last executing test programs: 3m13.280924631s ago: executing program 32 (id=2060): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x3c, 0x0) (async) fsopen$auto(0x0, 0x1) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001780)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI1f\xad&\x01\xd2\x19\xfe\xb2\xc8\x9a\x1e\xcd\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d5) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r2 = socket(0x2, 0x801, 0x6) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/carrier\x00', 0xc2061, 0x0) write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x83) setsockopt$auto(r0, 0x4, 0x3, 0x0, 0x2) (async) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(r2, &(0x7f0000001740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001840)=ANY=[@ANYBLOB="14100000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1014}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008044) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd9\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_NBD_CMD_DISCONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYRESHEX=r2, @ANYRES16=r3, @ANYBLOB="0100f0f8672b963b4d67b62a972dbd702a68175993d00a7f01164800ffdbdf2502bdb049f82ce028db3d595d4f0baec86f494b81e44a6eabe574708a5abd8433a5aa4c5143577f1a4e9bc039d3f04186c6fc97ed5095c1c2de7361ffe5ceca558587533cc09d3aacc6779fd1c8c1c5b30d85964545763197076c1cc8217a95c7919bc5f3a5509086bfae9be2f52184518f4663533e0a6ce21df7fe7546e807f560c219565590f41cf4dd0245d073a968bca0c77720"], 0x1c}, 0x1, 0x0, 0x0, 0x4c000}, 0x2000c800) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xfffffffffffffa31) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) syslog$auto(0x3, 0x0, 0x5) (async) poll$auto(0x0, 0x7f, 0x9) (async) socket(0x25, 0x5, 0x6) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) msgctl$auto_IPC_STAT(0x7e0, 0x2, &(0x7f0000000380)={{0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x2, 0x9, 0x3}, &(0x7f0000000080)=0x5, &(0x7f00000001c0)=0x80, 0x5, 0x0, 0x0, 0x2, 0x4, 0x79, 0xff80, 0x7, @raw=0x8}) (async) pread64$auto(0xffffffffffffffff, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/virtual/bdi/43:224/stable_pages_required\x00', 0x2000, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) 2m50.365763654s ago: executing program 33 (id=2084): socket(0x26, 0x1, 0x300) pread64$auto(0xffffffffffffffff, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x10, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ttya3/dev\x00', 0x5a1802, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) r0 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r0, &(0x7f0000000480)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000380)='C', 0x49}, 0x8, &(0x7f0000000300), 0x6, 0x1000}, 0x5}, 0x2, 0xfd) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r3, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003500)={0x14, r3, 0x1, 0x70bd2b, 0xa5dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_clone3(0x0, 0x0) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x1) setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6}) close_range$auto(0x2, 0xa, 0x0) r4 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r5, 0x4, 0x1ff, r4, @relative_id=0x13, 0xe600}, 0xf) 2m29.371358974s ago: executing program 2 (id=2209): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/jfs/loglevel\x00', 0x1a9701, 0x0) write$auto(r1, 0x0, 0x9) (async) ioctl$auto_TCFLSH2(r0, 0x5453, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto_SO_DETACH_REUSEPORT_BPF(r1, 0x0, 0x44, &(0x7f0000000080)='%\xe6&$\x00', 0x7fff) (async) ioctl$auto_TIOCMSET2(r0, 0x5418, &(0x7f0000000000)) 2m28.788996047s ago: executing program 2 (id=2213): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf250200000800130001"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x890) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='1'], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}, 0x1, 0x0, 0x0, 0x20000820}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0xf5) 2m28.596641352s ago: executing program 2 (id=2214): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="ffa2"], 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x20056, 0x8020000000f, 0x4, 0x5f, 0x20000000000804, 0xfffffffffffffffe}, 0x6f0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) r2 = prctl$auto_PR_SET_MM_ENV_END(0x8, 0xb, r1, 0xd28b, 0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r4, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000980)={0x1dc, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_TX_INFO_FLAGS={0x65, 0x15, "8b998eed207486c92329ec9f9fbe20473f5b56df593c9ba8475f5643fd89ab333f8220e49dbe362c7c9cabb658e764d0b04a56c7a77a0850c22988a3aaa8d848767d6d7aa36489dac686c4065fa05844ced1e02ab857f5a7487be66530af3685f4"}, @HWSIM_ATTR_REG_HINT_ALPHA2={0xc, 0xb, 'ethtool\x00'}, @HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}, @HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_PMSR_RESULT={0x148, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x12c, 0x5, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x20, 0x1, "4e748530a0bd2084d4448f809513d189374fd5c4615cc3b0bc25fd0c"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x68, 0x1, "ef10e26d5d1c756a11371314fba81551a41c80151bc2a1f09bac9987b5d6b46d3e1f190fb830872cb2065d68acb9fb24322e31325396f84d70597a89f872715ecb2c79ef1d3cb33c9d04d1b7c44317250adb198ecd84a53b140c007165317a19b44cd479"}, @NL80211_PMSR_PEER_ATTR_RESP={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x5}]}]}, {0x8c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x20, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x8000}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x4}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x44, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x3}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x89}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x2}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x24, 0x1, "eed5135d4564c502aae21b44df4791922c06305d5d003ce22bd406851b622d94"}]}]}, @NL80211_PMSR_ATTR_PEERS={0x18, 0x5, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x80}]}]}]}]}, @HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0xa}, 0x7}, 0x3, 0x2) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/phonet\x00', 0x42000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000002100)=""/15, 0xf) r6 = socket(0x10, 0x2, 0x0) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fcdbdf250a0000ff00000000140001"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r8 = ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000040)) r9 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="f5096cfb9e000000000001000000000000bf72", @ANYRES16=r9, @ANYBLOB="00022dbd7000fbdbdf2506000000080003000700000008"], 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x440c0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000d80)={'veth0_to_hsr\x00'}) sendmsg$auto_NCSI_CMD_CLEAR_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x54c, r9, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NCSI_ATTR_DATA={0x51c, 0x5, "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"}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0xfffffff9}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0xa7}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0xb}]}, 0x54c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 2m28.09863553s ago: executing program 2 (id=2216): mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f00000000c0), 0x440000, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b72, 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129c00, 0x0) ioctl$auto(r2, 0xb21064a5, 0xffffffffffffffff) writev$auto(r1, &(0x7f00000001c0)={0x0, 0x7}, 0x3) socket(0x1e, 0x1, 0x0) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x48002, 0x0) openat$auto_clk_dump_fops_(0xffffffffffffff9c, 0x0, 0x80, 0x0) getsockopt$auto(r3, 0x3, 0x1, &(0x7f0000000280)='-.\x00', &(0x7f00000002c0)=0xffff) r4 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy18/netdev:wlan1/state\x00', 0x200a40, 0x0) prctl$auto_PR_SET_MM(0x23, 0x9, r4, 0x7, 0xc) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x400, 0x0) read$auto(r5, 0x0, 0x4) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x1400, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000480), 0xffffffffffffffff) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/state\x00', 0x20a42, 0x0) write$auto(r7, &(0x7f0000000080)='/\xe4ev/auYio\x00', 0x4) bpf$auto(0x0, &(0x7f0000000100)=@batch={0x7, 0x444, 0x3, 0x10001, 0x10000000, 0xffffffffffffffff, 0x400, 0x1ff}, 0x96) openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 2m26.958846657s ago: executing program 2 (id=2218): r0 = ioctl$auto_NS_GET_TGID_FROM_PIDNS(0xffffffffffffffff, 0x8004b707, &(0x7f0000000000)=0x6) write$auto_buffer_percent_fops_trace(r0, &(0x7f0000000040)="9259c383d383dfbbe6d641dd4e7fd7da7829691e7ee3f9293bc69a99c236b4da265853ace26c29332f5ae6978e3025c8352736f70c728b32eb1322525483c0ca2d9425a85db709b7cb85bd9bb454918e196c8cad846d7ed4048c26f91bad081b74893f21a3957a7534dfec18fa97d4f80efe9bee4fddd43cfe72d779797ae160713d6950176b25fa4431cd7db1ba0056b1113026434216f6c00d2e9d85", 0x9d) ioctl$auto_SOUND_PCM_WRITE_FILTER(r0, 0xc0045007, &(0x7f0000000100)="f7acebcfaf43421737e9573dfc3791719a6ba9fdbcceeb2194c5c7b88a99c15dac638679a2ebd683f98735ff970e2c6f09a04c85238fed7d8fbb9639933bf93a362c441c67d9c55007d0759e73f5d7c801c6f31596041f5d3196f9f571b7e3119b383b86b0e4617cd21814df416f66d2bc8b1234aacd54388459da6216653dd2f50430002baf2f98857df5437ceba066d6eb8f15e7d9ae369c03bce93c66eb222630990653ab088f") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) r2 = bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000200)=@link_create={@map_fd=r0, @target_ifindex=r1, 0x80000000, 0xd, @tracing={0x80000001, 0x9}}, 0x3) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x7, 0x8, 0x9, 0x9) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x6, 0x8, 0xff, 0xc010) ioctl$auto_XFS_IOC_ALLOCSP(r3, 0x4030580a, &(0x7f00000002c0)={0x8, 0x4, 0x2, 0xa1ad, 0x9, 0xffffffffffffffff}) r6 = prctl$auto(0x10, 0x80000001, r5, 0x9, 0x3b) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r7, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x258, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_FEC_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff9}]}, @ETHTOOL_A_FEC_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8000}]}, @ETHTOOL_A_FEC_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @ETHTOOL_A_FEC_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xff}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_FEC_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1200000}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x28940}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEC_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEC_HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_FEC_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_FEC_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x80}, 0x1) r8 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000640)='/proc/thread-self/mem\x00', 0x0, 0x0) epoll_pwait$auto(r2, &(0x7f0000000680)={0xe0a, 0x4}, 0x1, 0x9, &(0x7f00000006c0)={0x2}, 0x8) write$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffffff, &(0x7f0000000700)="258d434deb8d70549f811e48259c7cfd379ebef80ca3e1b3162156cece71f9b2bb6a0f8bdd0fa28081c6d72301d6a2dfd6761267a889d4ae532956332164a8414d43cf6e5a8fd5b43ba808d734409a62da9ae14ce0854cec58b8b956f724826a89a22f70dbdb4eb18d43dd4989a749bbf9b9fcf52034c6b898ba8e7dc5f5de1cebb4fb148363bf22f1261ec8a966f8230b91d377c69e2d319d7c85b89efdb798bde40aaf2b7966ff41aad7428e992792faaa95b2bb", 0xb5) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000800), r6) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r9, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x9}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40814}, 0x20000000) r10 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000940), r7) r11 = timerfd_create$auto(0x4, 0x4) shmctl$auto_SHM_STAT(0xfcd, 0xd, &(0x7f0000000a80)={{0x4, 0xffffffffffffffff, 0xee00, 0x7, 0x97, 0x6, 0x5}, 0x6, 0x800, 0x5, 0x3, @inferred=r5, @inferred=r5, 0x4d, 0x0, &(0x7f0000000980)="718a4ed5fa5f3a9fad11793fc637bf3f54d4de868fd05dd90da4b8b9cc479cba1aa47171ea6f81d8826d7508aa15409299e08088e63c9ac622a90398b6e904e35c4d2d8f371a3d890a2e3373373d5a4b740bbec5810eb2", &(0x7f0000000a00)="c3546fb795bc118d8a62a6c65365ad67bfe6e04519324c4f2f30ab81260e59b717cbe74047989d4c2cc7ef88db56764cf8a4ccf6c47d824a2fcb167400339e8c7b1992f4d0adb15ad3f854a10ca62723e17610f009cce1e9349a831efe4326"}) sendmsg$auto_ETHTOOL_MSG_STATS_GET(r7, &(0x7f0000001d00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x7cfbb67ffee8cd16}, 0xc, &(0x7f0000001cc0)={&(0x7f0000000b00)={0x119c, r10, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STATS_HEADER={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STATS_GROUPS={0x1130, 0x3, 0x0, 0x1, [@generic="1ed0de5773e8ee234d0b024df60ef427dec79cc7485717b6246fc5750df5a7373d93ee2913502e985bbade28d88223f9ab94fada78724324b3928b7255d18c3f0b5a5315d0e7cc82ec5412a04398ac0385283198e39d816d39053089f8c8c631b41af46c05c4f5858998f59e5db16eb905043416b75c46ba50a30a7ae69fc3c4f7491c42ef08cf52d7afbd00efcc71ad", @nested={0x8, 0xb1, 0x0, 0x1, [@nested={0x4, 0x11c}]}, @nested={0x105a, 0x33, 0x0, 0x1, [@nested={0x4, 0xb1}, @generic="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", @generic, @generic="b7222f520520f055da1a17dc7e6af5d5e28fa24a6fb34fef76c2322d68ecd31098a85df619f95553ba3f6f50ca3f", @nested={0x4, 0xae}, @typed={0x14, 0x148, 0x0, 0x0, @ipv6=@loopback}, @typed={0x8, 0x17, 0x0, 0x0, @fd=r11}, @nested={0x4, 0x2}]}, @typed={0x8, 0x93, 0x0, 0x0, @uid=r12}, @generic="20f2c47f95cf447653cb8f432511d9541b56d6583aa69b653049c9b8494f84e2e97d5f106076c6a658c0b245369c1eb8"]}, @ETHTOOL_A_STATS_GROUPS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x4c, 0x0, 0x0, @fd=r0}]}, @ETHTOOL_A_STATS_HEADER={0x30, 0x2, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @ETHTOOL_A_STATS_SRC={0x8, 0x5, 0x80}]}, 0x119c}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$auto_TIOCVHANGUP2(r6, 0x5437, &(0x7f0000001d40)="020d8a77a1aafb44e61254fe094497083013ad8abae88bb91a4a6919f8dd1ffffd6167b009f8a57a2af66004715f83b1a2176334d22ea765ab3d6e7fdbcf115e3b") ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001dc0)={'bridge0\x00', 0x0}) r16 = prctl$auto(0x4, 0x2, r13, 0x3, 0x1) bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f0000001e00)=@bpf_attr_3={0x9, 0x1, 0x0, 0x3, 0x5, 0xe039, 0x0, 0x5, 0x7a, "9ee586de4431e0b371b0a3b5a18f9ba1", r15, 0x1, r7, 0x7, 0x1000, 0xff, 0x9, 0x40, 0x1, 0x9443, @attach_prog_fd=r16, 0xfffffff9, 0x8000000000000000, 0x5, 0x12, 0x3, r8, r0}, 0x4) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r18, 0xc0045009, &(0x7f0000001ec0)="d356d5650e8b6ac88e80d5e3d52512a3bababc8f4184fa46bf4b68390d376ae4906a8f99bbad6b072c9cc535742082620f8f2e0b99d9b70ed0e2aab54bae3aa2fe1945fb418ebc0d2ca6c844a56688a029e1c03ec6747b45c8ea90b24869cdc626ddcf2ddf399f2b90f705e89ad213fd767a679e85c3464db2d6694e5b94d3f79451457bf3cd6cfd13bcc047c1a8eefed2473d117cd6b274d4a093177ffca6ade1b95878e341c14d076e85a892a67439e57e14fa0a") r19 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000001fc0), r18) sendmsg$auto_KSMBD_EVENT_SPNEGO_AUTHEN_REQUEST(r17, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x14, r19, 0x1, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) getsockopt$auto_SO_NO_CHECK(r11, 0x10001, 0xb, &(0x7f00000020c0)='ethtool\x00', &(0x7f0000002100)=0x52cf9759) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r7, &(0x7f00000027c0)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x5304500}, 0xc, &(0x7f0000002780)={&(0x7f0000002180)={0x5e4, r9, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_SCAN_SSIDS={0x598, 0x2d, 0x0, 0x1, [@generic="a449e00d078290128476ba085ec31a46fd302b0208719039a6ae18efa240ee1cb89d72c2de81e13f788eabcfd131fd05dbeadfc26cc92886f763dca310b3f09959711d39d50c2be333c23461338d2fd64cbcbeb6ab4d61dfca43268697eb48c351b13ff08a68991ee1c08f5c63a78cccd7c7a240f5d1ff3cac15eeb6c8079dc7063f867f4989a4dc655492523de81a0bfa2e62b540c821783a5447a7a422b64c00f537929031b9010d6d895599c68759097a9c02611584705b5019f67dd5cb3d319dd98ee9", @generic="026528abf4c32eb78f4fca6d880d0aa5b2d8264a03e278e2e80e4a92ae90ea5de73c3be071e39e6041c6bc87af8349ab6cb77750185bfbef5ba29d01fc07fc74b6779a2cf0b2137928b4d80f18a15c4821555865beaa7155e9fc4970fd49004d46d354e13347a776bce17f3300a5f55c8440783b82", @nested={0xc9, 0xfe, 0x0, 0x1, [@generic="5be28baa850496cfeb84d75bcf7230e6999db08f2102cde00d04329f1bcedcde00e7cd589437c223f97d02073f4c92b5602273e2a33279b980fbb8d813c08ab484745f5bae1100ebbd9a7a540bc34604a8a4400f70323690b9dbfec38c4e069d0c001159aaee30c93764fc593d1d24a33b933318e7c6c5c351acd51fffa12c3416bd451dcfe0cb0d", @nested={0x4, 0x133}, @typed={0x8, 0x45, 0x0, 0x0, @pid=r5}, @generic="0dcdb6806909af4576c6dcfa4ddadb3222f044d98e36a70e24e926a2d619685621c0b1c16a", @nested={0x4, 0x104}, @typed={0x8, 0x45, 0x0, 0x0, @uid=r12}]}, @generic="c1", @generic="ed896c20c7000690adfd3e6513fdf9fc4ec6194399d582702a4d76ddf207686e53e8ebeef761cbd51f33f9e31675c3d9c17cf5cda228bc754dd435e5d7fee346b7db3d84325471e87f1c597bedc4e15f0a236757942750f407821e2493a6a6373e857a66dc3170e5bceef547652960a257912d23a3ec5a1dfb9f6fbac2cc96771edeb4ff9e3abfe4be8d6803477ed45cabb71bebdfc5e2e5d51f528dfdc3f2e0f124b802d7291330a7e1ec2faea9e563e7a3d3571e2ab6553adac1ac224de1f8269396234f46f062b8c012", @typed={0x8, 0xd0, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0x12c, 0x0, 0x0, @uid=r12}, @nested={0x174, 0x84, 0x0, 0x1, [@nested={0x4, 0x3a}, @typed={0xb4, 0x100, 0x0, 0x0, @binary="44415c37a400bc3922fcf6ec4f9b3f611afa6db2c56146334be9fb98df2585f59464b08fa94150ada1d220bf1b7d6ae16076101f94d1d701e9d033322f5468e67cf340cbf75479064cf03bb480e4086b3ac7a911927f4ae23ead548ad76da3fcee751867241e18176b5273b39dfcf97905442e7f359114f0fc8091e01f99ecbcc90be20ad43ed77381def15e770e63bc209195e65f3b904a3a74f4e5c1ddec0851cfb526f5cd5c43e6994566389bc82e"}, @nested={0x4, 0xb8}, @generic="7b8aff1cc9cf2a56672db7287b11be9e5c0f73786a98f92cdf7d3a3fe65f38c5145912b41b558a64ca314c08daedeca24a76965ee12037ab4505f89ae04baf60ea75e15c1ea1c49adaf53e58ec56305c8b20737e28e9da4a6fca0b1ad5753d167b83518e727623b0fb1b1a3c09b6e2c3231331b9f1e12aebda7f7e6a6561493ad2c9251970f5343183ce83acba3015609748e0ca38171b7a0ddc9d39f3e5f806643615702ad51820", @typed={0xc, 0xe1, 0x0, 0x0, @u64}]}, @nested={0xc8, 0x5, 0x0, 0x1, [@generic="3cad71cd66150471eba010c3be4859712ce46a5d0eb7f2fb289d7f9bb94eb7cfb79b2f7c7604e67193ae890d3aa15ca98eb3cc56", @generic="01f18f148dc597a753c0c395d044f5bed3f23ef3a9ddd1c86e64154ceb45907f593c73b8bb2a935577bf0fc4535a91735dfcb8f44a366d1e2cb478fad92df5099b9587ad5d3932393e61629b3fd25b8d6dfc42e29b74f341f00a8b3daefe6bb593412ed656f6ba0fab88a5e3a3b7194d860a580aee0dd8df1ca849797c9a47e8", @typed={0x8, 0xa8, 0x0, 0x0, @u32=0x5}, @nested={0x4, 0x17}, @nested={0x4, 0x8d}]}, @generic="04c8ecd432471200d2e8dbd17109630a6047b6c687aaf50f14ec7242a3c0b84c02008d23166173e64dfe9b7d4b041d0de0a4fcba7eeaeddee1dbba12c260bd1c201fddf3c05e36f047902d3898990e65efb953e4a7e25f08c6f03259b97315e12680f32f56fa0636be93c257ac984f405575efdee27a"]}, @NL80211_ATTR_ADMITTED_TIME={0x6}, @NL80211_ATTR_PID={0x8, 0x52, r14}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, "387e7bafcb6d1b4003ca61134ebd6111c8be380d"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x3}]}, 0x5e4}, 0x1, 0x0, 0x0, 0x20000094}, 0x84) setsockopt$auto(r11, 0x1000, 0xfffff001, &(0x7f0000002800)='veth0_virt_wifi\x00', 0x0) 2m26.733750582s ago: executing program 2 (id=2219): mmap$auto(0xb71f, 0x4, 0x4, 0x16, 0xffffffffffffffff, 0x6) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000) (async) socket(0x2, 0x801, 0x100) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/ocfs2/loaded_cluster_plugins\x00', 0x800, 0x0) preadv$auto(r2, &(0x7f0000000080)={0x0, 0x6}, 0x7, 0xbbf, 0x69bf) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec8\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000100)={'\x00', 0xffff, 0x6, 0x80, 0x9b4, 0x9, "ce7009002ce100", '\x00', "0201ccb7", '\x00', ["00000f0008b330ac007abfc1", "000000000000030000a400", "0800000000000000000000ec", "00deff1000"]}) (async, rerun: 32) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @empty}, 0x51) (async, rerun: 32) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000300)='/d\x00'/12, 0x100000a3d9) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) (async) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f00000001c0), 0x2e8141, 0x0) (async) r5 = socket(0x10, 0x2, 0xc) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xdc93f75efa074bf9}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x8, 0x400, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x400c080}, 0xd0) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) (async) socket(0xf, 0x3, 0x2) (async) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) open(0x0, 0x14d27e, 0x72) (async) socket(0x1, 0x2, 0x1) (async, rerun: 32) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xfff, 0x1, 0x5, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) (async, rerun: 32) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 2m17.369369382s ago: executing program 4 (id=2254): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) (async) read$auto(r0, 0x0, 0xe8) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) getcpu$auto(0x0, 0x0, 0x0) (async) getcpu$auto(0x0, 0x0, 0x0) ioctl$auto_BLKTRACESTART2(0xffffffffffffffff, 0x1274, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) prctl$auto_PR_SET_NO_NEW_PRIVS(0x26, 0x3, 0x10000, 0x2, 0x1) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) mprotect$auto(0x110c238000, 0x1, 0x3) (async) mprotect$auto(0x110c238000, 0x1, 0x3) madvise$auto(0x110c230000, 0x8031ca, 0x9) 2m16.960820731s ago: executing program 4 (id=2257): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="ffa2"], 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x20056, 0x8020000000f, 0x4, 0x5f, 0x20000000000804, 0xfffffffffffffffe}, 0x6f0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) r2 = prctl$auto_PR_SET_MM_ENV_END(0x8, 0xb, r1, 0xd28b, 0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r4, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000980)={0x324, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_TX_INFO_FLAGS={0x65, 0x15, "8b998eed207486c92329ec9f9fbe20473f5b56df593c9ba8475f5643fd89ab333f8220e49dbe362c7c9cabb658e764d0b04a56c7a77a0850c22988a3aaa8d848767d6d7aa36489dac686c4065fa05844ced1e02ab857f5a7487be66530af3685f4"}, @HWSIM_ATTR_REG_HINT_ALPHA2={0xc, 0xb, 'ethtool\x00'}, @HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}, @HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_PMSR_RESULT={0x290, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x274, 0x5, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x20, 0x1, "4e748530a0bd2084d4448f809513d189374fd5c4615cc3b0bc25fd0c"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x68, 0x1, "ef10e26d5d1c756a11371314fba81551a41c80151bc2a1f09bac9987b5d6b46d3e1f190fb830872cb2065d68acb9fb24322e31325396f84d70597a89f872715ecb2c79ef1d3cb33c9d04d1b7c44317250adb198ecd84a53b140c007165317a19b44cd479"}, @NL80211_PMSR_PEER_ATTR_RESP={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x5}]}]}, {0x1d4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x20, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x8000}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x4}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x44, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x3}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x89}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x2}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x24, 0x1, "eed5135d4564c502aae21b44df4791922c06305d5d003ce22bd406851b622d94"}, @NL80211_PMSR_PEER_ATTR_RESP={0x148, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x187}, @NL80211_PMSR_RESP_ATTR_DATA={0x128, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xc, 0x14, 'ethtool\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xa, 0x14, '-.]@*\xf4'}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xfffffffffffffff2}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xc, 0x14, 'ethtool\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x7f}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0xc7c}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0xff}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x5c}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0xeefb}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x7fffffffffffffff}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xc, 0x14, 'ethtool\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x91}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x3}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x18, 0x5, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x80}]}]}]}]}, @HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x324}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0xa}, 0x7}, 0x3, 0x2) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/phonet\x00', 0x42000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000002100)=""/15, 0xf) r6 = socket(0x10, 0x2, 0x0) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fcdbdf250a0000ff00000000140001"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r8 = ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000040)) r9 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="f5096cfb9e000000000001000000000000bf72", @ANYRES16=r9, @ANYBLOB="00022dbd7000fbdbdf2506000000080003000700000008"], 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x440c0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000d80)={'veth0_to_hsr\x00'}) sendmsg$auto_NCSI_CMD_CLEAR_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x54c, r9, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NCSI_ATTR_DATA={0x51c, 0x5, "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"}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0xfffffff9}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0xa7}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0xb}]}, 0x54c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 2m16.688084514s ago: executing program 4 (id=2258): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x40000c, 0xdf, 0x9b72, r1, 0x7fff) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)=""/209, 0xd1) socket(0x2, 0x1, 0x0) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x68802, 0x1a4) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r5, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x6, 0x2, 0x6) mknodat$auto(r4, &(0x7f0000000380)='./file0\x00', 0x0, 0x7fffffff) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x20001, 0x44f, 0x7, 0x1, 0x1007181, 0x10008a0d, 0x7, 0x7, 0x7, 0x89, 0x26, 0x4, 0x200000000001, 0xfffffffffffff343, 0xfffffffffffffffa, 0x500000000000000, 0x0, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xae1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x5, 0xd) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0x80, &(0x7f00000001c0)) semctl$auto_SETVAL(0x4, 0xfffffff8, 0x10, 0x0) mmap$auto(0x5, 0xe983, 0x80c, 0xeb1, r0, 0x1) read$auto(0xffffffffffffffff, 0x0, 0x20) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/ad_actor_system\x00', 0x0, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000180)={0x7fffffff, 0xffffff03, 0x2, 0x6, 0x4, 0x8, 0xffffffffffffffff, [0x0, 0x3], {0x6, 0x6, 0xf, 0x29f, 0x4, 0xffffdffd, 0x101, 0x17f, 0x2}, {0x2ff, 0xfffffffd, 0x90, 0x5, 0xffffffff, 0x40, 0x4, 0x8, 0x100000004}}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/lockd/nlm_end_grace\x00', 0x8282, 0x0) socket(0x2b, 0x1, 0x0) ioctl$auto_TCFLSH2(r3, 0x540b, &(0x7f00000003c0)="e3dedd78f582c6dd901c6a5ca0fb491a2cc38052a757d33e53b92abe8e122b1c593f5af6ff71259baa6b8cf64287841d07d757ec6b27f1f6517d692574cd0e3478ca87a8cda8d573e285e6105b16ea02914e75fbfb58ad6db71cd78a6ae92d1e3acaef7ef93a199fa96f58046ab8c47cdd14063b09dc37f0f36dac3a214f23e45b23ffef06e43df7c0f60693dbb6965a9f72d7291c9204ea95b3ce87ca2f1649e917cf825d2ed33fb1b475ee3abba1ff826c9a8b1e749acd654ee1") 2m15.672311282s ago: executing program 4 (id=2261): madvise$auto(0x0, 0x2000040080000003, 0xe) write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) (async) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xc4\xe2q;KzH\n\xc4\x9b\xf0\xa0p\xa7fFn\xf8\xd18|\x1b\xb1cO\xaa\x14\xbf_5a\xcb\x97\x01)V\xa5\x1b\xa6Ug\x0e\x16\x1e\xd9\xa1\xa3\x1bi\x9a\x8a4\xf3\xfeX/$\xf5\x9c\xf8vp\x9b\xbe\xccE\x1d\x8e\xcc\xacJ\x7fQ3\xd2', 0x100000a3d9) socket(0x2, 0x3, 0xa) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) pipe2$auto(0x0, 0x5) unshare$auto(0x40000080) unshare$auto(0x17d0) semctl$auto_SETVAL(0x328, 0xd77, 0x10, 0x9) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) (async) r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r2, &(0x7f00000000c0)="632d1bfe595046ab5c40bd6163307acb6d16baef6176e669a216aae1144ccafdd80500ffffffffdfff1a0e00"/56, 0x38) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) eventfd$auto(0x2200000c) (async) socket(0xa, 0xa, 0x6) ioctl$auto_SG_GET_ACCESS_COUNT(r3, 0x2289, &(0x7f00000002c0)="9e450daa73a4feb3f0e8bca4f7a3468561d26a8fee043cb8530c73eab96ee666bdc24df3651b1256d81fee4fb6293a22b58465850fd53feac35a9ab3cd86c238f6cdc49ae3ace90b2093d4caac451a15c9a68651feef3192430cb3f9b7f9df546b0c495b50ddd389423eca80f11c2e8933930d31cee7de08ecfcad6475777a7eeba160c82dc1e690656c7fda9268d18e2712a8c3406f2da67531f914999360fd3e790b8b4baebccdd9525ff5679991d431e1e051650e6590746d0ca0f9869747c7eddef674e1fc67feacff4ad36813015d4ad6e10e211d9df7e6602940191210aaa7f000f6a1dc0c301d2cee9ef7d21b10ce7211e6") (async) setsockopt$auto(0x4, 0x0, 0x16, 0xfffffffffffffffe, 0x0) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000008000) io_uring_setup$auto(0x1406, 0x0) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x88042, 0x0) read$auto(r4, 0x0, 0x20) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2m14.257131535s ago: executing program 4 (id=2264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/status.6\x00', 