last executing test programs: 8m38.040987508s ago: executing program 32 (id=68): mmap$auto(0x1000000, 0x80000003, 0x4000000000df, 0x40eb3, 0x401, 0x300000000000) socket(0x10, 0x2, 0x4) (async) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x800) (async) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x19, 0x21, "64b6698fa876c13434397b82dd574e5da012ca6618"}, @NL80211_ATTR_HE_BSS_COLOR={0x20, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004800}, 0x48080) (async, rerun: 64) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) 8m8.25528926s ago: executing program 33 (id=127): sysfs$auto(0x2, 0x100000000000027, 0x0) (async, rerun: 64) fsopen$auto(0x0, 0x1) (async, rerun: 64) socket(0x10, 0x2, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/tty/ttyw2/power/autosuspend_delay_ms\x00', 0xc8a22, 0x0) flock$auto(r0, 0x4) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (rerun: 64) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) (async) madvise$auto(0x0, 0x200007, 0x19) (async) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) (rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_MPP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_HE_CAPABILITY={0x21, 0x10d, "fd5736a95c80db53e7c4aadb2715ac2f8807943d1727244eba33fc42fe"}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x4000890) (async) utime$auto(&(0x7f0000000040)='}[,&*}\x00', 0x0) (async) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000002c0)='-', 0x1) (async) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002140)=""/4094, 0xffe) statmount$auto(0x0, 0x0, 0x9, 0x81) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) (async) mmap$auto(0x1, 0x477443ff, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x101, 0x103) read$auto_mon_fops_text_t_mon_text(r2, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) 5m2.754040316s ago: executing program 0 (id=587): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0xa, 0x73) socket(0x2, 0x1, 0x84) unshare$auto(0x40000080) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS0\x00', 0x10000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x5411, 0x38) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) shutdown$auto(0x200000003, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) clone$auto(0xe9e4, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto(0x0, 0x5c5, 0x0, 0x4, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 4m59.921289705s ago: executing program 0 (id=596): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(r0, 0x0, 0x100100000005, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x1000, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x2, 0x81, 0x0, 0x0, 0x3) mmap$auto(0x8, 0x400007, 0x10000, 0x13, r0, 0x2) r1 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x80, 0x0) socket(0x2, 0x1, 0x106) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3}, 0x55) io_uring_setup$auto(0x52, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto_BPF_OBJ_PIN(0x6, 0x0, 0x5) fadvise64$auto_POSIX_FADV_NORMAL(r1, 0x7, 0xd, 0x0) mmap$auto(0x80000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x9b3, 0xdf, 0x9b75, 0xffffffffffffffff, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x440001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x169000, 0x0) sysfs$auto(0x2, 0x1e, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0xffe, 0x0, 0x0, 0xee00) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) 4m56.90500361s ago: executing program 0 (id=601): timerfd_create$auto(0x9, 0x5) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82400, 0x0) ioctl$auto_SG_SCSI_RESET(r0, 0x2284, &(0x7f00000001c0)) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) ioctl$auto_VHOST_SET_LOG_BASE2(r1, 0x4008af04, &(0x7f0000000040)=0x5) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioperm$auto(0x7, 0x6, 0x2) r2 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0xa, 0x5, 0x0) setsockopt$auto(r3, 0x10000000084, 0x3, 0x0, 0x1) statmount$auto(0x0, 0x0, 0x1fe, 0xd) read$auto_tracing_err_log_fops_trace(0xffffffffffffffff, &(0x7f00000003c0)=""/148, 0x94) r4 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000240), r2) sendmsg$auto_IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6083a100", @ANYRES16=r4, @ANYBLOB="080729bd7000fcdbdf252700000005001d00060000000500340002000000060010000600000006000d000500000005002300030000001400300010683b9953f3b9307736341eddf3e2bd08002c00040000000800140007000000"], 0x60}, 0x1, 0x0, 0x0, 0x44004}, 0x4040000) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r5 = socketpair$auto(0x1e, 0x5, 0x2, 0x0) io_uring_setup$auto(0x1, 0x0) close_range$auto(r5, 0xffffffffffffffff, 0x0) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video0\x00', 0xa200, 0x0) ioctl$auto(r6, 0xc0585611, r6) unshare$auto(0x40000080) r7 = setfsgid$auto(0xffffffffffffffff) lstat$auto(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0xd, 0x100000001, 0x5, 0xffffffff, 0xee00, r7, 0x0, 0x7fffffffffffffff, 0x3, 0x5, 0x100000000, 0x6, 0x1, 0x0, 0x8, 0x7, 0x4}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0xa, 0x801, 0x84) 4m54.824209779s ago: executing program 0 (id=608): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x15, 0x5, 0x0) (async) socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptybd\x00', 0x6202, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) (async) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x5, 0x1) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe735f26, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc461, 0x80, 0x6, 0x3, 0xfffffffffffffff2, 0x3, 0x1, 0x62, 0x80000022, 0x7, 0x6d42, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0x6, 0x400104, 0x7f, 0x1b, 0x2, 0x8000) (async) mmap$auto(0x6, 0x400104, 0x7f, 0x1b, 0x2, 0x8000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000040)={0x6, 0x0}) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) quotactl_fd$auto(0x0, 0x80000201, 0x0, 0xfffffffffffffffd) (async) quotactl_fd$auto(0x0, 0x80000201, 0x0, 0xfffffffffffffffd) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0c/sub0/sw_params\x00', 0x40, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioperm$auto(0xffffffffffffffff, 0x389, 0xd) 4m52.048298644s ago: executing program 0 (id=614): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/dvb_usb_gp8psk/bind\x00', 0x400, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) socket(0x23, 0x80805, 0x0) (async) r0 = socket(0x23, 0x80805, 0x0) sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000280), 0x80000000, &(0x7f0000000100)={&(0x7f0000000240)="af7bf4cf1364d21d6a5e899a2ddd53d2215809fd516b233ab25f928922455b69bdf7008593ac8eeea6", 0x801}, 0x4, &(0x7f0000000140)="24b7cd739e", 0x9, 0x3}, 0x7fffffff}, 0x7f, 0x4) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), 0xffffffffffffffff) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC0\x00', 0xc2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000200)=0x2) (async) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000200)=0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'caif0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'caif0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'macsec0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$auto(0x0, 0x7, 0x1, 0x2b1, r2, 0x8000) (async) mmap$auto(0x0, 0x7, 0x1, 0x2b1, r2, 0x8000) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000003b00)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x600, 0x0) mmap$auto(0x7af0000000000000, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) mmap$auto(0x7af0000000000000, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) (async) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) shmctl$auto_IPC_STAT(0x4, 0x2, 0x0) (async) shmctl$auto_IPC_STAT(0x4, 0x2, 0x0) sendmsg$auto_OVS_METER_CMD_DEL(0xffffffffffffffff, 0x0, 0x4000) mlockall$auto(0x7) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x80300000000000) mremap$auto(0x0, 0x4, 0x4, 0x3, 0x100000000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) (async) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$auto_UI_SET_FFBIT(r3, 0x4004556b, &(0x7f0000000040)=0x400) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) 4m50.096451908s ago: executing program 0 (id=618): r0 = ioctl$auto_TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)=0x4) mmap$auto(0x0, 0x800000000000006, 0x4000000000df, 0x840eb5, r0, 0x300000000000) truncate$auto(0x0, 0xe057) r1 = socket(0xa, 0x3, 0x3b) unshare$auto(0x8000000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001480)='/proc/self/net/rxrpc/conns\x00', 0x0, 0x0) pread64$auto(r2, &(0x7f0000000040)='veth1\x00', 0x200000000006, 0x5) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/lockd/parameters/nlm_timeout\x00', 0x68041, 0x0) write$auto(r3, &(0x7f0000000200)='y\xd2\xaf\xfa\xc9W.\xaa:\xe3\x98\xcc\xe5`\x90\x19\xd0\xcb\xde\xb9\xcb\xf5\xc6\xea\xc8\xe9\x99\xfb\xc6o\x86\x00\xa3\xe9\x8b\xf2\x00\xd9TO\xca\x00\bg\x94wW\x05\xc0\x94\xd8\xa1\xe1\x05\xef\x89\x05\xbeU{\xb7\x117\a\x13\xed\xd2\x02\xae\xbf\xe1\x1e\xf2 \xbeN\x19\x05\xed9\x87D\x1d\xa2\xca4\xafn\x9a\r[\x9f\xb7\xf42\x9bi\x03\x98r\xf2f\xf20\x8f\x17W\xf5', 0x2160) semctl$auto(0x7, 0x2, 0x12, 0x2) semctl$auto(0x3, 0x2, 0x13, 0x9) r4 = socket(0x11, 0x80003, 0x0) setsockopt$auto(r4, 0x107, 0x5, 0x0, 0xce24) recvmmsg$auto(r1, 0x0, 0x40010000, 0x100003, 0x0) 4m40.356001097s ago: executing program 34 (id=605): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) move_pages$auto(0x1, 0x400000000f54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x1e, 0x4, 0x0) (async) socket(0x1d, 0x2, 0x7) (async) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x101802, 0x0) (async) prctl$auto(0x101, 0x8, 0x0, 0x40, 0x7) (async) mmap$auto(0x0, 0x10001, 0x1, 0xeb1, r0, 0x6a) (async) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0) (async) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(r1, 0x8926, r1) (async) read$auto_proc_sessionid_operations_base(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/numa_zonelist_order\x00', 0x202, 0x0) sendfile$auto(r3, r3, 0x0, 0x10000) (async) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x2b, 0x0) fsconfig$auto(r2, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', &(0x7f0000000280), 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r4 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r4, 0x0, 0x3, 0x20000000) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x408042, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async, rerun: 64) preadv$auto(0x3, 0x0, 0x3, 0x3, 0x10) (rerun: 64) close_range$auto(0x2, 0xa, 0x0) 4m34.69176813s ago: executing program 35 (id=618): r0 = ioctl$auto_TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)=0x4) mmap$auto(0x0, 0x800000000000006, 0x4000000000df, 0x840eb5, r0, 0x300000000000) truncate$auto(0x0, 0xe057) r1 = socket(0xa, 0x3, 0x3b) unshare$auto(0x8000000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001480)='/proc/self/net/rxrpc/conns\x00', 0x0, 0x0) pread64$auto(r2, &(0x7f0000000040)='veth1\x00', 0x200000000006, 0x5) mmap$auto(0x0, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/lockd/parameters/nlm_timeout\x00', 0x68041, 0x0) write$auto(r3, &(0x7f0000000200)='y\xd2\xaf\xfa\xc9W.\xaa:\xe3\x98\xcc\xe5`\x90\x19\xd0\xcb\xde\xb9\xcb\xf5\xc6\xea\xc8\xe9\x99\xfb\xc6o\x86\x00\xa3\xe9\x8b\xf2\x00\xd9TO\xca\x00\bg\x94wW\x05\xc0\x94\xd8\xa1\xe1\x05\xef\x89\x05\xbeU{\xb7\x117\a\x13\xed\xd2\x02\xae\xbf\xe1\x1e\xf2 \xbeN\x19\x05\xed9\x87D\x1d\xa2\xca4\xafn\x9a\r[\x9f\xb7\xf42\x9bi\x03\x98r\xf2f\xf20\x8f\x17W\xf5', 0x2160) semctl$auto(0x7, 0x2, 0x12, 0x2) semctl$auto(0x3, 0x2, 0x13, 0x9) r4 = socket(0x11, 0x80003, 0x0) setsockopt$auto(r4, 0x107, 0x5, 0x0, 0xce24) recvmmsg$auto(r1, 0x0, 0x40010000, 0x100003, 0x0) 2m41.950263597s ago: executing program 6 (id=819): openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x80582, 0x0) mmap$auto(0x84, 0x2020008, 0x8, 0xebf, 0xfffffffffffffffa, 0x2) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x42a81, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r0, r1, 0x0, 0x1000200) ioctl$auto(0x3, 0x4020565a, 0x38) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000180)='/dev/binderfs/binder0\x00', 0x280000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r2) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r3, @ANYBLOB="01002abd7000ffdbdf251000000018000180140002003c0c616e31000000000000000020000008ff0600ff7f0000"], 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x80000) socket(0x3f, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x5, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0) r5 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x10303f, 0x0) ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r5, 0x3304, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x4, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000240)={[0x10, 0x5, 0xd, 0x8fd6, 0x400948b, 0x7, 0x15f4da0a, 0x3, 0x0, 0x3739aae3, 0x9, 0x7, 0x0, 0x9, 0x1, 0x2]}, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0xa, 0x801, 0x106) pipe2$auto(&(0x7f0000000040)=0x8, 0x4800) splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0x4, 0x74) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 2m40.801544572s ago: executing program 6 (id=822): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0xd, &(0x7f0000000000)={0xc, 0x1, 0xa, 0x3, 0x3, 0x3c0, 0xffffffffffffffff, [0x1ff, 0x0, 0x10], {0x408e, 0xd, 0x4, 0x1, 0x80000000, 0xfffffc01, 0x1, 0x5, 0x5}, {0x4, 0xb77, 0x857, 0x1, 0x40, 0x9, 0xfffff800, 0xb7c, 0x2}}) (async) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) ioctl$auto_EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x2) ioctl$auto_EVIOCGRAB(r1, 0x40044590, 0x0) close_range$auto(r0, r1, 0x6be5) (async) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0xfffffffffffffffe, 0x8000, 0xe9) (async) setns(r0, 0x20000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) modify_ldt$auto(0x1, 0x0, 0x10) (async) r2 = socket(0xa, 0x801, 0x100) setsockopt$auto(r2, 0x6, 0x2, 0x0, 0xfb3) (async) sendmmsg$auto(r2, &(0x7f0000000540)={{&(0x7f0000000400)="f6b89ec3577279ce26bb9ba06ac3f20ec6e5ccf7", 0x477, &(0x7f0000000480)={&(0x7f0000000440)="fd16cf23d8533ac3d6f0253075a2063fd3f4c8a957754905c0ebf91e3ae15b7de14836cfd6c8204a4194f9f44f34800afc7366c77751f919", 0x7f}, 0xf13, &(0x7f00000004c0)="02f90905435f59b8a4608ac9c01755e8e639a30b3838f9c32349af700aa8d69374d5d160ae1ef6db1b45a213208db4da34c3f428511b9fd7411597274d5eb6b3b3efea51f577b7a116d7d9e65a77e6", 0xd0a9, 0x7}, 0xbd51}, 0x6, 0xa) (async) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) select$auto(0x5, 0x0, &(0x7f00000005c0)={[0x5, 0x80000001, 0x6, 0xffffffffffff77c8, 0x9, 0x80000001, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x400, 0x5, 0x6, 0xfffffffffffffff4, 0xb, 0xffffffffffffffff]}, &(0x7f00000006c0)={[0x1, 0x4, 0x0, 0xffffffffffff8957, 0x7fff, 0xc9a2, 0x9, 0x2, 0x2, 0x9, 0xfffffffffffffc01, 0x3, 0x8, 0x2, 0xfffffffffffffff7, 0xfffffffffffffffc]}, &(0x7f00000001c0)={0x2, 0x8}) modify_ldt$auto(0x0, 0x0, 0xfffffffffffffffb) (async) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x0) (async) gettid() mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0xa, 0x801, 0x84) (async) setsockopt$auto(0x3, 0x10000000084, 0x75, 0x0, 0x8) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/vlan/config\x00', 0x440040, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="211729bd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x41000}, 0x64810) (async) fstat$auto(r1, &(0x7f00000000c0)={0x9a2, 0x3, 0x6000000, 0x959e, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0xad, 0x100, 0x2, 0x6, 0x4, 0x1, 0x48, 0x2, 0x5b7c}) (async) shmctl$auto_IPC_STAT(0xfffffffb, 0x2, &(0x7f0000000280)={{0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, 0x9, 0x19}, 0x7, 0xa, 0x0, 0x101, @inferred, @inferred, 0x3, 0x0, &(0x7f0000000180)="51dee86d50e4099747ef9e8baca566f860fb5ea963305acc598c77aa71f5dc6c2c39c3c45d46b3b2386c698fbbc7a3bfea77059f5baa8e99af552cebf274a8343941405897c0a2225e25e6868b64f6d95a3f657fad712a7a86", &(0x7f0000000200)="9cd0f42f4af620ad14d5fd0498ac6721031f4f6ed952e57315277ec18db47b0e3a56d8a91e0b5f270e9931a5ff5676feb660fe7b011a57f2c630a42d33e14838919bfd3709b690584e5c068466dd18f5d258117abaa54f8b8ba27a03c08abb1e807f72162533b8d57e353917666b2e9035f419f2b7248f23940c4fc424e243"}) lstat$auto(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)={0x1, 0xeb, 0x1000, 0x6, r6, r7, 0x0, 0x7, 0x4, 0x2, 0x3, 0x5, 0x2, 0x4, 0x9, 0x4, 0x5}) 2m39.432266736s ago: executing program 6 (id=826): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/rds/tcp/rds_tcp_sndbuf\x00', 0x40001, 0x0) mmap$auto(0xfffffffffffffffc, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0xc0802, 0x0) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f00000001c0), 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r1, 0x5404, &(0x7f0000000240)="e46b36def297728ca84281f0ff2a8862cc776b1b831df066fbe3f22620360f4baa5db4d6b00b418e8458b8eca6c07b0c58c1b99cbd6365668edf711ff96e4404c6d75013b773f09ae08e98351eb717a564775ac3a2d8a07ac2f26944a6f160ff40e1f7dab09e1aecee13") socket(0x15, 0x3, 0x0) socket(0x10, 0x2, 0x0) r2 = socket(0x2, 0x1, 0x106) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/040/001\x00', 0x9a801, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/nbd0\x00', 0x82, 0x0) ioctl$auto_BLKRAGET(r3, 0x1263, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0x0, 0x0) r4 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x9, 0x1, 0x948b, 0xe4, 0x95f4da0a, 0xfffffffffff7ffff, 0x3, 0x62, 0x80000001, 0xa, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_IMADDTIMER(r4, 0x80044940, &(0x7f0000000140)) getsockopt$auto_SO_COOKIE(r2, 0x204, 0x39, &(0x7f0000000340)='^4\x89A\x13I+\x00\x9b\x9fLg\x16N\'\xd3\xad\xf8\x80\x03\xf4F\x13\x11\xe6(\xb0\x1d \x88Af*kb+\x89\xb0\xf4\x9eI\xaa\x97\x10\x8a\xb3s\xdd\x11\"\xd9\x84\xf3@a\x80\x0e\xacd\x91\"-\xac\xe01\r\xdf:\xd6&\xfe\x95T\x974O\xd0\xc5g\xf8~\xc2S\xce\x87\x05zD!K#\x1e\xdf\x1fa\xa5\xabU\xbeD\xe2\xa3\x10\x98\x8f1d\xe4\xbc\x18~U\xaa\xc6o\xea\xed)\xe9$d\x059N\xe3\xd9\xbc\xc7', &(0x7f00000000c0)=0x4) mq_getsetattr$auto(r4, &(0x7f0000000180)={0x2, 0x4, 0x2, 0x5}, &(0x7f00000001c0)={0x0, 0x5, 0x9, 0x9}) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, 0x0, 0x533080, 0x0) socket(0x2, 0x5, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x13f, 0x0, 0x1c) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 2m38.054321395s ago: executing program 6 (id=829): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) write$auto_tty_fops_tty_io(r0, &(0x7f0000000280)="352c8efa618c0bcf83a4ebdb278754e15f", 0x11) mmap$auto(0x0, 0x6, 0x2, 0x400000000040eb2, 0xffffffffffffffff, 0x2000308000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket(0x2, 0x801, 0x100) mmap$auto(0x401, 0xdb33, 0x5, 0x12, 0x405, 0x8000) setsockopt$auto(r2, 0x6, 0x3, 0x0, 0x8000008) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) mmap$auto(0x0, 0xe97f, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x84, 0x7c, 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_SCAN(r5, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000140)={0x14, r6, 