last executing test programs: 2m58.562778275s ago: executing program 3 (id=1405): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0x6a) setpgid$auto(0x0, 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x2360411, 0x0, 0x1f, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/name\x00', 0x800, 0x0) read$auto(r2, 0x0, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0x1f, 0x940, 0x1ffde, 0x3, 0x6, 0x8000003, 0x9, 0x6, 0x0, 0x4, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, [0x0, 0x0, 0x0, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x100000000, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000000]}, 0x203, 0x7d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r4) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x20, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0xf}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x81}]}, 0x24}}, 0x4000000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x4) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 2m56.450403882s ago: executing program 3 (id=1408): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000002c0)={{@raw=0x7, 0x8, 0x4, 0xa2, "c6e47a44a36664a5e709f0e4c97056bc9fa32c617bb88dc98fa7591aefc4647f5af349f8e1e79c823b22958f"}, 0x1, @enumerated=@item=[0x0, 0x3, 0x1, 0x3, 0x6, 0x8001, 0x10, 0x6, 0x10001, 0xefe, 0xfffffff9, 0x5, 0x8001, 0x62f, 0x101, 0x9, 0x200, 0xfffffff0, 0x1000, 0x7, 0x3, 0x3, 0x0, 0x6, 0xb94, 0x0, 0x1, 0x7, 0x3, 0xe8, 0x4, 0x0, 0x100009, 0x46f, 0x8, 0x1, 0x6, 0x4, 0x6, 0x8, 0x80, 0x9, 0x65b, 0x9, 0x7, 0x81, 0x1ce8, 0x9, 0x34b5, 0xfff, 0x5, 0xfff, 0x2, 0x1000, 0x9, 0x0, 0x400, 0xd, 0x0, 0x0, 0x207d, 0xa7a, 0x5, 0x4000005, 0x4, 0x80, 0x6ed, 0x40000, 0x1, 0x1, 0x6, 0x4, 0x8, 0x1, 0x4003ff, 0x5, 0x8, 0x6, 0x0, 0xa, 0x2, 0x5, 0x400, 0x6, 0x84, 0x9, 0x29, 0x8, 0x30971ad3, 0x9, 0x78d, 0x7f, 0x0, 0x8001, 0x20000, 0x40, 0x0, 0x4, 0x5, 0x0, 0x0, 0x4f000, 0x100, 0x5, 0x7, 0xd49e923b, 0x4, 0x80000000, 0x77, 0xfffffffb, 0x0, 0x7fffffff, 0x7fff, 0x9, 0x5b, 0x8, 0x10001, 0x8, 0x0, 0xc2, 0x0, 0x5, 0x1000, 0x1, 0x7, 0x6, 0x8, 0x3], "4570dcfd140074f863fc1385c4fd7abe6fce96c0b442897f58fd7d975d164deff4eef5b9f9173fa400163669eae95125d4bd68ca54ca1b0aefb60ffa8d501b1329af8d4108ac145aa564c6e7a09ea1b2dfae0f309c6ea508833d7d134b13d8cb3ef95bf5ed43801c280c02a5a853512e6f730d43226f00af1c5ac268ecc1d18f"}) 2m56.15144616s ago: executing program 3 (id=1409): sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c8000000", @ANYRES16, @ANYRES64=0x0], 0xc8}, 0x1, 0x0, 0x0, 0x200009c4}, 0x2005c894) socket(0x29, 0x80000, 0x4000003) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/default/ioam6_id_wide\x00', 0x40100, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000001200)={0xf2f, [{0x529, 0x5}, {0x19f1a9bc, 0x7}, {0x800, 0x5}, {0x9, 0x45053277}, {0x7d, 0xf}, {0x7fffffffffffffff, 0x5}, {0x8, 0x1000}, {0x8, 0xf94}, {0x9, 0x5}, {0x7fff}, {0x80000000, 0x5}, {0x6b, 0x6}, {0x6, 0xfffffffffffffe00}, {0x1}, {0x5, 0xb11}, {0x8, 0x7}, {0x3, 0x8}, {0x2, 0x2}, {0x0, 0x5bf8}, {0x6, 0xfff}, {0x100, 0x1000}, {0x10000}, {0x6, 0x1}, {0x9, 0xee}, {0x9, 0x2}, {0xff, 0x6}, {0x7, 0x4}, {0x8, 0xb}, {0x9, 0x6}, {0x9, 0x101}, {0x1, 0x9}, {0x5, 0x2c3}, {0x3, 0xfe}, {0x9, 0x40}, {0x5b, 0x6}, {0xfff, 0x10000}, {0x5, 0x7fffffffffffffff}, {0x40004}, {0x2, 0x12580000}, {0x9}, {0x9, 0x100000001}, {0x2, 0x7}, {0x6, 0x5}, {0x10, 0x4}, {0x9, 0x1}, {0x5, 0x10}, {0x9, 0x200}, {0xb, 0x4d97}, {0xffffffffffffff7f, 0x8000000000000001}, {0x7f, 0x800}, {0x3, 0x10000}, {0x6, 0xffffffffffffffff}, {0x6, 0x2}, {0x5, 0x3}, {}, {0x3, 0x1}, {0x1, 0xbb1}, {0x9, 0x8000}, {0x6302, 0x3}, {0x9, 0x9}, {0xa, 0x401}, {0x2}, {0x4, 0x800002}, {0x0, 0x4}, {0x7ff}, {0x6, 0x7fffffff}, {0x1, 0x9}, {0x67a, 0xffff}, {0xc, 0x8}, {0x80, 0xe0}, {0x3e75, 0x1}, {0xe8, 0x9}, {0x5}, {0x0, 0x1}, {0xfffffffffffffffe, 0x9}, {0x8, 0xf870}, {0x1ae8df8a, 0x5}, {0xf8, 0xd7c}, {0x0, 0x8}, {0x9, 0xffffffffffffffff}, {0x5de8, 0x7ff}, {0x2, 0x800}, {0xfffffffffffffff8, 0x2}, {0x2, 0x4}, {0x3, 0x5}, {0x0, 0x7ff}, {0x8b, 0x6e}, {0x8000000000000000, 0x3}, {0x4, 0xf434}, {0x4, 0xa0b}, {0x400000002, 0x5}, {0x4, 0x5}, {0x9, 0x5}, {0xd0c7, 0x9}, {0x7, 0x1}, {0x35d, 0x75}, {0x7, 0x3}, {0x3, 0xfffffffffffffffa}, {0x1, 0x38a}, {0x4, 0x1}, {0x100000001, 0x1}, {0x6, 0x5}, {0x5, 0x5}, {0x81, 0x821}, {0x2, 0x1}, {0x100000000, 0x5}, {0x8008, 0xfffffffffffffffa}, {0x9, 0xc}, {0x0, 0x2}, {0x2, 0x70829e47}, {0x255, 0x100000001}, {0x7, 0x8}, {0x1315, 0x7}, {0x4, 0x100}, {0x2, 0x24ad}, {0xd, 0x7}, {0x5, 0x131}, {0x1}, {0x7fffffff, 0xaf06}, {0x8, 0x6}, {0x10, 0x8}, {0x2, 0x5}, {0x1, 0x7}, {0x6, 0xc184}, {0x5, 0x8}, {0x101, 0x24}, {0xfab, 0x3}, {0x1, 0x8}, {0xffffffffffffff89, 0x1}, {0x7ff}, {0x3, 0x9}, {0x7fffffff, 0xffffffffffffffff}, {0x1, 0x1944}, {0x7, 0xfffffffffffffff7}, {0x4, 0xa7}, {0x3, 0xd}, {0x4, 0x6}, {0xfff, 0xa81}, {0x3, 0xc0}, {0x1ff, 0x800}, {0x1000, 0x5}, {0xb, 0x8}, {0x4, 0x6}, {0x1000000000002, 0x5}, {0x200000007, 0x6}, {0x8001, 0xb}, {0x7fffffff, 0x953c}, {0x1, 0x2}, {0x4}, {0x1, 0x5}, {0xfffffffffffffff8, 0xbd}, {0x4}, {0x54e5, 0x6000}, {0x100000001, 0x100000001}, {0x4, 0x8}, {0x200, 0x7afe}, {0x5, 0x2}, {0xfffffffffffffff7, 0x3e9}, {0x0, 0x8}, {0x3, 0x9}, {0x80, 0x1000}, {0x802, 0xd}, {0x0, 0x6}, {0x7, 0x10}, {0x80000000000000, 0x5}, {0xf, 0xc}, {0x0, 0x3}, {0x0, 0x9bd}, {0x4, 0xf96a}, {0x203b0000000000, 0x6}, {0x9}, {0x1, 0x8}, {0x1e, 0x2}, {0x6, 0x400}, {0x8, 0x80000001}, {0x3fc0, 0x6}, {0x4}, {0x7fff, 0x7}, {0x30, 0x8399}, {0xffffffffffffffff, 0x2}, {0x1ff, 0x7}, {0x5, 0x4}, {0x4, 0x79}, {0x3, 0x2}, {0x6, 0x7fff}, {0x6, 0x8}, {0x1000, 0xef62}, {0xbd1b, 0x10001}, {0x8, 0x6}, {0xbd8, 0x80000000}, {0x5, 0x80000001}, {0x1, 0x6}, {0xfff, 0x7}, {0x100, 0x3}, {0x7a}, {0x100}, {0x7, 0xffffffffffffffff}, {0x238b, 0x5}, {0x0, 0x2}, {0xd3fe, 0x7}, {0x5, 0x7}, {0x1, 0x1}, {0x99, 0xfffffffffffffffc}, {0x6, 0xee}, {0x6, 0x100}, {0x78e, 0x5}, {0x1ddf, 0x6}, {0x9, 0x40}, {0x1, 0x2}, {0x8001, 0x91}, {0x8000, 0x1}, {0x9, 0x6}, {0x2, 0x4}, {0x5, 0x3}, {0x0, 0xffff}, {0x5}, {0x5aa, 0x8020000000000}, {0x7, 0x8000000000000000}, {0x400005c4a, 0x4}, {0x3, 0x7de}, {0x0, 0x2}, {0x780000000, 0x8}, {0x9, 0xffffffffffffff3f}, {0x3, 0x4}, {0x81, 0x6a04}, {0x2, 0x1c25}, {0xffffffffffffffc0, 0x8}, {0x1, 0x427}, {0x2, 0x1}, {0x2000008, 0xed3}, {0x3, 0xbe28}, {0x8000000000000000, 0xffffffffffffffff}, {0x2, 0x2}, {0x7, 0x7}, {0x80000001, 0x3987}, {0x66f3, 0x101}, {0x5, 0x101}, {0x4, 0x2}, {0xfff, 0x2}, {0x4, 0x8000000000000001}, {0x1}, {0xa, 0x6}, {0x6, 0x4}, {0x6, 0x3}, {0xd, 0x2}, {0x1, 0x10001000000000}, {0x0, 0x7fffffffffffffff}, {0x9, 0x6}, {0x200, 0x2f91}, {0xd5c5, 0x81}, {0x8, 0x8000}, {0x800, 0xfffffffffffffffa}, {0x301983e2, 0x5}, {0x3, 0x7}, {0x0, 0x4}], 0x7, "0a54d639d08954"}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r2, 0x5425, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r3, 0x5408, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xa, 0x3, 0x3, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x8000]}, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 2m54.338625746s ago: executing program 3 (id=1414): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card2\x00', 0x380, 0x0) fanotify_mark$auto(0xffffffffffffffff, 0x2, 0x0, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) socket(0x10, 0x2, 0xc) r2 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$auto_RNDCLEARPOOL(r2, 0x5206, 0x0) socket(0xa, 0x3, 0x3b) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b8162d21, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x407, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3b, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = socket(0x2, 0x1, 0x0) ioctl$auto(r1, 0x5420, r3) ioctl$auto(0x3, 0x5403, 0x38) ioctl$auto(r0, 0x900064b3, r0) 2m53.227197747s ago: executing program 3 (id=1420): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D1p\x00', 0x200, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION(r0, 0x80044100, &(0x7f0000000100)=0x5) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000", 0x4) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r1 = gettid() mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kill$auto(r1, 0x11) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r2, r3, 0x0, 0x10001fc) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x111800, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) 2m50.827002337s ago: executing program 3 (id=1429): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x100000000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x801, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048010}, 0x80) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e20, @rand_addr=0xfffffffe}, 0x57) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x55) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) io_uring_setup$auto(0x0, &(0x7f0000000380)={0x0, 0x8, 0x40, 0x100, 0xffffffff, 0xf, r0, [0x5, 0x10001, 0xffffffff], {0x3, 0x7, 0xd9, 0x2, 0x6, 0x6, 0x5, 0x3, 0x8}, {0x1, 0x9, 0x9, 0x37a0, 0x8, 0x8, 0x8, 0x101, 0xb}}) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), r1) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x52}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x36}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x8880}, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) prctl$auto(0x35, 0x0, 0x4000000008, 0x0, 0x0) socket(0x2, 0x801, 0x106) socket(0xa, 0x2, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x80, 0x10000, 0x0, r6, 0x1000, "72fea04183dce563f03f2a25077b3383", 0x0, r6, 0x4, 0x6, 0x101, 0x1, r6}, 0x6f3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7ff, 0x200}, 0x100, 0x6) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) 2m47.809868829s ago: executing program 2 (id=1437): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x2, 0x80000001, 0x2) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, 0x0, 0x1013) poll$auto(0x0, 0x7f, 0x9) socket(0x25, 0x5, 0x6) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"58f99464", 0x8, 0x6, 0x1, 0x3, 0x5, "4bb69ec4b3f4c14539898e4c5682f5", "347f00", "a630df9d", "a0ed9959", ["cd9196b8fe1a8a7eb90401a9", "2f9c30017721de33c560b95a", "d3fe6c55a78d6932211c9b69", "ea334f1f1e5e27a1320d6edb"]}) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0) mmap$auto(0x0, 0x20006, 0xdf, 0x800000eb1, 0xffffffffffffffff, 0x4) ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000180)="6da6b940dfe114cacac8b7cca871a393aaf922f69708e077a3ff54d760f973198c7f36202c9afdaf7bc2eb57e0") close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbf22502000000c22ed8602d899719b57913a77c1833e1789422c08cd4a3ecb36cae429b86c42a27cd8b54e14589658d1212aebe31b482e5990799eb3031512185e37d3aa849824a70eb240ab89d57dd4626e4efbb1419f977b62bcb7febd7adfdabd9e53199f4c986bd011fb35f722b4ec84688f56addfc11e7c3f1c6573e2c4fe9c12888"], 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x20008080) r2 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f00000010c0), 0x40002, 0x0) read$auto(r2, &(0x7f0000001100)='/dev/ttyr8\x00', 0xf92) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) 2m47.341061426s ago: executing program 2 (id=1438): mmap$auto(0x0, 0x40009, 0x9, 0x9b72, 0x7, 0x28000) r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2800000090bc06671e84cae4dc75b9b22b3c7ecc6e084785d0470c50a2d60ed7e5979f06e6e7070e282632cc508c2cc2f32526c6ce1a95f439db01dbd98d1b96fc6ba2b7118d4d7f8683fc9f98cea9c825cb6ada0f56640ae58f6af429a73f56c6d8f04378f0f555ca9553a4c4864636b0910851c52156b071938fc95562225dc00b9ab636ec3168f82dab", @ANYRES32=r0, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4040010}, 0x840) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) r3 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto_SO_MARK(r2, 0x725a, 0x24, &(0x7f0000000040)='\x00', 0x9) ioctl$auto_SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000880)="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") r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)=""/9, 0x9) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) mmap$auto(0x0, 0x2020009, 0xfffffffffffffff8, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x0, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x40000000000a5, 0x80000008000) r6 = socket(0x2, 0x1, 0x0) ioperm$auto(0xfffffffffffffffa, 0x2, 0x1ff) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f00000002c0)={{@raw=0x7, 0x8, 0x4, 0xa2, "c6e47a44a36664a5e709f0e4c97056bc9fa32c617bb88dc98fa7591aefc4647f5af349f8e1e79c823b22958f"}, 0x1, @enumerated=@item=[0x0, 0x3, 0x1, 0x3, 0x6, 0x8001, 0x10, 0x6, 0x10001, 0xefe, 0xfffffff9, 0x5, 0x8001, 0x62f, 0x101, 0x9, 0x200, 0xfffffff0, 0x1000, 0x7, 0x3, 0x3, 0x0, 0x6, 0xb94, 0x0, 0x1, 0x7, 0x3, 0xe8, 0x4, 0x0, 0x100009, 0x46f, 0x8, 0x1, 0x6, 0x4, 0x6, 0x8, 0x80, 0x9, 0x65b, 0x9, 0x7, 0x81, 0x1ce8, 0x9, 0x34b5, 0xfff, 0x5, 0xfff, 0x2, 0x1000, 0x9, 0x0, 0x400, 0xd, 0x0, 0x0, 0x207d, 0xa7a, 0x5, 0x4000005, 0x4, 0x80, 0x6ed, 0x40000, 0x1, 0x1, 0x6, 0x4, 0x8, 0x1, 0x4003ff, 0x5, 0x8, 0x6, 0x0, 0xa, 0x2, 0x5, 0x400, 0x6, 0x84, 0x9, 0x29, 0x8, 0x30971ad3, 0x9, 0x78d, 0x7f, 0x0, 0x8001, 0x20000, 0x40, 0x0, 0x4, 0x5, 0x0, 0x0, 0x4f000, 0x100, 0x5, 0x7, 0xd49e923b, 0x4, 0x80000000, 0x77, 0xfffffffb, 0x0, 0x7fffffff, 0x7fff, 0x9, 0x5b, 0x8, 0x10001, 0x8, 0x0, 0xc2, 0x0, 0x5, 0x1000, 0x1, 0x7, 0x6, 0x8, 0x3], "4570dcfd140074f863fc1385c4fd7abe6fce96c0b442897f58fd7d975d164deff4eef5b9f9173fa400163669eae95125d4bd68ca54ca1b0aefb60ffa8d501b1329af8d4108ac145aa564c6e7a09ea1b2dfae0f309c6ea508833d7d134b13d8cb3ef95bf5ed43801c280c02a5a853512e6f730d43226f00af1c5ac268ecc1d18f"}) ioctl$auto_EVIOCRMFF(r5, 0x40044581, &(0x7f00000000c0)=0x10001) sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000040), 0x16, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x2, 0x0, 0x5, 0xa}, 0x9}, 0x4, 0xffb) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) socket(0x26, 0x1, 0x84) 2m47.133473857s ago: executing program 2 (id=1440): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/mtu\x00', 0xe3102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ext4/sda1/inode_readahead_blks\x00', 0xe0801, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x400, 0x0) read$auto(r1, 0x0, 0x20) openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000540), 0x200000, 0x0) write$auto(0x3, 0x0, 0x100082) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000140), r2) sendmsg$auto_NFC_CMD_LLC_SDREQ(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40102000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x5}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000094) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000001c40)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x500, 0x0, 0x844}, 0x20004010) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000440), r2) open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x8000000}, 0x3, 0xf8, 0x10) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0x200fffffffd}, 0x6, 0x7fffffff, 0x1) sendmsg$auto_BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$auto_SNDCTL_FM_4OP_ENABLE(r7, 0x4004510f, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="13002cbd7000dddbdf251700000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20040894) sendfile$auto(r0, r0, 0x0, 0x5) 2m46.633497786s ago: executing program 2 (id=1441): unshare$auto(0x40000084) syslog$auto(0x4, &(0x7f0000000440)='.\x19\xe9k\xac\x8c\x1d\x0e\x98\x02\x00\x00\x00\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfd\x00\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87lo\xd2\xed\xbcY,\xe3vy+T\xabxT}\xbc\xc9u\"\x00\xff\x00\x00\x00z\xd4\x8c\xd4\xf0\xba\x8e\xa2f\xae\x99\n\xd9F\xacG\xff>', 0x24c) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x6, 0x15) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000001c0), 0x42001, 0x0) ioctl$auto_USB_RAW_IOCTL_EPS_INFO(r0, 0x83c0550b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/serial8250/driver_override\x00', 0x22b42, 0x0) sendfile$auto(r4, r4, 0x0, 0x4f64a1d2) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090027bd7000fbdbdf2502"], 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2m46.214700316s ago: executing program 2 (id=1443): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m45.956681949s ago: executing program 2 (id=1444): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x100000000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x801, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048010}, 0x80) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e20, @rand_addr=0xfffffffe}, 0x57) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x55) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) io_uring_setup$auto(0x0, &(0x7f0000000380)={0x0, 0x8, 0x40, 0x100, 0xffffffff, 0xf, r0, [0x5, 0x10001, 0xffffffff], {0x3, 0x7, 0xd9, 0x2, 0x6, 0x6, 0x5, 0x3, 0x8}, {0x1, 0x9, 0x9, 0x37a0, 0x8, 0x8, 0x8, 0x101, 0xb}}) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), r1) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x52}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x36}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8880}, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) prctl$auto(0x35, 0x0, 0x4000000008, 0x0, 0x0) socket(0x2, 0x801, 0x106) socket(0xa, 0x2, 0x0) r6 = open(0x0, 0x149443, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x80, 0x10000, 0x0, r6, 0x1000, "72fea04183dce563f03f2a25077b3383", 0x0, r6, 0x4, 0x6, 0x101, 0x1, r6}, 0x6f3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7ff, 0x200}, 0x100, 0x6) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) 2m37.837169311s ago: executing program 1 (id=1466): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='U'], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="251729bd7000fedbdf2501000200"], 0x14}, 0x1, 0x0, 0x0, 0x41000}, 0x64810) read$auto_fops_atomic_t_ro_(0xffffffffffffffff, &(0x7f00000000c0)=""/65, 0x41) 2m37.526236905s ago: executing program 1 (id=1467): mmap$auto(0x4001, 0x20009, 0xa7, 0xeb2, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x9, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2b, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x81, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysinfo$auto(0x0) r1 = socket(0xa, 0x801, 0x100) setsockopt$auto(r1, 0x6, 0x2, 0x0, 0xfb3) prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) madvise$auto(0x0, 0xffffffffffff0005, 0x19) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0xfffffffffffffff7, 0x5, 0x19, r0, 0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x80, 0x7000000) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media11\x00', 0x28800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2m36.485845003s ago: executing program 1 (id=1471): getcwd$auto(0x0, 0xffffffffffffffff) getcwd$auto(&(0x7f00000000c0)='/proc/self/oom_adj\x00', 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/devices.deny\x00', 0x8ea182, 0x0) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(r0, 0x84, 0x82, 0x0, &(0x7f0000000000)=0x7ffe) (fail_nth: 3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) sysfs$auto(0x17, 0xd29, 0x9) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x220000, 0x0) 2m35.342405855s ago: executing program 1 (id=1474): r0 = io_uring_setup$auto(0x406, 0x0) io_uring_enter$auto(r0, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) ioctl$auto_BLKTRACETEARDOWN2(r0, 0x1276, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/loop12/trace/enable\x00', 0x2062, 0x0) write$auto(r2, 0x0, 0x81) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x400000000008000) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000002840)='/sys/kernel/tracing/trace_clock\x00', 0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = socket(0x15, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0xa, 0x801, 0x106) pipe2$auto(0x0, 0x4800) splice$auto(0x4, 0x0, r4, 0x0, 0xffd, 0xf) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) readv$auto(0x3, 0x0, 0x10) 2m35.316357451s ago: executing program 32 (id=1429): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x100000000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x801, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048010}, 0x80) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e20, @rand_addr=0xfffffffe}, 0x57) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x55) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) io_uring_setup$auto(0x0, &(0x7f0000000380)={0x0, 0x8, 0x40, 0x100, 0xffffffff, 0xf, r0, [0x5, 0x10001, 0xffffffff], {0x3, 0x7, 0xd9, 0x2, 0x6, 0x6, 0x5, 0x3, 0x8}, {0x1, 0x9, 0x9, 0x37a0, 0x8, 0x8, 0x8, 0x101, 0xb}}) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), r1) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x52}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x36}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x8880}, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) prctl$auto(0x35, 0x0, 0x4000000008, 0x0, 0x0) socket(0x2, 0x801, 0x106) socket(0xa, 0x2, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x80, 0x10000, 0x0, r6, 0x1000, "72fea04183dce563f03f2a25077b3383", 0x0, r6, 0x4, 0x6, 0x101, 0x1, r6}, 0x6f3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7ff, 0x200}, 0x100, 0x6) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) 2m34.376220007s ago: executing program 1 (id=1477): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sg0\x00', 0x103002, 0x0) mkdir$auto(&(0x7f0000000080)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) write$auto_sg_fops_sg(r0, &(0x7f0000000140)="01000000000d0000624c492f4aa7a158ad329acb69abe1d4bbe91b3ddc84d02747403bbca33c95be8fb08baf91e29260d0", 0x31) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6}) socket(0x2, 0x1, 0x0) inotify_init1$auto(0x3000000000000) getpeername$auto(r2, &(0x7f0000000080)=@ax25={0x3, @default, 0x1}, &(0x7f0000000180)=0x9) write$auto(r1, &(0x7f0000000400)='/Eev/audio1\x00VI\xa3\xa2\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\n\x00\x00\x00|\xffGP\x97)\xcf\a\xb8 n\x89C:nD\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x88\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4t\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8Y\xfe.\xb2\x1c0W0\x02dK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc3\x10Z\xba\xdeG:\xaf\xf4~;=\x03\x81\xb8\x86u\x9a\xda\x18E\xcd\x15\x0e\xdf\xd6[\xcbe \x11\x92\x8b\"\xfd\xf6-\xfb\xd5]Y}\xed\xef\xc0Uf~4\x00\x9b\x1a\xc9KR=Vli\xeeXL\xaa]w\xe0\xc2\x8c\x8d{\xbe<\xdb\xc0J\x80\xfe\xef\x94\xda\x95\xc8\xd8/.\x9c\xe4m\\\xb7H\xa6ut\xb9\xddy\xe9\xe1\x93$\x92\xd5\x8b\xa0\x85_\xb1\xe8\x85!\x84\xb43\xa5\xaf\xac\x19\x1c\xdbo3\xad=\xd3Q$\\\xa9\x80\xffU\x05\xfa\xf6\x9cXd\xa8\x1f\x81', 0x100000a3d7) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0xa, 0x1, 0x84) r5 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x5, 0xfffffffffffffffa, 0x1ffde, 0x0, 0xa, 0x1, 0x9, 0x3, 0x9, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xadd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf81]}, 0x1fe, 0x200d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r5, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESHEX=r2], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000380)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x6}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto_UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r3, 0x5501, 0x0) 2m33.33705966s ago: executing program 1 (id=1479): r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) writev$auto(r0, &(0x7f0000000000)={0x0, 0x4}, 0x2) 2m30.541496339s ago: executing program 33 (id=1444): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x100000000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x801, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048010}, 0x80) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e20, @rand_addr=0xfffffffe}, 0x57) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x55) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) io_uring_setup$auto(0x0, &(0x7f0000000380)={0x0, 0x8, 0x40, 0x100, 0xffffffff, 0xf, r0, [0x5, 0x10001, 0xffffffff], {0x3, 0x7, 0xd9, 0x2, 0x6, 0x6, 0x5, 0x3, 0x8}, {0x1, 0x9, 0x9, 0x37a0, 0x8, 0x8, 0x8, 0x101, 0xb}}) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), r1) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x52}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x36}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8880}, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) prctl$auto(0x35, 0x0, 0x4000000008, 0x0, 0x0) socket(0x2, 0x801, 0x106) socket(0xa, 0x2, 0x0) r6 = open(0x0, 0x149443, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x80, 0x10000, 0x0, r6, 0x1000, "72fea04183dce563f03f2a25077b3383", 0x0, r6, 0x4, 0x6, 0x101, 0x1, r6}, 0x6f3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7ff, 0x200}, 0x100, 0x6) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) 2m17.899855106s ago: executing program 34 (id=1479): r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) writev$auto(r0, &(0x7f0000000000)={0x0, 0x4}, 0x2) 1m42.620870794s ago: executing program 0 (id=1616): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x2, 0x80000001, 0x2) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, 0x0, 0x1013) poll$auto(0x0, 0x7f, 0x9) socket(0x25, 0x5, 0x6) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000000c0)={"58f99464", 0x8, 0x6, 0x1, 0x3, 0x5, "4bb69ec4b3f4c14539898e4c5682f5", "347f00", "a630df9d", "a0ed9959", ["cd9196b8fe1a8a7eb90401a9", "2f9c30017721de33c560b95a", "d3fe6c55a78d6932211c9b69", "ea334f1f1e5e27a1320d6edb"]}) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0) mmap$auto(0x0, 0x20006, 0xdf, 0x800000eb1, 0xffffffffffffffff, 0x4) ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000180)="6da6b940dfe114cacac8b7cca871a393aaf922f69708e077a3ff54d760f973198c7f36202c9afdaf7bc2eb57e0") close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbf22502000000c22ed8602d899719b57913a77c1833e1789422c08cd4a3ecb36cae429b86c42a27cd8b54e14589658d1212aebe31b482e5990799eb3031512185e37d3aa849824a70eb240ab89d57dd4626e4efbb1419f977b62bcb7febd7adfdabd9e53199f4c986bd011fb35f722b4ec84688f56addfc11e7c3f1c6573e2c4fe9c12888"], 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x20008080) r3 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f00000010c0), 0x40002, 0x0) read$auto(r3, &(0x7f0000001100)='/dev/ttyr8\x00', 0xf92) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) 1m41.515858778s ago: executing program 0 (id=1621): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socketcall$auto(0x8000, 0x0) (async) r1 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) (async) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/shm_next_id\x00', 0x88000, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00x \xec(\x1d\x98\xe9\xc4\xe8\xfc@6=\xab\xf4\x89\x01\x93\xdc\x19\xffv\'\xa1\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x8ak\xdeB\xcbd\xd3\x05\xe4P\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\xec\xc9\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8\x8a7\xb7t', 0x7ef) socket(0xa, 0x1, 0x100) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r3, 0x0, 0x7ff, 0x400) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r5) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d6) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m40.330430983s ago: executing program 0 (id=1624): mmap$auto(0x100000000000006, 0xcd6, 0x6, 0x12, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x7) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) write$auto(r2, &(0x7f00000002c0)='\x00', 0xfffffffffffffff8) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card1/pcm0p/sub5/sw_params\x00', 0x20100, 0x0) pread64$auto(r3, 0x0, 0x8, 0x8000) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x10) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x480, 0x400, 0x9}]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000100), r1) sendmsg$auto_NET_SHAPER_CMD_GET2(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x4c, r5, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r4}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r4}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r4}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r4}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r4}, @NET_SHAPER_A_IFINDEX={0x8}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48850}, 0x4000000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r1) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xa3, 0xeb1, r6, 0x8000) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0) sendmmsg$auto(0x3, 0x0, 0x7878, 0x7000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) getpriority$auto_PRIO_PGRP(0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x10001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x8], {0x9, 0x1, 0x6, 0x0, 0x420, 0x1001, 0x3fdc, 0x3, 0x5}, {0x1, 0x6, 0x54ed, 0x0, 0x101, 0x6, 0x6, 0xa, 0xffffffffffffff81}}) close_range$auto(0x2, 