11978] name failslab, interval 1, probability 0, space 0, times 0 [ 467.529493][T11978] CPU: 0 UID: 0 PID: 11978 Comm: syz.1.1245 Not tainted syzkaller #0 PREEMPT(full) [ 467.529539][T11978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 467.529557][T11978] Call Trace: [ 467.529568][T11978] [ 467.529581][T11978] dump_stack_lvl+0x16c/0x1f0 [ 467.529624][T11978] should_fail_ex+0x512/0x640 [ 467.529671][T11978] ? __kmalloc_cache_noprof+0x5f/0x780 [ 467.529707][T11978] should_failslab+0xc2/0x120 [ 467.529748][T11978] __kmalloc_cache_noprof+0x72/0x780 [ 467.529781][T11978] ? trace_pid_list_alloc+0x27c/0x3f0 [ 467.529834][T11978] ? trace_pid_list_alloc+0x27c/0x3f0 [ 467.529880][T11978] trace_pid_list_alloc+0x27c/0x3f0 [ 467.529929][T11978] trace_pid_write+0x10c/0x4b0 [ 467.529965][T11978] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 467.530008][T11978] ? __pfx_trace_pid_write+0x10/0x10 [ 467.530038][T11978] ? __pfx___mutex_lock+0x10/0x10 [ 467.530076][T11978] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 467.530119][T11978] ? update_last_data+0xb3/0x510 [ 467.530192][T11978] event_pid_write.isra.0+0x1e4/0x7f0 [ 467.530246][T11978] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 467.530316][T11978] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 467.530362][T11978] vfs_writev+0x5df/0xde0 [ 467.530411][T11978] ? __pfx_vfs_writev+0x10/0x10 [ 467.530436][T11978] ? __mutex_lock+0x1c5/0x1060 [ 467.530484][T11978] ? __pfx___mutex_lock+0x10/0x10 [ 467.530537][T11978] ? __fget_files+0x20e/0x3c0 [ 467.530582][T11978] ? do_writev+0x132/0x340 [ 467.530611][T11978] do_writev+0x132/0x340 [ 467.530643][T11978] ? __pfx_do_writev+0x10/0x10 [ 467.530691][T11978] do_syscall_64+0xcd/0xfa0 [ 467.530731][T11978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.530762][T11978] RIP: 0033:0x7fe61f58f6c9 [ 467.530787][T11978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.530816][T11978] RSP: 002b:00007fe62040a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 467.530847][T11978] RAX: ffffffffffffffda RBX: 00007fe61f7e5fa0 RCX: 00007fe61f58f6c9 [ 467.530866][T11978] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 467.530884][T11978] RBP: 00007fe61f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 467.530902][T11978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.530919][T11978] R13: 00007fe61f7e6038 R14: 00007fe61f7e5fa0 R15: 00007ffde9c03fa8 [ 467.530962][T11978] [ 467.869316][T11446] syz.1.1130 (11446) used greatest stack depth: 18552 bytes left [ 468.412277][T11987] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3930829162 (15723316648 ns) > initial count (10539976056 ns). Using initial count to start timer. [ 468.651039][T11998] __vm_enough_memory: pid: 11998, comm: syz.3.1250, bytes: 4398046511104 not enough memory for the allocation [ 469.027484][T12007] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3930829162 (125786533184 ns) > initial count (84319808448 ns). Using initial count to start timer. [ 473.833338][T12066] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1261'. [ 476.590834][T12096] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1267'. [ 478.919407][T12121] FAULT_INJECTION: forcing a failure. [ 478.919407][T12121] name failslab, interval 1, probability 0, space 0, times 0 [ 478.963792][T12121] CPU: 1 UID: 0 PID: 12121 Comm: syz.0.1272 Not tainted syzkaller #0 PREEMPT(full) [ 478.963833][T12121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 478.963850][T12121] Call Trace: [ 478.963860][T12121] [ 478.963872][T12121] dump_stack_lvl+0x16c/0x1f0 [ 478.963915][T12121] should_fail_ex+0x512/0x640 [ 478.963956][T12121] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 478.963989][T12121] should_failslab+0xc2/0x120 [ 478.964026][T12121] kmem_cache_alloc_noprof+0x75/0x6e0 [ 478.964055][T12121] ? __proc_create+0x2ce/0x8e0 [ 478.964120][T12121] ? __proc_create+0x2ce/0x8e0 [ 478.964161][T12121] __proc_create+0x2ce/0x8e0 [ 478.964205][T12121] ? __pfx___proc_create+0x10/0x10 [ 478.964253][T12121] ? __pfx___netlink_kernel_create+0x10/0x10 [ 478.964299][T12121] proc_create_reg+0x7d/0x180 [ 478.964347][T12121] proc_create_net_data+0x8e/0x1c0 [ 478.964394][T12121] ? __pfx_proc_create_net_data+0x10/0x10 [ 478.964436][T12121] ? __pfx_uevent_net_rcv+0x10/0x10 [ 478.964480][T12121] ? ops_init+0x77/0x5f0 [ 478.964514][T12121] ? __pfx_proto_init_net+0x10/0x10 [ 478.964551][T12121] proto_init_net+0x53/0x70 [ 478.964588][T12121] ops_init+0x1e2/0x5f0 [ 478.964622][T12121] setup_net+0x100/0x390 [ 478.964657][T12121] ? __pfx_setup_net+0x10/0x10 [ 478.964691][T12121] ? debug_mutex_init+0x37/0x70 [ 478.964728][T12121] copy_net_ns+0x2f8/0x690 [ 478.964764][T12121] create_new_namespaces+0x3ea/0xa90 [ 478.964810][T12121] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 478.964849][T12121] ksys_unshare+0x45b/0xa40 [ 478.964887][T12121] ? __pfx_ksys_unshare+0x10/0x10 [ 478.964925][T12121] ? xfd_validate_state+0x61/0x180 [ 478.964979][T12121] __x64_sys_unshare+0x31/0x40 [ 478.965016][T12121] do_syscall_64+0xcd/0xfa0 [ 478.965054][T12121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.965094][T12121] RIP: 0033:0x7f5e9498f6c9 [ 478.965118][T12121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.965146][T12121] RSP: 002b:00007f5e95843038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 478.965175][T12121] RAX: ffffffffffffffda RBX: 00007f5e94be5fa0 RCX: 00007f5e9498f6c9 [ 478.965194][T12121] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 478.965212][T12121] RBP: 00007f5e94a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 478.965230][T12121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.965247][T12121] R13: 00007f5e94be6038 R14: 00007f5e94be5fa0 R15: 00007ffdfcb42b98 [ 478.965291][T12121] [ 479.661998][T12144] FAULT_INJECTION: forcing a failure. [ 479.661998][T12144] name failslab, interval 1, probability 0, space 0, times 0 [ 479.721563][T12144] CPU: 1 UID: 0 PID: 12144 Comm: syz.3.1277 Not tainted syzkaller #0 PREEMPT(full) [ 479.721609][T12144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 479.721627][T12144] Call Trace: [ 479.721638][T12144] [ 479.721650][T12144] dump_stack_lvl+0x16c/0x1f0 [ 479.721694][T12144] should_fail_ex+0x512/0x640 [ 479.721740][T12144] ? __kvmalloc_node_noprof+0x12e/0x9c0 [ 479.721800][T12144] should_failslab+0xc2/0x120 [ 479.721842][T12144] __kvmalloc_node_noprof+0x141/0x9c0 [ 479.721891][T12144] ? io_alloc_cache_init+0x38/0x170 [ 479.721943][T12144] ? io_alloc_cache_init+0x38/0x170 [ 479.721983][T12144] io_alloc_cache_init+0x38/0x170 [ 479.722030][T12144] io_uring_setup+0x648/0x20e0 [ 479.722071][T12144] ? __pfx_io_uring_setup+0x10/0x10 [ 479.722106][T12144] ? do_futex+0x122/0x350 [ 479.722151][T12144] ? __pfx_do_futex+0x10/0x10 [ 479.722222][T12144] ? xfd_validate_state+0x61/0x180 [ 479.722263][T12144] ? __pfx_ksys_write+0x10/0x10 [ 479.722307][T12144] __x64_sys_io_uring_setup+0xc2/0x170 [ 479.722347][T12144] do_syscall_64+0xcd/0xfa0 [ 479.722389][T12144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.722419][T12144] RIP: 0033:0x7fbedb18f6c9 [ 479.722444][T12144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.722474][T12144] RSP: 002b:00007fbedbfc4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 479.722505][T12144] RAX: ffffffffffffffda RBX: 00007fbedb3e5fa0 RCX: 00007fbedb18f6c9 [ 479.722526][T12144] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000001d48 [ 479.722544][T12144] RBP: 00007fbedb211f91 R08: 0000000000000000 R09: 0000000000000000 [ 479.722563][T12144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.722580][T12144] R13: 00007fbedb3e6038 R14: 00007fbedb3e5fa0 R15: 00007ffc24245ee8 [ 479.722623][T12144] [ 480.376248][T12149] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 480.396215][T12149] CPU: 0 UID: 0 PID: 12149 Comm: syz.2.1276 Not tainted syzkaller #0 PREEMPT(full) [ 480.396255][T12149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 480.396272][T12149] Call Trace: [ 480.396282][T12149] [ 480.396294][T12149] dump_stack_lvl+0x16c/0x1f0 [ 480.396334][T12149] sysfs_warn_dup+0x7f/0xa0 [ 480.396371][T12149] sysfs_do_create_link_sd+0x124/0x140 [ 480.396414][T12149] sysfs_create_link+0x61/0xc0 [ 480.396453][T12149] device_add+0x62c/0x1aa0 [ 480.396503][T12149] ? __pfx_device_add+0x10/0x10 [ 480.396548][T12149] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 480.396598][T12149] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 480.396641][T12149] wiphy_register+0x1eb0/0x2b20 [ 480.396681][T12149] ? netdev_run_todo+0x864/0x1320 [ 480.396726][T12149] ? __pfx_wiphy_register+0x10/0x10 [ 480.396790][T12149] ieee80211_register_hw+0x253d/0x4120 [ 480.396847][T12149] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 480.396888][T12149] ? __pfx___debug_object_init+0x10/0x10 [ 480.396932][T12149] ? find_held_lock+0x2b/0x80 [ 480.396964][T12149] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 480.397014][T12149] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 480.397053][T12149] ? __hrtimer_setup+0x176/0x280 [ 480.397114][T12149] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 480.397175][T12149] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 480.397222][T12149] hwsim_new_radio_nl+0xba2/0x1330 [ 480.397258][T12149] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 480.397305][T12149] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 480.397346][T12149] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 480.397395][T12149] genl_family_rcv_msg_doit+0x209/0x2f0 [ 480.397435][T12149] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 480.397487][T12149] ? bpf_lsm_capable+0x9/0x10 [ 480.397524][T12149] ? security_capable+0x7e/0x260 [ 480.397564][T12149] ? ns_capable+0xd7/0x110 [ 480.397599][T12149] genl_rcv_msg+0x55c/0x800 [ 480.397642][T12149] ? __pfx_genl_rcv_msg+0x10/0x10 [ 480.397680][T12149] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 480.397730][T12149] netlink_rcv_skb+0x158/0x420 [ 480.397763][T12149] ? __pfx_genl_rcv_msg+0x10/0x10 [ 480.397805][T12149] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 480.397865][T12149] ? netlink_deliver_tap+0x1ae/0xd30 [ 480.397905][T12149] genl_rcv+0x28/0x40 [ 480.397939][T12149] netlink_unicast+0x5aa/0x870 [ 480.397981][T12149] ? __pfx_netlink_unicast+0x10/0x10 [ 480.398013][T12149] ? __pfx___might_resched+0x10/0x10 [ 480.398062][T12149] netlink_sendmsg+0x8c8/0xdd0 [ 480.398116][T12149] ? __pfx_netlink_sendmsg+0x10/0x10 [ 480.398156][T12149] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 480.398209][T12149] ____sys_sendmsg+0xa98/0xc70 [ 480.398249][T12149] ? copy_msghdr_from_user+0x10a/0x160 [ 480.398279][T12149] ? __pfx_____sys_sendmsg+0x10/0x10 [ 480.398313][T12149] ? preempt_schedule_thunk+0x16/0x30 [ 480.398371][T12149] ? try_to_wake_up+0xa67/0x1870 [ 480.398412][T12149] ___sys_sendmsg+0x134/0x1d0 [ 480.398440][T12149] ? find_held_lock+0x2b/0x80 [ 480.398473][T12149] ? __pfx____sys_sendmsg+0x10/0x10 [ 480.398499][T12149] ? __lock_acquire+0x622/0x1c90 [ 480.398604][T12149] __sys_sendmsg+0x16d/0x220 [ 480.398634][T12149] ? __pfx___sys_sendmsg+0x10/0x10 [ 480.398663][T12149] ? __x64_sys_futex+0x1e0/0x4c0 [ 480.398729][T12149] do_syscall_64+0xcd/0xfa0 [ 480.398767][T12149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.398799][T12149] RIP: 0033:0x7f3121f8f6c9 [ 480.398823][T12149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.398849][T12149] RSP: 002b:00007f3122eeb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 480.398878][T12149] RAX: ffffffffffffffda RBX: 00007f31221e5fa0 RCX: 00007f3121f8f6c9 [ 480.398898][T12149] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000011 [ 480.398916][T12149] RBP: 00007f3122011f91 R08: 0000000000000000 R09: 0000000000000000 [ 480.398934][T12149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 480.398951][T12149] R13: 00007f31221e6038 R14: 00007f31221e5fa0 R15: 00007ffdd3085138 [ 