0xd3ac6c422733a379, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) read$auto(r4, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, 0x0) 2m37.041734683s ago: executing program 7 (id=832): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x4004040) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) setfsgid$auto(0x9) setresgid$auto(0xffffffffffffffff, 0x28000000000000, 0x7) close_range$auto(0xffffffffffffffff, 0xfffffffffffff001, 0x2) (async) close_range$auto(0xffffffffffffffff, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000000)={0x0, 0x17282ee5}, 0xfffffffffffffffd) (async) writev$auto(r0, &(0x7f0000000000)={0x0, 0x17282ee5}, 0xfffffffffffffffd) recvmsg$auto(r0, 0x0, 0xfffffff7) madvise$auto(0x0, 0x4f, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) 2m36.011214508s ago: executing program 6 (id=835): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) pwrite64$auto(r0, 0x0, 0x6bc, 0x5) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r1, 0x0, 0x40) readahead$auto(r0, 0x4, 0x4) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x1, 0xe5e) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x4004050) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TCSBRKP2(r2, 0x5425, 0x0) ioctl$auto_TCSBRKP2(r2, 0x5425, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x1ff, 0xdf, 0x200000810, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) write$auto(0x3, 0x0, 0x100082) madvise$auto(0x0, 0x200007, 0x19) socket$nl_generic(0x10, 0x3, 0x10) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x40) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x3, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) 2m33.84969741s ago: executing program 6 (id=838): mmap$auto(0x0, 0x2e79, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) ioctl$auto(r1, 0xc0184d08, r1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) membarrier$auto(0x2, 0x800000, 0x1ff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, 0x0, 0x1fe, 0xd) r2 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0x400141, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x800006, 0x7fffffffffffffff, r2, 0x7) r4 = socket(0x11, 0x80003, 0x81) setsockopt$auto(r4, 0x2, 0xf4, 0x0, 0x8) setsockopt$auto(r0, 0x109, 0x100e, 0x0, 0x8) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r3, 0x8000) pipe$auto(&(0x7f0000000080)) unshare$auto(0x40000080) r5 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r5, 0x400, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 2m33.108441121s ago: executing program 7 (id=841): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket(0x2a, 0x2, 0xb) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x0, 0xffffeffe, 0x2) (async, rerun: 32) pipe$auto(0x0) (rerun: 32) pipe$auto(0x0) (async, rerun: 64) fcntl$auto(r2, 0x5, 0x6) (async, rerun: 64) r3 = socket(0x2, 0x5, 0x0) setsockopt$auto(r3, 0x0, 0x10, 0x0, 0x17) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x1e, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async, rerun: 32) getsockopt$auto(r4, 0x6, 0x9, 0x0, 0x0) (rerun: 32) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x703d27, 0x25dfdbfc, {}, [@ETHTOOL_A_PSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x200000d8) 2m31.09643584s ago: executing program 7 (id=845): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x1, 0xffffffffffffffff, 0x3fd2, 0x3, 0x7fffffffb000) openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x28, 0x200007, 0x79fde611) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x11, 0x2, 0x2fc) sysfs$auto(0x2, 0x10000000000048, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) mmap$auto(0x0, 0x4, 0x9, 0x36, 0xffffffffffffffff, 0x800048000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x4, 0x6, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe$auto(0x0) io_uring_setup$auto(0xe1f, 0x0) move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x2a2080, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f00000000c0)=@enable_stats={0x28b}, 0x0) close_range$auto(0x0, 0x5, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose14/carrier_changes\x00', 0x103000, 0x0) socket(0x2a, 0x5, 0x73) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) 2m30.648784515s ago: executing program 7 (id=846): ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f00000005c0)={{0xffffffffffffffff, &(0x7f0000000100), 0x101, &(0x7f0000000340), 0x3, &(0x7f0000000440)="4f621839f1f6f2f10f7489395483cc4f7dd0c7317d1ead5786f9fe97deb5c9d0f04b08a2f56e150c49be91d5dd489a79b391243ee22f4a", &(0x7f0000000480)=0x9}, {[0x4, 0xfffffffd, 0x8, 0x7a]}, 0x14, 0x6, &(0x7f00000004c0)="852dd6a7b259d9e7a5eb74ac697cd21ee6065f7f2a9058eed931d9b0c0d805052cd988c92166a90e294d94a568efb6f43e267a720745ddb7a6dd3667d63cf0a0446995e3f0fe3f976d21b67165901c14425fcaeb4f411a50a5a7a3f23e1aae0a582de63d8ce514ba277b9fa21aabb0990ae4611ad972ff8b46770b7191ac4b107c808c7feba9b39a6e7bc8cdeb669a6986f4aec6ab57dae1d81ccf"}) ioctl$auto_RTC_PARAM_SET(r0, 0x40187014, &(0x7f00000001c0)={0x30000000004, @svalue=0xe970, 0x7}) socket(0x2, 0x80000, 0xa) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$auto(0x5, 0x0, 0x261) mmap$auto(0x0, 0x20805, 0x4000000000df, 0x4000000eb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) mmap$auto(0x0, 0x2, 0x4000000000df, 0xeb1, 0x401, 0x7ffe) r3 = socketpair$auto(0x1e, 0x5, 0x4, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys5\x00', 0x2000, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r4, 0x5412, &(0x7f0000000300)="00000000000086b76936299793c41ecd706863efcb6f53d06906d9d521") ioctl$auto_TIOCSTI2(r4, 0x5412, &(0x7f00000000c0)="c0402e39") write$auto(r2, &(0x7f0000000140)='1\x00\\\xa0\x04t\x9f\xfd)m|E\x19\xf8\xd0\xba]\xb1\xb5\xba\xf3\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x188\x9a }\f\xf6\xdb,\xd0\x03~\x1eS\xe6', 0x5) setsockopt$auto_SO_OOBINLINE(r1, 0x3a06183d, 0xa, &(0x7f0000000680)='#\x00\x00v\x1a\xb0a4\x1f\x96\x8f\xe3!\xf5\x7f\x1a\x13\xcdO\x00\x00\x00\x000\xa2r\xf04\x8f\x97\xdb\nq\x0f\xe6\xf0 JJ\xb9e\x13\xe9x[\xa9@\xf4h%\x0e\xe5\xacZ\x86A\n%\a\x1a\xee\xf4; x\xa1\xf7\x9a\x94i:^3:\xfd\xf2FB\"M{i\x81\xb7\xd88\xcalpS6\xcb\x00\x00\x00\x00\x00\x00\x00\x005\x9far4\xac\xd8lq\x03\xccn\x00\x00\x00\x00\x00\x00\xd4\xdf\xce\xday\xfd\x8e;\xb4\x9b{\xc1Y\xe4\a{\x8f\xc8\xa4\xa1\xdb.\xc15K\xdexop\xd56\x1a6\xeb\xd3\xac\xe5\xa9\x05?\x91\xd9\xdb?\xee\xf1\xf8\xc8\xe6,\x14\xd2p\x90\xa8\x18\x80\xc0Q\r\x9b\xd9\b=\x7f\a\x91\xacE\x11_=\xe7\xd4\xa3\xb8+x\vx\xe9\xe7O\xc6\xf9\xd3\x8d\x7f\x92\xb6M\x84\x0f\x16\xdcx\xa8\xb4\x0e\x84\xfe\x8a\xd3\xe0\xceV\xb1`&\xec\xdc\xc8\n\xc0G\x03:kg\xa1Y\xc7C\xd4\x06\x0e~X\xaf\xcd\x99\x84\xe8\x1cCt\x8c\xc0LkS', 0xfffffff7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mlock$auto(0xfbe8, 0x4) syz_clone(0x20000, 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0) munlock$auto(0xffff, 0x1) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47fbff7a) mmap$auto(0x0, 0x4, 0x3, 0xeb2, 0x20000000000, 0x10000000008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/queues/tx-5/xps_rxqs\x00', 0xc2481, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x24, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x38}}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x51) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b", @ANYRESHEX=r3], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m28.556473945s ago: executing program 7 (id=850): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0x2062, 0x0) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/ip_vs_conn\x00', 0xf00, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x25, 0x1, 0x80006) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="bbfeffff", @ANYRES16=r2, @ANYBLOB="000227bd7000fcdb01e6000000000000221ad32dd4bd91c0c6174a00", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc000841}, 0x4000084) setsockopt$auto(0x400000000000003, 0x29, 0x37, 0xffffffffffffffff, 0x0) socket(0xa, 0x2, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x491, 0x400, 0x9}]}) 2m23.647916584s ago: executing program 7 (id=857): bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f00000001c0), 0x199043, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0xe8e5483, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) select$auto(0xb, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x64, 0x6, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0xe, 0x8, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0xffffffff7fffffff, 0xc7}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x3, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x60d80, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x5, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/bConfigurationValue\x00', 0x10b042, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) 2m18.657842358s ago: executing program 36 (id=838): mmap$auto(0x0, 0x2e79, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) ioctl$auto(r1, 0xc0184d08, r1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) membarrier$auto(0x2, 0x800000, 0x1ff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, 0x0, 0x1fe, 0xd) r2 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0x400141, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x800006, 0x7fffffffffffffff, r2, 0x7) r4 = socket(0x11, 0x80003, 0x81) setsockopt$auto(r4, 0x2, 0xf4, 0x0, 0x8) setsockopt$auto(r0, 0x109, 0x100e, 0x0, 0x8) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r3, 0x8000) pipe$auto(&(0x7f0000000080)) unshare$auto(0x40000080) r5 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r5, 0x400, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 2m18.43657092s ago: executing program 2 (id=868): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) (async) unshare$auto(0x40000080) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x2003f2, 0x15) (async) madvise$auto(0x0, 0x200007, 0x19) (async) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/state\x00', 0x20a42, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000100)="ba7f75", 0x3) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) bpf$auto(0x2, &(0x7f0000000380)=@token_create={0x5315, r3}, 0x1) (async) read$auto(0x3, 0x0, 0x80) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) write$auto(r4, 0x0, 0x6) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) (async) ioctl$auto_XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f00000002c0)={0x0, 0x10001, 0x0, &(0x7f0000000280)=0x2}) (async) r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r5, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) 2m17.342951255s ago: executing program 2 (id=870): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/carrier\x00', 0xc2061, 0x0) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x3) madvise$auto(0x0, 0x4, 0x15) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000016c0)='/sys/kernel/cpu_byteorder\x00', 0x80000, 0x0) execveat$auto(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) fchdir$auto(0xffffffffffffffff) mkdir$auto(0x0, 0x6) bpf$auto(0x0, 0x0, 0x6f3) r2 = socket(0xa, 0x2, 0x88) r3 = bpf$auto(0x0, 0x0, 0xa3) socket(0xa, 0x1, 0x84) keyctl$auto(0x1e, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x1) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) fspick$auto(r3, &(0x7f0000000040)='./file0\x00', 0x7) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, r2, 0x8003) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 2m17.061505821s ago: executing program 2 (id=871): r0 = socket(0x15, 0x5, 0x0) read$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r1 = ioctl$auto_UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x9, 0xfffffffffffffffd}) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_DISCONNECT(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x10001}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40094020}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1600984e", @ANYRES16=0x0, @ANYBLOB="20002abd7000fedbdf2527000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x40008f9) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), r2) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BANDWIDTH_DOWN={0x8, 0x1c, 0x3ff}, @BATADV_ATTR_BLA_ADDRESS={0xa, 0x1f, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004800}, 0x4) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000400), r2) sendmsg$auto_NBD_CMD_RECONFIGURE(r1, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x198, r5, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xd}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x100000001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8000000000000001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_SOCKETS={0x123, 0x7, 0x0, 0x1, [@generic="977961b957adfecbba320f9883fa449640fcdb5a6b3ada4952e6365eff9d88c197915a1e38bc657e5f45165037529c987690e10687af33d9072a4037ce179c89d92bea11bc6ad60b41e8e07c7bb82c3042d033b64e86a2b18da7e5c34276f452614792f2b4994bfdedd6dbd6c747d0d4a3909aef61d38ab1fc54b7a1d66136a0ba3931c2710007f3dfc174615c74ad2a346619e28c70829925ce19", @generic="49e914a4247eca4d4b99a11f50e28b08be5ed4120522f3bee44ceadf1bd5c660050df0ccc1e735fe038f6643f6ee55eb984b92b4f1af577e60a6e4cea4f799546c838fc307e5ca1837bb2d52e54195df16ad2a7c058985555803f021b361e53239961df5211db3226abe13a27a5c4a6e5136368af9103a6dbd729de518b202ab7ccfad0d"]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}]}, 0x198}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000000) r6 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000006c0), r1) sendmsg$auto_IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r6, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004801}, 0x4004000) sendmsg$auto_IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r6, 0x414, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, 0x4}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x1}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x3}, @IEEE802154_ATTR_DEST_HW_ADDR={0xc, 0xf, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x4c}}, 0x44811) 2m16.203808472s ago: executing program 2 (id=873): mmap$auto(0x0, 0x8, 0xfffffffffffffff8, 0x9b72, 0x2, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = memfd_create$auto(&(0x7f0000000340)='\x00', 0x7) r1 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r2 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/mixer1\x00', 0x2800, 0x0) fcntl$auto_F_SETOWN(r2, 0x8, r1) fcntl$getown(r2, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r4, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="cf5728bd7000fedbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) read$auto(r4, &(0x7f0000000000)='*`@\\!#.\\\x00', 0x3) ioctl$auto_FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000380)="92e84f783833439977323f6de00503041e4456754346996a11c24e60aa78ebeb32f8d1d57ae6176558a537d023075ae0d281e60cbbc68fde2cd4e954c6a637b12cf9e670fc08dd0f87a27e1aba") getdents$auto(0x0, 0x0, 0x18) getdents64$auto(0x0, 0x0, 0x41) r6 = syz_genetlink_get_family_id$auto_cifs(&(0x7f0000000080), r3) read$auto_state_fops_(r3, &(0x7f0000000240)=""/228, 0xe4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0xf663, 0x15) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001480)='/proc/self/net/rxrpc/conns\x00', 0x0, 0x0) madvise$auto(0x9aa6, 0xef, 0x0) pread64$auto(r7, &(0x7f0000000040)='veth1\x00', 0x200000000006, 0x5) sendmsg$auto_CIFS_GENL_CMD_SWN_NOTIFY(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r6, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@CIFS_GENL_ATTR_SWN_IP_NOTIFY={0x4}, @CIFS_GENL_ATTR_SWN_NOTIFICATION_TYPE={0x8, 0xc, 0x5}, @CIFS_GENL_ATTR_SWN_PASSWORD={0x9, 0xa, 'nfsd\x00'}, @CIFS_GENL_ATTR_SWN_SHARE_NAME_NOTIFY={0x4}, @CIFS_GENL_ATTR_SWN_IP_NOTIFY={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 2m15.208868273s ago: executing program 2 (id=874): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r1 = prctl$auto(0x23, 0x4, 0x2009, 0x0, 0x0) getpid() (async) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) poll$auto(&(0x7f0000000040)={r0, 0x2, 0x9}, 0x8, 0x1) (async) poll$auto(&(0x7f0000000040)={r0, 0x2, 0x9}, 0x8, 0x1) connect$auto(r3, &(0x7f0000000080)=@llc={0x1a, 0x325, 0x8, 0x0, 0x40, 0xd9, @remote}, 0x1) (async) connect$auto(r3, &(0x7f0000000080)=@llc={0x1a, 0x325, 0x8, 0x0, 0x40, 0xd9, @remote}, 0x1) ioctl$auto(0x3, 0x400454ca, 0x38) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto_TUNSETCARRIER(r0, 0x400454e2, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000100), r4) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r5, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x11, 0xb, '/dev/net/tun\x00'}, @HWSIM_ATTR_TX_INFO={0xc, 0x7, [{0x9, 0x2}, {0x74, 0xa}, {0x9}, {0x17, 0xc}]}, @HWSIM_ATTR_TX_INFO={0x6, 0x7, [{0x13, 0x7}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) (async) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r5, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x11, 0xb, '/dev/net/tun\x00'}, @HWSIM_ATTR_TX_INFO={0xc, 0x7, [{0x9, 0x2}, {0x74, 0xa}, {0x9}, {0x17, 0xc}]}, @HWSIM_ATTR_TX_INFO={0x6, 0x7, [{0x13, 0x7}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4000001) 2m13.934321404s ago: executing program 2 (id=875): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x2000, 0x0) ioctl$auto(r0, 0x5428, r0) mmap$auto(0x0, 0x40009, 0x6, 0x9b72, 0x7, 0x28004) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) semctl$auto_GETPID(0x0, 0x50, 0xb, 0x8) r1 = geteuid() keyctl$auto(0x1e, r1, r1, 0x5, 0x8) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x91, 0x2, 0x200000008000) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC1D1c\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r3, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r2, 0x0, 0x7fb, 0x400) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x40100000001) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000040)) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xa, 0x1, 0x400800000000948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x62, 0x5, 0x3, 0x0, 0x3, 0x5, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xc5g\x1c&(\xde^\xd2-\xeeK\x03\x15\xe7\xe4\xa4e\b#9\xe6\x9b\xdep\xce#\xde\x11\xdd\xb2\x86\x90\xd8\x00\x85H:\xf8\xbf\xcb\xc1c\x04\xdc-zn\xc85\x0f\x8cY\xdc\xa1\x00\xd5[\xce\x00]\x95\x81\x04\x14\xa8\xa8\xc0m\xb8\v\xc3\xb9\xa9\xf8\xb4\xc6\xad\x8e\xca\xeb\x9c\x04)8\x16I', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xb, 0xd, 0x1, 0x3, 0x3, 0x8, 0x3, 0x3, 0x1ff, 0x8000001f, 0x8, 0x6d3e, 0x9, 0x4, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x403) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.1/usb2/removable\x00', 0x0, 0x0) 2m13.233621817s ago: executing program 37 (id=875): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x2000, 0x0) ioctl$auto(r0, 0x5428, r0) mmap$auto(0x0, 0x40009, 0x6, 0x9b72, 0x7, 0x28004) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) semctl$auto_GETPID(0x0, 0x50, 0xb, 0x8) r1 = geteuid() keyctl$auto(0x1e, r1, r1, 0x5, 0x8) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x91, 0x2, 0x200000008000) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC1D1c\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r3, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r2, 