0x8, 0x0) 1m40.109996273s ago: executing program 0 (id=1626): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfa, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x700, 0x0, 0x4004000}, 0x140000e4) 1m39.865505019s ago: executing program 0 (id=1627): mmap$auto(0x0, 0x2020009, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x3, 0xa) clone3$auto(0x0, 0x9) socketpair$auto(0x1, 0x0, 0xbffffffc, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x8000) open(0x0, 0x149443, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x3, 0x5, 0x1000) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x55) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1b0026bd7000fddbdf2503000000040008000400038012000100898771f1c19f17790485908286dd00000a00028000b487080d9c000004000800f2c21db9d91a84b6c9f7f286c85e8a4fd265dc4f14f37f1fecdd1e5e60252544623c5d884a2a0c8254fa27c92e4eae66bc7f915c8322a40624a7da54907c651f34d5e26c819d8076899934d30169cd9dd94bead14285447fd1b9b084c4ddc1add13ed1"], 0x40}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) mmap$auto(0x2, 0x2020009, 0x3, 0x15, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_score_adj\x00', 0x142, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xfa}, 0x7) request_key$auto(0x0, 0x0, 0x0, 0x9) socket(0x11, 0x80003, 0x300) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/ib_srp/parameters/reconnect_delay\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)='-', 0x1) setsockopt$auto(r0, 0x9b2, 0x378, 0x0, 0x4) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 1m39.742302799s ago: executing program 0 (id=1628): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/block/nbd1/sched/read2_fifo_list\x00', 0x169100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf25020000000800030000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) futex_requeue$auto(0x0, 0x0, 0xf, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, 0x0) pread64$auto(r0, 0x0, 0x1000f42d, 0x100) r3 = socket$nl_generic(0x10, 0x3, 0x10) eventfd2$auto(0x0, 0x7) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = io_uring_setup$auto(0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x3c, 0x0) r6 = pipe2$auto(&(0x7f0000000280)=r5, 0x80000001) close_range$auto(r1, r6, 0xa) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/dynamic_debug/control\x00', 0x482, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x0, 0x0) write$auto(0x3, 0x0, 0x0) r7 = fsopen$auto(0x0, 0x1) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000000140)="b9476720ee1bc76c2a8d6a1230ff3f82d93244c1fb6d5a7acfbb9f9cafac26b7c094fa77d755628e7c2e01b02fbd59f3819a771bde1914837da17c5b2dbf3cae6a45003b434d13a8c658ee7304626e175011a2db80737cf17bd2bafebb0801f7586a34932f7da935f87780605a7eeae52b879e4d1eb9db03d2babbfbd60bebd56cd00878f23c831119d1631205ff33c63888e458eb3945f31c7996fbf36a72b36d385e152b931a1bcf79fb9edb17e46d4025c94d4adfa139fb0a54c6a8147640", 0xc0) fsconfig$auto(r7, 0x6, 0x0, 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_SEND_MSG_RING(r5, 0x1f, 0x0, 0x3) 1m24.62940087s ago: executing program 35 (id=1628): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/block/nbd1/sched/read2_fifo_list\x00', 0x169100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf25020000000800030000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) futex_requeue$auto(0x0, 0x0, 0xf, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(r2, 0x7ac, 0x0) pread64$auto(r0, 0x0, 0x1000f42d, 0x100) r3 = socket$nl_generic(0x10, 0x3, 0x10) eventfd2$auto(0x0, 0x7) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = io_uring_setup$auto(0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x3c, 0x0) r6 = pipe2$auto(&(0x7f0000000280)=r5, 0x80000001) close_range$auto(r1, r6, 0xa) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/dynamic_debug/control\x00', 0x482, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x0, 0x0) write$auto(0x3, 0x0, 0x0) r7 = fsopen$auto(0x0, 0x1) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000000140)="b9476720ee1bc76c2a8d6a1230ff3f82d93244c1fb6d5a7acfbb9f9cafac26b7c094fa77d755628e7c2e01b02fbd59f3819a771bde1914837da17c5b2dbf3cae6a45003b434d13a8c658ee7304626e175011a2db80737cf17bd2bafebb0801f7586a34932f7da935f87780605a7eeae52b879e4d1eb9db03d2babbfbd60bebd56cd00878f23c831119d1631205ff33c63888e458eb3945f31c7996fbf36a72b36d385e152b931a1bcf79fb9edb17e46d4025c94d4adfa139fb0a54c6a8147640", 0xc0) fsconfig$auto(r7, 0x6, 0x0, 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_SEND_MSG_RING(r5, 0x1f, 0x0, 0x3) 1m2.953619688s ago: executing program 4 (id=1742): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) prctl$auto(0x3e, 0x5, 0x0, 0x7, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x2ffffffffffd) mmap$auto(0x0, 0x7, 0xffffffffffffffff, 0x20ebe, 0x403, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyu5\x00', 0x8000, 0x0) ioctl$auto(0x3, 0x540f, 0x38) socket(0x11, 0x800, 0x35) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x100026, 0x28, &(0x7f0000001280)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5\x02OvrL*\xab\x9e\xc1\xcb\xbaLTV\xbf\x1aI\xce\xeb\xdb\x1a[\x1d\xf7h\xf0]\x83\x8e\xb9bM~ju<[\xa7\xa40*\xdeSG\x95\xad\xad\xef\nQF\x80pq\xfd]9\xcb\xe2F\x0e\xab`%C[\xc5be\xa1\"\xd5\xfa\xda;\x9d\xfc8\xb0\x00YT\xf4F\xf8+\xdf\xcf\xff(\xa1', 0x10) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x541c, r2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) clock_nanosleep$auto(0x8000a, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0xfffffffffffffffe, 0x20948b, 0x2, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x3, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x8) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/bus/scsi/drivers/st/debug_flag\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/4085, 0xff5) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), 0xffffffffffffffff) read$auto_check_wx_fops_(0xffffffffffffffff, &(0x7f0000001100)=""/168, 0xa8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) 1m1.969216571s ago: executing program 4 (id=1748): r0 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nullb0/queue/physical_block_size\x00', 0x0, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) close_range$auto(r0, 0x8, 0xfffffffe) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='J'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x200, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x226c}, 0x1, 0x0, 0x0, 0x40480c5}, 0x24001800) r2 = getpgrp(0x0) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0xfff, 0x0, r2, 0x7fff, 0x9) 1m0.908144244s ago: executing program 4 (id=1754): unshare$auto(0x40000080) mmap$auto(0x2, 0x8, 0x40004000000000db, 0x8000000000000012, 0x400, 0x8001) setsockopt$auto_SO_TIMESTAMPNS_NEW(0xffffffffffffffff, 0x4, 0x40, &(0x7f0000000480)='/Eev\n\x0e\xcf^+\xf3\xc4Y\x84\xf4\xe4\x98/audio1\x00VI\xa3\xaa\xb1;\x9d\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9abN\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953\x01\x9f.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4re\x90\xc0\xbf\xcem\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\x12w\xd7\x99\x8c\xbe\x8f\x1dI\xe2\xae8\x83\xcf\xc5D\xcc\x00', 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010800000000000000254500000008000300", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4000895}, 0x24000004) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100), 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000b8a1bf0f718bc6400000007c4a9f61a44b", @ANYRES16=0x0, @ANYBLOB="000425bd7000fedbdf252c0000000c0001"], 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x20040011) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001bc0)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0], 0x2bc4}, 0x1, 0x0, 0x0, 0x20008010}, 0x24000080) write$auto_console_fops_tty_io(r1, &(0x7f0000000440)="671d2647dd69b6440843b6e6688a2b5ad9df2669e6f9cd2365", 0xfdef) mmap$auto(0x0, 0x80000001, 0x7, 0x17, r1, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x44f, 0xa, 0x5, 0x1007181, 0x8a0d, 0x7, 0x7, 0x9, 0x0, 0x26, 0x4, 0x200004000001, 0xfffffffffffffff5, 0xfffffffffffffffa, 0x0, 0x5, 0x0, 0x0, 0x862, 0xe, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x9, 0x1, 0x0, 0x0, 0xb]}, 0xb, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd0c, &(0x7f00000001c0)) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) listmount$auto(0x0, 0x0, 0x7fffffffffffffff, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D2\x00', 0x0, 0x0) r3 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000200)={{@raw=0x4, 0x0, 0x1000004, 0x480808, "3112d58500a8b47148e22af9ffb683dbede3d0bf828bbf100000e5e2f96ee50484b0755015e48d00", @inferred=0xffffffffffffffff}, 0x2, 0xc, 0x4, @inferred, @reserved="196c056a347704def6f5c5636ed52c07609cee4319588cd9a11ad396065c1267314ab73ce54c205a43297cf5b6310383212fdbb93e51da48edd9350aa935db0d5d6e32e39d8f68ee55f32c5de7b40a4ceb3840920880cbb9fc246ea65af96a74482a52e660cfc6828ba8c9404d70b947a06c9927ba7f1beed137c48265c74c8d", "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090d70925450ece0bb32777702b07552d000000000000000000ebff0000000000000059a200"}) getuid() rt_sigqueueinfo$auto(0x0, 0xffff7b6b, &(0x7f0000000180)={@_si_pad}) r4 = socket(0x1, 0xa, 0x9) sendmmsg$auto(r4, 0x0, 0x9, 0x100) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x331880, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/netfs/caches\x00', 0x102, 0x0) pread64$auto(r5, 0x0, 0x100000001, 0x100) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x40000000001ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x7, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) unshare$auto(0x40000080) 59.626721936s ago: executing program 5 (id=1758): mmap$auto(0x0, 0x40009, 0x9, 0x9b72, 0x7, 0x28000) r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2800000090bc06671e84cae4dc75b9b22b3c7ecc6e084785d0470c50a2d60ed7e5979f06e6e7070e282632cc508c2cc2f32526c6ce1a95f439db01dbd98d1b96fc6ba2b7118d4d7f8683fc9f98cea9c825cb6ada0f56640ae58f6af429a73f56c6d8f04378f0f555ca9553a4c4864636b0910851c52156b071938fc95562225dc00b9ab636ec3168f82dab", @ANYRES32=r0, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4040010}, 0x840) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) r3 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto_SO_MARK(r2, 0x725a, 0x24, &(0x7f0000000040)='\x00', 0x9) ioctl$auto_SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000880)="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") r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)=""/9, 0x9) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) mmap$auto(0x0, 0x2020009, 0xfffffffffffffff8, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x0, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x40000000000a5, 0x80000008000) r6 = socket(0x2, 0x1, 0x0) ioperm$auto(0xfffffffffffffffa, 0x2, 0x1ff) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f00000002c0)={{@raw=0x7, 0x8, 0x4, 0xa2, "c6e47a44a36664a5e709f0e4c97056bc9fa32c617bb88dc98fa7591aefc4647f5af349f8e1e79c823b22958f"}, 0x1, @enumerated=@item=[0x0, 0x3, 0x1, 0x3, 0x6, 0x8001, 0x10, 0x6, 0x10001, 0xefe, 0xfffffff9, 0x5, 0x8001, 0x62f, 0x101, 0x9, 0x200, 0xfffffff0, 0x1000, 0x7, 0x3, 0x3, 0x0, 0x6, 0xb94, 0x0, 0x1, 0x7, 0x3, 0xe8, 0x4, 0x0, 0x100009, 0x46f, 0x8, 0x1, 0x6, 0x4, 0x6, 0x8, 0x80, 0x9, 0x65b, 0x9, 0x7, 0x81, 0x1ce8, 0x9, 0x34b5, 0xfff, 0x5, 0xfff, 0x2, 0x1000, 0x9, 0x0, 0x400, 0xd, 0x0, 0x0, 0x207d, 0xa7a, 0x5, 0x4000005, 0x4, 0x80, 0x6ed, 0x40000, 0x1, 0x1, 0x6, 0x4, 0x8, 0x1, 0x4003ff, 0x5, 0x8, 0x6, 0x0, 0xa, 0x2, 0x5, 0x400, 0x6, 0x84, 0x9, 0x29, 0x8, 0x30971ad3, 0x9, 0x78d, 0x7f, 0x0, 0x8001, 0x20000, 0x40, 0x0, 0x4, 0x5, 0x0, 0x0, 0x4f000, 0x100, 0x5, 0x7, 0xd49e923b, 0x4, 0x80000000, 0x77, 0xfffffffb, 0x0, 0x7fffffff, 0x7fff, 0x9, 0x5b, 0x8, 0x10001, 0x8, 0x0, 0xc2, 0x0, 0x5, 0x1000, 0x1, 0x7, 0x6, 0x8, 0x3], "4570dcfd140074f863fc1385c4fd7abe6fce96c0b442897f58fd7d975d164deff4eef5b9f9173fa400163669eae95125d4bd68ca54ca1b0aefb60ffa8d501b1329af8d4108ac145aa564c6e7a09ea1b2dfae0f309c6ea508833d7d134b13d8cb3ef95bf5ed43801c280c02a5a853512e6f730d43226f00af1c5ac268ecc1d18f"}) ioctl$auto_EVIOCRMFF(r5, 0x40044581, &(0x7f00000000c0)=0x10001) sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000040), 0x16, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x2, 0x0, 0x5, 0xa}, 0x9}, 0x4, 0xffb) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) socket(0x26, 0x1, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) 59.183981008s ago: executing program 5 (id=1760): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r1, 0xb3eaee9e9ed11725, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x41000}, 0x64810) (fail_nth: 4) 59.090982897s ago: executing program 4 (id=1762): r0 = openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000040), 0x88080, 0x0) pread64$auto(r0, 0x0, 0xc, 0x2) 58.750341163s ago: executing program 5 (id=1764): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x15, 0x80000, 0x85) r0 = socketpair$auto(0x1, 0xfffffffe, 0x10000006, 0x0) setsockopt$auto(r0, 0x9, 0x1d, 0x0, 0x9) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) shutdown$auto(0x200000003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), r2) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f00000036c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2ed79c6010feb0"], 0xfffffffffffffe07}, 0x1, 0x0, 0x0, 0x10}, 0x20000810) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000600)={0x0, 0x10000000fff}, 0x800000001, &(0x7f0000000280)={0x0, 0x1ffffffff}, 0x6, 0xfffffffffffffffc) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001d40), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="c79f25ffdbdf2592fa1293ec0cd2"], 0x14}, 0x1, 0x0, 0x0, 0xc031}, 0x44) fstat$auto(0xffffffffffffffff, &(0x7f0000000100)={0x5, 0xa0, 0x2, 0x8, 0xee00, 0xffffffffffffffff, 0x0, 0x4, 0xc, 0x8, 0x0, 0x5, 0xe6, 0x7, 0x4, 0xbd2, 0x1}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="44010000", @ANYRES16=r10, @ANYBLOB="01002dbd7000fddbdf250a00000008000100", @ANYRES32=r12, @ANYBLOB="280109800c00"], 0x144}, 0x1, 0x0, 0x0, 0x4040085}, 0x0) shmctl$auto_IPC_INFO(0x5e5, 0x3, &(0x7f0000000300)={{0xfffffa7e, 0xee00, 0xee00, 0xfff, 0x10, 0x7cf, 0x1}, 0x9, 0x6, 0x96, 0x6a5d, @raw=0x5, @raw=0x4, 0x8, 0x0, &(0x7f00000001c0)="d5ac9568cc7c716f32238224cbf60830b8cfcb744f633eb776be2649581f02442ff769e73c25d7d0153baf209d2dbe22a335e97ba896b32a1c4afe605fcd6d1e1f2c4014af3f20c2be2267a5cc26f3b66dbe4d7a5524802db00f1695bd726b52732f0f90f4eb92ca254a3317dc86abbca2895ac1714e", &(0x7f0000000240)="a0902493943840ac308ae642599910f4ebcea3885b1847f04be011821c3c14afbb3260ba25257adea3e842b1d9a46c50e35407121638630d870f6bb94dae2d8752d4b578340210381573b964cfb7029590"}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r1, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000001300)=ANY=[@ANYBLOB="10090000", @ANYRES16=r3, @ANYBLOB="000426bd7000fddbdf251b0000001c0002801800e7800800cc00", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="4b9888f301e1c5ed9ff5182b9a99b21028255ecc944be42bcca1e72b57af7cd6cc6e55696725645ca817c469018bdf529f2d337edb4eed6d66270f506037f3accea575b4cc5c4582a25e90f8b2b30a76c1e05b3e3368b285011a949a879f29643d75256ebcc8436e885d289838c674a26ece0a0b89b9b7895a12dbb2f14c6aa305ae71367518a16d34c5b5d5b4bad0efad02e9542161fa09747cbf00b5f76e1b8033e78a9dfa850e87b376f5563effbe4cb9b0e4e124fbdfc050aa401fe6619013049054ab1c188aaf8960444df2f85aff08008b00", @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="08000400ff0100007204028008002500ef83fe319c494f198ca06b100f173cb232f53cde2204057f4752479ae65f42b907f15432794c5b2f7cfefcd949185f8095fba2b45670f7180521e195dcc87a54fc0f424ee5e085e958dc38866f1d0cc55d4d0a9df463dcf3d068614db10d735aa28f71f3b0b7a272082012796b68eb4674dd6252425b9af404e105075778303a555c741cb004adb41a68ce431bd3cfbee8b3cc4f1a58736c5ce180082b7f6a06ff4fd3d0f17fa072d8ae168370111bca22c9f9ee5091bf746984ac3418dbef309c7872f8f5921aac283a954dc9c0a0a003e28008001300", @ANYRES32=r13, @ANYBLOB="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"], 0x910}}, 0x800) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f00000000c0)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 58.750056258s ago: executing program 4 (id=1765): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/x86/topo/cpus/0\x00', 0x200000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6', 0x4, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) pivot_root$auto(0x0, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000200), 0x88000, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000240)={0x80000001, 0x0, [{0x9, 0x1, 0x2}, {0x200, 0x6, 0xc}, {0x40000000007fff, 0x2, 0x5}, {0x100000000, 0x3, 0x5}, {0xdc6f, 0x7d, 0x10001}]}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB='\bZ\x00'/16], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) 58.530672326s ago: executing program 4 (id=1766): openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/debug/block/nbd1/sched/read2_fifo_list\x00', 0x169100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00211459a600fbdbdf25020000000800030000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) futex_requeue$auto(0x0, 0x0, 0xf, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) pread64$auto(r0, 0x0, 0x23d, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = io_uring_setup$auto(0x2, 0x0) futex_waitv$auto(&(0x7f0000000000)={0x1, 0xbc, 0x9}, 0x2, 0x800, &(0x7f0000000140)={0xf, 0x8000}, 0x3ff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_timedsend$auto(r2, 0x0, 0x2000, 0x2, 0x0) sysfs$auto(0x2, 0x3c, 0x0) r3 = fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x101, 0x4100000000df, 0xeb1, 0x200000401, 0x2008000) socket(0x23, 0x5, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) ioctl$auto(0x3, 0x89e0, 0x74) fsconfig$auto(r3, 0x6, 0x0, 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_SEND_MSG_RING(r1, 0x1f, 0x0, 0x3) 58.278858832s ago: executing program 5 (id=1767): futex_waitv$auto(&(0x7f0000000300)={0x7f, 0x100000001, 0x2}, 0x1, 0x0, &(0x7f0000000340)={0x92, 0x6}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = fcntl$getown(r0, 0x9) r3 = clone$auto(0x7, 0x81, &(0x7f00000002c0)=0x6, &(0x7f0000000440)=0x47, 0x5) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f0000000480)={0x0, 0x8, 0xd4, 0x80000001, 0x6, 0x0}) r5 = getpgrp(0xffffffffffffffff) r6 = getpgid(0x0) prlimit64$auto(r6, 0xa3d, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000000540)={0x20080000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x38}, &(0x7f0000000200)=""/165, 0xa5, &(0x7f0000000380)=""/182, &(0x7f00000004c0)=[r2, 0x0, r3, r4, r5, r6], 0x6, {r7}}, 0x58) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xdeb) getpgrp(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, r1, 0xb3eaee9e9ed11725, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x41000}, 0x64810) 57.704604933s ago: executing program 5 (id=1772): r0 = socket(0x28, 0x80000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/035/001\x00', 0x0, 0x0) mmap$auto(0xffffffffbffffffd, 0x2020009, 0x100000003, 0x12, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) r1 = socket(0xa, 0x5, 0x84) bpf$auto(0xfffffffa, &(0x7f0000000000)=@bpf_attr_5={@target_fd=r0, 0xffffffffffffffff, 0x6, 0x4, 0xffffffffffffffff, @relative_fd=r1, 0xd}, 0xa3) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/iomem\x00', 0x1c9a02, 0x0) pread64$auto(r2, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = prctl$auto(0x1000000003b, 0x3, 0x4, 0x5, 0x7) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x60800, 0x0) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) set_mempolicy$auto(0x4, 0x0, 0x9) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages_mempolicy\x00', 0xa001, 0x0) write$auto(r6, &(0x7f00000002c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x8aq\x8d\xee\xd9\xdf\x11\x16V`\xf6\x959\xcf/\xe4\x12\xe7\xfd\x10\x85VH`\xf7\x83,\xe9\xa2\r\xb2\xc3E\x8aL\xc1Xn03\nM\x93JZ1\x83\xe3j\xda\x8e\'q\xba\xb3l\xce\x8a~_\xce*\xc14\xb6\xf8\x1b\xc8z\x15\x96\xc4\xcd\xac\xd0\xc0T\x9e3L\x87\xffq(\xcat\x82\xc1\xadt7\xc1\n\xf7\x90\x8cm\xf1\xb3*>9\xc7q\xae\x84\xec0\xda\\\xe3L\n\a~}\xbcy\xe6\xf8\xcf\x1e\xc7]V\xb7I~\xb7\xdc', 0x81) ioctl$auto_USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x6, 0x2, 0x8, 0x7fb, &(0x7f00000004c0)="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"}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r3) r7 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/inject\x00', 0x40, 0x0) pread64$auto(r7, 0x0, 0x200, 0x80) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRES16=r7, @ANYRES16=0x0, @ANYRES8=r7], 0x34}, 0x1, 0x0, 0x0, 0x4805}, 0x4040891) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000d40)={{@inferred, 0x6, 0xb2, 0x2, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca6d2cbfa93b50590c9"}, 0x0, @integer=@value_ptr=&(0x7f0000000280)=0x2, "fa491e0810895cdd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef2c2b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r3) setsockopt$auto_SO_ERROR(r5, 0x81, 0x4, &(0x7f00000002c0)='nfsd\x00', 0x2) r8 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000380)='/dev/adsp1\x00', 0x400200, 0x0) ioctl$auto_SNDCTL_DSP_GETOPTR(r8, 0x800c5012, &(0x7f00000003c0)="9ecf4cc0d10a4ba862defe8cbaf367bd337a1249497ba2e6c1c82f473866f28802d2f7edb4af9de3fa3f541302873a5382f720") close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/tracing/uprobe_events\x00', 0x82, 0x0) 57.224216682s ago: executing program 5 (id=1775): madvise$auto(0x0, 0x2000040080000004, 0xe) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) (async, rerun: 32) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 32) madvise$auto_MADV_DODUMP(0x8, 0x5, 0x11) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (rerun: 32) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x80085610, r2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) fsconfig$auto_EROFS_MOUNT_DAX_NEVER(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffff9c) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async, rerun: 64) write$auto(r3, 0x0, 0x98c7) (async, rerun: 64) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0x20881, 0x0) ioctl$auto_EVIOCGRAB(r4, 0x40044590, &(0x7f0000000000)=0x2) (async) write$auto(r4, 0x0, 0x10001) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mount$auto(0x0, &(0x7f00000005c0)='}[,&*}\x00', &(0x7f0000000200)='nfsd\x00\x02\v\xeb,J\x02\xbbEfi\'\x95\x84\xba\xdeR\xb6;\xa2\xaac\xcc\xf5Y-\xf9\x03hX\x80K\xfdP\x18\x83(\xbc\xc1\xc0\x13\x18j\xa6\xc4\xca\xe5\x15\xe7K\xef\x84vj3\xc7\a\x00\x00\x00\xf2\xa3Z\xb9@\xe3\x90<\x1e\xac\x1f6\xee\t\b\x00\x00\xf1\x14\xb0\x95\x90\x92\xc2m\x97}\x1d\xf5\xfc\xec\xff\x97s\x10\xe7\xce3\x12\x96`\xf2\xdb\xde\xfa+\xf6\xbe\xf60\xde\xbf\f\x9c\xc2K\xf3}\xe7\xcbF\x1c\xee\x15y\xa8J\xb7\x96\xf1\xdf\xd9\xb1\xaa\xe9\xdaWHj\xa8\xb0\xf6,q\x8c\xa8\xd9\x93\xf3\x1f+\a\xf8Q\xa7\x18\x1a\x8d\xa6\xa9\xa4\fk!\xb2\xfa\x11N\x13.U\xbeT\x8a\x89\x92\f\x9c\xe8~\xfd\xb5\x00\x00\x00\xbcV\x9e \xe8l\xa9\xbd\xea\xc4XAE\f\xad\xfbQ\x8f\x15\xb25\xafw\xe0HY4\x1f\x02\xe1zW-{\xf4\xee\xf8\x89\\)\xc2\x00A\x11\xec\x8d\xe0|\xc3\xce\xb7\x96\xc2D\xbe\xd6\xa6_\x15\x04y\x8eXY5\xc8^ \xe0\'$k\x86n\x88\xa5\x01\xae\xff\xf8\x91\xd0\xb3i\x82\x1b\x99\xf2c\xb4^b\xc5\xc8B\x81\xe7\xcb]\x06\x18\xce\xd6\xc6\x10\x92[\xd9\xe5\x13\x0e\x81\xf5`\xb4\xeb\x88l\xceT\xb4\xc3\x8c\xd1\x87o\xb9/\xc0\xab\xcd\xa6\xe6F\x90l\x9cg\xe9\xe4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfbSP\xba=*\xf7\xa1\xae\xc0S\x12T\xb2\x87\xd7\x1b\xefN\xdf\x00\xab\a\xe5*P\xcc\xdc\x909\xc8!%\xb6\xc2|\x02\xe3\x1d\x0f(\xb1\xf0\xe8H|\x06\x96\xf0\x89F%<\xb5\xd2\x90\xbc\xd4\x8f\x83\xbf\xd5\xd1\x05!\x7f\xfcc\t\x19\b\\\xd1 \xd3v\xcb\xd7t\xc5$+\x1d\x1bP\xe5G\x92\xa1n\xacT\xc1\xbe`8\x84\x9f\xc5To\x9f+.{eU\xc4\x18\xcc\x88t\x15\xa4\xb1\x9e\xb1\x9df\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (rerun: 32) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x80085610, r2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) fsconfig$auto_EROFS_MOUNT_DAX_NEVER(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffff9c) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async, rerun: 64) write$auto(r3, 0x0, 0x98c7) (async, rerun: 64) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0x20881, 0x0) ioctl$auto_EVIOCGRAB(r4, 0x40044590, &(0x7f0000000000)=0x2) (async) write$auto(r4, 0x0, 0x10001) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mount$auto(0x0, &(0x7f00000005c0)='}[,&*}\x00', &(0x7f0000000200)='nfsd\x00\x02\v\xeb,J\x02\xbbEfi\'\x95\x84\xba\xdeR\xb6;\xa2\xaac\xcc\xf5Y-\xf9\x03hX\x80K\xfdP\x18\x83(\xbc\xc1\xc0\x13\x18j\xa6\xc4\xca\xe5\x15\xe7K\xef\x84vj3\xc7\a\x00\x00\x00\xf2\xa3Z\xb9@\xe3\x90<\x1e\xac\x1f6\xee\t\b\x00\x00\xf1\x14\xb0\x95\x90\x92\xc2m\x97}\x1d\xf5\xfc\xec\xff\x97s\x10\xe7\xce3\x12\x96`\xf2\xdb\xde\xfa+\xf6\xbe\xf60\xde\xbf\f\x9c\xc2K\xf3}\xe7\xcbF\x1c\xee\x15y\xa8J\xb7\x96\xf1\xdf\xd9\xb1\xaa\xe9\xdaWHj\xa8\xb0\xf6,q\x8c\xa8\xd9\x93\xf3\x1f+\a\xf8Q\xa7\x18\x1a\x8d\xa6\xa9\xa4\fk!\xb2\xfa\x11N\x13.U\xbeT\x8a\x89\x92\f\x9c\xe8~\xfd\xb5\x00\x00\x00\xbcV\x9e \xe8l\xa9\xbd\xea\xc4XAE\f\xad\xfbQ\x8f\x15\xb25\xafw\xe0HY4\x1f\x02\xe1zW-{\xf4\xee\xf8\x89\\)\xc2\x00A\x11\xec\x8d\xe0|\xc3\xce\xb7\x96\xc2D\xbe\xd6\xa6_\x15\x04y\x8eXY5\xc8^ \xe0\'$k\x86n\x88\xa5\x01\xae\xff\xf8\x91\xd0\xb3i\x82\x1b\x99\xf2c\xb4^b\xc5\xc8B\x81\xe7\xcb]\x06\x18\xce\xd6\xc6\x10\x92[\xd9\xe5\x13\x0e\x81\xf5`\xb4\xeb\x88l\xceT\xb4\xc3\x8c\xd1\x87o\xb9/\xc0\xab\xcd\xa6\xe6F\x90l\x9cg\xe9\xe4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xfbSP\xba=*\xf7\xa1\xae\xc0S\x12T\xb2\x87\xd7\x1b\xefN\xdf\x00\xab\a\xe5*P\xcc\xdc\x909\xc8!%\xb6\xc2|\x02\xe3\x1d\x0f(\xb1\xf0\xe8H|\x06\x96\xf0\x89F%<\xb5\xd2\x90\xbc\xd4\x8f\x83\xbf\xd5\xd1\x05!\x7f\xfcc\t\x19\b\\\xd1 \xd3v\xcb\xd7t\xc5$+\x1d\x1bP\xe5G\x92\xa1n\xacT\xc1\xbe`8\x84\x9f\xc5To\x9f+.