480.398995][T12149] [ 482.218190][T12177] FAULT_INJECTION: forcing a failure. [ 482.218190][T12177] name fail_futex, interval 1, probability 0, space 0, times 0 [ 482.316662][T12177] CPU: 1 UID: 0 PID: 12177 Comm: syz.3.1283 Not tainted syzkaller #0 PREEMPT(full) [ 482.316689][T12177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 482.316699][T12177] Call Trace: [ 482.316706][T12177] [ 482.316713][T12177] dump_stack_lvl+0x16c/0x1f0 [ 482.316740][T12177] should_fail_ex+0x512/0x640 [ 482.316772][T12177] get_futex_key+0x1d0/0x1560 [ 482.316797][T12177] ? _copy_from_user+0x59/0xd0 [ 482.316833][T12177] ? __pfx_get_futex_key+0x10/0x10 [ 482.316854][T12177] ? kstrtoint_from_user+0x13c/0x1d0 [ 482.316878][T12177] ? __pfx_kstrtoint_from_user+0x10/0x10 [ 482.316909][T12177] futex_wake+0xea/0x530 [ 482.316940][T12177] ? __pfx_futex_wake+0x10/0x10 [ 482.316974][T12177] ? ksys_write+0x190/0x250 [ 482.316998][T12177] do_futex+0x1e3/0x350 [ 482.317024][T12177] ? __pfx_do_futex+0x10/0x10 [ 482.317055][T12177] __x64_sys_futex+0x1e0/0x4c0 [ 482.317084][T12177] ? fput+0x9b/0xd0 [ 482.317108][T12177] ? __pfx___x64_sys_futex+0x10/0x10 [ 482.317133][T12177] ? ksys_write+0x1ac/0x250 [ 482.317152][T12177] ? __pfx_ksys_write+0x10/0x10 [ 482.317178][T12177] do_syscall_64+0xcd/0xfa0 [ 482.317203][T12177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.317222][T12177] RIP: 0033:0x7fbedb18f6c9 [ 482.317237][T12177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.317255][T12177] RSP: 002b:00007fbedbfc40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 482.317273][T12177] RAX: ffffffffffffffda RBX: 00007fbedb3e5fa8 RCX: 00007fbedb18f6c9 [ 482.317284][T12177] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbedb3e5fac [ 482.317295][T12177] RBP: 00007fbedb3e5fa0 R08: 00007fbedbfc5000 R09: 0000000000000000 [ 482.317306][T12177] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 482.317317][T12177] R13: 00007fbedb3e6038 R14: 00007ffc24245e00 R15: 00007ffc24245ee8 [ 482.317340][T12177] [ 483.000610][T12189] random: crng reseeded on system resumption [ 483.991429][T12182] bridge0: port 2(gretap0) entered blocking state [ 484.054924][T12182] bridge0: port 2(gretap0) entered disabled state [ 484.119691][T12182] gretap0: entered allmulticast mode [ 484.214735][T12182] gretap0: entered promiscuous mode [ 484.220892][T12182] bridge0: port 2(gretap0) entered blocking state [ 484.227535][T12182] bridge0: port 2(gretap0) entered forwarding state [ 484.317453][T12203] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1289'. [ 485.861406][T12222] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.788974][T12261] wlan1: mtu less than device minimum [ 488.375308][T12265] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1300'. [ 488.637845][T12272] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1301'. [ 488.716632][T12273] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3930829162 (125786533184 ns) > initial count (84319808448 ns). Using initial count to start timer. [ 488.788873][T12268] netlink: 'syz.3.1301': attribute type 2 has an invalid length. [ 491.785059][T12316] FAULT_INJECTION: forcing a failure. [ 491.785059][T12316] name fail_futex, interval 1, probability 0, space 0, times 0 [ 491.812327][T12316] CPU: 1 UID: 0 PID: 12316 Comm: syz.1.1310 Not tainted syzkaller #0 PREEMPT(full) [ 491.812374][T12316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 491.812389][T12316] Call Trace: [ 491.812399][T12316] [ 491.812410][T12316] dump_stack_lvl+0x16c/0x1f0 [ 491.812450][T12316] should_fail_ex+0x512/0x640 [ 491.812499][T12316] get_futex_key+0x1d0/0x1560 [ 491.812545][T12316] ? __pfx_get_futex_key+0x10/0x10 [ 491.812583][T12316] ? find_held_lock+0x2b/0x80 [ 491.812615][T12316] ? __handle_mm_fault+0x1529/0x2aa0 [ 491.812676][T12316] futex_wake+0xea/0x530 [ 491.812724][T12316] ? __pfx_futex_wake+0x10/0x10 [ 491.812767][T12316] ? css_rstat_updated+0x1c2/0x510 [ 491.812791][T12316] do_futex+0x1e3/0x350 [ 491.812817][T12316] ? __pfx_do_futex+0x10/0x10 [ 491.812842][T12316] ? find_held_lock+0x2b/0x80 [ 491.812861][T12316] ? handle_mm_fault+0x2ab/0xd10 [ 491.812892][T12316] __x64_sys_futex+0x1e0/0x4c0 [ 491.812920][T12316] ? __pfx___x64_sys_futex+0x10/0x10 [ 491.812955][T12316] do_syscall_64+0xcd/0xfa0 [ 491.812979][T12316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.812998][T12316] RIP: 0033:0x7fe61f58f6c9 [ 491.813013][T12316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.813031][T12316] RSP: 002b:00007ffde9c04108 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 491.813049][T12316] RAX: ffffffffffffffda RBX: 00007fe61f7e5fa8 RCX: 00007fe61f58f6c9 [ 491.813061][T12316] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe61f7e5fa8 [ 491.813072][T12316] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000004e9c043ff [ 491.813083][T12316] R10: 00007fe61f7e5fa0 R11: 0000000000000246 R12: 00007fe61f7e5fac [ 491.813094][T12316] R13: 00007fe61f7e5fa0 R14: 00000000000011a6 R15: 0000000000000004 [ 491.813117][T12316] [ 492.703498][T12335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1312'. [ 494.319039][T12395] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1315'. [ 494.884533][T12408] FAULT_INJECTION: forcing a failure. [ 494.884533][T12408] name failslab, interval 1, probability 0, space 0, times 0 [ 494.897469][T12408] CPU: 0 UID: 0 PID: 12408 Comm: syz.3.1319 Not tainted syzkaller #0 PREEMPT(full) [ 494.897510][T12408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 494.897528][T12408] Call Trace: [ 494.897539][T12408] [ 494.897551][T12408] dump_stack_lvl+0x16c/0x1f0 [ 494.897595][T12408] should_fail_ex+0x512/0x640 [ 494.897648][T12408] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 494.897684][T12408] should_failslab+0xc2/0x120 [ 494.897726][T12408] kmem_cache_alloc_noprof+0x75/0x6e0 [ 494.897759][T12408] ? skb_clone+0x190/0x3f0 [ 494.897800][T12408] ? skb_clone+0x190/0x3f0 [ 494.897833][T12408] skb_clone+0x190/0x3f0 [ 494.897868][T12408] netlink_deliver_tap+0xabd/0xd30 [ 494.897910][T12408] netlink_unicast+0x64c/0x870 [ 494.897953][T12408] ? __pfx_netlink_unicast+0x10/0x10 [ 494.897983][T12408] ? __asan_memset+0x23/0x50 [ 494.898016][T12408] ? __build_skb_around+0x278/0x3b0 [ 494.898060][T12408] ? is_vmalloc_addr+0x86/0xa0 [ 494.898099][T12408] netlink_sendmsg+0x8c8/0xdd0 [ 494.898141][T12408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 494.898181][T12408] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 494.898236][T12408] ____sys_sendmsg+0xa98/0xc70 [ 494.898281][T12408] ? __pfx_____sys_sendmsg+0x10/0x10 [ 494.898328][T12408] ? trace_pid_list_is_set+0x100/0x150 [ 494.898383][T12408] ? trace_ignore_this_task+0xc3/0x100 [ 494.898422][T12408] ___sys_sendmsg+0x134/0x1d0 [ 494.898457][T12408] ? __pfx____sys_sendmsg+0x10/0x10 [ 494.898514][T12408] ? find_held_lock+0x2b/0x80 [ 494.898581][T12408] __sys_sendmmsg+0x200/0x420 [ 494.898619][T12408] ? __pfx___sys_sendmmsg+0x10/0x10 [ 494.898672][T12408] ? __pfx_do_futex+0x10/0x10 [ 494.898731][T12408] ? __sys_socket+0xac/0x260 [ 494.898775][T12408] ? xfd_validate_state+0x61/0x180 [ 494.898828][T12408] __x64_sys_sendmmsg+0x9c/0x100 [ 494.898859][T12408] ? lockdep_hardirqs_on+0x7c/0x110 [ 494.898896][T12408] do_syscall_64+0xcd/0xfa0 [ 494.898937][T12408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.898968][T12408] RIP: 0033:0x7fbedb18f6c9 [ 494.898992][T12408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.899021][T12408] RSP: 002b:00007fbedbfc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 494.899050][T12408] RAX: ffffffffffffffda RBX: 00007fbedb3e5fa0 RCX: 00007fbedb18f6c9 [ 494.899070][T12408] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000006 [ 494.899089][T12408] RBP: 00007fbedb211f91 R08: 0000000000000000 R09: 0000000000000000 [ 494.899108][T12408] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000000 [ 494.899127][T12408] R13: 00007fbedb3e6038 R14: 00007fbedb3e5fa0 R15: 00007ffc24245ee8 [ 494.899171][T12408] [ 495.228556][T12408] syz.3.1319 (12408): /proc/12407/oom_adj is deprecated, please use /proc/12407/oom_score_adj instead. [ 496.306073][T12419] blktrace: Concurrent blktraces are not allowed on loop2 [ 496.674732][T12418] Process accounting resumed [ 498.088207][T12447] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3930829162 (3930829162 ns) > initial count (2634994014 ns). Using initial count to start timer. [ 501.204582][T12501] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1340'. [ 503.878913][T12533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1347'. [ 505.557071][T12535] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 506.709865][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.716243][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.990279][T12609] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 511.184245][T12609] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 511.229834][T12609] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 511.638925][T12608] zswap: compressor _¥ not available [ 512.766763][T11931] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 512.812577][T11931] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 512.820632][T11931] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 512.829989][T11931] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 512.840131][T11931] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 513.204245][T12634] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 513.568156][T12630] chnl_net:caif_netlink_parms(): no params data found [ 513.793012][T12659] random: crng reseeded on system resumption [ 514.030480][T12630] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.045938][T12630] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.056462][T12662] Scaler: ================= START STATUS ================= [ 514.063984][T12662] Scaler: ================== END STATUS ================== [ 514.092079][T12630] bridge_slave_0: entered allmulticast mode [ 514.115547][T12630] bridge_slave_0: entered promiscuous mode [ 514.183528][T12630] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.192886][T12630] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.262444][T12630] bridge_slave_1: entered allmulticast mode [ 514.292250][T12630] bridge_slave_1: entered promiscuous mode [ 514.594219][T12672] netlink: 'syz.3.1374': attribute type 1 has an invalid length. [ 514.945493][T11931] Bluetooth: hci4: command tx timeout [ 514.970813][T12630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.104008][T12630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.347190][T12630] team0: Port device team_slave_0 added [ 515.366011][T12630] team0: Port device team_slave_1 added [ 516.558108][T12630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 516.582391][T12630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.657046][T12630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.716652][T12630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.723721][T12630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.752711][T12630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.938265][T12630] hsr_slave_0: entered promiscuous mode [ 516.947811][T12630] hsr_slave_1: entered promiscuous mode [ 516.964431][T12630] debugfs: 'hsr0' already exists in 'hsr' [ 516.972671][T12630] Cannot create hsr debugfs directory [ 517.022739][T11931] Bluetooth: hci4: command tx timeout [ 518.240836][T12699] nfs4: Unknown parameter '' [ 518.301446][T12630] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 518.339462][T12630] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 518.423690][T12630] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 518.528327][T12630] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 518.567762][T12709] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3930829162 (15723316648 ns) > initial count (10539976056 ns). Using initial count to