0x0, 0x7fb, 0x400) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x40100000001) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000040)) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xa, 0x1, 0x400800000000948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x62, 0x5, 0x3, 0x0, 0x3, 0x5, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xc5g\x1c&(\xde^\xd2-\xeeK\x03\x15\xe7\xe4\xa4e\b#9\xe6\x9b\xdep\xce#\xde\x11\xdd\xb2\x86\x90\xd8\x00\x85H:\xf8\xbf\xcb\xc1c\x04\xdc-zn\xc85\x0f\x8cY\xdc\xa1\x00\xd5[\xce\x00]\x95\x81\x04\x14\xa8\xa8\xc0m\xb8\v\xc3\xb9\xa9\xf8\xb4\xc6\xad\x8e\xca\xeb\x9c\x04)8\x16I', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xb, 0xd, 0x1, 0x3, 0x3, 0x8, 0x3, 0x3, 0x1ff, 0x8000001f, 0x8, 0x6d3e, 0x9, 0x4, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x403) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.1/usb2/removable\x00', 0x0, 0x0) 2m7.727508606s ago: executing program 38 (id=857): bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f00000001c0), 0x199043, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0xe8e5483, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0xfff) select$auto(0xb, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x64, 0x6, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0xe, 0x8, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0xffffffff7fffffff, 0xc7}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x3, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0xffffffffffffffff, 0x900064b5, 0xc14) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x60d80, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x5, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/bConfigurationValue\x00', 0x10b042, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) 1m56.951117174s ago: executing program 9 (id=897): openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vivid.0/video4linux/video10/dev_debug\x00', 0x40000, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xffffffffffffff7f, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) socket(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r2, 0xc038563c, r1) writev$auto(r0, 0x0, 0x3) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r3, 0x0, 0xb4d3) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x400, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x185802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r7, 0xfd}, 0x6a) bpf$auto_BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)=@link_create={@prog_fd=r4, @target_fd=r4, 0x7, 0x401, @kprobe_multi={0xd, 0x1, 0x100000000, 0x100000001, 0xff}}, 0x6) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) 1m56.371932848s ago: executing program 9 (id=899): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) (async) r2 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000140), 0xffffffffffffffff) r3 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000001240)='\t\x00', 0x2) (async, rerun: 64) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000280)={0x7, @raw=0xfffffffffffffff7, @inferred, 0x7, 0x2, '\x00', {0xfffffffffffffffd, 0x5, 0x3, 0x0, 0x0, 0x1000, 0x698a87d4, 0x5, {0x81, 0x20000000}, {0x5, 0x80000000}, {0x94, 0x10000}, 0x2, 0x6, 0x400, 0x3, 0x3, 0x0, 0x4, 0x97, 0x7, 0x8000, '\x00', 0x8, 0x4, 0x9, 0xb}}) (rerun: 64) r5 = openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/o2hb/live_regions\x00', 0x40000, 0x0) read$auto_o2hb_debug_fops_heartbeat(r5, 0x0, 0x0) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000340)={0x1a0, @inferred, @raw=0x8, 0xfffffffffffffff9, 0xfff, '\x00', {0x3, 0xc, 0x1c, 0xee01, 0xffffffffffffffff, 0x13, 0x3, 0x40, {0x4, 0xffffffff}, {0x4ac, 0xb7f3}, {0x9, 0x6}, 0x8, 0xcd27, 0x2, 0x5, 0x8, 0x3, 0x0, 0x3, 0x3, 0x5, '\x00', 0x2, 0x1, 0x3, 0x1}}) (async, rerun: 32) r7 = waitid$auto_P_ALL(0x0, 0x86f2, &(0x7f0000000180)={@siginfo_0_0={0x5, 0x3, 0xce, @_sigpoll={0x5}}}, 0x5, &(0x7f0000000400)={{0x0, 0x1fffffffe0}, {0x8001, 0x6}, 0x1, 0xffffffffffffffff, 0x5, 0x8, 0x10000, 0x9, 0x8, 0x1, 0xfffffffffffffffa, 0x7fff, 0x8, 0xa0f, 0xffffffffffff2be8, 0x5}) (async, rerun: 32) r8 = socket(0xa, 0x5, 0x0) r9 = setfsuid$auto(0xee00) setreuid$auto(r9, 0x0) msgctl$auto_MSG_INFO(0x875, 0xc, &(0x7f0000000180)={{0x2, 0xee00, 0x0, 0x9, 0x401, 0x0, 0x1}, 0x0, 0x0, 0x9, 0x7, 0x4, 0x5, 0x9, 0x200, 0x8, 0x5, @inferred=0xffffffffffffffff, @raw=0xcb}) fchown$auto(r8, r9, r10) (async) r12 = geteuid() keyctl$auto(0x1e, r12, r12, 0x5, 0x8) (async) sendmsg$auto_NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f00000036c0)=ANY=[@ANYBLOB="3c1b0000", @ANYRES16=r2, @ANYBLOB="02002cbd7000fedbdf250100000077000c80d80aada4ba60b7c161c4a28f697a5b62682b56eaba4b6fb412c05706519278c6b48522d231fa833868072a3ea251c89cb0cda91b2be835725fe6ebf3e078a9db77a96cef714021c31725e4c3f3387385c1a919e75acc3b02e919dbcf7e6a000cc1c6c7d981644640c5bfbec0f2a9e7668ca89f0008000200f7a03a7c080001007100000005000300d2000000080002004d0000009e0404804c014f800400930008004800", @ANYRES32, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0800ad00", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB='\b\x00%\x00', @ANYRES32=r7, @ANYBLOB="040051800800b000", @ANYRES32=r9, @ANYBLOB="0800b800020000008c54ba5a44c42c1df012e797a477c2c805669bedf18a07a5b14f5f3bbc4e38d37d1011b36f8f165693c290dbccbec5f5d05eccaa934449ad567dc04d1fa133e4199227893537098280b8865af997cf48d2daa313259afcc901bd9f5e905cc367c6eec73d3cfb720c373eaebf53cd9e3c87d8487bf685ab2cfb59903473562bd0e9f6931570e883ede7ec661b91caa8579c2e912a9a301a30f4539012120ab9bd504295f4c912280630de581fbf0d55618200008a000c80883b2ad8edcad34c818b61d59b18742a8578a4630a5952f6b4dd8f1de7ef75018edab0f54564c9553d557f15528d27f01ce2c4aa934d6548044abfd184dfad3cf3adedda659eebfdacf9d92fc04d0aaa60facacb84f9373749a35800fdae5261f52d7e31022ea7d358e46d1d99f17d323eec3fe69b580d0646538d4b8d393672cce6bf5819c7000012030b801000dc8008006a00080000000400bb800400c1002a0128800579f2eb0bd40a143dfb1903836654dcc3353fb638b4b05be4219b2d93fc30cf49f90f21dc3452352e7c83ee7fe817ae4ca2e27e1912a13bc1d0ee5af4d9a6557360627be5e412db89be5faa9915c87df74378d71d4680fc9f335fbbf122df95965e5f1a2d6b6865ec2b1ae8699d77cc380b477756c67106d42554398f690e51e03ff52fb19e3202bd3ae3af2f5e0be4319ca79554d8cf8b1b741208009a813454460eebc07bfebfbda1bcfdf6dfcdb8729b3a4c7023889cfa28fc898775d66028a63eeca3ae52271e5afcfb12131264204e7ce7a80a0ce7d7a0008e76426764eb44c5397b52aaa6db255eb8a34e31269f895b4aaf7419f010391b01e2591a6708cf6ccec510080004000800000008001400", @ANYRES32=r12, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="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"], 0x1b3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x24040890) (async) r13 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000003640), 0x0, 0x0) ioctl$auto_RTC_PARAM_GET(r13, 0x40187013, &(0x7f0000003680)={0x7, @uvalue=0x2c, 0x4}) (async) mmap$auto(0x1, 0x88b, 0xfffffffffffffff8, 0x9b72, r5, 0x8003) (async) r14 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vhci_hcd.3/usb16/16-0:1.0/ep_81/power/runtime_suspended_time\x00', 0x60a000, 0x0) write$auto(r14, &(0x7f0000000040)=',\x00^\xa2\x02\x00\x05\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xb2s\x83\xbd\xc5_%\xc1\xa3\xd0\x95Hq\xf4zG\x01[{\x17\x05I\xe0\xb1d)\x06z8L\xe6&[\xa9X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2\xec\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a', 0x1000) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ae, &(0x7f0000000100)={&(0x7f0000000780)="4c1200030000000000a3677337f9ecba075f6bba441b1011", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x1a000, 0x100) 1m55.892349103s ago: executing program 9 (id=900): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x2, 0x2) madvise$auto(0x0, 0x20499b, 0xd) bind$auto(0x3, 0x0, 0x6a) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8, 0x10, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x840) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x1, 0x0) write$auto(0x3, 0x0, 0x81) ioctl$auto(0x3, 0x80108907, 0x38) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x0, 0x0, 0x40) setsockopt$auto(0x3, 0x6, 0x3, 0x0, 0xd) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f4ffffff", @ANYBLOB="01002bbd"], 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x4001090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0x7b2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x80000, 0x0) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x0, 0x0) 1m52.206546058s ago: executing program 9 (id=906): select$auto(0x0, &(0x7f0000000040)={[0x9, 0x4, 0x34, 0x9, 0x1, 0x1, 0x0, 0x6, 0xf, 0x1, 0x0, 0xcf, 0x5, 0x213, 0x5, 0xb98]}, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_SNDCTL_TMR_CONTINUE(0xffffffffffffffff, 0x5404, &(0x7f0000000400)="775fe907f2eb8e6bd190008fb7f54979b4a6") writev$auto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000240)="e3", 0x1}, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001f80), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="7d3f2dbd7000fddbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x48018}, 0x400c880) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0xfff, 0x7, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x1fe, 0x81) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/ram5/queue/discard_granularity\x00', 0x220184, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) socket(0x2, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, r2, 0x10008000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="82d04f2bf64eae6537d8d9c9f3a7db4269e2b12cd586bcaee0deb1dff048ee440000000000000000", @ANYRES16=r5, @ANYBLOB="01032cb57000fbdbdf250a0000000600010017000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x4) 1m50.675529849s ago: executing program 9 (id=909): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="4c91f2c388274610e12c861bb2bfd9800e9b874b853fe2e685482c8d73f4f3954757095a41e68c0b5d0e2ff61c07dca6944cb534a7e0964f482648d8e5a6e82f24d03fa0bb465f0bbad37d238c4a68079269aa73b6120723c649476f509b45df000000000000000000000000000000aa0000000000000041b38436017b94b6b4f36321e862326198a1a921bec6cdf600fe744e2f2c0019994cd809df07cd88c238903e7b11df4f3cbeac5e55c70109f8df13e7d19733bce2f656201189cd8479b25de3a6eb94a2232d75527e22a236681bee5ee551e2fbfd0aec850aa50b9e2c200c9dd425f028ce2b5714af619b36636bfc", 0xf2) socketpair$auto(0x1, 0x0, 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xc7f16bff2a10ba01, 0x0) r2 = socket(0x11, 0x0, 0x7) r3 = getsockopt$auto(r2, 0x11c, 0x1, 0xfffffffffffffffe, 0xfffffffffffffffd) recvfrom$auto(r3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) ioctl$auto_IOCTL_VMCI_VERSION(r3, 0x79f, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000100)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xf}, 0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = socket(0x2b, 0x1, 0x1) ioctl$auto(r5, 0x8941, 0x4) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="72010000", @ANYRESHEX=r1], 0x1ac}}, 0x40010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m50.167299505s ago: executing program 9 (id=911): write$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000080)="305b0a8f", 0x4) (async) rseq$auto(0x0, 0x8000, 0x0, 0x9) (async) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r0 = socket(0x2, 0x3, 0xa) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x20009, 0x40000000df, 0xeb3, 0x3fd, 0x8020) settimeofday$auto(0x0, &(0x7f0000000100)={0x82, 0x4}) (async) getsockopt$auto(r0, 0x10002, 0x2, 0x0, &(0x7f0000000040)=0x2000001) mmap$auto(0x0, 0x2020009, 0x3, 0x13, 0xffffffffffffffff, 0x8000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) socket(0x2, 0x1, 0x0) (async) socket(0xa, 0x5, 0x0) (async, rerun: 32) r1 = socket(0x2, 0x800, 0x0) (rerun: 32) bind$auto(0xffffffffffffffff, &(0x7f00000001c0)=@nl=@kern={0x10, 0x0, 0x0, 0x40}, 0x6a) (async) listen$auto(0x3, 0x81) (async) sendmmsg$auto(r1, &(0x7f0000000180)={{&(0x7f0000000040), 0x10010, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) (async) mmap$auto(0x0, 0x8, 0xe4, 0x9b72, 0x2, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x818a) (async) memfd_create$auto(0x0, 0xe) (async) socket(0x28, 0x800, 0x7) setsockopt$auto(0x3, 0x6b, 0x4, 0x0, 0xfb3) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x13, 0xfffffffffffffffb, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) (async) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf25010000000600020001000000570000000800090108000000050004000300000014001f00fe8800000000000000ff01000000000000000000000000000100"/82], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) (async) move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) write$auto(r2, &(0x7f0000000040)='S\x00\x00\x00\xfc\xff\xff\xff', 0x8587) (async, rerun: 64) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) 1m34.717368795s ago: executing program 39 (id=911): write$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000080)="305b0a8f", 0x4) (async) rseq$auto(0x0, 0x8000, 0x0, 0x9) (async) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r0 = socket(0x2, 0x3, 0xa) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x20009, 0x40000000df, 0xeb3, 0x3fd, 0x8020) settimeofday$auto(0x0, &(0x7f0000000100)={0x82, 0x4}) (async) getsockopt$auto(r0, 0x10002, 0x2, 0x0, &(0x7f0000000040)=0x2000001) mmap$auto(0x0, 0x2020009, 0x3, 0x13, 0xffffffffffffffff, 0x8000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) socket(0x2, 0x1, 0x0) (async) socket(0xa, 0x5, 0x0) (async, rerun: 32) r1 = socket(0x2, 0x800, 0x0) (rerun: 32) bind$auto(0xffffffffffffffff, &(0x7f00000001c0)=@nl=@kern={0x10, 0x0, 0x0, 0x40}, 0x6a) (async) listen$auto(0x3, 0x81) (async) sendmmsg$auto(r1, &(0x7f0000000180)={{&(0x7f0000000040), 0x10010, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) (async) mmap$auto(0x0, 0x8, 0xe4, 0x9b72, 0x2, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x818a) (async) memfd_create$auto(0x0, 0xe) (async) socket(0x28, 0x800, 0x7) setsockopt$auto(0x3, 0x6b, 0x4, 0x0, 0xfb3) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x13, 0xfffffffffffffffb, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) (async) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000f9dbdf25010000000600020001000000570000000800090108000000050004000300000014001f00fe8800000000000000ff01000000000000000000000000000100"/82], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) (async) move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) write$auto(r2, &(0x7f0000000040)='S\x00\x00\x00\xfc\xff\xff\xff', 0x8587) (async, rerun: 64) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) 1m7.404140608s ago: executing program 3 (id=979): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0xf51, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x1fe, 0xd) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x4, 0xde, 0x9b7e, 0x2, 0x1) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(0xffffffffffffffff, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0x1, 0x1, 0xfffffffffffffff8, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x0, 0x6d3e, 0x9, 0xfffffffffffffffe, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) unshare$auto(0x40000080) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x60d80, 0x0) 1m0.223965099s ago: executing program 3 (id=988): socket(0x1e, 0x2, 0x101) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000000), 0x20140, 0x0) ioctl$auto_IOCTL_STOP_ACCEL_DEV(r1, 0x40096101, &(0x7f0000000240)={@padding, 0xfe}) msgrcv$auto(0x0, 0x0, 0x8, 0xffbffffffffffffc, 0x10000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) fstat$auto(0x2, 0x0) (async) ioctl$auto(0xc8, 0x401054d5, 0x0) (async, rerun: 64) process_vm_readv$auto(0x0, &(0x7f0000000040)={0x0, 0x2}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x6, 0x0) (rerun: 64) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/oss/sndstat\x00', 0x40441, 0x0) (async, rerun: 32) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) (async, rerun: 32) timer_create$auto_CLOCK_TAI(0xb, &(0x7f0000000200)={@sival_ptr=&(0x7f0000000180)="61d609fdb9f2314260234bc76c10bd5f7f07a83ec1152710590a4e3cd7e9e36cca14113ec9740f5e6607d6441c7a", @inferred=r0, 0x7, @_tid}, &(0x7f0000000280)=0x1c0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) write$auto(r2, &(0x7f00000001c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7a) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) read$auto_kernel_debug_fops_orangefs_debugfs(r0, &(0x7f0000000040)=""/10, 0xa) (async) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) ioctl$auto(r4, 0x6f2d, r4) (async) socket(0xa, 0x2, 0x73) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video13\x00', 0x20000, 0x0) ioctl$auto(0x3, 0xc0285628, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) 58.902198166s ago: executing program 3 (id=992): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000002e40), 0xffffffffffffffff) readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0) sendfile$auto(r3, r3, 0x0, 0x1) inotify_rm_watch$auto(r1, 0x8001) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)="786be708631af933962dee41d84289c4071dbfd9083097bc5dff0000000c427e90a31d74230a0b97c87e5cd2b8d869785b9055604a9b245fb37db1a3176c5a86aba3d7f1799e6daa5f75dd2e049c7479cb72ce00"/99) ioctl$auto_SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f00000001c0)) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyed\x00', 0x24081, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) mmap$auto(0x4, 0x401, 0x8, 0x10, r1, 0x6) write$auto_tty_fops_tty_io(r5, &(0x7f0000000280)="352c8efa618c0bcf83a4ebdb278754e15f", 0x11) mmap$auto(0x0, 0x6, 0xfffffffffffffc00, 0xffff, 0xffffffffffffffff, 0x2200308000000004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) 57.20159883s ago: executing program 3 (id=995): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x20000, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf25040000000a0016070000000400000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) close_range$auto(0xffffffffffffffff, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) r5 = open(&(0x7f00000000c0)='./cgroup\x00', 0x82040, 0xb5d1af1605322d5d) open_by_handle_at$auto(r5, &(0x7f0000000000)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r6, 0x0, 0x20) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) recvmsg$auto(r4, &(0x7f00000005c0)={&(0x7f00000002c0)="f98fd098eeb780d8e770e8da1f9767c34ca0f280d200e0ad0eba6acc6975617bed08b1962d6214ce71a8239604548a50851b6da80663be61eabbdbf848657841a86470c1b77ea4c4453c2d28736680caf218883c1e1e49ba93148dc75c8a196ca29889f1e1a87a9b9135817ffe3d785f8ffe44df98d16483db0e064af5c791ab4680bbc74c3d9bf07b90dbc491adf174fc857d1e3c6486e98cbfc99c6bd4cbb718ec9aef7ee99243e78722b9186707fb9d454d7bea97dd3bc6b36d586705fb7d2d541843d7589dde36557977a85485bf427ca7a52d5b50f733dba4b37a51026235594b5b08985fd4004a6169a34d0c00"/251, 0x8, &(0x7f00000004c0)={&(0x7f00000003c0), 0x3}, 0xd3, &(0x7f0000000500)="6bfee52cc6d76e1c2f8b714f9ce8de29c2b8c6a36fd1081b8f6753c4db3a957fc9f3c8ce5a1f6aae5db64bc4b8383dea96682820b78f0fdf870dba5430e851305d4713df7f1124096ace834632a497cc07ffb3b6254aa69082434244066c46fe36fd6a587c8d1a8b40662762a5e48ddb2c86fa27c693a26df7fa2dd4f5762a1616bbbc094ba84c2f033b83814b8572c7bb08c224a9b33f1ac650d8c51cff0960141e613531d3f03e45860d2c2f7110f12d60c0b21f6a1556472a2f918584", 