0x165b42, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socketcall$auto(0xda18, 0x0) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000200), r3) r5 = fanotify_init$auto(0x1, 0x34) sendmsg$auto_NL80211_CMD_START_NAN(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="742eb076bc62dc1975666c31918af2a683d7a948e5121a445ad5ad4ab6ea9f7e894f0000192356315d5eca4e1cfec8083cc36391e5e8a8e14a5fcbb40b9d660eeabf8b1c0b9470bfbb5ddd1625c8438e5578d1ecdb7b4a89955aeca5ed37bfce270a8bcd3146a35317fdcdacfc1809c52d9efecbde62e5df6fc336f8", @ANYBLOB="251c9b8b45e897d3ed34a41c0ecd2993cc7c238a1941bcf8f772620f2a23637f0bc33ffa1a11ad9a7dc1cc5c37c71ac730a39ebc8297", @ANYBLOB="02002bbd7000ffdbdf25730067009f002901ee3f8e9facb16ce18aefa3bcc7123f4be6a8ee526daf111b12a7dffc5824c97d4dcbdf88815959d73544e80642411f25fdef59a7896ad07fa2c94a4da15751ec65d02a12b4bddfe53d8adca578a6411acae0e158e9ec5955c15452af1e394bf0a1c22928faff36d5e5ee6794ac72ff63bc6a7579e45d7dfeb2f64eba65ff64b1100069067160dc3f79c04c20cdc1b678351c4765115d9c0000000000"], 0xb4}, 0x1, 0x0, 0x0, 0x8855}, 0x845) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) move_mount$auto(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x176) mmap$auto(0x0, 0x40009, 0x6, 0x9b72, r5, 0x28000) sysfs$auto(0x2, 0x2000000000040, 0x0) r6 = socket(0x9f7f43fd9140fcd2, 0x3, 0xa) setsockopt$auto(r6, 0x0, 0x19, 0x0, 0x9) socket(0x1d, 0x5, 0x632) socket(0x2, 0x1, 0x106) setsockopt$auto(0x1, 0x1, 0x4c, 0x0, 0xbb) r7 = socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f0000000040)=0x8) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) ioperm$auto(0x0, 0x2, 0x81) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_TCP_METRICS_CMD_DEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r1, 0x401, 0x70bd29, 0x25dfdbfc, {}, [@TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @broadcast}, @TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x840) 2m14.119997282s ago: executing program 4 (id=2266): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_THREADS_GET(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44848}, 0x4000000) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000019c0), r0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030527bd7000fbdbdfc7ffe828fa1674cf0800010000d377cd91c50c00004698607cc4b5d84ba6324c95177863d639f4ff688391d2bce676d05d44d5b8e52d86cf8ec31205d264d6f5ea6629128c651ed2cd783d7e5a36126a9b92ffaa26c26d1ab62960dfe5e7b201dd798ee7985d40732199b5ef3f97", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) socket(0x23, 0x800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0xe, 0x2, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x5, 0x0, 0x7, 0x4, 0x3}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000c80), r3) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) write$auto_proc_pid_attr_operations_base(r5, &(0x7f0000000ec0)='9', 0x1) getsockopt$auto_SO_PASSCRED(r5, 0x7, 0x10, &(0x7f0000000400)='batadv\x00', &(0x7f0000000d00)=0x1fe) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x3, 0x2000d, 0x7, 0x17, r5, 0x10008000) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r6, &(0x7f0000000cc0)='MAC802154_HWSIM\x00', 0x8) socket(0x1e, 0x2, 0x1) getpeername$auto(0x3, 0x0, 0x0) r7 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0) r8 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) splice$auto(r7, 0x0, r8, 0x0, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 2m11.752737231s ago: executing program 34 (id=2219): mmap$auto(0xb71f, 0x4, 0x4, 0x16, 0xffffffffffffffff, 0x6) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000) (async) socket(0x2, 0x801, 0x100) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/ocfs2/loaded_cluster_plugins\x00', 0x800, 0x0) preadv$auto(r2, &(0x7f0000000080)={0x0, 0x6}, 0x7, 0xbbf, 0x69bf) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec8\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000100)={'\x00', 0xffff, 0x6, 0x80, 0x9b4, 0x9, "ce7009002ce100", '\x00', "0201ccb7", '\x00', ["00000f0008b330ac007abfc1", "000000000000030000a400", "0800000000000000000000ec", "00deff1000"]}) (async, rerun: 32) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @empty}, 0x51) (async, rerun: 32) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000300)='/d\x00'/12, 0x100000a3d9) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) (async) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f00000001c0), 0x2e8141, 0x0) (async) r5 = socket(0x10, 0x2, 0xc) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r5, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xdc93f75efa074bf9}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x8, 0x400, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x400c080}, 0xd0) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) close_range$auto(0x2, 0x8, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) (async) socket(0xf, 0x3, 0x2) (async) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) open(0x0, 0x14d27e, 0x72) (async) socket(0x1, 0x2, 0x1) (async, rerun: 32) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xfff, 0x1, 0x5, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) (async, rerun: 32) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 1m59.078984125s ago: executing program 35 (id=2266): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_THREADS_GET(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44848}, 0x4000000) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000019c0), r0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030527bd7000fbdbdfc7ffe828fa1674cf0800010000d377cd91c50c00004698607cc4b5d84ba6324c95177863d639f4ff688391d2bce676d05d44d5b8e52d86cf8ec31205d264d6f5ea6629128c651ed2cd783d7e5a36126a9b92ffaa26c26d1ab62960dfe5e7b201dd798ee7985d40732199b5ef3f97", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) socket(0x23, 0x800, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0xe, 0x2, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x5, 0x0, 0x7, 0x4, 0x3}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000c80), r3) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r4, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) write$auto_proc_pid_attr_operations_base(r5, &(0x7f0000000ec0)='9', 0x1) getsockopt$auto_SO_PASSCRED(r5, 0x7, 0x10, &(0x7f0000000400)='batadv\x00', &(0x7f0000000d00)=0x1fe) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x3, 0x2000d, 0x7, 0x17, r5, 0x10008000) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r6, &(0x7f0000000cc0)='MAC802154_HWSIM\x00', 0x8) socket(0x1e, 0x2, 0x1) getpeername$auto(0x3, 0x0, 0x0) r7 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0) r8 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) splice$auto(r7, 0x0, r8, 0x0, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 1m37.726219844s ago: executing program 7 (id=2379): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) r0 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="180000ff", @ANYRES8=r0, @ANYBLOB="01", @ANYRES32], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) 1m37.343162237s ago: executing program 7 (id=2382): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/14/effective_affinity\x00', 0x2, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000240)=""/255, 0xff) mmap$auto(0x0, 0x5, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x0, 0x5, 0x0) inotify_init1$auto(0x800) r1 = io_uring_setup$auto(0x4, 0x0) socket(0x10, 0x3, 0x15) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvfrom$auto(r1, &(0x7f0000000180)="32ccfa5a381ed70519d70d5207836fbfe003e4f31ea780fdb86984998965287dd08735834e6c3ccc5f0f9b1b853f8f", 0x7, 0x8a0, &(0x7f0000000200)=@generic={0x10, "4deadaa13f0f957be146b95e562b"}, &(0x7f0000000340)=0x8) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmallocinfo\x00', 0x400b43, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, 0x0, 0x4d) socket(0x5, 0x1, 0x7) bind$auto(0x3, &(0x7f0000000000)=@sco={0x1d, @none}, 0x6c) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r4 = gettid() process_vm_writev$auto(r4, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r5, 0x80045439, 0x0) ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000040)) 1m35.71587969s ago: executing program 7 (id=2385): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) symlink$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0x400, 0x1, 0x2d}, 0x18) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff01c}}) 1m34.49594753s ago: executing program 7 (id=2391): sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket(0x2, 0x3, 0xa) connect$auto(r0, &(0x7f0000000080)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x54) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rpc/nfsd.fh/channel\x00', 0x8f3b7a51b80ebd01, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x4b70, r1) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto_XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f00000003c0)={r0, 0x0, 0xfffffffffffffff9, 0x7, 0x5, 0xff, [0x666b4243, 0x7fff, 0x3, 0x7, 0x1, 0x5]}) sendmmsg$auto(r0, 0x0, 0x9aa, 0x6) prctl$auto(0x59616d61, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe5) (async) prctl$auto(0x59616d61, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffe5) bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f0000000300)=@task_fd_query={0xffffffffffffffff, r2, 0x8, 0x80000000, 0x68e7, 0x9, r0, 0x0, 0x8}, 0x0) (async) r3 = bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f0000000300)=@task_fd_query={0xffffffffffffffff, r2, 0x8, 0x80000000, 0x68e7, 0x9, r0, 0x0, 0x8}, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="00012cbd7000ffdbdf25210000000500298000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x40081) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) madvise$auto(0x1, 0x9, 0xa) (async) madvise$auto(0x1, 0x9, 0xa) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r5, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf05010000001c0002800c00010006000000000000000c000200ff0000000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000040) (async) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r5, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf05010000001c0002800c00010006000000000000000c000200ff0000000000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000040) socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xffffffaf, 0x6, 0x3, 0x0) (async) socketpair$auto(0xffffffaf, 0x6, 0x3, 0x0) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) (async) setsockopt$auto(0x3, 0x1, 0x10, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) 1m33.732985322s ago: executing program 7 (id=2392): sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000006300)=ANY=[@ANYBLOB="a0520000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbdbdf2516000000311607801301e1800c0041000100000000000000337c85289308002700", @ANYBLOB="06317f04b12df7f5f7dfea5d6aca1addddb676f3845fede099f955090a0a65ff7a0e44267122aa930a29edcbdb59926047e1a94ca3d5d85bac2f6e52bef47a40893cd4a39854a5478e6e17e2165a390bf209227234f0a6ba6940263394505c6ebe0b684d565d2d4a8fc7841ec1f0727e033927ff8fec4aa0aa2b507a0e4f2d75104f72dec496e28b9dbb917a40bf8f500241abc43351f1040622a01477af1dcad8b579668dd1edc24ee559f35e9d1882053285eeabd4", @ANYBLOB="ec003180e6007c008b633f5d46f7704a175225762a8f3ea7ee67e189d2024e24c7", @ANYRES8, @ANYBLOB="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"], 0x52a0}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c040) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket(0x10, 0x3, 0x6) eventfd$auto(0x5) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x3, 0x1) bind$auto(0x7, &(0x7f0000000000)=@in={0x1d, 0x0, @rand_addr=0x1200000}, 0x3e) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\x83\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\x8ev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)\x17\xbby\xe5\xc4w\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0Z>\xe1=\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x00'/192, 0x107, 0x0) statfs$auto(&(0x7f0000000180)='}[,&*}\x00', &(0x7f00000001c0)={0x8, 0x2, 0x5, 0x3, 0x1, 0x7ff, 0x200, {[0x6, 0x3]}, 0x9a, 0x7, 0x0, [0x8, 0x80000000000009, 0x6269, 0xfffffffffffffff6]}) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0xfe04) mmap$auto(0x7, 0x100, 0x80000001, 0x7fffffffffffffff, r0, 0x4) 1m33.35200091s ago: executing program 7 (id=2395): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clockevents/clockevent0/unbind_device\x00', 0x20001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioperm$auto(0x7, 0x6, 0x2) io_uring_setup$auto(0x6, 0x0) mq_open$auto(&(0x7f0000000000)='/dev/cec2\x00', 0x6, 0x1, &(0x7f00000001c0)={0x8cfb, 0x7fff, 0xffffffff, 0x3}) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSWINSZ2(r1, 0x5414, &(0x7f0000001080)="f0fa") poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) close_range$auto(0x2, 0x8000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0) ioctl$auto(0x3, 0x5309, 0x38) rename$auto(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)='./cgroup\x00') close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, &(0x7f0000000140)=';') select$auto(0x8, 0x0, &(0x7f0000000340)={[0x9, 0x8000, 0xfffffffffffffffd, 0xd7d, 0x4, 0xd, 0x100, 0x10000000008, 0x9, 0x7, 0x3, 0x4, 0x847, 0xffffffff7fffffff, 0x1, 0x6]}, 0x0, 0x0) ioctl$auto_BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000580)={0x2, 0x1a00000, 0x7, [{0x9, 0x0, 0x18, 0x5, 0x1, 0xff, 0x3, "f93b92df", 0x8000000000000001, "ba90d9a4852e2c04a9d2a660ae77a55d21df9f8577fe7359"}, {0xabb, 0x4, 0x1, 0x81, 0x2, 0x7f, 0x3, "5959b2b9", 0x1, "029f855f12db2fc9bccab95ab6adc1f4c9cb7a62f703cf10"}, {0x1, 0x80000001, 0x7, 0x7c, 0x40, 0x4, 0x8, "09b26893", 0x837, "d0b50d38e8783e41419729c768c18a5bf56e47341c413998"}]}) r3 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) r4 = open_by_handle_at$auto(r3, &(0x7f0000000040)={0x8, 0x2, '\v\x00\x00\x00\x00\x00\x00\x00'}, 0x2) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=@enable_stats={0x7}, 0x81) socket$nl_generic(0x11, 0x3, 0x10) getsockname$auto(0x3, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000440)=""/7, 0x7) write$auto(0x3, 0x0, 0xfdef) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) 1m17.718296363s ago: executing program 36 (id=2395): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clockevents/clockevent0/unbind_device\x00', 0x20001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioperm$auto(0x7, 0x6, 0x2) io_uring_setup$auto(0x6, 0x0) mq_open$auto(&(0x7f0000000000)='/dev/cec2\x00', 0x6, 0x1, &(0x7f00000001c0)={0x8cfb, 0x7fff, 0xffffffff, 0x3}) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSWINSZ2(r1, 0x5414, &(0x7f0000001080)="f0fa") poll$auto(&(0x7f0000000040)={0x3, 0x1, 0x5}, 0x5, 0x80000000) close_range$auto(0x2, 0x8000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0) ioctl$auto(0x3, 0x5309, 0x38) rename$auto(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)='./cgroup\x00') close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, &(0x7f0000000140)=';') select$auto(0x8, 0x0, &(0x7f0000000340)={[0x9, 0x8000, 0xfffffffffffffffd, 0xd7d, 0x4, 0xd, 0x100, 0x10000000008, 0x9, 0x7, 0x3, 0x4, 0x847, 0xffffffff7fffffff, 0x1, 0x6]}, 0x0, 0x0) ioctl$auto_BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000580)={0x2, 0x1a00000, 0x7, [{0x9, 0x0, 0x18, 0x5, 0x1, 0xff, 0x3, "f93b92df", 0x8000000000000001, "ba90d9a4852e2c04a9d2a660ae77a55d21df9f8577fe7359"}, {0xabb, 0x4, 0x1, 0x81, 0x2, 0x7f, 0x3, "5959b2b9", 0x1, "029f855f12db2fc9bccab95ab6adc1f4c9cb7a62f703cf10"}, {0x1, 0x80000001, 0x7, 0x7c, 0x40, 0x4, 0x8, "09b26893", 0x837, "d0b50d38e8783e41419729c768c18a5bf56e47341c413998"}]}) r3 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) r4 = open_by_handle_at$auto(r3, &(0x7f0000000040)={0x8, 0x2, '\v\x00\x00\x00\x00\x00\x00\x00'}, 0x2) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=@enable_stats={0x7}, 0x81) socket$nl_generic(0x11, 0x3, 0x10) getsockname$auto(0x3, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000440)=""/7, 0x7) write$auto(0x3, 0x0, 0xfdef) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) 1m11.521043886s ago: executing program 6 (id=2455): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) r0 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r0, @ANYBLOB="01", @ANYRES32], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) 58.602931337s ago: executing program 6 (id=2455): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) r0 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r0, @ANYBLOB="01", @ANYRES32], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) 58.210162126s ago: executing program 6 (id=2486): pipe$auto(&(0x7f0000000500)) r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100) write$auto(r0, &(0x7f0000000000)='}\x00', 0x5) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r2, 0x705, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) r3 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000e00)='/sys/kernel/debug/kvm/halt_attempted_poll\x00', 0xc42, 0x0) flistxattr$auto(r3, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x4, 0xa910, 0xffffffffffffffff, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyxf\x00', 0x109401, 0x0) ioctl$auto(r5, 0x540a, 0x0) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) mremap$auto(0x4000, 0x8, 0x3fd6, 0x0, 0x400000002) unshare$auto(0x20000080) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) r7 = semctl$auto_GETPID(0xfffffff8, 0x0, 0xb, 0x6) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x7, 0x101, 0x7, "aab8e80600080043529f895cf5e8ec8f46cbb766439daa41e1aa00000000001200000000070a000000ffffff", @inferred=r7}, 0x6, 0x8, 0x6, @raw=0xd7, @integer64={0x40736b1f, 0x1, 0x8}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x42400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f0000000180)=""/157, 0x9d) 55.591807223s ago: executing program 6 (id=2496): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r0 = prctl$auto(0x3e, 0x100000000000001, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) ioctl$auto(0x3, 0x40104d09, 0x5) capget$auto(0x0, 0xfffffffffffffffe) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001180), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x2, 0x179, [{0xfe, 0x400, 0x9}]}) ioctl$auto(0xffffffffffffffff, 0x400454cb, 0x5) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) write$auto_rfkill_fops_core(r0, &(0x7f0000000080)="f094d8a834dd3eea29ef6cc44d4ad20beae88e32a22454e4cf2a3cecc54632a74d8effa95c29f387f86d5b", 0x2b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) 54.54354078s ago: executing program 6 (id=2503): kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=0x0, 0x800c000, 0x40000000, 0x800c000}, 0x4) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/crash_hotplug\x00', 0x8a080, 0x0) bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000100)=@link_update={r0, @new_prog_fd, 0xc, @old_map_fd=r0}, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vhci_hcd.9/usb27/27-0:1.0/ep_81/power/runtime_status\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001780)=""/4129, 0x1021) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000580)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9\xe8\xb2\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6E*\xc9\xdd.q\xdbAX\xf6\xfaD\xcdz\xbc~\xf30LE\xb5\x18Wf\xd3\x9b\\\x1c\xbb^\xfb9\xe5\x1b:\xa4\xdd\x81\x91\\\xbc\x1fUl\xfa)\xbf\x9dPV\xae\xa9\x9c)\x01|\xfe\xd0!Rx\a\xc4\xb1$\x8eE\xc2j\x83sLS\xa8H\xf6\xf2,R\x90:\x8fx\xab\x90\xfe$h\x80!\xe2\nY#\xee\x1b}O=\x8bn\xd7zZ\x18\xa7\x9e~\x94k\x8e\xdba\xf2\xc3G\x8egR3\x1d\x01J\x87\x14(}\f\xb1}%N|z,\xbe\x1fB\xd3\xeb\xec\x83X\x8f\x97\x95\xfd\xed\xe6wt\x1d\xb3\xa8\xfb)L~}\x9f\xbf\xd0\xc9\x9d\x82-C\xc3Ez@\x8c\xbf\xa2 \x88\\\r6M\x83', 0x4, 0x0) 52.527639444s ago: executing program 6 (id=2508): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/route/flush\x00', 0x40001, 0x0) write$auto(r0, &(0x7f0000001680)='\v\x90\xd1\xda\xbc>1\x8ag\x14\x18\xbe\xdc\x00', 0x1) (async) close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x40, 0x93f, 0x1fee0, 0x3, 0x6, 0xfffffffffffffffe, 0x1ff, 0x5, 0x8005, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x8, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, [0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7fffffffffff, 0x9, 0x0, 0x0, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x1fe, 0x82) io_pgetevents$auto(0x7, 0x9, 0x7ff, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1}}) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x2, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) (async) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async, rerun: 64) fallocate$auto(r1, 0xfff, 0x8, 0x80000000) (rerun: 64) 43.373872021s ago: executing program 8 (id=2545): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x81fe, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x2000000003}, 0x6f4) (async) r1 = bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x81fe, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x2000000003}, 0x6f4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/tty/ttyr8/power/runtime_suspended_time\x00', 0x62200, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/tty/ttyr8/power/runtime_suspended_time\x00', 0x62200, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x15, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x0) socket(0x21, 0x6, 0xd08) sendfile$auto(r2, r2, 0x0, 0x100000000) (async) sendfile$auto(r2, r2, 0x0, 0x100000000) pipe$auto(&(0x7f0000000040)=r0) (async) r4 = pipe$auto(&(0x7f0000000040)=r0) r6 = socket(0x2a, 0x2, 0x1) connect$auto(r6, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0x7ffe}, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) (async) r7 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r7, 0x0, 0x1f40) (async) read$auto(r7, 0x0, 0x1f40) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r8, &(0x7f0000000200)={0x0, 0x7}, 0x3) syz_genetlink_get_family_id$auto_psample(0x0, r6) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) write$auto_tracing_mark_raw_fops_trace(r5, &(0x7f0000000080)="832814e318e918ecca892a4b584ed48f8d7bcea32fcbdc92f54e7cb50a037976bce7ed8d0d47badf84409329ae76e04ab1281461ca4c485db3d8fcca79526877bfc99871b4ccbdf7ed6bc8dae4acd52f2b19330b707bcb03969f3a1dfc39ce6a37a763af4c0ca287be46549bb6b7e265e0cf1bc4c6ed1e14cda4344d93a3a72c2bd8806eeb63c991c40c1f73b40791a18b0577d2399e83044cef0c7b2643b48981448c0cedf9feb5c11adaa35029bfd895b1dcffbcec8263e5d92b373cf8a4ae53224fa7d92b96af764679", 0xcb) madvise$auto(0x0, 0x2003f0, 0x15) r9 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket(0x2, 0x3, 0x1) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000200), r9) (async) r10 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000200), r9) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r3) syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000000380), r9) sendmsg$auto_NL80211_CMD_GET_SCAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c97de8267fbe4cf", @ANYRES16=r11, @ANYBLOB="000426bd7000fcdbdf2520000000080014000500000008003f000c00000008006100170a000006001a010b0000000800690004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24048094}, 0x1) sendmsg$auto_SMC_PNETID_ADD(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x4, r10, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0xd, 0x1, '/dev/sda\x00'}, @SMC_PNETID_IBNAME={0xb, 0x3, '\'):{*\x1f\x00'}, @SMC_PNETID_NAME={0xd, 0x1, '/dev/sda\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40015}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x3, 0x1) 43.141396389s ago: executing program 8 (id=2546): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xa3, 0xeb1, r0, 0x8000) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0) fsopen$auto(0x0, 0x1) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r1 = socket(0xa, 0x5, 0x84) sendto$auto(r1, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) 42.680359115s ago: executing program 8 (id=2548): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00', 0x0}) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x6, 0x24, 0xf, 0x800, 0x400, 0x0, 0xffffffffffffffff, 0x80f0c8, 0x60, "38c1d5cbcb9f6b5e511f0cd8ed068f65", r3, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_prog_fd, 0x6, 0xffff, 0x8, 0x4, 0xfffffffe}, 0x5) read$auto(r1, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/pci0000:00/0000:00:01.1/ata1/link1/dev1.1/power/runtime_active_time\x00', 0x129302, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r6 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/binderfs/binder0\x00', 0x102, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff49, 0x5, 0x1823, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x0, 0x1]}, 0x0) r7 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r7, &(0x7f0000000180)=""/61, 0xfffffeeb) fstat$auto(r4, &(0x7f0000000340)={0xffffffffffffffff, 0xfffffffffffffff0, 0x4, 0x74, 0x0, 0xffffffffffffffff, 0x0, 0x2c0000000000, 0x100000001, 0x38e08578, 0x4, 0x9, 0x0, 0x4, 0x1, 0xf6, 0x21}) ioctl$auto_KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f0000000100)={0x5, r8, 0xc132, 0x1}) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x18, 0x401, 0x300000000000) prctl$auto_SECCOMP_MODE_STRICT(0xf, 0x1, 0x0, 0x9, 0x2) 41.66917211s ago: executing program 8 (id=2550): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x2, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card1/pcm0c/sub3/sw_params\x00', 0x80240, 0x0) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x20001, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SIOCSIFHWADDR2(r2, 0x8924, &(0x7f0000000440)) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000100), r2) socket(0x2, 0x2, 0x0) socket(0x5, 0x5, 0xfffffffd) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb3, 0x401, 0x8003) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x2, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$auto(r3, 0x29, 0x30, 0x0, 0xd393) write$auto(r1, &(0x7f0000000240)='/\xc46\x9e\xe4audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x90, 0x1, 0x948a, 0x3, 0x2, 0x3, 0x3, 0x3, 0x8000001f, 0x2, 0x6d3c, 0x9, 0x1, 0x376]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x8000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000340)="733b4cdb68bbe7e6c59a85c570c315812c07e568d478d01796b622d6ff3141ba481c312366b774ca3af03eed9876f2062a1de6c5f670ca13745ec99dfd768fc1a246e643e67df6d9f2cebee1c9be7530ec461bd5e11e53f4f8779f06967c27afb0b38f426a88463ee821ab4ad3402deb3f55e5472dbfa8e0f733e5e21660ece3ca6b09b5d58c58c10afc091422dccabc00aefc697f75eb6ed42d985c3156c5fa8185c0f7aac382ebe56b46bef4086cb95d05bfd64597d7610afee83916714e2304541f27c6e618ed37ab3bce73e1b6be3f6eb6c4acbda6732572cc2c07c2e1ee6925c4d2a70b94047d088f494a8ec0012eba14") unshare$auto(0x40000080) madvise$auto(0x110c234000, 0x1, 0x9) unshare$auto(0x40000080) r4 = socket(0xa, 0x2, 0x3a) bind$auto(r4, 0x0, 0x66) pwrite64$auto(r0, &(0x7f0000000040)='$3\xf7\xaaF\x065-\xd8\x81\x00\xc3\a\xfe\x1a\xc0\xff\xa5\xc7\x81\x04\xd0\xb1\xcb\x9f|I\xe3~=.;Ot\\\xd9\xf3h\xbbr:\xcdP\xc2\x18\x00'/58, 0x4, 0x5) 40.236064368s ago: executing program 8 (id=2553): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) prctl$auto(0x0, 0x1, 0x0, 0x5850, 0x6) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)="58fcb282bcbc38bfaef257e019406ea6c445cd4f7f7662ac0f8834baa918d5b3cea133243c4f2b9a39e536b67f5a1a2bfdf589da2b1c980e1ce53883444996d1721d7f3ae627c6c604000000000000007910fbc02d899ab93d002d849884a5377ff11be2ed012110f2f520") r1 = socket(0x10, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) clock_nanosleep$auto(0xffffffff, 0x7, &(0x7f0000002480)={0x2}, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6gre0/power/control\x00', 0x10b142, 0x0) r3 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xc, 0x3, 0x0, 0x0, 0x2) socket(0x28, 0x2, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) getsockopt$auto(r3, 0x4000009, 0x0, &(0x7f0000000080)='\x00', &(0x7f0000000200)=0x1691) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r5, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0x80000010, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/nbd4/queue/optimal_io_size\x00', 0x40000, 0x0) read$auto(r6, 0x0, 0x20) write$auto(r5, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000002) r7 = socket(0x3, 0x5, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r7) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x80080) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) sendfile$auto(0xffffffffffffffff, r2, 0x0, 0x0) close_range$auto(0x0, 0x5, 0x0) 38.899958907s ago: executing program 8 (id=2557): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00', 0x0}) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x6, 0x24, 0xf, 0x800, 0x400, 0x0, 0xffffffffffffffff, 0x80f0c8, 0x60, "38c1d5cbcb9f6b5e511f0cd8ed068f65", r3, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_prog_fd, 0x6, 0xffff, 0x8, 0x4, 0xfffffffe}, 0x5) read$auto(r1, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/pci0000:00/0000:00:01.1/ata1/link1/dev1.1/power/runtime_active_time\x00', 0x129302, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r6 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/binderfs/binder0\x00', 0x102, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff49, 0x5, 0x1823, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x0, 0x1]}, 0x0) r7 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r7, &(0x7f0000000180)=""/61, 0xfffffeeb) fstat$auto(r4, &(0x7f0000000340)={0xffffffffffffffff, 0xfffffffffffffff0, 0x4, 0x74, 0x0, 0xffffffffffffffff, 0x0, 0x2c0000000000, 0x100000001, 0x38e08578, 0x4, 0x9, 0x0, 0x4, 0x1, 0xf6, 0x21}) ioctl$auto_KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f0000000100)={0x5, r8, 0xc132, 0x1}) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x18, 0x401, 0x300000000000) prctl$auto_SECCOMP_MODE_STRICT(0xf, 0x1, 0x0, 0x9, 0x2) 37.459069743s ago: executing program 37 (id=2508): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/route/flush\x00', 0x40001, 0x0) write$auto(r0, &(0x7f0000001680)='\v\x90\xd1\xda\xbc>1\x8ag\x14\x18\xbe\xdc\x00', 