start timer. [ 518.881127][T12630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.974317][T12630] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.065421][ T9933] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.072574][ T9933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.106901][T11931] Bluetooth: hci4: command tx timeout [ 519.193087][ T9676] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.200268][ T9676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.440738][T12630] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 520.041643][T12630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.848316][T12630] veth0_vlan: entered promiscuous mode [ 520.890345][T12762] futex_wake_op: syz.2.1393 tries to shift op by -2048; fix this program [ 520.899808][T12630] veth1_vlan: entered promiscuous mode [ 520.981675][T12630] veth0_macvtap: entered promiscuous mode [ 521.021517][T12630] veth1_macvtap: entered promiscuous mode [ 521.095989][T12630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.116787][T12630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.142639][T12769] __vm_enough_memory: pid: 12769, comm: syz.2.1394, bytes: 4398046511104 not enough memory for the allocation [ 521.160289][T11687] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.182819][T11931] Bluetooth: hci4: command tx timeout [ 521.195704][T11687] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.212861][T11687] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.237233][T11687] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.428830][T11687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.440042][T11687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.498608][ T9922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.514787][ T9922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.828130][T12774] usb usb23: usbfs: interface 0 claimed by hub while 'syz.2.1395' sets config #0 [ 521.910762][T12776] futex_wake_op: syz.3.1396 tries to shift op by -2048; fix this program [ 521.948416][T12776] futex_wake_op: syz.3.1396 tries to shift op by -2048; fix this program [ 521.973319][T12779] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 522.399552][T12783] No such timeout policy "" [ 522.418177][T12783] netlink: Failed to associated timeout policy '' [ 524.711409][T12821] FAULT_INJECTION: forcing a failure. [ 524.711409][T12821] name failslab, interval 1, probability 0, space 0, times 0 [ 524.832395][T12821] CPU: 1 UID: 0 PID: 12821 Comm: syz.3.1404 Not tainted syzkaller #0 PREEMPT(full) [ 524.832439][T12821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 524.832457][T12821] Call Trace: [ 524.832469][T12821] [ 524.832481][T12821] dump_stack_lvl+0x16c/0x1f0 [ 524.832520][T12821] should_fail_ex+0x512/0x640 [ 524.832561][T12821] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 524.832595][T12821] should_failslab+0xc2/0x120 [ 524.832638][T12821] kmem_cache_alloc_noprof+0x75/0x6e0 [ 524.832671][T12821] ? mas_preallocate+0xe6a/0x11f0 [ 524.832718][T12821] ? mas_preallocate+0xe6a/0x11f0 [ 524.832754][T12821] mas_preallocate+0xe6a/0x11f0 [ 524.832800][T12821] ? __pfx_mas_preallocate+0x10/0x10 [ 524.832836][T12821] ? find_held_lock+0x2b/0x80 [ 524.832884][T12821] ? __pfx___might_resched+0x10/0x10 [ 524.832922][T12821] vma_link+0x12e/0x6a0 [ 524.832952][T12821] ? anon_vma_clone+0x3fe/0x5c0 [ 524.833013][T12821] ? __pfx_vma_link+0x10/0x10 [ 524.833056][T12821] ? anon_vma_clone+0x405/0x5c0 [ 524.833118][T12821] copy_vma+0x6b7/0xa90 [ 524.833159][T12821] ? __pfx_copy_vma+0x10/0x10 [ 524.833232][T12821] ? rcu_is_watching+0x12/0xc0 [ 524.833264][T12821] ? finish_task_switch.isra.0+0x221/0xc10 [ 524.833307][T12821] ? lockdep_hardirqs_on+0x7c/0x110 [ 524.833351][T12821] copy_vma_and_data+0x1cf/0x790 [ 524.833389][T12821] ? __pfx_copy_vma_and_data+0x10/0x10 [ 524.833433][T12821] ? __vma_enter_locked+0x163/0x3f0 [ 524.833485][T12821] ? find_held_lock+0x2b/0x80 [ 524.833519][T12821] ? move_vma+0x52e/0x1770 [ 524.833546][T12821] ? __vm_enough_memory+0x184/0x3f0 [ 524.833599][T12821] move_vma+0x540/0x1770 [ 524.833639][T12821] ? __pfx_move_vma+0x10/0x10 [ 524.833679][T12821] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 524.833722][T12821] ? cap_mmap_addr+0x4b/0x120 [ 524.833764][T12821] ? bpf_lsm_mmap_addr+0x9/0x10 [ 524.833799][T12821] ? security_mmap_addr+0x6c/0x1e0 [ 524.833834][T12821] ? __get_unmapped_area+0x267/0x440 [ 524.833881][T12821] ? vrm_set_new_addr+0x208/0x290 [ 524.833916][T12821] mremap_to+0x1b7/0x450 [ 524.833951][T12821] do_mremap+0x13a8/0x2020 [ 524.833986][T12821] ? futex_private_hash_put+0x90/0x190 [ 524.834042][T12821] ? __pfx_do_mremap+0x10/0x10 [ 524.834086][T12821] ? ksys_write+0x190/0x250 [ 524.834133][T12821] __do_sys_mremap+0x119/0x170 [ 524.834165][T12821] ? __pfx___do_sys_mremap+0x10/0x10 [ 524.834213][T12821] ? __x64_sys_futex+0x1e0/0x4c0 [ 524.834295][T12821] do_syscall_64+0xcd/0xfa0 [ 524.834337][T12821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.834367][T12821] RIP: 0033:0x7fbedb18f6c9 [ 524.834393][T12821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.834424][T12821] RSP: 002b:00007fbedbf61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 524.834455][T12821] RAX: ffffffffffffffda RBX: 00007fbedb3e6270 RCX: 00007fbedb18f6c9 [ 524.834476][T12821] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 524.834495][T12821] RBP: 00007fbedb211f91 R08: 0000000100000000 R09: 0000000000000000 [ 524.834515][T12821] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 524.834533][T12821] R13: 00007fbedb3e6308 R14: 00007fbedb3e6270 R15: 00007ffc24245ee8 [ 524.834581][T12821] [ 526.417494][T12829] ubi0: attaching mtd1 [ 526.425070][T12829] ubi0: scanning is finished [ 526.429752][T12829] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 528.560199][T12829] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 528.766233][T12834] Process accounting paused [ 529.464829][T12856] netlink: 354 bytes leftover after parsing attributes in process `syz.2.1410'. [ 529.657916][T12863] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1412'. [ 529.821315][T12867] nfs: Unknown parameter '' [ 531.231641][T12899] __vm_enough_memory: pid: 12899, comm: syz.2.1422, bytes: 4398046511104 not enough memory for the allocation [ 531.546548][T12901] binder: 12900:12901 ioctl c0306201 0 returned -14 [ 533.148691][T11931] Bluetooth: hci2: unexpected event 0x36 length: 123 > 7 [ 533.396297][ T30] audit: type=1800 audit(4294967372.550:8): pid=12928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1431" name="lu_gp_id" dev="configfs" ino=49103 res=0 errno=0 [ 534.249319][T12949] batman_adv: batadv0: adding TT local entry 00:00:03:00:00:00 to non-existent VLAN 128 [ 534.933854][ T9679] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 534.947917][ T9679] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 534.965227][ T9679] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 534.980971][ T9679] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 534.998704][ T9679] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 535.681628][T12982] sysfs_service_op_show: Client not running :-5: [ 536.931954][T12996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1443'. [ 537.113108][ T9679] Bluetooth: hci5: command tx timeout [ 538.003292][T13013] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1446'. [ 538.561491][T13013] mac80211_hwsim hwsim22 ›: renamed from wlan0 (while UP) [ 538.610431][T12966] chnl_net:caif_netlink_parms(): no params data found [ 538.760009][T13016] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3930829162 (15723316648 ns) > initial count (10539976056 ns). Using initial count to start timer. [ 539.056066][T12966] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.072388][T12966] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.079729][T12966] bridge_slave_0: entered allmulticast mode [ 539.117375][T12966] bridge_slave_0: entered promiscuous mode [ 539.133639][T12966] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.140812][T12966] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.182635][ T9679] Bluetooth: hci5: command tx timeout [ 539.190692][T12966] bridge_slave_1: entered allmulticast mode [ 539.204480][T12966] bridge_slave_1: entered promiscuous mode [ 539.283483][ T5160] Trying to write to read-only block-device sda1 [ 539.310589][T13026] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1450'. [ 539.329235][T12966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.344646][T12966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.418890][T12966] team0: Port device team_slave_0 added [ 539.437092][T12966] team0: Port device team_slave_1 added [ 539.515655][T12966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.523319][T12966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.553221][T12966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.575081][T12966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.582524][T12966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.610314][T12966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.876363][T12966] hsr_slave_0: entered promiscuous mode [ 539.884262][T12966] hsr_slave_1: entered promiscuous mode [ 539.890785][T12966] debugfs: 'hsr0' already exists in 'hsr' [ 539.897057][T12966] Cannot create hsr debugfs directory [ 539.944966][T13035] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 540.781544][T13036] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 541.262786][ T9679] Bluetooth: hci5: command tx timeout [ 542.050651][T12966] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 542.104509][T12966] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 542.137747][T12966] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 542.180879][T12966] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 542.468234][T13068] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3930829162 (15723316648 ns) > initial count (10539976056 ns). Using initial count to start timer. [ 542.598508][T12966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.734046][T12966] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.793161][ T9916] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.800395][ T9916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.975335][ T9676] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.982536][ T9676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.195808][T12966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 543.365414][ T9679] Bluetooth: hci5: command tx timeout [ 544.348864][T13092] Invalid ELF header magic: != ELF [ 544.448719][T12966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.021499][T13087] delete_channel: no stack [ 545.520655][T13110] ICMPv6: process `syz.3.1464' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 546.055048][T12966] veth0_vlan: entered promiscuous mode [ 546.139586][T12966] veth1_vlan: entered promiscuous mode [ 546.550820][T12966] veth0_macvtap: entered promiscuous mode [ 546.590284][T12966] veth1_macvtap: entered promiscuous mode [ 546.649662][T12966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.679391][T12966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.716121][T11687] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.737722][T11687] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.754958][T11687] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.799974][T11687] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.172998][T13135] No such timeout policy "" [ 547.180121][ T9933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.190741][T13135] netlink: Failed to associated timeout policy '' [ 547.197449][ T9933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.388118][ T9916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.432302][ T9916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.739734][T13142] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 