0xc, 0xffffffff}, 0xfffffff7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x41000, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto(r7, 0x4008af24, 0xffffffffffffffff) mmap$auto(0x80, 0x20009, 0x4000000000dc, 0xeb1, r1, 0x8000) socket(0x25, 0x5, 0x6) 55.165035657s ago: executing program 3 (id=999): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x7fffffffffffffff, 0xe, 0x8) bind$auto(0x3, 0x0, 0x6a) setpgid$auto(0x0, 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) sched_get_priority_min$auto(0x3) sendmmsg$auto(0x3, 0x0, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) clone3$auto(&(0x7f0000000400)={0x100008000, 0x980, 0x4, 0x6, 0x0, 0x2, 0x1, 0x8, 0x1, 0x0, 0x3}, 0x40) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0xa, 0x5, 0x0) sched_get_priority_min$auto(0x401) r2 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) listen$auto(0x3, 0x81) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff4}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) accept$auto(0x3, 0x0, 0x0) 49.710629012s ago: executing program 3 (id=1014): mmap$auto(0x0, 0xe980, 0xdf, 0xeb1, 0x401, 0x20000008000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) statmount$auto(&(0x7f0000000000)={0x7e, @raw=0x400, 0x80000024, 0x7fff, 0x4}, 0x0, 0x7feffffff001, 0x4) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0xc805) io_uring_setup$auto(0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x129e01, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100400e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) capset$auto(0x0, 0x0) mmap$auto(0xf0ffffffffffff, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x1150c0, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r2, 0x0, 0x9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba075f6bba44", 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x2, 0x80000000, 0x4020086) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0x8001, 0x9, 0x138) unshare$auto(0x40000080) 34.124151075s ago: executing program 40 (id=1014): mmap$auto(0x0, 0xe980, 0xdf, 0xeb1, 0x401, 0x20000008000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) statmount$auto(&(0x7f0000000000)={0x7e, @raw=0x400, 0x80000024, 0x7fff, 0x4}, 0x0, 0x7feffffff001, 0x4) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0xc805) io_uring_setup$auto(0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r0, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x129e01, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100400e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) capset$auto(0x0, 0x0) mmap$auto(0xf0ffffffffffff, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x1150c0, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r2, 0x0, 0x9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{&(0x7f0000000280), 0x1, &(0x7f0000000100)={&(0x7f0000000780)="4c0300000000000000a3677337f9ecba075f6bba44", 0xfffffffffffffff7}, 0x5, 0x0, 0x5, 0x1}, 0x8}, 0xfffffffe, 0x100) pivot_root$auto(0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x2, 0x80000000, 0x4020086) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) madvise$auto(0x8001, 0x9, 0x138) unshare$auto(0x40000080) 28.731436762s ago: executing program 1 (id=1057): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) bpf$auto(0x2, &(0x7f0000000380)=@token_create={0x5315, r2}, 0x1) read$auto(0x3, 0x0, 0x80) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) socket(0xa, 0x801, 0x106) listen$auto(0x3, 0x83) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x0) write$auto(r3, 0x0, 0x6) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae2d, 0x0) ioctl$auto_XFS_IOC_FSBULKSTAT(r1, 0xc0205865, &(0x7f00000002c0)={0x0, 0x10001, 0x0, &(0x7f0000000280)=0x2}) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) r5 = pidfd_open$auto(0x1, 0x0) setns(r5, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) 26.129140952s ago: executing program 8 (id=1060): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket(0x2, 0x1, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio0/set\x00', 0x80302, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(r1, 0xfffffffffffff000, 0x2) (async) r2 = socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) (async) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) (async) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000140)=""/18, 0x12) (async) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy15/statistics/dot11FCSErrorCount\x00', 0x4000, 0x0) write$auto(r0, 0x0, 0xffff) (async) timer_create$auto_CLOCK_REALTIME(0x0, &(0x7f0000000000)={@sival_int=0xffffffff, @raw=0xd1, 0x10001}, &(0x7f00000000c0)=0x1ff) 25.559140948s ago: executing program 1 (id=1061): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi10\x00', 0x161402, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/rfkill2/hard\x00', 0x2600, 0x0) (async) r1 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb8, r1, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0xf}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x5}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xb}, @IEEE802154_ATTR_CHANNEL_PAGE_LIST={0x84, 0x1e, "535dfefd0f7cb65a7312846822bf217113305c341d99b42d0ecc97107dc7fc9360aa5a3cf13521ea1834fb4155ae6ec8611480c0588e2892f7683ba4d479d2314fd2a9800b16e7206acdd481e68c2da7dd3c9bc42501193e71a24bddd0e5d6a66808097a754803effb7da9a6f491e6117f08a548696bec4db9f8dc8e1c922000"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/228, 0xe4) close_range$auto(0x2, 0xa, 0x0) ioperm$auto(0xff, 0x4, 0x7fffffff) 25.228391496s ago: executing program 1 (id=1063): brk$auto(0xffffffffffffff66) (async) brk$auto(0xffffffffffffff66) writev$auto(0xffffffffffffffff, 0x0, 0x3) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4041081) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x1e00, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x1e00, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x42, 0x0) exit$auto(0x6) write$auto(r1, &(0x7f0000000340)='3\x00', 0x6) move_pages$auto(r0, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) setfsuid$auto(0xee00) (async) r2 = setfsuid$auto(0xee00) r3 = setfsuid$auto(0xee01) setresuid$auto(r2, r3, r2) sendto$auto(0x3, 0x0, 0x13, 0xfffffff5, &(0x7f0000000440)=@phonet={0x23, 0x7, 0xfd, 0xc}, 0x22) setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0xfb3) 25.198265034s ago: executing program 8 (id=1064): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_udc.0/power/runtime_active_time\x00', 0x4c2382, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm1p/sub7/hw_params\x00', 0x260100, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) open(0x0, 0x22240, 0x155) r0 = socket(0x2, 0x2, 0x0) socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x5, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) r1 = socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x975) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/ttyd4/dev\x00', 0x101000, 0x0) mmap$auto(0x0, 0x400000020009, 0xdf, 0xeb1, 0x40000000000a5, 0x8003) close_range$auto(r1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x7, 0x40, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) recvmmsg$auto(0x4, &(0x7f0000000200)={{0x0, 0x4, &(0x7f0000000140)={0x0, 0x4da}, 0x4, 0x0, 0x8, 0x800}, 0x1000}, 0xffffffff, 0x0, 0x0) 24.103892983s ago: executing program 1 (id=1066): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x7, 0x0, 0xb40, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) write$auto(r0, 0x0, 0x1ff) r1 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/dri/vkms/vkms_config\x00', 0x80000, 0x0) lseek$auto(r1, 0x0, 0x0) unshare$auto(0x40000080) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/mem_used_max\x00', 0xa081, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x80003, 0x4, 0x200000000001, 0xb4, 0x9, 0x8, 0x10007, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84}, 0x1fe, 0xd) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) unshare$auto(0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x80000, 0x0) ioctl$auto_SNDCTL_SEQ_GETINCOUNT(r4, 0x80045105, &(0x7f0000000200)="5719ed914183ffba4ce2eb7d18bf365aa51818da2a40f8cf07b0ea3eeefe03ccb791022d229eca747b8415a44148de5a387b97f30e8a6d797ae7a7be7631383befcf13c327c91a4d0b80012dc3570c5f02ec32980c9f7d1793c5ecec082c73ea5c923d99fa36b361f408d9e70776b351e8e79425b1ebbc60d67a311a74b3bdc4f15e37a2e8394fff0cae2ce750") r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd70007ddbdf250c000000040003800c00018008000100", @ANYRES32=r6, @ANYBLOB="b28105536b9d33621a171931e1b68974c8f14f83174ba0e4f099354472e07739969b91c8fe8d4a9335cc2e1b509d730838d186657e7700667e08519a7c13cc4515"], 0x24}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) 24.06277951s ago: executing program 8 (id=1067): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000) (async) getcpu$auto(&(0x7f0000000880)=0x7ff, &(0x7f00000008c0)=0x3, 0x0) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000d40), r0) (async, rerun: 64) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x280, 0x0) (rerun: 64) ioctl$auto_SNDCTL_SEQ_TESTMIDI(r2, 0x40045108, &(0x7f00000000c0)="2c6bfeb7") (async) sendmsg$auto_NFSD_CMD_THREADS_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000084) 23.679766157s ago: executing program 8 (id=1068): mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x8e051, 0xffffffffffffffff, 0x0) (async) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000a, 0x8e051, 0xffffffffffffffff, 0x0) r0 = ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000180)=0x1) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r1, 0x4018bc13, &(0x7f00000005c0)={0x0, 0x9d, 0x720, [0x0]}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="64f7000000000000000302654c204cca99e9b0a4088acbaa12bf4760f0e1306f441e6fe9ab67f83a2d429cec5c292f7b366742984e8a96c355b8496dbe435720cca15a7d87a2600542319d2337f1cb3a72f3973e0b450904d22ceb6185eb9dab93ab6ac00867658a1654f2c37e46bb9afa38d8439cb0fde4550b0cada6f0e2d4fd8a3c1d7fd388326cb763e73a15569726afd537e15a4cf382f288415c9993151c42fe9094e0dd52e6061c10eff6c85412b856a8b3d978c0bdd35ce7ff6161110a72b83651", @ANYRES16=r2, @ANYRESDEC=r0, @ANYBLOB="09a7384995e4bf9300953cbb979360ef737cf36c586235579e96813d9a3c32cd99b40909b3a94e513c26d73146cd65c9426862", @ANYRES8=r0], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) pread64$auto(0xffffffffffffffff, 0x0, 0x2, 0x100000005) ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) (async) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x10000, 0x7, 0xf, 0x40000000008fd6, 0x948b, 0x7, 0x15f4da0a, 0x3, 0x3, 0x62, 0x4, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0) write$auto(r3, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x8) madvise$auto(0x0, 0x2000040080000004, 0xe) (async) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) finit_module$auto(0xffffffffffffffff, 0x0, 0x6) unshare$auto(0x40000080) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x147602, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x147602, 0x0) symlink$auto(&(0x7f0000000300)='./file0\x00', &(0x7f00000002c0)='./file0/../file0\x00') (async) symlink$auto(&(0x7f0000000300)='./file0\x00', &(0x7f00000002c0)='./file0/../file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000100)={0x200, 0x0, 0x8}, 0x18) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) 21.564467989s ago: executing program 1 (id=1070): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x62040, 0x0) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000580)={0x0, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty51\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x4b40, r3) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) socket(0xf, 0xa, 0x5) connect$auto(0x3, &(0x7f0000000080)=@l2={0x1f, 0x6, @none, 0x5}, 0x2) ioperm$auto(0x7, 0x75, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_UNLCK(r2, 0x8, 0x2) 21.384055667s ago: executing program 8 (id=1071): mmap$auto(0x80000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x9b3, 0xdf, 0x12, 0xffffffffffffffff, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x5, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x169000, 0x0) sysfs$auto(0x2, 0x1e, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0xffe, 0x0, 0x0, 0xee00) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) fsetxattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) iopl$auto(0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/nr14/statistics/rx_errors\x00', 0x28400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000002c0)=""/200, 0xc8) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000280)={{0x3, 0x2, 0x0, 0x7, 0x4}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74c82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000000)={0x8, 0x8, 0x3ff, 0xf, 0x5}) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyprintk\x00', 0x2001, 0x0) mmap$auto(0x7fffffff, 0xfeffffffffffff97, 0xdf, 0x10, 0xffffffffffffffff, 0x7fff) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x100015) syslog$auto(0x2, 0x0, 0xcf) ioctl$auto_TUNSETVNETHDRSZ2(0xffffffffffffffff, 0x400454d8, &(0x7f0000000040)=0x80000000) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0x81, 0x9b75, 0x2, 0x2000004) 19.860787545s ago: executing program 8 (id=1072): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = creat$auto(&(0x7f0000000000)='./file0\x00', 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) keyctl$auto(0x2000000000000017, 0x8000, 0x2d, 0xc4, 0x20803) mmap$auto(0x0, 0x20009, 0x7, 0x19, 0x401, 0x1) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000004c0), 0x2202, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_WRITE(r1, 0x40085503, 0x0) pwritev2$auto(r0, &(0x7f00000000c0)={0x0, 0x8}, 0x100, 0x2, 0x9, 0x43) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x4604, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r2, 0x0, 0x100082) ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, 0x0) pwrite64$auto(r2, 0x0, 0x8, 0x200000000000003) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0xa) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ppoll$auto(0x0, 0x7f, 0x0, 0x0, 0x8) membarrier$auto_MEMBARRIER_CMD_QUERY(0x0, 0x3, 0xd) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) r3 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r3, 0x65, 0x5, 0x0, 0x4) madvise$auto(0x0, 0x2000040080000004, 0x0) 16.963859852s ago: executing program 1 (id=1074): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) pivot_root$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000040)='.\x00') mprotect$auto(0x1ffff000, 0x8000000000000007, 0x100000c) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0xc, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0) read$auto(0x3, 0x0, 0x80) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/031/001\x00', 0x208000, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0xc0802, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/008/001\x00', 0x2b0300, 0x0) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto(r1, 0x5522, r2) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000080)='7\x00\\\xa0\x04\x04\x00\x00\x00\xfa\b\x1c\xc7k', 0x9) r4 = openat$auto(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x5) mmap$auto(0x1, 0x4, 0xff, 0x353, r4, 0x7fffffff) semctl$auto(0x81bf, 0x4, 0x101, 0x8e) socket(0x21, 0x2, 0x2) ioctl$auto(r1, 0x5522, 0xffffffffffffffff) 13.708794945s ago: executing program 4 (id=1078): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socketcall$auto(0x8000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0xae60, 0x10000000000402) syz_clone(0x2000080, &(0x7f00000003c0)="5cdfb7b7fd1915f7112ba0f9886cf7120888e23b5bd5ce77ffacedc079e9969e58bb1b975e78f6c516bfde8fc9922f989b69bd99e502900a871e3e1aab3aa1b4c3018bb79a12a99d46097088898cd14ae5988ebf56d5549ab8e1828f63c8a1dce28a924570e652c89af90fc6623b3ed7491a9603c48f477144fdc59220bbdb7cbb", 0x81, 0x0, 0x0, 0x0) ioctl$auto(0x3, 0xae41, r0) madvise$auto(0x0, 0x2000040080000003, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xc4\xe2q;KzH\n\xc4\x9b\xf0\xa0p\xa7fFn\xf8\xd18|\x1b\xb1cO\xaa\x14\xbf_5a\xcb\x97\x01)V\xa5\x1b\xa6Ug\x0e\x16\x1e\xd9\xa1\xa3\x1bi\x9a\x8a4\xf3\xfeX/$\xf5\x9c\xf8vp\x9b\xbe\xccE\x1d\x8e\xcc\xacJ\x7fQ3\xd2', 0x100000a3d9) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000014}, 0x400c810) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x42801, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000040)={0x1, '\x00 \x00', 0xc5, 0xffffffff, 0xeda, 0xbb1b, "011586f1c8b112f0059652a7b9638fe9"}) 11.215247239s ago: executing program 4 (id=1081): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC1D1c\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r0, 0x0, 0x7fb, 0x400) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x40100000001) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x8, 0x8fd6, 0x8, 0x3, 0x15f4da09, 0x3, 0x3, 0x62, 0x5, 0x3, 0x1, 0x9, 0x4, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3dc) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xb, 0xd, 0x1, 0x3, 0x3, 0x8, 0x3, 0x3, 0x1ff, 0x8000001f, 0x8, 0x6d3e, 0x9, 0x4, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) inotify_init1$auto(0x403) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.1/usb2/removable\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) readv$auto(0x3, 0x0, 0x1) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x2, 0xa, 0x0) 7.541025744s ago: executing program 4 (id=1085): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyu3\x00', 0x1, 0x0) r1 = socket(0xa, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) bind$auto(0x3, 0x0, 0x6e) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) getsockopt$auto(r1, 0x84, 0x74, 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, &(0x7f0000000080)) 5.829233416s ago: executing program 4 (id=1089): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0xf51, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x1fe, 0xd) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r1 = socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x4, 0xde, 0x9b7e, 0x2, 0x1) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(0xffffffffffffffff, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(r1, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) pread64$auto(r2, 0x0, 0x7ff, 0x400) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f0000000700)={[0x1ff, 0x7, 0xd, 0x2d, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7, 0x40, 0xfffffffffffffff9, 0x1, 0x9, 0x1, 0xffffffdffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) timer_create$auto_CLOCK_TAI(0xb, &(0x7f0000000580)={@sival_ptr=&(0x7f0000000600)="0ad7476fc7e44fe172fb67b04b4dc10e15f06f2650baa9ef853b107609f071abb57f9f2b7672f78dbd0e868d7d74a78dd79743c533c66384d0015d7154e1c8120a78e406fc9a7c0d6d6571d2f09bc2fc79d4b8dc192a4a2b38223aa265f8e2ffb6f08736a7cb61c2232f10577b38e0126e666a3a8fe92c183f04880feee4b279cc1a535b3d24cffe3b2b71524947a617ce07374e762a585d96b3daf58264fbd228aa232c72b052e16df6b4f788d803d0be333e226f5bc194fa76f3bae0486a07e84d385a6c69a5ad2327339376fff0b7c96163544a2799290b0259f781fe10c541a6f9", @inferred=r0, 