0x1) (async) close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x40, 0x93f, 0x1fee0, 0x3, 0x6, 0xfffffffffffffffe, 0x1ff, 0x5, 0x8005, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x8, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, [0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x7fffffffffff, 0x9, 0x0, 0x0, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x1fe, 0x82) io_pgetevents$auto(0x7, 0x9, 0x7ff, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1}}) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x2, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) (async) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async, rerun: 64) fallocate$auto(r1, 0xfff, 0x8, 0x80000000) (rerun: 64) 29.562364565s ago: executing program 9 (id=2592): socket(0x2c, 0x3, 0x0) socket(0x2c, 0x3, 0xffffffff) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb4, r0, 0x85fe) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0x2) socket(0x2, 0x3, 0x104) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) bind$auto(0x3, 0x0, 0x6b) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r1) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB="729c5c20ba0cb4666c62d0cb4eee4862899fbef7a3e3b44b88bee18299a46e04628c05e2c0d751b6ae4a07fde7241f0c330a7e91f1f7abe4a91de41e122e4d26abec915af73011b1356365255777a44433d534522238a002c7a3398f6c758f9583c58a1bf91f6cb7d7a1e541611365bbfd6ad873505bfde52c9f35809cf814a2d04c97743ce12f61b9a659b1d449cea868b22302718f9dabb99947c50d663a5d7c7640da4eebca64a900111c89b52225cdcc31fd05f4d9aaffbb2ab25db14148bbc2a24dc6c48e4306203bbd311198b1dda274728cdb684f26faf86b933a30b70fc20db4b3f365f1f5f873b6b5a84d"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000080) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = prctl$auto_PR_SCHED_CORE_GET(0x4, 0x0, 0xffffffffffffffff, 0x800, 0x3) r6 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_VDPA_CMD_MGMTDEV_GET(r5, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9c000701", @ANYRES16=r6, @ANYBLOB="000128bd7000fddbdf250200000006000d0004000000080011000600000006000c000010000047000a001ea4f1954bbddf5d97bb2fb8edd1d39c0d0a875048c3656026b3c9cffed671ad73c0dafe798f7cb823cca94016cfd101f091bd2e5bdcba9f07faab9326dac049a7761800140002007465616d5f736c6176655f3000000000140004006d6163766c616e300000000000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x20004080}, 0x8000) sendmsg$auto_OVS_DP_CMD_DEL(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) 29.445738536s ago: executing program 9 (id=2593): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40080, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/modalias\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001c00)=""/4111, 0x100f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r2, 0x0, 0x4) sysfs$auto(0x2, 0x16, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x8) rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x6}, 0xffffffffffffffff, 0x8) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000001040), 0x880, 0x0) close_range$auto(0xffffffffffffffff, r3, 0x80000001) rseq$auto(&(0x7f0000000840)={0xa, 0x9, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) 28.044393095s ago: executing program 9 (id=2597): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x81, 0x0, 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya9\x00', 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) socketpair$auto(0x20004, 0x7, 0x1, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram11\x00', 0x20000, 0x0) mseal$auto(0x1ffff000, 0xfffffffffffffff3, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) madvise$auto(0x108000, 0x2, 0xa) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x2) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) fchdir$auto(r3) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x100842, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r4, 0x5404, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(r4, 0xc0045405, &(0x7f0000000140)) ioctl$auto_SNDCTL_TMR_START(r4, 0x5402, 0x0) rename$auto(&(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00') fanotify_mark$auto(r1, 0x7c9, 0x9, r2, &(0x7f0000000080)='./file0\x00') r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/mptcp/pm_type\x00', 0xe0002, 0x0) sendfile$auto(0x1, r5, 0x0, 0xc01) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getpid() 27.914213606s ago: executing program 9 (id=2598): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="ffa2"], 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x20056, 0x8020000000f, 0x4, 0x5f, 0x20000000000804, 0xfffffffffffffffe}, 0x6f0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) r2 = prctl$auto_PR_SET_MM_ENV_END(0x8, 0xb, r1, 0xd28b, 0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r4, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000980)={0x3d4, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_TX_INFO_FLAGS={0x65, 0x15, "8b998eed207486c92329ec9f9fbe20473f5b56df593c9ba8475f5643fd89ab333f8220e49dbe362c7c9cabb658e764d0b04a56c7a77a0850c22988a3aaa8d848767d6d7aa36489dac686c4065fa05844ced1e02ab857f5a7487be66530af3685f4"}, @HWSIM_ATTR_REG_HINT_ALPHA2={0xc, 0xb, 'ethtool\x00'}, @HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}, @HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_PMSR_RESULT={0x340, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x324, 0x5, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x20, 0x1, "4e748530a0bd2084d4448f809513d189374fd5c4615cc3b0bc25fd0c"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x68, 0x1, "ef10e26d5d1c756a11371314fba81551a41c80151bc2a1f09bac9987b5d6b46d3e1f190fb830872cb2065d68acb9fb24322e31325396f84d70597a89f872715ecb2c79ef1d3cb33c9d04d1b7c44317250adb198ecd84a53b140c007165317a19b44cd479"}, @NL80211_PMSR_PEER_ATTR_RESP={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x5}]}]}, {0x284, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x20, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x8000}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x4}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x44, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x3}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x89}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x2}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x24, 0x1, "eed5135d4564c502aae21b44df4791922c06305d5d003ce22bd406851b622d94"}, @NL80211_PMSR_PEER_ATTR_RESP={0x1f8, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x187}, @NL80211_PMSR_RESP_ATTR_DATA={0x128, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xc, 0x14, 'ethtool\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xa, 0x14, '-.]@*\xf4'}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xfffffffffffffff2}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xc, 0x14, 'ethtool\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x7f}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0xc7c}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0xff}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x5c}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0xeefb}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x7fffffffffffffff}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xc, 0x14, 'ethtool\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x91}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x3}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc}, @NL80211_PMSR_RESP_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x44, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_FLAGS={0x5, 0x1, 0x1}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0x24}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xf9}, @HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0xb}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x7f}, @HWSIM_RATE_INFO_ATTR_MCS={0x5, 0x2, 0x6}, @HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0x5}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0x7}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0xfffffffffffffffa}]}, @NL80211_PMSR_TYPE_FTM={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0xda89}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x80}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x2c, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0xd9}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0x3}, @HWSIM_RATE_INFO_ATTR_MCS={0x5, 0x2, 0x81}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0xffff}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0x5}]}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x80}]}]}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x18, 0x5, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x80}]}]}]}]}, @HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x3d4}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0xa}, 0x7}, 0x3, 0x2) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/phonet\x00', 0x42000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000002100)=""/15, 0xf) r6 = socket(0x10, 0x2, 0x0) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fcdbdf250a0000ff00000000140001"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r8 = ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000040)) r9 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="f5096cfb9e000000000001000000000000bf72", @ANYRES16=r9, @ANYBLOB="00022dbd7000fbdbdf2506000000080003000700000008"], 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x440c0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000d80)={'veth0_to_hsr\x00'}) sendmsg$auto_NCSI_CMD_CLEAR_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x54c, r9, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NCSI_ATTR_DATA={0x51c, 0x5, "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"}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0xfffffff9}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0xa7}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0xb}]}, 0x54c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 27.494081232s ago: executing program 9 (id=2600): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_udc.5/udc/dummy_udc.5/srp\x00', 0x60301, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r2, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x80}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x3a}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) read$auto(r0, 0x0, 0x1) write$auto(0x3, 0x0, 0x5c8) msgctl$auto_IPC_STAT(0x1, 0x2, 0x0) sched_get_priority_min$auto(0xa) socket(0x2, 0x5, 0x0) r3 = wait4$auto(0x0, &(0x7f0000000100)=0x7, 0x2, &(0x7f0000000180)={{0x4, 0x9}, {0x4, 0x80000001}, 0x7, 0x6, 0x6, 0x8, 0x200, 0xfff000000000000, 0x0, 0x9, 0x8, 0x3, 0x3f, 0x7, 0x2, 0x5}) fcntl$auto(r1, 0xe, r3) setsockopt$auto(0x3, 0x0, 0xd, 0x0, 0x0) 27.364847513s ago: executing program 9 (id=2601): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) acct$auto(&(0x7f0000000040)='/dev/sda1\x00') sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x14, 0x1, "5e1f970f497f9f23d63e72850177cde9"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 23.942923385s ago: executing program 38 (id=2557): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00', 0x0}) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x6, 0x24, 0xf, 0x800, 0x400, 0x0, 0xffffffffffffffff, 0x80f0c8, 0x60, "38c1d5cbcb9f6b5e511f0cd8ed068f65", r3, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_prog_fd, 0x6, 0xffff, 0x8, 0x4, 0xfffffffe}, 0x5) read$auto(r1, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/pci0000:00/0000:00:01.1/ata1/link1/dev1.1/power/runtime_active_time\x00', 0x129302, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r6 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/binderfs/binder0\x00', 0x102, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff49, 0x5, 0x1823, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x0, 0x1]}, 0x0) r7 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r7, &(0x7f0000000180)=""/61, 0xfffffeeb) fstat$auto(r4, &(0x7f0000000340)={0xffffffffffffffff, 0xfffffffffffffff0, 0x4, 0x74, 0x0, 0xffffffffffffffff, 0x0, 0x2c0000000000, 0x100000001, 0x38e08578, 0x4, 0x9, 0x0, 0x4, 0x1, 0xf6, 0x21}) ioctl$auto_KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f0000000100)={0x5, r8, 0xc132, 0x1}) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x18, 0x401, 0x300000000000) prctl$auto_SECCOMP_MODE_STRICT(0xf, 0x1, 0x0, 0x9, 0x2) 11.774319972s ago: executing program 39 (id=2601): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) acct$auto(&(0x7f0000000040)='/dev/sda1\x00') sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x14, 0x1, "5e1f970f497f9f23d63e72850177cde9"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 11.014020099s ago: executing program 0 (id=2656): lsm_get_self_attr$auto(0x64, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xa0540, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, 0x0, 0x100000a3d7) mmap$auto(0x3, 0x20009, 0x4, 0x200000000eb1, 0xffffffffffffffff, 0x1) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) clone$auto(0xff, 0x8ae, 0x0, &(0x7f0000000200)=0x2, 0x1b5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) pipe$auto(0x0) write$auto(0x3, 0x0, 0x200ffd8) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0xfffffffd, 0x5, 0x9, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x2, 0x7ffe}, 0x5) pkey_mprotect$auto(0x0, 0x7, 0x6, 0xfffffffb) close_range$auto(0x2, 0x8, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) 10.134992955s ago: executing program 0 (id=2658): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xa3, 0xeb1, r0, 0x8000) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0) fsopen$auto(0x0, 0x1) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r1 = socket(0xa, 0x5, 0x84) sendto$auto(r1, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe800000e80300"}, 0x1c) 9.209546565s ago: executing program 0 (id=2660): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x9, 0xffffffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) brk$auto(0xffffffffffffff66) r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r4, 0x0, 0x800003, 0x6) mlockall$auto(0x7) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0) ioctl$auto_SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, 0x0) personality$auto(0xfffff032) ppoll$auto(&(0x7f0000001ac0)={0xffffffffffffffff, 0x9, 0x7}, 0x8, &(0x7f0000001b00)={0xf2, 0x9}, &(0x7f00000002c0)={0x10000}, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80c80, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = prctl$auto(0x6, 0x1, 0x0, 0x0, 0x6) r6 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000140)) socket(0x10, 0x2, 0x4) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket(0x2, 0x2, 0x1) setsockopt$auto(r5, 0x0, 0x8, 0x0, 0x28) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x8502, 0x0) mmap$auto(0x0, 0x8, 0x1, 0x9b72, 0x2, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) 9.145396172s ago: executing program 5 (id=2662): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000062c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000000c0)={0xfffffffffffffffd, 0x0, &(0x7f0000006340)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c040}, 0x4000000) socket(0x15, 0x5, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mtd/mtd0/oobavail\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x7) (async) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), r0) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 8.433027075s ago: executing program 5 (id=2663): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) mlock$auto(0x7, 0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x800, 0x8000003b) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:00.0/power/runtime_active_time\x00', 0x82000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000007ec0)=""/254, 0xfe) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x541c, r2) clock_nanosleep$auto(0x8000a, 0x0, 0x0, 0x0) r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0xfffffffffffffffe, 0x20948b, 0x2, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000180)='/dev/audio1\x00\x1fyO\x9e\x1e\xf1\x8c\xfe\x85\xcf\xb8eX3Z\xf1\xe7\x9b\xd5\x9f=\xfb\x98\xc2\x1a\xfa\x1e>\xf6\xda\xf0S>$I4\xa5\x8fG\x87}\x92(J\x11J\xd8\xef\x12\x11\xa3\xbcm\xb3\x14\x8e\x00\xb8\xa2\xc7\x11oC\xb5bY\x17\xf5m\x93c\xc0\xaaJ\x16U\x1e\xd1\xb0\xc1\x88\xaf\xc5\xecI\xefO\x90(\tz\xe9\x81g+\xbf?I\xdb\xc0', 0x100000a3d9) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(r3, 0x0, 0x20000080) select$auto(0x11, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x0, 0x8f7b, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x4, 0x6d3e, 0x8005, 0x2, 0x2]}, 0x0) read$auto_check_wx_fops_(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x8080800000000000, 0x3, 0x6) madvise$auto(0x0, 0xf663, 0x15) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) 8.101993227s ago: executing program 0 (id=2665): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="ffa2"], 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x20056, 0x8020000000f, 0x4, 0x5f, 0x20000000000804, 0xfffffffffffffffe}, 0x6f0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) r2 = prctl$auto_PR_SET_MM_ENV_END(0x8, 0xb, r1, 0xd28b, 0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r4, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000980)={0x3d0, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_TX_INFO_FLAGS={0x65, 0x15, "8b998eed207486c92329ec9f9fbe20473f5b56df593c9ba8475f5643fd89ab333f8220e49dbe362c7c9cabb658e764d0b04a56c7a77a0850c22988a3aaa8d848767d6d7aa36489dac686c4065fa05844ced1e02ab857f5a7487be66530af3685f4"}, @HWSIM_ATTR_REG_HINT_ALPHA2={0xc, 0xb, 'ethtool\x00'}, @HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}, @HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_PMSR_RESULT={0x33c, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x320, 0x5, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x20, 0x1, "4e748530a0bd2084d4448f809513d189374fd5c4615cc3b0bc25fd0c"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x68, 0x1, "ef10e26d5d1c756a11371314fba81551a41c80151bc2a1f09bac9987b5d6b46d3e1f190fb830872cb2065d68acb9fb24322e31325396f84d70597a89f872715ecb2c79ef1d3cb33c9d04d1b7c44317250adb198ecd84a53b140c007165317a19b44cd479"}, @NL80211_PMSR_PEER_ATTR_RESP={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x5}]}]}, {0x280, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x20, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x8000}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x4}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x44, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x3}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x89}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x2}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x24, 0x1, "eed5135d4564c502aae21b44df4791922c06305d5d003ce22bd406851b622d94"}, @NL80211_PMSR_PEER_ATTR_RESP={0x1f4, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x187}, @NL80211_PMSR_RESP_ATTR_DATA={0x128, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xc, 0x14, 'ethtool\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xa, 0x14, '-.]@*\xf4'}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xfffffffffffffff2}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xc, 0x14, 'ethtool\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x7f}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0xc7c}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0xff}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x5c}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0xeefb}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x7fffffffffffffff}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xc, 0x14, 'ethtool\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x91}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x3}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc}, @NL80211_PMSR_RESP_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x44, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_FLAGS={0x5, 0x1, 0x1}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0x24}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xf9}, @HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0xb}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x7f}, @HWSIM_RATE_INFO_ATTR_MCS={0x5, 0x2, 0x6}, @HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0x5}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0x7}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0xfffffffffffffffa}]}, @NL80211_PMSR_TYPE_FTM={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0xda89}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x80}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x34, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x6}, @HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0xd9}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0x3}, @HWSIM_RATE_INFO_ATTR_MCS={0x5, 0x2, 0x81}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0xffff}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0x5}]}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x80}]}]}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x18, 0x5, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x80}]}]}]}]}, @HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0xa}, 0x7}, 0x3, 0x2) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/phonet\x00', 0x42000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000002100)=""/15, 0xf) r6 = socket(0x10, 0x2, 0x0) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fcdbdf250a0000ff00000000140001"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r8 = ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000040)) r9 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="f5096cfb9e000000000001000000000000bf72", @ANYRES16=r9, @ANYBLOB="00022dbd7000fbdbdf2506000000080003000700000008"], 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x440c0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000d80)={'veth0_to_hsr\x00'}) sendmsg$auto_NCSI_CMD_CLEAR_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x54c, r9, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NCSI_ATTR_DATA={0x51c, 0x5, "63847ca26f7816b262ed17c116528c4512d5c93c66db564aa8d5514544a64082dd2d296cde649d2fb15c76ff9b28e68099493a5aa9c210a94d96850e3a5d25db628e5690695501f21bebaad655f9e8f20e55c38d31d18d996ee4263438d5f2dee938f899d07c492beb967fdea262da0c41b7e0ef7340184847e2d8d061b80b37382ecc65688b88d827d79353b9d7f7c8fb36eaa4eac41c1594404b5e27b69406b913824c373e2c518e6781033a951f033a1923236d5348c08be02fd1232681f906dfbaacca001725bd548bd0394d5e6c7b212ad350a8337ce28c9572f5d91adf8e5b04cc748675079c621cbd63da9ca17718b99674b3c07a1b58971780cc62f39d61860a5d57db50c5cd1f97d63fa510752c0e720bc025643d065ec4d303e2afa0801684c99fc5e7d33d635e6c249802be2cdd0d78c48adf5d1878642a6cc352ce969bf609fcdebcc0ef8c6e009c6a6b9e24659c377f255cbf077de253602969e0c71bbabd420d137ad868fe0fecb752082b84484daf46839d8b12eaa526a1c5f38c4719059b6bbb75aad83f772ebb6ae6afa45c1d2bd08c5847e5345d30f88ae8674571e7be881eb84aabc08acdaa2d29df779b57e148486f26c03deaa9c04d8e9a9debd8ffc8dcceab7bbf6d49155a66362a950260de4f1d238d8ead32b579fe855d7aaf3b57fa4bf04f17bd84261c19f43ce272bb85d7449aefc544246adf3b07a2e145840d3b04a2e2309ff87c98da46751bd082521629f7fa8511349772344f98f0a87a791df8e23ae5a65098e90e9f2df12c0360025aaba5b13e27db47bd412b1f8181ccde62316c442da795ad167524dd4325d2bff912133927a489cdf01ac6d4154d318849d7c99435e0a63b3faa038195148cb6e9cb1dada44f6f957f329763adebdff7e0148aad138ba73b0f2de7f1dc1645b852fbb8139d9d0a1ef93c400eb21e1eec77021d3b2d452306dfacf476427457f703de7fe4967cab946621784718a00c34deee0562a0c5b601056e89112cf14710bfa77cdd7879804d89339c93218b390527b0764765a4fbb0b0e929483ecb50eb3a964e76ce528be0309b4173209f0c133fc69d2a5b6428a4f95f2b0f348e45991b3473065720f1837794f23f1ce8a8106ab4c833d270a013935e23e899dbf65caa8d542fbec1302745136ca277a10bfc647668088cdbc8536076d89fd341fbe837fa49ed11909b330e9d8082341f75988c19aaea79ccb5fffaff8dd2953ab16f8fa89b9d97188f46bb552ecc215bfc60f34c2a8ad13d522dc25c3f102737ca3c105878b419d6de75d1aa23f0edbad305a7de6ab9af0709a9425ed9778ed87bddf4f4e5719b57af04cdfa66b2b85088d1cf6bdc8ed04dceb4bfeb69c6f75e24aabff0d8aa89418aa98e4c888fad97acbdbb97e7f30b33e466fd2e90babef217924c0de4d4775e2fe318f55a1106c7ea0836e657d844787fb4bfa737985569e77c3aff0487d41bb1b63e964b040ffd6a134496f4e14f6c7b58baa12af5a0fa37c533f842756588e99f98f1d9d224f0d5424df9a511b4e5dd491c81f6de5dfc795097543cad2df6ba045b02581e24e17c008a1a2be8e58d28757984b8510487359f8f879ebb1e113fe94e92f0364c0f57aa51c98e41ee30019ee6e8475bd0815d560b99fd68b2ad85106fee7cc191f4162d6e7d9da65caf84f5ebf6876615c07acc17ba18915e39d5f9c40833eec4bf60c5b5bd881a514192eeaed17cfcc74506719ded1981de40e34ee6574f17b1d65605bf4a9eec36317c9ad6753d64a5f24ffeb974aa84911652dea33d3d42d9ddde8e946a4812199a640f8f0c6b9d865ebeed"}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0xfffffff9}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0xa7}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0xb}]}, 0x54c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 6.688738026s ago: executing program 5 (id=2667): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x6, 0x24, 0xf, 0x800, 0x400, 0x0, 0xffffffffffffffff, 0x80f0c8, 0x60, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_prog_fd, 0x6, 0xffff, 0x8, 0x4, 0xfffffffe}, 0x5) read$auto(r1, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/pci0000:00/0000:00:01.1/ata1/link1/dev1.1/power/runtime_active_time\x00', 0x129302, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/binderfs/binder0\x00', 0x102, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff49, 0x5, 0x1823, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x0, 0x1]}, 0x0) r5 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r5, &(0x7f0000000180)=""/61, 0xfffffeeb) fstat$auto(r2, &(0x7f0000000340)={0xffffffffffffffff, 0xfffffffffffffff0, 0x4, 0x74, 0x0, 0xffffffffffffffff, 0x0, 0x2c0000000000, 0x100000001, 0x38e08578, 0x4, 0x9, 0x0, 0x4, 0x1, 0xf6, 0x21}) ioctl$auto_KVM_HAS_DEVICE_ATTR(r3, 0x4018aee3, &(0x7f0000000100)={0x5, r6, 0xc132, 0x1}) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x18, 0x401, 0x300000000000) prctl$auto_SECCOMP_MODE_STRICT(0xf, 0x1, 0x0, 0x9, 0x2) 6.683900546s ago: executing program 0 (id=2673): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) prctl$auto(0x0, 0x1, 0x0, 0x5850, 0x6) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)="58fcb282bcbc38bfaef257e019406ea6c445cd4f7f7662ac0f8834baa918d5b3cea133243c4f2b9a39e536b67f5a1a2bfdf589da2b1c980e1ce53883444996d1721d7f3ae627c6c604000000000000007910fbc02d899ab93d002d849884a5377ff11be2ed012110f2f520") r1 = socket(0x10, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) clock_nanosleep$auto(0xffffffff, 0x7, &(0x7f0000002480)={0x2}, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6gre0/power/control\x00', 0x10b142, 0x0) r3 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xc, 0x3, 0x0, 0x0, 0x2) socket(0x28, 0x2, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) getsockopt$auto(r3, 0x4000009, 0x0, &(0x7f0000000080)='\x00', &(0x7f0000000200)=0x1691) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r5, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0x80000010, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/nbd4/queue/optimal_io_size\x00', 0x40000, 0x0) read$auto(r6, 0x0, 0x20) write$auto(r5, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000002) r7 = socket(0x3, 0x5, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r7) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x80080) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) sendfile$auto(0xffffffffffffffff, r2, 0x0, 0x0) close_range$auto(0x0, 0x5, 0x0) 5.441026921s ago: executing program 1 (id=2669): mmap$auto(0x0, 0x7f, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6a) sendmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0x207fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r0 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f00000000c0), 0x440000, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b72, 0xffffffffffffffff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129c00, 0x0) ioctl$auto(r3, 0xb21064a5, 0xffffffffffffffff) writev$auto(r2, &(0x7f00000001c0)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r4 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x9, 0x5, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0x2, 0x23, 0x5, 0x7, 0x0, 0x0, 0x2, 0x117, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a36]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) landlock_add_rule$auto_LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f00000004c0)="642222fcd8d6753772a394f19687f02450a93563f52af0082d0474107ad8e63926f799e1e7595436ee800a3fe944b1b895bf77718772d9e7347c0a82a38efd55a729352e20fc8e1c7c2f33435aee8eb58b0d0692ba76227bb4bf8388446cd3fbe427e2f0a349dc7b7896965e1e4d3c88ec20971ec64c5c8021249439c3fc3da3ac6ea0eda997d903a5f29e6651fff9d61f70979bd83859e6c9549ab556b0ce4cef821d8896554237f0a9cf8826c9077459b668f55028f9efe2549a1268675a707066d9d65bd6a865542bdd24515f2bd72a23c1a31767c8b5f44b946c70cf79e1f8cbdd59", 0xb74) socket(0x1e, 0x1, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x50882, 0x0) openat$auto_clk_dump_fops_(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x19) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000480), 0xffffffffffffffff) 4.766386332s ago: executing program 0 (id=2670): r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r1 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/dri/vkms/gem_names\x00', 0x101402, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r1, &(0x7f0000000240)=""/194, 0xc2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/buffer_percent\x00', 0x40, 0x0) read$auto(r2, &(0x7f0000000040)=',^{\'\x00', 0x7) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x240, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_FREQ={0x8, 0x13, 0x8001}, @HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x1}, @HWSIM_ATTR_PMSR_RESULT={0x21c, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0xa4, 