{eU\xc4\x18\xcc\x88t\x15\xa4\xb1\x9e\xb1\x9df\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r5, 0x0, 0x20000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x40, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) 23.092210063s ago: executing program 6 (id=1848): socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, 0x0, 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b74, r1, 0x40000008000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) pselect6$auto(0xce9e, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x10000008001, 0x4000000000002bc8, 0x3fd6d3f5, 0x0, 0x2, 0xffffffff, 0xc4e, 0x0, 0x2f, 0x2, 0xa, 0x7]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) r4 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r4, 0x0, 0x100082) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'vlan1\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GET2(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf050000000000000000", @ANYRES32=r5, @ANYRES64, @ANYRESDEC, @ANYBLOB='\b\x00\b\x00', @ANYRES64, @ANYRES8=r2], 0x2c}, 0x1, 0x0, 0x0, 0x10040001}, 0xc0) ioctl$auto_FS_IOC_SETFLAGS2(r4, 0x40086602, 0x0) pwrite64$auto(r4, 0x0, 0x8, 0x200000000000003) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f) 19.675332309s ago: executing program 6 (id=1854): r0 = socket(0x11, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x200, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r5, 0x4b45, r4) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x14, r2, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfd3f9}, 0x14}, 0x1, 0x0, 0xffffffa6, 0x4}, 0x0) unshare$auto(0x40000080) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x80883, 0x0) select$auto(0xf, 0x0, &(0x7f0000002400)={[0x100000000000001, 0x400, 0xfffffffffffffffc, 0x8, 0x200000000000027f, 0xe0d3, 0x4, 0x17c750d60, 0xfffffffffffffac1, 0x106, 0x8000, 0x8000000000000000, 0x0, 0x10001, 0x2, 0x24f]}, &(0x7f0000002480)={[0xf, 0x5, 0x8, 0x4, 0x6, 0xffffffffffffff7a, 0x8, 0x45f6c183, 0xaeb, 0x3, 0x3, 0x8, 0x8000, 0x0, 0x8000000000000001, 0x1]}, 0x0) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x200005ac, &(0x7f0000000480)={&(0x7f0000000240)="4c0c580000000000090000000000000007a4bac083077e", 0x49}, 0x4, &(0x7f00000003c0)="cdc576166b8d", 0x7, 0x11}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) clock_gettime$auto(0x0, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001840), r7) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x4}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0xc, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x2}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x16, 0x13, "f411c2dd7d780703597f020f1720cb34d2ad"}, @NL80211_ATTR_MESH_ID={0x18, 0x18, "cec00f4dc66cb9390c2b15e619dcdbfd50da1418"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xfc00}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x96) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000018c0)={0x24, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x1}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200480c7}, 0x80) 14.757250811s ago: executing program 6 (id=1863): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x100000000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x801, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048010}, 0x80) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e20, @rand_addr=0xfffffffe}, 0x57) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x55) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) io_uring_setup$auto(0x0, &(0x7f0000000380)={0x0, 0x8, 0x40, 0x100, 0xffffffff, 0xf, r0, [0x5, 0x10001, 0xffffffff], {0x3, 0x7, 0xd9, 0x2, 0x6, 0x6, 0x5, 0x3, 0x8}, {0x1, 0x9, 0x9, 0x37a0, 0x8, 0x8, 0x8, 0x101, 0xb}}) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), r1) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x52}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x36}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x8880}, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) prctl$auto(0x35, 0x0, 0x4000000008, 0x0, 0x0) socket(0x2, 0x801, 0x106) socket(0xa, 0x2, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x80, 0x10000, 0x0, r6, 0x1000, "72fea04183dce563f03f2a25077b3383", 0x0, r6, 0x4, 0x6, 0x101, 0x1, r6}, 0x6f3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7ff, 0x200}, 0x100, 0x6) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) 14.097387315s ago: executing program 9 (id=1865): r0 = io_uring_setup$auto(0x406, 0x0) io_uring_enter$auto(r0, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) ioctl$auto_BLKTRACETEARDOWN2(r0, 0x1276, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/loop12/trace/enable\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x8000) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\xca\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3db) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x400000000008000) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000002840)='/sys/kernel/tracing/trace_clock\x00', 0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = socket(0x15, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0xa, 0x801, 0x106) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/1:10/max_ratio\x00', 0x2002, 0x0) sendfile$auto(r5, r5, 0x0, 0x7) pipe2$auto(0x0, 0x4800) splice$auto(0x4, 0x0, r4, 0x0, 0xffd, 0xf) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) readv$auto(0x3, 0x0, 0x10) 12.963826285s ago: executing program 9 (id=1866): open_tree_attr$auto(0xffffffffffffff9c, 0x0, 0x9, 0x0, 0x0) r0 = openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x101880, 0x0) ioctl$auto_FS_IOC_FIEMAP(r0, 0xc020660b, 0x2) 12.649591118s ago: executing program 9 (id=1868): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x5, &(0x7f0000000080)=0x8, 0x21) unshare$auto(0x40000080) r0 = socket(0xa, 0x5, 0x0) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x2c00, 0x0) ioctl$auto_MEMREADOOB(r1, 0xc0104d04, &(0x7f0000000080)={0x400bbe5, 0x80, 0x0}) mmap$auto(0x33, 0x2020009, 0x3, 0x16, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x8) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r3 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto_OSS_GETVERSION2(r3, 0x80044d76, &(0x7f0000000180)) mmap$auto(0x4, 0x2, 0x4000000000df, 0x10, r0, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/rxrpc/peers\x00', 0x100, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/dummy0/queues/tx-0/tx_timeout\x00', 0x189002, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) close_range$auto(0x2, 0x8, 0xcea8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec20\x00', 0x1, 0x0) ioctl$auto_CEC_ADAP_S_PHYS_ADDR(r5, 0x40026102, 0x0) io_uring_setup$auto(0x3, &(0x7f0000000080)={0x5, 0xd, 0x3000, 0x6, 0x40007, 0xa, 0xffffffffffffffff, [], {0x8000, 0x6, 0x8c48, 0x29b, 0x8, 0x7f, 0x101, 0x6, 0xb1c}, {0x4000004, 0x1, 0x4e, 0x5, 0x2, 0x1a7b870a, 0x2, 0x8, 0x100000000}}) 9.854081907s ago: executing program 9 (id=1872): r0 = socket(0x11, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x200, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r5, 0x4b45, r4) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x14, r2, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfd3f9}, 0x14}, 0x1, 0x0, 0xffffffa6, 0x4}, 0x0) unshare$auto(0x40000080) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x80883, 0x0) select$auto(0xf, 0x0, &(0x7f0000002400)={[0x100000000000001, 0x400, 0xfffffffffffffffc, 0x8, 0x200000000000027f, 0xe0d3, 0x4, 0x17c750d60, 0xfffffffffffffac1, 0x106, 0x8000, 0x8000000000000000, 0x0, 0x10001, 0x2, 0x24f]}, &(0x7f0000002480)={[0xf, 0x5, 0x8, 0x4, 0x6, 0xffffffffffffff7a, 0x8, 0x45f6c183, 0xaeb, 0x3, 0x3, 0x8, 0x8000, 0x0, 0x8000000000000001, 0x1]}, 0x0) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x200005ac, &(0x7f0000000480)={&(0x7f0000000240)="4c0c580000000000090000000000000007a4bac083077e", 0x49}, 0x4, &(0x7f00000003c0)="cdc576166b8d", 0x7, 0x11}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) clock_gettime$auto(0x0, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001840), r7) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x4}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0xc, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x2}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x16, 0x13, "f411c2dd7d780703597f020f1720cb34d2ad"}, @NL80211_ATTR_MESH_ID={0x18, 0x18, "cec00f4dc66cb9390c2b15e619dcdbfd50da1418"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xfc00}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x96) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000018c0)={0x24, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x1}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200480c7}, 0x80) 7.691996846s ago: executing program 9 (id=1875): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) madvise$auto(0x0, 0xf663, 0x15) ioctl$auto_VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000000)={0x36, 0xffffffffffffffff}) ioctl$auto_BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000080)="d800afbd2687cbca474525c07b643fd9307943bbe795a8603baf51a80667101935d53e8f88fe3b8e3ea343a6b0546131560cc078d6400fb3105a2523c15aa3bc9e296287cbdecdb939dafacd08dd5986c250d0d49be866e092bb3beba66b9b6605a3b630c54b2cec73a3d41cfa5080584ab2247a08cedc550fe7cb820e622f3dd0dc4b75da9df5bc9554276d90") close_range$auto(0x2, 0x8000, 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_helper\x00', 0x80302, 0x0) sendfile$auto(r1, r1, 0x0, 0xd15) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) setsockopt$auto(0x400000000000003, 0x28, 0x6, 0x0, 0x56d) 6.450511033s ago: executing program 9 (id=1877): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x100000000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x801, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048010}, 0x80) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e20, @rand_addr=0xfffffffe}, 0x57) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x55) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) io_uring_setup$auto(0x0, &(0x7f0000000380)={0x0, 0x8, 0x40, 0x100, 0xffffffff, 0xf, r0, [0x5, 0x10001, 0xffffffff], {0x3, 0x7, 0xd9, 0x2, 0x6, 0x6, 0x5, 0x3, 0x8}, {0x1, 0x9, 0x9, 0x37a0, 0x8, 0x8, 0x8, 0x101, 0xb}}) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), r1) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x6}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x36}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x2}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x8880}, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) prctl$auto(0x35, 0x0, 0x4000000008, 0x0, 0x0) socket(0x2, 0x801, 0x106) socket(0xa, 0x2, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x80, 0x10000, 0x0, r6, 0x1000, "72fea04183dce563f03f2a25077b3383", 0x0, r6, 0x4, 0x6, 0x101, 0x1, r6}, 0x6f3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x200}, 0x5}, 0x3, 0x4, 0x0) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x7ff, 0x200}, 0x100, 0x6) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) 6.416988067s ago: executing program 7 (id=1879): socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b74, r1, 0x40000008000) r2 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) pselect6$auto(0xce9e, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x10000008001, 0x4000000000002bc8, 0x3fd6d3f5, 0x0, 0x2, 0xffffffff, 0xc4e, 0x0, 0x2f, 0x2, 0xa, 0x7]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) r3 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r3, 0x0, 0x100082) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'vlan1\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GET2(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf050000000000000000", @ANYRES32=r4, @ANYRES64, @ANYRESDEC, @ANYBLOB='\b\x00\b\x00', @ANYRES64, @ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x10040001}, 0xc0) ioctl$auto_FS_IOC_SETFLAGS2(r3, 0x40086602, 0x0) pwrite64$auto(r3, 0x0, 0x8, 0x200000000000003) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f) 4.079268859s ago: executing program 8 (id=1882): sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c8000000", @ANYRES16, @ANYRES64=0x0], 0xc8}, 0x1, 0x0, 0x0, 0x200009c4}, 0x2005c894) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) socket(0x29, 0x80000, 0x4000003) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/default/ioam6_id_wide\x00', 0x40100, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000001200)={0xf2f, [{0x529, 0x5}, {0x19f1a9bc, 0x7}, {0x800, 0x5}, {0x9, 0x45053277}, {0x7d, 0xf}, {0x7fffffffffffffff, 0x5}, {0x8, 0x1000}, {0x8, 0xf94}, {0x9, 0x5}, {0x7fff}, {0x80000000, 0x5}, {0x6b, 0x6}, {0x6, 0xfffffffffffffe00}, {0x1}, {0x5, 0xb11}, {0x8, 0x7}, {0x3, 0x8}, {0x2, 0x2}, {0x0, 0x5bf8}, {0x6, 0xfff}, {0x100, 0x1000}, {0x10000}, {0x6, 0x1}, {0x9, 0xee}, {0x9, 0x2}, {0xff, 0x6}, {0x7, 0x4}, {0x8, 0xb}, {0x9, 0x6}, {0x9, 0x101}, {0x1, 0x9}, {0x5, 0x2c3}, {0x3, 0xfe}, {0x9, 0x40}, {0x5b, 0x6}, {0xfff, 0x10000}, {0x5, 0x7fffffffffffffff}, {0x40004}, {0x2, 0x12580000}, {0x9}, {0x9, 0x100000001}, {0x2, 0x7}, {0x6, 0x5}, {0x10, 0x4}, {0x9, 0x1}, {0x5, 0x10}, {0x9, 0x200}, {0xb, 0x4d97}, {0xffffffffffffff7f, 0x8000000000000001}, {0x7f, 0x800}, {0x3, 0x10000}, {0x6, 0xffffffffffffffff}, {0x6, 0x2}, {0x5, 0x3}, {}, {0x3, 0x1}, {0x1, 0xbb1}, {0x9, 0x8000}, {0x6302, 0x3}, {0x9, 0x9}, {0xa, 0x401}, {0x2}, {0x4, 0x800002}, {0x0, 0x4}, {0x7ff}, {0x6, 0x7fffffff}, {0x1, 0x9}, {0x67a, 0xffff}, {0xc, 0x8}, {0x80, 0xe0}, {0x3e75, 0x1}, {0xe8, 0x9}, {0x5}, {0x0, 0x1}, {0xfffffffffffffffe, 0x9}, {0x8, 0xf870}, {0x1ae8df8a, 0x5}, {0xf8, 0xd7c}, {0x0, 0x8}, {0x9, 0xffffffffffffffff}, {0x5de8, 0x7ff}, {0x2, 0x800}, {0xfffffffffffffff8, 0x2}, {0x2, 0x4}, {0x3, 0x5}, {0x0, 0x7ff}, {0x8b, 0x6e}, {0x8000000000000000, 0x3}, {0x4, 0xf434}, {0x4, 0xa0b}, {0x400000002, 0x5}, {0x4, 0x5}, {0x9, 0x5}, {0xd0c7, 0x9}, {0x7, 0x1}, {0x35d, 0x75}, {0x7, 0x3}, {0x3, 0xfffffffffffffffa}, {0x1, 0x38a}, {0x4, 0x1}, {0x100000001, 0x1}, {0x6, 0x5}, {0x5, 0x5}, {0x81, 0x821}, {0x2, 0x1}, {0x100000000, 0x5}, {0x8008, 0xfffffffffffffffa}, {0x9, 0xc}, {0x0, 0x2}, {0x2, 0x70829e47}, {0x255, 0x100000001}, {0x7, 0x8}, {0x1315, 0x7}, {0x4, 0x100}, {0x2, 0x24ad}, {0xd, 0x7}, {0x5, 0x131}, {0x1}, {0x7fffffff, 0xaf06}, {0x8, 0x6}, {0x10, 0x8}, {0x2, 0x5}, {0x1, 0x7}, {0x6, 0xc184}, {0x5, 0x8}, {0x101, 0x24}, {0xfab, 0x3}, {0x1, 0x8}, {0xffffffffffffff89, 0x1}, {0x7ff}, {0x3, 0x9}, {0x7fffffff, 0xffffffffffffffff}, {0x1, 0x1944}, {0x7, 0xfffffffffffffff7}, {0x4, 0xa7}, {0x3, 0xd}, {0x4, 0x6}, {0xfff, 0xa81}, {0x3, 0xc0}, {0x1ff, 0x800}, {0x1000, 0x5}, {0xb, 0x8}, {0x4, 0x6}, {0x1000000000002, 0x5}, {0x200000007, 0x6}, {0x8001, 0xb}, {0x7fffffff, 0x953c}, {0x1, 0x2}, {0x4}, {0x1, 0x5}, {0xfffffffffffffff8, 0xbd}, {0x4}, {0x54e5, 0x6000}, {0x100000001, 0x100000001}, {0x4, 0x8}, {0x200, 0x7afe}, {0x5, 0x2}, {0xfffffffffffffff7, 0x3e9}, {0x0, 0x8}, {0x3, 0x9}, {0x80, 0x1000}, {0x802, 0xd}, {0x0, 0x6}, {0x7, 0x10}, {0x80000000000000, 0x5}, {0xf, 0xc}, {0x0, 0x3}, {0x0, 0x9bd}, {0x4, 0xf96a}, {0x203b0000000000, 0x6}, {0x9}, {0x1, 0x8}, {0x1e, 0x2}, {0x6, 0x400}, {0x8, 0x80000001}, {0x3fc0, 0x6}, {0x4}, {0x7fff, 0x7}, {0x30, 0x8399}, {0xffffffffffffffff, 0x2}, {0x1ff, 0x7}, {0x5, 0x4}, {0x4, 0x79}, {0x3, 0x2}, {0x6, 0x7fff}, {0x6, 0x8}, {0x1000, 0xef62}, {0xbd1b, 0x10001}, {0x8, 0x6}, {0xbd8, 0x80000000}, {0x5, 0x80000001}, {0x1, 0x6}, {0xfff, 0x7}, {0x100, 0x3}, {0x7a}, {0x100}, {0x7, 0xffffffffffffffff}, {0x238b, 0x5}, {0x0, 0x2}, {0xd3fe, 0x7}, {0x5, 0x7}, {0x1, 0x1}, {0x99, 0xfffffffffffffffc}, {0x6, 0xee}, {0x6, 0x100}, {0x78e, 0x5}, {0x1ddf, 0x6}, {0x9, 0x40}, {0x1, 0x2}, {0x8001, 0x91}, {0x8000, 0x1}, {0x9, 0x6}, {0x2, 0x4}, {0x5, 0x3}, {0x0, 0xffff}, {0x5}, {0x5aa, 0x8020000000000}, {0x7, 0x8000000000000000}, {0x400005c4a, 0x4}, {0x3, 0x7de}, {0x0, 0x2}, {0x780000000, 0x8}, {0x9, 0xffffffffffffff3f}, {0x3, 0x4}, {0x81, 0x6a04}, {0x2, 0x1c25}, {0xffffffffffffffc0, 0x8}, {0x1, 0x427}, {0x2, 0x1}, {0x2000008, 0xed3}, {0x3, 0xbe28}, {0x8000000000000000, 0xffffffffffffffff}, {0x2, 0x2}, {0x7, 0x7}, {0x80000001, 0x3987}, {0x66f3, 0x101}, {0x5, 0x101}, {0x4, 0x2}, {0xfff, 0x2}, {0x4, 0x8000000000000001}, {0x1}, {0xa, 0x6}, {0x6, 0x4}, {0x6, 0x3}, {0xd, 0x2}, {0x1, 0x10001000000000}, {0x0, 0x7fffffffffffffff}, {0x9, 0x6}, {0x200, 0x2f91}, {0xd5c5, 0x81}, {0x8, 0x8000}, {0x800, 0xfffffffffffffffa}, {0x301983e2, 0x5}, {0x3, 0x7}, {0x0, 0x4}], 0x7, "0a54d639d08954"}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r2, 0x5425, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r3, 0x5408, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xa, 0x3, 0x3, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x8000]}, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 3.989490059s ago: executing program 7 (id=1883): mmap$auto(0x0, 0x400008, 0x4, 0xa910, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0xa0681, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyxf\x00', 0x109401, 0x0) ioctl$auto(r3, 0x540a, r2) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0xfffffffffffffffe, 0x6, 0xdf, 0x12, r1, 0x28000) mremap$auto(0x4000, 0x8, 0x3fd6, 0x0, 0x400000004) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x1000000000005, 0x8000000000000000, 0xfffffffd) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\xff\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) r5 = socket(0xa, 0x2, 0x0) setsockopt$auto(r5, 0x6, 0x19, 0x0, 0x56b) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1fb, 0x1, 0x2, 0x0) 3.021113025s ago: executing program 8 (id=1884): socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) connect$auto(0x3, 0x0, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b74, r1, 0x40000008000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) pselect6$auto(0xce9e, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x10000008001, 0x4000000000002bc8, 0x3fd6d3f5, 0x0, 0x2, 0xffffffff, 0xc4e, 0x0, 0x2f, 0x2, 0xa, 0x7]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) r4 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r4, 0x0, 0x100082) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'vlan1\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GET2(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf050000000000000000", @ANYRES32=r5, @ANYRES64, @ANYRESDEC, @ANYBLOB='\b\x00\b\x00', @ANYRES64, @ANYRES8=r2], 0x2c}, 0x1, 0x0, 0x0, 0x10040001}, 0xc0) ioctl$auto_FS_IOC_SETFLAGS2(r4, 0x40086602, 0x0) pwrite64$auto(r4, 0x0, 0x8, 0x200000000000003) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f) 2.667248328s ago: executing program 7 (id=1885): mmap$auto(0x100000000000006, 0xcd6, 0x6, 0x12, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1d, 0x2, 0x7) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) write$auto(r2, &(0x7f00000002c0)='\x00', 0xfffffffffffffff8) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card1/pcm0p/sub5/sw_params\x00', 0x20100, 0x0) pread64$auto(r3, 0x0, 0x8, 0x8000) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x10) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x480, 0x400, 0x9}]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000100), r1) sendmsg$auto_NET_SHAPER_CMD_GET2(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x4c, r5, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r4}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r4}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r4}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r4}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r4}, @NET_SHAPER_A_IFINDEX={0x8}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48850}, 0x4000000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r1) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xa3, 0xeb1, r6, 0x8000) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0) sendmmsg$auto(0x3, 0x0, 0x7878, 0x7000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) getpriority$auto_PRIO_PGRP(0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x10001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x8], {0x9, 0x1, 0x6, 0x0, 0x420, 0x1001, 0x3fdc, 0x3, 0x5}, {0x1, 0x6, 0x54ed, 0x0, 0x101, 0x6, 0x6, 0xa, 0xffffffffffffff81}}) close_range$auto(0x2, 0x8, 0x0) 2.504563302s ago: executing program 7 (id=1886): mmap$auto(0xffffffffffffffff, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_fd=0x2, 0x80}, 0x96) bpf$auto(0x2, 0x0, 0xb) bpf$auto(0x15, 0x0, 0x0) (fail_nth: 6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x0, 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty19\x00', 0x800, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) socketpair$auto(0x20004, 0x1, 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x2, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8090) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(&(0x7f00000023c0)=0xf6, 0x3, 0x2, 0x0, &(0x7f0000002440)=0x8, 0x71a8dce0) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 2.130576713s ago: executing program 7 (id=1887): r0 = socket(0x11, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x200, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r5, 0x4b45, r4) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x14, r2, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfd3f9}, 0x14}, 0x1, 0x0, 0xc00e0000, 0x4}, 0x0) unshare$auto(0x40000080) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x80883, 0x0) select$auto(0xf, 0x0, &(0x7f0000002400)={[0x100000000000001, 0x400, 0xfffffffffffffffc, 0x8, 0x200000000000027f, 0xe0d3, 0x4, 0x17c750d60, 0xfffffffffffffac1, 0x106, 0x8000, 0x8000000000000000, 0x0, 0x10001, 0x2, 0x24f]}, &(0x7f0000002480)={[0xf, 0x5, 0x8, 0x4, 0x6, 0xffffffffffffff7a, 0x8, 0x45f6c183, 0xaeb, 0x3, 0x3, 0x8, 0x8000, 0x0, 0x8000000000000001, 0x1]}, 0x0) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x200005ac, &(0x7f0000000480)={&(0x7f0000000240)="4c0c580000000000090000000000000007a4bac083077e", 0x49}, 0x4, &(0x7f00000003c0)="cdc576166b8d", 0x7, 0x11}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) clock_gettime$auto(0x0, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001840), r7) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, 0x0, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x4}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0xc, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x2}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x16, 0x13, "f411c2dd7d780703597f020f1720cb34d2ad"}, @NL80211_ATTR_MESH_ID={0x18, 0x18, "cec00f4dc66cb9390c2b15e619dcdbfd50da1418"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x6}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xfc00}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x96) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000018c0)={0x24, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x1}]}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200480c7}, 0x80) 1.701851277s ago: executing program 8 (id=1888): openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) r0 = openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x581200, 0x0) write$auto(r0, &(0x7f0000000000)='\x12\x8eTS:\xaf(t \x16\xe4\xd1IhG\xbb\x9b\xe4\x1f\x88\x03U', 0x0) 1.546254032s ago: executing program 8 (id=1889): socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b74, r1, 0x40000008000) r2 = io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) pselect6$auto(0xce9e, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x10000008001, 0x4000000000002bc8, 0x3fd6d3f5, 0x0, 0x2, 0xffffffff, 0xc4e, 0x0, 0x2f, 0x2, 0xa, 0x7]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) r3 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r3, 0x0, 0x100082) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'vlan1\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GET2(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf050000000000000000", @ANYRES32=r4, @ANYRES64, @ANYRESDEC, @ANYBLOB='\b\x00\b\x00', @ANYRES64, @ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x10040001}, 0xc0) ioctl$auto_FS_IOC_SETFLAGS2(r3, 0x40086602, 0x0) pwrite64$auto(r3, 0x0, 0x8, 0x200000000000003) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3f) 436.372938ms ago: executing program 7 (id=1890): mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test\x00', 0x20461, 0x0) write$auto(r0, &(0x7f00000000c0)='&(--\x00', 0x8) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x2) (async) mmap$auto(0x0, 0x400005, 0x40df, 0x9b72, 0xffffffffffffffff, 0x8000) (async, rerun: 64) socket(0xa, 0x3, 0x3b) (rerun: 64) r3 = bpf$auto(0xfffff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x4, 0xfab2, 0x468, 0x9, 0x1000000000002, 0x4, 0x2, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e12b7ac1ff0100"}, 0x58) mmap$auto(0x7, 0x4, 0x4000000000df, 0x40eb1, r2, 0x300000000000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto_SO_SELECT_ERR_QUEUE(r3, 0x1, 0x2d, &(0x7f00000001c0)='[\x00', 0x1) (async) prctl$auto(0x23, 0xa, 0x2008, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) (async, rerun: 64) get_robust_list$auto(0x0, 0x0, 0x0) (rerun: 64) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) (async) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) (async, rerun: 32) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) (rerun: 32) recvmmsg$auto(0x4, &(0x7f0000000200)={{0x0, 0x4, &(0x7f0000000140)={0x0, 0x4da}, 0x4, 0x0, 0x8, 0x800}, 0x1000}, 0xffffffff, 0x0, 0x0) r5 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) r6 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000080), 0x2140, 0x0) pread64$auto(r6, &(0x7f0000000140)=']}\x00', 0x101, 0x8) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r5, 0x454f, 0x5f, 0x0, 0x0, r5, 0x80000001}, 0x6d4) 259.365927ms ago: executing program 8 (id=1891): socket(0x2, 0x1, 0x106) r0 = socket(0x10, 0x2, 0xc) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x1) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="0100"], 0x18}, 0x1, 0x0, 0x0, 0x801}, 0x4044) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) 0s ago: executing program 8 (id=1892): mmap$auto(0x0, 0x40009, 0x9, 0x9b72, 0x7, 0x28000) r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2800000090bc06671e84cae4dc75b9b22b3c7ecc6e084785d0470c50a2d60ed7e5979f06e6e7070e282632cc508c2cc2f32526c6ce1a95f439db01dbd98d1b96fc6ba2b7118d4d7f8683fc9f98cea9c825cb6ada0f56640ae58f6af429a73f56c6d8f04378f0f555ca9553a4c4864636b0910851c52156b071938fc95562225dc00b9ab636ec3168f82dab", @ANYRES32=r0, @ANYRESOCT=r0], 0x28}, 0x1, 0x0, 0x0, 0x4040010}, 0x840) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) r3 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto_SO_MARK(r2, 0x725a, 0x24, &(0x7f0000000040)='\x00', 0x9) ioctl$auto_SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000880)="9f22ee7eb9f57e970e46fa691045742c8357bf414181898fce75c683f1e5aeef0d4fcd8a96fc52abb3f8d734def63f20b1295cb8ceb0492410a6b02d021384043b4264d8950f59b02d248e88601956a344bc1a901f09dc045f82a693d17b5834e8ae074a651f5d1d3383e52aeb10da3182caf73f37f7845f1cff3d419cd2c12dc0c3f52aa45794a4f2bd10c54340c87b0a440dc0e041863f3c6d05af51747a4a1293986abf05ceff574576f2cfe8b03c6613df02d026917af5218abf5590ad0573e2368edb1e5f910c491261eb24008689b4efbc51469dc7469d056a15b27ba252ee5f067549a46a4635b68c52bd1388211576d1ca940134adbe9bbc95c1ace47a75fbee5772f43cbb36bbaad3861ec579431eb8d2cb1e34b854c5b440357cbcec89807d22aa1c3b9f2b1897e4388f19fccd646645a7471761775ea95fd3a64b97a94edeb424760ef557a26a4b92d08a6b59c62ebd71841262589396cfe5e99daf955ef19ef7ef73a36569aea1faa185f7dbd32e11333af2126d5ee606c59ef6c77f3699f64884d2dea3833ae135a16af5e58f5f05b4aef9afd74c7bba6ce708d1d01cfd0459317c950703595415fbc081c325a0bc852624b0c8d906bb484ad299261f79b80713c2e2ed4e369823f6e9ecf5af2db376759f6cdce89c617d421374e4b8f6aad2a99de4c46a81689705e1d41e3feb8b41720a9f0e5655c0260868fad73c63d4353dffed172861a4b529cae88b6f7952bbc104f44258d83043d3d3595ae63fd3c21e7d28c124cdce188642a3f184b29e0cdc8d92d203d91acdbb671a8e05aef3a0d60dfac6aeeec55c860959d58e594d451c895d3d38ff678f6c70ac59d780233c0992585cc1a4db44126df56fd6a0722786bde969e95b9350eaafd5c4666a2a63dfedebe9a13ddc45e54f1f2438054a406d95788fd0854d6539dcac59bd246e5f64dc1e3d60ac95100f2bc4ec603c07e05d90ff3c9ad5d5ad4ae36f890e8ac019a25aa895f2c4169579cd9d916656713d6630c2202feb085a50b6ace2205485471b675c7da22bdc2af94c5881a599383112e50aea74bbf5e2e218756d89fef05940c94f1600263e70626e7cdad90d8a65af322177d77df152bb9dad1e1a4b98b24dce4d06a443fc30c95c8749173885718a651b2d2c3a7f49bad83103f8fafb437722c2485f56972d55dc7c905fcf42f4d584cb958243af7241017e55c4e5cb4182d8bf19e70b858555e5b3cb12aa4c4271c1e71e1101d95800fef675ecf84b8f6226e80201cd942369e67c392aac12727b41654a93001083917df96d02ec29c04e62ed1bfa1c181df0a53573887b96f371c735b1d430927faebfc023ddff33f65400f669ea3cd0773241bf42b71fbefa0cb5c7067cf989b48c414cd42a5c9ff60f45d3465a1121a9c4469c3c4226093341cb3fa8f95c98c332ca1d757fa9f269ada7ec0e44c9d1f1a263dc9a0e4583177ef091281cbc6e8843fc959b5492149d28922070ad70a0e83ba8925d4bcdc20d51baab36a305c13f443e414040c10b2f0e6f2985ae94d2852a8ff770ee833b6d4d1631199e1f7c9f9650b4b8f433057ff4c39cf4f627f9d93c298ceece16a18d46761a17f2184f5859af409a0ae66d6bc099830bebdf1a609ba4ef7b288b04271cf5f9ecdb1b9b4f8a847481e81d4de87f75071338585d978ceb5287c75032464aac9f251a61ac848d9dfe0df3abb7a086ca24f755b074a4eca32e97c34f26bab43e69dfc47e8cba26070626ade1839ee8f89f6843593e6f03ab6584d9759c0c8b88d5a4cca7775b8671a05961b0856d0f5f09a0558e6da8eff7b67eb1868a4ffaace487e319761bd511ecea25ce5f2672268684ed3351e756e18dfbf2c5d07bcdebb2505bb6caf19fe88ab2b1d015de75ad374d617f30ba8c9cc0e6d978f31d1418599e41a477b49da0fc816fdfdc7c379d2d313fdc90df0e122a8dc57e99b5b2153a7471e779b576e947a73a66c8ef5c947cbe5bef4819b5e0f858d29057f8d0dbc7b0466b29d439cca7e87524ce7b49de3d58437349f12b0615d3512a12236d4b0a8a57e8ca9e980b40166d9392b41e0ac58731a0e6016a416811b840ed28616de836f82f0975a3e3191b8f0ede88e09d406bad58a1f5a1a34131d2bf53fedf4d42326854dccfecfd1968710236eb6e79a3cfc0e4c56700bce528d4f7a4f6344410ddd0e70d1b68b01a947de57dde50f115cec3b391a85d9454a30ae3c86cdc392c027d77e7de29a2b5b85891bbdfc0a1310c617d608f373b24ccd8ba0456a9b55631aafa436284a912408fcbe2a0c501269e6712961a177a3a0bc7f3f75b6dc8c64aeead65d3dba4ae7e20da1cc147d385e8e412cfb55e08469374fc7419a907ca20c41c2e8d57f621381addbf6567fa61764518f05464303c966bb1911c927bf7dc78bf13df41dfbf090757aa07e6094001b151c107c825f90e2d0e20d82b3822b79f80f93fb0aadb73f726abadc2e579d315138fa419935e42a69435fa7ed9891c8749a72c791525294f1fa8d374e7617a8bc5eb68bb3f85e0b8a44980970e9fbe306d695204ffcad9d38c972ac0593b658e448cfabf9647dde4a4a0321cbad1da4c4f6eb8b064ba02858e82b1647ba2705cbce7eb898f278e2df49e47689545fdb4d8d8e600d894867d5e2814b6b255acc018a333593b28c3c71a1bdd4da9880ab8dd2e6b2b046560d9261a6981f34db37d4095bbb5699fa043f055eaadfa23e19eae036e9ee8bbf8638adbeac7e1542ca0f4d7ba2a18ddfab10dfbd47ec198a21bbccc8ef460b1ac75482dc9b9bfad36b8099e21f26b6d8588a00c5d1c207db1e82a0638f00fcc3475f5fd7d6ca8f77da6e899ae20a902ae044e1e7b888a95bf3e3fe7c870c17bd366750f7fd9bb32cc8fd03ad3338ee976546143151f7e71b86356648374fb56f2734b59678a5d96d05e176ed3946d108219c1b4f998a88f349498ba2fddd9b2d7ecc22d81cf5d257e32ee440f5bf2958dc2d98d62fea6ae0bc4388cd4e8a2f7999163df0dc10c6406e27940d9a3e500697d22545d59c6902593cd330be374d0a6a944f86bce62784bbd49868cff80a86f43a293f6a3adf6ca2b641ebe5e6a22f732ffd0158bde07845ffe3d3baac2b594b368e184a01e12ff26e3575b643c586dc694adc1d5a45fffb5b1d6e4082f6c799f6da39a917f0a9be41edc7ac5a1ea8d5fa4625430a20861c3b8e0644037a24131ea0fa78437c8bc9ad576f1a542e21c8cc3b38575ea00dad72f934bf9ad57e685f891a2fbd197ab8ca2b07cb2f298f1ceff69291f5f7f230a245d2ca86d0a8301942384a0ac14365157571f7d70e107a9c46e77df117ca547243cd3c23b1b586b22bdab5b5979acc7da1abe24801ce4ac6bac014960213ad1afa147136d82b03ddae4771b60ca95734bcc45d86dbfd4f6154c15b6952c1f6a20c7f3a22b52b44a4a7615269f3cc49a2c0137f0ba822dfec653f771461e53871250a74d85f84fecd14738abd1dcbc5d37e53e133e4833f2db7c9737f5cad217c916b1978c001f87e171fa6b5daf17dde31c02e86e8f45a0b9d7248edf3387db79d992e465412e7eb48f0f4f5383a710c7277e4dfc2f06cb0cd4d788d96368b0718fa009823c932a889732460e8d1c97a3bd87acab59cd2fb2c14b62a80850b42bc4a3e720782091db5c85499c11684e115c4e3c74a28079ff11902d972abb1fea0678c8801fe556c840f70175d0bbe42fecad943d0f81ce7aa297668e26097d02ad4e4d0ef77046ef81cc7fbb198490353315426a60f6fb97416fd4b23029ade21e61b2e8f0d895aa0fe4bd45cac0b72450a5cd54023e7777cb46734b1e6fb2df3b5d29854745078b28529e1f51e28b13e63949441f8ab3ccde08450fd7be369d10882414a8c6554739d65ec71b5ea04bd5fa256732aa647f4d3f5de3a86c6164701c8291ddd3e733af7bd285a95fecf93737fc065d742d4eca1bee57d8e2a64e02d1410390e26fad9174f59bd88a4c08cdf4dd62ef0328d74a6cd6a60d42cd6d88c6b61924f93ad24d53cb6c43ec6e91a58a44d1aed7c5f4308c2752fed5212e769d85dfb5d36a88a696c7f553c49095dcabbaaa9caba80a4eb6e1024fa7ea777be55bec249479601d9d68fe39b2ac2d7e6040e5ffc56faf19a02cffde23a9ee62db834ced628a1f1ce11be9e8828004019cd194f0999d0422eef63aeb12e5f4f812e1e9ad6d613422279fecf8e649cd9d60dd456af4b0b38c72b2bf5a23922d5afaa7ccf55c649743fa680fa54b0902e2e8f6e3e99edca25cf06b8ae7867e683e7725771c7df4db9574df9aa84398629b60d705bedc993b2a21c1f1d831713ca084bdf5554945748775ecca13361a8b8c16108a3683beec45c86ac06def5463b96581dd8276e599d2b5ca85beeb26ea6f7134465ec4b212f7dc32fff31e6548238aef86002c8c54047fe0abfa0f9c48acc39ab5e581e03f5f2e6f2a5d04362036e62df73ec733403c95c46e1ee64ba8ff2890b4b953473bab7f45714feddd70d06680b90691a0cb35633d3d672c34063d9e5025cc66619caf497946a4086c867dc91cf0794762defb2363c6f5cf41d1a18d50f06a7be803cc89b5c5f676e8f71bea6ed5b6b1e431800c2ecc44eb59c5439c6407c2f0f4a60618ac9938522d286495d1e6bc7f49eb871a36354b9eabce0d0ccb27b693f4c02108c0fd095a22d4bfc5e61f4ac567c18dc94113d364445875eac9dc7f0916237ccc85c48849d42b14b12bb9518ccaf7c2a390861e0e3a295ddecdb487e6f633d92f9973f21f4f9607f202121946f7628dca62dc5edf189d8020904cfa2d7b566ff2d6b98ea05d9f1aeec72b97552e71b455c947b5a90c041413481cfa669e7dad133bd2b1ec54d46fb641b5aef426958e77eb895dbe7f83fa14382f90cc86d0585db63c12895baaa4c37d05f937ef0732773ecd0b359e49313774b99c2251b094dd25b36edf47bdb7fd797585e4db05a03588ee77a2a367575cd06e9b2660fdd1ac0c0defeed9bba1c6e952694d0f10882201951bb9572ec43629c28059836bda7d5421473092a3e1eef5789517c717e7c1f5b8e45328bf349d0b5113fb79f43340889b3666919e531cb6bf39e4a1591ee5dc2b10924cb7140a9414572d2e26e72e2d770d9d7679a08355e9317bc28ba7b8ca41b68b81eaf7def8c1efb28122834ebb3a0dd01bb8223d15e69640a203cc5cbdeaefa92be9b62b78fdae564174391e163736090dc66996f1cb93dfff71337799f9bdd7d6c445a3fca07960061e72c076dea8c307a20dea9a385c1d208a503808b04bafd2086e3f786387d9764f36a1a19cd24155d42f5f2fb280d0628e45594c449aba8846e648b232c9cd1f8784e6a6d7dc551374cdd815d6003cf295610eea743924f5175af1ecb6b8cbe9bf5a0169a59d8840d4f8e027a309e2387f8f3e444af08902343132df60f47d1a94a09c86eb2ecc4a43aaa372c102f82cfa01610ccd868f2cd43bb72479af2d8aa872ca7e157d3dbab04de5f15194a118b6411d637815b86c84856baa0c7c263be39467b6d39bd85f41b0ddfe438756730febc5628f9e512891a3eb1a95efac641fd051214633c3d4409ae1e4c98a794e0417c9a5344571326aa4364a79b18912d9a1cceb8c180d6edeb647b616e670c394e9d49cd5bdc06187c29d369565d773907d27f19750a84eecf6356a10b9b64a2aa400e85646de456ae8787c29191f4e10a1812bfd30ee8ef7fd28fd6027f063aefe6f7004965bd90e890507a6") r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)=""/9, 