0xfffffffa}, &(0x7f00000005c0)=0x3) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$auto_regulator_summary_fops_(0xffffffffffffffff, &(0x7f0000000400)=""/17, 0x11) r5 = inotify_init1$auto(0x3fe) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000d80)=ANY=[], 0x390}, 0x1, 0x0, 0x0, 0x20018810}, 0x44040) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x20000, 0x0) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=@bpf_attr_4={0x2, r5, 0x2, r3}, 0x10001) ioctl$auto(r6, 0xab04, 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="8c020000", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fcdbdf251d0000004301188014002100fc0200000000000000000000000000003600bd0068f76224d76fcedd858a40d2e4daac3a906310b4882866e15a38c714c9301ed5c7bc670cf749f0cdf4d958ac4a46c983cc4f0000018afb34431813703fe999e41360aa2f78624f27b11e5a80a7355d38b6a4c7eca4adda34ea7b2c60ffec2b34de68f8ff238429af8ce6285ab588c4cbe1d1b9824702b1b3566b51eb0437240289d7fdcbf3ef53cadf457e49070342cb80a88f3f14dca7b272e3137c4e10ce76365024e974704d9a5595511d1f39495f2163c2230d709bd2265fdf2d1186082017d28e03ab27269c84a9209ad6f713d57101963260539b122401c9b87400fb6d4b3bc1372583932e221d8f717a5356013ff43bd8a3750baecad4d4d3deafe0a6cf783bfeaedc61d5f02142c3cd9d90bd596f2170c6488482f92288f2c3490acdd285c57f422cb30008000300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="00000005043891ec44d3d7"], 0x28c}, 0x1, 0x0, 0x0, 0x20040100}, 0x1) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x18000000000fff4, 0x400000004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x0) 5.484384128s ago: executing program 5 (id=1090): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x2, 0x1) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x2ab01, 0x0) ioctl$auto_USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, 0x0) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x40, 0x83) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x400000000008) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="810b25bd7080fbdbdf2501"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) writev$auto(0x3, 0x0, 0x8009) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x8001) fsopen$auto(0x0, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x5, 0x5, 0x8, 0xd, 0xe13, 0x81, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0x8627, 0x9, 0x20000800001, 0x3, 0x5, 0x0, 0x6, 0x7, 0x0, 0xffffffee, 0x2a17, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x209, 0x81) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) 4.375903144s ago: executing program 41 (id=1072): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = creat$auto(&(0x7f0000000000)='./file0\x00', 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) keyctl$auto(0x2000000000000017, 0x8000, 0x2d, 0xc4, 0x20803) mmap$auto(0x0, 0x20009, 0x7, 0x19, 0x401, 0x1) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x202, 0x0) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000004c0), 0x2202, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_WRITE(r1, 0x40085503, 0x0) pwritev2$auto(r0, &(0x7f00000000c0)={0x0, 0x8}, 0x100, 0x2, 0x9, 0x43) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x49f, 0x9b72, 0x2, 0x8000000000008000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x4604, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) write$auto(r2, 0x0, 0x100082) ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, 0x0) pwrite64$auto(r2, 0x0, 0x8, 0x200000000000003) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x2, 0xa) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ppoll$auto(0x0, 0x7f, 0x0, 0x0, 0x8) membarrier$auto_MEMBARRIER_CMD_QUERY(0x0, 0x3, 0xd) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) r3 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r3, 0x65, 0x5, 0x0, 0x4) madvise$auto(0x0, 0x2000040080000004, 0x0) 4.055517671s ago: executing program 5 (id=1092): openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/stat\x00', 0x200000, 0x0) (async) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x8402, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x11, 0x80003, 0x300) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', &(0x7f0000000200)={0x0, 0x200}, 0x0, 0x1001) (async) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) (async) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fedbdf25030000"], 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0x1f, 0x3, 0x3) ioctl$auto(r2, 0x8903, 0x8) (async) openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) mmap$auto(0x0, 0x0, 0x7, 0xeb1, 0x404, 0x100) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x752502, 0x0) (async) mmap$auto(0x66e204ee, 0x4, 0xdf, 0x9b71, 0x2, 0x8014) (async) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x2a8d42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f00000001c0)) read$auto(r3, 0x0, 0x1000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) close_range$auto(0x2, 0x8, 0x0) (async) symlink$auto(&(0x7f0000000040)='./file0\x00', 0x0) (async) socket(0x11, 0x3, 0x4007) socket(0x2, 0x1, 0x0) getsockopt$auto(0x3, 0x6, 0xb, 0x0, 0x0) (async) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 2.688264384s ago: executing program 5 (id=1093): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf251c"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x1ff00, 0x0, 0x0, 0x0, 0x9) sysfs$auto(0x2, 0x4a, 0x0) exit$auto(0x7) r0 = socket(0x2, 0x801, 0x94) getsockopt$auto(r0, 0x81, 0x6e, 0x0, 0x0) 2.63749029s ago: executing program 4 (id=1094): r0 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f00000003c0), 0x1012c0, 0x0) write$auto_safesetid_uid_file_fops_securityfs(r0, &(0x7f0000000b40)="33e06908f7cef2ef9652d5e3d0f91cdb9aa7fcd4f56b3ae50e2e7a3fce17ad39061182af048f047adfa552adf5a64941ae9a2564ce32560a", 0x38) setsockopt$auto(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) (async) r1 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0xfffffffffffffffd, 0x2) socket(0x21, 0x1, 0xb49) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x3, 0x8000000000000000, 0x948b, 0x3, 0x15f4da0a, 0x4000000000008, 0x6, 0x61, 0x8, 0x7, 0x1, 0xb, 0x100, 0x1b]}, 0x0) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) (async) ioctl$auto_XFS_IOC_ALLOCSP64(r1, 0x40305824, &(0x7f0000000080)={0x1ff, 0x1000, 0xfffffffffffffff7, 0x1, 0x9}) (async) setdomainname$auto(0xfffffffffffffffc, 0x0) (async) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) close_range$auto(0x0, 0x2000000003, 0x0) (async) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0xa, 0x5, 0x0) setsockopt$auto(0x2, 0x1, 0xa, &(0x7f0000000000)='\x00', 0x40) (async) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card2\x00', 0x0, 0x0) ioctl$auto(r4, 0x64c8, 0xffffffffffffffff) (async) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0xffffff81, 0x401bf, 0x5, 0x410003c, 0x1, 0x1ffde, 0x7, 0xdcb, 0xfffffffffffffffe, 0x9, 0x3, 0x6, 0x3, 0x7, 0x9, 0xa, 0x10005, 0x84, 0x4, 0x2, 0x7, 0x1ffc, 0x203, 0xfffffffc, 0x20e9d17e, 0x408300000000000, 0xdb, 0x0, 0x80000000, 0xf04, [0xffffffff7fffffff, 0x0, 0x2, 0xfffffffffffffffd, 0xffffffffffffffff, 0xfffffffffffffffe, 0x6, 0x20000000000007, 0x0, 0x1ff, 0x0, 0x0, 0x4, 0x40000000005, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, 0xff5b, 0xc72, 0x0, 0x4000006, 0x0, 0x55acf973, 0x2, 0x1, 0x0, 0x0, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1]}, 0x2, 0xd) (async) ioctl$auto_EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x4) write$auto(r3, &(0x7f0000000380)='/dev/input/event1\x00', 0x10001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0x28, 0x4b7) socket(0x10, 0x2, 0xffffffff) (async) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x109500, 0x0) pread64$auto(r5, 0x0, 0x8, 0xffff) madvise$auto(0xffdffffffffffffc, 0x200006, 0x0) (async) setresuid$auto(0x2, 0x7, 0x8080) 1.739319396s ago: executing program 42 (id=1074): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) pivot_root$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000040)='.\x00') mprotect$auto(0x1ffff000, 0x8000000000000007, 0x100000c) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0xc, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0) read$auto(0x3, 0x0, 0x80) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/031/001\x00', 0x208000, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0xc0802, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/008/001\x00', 0x2b0300, 0x0) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto(r1, 0x5522, r2) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000080)='7\x00\\\xa0\x04\x04\x00\x00\x00\xfa\b\x1c\xc7k', 0x9) r4 = openat$auto(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x5) mmap$auto(0x1, 0x4, 0xff, 0x353, r4, 0x7fffffff) semctl$auto(0x81bf, 0x4, 0x101, 0x8e) socket(0x21, 0x2, 0x2) ioctl$auto(r1, 0x5522, 0xffffffffffffffff) 1.700659565s ago: executing program 4 (id=1096): r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948f, 0x803, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000004440)) ioctl$auto_VHOST_SET_LOG_FD2(r0, 0x4004af07, &(0x7f00000001c0)=r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r4, 0x8000) r5 = open_by_handle_at$auto(r2, &(0x7f00000002c0)={0x1b, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b9a"}, 0x7d) setsockopt$auto(r5, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040840}, 0x200000c0) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001b00)=ANY=[@ANYBLOB="20010000", @ANYRES16=r7, @ANYBLOB="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"], 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0x140) sendmsg$auto_NL80211_CMD_GET_KEY(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRESDEC=r3, @ANYRESOCT=r6], 0x1c}, 0x1, 0x0, 0x0, 0x21}, 0x51) read$auto(r6, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) read$auto_state_fops_(r0, &(0x7f0000000300)=""/2, 0x2) socket(0x2b, 0x1, 0x0) read$auto_ext4_dir_operations_ext4(r2, &(0x7f00000003c0)=""/6, 0x6) 1.638237781s ago: executing program 5 (id=1097): openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)\x00', 0x40140, 0x12d) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)\x00', 0x40140, 0x12d) socket(0x10, 0x2, 0x0) (async) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@THERMAL_GENL_ATTR_TZ_CDEV_WEIGHT={0x8, 0xc, 0x6}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1b, 0x100}, @THERMAL_GENL_ATTR_TZ_TRIP_HYST={0x8, 0x9, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x810) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fb3d89cb809172a3320003008000400088"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', &(0x7f0000000300)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)') rename$auto(&(0x7f00000003c0)='v#\xd5\xaf>=\x14\xe6%\xf7\x8a\x8d\x9a\xae\x1a\xd6\xa8\xb8\x1d\xf5(\xb0\x1f\xbd\xcbV\n\"\xe3V\xfeP\xceN\xb2\xc32\xaf\xcc\x80\xfa\xf0\xd4\xd9|\xfe\x03y\xd16\x17\x99R\xca\xe5\xf4\xb4T\xfcv\xfc\xe6\x9cv\a\x00\xc2a\x16\xd1\x8a\x80\x90\x87\xa5s\x10\xed\x93\xd4\x15=\xc0\x1f\x0e\xb0\x18v}\x03!\xf0I\xe3}\x90\x9b\x92[\xfe2<7\xd3\x81\x9a~\xcd\r\x19\x9e\x10(5\xfd\x8b\x82\xd4\xc85\xc3\x93t\t\xd0\x9d\xca^n\xf3\xcb>\x1bO\xcej\xe0\xef\xf2\xd7\xc2}\x18\xd9`AO\x95<\x9aH\vu\xae\xd4\xea\x12\xb8\xd1\n\x01\x83r\x85\xbf*\x18\xa7 S:R\x14\x89Z3\x94\x8bP)', &(0x7f0000000000)=':-.\x00') 1.196285338s ago: executing program 5 (id=1098): socket(0xa, 0xa, 0x1d) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/tunl0/queues/rx-0/rps_flow_cnt\x00', 0x2462, 0x0) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x80000001, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setuid$auto(0xe) bpf$auto(0x8, &(0x7f00000001c0)=@bpf_attr_4={0x9f2, 0x4, 0x80000001}, 0x400006f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0xffffffffffffffff, 0xffffffffffff0006, 0x18) mmap$auto(0x0, 0x400008, 0x7fffffffffffffff, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x3cda82, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x109b02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto(0x3, 0x400c4d05, 0x5) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/lowpan0/mtu\x00', 0x183841, 0x0) write$auto(r3, &(0x7f0000000300)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\xa9\x1a&\x19\x8a9\x82\xf0\x83\f\xf7\xeb', 0x4) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x1000000007, 0x100000001, 0x1, 0x6, 0x1ff, 0x6, 0x5c, 0xadae, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) 0s ago: executing program 5 (id=1099): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cec14\x00', 0x6850c3b58dcf4570, 0x0) poll$auto(&(0x7f0000000c00)={r1, 0x200, 0x9}, 0x1, 0x8) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = fcntl$getown(r0, 0x9) prctl$auto(0x3e, 0x1, r3, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) getpid() openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ubifs/chk_orphans\x00', 0x426a2, 0x0) write$auto_dfs_global_fops_debug(r4, &(0x7f0000000d80)='0', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r5 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(r5, 0x8, 0x0) open(0x0, 0x1676c1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) set_mempolicy$auto(0x1, &(0x7f00000000c0)=0x1, 0x83) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r6 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pwritev$auto(r6, 0x0, 0x3, 0x1, 0x3ff) bpf$auto(0x20000000, 0x0, 0x3) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/neigh/macsec0/delay_first_probe_time\x00', 0x88042, 0x0) poll$auto(&(0x7f00000001c0)={r7, 0x0, 0x5}, 0x5, 0x49) kernel console output (not intermixed with test programs): 2] Call Trace: [ 295.134710][ T8452] [ 295.134718][ T8452] dump_stack_lvl+0x16c/0x1f0 [ 295.134755][ T8452] should_fail_ex+0x512/0x640 [ 295.134788][ T8452] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 295.134821][ T8452] should_failslab+0xc2/0x120 [ 295.134852][ T8452] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 295.134880][ T8452] ? __proc_create+0xc3/0x8e0 [ 295.134914][ T8452] ? __proc_create+0x2ce/0x8e0 [ 295.134952][ T8452] __proc_create+0x2ce/0x8e0 [ 295.134988][ T8452] ? __pfx___proc_create+0x10/0x10 [ 295.135027][ T8452] ? __pfx___netlink_kernel_create+0x10/0x10 [ 295.135060][ T8452] ? fib4_semantics_init+0x25/0x100 [ 295.135092][ T8452] proc_create_reg+0x7d/0x180 [ 295.135131][ T8452] proc_create_seq_private+0x8e/0x180 [ 295.135171][ T8452] ? __pfx_proc_create_seq_private+0x10/0x10 [ 295.135209][ T8452] ? __pfx_nl_fib_input+0x10/0x10 [ 295.135249][ T8452] ? __pfx_ip_rt_do_proc_init+0x10/0x10 [ 295.135287][ T8452] ip_rt_do_proc_init+0x57/0x1b0 [ 295.135324][ T8452] ops_init+0x1e2/0x5f0 [ 295.135365][ T8452] setup_net+0x10f/0x380 [ 295.135396][ T8452] ? lockdep_init_map_type+0x5c/0x280 [ 295.135431][ T8452] ? __pfx_setup_net+0x10/0x10 [ 295.135466][ T8452] ? debug_mutex_init+0x37/0x70 [ 295.135493][ T8452] copy_net_ns+0x2a6/0x5f0 [ 295.135533][ T8452] create_new_namespaces+0x3ea/0xa90 [ 295.135567][ T8452] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 295.135597][ T8452] ksys_unshare+0x45b/0xa40 [ 295.135631][ T8452] ? __pfx_ksys_unshare+0x10/0x10 [ 295.135670][ T8452] ? xfd_validate_state+0x61/0x180 [ 295.135715][ T8452] __x64_sys_unshare+0x31/0x40 [ 295.135748][ T8452] do_syscall_64+0xcd/0x490 [ 295.135783][ T8452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.135806][ T8452] RIP: 0033:0x7ff8a9b8ebe9 [ 295.135825][ T8452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.135847][ T8452] RSP: 002b:00007ff8aa9c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 295.135869][ T8452] RAX: ffffffffffffffda RBX: 00007ff8a9db5fa0 RCX: 00007ff8a9b8ebe9 [ 295.135884][ T8452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 295.135898][ T8452] RBP: 00007ff8a9c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 295.135911][ T8452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.135925][ T8452] R13: 00007ff8a9db6038 R14: 00007ff8a9db5fa0 R15: 00007ffe4070d1f8 [ 295.135955][ T8452] [ 298.173315][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.403'. [ 300.230942][ T8506] block nbd0: not configured, cannot reconfigure [ 300.297291][ T8507] block nbd0: not configured, cannot reconfigure [ 300.555478][ T8518] vhci_hcd: invalid port number 16 [ 300.619163][ T8518] vhci_hcd: invalid port number 16 [ 301.754151][ T8551] Unable to find swap-space signature [ 301.763551][ T8548] device-mapper: ioctl: Invalid ioctl structure: name , dev b00010007 [ 302.834561][ T8588] Console: switching to colour VGA+ 80x25 [ 303.042483][ T8598] futex_wake_op: syz.5.422 tries to shift op by -2048; fix this program [ 303.153139][ T8588] Console: switching to colour frame buffer device 128x48 [ 303.458809][ T8602] FAULT_INJECTION: forcing a failure. [ 303.458809][ T8602] name failslab, interval 1, probability 0, space 0, times 0 [ 303.458855][ T8602] CPU: 1 UID: 0 PID: 8602 Comm: syz.2.423 Not tainted syzkaller #0 PREEMPT(full) [ 303.458882][ T8602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 303.458895][ T8602] Call Trace: [ 303.458903][ T8602] [ 303.458911][ T8602] dump_stack_lvl+0x16c/0x1f0 [ 303.458946][ T8602] should_fail_ex+0x512/0x640 [ 303.458985][ T8602] ? fs_reclaim_acquire+0xae/0x150 [ 303.459023][ T8602] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 303.459057][ T8602] should_failslab+0xc2/0x120 [ 303.459088][ T8602] __kmalloc_noprof+0xd2/0x510 [ 303.459121][ T8602] tomoyo_realpath_from_path+0xc2/0x6e0 [ 303.459158][ T8602] ? tomoyo_profile+0x47/0x60 [ 303.459181][ T8602] tomoyo_path_number_perm+0x245/0x580 [ 303.459208][ T8602] ? tomoyo_path_number_perm+0x237/0x580 [ 303.459239][ T8602] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 303.459297][ T8602] ? find_held_lock+0x2b/0x80 [ 303.459320][ T8602] ? hook_file_ioctl_common+0x145/0x410 [ 303.459357][ T8602] ? __fget_files+0x20e/0x3c0 [ 303.459387][ T8602] security_file_ioctl+0x9b/0x240 [ 303.459418][ T8602] __x64_sys_ioctl+0xb7/0x210 [ 303.459457][ T8602] do_syscall_64+0xcd/0x490 [ 303.459491][ T8602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.459514][ T8602] RIP: 0033:0x7f312a98ebe9 [ 303.459532][ T8602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.459554][ T8602] RSP: 002b:00007f312b7cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.459575][ T8602] RAX: ffffffffffffffda RBX: 00007f312abb5fa0 RCX: 00007f312a98ebe9 [ 303.459590][ T8602] RDX: 0000000000000000 RSI: 000000000000127b RDI: 0000000000000005 [ 303.459603][ T8602] RBP: 00007f312aa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 303.459617][ T8602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.459630][ T8602] R13: 00007f312abb6038 R14: 00007f312abb5fa0 R15: 00007fff08fe5dd8 [ 303.459659][ T8602] [ 303.459667][ T8602] ERROR: Out of memory at tomoyo_realpath_from_path. [ 304.809175][ T8619] FAULT_INJECTION: forcing a failure. [ 304.809175][ T8619] name failslab, interval 1, probability 0, space 0, times 0 [ 304.809238][ T8619] CPU: 1 UID: 0 PID: 8619 Comm: syz.5.426 Not tainted syzkaller #0 PREEMPT(full) [ 304.809264][ T8619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 