0x5, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x2b, 0x1, "5328e4e303face040befd2101c9902e885387a74c032fe19e533a9e018880e4967b029badea425"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x66, 0x1, "6b074ccd6dcf3891b543b8004df8a752d9e2a1f0729e6681abe3905ce26957e840379d8c6fad9e9377379fd47c7f3467de1d0e6ae268b1947cc424e5e2702f05de674da3bd353a9b75b718ca14a40df6c9f813f017212cd32804fad90d3dc0c69c87"}]}, {0x4}, {0x4}]}, @NL80211_PMSR_ATTR_PEERS={0x174, 0x5, 0x0, 0x1, [{0x16c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x73, 0x1, "7cdaa0d28cdb2ddac6a51bed27ceef22a4ced3cbf97541ccb5785ae9b9153f9d0d3fe5fc4a07dd0a390a2202955f73b9528d1b8fe9e53bc697f872e10a090e48ce855359da6a3c60ca485bb63efdb82a9ff8ab5087459d99275dbc03a303a0149fd877e382c294105aa82103fa9120"}, @NL80211_PMSR_PEER_ATTR_RESP={0x20, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x3}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_STATUS={0x8, 0x2, 0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x50, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FTMS_PER_BURST={0x5, 0x8, 0x2b}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0xc, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0x1}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x101}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x400000000}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x82, 0x1, "e1dd4048295dc03b183afb62e622b74c5f147e58570f8393edb697aa593e398ed0e6b6b5365a684c95c837bd1a5e02a235a6e041a5930c68201479abe4706871f0aaf17cde10dc3b625bc5c66dfe60a308866a7ca23170224a3e96901aba5943143fea45a3afdc3de927402ff95401d8eeed7759743750802a752aee776b"}]}, {0x4}]}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x24040000}, 0x8018880) 4.273033229s ago: executing program 5 (id=2671): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/path_max\x00', 0x0, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) mmap$auto(0x4000000000000000, 0x80000002, 0xe5, 0x59, r0, 0x8000000000008004) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm1p/sub5/sw_params\x00', 0x8f3b7a51b8360c21, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffffffb) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/veth0_to_batadv/max_addresses\x00', 0x141241, 0x0) readahead$auto(r2, 0x4, 0x4) mmap$auto(0x0, 0x400007, 0xdf, 0x9b70, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0x0, 0x2000b, 0xdd, 0x40eb1, 0x401, 0x8000) sysfs$auto(0x3, 0x401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) semget$auto(0x0, 0x13c, 0x1ff) recvmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x4, &(0x7f0000000180)={0x0, 0xfffffefffffffffe}, 0x2, 0x0, 0x5, 0x80000001}, 0x13}, 0x800003, 0xc3e, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r3, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="230027bd7000fcdbdf2508ffe9000c00038005000180030000000400028008"], 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x44044) mprotect$auto(0x0, 0xe6a, 0x6) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/controlC1\x00', 0x8080, 0x0) ioctl$auto(r4, 0x80dc5521, 0xffffffffffffffff) 4.264247512s ago: executing program 1 (id=2679): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/driver/serial\x00', 0x43102, 0x0) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x4, 0x8000040006) socket$nl_generic(0x10, 0x3, 0x10) ptrace$auto(0xf, r2, 0xfffffffffffffffe, 0x8000000000000000) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp1\x00', 0x20803, 0x0) setsockopt$auto(r0, 0x3, 0x8, &(0x7f0000000040)='/dev/dsp1\x00', 0x44) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1cb842, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) read$auto(0x3, 0x0, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd6/queue/iosched/writes_starved\x00', 0xa001, 0x0) write$auto(r3, 0x0, 0x38f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r5, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto(r4, 0x8925, r4) close_range$auto(0x2, 0xa, 0x0) setsockopt$auto_SO_RCVPRIORITY(r3, 0x9, 0x52, &(0x7f00000001c0)='!', 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r6, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 3.105324336s ago: executing program 5 (id=2672): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x448c0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x30}, 0x1) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r2 = pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) clock_settime$auto(0x0, &(0x7f0000000000)={0x100000000, 0x3b9ac9ff}) clock_gettime$auto(0xb, &(0x7f0000000400)={0x705, 0x82}) r3 = socket(0x22, 0x1, 0x100) r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) r5 = ioctl$auto_SW_SYNC_GET_DEADLINE(r4, 0xc0105702, &(0x7f00000002c0)={0x0, 0x0, r3}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth0_to_hsr\x00', 0x0}) r7 = getpid() sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x7ec284a4a8dc18cd}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="6d4e1120", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf250100000008000900", @ANYRES32=r6, @ANYBLOB="050001000000000008000200", @ANYRES32=r7, @ANYBLOB="0800050005000000"], 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x20040901) kcmp$auto(0x0, r7, 0xff, r0, r2) adjtimex$auto(&(0x7f0000000540)={0x72, 0x0, 0x9, 0x800, 0x6, 0xffffffffffffffff, 0x829, 0x0, 0x9, 0x9533, 0x7, {0x200, 0x2}, 0x80, 0x80, 0x5, 0x6, 0x0, 0x100000000, 0x21, 0x18d, 0x6, 0xa, 0x2015}) adjtimex$auto(&(0x7f0000000640)={0x7fffffff, 0x0, 0x3, 0x6, 0x6, 0x0, 0x6, 0x0, 0xa4, 0x453, 0x3, {0x6, 0x2}, 0x7, 0x7f, 0x6, 0x1, 0x0, 0x5f6, 0xffffffffffffff57, 0x400000000000, 0x80000000, 0x346, 0x401}) poll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0xcae9, 0x9}, 0x0, 0xc95) read$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f0000000740)=""/245, 0xf5) pwrite64$auto(0xc8, &(0x7f00000001c0)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xad\x83\x13\x82\xdfT\x916;CL\"\x81\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2SZ\xf6\x8d\xdb\xcb\r\xcaN_\xa6h\xe2\xf9*w_\x84\xb8\x1aY>%:\xad9\xb8\x87\xfc\x85\x90\xfaB\xb6\xe3I\x18$\x1f\xc1YG\x94\xec\x82\xb7b[8n(\xd1Y\a\x04w\xd53\xce\xee\xdbw\xb0\xd4\xae\x0f\xce\x8e+\xaa\xcf\x86\xcd@~\xe0', 0xfded, 0x3) 3.103992471s ago: executing program 1 (id=2681): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xa3, 0xeb1, r0, 0x8000) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0) fsopen$auto(0x0, 0x1) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r1 = socket(0xa, 0x5, 0x84) sendto$auto(r1, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) 2.466408058s ago: executing program 3 (id=2654): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="ffa2"], 0x44}, 0x1, 0x0, 0x0, 0x10000000}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x20056, 0x8020000000f, 0x4, 0x5f, 0x20000000000804, 0xfffffffffffffffe}, 0x6f0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) r2 = prctl$auto_PR_SET_MM_ENV_END(0x8, 0xb, r1, 0xd28b, 0x1ff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r3, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r4, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000980)={0x3d4, r4, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_TX_INFO_FLAGS={0x65, 0x15, "8b998eed207486c92329ec9f9fbe20473f5b56df593c9ba8475f5643fd89ab333f8220e49dbe362c7c9cabb658e764d0b04a56c7a77a0850c22988a3aaa8d848767d6d7aa36489dac686c4065fa05844ced1e02ab857f5a7487be66530af3685f4"}, @HWSIM_ATTR_REG_HINT_ALPHA2={0xc, 0xb, 'ethtool\x00'}, @HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}, @HWSIM_ATTR_USE_CHANCTX={0x4}, @HWSIM_ATTR_PMSR_RESULT={0x340, 0x1c, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x324, 0x5, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0x20, 0x1, "4e748530a0bd2084d4448f809513d189374fd5c4615cc3b0bc25fd0c"}, @NL80211_PMSR_PEER_ATTR_ADDR={0x68, 0x1, "ef10e26d5d1c756a11371314fba81551a41c80151bc2a1f09bac9987b5d6b46d3e1f190fb830872cb2065d68acb9fb24322e31325396f84d70597a89f872715ecb2c79ef1d3cb33c9d04d1b7c44317250adb198ecd84a53b140c007165317a19b44cd479"}, @NL80211_PMSR_PEER_ATTR_RESP={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x5}]}]}, {0x284, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x20, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x8000}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x4}]}, @NL80211_PMSR_PEER_ATTR_RESP={0x44, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_STATUS={0x8}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x3}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x89}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x2}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0x24, 0x1, "eed5135d4564c502aae21b44df4791922c06305d5d003ce22bd406851b622d94"}, @NL80211_PMSR_PEER_ATTR_RESP={0x1f8, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_AP_TSF={0xc, 0x4, 0x187}, @NL80211_PMSR_RESP_ATTR_DATA={0x128, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xc, 0x14, 'ethtool\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xa, 0x14, '-.]@*\xf4'}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0xfffffffffffffff2}, @NL80211_PMSR_FTM_RESP_ATTR_RSSI_SPREAD={0x8, 0xa, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xc, 0x14, 'ethtool\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_ATTEMPTS={0x8, 0x3, 0x6}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x7f}, @NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0xc7c}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_VARIANCE={0xc, 0x11, 0xff}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x5c}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x48, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_FAIL_REASON={0x8, 0x1, 0xeefb}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_FTMR_SUCCESSES={0x8, 0x4, 0x1}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x7fffffffffffffff}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_SPREAD={0xc, 0x12, 0x9}, @NL80211_PMSR_FTM_RESP_ATTR_CIVICLOC={0xc, 0x14, 'ethtool\x00'}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x91}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_BURST_DURATION={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0x3}, @NL80211_PMSR_FTM_RESP_ATTR_BUSY_RETRY_TIME={0x5, 0x5, 0x3}]}]}, @NL80211_PMSR_RESP_ATTR_FINAL={0x4}, @NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc}, @NL80211_PMSR_RESP_ATTR_DATA={0xb0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_TX_RATE={0x44, 0xb, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_FLAGS={0x5, 0x1, 0x1}, @HWSIM_RATE_INFO_ATTR_NSS={0x5, 0x4, 0x24}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0xf9}, @HWSIM_RATE_INFO_ATTR_HE_RU_ALLOC={0x5, 0x8, 0xb}, @HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x7f}, @HWSIM_RATE_INFO_ATTR_MCS={0x5, 0x2, 0x6}, @HWSIM_RATE_INFO_ATTR_N_BOUNDED_CH={0x5, 0x9, 0x5}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0x7}]}, @NL80211_PMSR_FTM_RESP_ATTR_DIST_AVG={0xc, 0x10, 0xfffffffffffffffa}]}, @NL80211_PMSR_TYPE_FTM={0x58, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_RESP_ATTR_RSSI_AVG={0x8, 0x9, 0xda89}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc}, @NL80211_PMSR_FTM_RESP_ATTR_BURST_INDEX={0x6, 0x2, 0x80}, @NL80211_PMSR_FTM_RESP_ATTR_RX_RATE={0x2c, 0xc, 0x0, 0x1, [@HWSIM_RATE_INFO_ATTR_HE_GI={0x5, 0x6, 0x6}, @HWSIM_RATE_INFO_ATTR_HE_DCM={0x5, 0x7, 0x3}, @HWSIM_RATE_INFO_ATTR_MCS={0x5, 0x2, 0x81}, @HWSIM_RATE_INFO_ATTR_LEGACY={0x6, 0x3, 0xffff}, @HWSIM_RATE_INFO_ATTR_EHT_GI={0x5, 0xa, 0x5}]}, @NL80211_PMSR_FTM_RESP_ATTR_RTT_SPREAD={0xc, 0xf, 0x80}]}]}]}]}]}, @NL80211_PMSR_ATTR_PEERS={0x18, 0x5, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_RESP={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_RESP_ATTR_HOST_TIME={0xc, 0x3, 0x80}]}]}]}]}, @HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x3d4}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0xa}, 0x7}, 0x3, 0x2) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/phonet\x00', 0x42000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000002100)=""/15, 0xf) r6 = socket(0x10, 0x2, 0x0) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r6, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fcdbdf250a0000ff00000000140001"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r8 = ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000040)) r9 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="f5096cfb9e000000000001000000000000bf72", @ANYRES16=r9, @ANYBLOB="00022dbd7000fbdbdf2506000000080003000700000008"], 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x440c0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000d80)={'veth0_to_hsr\x00'}) sendmsg$auto_NCSI_CMD_CLEAR_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0x54c, r9, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NCSI_ATTR_DATA={0x51c, 0x5, "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"}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0xfffffff9}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0xa7}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0xb}]}, 0x54c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 2.465623257s ago: executing program 1 (id=2683): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r0 = prctl$auto(0x3e, 0x100000000000001, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) ioctl$auto(0x3, 0x40104d09, 0x5) capget$auto(0x0, 0xfffffffffffffffe) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001180), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x2, 0x179, [{0xfe, 0x400, 0x9}]}) ioctl$auto(0xffffffffffffffff, 0x400454cb, 0x5) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) write$auto_rfkill_fops_core(r0, &(0x7f0000000080)="f094d8a834dd3eea29ef6cc44d4ad20beae88e32a22454e4cf2a3cecc54632a74d8effa95c29f387f86d5b", 0x2b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) 2.398243278s ago: executing program 3 (id=2674): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x9, 0xffffffffffff0001, 0x15) close_range$auto(r0, 0x8, 0x0) brk$auto(0xffffffffffffff66) r3 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) pread64$auto(r4, 0x0, 0x800003, 0x6) mlockall$auto(0x7) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x202, 0x0) ioctl$auto_SNAPSHOT_CREATE_IMAGE(r3, 0x40043311, 0x0) personality$auto(0xfffff032) ppoll$auto(&(0x7f0000001ac0)={0xffffffffffffffff, 0x9, 0x7}, 0x8, &(0x7f0000001b00)={0xf2, 0x9}, &(0x7f00000002c0)={0x10000}, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80c80, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = prctl$auto(0x6, 0x1, 0x0, 0x0, 0x6) r6 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000140)) socket(0x10, 0x2, 0x4) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket(0x2, 0x2, 0x1) setsockopt$auto(r5, 0x0, 0x8, 0x0, 0x28) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x8502, 0x0) mmap$auto(0x0, 0x8, 0x1, 0x9b72, 0x2, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) 1.508994051s ago: executing program 3 (id=2675): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xaa03, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) landlock_restrict_self$auto(r0, 0x9) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) socket$nl_generic(0x10, 0x3, 0x10) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, &(0x7f0000000080)="a3c72e71ed506a221381f0538fef", 0xe) close_range$auto(0x2, 0x8000, 0x0) 1.508444535s ago: executing program 5 (id=2676): r0 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) write$auto_safesetid_uid_file_fops_securityfs(r0, &(0x7f0000000b40)="33e06908f7cef2ef9652d5e3d0f91cdb9aa7fcd4f56b3ae50e2e7a3fce17ad39061182af048f047adfa552adf5a64941ae9a2564ce32560a", 0x38) socket(0x22, 0x0, 0x84) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0) socket(0x10, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0x80000000) socket(0xa, 0x3, 0x3a) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/raw6\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000e80)=""/215, 0xd7) write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) ioctl$auto_EVIOCGRAB(r5, 0x40044590, &(0x7f0000000000)=0x2) write$auto(r5, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) socket(0x10, 0x2, 0xffffffff) pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0xffff) close_range$auto(0x2, 0x8, 0x0) gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) syz_clone3(&(0x7f0000000380)={0x4081080, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) 1.492562923s ago: executing program 1 (id=2686): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf250200000800130001"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x890) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB='1'], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}, 0x1, 0x0, 0x0, 0x20000820}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x38) 1.318143172s ago: executing program 1 (id=2677): pipe$auto(&(0x7f0000000500)) r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100) write$auto(r0, &(0x7f0000000000)='}\x00', 0x5) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r2, 0x705, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) r3 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000e00)='/sys/kernel/debug/kvm/halt_attempted_poll\x00', 0xc42, 0x0) flistxattr$auto(r3, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x4, 0xa910, 0xffffffffffffffff, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyxf\x00', 0x109401, 0x0) ioctl$auto(r5, 0x540a, 0x0) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) mremap$auto(0x4000, 0x8, 0x3fd6, 0x0, 0x400000002) unshare$auto(0x20000080) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) r7 = semctl$auto_GETPID(0xfffffff8, 0x0, 0xb, 0x6) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x7, 0x101, 0x7, "aab8e80600080043529f895cf5e8ec8f46cbb766439daa41e1aa00000000001200000000070a0000000028ff", @inferred=r7}, 0x6, 0x8, 0x6, @raw=0xd7, @integer64={0x40736b1f, 0x1, 0x8}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x42400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f0000000180)=""/157, 0x9d) 465.127753ms ago: executing program 3 (id=2678): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) r0 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="180000fc", @ANYRES8=r0, @ANYBLOB="01", @ANYRES32], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) 434.555871ms ago: executing program 3 (id=2680): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xa3, 0xeb1, r0, 0x8000) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0) fsopen$auto(0x0, 0x1) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r1 = socket(0xa, 0x5, 0x84) sendto$auto(r1, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe800000110400"}, 0x1c) 0s ago: executing program 3 (id=2682): pipe$auto(&(0x7f0000000500)) r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100) write$auto(r0, &(0x7f0000000000)='}\x00', 0x5) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, r2, 0x705, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) r3 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000e00)='/sys/kernel/debug/kvm/halt_attempted_poll\x00', 0xc42, 0x0) flistxattr$auto(r3, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x4, 0xa910, 0xffffffffffffffff, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyxf\x00', 0x109401, 0x0) ioctl$auto(r5, 0x540a, 0x0) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) mremap$auto(0x4000, 0x8, 0x3fd6, 0x0, 0x400000002) unshare$auto(0x20000080) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) r7 = semctl$auto_GETPID(0xfffffff8, 0x0, 0xb, 0x6) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x7, 0x101, 0x7, "aab8e80600080043529f895cf5e8ec8f46cbb766439daa41e1aa00000000001200000000070a0000000000d7", @inferred=r7}, 0x6, 0x8, 0x6, @raw=0xd7, @integer64={0x40736b1f, 0x1, 0x8}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/system/clocksource/clocksource0/available_clocksource\x00', 0x42400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f0000000180)=""/157, 0x9d) kernel console output (not intermixed with test programs): 0000000000246 R12: 0000000000000000 [ 481.108607][T14989] R13: 00007f3e0e3c6128 R14: 00007f3e0e3c6090 R15: 00007ffeaed9b4a8 [ 481.108627][T14989] [ 481.832495][T13307] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 918 with max blocks 1 with error 117 [ 481.895337][T13307] EXT4-fs (sda1): This should not happen!! Data will be lost [ 481.895337][T13307] [ 482.041052][T13307] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 11 with max blocks 5 with error 117 [ 482.143627][T13307] EXT4-fs (sda1): This should not happen!! Data will be lost [ 482.143627][T13307] [ 482.453874][T15013] Invalid ELF header magic: != ELF [ 482.795036][T15019] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2222'. [ 482.857015][T15019] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2222'. [ 485.190258][T15080] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 487.529033][T15117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2237'. [ 489.060035][T15144] Invalid ELF header magic: != ELF [ 489.481860][T15159] FAULT_INJECTION: forcing a failure. [ 489.481860][T15159] name failslab, interval 1, probability 0, space 0, times 0 [ 489.499731][T15163] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 489.500135][T15159] CPU: 1 UID: 0 PID: 15159 Comm: syz.5.2244 Not tainted syzkaller #0 PREEMPT(full) [ 489.500168][T15159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 489.500183][T15159] Call Trace: [ 489.500193][T15159] [ 489.500202][T15159] dump_stack_lvl+0x16c/0x1f0 [ 489.500244][T15159] should_fail_ex+0x512/0x640 [ 489.500281][T15159] ? __kmalloc_noprof+0xbf/0x510 [ 489.500314][T15159] ? apply_wqattrs_prepare+0xf8/0xbd0 [ 489.500341][T15159] should_failslab+0xc2/0x120 [ 489.500374][T15159] __kmalloc_noprof+0xd2/0x510 [ 489.500412][T15159] apply_wqattrs_prepare+0xf8/0xbd0 [ 489.500454][T15159] apply_workqueue_attrs_locked+0x64/0xe0 [ 489.500484][T15159] __alloc_workqueue+0xf41/0x1810 [ 489.500522][T15159] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 489.500560][T15159] alloc_workqueue_noprof+0xd2/0x200 [ 489.500593][T15159] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 489.500635][T15159] ? __pfx___debug_object_init+0x10/0x10 [ 489.500675][T15159] nci_register_device+0x511/0xb80 [ 489.500709][T15159] ? __pfx_nci_register_device+0x10/0x10 [ 489.500750][T15159] ? lockdep_init_map_type+0x5c/0x280 [ 489.500791][T15159] virtual_ncidev_open+0x141/0x220 [ 489.500825][T15159] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 489.500857][T15159] misc_open+0x35d/0x420 [ 489.500888][T15159] ? __pfx_misc_open+0x10/0x10 [ 489.500917][T15159] chrdev_open+0x234/0x6a0 [ 489.500948][T15159] ? __pfx_apparmor_file_open+0x10/0x10 [ 489.500977][T15159] ? __pfx_chrdev_open+0x10/0x10 [ 489.501009][T15159] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 489.501046][T15159] do_dentry_open+0x982/0x1530 [ 489.501084][T15159] ? __pfx_chrdev_open+0x10/0x10 [ 489.501125][T15159] vfs_open+0x82/0x3f0 [ 489.501167][T15159] path_openat+0x1de4/0x2cb0 [ 489.501208][T15159] ? __pfx_path_openat+0x10/0x10 [ 489.501247][T15159] do_filp_open+0x20b/0x470 [ 489.501278][T15159] ? __pfx_do_filp_open+0x10/0x10 [ 489.501333][T15159] ? alloc_fd+0x471/0x7d0 [ 489.501370][T15159] do_sys_openat2+0x11b/0x1d0 [ 489.501406][T15159] ? __pfx_do_sys_openat2+0x10/0x10 [ 489.501457][T15159] __x64_sys_openat+0x174/0x210 [ 489.501493][T15159] ? __pfx___x64_sys_openat+0x10/0x10 [ 489.501546][T15159] do_syscall_64+0xcd/0x490 [ 489.501585][T15159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.501610][T15159] RIP: 0033:0x7fabd498ebe9 [ 489.501630][T15159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.501656][T15159] RSP: 002b:00007fabd5751038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 489.501680][T15159] RAX: ffffffffffffffda RBX: 00007fabd4bc5fa0 RCX: 00007fabd498ebe9 [ 489.501698][T15159] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 489.501715][T15159] RBP: 00007fabd4a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 489.501731][T15159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.501746][T15159] R13: 00007fabd4bc6038 R14: 00007fabd4bc5fa0 R15: 00007ffdcb9ed628 [ 489.501781][T15159] [ 489.928463][T15170] netlink: 330 bytes leftover after parsing attributes in process `syz.5.2246'. [ 490.289402][T15174] nfs: Unknown parameter 'ΝΦή©iμθʟσ‚b’y¨7Jό ΕΨ€ΊͺV{° [ 490.289402][T15174] —\§γίΒ9-*;#rΘΡRcF‡δGL₯Φ*ζ(κ•ά¦)5&yAlγj Lp‘ν%―Zψwς}ΝGSΞΉάk†' [ 490.722127][T15185] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2250'. [ 490.797185][T15185] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2250'. [ 491.421375][T15201] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.4.2254: bg 1: bad block bitmap checksum [ 491.434776][T15201] EXT4-fs error (device sda1) in ext4_mb_clear_bb:6657: Filesystem failed CRC [ 491.510603][T15207] FAULT_INJECTION: forcing a failure. [ 491.510603][T15207] name failslab, interval 1, probability 0, space 0, times 0 [ 491.560324][T15207] CPU: 1 UID: 0 PID: 15207 Comm: syz.1.2255 Not tainted syzkaller #0 PREEMPT(full) [ 491.560359][T15207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 491.560375][T15207] Call Trace: [ 491.560384][T15207] [ 491.560394][T15207] dump_stack_lvl+0x16c/0x1f0 [ 491.560436][T15207] should_fail_ex+0x512/0x640 [ 491.560475][T15207] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 491.560508][T15207] should_failslab+0xc2/0x120 [ 491.560541][T15207] __kmalloc_cache_noprof+0x6a/0x3e0 [ 491.560565][T15207] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 491.560599][T15207] ? lockdep_hardirqs_on+0x7c/0x110 [ 491.560632][T15207] ? __request_module+0x2ad/0x690 [ 491.560674][T15207] __request_module+0x2ad/0x690 [ 491.560711][T15207] ? __pfx___request_module+0x10/0x10 [ 491.560765][T15207] ? find_held_lock+0x2b/0x80 [ 491.560800][T15207] inet_create+0xd21/0x1040 [ 491.560831][T15207] ? inet_create+0x93/0x1040 [ 491.560873][T15207] __sock_create+0x335/0x8d0 [ 491.560911][T15207] __sys_socket+0x14d/0x260 [ 491.560942][T15207] ? __pfx___sys_socket+0x10/0x10 [ 491.560972][T15207] ? xfd_validate_state+0x61/0x180 [ 491.561006][T15207] ? __pfx_ksys_write+0x10/0x10 [ 491.561042][T15207] __x64_sys_socket+0x72/0xb0 [ 491.561071][T15207] ? lockdep_hardirqs_on+0x7c/0x110 [ 491.561106][T15207] do_syscall_64+0xcd/0x490 [ 491.561145][T15207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.561171][T15207] RIP: 0033:0x7f6409d8ebe9 [ 491.561191][T15207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.561216][T15207] RSP: 002b:00007f640ab77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 491.561241][T15207] RAX: ffffffffffffffda RBX: 00007f6409fc6090 RCX: 00007f6409d8ebe9 [ 491.561259][T15207] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 0000000000000002 [ 491.561275][T15207] RBP: 00007f6409e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 491.561291][T15207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.561307][T15207] R13: 00007f6409fc6128 R14: 00007f6409fc6090 R15: 00007ffdd861a128 [ 491.561342][T15207] [ 491.779353][ C1] vkms_vblank_simulate: vblank timer overrun [ 491.813548][T15212] IPVS: length: 7562853 != 24 [ 492.086383][T15203] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 492.768579][T15229] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2260'. [ 492.857504][T15229] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2260'. [ 494.560203][T15273] zram0: detected capacity change from 0 to 8 [ 495.236294][T15291] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 496.562026][T15314] netlink: 'syz.1.2275': attribute type 1 has an invalid length. [ 497.322641][ T5881] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 497.332711][ T5881] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 497.340933][ T5881] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 497.353416][ T5881] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 497.363030][ T5878] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 497.941850][T15344] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 498.237400][T15329] chnl_net:caif_netlink_parms(): no params data found [ 498.582449][T15329] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.590823][T15329] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.591651][T15363] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 498.605394][T15363] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 498.613312][T15329] bridge_slave_0: entered allmulticast mode [ 498.622381][T15329] bridge_slave_0: entered promiscuous mode [ 498.637709][T15329] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.703272][T15329] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.710580][T15329] bridge_slave_1: entered allmulticast mode [ 498.719021][T15329] bridge_slave_1: entered promiscuous mode [ 498.793989][T15329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.817784][T15329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.866426][T15365] netlink: 'syz.1.2283': attribute type 16 has an invalid length. [ 498.880088][T15365] netlink: 'syz.1.2283': attribute type 17 has an invalid length. [ 498.889875][T15365] netlink: 'syz.1.2283': attribute type 19 has an invalid length. [ 498.908962][T15365] netlink: 102 bytes leftover after parsing attributes in process `syz.1.2283'. [ 498.928410][T15329] team0: Port device team_slave_0 added [ 498.952587][T15368] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2284'. [ 498.970964][T15329] team0: Port device team_slave_1 added [ 499.040382][T15368] bond0: (slave bond_slave_1): Releasing backup interface [ 499.212849][T15329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.219839][T15329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.249609][T15329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.284815][T15329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.293537][T15329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.319434][ C1] vkms_vblank_simulate: vblank timer overrun [ 499.333323][T15329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.380361][ T5878] Bluetooth: hci5: command tx timeout [ 499.712225][T15329] hsr_slave_0: entered promiscuous mode [ 499.735545][T15329] hsr_slave_1: entered promiscuous mode [ 499.767606][T15329] debugfs: 'hsr0' already exists in 'hsr' [ 499.773965][T15329] Cannot create hsr debugfs directory [ 500.182306][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.192694][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.421173][T15329] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 500.440258][T15329] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 500.457985][T15329] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 500.484369][T15329] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 500.695441][T15409] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 500.755705][T15329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.879374][T15329] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.906658][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.913812][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.978081][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.985296][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.451889][ T5878] Bluetooth: hci5: command tx timeout [ 501.646478][T15430] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 501.723216][T15329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.205975][T15329] veth0_vlan: entered promiscuous mode [ 502.224152][T15329] veth1_vlan: entered promiscuous mode [ 502.268770][T15329] veth0_macvtap: entered promiscuous mode [ 502.279780][T15329] veth1_macvtap: entered promiscuous mode [ 502.312066][T15329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.331874][T15329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.354738][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.363613][T13355] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.373610][T13355] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.398515][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.527207][ T9659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.550795][ T9659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.624428][T13307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.634944][ T30] audit: type=1800 audit(2147483671.084:9): pid=15441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2295" name="dynamic_events" dev="tracefs" ino=37 res=0 errno=0 [ 502.635422][T13307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.539326][ T5878] Bluetooth: hci5: command tx timeout [ 504.833705][T15478] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 505.597703][ T5878] Bluetooth: hci5: command tx timeout [ 506.715294][ T30] audit: type=1800 audit(2147483675.165:10): pid=15537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2312" name="members" dev="configfs" ino=49913 res=0 errno=0 [ 507.108661][T15554] Ignoring unsupported numa_zonelist_order value: [ 507.108661][T15554] [ 507.874989][T15570] vivid-015: ================= START STATUS ================= [ 507.916752][T15570] vivid-015: ================== END STATUS ================== [ 508.775389][T15594] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 7 with max blocks 2 with error 117 [ 508.809158][T15594] EXT4-fs (sda1): This should not happen!! Data will be lost [ 508.809158][T15594] [ 509.746839][T15610] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2329'. [ 509.772827][T15610] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2329'. [ 510.466652][T15511] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 510.476058][T15511] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 510.487273][T15511] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 510.495144][T15511] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 510.502537][T15511] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 511.101233][T15632] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2334'. [ 511.198798][T15633] Invalid ELF header magic: != ELF [ 511.447678][T15619] chnl_net:caif_netlink_parms(): no params data found [ 511.878914][T15619] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.886790][T15619] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.894641][T15619] bridge_slave_0: entered allmulticast mode [ 511.906170][T15619] bridge_slave_0: entered promiscuous mode [ 511.915305][T15619] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.922691][T15619] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.934323][T15619] bridge_slave_1: entered allmulticast mode [ 511.942014][T15619] bridge_slave_1: entered promiscuous mode [ 512.274066][T15526] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 918 with max blocks 1 with error 117 [ 512.377909][T15526] EXT4-fs (sda1): This should not happen!! Data will be lost [ 512.377909][T15526] [ 512.620708][T15511] Bluetooth: hci6: command tx timeout [ 512.858183][T15619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.134113][T15619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.549610][T15619] team0: Port device team_slave_0 added [ 513.645116][T15619] team0: Port device team_slave_1 added [ 514.120755][T15619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.142663][T15619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.186629][T15619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.660307][T15511] Bluetooth: hci6: command tx timeout [ 514.747424][T15619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.764610][T15619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.831454][T15619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.419067][T15619] hsr_slave_0: entered promiscuous mode [ 515.432051][T15619] hsr_slave_1: entered promiscuous mode [ 515.438850][T15619] debugfs: 'hsr0' already exists in 'hsr' [ 515.444593][T15619] Cannot create hsr debugfs directory [ 516.381085][T15679] tipc: Started in network mode [ 516.385991][T15679] tipc: Node identity ee00, cluster identity 4711 [ 516.401952][T15679] tipc: Node number set to 60928 [ 516.610498][T15685] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 9 with max blocks 4 with error 117 [ 516.648516][T15685] EXT4-fs (sda1): This should not happen!! Data will be lost [ 516.648516][T15685] [ 516.731205][T15511] Bluetooth: hci6: command tx timeout [ 517.311626][T15697] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 518.238586][T15619] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 518.432656][T15619] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 518.494582][T15619] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 518.649670][T15700] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2344'. [ 518.689651][T15619] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 518.723581][T15700] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2344'. [ 518.798615][T15511] Bluetooth: hci6: command tx timeout [ 520.095281][T15619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.131513][T15619] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.156422][T15508] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.163604][T15508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.426438][T15512] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.433657][T15512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.765090][T15619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.112360][T15619] veth0_vlan: entered promiscuous mode [ 522.130565][T15619] veth1_vlan: entered promiscuous mode [ 522.211630][T15619] veth0_macvtap: entered promiscuous mode [ 522.223463][T15619] veth1_macvtap: entered promiscuous mode [ 522.256548][T15619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.274663][T15619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.295455][T15512] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.305874][T15512] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.324664][T15512] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.366352][T15512] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.533058][T15524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.560064][T15512] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 913 with max blocks 5 with error 117 [ 522.587670][T15524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.600481][T15512] EXT4-fs (sda1): This should not happen!! Data will be lost [ 522.600481][T15512] [ 522.630765][T15512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.640376][T15512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.687243][T15644] syz.5.2335 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 522.704336][T15644] CPU: 0 UID: 0 PID: 15644 Comm: syz.5.2335 Not tainted syzkaller #0 PREEMPT(full) [ 522.704368][T15644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 522.704383][T15644] Call Trace: [ 522.704391][T15644] [ 522.704400][T15644] dump_stack_lvl+0x16c/0x1f0 [ 522.704440][T15644] dump_header+0x101/0x930 [ 522.704475][T15644] oom_kill_process+0x272/0xa40 [ 522.704510][T15644] out_of_memory+0x350/0x1700 [ 522.704547][T15644] ? __pfx_out_of_memory+0x10/0x10 [ 522.704587][T15644] mem_cgroup_out_of_memory+0x118/0x130 [ 522.704623][T15644] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 522.704669][T15644] ? do_raw_spin_unlock+0x172/0x230 [ 522.704711][T15644] try_charge_memcg+0x72b/0xd50 [ 522.704747][T15644] ? __pfx_try_charge_memcg+0x10/0x10 [ 522.704777][T15644] ? __print_lock_name+0x41/0xe0 [ 522.704812][T15644] ? rcu_read_unlock+0x17/0x60 [ 522.704852][T15644] charge_memcg+0x8a/0x230 [ 522.704886][T15644] __mem_cgroup_charge+0x2b/0x1e0 [ 522.704921][T15644] shmem_alloc_and_add_folio+0x514/0xc20 [ 522.704959][T15644] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 522.704992][T15644] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 522.705027][T15644] shmem_get_folio_gfp+0x67f/0x1600 [ 522.705063][T15644] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 522.705103][T15644] shmem_write_begin+0x160/0x300 [ 522.705135][T15644] ? __pfx_shmem_write_begin+0x10/0x10 [ 522.705161][T15644] ? timestamp_truncate+0x21e/0x2d0 [ 522.705192][T15644] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 522.705236][T15644] generic_perform_write+0x3c2/0x900 [ 522.705276][T15644] ? __pfx_generic_perform_write+0x10/0x10 [ 522.705305][T15644] ? inode_needs_update_time.part.0+0x191/0x270 [ 522.705344][T15644] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 522.705374][T15644] shmem_file_write_iter+0x10e/0x140 [ 522.705415][T15644] __kernel_write_iter+0x31a/0xb10 [ 522.705447][T15644] ? __pfx___kernel_write_iter+0x10/0x10 [ 522.705474][T15644] ? __up_read+0x1f8/0x750 [ 522.705512][T15644] ? dump_user_range+0x756/0xb70 [ 522.705542][T15644] dump_user_range+0x413/0xb70 [ 522.705573][T15644] ? __pfx_dump_user_range+0x10/0x10 [ 522.705600][T15644] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 522.705645][T15644] ? __pfx_writenote+0x10/0x10 [ 522.705680][T15644] elf_core_dump+0x2929/0x3b60 [ 522.705726][T15644] ? __pfx_elf_core_dump+0x10/0x10 [ 522.705751][T15644] ? kasan_save_stack+0x42/0x60 [ 522.705777][T15644] ? kasan_save_stack+0x33/0x60 [ 522.705807][T15644] ? kasan_save_track+0x14/0x30 [ 522.705831][T15644] ? __kasan_kmalloc+0xaa/0xb0 [ 522.705856][T15644] ? vfs_coredump+0x1dca/0x5670 [ 522.705877][T15644] ? get_signal+0x22e3/0x26d0 [ 522.705902][T15644] ? arch_do_signal_or_restart+0x8f/0x790 [ 522.705940][T15644] ? 0xffffffffff600000 [ 522.706024][T15644] ? vfs_coredump+0x2b94/0x5670 [ 522.706044][T15644] vfs_coredump+0x2b94/0x5670 [ 522.706082][T15644] ? __pfx_vfs_coredump+0x10/0x10 [ 522.706108][T15644] ? __lock_acquire+0x62e/0x1ce0 [ 522.706146][T15644] ? __lock_acquire+0x62e/0x1ce0 [ 522.706179][T15644] ? lock_acquire+0x179/0x350 [ 522.706227][T15644] ? is_bpf_text_address+0x8a/0x1a0 [ 522.706255][T15644] ? bpf_ksym_find+0x124/0x1c0 [ 522.706287][T15644] ? __kernel_text_address+0xd/0x40 [ 522.706308][T15644] ? unwind_get_return_address+0x59/0xa0 [ 522.706334][T15644] ? arch_stack_walk+0xa6/0x100 [ 522.706373][T15644] ? stack_trace_save+0x8e/0xc0 [ 522.706399][T15644] ? __pfx_stack_trace_save+0x10/0x10 [ 522.706426][T15644] ? stack_depot_save_flags+0x29/0x9c0 [ 522.706462][T15644] ? __lock_acquire+0xb97/0x1ce0 [ 522.706557][T15644] ? proc_coredump_connector+0x2d1/0x4f0 [ 522.706587][T15644] ? __pfx_proc_coredump_connector+0x10/0x10 [ 522.706626][T15644] ? rcu_is_watching+0x12/0xc0 [ 522.706656][T15644] get_signal+0x22e3/0x26d0 [ 522.706692][T15644] ? force_sig_fault+0xc4/0x100 [ 522.706720][T15644] ? __pfx_get_signal+0x10/0x10 [ 522.706759][T15644] arch_do_signal_or_restart+0x8f/0x790 [ 522.706793][T15644] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 522.706828][T15644] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 522.706882][T15644] irqentry_exit_to_user_mode+0x12a/0x270 [ 522.706920][T15644] asm_exc_page_fault+0x26/0x30 [ 522.706943][T15644] RIP: 0033:0x7fabd498ebe9 [ 522.706968][T15644] Code: Unable to access opcode bytes at 0x7fabd498ebbf. [ 522.706979][T15644] RSP: 002b:00007fabd5750fe8 EFLAGS: 00010206 [ 522.706999][T15644] RAX: 0000000000000000 RBX: 00007fabd4bc5fa0 RCX: 00007fabd498ebe9 [ 522.707015][T15644] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 522.707029][T15644] RBP: 00007fabd4a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 522.707044][T15644] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 522.707058][T15644] R13: 00007fabd4bc6038 R14: 00007fabd4bc5fa0 R15: 00007ffdcb9ed628 [ 522.707094][T15644] [ 522.707167][T15644] memory: usage 307200kB, limit 307200kB, failcnt 23241 [ 523.215540][T15644] memory+swap: usage 432164kB, limit 9007199254740988kB, failcnt 0 [ 523.248684][T15644] kmem: usage 3412kB, limit 9007199254740988kB, failcnt 0 [ 523.286669][T15644] Memory cgroup stats for /syz5: [ 523.286951][T15644] cache 305307648 [ 523.308208][T15644] rss 5660672 [ 523.311508][T15644] rss_huge 4194304 [ 523.347993][T15644] shmem 305303552 [ 523.351654][T15644] mapped_file 37957632 [ 523.358779][T15644] dirty 4096 [ 523.361987][T15644] writeback 0 [ 523.365387][T15644] workingset_refault_anon 431 [ 523.370280][T15644] workingset_refault_file 24 [ 523.374905][T15644] swap 127963136 [ 523.378573][T15644] swapcached 32768 [ 523.382357][T15644] pgpgin 126795 [ 523.385886][T15644] pgpgout 55590 [ 523.389514][T15644] pgfault 67941 [ 523.393032][T15644] pgmajfault 32 [ 523.397304][T15644] inactive_anon 290299904 [ 523.401816][T15644] active_anon 20697088 [ 523.406489][T15644] inactive_file 0 [ 523.410134][T15644] active_file 4096 [ 523.413858][T15644] unevictable 0 [ 523.444010][T15644] hierarchical_memory_limit 314572800 [ 523.449959][T15644] hierarchical_memsw_limit 9223372036854771712 [ 523.457119][T15644] total_cache 305307648 [ 523.461342][T15644] total_rss 5660672 [ 523.465829][T15644] total_rss_huge 4194304 [ 523.470086][T15644] total_shmem 305303552 [ 523.474326][T15644] total_mapped_file 37957632 [ 523.479120][T15644] total_dirty 4096 [ 523.482837][T15644] total_writeback 0 [ 523.510900][T15730] kexec: Could not allocate control_code_buffer [ 523.521803][T15644] total_workingset_refault_anon 431 [ 523.527196][T15644] total_workingset_refault_file 24 [ 523.623249][T15644] total_swap 127963136 [ 523.627432][T15644] total_swapcached 32768 [ 523.631676][T15644] total_pgpgin 126795 [ 523.636158][T15644] total_pgpgout 55590 [ 523.640222][T15644] total_pgfault 67941 [ 523.682358][T15644] total_pgmajfault 32 [ 523.817318][T15644] total_inactive_anon 290299904 [ 523.822203][T15644] total_active_anon 20697088 [ 523.847457][T15644] total_inactive_file 0 [ 523.853474][T15644] total_active_file 4096 [ 523.867462][T15644] total_unevictable 0 [ 523.871466][T15644] anon_cost 15101 [ 523.876493][T15644] file_cost 22 [ 523.895038][T15754] netlink: 186 bytes leftover after parsing attributes in process `syz.6.2352'. [ 523.911958][T15644] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2335,pid=15644,uid=0 [ 523.969749][T15754] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2352'. [ 523.985444][T15644] Memory cgroup out of memory: Killed process 15644 (syz.5.2335) total-vm:66064kB, anon-rss:4096kB, file-rss:0kB, shmem-rss:36668kB, UID:0 pgtables:104kB oom_score_adj:1000 [ 524.093212][T15754] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 524.421270][T15770] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 525.898099][T15790] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2359'. [ 526.118739][T15790] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2359'. [ 526.663585][T15799] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2360'. [ 526.865210][T15799] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2360'. [ 527.002029][T15648] syz.5.2335 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 527.227242][T15648] CPU: 1 UID: 0 PID: 15648 Comm: syz.5.2335 Not tainted syzkaller #0 PREEMPT(full) [ 527.227280][T15648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 527.227294][T15648] Call Trace: [ 527.227302][T15648] [ 527.227312][T15648] dump_stack_lvl+0x16c/0x1f0 [ 527.227359][T15648] dump_header+0x101/0x930 [ 527.227394][T15648] oom_kill_process+0x272/0xa40 [ 527.227427][T15648] out_of_memory+0x350/0x1700 [ 527.227464][T15648] ? __pfx_out_of_memory+0x10/0x10 [ 527.227503][T15648] mem_cgroup_out_of_memory+0x118/0x130 [ 527.227539][T15648] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 527.227583][T15648] ? do_raw_spin_unlock+0x172/0x230 [ 527.227625][T15648] try_charge_memcg+0x72b/0xd50 [ 527.227662][T15648] ? __pfx_try_charge_memcg+0x10/0x10 [ 527.227693][T15648] ? __print_lock_name+0x41/0xe0 [ 527.227718][T15648] ? rcu_read_unlock+0x17/0x60 [ 527.227759][T15648] charge_memcg+0x8a/0x230 [ 527.227790][T15648] __mem_cgroup_charge+0x2b/0x1e0 [ 527.227826][T15648] shmem_alloc_and_add_folio+0x514/0xc20 [ 527.227864][T15648] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 527.227897][T15648] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 527.227934][T15648] shmem_get_folio_gfp+0x67f/0x1600 [ 527.227971][T15648] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 527.228000][T15648] ? timestamp_truncate+0x21e/0x2d0 [ 527.228037][T15648] shmem_write_begin+0x160/0x300 [ 527.228070][T15648] ? __pfx_shmem_write_begin+0x10/0x10 [ 527.228096][T15648] ? inode_set_ctime_current+0x2a1/0x8f0 [ 527.228129][T15648] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 527.228174][T15648] generic_perform_write+0x3c2/0x900 [ 527.228213][T15648] ? __pfx_generic_perform_write+0x10/0x10 [ 527.228245][T15648] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 527.228276][T15648] ? generic_update_time+0xcf/0xf0 [ 527.228306][T15648] ? mnt_put_write_access_file+0x45/0xf0 [ 527.228337][T15648] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 527.228373][T15648] shmem_file_write_iter+0x10e/0x140 [ 527.228408][T15648] __kernel_write_iter+0x31a/0xb10 [ 527.228441][T15648] ? __pfx___kernel_write_iter+0x10/0x10 [ 527.228468][T15648] ? __up_read+0x1f8/0x750 [ 527.228506][T15648] ? dump_user_range+0x756/0xb70 [ 527.228539][T15648] dump_user_range+0x413/0xb70 [ 527.228572][T15648] ? __pfx_dump_user_range+0x10/0x10 [ 527.228599][T15648] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 527.228643][T15648] ? __pfx_writenote+0x10/0x10 [ 527.228679][T15648] elf_core_dump+0x2929/0x3b60 [ 527.228726][T15648] ? __pfx_elf_core_dump+0x10/0x10 [ 527.228753][T15648] ? rcu_is_watching+0x12/0xc0 [ 527.228778][T15648] ? trace_sched_exit_tp+0xd1/0x120 [ 527.228823][T15648] ? 0xffffffffff600000 [ 527.228858][T15648] ? __pfx___schedule+0x10/0x10 [ 527.228936][T15648] ? vfs_coredump+0x2b94/0x5670 [ 527.228957][T15648] vfs_coredump+0x2b94/0x5670 [ 527.228995][T15648] ? __pfx_vfs_coredump+0x10/0x10 [ 527.229022][T15648] ? __lock_acquire+0x62e/0x1ce0 [ 527.229061][T15648] ? __lock_acquire+0x62e/0x1ce0 [ 527.229095][T15648] ? lock_acquire+0x179/0x350 [ 527.229143][T15648] ? is_bpf_text_address+0x8a/0x1a0 [ 527.229173][T15648] ? bpf_ksym_find+0x124/0x1c0 [ 527.229205][T15648] ? __kernel_text_address+0xd/0x40 [ 527.229227][T15648] ? unwind_get_return_address+0x59/0xa0 [ 527.229254][T15648] ? arch_stack_walk+0xa6/0x100 [ 527.229294][T15648] ? stack_trace_save+0x8e/0xc0 [ 527.229321][T15648] ? __pfx_stack_trace_save+0x10/0x10 [ 527.229354][T15648] ? stack_depot_save_flags+0x29/0x9c0 [ 527.229390][T15648] ? __lock_acquire+0xb97/0x1ce0 [ 527.229486][T15648] ? proc_coredump_connector+0x2d1/0x4f0 [ 527.229517][T15648] ? __pfx_proc_coredump_connector+0x10/0x10 [ 527.229555][T15648] ? rcu_is_watching+0x12/0xc0 [ 527.229584][T15648] get_signal+0x22e3/0x26d0 [ 527.229621][T15648] ? force_sig_fault+0xc4/0x100 [ 527.229650][T15648] ? __pfx_get_signal+0x10/0x10 [ 527.229688][T15648] arch_do_signal_or_restart+0x8f/0x790 [ 527.229720][T15648] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 527.229756][T15648] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 527.229810][T15648] irqentry_exit_to_user_mode+0x12a/0x270 [ 527.229849][T15648] asm_exc_page_fault+0x26/0x30 [ 527.229873][T15648] RIP: 0033:0x7fabd498ebe9 [ 527.229897][T15648] Code: Unable to access opcode bytes at 0x7fabd498ebbf. [ 527.229909][T15648] RSP: 002b:00007fabd5750fe8 EFLAGS: 00010206 [ 527.229929][T15648] RAX: 0000000000000000 RBX: 00007fabd4bc5fa0 RCX: 00007fabd498ebe9 [ 527.229945][T15648] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 527.229959][T15648] RBP: 00007fabd4a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 527.229974][T15648] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 527.229988][T15648] R13: 00007fabd4bc6038 R14: 00007fabd4bc5fa0 R15: 00007ffdcb9ed628 [ 527.230023][T15648] [ 527.230034][T15648] memory: usage 307200kB, limit 307200kB, failcnt 26407 [ 527.766379][T15648] memory+swap: usage 432164kB, limit 9007199254740988kB, failcnt 0 [ 527.807375][T15648] kmem: usage 3260kB, limit 9007199254740988kB, failcnt 0 [ 527.824245][T15648] Memory cgroup stats for /syz5: [ 527.824412][T15648] cache 306724864 [ 527.837659][T15648] rss 4390912 [ 527.841034][T15648] rss_huge 4194304 [ 527.877678][T15648] shmem 306724864 [ 527.927037][T15648] mapped_file 43483136 [ 528.021263][T15648] dirty 0 [ 528.025323][T15648] writeback 0 [ 528.038447][T15648] workingset_refault_anon 431 [ 528.055201][T15648] workingset_refault_file 24 [ 528.067850][T15648] swap 127963136 [ 528.077739][T15648] swapcached 32768 [ 528.110664][T15648] pgpgin 137418 [ 528.130686][T15648] pgpgout 66177 [ 528.205408][T15648] pgfault 69922 [ 528.208897][T15648] pgmajfault 32 [ 528.225120][T15648] inactive_anon 290099200 [ 528.239402][T15648] active_anon 21041152 [ 528.243482][T15648] inactive_file 0 [ 528.247111][T15648] active_file 0 [ 528.269696][T15648] unevictable 0 [ 528.273177][T15648] hierarchical_memory_limit 314572800 [ 528.278543][T15648] hierarchical_memsw_limit 9223372036854771712 [ 528.332155][T15648] total_cache 306724864 [ 528.336387][T15648] total_rss 4390912 [ 528.340659][T15648] total_rss_huge 4194304 [ 528.344911][T15648] total_shmem 306724864 [ 528.350268][T15648] total_mapped_file 43483136 [ 528.354946][T15648] total_dirty 0 [ 528.358402][T15648] total_writeback 0 [ 528.365170][T15648] total_workingset_refault_anon 431 [ 528.370717][T15648] total_workingset_refault_file 24 [ 528.375910][T15648] total_swap 127963136 [ 528.380047][T15648] total_swapcached 32768 [ 528.384465][T15648] total_pgpgin 137418 [ 528.390073][T15648] total_pgpgout 66177 [ 528.394118][T15648] total_pgfault 69922 [ 528.399100][T15648] total_pgmajfault 32 [ 528.403094][T15648] total_inactive_anon 290099200 [ 528.407943][T15648] total_active_anon 21041152 [ 528.416336][T15648] total_inactive_file 0 [ 528.423720][T15648] total_active_file 0 [ 528.427713][T15648] total_unevictable 0 [ 528.433547][T15648] anon_cost 18959 [ 528.438544][T15648] file_cost 0 [ 528.441835][T15648] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2335,pid=15646,uid=0 [ 528.504819][T15648] Memory cgroup out of memory: Killed process 15646 (syz.5.2335) total-vm:66064kB, anon-rss:4096kB, file-rss:0kB, shmem-rss:41480kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 528.718735][T15842] random: crng reseeded on system resumption [ 529.641007][T15867] Process accounting resumed [ 529.943398][T15882] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2377'. [ 529.965134][T15880] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 530.024987][T15882] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2377'. [ 530.180425][T15884] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 530.865014][T15645] syz.5.2335 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 531.142674][T15645] CPU: 0 UID: 0 PID: 15645 Comm: syz.5.2335 Not tainted syzkaller #0 PREEMPT(full) [ 531.142706][T15645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 531.142720][T15645] Call Trace: [ 531.142729][T15645] [ 531.142739][T15645] dump_stack_lvl+0x16c/0x1f0 [ 531.142778][T15645] dump_header+0x101/0x930 [ 531.142813][T15645] oom_kill_process+0x272/0xa40 [ 531.142845][T15645] out_of_memory+0x350/0x1700 [ 531.142882][T15645] ? __pfx_out_of_memory+0x10/0x10 [ 531.142921][T15645] mem_cgroup_out_of_memory+0x118/0x130 [ 531.142957][T15645] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 531.143008][T15645] ? do_raw_spin_unlock+0x172/0x230 [ 531.143051][T15645] try_charge_memcg+0x72b/0xd50 [ 531.143086][T15645] ? __pfx_try_charge_memcg+0x10/0x10 [ 531.143116][T15645] ? __print_lock_name+0x41/0xe0 [ 531.143143][T15645] ? rcu_read_unlock+0x17/0x60 [ 531.143183][T15645] charge_memcg+0x8a/0x230 [ 531.143213][T15645] __mem_cgroup_charge+0x2b/0x1e0 [ 531.143248][T15645] shmem_alloc_and_add_folio+0x514/0xc20 [ 531.143285][T15645] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 531.143318][T15645] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 531.143353][T15645] shmem_get_folio_gfp+0x67f/0x1600 [ 531.143390][T15645] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 531.143430][T15645] shmem_write_begin+0x160/0x300 [ 531.143461][T15645] ? __pfx_shmem_write_begin+0x10/0x10 [ 531.143488][T15645] ? timestamp_truncate+0x21e/0x2d0 [ 531.143518][T15645] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 531.143562][T15645] generic_perform_write+0x3c2/0x900 [ 531.143603][T15645] ? __pfx_generic_perform_write+0x10/0x10 [ 531.143632][T15645] ? inode_needs_update_time.part.0+0x191/0x270 [ 531.143672][T15645] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 531.143703][T15645] shmem_file_write_iter+0x10e/0x140 [ 531.143738][T15645] __kernel_write_iter+0x31a/0xb10 [ 531.143771][T15645] ? __pfx___kernel_write_iter+0x10/0x10 [ 531.143799][T15645] ? __up_read+0x1f8/0x750 [ 531.143838][T15645] ? dump_user_range+0x756/0xb70 [ 531.143871][T15645] dump_user_range+0x413/0xb70 [ 531.143904][T15645] ? __pfx_dump_user_range+0x10/0x10 [ 531.143931][T15645] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 531.143976][T15645] ? __pfx_writenote+0x10/0x10 [ 531.144018][T15645] elf_core_dump+0x2929/0x3b60 [ 531.144065][T15645] ? __pfx_elf_core_dump+0x10/0x10 [ 531.144090][T15645] ? kasan_save_stack+0x42/0x60 [ 531.144116][T15645] ? kasan_save_stack+0x33/0x60 [ 531.144141][T15645] ? kasan_save_track+0x14/0x30 [ 531.144165][T15645] ? __kasan_kmalloc+0xaa/0xb0 [ 531.144191][T15645] ? vfs_coredump+0x1dca/0x5670 [ 531.144215][T15645] ? get_signal+0x22e3/0x26d0 [ 531.144238][T15645] ? arch_do_signal_or_restart+0x8f/0x790 [ 531.144275][T15645] ? 