549.830791][T13163] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3930829162 (15723316648 ns) > initial count (10539976056 ns). Using initial count to start timer. [ 550.273976][T13170] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 551.075416][ T9679] Bluetooth: hci4: unexpected event 0x14 length: 16 > 6 [ 551.129240][T13194] Console: switching to colour VGA+ 80x25 [ 551.710794][T13197] Console: switching to colour frame buffer device 128x48 [ 551.727631][T13198] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1486'. [ 552.094347][T13205] sp0: Synchronizing with TNC [ 553.996775][T13222] cgroup: fork rejected by pids controller in /syz4 [ 554.757474][T13317] No such timeout policy "" [ 554.773782][T13317] netlink: Failed to associated timeout policy '' [ 555.228542][T13326] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3930829162 (15723316648 ns) > initial count (10539976056 ns). Using initial count to start timer. [ 558.422528][T13343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1502'. [ 558.649840][T13345] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.1503: iget: checksum invalid [ 558.713089][T13345] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 558.746706][T13345] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.1503: iget: checksum invalid [ 558.802578][T13345] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 558.854474][T13345] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.1503: iget: checksum invalid [ 558.908216][T13345] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 558.994784][T13345] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.1503: iget: checksum invalid [ 559.043568][T13345] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 559.058852][T13345] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 559.070232][T13345] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 559.761548][T13355] random: crng reseeded on system resumption [ 559.873950][T13354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1504'. [ 560.863150][T13362] ptrace attach of "./syz-executor exec"[12630] was attempted by ""[13362] [ 561.082836][T13354] Process accounting resumed [ 561.285743][T13371] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1510'. [ 561.296113][T13370] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1510'. [ 561.337942][T13370] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1510'. [ 562.186779][T13382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1512'. [ 565.775128][T13429] random: crng reseeded on system resumption [ 567.080918][T13468] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 567.096091][ T30] audit: type=1804 audit(4294967406.250:9): pid=13468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1526" name="/newroot/sys/kernel/debug/tracing/set_event" dev="tracefs" ino=27 res=1 errno=0 [ 567.188525][T13470] netlink: 'syz.2.1529': attribute type 22 has an invalid length. [ 568.183010][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.195894][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.323692][T13508] random: crng reseeded on system resumption [ 570.339159][T13525] vcan0: tx drop: invalid da for name 0x000000000000003f [ 570.450679][T13532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1542'. [ 572.901761][T13554] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 575.139031][T13598] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3617623268 (3617623268 ns) > initial count (1785574227 ns). Using initial count to start timer. [ 578.801549][T13647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1568'. [ 578.908794][T13649] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1569'. [ 578.925086][T13649] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.028659][T13649] bridge_slave_1 (unregistering): left allmulticast mode [ 579.051636][T13649] bridge_slave_1 (unregistering): left promiscuous mode [ 579.087948][T13653] No such timeout policy "" [ 579.112334][T13653] netlink: Failed to associated timeout policy '' [ 579.143860][T13649] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.908378][ T9679] Bluetooth: hci1: Malformed LE Event: 0x0b [ 579.914537][ T9679] Bluetooth: hci1: Malformed LE Event: 0x0b [ 580.335648][T13672] FAULT_INJECTION: forcing a failure. [ 580.335648][T13672] name failslab, interval 1, probability 0, space 0, times 0 [ 580.348811][T13672] CPU: 1 UID: 0 PID: 13672 Comm: syz.3.1574 Not tainted syzkaller #0 PREEMPT(full) [ 580.348852][T13672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 580.348872][T13672] Call Trace: [ 580.348882][T13672] [ 580.348894][T13672] dump_stack_lvl+0x16c/0x1f0 [ 580.348937][T13672] should_fail_ex+0x512/0x640 [ 580.348991][T13672] ? __kmalloc_cache_noprof+0x5f/0x780 [ 580.349027][T13672] should_failslab+0xc2/0x120 [ 580.349070][T13672] __kmalloc_cache_noprof+0x72/0x780 [ 580.349101][T13672] ? resv_map_alloc+0x7e/0x400 [ 580.349151][T13672] ? resv_map_alloc+0x7e/0x400 [ 580.349192][T13672] resv_map_alloc+0x7e/0x400 [ 580.349238][T13672] hugetlbfs_get_inode+0x33f/0x730 [ 580.349282][T13672] hugetlb_file_setup+0x15b/0x620 [ 580.349322][T13672] ksys_mmap_pgoff+0x189/0x5c0 [ 580.349371][T13672] __x64_sys_mmap+0x125/0x190 [ 580.349423][T13672] do_syscall_64+0xcd/0xfa0 [ 580.349463][T13672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.349494][T13672] RIP: 0033:0x7fbedb18f6c9 [ 580.349519][T13672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.349549][T13672] RSP: 002b:00007fbedbfc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 580.349579][T13672] RAX: ffffffffffffffda RBX: 00007fbedb3e5fa0 RCX: 00007fbedb18f6c9 [ 580.349600][T13672] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 0000000000000000 [ 580.349618][T13672] RBP: 00007fbedb211f91 R08: 0000000000000401 R09: 0000300000000000 [ 580.349637][T13672] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 580.349656][T13672] R13: 00007fbedb3e6038 R14: 00007fbedb3e5fa0 R15: 00007ffc24245ee8 [ 580.349702][T13672] [ 581.594874][T13682] ubi0: attaching mtd1 [ 581.624953][T13682] ubi0: scanning is finished [ 581.643376][T13682] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 581.727664][T13686] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3617623268 (3617623268 ns) > initial count (1785574227 ns). Using initial count to start timer. [ 581.824091][T13682] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 581.953931][T13694] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1580'. [ 581.968055][T13694] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.001753][T13694] bridge_slave_1 (unregistering): left allmulticast mode [ 582.010720][T13694] bridge_slave_1 (unregistering): left promiscuous mode [ 582.018695][T13694] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.414545][T13687] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 582.421072][T13687] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 582.428310][T13687] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 582.434879][T13687] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 582.441380][T13687] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 582.448020][T13687] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 582.463778][T13687] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 582.475253][T13687] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 582.482095][T13687] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 582.494136][T13687] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 582.718830][T13698] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1581'. [ 583.826591][ T9679] Bluetooth: hci1: command 0x0c1a tx timeout [ 583.962982][T13724] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1588'. [ 584.007182][T13724] : renamed from bond0 (while UP) [ 584.464706][ T9679] Bluetooth: hci4: command 0x0c1a tx timeout [ 584.470818][ T9679] Bluetooth: hci3: command 0x040f tx timeout [ 584.478053][T11931] Bluetooth: hci2: command 0x0c1a tx timeout [ 584.485044][ T9698] Bluetooth: hci0: command 0x0c1a tx timeout [ 584.542377][T11931] Bluetooth: hci5: command 0x0c1a tx timeout [ 584.823691][T13745] FAULT_INJECTION: forcing a failure. [ 584.823691][T13745] name failslab, interval 1, probability 0, space 0, times 0 [ 584.893239][T13745] CPU: 1 UID: 0 PID: 13745 Comm: syz.5.1591 Not tainted syzkaller #0 PREEMPT(full) [ 584.893280][T13745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 584.893298][T13745] Call Trace: [ 584.893308][T13745] [ 584.893319][T13745] dump_stack_lvl+0x16c/0x1f0 [ 584.893360][T13745] should_fail_ex+0x512/0x640 [ 584.893402][T13745] ? __kmalloc_cache_noprof+0x5f/0x780 [ 584.893435][T13745] should_failslab+0xc2/0x120 [ 584.893474][T13745] __kmalloc_cache_noprof+0x72/0x780 [ 584.893501][T13745] ? do_raw_spin_lock+0x12c/0x2b0 [ 584.893545][T13745] ? kobject_uevent_env+0x265/0x1870 [ 584.893587][T13745] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 584.893629][T13745] ? kobject_uevent_env+0x265/0x1870 [ 584.893668][T13745] kobject_uevent_env+0x265/0x1870 [ 584.893708][T13745] ? __pfx_dev_uevent_name+0x10/0x10 [ 584.893749][T13745] ? bus_to_subsys+0x131/0x160 [ 584.893783][T13745] device_add+0x10dd/0x1aa0 [ 584.893832][T13745] ? __pfx_device_add+0x10/0x10 [ 584.893875][T13745] ? lockdep_init_map_type+0x5c/0x280 [ 584.893925][T13745] ? __init_waitqueue_head+0xca/0x150 [ 584.893964][T13745] rfkill_register+0x1ad/0xb40 [ 584.893998][T13745] nfc_register_device+0x11f/0x3c0 [ 584.894038][T13745] nci_register_device+0x7f1/0xb80 [ 584.894069][T13745] ? __pfx_nci_register_device+0x10/0x10 [ 584.894104][T13745] ? lockdep_init_map_type+0x5c/0x280 [ 584.894153][T13745] virtual_ncidev_open+0x141/0x220 [ 584.894186][T13745] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 584.894216][T13745] misc_open+0x26d/0x450 [ 584.894260][T13745] ? __pfx_misc_open+0x10/0x10 [ 584.894302][T13745] chrdev_open+0x234/0x6a0 [ 584.894336][T13745] ? __pfx_apparmor_file_open+0x10/0x10 [ 584.894378][T13745] ? __pfx_chrdev_open+0x10/0x10 [ 584.894416][T13745] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 584.894458][T13745] do_dentry_open+0x982/0x1530 [ 584.894492][T13745] ? __pfx_chrdev_open+0x10/0x10 [ 584.894536][T13745] vfs_open+0x82/0x3f0 [ 584.894583][T13745] path_openat+0x1de4/0x2cb0 [ 584.894630][T13745] ? __pfx_path_openat+0x10/0x10 [ 584.894664][T13745] ? __lock_acquire+0xb8a/0x1c90 [ 584.894708][T13745] do_filp_open+0x20b/0x470 [ 584.894742][T13745] ? __pfx_do_filp_open+0x10/0x10 [ 584.894807][T13745] ? alloc_fd+0x471/0x7d0 [ 584.894849][T13745] do_sys_openat2+0x11b/0x1d0 [ 584.894891][T13745] ? __pfx_do_sys_openat2+0x10/0x10 [ 584.894957][T13745] __x64_sys_openat+0x174/0x210 [ 584.895000][T13745] ? __pfx___x64_sys_openat+0x10/0x10 [ 584.895061][T13745] do_syscall_64+0xcd/0xfa0 [ 584.895099][T13745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.895128][T13745] RIP: 0033:0x7f982ef8f6c9 [ 584.895151][T13745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.895178][T13745] RSP: 002b:00007f982fe91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 584.895207][T13745] RAX: ffffffffffffffda RBX: 00007f982f1e5fa0 RCX: 00007f982ef8f6c9 [ 584.895226][T13745] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 584.895244][T13745] RBP: 00007f982f011f91 R08: 0000000000000000 R09: 0000000000000000 [ 584.895262][T13745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.895278][T13745] R13: 00007f982f1e6038 R14: 00007f982f1e5fa0 R15: 00007ffc2b746b08 [ 584.895322][T13745] [ 585.684099][T13763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1592'. [ 585.893476][T13767] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1593'. [ 586.338950][T13776] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 586.542484][T11931] Bluetooth: hci4: command 0x0c1a tx timeout [ 586.634152][T11931] Bluetooth: hci5: command 0x0c1a tx timeout [ 588.626073][T11931] Bluetooth: hci4: command 0x0c1a tx timeout [ 588.702723][T11931] Bluetooth: hci5: command 0x0c1a tx timeout [ 589.100579][T13821] netlink: 62 bytes leftover after parsing attributes in process `syz.2.1602'. [ 589.132478][T13821] netlink: 62 bytes leftover after parsing attributes in process `syz.2.1602'. [ 589.152888][T13821] netlink: 62 bytes leftover after parsing attributes in process `syz.2.1602'. [ 589.165748][T13821] netlink: 62 bytes leftover after parsing attributes in process `syz.2.1602'. [ 589.178348][T13821] netlink: 62 bytes leftover after parsing attributes in process `syz.2.1602'. [ 589.188305][T13821] netlink: 62 bytes leftover after parsing attributes in process `syz.2.1602'. [ 589.254110][T13821] netlink: 62 bytes leftover after parsing attributes in process `syz.2.1602'. [ 589.290466][T13821] netlink: 62 bytes leftover after parsing attributes in process `syz.2.1602'. [ 589.309390][T13821] netlink: 62 bytes leftover after parsing attributes in process `syz.2.1602'. [ 589.319890][T13821] netlink: 62 bytes leftover after parsing attributes in process `syz.2.1602'. [ 590.176931][T13826] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 590.183868][T13826] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 590.191077][T13826] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 590.198428][T13826] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 590.206648][T13826] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 590.221810][T13826] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 591.503065][T11931] Bluetooth: hci1: command 0x0c1a tx timeout [ 591.523518][T13843] Process accounting paused [ 591.941637][T13900] bond0: invalid ARP target specified [ 592.222470][ T9679] Bluetooth: hci3: command 0x040f tx timeout [ 592.228610][ T9679] Bluetooth: hci2: command 0x0c1a tx timeout [ 592.242126][T10203] Bluetooth: hci0: command 0x0c1a tx timeout [ 592.249245][T11931] Bluetooth: hci4: command 0x0c1a tx timeout [ 592.302692][T11931] Bluetooth: hci5: command 0x0c1a tx timeout [ 592.376248][T13910] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 592.413293][T13910] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 592.419490][T13910] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 592.452465][T13910] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 592.458687][T13910] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 592.489527][T13910] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 594.024070][T13950] team0: Port device team_slave_0 removed [ 594.108249][T13953] i2c i2c-0: new_device: Missing parameters [ 594.382649][T11931] Bluetooth: hci1: command 0x0c1a tx timeout [ 594.463061][T11931] Bluetooth: hci4: command 0x0c1a tx timeout [ 594.469122][T11931] Bluetooth: hci3: command 0x040f tx timeout [ 594.478524][ T9679] Bluetooth: hci2: command 0x0c1a tx timeout [ 594.485664][ T9698] Bluetooth: hci0: command 0x0c1a tx timeout [ 594.542344][T13957] Bluetooth: hci5: command 0x0c1a tx timeout [ 595.189110][T13969] netlink: 'syz.5.1645': attribute type 10 has an invalid length. [ 595.197189][T13969] __nla_validate_parse: 18 callbacks suppressed [ 595.197211][T13969] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1645'. [ 596.302473][ T30] audit: type=1800 audit(4294967316.480:10): pid=14003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm=050820 name="lu_gp_id" dev="configfs" ino=56225 res=0 errno=0 [ 597.906006][T14038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1660'. [ 598.919661][T14058] tipc: Started in network mode [ 598.928452][T14058] tipc: Node identity ffffffff, cluster identity 4711 [ 598.942897][T14058] tipc: Node number set to 4294967295 [ 599.008208][T14054] zswap: compressor not available [ 601.759564][T14082] netlink: Conntrack attr has 12 unknown bytes [ 602.960155][T14086] zswap: compressor 000 not available [ 603.671507][T14117] ubi: mtd0 is already attached to ubi31 [ 604.118481][ T30] audit: type=1804 audit(4294967324.306:11): pid=14125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1679" name="/newroot/sys/kernel/debug/tracing/tracing_cpumask" dev="tracefs" ino=222 res=1 errno=0 [ 604.520728][T14131] ERROR: Out of memory at tomoyo_memory_ok. [ 604.528052][T14132] ERROR: Out of memory at tomoyo_memory_ok. [ 606.586550][T14167] netlink: Conntrack attr has 12 unknown bytes [ 606.871360][T14173] FAULT_INJECTION: forcing a failure. [ 606.871360][T14173] name failslab, interval 1, probability 0, space 0, times 0 [ 606.885625][T14173] CPU: 1 UID: 0 PID: 14173 Comm: syz.3.1691 Not tainted syzkaller #0 PREEMPT(full) [ 606.885664][T14173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 606.885681][T14173] Call Trace: [ 606.885691][T14173] [ 606.885703][T14173] dump_stack_lvl+0x16c/0x1f0 [ 606.885744][T14173] should_fail_ex+0x512/0x640 [ 606.885786][T14173] ? __kmalloc_noprof+0xca/0x880 [ 606.885836][T14173] should_failslab+0xc2/0x120 [ 606.885874][T14173] __kmalloc_noprof+0xdd/0x880 [ 606.885920][T14173] ? iter_file_splice_write+0x1cc/0x12e0 [ 606.885959][T14173] ? iter_file_splice_write+0x1cc/0x12e0 [ 606.885987][T14173] iter_file_splice_write+0x1cc/0x12e0 [ 606.886010][T14173] ? shmem_get_folio_gfp+0x311/0x1610 [ 606.886035][T14173] ? splice_folio_into_pipe+0x4f1/0x5e0 [ 606.886060][T14173] ? __pfx_iter_file_splice_write+0x10/0x10 [ 606.886080][T14173] ? __lock_acquire+0xb8a/0x1c90 [ 606.886122][T14173] ? __pfx_iter_file_splice_write+0x10/0x10 [ 606.886143][T14173] direct_splice_actor+0x192/0x6c0 [ 606.886164][T14173] splice_direct_to_actor+0x345/0xa30 [ 606.886184][T14173] ? __pfx_direct_splice_actor+0x10/0x10 [ 606.886207][T14173] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 606.886232][T14173] do_splice_direct+0x174/0x240 [ 606.886250][T14173] ? __pfx_do_splice_direct+0x10/0x10 [ 606.886269][T14173] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 606.886303][T14173] ? rw_verify_area+0xcf/0x6c0 [ 606.886323][T14173] do_sendfile+0xb06/0xe50 [ 606.886346][T14173] ? __pfx_do_sendfile+0x10/0x10 [ 606.886372][T14173] __x64_sys_sendfile64+0x154/0x220 [ 606.886398][T14173] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 606.886430][T14173] do_syscall_64+0xcd/0xfa0 [ 606.886453][T14173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.886472][T14173] RIP: 0033:0x7fbedb18f6c9 [ 606.886488][T14173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.886513][T14173] RSP: 002b:00007fbedbfc4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 606.886531][T14173] RAX: ffffffffffffffda RBX: 00007fbedb3e5fa0 RCX: 00007fbedb18f6c9 [ 606.886543][T14173] RDX: 0000200000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 606.886554][T14173] RBP: 00007fbedb211f91 R08: 0000000000000000 R09: 0000000000000000 [ 606.886564][T14173] R10: 0000000000000b5d R11: 0000000000000246 R12: 0000000000000000 [ 606.886575][T14173] R13: 00007fbedb3e6038 R14: 00007fbedb3e5fa0 R15: 00007ffc24245ee8 [ 606.886598][T14173] [ 607.491269][T14183] block nbd7: not configured, cannot reconfigure [ 607.499139][T14183] block nbd7: not configured, cannot reconfigure [ 607.506126][T14183] block nbd7: not configured, cannot reconfigure [ 607.512795][T14183] block nbd7: not configured, cannot reconfigure [ 607.519481][T14183] block nbd7: not configured, cannot reconfigure [ 607.526115][T14183] block nbd7: not configured, cannot reconfigure [ 607.532966][T14183] block nbd7: not configured, cannot reconfigure [ 607.539456][T14183] block nbd7: not configured, cannot reconfigure [ 607.546190][T14183] block nbd7: not configured, cannot reconfigure [ 607.555936][T14183] block nbd7: not configured, cannot reconfigure [ 607.569549][T14183] block nbd7: not configured, cannot reconfigure [ 607.576573][T14183] block nbd7: not configured, cannot reconfigure [ 607.583384][T14183] block nbd7: not configured, cannot reconfigure [ 607.592969][T14183] block nbd7: not configured, cannot reconfigure [ 607.600334][T14183] block nbd7: not configured, cannot reconfigure [ 607.622280][T14183] block nbd7: not configured, cannot reconfigure [ 607.654568][T14182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1693'. [ 611.665493][T13957] Bluetooth: hci4: unexpected event 0x0f length: 5 > 4 [ 611.665541][T13957] Bluetooth: hci4: unexpected event for opcode 0xf100 [ 612.162463][T10203] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 612.182442][T10203] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 612.191121][T10203] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 612.201102][T10203] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 612.208957][T10203] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 612.831565][T14224] chnl_net:caif_netlink_parms(): no params data found [ 612.950930][T14230] ptrace attach of "./syz-executor exec"[14231] was attempted by "./syz-executor exec"[14230] [ 613.007629][T14224] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.025225][T14224] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.057174][T14224] bridge_slave_0: entered allmulticast mode [ 613.484621][T14224] bridge_slave_0: entered promiscuous mode [ 613.504465][T14224] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.702430][T14224] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.709743][T14224] bridge_slave_1: entered allmulticast mode [ 613.718424][T14224] bridge_slave_1: entered promiscuous mode [ 613.824551][T14224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.841176][T14224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.911836][T14224] team0: Port device team_slave_0 added [ 613.921354][T14224] team0: Port device team_slave_1 added [ 614.007467][T14224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.014919][T14224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.045382][T14224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.064241][T14224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.072266][T14224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.098900][T14224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.194800][T14224] hsr_slave_0: entered promiscuous mode [ 614.201748][T14224] hsr_slave_1: entered promiscuous mode [ 614.208510][T14224] debugfs: 'hsr0' already exists in 'hsr' [ 614.214482][T14224] Cannot create hsr debugfs directory [ 614.302865][T13957] Bluetooth: hci6: command tx timeout [ 614.510517][T14224] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 614.524986][T14224] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 614.538518][T14224] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 614.551560][T14224] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 614.714509][T14224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.757596][T14224] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.791606][ T9932] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.798859][ T9932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.832204][ T9681] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.839410][ T9681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.973010][T14254] program syz.4.1705 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 615.762832][T14224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.386524][T13957] Bluetooth: hci6: command tx timeout [ 616.552527][T14224] veth0_vlan: entered promiscuous mode [ 616.567343][T14224] veth1_vlan: entered promiscuous mode [ 616.611913][T14224] veth0_macvtap: entered promiscuous mode [ 616.625465][T14224] veth1_macvtap: entered promiscuous mode [ 616.650864][T14224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.667470][T14224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.697628][ T9932] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.719140][ T9932] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.783097][T11686] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.809675][T11686] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.877933][ T9932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.911106][ T9932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.975595][ T9932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.984284][ T9932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.462580][T13957] Bluetooth: hci6: command tx timeout [ 619.377212][T14322] usb usb38: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 619.400177][T14322] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 619.731781][T10203] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 619.756163][T10203] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 619.782387][T10203] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 619.812883][T10203] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 619.824970][T10203] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 620.343184][T14331] ERROR: Out of memory at tomoyo_memory_ok. [ 620.456318][T14326] chnl_net:caif_netlink_parms(): no params data found [ 620.510538][T14334] netlink: Failed to add  helper -22 [ 620.545112][T13957] Bluetooth: hci6: command tx timeout [ 620.797469][T14326] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.808163][T14326] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.818835][T14326] bridge_slave_0: entered allmulticast mode [ 620.851207][T14326] bridge_slave_0: entered promiscuous mode [ 620.867713][T14326] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.878666][T14326] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.888476][T14326] bridge_slave_1: entered allmulticast mode [ 620.896951][T14326] bridge_slave_1: entered promiscuous mode [ 620.950807][T14326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.999189][T14326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.118492][T14326] team0: Port device team_slave_0 added [ 621.129619][T14358] netlink: 338 bytes leftover after parsing attributes in process `syz.6.1722'. [ 621.151994][T14326] team0: Port device team_slave_1 added [ 621.252100][T14326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.259178][T14326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.292100][T14326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.307351][T14326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.319117][T14326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.346948][T14326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.412039][T14326] hsr_slave_0: entered promiscuous mode [ 621.420680][T14326] hsr_slave_1: entered promiscuous mode [ 621.436648][T14326] debugfs: 'hsr0' already exists in 'hsr' [ 621.442447][T14326] Cannot create hsr debugfs directory [ 621.903406][T13957] Bluetooth: hci7: command tx timeout [ 621.995846][T14371] bridge0: port 2(netdevsim1) entered blocking state [ 622.003628][T14371] bridge0: port 2(netdevsim1) entered disabled state [ 622.010595][T14371] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 622.020401][T14371] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 622.029683][T14371] bridge0: port 2(netdevsim1) entered blocking state [ 622.036545][T14371] bridge0: port 2(netdevsim1) entered forwarding state [ 622.086462][T14326] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 622.104668][T14326] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 622.140920][T14326] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 622.150278][T14373] random: crng reseeded on system resumption [ 622.163875][T14326] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 622.565088][T14326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.618171][T14326] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.222061][ T9932] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.229308][ T9932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.780282][ T9932] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.787516][ T9932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.986487][T13957] Bluetooth: hci7: command tx timeout [ 624.378862][T10203] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 624.397658][T10203] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 624.409113][T10203] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 624.421835][T10203] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 624.429931][T10203] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 624.623215][T14326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.339652][T14396] chnl_net:caif_netlink_parms(): no params data found [ 625.745258][T14396] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.772993][T14396] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.792990][T14396] bridge_slave_0: entered allmulticast mode [ 625.807856][T14396] bridge_slave_0: entered promiscuous mode [ 625.840923][T14396] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.851126][T14396] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.863382][T14396] bridge_slave_1: entered allmulticast mode [ 625.882952][T14396] bridge_slave_1: entered promiscuous mode [ 625.989055][T14396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.016111][T14396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.037880][T14326] veth0_vlan: entered promiscuous mode [ 626.064098][T13957] Bluetooth: hci7: command tx timeout [ 626.133985][T14396] team0: Port device team_slave_0 added [ 626.163150][T14396] team0: Port device team_slave_1 added [ 626.188369][T14326] veth1_vlan: entered promiscuous mode [ 626.324470][T14396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.342514][T14396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.392444][T14396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.426103][T14396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.434554][T14396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.461342][T14396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.462520][T13957] Bluetooth: hci8: command tx timeout [ 626.507355][T14423] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3930829162 (3930829162 ns) > initial count (2634994014 ns). Using initial count to start timer. [ 626.626592][T14396] hsr_slave_0: entered promiscuous mode [ 626.633635][T14396] hsr_slave_1: entered promiscuous mode [ 626.640745][T14396] debugfs: 'hsr0' already exists in 'hsr' [ 626.647158][T14396] Cannot create hsr debugfs directory [ 626.672937][T14326] veth0_macvtap: entered promiscuous mode [ 626.731562][T14326] veth1_macvtap: entered promiscuous mode [ 626.848500][T14326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.954218][T14326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.995749][ T9932] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.005458][ T9932] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.030138][ T9932] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.063450][ T9932] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.271791][T14437] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 627.313454][T14396] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 627.339930][T14396] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 627.362025][T14396] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 627.369198][T11692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.405617][T11692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.446908][T14396] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 627.530194][T14442] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 627.553098][T11686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.577549][T11686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.793123][T14396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.114922][T14459] FAULT_INJECTION: forcing a failure. [ 628.114922][T14459] name failslab, interval 1, probability 0, space 0, times 0 [ 628.131539][T14396] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.142457][T13957] Bluetooth: hci7: command tx timeout [ 628.157735][T14459] CPU: 1 UID: 0 PID: 14459 Comm: syz.7.1713 Not tainted syzkaller #0 PREEMPT(full) [ 628.157777][T14459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 628.157795][T14459] Call Trace: [ 628.157805][T14459] [ 628.157817][T14459] dump_stack_lvl+0x16c/0x1f0 [ 628.157860][T14459] should_fail_ex+0x512/0x640 [ 628.157906][T14459] ? __kmalloc_cache_noprof+0x5f/0x780 [ 628.157941][T14459] should_failslab+0xc2/0x120 [ 628.157983][T14459] __kmalloc_cache_noprof+0x72/0x780 [ 628.158014][T14459] ? v4l2_fh_open+0x4c/0xa0 [ 628.158061][T14459] ? v4l2_fh_open+0x4c/0xa0 [ 628.158099][T14459] v4l2_fh_open+0x4c/0xa0 [ 628.158139][T14459] v4l2_open+0x1d2/0x5e0 [ 628.158184][T14459] ? __pfx_v4l2_open+0x10/0x10 [ 628.158219][T14459] chrdev_open+0x234/0x6a0 [ 628.158254][T14459] ? __pfx_apparmor_file_open+0x10/0x10 [ 628.158300][T14459] ? __pfx_chrdev_open+0x10/0x10 [ 628.158341][T14459] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 628.158387][T14459] do_dentry_open+0x982/0x1530 [ 628.158426][T14459] ? __pfx_chrdev_open+0x10/0x10 [ 628.158474][T14459] vfs_open+0x82/0x3f0 [ 628.158540][T14459] path_openat+0x1de4/0x2cb0 [ 628.158592][T14459] ? __pfx_path_openat+0x10/0x10 [ 628.158631][T14459] ? __lock_acquire+0xb8a/0x1c90 [ 628.158681][T14459] do_filp_open+0x20b/0x470 [ 628.158717][T14459] ? __pfx_do_filp_open+0x10/0x10 [ 628.158789][T14459] ? alloc_fd+0x471/0x7d0 [ 628.158836][T14459] do_sys_openat2+0x11b/0x1d0 [ 628.158882][T14459] ? __pfx_do_sys_openat2+0x10/0x10 [ 628.158948][T14459] __x64_sys_openat+0x174/0x210 [ 628.158994][T14459] ? __pfx___x64_sys_openat+0x10/0x10 [ 628.159062][T14459] do_syscall_64+0xcd/0xfa0 [ 628.159103][T14459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.159134][T14459] RIP: 0033:0x7ff06538f6c9 [ 628.159159][T14459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.159198][T14459] RSP: 002b:00007ff066215038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 628.159228][T14459] RAX: ffffffffffffffda RBX: 00007ff0655e5fa0 RCX: 00007ff06538f6c9 [ 628.159248][T14459] RDX: 00000000000aaa81 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 628.159267][T14459] RBP: 00007ff065411f91 R08: 0000000000000000 R09: 0000000000000000 [ 628.159285][T14459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.159303][T14459] R13: 00007ff0655e6038 R14: 00007ff0655e5fa0 R15: 00007fff1dd98698 [ 628.159345][T14459] [ 628.417047][ T9932] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.424221][ T9932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.474663][ T9932] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.481876][ T9932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.555994][T13957] Bluetooth: hci8: command tx timeout [ 629.057933][T14470] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1745'. [ 629.599612][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.622565][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.683821][T14495] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1748'. [ 630.085129][T14495] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.201138][T14495] bridge_slave_1 (unregistering): left allmulticast mode [ 630.210533][T14495] bridge_slave_1 (unregistering): left promiscuous mode [ 630.226804][T14495] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.368035][T14396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 630.622481][T13957] Bluetooth: hci8: command tx timeout [ 631.330789][T14504] delete_channel: no stack [ 631.413396][T14520] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1751'. [ 631.424204][T14520] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1751'. [ 631.455844][T14396] veth0_vlan: entered promiscuous mode [ 631.505699][T14396] veth1_vlan: entered promiscuous mode [ 631.699964][T14396] veth0_macvtap: entered promiscuous mode [ 631.775357][T14396] veth1_macvtap: entered promiscuous mode [ 631.813104][T14396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 631.831700][T14396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 