0x9) mmap$auto(0x0, 0x2020009, 0xfffffffffffffff8, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x0, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x40000000000a5, 0x80000008000) r6 = socket(0x2, 0x1, 0x0) ioperm$auto(0xfffffffffffffffa, 0x2, 0x1ff) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r7, 0xc4c85512, &(0x7f00000002c0)={{@raw=0x7, 0x8, 0x4, 0xa2, "c6e47a44a36664a5e709f0e4c97056bc9fa32c617bb88dc98fa7591aefc4647f5af349f8e1e79c823b22958f"}, 0x1, @enumerated=@item=[0x0, 0x3, 0x1, 0x3, 0x6, 0x8001, 0x10, 0x6, 0x10001, 0xefe, 0xfffffff9, 0x5, 0x8001, 0x62f, 0x101, 0x9, 0x200, 0xfffffff0, 0x1000, 0x7, 0x3, 0x3, 0x0, 0x6, 0xb94, 0x0, 0x1, 0x7, 0x3, 0xe8, 0x4, 0x0, 0x100009, 0x46f, 0x8, 0x1, 0x6, 0x4, 0x6, 0x8, 0x80, 0x9, 0x65b, 0x9, 0x7, 0x81, 0x1ce8, 0x9, 0x34b5, 0xfff, 0x5, 0xfff, 0x2, 0x1000, 0x9, 0x0, 0x400, 0xd, 0x0, 0x0, 0x207d, 0xa7a, 0x5, 0x4000005, 0x4, 0x80, 0x6ed, 0x40000, 0x1, 0x1, 0x6, 0x4, 0x8, 0x1, 0x4003ff, 0x5, 0x8, 0x6, 0x0, 0xa, 0x2, 0x5, 0x400, 0x6, 0x84, 0x9, 0x29, 0x8, 0x30971ad3, 0x9, 0x78d, 0x7f, 0x0, 0x8001, 0x20000, 0x40, 0x0, 0x4, 0x5, 0x0, 0x0, 0x4f000, 0x100, 0x5, 0x7, 0xd49e923b, 0x4, 0x80000000, 0x77, 0xfffffffb, 0x0, 0x7fffffff, 0x7fff, 0x9, 0x5b, 0x8, 0x10001, 0x8, 0x0, 0xc2, 0x0, 0x5, 0x1000, 0x1, 0x7, 0x6, 0x8, 0x3], "4570dcfd140074f863fc1385c4fd7abe6fce96c0b442897f58fd7d975d164deff4eef5b9f9173fa400163669eae95125d4bd68ca54ca1b0aefb60ffa8d501b1329af8d4108ac145aa564c6e7a09ea1b2dfae0f309c6ea508833d7d134b13d8cb3ef95bf5ed43801c280c02a5a853512e6f730d43226f00af1c5ac268ecc1d18f"}) ioctl$auto_EVIOCRMFF(r5, 0x40044581, &(0x7f00000000c0)=0x10001) sendmmsg$auto(r6, &(0x7f0000000140)={{&(0x7f0000000040), 0x16, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x2, 0x0, 0x5, 0xa}, 0x9}, 0x4, 0xffb) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) socket(0x26, 0x1, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) kernel console output (not intermixed with test programs): 6fef8eec9 [ 628.248232][T14574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.248255][T14574] RSP: 002b:00007f66ffe51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 628.248277][T14574] RAX: ffffffffffffffda RBX: 00007f66ff1e5fa0 RCX: 00007f66fef8eec9 [ 628.248293][T14574] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 628.248307][T14574] RBP: 00007f66ff011f91 R08: 0000000000000000 R09: 0000000000000000 [ 628.248321][T14574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.248335][T14574] R13: 00007f66ff1e6038 R14: 00007f66ff1e5fa0 R15: 00007ffcce421ed8 [ 628.248364][T14574] [ 628.248385][T14574] ERROR: Out of memory at tomoyo_realpath_from_path. [ 628.403017][ C1] vkms_vblank_simulate: vblank timer overrun [ 629.585828][T14599] usb usb36: usbfs: process 14599 (syz.0.1391) did not claim interface 0 before use [ 629.622019][T14594] FAULT_INJECTION: forcing a failure. [ 629.622019][T14594] name failslab, interval 1, probability 0, space 0, times 0 [ 629.663170][T14594] CPU: 1 UID: 0 PID: 14594 Comm: syz.0.1391 Not tainted syzkaller #0 PREEMPT(full) [ 629.663215][T14594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 629.663237][T14594] Call Trace: [ 629.663247][T14594] [ 629.663261][T14594] dump_stack_lvl+0x16c/0x1f0 [ 629.663304][T14594] should_fail_ex+0x512/0x640 [ 629.663343][T14594] ? __kmalloc_noprof+0xca/0x880 [ 629.663381][T14594] should_failslab+0xc2/0x120 [ 629.663432][T14594] __kmalloc_noprof+0xdd/0x880 [ 629.663466][T14594] ? lsm_blob_alloc+0x68/0x90 [ 629.663505][T14594] ? lsm_blob_alloc+0x68/0x90 [ 629.663535][T14594] lsm_blob_alloc+0x68/0x90 [ 629.663569][T14594] security_sk_alloc+0x30/0x270 [ 629.663611][T14594] sk_prot_alloc+0xfb/0x2a0 [ 629.663669][T14594] sk_alloc+0x36/0xc20 [ 629.663704][T14594] inet_create+0x3a1/0x1040 [ 629.663759][T14594] ? inet_create+0x93/0x1040 [ 629.663817][T14594] __sock_create+0x335/0x8d0 [ 629.663874][T14594] inet_ctl_sock_create+0x94/0x230 [ 629.663925][T14594] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 629.663977][T14594] ? lockdep_init_map_type+0x5c/0x280 [ 629.664035][T14594] ? lockdep_init_map_type+0x5c/0x280 [ 629.664091][T14594] ? __pfx_igmp_net_init+0x10/0x10 [ 629.664122][T14594] igmp_net_init+0xd0/0x1a0 [ 629.664160][T14594] ops_init+0x1e2/0x5f0 [ 629.664202][T14594] setup_net+0x100/0x390 [ 629.664242][T14594] ? __pfx_setup_net+0x10/0x10 [ 629.664283][T14594] ? debug_mutex_init+0x37/0x70 [ 629.664330][T14594] copy_net_ns+0x2f8/0x690 [ 629.664376][T14594] create_new_namespaces+0x3ea/0xa90 [ 629.664432][T14594] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 629.664482][T14594] ksys_unshare+0x45b/0xa40 [ 629.664533][T14594] ? __pfx_ksys_unshare+0x10/0x10 [ 629.664582][T14594] ? xfd_validate_state+0x61/0x180 [ 629.664623][T14594] __x64_sys_unshare+0x31/0x40 [ 629.664681][T14594] do_syscall_64+0xcd/0x4b0 [ 629.664721][T14594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.664756][T14594] RIP: 0033:0x7fadd518eec9 [ 629.664782][T14594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.664815][T14594] RSP: 002b:00007fadd6076038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 629.664848][T14594] RAX: ffffffffffffffda RBX: 00007fadd53e5fa0 RCX: 00007fadd518eec9 [ 629.664870][T14594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 629.664890][T14594] RBP: 00007fadd5211f91 R08: 0000000000000000 R09: 0000000000000000 [ 629.664911][T14594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.664932][T14594] R13: 00007fadd53e6038 R14: 00007fadd53e5fa0 R15: 00007ffd44d09218 [ 629.664975][T14594] [ 629.665176][T14594] Failed to initialize the IGMP autojoin socket (err -12) [ 630.122626][T14598] FAULT_INJECTION: forcing a failure. [ 630.122626][T14598] name fail_futex, interval 1, probability 0, space 0, times 0 [ 630.162805][T14598] CPU: 1 UID: 0 PID: 14598 Comm: syz.3.1392 Not tainted syzkaller #0 PREEMPT(full) [ 630.162861][T14598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 630.162881][T14598] Call Trace: [ 630.162891][T14598] [ 630.162903][T14598] dump_stack_lvl+0x16c/0x1f0 [ 630.162943][T14598] should_fail_ex+0x512/0x640 [ 630.162985][T14598] get_futex_key+0x1d0/0x1560 [ 630.163037][T14598] ? __pfx_get_futex_key+0x10/0x10 [ 630.163081][T14598] ? __lock_acquire+0xb97/0x1ce0 [ 630.163142][T14598] futex_wait_setup+0x9d/0x550 [ 630.163187][T14598] __futex_wait+0x193/0x2f0 [ 630.163222][T14598] ? __pfx___futex_wait+0x10/0x10 [ 630.163263][T14598] ? __pfx_futex_wake_mark+0x10/0x10 [ 630.163318][T14598] ? futex_private_hash_put+0x176/0x300 [ 630.163374][T14598] ? futex_private_hash_put+0x18a/0x300 [ 630.163425][T14598] futex_wait+0xe8/0x380 [ 630.163460][T14598] ? __pfx_futex_wait+0x10/0x10 [ 630.163507][T14598] ? ksys_read+0x190/0x250 [ 630.163556][T14598] do_futex+0x229/0x350 [ 630.163608][T14598] ? __pfx_do_futex+0x10/0x10 [ 630.163677][T14598] __x64_sys_futex+0x1e0/0x4c0 [ 630.163731][T14598] ? fput+0x9b/0xd0 [ 630.163781][T14598] ? __pfx___x64_sys_futex+0x10/0x10 [ 630.163829][T14598] ? ksys_read+0x1ac/0x250 [ 630.163868][T14598] ? __pfx_ksys_read+0x10/0x10 [ 630.163920][T14598] do_syscall_64+0xcd/0x4b0 [ 630.163961][T14598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.163996][T14598] RIP: 0033:0x7f787cd8eec9 [ 630.164023][T14598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.164059][T14598] RSP: 002b:00007f787dcba0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 630.164092][T14598] RAX: ffffffffffffffda RBX: 00007f787cfe5fa8 RCX: 00007f787cd8eec9 [ 630.164129][T14598] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f787cfe5fa8 [ 630.164150][T14598] RBP: 00007f787cfe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 630.164171][T14598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.164191][T14598] R13: 00007f787cfe6038 R14: 00007ffd13ff2c70 R15: 00007ffd13ff2d58 [ 630.164235][T14598] [ 630.378498][ C1] vkms_vblank_simulate: vblank timer overrun [ 630.928224][ T31] audit: type=1800 audit(4294967391.180:27): pid=14614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1396" name="lu_gp_id" dev="configfs" ino=37604 res=0 errno=0 [ 632.508816][T14634] netlink: 'syz.0.1398': attribute type 1 has an invalid length. [ 634.897704][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.904205][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 636.583615][T14662] FAULT_INJECTION: forcing a failure. [ 636.583615][T14662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.627776][T14662] CPU: 1 UID: 0 PID: 14662 Comm: syz.0.1404 Not tainted syzkaller #0 PREEMPT(full) [ 636.627828][T14662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 636.627846][T14662] Call Trace: [ 636.627856][T14662] [ 636.627868][T14662] dump_stack_lvl+0x16c/0x1f0 [ 636.627907][T14662] should_fail_ex+0x512/0x640 [ 636.627950][T14662] _copy_from_user+0x2e/0xd0 [ 636.627991][T14662] vmemdup_user+0x6b/0xe0 [ 636.628032][T14662] __sys_bpf+0x387e/0x4980 [ 636.628074][T14662] ? __pfx___sys_bpf+0x10/0x10 [ 636.628107][T14662] ? find_held_lock+0x2b/0x80 [ 636.628157][T14662] ? vfs_write+0x15d/0x11d0 [ 636.628205][T14662] ? __pfx_vfs_write+0x10/0x10 [ 636.628270][T14662] ? ksys_write+0x1ac/0x250 [ 636.628308][T14662] ? __pfx_ksys_write+0x10/0x10 [ 636.628351][T14662] __x64_sys_bpf+0x78/0xc0 [ 636.628388][T14662] ? lockdep_hardirqs_on+0x7c/0x110 [ 636.628420][T14662] do_syscall_64+0xcd/0x4b0 [ 636.628457][T14662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.628489][T14662] RIP: 0033:0x7fadd518eec9 [ 636.628514][T14662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.628546][T14662] RSP: 002b:00007fadd6076038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 636.628575][T14662] RAX: ffffffffffffffda RBX: 00007fadd53e5fa0 RCX: 00007fadd518eec9 [ 636.628596][T14662] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000015 [ 636.628615][T14662] RBP: 00007fadd6076090 R08: 0000000000000000 R09: 0000000000000000 [ 636.628633][T14662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.628653][T14662] R13: 00007fadd53e6038 R14: 00007fadd53e5fa0 R15: 00007ffd44d09218 [ 636.628696][T14662] [ 637.612133][T14664] FAULT_INJECTION: forcing a failure. [ 637.612133][T14664] name failslab, interval 1, probability 0, space 0, times 0 [ 637.625035][T14664] CPU: 0 UID: 0 PID: 14664 Comm: syz.3.1405 Not tainted syzkaller #0 PREEMPT(full) [ 637.625080][T14664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 637.625101][T14664] Call Trace: [ 637.625111][T14664] [ 637.625124][T14664] dump_stack_lvl+0x16c/0x1f0 [ 637.625165][T14664] should_fail_ex+0x512/0x640 [ 637.625204][T14664] ? __kmalloc_cache_noprof+0x5f/0x780 [ 637.625245][T14664] should_failslab+0xc2/0x120 [ 637.625296][T14664] __kmalloc_cache_noprof+0x72/0x780 [ 637.625333][T14664] ? percpu_ref_init+0xec/0x410 [ 637.625369][T14664] ? percpu_ref_init+0xec/0x410 [ 637.625398][T14664] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 637.625432][T14664] percpu_ref_init+0xec/0x410 [ 637.625467][T14664] io_uring_setup+0x4a6/0x20e0 [ 637.625526][T14664] ? __pfx_io_uring_setup+0x10/0x10 [ 637.625578][T14664] ? do_futex+0x122/0x350 [ 637.625630][T14664] ? __pfx_do_futex+0x10/0x10 [ 637.625681][T14664] ? fput+0x9b/0xd0 [ 637.625749][T14664] ? xfd_validate_state+0x61/0x180 [ 637.625791][T14664] __x64_sys_io_uring_setup+0xc2/0x170 [ 637.625848][T14664] do_syscall_64+0xcd/0x4b0 [ 637.625888][T14664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.625931][T14664] RIP: 0033:0x7f787cd8eec9 [ 637.625960][T14664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.625993][T14664] RSP: 002b:00007f787dcba038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 637.626026][T14664] RAX: ffffffffffffffda RBX: 00007f787cfe5fa0 RCX: 00007f787cd8eec9 [ 637.626049][T14664] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 637.626068][T14664] RBP: 00007f787ce11f91 R08: 0000000000000000 R09: 0000000000000000 [ 637.626089][T14664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 637.626109][T14664] R13: 00007f787cfe6038 R14: 00007f787cfe5fa0 R15: 00007ffd13ff2d58 [ 637.626153][T14664] [ 638.142241][T14625] Process accounting resumed [ 639.331124][T14676] FAULT_INJECTION: forcing a failure. [ 639.331124][T14676] name failslab, interval 1, probability 0, space 0, times 0 [ 639.346916][T14676] CPU: 1 UID: 0 PID: 14676 Comm: syz.0.1406 Not tainted syzkaller #0 PREEMPT(full) [ 639.346958][T14676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 639.346978][T14676] Call Trace: [ 639.346988][T14676] [ 639.347000][T14676] dump_stack_lvl+0x16c/0x1f0 [ 639.347043][T14676] should_fail_ex+0x512/0x640 [ 639.347081][T14676] ? kmem_cache_alloc_node_noprof+0x65/0x770 [ 639.347126][T14676] should_failslab+0xc2/0x120 [ 639.347176][T14676] kmem_cache_alloc_node_noprof+0x78/0x770 [ 639.347215][T14676] ? __alloc_skb+0x2b2/0x380 [ 639.347256][T14676] ? __alloc_skb+0x2b2/0x380 [ 639.347285][T14676] __alloc_skb+0x2b2/0x380 [ 639.347318][T14676] ? __pfx___alloc_skb+0x10/0x10 [ 639.347355][T14676] ? __pfx___might_resched+0x10/0x10 [ 639.347396][T14676] ? __lock_acquire+0xb97/0x1ce0 [ 639.347455][T14676] netlink_alloc_large_skb+0x69/0x140 [ 639.347499][T14676] netlink_sendmsg+0x698/0xdd0 [ 639.347555][T14676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 639.347600][T14676] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 639.347648][T14676] ____sys_sendmsg+0xa95/0xc70 [ 639.347697][T14676] ? copy_msghdr_from_user+0x10a/0x160 [ 639.347735][T14676] ? __pfx_____sys_sendmsg+0x10/0x10 [ 639.347789][T14676] ? kfree+0x252/0x6d0 [ 639.347831][T14676] ___sys_sendmsg+0x134/0x1d0 [ 639.347871][T14676] ? __pfx____sys_sendmsg+0x10/0x10 [ 639.347947][T14676] ? __pfx___might_resched+0x10/0x10 [ 639.347998][T14676] __sys_sendmmsg+0x200/0x420 [ 639.348040][T14676] ? __pfx___sys_sendmmsg+0x10/0x10 [ 639.348090][T14676] ? __pfx_do_futex+0x10/0x10 [ 639.348140][T14676] ? fput+0x9b/0xd0 [ 639.348209][T14676] ? xfd_validate_state+0x61/0x180 [ 639.348249][T14676] __x64_sys_sendmmsg+0x9c/0x100 [ 639.348285][T14676] ? lockdep_hardirqs_on+0x7c/0x110 [ 639.348317][T14676] do_syscall_64+0xcd/0x4b0 [ 639.348357][T14676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.348391][T14676] RIP: 0033:0x7fadd518eec9 [ 639.348418][T14676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.348450][T14676] RSP: 002b:00007fadd6076038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 639.348482][T14676] RAX: ffffffffffffffda RBX: 00007fadd53e5fa0 RCX: 00007fadd518eec9 [ 639.348504][T14676] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000007 [ 639.348532][T14676] RBP: 00007fadd5211f91 R08: 0000000000000000 R09: 0000000000000000 [ 639.348553][T14676] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000000 [ 639.348575][T14676] R13: 00007fadd53e6038 R14: 00007fadd53e5fa0 R15: 00007ffd44d09218 [ 639.348619][T14676] [ 640.781567][ T31] audit: type=1800 audit(4294967305.860:28): pid=14706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1413" name="lu_gp_id" dev="configfs" ino=38467 res=0 errno=0 [ 641.008618][T14710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1415'. [ 644.193391][ T31] audit: type=1800 audit(4294967309.270:29): pid=14763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1428" name="discovery_nqn" dev="configfs" ino=39503 res=0 errno=0 [ 644.306086][ T31] audit: type=1800 audit(4294967309.270:30): pid=14754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1426" name="lu_gp_id" dev="configfs" ino=38467 res=0 errno=0 [ 644.526905][T14761] svc: failed to register nfsdv3 RPC service (errno 111). [ 644.578959][T14761] svc: failed to register nfsaclv3 RPC service (errno 111). [ 645.049631][T14774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1431'. [ 645.812971][T14779] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1432'. [ 645.844780][T14764] svc: failed to register nfsdv3 RPC service (errno 512). [ 645.898740][T14764] svc: failed to register nfsaclv3 RPC service (errno 512). [ 646.121331][T14784] rtc_cmos 00:00: Alarms can be up to one day in the future [ 647.777820][ T31] audit: type=1800 audit(4294967312.860:31): pid=14802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1438" name="discovery_nqn" dev="configfs" ino=39616 res=0 errno=0 [ 648.205611][T14811] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1440'. [ 648.678558][T14819] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1441'. [ 650.179931][T14836] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 653.898271][ T31] audit: type=1800 audit(4294967318.980:32): pid=14885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1455" name="discovery_nqn" dev="configfs" ino=39764 res=0 errno=0 [ 654.041362][T14888] FAULT_INJECTION: forcing a failure. [ 654.041362][T14888] name failslab, interval 1, probability 0, space 0, times 0 [ 654.110720][T14888] CPU: 0 UID: 0 PID: 14888 Comm: syz.1.1456 Not tainted syzkaller #0 PREEMPT(full) [ 654.110752][T14888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 654.110766][T14888] Call Trace: [ 654.110773][T14888] [ 654.110782][T14888] dump_stack_lvl+0x16c/0x1f0 [ 654.110817][T14888] should_fail_ex+0x512/0x640 [ 654.110843][T14888] ? __kmalloc_noprof+0xca/0x880 [ 654.110870][T14888] should_failslab+0xc2/0x120 [ 654.110904][T14888] __kmalloc_noprof+0xdd/0x880 [ 654.110928][T14888] ? kernfs_fop_write_iter+0x237/0x570 [ 654.110957][T14888] ? kernfs_fop_write_iter+0x237/0x570 [ 654.110980][T14888] kernfs_fop_write_iter+0x237/0x570 [ 654.111008][T14888] vfs_write+0x7d0/0x11d0 [ 654.111037][T14888] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 654.111062][T14888] ? __pfx___mutex_lock+0x10/0x10 [ 654.111087][T14888] ? __pfx_vfs_write+0x10/0x10 [ 654.111133][T14888] ksys_write+0x12a/0x250 [ 654.111163][T14888] ? __pfx_ksys_write+0x10/0x10 [ 654.111199][T14888] do_syscall_64+0xcd/0x4b0 [ 654.111225][T14888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.111249][T14888] RIP: 0033:0x7f66fef8eec9 [ 654.111266][T14888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.111289][T14888] RSP: 002b:00007f66ffe51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 654.111310][T14888] RAX: ffffffffffffffda RBX: 00007f66ff1e5fa0 RCX: 00007f66fef8eec9 [ 654.111325][T14888] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000005 [ 654.111339][T14888] RBP: 00007f66ffe51090 R08: 0000000000000000 R09: 0000000000000000 [ 654.111353][T14888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.111366][T14888] R13: 00007f66ff1e6038 R14: 00007f66ff1e5fa0 R15: 00007ffcce421ed8 [ 654.111402][T14888] [ 654.432963][T14890] netlink: 280 bytes leftover after parsing attributes in process `syz.1.1456'. [ 655.840370][T14910] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1460'. [ 657.070455][ T31] audit: type=1800 audit(4294967322.150:33): pid=14929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1464" name="discovery_nqn" dev="configfs" ino=39980 res=0 errno=0 [ 657.336279][T14934] netlink: 346 bytes leftover after parsing attributes in process `syz.1.1466'. [ 658.796813][ T31] audit: type=1800 audit(4294967323.870:34): pid=14960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1472" name="lu_gp_id" dev="configfs" ino=41029 res=0 errno=0 [ 658.957359][T14963] FAULT_INJECTION: forcing a failure. [ 658.957359][T14963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.991199][T14963] CPU: 0 UID: 0 PID: 14963 Comm: syz.1.1471 Not tainted syzkaller #0 PREEMPT(full) [ 658.991241][T14963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 658.991260][T14963] Call Trace: [ 658.991270][T14963] [ 658.991282][T14963] dump_stack_lvl+0x16c/0x1f0 [ 658.991321][T14963] should_fail_ex+0x512/0x640 [ 658.991366][T14963] _copy_to_user+0x32/0xd0 [ 658.991410][T14963] sctp_getsockopt+0xcba/0x69b0 [ 658.991459][T14963] ? __lock_acquire+0x62e/0x1ce0 [ 658.991514][T14963] ? __pfx_sctp_getsockopt+0x10/0x10 [ 658.991577][T14963] ? __lock_acquire+0xb97/0x1ce0 [ 658.991650][T14963] ? find_held_lock+0x2b/0x80 [ 658.991687][T14963] ? __might_fault+0xe3/0x190 [ 658.991723][T14963] ? __might_fault+0xe3/0x190 [ 658.991756][T14963] ? __might_fault+0x13b/0x190 [ 658.991807][T14963] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 658.991850][T14963] do_sock_getsockopt+0x34a/0x440 [ 658.991897][T14963] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 658.991939][T14963] ? __fget_files+0x204/0x3c0 [ 658.992006][T14963] __sys_getsockopt+0x123/0x1b0 [ 658.992050][T14963] __x64_sys_getsockopt+0xbd/0x160 [ 658.992083][T14963] ? syscall_trace_enter+0x5e/0x240 [ 658.992122][T14963] do_syscall_64+0xcd/0x4b0 [ 658.992160][T14963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.992194][T14963] RIP: 0033:0x7f66fef8eec9 [ 658.992220][T14963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.992252][T14963] RSP: 002b:00007f66ffe0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 658.992281][T14963] RAX: ffffffffffffffda RBX: 00007f66ff1e6180 RCX: 00007f66fef8eec9 [ 658.992302][T14963] RDX: 0000000000000082 RSI: 0000000000000084 RDI: 0000000000000004 [ 658.992321][T14963] RBP: 00007f66ffe0f090 R08: 0000200000000000 R09: 0000000000000000 [ 658.992341][T14963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.992361][T14963] R13: 00007f66ff1e6218 R14: 00007f66ff1e6180 R15: 00007ffcce421ed8 [ 658.992404][T14963] [ 660.617944][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 660.628781][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 660.638069][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 660.648055][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 660.656323][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 660.827192][T14983] sg_write: data in/out 3292/1 bytes for SCSI command 0xa3-- guessing data in; [ 660.827192][T14983] program syz.1.1477 not setting count and/or reply_len properly [ 661.087487][T14986] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1477'. [ 661.267743][T14986] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1477'. [ 661.321529][T14979] chnl_net:caif_netlink_parms(): no params data found [ 661.705246][T14979] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.727108][T14979] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.734469][T14979] bridge_slave_0: entered allmulticast mode [ 661.765321][T14979] bridge_slave_0: entered promiscuous mode [ 661.781039][T14979] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.788371][T14979] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.795653][T14979] bridge_slave_1: entered allmulticast mode [ 661.804462][T14979] bridge_slave_1: entered promiscuous mode [ 661.871189][T14979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.889240][T14979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.951861][T14979] team0: Port device team_slave_0 added [ 661.971585][T14979] team0: Port device team_slave_1 added [ 662.031174][T14979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.038513][T14979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.066222][T14979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.081387][T14979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.089057][T14979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.116523][T14979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.220734][T14979] hsr_slave_0: entered promiscuous mode [ 662.227858][T14979] hsr_slave_1: entered promiscuous mode [ 662.237512][T14979] debugfs: 'hsr0' already exists in 'hsr' [ 662.243405][T14979] Cannot create hsr debugfs directory [ 662.584998][T14979] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 662.628559][T14979] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 662.648886][T14979] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 662.664825][T14979] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 662.716911][ T51] Bluetooth: hci4: command tx timeout [ 662.833851][T14979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.864747][T14979] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.883312][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.890571][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.911251][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.918503][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.383105][T14979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.954978][T14979] veth0_vlan: entered promiscuous mode [ 664.003569][T14979] veth1_vlan: entered promiscuous mode [ 664.154871][T14979] veth0_macvtap: entered promiscuous mode [ 664.191516][T14979] veth1_macvtap: entered promiscuous mode [ 664.283380][T14979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.331687][T14979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.385508][ T3516] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.395356][ T3516] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.420196][ T3516] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.432437][ T3516] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 664.570676][ T5844] Process accounting resumed [ 664.768369][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.776252][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 664.799116][ T51] Bluetooth: hci4: command tx timeout [ 664.922747][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 664.940273][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.292688][T13634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 665.303492][T13634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 665.312674][T13634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 665.322289][T13634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 665.332675][T13634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 665.896274][T15037] chnl_net:caif_netlink_parms(): no params data found [ 666.106411][T15037] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.113809][T15037] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.122654][T15037] bridge_slave_0: entered allmulticast mode [ 666.155890][T15037] bridge_slave_0: entered promiscuous mode [ 666.170520][T15037] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.178697][T15037] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.185999][T15037] bridge_slave_1: entered allmulticast mode [ 666.195244][T15037] bridge_slave_1: entered promiscuous mode [ 666.214503][T15052] random: crng reseeded on system resumption [ 666.280449][T15037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.323448][T15037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.491718][T15037] team0: Port device team_slave_0 added [ 666.510239][T15037] team0: Port device team_slave_1 added [ 666.615921][T15037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.653618][T15037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 666.795424][T15037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.830892][T15037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.877210][T13634] Bluetooth: hci4: command tx timeout [ 666.944466][T15037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.007622][T15037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 667.274422][T15037] hsr_slave_0: entered promiscuous mode [ 667.298155][T15037] hsr_slave_1: entered promiscuous mode [ 667.304791][T15037] debugfs: 'hsr0' already exists in 'hsr' [ 667.317019][T15037] Cannot create hsr debugfs directory [ 667.358684][T13634] Bluetooth: hci5: command tx timeout [ 667.747323][T15067] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 668.133251][T15037] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 668.171987][T15037] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 668.219349][T15037] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 668.251606][T15037] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 668.574108][T15037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.610220][T15037] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.649088][ T2136] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.656369][ T2136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.753566][ T2136] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.760948][ T2136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.957227][T13634] Bluetooth: hci4: command tx timeout [ 669.446818][T13634] Bluetooth: hci5: command tx timeout [ 669.603292][T15037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.170618][T15037] veth0_vlan: entered promiscuous mode [ 671.337427][T15037] veth1_vlan: entered promiscuous mode [ 671.527269][T13634] Bluetooth: hci5: command tx timeout [ 671.564762][T15037] veth0_macvtap: entered promiscuous mode [ 671.652644][T15037] veth1_macvtap: entered promiscuous mode [ 671.715417][T15037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.930774][T15037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.974495][ T139] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.015046][ T139] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.042384][ T139] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.071350][ T139] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.188859][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.203544][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.460256][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.490366][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.595295][T15129] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1498'. [ 673.596975][T13634] Bluetooth: hci5: command tx timeout [ 675.220479][T15164] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 675.430699][T15166] FAULT_INJECTION: forcing a failure. [ 675.430699][T15166] name failslab, interval 1, probability 0, space 0, times 0 [ 675.447258][T15166] CPU: 1 UID: 0 PID: 15166 Comm: syz.0.1507 Not tainted syzkaller #0 PREEMPT(full) [ 675.447292][T15166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 675.447306][T15166] Call Trace: [ 675.447314][T15166] [ 675.447323][T15166] dump_stack_lvl+0x16c/0x1f0 [ 675.447353][T15166] should_fail_ex+0x512/0x640 [ 675.447381][T15166] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 675.447411][T15166] should_failslab+0xc2/0x120 [ 675.447459][T15166] kmem_cache_alloc_noprof+0x75/0x6e0 [ 675.447487][T15166] ? sk_prot_alloc+0x60/0x2a0 [ 675.447525][T15166] ? sk_prot_alloc+0x60/0x2a0 [ 675.447554][T15166] sk_prot_alloc+0x60/0x2a0 [ 675.447589][T15166] sk_alloc+0x36/0xc20 [ 675.447613][T15166] tipc_sk_create+0xcf/0x21a0 [ 675.447657][T15166] ? find_held_lock+0x2b/0x80 [ 675.447687][T15166] ? __sock_create+0x2f2/0x8d0 [ 675.447725][T15166] __sock_create+0x335/0x8d0 [ 675.447765][T15166] __sys_socket+0x14d/0x260 [ 675.447800][T15166] ? __pfx___sys_socket+0x10/0x10 [ 675.447836][T15166] ? xfd_validate_state+0x61/0x180 [ 675.447866][T15166] __x64_sys_socket+0x72/0xb0 [ 675.447899][T15166] ? lockdep_hardirqs_on+0x7c/0x110 [ 675.447923][T15166] do_syscall_64+0xcd/0x4b0 [ 675.447951][T15166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.447975][T15166] RIP: 0033:0x7fadd518eec9 [ 675.447994][T15166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 675.448018][T15166] RSP: 002b:00007fadd6076038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 675.448040][T15166] RAX: ffffffffffffffda RBX: 00007fadd53e5fa0 RCX: 00007fadd518eec9 [ 675.448056][T15166] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 675.448070][T15166] RBP: 00007fadd5211f91 R08: 0000000000000000 R09: 0000000000000000 [ 675.448085][T15166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.448099][T15166] R13: 00007fadd53e6038 R14: 00007fadd53e5fa0 R15: 00007ffd44d09218 [ 675.448128][T15166] [ 676.509535][T15180] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1509'. [ 676.675522][ T31] audit: type=1800 audit(4294967341.750:35): pid=15183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1510" name="lu_gp_id" dev="configfs" ino=40940 res=0 errno=0 [ 676.768838][T15186] FAULT_INJECTION: forcing a failure. [ 676.768838][T15186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 676.807027][T15186] CPU: 1 UID: 0 PID: 15186 Comm: syz.4.1511 Not tainted syzkaller #0 PREEMPT(full) [ 676.807069][T15186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 676.807089][T15186] Call Trace: [ 676.807099][T15186] [ 676.807111][T15186] dump_stack_lvl+0x16c/0x1f0 [ 676.807149][T15186] should_fail_ex+0x512/0x640 [ 676.807192][T15186] _copy_to_user+0x32/0xd0 [ 676.807234][T15186] simple_read_from_buffer+0xcb/0x170 [ 676.807272][T15186] proc_fail_nth_read+0x197/0x240 [ 676.807313][T15186] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 676.807355][T15186] ? rw_verify_area+0xcf/0x6c0 [ 676.807387][T15186] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 676.807426][T15186] vfs_read+0x1e4/0xcf0 [ 676.807470][T15186] ? __pfx___mutex_lock+0x10/0x10 [ 676.807505][T15186] ? __pfx_vfs_read+0x10/0x10 [ 676.807555][T15186] ? __fget_files+0x20e/0x3c0 [ 676.807604][T15186] ksys_read+0x12a/0x250 [ 676.807643][T15186] ? __pfx_ksys_read+0x10/0x10 [ 676.807682][T15186] ? fput+0x9b/0xd0 [ 676.807735][T15186] do_syscall_64+0xcd/0x4b0 [ 676.807772][T15186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.807803][T15186] RIP: 0033:0x7f024ff8d8dc [ 676.807828][T15186] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 676.807858][T15186] RSP: 002b:00007f0250e4d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 676.807888][T15186] RAX: ffffffffffffffda RBX: 00007f02501e5fa0 RCX: 00007f024ff8d8dc [ 676.807908][T15186] RDX: 000000000000000f RSI: 00007f0250e4d0a0 RDI: 0000000000000004 [ 676.807928][T15186] RBP: 00007f0250e4d090 R08: 0000000000000000 R09: 0000000000000000 [ 676.807947][T15186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.807967][T15186] R13: 00007f02501e6038 R14: 00007f02501e5fa0 R15: 00007ffe4a20d348 [ 676.808018][T15186] [ 677.872180][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 677.881761][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 677.890970][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 677.899207][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 677.918036][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 679.072997][T15221] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(1.0.1), cmd(6) [ 679.226478][T15202] chnl_net:caif_netlink_parms(): no params data found [ 679.996826][ T51] Bluetooth: hci6: command tx timeout [ 680.081597][T15239] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1521'. [ 680.127271][T15202] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.151272][T15202] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.192465][T15202] bridge_slave_0: entered allmulticast mode [ 680.221562][T15202] bridge_slave_0: entered promiscuous mode [ 680.339703][T15202] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.348013][T15202] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.355774][T15202] bridge_slave_1: entered allmulticast mode [ 680.365023][T15202] bridge_slave_1: entered promiscuous mode [ 680.458208][ T31] audit: type=1800 audit(4294967345.540:36): pid=15238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1522" name="lu_gp_id" dev="configfs" ino=40940 res=0 errno=0 [ 680.664136][T15202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.707261][T15233] sg_write: data in/out 2359516/83 bytes for SCSI command 0x0-- guessing data in; [ 680.707261][T15233] program syz.4.1519 not setting count and/or reply_len properly [ 680.789666][T15202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.172242][T15247] FAULT_INJECTION: forcing a failure. [ 681.172242][T15247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.188304][T15247] CPU: 1 UID: 0 PID: 15247 Comm: syz.5.1523 Not tainted syzkaller #0 PREEMPT(full) [ 681.188337][T15247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 681.188351][T15247] Call Trace: [ 681.188359][T15247] [ 681.188367][T15247] dump_stack_lvl+0x16c/0x1f0 [ 681.188396][T15247] should_fail_ex+0x512/0x640 [ 681.188427][T15247] _copy_from_user+0x2e/0xd0 [ 681.188456][T15247] core_sys_select+0x35b/0xc20 [ 681.188489][T15247] ? __pfx_core_sys_select+0x10/0x10 [ 681.188520][T15247] ? proc_fail_nth_write+0x9f/0x220 [ 681.188571][T15247] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 681.188605][T15247] kern_select+0x15d/0x1e0 [ 681.188629][T15247] ? __pfx_kern_select+0x10/0x10 [ 681.188665][T15247] ? __pfx_ksys_write+0x10/0x10 [ 681.188697][T15247] __x64_sys_select+0xbd/0x160 [ 681.188721][T15247] ? do_syscall_64+0x91/0x4b0 [ 681.188744][T15247] ? lockdep_hardirqs_on+0x7c/0x110 [ 681.188767][T15247] do_syscall_64+0xcd/0x4b0 [ 681.188792][T15247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.188816][T15247] RIP: 0033:0x7fcf4698eec9 [ 681.188834][T15247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.188857][T15247] RSP: 002b:00007fcf477b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 681.188879][T15247] RAX: ffffffffffffffda RBX: 00007fcf46be6180 RCX: 00007fcf4698eec9 [ 681.188894][T15247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 681.188907][T15247] RBP: 00007fcf477b4090 R08: 0000000000000000 R09: 0000000000000000 [ 681.188921][T15247] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 681.188935][T15247] R13: 00007fcf46be6218 R14: 00007fcf46be6180 R15: 00007ffea05b4918 [ 681.188963][T15247] [ 681.375096][T15247] sg_write: data in/out 2359516/83 bytes for SCSI command 0x0-- guessing data in; [ 681.375096][T15247] program syz.5.1523 not setting count and/or reply_len properly [ 681.628994][T15202] team0: Port device team_slave_0 added [ 681.712930][T15202] team0: Port device team_slave_1 added [ 681.985623][T15202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.996963][T15202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.026775][T15202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.041945][T15202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.049162][T15202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 682.083763][T15202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.095165][ T51] Bluetooth: hci6: command tx timeout [ 682.201500][T15259] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1525'. [ 682.271072][T15263] random: crng reseeded on system resumption [ 682.671377][T15202] hsr_slave_0: entered promiscuous mode [ 682.688430][T15202] hsr_slave_1: entered promiscuous mode [ 682.747407][T15202] debugfs: 'hsr0' already exists in 'hsr' [ 682.784676][T15202] Cannot create hsr debugfs directory [ 684.208170][ T51] Bluetooth: hci6: command tx timeout [ 684.948957][T15287] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1530'. [ 685.045320][T15202] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 685.289925][T15202] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 685.349250][T15202] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 685.379296][T15202] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 685.440407][T15294] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1531'. [ 685.774333][T15294] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input9 [ 685.790510][T15202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.869241][T15202] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.895642][ T31] audit: type=1800 audit(4294967350.970:37): pid=15298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1532" name="lu_gp_id" dev="configfs" ino=40940 res=0 errno=0 [ 685.931080][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.938292][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.949573][T15305] Process accounting resumed [ 685.959590][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.966925][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.237120][ T51] Bluetooth: hci6: command tx timeout [ 686.860547][T15324] netlink: 146 bytes leftover after parsing attributes in process `syz.4.1535'. [ 686.876328][ T31] audit: type=1800 audit(4294967351.950:38): pid=15323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1536" name="discovery_nqn" dev="configfs" ino=43336 res=0 errno=0 [ 687.131668][T15202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.389177][T15202] veth0_vlan: entered promiscuous mode [ 689.440207][T15202] veth1_vlan: entered promiscuous mode [ 689.517861][ T51] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 689.794215][T15202] veth0_macvtap: entered promiscuous mode [ 690.155904][T15202] veth1_macvtap: entered promiscuous mode [ 690.212821][ T31] audit: type=1800 audit(4294967355.290:39): pid=15385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1543" name="lu_gp_id" dev="configfs" ino=40940 res=0 errno=0 [ 690.584902][T15202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 690.770223][T15202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 690.835050][ T139] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.856364][ T139] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.883824][ T139] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.912334][ T139] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.191630][ T3516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.244999][ T3516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.335001][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.354702][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.390613][T15407] FAULT_INJECTION: forcing a failure. [ 691.390613][T15407] name failslab, interval 1, probability 0, space 0, times 0 [ 691.454478][T15407] CPU: 0 UID: 0 PID: 15407 Comm: syz.0.1546 Not tainted syzkaller #0 PREEMPT(full) [ 691.454525][T15407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 691.454547][T15407] Call Trace: [ 691.454558][T15407] [ 691.454571][T15407] dump_stack_lvl+0x16c/0x1f0 [ 691.454614][T15407] should_fail_ex+0x512/0x640 [ 691.454653][T15407] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 691.454699][T15407] should_failslab+0xc2/0x120 [ 691.454757][T15407] kmem_cache_alloc_noprof+0x75/0x6e0 [ 691.454797][T15407] ? vm_area_alloc+0x1f/0x160 [ 691.454838][T15407] ? vm_area_alloc+0x1f/0x160 [ 691.454870][T15407] vm_area_alloc+0x1f/0x160 [ 691.454903][T15407] __mmap_region+0xf85/0x27a0 [ 691.454942][T15407] ? find_held_lock+0x2b/0x80 [ 691.454983][T15407] ? __pfx___mmap_region+0x10/0x10 [ 691.455019][T15407] ? finish_task_switch.isra.0+0x21c/0xc10 [ 691.455064][T15407] ? rcu_is_watching+0x12/0xc0 [ 691.455105][T15407] ? finish_task_switch.isra.0+0x221/0xc10 [ 691.455145][T15407] ? lockdep_hardirqs_on+0x7c/0x110 [ 691.455179][T15407] ? finish_task_switch.isra.0+0x221/0xc10 [ 691.455257][T15407] ? __pfx___schedule+0x10/0x10 [ 691.455353][T15407] ? trace_cap_capable+0x18d/0x200 [ 691.455408][T15407] mmap_region+0x1ab/0x3f0 [ 691.455446][T15407] ? __get_unmapped_area+0x267/0x440 [ 691.455499][T15407] do_mmap+0xa3e/0x1210 [ 691.455554][T15407] ? __pfx_do_mmap+0x10/0x10 [ 691.455602][T15407] ? __pfx_down_write_killable+0x10/0x10 [ 691.455653][T15407] vm_mmap_pgoff+0x29e/0x470 [ 691.455707][T15407] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 691.455776][T15407] ? __x64_sys_futex+0x1e0/0x4c0 [ 691.455827][T15407] ? __x64_sys_futex+0x1e9/0x4c0 [ 691.455884][T15407] ksys_mmap_pgoff+0x7d/0x5c0 [ 691.455931][T15407] ? xfd_validate_state+0x61/0x180 [ 691.455959][T15407] ? __pfx_do_writev+0x10/0x10 [ 691.456002][T15407] __x64_sys_mmap+0x125/0x190 [ 691.456040][T15407] do_syscall_64+0xcd/0x4b0 [ 691.456078][T15407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.456112][T15407] RIP: 0033:0x7fadd518eec9 [ 691.456139][T15407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.456172][T15407] RSP: 002b:00007fadd6076038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 691.456204][T15407] RAX: ffffffffffffffda RBX: 00007fadd53e5fa0 RCX: 00007fadd518eec9 [ 691.456226][T15407] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 691.456245][T15407] RBP: 00007fadd5211f91 R08: fffffffffffffffa R09: 0000000000008000 [ 691.456265][T15407] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 691.456284][T15407] R13: 00007fadd53e6038 R14: 00007fadd53e5fa0 R15: 00007ffd44d09218 [ 691.456326][T15407] [ 691.738546][T13634] Bluetooth: hci5: command tx timeout [ 691.868606][T15410] netlink: 'syz.4.1545': attribute type 1 has an invalid length. [ 692.417089][T15418] FAULT_INJECTION: forcing a failure. [ 692.417089][T15418] name failslab, interval 1, probability 0, space 0, times 0 [ 692.430509][T15418] CPU: 0 UID: 0 PID: 15418 Comm: syz.0.1548 Not tainted syzkaller #0 PREEMPT(full) [ 692.430542][T15418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 692.430557][T15418] Call Trace: [ 692.430565][T15418] [ 692.430574][T15418] dump_stack_lvl+0x16c/0x1f0 [ 692.430604][T15418] should_fail_ex+0x512/0x640 [ 692.430632][T15418] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 692.430662][T15418] should_failslab+0xc2/0x120 [ 692.430705][T15418] kmem_cache_alloc_noprof+0x75/0x6e0 [ 692.430732][T15418] ? alloc_empty_file+0x55/0x1e0 [ 692.430774][T15418] ? alloc_empty_file+0x55/0x1e0 [ 692.430808][T15418] alloc_empty_file+0x55/0x1e0 [ 692.430845][T15418] alloc_file_pseudo+0x13a/0x230 [ 692.430884][T15418] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 692.430922][T15418] ? security_inode_init_security_anon+0x79/0x240 [ 692.430960][T15418] __anon_inode_getfile+0xe8/0x280 [ 692.430995][T15418] new_userfaultfd+0x25e/0x3d0 [ 692.431019][T15418] __x64_sys_userfaultfd+0x4b/0xb0 [ 692.431045][T15418] do_syscall_64+0xcd/0x4b0 [ 692.431072][T15418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.431096][T15418] RIP: 0033:0x7fadd518eec9 [ 692.431115][T15418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 692.431138][T15418] RSP: 002b:00007fadd6076038 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 692.431160][T15418] RAX: ffffffffffffffda RBX: 00007fadd53e5fa0 RCX: 00007fadd518eec9 [ 692.431175][T15418] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 692.431189][T15418] RBP: 00007fadd5211f91 R08: 0000000000000000 R09: 0000000000000000 [ 692.431203][T15418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 692.431217][T15418] R13: 00007fadd53e6038 R14: 00007fadd53e5fa0 R15: 00007ffd44d09218 [ 692.431247][T15418] [ 692.871007][T15421] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 694.979378][ T31] audit: type=1800 audit(4294967300.140:40): pid=15443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1553" name="discovery_nqn" dev="configfs" ino=43871 res=0 errno=0 [ 696.322348][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 696.328809][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.649527][ T31] audit: type=1800 audit(4294967301.800:41): pid=15471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1559" name="dbroot" dev="configfs" ino=44385 res=0 errno=0 [ 697.978699][T15481] FAULT_INJECTION: forcing a failure. [ 697.978699][T15481] name fail_futex, interval 1, probability 0, space 0, times 0 [ 698.003365][T15481] CPU: 0 UID: 0 PID: 15481 Comm: syz.6.1561 Not tainted syzkaller #0 PREEMPT(full) [ 698.003408][T15481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 698.003426][T15481] Call Trace: [ 698.003436][T15481] [ 698.003448][T15481] dump_stack_lvl+0x16c/0x1f0 [ 698.003487][T15481] should_fail_ex+0x512/0x640 [ 698.003531][T15481] get_futex_key+0x1d0/0x1560 [ 698.003603][T15481] ? __pfx_get_futex_key+0x10/0x10 [ 698.003667][T15481] futex_wake+0xea/0x530 [ 698.003698][T15481] ? __pfx___might_resched+0x10/0x10 [ 698.003752][T15481] ? __pfx_futex_wake+0x10/0x10 [ 698.003787][T15481] ? __sys_sendmmsg+0x35f/0x420 [ 698.003831][T15481] ? __pfx___sys_sendmmsg+0x10/0x10 [ 698.003877][T15481] do_futex+0x1e3/0x350 [ 698.003929][T15481] ? __pfx_do_futex+0x10/0x10 [ 698.003979][T15481] ? fput+0x9b/0xd0 [ 698.004037][T15481] __x64_sys_futex+0x1e0/0x4c0 [ 698.004095][T15481] ? __pfx___x64_sys_futex+0x10/0x10 [ 698.004157][T15481] ? xfd_validate_state+0x61/0x180 [ 698.004203][T15481] do_syscall_64+0xcd/0x4b0 [ 698.004243][T15481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.004279][T15481] RIP: 0033:0x7f069178eec9 [ 698.004307][T15481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.004341][T15481] RSP: 002b:00007f069257c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 698.004373][T15481] RAX: ffffffffffffffda RBX: 00007f06919e5fa8 RCX: 00007f069178eec9 [ 698.004396][T15481] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f06919e5fac [ 698.004416][T15481] RBP: 00007f06919e5fa0 R08: 00007f069257d000 R09: 0000000000000000 [ 698.004436][T15481] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 698.004456][T15481] R13: 00007f06919e6038 R14: 00007ffccf0266e0 R15: 00007ffccf0267c8 [ 698.004499][T15481] [ 698.893954][T15491] FAULT_INJECTION: forcing a failure. [ 698.893954][T15491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.908922][T15491] CPU: 0 UID: 0 PID: 15491 Comm: syz.0.1564 Not tainted syzkaller #0 PREEMPT(full) [ 698.908966][T15491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 698.908988][T15491] Call Trace: [ 698.908999][T15491] [ 698.909012][T15491] dump_stack_lvl+0x16c/0x1f0 [ 698.909054][T15491] should_fail_ex+0x512/0x640 [ 698.909101][T15491] _copy_from_user+0x2e/0xd0 [ 698.909145][T15491] copy_msghdr_from_user+0x98/0x160 [ 698.909183][T15491] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 698.909239][T15491] ? kfree+0x252/0x6d0 [ 698.909284][T15491] ___sys_sendmsg+0xfe/0x1d0 [ 698.909323][T15491] ? __pfx____sys_sendmsg+0x10/0x10 [ 698.909400][T15491] ? __pfx___might_resched+0x10/0x10 [ 698.909452][T15491] __sys_sendmmsg+0x200/0x420 [ 698.909495][T15491] ? __pfx___sys_sendmmsg+0x10/0x10 [ 698.909545][T15491] ? __pfx_do_futex+0x10/0x10 [ 698.909596][T15491] ? fput+0x9b/0xd0 [ 698.909665][T15491] ? xfd_validate_state+0x61/0x180 [ 698.909706][T15491] __x64_sys_sendmmsg+0x9c/0x100 [ 698.909742][T15491] ? lockdep_hardirqs_on+0x7c/0x110 [ 698.909775][T15491] do_syscall_64+0xcd/0x4b0 [ 698.909812][T15491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.909847][T15491] RIP: 0033:0x7fadd518eec9 [ 698.909884][T15491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.909918][T15491] RSP: 002b:00007fadd6076038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 698.909950][T15491] RAX: ffffffffffffffda RBX: 00007fadd53e5fa0 RCX: 00007fadd518eec9 [ 698.909972][T15491] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000007 [ 698.909992][T15491] RBP: 00007fadd5211f91 R08: 0000000000000000 R09: 0000000000000000 [ 698.910013][T15491] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000000 [ 698.910033][T15491] R13: 00007fadd53e6038 R14: 00007fadd53e5fa0 R15: 00007ffd44d09218 [ 698.910076][T15491] [ 700.328525][T15509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1567'. [ 701.642948][T15532] can: request_module (can-proto-0) failed. [ 702.548189][ T31] audit: type=1800 audit(4294967307.700:42): pid=15544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1574" name="discovery_nqn" dev="configfs" ino=44537 res=0 errno=0 [ 703.070244][T15552] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1576'. [ 705.756587][ T31] audit: type=1800 audit(4294967310.910:43): pid=15593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1587" name="discovery_nqn" dev="configfs" ino=45245 res=0 errno=0 [ 707.252439][T15603] can: request_module (can-proto-0) failed. [ 707.342166][T15608] can: request_module (can-proto-0) failed. [ 708.742535][ T31] audit: type=1800 audit(4294967313.900:44): pid=15641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1597" name="discovery_nqn" dev="configfs" ino=44868 res=0 errno=0 [ 709.581369][T15656] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 710.690576][T15680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1607'. [ 710.722078][T15680] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 710.858203][T15685] FAULT_INJECTION: forcing a failure. [ 710.858203][T15685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.875847][T15685] CPU: 1 UID: 0 PID: 15685 Comm: syz.5.1608 Not tainted syzkaller #0 PREEMPT(full) [ 710.875897][T15685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 710.875918][T15685] Call Trace: [ 710.875929][T15685] [ 710.875941][T15685] dump_stack_lvl+0x16c/0x1f0 [ 710.875979][T15685] should_fail_ex+0x512/0x640 [ 710.876023][T15685] _copy_from_iter+0x29f/0x1720 [ 710.876073][T15685] ? __pfx__copy_from_iter+0x10/0x10 [ 710.876111][T15685] ? rcu_is_watching+0x12/0xc0 [ 710.876153][T15685] ? trace_kmalloc+0x2b/0xd0 [ 710.876195][T15685] ? __kmalloc_noprof+0x34f/0x880 [ 710.876229][T15685] ? kernfs_fop_write_iter+0x237/0x570 [ 710.876272][T15685] kernfs_fop_write_iter+0x19a/0x570 [ 710.876312][T15685] vfs_write+0x7d0/0x11d0 [ 710.876352][T15685] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 710.876388][T15685] ? __pfx___mutex_lock+0x10/0x10 [ 710.876423][T15685] ? __pfx_vfs_write+0x10/0x10 [ 710.876491][T15685] ksys_write+0x12a/0x250 [ 710.876530][T15685] ? __pfx_ksys_write+0x10/0x10 [ 710.876584][T15685] do_syscall_64+0xcd/0x4b0 [ 710.876623][T15685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.876655][T15685] RIP: 0033:0x7fcf4698eec9 [ 710.876680][T15685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 710.876710][T15685] RSP: 002b:00007fcf477f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 710.876740][T15685] RAX: ffffffffffffffda RBX: 00007fcf46be5fa0 RCX: 00007fcf4698eec9 [ 710.876761][T15685] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000005 [ 710.876780][T15685] RBP: 00007fcf477f6090 R08: 0000000000000000 R09: 0000000000000000 [ 710.876800][T15685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 710.876819][T15685] R13: 00007fcf46be6038 R14: 00007fcf46be5fa0 R15: 00007ffea05b4918 [ 710.876859][T15685] [ 711.132571][T15689] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1609'. [ 711.192400][T15685] netlink: 280 bytes leftover after parsing attributes in process `syz.5.1608'. [ 711.854061][T15705] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 712.204868][T15717] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1614'. [ 713.418402][T15735] tipc: Started in network mode [ 713.457225][T15735] tipc: Node identity ee00, cluster identity 4711 [ 713.463755][T15735] tipc: Node number set to 60928 [ 713.609504][T15736] Process accounting resumed [ 715.536656][T15780] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1628'. [ 716.291082][T15790] random: crng reseeded on system resumption [ 717.362797][T15812] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1635'. [ 717.725568][T15818] device-mapper: ioctl: Invalid ioctl structure: name þÿÿÿÿÿÿÿ, dev 7 [ 719.645638][ T31] audit: type=1800 audit(4294967324.800:45): pid=15851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1643" name="discovery_nqn" dev="configfs" ino=46428 res=0 errno=0 [ 720.931821][T15864] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1646'. [ 722.121472][ T31] audit: type=1800 audit(4294967327.280:46): pid=15884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1652" name="discovery_nqn" dev="configfs" ino=45997 