0xffffffffff600000 [ 531.144359][T15645] ? vfs_coredump+0x2b94/0x5670 [ 531.144379][T15645] vfs_coredump+0x2b94/0x5670 [ 531.144418][T15645] ? __pfx_vfs_coredump+0x10/0x10 [ 531.144444][T15645] ? __lock_acquire+0x62e/0x1ce0 [ 531.144483][T15645] ? __lock_acquire+0x62e/0x1ce0 [ 531.144515][T15645] ? lock_acquire+0x179/0x350 [ 531.144562][T15645] ? is_bpf_text_address+0x8a/0x1a0 [ 531.144591][T15645] ? bpf_ksym_find+0x124/0x1c0 [ 531.144623][T15645] ? __kernel_text_address+0xd/0x40 [ 531.144646][T15645] ? unwind_get_return_address+0x59/0xa0 [ 531.144671][T15645] ? arch_stack_walk+0xa6/0x100 [ 531.144713][T15645] ? stack_trace_save+0x8e/0xc0 [ 531.144740][T15645] ? __pfx_stack_trace_save+0x10/0x10 [ 531.144768][T15645] ? stack_depot_save_flags+0x29/0x9c0 [ 531.144804][T15645] ? __lock_acquire+0xb97/0x1ce0 [ 531.144899][T15645] ? proc_coredump_connector+0x2d1/0x4f0 [ 531.144929][T15645] ? __pfx_proc_coredump_connector+0x10/0x10 [ 531.144967][T15645] ? rcu_is_watching+0x12/0xc0 [ 531.145002][T15645] get_signal+0x22e3/0x26d0 [ 531.145038][T15645] ? force_sig_fault+0xc4/0x100 [ 531.145067][T15645] ? __pfx_get_signal+0x10/0x10 [ 531.145105][T15645] arch_do_signal_or_restart+0x8f/0x790 [ 531.145135][T15645] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 531.145170][T15645] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 531.145223][T15645] irqentry_exit_to_user_mode+0x12a/0x270 [ 531.145260][T15645] asm_exc_page_fault+0x26/0x30 [ 531.145283][T15645] RIP: 0033:0x7fabd498ebe9 [ 531.145308][T15645] Code: Unable to access opcode bytes at 0x7fabd498ebbf. [ 531.145318][T15645] RSP: 002b:00007fabd5750fe8 EFLAGS: 00010206 [ 531.145337][T15645] RAX: 0000000000000000 RBX: 00007fabd4bc5fa0 RCX: 00007fabd498ebe9 [ 531.145352][T15645] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 531.145367][T15645] RBP: 00007fabd4a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 531.145381][T15645] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 531.145395][T15645] R13: 00007fabd4bc6038 R14: 00007fabd4bc5fa0 R15: 00007ffdcb9ed628 [ 531.145429][T15645] [ 532.211302][T15645] memory: usage 306048kB, limit 307200kB, failcnt 30240 [ 532.261808][T15645] memory+swap: usage 431028kB, limit 9007199254740988kB, failcnt 0 [ 532.283228][T15645] kmem: usage 3172kB, limit 9007199254740988kB, failcnt 0 [ 532.298018][T15645] Memory cgroup stats for /syz5: [ 532.298177][T15645] cache 304226304 [ 532.307318][T15645] rss 5664768 [ 532.313369][T15645] rss_huge 4194304 [ 532.317285][T15645] shmem 304226304 [ 532.450816][T15645] mapped_file 45445120 [ 532.479930][T15645] dirty 0 [ 532.482869][T15645] writeback 0 [ 532.486128][T15645] workingset_refault_anon 431 [ 532.688291][T15645] workingset_refault_file 24 [ 532.693115][T15645] swap 127963136 [ 532.698436][T15645] swapcached 32768 [ 532.709175][T15645] pgpgin 143206 [ 532.712732][T15645] pgpgout 72264 [ 532.720257][T15645] pgfault 71160 [ 532.723812][T15645] pgmajfault 32 [ 532.755885][T15645] inactive_anon 267563008 [ 532.803775][T15645] active_anon 42299392 [ 532.861337][T15645] inactive_file 0 [ 532.898241][T15645] active_file 0 [ 532.901842][T15645] unevictable 0 [ 532.906261][T15645] hierarchical_memory_limit 314572800 [ 532.911784][T15645] hierarchical_memsw_limit 9223372036854771712 [ 532.922387][T15645] total_cache 304226304 [ 533.035937][T15645] total_rss 5664768 [ 533.085282][T15645] total_rss_huge 4194304 [ 533.170465][T15645] total_shmem 304226304 [ 533.174920][T15645] total_mapped_file 45445120 [ 533.181039][T15645] total_dirty 0 [ 533.300919][T15645] total_writeback 0 [ 533.377243][T15645] total_workingset_refault_anon 431 [ 533.463920][T15645] total_workingset_refault_file 24 [ 533.548545][T15645] total_swap 127963136 [ 533.613440][T15645] total_swapcached 32768 [ 533.674191][T15645] total_pgpgin 143206 [ 533.856854][T15645] total_pgpgout 72264 [ 534.007055][T15645] total_pgfault 71160 [ 534.020017][T15645] total_pgmajfault 32 [ 534.023992][T15645] total_inactive_anon 267563008 [ 534.043821][T15645] total_active_anon 42299392 [ 534.048434][T15645] total_inactive_file 0 [ 534.117588][T15645] total_active_file 0 [ 534.117653][T15645] total_unevictable 0 [ 534.117664][T15645] anon_cost 12137 [ 534.117674][T15645] file_cost 0 [ 534.117684][T15645] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2335,pid=15645,uid=0 [ 534.117859][T15645] Memory cgroup out of memory: Killed process 15645 (syz.5.2335) total-vm:66064kB, anon-rss:4096kB, file-rss:0kB, shmem-rss:40700kB, UID:0 pgtables:112kB oom_score_adj:1000 [ 534.254951][T15957] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 534.488464][T15958] netlink: 'syz.7.2391': attribute type 2 has an invalid length. [ 534.488534][T15960] netlink: 'syz.7.2391': attribute type 2 has an invalid length. [ 535.060512][T15642] syz.5.2335 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 535.221116][T15642] CPU: 1 UID: 0 PID: 15642 Comm: syz.5.2335 Not tainted syzkaller #0 PREEMPT(full) [ 535.221149][T15642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 535.221164][T15642] Call Trace: [ 535.221172][T15642] [ 535.221182][T15642] dump_stack_lvl+0x16c/0x1f0 [ 535.221221][T15642] dump_header+0x101/0x930 [ 535.221257][T15642] oom_kill_process+0x272/0xa40 [ 535.221292][T15642] out_of_memory+0x350/0x1700 [ 535.221327][T15642] ? __pfx_out_of_memory+0x10/0x10 [ 535.221364][T15642] mem_cgroup_out_of_memory+0x118/0x130 [ 535.221401][T15642] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 535.221445][T15642] ? do_raw_spin_unlock+0x172/0x230 [ 535.221487][T15642] try_charge_memcg+0x72b/0xd50 [ 535.221522][T15642] ? __pfx_try_charge_memcg+0x10/0x10 [ 535.221552][T15642] ? __print_lock_name+0x41/0xe0 [ 535.221585][T15642] ? rcu_read_unlock+0x17/0x60 [ 535.221625][T15642] charge_memcg+0x8a/0x230 [ 535.221654][T15642] __mem_cgroup_charge+0x2b/0x1e0 [ 535.221689][T15642] shmem_alloc_and_add_folio+0x514/0xc20 [ 535.221727][T15642] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 535.221759][T15642] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 535.221794][T15642] shmem_get_folio_gfp+0x67f/0x1600 [ 535.221831][T15642] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 535.221870][T15642] shmem_write_begin+0x160/0x300 [ 535.221902][T15642] ? __pfx_shmem_write_begin+0x10/0x10 [ 535.221928][T15642] ? timestamp_truncate+0x21e/0x2d0 [ 535.221958][T15642] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 535.222003][T15642] generic_perform_write+0x3c2/0x900 [ 535.222043][T15642] ? __pfx_generic_perform_write+0x10/0x10 [ 535.222073][T15642] ? inode_needs_update_time.part.0+0x191/0x270 [ 535.222111][T15642] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 535.222142][T15642] shmem_file_write_iter+0x10e/0x140 [ 535.222177][T15642] __kernel_write_iter+0x31a/0xb10 [ 535.222209][T15642] ? __pfx___kernel_write_iter+0x10/0x10 [ 535.222236][T15642] ? __up_read+0x1f8/0x750 [ 535.222274][T15642] ? dump_user_range+0x756/0xb70 [ 535.222305][T15642] dump_user_range+0x413/0xb70 [ 535.222338][T15642] ? __pfx_dump_user_range+0x10/0x10 [ 535.222363][T15642] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 535.222403][T15642] ? __pfx_writenote+0x10/0x10 [ 535.222432][T15642] elf_core_dump+0x2929/0x3b60 [ 535.222468][T15642] ? __pfx_elf_core_dump+0x10/0x10 [ 535.222489][T15642] ? kasan_save_stack+0x42/0x60 [ 535.222509][T15642] ? kasan_save_stack+0x33/0x60 [ 535.222530][T15642] ? kasan_save_track+0x14/0x30 [ 535.222550][T15642] ? __kasan_kmalloc+0xaa/0xb0 [ 535.222576][T15642] ? vfs_coredump+0x1dca/0x5670 [ 535.222597][T15642] ? get_signal+0x22e3/0x26d0 [ 535.222618][T15642] ? arch_do_signal_or_restart+0x8f/0x790 [ 535.222649][T15642] ? 0xffffffffff600000 [ 535.222714][T15642] ? vfs_coredump+0x2b94/0x5670 [ 535.222730][T15642] vfs_coredump+0x2b94/0x5670 [ 535.222760][T15642] ? __pfx_vfs_coredump+0x10/0x10 [ 535.222781][T15642] ? __lock_acquire+0x62e/0x1ce0 [ 535.222813][T15642] ? __lock_acquire+0x62e/0x1ce0 [ 535.222841][T15642] ? lock_acquire+0x179/0x350 [ 535.222879][T15642] ? is_bpf_text_address+0x8a/0x1a0 [ 535.222903][T15642] ? bpf_ksym_find+0x124/0x1c0 [ 535.222929][T15642] ? __kernel_text_address+0xd/0x40 [ 535.222947][T15642] ? unwind_get_return_address+0x59/0xa0 [ 535.222969][T15642] ? arch_stack_walk+0xa6/0x100 [ 535.223011][T15642] ? stack_trace_save+0x8e/0xc0 [ 535.223035][T15642] ? __pfx_stack_trace_save+0x10/0x10 [ 535.223057][T15642] ? stack_depot_save_flags+0x29/0x9c0 [ 535.223088][T15642] ? __lock_acquire+0xb97/0x1ce0 [ 535.223163][T15642] ? proc_coredump_connector+0x2d1/0x4f0 [ 535.223188][T15642] ? __pfx_proc_coredump_connector+0x10/0x10 [ 535.223219][T15642] ? rcu_is_watching+0x12/0xc0 [ 535.223243][T15642] get_signal+0x22e3/0x26d0 [ 535.223272][T15642] ? force_sig_fault+0xc4/0x100 [ 535.223295][T15642] ? __pfx_get_signal+0x10/0x10 [ 535.223327][T15642] arch_do_signal_or_restart+0x8f/0x790 [ 535.223352][T15642] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 535.223382][T15642] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 535.223424][T15642] irqentry_exit_to_user_mode+0x12a/0x270 [ 535.223456][T15642] asm_exc_page_fault+0x26/0x30 [ 535.223475][T15642] RIP: 0033:0x7fabd498ebe9 [ 535.223496][T15642] Code: Unable to access opcode bytes at 0x7fabd498ebbf. [ 535.223505][T15642] RSP: 002b:00007fabd5750fe8 EFLAGS: 00010206 [ 535.223521][T15642] RAX: 0000000000000000 RBX: 00007fabd4bc5fa0 RCX: 00007fabd498ebe9 [ 535.223535][T15642] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 535.223546][T15642] RBP: 00007fabd4a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 535.223564][T15642] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 535.223576][T15642] R13: 00007fabd4bc6038 R14: 00007fabd4bc5fa0 R15: 00007ffdcb9ed628 [ 535.223604][T15642] [ 535.716349][T15642] memory: usage 307200kB, limit 307200kB, failcnt 30828 [ 535.724973][T15642] memory+swap: usage 432164kB, limit 9007199254740988kB, failcnt 0 [ 535.727428][ T5917] Process accounting resumed [ 535.734928][T15642] kmem: usage 3312kB, limit 9007199254740988kB, failcnt 0 [ 535.745183][T15642] Memory cgroup stats for /syz5: [ 535.745356][T15642] cache 308916224 [ 535.754251][T15642] rss 2232320 [ 535.757613][T15642] rss_huge 2097152 [ 535.761401][T15642] shmem 308916224 [ 535.765035][T15642] mapped_file 50356224 [ 535.770106][T15642] dirty 0 [ 535.773102][T15642] writeback 0 [ 535.776384][T15642] workingset_refault_anon 431 [ 535.781176][T15642] workingset_refault_file 24 [ 535.785767][T15642] swap 127963136 [ 535.789314][T15642] swapcached 32768 [ 535.799513][T15642] pgpgin 149026 [ 535.846729][T15642] pgpgout 77266 [ 535.850527][T15642] pgfault 72630 [ 535.854047][T15642] pgmajfault 32 [ 535.857604][T15642] inactive_anon 268910592 [ 535.862359][T15642] active_anon 42242048 [ 535.866506][T15642] inactive_file 0 [ 535.870537][T15642] active_file 0 [ 535.874060][T15642] unevictable 0 [ 535.877569][T15642] hierarchical_memory_limit 314572800 [ 535.883495][T15642] hierarchical_memsw_limit 9223372036854771712 [ 535.889926][T15642] total_cache 308916224 [ 535.894212][T15642] total_rss 2232320 [ 535.898501][T15642] total_rss_huge 2097152 [ 535.932756][T15642] total_shmem 308916224 [ 535.967636][T15642] total_mapped_file 50356224 [ 536.001509][T15642] total_dirty 0 [ 536.105992][T15642] total_writeback 0 [ 536.120021][T15642] total_workingset_refault_anon 431 [ 536.125215][T15642] total_workingset_refault_file 24 [ 536.131104][T15642] total_swap 127963136 [ 536.135365][T15642] total_swapcached 32768 [ 536.140101][T15642] total_pgpgin 149026 [ 536.144083][T15642] total_pgpgout 77266 [ 536.148057][T15642] total_pgfault 72630 [ 536.152458][T15642] total_pgmajfault 32 [ 536.156461][T15642] total_inactive_anon 268910592 [ 536.161372][T15642] total_active_anon 42242048 [ 536.166160][T15642] total_inactive_file 0 [ 536.178133][T15642] total_active_file 0 [ 536.187506][T15642] total_unevictable 0 [ 536.197314][T15642] anon_cost 12203 [ 536.216812][T15642] file_cost 0 [ 536.216827][T15642] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2335,pid=15653,uid=0 [ 536.599547][T15642] Memory cgroup out of memory: Killed process 15653 (syz.5.2335) total-vm:66064kB, anon-rss:128kB, file-rss:0kB, shmem-rss:48908kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 537.133190][T15996] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2397'. [ 538.458121][T16008] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 538.469829][T16008] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 538.486402][T16008] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 538.496353][T16008] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 538.502554][T16008] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 538.515370][T16013] netlink: 'syz.6.2402': attribute type 27 has an invalid length. [ 538.516191][T16008] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 538.523335][T16013] netlink: 146 bytes leftover after parsing attributes in process `syz.6.2402'. [ 538.696277][T16008] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 538.825803][T16008] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 538.854345][T16008] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 538.950599][T16008] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 538.995080][T16008] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 539.007902][T16008] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 539.069791][T16008] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 539.604228][T16020] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 540.127704][T15511] Bluetooth: hci2: command 0x0c1a tx timeout [ 540.355318][T16040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2406'. [ 540.535512][T15511] Bluetooth: hci1: command 0x0c1a tx timeout [ 540.541578][T15511] Bluetooth: hci0: command 0x0c1a tx timeout [ 540.547858][T15511] Bluetooth: hci4: command 0x0c1a tx timeout [ 540.553860][T15532] Bluetooth: hci3: command 0x0c1a tx timeout [ 540.568072][T16049] deleting an unspecified loop device is not supported. [ 540.844169][T15532] Bluetooth: hci5: command 0x0c1a tx timeout [ 540.915888][T15648] syz.5.2335 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 540.961938][T15648] CPU: 1 UID: 0 PID: 15648 Comm: syz.5.2335 Not tainted syzkaller #0 PREEMPT(full) [ 540.961978][T15648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 540.961992][T15648] Call Trace: [ 540.962001][T15648] [ 540.962010][T15648] dump_stack_lvl+0x16c/0x1f0 [ 540.962050][T15648] dump_header+0x101/0x930 [ 540.962085][T15648] oom_kill_process+0x272/0xa40 [ 540.962121][T15648] out_of_memory+0x350/0x1700 [ 540.962158][T15648] ? __pfx_out_of_memory+0x10/0x10 [ 540.962199][T15648] mem_cgroup_out_of_memory+0x118/0x130 [ 540.962236][T15648] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 540.962284][T15648] ? do_raw_spin_unlock+0x172/0x230 [ 540.962327][T15648] try_charge_memcg+0x72b/0xd50 [ 540.962363][T15648] ? __pfx_try_charge_memcg+0x10/0x10 [ 540.962401][T15648] ? get_mem_cgroup_from_mm+0x80/0x600 [ 540.962425][T15648] ? __rcu_read_unlock+0x2bc/0x550 [ 540.962464][T15648] charge_memcg+0x8a/0x230 [ 540.962495][T15648] __mem_cgroup_charge+0x2b/0x1e0 [ 540.962529][T15648] shmem_alloc_and_add_folio+0x514/0xc20 [ 540.962567][T15648] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 540.962600][T15648] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 540.962636][T15648] shmem_get_folio_gfp+0x67f/0x1600 [ 540.962673][T15648] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 540.962713][T15648] shmem_write_begin+0x160/0x300 [ 540.962745][T15648] ? __pfx_shmem_write_begin+0x10/0x10 [ 540.962771][T15648] ? timestamp_truncate+0x21e/0x2d0 [ 540.962801][T15648] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 540.962846][T15648] generic_perform_write+0x3c2/0x900 [ 540.962885][T15648] ? __pfx_generic_perform_write+0x10/0x10 [ 540.962914][T15648] ? inode_needs_update_time.part.0+0x191/0x270 [ 540.962952][T15648] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 540.962990][T15648] shmem_file_write_iter+0x10e/0x140 [ 540.963025][T15648] __kernel_write_iter+0x31a/0xb10 [ 540.963057][T15648] ? __pfx___kernel_write_iter+0x10/0x10 [ 540.963085][T15648] ? __up_read+0x1f8/0x750 [ 540.963124][T15648] ? dump_user_range+0x756/0xb70 [ 540.963156][T15648] dump_user_range+0x413/0xb70 [ 540.963186][T15648] ? __pfx_dump_user_range+0x10/0x10 [ 540.963211][T15648] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 540.963253][T15648] ? __pfx_writenote+0x10/0x10 [ 540.963290][T15648] elf_core_dump+0x2929/0x3b60 [ 540.963335][T15648] ? __pfx_elf_core_dump+0x10/0x10 [ 540.963362][T15648] ? rcu_is_watching+0x12/0xc0 [ 540.963387][T15648] ? trace_sched_exit_tp+0xd1/0x120 [ 540.963430][T15648] ? 0xffffffffff600000 [ 540.963464][T15648] ? __pfx___schedule+0x10/0x10 [ 540.963540][T15648] ? vfs_coredump+0x2b94/0x5670 [ 540.963561][T15648] vfs_coredump+0x2b94/0x5670 [ 540.963600][T15648] ? __pfx_vfs_coredump+0x10/0x10 [ 540.963626][T15648] ? __lock_acquire+0x62e/0x1ce0 [ 540.963664][T15648] ? __lock_acquire+0x62e/0x1ce0 [ 540.963698][T15648] ? lock_acquire+0x179/0x350 [ 540.963745][T15648] ? is_bpf_text_address+0x8a/0x1a0 [ 540.963774][T15648] ? bpf_ksym_find+0x124/0x1c0 [ 540.963807][T15648] ? __kernel_text_address+0xd/0x40 [ 540.963830][T15648] ? unwind_get_return_address+0x59/0xa0 [ 540.963857][T15648] ? arch_stack_walk+0xa6/0x100 [ 540.963897][T15648] ? stack_trace_save+0x8e/0xc0 [ 540.963924][T15648] ? __pfx_stack_trace_save+0x10/0x10 [ 540.963952][T15648] ? stack_depot_save_flags+0x29/0x9c0 [ 540.963994][T15648] ? __lock_acquire+0xb97/0x1ce0 [ 540.964089][T15648] ? proc_coredump_connector+0x2d1/0x4f0 [ 540.964121][T15648] ? __pfx_proc_coredump_connector+0x10/0x10 [ 540.964159][T15648] ? rcu_is_watching+0x12/0xc0 [ 540.964189][T15648] get_signal+0x22e3/0x26d0 [ 540.964227][T15648] ? force_sig_fault+0xc4/0x100 [ 540.964256][T15648] ? __pfx_get_signal+0x10/0x10 [ 540.964295][T15648] arch_do_signal_or_restart+0x8f/0x790 [ 540.964326][T15648] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 540.964361][T15648] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 540.964416][T15648] irqentry_exit_to_user_mode+0x12a/0x270 [ 540.964453][T15648] asm_exc_page_fault+0x26/0x30 [ 540.964477][T15648] RIP: 0033:0x7fabd498ebe9 [ 540.964502][T15648] Code: Unable to access opcode bytes at 0x7fabd498ebbf. [ 540.964514][T15648] RSP: 002b:00007fabd5750fe8 EFLAGS: 00010206 [ 540.964534][T15648] RAX: 0000000000000000 RBX: 00007fabd4bc5fa0 RCX: 00007fabd498ebe9 [ 540.964550][T15648] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 540.964564][T15648] RBP: 00007fabd4a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 540.964579][T15648] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 540.964593][T15648] R13: 00007fabd4bc6038 R14: 00007fabd4bc5fa0 R15: 00007ffdcb9ed628 [ 540.964629][T15648] [ 541.003284][T15532] Bluetooth: hci6: command 0x0c1a tx timeout [ 541.550224][T15648] memory: usage 305836kB, limit 307200kB, failcnt 40021 [ 541.557200][T15648] memory+swap: usage 430316kB, limit 9007199254740988kB, failcnt 0 [ 541.719906][T15648] kmem: usage 3632kB, limit 9007199254740988kB, failcnt 0 [ 541.727051][T15648] Memory cgroup stats for /syz5: [ 541.727229][T15648] cache 305016832 [ 541.769173][T15648] rss 233472 [ 541.772530][T15648] rss_huge 0 [ 541.776900][T15648] shmem 305016832 [ 541.793845][T15648] mapped_file 62226432 [ 541.802382][T15648] dirty 0 [ 541.808746][T15648] writeback 0 [ 541.815406][T15648] workingset_refault_anon 431 [ 541.824584][T15648] workingset_refault_file 24 [ 541.832435][T15648] swap 127975424 [ 541.836766][T15648] swapcached 20480 [ 541.840614][T15648] pgpgin 172374 [ 541.844531][T15648] pgpgout 101518 [ 541.848154][T15648] pgfault 77373 [ 541.851713][T15648] pgmajfault 32 [ 541.855238][T15648] inactive_anon 262238208 [ 541.859663][T15648] active_anon 43147264 [ 541.863809][T15648] inactive_file 0 [ 541.867504][T15648] active_file 0 [ 541.871060][T15648] unevictable 0 [ 541.874584][T15648] hierarchical_memory_limit 314572800 [ 541.880394][T15648] hierarchical_memsw_limit 9223372036854771712 [ 541.886695][T15648] total_cache 305016832 [ 541.890953][T15648] total_rss 233472 [ 541.894743][T15648] total_rss_huge 0 [ 541.898575][T15648] total_shmem 305016832 [ 541.902800][T15648] total_mapped_file 62226432 [ 541.907448][T15648] total_dirty 0 [ 541.911044][T15648] total_writeback 0 [ 541.914931][T15648] total_workingset_refault_anon 431 [ 541.920217][T15648] total_workingset_refault_file 24 [ 541.925392][T15648] total_swap 127975424 [ 541.929565][T15648] total_swapcached 20480 [ 541.933878][T15648] total_pgpgin 172374 [ 541.938399][T15648] total_pgpgout 101518 [ 541.942941][T15648] total_pgfault 77373 [ 541.947220][T15648] total_pgmajfault 32 [ 541.951548][T15648] total_inactive_anon 262238208 [ 541.956472][T15648] total_active_anon 43147264 [ 541.961633][T15648] total_inactive_file 0 [ 541.965869][T15648] total_active_file 0 [ 541.969961][T15648] total_unevictable 0 [ 541.974018][T15648] anon_cost 16429 [ 541.977768][T15648] file_cost 0 [ 541.981444][T15648] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2335,pid=15655,uid=0 [ 541.996698][T15648] Memory cgroup out of memory: Killed process 15655 (syz.5.2335) total-vm:66064kB, anon-rss:0kB, file-rss:0kB, shmem-rss:60540kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 542.610959][T15532] Bluetooth: hci1: command 0x0c1a tx timeout [ 542.794878][T16084] FAULT_INJECTION: forcing a failure. [ 542.794878][T16084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 542.808171][T16084] CPU: 0 UID: 0 PID: 16084 Comm: syz.6.2413 Not tainted syzkaller #0 PREEMPT(full) [ 542.808207][T16084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 542.808223][T16084] Call Trace: [ 542.808232][T16084] [ 542.808242][T16084] dump_stack_lvl+0x16c/0x1f0 [ 542.808286][T16084] should_fail_ex+0x512/0x640 [ 542.808331][T16084] _copy_from_user+0x2e/0xd0 [ 542.808361][T16084] memdup_user+0x6b/0xe0 [ 542.808393][T16084] snd_pcm_common_ioctl+0x1fbc/0x3b80 [ 542.808432][T16084] ? do_vfs_ioctl+0x128/0x14f0 [ 542.808471][T16084] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 542.808510][T16084] ? __pfx_snd_pcm_common_ioctl+0x10/0x10 [ 542.808551][T16084] ? find_held_lock+0x2b/0x80 [ 542.808576][T16084] ? hook_file_ioctl_common+0x145/0x410 [ 542.808618][T16084] ? __fget_files+0x20e/0x3c0 [ 542.808651][T16084] snd_pcm_ioctl+0x7e/0xb0 [ 542.808683][T16084] ? __pfx_snd_pcm_ioctl+0x10/0x10 [ 542.808718][T16084] __x64_sys_ioctl+0x18e/0x210 [ 542.808759][T16084] do_syscall_64+0xcd/0x490 [ 542.808799][T16084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.808836][T16084] RIP: 0033:0x7fe01558ebe9 [ 542.808857][T16084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.808884][T16084] RSP: 002b:00007fe01644e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 542.808910][T16084] RAX: ffffffffffffffda RBX: 00007fe0157c6090 RCX: 00007fe01558ebe9 [ 542.808928][T16084] RDX: 0000000000000000 RSI: 00000000c1004110 RDI: 0000000000000000 [ 542.808944][T16084] RBP: 00007fe015611e19 R08: 0000000000000000 R09: 0000000000000000 [ 542.808961][T16084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.808977][T16084] R13: 00007fe0157c6128 R14: 00007fe0157c6090 R15: 00007ffeede94938 [ 542.809013][T16084] [ 543.014682][T15532] Bluetooth: hci5: command 0x0c1a tx timeout [ 543.070931][T15648] syz.5.2335 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 543.081206][T15648] CPU: 0 UID: 0 PID: 15648 Comm: syz.5.2335 Not tainted syzkaller #0 PREEMPT(full) [ 543.081240][T15648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 543.081254][T15648] Call Trace: [ 543.081262][T15648] [ 543.081272][T15648] dump_stack_lvl+0x16c/0x1f0 [ 543.081313][T15648] dump_header+0x101/0x930 [ 543.081348][T15648] oom_kill_process+0x272/0xa40 [ 543.081382][T15648] out_of_memory+0x350/0x1700 [ 543.081420][T15648] ? __pfx_out_of_memory+0x10/0x10 [ 543.081461][T15648] mem_cgroup_out_of_memory+0x118/0x130 [ 543.081497][T15648] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 543.081550][T15648] ? do_raw_spin_unlock+0x172/0x230 [ 543.081593][T15648] try_charge_memcg+0x72b/0xd50 [ 543.081630][T15648] ? __pfx_try_charge_memcg+0x10/0x10 [ 543.081660][T15648] ? __print_lock_name+0x41/0xe0 [ 543.081684][T15648] ? rcu_read_unlock+0x17/0x60 [ 543.081723][T15648] charge_memcg+0x8a/0x230 [ 543.081753][T15648] __mem_cgroup_charge+0x2b/0x1e0 [ 543.081788][T15648] shmem_alloc_and_add_folio+0x514/0xc20 [ 543.081824][T15648] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 543.081857][T15648] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 543.081893][T15648] shmem_get_folio_gfp+0x67f/0x1600 [ 543.081930][T15648] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 543.081970][T15648] shmem_write_begin+0x160/0x300 [ 543.082002][T15648] ? __pfx_shmem_write_begin+0x10/0x10 [ 543.082028][T15648] ? timestamp_truncate+0x21e/0x2d0 [ 543.082059][T15648] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 543.082107][T15648] generic_perform_write+0x3c2/0x900 [ 543.082142][T15648] ? __pfx_generic_perform_write+0x10/0x10 [ 543.082171][T15648] ? inode_needs_update_time.part.0+0x191/0x270 [ 543.082211][T15648] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 543.082242][T15648] shmem_file_write_iter+0x10e/0x140 [ 543.082278][T15648] __kernel_write_iter+0x31a/0xb10 [ 543.082310][T15648] ? __pfx___kernel_write_iter+0x10/0x10 [ 543.082338][T15648] ? __up_read+0x1f8/0x750 [ 543.082376][T15648] ? dump_user_range+0x756/0xb70 [ 543.082399][T15648] ? dump_user_range+0x423/0xb70 [ 543.082429][T15648] dump_user_range+0x413/0xb70 [ 543.082462][T15648] ? __pfx_dump_user_range+0x10/0x10 [ 543.082489][T15648] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 543.082534][T15648] ? __pfx_writenote+0x10/0x10 [ 543.082578][T15648] elf_core_dump+0x2929/0x3b60 [ 543.082624][T15648] ? __pfx_elf_core_dump+0x10/0x10 [ 543.082652][T15648] ? rcu_is_watching+0x12/0xc0 [ 543.082678][T15648] ? trace_sched_exit_tp+0xd1/0x120 [ 543.082722][T15648] ? 0xffffffffff600000 [ 543.082757][T15648] ? __pfx___schedule+0x10/0x10 [ 543.082829][T15648] ? vfs_coredump+0x2b94/0x5670 [ 543.082851][T15648] vfs_coredump+0x2b94/0x5670 [ 543.082887][T15648] ? __pfx_vfs_coredump+0x10/0x10 [ 543.082913][T15648] ? __lock_acquire+0x62e/0x1ce0 [ 543.082952][T15648] ? __lock_acquire+0x62e/0x1ce0 [ 543.082987][T15648] ? lock_acquire+0x179/0x350 [ 543.083036][T15648] ? is_bpf_text_address+0x8a/0x1a0 [ 543.083066][T15648] ? bpf_ksym_find+0x124/0x1c0 [ 543.083098][T15648] ? __kernel_text_address+0xd/0x40 [ 543.083120][T15648] ? unwind_get_return_address+0x59/0xa0 [ 543.083147][T15648] ? arch_stack_walk+0xa6/0x100 [ 543.083188][T15648] ? stack_trace_save+0x8e/0xc0 [ 543.083215][T15648] ? __pfx_stack_trace_save+0x10/0x10 [ 543.083244][T15648] ? stack_depot_save_flags+0x29/0x9c0 [ 543.083280][T15648] ? __lock_acquire+0xb97/0x1ce0 [ 543.083384][T15648] ? proc_coredump_connector+0x2d1/0x4f0 [ 543.083414][T15648] ? __pfx_proc_coredump_connector+0x10/0x10 [ 543.083454][T15648] ? rcu_is_watching+0x12/0xc0 [ 543.083483][T15648] get_signal+0x22e3/0x26d0 [ 543.083521][T15648] ? force_sig_fault+0xc4/0x100 [ 543.083557][T15648] ? __pfx_get_signal+0x10/0x10 [ 543.083596][T15648] arch_do_signal_or_restart+0x8f/0x790 [ 543.083626][T15648] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 543.083662][T15648] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 543.083714][T15648] irqentry_exit_to_user_mode+0x12a/0x270 [ 543.083752][T15648] asm_exc_page_fault+0x26/0x30 [ 543.083775][T15648] RIP: 0033:0x7fabd498ebe9 [ 543.083800][T15648] Code: Unable to access opcode bytes at 0x7fabd498ebbf. [ 543.083811][T15648] RSP: 002b:00007fabd5750fe8 EFLAGS: 00010206 [ 543.083831][T15648] RAX: 0000000000000000 RBX: 00007fabd4bc5fa0 RCX: 00007fabd498ebe9 [ 543.083847][T15648] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 543.083861][T15648] RBP: 00007fabd4a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 543.083875][T15648] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 543.083888][T15648] R13: 00007fabd4bc6038 R14: 00007fabd4bc5fa0 R15: 00007ffdcb9ed628 [ 543.083920][T15648] [ 543.546319][T15532] Bluetooth: hci6: command 0x0c1a tx timeout [ 543.572341][T15648] memory: usage 307180kB, limit 307200kB, failcnt 40752 [ 543.580273][T15648] memory+swap: usage 429668kB, limit 9007199254740988kB, failcnt 0 [ 543.588185][T15648] kmem: usage 3312kB, limit 9007199254740988kB, failcnt 0 [ 543.603522][T16086] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2414'. [ 543.607259][T15648] Memory cgroup stats for /syz5: [ 543.612563][T15648] cache 310771712 [ 543.621250][T15648] rss 237568 [ 543.624449][T15648] rss_huge 0 [ 543.627643][T15648] shmem 310771712 [ 543.631425][T15648] mapped_file 62582784 [ 543.635501][T15648] dirty 0 [ 543.638924][T15648] writeback 0 [ 543.643803][T15648] workingset_refault_anon 431 [ 543.648481][T15648] workingset_refault_file 24 [ 543.685483][T15648] swap 125427712 [ 543.695542][T15648] swapcached 16384 [ 543.700023][T15648] pgpgin 175457 [ 543.703510][T15648] pgpgout 103224 [ 543.707064][T15648] pgfault 77644 [ 543.711623][T15648] pgmajfault 32 [ 543.715094][T15648] inactive_anon 253571072 [ 543.719884][T15648] active_anon 57339904 [ 543.723958][T15648] inactive_file 0 [ 543.727590][T15648] active_file 0 [ 543.731577][T15648] unevictable 0 [ 543.735045][T15648] hierarchical_memory_limit 314572800 [ 543.743515][T15648] hierarchical_memsw_limit 9223372036854771712 [ 543.749973][T15648] total_cache 310771712 [ 543.754131][T15648] total_rss 237568 [ 543.757857][T15648] total_rss_huge 0 [ 543.830917][T15648] total_shmem 310771712 [ 543.941940][T15648] total_mapped_file 62582784 [ 543.971660][T15648] total_dirty 0 [ 544.050003][T15648] total_writeback 0 [ 544.053843][T15648] total_workingset_refault_anon 431 [ 544.136707][T15648] total_workingset_refault_file 24 [ 544.296506][T15648] total_swap 125427712 [ 544.383213][T15648] total_swapcached 16384 [ 544.425336][T15648] total_pgpgin 175457 [ 544.429357][T15648] total_pgpgout 103224 [ 544.485249][T15648] total_pgfault 77644 [ 544.495081][T15648] total_pgmajfault 32 [ 544.499083][T15648] total_inactive_anon 253571072 [ 544.503937][T15648] total_active_anon 57339904 [ 544.524785][T15648] total_inactive_file 0 [ 544.528956][T15648] total_active_file 0 [ 544.532935][T15648] total_unevictable 0 [ 544.586901][T15648] anon_cost 18681 [ 544.594707][T15648] file_cost 0 [ 544.598012][T15648] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2335,pid=15648,uid=0 [ 544.672623][T15648] Memory cgroup out of memory: Killed process 15648 (syz.5.2335) total-vm:66064kB, anon-rss:0kB, file-rss:0kB, shmem-rss:60988kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 544.690946][T15532] Bluetooth: hci1: command 0x0c1a tx timeout [ 545.072258][T15532] Bluetooth: hci5: command 0x0c1a tx timeout [ 545.483005][T16105] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 545.629390][T15532] Bluetooth: hci6: command 0x0c1a tx timeout [ 546.201811][T16108] FAULT_INJECTION: forcing a failure. [ 546.201811][T16108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.217380][T16108] CPU: 1 UID: 0 PID: 16108 Comm: syz.6.2420 Not tainted syzkaller #0 PREEMPT(full) [ 546.217411][T16108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 546.217426][T16108] Call Trace: [ 546.217433][T16108] [ 546.217443][T16108] dump_stack_lvl+0x16c/0x1f0 [ 546.217482][T16108] should_fail_ex+0x512/0x640 [ 546.217523][T16108] _copy_from_user+0x2e/0xd0 [ 546.217551][T16108] get_timespec64+0x8b/0x1b0 [ 546.217580][T16108] ? __pfx_get_timespec64+0x10/0x10 [ 546.217612][T16108] ? common_nsleep+0xa1/0xd0 [ 546.217643][T16108] __x64_sys_clock_nanosleep+0x1ce/0x4a0 [ 546.217671][T16108] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 546.217706][T16108] do_syscall_64+0xcd/0x490 [ 546.217743][T16108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.217768][T16108] RIP: 0033:0x7fe0155c14a5 [ 546.217788][T16108] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 546.217812][T16108] RSP: 002b:00007ffeede94a30 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 546.217836][T16108] RAX: ffffffffffffffda RBX: 00007fe0157c5fa0 RCX: 00007fe0155c14a5 [ 546.217853][T16108] RDX: 00007ffeede94a70 RSI: 0000000000000000 RDI: 0000000000000000 [ 546.217867][T16108] RBP: 00007fe0157c7da0 R08: 0000000000000000 R09: 00007fe016470000 [ 546.217883][T16108] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000085cfc [ 546.217898][T16108] R13: 00007fe0157c6180 R14: ffffffffffffffff R15: 00007ffeede94bb0 [ 546.217931][T16108] [ 548.018417][T16129] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2423'. [ 548.047308][T16133] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2424'. [ 548.057500][T16129] bridge_slave_1: left allmulticast mode [ 548.063163][T16129] bridge_slave_1: left promiscuous mode [ 