631.921638][T11692] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.940436][T11692] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.004432][T11692] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.014405][T14524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1753'. [ 632.030703][T14526] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1754'. [ 632.045449][T11692] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.131281][T14531] netlink: 354 bytes leftover after parsing attributes in process `syz.6.1754'. [ 632.702524][T13957] Bluetooth: hci8: command tx timeout [ 632.766844][T13304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.812201][T13304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 632.835862][T13281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 632.894919][T13281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 633.335530][T14545] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1757'. [ 637.484679][T14614] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3930829162 (251573066368 ns) > initial count (168639616896 ns). Using initial count to start timer. [ 637.504572][T14617] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1771'. [ 638.867573][T14633] ptp ptp0: new virtual clock ptp1 [ 638.882786][T14633] ptp ptp0: new virtual clock ptp2 [ 638.902764][T14633] ptp ptp0: new virtual clock ptp3 [ 638.907933][T14633] ptp ptp0: guarantee physical clock free running [ 639.053030][T14633] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 639.316929][T14641] ubi0: attaching mtd1 [ 639.559675][T14641] ubi0: scanning is finished [ 639.564778][T14641] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 640.335602][T14641] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd1, error -22 [ 640.712299][T14663] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 640.728067][T14661] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 643.267265][T14690] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 645.614407][T14731] No such timeout policy "" [ 645.614448][T14731] netlink: Failed to associated timeout policy '' [ 649.035379][T14773] Invalid ELF header magic: != ELF [ 649.600339][T14779] zero sized request [ 649.949006][T14790] program syz.7.1805 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 650.038170][T14790] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 650.142997][ T30] audit: type=1800 audit(4294967370.326:12): pid=14791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1804" name="lu_gp_id" dev="configfs" ino=61277 res=0 errno=0 [ 650.280293][T14784] ovs_: entered promiscuous mode [ 650.319840][T14789] warning: `syz.4.1803' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 651.292035][T14801] netlink: 342 bytes leftover after parsing attributes in process `syz.8.1807'. [ 652.369777][T14819] FAULT_INJECTION: forcing a failure. [ 652.369777][T14819] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 652.400002][T14819] CPU: 1 UID: 0 PID: 14819 Comm: syz.6.1811 Not tainted syzkaller #0 PREEMPT(full) [ 652.400043][T14819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 652.400060][T14819] Call Trace: [ 652.400069][T14819] [ 652.400082][T14819] dump_stack_lvl+0x16c/0x1f0 [ 652.400122][T14819] should_fail_ex+0x512/0x640 [ 652.400171][T14819] should_fail_alloc_page+0xe7/0x130 [ 652.400215][T14819] prepare_alloc_pages+0x3c2/0x610 [ 652.400266][T14819] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 652.400309][T14819] ? __up_read+0x1f8/0x750 [ 652.400356][T14819] ? __pfx___up_read+0x10/0x10 [ 652.400399][T14819] ? __rmap_walk_file+0x575/0x620 [ 652.400438][T14819] ? vma_interval_tree_iter_next+0x10c/0x250 [ 652.400468][T14819] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 652.400504][T14819] ? __rmap_walk_file+0x575/0x620 [ 652.400556][T14819] ? rmap_walk_file+0x174/0x1f0 [ 652.400595][T14819] ? queue_folios_pte_range+0x9bb/0x1150 [ 652.400660][T14819] __folio_alloc_noprof+0x11/0x220 [ 652.400692][T14819] alloc_migration_target+0x24a/0x660 [ 652.400742][T14819] migrate_pages_batch+0x3bc/0x3bb0 [ 652.400793][T14819] ? __pfx_alloc_migration_target+0x10/0x10 [ 652.400852][T14819] ? __pfx_migrate_pages_batch+0x10/0x10 [ 652.400908][T14819] ? __pfx_walk_pgd_range+0x10/0x10 [ 652.400947][T14819] migrate_pages_sync+0x12d/0x8a0 [ 652.400994][T14819] ? __pfx_alloc_migration_target+0x10/0x10 [ 652.401045][T14819] ? queue_pages_test_walk+0x279/0x410 [ 652.401089][T14819] ? __pfx_migrate_pages_sync+0x10/0x10 [ 652.401136][T14819] ? walk_page_test+0x9b/0x180 [ 652.401171][T14819] ? walk_page_range_mm+0x235/0xb40 [ 652.401215][T14819] migrate_pages+0x1b5f/0x23a0 [ 652.401275][T14819] ? __pfx_alloc_migration_target+0x10/0x10 [ 652.401333][T14819] ? __pfx_migrate_pages+0x10/0x10 [ 652.401380][T14819] ? queue_pages_range+0x11e/0x180 [ 652.401428][T14819] ? __pfx___up_read+0x10/0x10 [ 652.401472][T14819] ? do_migrate_pages+0x458/0x750 [ 652.401518][T14819] do_migrate_pages+0x48e/0x750 [ 652.401572][T14819] ? __pfx_do_migrate_pages+0x10/0x10 [ 652.401615][T14819] ? rcu_is_watching+0x12/0xc0 [ 652.401656][T14819] ? cap_capable+0xb3/0x250 [ 652.401695][T14819] ? get_task_mm+0xc2/0xf0 [ 652.401731][T14819] ? security_capable+0x250/0x260 [ 652.401779][T14819] kernel_migrate_pages+0x55b/0x700 [ 652.401823][T14819] ? __pfx_kernel_migrate_pages+0x10/0x10 [ 652.401867][T14819] ? __pfx_do_writev+0x10/0x10 [ 652.401909][T14819] __x64_sys_migrate_pages+0x96/0x100 [ 652.401952][T14819] ? lockdep_hardirqs_on+0x7c/0x110 [ 652.401988][T14819] do_syscall_64+0xcd/0xfa0 [ 652.402028][T14819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.402060][T14819] RIP: 0033:0x7f85e2d8f6c9 [ 652.402085][T14819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.402120][T14819] RSP: 002b:00007f85e3c1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 652.402150][T14819] RAX: ffffffffffffffda RBX: 00007f85e2fe5fa0 RCX: 00007f85e2d8f6c9 [ 652.402168][T14819] RDX: 0000200000000100 RSI: 000000000000000a RDI: 0000000000000000 [ 652.402186][T14819] RBP: 00007f85e2e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 652.402204][T14819] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 652.402223][T14819] R13: 00007f85e2fe6038 R14: 00007f85e2fe5fa0 R15: 00007ffebaa9ca78 [ 652.402279][T14819] [ 652.731169][ C1] vkms_vblank_simulate: vblank timer overrun [ 653.010540][T14833] No such timeout policy "" [ 653.015749][T14833] netlink: Failed to associated timeout policy '' [ 653.250621][T14835] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1816'. [ 653.431166][T14842] deleting an unspecified loop device is not supported. [ 653.455396][T14844] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 655.997315][T14865] FAULT_INJECTION: forcing a failure. [ 655.997315][T14865] name failslab, interval 1, probability 0, space 0, times 0 [ 656.062646][T14865] CPU: 1 UID: 0 PID: 14865 Comm: syz.6.1822 Not tainted syzkaller #0 PREEMPT(full) [ 656.062683][T14865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 656.062700][T14865] Call Trace: [ 656.062709][T14865] [ 656.062720][T14865] dump_stack_lvl+0x16c/0x1f0 [ 656.062758][T14865] should_fail_ex+0x512/0x640 [ 656.062800][T14865] ? fs_reclaim_acquire+0xae/0x150 [ 656.062843][T14865] should_failslab+0xc2/0x120 [ 656.062882][T14865] __kmalloc_noprof+0xdd/0x880 [ 656.062926][T14865] ? tomoyo_encode2+0x100/0x3e0 [ 656.062967][T14865] ? tomoyo_encode2+0x100/0x3e0 [ 656.062996][T14865] tomoyo_encode2+0x100/0x3e0 [ 656.063034][T14865] tomoyo_encode+0x29/0x50 [ 656.063064][T14865] tomoyo_realpath_from_path+0x18f/0x6e0 [ 656.063110][T14865] tomoyo_path_number_perm+0x245/0x580 [ 656.063155][T14865] ? tomoyo_path_number_perm+0x237/0x580 [ 656.063205][T14865] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 656.063263][T14865] ? find_held_lock+0x2b/0x80 [ 656.063333][T14865] ? find_held_lock+0x2b/0x80 [ 656.063362][T14865] ? hook_file_ioctl_common+0x145/0x410 [ 656.063402][T14865] ? __fget_files+0x20e/0x3c0 [ 656.063439][T14865] security_file_ioctl+0x9b/0x240 [ 656.063470][T14865] __x64_sys_ioctl+0xb7/0x210 [ 656.063515][T14865] do_syscall_64+0xcd/0xfa0 [ 656.063551][T14865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.063579][T14865] RIP: 0033:0x7f85e2d8f6c9 [ 656.063603][T14865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.063628][T14865] RSP: 002b:00007f85e3c1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 656.063655][T14865] RAX: ffffffffffffffda RBX: 00007f85e2fe5fa0 RCX: 00007f85e2d8f6c9 [ 656.063674][T14865] RDX: 0000000000000000 RSI: 00000000c004510e RDI: 0000000000000003 [ 656.063692][T14865] RBP: 00007f85e3c1e090 R08: 0000000000000000 R09: 0000000000000000 [ 656.063709][T14865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.063725][T14865] R13: 00007f85e2fe6038 R14: 00007f85e2fe5fa0 R15: 00007ffebaa9ca78 [ 656.063764][T14865] [ 656.064032][T14865] ERROR: Out of memory at tomoyo_realpath_from_path. [ 656.499851][T14868] zswap: compressor 000 not available [ 656.811530][T14874] zswap: compressor not available [ 656.952739][T14890] FAULT_INJECTION: forcing a failure. [ 656.952739][T14890] name fail_futex, interval 1, probability 0, space 0, times 0 [ 656.981270][T14890] CPU: 0 UID: 0 PID: 14890 Comm: syz.8.1828 Not tainted syzkaller #0 PREEMPT(full) [ 656.981314][T14890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 656.981332][T14890] Call Trace: [ 656.981343][T14890] [ 656.981356][T14890] dump_stack_lvl+0x16c/0x1f0 [ 656.981396][T14890] should_fail_ex+0x512/0x640 [ 656.981449][T14890] get_futex_key+0x1d0/0x1560 [ 656.981494][T14890] ? __pfx_get_futex_key+0x10/0x10 [ 656.981547][T14890] futex_wake+0xea/0x530 [ 656.981591][T14890] ? __fget_files+0x204/0x3c0 [ 656.981623][T14890] ? __pfx_futex_wake+0x10/0x10 [ 656.981682][T14890] do_futex+0x1e3/0x350 [ 656.981723][T14890] ? __pfx_do_futex+0x10/0x10 [ 656.981763][T14890] ? __pfx_do_sendfile+0x10/0x10 [ 656.981802][T14890] __x64_sys_futex+0x1e0/0x4c0 [ 656.981849][T14890] ? __pfx___x64_sys_futex+0x10/0x10 [ 656.981892][T14890] ? syscall_user_dispatch+0x78/0x140 [ 656.981948][T14890] do_syscall_64+0xcd/0xfa0 [ 656.981991][T14890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.982021][T14890] RIP: 0033:0x7f5cba38f6c9 [ 656.982047][T14890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.982077][T14890] RSP: 002b:00007f5cbb2cf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 656.982105][T14890] RAX: ffffffffffffffda RBX: 00007f5cba5e5fa8 RCX: 00007f5cba38f6c9 [ 656.982131][T14890] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5cba5e5fac [ 656.982148][T14890] RBP: 00007f5cba5e5fa0 R08: 00007f5cbb2d0000 R09: 0000000000000000 [ 656.982166][T14890] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 656.982186][T14890] R13: 00007f5cba5e6038 R14: 00007ffc34833ac0 R15: 00007ffc34833ba8 [ 656.982232][T14890] [ 658.203977][T13957] Bluetooth: hci7: unexpected event 0x23 length: 127 > 13 [ 660.056378][T14939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1839'. [ 662.864485][ T31] INFO: task syz.0.1387:12735 blocked for more than 143 seconds. [ 663.074929][ T31] Not tainted syzkaller #0 [ 663.096364][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 663.202101][ T31] task:syz.0.1387 state:D stack:28072 pid:12735 tgid:12732 ppid:6174 task_flags:0x400140 flags:0x00080002 [ 663.215041][ T31] Call Trace: [ 663.218429][ T31] [ 663.221468][ T31] __schedule+0x1190/0x5de0 [ 663.226866][ T31] ? check_path.constprop.0+0x24/0x50 [ 663.233465][ T31] ? __lock_acquire+0x622/0x1c90 [ 663.238648][ T31] ? __pfx___schedule+0x10/0x10 [ 663.243985][ T31] ? find_held_lock+0x2b/0x80 [ 663.248809][ T31] ? schedule+0x2d7/0x3a0 [ 663.265790][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 663.311319][ T31] schedule+0xe7/0x3a0 [ 663.333589][ T31] schedule_preempt_disabled+0x13/0x30 [ 663.339239][ T31] __mutex_lock+0x818/0x1060 [ 663.350150][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 