res=0 errno=0 [ 723.461711][T15902] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1656'. [ 724.248168][T15918] FAULT_INJECTION: forcing a failure. [ 724.248168][T15918] name failslab, interval 1, probability 0, space 0, times 0 [ 724.279475][T15918] CPU: 1 UID: 0 PID: 15918 Comm: syz.6.1660 Not tainted syzkaller #0 PREEMPT(full) [ 724.279525][T15918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 724.279547][T15918] Call Trace: [ 724.279558][T15918] [ 724.279571][T15918] dump_stack_lvl+0x16c/0x1f0 [ 724.279615][T15918] should_fail_ex+0x512/0x640 [ 724.279657][T15918] ? __kmalloc_noprof+0xca/0x880 [ 724.279696][T15918] should_failslab+0xc2/0x120 [ 724.279747][T15918] __kmalloc_noprof+0xdd/0x880 [ 724.279783][T15918] ? lsm_blob_alloc+0x68/0x90 [ 724.279822][T15918] ? lsm_blob_alloc+0x68/0x90 [ 724.279851][T15918] lsm_blob_alloc+0x68/0x90 [ 724.279885][T15918] security_sk_alloc+0x30/0x270 [ 724.279940][T15918] sk_prot_alloc+0xfb/0x2a0 [ 724.279990][T15918] sk_alloc+0x36/0xc20 [ 724.280025][T15918] tipc_sk_create+0xcf/0x21a0 [ 724.280087][T15918] ? find_held_lock+0x2b/0x80 [ 724.280130][T15918] ? __sock_create+0x2f2/0x8d0 [ 724.280180][T15918] __sock_create+0x335/0x8d0 [ 724.280233][T15918] __sys_socket+0x14d/0x260 [ 724.280283][T15918] ? __pfx___sys_socket+0x10/0x10 [ 724.280333][T15918] ? xfd_validate_state+0x61/0x180 [ 724.280384][T15918] __x64_sys_socket+0x72/0xb0 [ 724.280437][T15918] ? lockdep_hardirqs_on+0x7c/0x110 [ 724.280472][T15918] do_syscall_64+0xcd/0x4b0 [ 724.280512][T15918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.280548][T15918] RIP: 0033:0x7f069178eec9 [ 724.280576][T15918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 724.280610][T15918] RSP: 002b:00007f069257c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 724.280644][T15918] RAX: ffffffffffffffda RBX: 00007f06919e5fa0 RCX: 00007f069178eec9 [ 724.280668][T15918] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 724.280688][T15918] RBP: 00007f0691811f91 R08: 0000000000000000 R09: 0000000000000000 [ 724.280708][T15918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 724.280729][T15918] R13: 00007f06919e6038 R14: 00007f06919e5fa0 R15: 00007ffccf0267c8 [ 724.280773][T15918] [ 724.824321][ T31] audit: type=1800 audit(4294967329.970:47): pid=15929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1662" name="discovery_nqn" dev="configfs" ino=46604 res=0 errno=0 [ 726.020991][T15959] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1666'. [ 726.443437][T15969] FAULT_INJECTION: forcing a failure. [ 726.443437][T15969] name failslab, interval 1, probability 0, space 0, times 0 [ 726.482592][T15969] CPU: 0 UID: 0 PID: 15969 Comm: syz.4.1668 Not tainted syzkaller #0 PREEMPT(full) [ 726.482635][T15969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 726.482655][T15969] Call Trace: [ 726.482665][T15969] [ 726.482677][T15969] dump_stack_lvl+0x16c/0x1f0 [ 726.482715][T15969] should_fail_ex+0x512/0x640 [ 726.482751][T15969] ? fs_reclaim_acquire+0xae/0x150 [ 726.482803][T15969] should_failslab+0xc2/0x120 [ 726.482849][T15969] __kmalloc_noprof+0xdd/0x880 [ 726.482880][T15969] ? tomoyo_encode2+0x100/0x3e0 [ 726.482934][T15969] ? tomoyo_encode2+0x100/0x3e0 [ 726.482981][T15969] tomoyo_encode2+0x100/0x3e0 [ 726.483036][T15969] tomoyo_encode+0x29/0x50 [ 726.483082][T15969] tomoyo_realpath_from_path+0x18f/0x6e0 [ 726.483145][T15969] tomoyo_path_number_perm+0x245/0x580 [ 726.483186][T15969] ? tomoyo_path_number_perm+0x237/0x580 [ 726.483231][T15969] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 726.483283][T15969] ? find_held_lock+0x2b/0x80 [ 726.483363][T15969] ? find_held_lock+0x2b/0x80 [ 726.483401][T15969] ? hook_file_ioctl_common+0x145/0x410 [ 726.483455][T15969] ? __fget_files+0x20e/0x3c0 [ 726.483499][T15969] security_file_ioctl+0x9b/0x240 [ 726.483552][T15969] __x64_sys_ioctl+0xb7/0x210 [ 726.483607][T15969] do_syscall_64+0xcd/0x4b0 [ 726.483645][T15969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.483677][T15969] RIP: 0033:0x7f024ff8eec9 [ 726.483702][T15969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.483732][T15969] RSP: 002b:00007f0250e4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 726.483762][T15969] RAX: ffffffffffffffda RBX: 00007f02501e5fa0 RCX: 00007f024ff8eec9 [ 726.483784][T15969] RDX: 00002000000000c0 RSI: 0000000040187542 RDI: 0000000000000004 [ 726.483804][T15969] RBP: 00007f0250e4d090 R08: 0000000000000000 R09: 0000000000000000 [ 726.483824][T15969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.483843][T15969] R13: 00007f02501e6038 R14: 00007f02501e5fa0 R15: 00007ffe4a20d348 [ 726.483885][T15969] [ 726.695728][T15969] ERROR: Out of memory at tomoyo_realpath_from_path. [ 727.924392][ T31] audit: type=1800 audit(4294967333.080:48): pid=15998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1673" name="discovery_nqn" dev="configfs" ino=47304 res=0 errno=0 [ 728.589765][T16001] sg_write: data in/out 2359516/83 bytes for SCSI command 0x0-- guessing data in; [ 728.589765][T16001] program syz.4.1672 not setting count and/or reply_len properly [ 729.149144][T16018] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1677'. [ 730.487828][T13634] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 731.289013][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 731.303239][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 731.317004][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 731.328463][T16055] futex_wake_op: syz.6.1685 tries to shift op by -2048; fix this program [ 731.338488][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 731.346218][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 731.353814][T16055] futex_wake_op: syz.6.1685 tries to shift op by -2048; fix this program [ 731.443380][T16055] ptp ptp0: new virtual clock ptp1 [ 731.471474][T16055] ptp ptp0: new virtual clock ptp2 [ 731.487124][T16055] ptp ptp0: new virtual clock ptp3 [ 731.492325][T16055] ptp ptp0: guarantee physical clock free running [ 732.426211][T16070] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 732.556854][ T51] Bluetooth: hci4: command tx timeout [ 732.837309][T16059] chnl_net:caif_netlink_parms(): no params data found [ 732.933869][T16097] netlink: 146 bytes leftover after parsing attributes in process `syz.4.1690'. [ 732.981356][ T31] audit: type=1800 audit(4294967338.140:49): pid=16095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1691" name="discovery_nqn" dev="configfs" ino=47492 res=0 errno=0 [ 733.180911][T16090] FAULT_INJECTION: forcing a failure. [ 733.180911][T16090] name failslab, interval 1, probability 0, space 0, times 0 [ 733.196984][T16090] CPU: 0 UID: 0 PID: 16090 Comm: syz.4.1690 Not tainted syzkaller #0 PREEMPT(full) [ 733.197025][T16090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 733.197044][T16090] Call Trace: [ 733.197053][T16090] [ 733.197065][T16090] dump_stack_lvl+0x16c/0x1f0 [ 733.197103][T16090] should_fail_ex+0x512/0x640 [ 733.197139][T16090] ? __kmalloc_noprof+0xca/0x880 [ 733.197177][T16090] should_failslab+0xc2/0x120 [ 733.197234][T16090] __kmalloc_noprof+0xdd/0x880 [ 733.197266][T16090] ? do_sys_poll+0x24a/0xdf0 [ 733.197305][T16090] ? do_sys_poll+0x24a/0xdf0 [ 733.197336][T16090] do_sys_poll+0x24a/0xdf0 [ 733.197367][T16090] ? is_bpf_text_address+0x94/0x1a0 [ 733.197418][T16090] ? kernel_text_address+0x8d/0x100 [ 733.197455][T16090] ? __kernel_text_address+0xd/0x40 [ 733.197492][T16090] ? arch_stack_walk+0xa6/0x100 [ 733.197533][T16090] ? __pfx_do_sys_poll+0x10/0x10 [ 733.197566][T16090] ? __lock_acquire+0x62e/0x1ce0 [ 733.197654][T16090] ? __lock_acquire+0x62e/0x1ce0 [ 733.197781][T16090] ? __pfx_timespec64_add_safe+0x10/0x10 [ 733.197833][T16090] ? ktime_get_ts64+0x2d2/0x400 [ 733.197883][T16090] ? read_tsc+0x9/0x20 [ 733.197921][T16090] ? ktime_get_ts64+0x256/0x400 [ 733.197979][T16090] __x64_sys_poll+0x1a6/0x450 [ 733.198015][T16090] ? __pfx___x64_sys_poll+0x10/0x10 [ 733.198063][T16090] do_syscall_64+0xcd/0x4b0 [ 733.198100][T16090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.198131][T16090] RIP: 0033:0x7f024ff8eec9 [ 733.198156][T16090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 733.198186][T16090] RSP: 002b:00007f0250e2c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 733.198224][T16090] RAX: ffffffffffffffda RBX: 00007f02501e6090 RCX: 00007f024ff8eec9 [ 733.198245][T16090] RDX: 0000000000000004 RSI: 0000000000000081 RDI: 0000200000000000 [ 733.198265][T16090] RBP: 00007f0250e2c090 R08: 0000000000000000 R09: 0000000000000000 [ 733.198285][T16090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.198304][T16090] R13: 00007f02501e6128 R14: 00007f02501e6090 R15: 00007ffe4a20d348 [ 733.198346][T16090] [ 733.479593][ T51] Bluetooth: hci7: command tx timeout [ 734.216195][T16059] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.232028][T16059] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.239704][T16059] bridge_slave_0: entered allmulticast mode [ 734.273339][T16059] bridge_slave_0: entered promiscuous mode [ 734.286573][T16059] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.297567][T16059] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.305034][T16059] bridge_slave_1: entered allmulticast mode [ 734.314427][T16059] bridge_slave_1: entered promiscuous mode [ 734.688316][T16059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.743352][T16059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.942446][T16059] team0: Port device team_slave_0 added [ 735.018622][T16059] team0: Port device team_slave_1 added [ 735.120963][ T31] audit: type=1800 audit(4294967340.260:50): pid=16119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1696" name="discovery_nqn" dev="configfs" ino=47067 res=0 errno=0 [ 735.219844][T16059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.228235][T16059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.271735][T16059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 735.303401][T16059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.310579][T16059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.342496][T16059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.459357][ T51] Bluetooth: hci6: unexpected subevent 0x01 length: 123 > 18 [ 735.517854][ T51] Bluetooth: hci7: command tx timeout [ 735.581495][T16125] FAULT_INJECTION: forcing a failure. [ 735.581495][T16125] name failslab, interval 1, probability 0, space 0, times 0 [ 735.595842][T16125] CPU: 0 UID: 0 PID: 16125 Comm: syz.5.1696 Not tainted syzkaller #0 PREEMPT(full) [ 735.595896][T16125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 735.595917][T16125] Call Trace: [ 735.595929][T16125] [ 735.595942][T16125] dump_stack_lvl+0x16c/0x1f0 [ 735.595985][T16125] should_fail_ex+0x512/0x640 [ 735.596023][T16125] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 735.596069][T16125] should_failslab+0xc2/0x120 [ 735.596119][T16125] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 735.596161][T16125] ? shmem_alloc_inode+0x25/0x50 [ 735.596216][T16125] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 735.596262][T16125] ? shmem_alloc_inode+0x25/0x50 [ 735.596309][T16125] shmem_alloc_inode+0x25/0x50 [ 735.596355][T16125] alloc_inode+0x64/0x240 [ 735.596407][T16125] new_inode+0x22/0x1c0 [ 735.596454][T16125] ? trace_cap_capable+0x18d/0x200 [ 735.596497][T16125] shmem_get_inode+0x19a/0xfb0 [ 735.596551][T16125] ? __vm_enough_memory+0x184/0x3f0 [ 735.596607][T16125] __shmem_file_setup+0x279/0x330 [ 735.596642][T16125] shmem_zero_setup+0x93/0x1a0 [ 735.596685][T16125] __mmap_region+0x2076/0x27a0 [ 735.596729][T16125] ? __pfx___mmap_region+0x10/0x10 [ 735.596766][T16125] ? finish_task_switch.isra.0+0x21c/0xc10 [ 735.596811][T16125] ? rcu_is_watching+0x12/0xc0 [ 735.596851][T16125] ? finish_task_switch.isra.0+0x221/0xc10 [ 735.596900][T16125] ? lockdep_hardirqs_on+0x7c/0x110 [ 735.596933][T16125] ? finish_task_switch.isra.0+0x221/0xc10 [ 735.597012][T16125] ? __pfx___schedule+0x10/0x10 [ 735.597114][T16125] ? trace_cap_capable+0x18d/0x200 [ 735.597166][T16125] mmap_region+0x1ab/0x3f0 [ 735.597203][T16125] ? __get_unmapped_area+0x267/0x440 [ 735.597255][T16125] do_mmap+0xa3e/0x1210 [ 735.597310][T16125] ? __pfx_do_mmap+0x10/0x10 [ 735.597358][T16125] ? __pfx_down_write_killable+0x10/0x10 [ 735.597408][T16125] vm_mmap_pgoff+0x29e/0x470 [ 735.597464][T16125] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 735.597521][T16125] ? __x64_sys_futex+0x1e0/0x4c0 [ 735.597571][T16125] ? __x64_sys_futex+0x1e9/0x4c0 [ 735.597629][T16125] ksys_mmap_pgoff+0x7d/0x5c0 [ 735.597674][T16125] ? xfd_validate_state+0x61/0x180 [ 735.597703][T16125] ? __pfx_do_pwritev+0x10/0x10 [ 735.597747][T16125] __x64_sys_mmap+0x125/0x190 [ 735.597786][T16125] do_syscall_64+0xcd/0x4b0 [ 735.597826][T16125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.597866][T16125] RIP: 0033:0x7fcf4698eec9 [ 735.597894][T16125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.597929][T16125] RSP: 002b:00007fcf477d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 735.597962][T16125] RAX: ffffffffffffffda RBX: 00007fcf46be6090 RCX: 00007fcf4698eec9 [ 735.597985][T16125] RDX: fffffffffffffff8 RSI: 0000000002020009 RDI: 0000000000000000 [ 735.598006][T16125] RBP: 00007fcf46a11f91 R08: fffffffffffffffa R09: 0000000000008000 [ 735.598028][T16125] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 735.598049][T16125] R13: 00007fcf46be6128 R14: 00007fcf46be6090 R15: 00007ffea05b4918 [ 735.598093][T16125] [ 736.063865][T16059] hsr_slave_0: entered promiscuous mode [ 736.076465][T16059] hsr_slave_1: entered promiscuous mode [ 736.083278][T16059] debugfs: 'hsr0' already exists in 'hsr' [ 736.089115][T16059] Cannot create hsr debugfs directory [ 737.538276][ T51] Bluetooth: hci6: command tx timeout [ 737.606745][ T51] Bluetooth: hci7: command tx timeout [ 737.855521][T16059] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 737.952308][T16059] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 737.986275][T16059] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 738.013304][T16059] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 738.545660][T16059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.612737][T16059] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.665481][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.672771][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.859775][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.866966][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.320266][T16059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 739.676836][ T51] Bluetooth: hci7: command tx timeout [ 740.249352][T16059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.325942][T16059] veth0_vlan: entered promiscuous mode [ 741.405046][T16059] veth1_vlan: entered promiscuous mode [ 741.698155][T16059] veth0_macvtap: entered promiscuous mode [ 741.737727][T16059] veth1_macvtap: entered promiscuous mode [ 741.814242][T16059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.953886][T16059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 741.997222][ T49] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.028076][ T49] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.113095][ T49] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.124532][ T49] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.487876][T16209] random: crng reseeded on system resumption [ 742.516713][ T3516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.543081][ T3516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 742.773388][ T2136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 742.863383][ T2136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.164112][ T31] audit: type=1800 audit(4294967348.320:51): pid=16217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1715" name="discovery_nqn" dev="configfs" ino=48523 res=0 errno=0 [ 744.885000][T16226] Process accounting paused [ 747.539463][T16294] FAULT_INJECTION: forcing a failure. [ 747.539463][T16294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 747.573664][T16294] CPU: 0 UID: 0 PID: 16294 Comm: syz.6.1725 Not tainted syzkaller #0 PREEMPT(full) [ 747.573707][T16294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 747.573726][T16294] Call Trace: [ 747.573735][T16294] [ 747.573745][T16294] dump_stack_lvl+0x16c/0x1f0 [ 747.573783][T16294] should_fail_ex+0x512/0x640 [ 747.573833][T16294] _copy_to_user+0x32/0xd0 [ 747.573874][T16294] __sys_bpf+0x358a/0x4980 [ 747.573916][T16294] ? __pfx___sys_bpf+0x10/0x10 [ 747.573951][T16294] ? find_held_lock+0x2b/0x80 [ 747.574000][T16294] ? vfs_write+0x15d/0x11d0 [ 747.574047][T16294] ? __pfx_vfs_write+0x10/0x10 [ 747.574114][T16294] ? ksys_write+0x1ac/0x250 [ 747.574150][T16294] ? __pfx_ksys_write+0x10/0x10 [ 747.574197][T16294] __x64_sys_bpf+0x78/0xc0 [ 747.574234][T16294] ? lockdep_hardirqs_on+0x7c/0x110 [ 747.574266][T16294] do_syscall_64+0xcd/0x4b0 [ 747.574304][T16294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.574338][T16294] RIP: 0033:0x7f069178eec9 [ 747.574364][T16294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.574396][T16294] RSP: 002b:00007f069257c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 747.574427][T16294] RAX: ffffffffffffffda RBX: 00007f06919e5fa0 RCX: 00007f069178eec9 [ 747.574448][T16294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000015 [ 747.574467][T16294] RBP: 00007f069257c090 R08: 0000000000000000 R09: 0000000000000000 [ 747.574486][T16294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 747.574506][T16294] R13: 00007f06919e6038 R14: 00007f06919e5fa0 R15: 00007ffccf0267c8 [ 747.574548][T16294] [ 747.937911][T16297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1726'. [ 748.490488][ T31] audit: type=1800 audit(4294967353.640:52): pid=16313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1730" name="discovery_nqn" dev="configfs" ino=49284 res=0 errno=0 [ 749.804122][T16324] FAULT_INJECTION: forcing a failure. [ 749.804122][T16324] name fail_futex, interval 1, probability 0, space 0, times 0 [ 749.837553][T16324] CPU: 1 UID: 0 PID: 16324 Comm: syz.5.1733 Not tainted syzkaller #0 PREEMPT(full) [ 749.837584][T16324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 749.837600][T16324] Call Trace: [ 749.837607][T16324] [ 749.837615][T16324] dump_stack_lvl+0x16c/0x1f0 [ 749.837654][T16324] should_fail_ex+0x512/0x640 [ 749.837686][T16324] get_futex_key+0x1d0/0x1560 [ 749.837725][T16324] ? __pfx_get_futex_key+0x10/0x10 [ 749.837761][T16324] ? __destroy_inode+0x2e4/0x730 [ 749.837793][T16324] ? __pfx_sock_free_inode+0x10/0x10 [ 749.837828][T16324] futex_wake+0xea/0x530 [ 749.837852][T16324] ? __pfx_evict+0x10/0x10 [ 749.837884][T16324] ? __pfx_futex_wake+0x10/0x10 [ 749.837920][T16324] do_futex+0x1e3/0x350 [ 749.837956][T16324] ? __pfx_do_futex+0x10/0x10 [ 749.837990][T16324] ? iput+0x35/0x40 [ 749.838019][T16324] ? __sock_release+0x20b/0x270 [ 749.838052][T16324] __x64_sys_futex+0x1e0/0x4c0 [ 749.838090][T16324] ? __sys_socket+0xac/0x260 [ 749.838124][T16324] ? __pfx___x64_sys_futex+0x10/0x10 [ 749.838161][T16324] ? xfd_validate_state+0x61/0x180 [ 749.838180][T16324] ? __pfx_ksys_write+0x10/0x10 [ 749.838217][T16324] do_syscall_64+0xcd/0x4b0 [ 749.838244][T16324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.838268][T16324] RIP: 0033:0x7fcf4698eec9 [ 749.838286][T16324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 749.838310][T16324] RSP: 002b:00007fcf477f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 749.838332][T16324] RAX: ffffffffffffffda RBX: 00007fcf46be5fa8 RCX: 00007fcf4698eec9 [ 749.838348][T16324] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcf46be5fac [ 749.838363][T16324] RBP: 00007fcf46be5fa0 R08: 00007fcf477f7000 R09: 0000000000000000 [ 749.838378][T16324] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 749.838393][T16324] R13: 00007fcf46be6038 R14: 00007ffea05b4830 R15: 00007ffea05b4918 [ 749.838422][T16324] [ 750.897423][T16342] queue_state_write: operation too long [ 750.917209][T16342] queue_state_write: use 'run', 'start' or 'kick' [ 751.387944][T16348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1735'. [ 753.350339][T16398] netlink: 246 bytes leftover after parsing attributes in process `syz.4.1748'. [ 754.128395][ T31] audit: type=1800 audit(4294967359.280:53): pid=16411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1751" name="members" dev="configfs" ino=48980 res=0 errno=0 [ 754.267346][T16414] vivid-007: ================= START STATUS ================= [ 754.321711][T16414] vivid-007: Generate PTS: true [ 754.327131][T16414] vivid-007: Generate SCR: true [ 754.333616][T16414] tpg source WxH: 320x240 (Y'CbCr) [ 754.339717][T16414] tpg field: 1 [ 754.343988][T16414] tpg crop: (0,0)/320x240 [ 754.351866][T16414] tpg compose: (0,0)/320x240 [ 754.376536][T16414] tpg colorspace: 8 [ 754.385610][T16414] tpg transfer function: 0/0 [ 754.397158][T16414] tpg Y'CbCr encoding: 0/0 [ 754.397193][T16414] tpg quantization: 0/0 [ 754.397209][T16414] tpg RGB range: 0/2 [ 754.397225][T16414] vivid-007: ================== END STATUS ================== [ 754.470156][T16422] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 754.790269][T16426] netlink: 'syz.7.1755': attribute type 1 has an invalid length. [ 754.961165][T16430] netlink: 186 bytes leftover after parsing attributes in process `syz.7.1755'. [ 755.363443][T16435] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 755.604822][ T31] audit: type=1800 audit(4294967360.760:54): pid=16437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1758" name="discovery_nqn" dev="configfs" ino=49136 res=0 errno=0 [ 755.997636][T16444] FAULT_INJECTION: forcing a failure. [ 755.997636][T16444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 756.046973][T16444] CPU: 0 UID: 0 PID: 16444 Comm: syz.5.1760 Not tainted syzkaller #0 PREEMPT(full) [ 756.047015][T16444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 756.047046][T16444] Call Trace: [ 756.047057][T16444] [ 756.047069][T16444] dump_stack_lvl+0x16c/0x1f0 [ 756.047109][T16444] should_fail_ex+0x512/0x640 [ 756.047152][T16444] _copy_from_iter+0x29f/0x1720 [ 756.047196][T16444] ? __alloc_skb+0x200/0x380 [ 756.047229][T16444] ? __pfx__copy_from_iter+0x10/0x10 [ 756.047271][T16444] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 756.047307][T16444] ? __lock_acquire+0xb97/0x1ce0 [ 756.047368][T16444] netlink_sendmsg+0x820/0xdd0 [ 756.047412][T16444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 756.047456][T16444] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 756.047500][T16444] ____sys_sendmsg+0xa95/0xc70 [ 756.047547][T16444] ? copy_msghdr_from_user+0x10a/0x160 [ 756.047582][T16444] ? __pfx_____sys_sendmsg+0x10/0x10 [ 756.047647][T16444] ___sys_sendmsg+0x134/0x1d0 [ 756.047684][T16444] ? __pfx____sys_sendmsg+0x10/0x10 [ 756.047770][T16444] __sys_sendmsg+0x16d/0x220 [ 756.047807][T16444] ? __pfx___sys_sendmsg+0x10/0x10 [ 756.047868][T16444] do_syscall_64+0xcd/0x4b0 [ 756.047904][T16444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.047935][T16444] RIP: 0033:0x7fcf4698eec9 [ 756.047958][T16444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.047989][T16444] RSP: 002b:00007fcf477f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 756.048024][T16444] RAX: ffffffffffffffda RBX: 00007fcf46be5fa0 RCX: 00007fcf4698eec9 [ 756.048044][T16444] RDX: 0000000000064810 RSI: 0000200000000180 RDI: 0000000000000003 [ 756.048065][T16444] RBP: 00007fcf477f6090 R08: 0000000000000000 R09: 0000000000000000 [ 756.048084][T16444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.048104][T16444] R13: 00007fcf46be6038 R14: 00007fcf46be5fa0 R15: 00007ffea05b4918 [ 756.048146][T16444] [ 756.414583][T16456] netlink: 280 bytes leftover after parsing attributes in process `syz.5.1764'. [ 756.473433][T16452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1765'. [ 756.492650][T16454] FAULT_INJECTION: forcing a failure. [ 756.492650][T16454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 756.502866][T16452] HfR: entered promiscuous mode [ 756.548493][T16454] CPU: 0 UID: 0 PID: 16454 Comm: syz.7.1763 Not tainted syzkaller #0 PREEMPT(full) [ 756.548536][T16454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 756.548555][T16454] Call Trace: [ 756.548565][T16454] [ 756.548577][T16454] dump_stack_lvl+0x16c/0x1f0 [ 756.548617][T16454] should_fail_ex+0x512/0x640 [ 756.548660][T16454] _copy_to_user+0x32/0xd0 [ 756.548703][T16454] simple_read_from_buffer+0xcb/0x170 [ 756.548738][T16454] proc_fail_nth_read+0x197/0x240 [ 756.548777][T16454] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 756.548818][T16454] ? rw_verify_area+0xcf/0x6c0 [ 756.548851][T16454] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 756.548888][T16454] vfs_read+0x1e4/0xcf0 [ 756.548929][T16454] ? __pfx___mutex_lock+0x10/0x10 [ 756.548963][T16454] ? __pfx_vfs_read+0x10/0x10 [ 756.549014][T16454] ? __fget_files+0x20e/0x3c0 [ 756.549077][T16454] ksys_read+0x12a/0x250 [ 756.549115][T16454] ? __pfx_ksys_read+0x10/0x10 [ 756.549166][T16454] do_syscall_64+0xcd/0x4b0 [ 756.549204][T16454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.549236][T16454] RIP: 0033:0x7fec7958d8dc [ 756.549261][T16454] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 756.549293][T16454] RSP: 002b:00007fec7a3f3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 756.549323][T16454] RAX: ffffffffffffffda RBX: 00007fec797e5fa0 RCX: 00007fec7958d8dc [ 756.549344][T16454] RDX: 000000000000000f RSI: 00007fec7a3f30a0 RDI: 0000000000000006 [ 756.549363][T16454] RBP: 00007fec7a3f3090 R08: 0000000000000000 R09: 0000000000000000 [ 756.549382][T16454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.549400][T16454] R13: 00007fec797e6038 R14: 00007fec797e5fa0 R15: 00007ffeb7c2fd78 [ 756.549443][T16454] [ 757.278639][ T31] audit: type=1800 audit(4294967362.400:55): pid=16470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1769" name="discovery_nqn" dev="configfs" ino=49664 res=0 errno=0 [ 757.401556][T16469] tipc: Started in network mode [ 757.423960][T16469] tipc: Node identity ee00, cluster identity 4711 [ 757.443469][T16469] tipc: Node number set to 60928 [ 757.454809][T16473] netlink: 252 bytes leftover after parsing attributes in process `syz.6.1771'. [ 757.469532][T16473] netlink: 252 bytes leftover after parsing attributes in process `syz.6.1771'. [ 757.762100][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.769141][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 758.065916][T16467] Process accounting resumed [ 759.278955][T16494] zswap: compressor not available [ 760.019118][ T31] audit: type=1800 audit(4294967365.180:56): pid=16506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1780" name="discovery_nqn" dev="configfs" ino=50300 res=0 errno=0 [ 762.322479][ T51] Bluetooth: hci6: SCO packet too small [ 764.172619][T16553] random: crng reseeded on system resumption [ 767.741004][ T31] audit: type=1800 audit(4294967372.900:57): pid=16579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1798" name="discovery_nqn" dev="configfs" ino=50462 res=0 errno=0 [ 768.435912][T16587] FAULT_INJECTION: forcing a failure. [ 768.435912][T16587] name failslab, interval 1, probability 0, space 0, times 0 [ 768.452158][T16587] CPU: 1 UID: 0 PID: 16587 Comm: syz.7.1800 Not tainted syzkaller #0 PREEMPT(full) [ 768.452200][T16587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 768.452218][T16587] Call Trace: [ 768.452228][T16587] [ 768.452240][T16587] dump_stack_lvl+0x16c/0x1f0 [ 768.452276][T16587] should_fail_ex+0x512/0x640 [ 768.452308][T16587] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 768.452345][T16587] should_failslab+0xc2/0x120 [ 768.452385][T16587] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 768.452419][T16587] ? __d_alloc+0x32/0xae0 [ 768.452460][T16587] ? __d_alloc+0x32/0xae0 [ 768.452492][T16587] __d_alloc+0x32/0xae0 [ 768.452531][T16587] d_alloc_pseudo+0x1c/0xc0 [ 768.452573][T16587] alloc_file_pseudo+0xcf/0x230 [ 768.452618][T16587] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 768.452663][T16587] ? alloc_fd+0x471/0x7d0 [ 768.452700][T16587] sock_alloc_file+0x50/0x210 [ 768.452734][T16587] __sys_socket+0x1c0/0x260 [ 768.452775][T16587] ? __pfx___sys_socket+0x10/0x10 [ 768.452817][T16587] ? xfd_validate_state+0x61/0x180 [ 768.452851][T16587] __x64_sys_socket+0x72/0xb0 [ 768.452891][T16587] ? lockdep_hardirqs_on+0x7c/0x110 [ 768.452928][T16587] do_syscall_64+0xcd/0x4b0 [ 768.452962][T16587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.452991][T16587] RIP: 0033:0x7fec7958eec9 [ 768.453014][T16587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 768.453042][T16587] RSP: 002b:00007fec7a3f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 768.453069][T16587] RAX: ffffffffffffffda RBX: 