548.137255][T16129] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.240001][T16139] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2425'. [ 548.379530][T16129] bridge_slave_0: left allmulticast mode [ 548.417720][T16129] bridge_slave_0: left promiscuous mode [ 548.431923][T16129] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.707546][T16139] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2425'. [ 549.119967][T16155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2427'. [ 550.325576][T16185] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 551.338065][T16200] random: crng reseeded on system resumption [ 551.344970][T16208] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2435'. [ 551.384140][T16208] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2435'. [ 551.618507][T16214] random: crng reseeded on system resumption [ 551.745640][T15622] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 551.768796][T15622] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 551.780129][T15622] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 551.790489][T15622] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 551.801814][T15622] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 552.418725][T16217] can: request_module (can-proto-3) failed. [ 553.427499][T16219] chnl_net:caif_netlink_parms(): no params data found [ 553.896362][T15532] Bluetooth: hci7: command tx timeout [ 554.085945][T16219] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.095985][T16219] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.103180][T16219] bridge_slave_0: entered allmulticast mode [ 554.135304][T16219] bridge_slave_0: entered promiscuous mode [ 554.195680][T16219] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.213079][T16219] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.221960][T16219] bridge_slave_1: entered allmulticast mode [ 554.241760][T16219] bridge_slave_1: entered promiscuous mode [ 554.286360][T16259] netlink: 'syz.5.2439': attribute type 1 has an invalid length. [ 554.310884][T16259] nbd: error processing sock list [ 554.549457][T16219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.595384][T16219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.889834][T16219] team0: Port device team_slave_0 added [ 555.011682][T16302] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 555.098624][T16219] team0: Port device team_slave_1 added [ 555.331270][T16314] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2447'. [ 555.430700][T16219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.438344][T16219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.477465][T16219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.512730][T16219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.524148][T16219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.595566][T16219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.886645][T16219] hsr_slave_0: entered promiscuous mode [ 555.912715][T16219] hsr_slave_1: entered promiscuous mode [ 555.937208][T16219] debugfs: 'hsr0' already exists in 'hsr' [ 555.968118][T15532] Bluetooth: hci7: command tx timeout [ 555.974730][T16219] Cannot create hsr debugfs directory [ 556.352592][T16326] nbd: must specify at least one socket [ 556.586652][T16219] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 556.607048][T16219] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 556.638820][T16219] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 556.769458][T16219] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 556.966111][T16306] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.152270][T16306] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.276718][T16219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.386586][T16306] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.678225][T16306] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.762218][T16219] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.812496][T15737] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.819612][T15737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.927655][T15512] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.934824][T15512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.034929][T15532] Bluetooth: hci7: command tx timeout [ 558.097615][T15622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 558.110901][T15622] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 558.119837][T15622] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 558.138782][T15622] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 558.148489][T15622] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 558.507783][T16306] bridge_slave_1: left allmulticast mode [ 558.538829][T16306] bridge_slave_1: left promiscuous mode [ 558.753110][T16306] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.792668][T16306] bridge_slave_0: left allmulticast mode [ 558.833367][T16306] bridge_slave_0: left promiscuous mode [ 558.839058][T16306] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.295909][T16386] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 559.854849][T16306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.895340][T16306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.907281][T16306] bond0 (unregistering): Released all slaves [ 560.066477][T16306] tipc: Left network mode [ 560.103847][T15622] Bluetooth: hci7: command tx timeout [ 560.184784][T15622] Bluetooth: hci5: command tx timeout [ 560.627842][T16219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.818831][T16306] hsr_slave_0: left promiscuous mode [ 560.847448][T16306] hsr_slave_1: left promiscuous mode [ 560.864163][T16306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.874378][T16306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.886653][T16306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.895687][T16306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.968359][T16306] veth1_macvtap: left promiscuous mode [ 560.976896][T16306] veth0_macvtap: left promiscuous mode [ 560.988513][T16306] veth1_vlan: left promiscuous mode [ 560.999646][T16306] veth0_vlan: left promiscuous mode [ 561.037503][T16409] Invalid ELF header magic: != ELF [ 561.306551][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.312956][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 561.672761][T16306] team0 (unregistering): Port device team_slave_1 removed [ 561.709134][T16306] team0 (unregistering): Port device team_slave_0 removed [ 562.033837][T16361] chnl_net:caif_netlink_parms(): no params data found [ 562.253487][T15622] Bluetooth: hci5: command tx timeout [ 562.330617][T16361] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.372054][T16361] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.379289][T16361] bridge_slave_0: entered allmulticast mode [ 562.449992][T16361] bridge_slave_0: entered promiscuous mode [ 562.466743][T16433] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2463'. [ 562.475104][T16361] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.506275][T16361] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.516088][T16361] bridge_slave_1: entered allmulticast mode [ 562.531474][T16361] bridge_slave_1: entered promiscuous mode [ 562.617577][T16361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.649085][T16361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.697003][T16361] team0: Port device team_slave_0 added [ 562.705932][T16361] team0: Port device team_slave_1 added [ 562.765593][T16361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.772762][T16361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.800671][T16361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.816418][T16361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.824844][T16361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.851538][T16361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.958028][T16361] hsr_slave_0: entered promiscuous mode [ 562.973811][T16361] hsr_slave_1: entered promiscuous mode [ 562.981795][T16361] debugfs: 'hsr0' already exists in 'hsr' [ 562.987633][T16361] Cannot create hsr debugfs directory [ 563.120824][T16219] veth0_vlan: entered promiscuous mode [ 563.226892][T16219] veth1_vlan: entered promiscuous mode [ 563.531415][T16219] veth0_macvtap: entered promiscuous mode [ 563.582144][T16219] veth1_macvtap: entered promiscuous mode [ 563.592287][T16462] i2c i2c-0: delete_device: Can't parse I2C address [ 563.770673][T16219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.850581][T16219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.872973][T15512] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.885273][T15512] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.948143][T15512] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.960802][T15512] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.321893][T15622] Bluetooth: hci5: command tx timeout [ 564.337692][T16306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.349659][T16306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.372691][T16361] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 564.433020][T16361] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 564.535740][T16361] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 564.568947][T16361] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 564.600566][T15737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.608414][T15737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.631764][T16482] FAULT_INJECTION: forcing a failure. [ 564.631764][T16482] name failslab, interval 1, probability 0, space 0, times 0 [ 564.649221][T16482] CPU: 0 UID: 0 PID: 16482 Comm: syz.1.2468 Not tainted syzkaller #0 PREEMPT(full) [ 564.649255][T16482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 564.649287][T16482] Call Trace: [ 564.649296][T16482] [ 564.649306][T16482] dump_stack_lvl+0x16c/0x1f0 [ 564.649350][T16482] should_fail_ex+0x512/0x640 [ 564.649393][T16482] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 564.649426][T16482] should_failslab+0xc2/0x120 [ 564.649461][T16482] __kmalloc_cache_noprof+0x6a/0x3e0 [ 564.649489][T16482] ? kvm_dev_ioctl+0x13ce/0x1af0 [ 564.649520][T16482] kvm_dev_ioctl+0x13ce/0x1af0 [ 564.649555][T16482] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 564.649592][T16482] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 564.649620][T16482] __x64_sys_ioctl+0x18e/0x210 [ 564.649659][T16482] do_syscall_64+0xcd/0x490 [ 564.649697][T16482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.649721][T16482] RIP: 0033:0x7f6409d8ebe9 [ 564.649741][T16482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.649766][T16482] RSP: 002b:00007f640ab98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 564.649790][T16482] RAX: ffffffffffffffda RBX: 00007f6409fc5fa0 RCX: 00007f6409d8ebe9 [ 564.649807][T16482] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000009 [ 564.649822][T16482] RBP: 00007f6409e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 564.649838][T16482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.649853][T16482] R13: 00007f6409fc6038 R14: 00007f6409fc5fa0 R15: 00007ffdd861a128 [ 564.649887][T16482] [ 565.178537][T16361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.205766][T16361] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.310549][T15823] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.317681][T15823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.331033][T15823] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.338130][T15823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.300970][T16540] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 566.312947][T16361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.396518][T15622] Bluetooth: hci5: command tx timeout [ 566.999623][T16555] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 567.876218][T15776] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.951155][T16361] veth0_vlan: entered promiscuous mode [ 567.978262][T16361] veth1_vlan: entered promiscuous mode [ 568.096754][T16361] veth0_macvtap: entered promiscuous mode [ 568.136400][T16361] veth1_macvtap: entered promiscuous mode [ 568.186743][T16361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.227207][T16361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.269823][T15809] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.300512][T15809] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.355977][T15809] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.418220][T15809] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.095851][T15737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.170972][T15737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.708100][T15737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.752982][T15737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.060981][T16628] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2455'. [ 570.940164][T16639] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 571.519665][T16669] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 571.664899][T16673] sp0: Synchronizing with TNC [ 572.735260][T16713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2495'. [ 573.069047][T16718] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 573.230725][T16728] input: jJΗΈ-Άš9γ%vψ“ϋ¨lΠQ  J86Φ‘ as /devices/virtual/input/input83 [ 573.342509][T16728] FAULT_INJECTION: forcing a failure. [ 573.342509][T16728] name fail_futex, interval 1, probability 0, space 0, times 0 [ 573.404269][T16728] CPU: 0 UID: 0 PID: 16728 Comm: syz.5.2499 Not tainted syzkaller #0 PREEMPT(full) [ 573.404304][T16728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 573.404317][T16728] Call Trace: [ 573.404322][T16728] [ 573.404328][T16728] dump_stack_lvl+0x16c/0x1f0 [ 573.404355][T16728] should_fail_ex+0x512/0x640 [ 573.404381][T16728] get_futex_key+0x1d0/0x1560 [ 573.404401][T16728] ? __pfx_get_futex_key+0x10/0x10 [ 573.404420][T16728] ? __pfx___schedule+0x10/0x10 [ 573.404447][T16728] ? kvm_sched_clock_read+0x11/0x20 [ 573.404488][T16728] futex_wake+0xea/0x530 [ 573.404524][T16728] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 573.404555][T16728] ? __pfx_futex_wake+0x10/0x10 [ 573.404594][T16728] ? preempt_schedule_thunk+0x16/0x30 [ 573.404631][T16728] do_futex+0x1e3/0x350 [ 573.404661][T16728] ? __pfx_do_futex+0x10/0x10 [ 573.404692][T16728] ? __pfx_sched_core_share_pid+0x10/0x10 [ 573.404725][T16728] __x64_sys_futex+0x1e0/0x4c0 [ 573.404758][T16728] ? __pfx___x64_sys_futex+0x10/0x10 [ 573.404790][T16728] ? __pfx___do_sys_prctl+0x10/0x10 [ 573.404851][T16728] do_syscall_64+0xcd/0x490 [ 573.404889][T16728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.404912][T16728] RIP: 0033:0x7fabd498ebe9 [ 573.404931][T16728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.404956][T16728] RSP: 002b:00007fabd57300e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 573.404980][T16728] RAX: ffffffffffffffda RBX: 00007fabd4bc6098 RCX: 00007fabd498ebe9 [ 573.404996][T16728] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fabd4bc609c [ 573.405010][T16728] RBP: 00007fabd4bc6090 R08: 00007fabd5752000 R09: 0000000000000000 [ 573.405027][T16728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 573.405042][T16728] R13: 00007fabd4bc6128 R14: 00007ffdcb9ed540 R15: 00007ffdcb9ed628 [ 573.405074][T16728] [ 574.207447][T16758] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 575.040115][T16762] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 575.913518][T16755] kexec: Could not allocate control_code_buffer [ 576.196454][T16782] netlink: 146 bytes leftover after parsing attributes in process `syz.8.2509'. [ 578.250920][T16812] random: crng reseeded on system resumption [ 580.096027][T16799] kexec: Could not allocate control_code_buffer [ 580.184293][T16837] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 581.212212][T16881] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input84 [ 582.172511][T16889] netlink: 25520 bytes leftover after parsing attributes in process `syz.5.2531'. [ 582.200410][T16889] netlink: zone id is out of range [ 582.205667][T16889] netlink: zone id is out of range [ 582.222245][T16889] netlink: zone id is out of range [ 582.253391][T16889] netlink: zone id is out of range [ 582.265975][T16889] netlink: zone id is out of range [ 582.278335][T16889] netlink: zone id is out of range [ 582.291944][T16889] netlink: zone id is out of range [ 582.307322][T16889] netlink: zone id is out of range [ 582.324797][T16889] netlink: zone id is out of range [ 582.349157][T16882] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input85 [ 582.399723][T16889] netlink: zone id is out of range [ 582.797924][T16887] kexec: Could not allocate control_code_buffer [ 583.052831][T16921] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 584.074555][T16925] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 585.190097][T15532] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 585.198814][T15532] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 585.208709][T15532] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 585.219284][T15532] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 585.227474][T15532] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 585.889350][T16964] chnl_net:caif_netlink_parms(): no params data found [ 586.134797][T16964] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.143275][T16964] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.154150][T16964] bridge_slave_0: entered allmulticast mode [ 586.164231][T16964] bridge_slave_0: entered promiscuous mode [ 586.268058][T16964] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.275749][T16964] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.283216][T16964] bridge_slave_1: entered allmulticast mode [ 586.310238][T16964] bridge_slave_1: entered promiscuous mode [ 586.346941][T16964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.361112][T16964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.395649][T16964] team0: Port device team_slave_0 added [ 586.405796][T16964] team0: Port device team_slave_1 added [ 586.439621][T16964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.447583][T16964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.474607][T16964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.489090][T16964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.496251][T16964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.523247][T16964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.632799][T16964] hsr_slave_0: entered promiscuous mode [ 586.649824][T16964] hsr_slave_1: entered promiscuous mode [ 586.656419][T16964] debugfs: 'hsr0' already exists in 'hsr' [ 586.663160][T16964] Cannot create hsr debugfs directory [ 586.914813][T16999] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 587.248288][T15532] Bluetooth: hci8: command tx timeout [ 587.582126][T16964] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.693185][T16964] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.798746][T16964] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.949062][T16964] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.238138][T16964] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 588.278626][T16964] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 588.304700][T16964] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 588.321409][T16964] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 588.579389][T16964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.585826][T17013] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input86 [ 588.684089][T16964] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.771796][T15512] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.778917][T15512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.788173][T17026] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input87 [ 588.819800][T15512] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.827014][T15512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.315296][T15532] Bluetooth: hci8: command tx timeout [ 589.642496][T16964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.723978][T16964] veth0_vlan: entered promiscuous mode [ 589.751749][T16964] veth1_vlan: entered promiscuous mode [ 589.831645][T16964] veth0_macvtap: entered promiscuous mode [ 589.855151][T16964] veth1_macvtap: entered promiscuous mode [ 589.931822][T16964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.952003][T16964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.974628][T15822] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.984680][T15822] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.017813][T15822] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.079531][T15822] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.217137][T15512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.225525][T15512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.269969][T15822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.279201][T15822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.585266][T17054] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 591.020980][T17058] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 591.381163][T15532] Bluetooth: hci8: command tx timeout [ 591.442879][T15622] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 591.453944][T15622] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 591.463906][T15622] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 591.478475][T15622] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 591.491893][T15622] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 591.641224][T17082] aoe: could not set interface list: too many interfaces [ 591.931832][T17095] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2568'. [ 592.240635][T17102] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input88 [ 592.312028][T17077] chnl_net:caif_netlink_parms(): no params data found [ 592.451651][T17103] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input89 [ 592.518044][T17077] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.532485][T17077] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.560489][T17077] bridge_slave_0: entered allmulticast mode [ 592.577523][T17077] bridge_slave_0: entered promiscuous mode [ 592.589258][T17077] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.596849][T17077] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.604130][T17077] bridge_slave_1: entered allmulticast mode [ 592.612185][T17077] bridge_slave_1: entered promiscuous mode [ 592.706209][T17077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.720986][T17077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.840406][T17077] team0: Port device team_slave_0 added [ 592.860875][T17077] team0: Port device team_slave_1 added [ 592.953362][T17077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.960440][T17077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.006866][T17077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.082339][T17077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.089770][T17077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.134939][T17077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.358372][T17077] hsr_slave_0: entered promiscuous mode [ 593.372220][T17077] hsr_slave_1: entered promiscuous mode [ 593.378601][T17077] debugfs: 'hsr0' already exists in 'hsr' [ 593.386215][T17077] Cannot create hsr debugfs directory [ 593.450337][T15622] Bluetooth: hci8: command tx timeout [ 593.540179][T15622] Bluetooth: hci9: command tx timeout [ 593.723774][T17127] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 594.683024][T17077] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 594.706831][T17077] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 594.756456][T17077] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 594.797854][T17077] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 595.026324][T17140] serio: Serial port pty6 [ 595.171378][T17077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.282390][T17077] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.327379][T15512] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.334601][T15512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.345892][T15512] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.353022][T15512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.599607][T15622] Bluetooth: hci9: command tx timeout [ 595.742552][T17148] synth uevent: /devices/virtual/tty/ptyc1: unknown uevent action string [ 595.773375][T17148] tty ptyc1: uevent: failed to send synthetic uevent: -22 [ 596.194455][T17077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.320257][T17077] veth0_vlan: entered promiscuous mode [ 597.329070][T17186] MTRR 1 not used [ 597.379897][T17077] veth1_vlan: entered promiscuous mode [ 597.593884][T17077] veth0_macvtap: entered promiscuous mode [ 597.653193][T17077] veth1_macvtap: entered promiscuous mode [ 597.668477][T15622] Bluetooth: hci9: command tx timeout [ 597.726107][T17077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.759961][T17077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.904344][T16306] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.962352][T16306] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.996122][T16306] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.014877][T16306] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.170992][T15823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.192706][T15823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.321672][T16306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 598.335481][T16306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.887278][T17211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2589'. [ 598.961542][T17214] HfR: entered promiscuous mode [ 598.969708][T17214] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2592'. [ 599.013903][T17212] FAULT_INJECTION: forcing a failure. [ 599.013903][T17212] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 599.102376][T17212] CPU: 0 UID: 0 PID: 17212 Comm: syz.5.2591 Not tainted syzkaller #0 PREEMPT(full) [ 599.102412][T17212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 599.102428][T17212] Call Trace: [ 599.102437][T17212] [ 599.102448][T17212] dump_stack_lvl+0x16c/0x1f0 [ 599.102491][T17212] should_fail_ex+0x512/0x640 [ 599.102535][T17212] should_fail_alloc_page+0xe7/0x130 [ 599.102573][T17212] prepare_alloc_pages+0x3c2/0x610 [ 599.102618][T17212] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 599.102649][T17212] ? stack_trace_save+0x8e/0xc0 [ 599.102678][T17212] ? __pfx_stack_trace_save+0x10/0x10 [ 599.102706][T17212] ? rcu_is_watching+0x12/0xc0 [ 599.102733][T17212] ? stack_depot_save_flags+0x29/0x9c0 [ 599.102779][T17212] ? kasan_save_stack+0x42/0x60 [ 599.102806][T17212] ? kasan_save_stack+0x33/0x60 [ 599.102832][T17212] ? kasan_save_track+0x14/0x30 [ 599.102861][T17212] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 599.102890][T17212] ? walk_pgd_range+0x88b/0x1f50 [ 599.102919][T17212] ? walk_page_range_mm+0x461/0xb40 [ 599.102949][T17212] ? madvise_walk_vmas+0x31f/0x9c0 [ 599.102982][T17212] ? madvise_do_behavior+0x1e2/0x530 [ 599.103014][T17212] ? do_madvise+0x176/0x240 [ 599.103046][T17212] ? __x64_sys_madvise+0xa9/0x110 [ 599.103079][T17212] ? do_syscall_64+0xcd/0x490 [ 599.103113][T17212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.103155][T17212] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 599.103194][T17212] ? policy_nodemask+0xea/0x4e0 [ 599.103230][T17212] alloc_pages_mpol+0x1fb/0x550 [ 599.103272][T17212] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 599.103318][T17212] alloc_pages_noprof+0x131/0x390 [ 599.103354][T17212] pte_alloc_one+0x1c/0x3a0 [ 599.103383][T17212] __pte_alloc+0x6d/0x3c0 [ 599.103416][T17212] ? __pfx___pte_alloc+0x10/0x10 [ 599.103450][T17212] ? _raw_spin_unlock+0x28/0x50 [ 599.103482][T17212] ? __pmd_alloc+0x3fb/0x930 [ 599.103522][T17212] walk_pgd_range+0xb84/0x1f50 [ 599.103557][T17212] ? __pfx_guard_install_set_pte+0x10/0x10 [ 599.103590][T17212] ? __pfx_guard_install_pte_entry+0x10/0x10 [ 599.103626][T17212] ? __pfx_guard_install_set_pte+0x10/0x10 [ 599.103665][T17212] ? __pfx_guard_install_set_pte+0x10/0x10 [ 599.103699][T17212] ? __pfx_guard_install_set_pte+0x10/0x10 [ 599.103734][T17212] ? __pfx_walk_pgd_range+0x10/0x10 [ 599.103775][T17212] __walk_page_range+0x163/0x820 [ 599.103810][T17212] ? find_vma+0xbf/0x140 [ 599.103840][T17212] ? __pfx_find_vma+0x10/0x10 [ 599.103873][T17212] ? walk_page_test+0x9b/0x180 [ 599.103905][T17212] walk_page_range_mm+0x461/0xb40 [ 599.103942][T17212] ? __pfx_walk_page_range_mm+0x10/0x10 [ 599.103984][T17212] ? __anon_vma_prepare+0x2e2/0x5e0 [ 599.104016][T17212] madvise_vma_behavior+0xa62/0x2d60 [ 599.104057][T17212] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 599.104094][T17212] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 599.104134][T17212] ? __pfx_mas_prev+0x10/0x10 [ 599.104179][T17212] ? find_vma_prev+0xda/0x160 [ 599.104212][T17212] ? find_held_lock+0x2b/0x80 [ 599.104243][T17212] ? __pfx_find_vma_prev+0x10/0x10 [ 599.104278][T17212] ? futex_unqueue+0x133/0x2c0 [ 599.104319][T17212] ? __futex_wait+0x24c/0x2f0 [ 599.104362][T17212] madvise_walk_vmas+0x31f/0x9c0 [ 599.104403][T17212] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 599.104450][T17212] madvise_do_behavior+0x1e2/0x530 [ 599.104484][T17212] ? futex_private_hash_put+0x18a/0x300 [ 599.104517][T17212] ? __pfx_madvise_do_behavior+0x10/0x10 [ 599.104554][T17212] ? down_read+0x13d/0x480 [ 599.104597][T17212] do_madvise+0x176/0x240 [ 599.104630][T17212] ? __pfx_do_madvise+0x10/0x10 [ 599.104664][T17212] ? do_futex+0x122/0x350 [ 599.104720][T17212] ? xfd_validate_state+0x61/0x180 [ 599.104754][T17212] ? __pfx_ksys_write+0x10/0x10 [ 599.104791][T17212] __x64_sys_madvise+0xa9/0x110 [ 599.104826][T17212] ? lockdep_hardirqs_on+0x7c/0x110 [ 599.104861][T17212] do_syscall_64+0xcd/0x490 [ 