663.358897][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 663.364736][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 663.370758][ T31] ? __nla_validate_parse+0x600/0x2880 [ 663.378386][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 663.384410][ T31] nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 663.391084][ T31] ? rcu_is_watching+0x12/0xc0 [ 663.406733][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 663.424476][ T31] ? __nla_parse+0x40/0x60 [ 663.429055][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 663.440317][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 663.449021][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 663.460934][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 663.467190][ T31] ? rcu_is_watching+0x12/0xc0 [ 663.472096][ T31] ? bpf_lsm_capable+0x9/0x10 [ 663.479468][ T31] ? security_capable+0x7e/0x260 [ 663.484603][ T31] genl_rcv_msg+0x55c/0x800 [ 663.489252][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 663.494487][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 663.503049][ T31] netlink_rcv_skb+0x158/0x420 [ 663.509118][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 663.517813][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 663.525319][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 663.530735][ T31] genl_rcv+0x28/0x40 [ 663.534901][ T31] netlink_unicast+0x5aa/0x870 [ 663.539809][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 663.545275][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 663.550170][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.556892][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 663.571115][ T31] ____sys_sendmsg+0xa98/0xc70 [ 663.576068][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 663.582688][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 663.588315][ T31] ? __page_table_check_ptes_set+0x1ae/0x420 [ 663.598276][ T31] ? do_pte_missing+0x8a3/0x3ba0 [ 663.605424][ T31] ___sys_sendmsg+0x134/0x1d0 [ 663.612272][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 663.622564][ T31] ? __lock_acquire+0x622/0x1c90 [ 663.627682][ T31] __sys_sendmsg+0x16d/0x220 [ 663.633264][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 663.638505][ T31] ? find_held_lock+0x2b/0x80 [ 663.644785][ T31] ? do_user_addr_fault+0x843/0x1370 [ 663.650221][ T31] do_syscall_64+0xcd/0xfa0 [ 663.655205][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.664832][ T31] RIP: 0033:0x7f5e9498f6c9 [ 663.669456][ T31] RSP: 002b:00007f5e95801038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 663.687348][ T31] RAX: ffffffffffffffda RBX: 00007f5e94be6180 RCX: 00007f5e9498f6c9 [ 663.695730][ T31] RDX: 0000000020000000 RSI: 0000200000005380 RDI: 0000000000000003 [ 663.704679][ T31] RBP: 00007f5e94a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 663.715139][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.723446][ T31] R13: 00007f5e94be6218 R14: 00007f5e94be6180 R15: 00007ffdfcb42b98 [ 663.732937][ T31] [ 663.736140][ T31] [ 663.736140][ T31] Showing all locks held in the system: [ 663.746961][ T31] 1 lock held by khungtaskd/31: [ 663.752710][ T31] #0: ffffffff8e3c45a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 663.767783][ T31] 2 locks held by getty/5595: [ 663.773400][ T31] #0: ffff88814de480a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 663.788343][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 663.803194][ T31] 2 locks held by syz-executor/5830: [ 663.810876][ T31] #0: ffff88805625e0e0 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 663.823894][ T31] #1: ffffffff8e7ed188 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 663.841160][ T31] 2 locks held by syz-executor/5831: [ 663.846900][ T31] #0: ffff8880578780e0 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 663.859684][ T31] #1: ffffffff8e7ed188 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 663.872214][ T31] 2 locks held by syz.1.1320/12413: [ 663.877555][ T31] #0: ffffffff9018e7d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 663.887495][ T31] #1: ffffffff8e7ed188 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 663.905729][ T31] 2 locks held by syz.0.1387/12735: [ 663.913528][ T31] #0: ffffffff9018e7d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 663.922044][ T31] #1: ffffffff8e7ed188 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 663.935719][ T31] 3 locks held by kworker/0:0/12770: [ 663.941118][ T31] #0: ffff88813ff15948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 663.952507][ T31] #1: ffffc9000b6f7d00 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 663.964797][ T31] #2: ffffffff8e3cfa00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 663.979694][ T31] 2 locks held by syz-executor/12966: [ 664.024864][ T31] #0: ffff88802a32c0e0 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 664.043469][ T31] #1: ffffffff8e7ed188 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 664.054693][ T31] 1 lock held by syz.4.1846/14960: [ 664.062449][ T31] 2 locks held by syz.4.1846/14961: [ 664.067830][ T31] #0: ffffffff8f71f428 (mon_lock){+.+.}-{4:4}, at: mon_text_release+0x4e/0x3d0 [ 664.092241][ T31] #1: ffffffff8e3cfa00 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 664.103911][ T31] 2 locks held by syz.6.1845/14983: [ 664.109675][ T31] [ 664.112600][ T31] ============================================= [ 664.112600][ T31] [ 664.156906][ T31] NMI backtrace for cpu 0 [ 664.156930][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 664.156961][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 664.156979][ T31] Call Trace: [ 664.156988][ T31] [ 664.157000][ T31] dump_stack_lvl+0x116/0x1f0 [ 664.157039][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 664.157079][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 664.157114][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 664.157165][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 664.157212][ T31] watchdog+0xf3f/0x1170 [ 664.157246][ T31] ? rcu_is_watching+0x12/0xc0 [ 664.157277][ T31] ? __pfx_watchdog+0x10/0x10 [ 664.157301][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 664.157338][ T31] ? __kthread_parkme+0x19e/0x250 [ 664.157377][ T31] ? __pfx_watchdog+0x10/0x10 [ 664.157404][ T31] kthread+0x3c5/0x780 [ 664.157447][ T31] ? __pfx_kthread+0x10/0x10 [ 664.157490][ T31] ? rcu_is_watching+0x12/0xc0 [ 664.157520][ T31] ? __pfx_kthread+0x10/0x10 [ 664.157563][ T31] ret_from_fork+0x675/0x7d0 [ 664.157603][ T31] ? __pfx_kthread+0x10/0x10 [ 664.157646][ T31] ret_from_fork_asm+0x1a/0x30 [ 664.157705][ T31] [ 664.157715][ T31] Sending NMI from CPU 0 to CPUs 1: [ 664.290805][ C1] NMI backtrace for cpu 1 [ 664.290825][ C1] CPU: 1 UID: 0 PID: 14983 Comm: syz.6.1845 Not tainted syzkaller #0 PREEMPT(full) [ 664.290850][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 664.290863][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x0/0x20 [ 664.290910][ C1] Code: 0c 24 0f b7 d6 0f b7 f7 bf 03 00 00 00 e9 58 fe ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 0c 24 89 f2 89 fe bf 05 00 00 00 e9 2a fe ff ff [ 664.290930][ C1] RSP: 0018:ffffc9000af76b80 EFLAGS: 00000246 [ 664.290950][ C1] RAX: 0000000000000001 RBX: ffffffff8dcd1448 RCX: ffffffff81f1fbfb [ 664.290965][ C1] RDX: ffff88802e0fdac0 RSI: 0000000000000001 RDI: 0000000000000000 [ 664.290978][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 664.290991][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: dffffc0000000000 [ 664.291005][ C1] R13: ffff888012b16b80 R14: 0000000000000001 R15: ffff88803ab6aec8 [ 664.291020][ C1] FS: 00007f85e3bdc6c0(0000) GS:ffff888124b0e000(0000) knlGS:0000000000000000 [ 664.291043][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 664.291057][ C1] CR2: 00007f437bcf89a0 CR3: 000000004f594000 CR4: 00000000003526f0 [ 664.291072][ C1] Call Trace: [ 664.291079][ C1] [ 664.291087][ C1] security_vm_enough_memory_mm+0x52/0x110 [ 664.291120][ C1] shmem_inode_acct_blocks+0x345/0x450 [ 664.291155][ C1] shmem_alloc_and_add_folio+0x690/0xc20 [ 664.291193][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 664.291228][ C1] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 664.291255][ C1] shmem_get_folio_gfp+0x67f/0x1610 [ 664.291279][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 664.291309][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 664.291331][ C1] ? rwsem_spin_on_owner+0x69/0x2a0 [ 664.291366][ C1] shmem_write_begin+0x160/0x300 [ 664.291390][ C1] ? __pfx_shmem_write_begin+0x10/0x10 [ 664.291411][ C1] ? timestamp_truncate+0x21e/0x2d0 [ 664.291437][ C1] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 664.291475][ C1] generic_perform_write+0x3c4/0x900 [ 664.291513][ C1] ? __pfx_generic_perform_write+0x10/0x10 [ 664.291546][ C1] ? inode_needs_update_time.part.0+0x191/0x270 [ 664.291577][ C1] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 664.291602][ C1] shmem_file_write_iter+0x10e/0x140 [ 664.291629][ C1] __kernel_write_iter+0x31a/0xb10 [ 664.291655][ C1] ? __pfx___kernel_write_iter+0x10/0x10 [ 664.291679][ C1] ? __up_read+0x1f8/0x750 [ 664.291712][ C1] ? dump_user_range+0x756/0xb70 [ 664.291733][ C1] ? dump_user_range+0x5d9/0xb70 [ 664.291757][ C1] dump_user_range+0x413/0xb70 [ 664.291782][ C1] ? __pfx_dump_user_range+0x10/0x10 [ 664.291805][ C1] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 664.291842][ C1] ? __pfx_writenote+0x10/0x10 [ 664.291870][ C1] elf_core_dump+0x29c3/0x3c00 [ 664.291912][ C1] ? __pfx_elf_core_dump+0x10/0x10 [ 664.291934][ C1] ? kasan_save_stack+0x33/0x60 [ 664.291958][ C1] ? kasan_save_track+0x14/0x30 [ 664.291981][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 664.292003][ C1] ? __kvmalloc_node_noprof+0x3a3/0x9c0 [ 664.292027][ C1] ? vfs_coredump+0x1ddc/0x5670 [ 664.292047][ C1] ? arch_do_signal_or_restart+0x8f/0x790 [ 664.292071][ C1] ? irqentry_exit_to_user_mode+0x176/0x310 [ 664.292099][ C1] ? asm_exc_stack_segment+0x26/0x30 [ 664.292124][ C1] ? 0xffffffffff600000 [ 664.292169][ C1] ? vfs_coredump+0x2b9f/0x5670 [ 664.292189][ C1] vfs_coredump+0x2b9f/0x5670 [ 664.292215][ C1] ? __pfx_vfs_coredump+0x10/0x10 [ 664.292236][ C1] ? __lock_acquire+0x622/0x1c90 [ 664.292267][ C1] ? lock_acquire+0x179/0x350 [ 664.292301][ C1] ? is_bpf_text_address+0x8a/0x1a0 [ 664.292329][ C1] ? bpf_ksym_find+0x124/0x1c0 [ 664.292357][ C1] ? unwind_get_return_address+0x59/0xa0 [ 664.292380][ C1] ? arch_stack_walk+0xa6/0x100 [ 664.292408][ C1] ? stack_trace_save+0x8e/0xc0 [ 664.292431][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 664.292456][ C1] ? stack_depot_save_flags+0x29/0x9c0 [ 664.292488][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 664.292539][ C1] ? proc_coredump_connector+0x2d1/0x4f0 [ 664.292562][ C1] ? __pfx_proc_coredump_connector+0x10/0x10 [ 664.292587][ C1] ? rcu_is_watching+0x12/0xc0 [ 664.292612][ C1] get_signal+0x22e1/0x26d0 [ 664.292642][ C1] ? __pfx_get_signal+0x10/0x10 [ 664.292666][ C1] ? __pfx_force_sig+0x10/0x10 [ 664.292692][ C1] arch_do_signal_or_restart+0x8f/0x790 [ 664.292719][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 664.292748][ C1] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 664.292771][ C1] ? do_error_trap+0x214/0x240 [ 664.292798][ C1] irqentry_exit_to_user_mode+0x176/0x310 [ 664.292825][ C1] asm_exc_stack_segment+0x26/0x30 [ 664.292845][ C1] RIP: 0033:0x7f85e2d8f6d1 [ 664.292862][ C1] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 664.292881][ C1] RSP: 002b:7fffffffffffffff EFLAGS: 00010217 [ 664.292905][ C1] RAX: 0000000000000000 RBX: 00007f85e2fe6180 RCX: 00007f85e2d8f6c9 [ 664.292919][ C1] RDX: ffffffffffffffff RSI: 7fffffffffffffff RDI: 0000000000000007 [ 664.292933][ C1] RBP: 00007f85e2e11f91 R08: 0000000000000001 R09: 0000000000000000 [ 664.292946][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.292959][ C1] R13: 00007f85e2fe6218 R14: 00007f85e2fe6180 R15: 00007ffebaa9ca78 [ 664.292981][ C1]