00007fec797e5fa0 RCX: 00007fec7958eec9 [ 768.453089][T16587] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 768.453105][T16587] RBP: 00007fec79611f91 R08: 0000000000000000 R09: 0000000000000000 [ 768.453122][T16587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 768.453139][T16587] R13: 00007fec797e6038 R14: 00007fec797e5fa0 R15: 00007ffeb7c2fd78 [ 768.453174][T16587] [ 769.061459][T16592] FAULT_INJECTION: forcing a failure. [ 769.061459][T16592] name failslab, interval 1, probability 0, space 0, times 0 [ 769.079172][T16592] CPU: 1 UID: 0 PID: 16592 Comm: syz.7.1801 Not tainted syzkaller #0 PREEMPT(full) [ 769.079217][T16592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 769.079237][T16592] Call Trace: [ 769.079248][T16592] [ 769.079260][T16592] dump_stack_lvl+0x16c/0x1f0 [ 769.079301][T16592] should_fail_ex+0x512/0x640 [ 769.079339][T16592] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 769.079380][T16592] should_failslab+0xc2/0x120 [ 769.079428][T16592] kmem_cache_alloc_noprof+0x75/0x6e0 [ 769.079465][T16592] ? sk_prot_alloc+0x60/0x2a0 [ 769.079517][T16592] ? sk_prot_alloc+0x60/0x2a0 [ 769.079557][T16592] sk_prot_alloc+0x60/0x2a0 [ 769.079603][T16592] sk_alloc+0x36/0xc20 [ 769.079636][T16592] tipc_sk_create+0xcf/0x21a0 [ 769.079693][T16592] ? find_held_lock+0x2b/0x80 [ 769.079733][T16592] ? __sock_create+0x2f2/0x8d0 [ 769.079785][T16592] __sock_create+0x335/0x8d0 [ 769.079847][T16592] __sys_socket+0x14d/0x260 [ 769.079896][T16592] ? __pfx___sys_socket+0x10/0x10 [ 769.079944][T16592] ? xfd_validate_state+0x61/0x180 [ 769.079982][T16592] __x64_sys_socket+0x72/0xb0 [ 769.080028][T16592] ? lockdep_hardirqs_on+0x7c/0x110 [ 769.080060][T16592] do_syscall_64+0xcd/0x4b0 [ 769.080099][T16592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.080134][T16592] RIP: 0033:0x7fec7958eec9 [ 769.080160][T16592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.080193][T16592] RSP: 002b:00007fec7a3f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 769.080225][T16592] RAX: ffffffffffffffda RBX: 00007fec797e5fa0 RCX: 00007fec7958eec9 [ 769.080247][T16592] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 769.080267][T16592] RBP: 00007fec79611f91 R08: 0000000000000000 R09: 0000000000000000 [ 769.080287][T16592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 769.080307][T16592] R13: 00007fec797e6038 R14: 00007fec797e5fa0 R15: 00007ffeb7c2fd78 [ 769.080350][T16592] [ 770.577687][T16608] random: crng reseeded on system resumption [ 772.490959][T16636] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(16) [ 772.508610][T13634] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 772.519702][T13634] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 772.529031][T13634] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 772.539664][T13634] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 772.549593][T13634] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 773.695250][ T51] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 773.704452][ T51] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 773.713238][ T51] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 773.723474][ T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 773.732564][ T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 773.843472][T16635] chnl_net:caif_netlink_parms(): no params data found [ 774.637063][ T51] Bluetooth: hci8: command tx timeout [ 775.024808][T16635] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.055563][T16635] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.077930][T16635] bridge_slave_0: entered allmulticast mode [ 775.090791][T16635] bridge_slave_0: entered promiscuous mode [ 775.250956][T16635] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.283812][T16635] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.294832][T16635] bridge_slave_1: entered allmulticast mode [ 775.303770][T16635] bridge_slave_1: entered promiscuous mode [ 775.561969][T16635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.593794][T16635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.748126][T16646] chnl_net:caif_netlink_parms(): no params data found [ 775.757624][ T51] Bluetooth: hci9: command tx timeout [ 775.768497][T16635] team0: Port device team_slave_0 added [ 775.793945][T16635] team0: Port device team_slave_1 added [ 775.903928][T16635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.914477][T16635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 775.949993][T16635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.986818][T16635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.993847][T16635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 776.024389][T16635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.123741][T16660] Process accounting resumed [ 776.349898][T16646] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.357434][T16646] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.364750][T16646] bridge_slave_0: entered allmulticast mode [ 776.377993][T16646] bridge_slave_0: entered promiscuous mode [ 776.416320][T16646] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.425562][T16646] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.433309][T16646] bridge_slave_1: entered allmulticast mode [ 776.443087][T16646] bridge_slave_1: entered promiscuous mode [ 776.503840][T16635] hsr_slave_0: entered promiscuous mode [ 776.518685][T16635] hsr_slave_1: entered promiscuous mode [ 776.527725][T16635] debugfs: 'hsr0' already exists in 'hsr' [ 776.533512][T16635] Cannot create hsr debugfs directory [ 776.625484][T16646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.720851][T16646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.720919][ T51] Bluetooth: hci8: command tx timeout [ 776.762241][T16667] kexec: Could not allocate control_code_buffer [ 776.980663][T16646] team0: Port device team_slave_0 added [ 777.002319][T16646] team0: Port device team_slave_1 added [ 777.149440][T16646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.156465][T16646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.235658][T16646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.324025][T16646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.340330][T16646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.369599][T16646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.435625][T16690] ptrace attach of "./syz-executor exec"[16059] was attempted by ""[16690] [ 777.458904][T16688] netlink: 206 bytes leftover after parsing attributes in process `syz.6.1821'. [ 777.659820][T16646] hsr_slave_0: entered promiscuous mode [ 777.667301][T16646] hsr_slave_1: entered promiscuous mode [ 777.687057][T16646] debugfs: 'hsr0' already exists in 'hsr' [ 777.692998][T16646] Cannot create hsr debugfs directory [ 777.836848][ T51] Bluetooth: hci9: command tx timeout [ 777.927372][T16635] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 777.985110][T16635] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 778.014054][T16635] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 778.028250][T16635] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 778.405030][T16646] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 778.439399][T16646] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 778.499871][T16646] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 778.549056][T16646] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 778.669584][T16705] FAULT_INJECTION: forcing a failure. [ 778.669584][T16705] name failslab, interval 1, probability 0, space 0, times 0 [ 778.692518][T16635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.700100][T16705] CPU: 0 UID: 0 PID: 16705 Comm: syz.7.1823 Not tainted syzkaller #0 PREEMPT(full) [ 778.700146][T16705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 778.700168][T16705] Call Trace: [ 778.700179][T16705] [ 778.700193][T16705] dump_stack_lvl+0x16c/0x1f0 [ 778.700235][T16705] should_fail_ex+0x512/0x640 [ 778.700273][T16705] ? __kmalloc_cache_noprof+0x5f/0x780 [ 778.700315][T16705] should_failslab+0xc2/0x120 [ 778.700366][T16705] __kmalloc_cache_noprof+0x72/0x780 [ 778.700413][T16705] ? copy_cgroup_ns+0x207/0x6b0 [ 778.700467][T16705] ? copy_cgroup_ns+0x207/0x6b0 [ 778.700510][T16705] ? _raw_spin_unlock_irq+0x2e/0x50 [ 778.700561][T16705] copy_cgroup_ns+0x207/0x6b0 [ 778.700608][T16705] create_new_namespaces+0x34a/0xa90 [ 778.700661][T16705] copy_namespaces+0x468/0x560 [ 778.700705][T16705] copy_process+0x2828/0x76a0 [ 778.700767][T16705] ? __pfx_copy_process+0x10/0x10 [ 778.700811][T16705] ? futex_private_hash_put+0x176/0x300 [ 778.700864][T16705] ? futex_private_hash_put+0x18a/0x300 [ 778.700918][T16705] kernel_clone+0xfc/0x930 [ 778.700975][T16705] ? __pfx_kernel_clone+0x10/0x10 [ 778.701046][T16705] __do_sys_clone+0xce/0x120 [ 778.701092][T16705] ? __pfx___do_sys_clone+0x10/0x10 [ 778.701154][T16705] ? xfd_validate_state+0x61/0x180 [ 778.701182][T16705] ? __pfx_do_writev+0x10/0x10 [ 778.701228][T16705] do_syscall_64+0xcd/0x4b0 [ 778.701265][T16705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.701298][T16705] RIP: 0033:0x7fec7958eec9 [ 778.701322][T16705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 778.701354][T16705] RSP: 002b:00007fec7a3f2fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 778.701387][T16705] RAX: ffffffffffffffda RBX: 00007fec797e5fa0 RCX: 00007fec7958eec9 [ 778.701411][T16705] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 778.701430][T16705] RBP: 00007fec79611f91 R08: 0000000000000000 R09: 0000000000000000 [ 778.701451][T16705] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 778.701470][T16705] R13: 00007fec797e6038 R14: 00007fec797e5fa0 R15: 00007ffeb7c2fd78 [ 778.701512][T16705] [ 778.816867][ T51] Bluetooth: hci8: command tx timeout [ 779.005064][T16635] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.113698][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.121014][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.165915][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.173282][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.363848][T16646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.446107][T16646] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.479654][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.486989][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.525678][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.532976][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.820586][T16731] netlink: 146 bytes leftover after parsing attributes in process `syz.7.1826'. [ 779.917949][ T51] Bluetooth: hci9: command tx timeout [ 780.067045][T16635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 780.234977][T16724] FAULT_INJECTION: forcing a failure. [ 780.234977][T16724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 780.249056][T16724] CPU: 0 UID: 0 PID: 16724 Comm: syz.7.1826 Not tainted syzkaller #0 PREEMPT(full) [ 780.249097][T16724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 780.249115][T16724] Call Trace: [ 780.249125][T16724] [ 780.249136][T16724] dump_stack_lvl+0x16c/0x1f0 [ 780.249176][T16724] should_fail_ex+0x512/0x640 [ 780.249219][T16724] _copy_from_user+0x2e/0xd0 [ 780.249257][T16724] do_sys_poll+0x1d5/0xdf0 [ 780.249288][T16724] ? is_bpf_text_address+0x94/0x1a0 [ 780.249334][T16724] ? kernel_text_address+0x8d/0x100 [ 780.249370][T16724] ? __kernel_text_address+0xd/0x40 [ 780.249407][T16724] ? arch_stack_walk+0xa6/0x100 [ 780.249449][T16724] ? __pfx_do_sys_poll+0x10/0x10 [ 780.249481][T16724] ? __lock_acquire+0x62e/0x1ce0 [ 780.249573][T16724] ? __lock_acquire+0x62e/0x1ce0 [ 780.249698][T16724] ? __pfx_timespec64_add_safe+0x10/0x10 [ 780.249752][T16724] ? ktime_get_ts64+0x2d2/0x400 [ 780.249800][T16724] ? read_tsc+0x9/0x20 [ 780.249847][T16724] ? ktime_get_ts64+0x256/0x400 [ 780.249906][T16724] __x64_sys_poll+0x1a6/0x450 [ 780.249942][T16724] ? __pfx___x64_sys_poll+0x10/0x10 [ 780.249993][T16724] do_syscall_64+0xcd/0x4b0 [ 780.250031][T16724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.250063][T16724] RIP: 0033:0x7fec7958eec9 [ 780.250088][T16724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 780.250120][T16724] RSP: 002b:00007fec7a3f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 780.250150][T16724] RAX: ffffffffffffffda RBX: 00007fec797e5fa0 RCX: 00007fec7958eec9 [ 780.250171][T16724] RDX: 0000000000000004 RSI: 0000000000000081 RDI: 0000200000000000 [ 780.250191][T16724] RBP: 00007fec7a3f3090 R08: 0000000000000000 R09: 0000000000000000 [ 780.250211][T16724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.250231][T16724] R13: 00007fec797e6038 R14: 00007fec797e5fa0 R15: 00007ffeb7c2fd78 [ 780.250273][T16724] [ 780.924827][T16646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 780.967434][ T51] Bluetooth: hci8: command tx timeout [ 781.608003][T16635] veth0_vlan: entered promiscuous mode [ 781.666212][T16635] veth1_vlan: entered promiscuous mode [ 781.800198][T16635] veth0_macvtap: entered promiscuous mode [ 781.829731][T16635] veth1_macvtap: entered promiscuous mode [ 781.905486][T16635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 781.955470][T16635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.006784][ T51] Bluetooth: hci9: command tx timeout [ 782.043398][ T139] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.089749][ T70] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.179004][ T70] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.192898][T16774] netlink: 342 bytes leftover after parsing attributes in process `syz.7.1829'. [ 782.201274][ T70] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.235654][T16646] veth0_vlan: entered promiscuous mode [ 782.336478][T16646] veth1_vlan: entered promiscuous mode [ 782.552770][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.640345][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.689472][T16646] veth0_macvtap: entered promiscuous mode [ 782.814080][T16646] veth1_macvtap: entered promiscuous mode [ 782.847838][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 782.868067][T16646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.883753][T16646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.902507][T16788] sg_write: data in/out 2359516/83 bytes for SCSI command 0x0-- guessing data in; [ 782.902507][T16788] program syz.6.1828 not setting count and/or reply_len properly [ 782.916657][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 782.958145][ T139] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.000794][ T139] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.227675][ T139] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.323530][ T2136] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.369008][ T31] audit: type=1800 audit(4294967388.500:58): pid=16798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1807" name="discovery_nqn" dev="configfs" ino=52314 res=0 errno=0 [ 783.706733][T13634] Bluetooth: hci8: unexpected subevent 0x01 length: 123 > 18 [ 783.762203][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.874295][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.974488][T16752] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.995466][T16752] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.067854][T16808] FAULT_INJECTION: forcing a failure. [ 785.067854][T16808] name failslab, interval 1, probability 0, space 0, times 0 [ 785.088695][T16808] CPU: 1 UID: 0 PID: 16808 Comm: syz.6.1831 Not tainted syzkaller #0 PREEMPT(full) [ 785.088734][T16808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 785.088752][T16808] Call Trace: [ 785.088763][T16808] [ 785.088774][T16808] dump_stack_lvl+0x16c/0x1f0 [ 785.088813][T16808] should_fail_ex+0x512/0x640 [ 785.088849][T16808] ? __kmalloc_noprof+0xca/0x880 [ 785.088885][T16808] should_failslab+0xc2/0x120 [ 785.088929][T16808] __kmalloc_noprof+0xdd/0x880 [ 785.088961][T16808] ? ioam6_genl_addsc+0x42f/0x820 [ 785.088998][T16808] ? ioam6_genl_addsc+0x42f/0x820 [ 785.089025][T16808] ioam6_genl_addsc+0x42f/0x820 [ 785.089058][T16808] ? __pfx_ioam6_genl_addsc+0x10/0x10 [ 785.089106][T16808] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 785.089146][T16808] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 785.089200][T16808] genl_family_rcv_msg_doit+0x209/0x2f0 [ 785.089246][T16808] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 785.089288][T16808] ? rcu_is_watching+0x12/0xc0 [ 785.089349][T16808] ? bpf_lsm_capable+0x9/0x10 [ 785.089393][T16808] ? security_capable+0x7e/0x260 [ 785.089436][T16808] genl_rcv_msg+0x55c/0x800 [ 785.089486][T16808] ? __pfx_genl_rcv_msg+0x10/0x10 [ 785.089530][T16808] ? __pfx_ioam6_genl_addsc+0x10/0x10 [ 785.089594][T16808] netlink_rcv_skb+0x158/0x420 [ 785.089630][T16808] ? __pfx_genl_rcv_msg+0x10/0x10 [ 785.089673][T16808] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 785.089729][T16808] ? netlink_deliver_tap+0x1ae/0xd30 [ 785.089769][T16808] genl_rcv+0x28/0x40 [ 785.089805][T16808] netlink_unicast+0x5a7/0x870 [ 785.089848][T16808] ? __pfx_netlink_unicast+0x10/0x10 [ 785.089886][T16808] ? __pfx___might_resched+0x10/0x10 [ 785.089926][T16808] ? __lock_acquire+0xb97/0x1ce0 [ 785.089988][T16808] netlink_sendmsg+0x8c8/0xdd0 [ 785.090032][T16808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 785.090075][T16808] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 785.090121][T16808] ____sys_sendmsg+0xa95/0xc70 [ 785.090173][T16808] ? copy_msghdr_from_user+0x10a/0x160 [ 785.090211][T16808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 785.090273][T16808] ___sys_sendmsg+0x134/0x1d0 [ 785.090308][T16808] ? __pfx____sys_sendmsg+0x10/0x10 [ 785.090401][T16808] __sys_sendmsg+0x16d/0x220 [ 785.090439][T16808] ? __pfx___sys_sendmsg+0x10/0x10 [ 785.090502][T16808] do_syscall_64+0xcd/0x4b0 [ 785.090540][T16808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.090572][T16808] RIP: 0033:0x7f069178eec9 [ 785.090597][T16808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.090628][T16808] RSP: 002b:00007f069257c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 785.090656][T16808] RAX: ffffffffffffffda RBX: 00007f06919e5fa0 RCX: 00007f069178eec9 [ 785.090676][T16808] RDX: 0000000000008010 RSI: 0000200000000900 RDI: 0000000000000008 [ 785.090695][T16808] RBP: 00007f069257c090 R08: 0000000000000000 R09: 0000000000000000 [ 785.090714][T16808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.090732][T16808] R13: 00007f06919e6038 R14: 00007f06919e5fa0 R15: 00007ffccf0267c8 [ 785.090771][T16808] [ 785.587222][T16804] Bluetooth: hci4: command 0x0406 tx timeout [ 785.776753][T16804] Bluetooth: hci8: command tx timeout [ 786.664489][T16841] block2mtd: parameter too long [ 787.451298][T16848] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 787.672308][ T31] audit: type=1800 audit(4294967392.830:59): pid=16850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1839" name="lu_gp_id" dev="configfs" ino=53461 res=0 errno=0 [ 788.010598][T16855] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1839'. [ 789.017166][T16855] Process accounting paused [ 790.557007][T16804] Bluetooth: hci5: command 0x0406 tx timeout [ 792.112414][T16888] syz.9.1847 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 794.746770][T16925] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 795.473900][T16895] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 795.482188][T16895] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 795.580669][T16895] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 795.620006][T16895] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 795.667019][T16895] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 795.789347][T16895] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 795.822782][T16895] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 795.832188][T16895] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 795.841891][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 795.859324][T16895] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 795.888112][T16895] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 795.950097][T16895] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 796.008574][T16895] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 796.016096][T16895] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 796.052851][T16895] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 796.104382][T16895] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 796.375359][T16895] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 796.413903][T16895] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 796.434865][T16895] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 796.492124][T16895] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 796.519473][T16895] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 796.526792][T16895] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 796.691857][T16895] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 796.744275][T16895] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 796.771633][T16895] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 796.803137][T16895] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 796.813076][T16895] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 796.844836][T16895] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 796.865946][T16895] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 796.879383][T16895] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 796.942563][T16895] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 796.984899][T16895] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 797.007096][T16895] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 797.038885][T16895] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 797.676864][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 797.836879][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 797.930890][T16804] Bluetooth: hci1: command 0x0406 tx timeout [ 797.937160][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 798.078589][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 798.503537][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 798.557239][ T51] Bluetooth: hci6: command 0x0c1a tx timeout [ 798.796786][ T51] Bluetooth: hci7: command 0x0c1a tx timeout [ 798.882756][ T51] Bluetooth: hci8: command 0x0c1a tx timeout [ 799.037139][ T51] Bluetooth: hci9: command 0x0c1a tx timeout [ 799.440396][T16932] netlink: 'syz.6.1854': attribute type 1 has an invalid length. [ 799.764854][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 799.916866][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 799.997595][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 799.997756][T16804] Bluetooth: hci1: command 0x0406 tx timeout [ 800.157130][T16804] Bluetooth: hci4: command 0x0406 tx timeout [ 800.557782][T16804] Bluetooth: hci5: command 0x0406 tx timeout [ 800.637539][T16804] Bluetooth: hci6: command 0x0c1a tx timeout [ 800.877786][T16804] Bluetooth: hci7: command 0x0c1a tx timeout [ 800.957083][T16804] Bluetooth: hci8: command 0x0c1a tx timeout [ 801.117214][T16804] Bluetooth: hci9: command 0x0c1a tx timeout [ 801.837027][T16804] Bluetooth: hci2: command 0x0406 tx timeout [ 802.076880][T16804] Bluetooth: hci3: command 0x0406 tx timeout [ 802.247061][T16804] Bluetooth: hci4: command 0x0406 tx timeout [ 802.646789][T16804] Bluetooth: hci5: command 0x0406 tx timeout [ 802.717290][T16804] Bluetooth: hci6: command 0x0c1a tx timeout [ 802.956975][T16804] Bluetooth: hci7: command 0x0c1a tx timeout [ 803.036840][T16804] Bluetooth: hci8: command 0x0c1a tx timeout [ 803.197629][T16804] Bluetooth: hci9: command 0x0c1a tx timeout [ 803.926836][T16804] Bluetooth: hci2: command 0x0406 tx timeout [ 804.157035][T16804] Bluetooth: hci3: command 0x0406 tx timeout [ 804.547949][T17008] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 804.560328][T17008] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 804.585336][T17008] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 804.592096][T17008] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 804.613900][ T31] audit: type=1800 audit(4294967302.980:60): pid=17026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1870" name="discovery_nqn" dev="configfs" ino=53952 res=0 errno=0 [ 804.635148][T17008] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 804.664831][T17008] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 804.681566][T17008] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 804.686289][T17009] bond0: option arp_interval: invalid value () [ 804.694276][T17009] bond0: option arp_interval: allowed values 0 - 2147483647 [ 804.732747][T17008] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 804.754414][T17009] FAULT_INJECTION: forcing a failure. [ 804.754414][T17009] name failslab, interval 1, probability 0, space 0, times 0 [ 804.781086][T17008] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 804.805575][T17008] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 804.831968][T17009] CPU: 1 UID: 0 PID: 17009 Comm: syz.7.1876 Not tainted syzkaller #0 PREEMPT(full) [ 804.832009][T17009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 804.832029][T17009] Call Trace: [ 804.832040][T17009] [ 804.832053][T17009] dump_stack_lvl+0x16c/0x1f0 [ 804.832094][T17009] should_fail_ex+0x512/0x640 [ 804.832133][T17009] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 804.832177][T17009] should_failslab+0xc2/0x120 [ 804.832228][T17009] kmem_cache_alloc_noprof+0x75/0x6e0 [ 804.832267][T17009] ? dup_fd+0x4e/0xb90 [ 804.832310][T17009] ? dup_fd+0x4e/0xb90 [ 804.832345][T17009] dup_fd+0x4e/0xb90 [ 804.832397][T17009] ksys_unshare+0x831/0xa40 [ 804.832446][T17009] ? native_tss_update_io_bitmap+0x3e1/0x770 [ 804.832484][T17009] ? __pfx_ksys_unshare+0x10/0x10 [ 804.832539][T17009] ? xfd_validate_state+0x61/0x180 [ 804.832590][T17009] __x64_sys_unshare+0x31/0x40 [ 804.832643][T17009] do_syscall_64+0xcd/0x4b0 [ 804.832684][T17009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 804.832718][T17009] RIP: 0033:0x7fec7958eec9 [ 804.832745][T17009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 804.832778][T17009] RSP: 002b:00007fec7a3b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 804.832810][T17009] RAX: ffffffffffffffda RBX: 00007fec797e6180 RCX: 00007fec7958eec9 [ 804.832833][T17009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 804.832853][T17009] RBP: 00007fec79611f91 R08: 0000000000000000 R09: 0000000000000000 [ 804.832874][T17009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 804.832895][T17009] R13: 00007fec797e6218 R14: 00007fec797e6180 R15: 00007ffeb7c2fd78 [ 804.832938][T17009] [ 805.596739][T16804] Bluetooth: hci1: command 0x0406 tx timeout [ 806.257573][T17034] netlink: 'syz.9.1872': attribute type 1 has an invalid length. [ 806.373553][T17007] kexec: Could not allocate control_code_buffer [ 806.639919][T16804] Bluetooth: hci4: command 0x0406 tx timeout [ 806.646003][T16804] Bluetooth: hci3: command 0x0406 tx timeout [ 806.653649][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 806.661037][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 806.716880][T17041] Bluetooth: hci6: command 0x0c1a tx timeout [ 806.723041][T17041] Bluetooth: hci5: command 0x0406 tx timeout [ 806.796860][T17041] Bluetooth: hci8: command 0x0c1a tx timeout [ 806.802981][T13634] Bluetooth: hci7: command 0x0c1a tx timeout [ 806.877431][T17041] Bluetooth: hci9: command 0x0c1a tx timeout [ 810.268334][T17098] usb usb36: usbfs: process 17098 (syz.8.1881) did not claim interface 0 before use [ 810.314626][T17098] FAULT_INJECTION: forcing a failure. [ 810.314626][T17098] name failslab, interval 1, probability 0, space 0, times 0 [ 810.331481][T17098] CPU: 0 UID: 0 PID: 17098 Comm: syz.8.1881 Not tainted syzkaller #0 PREEMPT(full) [ 810.331528][T17098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 810.331550][T17098] Call Trace: [ 810.331561][T17098] [ 810.331574][T17098] dump_stack_lvl+0x16c/0x1f0 [ 810.331618][T17098] should_fail_ex+0x512/0x640 [ 810.331658][T17098] ? __kmalloc_noprof+0xca/0x880 [ 810.331698][T17098] should_failslab+0xc2/0x120 [ 810.331750][T17098] __kmalloc_noprof+0xdd/0x880 [ 810.331782][T17098] ? __kasan_kmalloc+0xaa/0xb0 [ 810.331835][T17098] ? ops_init+0x77/0x5f0 [ 810.331881][T17098] ? ops_init+0x77/0x5f0 [ 810.331915][T17098] ? __pfx_tcp_sk_init+0x10/0x10 [ 810.331958][T17098] ops_init+0x77/0x5f0 [ 810.332001][T17098] setup_net+0x100/0x390 [ 810.332042][T17098] ? __pfx_setup_net+0x10/0x10 [ 810.332083][T17098] ? debug_mutex_init+0x37/0x70 [ 810.332130][T17098] copy_net_ns+0x2f8/0x690 [ 810.332178][T17098] create_new_namespaces+0x3ea/0xa90 [ 810.332234][T17098] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 810.332284][T17098] ksys_unshare+0x45b/0xa40 [ 810.332336][T17098] ? __pfx_ksys_unshare+0x10/0x10 [ 810.332390][T17098] ? xfd_validate_state+0x61/0x180 [ 810.332433][T17098] __x64_sys_unshare+0x31/0x40 [ 810.332485][T17098] do_syscall_64+0xcd/0x4b0 [ 810.332525][T17098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.332559][T17098] RIP: 0033:0x7fcda538eec9 [ 810.332586][T17098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.332619][T17098] RSP: 002b:00007fcda62d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 810.332653][T17098] RAX: ffffffffffffffda RBX: 00007fcda55e5fa0 RCX: 00007fcda538eec9 [ 810.332674][T17098] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 810.332695][T17098] RBP: 00007fcda5411f91 R08: 0000000000000000 R09: 0000000000000000 [ 810.332716][T17098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 810.332736][T17098] R13: 00007fcda55e6038 R14: 00007fcda55e5fa0 R15: 00007fff4374d3a8 [ 810.332780][T17098] [ 810.543299][ C0] vkms_vblank_simulate: vblank timer overrun [ 812.678048][T17128] FAULT_INJECTION: forcing a failure. [ 812.678048][T17128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.693854][T17128] CPU: 1 UID: 0 PID: 17128 Comm: syz.7.1886 Not tainted syzkaller #0 PREEMPT(full) [ 812.693886][T17128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 812.693900][T17128] Call Trace: [ 812.693907][T17128] [ 812.693916][T17128] dump_stack_lvl+0x16c/0x1f0 [ 812.693945][T17128] should_fail_ex+0x512/0x640 [ 812.693975][T17128] _copy_to_user+0x32/0xd0 [ 812.694005][T17128] simple_read_from_buffer+0xcb/0x170 [ 812.694031][T17128] proc_fail_nth_read+0x197/0x240 [ 812.694058][T17128] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 812.694087][T17128] ? rw_verify_area+0xcf/0x6c0 [ 812.694110][T17128] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 812.694136][T17128] vfs_read+0x1e4/0xcf0 [ 812.694168][T17128] ? __pfx_vfs_read+0x10/0x10 [ 812.694213][T17128] ksys_read+0x12a/0x250 [ 812.694239][T17128] ? __pfx_ksys_read+0x10/0x10 [ 812.694273][T17128] do_syscall_64+0xcd/0x4b0 [ 812.694299][T17128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.694326][T17128] RIP: 0033:0x7fec7958d8dc [ 812.694345][T17128] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 812.694368][T17128] RSP: 002b:00007fec7a3f3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 812.694390][T17128] RAX: ffffffffffffffda RBX: 00007fec797e5fa0 RCX: 00007fec7958d8dc [ 812.694405][T17128] RDX: 000000000000000f RSI: 00007fec7a3f30a0 RDI: 0000000000000001 [ 812.694419][T17128] RBP: 00007fec7a3f3090 R08: 0000000000000000 R09: 0000000000000000 [ 812.694433][T17128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.694447][T17128] R13: 00007fec797e6038 R14: 00007fec797e5fa0 R15: 00007ffeb7c2fd78 [ 812.694475][T17128] [ 813.478966][ T31] audit: type=1800 audit(4294967304.350:61): pid=17135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1888" name="dbroot" dev="configfs" ino=54223 res=0 errno=0 [ 814.036471][T17133] netlink: 'syz.7.1887': attribute type 1 has an invalid length. [ 814.964933][T17155] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1891'. [ 815.194981][ T31] audit: type=1800 audit(4294967298.160:62): pid=17160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1892" name="discovery_nqn" dev="configfs" ino=54305 res=0 errno=0 [ 815.360081][ T32] INFO: task syz-executor:5842 blocked for more than 143 seconds. [ 815.416705][ T32] Not tainted syzkaller #0 [ 815.421933][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to send rpc fd=3 want=232864 sent=0 n=-1 (errno 32: Broken pipe) [ 815.457814][ T32] task:syz-executor state:D stack:23112 pid:5842 tgid:5842 ppid:1 task_flags:0x400140 flags:0x00080002 [ 815.526617][ T32] Call Trace: [ 815.529971][ T32] [ 815.532948][ T32] __schedule+0x1190/0x5de0 [ 815.557561][T15202] Process accounting paused [ 815.576646][ T32] ? __lock_acquire+0x62e/0x1ce0 [ 815.581717][ T32] ? __pfx___schedule+0x10/0x10 [ 815.616666][ T32] ? find_held_lock+0x2b/0x80 [ 815.621452][ T32] ? schedule+0x2d7/0x3a0 [ 815.625851][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 815.670568][ T32] schedule+0xe7/0x3a0 [ 815.674780][ T32] schedule_preempt_disabled+0x13/0x30 [ 815.701078][ T32] __mutex_lock+0x818/0x1060 [ 815.705761][ T32] ? __lock_acquire+0x62e/0x1ce0 [ 815.734062][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 815.756793][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 815.761935][ T32] ? net_generic+0xea/0x2a0 [ 815.786733][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 815.807002][ T32] nfsd_shutdown_threads+0x5b/0xf0 [ 815.812198][ T32] nfsd_umount+0x48/0xe0 [ 815.816521][ T32] deactivate_locked_super+0xbe/0x1a0 [ 815.905494][ T32] deactivate_super+0xde/0x100 [ 815.922910][ T32] cleanup_mnt+0x225/0x450 [ 815.966724][ T32] task_work_run+0x150/0x240 [ 815.972849][ T32] ? __pfx_task_work_run+0x10/0x10 [ 815.987938][ T32] ? __pfx___x64_sys_umount+0x10/0x10 [ 815.993394][ T32] exit_to_user_mode_loop+0xec/0x130 [ 816.026708][ T32] do_syscall_64+0x419/0x4b0 [ 816.031404][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.067472][ T32] RIP: 0033:0x7f66fef901f7 [ 816.073384][ T32] RSP: 002b:00007ffcce421168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 816.120170][ T32] RAX: 0000000000000000 RBX: 00007f66ff011d7d RCX: 00007f66fef901f7 [ 816.152399][ T32] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcce421220 [ 816.181844][ T32] RBP: 00007ffcce421220 R08: 0000000000000000 R09: 0000000000000000 [ 816.216732][ T32] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcce4222b0 [ 816.224787][ T32] R13: 00007f66ff011d7d R14: 00000000000a185e R15: 00007ffcce4222f0 [ 816.267176][ T32] [ 816.270343][ T32] INFO: task syz.3.1429:14772 blocked for more than 164 seconds. [ 816.317750][ T32] Not tainted syzkaller #0 [ 816.322767][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 816.360742][ T32] task:syz.3.1429 state:D stack:28392 pid:14772 tgid:14765 ppid:5845 task_flags:0x400140 flags:0x00080002 [ 816.426630][ T32] Call Trace: [ 816.429990][ T32] [ 816.432963][ T32] __schedule+0x1190/0x5de0 [ 816.443992][ T32] ? stack_trace_save+0x8e/0xc0 [ 816.450847][ T32] ? __pfx___schedule+0x10/0x10 [ 816.455872][ T32] ? find_held_lock+0x2b/0x80 [ 816.471939][ T32] ? schedule+0x2d7/0x3a0 [ 816.476473][ T32] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 816.498998][ T32] schedule+0xe7/0x3a0 [ 816.503180][ T32] schedule_preempt_disabled+0x13/0x30 [ 816.531676][ T32] __mutex_lock+0x818/0x1060 [ 816.536362][ T32] ? __lock_acquire+0x62e/0x1ce0 [ 816.586628][ T32] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 816.593150][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 816.632359][ T32] ? net_generic+0xea/0x2a0 [ 816.637249][ T32] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 816.643881][ T32] nfsd_nl_threads_set_doit+0x687/0xbc0 [ 816.649613][ T32] genl_family_rcv_msg_doit+0x209/0x2f0 [ 816.655350][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 816.663413][ T32] ? rcu_is_watching+0x12/0xc0 [ 816.673613][ T32] ? bpf_lsm_capable+0x9/0x10 [ 816.677472][T13634] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 816.678572][ T32] ? security_capable+0x7e/0x260 [ 816.692398][ T32] genl_rcv_msg+0x55c/0x800 [ 816.694346][T13634] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 816.733842][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 816.733987][T13634] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 816.748783][T13634] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 816.756790][T13634] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 816.764354][ T32] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 816.764434][ T32] netlink_rcv_skb+0x158/0x420 [ 816.764476][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 816.764525][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 816.764584][ T32] ? netlink_deliver_tap+0x1ae/0xd30 [ 816.764629][ T32] genl_rcv+0x28/0x40 [ 816.764670][ T32] netlink_unicast+0x5a7/0x870 [ 816.764718][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 816.764760][ T32] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 816.764799][ T32] ? __lock_acquire+0xb97/0x1ce0 [ 816.764864][ T32] netlink_sendmsg+0x8c8/0xdd0 [ 816.764914][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 816.764961][ T32] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 816.765010][ T32] ____sys_sendmsg+0xa95/0xc70 [ 816.765060][ T32] ? copy_msghdr_from_user+0x10a/0x160 [ 816.765099][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 816.765157][ T32] ? __pfx_futex_wake_mark+0x10/0x10 [ 816.765211][ T32] ___sys_sendmsg+0x134/0x1d0 [ 816.765252][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 816.765343][ T32] __sys_sendmsg+0x16d/0x220 [ 816.765382][ T32] ? __pfx___sys_sendmsg+0x10/0x10 [ 816.765419][ T32] ? __x64_sys_futex+0x1e0/0x4c0 [ 816.765496][ T32] do_syscall_64+0xcd/0x4b0 [ 816.765538][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.765572][ T32] RIP: 0033:0x7f787cd8eec9 [ 816.765599][ T32] RSP: 002b:00007f787dc99038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 816.765634][ T32] RAX: ffffffffffffffda RBX: 00007f787cfe6090 RCX: 00007f787cd8eec9 [ 816.765659][ T32] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000004 [ 816.765682][ T32] RBP: 00007f787ce11f91 R08: 0000000000000000 R09: 0000000000000000 [ 816.765705][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 816.765727][ T32] R13: 00007f787cfe6128 R14: 00007f787cfe6090 R15: 00007ffd13ff2d58 [ 816.765773][ T32] [ 816.803889][ T32] INFO: task syz.2.1444:14829 blocked for more than 165 seconds. [ 817.017530][ T32] Not tainted syzkaller #0 [ 817.022630][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 817.031983][ T32] task:syz.2.1444 state:D stack:27224 pid:14829 tgid:14827 ppid:5844 task_flags:0x400140 flags:0x00080002 [ 817.044694][ T32] Call Trace: [ 817.048480][ T32] [ 817.051459][ T32] __schedule+0x1190/0x5de0 [ 817.056036][ T32] ? stack_trace_save+0x8e/0xc0 [ 817.076632][ T32] ? __lock_acquire+0x62e/0x1ce0 [ 817.081687][ T32] ? __pfx___schedule+0x10/0x10 [ 817.103522][ T32] ? find_held_lock+0x2b/0x80 [ 817.121706][ T32] ? schedule+0x2d7/0x3a0 [ 817.126149][ T32] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 817.146677][ T32] schedule+0xe7/0x3a0 [ 817.150859][ T32] schedule_preempt_disabled+0x13/0x30 [ 817.156423][ T32] __mutex_lock+0x818/0x1060 [ 817.163774][ T32] ? __lock_acquire+0x62e/0x1ce0 [ 817.192492][ T32] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 817.218896][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 817.224037][ T32] ? net_generic+0xea/0x2a0 [ 817.246413][ T32] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 817.326626][ T32] nfsd_nl_threads_set_doit+0x687/0xbc0 [ 817.332301][ T32] genl_family_rcv_msg_doit+0x209/0x2f0 [ 817.390555][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 817.400846][ T32] ? rcu_is_watching+0x12/0xc0 [ 817.446965][ T32] ? bpf_lsm_capable+0x9/0x10 [ 817.451775][ T32] ? security_capable+0x7e/0x260 [ 817.470683][ T32] genl_rcv_msg+0x55c/0x800 [ 817.475310][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 817.500290][ T32] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 817.517013][ T32] netlink_rcv_skb+0x158/0x420 [ 817.522057][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 817.537041][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 817.542448][ T32] ? netlink_deliver_tap+0x1ae/0xd30 [ 817.566663][ T32] genl_rcv+0x28/0x40 [ 817.570749][ T32] netlink_unicast+0x5a7/0x870 [ 817.575590][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 817.596832][ T32] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 817.602920][ T32] ? __lock_acquire+0xb97/0x1ce0 [ 817.616637][ T32] netlink_sendmsg+0x8c8/0xdd0 [ 817.621511][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 817.637031][ T32] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 817.643294][ T32] ____sys_sendmsg+0xa95/0xc70 [ 817.666670][ T32] ? copy_msghdr_from_user+0x10a/0x160 [ 817.672239][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 817.687150][ T32] ? __pfx_futex_wake_mark+0x10/0x10 [ 817.692686][ T32] ___sys_sendmsg+0x134/0x1d0 [ 817.706985][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 817.713352][ T32] __sys_sendmsg+0x16d/0x220 [ 817.736654][ T32] ? __pfx___sys_sendmsg+0x10/0x10 [ 817.741866][ T32] ? __x64_sys_futex+0x1e0/0x4c0 [ 817.756664][ T32] do_syscall_64+0xcd/0x4b0 [ 817.761270][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.776664][ T32] RIP: 0033:0x7fc91ff8eec9 [ 817.781171][ T32] RSP: 002b:00007fc920e58038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 817.796704][ T32] RAX: ffffffffffffffda RBX: 00007fc9201e5fa0 RCX: 00007fc91ff8eec9 [ 817.804760][ T32] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 817.832889][ T32] RBP: 00007fc920011f91 R08: 0000000000000000 R09: 0000000000000000 [ 817.850596][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 817.859094][ T32] R13: 00007fc9201e6038 R14: 00007fc9201e5fa0 R15: 00007fff727d1648 [ 817.872203][ T32] [ 817.906276][ T32] INFO: task syz.2.1444:14830 blocked for more than 166 seconds. [ 817.926612][ T32] Not tainted syzkaller #0 [ 817.931625][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 817.956651][ T32] task:syz.2.1444 state:D stack:28392 pid:14830 tgid:14827 ppid:5844 task_flags:0x400140 flags:0x00080002 [ 817.977442][ T32] Call Trace: [ 817.980883][ T32] [ 817.983851][ T32] __schedule+0x1190/0x5de0 [ 818.052553][ T32] ? stack_trace_save+0x8e/0xc0 [ 818.066718][ T32] ? __lock_acquire+0x62e/0x1ce0 [ 818.071777][ T32] ? __pfx___schedule+0x10/0x10 [ 818.096922][ T32] ? find_held_lock+0x2b/0x80 [ 818.101708][ T32] ? schedule+0x2d7/0x3a0 [ 818.106189][ T32] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 818.127343][ T32] schedule+0xe7/0x3a0 [ 818.131520][ T32] schedule_preempt_disabled+0x13/0x30 [ 818.146637][ T32] __mutex_lock+0x818/0x1060 [ 818.151319][ T32] ? __lock_acquire+0x62e/0x1ce0 [ 818.156327][ T32] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 818.186650][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 818.191785][ T32] ? net_generic+0xea/0x2a0 [ 818.196357][ T32] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 818.219323][ T32] nfsd_nl_threads_set_doit+0x687/0xbc0 [ 818.226463][ T32] genl_family_rcv_msg_doit+0x209/0x2f0 [ 818.246608][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 818.252784][ T32] ? rcu_is_watching+0x12/0xc0 [ 818.266649][ T32] ? bpf_lsm_capable+0x9/0x10 [ 818.271431][ T32] ? security_capable+0x7e/0x260 [ 818.276442][ T32] genl_rcv_msg+0x55c/0x800 [ 818.296628][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 818.302218][ T32] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 818.326729][ T32] netlink_rcv_skb+0x158/0x420 [ 818.332532][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 818.349447][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 818.354852][ T32] ? netlink_deliver_tap+0x1ae/0xd30 [ 818.366674][ T32] genl_rcv+0x28/0x40 [ 818.370763][ T32] netlink_unicast+0x5a7/0x870 [ 818.375618][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 818.388847][ T32] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 818.394922][ T32] ? __lock_acquire+0xb97/0x1ce0 [ 818.401127][ T32] netlink_sendmsg+0x8c8/0xdd0 [ 818.407565][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 818.412934][ T32] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 818.419193][ T32] ____sys_sendmsg+0xa95/0xc70 [ 818.424025][ T32] ? copy_msghdr_from_user+0x10a/0x160 [ 818.430620][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 818.438684][ T32] ? __pfx_futex_wake_mark+0x10/0x10 [ 818.444049][ T32] ___sys_sendmsg+0x134/0x1d0 [ 818.448820][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 818.454109][ T32] __sys_sendmsg+0x16d/0x220 [ 818.459308][ T32] ? __pfx___sys_sendmsg+0x10/0x10 [ 818.464487][ T32] ? __x64_sys_futex+0x1e0/0x4c0 [ 818.469621][ T32] do_syscall_64+0xcd/0x4b0 [ 818.474191][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.480251][ T32] RIP: 0033:0x7fc91ff8eec9 [ 818.484699][ T32] RSP: 002b:00007fc920e37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 818.493242][ T32] RAX: ffffffffffffffda RBX: 00007fc9201e6090 RCX: 00007fc91ff8eec9 [ 818.501373][ T32] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000004 [ 818.509767][ T32] RBP: 00007fc920011f91 R08: 0000000000000000 R09: 0000000000000000 [ 818.518093][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.526111][ T32] R13: 00007fc9201e6128 R14: 00007fc9201e6090 R15: 00007fff727d1648 [ 818.535132][ T32] [ 818.538910][ T32] [ 818.538910][ T32] Showing all locks held in the system: [ 818.547120][ T32] 1 lock held by pool_workqueue_/3: [ 818.552384][ T32] 1 lock held by khungtaskd/32: [ 818.562898][ T32] #0: ffffffff8e1c3fa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 818.575271][ T32] 6 locks held by kworker/u8:3/49: [ 818.582720][ T32] #0: ffff8880b863a498 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 818.593011][ T32] #1: ffff8880b8624088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 818.602246][ T32] #2: ffff8880b8625b18 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x127/0x1d0 [ 818.613739][ T32] #3: ffffffff9aa6da30 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x14c/0x4c0 [ 818.624353][ T32] #4: ffffffff8e1c3fa0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x20a0 [ 818.634928][ T32] #5: ffff8880b8625b18 (&base->lock){-.-.}-{2:2}, at: __run_timers+0x6f7/0x960 [ 818.645416][ T32] 3 locks held by kworker/u8:5/139: [ 818.650723][ T32] #0: ffff88801b069948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 818.662188][ T32] #1: ffffc90002e57d10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 818.674872][ T32] #2: ffffffff8fee06c8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 818.684215][ T32] 1 lock held by kworker/u8:7/2136: [ 818.689889][ T32] 3 locks held by kworker/u8:8/3516: [ 818.695208][ T32] #0: ffff8880b863a498 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 818.705258][ T32] #1: ffff8880b8624088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 818.714560][ T32] #2: ffffffff8e0650b0 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 818.724702][ T32] 2 locks held by getty/5599: [ 818.729556][ T32] #0: ffff88814df950a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 818.741522][ T32] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 818.751855][ T32] 2 locks held by syz-executor/5842: [ 818.757206][ T32] #0: ffff888052bee0e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 818.767600][ T32] #1: ffffffff8e5e6388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 818.777312][ T32] 2 locks held by syz.3.1429/14766: [ 818.782540][ T32] #0: ffffffff8ff83f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 818.790822][ T32] #1: ffffffff8e5e6388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 818.801731][ T32] 2 locks held by syz.3.1429/14772: [ 818.807052][ T32] #0: ffffffff8ff83f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 818.816871][ T32] #1: ffffffff8e5e6388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 818.827061][ T32] 2 locks held by syz.2.1444/14829: [ 818.832386][ T32] #0: ffffffff8ff83f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 818.841663][ T32] #1: ffffffff8e5e6388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 818.852742][ T32] 2 locks held by syz.2.1444/14830: [ 818.858093][ T32] #0: ffffffff8ff83f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 818.866377][ T32] #1: ffffffff8e5e6388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 818.876626][ T32] 2 locks held by syz-executor/14979: [ 818.882034][ T32] #0: ffff8880789100e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 818.892446][ T32] #1: ffffffff8e5e6388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 818.902169][ T32] 2 locks held by syz-executor/15037: [ 818.907903][ T32] #0: ffff88803d8a60e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 818.918660][ T32] #1: ffffffff8e5e6388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 818.928415][ T32] 2 locks held by syz.0.1628/15780: [ 818.933726][ T32] #0: ffffffff8ff83f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 818.942875][ T32] #1: ffffffff8e5e6388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 818.953947][ T32] 2 locks held by syz-executor/16059: [ 818.956805][T13634] Bluetooth: hci10: command tx timeout [ 818.959416][ T32] #0: ffffffff8fee06c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 818.974192][ T32] #1: ffffffff8e1cf538 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 818.984779][ T32] 1 lock held by syz-executor/16635: [ 818.990140][ T32] #0: ffffffff8fee06c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 818.999293][ T32] 2 locks held by syz.6.1863/16978: [ 819.004529][ T32] #0: ffffffff8ff83f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 819.012832][ T32] #1: ffffffff8e5e6388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 819.023386][ T32] 2 locks held by syz.6.1863/16983: [ 819.029027][ T32] #0: ffffffff8ff83f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 819.037374][ T32] #1: ffffffff8e5e6388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 819.049405][ T32] 2 locks held by syz.9.1877/17074: [ 819.054652][ T32] #0: ffffffff8ff83f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 819.062963][ T32] #1: ffffffff8e5e6388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 819.073234][ T32] 2 locks held by syz.9.1877/17084: [ 819.078557][ T32] #0: ffffffff8ff83f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 819.086884][ T32] #1: ffffffff8e5e6388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 819.097001][ T32] 3 locks held by syz-executor/17174: [ 819.102426][ T32] #0: ffff88805887cdc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 819.112190][ T32] #1: ffff88805887c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 819.132609][ T32] #2: ffffffff8e1cf538 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 819.144989][ T32] [ 819.148784][ T32] ============================================= [ 819.148784][ T32] [ 819.158788][ T32] NMI backtrace for cpu 1 [ 819.158813][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 819.158850][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 819.158870][ T32] Call Trace: [ 819.158881][ T32] [ 819.158894][ T32] dump_stack_lvl+0x116/0x1f0 [ 819.158932][ T32] nmi_cpu_backtrace+0x27b/0x390 [ 819.158974][ T32] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 819.159028][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 819.159094][ T32] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 819.159143][ T32] watchdog+0xf3f/0x1170 [ 819.159184][ T32] ? rcu_is_watching+0x12/0xc0 [ 819.159225][ T32] ? __pfx_watchdog+0x10/0x10 [ 819.159257][ T32] ? lockdep_hardirqs_on+0x7c/0x110 [ 819.159291][ T32] ? __kthread_parkme+0x19e/0x250 [ 819.159336][ T32] ? __pfx_watchdog+0x10/0x10 [ 819.159363][ T32] kthread+0x3c5/0x780 [ 819.159391][ T32] ? __pfx_kthread+0x10/0x10 [ 819.159422][ T32] ? rcu_is_watching+0x12/0xc0 [ 819.159458][ T32] ? __pfx_kthread+0x10/0x10 [ 819.159486][ T32] ret_from_fork+0x56d/0x730 [ 819.159510][ T32] ? __pfx_kthread+0x10/0x10 [ 819.159538][ T32] ret_from_fork_asm+0x1a/0x30 [ 819.159593][ T32] [ 819.159603][ T32] Sending NMI from CPU 1 to CPUs 0: [ 819.216513][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 819.222078][ C0] NMI backtrace for cpu 0 [ 819.222099][ C0] CPU: 0 UID: 0 PID: 1299 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 819.222130][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 819.222147][ C0] RIP: 0010:io_serial_in+0x87/0xb0 [ 819.222180][ C0] Code: e7 9b fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 e8 64 03 fd eb a2 e8 71 65 [ 819.222206][ C0] RSP: 0018:ffffc9000425f298 EFLAGS: 00000002 [ 819.222228][ C0] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 819.222245][ C0] RDX: 00000000000003fd RSI: ffffffff851ebe50 RDI: ffffffff9ab2b1c0 [ 819.222263][ C0] RBP: ffffffff9ab2b180 R08: 0000000000000001 R09: 000000000000001f [ 819.222286][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 819.222302][ C0] R13: 0000000000000020 R14: fffffbfff356568a R15: dffffc0000000000 [ 819.222320][ C0] FS: 0000000000000000(0000) GS:ffff888124e8c000(0000) knlGS:0000000000000000 [ 819.222346][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 819.222364][ C0] CR2: 000056286c6c6950 CR3: 000000007ec2e000 CR4: 00000000003526f0 [ 819.222401][ C0] Call Trace: [ 819.222422][ C0] [ 819.222433][ C0] wait_for_lsr+0x137/0x210 [ 819.222494][ C0] ? __pfx_io_serial_out+0x10/0x10 [ 819.222522][ C0] serial8250_console_write+0xf81/0x1890 [ 819.222566][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 819.222607][ C0] ? lock_acquire+0x179/0x350 [ 819.222655][ C0] console_flush_all+0x801/0xc60 [ 819.222691][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 819.222728][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 819.222766][ C0] console_unlock+0xd8/0x210 [ 819.222796][ C0] ? __pfx_console_unlock+0x10/0x10 [ 819.222828][ C0] ? vprintk_emit+0x63b/0x680 [ 819.222863][ C0] vprintk_emit+0x3d7/0x680 [ 819.222895][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 819.222927][ C0] ? kasan_save_stack+0x33/0x60 [ 819.222975][ C0] dev_printk_emit+0xfa/0x140 [ 819.223007][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 819.223049][ C0] ? __asan_memcpy+0x3c/0x60 [ 819.223079][ C0] ? ieee802154_hdr_get_addr+0x9f/0x100 [ 819.223117][ C0] __netdev_printk+0x1fb/0x500 [ 819.223178][ C0] netdev_warn+0xe4/0x120 [ 819.223207][ C0] ? __pfx_netdev_warn+0x10/0x10 [ 819.223236][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 819.223282][ C0] ? __pfx_mac802154_llsec_encrypt+0x10/0x10 [ 819.223319][ C0] ? ieee802154_subif_start_xmit+0x2e/0x140 [ 819.223361][ C0] ieee802154_subif_start_xmit+0xf9/0x140 [ 819.223402][ C0] dev_hard_start_xmit+0x94/0x740 [ 819.223446][ C0] sch_direct_xmit+0x1b2/0xcf0 [ 819.223474][ C0] ? lock_acquire+0x179/0x350 [ 819.223514][ C0] ? __pfx_sch_direct_xmit+0x10/0x10 [ 819.223540][ C0] ? do_raw_spin_lock+0x220/0x2b0 [ 819.223568][ C0] ? __dev_queue_xmit+0xaf1/0x4490 [ 819.223612][ C0] __dev_queue_xmit+0x144d/0x4490 [ 819.223655][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 819.223681][ C0] ? finish_task_switch.isra.0+0x221/0xc10 [ 819.223715][ C0] ? rcu_is_watching+0x12/0xc0 [ 819.223748][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 819.223788][ C0] ? __schedule+0x11a3/0x5de0 [ 819.223840][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 819.223869][ C0] ? find_held_lock+0x2b/0x80 [ 819.223900][ C0] ? skb_dequeue+0x126/0x180 [ 819.223936][ C0] ? find_held_lock+0x2b/0x80 [ 819.223969][ C0] ? rcu_is_watching+0x12/0xc0 [ 819.224005][ C0] tx+0xcc/0x190 [ 819.224042][ C0] ? __pfx_tx+0x10/0x10 [ 819.224076][ C0] kthread+0x1e4/0x3e0 [ 819.224108][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 819.224133][ C0] ? __pfx_kthread+0x10/0x10 [ 819.224166][ C0] ? __pfx_default_wake_function+0x10/0x10 [ 819.224201][ C0] ? __kthread_parkme+0xf3/0x250 [ 819.224238][ C0] ? __kthread_parkme+0x19e/0x250 [ 819.224282][ C0] ? __pfx_kthread+0x10/0x10 [ 819.224313][ C0] kthread+0x3c5/0x780 [ 819.224337][ C0] ? __pfx_kthread+0x10/0x10 [ 819.224363][ C0] ? rcu_is_watching+0x12/0xc0 [ 819.224457][ C0] ? __pfx_kthread+0x10/0x10 [ 819.224483][ C0] ret_from_fork+0x56d/0x730 [ 819.224508][ C0] ? __pfx_kthread+0x10/0x10 [ 819.224533][ C0] ret_from_fork_asm+0x1a/0x30 [ 819.224577][ C0] [ 819.226442][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 819.226470][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 819.226515][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 819.226544][ T32] Call Trace: [ 819.226557][ T32] [ 819.226572][ T32] dump_stack_lvl+0x3d/0x1f0 [ 819.226618][ T32] vpanic+0x640/0x6f0 [ 819.226656][ T32] panic+0xca/0xd0 [ 819.226689][ T32] ? __pfx_panic+0x10/0x10 [ 819.226725][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 819.226786][ T32] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 819.226842][ T32] ? watchdog+0xe48/0x1170 [ 819.226880][ T32] ? watchdog+0xe3b/0x1170 [ 819.226922][ T32] watchdog+0xe59/0x1170 [ 819.226969][ T32] ? rcu_is_watching+0x12/0xc0 [ 819.227015][ T32] ? __pfx_watchdog+0x10/0x10 [ 819.227059][ T32] ? lockdep_hardirqs_on+0x7c/0x110 [ 819.227098][ T32] ? __kthread_parkme+0x19e/0x250 [ 819.227153][ T32] ? __pfx_watchdog+0x10/0x10 [ 819.227193][ T32] kthread+0x3c5/0x780 [ 819.227229][ T32] ? __pfx_kthread+0x10/0x10 [ 819.227269][ T32] ? rcu_is_watching+0x12/0xc0 [ 819.227313][ T32] ? __pfx_kthread+0x10/0x10 [ 819.227350][ T32] ret_from_fork+0x56d/0x730 [ 819.227386][ T32] ? __pfx_kthread+0x10/0x10 [ 819.227422][ T32] ret_from_fork_asm+0x1a/0x30 [ 819.227480][ T32] [ 819.844558][ T32] Kernel Offset: disabled [ 819.848898][ T32] Rebooting in 86400 seconds..