599.104901][T17212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.104928][T17212] RIP: 0033:0x7fabd498ebe9 [ 599.104951][T17212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.104977][T17212] RSP: 002b:00007fabd5751038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 599.105002][T17212] RAX: ffffffffffffffda RBX: 00007fabd4bc5fa0 RCX: 00007fabd498ebe9 [ 599.105019][T17212] RDX: 0000000000000066 RSI: 0000000002021000 RDI: 0000000000000000 [ 599.105035][T17212] RBP: 00007fabd4a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 599.105051][T17212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.105067][T17212] R13: 00007fabd4bc6038 R14: 00007fabd4bc5fa0 R15: 00007ffdcb9ed628 [ 599.105103][T17212] [ 599.738327][T15622] Bluetooth: hci9: command tx timeout [ 600.027228][T17225] FAULT_INJECTION: forcing a failure. [ 600.027228][T17225] name failslab, interval 1, probability 0, space 0, times 0 [ 600.040011][T17225] CPU: 0 UID: 0 PID: 17225 Comm: syz.5.2591 Not tainted syzkaller #0 PREEMPT(full) [ 600.040045][T17225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 600.040060][T17225] Call Trace: [ 600.040068][T17225] [ 600.040078][T17225] dump_stack_lvl+0x16c/0x1f0 [ 600.040119][T17225] should_fail_ex+0x512/0x640 [ 600.040154][T17225] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 600.040189][T17225] should_failslab+0xc2/0x120 [ 600.040222][T17225] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 600.040254][T17225] ? inode_set_ctime_current+0x2a1/0x8f0 [ 600.040287][T17225] ? __d_alloc+0x32/0xae0 [ 600.040319][T17225] __d_alloc+0x32/0xae0 [ 600.040355][T17225] d_alloc_pseudo+0x1c/0xc0 [ 600.040391][T17225] alloc_file_pseudo+0xcf/0x230 [ 600.040430][T17225] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 600.040467][T17225] ? hugetlbfs_get_inode+0x31f/0x730 [ 600.040500][T17225] hugetlb_file_setup+0x4ce/0x620 [ 600.040530][T17225] ksys_mmap_pgoff+0x189/0x5c0 [ 600.040570][T17225] __x64_sys_mmap+0x125/0x190 [ 600.040611][T17225] do_syscall_64+0xcd/0x490 [ 600.040650][T17225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.040676][T17225] RIP: 0033:0x7fabd498ebe9 [ 600.040695][T17225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.040718][T17225] RSP: 002b:00007fabd27d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 600.040742][T17225] RAX: ffffffffffffffda RBX: 00007fabd4bc6270 RCX: 00007fabd498ebe9 [ 600.040759][T17225] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 600.040774][T17225] RBP: 00007fabd4a11e19 R08: 0000000000000004 R09: 0000300000000000 [ 600.040788][T17225] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 600.040802][T17225] R13: 00007fabd4bc6308 R14: 00007fabd4bc6270 R15: 00007ffdcb9ed628 [ 600.040834][T17225] [ 600.044335][ T30] audit: type=1800 audit(2147483768.991:11): pid=17225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2591" name="features" dev="configfs" ino=61947 res=0 errno=0 [ 600.048147][T17224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2594'. [ 602.104590][T17273] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 602.222204][T17288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2606'. [ 602.595322][T17295] net_ratelimit: 64 callbacks suppressed [ 602.595343][T17295] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4. [ 605.054304][T17358] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 605.133487][T15532] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 605.151020][T15532] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 605.159703][T15532] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 605.191003][T15532] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 605.200783][T15532] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 605.835168][T17371] ptrace attach of "./syz-executor exec"[17374] was attempted by "./syz-executor exec"[17371] [ 605.844235][T17373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2621'. [ 606.327773][T17359] chnl_net:caif_netlink_parms(): no params data found [ 606.601107][T17359] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.634197][T17359] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.641461][T17359] bridge_slave_0: entered allmulticast mode [ 606.696244][T17359] bridge_slave_0: entered promiscuous mode [ 606.734450][T17359] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.780964][T17359] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.788436][T17359] bridge_slave_1: entered allmulticast mode [ 606.804066][T17359] bridge_slave_1: entered promiscuous mode [ 606.892781][T17359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.919519][T17359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.947202][T15532] Bluetooth: hci8: unexpected subevent 0x01 length: 123 > 18 [ 607.104009][T17359] team0: Port device team_slave_0 added [ 607.189262][T17359] team0: Port device team_slave_1 added [ 607.218986][T15532] Bluetooth: hci10: command tx timeout [ 607.350005][T17359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.362055][T17359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.405002][T17359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.429865][T17359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.437174][T17359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.464812][T17359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.525190][T17359] hsr_slave_0: entered promiscuous mode [ 607.539237][T17359] hsr_slave_1: entered promiscuous mode [ 607.550098][T17359] debugfs: 'hsr0' already exists in 'hsr' [ 607.555996][T17359] Cannot create hsr debugfs directory [ 608.677834][T17453] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2630'. [ 608.809523][T17459] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 609.227071][T17359] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 609.262286][T17359] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 609.288665][T15532] Bluetooth: hci10: command tx timeout [ 609.308694][T17359] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 609.354756][T17359] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 609.869727][T17493] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input91 [ 609.942595][T17359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.081172][T17359] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.090519][T17496] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input92 [ 610.287388][T15817] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.294537][T15817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.314511][T17499] random: crng reseeded on system resumption [ 610.351234][T15817] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.358340][T15817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.701480][T17493] HfR: entered promiscuous mode [ 611.239431][T17359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.357873][T15532] Bluetooth: hci10: command tx timeout [ 611.365929][T17359] veth0_vlan: entered promiscuous mode [ 611.420065][T17359] veth1_vlan: entered promiscuous mode [ 611.554583][T17359] veth0_macvtap: entered promiscuous mode [ 611.600043][T17359] veth1_macvtap: entered promiscuous mode [ 611.675287][T17359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.744035][T17359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.806350][T15822] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.844868][T15822] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.853605][T15822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.886230][T15822] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.089337][T15823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.117133][T15823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.316060][T15512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.325512][T15512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.453671][T17535] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 613.426917][T15532] Bluetooth: hci10: command tx timeout [ 613.930038][T17587] zswap: compressor not available [ 614.752017][T17595] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 615.705428][T17634] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 617.106964][T17669] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 617.884251][T15622] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 617.894631][T15622] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 617.903001][T15622] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 617.917753][T15622] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 617.937620][T15622] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 619.511760][T17696] chnl_net:caif_netlink_parms(): no params data found [ 619.518932][T17725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2660'. [ 620.033543][T15622] Bluetooth: hci11: command tx timeout [ 620.211804][T17696] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.270044][T17696] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.314865][T17696] bridge_slave_0: entered allmulticast mode [ 620.358744][T17696] bridge_slave_0: entered promiscuous mode [ 620.425169][T17696] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.483039][T17696] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.499960][T17696] bridge_slave_1: entered allmulticast mode [ 620.556653][T17696] bridge_slave_1: entered promiscuous mode [ 620.797029][T17762] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 620.854484][T17696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.924629][T17696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.466148][T17696] team0: Port device team_slave_0 added [ 621.511158][T17696] team0: Port device team_slave_1 added [ 621.640838][T17696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.648242][T17696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.675339][T17696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.712393][T17696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.737648][T17696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.766179][T17696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.974754][T17696] hsr_slave_0: entered promiscuous mode [ 622.015056][T17696] hsr_slave_1: entered promiscuous mode [ 622.042018][T17783] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input93 [ 622.064846][T17696] debugfs: 'hsr0' already exists in 'hsr' [ 622.070632][T17696] Cannot create hsr debugfs directory [ 622.101407][T15622] Bluetooth: hci11: command tx timeout [ 622.433608][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.440464][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 622.870760][T17790] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input94 [ 623.289453][T17807] FAULT_INJECTION: forcing a failure. [ 623.289453][T17807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 623.336260][T17807] CPU: 0 UID: 0 PID: 17807 Comm: syz.1.2669 Not tainted syzkaller #0 PREEMPT(full) [ 623.336284][T17807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 623.336293][T17807] Call Trace: [ 623.336299][T17807] [ 623.336305][T17807] dump_stack_lvl+0x16c/0x1f0 [ 623.336332][T17807] should_fail_ex+0x512/0x640 [ 623.336357][T17807] _copy_from_user+0x2e/0xd0 [ 623.336374][T17807] ____sys_sendmsg+0x607/0xc70 [ 623.336392][T17807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 623.336411][T17807] ? find_held_lock+0x2b/0x80 [ 623.336426][T17807] ? futex_unqueue+0x133/0x2c0 [ 623.336446][T17807] ___sys_sendmsg+0x134/0x1d0 [ 623.336468][T17807] ? __pfx____sys_sendmsg+0x10/0x10 [ 623.336499][T17807] ? find_held_lock+0x2b/0x80 [ 623.336524][T17807] __sys_sendmmsg+0x200/0x420 [ 623.336548][T17807] ? __pfx___sys_sendmmsg+0x10/0x10 [ 623.336574][T17807] ? __pfx_do_futex+0x10/0x10 [ 623.336606][T17807] ? xfd_validate_state+0x61/0x180 [ 623.336631][T17807] __x64_sys_sendmmsg+0x9c/0x100 [ 623.336652][T17807] ? lockdep_hardirqs_on+0x7c/0x110 [ 623.336672][T17807] do_syscall_64+0xcd/0x490 [ 623.336695][T17807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.336710][T17807] RIP: 0033:0x7f857658ebe9 [ 623.336721][T17807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.336735][T17807] RSP: 002b:00007f8577328038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 623.336749][T17807] RAX: ffffffffffffffda RBX: 00007f85767c5fa0 RCX: 00007f857658ebe9 [ 623.336758][T17807] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000006 [ 623.336766][T17807] RBP: 00007f8576611e19 R08: 0000000000000000 R09: 0000000000000000 [ 623.336775][T17807] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 623.336782][T17807] R13: 00007f85767c6038 R14: 00007f85767c5fa0 R15: 00007ffd04e67368 [ 623.336800][T17807] [ 623.532970][ C0] vkms_vblank_simulate: vblank timer overrun [ 623.763747][T17696] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.880614][T17696] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.981216][T17696] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.109078][T17696] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.171024][T15622] Bluetooth: hci11: command tx timeout [ 624.358699][T17696] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 624.421054][T17696] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 624.458614][T17696] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 624.485111][T17824] ptrace attach of "./syz-executor exec"[17825] was attempted by "./syz-executor exec"[17824] [ 624.496654][T17696] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 624.829903][T17696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.872548][T17696] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.048513][T15512] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.055623][T15512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.152948][T16305] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.160145][T16305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.500248][T17696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.554770][T17696] veth0_vlan: entered promiscuous mode [ 625.592039][T17696] veth1_vlan: entered promiscuous mode [ 625.653956][T17696] veth0_macvtap: entered promiscuous mode [ 625.667628][T17696] veth1_macvtap: entered promiscuous mode [ 625.712690][T17696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.747194][T17696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.761535][T15508] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.775523][T15508] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.787189][T15508] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.797144][T15508] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.923568][T16305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.932679][T16305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.964266][T15512] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.976458][T15512] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.126613][T17858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2674'. [ 626.244940][T15622] Bluetooth: hci11: command tx timeout [ 627.049867][T17868] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2686'. [ 627.073667][T17868] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2686'. [ 627.103779][T17872] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input95 [ 627.603936][T17875] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input96 [ 627.621009][T17884] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 628.707722][T15512] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 9 with max blocks 5 with error 117 [ 628.741262][T15512] EXT4-fs (sda1): This should not happen!! Data will be lost [ 628.741262][T15512] [ 629.273041][T17900] snd_aloop snd_aloop.0: control 7:257:7:ͺΈθ:0 is already present [ 629.346944][T17880] kexec: Could not allocate control_code_buffer [ 629.434221][ T31] INFO: task syz.2.2219:15001 blocked for more than 143 seconds. [ 629.441957][ T31] Not tainted syzkaller #0 [ 629.459515][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 629.476130][ T31] task:syz.2.2219 state:D stack:27688 pid:15001 tgid:14999 ppid:13772 task_flags:0x400140 flags:0x00004004 [ 629.502733][ T31] Call Trace: [ 629.506192][ T31] [ 629.509134][ T31] __schedule+0x1190/0x5de0 [ 629.546844][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 629.577773][ T31] ? __pfx___schedule+0x10/0x10 [ 629.596370][ T31] ? find_held_lock+0x2b/0x80 [ 629.601081][ T31] ? schedule+0x2d7/0x3a0 [ 629.605561][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 629.611344][ T31] schedule+0xe7/0x3a0 [ 629.615535][ T31] schedule_preempt_disabled+0x13/0x30 [ 629.624872][ T31] __mutex_lock+0x81b/0x1060 [ 629.639645][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 629.644656][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 629.651713][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 629.657364][ T31] ? net_generic+0xea/0x2a0 [ 629.675762][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 629.681581][ T31] nfsd_nl_threads_set_doit+0x687/0xbc0 [ 629.687264][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 629.692954][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 629.699039][ T31] ? rcu_is_watching+0x12/0xc0 [ 629.704376][ T31] ? bpf_lsm_capable+0x9/0x10 [ 629.709046][ T31] ? security_capable+0x7e/0x260 [ 629.714068][ T31] genl_rcv_msg+0x55c/0x800 [ 629.718667][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 629.728935][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 629.735120][ T31] netlink_rcv_skb+0x158/0x420 [ 629.739990][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 629.750741][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 629.756943][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 629.766424][ T31] genl_rcv+0x28/0x40 [ 629.774696][ T31] netlink_unicast+0x5a7/0x870 [ 629.779468][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 629.791453][ T31] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 629.797529][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 629.802731][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 629.807495][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.815054][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 629.821452][ T31] ____sys_sendmsg+0xa95/0xc70 [ 629.838198][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 629.848296][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 629.857940][ T31] ___sys_sendmsg+0x134/0x1d0 [ 629.862940][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 629.871376][ T31] __sys_sendmsg+0x16d/0x220 [ 629.876067][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 629.884755][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 629.893528][ T31] do_syscall_64+0xcd/0x490 [ 629.898037][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.911496][ T31] RIP: 0033:0x7f3e0e18ebe9 [ 629.921402][ T31] RSP: 002b:00007f3e0c3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 629.942220][ T31] RAX: ffffffffffffffda RBX: 00007f3e0e3c5fa0 RCX: 00007f3e0e18ebe9 [ 629.950213][ T31] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003 [ 630.004551][ T31] RBP: 00007f3e0e211e19 R08: 0000000000000000 R09: 0000000000000000 [ 630.020398][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.079810][ T31] R13: 00007f3e0e3c6038 R14: 00007f3e0e3c5fa0 R15: 00007ffeaed9b4a8 [ 630.098216][ T31] [ 630.118074][ T31] [ 630.118074][ T31] Showing all locks held in the system: [ 630.158723][ T31] 1 lock held by khungtaskd/31: [ 630.179311][ T31] #0: ffffffff8e5c10e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 630.196657][ T31] 1 lock held by khugepaged/38: [ 630.213903][ T31] #0: ffff8880b843a458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 630.234081][ T31] 2 locks held by getty/5630: [ 630.238755][ T31] #0: ffff88814dc9c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 630.249062][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 630.265334][ T31] 2 locks held by syz.3.2084/14195: [ 630.270577][ T31] #0: ffffffff9042b6d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 630.279508][ T31] #1: ffffffff8e9d97c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 630.289663][ T31] 2 locks held by syz.1.2092/14297: [ 630.299438][ T31] #0: ffff88807adf40e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 630.310112][ T31] #1: ffffffff8e9d97c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 630.322903][ T31] 2 locks held by syz.2.2219/15001: [ 630.328093][ T31] #0: ffffffff9042b6d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 630.348443][ T31] #1: ffffffff8e9d97c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 630.358515][ T31] 3 locks held by syz.4.2266/15269: [ 630.364589][ T31] #0: ffffffff9042b6d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 630.380225][ T31] #1: ffff88803346e6d8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990 [ 630.390815][ T31] #2: ffffffff8e9d97c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xb6/0x1170 [ 630.401342][ T31] 2 locks held by syz-executor/15619: [ 630.407148][ T31] #0: ffff8880580960e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 630.417535][ T31] #1: ffffffff8e9d97c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 630.427339][ T31] 2 locks held by syz-executor/16219: [ 630.432971][ T31] #0: ffff8880401b40e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 630.443980][ T31] #1: ffffffff8e9d97c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 630.453732][ T31] 4 locks held by kworker/u10:22/16305: [ 630.459337][ T31] #0: ffff88801c6fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 630.470429][ T31] #1: ffffc90025477d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 630.480479][ T31] #2: ffffffff90371f10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 630.489875][ T31] #3: ffffffff8e5cc540 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 630.499882][ T31] 2 locks held by syz-executor/16361: [ 630.505258][ T31] #0: ffff8880291c80e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 630.515593][ T31] #1: ffffffff8e9d97c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 630.525228][ T31] 2 locks held by syz.9.2601/17259: [ 630.530452][ T31] #0: ffffffff9042b6d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 630.538843][ T31] #1: ffffffff8e9d97c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 630.549135][ T31] 2 locks held by syz-executor/17359: [ 630.554508][ T31] #0: ffff8880701e60e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 630.565429][ T31] #1: ffffffff8e9d97c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 630.575275][ T31] 2 locks held by syz.3.2682/17899: [ 630.580694][ T31] #0: ffffffff90371f10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 630.590152][ T31] #1: ffffffff8e5cc678 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 630.600477][ T31] [ 630.641205][ T31] ============================================= [ 630.641205][ T31] [ 630.710908][ T31] NMI backtrace for cpu 1 [ 630.710923][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 630.710940][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 630.710949][ T31] Call Trace: [ 630.710954][ T31] [ 630.710960][ T31] dump_stack_lvl+0x116/0x1f0 [ 630.710985][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 630.711000][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 630.711020][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 630.711042][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 630.711060][ T31] watchdog+0xf0e/0x1260 [ 630.711083][ T31] ? __pfx_watchdog+0x10/0x10 [ 630.711102][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 630.711123][ T31] ? __kthread_parkme+0x19e/0x250 [ 630.711142][ T31] ? __pfx_watchdog+0x10/0x10 [ 630.711161][ T31] kthread+0x3c5/0x780 [ 630.711181][ T31] ? __pfx_kthread+0x10/0x10 [ 630.711202][ T31] ? rcu_is_watching+0x12/0xc0 [ 630.711216][ T31] ? __pfx_kthread+0x10/0x10 [ 630.711236][ T31] ret_from_fork+0x5d7/0x6f0 [ 630.711257][ T31] ? __pfx_kthread+0x10/0x10 [ 630.711277][ T31] ret_from_fork_asm+0x1a/0x30 [ 630.711302][ T31] [ 630.711307][ T31] Sending NMI from CPU 1 to CPUs 0: [ 630.833650][ C0] NMI backtrace for cpu 0 [ 630.833667][ C0] CPU: 0 UID: 0 PID: 17891 Comm: syz.5.2676 Not tainted syzkaller #0 PREEMPT(full) [ 630.833693][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 630.833705][ C0] RIP: 0010:mark_lock+0x5d/0x610 [ 630.833735][ C0] Code: 89 d3 83 fa 08 74 6d 41 bd 01 00 00 00 89 d9 41 d3 e5 4d 63 ed 41 0f b7 44 24 20 66 25 ff 1f 0f b7 c0 48 0f a3 05 93 c0 45 14 <0f> 83 86 00 00 00 48 8d 04 80 48 8d 04 80 48 8d 04 c5 60 f9 dc 95 [ 630.833756][ C0] RSP: 0018:ffffc9001544f4f0 EFLAGS: 00000003 [ 630.833773][ C0] RAX: 0000000000000007 RBX: 0000000000000009 RCX: 0000000000000000 [ 630.833787][ C0] RDX: 0000000000000008 RSI: ffff88806d980af0 RDI: ffff88806d980000 [ 630.833800][ C0] RBP: ffffc9001544f590 R08: 0000000000000000 R09: 0000000000000000 [ 630.833813][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88806d980af0 [ 630.833827][ C0] R13: 0000000000000200 R14: 0000000000000000 R15: ffff88806d980000 [ 630.833840][ C0] FS: 0000000000000000(0000) GS:ffff8881246bd000(0000) knlGS:0000000000000000 [ 630.833860][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 630.833874][ C0] CR2: 000056093de63000 CR3: 000000000e380000 CR4: 00000000003526f0 [ 630.833888][ C0] Call Trace: [ 630.833895][ C0] [ 630.833905][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 630.833934][ C0] __lock_acquire+0x3f8/0x1ce0 [ 630.833965][ C0] lock_acquire+0x179/0x350 [ 630.833989][ C0] ? is_module_text_address+0x1f/0x220 [ 630.834020][ C0] ? unwind_next_frame+0x3f4/0x20a0 [ 630.834042][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 630.834067][ C0] is_module_text_address+0x33/0x220 [ 630.834094][ C0] ? is_module_text_address+0x1f/0x220 [ 630.834128][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 630.834151][ C0] kernel_text_address+0x81/0x100 [ 630.834171][ C0] __kernel_text_address+0xd/0x40 [ 630.834189][ C0] unwind_get_return_address+0x59/0xa0 [ 630.834211][ C0] arch_stack_walk+0xa6/0x100 [ 630.834238][ C0] stack_trace_save+0x8e/0xc0 [ 630.834260][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 630.834283][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 630.834310][ C0] save_stack+0x160/0x1f0 [ 630.834331][ C0] ? __pfx_save_stack+0x10/0x10 [ 630.834351][ C0] ? __free_frozen_pages+0x7d5/0x10f0 [ 630.834371][ C0] ? vfree+0x1fd/0xb50 [ 630.834398][ C0] ? kcov_close+0x34/0x60 [ 630.834424][ C0] ? __fput+0x402/0xb70 [ 630.834449][ C0] ? task_work_run+0x14d/0x240 [ 630.834477][ C0] ? do_exit+0x86f/0x2bf0 [ 630.834503][ C0] ? do_group_exit+0xd3/0x2a0 [ 630.834529][ C0] ? get_signal+0x2673/0x26d0 [ 630.834550][ C0] ? arch_do_signal_or_restart+0x8f/0x790 [ 630.834575][ C0] ? irqentry_exit_to_user_mode+0x12a/0x270 [ 630.834606][ C0] ? asm_exc_page_fault+0x26/0x30 [ 630.834628][ C0] ? page_ext_put+0x3e/0xd0 [ 630.834652][ C0] __reset_page_owner+0x84/0x1a0 [ 630.834676][ C0] __free_frozen_pages+0x7d5/0x10f0 [ 630.834700][ C0] vfree+0x1fd/0xb50 [ 630.834728][ C0] ? find_held_lock+0x2b/0x80 [ 630.834748][ C0] ? rcu_is_watching+0x12/0xc0 [ 630.834769][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 630.834798][ C0] ? __pfx_kcov_close+0x10/0x10 [ 630.834824][ C0] kcov_close+0x34/0x60 [ 630.834849][ C0] __fput+0x402/0xb70 [ 630.834877][ C0] ? cleanup_mnt+0x26b/0x450 [ 630.834898][ C0] task_work_run+0x14d/0x240 [ 630.834927][ C0] ? __pfx_task_work_run+0x10/0x10 [ 630.834961][ C0] do_exit+0x86f/0x2bf0 [ 630.834989][ C0] ? proc_coredump_connector+0x2d1/0x4f0 [ 630.835015][ C0] ? __pfx_do_exit+0x10/0x10 [ 630.835046][ C0] do_group_exit+0xd3/0x2a0 [ 630.835074][ C0] get_signal+0x2673/0x26d0 [ 630.835102][ C0] ? __pfx_get_signal+0x10/0x10 [ 630.835130][ C0] ? force_sig_fault+0xc4/0x100 [ 630.835151][ C0] ? __pfx_force_sig_fault+0x10/0x10 [ 630.835173][ C0] ? __local_bh_enable_ip+0xa4/0x120 [ 630.835198][ C0] arch_do_signal_or_restart+0x8f/0x790 [ 630.835224][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 630.835258][ C0] irqentry_exit_to_user_mode+0x12a/0x270 [ 630.835288][ C0] asm_exc_page_fault+0x26/0x30 [ 630.835307][ C0] RIP: 0033:0x7fabd484f927 [ 630.835323][ C0] Code: Unable to access opcode bytes at 0x7fabd484f8fd. [ 630.835332][ C0] RSP: 002b:00007fabd5711060 EFLAGS: 00010206 [ 630.835348][ C0] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fabd498ebe9 [ 630.835361][ C0] RDX: 00007fabd5711080 RSI: 00007fabd57111b0 RDI: 000000000000000b [ 630.835374][ C0] RBP: 00007fabd4a11e19 R08: 0000000000000000 R09: 0000000000000058 [ 630.835387][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.835400][ C0] R13: 00007fabd4bc6128 R14: 00007fabd4bc6090 R15: 00007ffdcb9ed628 [ 630.835421][ C0] [ 631.333413][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 631.340297][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 631.349421][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 631.359486][ T31] Call Trace: [ 631.362769][ T31] [ 631.365714][ T31] dump_stack_lvl+0x3d/0x1f0 [ 631.370504][ T31] vpanic+0x6e8/0x7a0 [ 631.374515][ T31] ? __pfx_vpanic+0x10/0x10 [ 631.379045][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 631.385053][ T31] panic+0xca/0xd0 [ 631.388796][ T31] ? __pfx_panic+0x10/0x10 [ 631.393238][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 631.398633][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 631.404982][ T31] ? watchdog+0xd78/0x1260 [ 631.409417][ T31] ? watchdog+0xd6b/0x1260 [ 631.413854][ T31] watchdog+0xd89/0x1260 [ 631.418121][ T31] ? __pfx_watchdog+0x10/0x10 [ 631.422820][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 631.428040][ T31] ? __kthread_parkme+0x19e/0x250 [ 631.433084][ T31] ? __pfx_watchdog+0x10/0x10 [ 631.437765][ T31] kthread+0x3c5/0x780 [ 631.441836][ T31] ? __pfx_kthread+0x10/0x10 [ 631.446432][ T31] ? rcu_is_watching+0x12/0xc0 [ 631.451190][ T31] ? __pfx_kthread+0x10/0x10 [ 631.455785][ T31] ret_from_fork+0x5d7/0x6f0 [ 631.460392][ T31] ? __pfx_kthread+0x10/0x10 [ 631.465009][ T31] ret_from_fork_asm+0x1a/0x30 [ 631.469800][ T31] [ 631.473028][ T31] Kernel Offset: disabled [ 631.477347][ T31] Rebooting in 86400 seconds..