304.809278][ T8619] Call Trace: [ 304.809285][ T8619] [ 304.809297][ T8619] dump_stack_lvl+0x16c/0x1f0 [ 304.809332][ T8619] should_fail_ex+0x512/0x640 [ 304.809365][ T8619] ? __kmalloc_noprof+0xbf/0x510 [ 304.809395][ T8619] ? ops_init+0x77/0x5f0 [ 304.809425][ T8619] should_failslab+0xc2/0x120 [ 304.809456][ T8619] __kmalloc_noprof+0xd2/0x510 [ 304.809482][ T8619] ? class_create_file_ns+0x4c/0x60 [ 304.809511][ T8619] ops_init+0x77/0x5f0 [ 304.809546][ T8619] setup_net+0x10f/0x380 [ 304.809577][ T8619] ? lockdep_init_map_type+0x5c/0x280 [ 304.809611][ T8619] ? __pfx_setup_net+0x10/0x10 [ 304.809645][ T8619] ? debug_mutex_init+0x37/0x70 [ 304.809670][ T8619] copy_net_ns+0x2a6/0x5f0 [ 304.809710][ T8619] create_new_namespaces+0x3ea/0xa90 [ 304.809743][ T8619] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 304.809773][ T8619] ksys_unshare+0x45b/0xa40 [ 304.809806][ T8619] ? __pfx_ksys_unshare+0x10/0x10 [ 304.809839][ T8619] ? xfd_validate_state+0x61/0x180 [ 304.809888][ T8619] __x64_sys_unshare+0x31/0x40 [ 304.809919][ T8619] do_syscall_64+0xcd/0x490 [ 304.809953][ T8619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.809976][ T8619] RIP: 0033:0x7fc30958ebe9 [ 304.809994][ T8619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.810015][ T8619] RSP: 002b:00007fc30a36b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 304.810036][ T8619] RAX: ffffffffffffffda RBX: 00007fc3097b6090 RCX: 00007fc30958ebe9 [ 304.810051][ T8619] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 304.810064][ T8619] RBP: 00007fc309611e19 R08: 0000000000000000 R09: 0000000000000000 [ 304.810078][ T8619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.810091][ T8619] R13: 00007fc3097b6128 R14: 00007fc3097b6090 R15: 00007ffe5575d118 [ 304.810120][ T8619] [ 305.748322][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.836355][ T5877] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 306.104776][ T8629] tty tty1: ldisc open failed (-12), clearing slot 0 [ 307.106873][ T8649] random: crng reseeded on system resumption [ 307.917343][ T5868] Bluetooth: hci1: command 0x0c1a tx timeout [ 310.244514][ T8674] futex_wake_op: syz.5.435 tries to shift op by -2048; fix this program [ 310.603628][ T8674] futex_wake_op: syz.5.435 tries to shift op by -2048; fix this program [ 311.979176][ T8685] binder: 8684:8685 ioctl c0306201 200000000000 returned -14 [ 312.281318][ T8691] netlink: 20 bytes leftover after parsing attributes in process `syz.0.439'. [ 313.976356][ T8715] ubi0: attaching mtd0 [ 314.043395][ T8715] ubi0: scanning is finished [ 314.259393][ T8715] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 314.867641][ T8715] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 315.646345][ T8729] vhci_hcd: invalid port number 21 [ 315.786791][ T8737] capability: warning: `syz.4.448' uses 32-bit capabilities (legacy support in use) syzkaller syzkaller login: [ 317.052284][ T8761] kernel read not supported for file /¾ò‚çgµîMQ¢_g¿ úò_N°{ùµ7vîGÙl¿†q w–Ùé¨áðÇÄĉuƒè}½O‘ÁUVW.¶­uw.ì`OÁç:ÉKÍdY•Ñ®Á›–ŸajÒüü7¯ÊnöÀwKÎçQ®ÉHgïÚ[壣%'Ï–X:DktÞ€ÝX‘ˆ¡ Ãñþ[“$O8 b´’ô¼Å¹˜9üFìÜ@ÝÚeMàUÈ;õç$Q8Ò‡ÝÅÅèµµ¸ßDÐètŠSª¾ªºž^0øYõJpuº˜ (pid: 8761 comm: syz.0.453) [ 317.125603][ T30] audit: type=1800 audit(4294967299.910:7): pid=8761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.453" name=BEF282E71467B5EE4D5113A25F67BF09FAF25F4EB07BF9B53776EE47D96CBF8671207796D9E9A8E1F0C71F1EC4C4897583E87DBD7F4F91C15556572EB6AD047502772EEC604FC10E15E73AC91B4BCD64590395D1AEC19B969F616AD2FCFC1F37AFCA6EF6C0774BCEE751AEC9486701EFDA5BE5A3A325278FCF96583A04446B747FDE8001DD589188A109C3F1FE5B93244F382062B492F4BCC5B99839FC46ECDC40DDDA654DE055C83BF5E7245138D287DDC59DC5E8B5B5B8DF44D0E8748A53AABEAABA9E5E301AF859F54A700875BA98 dev="mqueue" ino=22189 res=0 errno=0 [ 318.307240][ T8782] netlink: 'syz.0.457': attribute type 1 has an invalid length. [ 318.428559][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.457'. [ 322.208784][ T8841] random: crng reseeded on system resumption [ 322.988337][ T8854] input: f¬ as /devices/virtual/input/input19 [ 327.687213][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.693547][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.034102][ T8930] nbd: failed to add new device [ 329.771873][ T8946] FAULT_INJECTION: forcing a failure. [ 329.771873][ T8946] name fail_futex, interval 1, probability 0, space 0, times 0 [ 329.785686][ T8945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.482'. [ 329.890698][ T8945] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 329.978874][ T8946] CPU: 1 UID: 0 PID: 8946 Comm: syz.2.483 Not tainted syzkaller #0 PREEMPT(full) [ 329.978907][ T8946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 329.978920][ T8946] Call Trace: [ 329.978928][ T8946] [ 329.978938][ T8946] dump_stack_lvl+0x16c/0x1f0 [ 329.978974][ T8946] should_fail_ex+0x512/0x640 [ 329.979013][ T8946] get_futex_key+0x1d0/0x1560 [ 329.979046][ T8946] ? __pfx_get_futex_key+0x10/0x10 [ 329.979084][ T8946] futex_wake+0xea/0x530 [ 329.979116][ T8946] ? kasan_quarantine_put+0x10a/0x240 [ 329.979148][ T8946] ? __pfx_futex_wake+0x10/0x10 [ 329.979191][ T8946] ? getname_flags.part.0+0x1c5/0x550 [ 329.979232][ T8946] do_futex+0x1e3/0x350 [ 329.979262][ T8946] ? __pfx_do_futex+0x10/0x10 [ 329.979301][ T8946] __x64_sys_futex+0x1e0/0x4c0 [ 329.979333][ T8946] ? __x64_sys_openat+0x174/0x210 [ 329.979372][ T8946] ? __pfx___x64_sys_futex+0x10/0x10 [ 329.979414][ T8946] do_syscall_64+0xcd/0x490 [ 329.979448][ T8946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.979472][ T8946] RIP: 0033:0x7f312a98ebe9 [ 329.979490][ T8946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.979513][ T8946] RSP: 002b:00007f312b7aa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 329.979534][ T8946] RAX: ffffffffffffffda RBX: 00007f312abb6098 RCX: 00007f312a98ebe9 [ 329.979549][ T8946] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f312abb609c [ 329.979564][ T8946] RBP: 00007f312abb6090 R08: 00007f312b7cc000 R09: 0000000000000000 [ 329.979578][ T8946] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 329.979592][ T8946] R13: 00007f312abb6128 R14: 00007fff08fe5cf0 R15: 00007fff08fe5dd8 [ 329.979621][ T8946] [ 330.160624][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.678603][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.486'. [ 333.676653][ T8981] block nbd9: NBD_DISCONNECT [ 334.755704][ T8999] netlink: 'syz.5.492': attribute type 2 has an invalid length. [ 334.818836][ T8999] netlink: 8 bytes leftover after parsing attributes in process `syz.5.492'. [ 336.982611][ T9032] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 341.196860][ T9108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.514'. [ 341.225103][ T9114] kAFS: Invalid Command on /proc/fs/afs/cells file [ 341.532669][ T9108] ipvlan0: entered allmulticast mode [ 341.599411][ T9108] veth0_vlan: entered allmulticast mode syzkaller syzkaller login: [ 343.409392][ T9147] bond0: option all_slaves_active: invalid value () [ 343.750477][ T9150] i2c i2c-0: new_device: Instantiated device card: at 0x01 [ 344.400689][ T9155] : entered promiscuous mode [ 345.988053][ T9186] syz.4.528 (9186): attempted to duplicate a private mapping with mremap. This is not supported. [ 346.093104][ T9196] ucma_write: process 375 (syz.5.531) changed security contexts after opening file descriptor, this is not allowed. [ 346.528093][ T9204] FAULT_INJECTION: forcing a failure. [ 346.528093][ T9204] name failslab, interval 1, probability 0, space 0, times 0 [ 346.629488][ T9204] CPU: 1 UID: 0 PID: 9204 Comm: syz.2.530 Not tainted syzkaller #0 PREEMPT(full) [ 346.629520][ T9204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 346.629535][ T9204] Call Trace: [ 346.629543][ T9204] [ 346.629551][ T9204] dump_stack_lvl+0x16c/0x1f0 [ 346.629587][ T9204] should_fail_ex+0x512/0x640 [ 346.629622][ T9204] ? fs_reclaim_acquire+0xae/0x150 [ 346.629661][ T9204] should_failslab+0xc2/0x120 [ 346.629693][ T9204] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 346.629722][ T9204] ? security_inode_alloc+0x3b/0x2b0 [ 346.629754][ T9204] security_inode_alloc+0x3b/0x2b0 [ 346.629782][ T9204] inode_init_always_gfp+0xce4/0x1030 [ 346.629814][ T9204] alloc_inode+0x86/0x240 [ 346.629849][ T9204] new_inode+0x22/0x1c0 [ 346.629890][ T9204] __debugfs_create_file+0x11c/0x6b0 [ 346.629923][ T9204] debugfs_create_file_full+0x41/0x60 [ 346.629955][ T9204] ref_tracker_dir_debugfs+0x19d/0x290 [ 346.629992][ T9204] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 346.630055][ T9204] ? lockdep_init_map_type+0x5c/0x280 [ 346.630093][ T9204] preinit_net+0x47f/0x8f0 [ 346.630128][ T9204] copy_net_ns+0x1da/0x5f0 [ 346.630178][ T9204] create_new_namespaces+0x3ea/0xa90 [ 346.630213][ T9204] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 346.630243][ T9204] ksys_unshare+0x45b/0xa40 [ 346.630278][ T9204] ? __pfx_ksys_unshare+0x10/0x10 [ 346.630311][ T9204] ? xfd_validate_state+0x61/0x180 [ 346.630364][ T9204] __x64_sys_unshare+0x31/0x40 [ 346.630396][ T9204] do_syscall_64+0xcd/0x490 [ 346.630431][ T9204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.630455][ T9204] RIP: 0033:0x7f312a98ebe9 [ 346.630474][ T9204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.630496][ T9204] RSP: 002b:00007f312b7aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 346.630518][ T9204] RAX: ffffffffffffffda RBX: 00007f312abb6090 RCX: 00007f312a98ebe9 [ 346.630533][ T9204] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 346.630547][ T9204] RBP: 00007f312aa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 346.630560][ T9204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.630574][ T9204] R13: 00007f312abb6128 R14: 00007f312abb6090 R15: 00007fff08fe5dd8 [ 346.630603][ T9204] [ 346.858601][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.977145][ T9204] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff88805fc2ca68' [ 347.476895][ T9221] netlink: 124 bytes leftover after parsing attributes in process `syz.5.536'. [ 348.365799][ T30] audit: type=1800 audit(4294967331.150:8): pid=9244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.537" name="members" dev="configfs" ino=24609 res=0 errno=0 [ 349.090889][ T9253] FAULT_INJECTION: forcing a failure. [ 349.090889][ T9253] name failslab, interval 1, probability 0, space 0, times 0 [ 349.162956][ T9253] CPU: 1 UID: 0 PID: 9253 Comm: syz.2.538 Not tainted syzkaller #0 PREEMPT(full) [ 349.162987][ T9253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 349.163000][ T9253] Call Trace: [ 349.163007][ T9253] [ 349.163016][ T9253] dump_stack_lvl+0x16c/0x1f0 [ 349.163051][ T9253] should_fail_ex+0x512/0x640 [ 349.163083][ T9253] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 349.163113][ T9253] should_failslab+0xc2/0x120 [ 349.163143][ T9253] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 349.163169][ T9253] ? __pfx_acct_collect+0x10/0x10 [ 349.163203][ T9253] ? taskstats_exit+0x654/0xbe0 [ 349.163240][ T9253] taskstats_exit+0x654/0xbe0 [ 349.163274][ T9253] ? __pfx_taskstats_exit+0x10/0x10 [ 349.163314][ T9253] do_exit+0x5dc/0x2bf0 [ 349.163352][ T9253] ? __pfx_do_exit+0x10/0x10 [ 349.163389][ T9253] ? do_raw_spin_lock+0x12c/0x2b0 [ 349.163425][ T9253] ? find_held_lock+0x2b/0x80 [ 349.163451][ T9253] do_group_exit+0xd3/0x2a0 [ 349.163486][ T9253] get_signal+0x2673/0x26d0 [ 349.163523][ T9253] ? __pfx_get_signal+0x10/0x10 [ 349.163549][ T9253] ? do_futex+0x122/0x350 [ 349.163578][ T9253] ? __pfx_do_futex+0x10/0x10 [ 349.163610][ T9253] arch_do_signal_or_restart+0x8f/0x790 [ 349.163642][ T9253] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 349.163680][ T9253] ? xfd_validate_state+0x61/0x180 [ 349.163713][ T9253] ? __pfx___do_sys_close_range+0x10/0x10 [ 349.163748][ T9253] exit_to_user_mode_loop+0x84/0x110 [ 349.163783][ T9253] do_syscall_64+0x3f6/0x490 [ 349.163817][ T9253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.163841][ T9253] RIP: 0033:0x7f312a98ebe9 [ 349.163858][ T9253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.163882][ T9253] RSP: 002b:00007f312b7890e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 349.163903][ T9253] RAX: fffffffffffffe00 RBX: 00007f312abb6188 RCX: 00007f312a98ebe9 [ 349.163919][ T9253] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f312abb6188 [ 349.163933][ T9253] RBP: 00007f312abb6180 R08: 0000000000000000 R09: 0000000000000000 [ 349.163947][ T9253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.163960][ T9253] R13: 00007f312abb6218 R14: 00007fff08fe5cf0 R15: 00007fff08fe5dd8 [ 349.163989][ T9253] [ 351.394807][ T30] audit: type=1800 audit(4294967334.180:9): pid=9274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.544" name="features" dev="configfs" ino=24720 res=0 errno=0 [ 351.621752][ T9280] sd 0:0:1:0: PR command failed: 1026 [ 351.649501][ T9280] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 351.684197][ T9280] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 351.698720][ T9273] kafs: addr_prefs: Too many elements in string [ 351.732323][ T9280] sd 0:0:1:0: PR command failed: 1026 [ 351.752776][ T9280] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 351.791833][ T9280] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 351.830315][ T9280] sd 0:0:1:0: PR command failed: 1026 [ 351.874850][ T9280] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 351.908041][ T9280] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 351.964297][ T9280] sd 0:0:1:0: PR command failed: 1026 [ 351.998914][ T9280] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 352.021464][ T9280] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 352.083413][ T9280] sd 0:0:1:0: PR command failed: 1026 [ 352.108763][ T9280] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 352.148576][ T9280] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 352.196699][ T9280] sd 0:0:1:0: PR command failed: 1026 [ 352.215256][ T9280] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 352.246604][ T9280] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 352.312377][ T9280] sd 0:0:1:0: PR command failed: 1026 [ 352.333790][ T9280] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 352.364687][ T9280] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 352.392634][ T9280] sd 0:0:1:0: PR command failed: 1026 [ 352.434710][ T9280] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 352.495192][ T9280] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 354.082749][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.551'. [ 355.165494][ T9318] netlink: 'syz.2.553': attribute type 11 has an invalid length. [ 355.216326][ T9318] netlink: 'syz.2.553': attribute type 11 has an invalid length. [ 356.845163][ T9334] delete_channel: no stack [ 358.932053][ T9353] perf: Dynamic interrupt throttling disabled, can hang your system! [ 359.450692][ T9361] blktrace: Concurrent blktraces are not allowed on loop2 [ 359.545895][ T9361] vmstat_refresh: nr_hugetlb -2048 [ 360.964571][ T9364] netlink: 25520 bytes leftover after parsing attributes in process `syz.4.564'. [ 361.109716][ T9364] netlink: zone id is out of range [ 361.201301][ T9364] netlink: zone id is out of range [ 361.239695][ T9364] netlink: zone id is out of range [ 361.303404][ T9364] netlink: zone id is out of range [ 361.362558][ T9364] netlink: zone id is out of range [ 361.399825][ T9364] netlink: zone id is out of range [ 361.405002][ T9364] netlink: zone id is out of range [ 361.465801][ T9364] netlink: zone id is out of range [ 361.501835][ T9364] netlink: zone id is out of range [ 361.530208][ T9364] netlink: zone id is out of range [ 362.285130][ T9395] syz.4.569 (9395): /proc/9394/oom_adj is deprecated, please use /proc/9394/oom_score_adj instead. [ 363.586752][ T9423] bridge0: port 3(team0) entered blocking state [ 363.663671][ T9423] bridge0: port 3(team0) entered disabled state [ 363.708931][ T9423] team0: entered allmulticast mode [ 363.747127][ T9423] team_slave_0: entered allmulticast mode [ 363.771016][ T9423] team_slave_1: entered allmulticast mode [ 363.810595][ T9423] team0: entered promiscuous mode [ 363.843761][ T9423] team_slave_0: entered promiscuous mode [ 363.878465][ T9423] team_slave_1: entered promiscuous mode [ 363.911082][ T9423] bridge0: port 3(team0) entered blocking state [ 363.918521][ T9423] bridge0: port 3(team0) entered forwarding state [ 364.949345][ T9444] ubi0: attaching mtd0 [ 364.984191][ T9444] ubi0 error: ubi_attach_mtd_dev: bad VID header (536870975) or data offsets (536871039) [ 366.277361][ T9461] kAFS: Invalid Command on /proc/fs/afs/cells file [ 368.870968][ T9548] svc: failed to register nfsdv3 RPC service (errno 111). [ 369.039564][ T9548] svc: failed to register nfsaclv3 RPC service (errno 111). [ 370.209951][ T9581] random: crng reseeded on system resumption [ 376.625612][ T9650] ACPI: Can not change Invalid GPE/Fixed Event status [ 386.447298][ T9726] ima: policy update failed [ 386.457681][ T30] audit: type=1802 audit(4294967369.240:10): pid=9726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.628" res=0 errno=0 [ 386.902027][ T9739] __vm_enough_memory: pid: 9739, comm: syz.2.630, bytes: 4398046511104 not enough memory for the allocation [ 389.127458][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.133870][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.165666][ T9759] FAULT_INJECTION: forcing a failure. [ 390.165666][ T9759] name failslab, interval 1, probability 0, space 0, times 0 [ 390.261192][ T9759] CPU: 1 UID: 0 PID: 9759 Comm: syz.2.635 Not tainted syzkaller #0 PREEMPT(full) [ 390.261225][ T9759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 390.261239][ T9759] Call Trace: [ 390.261248][ T9759] [ 390.261257][ T9759] dump_stack_lvl+0x16c/0x1f0 [ 390.261294][ T9759] should_fail_ex+0x512/0x640 [ 390.261329][ T9759] ? __kmalloc_noprof+0xbf/0x510 [ 390.261360][ T9759] ? vb2_core_allocated_buffers_storage+0x184/0x220 [ 390.261402][ T9759] should_failslab+0xc2/0x120 [ 390.261434][ T9759] __kmalloc_noprof+0xd2/0x510 [ 390.261469][ T9759] vb2_core_allocated_buffers_storage+0x184/0x220 [ 390.261513][ T9759] vb2_core_reqbufs+0x398/0xfe0 [ 390.261543][ T9759] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 390.261583][ T9759] __vb2_init_fileio+0x3f1/0x1100 [ 390.261606][ T9759] ? lockdep_hardirqs_on+0x7c/0x110 [ 390.261637][ T9759] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 390.261667][ T9759] ? __pollwait+0x271/0x490 [ 390.261703][ T9759] vb2_core_poll+0x5ec/0x700 [ 390.261728][ T9759] vb2_poll+0x33/0x150 [ 390.261765][ T9759] vb2_fop_poll+0x10f/0x2c0 [ 390.261804][ T9759] ? __pfx_vb2_fop_poll+0x10/0x10 [ 390.261841][ T9759] v4l2_poll+0x163/0x320 [ 390.261870][ T9759] ? __pfx_v4l2_poll+0x10/0x10 [ 390.261898][ T9759] do_select+0xd3d/0x17e0 [ 390.261945][ T9759] ? __pfx_do_select+0x10/0x10 [ 390.261970][ T9759] ? finish_task_switch.isra.0+0x21c/0xc10 [ 390.261995][ T9759] ? __pfx___pollwait+0x10/0x10 [ 390.262022][ T9759] ? __pfx_pollwake+0x10/0x10 [ 390.262092][ T9759] ? find_held_lock+0x2b/0x80 [ 390.262114][ T9759] ? __might_fault+0xe3/0x190 [ 390.262140][ T9759] ? __might_fault+0xe3/0x190 [ 390.262166][ T9759] ? __might_fault+0x13b/0x190 [ 390.262204][ T9759] ? core_sys_select+0x453/0xc10 [ 390.262227][ T9759] core_sys_select+0x453/0xc10 [ 390.262259][ T9759] ? __pfx_core_sys_select+0x10/0x10 [ 390.262290][ T9759] ? futex_wait+0x120/0x380 [ 390.262349][ T9759] ? __pfx_do_futex+0x10/0x10 [ 390.262387][ T9759] kern_select+0x15d/0x1e0 [ 390.262412][ T9759] ? __pfx_kern_select+0x10/0x10 [ 390.262441][ T9759] ? xfd_validate_state+0x61/0x180 [ 390.262482][ T9759] __x64_sys_select+0xbd/0x160 [ 390.262506][ T9759] ? do_syscall_64+0x91/0x490 [ 390.262539][ T9759] ? lockdep_hardirqs_on+0x7c/0x110 [ 390.262568][ T9759] do_syscall_64+0xcd/0x490 [ 390.262603][ T9759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.262627][ T9759] RIP: 0033:0x7f312a98ebe9 [ 390.262645][ T9759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.262669][ T9759] RSP: 002b:00007f312b7aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 390.262696][ T9759] RAX: ffffffffffffffda RBX: 00007f312abb6090 RCX: 00007f312a98ebe9 [ 390.262711][ T9759] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000005 [ 390.262725][ T9759] RBP: 00007f312aa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 390.262739][ T9759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.262752][ T9759] R13: 00007f312abb6128 R14: 00007f312abb6090 R15: 00007fff08fe5dd8 [ 390.262782][ T9759] [ 390.568614][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.864601][ T5877] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 392.876838][ T5877] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 392.884984][ T5877] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 392.894613][ T5877] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 392.903022][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 394.012077][ T9782] chnl_net:caif_netlink_parms(): no params data found [ 394.579238][ T9801] netlink: 16 bytes leftover after parsing attributes in process `syz.2.640'. [ 394.956800][ T5877] Bluetooth: hci0: command tx timeout [ 395.144318][ T9782] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.191746][ T9782] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.259331][ T9782] bridge_slave_0: entered allmulticast mode [ 395.326253][ T9782] bridge_slave_0: entered promiscuous mode [ 395.408458][ T9782] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.415595][ T9782] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.525729][ T9782] bridge_slave_1: entered allmulticast mode [ 395.572973][ T9782] bridge_slave_1: entered promiscuous mode [ 396.046871][ T9819] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input21 [ 396.225318][ T9782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.312514][ T9782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.590465][ T9820] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 396.667156][ T9820] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 396.737528][ T5868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 396.748689][ T5868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 396.757147][ T5868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 396.765034][ T5868] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 396.775848][ T5868] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 396.795835][ T9820] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 396.920800][ T9782] team0: Port device team_slave_0 added [ 396.945056][ T9817] kexec: Could not allocate control_code_buffer [ 396.979977][ T9782] team0: Port device team_slave_1 added [ 397.039094][ T5868] Bluetooth: hci0: command tx timeout [ 397.329884][ T9782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.369666][ T9782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.476806][ T9782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.502359][ T9829] FAULT_INJECTION: forcing a failure. [ 397.502359][ T9829] name failslab, interval 1, probability 0, space 0, times 0 [ 397.548724][ T9782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.579489][ T9782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.617050][ T9829] CPU: 1 UID: 0 PID: 9829 Comm: syz.2.645 Not tainted syzkaller #0 PREEMPT(full) [ 397.617084][ T9829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 397.617100][ T9829] Call Trace: [ 397.617108][ T9829] [ 397.617117][ T9829] dump_stack_lvl+0x16c/0x1f0 [ 397.617156][ T9829] should_fail_ex+0x512/0x640 [ 397.617191][ T9829] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 397.617224][ T9829] should_failslab+0xc2/0x120 [ 397.617256][ T9829] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 397.617284][ T9829] ? lockdep_init_map_type+0x5c/0x280 [ 397.617318][ T9829] ? __d_alloc+0x32/0xae0 [ 397.617351][ T9829] __d_alloc+0x32/0xae0 [ 397.617384][ T9829] d_alloc_pseudo+0x1c/0xc0 [ 397.617434][ T9829] alloc_file_pseudo+0xcf/0x230 [ 397.617474][ T9829] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 397.617511][ T9829] ? alloc_fd+0x471/0x7d0 [ 397.617541][ T9829] sock_alloc_file+0x50/0x210 [ 397.617577][ T9829] __sys_socket+0x1c0/0x260 [ 397.617601][ T9829] ? __pfx___sys_socket+0x10/0x10 [ 397.617625][ T9829] ? xfd_validate_state+0x61/0x180 [ 397.617669][ T9829] __x64_sys_socket+0x72/0xb0 [ 397.617692][ T9829] ? lockdep_hardirqs_on+0x7c/0x110 [ 397.617723][ T9829] do_syscall_64+0xcd/0x490 [ 397.617758][ T9829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.617782][ T9829] RIP: 0033:0x7f312a98ebe9 [ 397.617801][ T9829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.617825][ T9829] RSP: 002b:00007f312b789038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 397.617846][ T9829] RAX: ffffffffffffffda RBX: 00007f312abb6180 RCX: 00007f312a98ebe9 [ 397.617862][ T9829] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 397.617876][ T9829] RBP: 00007f312aa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 397.617891][ T9829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.617905][ T9829] R13: 00007f312abb6218 R14: 00007f312abb6180 R15: 00007fff08fe5dd8 [ 397.617934][ T9829] [ 398.058715][ T9782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.877468][ T5868] Bluetooth: hci3: command tx timeout [ 399.081646][ T9782] hsr_slave_0: entered promiscuous mode [ 399.119272][ T5868] Bluetooth: hci0: command tx timeout [ 399.130526][ T9782] hsr_slave_1: entered promiscuous mode [ 399.160719][ T9782] debugfs: 'hsr0' already exists in 'hsr' [ 399.170202][ T9782] Cannot create hsr debugfs directory [ 400.821927][ T9824] chnl_net:caif_netlink_parms(): no params data found [ 400.956701][ T5868] Bluetooth: hci3: command tx timeout [ 401.206343][ T5868] Bluetooth: hci0: command tx timeout [ 402.045792][ T9824] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.103660][ T9824] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.183974][ T9824] bridge_slave_0: entered allmulticast mode [ 402.227672][ T9824] bridge_slave_0: entered promiscuous mode [ 402.305916][ T9824] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.376527][ T9824] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.439148][ T9824] bridge_slave_1: entered allmulticast mode [ 402.497403][ T9824] bridge_slave_1: entered promiscuous mode [ 403.028004][ T9824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.046515][ T5868] Bluetooth: hci3: command tx timeout [ 403.325156][ T9824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.461045][ T9876] ALSA: mixer_oss: invalid OSS volume '' [ 403.502509][ T9782] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 403.526995][ T9876] ALSA: mixer_oss: invalid OSS volume '' [ 403.958538][ T9782] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 404.032901][ T9824] team0: Port device team_slave_0 added [ 404.114127][ T9824] team0: Port device team_slave_1 added [ 404.226522][ T9782] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 404.455567][ T9782] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 404.529762][ T9824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 404.576661][ T9824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.750289][ T9824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.885113][ T9824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 404.946473][ T9824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.090205][ T9824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.117049][ T5868] Bluetooth: hci3: command tx timeout [ 405.652359][ T9824] hsr_slave_0: entered promiscuous mode [ 405.672979][ T9824] hsr_slave_1: entered promiscuous mode [ 405.714142][ T9824] debugfs: 'hsr0' already exists in 'hsr' [ 405.745901][ T9824] Cannot create hsr debugfs directory [ 405.783552][ T9906] nbd: must specify an index to disconnect [ 406.791993][ T9782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.276747][ T9782] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.400925][ T8576] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.408173][ T8576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.463917][ T8576] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.471149][ T8576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.307926][ T9824] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 408.491946][ T9824] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 408.580612][ T9824] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 408.718178][ T9824] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 409.282336][ T9782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.500801][ T9824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.667915][ T9824] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.776537][ T30] audit: type=1800 audit(4294967392.550:11): pid=9931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.657" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 409.830781][ T8579] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.837969][ T8579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 409.943960][ T8579] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.951148][ T8579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.535410][ T9782] veth0_vlan: entered promiscuous mode [ 411.574782][ T9782] veth1_vlan: entered promiscuous mode [ 411.662180][ T9824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.884080][ T9782] veth0_macvtap: entered promiscuous mode [ 411.974577][ T9782] veth1_macvtap: entered promiscuous mode [ 412.005671][ T9959] QAT: Device 250 not found [ 412.125318][ T9782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.231813][ T9782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.370912][ T8575] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.434056][ T8575] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.545376][ T8575] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.629794][ T8575] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.323836][ T8579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.368931][ T8579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.604781][ T7808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.685946][ T7808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.743661][ T9824] veth0_vlan: entered promiscuous mode [ 413.834223][ T9824] veth1_vlan: entered promiscuous mode [ 414.075950][ T9824] veth0_macvtap: entered promiscuous mode [ 414.135008][ T9824] veth1_macvtap: entered promiscuous mode [ 414.308315][ T9824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.390368][ T9824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.510739][ T8575] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.560253][ T8575] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.631843][ T8575] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.685922][ T8575] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.346550][ T8573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.437771][ T8573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.587674][ T8576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.595627][ T8576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.854365][T10020] tipc: Started in network mode [ 417.865364][T10020] tipc: Node identity 30303030, cluster identity 4711 [ 417.930376][T10020] tipc: Node number set to 808464432 [ 418.903771][T10030] usb usb36: usbfs: process 10030 (syz.5.672) did not claim interface 0 before use [ 420.949784][T10062] input: f¬ as /devices/virtual/input/input22 [ 421.434465][T10066] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 421.529976][T10056] Process accounting resumed [ 422.013994][T10071] netlink: 'syz.7.681': attribute type 12 has an invalid length. [ 423.179214][T10081] net_ratelimit: 238 callbacks suppressed [ 423.179234][T10081] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 423.566791][T10086] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 423.681614][ T5868] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 424.141229][ T5877] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 424.153702][ T5877] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 428.389836][T10148] svc: failed to register nfsdv3 RPC service (errno 111). [ 428.526553][T10148] svc: failed to register nfsaclv3 RPC service (errno 111). [ 439.364148][T10242] misc userio: The device must be registered before sending interrupts [ 442.510223][T10252] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 445.638589][T10267] input: f¬ as /devices/virtual/input/input23 [ 447.661261][T10298] FAULT_INJECTION: forcing a failure. [ 447.661261][T10298] name failslab, interval 1, probability 0, space 0, times 0 [ 447.872069][T10303] netlink: 28 bytes leftover after parsing attributes in process `syz.2.718'. [ 448.022954][T10298] CPU: 1 UID: 0 PID: 10298 Comm: syz.7.719 Not tainted syzkaller #0 PREEMPT(full) [ 448.022987][T10298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 448.023001][T10298] Call Trace: [ 448.023009][T10298] [ 448.023018][T10298] dump_stack_lvl+0x16c/0x1f0 [ 448.023054][T10298] should_fail_ex+0x512/0x640 [ 448.023093][T10298] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 448.023125][T10298] should_failslab+0xc2/0x120 [ 448.023156][T10298] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 448.023185][T10298] ? getname_flags.part.0+0x4c/0x550 [ 448.023226][T10298] getname_flags.part.0+0x4c/0x550 [ 448.023266][T10298] getname_flags+0x93/0xf0 [ 448.023291][T10298] do_sys_openat2+0xb8/0x1d0 [ 448.023328][T10298] ? __pfx_do_sys_openat2+0x10/0x10 [ 448.023375][T10298] __x64_sys_openat+0x174/0x210 [ 448.023412][T10298] ? __pfx___x64_sys_openat+0x10/0x10 [ 448.023461][T10298] do_syscall_64+0xcd/0x490 [ 448.023495][T10298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.023518][T10298] RIP: 0033:0x7fd2b278ebe9 [ 448.023536][T10298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.023559][T10298] RSP: 002b:00007fd2b3563038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 448.023581][T10298] RAX: ffffffffffffffda RBX: 00007fd2b29b6090 RCX: 00007fd2b278ebe9 [ 448.023596][T10298] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 448.023611][T10298] RBP: 00007fd2b2811e19 R08: 0000000000000000 R09: 0000000000000000 [ 448.023625][T10298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.023638][T10298] R13: 00007fd2b29b6128 R14: 00007fd2b29b6090 R15: 00007ffd6fe10948 [ 448.023668][T10298] [ 448.463226][T10303] veth0_macvtap: entered allmulticast mode [ 448.617439][T10307] netlink: 28 bytes leftover after parsing attributes in process `syz.5.720'. [ 448.659388][T10308] netlink: 28 bytes leftover after parsing attributes in process `syz.5.720'. [ 448.716152][T10307] geneve1: entered promiscuous mode [ 448.806694][T10307] geneve1: entered allmulticast mode [ 450.568433][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.586580][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.788738][T10340] FAULT_INJECTION: forcing a failure. [ 451.788738][T10340] name failslab, interval 1, probability 0, space 0, times 0 [ 451.946728][T10340] CPU: 1 UID: 0 PID: 10340 Comm: syz.6.725 Not tainted syzkaller #0 PREEMPT(full) [ 451.946761][T10340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 451.946777][T10340] Call Trace: [ 451.946784][T10340] [ 451.946793][T10340] dump_stack_lvl+0x16c/0x1f0 [ 451.946830][T10340] should_fail_ex+0x512/0x640 [ 451.946866][T10340] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 451.946898][T10340] should_failslab+0xc2/0x120 [ 451.946931][T10340] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 451.946958][T10340] ? __proc_create+0xc3/0x8e0 [ 451.946993][T10340] ? __proc_create+0x2ce/0x8e0 [ 451.947032][T10340] __proc_create+0x2ce/0x8e0 [ 451.947067][T10340] ? __pfx___proc_create+0x10/0x10 [ 451.947101][T10340] ? proc_register+0x30f/0x5f0 [ 451.947141][T10340] ? _raw_write_unlock+0x28/0x50 [ 451.947174][T10340] proc_create_reg+0x7d/0x180 [ 451.947213][T10340] proc_create_net_data+0x8e/0x1c0 [ 451.947251][T10340] ? __pfx_proc_create_net_data+0x10/0x10 [ 451.947295][T10340] ? __pfx_kcm_proc_init_net+0x10/0x10 [ 451.947321][T10340] kcm_proc_init_net+0xa3/0x120 [ 451.947346][T10340] ops_init+0x1e2/0x5f0 [ 451.947383][T10340] setup_net+0x10f/0x380 [ 451.947415][T10340] ? lockdep_init_map_type+0x5c/0x280 [ 451.947450][T10340] ? __pfx_setup_net+0x10/0x10 [ 451.947485][T10340] ? debug_mutex_init+0x37/0x70 [ 451.947512][T10340] copy_net_ns+0x2a6/0x5f0 [ 451.947551][T10340] create_new_namespaces+0x3ea/0xa90 [ 451.947594][T10340] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 451.947625][T10340] ksys_unshare+0x45b/0xa40 [ 451.947659][T10340] ? __pfx_ksys_unshare+0x10/0x10 [ 451.947693][T10340] ? xfd_validate_state+0x61/0x180 [ 451.947741][T10340] __x64_sys_unshare+0x31/0x40 [ 451.947774][T10340] do_syscall_64+0xcd/0x490 [ 451.947809][T10340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.947833][T10340] RIP: 0033:0x7fe7ee98ebe9 [ 451.947852][T10340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.947875][T10340] RSP: 002b:00007fe7ef835038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 451.947897][T10340] RAX: ffffffffffffffda RBX: 00007fe7eebb5fa0 RCX: 00007fe7ee98ebe9 [ 451.947913][T10340] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 451.947927][T10340] RBP: 00007fe7eea11e19 R08: 0000000000000000 R09: 0000000000000000 [ 451.947941][T10340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.947955][T10340] R13: 00007fe7eebb6038 R14: 00007fe7eebb5fa0 R15: 00007ffd89cd07b8 [ 451.947985][T10340] [ 452.563160][T10339] delete_channel: no stack [ 453.891931][ T8579] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.485324][T10367] netlink: 342 bytes leftover after parsing attributes in process `syz.6.728'. [ 454.709421][T10355] netlink: 206 bytes leftover after parsing attributes in process `syz.2.727'. [ 454.810732][T10358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 455.386908][ T8579] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.436238][ T5868] Bluetooth: hci0: unexpected subevent 0x04 length: 122 > 11 [ 455.892656][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.6.731'. [ 456.474218][ T8579] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.985909][T10380] .SR: entered promiscuous mode [ 457.512132][ T8579] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.800074][T10118] Process accounting paused [ 458.437097][T10403] netlink: 28 bytes leftover after parsing attributes in process `syz.6.735'. [ 459.103365][ T8579] team0: left allmulticast mode [ 459.192539][ T8579] team_slave_0: left allmulticast mode [ 459.255384][ T8579] team_slave_1: left allmulticast mode [ 459.319223][ T8579] team0: left promiscuous mode [ 459.325076][ T8579] team_slave_0: left promiscuous mode [ 459.449994][ T8579] team_slave_1: left promiscuous mode [ 459.502885][ T8579] bridge0: port 3(team0) entered disabled state [ 459.651249][ T8579] bridge_slave_1: left allmulticast mode [ 459.706674][T10410] FAULT_INJECTION: forcing a failure. [ 459.706674][T10410] name failslab, interval 1, probability 0, space 0, times 0 [ 459.720574][ T8579] bridge_slave_1: left promiscuous mode [ 459.726402][ T8579] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.987344][ T8579] bridge_slave_0: left allmulticast mode [ 459.993071][ T8579] bridge_slave_0: left promiscuous mode [ 460.087160][T10410] CPU: 1 UID: 0 PID: 10410 Comm: syz.7.736 Not tainted syzkaller #0 PREEMPT(full) [ 460.087194][T10410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 460.087209][T10410] Call Trace: [ 460.087222][T10410] [ 460.087231][T10410] dump_stack_lvl+0x16c/0x1f0 [ 460.087268][T10410] should_fail_ex+0x512/0x640 [ 460.087303][T10410] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 460.087336][T10410] should_failslab+0xc2/0x120 [ 460.087368][T10410] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 460.087398][T10410] ? alloc_inode+0x64/0x240 [ 460.087437][T10410] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 460.087463][T10410] alloc_inode+0x64/0x240 [ 460.087497][T10410] new_inode+0x22/0x1c0 [ 460.087534][T10410] __debugfs_create_file+0x11c/0x6b0 [ 460.087567][T10410] debugfs_create_file_full+0x41/0x60 [ 460.087598][T10410] ? __pfx_ppp_setup+0x10/0x10 [ 460.087625][T10410] ref_tracker_dir_debugfs+0x19d/0x290 [ 460.087663][T10410] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 460.087722][T10410] ? __kvmalloc_node_noprof+0x298/0x620 [ 460.087751][T10410] ? lockdep_init_map_type+0x5c/0x280 [ 460.087790][T10410] alloc_netdev_mqs+0x30f/0x1530 [ 460.087831][T10410] ppp_ioctl+0x1761/0x2670 [ 460.087877][T10410] ? find_held_lock+0x2b/0x80 [ 460.087900][T10410] ? __pfx_ppp_ioctl+0x10/0x10 [ 460.087939][T10410] ? __fget_files+0x20e/0x3c0 [ 460.087970][T10410] ? __pfx_ppp_ioctl+0x10/0x10 [ 460.088005][T10410] __x64_sys_ioctl+0x18e/0x210 [ 460.088046][T10410] do_syscall_64+0xcd/0x490 [ 460.088081][T10410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.088105][T10410] RIP: 0033:0x7fd2b278ebe9 [ 460.088124][T10410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.088148][T10410] RSP: 002b:00007fd2b3584038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 460.088170][T10410] RAX: ffffffffffffffda RBX: 00007fd2b29b5fa0 RCX: 00007fd2b278ebe9 [ 460.088186][T10410] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000007 [ 460.088200][T10410] RBP: 00007fd2b2811e19 R08: 0000000000000000 R09: 0000000000000000 [ 460.088214][T10410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.088228][T10410] R13: 00007fd2b29b6038 R14: 00007fd2b29b5fa0 R15: 00007ffd6fe10948 [ 460.088258][T10410] [ 460.088268][T10410] debugfs: out of free dentries, can not create file 'netdev@ffff88805ce94610' [ 460.366612][ T8579] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.549203][ T8579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.777302][ T8579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.909537][ T8579] bond0 (unregistering): Released all slaves [ 465.600452][T10462] zswap: compressor 000 not available [ 468.326912][ T8579] hsr_slave_0: left promiscuous mode [ 468.372858][ T8579] hsr_slave_1: left promiscuous mode [ 468.422177][ T8579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.515861][ T8579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.554314][ T8579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.609744][ T8579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.011567][ T8579] veth1_macvtap: left promiscuous mode [ 469.043245][ T8579] veth0_macvtap: left promiscuous mode [ 469.083237][ T8579] veth1_vlan: left promiscuous mode [ 469.115411][ T8579] veth0_vlan: left promiscuous mode [ 469.748279][ T5868] Bluetooth: hci0: unexpected event 0x3d length: 726 > 14 [ 473.258025][ T8579] team0 (unregistering): Port device team_slave_1 removed [ 473.500293][ T8579] team0 (unregistering): Port device team_slave_0 removed [ 482.047203][T10610] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input24 [ 483.175748][T10625] FAULT_INJECTION: forcing a failure. [ 483.175748][T10625] name failslab, interval 1, probability 0, space 0, times 0 [ 483.269317][T10625] CPU: 1 UID: 0 PID: 10625 Comm: syz.5.764 Not tainted syzkaller #0 PREEMPT(full) [ 483.269349][T10625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 483.269364][T10625] Call Trace: [ 483.269372][T10625] [ 483.269381][T10625] dump_stack_lvl+0x16c/0x1f0 [ 483.269418][T10625] should_fail_ex+0x512/0x640 [ 483.269453][T10625] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 483.269482][T10625] should_failslab+0xc2/0x120 [ 483.269515][T10625] __kmalloc_cache_noprof+0x6a/0x3e0 [ 483.269540][T10625] ? percpu_ref_init+0xec/0x410 [ 483.269573][T10625] ? __pfx_blk_queue_usage_counter_release+0x10/0x10 [ 483.269615][T10625] percpu_ref_init+0xec/0x410 [ 483.269649][T10625] blk_alloc_queue+0x577/0x760 [ 483.269678][T10625] blk_mq_alloc_queue+0x172/0x280 [ 483.269710][T10625] ? __pfx_blk_mq_alloc_queue+0x10/0x10 [ 483.269757][T10625] ? debug_mutex_init+0x37/0x70 [ 483.269782][T10625] ? blk_mq_alloc_tag_set+0xcfe/0x1260 [ 483.269819][T10625] __blk_mq_alloc_disk+0x29/0x120 [ 483.269854][T10625] loop_add+0x490/0xb70 [ 483.269881][T10625] ? __pfx_loop_add+0x10/0x10 [ 483.269933][T10625] ? find_held_lock+0x2b/0x80 [ 483.269959][T10625] loop_control_ioctl+0x13e/0x630 [ 483.269987][T10625] ? __pfx_loop_control_ioctl+0x10/0x10 [ 483.270018][T10625] ? __pfx_loop_control_ioctl+0x10/0x10 [ 483.270046][T10625] __x64_sys_ioctl+0x18e/0x210 [ 483.270088][T10625] do_syscall_64+0xcd/0x490 [ 483.270122][T10625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.270146][T10625] RIP: 0033:0x7fc30958ebe9 [ 483.270165][T10625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.270188][T10625] RSP: 002b:00007fc30a38c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 483.270210][T10625] RAX: ffffffffffffffda RBX: 00007fc3097b5fa0 RCX: 00007fc30958ebe9 [ 483.270226][T10625] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000009 [ 483.270240][T10625] RBP: 00007fc309611e19 R08: 0000000000000000 R09: 0000000000000000 [ 483.270254][T10625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.270268][T10625] R13: 00007fc3097b6038 R14: 00007fc3097b5fa0 R15: 00007ffe5575d118 [ 483.270298][T10625] [ 485.931039][T10652] FAULT_INJECTION: forcing a failure. [ 485.931039][T10652] name failslab, interval 1, probability 0, space 0, times 0 [ 485.991450][T10652] CPU: 1 UID: 0 PID: 10652 Comm: syz.5.767 Not tainted syzkaller #0 PREEMPT(full) [ 485.991483][T10652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 485.991498][T10652] Call Trace: [ 485.991506][T10652] [ 485.991515][T10652] dump_stack_lvl+0x16c/0x1f0 [ 485.991551][T10652] should_fail_ex+0x512/0x640 [ 485.991585][T10652] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 485.991619][T10652] should_failslab+0xc2/0x120 [ 485.991651][T10652] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 485.991689][T10652] ? __proc_create+0xc3/0x8e0 [ 485.991724][T10652] ? __proc_create+0x2ce/0x8e0 [ 485.991762][T10652] __proc_create+0x2ce/0x8e0 [ 485.991799][T10652] ? __pfx___proc_create+0x10/0x10 [ 485.991839][T10652] ? mark_held_locks+0x49/0x80 [ 485.991875][T10652] proc_create_reg+0x7d/0x180 [ 485.991914][T10652] proc_create_net_data+0x8e/0x1c0 [ 485.991951][T10652] ? __pfx_proc_create_net_data+0x10/0x10 [ 485.991988][T10652] ? __pfx___netlink_kernel_create+0x10/0x10 [ 485.992022][T10652] ? fib4_semantics_init+0x25/0x100 [ 485.992056][T10652] fib_proc_init+0x58/0x1b0 [ 485.992088][T10652] fib_net_init+0x2af/0x3f0 [ 485.992121][T10652] ? __pfx___register_sysctl_table+0x10/0x10 [ 485.992158][T10652] ? __pfx_fib_net_init+0x10/0x10 [ 485.992192][T10652] ? lockdep_init_map_type+0x5c/0x280 [ 485.992225][T10652] ? __pfx_nl_fib_input+0x10/0x10 [ 485.992264][T10652] ? devinet_init_net+0x5c2/0x910 [ 485.992305][T10652] ? __pfx_fib_net_init+0x10/0x10 [ 485.992338][T10652] ops_init+0x1e2/0x5f0 [ 485.992375][T10652] setup_net+0x10f/0x380 [ 485.992407][T10652] ? lockdep_init_map_type+0x5c/0x280 [ 485.992441][T10652] ? __pfx_setup_net+0x10/0x10 [ 485.992480][T10652] ? debug_mutex_init+0x37/0x70 [ 485.992506][T10652] copy_net_ns+0x2a6/0x5f0 [ 485.992546][T10652] create_new_namespaces+0x3ea/0xa90 [ 485.992580][T10652] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 485.992611][T10652] ksys_unshare+0x45b/0xa40 [ 485.992645][T10652] ? __pfx_ksys_unshare+0x10/0x10 [ 485.992685][T10652] ? xfd_validate_state+0x61/0x180 [ 485.992729][T10652] __x64_sys_unshare+0x31/0x40 [ 485.992762][T10652] do_syscall_64+0xcd/0x490 [ 485.992797][T10652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.992822][T10652] RIP: 0033:0x7fc30958ebe9 [ 485.992840][T10652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.992863][T10652] RSP: 002b:00007fc30a38c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 485.992886][T10652] RAX: ffffffffffffffda RBX: 00007fc3097b5fa0 RCX: 00007fc30958ebe9 [ 485.992902][T10652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 485.992917][T10652] RBP: 00007fc309611e19 R08: 0000000000000000 R09: 0000000000000000 [ 485.992931][T10652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.992946][T10652] R13: 00007fc3097b6038 R14: 00007fc3097b5fa0 R15: 00007ffe5575d118 [ 485.992976][T10652] [ 486.452472][T10662] futex_wake_op: syz.7.769 tries to shift op by -9; fix this program [ 488.211696][T10661] Process accounting resumed [ 489.435708][T10683] zswap: compressor not available [ 490.951896][T10713] kexec: Could not allocate control_code_buffer [ 493.421482][T10753] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 493.566024][T10757] netlink: 338 bytes leftover after parsing attributes in process `syz.6.785'. [ 494.848380][T10756] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 495.973228][T10773] sd 0:0:1:0: PR command failed: 1026 [ 496.219514][T10773] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 496.536501][T10773] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 498.236662][ T5868] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 498.244230][ T5868] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 499.642053][T10837] netlink: 28 bytes leftover after parsing attributes in process `syz.7.796'. [ 499.767337][T10840] netlink: 28 bytes leftover after parsing attributes in process `syz.7.796'. [ 499.900268][T10840] veth0_macvtap: left promiscuous mode [ 500.250216][T10849] lo: entered allmulticast mode [ 500.921190][T10854] lo: left allmulticast mode [ 503.374624][T10855] netlink: 'syz.2.798': attribute type 2 has an invalid length. [ 506.195859][T10953] sock: sock_set_timeout: `syz.7.813' (pid 10953) tries to set negative timeout [ 507.594562][T10974] openvswitch: netlink: nsh attr 1 has unexpected len 14 expected 8 [ 508.054903][T10978] random: crng reseeded on system resumption [ 509.318962][T10995] FAULT_INJECTION: forcing a failure. [ 509.318962][T10995] name failslab, interval 1, probability 0, space 0, times 0 [ 509.412319][T10983] kexec: Could not allocate control_code_buffer [ 509.456498][T10995] CPU: 1 UID: 0 PID: 10995 Comm: syz.6.822 Not tainted syzkaller #0 PREEMPT(full) [ 509.456530][T10995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 509.456544][T10995] Call Trace: [ 509.456552][T10995] [ 509.456561][T10995] dump_stack_lvl+0x16c/0x1f0 [ 509.456596][T10995] should_fail_ex+0x512/0x640 [ 509.456628][T10995] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 509.456655][T10995] should_failslab+0xc2/0x120 [ 509.456686][T10995] __kmalloc_cache_noprof+0x6a/0x3e0 [ 509.456709][T10995] ? sctp_endpoint_new+0x7c/0xcd0 [ 509.456743][T10995] sctp_endpoint_new+0x7c/0xcd0 [ 509.456776][T10995] sctp_init_sock+0xe2d/0x1330 [ 509.456802][T10995] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 509.456830][T10995] sctp_v6_init_sock+0x16/0x70 [ 509.456855][T10995] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 509.456882][T10995] inet6_create+0xb30/0x12b0 [ 509.456905][T10995] ? inet6_create+0x7f/0x12b0 [ 509.456929][T10995] __sock_create+0x335/0x8d0 [ 509.456958][T10995] __sys_socket+0x14d/0x260 [ 509.456988][T10995] ? __pfx___sys_socket+0x10/0x10 [ 509.457012][T10995] ? xfd_validate_state+0x61/0x180 [ 509.457046][T10995] ? __pfx_ksys_write+0x10/0x10 [ 509.457079][T10995] __x64_sys_socket+0x72/0xb0 [ 509.457102][T10995] ? lockdep_hardirqs_on+0x7c/0x110 [ 509.457132][T10995] do_syscall_64+0xcd/0x490 [ 509.457165][T10995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.457188][T10995] RIP: 0033:0x7fe7ee98ebe9 [ 509.457206][T10995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.457229][T10995] RSP: 002b:00007fe7ef814038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 509.457250][T10995] RAX: ffffffffffffffda RBX: 00007fe7eebb6090 RCX: 00007fe7ee98ebe9 [ 509.457266][T10995] RDX: 0000000000000084 RSI: 0000000000000801 RDI: 000000000000000a [ 509.457280][T10995] RBP: 00007fe7eea11e19 R08: 0000000000000000 R09: 0000000000000000 [ 509.457294][T10995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.457307][T10995] R13: 00007fe7eebb6128 R14: 00007fe7eebb6090 R15: 00007ffd89cd07b8 [ 509.457336][T10995] [ 512.001770][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.009839][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.283479][T11025] ALSA: mixer_oss: invalid OSS volume '0' [ 512.342291][T11025] ALSA: mixer_oss: invalid OSS volume 'ubdevices_avail:' [ 512.379928][T11025] ALSA: mixer_oss: invalid OSS volume '' [ 516.999349][T11102] bond0: option all_slaves_active: invalid value () [ 517.066080][T11104] hub 8-0:1.0: USB hub found [ 517.104264][T11102] bond0: option all_slaves_active: invalid value () [ 517.189446][T11104] hub 8-0:1.0: 1 port detected [ 517.938422][T11118] FAULT_INJECTION: forcing a failure. [ 517.938422][T11118] name failslab, interval 1, probability 0, space 0, times 0 [ 517.954781][T11116] netlink: 28 bytes leftover after parsing attributes in process `syz.2.843'. [ 518.021083][T11118] CPU: 1 UID: 0 PID: 11118 Comm: syz.5.844 Not tainted syzkaller #0 PREEMPT(full) [ 518.021117][T11118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 518.021132][T11118] Call Trace: [ 518.021140][T11118] [ 518.021149][T11118] dump_stack_lvl+0x16c/0x1f0 [ 518.021186][T11118] should_fail_ex+0x512/0x640 [ 518.021219][T11118] ? __kmalloc_noprof+0xbf/0x510 [ 518.021249][T11118] ? __d_alloc+0x673/0xae0 [ 518.021278][T11118] should_failslab+0xc2/0x120 [ 518.021310][T11118] __kmalloc_noprof+0xd2/0x510 [ 518.021336][T11118] ? __pfx_stack_trace_save+0x10/0x10 [ 518.021364][T11118] ? __d_alloc+0x32/0xae0 [ 518.021396][T11118] __d_alloc+0x673/0xae0 [ 518.021429][T11118] d_alloc_parallel+0x111/0x1480 [ 518.021475][T11118] ? find_held_lock+0x2b/0x80 [ 518.021501][T11118] ? __pfx_d_alloc_parallel+0x10/0x10 [ 518.021543][T11118] ? __d_lookup+0x266/0x4a0 [ 518.021586][T11118] lookup_open.isra.0+0x665/0x1580 [ 518.021617][T11118] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 518.021657][T11118] ? __pfx_down_write+0x10/0x10 [ 518.021690][T11118] ? mnt_get_write_access+0x20c/0x300 [ 518.021731][T11118] path_openat+0x893/0x2cb0 [ 518.021765][T11118] ? do_syscall_64+0xcd/0x490 [ 518.021797][T11118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.021822][T11118] ? __pfx_path_openat+0x10/0x10 [ 518.021852][T11118] ? __lock_acquire+0xb97/0x1ce0 [ 518.021887][T11118] do_filp_open+0x20b/0x470 [ 518.021916][T11118] ? __pfx_do_filp_open+0x10/0x10 [ 518.022003][T11118] ? _raw_spin_unlock+0x28/0x50 [ 518.022030][T11118] ? alloc_fd+0x471/0x7d0 [ 518.022064][T11118] do_sys_openat2+0x11b/0x1d0 [ 518.022101][T11118] ? __pfx_do_sys_openat2+0x10/0x10 [ 518.022151][T11118] __x64_sys_open+0x153/0x1e0 [ 518.022189][T11118] ? __pfx___x64_sys_open+0x10/0x10 [ 518.022233][T11118] ? rcu_is_watching+0x12/0xc0 [ 518.022259][T11118] do_syscall_64+0xcd/0x490 [ 518.022294][T11118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.022318][T11118] RIP: 0033:0x7fc30958ebe9 [ 518.022337][T11118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.022360][T11118] RSP: 002b:00007fc30a38c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 518.022382][T11118] RAX: ffffffffffffffda RBX: 00007fc3097b5fa0 RCX: 00007fc30958ebe9 [ 518.022398][T11118] RDX: 00000000000000d1 RSI: 0000000000103040 RDI: 0000200000000380 [ 518.022413][T11118] RBP: 00007fc309611e19 R08: 0000000000000000 R09: 0000000000000000 [ 518.022428][T11118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.022442][T11118] R13: 00007fc3097b6038 R14: 00007fc3097b5fa0 R15: 00007ffe5575d118 [ 518.022472][T11118] [ 518.285600][ C1] vkms_vblank_simulate: vblank timer overrun [ 518.598792][T11106] Process accounting paused [ 519.258428][T11111] Bluetooth: hci0: command 0x0406 tx timeout [ 519.268571][T11111] Bluetooth: hci3: command 0x0406 tx timeout [ 519.809822][T11132] mkiss: ax0: crc mode is auto. [ 524.721856][T11187] netlink: 330 bytes leftover after parsing attributes in process `syz.5.853'. [ 524.766041][T11187] tipc: Started in network mode [ 524.774825][T11187] tipc: Node identity ee00, cluster identity 4711 [ 524.861746][T11187] tipc: Node number set to 60928 [ 526.449788][T11216] netlink: 'syz.5.858': attribute type 3 has an invalid length. [ 526.961597][T11222] can: request_module (can-proto-0) failed. [ 528.377402][T11242] kexec: Could not allocate control_code_buffer [ 528.618011][T11306] FAULT_INJECTION: forcing a failure. [ 528.618011][T11306] name failslab, interval 1, probability 0, space 0, times 0 [ 528.693639][T11306] CPU: 1 UID: 0 PID: 11306 Comm: syz.5.862 Not tainted syzkaller #0 PREEMPT(full) [ 528.693671][T11306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 528.693685][T11306] Call Trace: [ 528.693692][T11306] [ 528.693701][T11306] dump_stack_lvl+0x16c/0x1f0 [ 528.693737][T11306] should_fail_ex+0x512/0x640 [ 528.693770][T11306] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 528.693801][T11306] should_failslab+0xc2/0x120 [ 528.693832][T11306] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 528.693859][T11306] ? d_instantiate+0x77/0x90 [ 528.693888][T11306] ? alloc_empty_file+0x55/0x1e0 [ 528.693927][T11306] alloc_empty_file+0x55/0x1e0 [ 528.693962][T11306] alloc_file_pseudo+0x13a/0x230 [ 528.693999][T11306] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 528.694035][T11306] ? alloc_fd+0x471/0x7d0 [ 528.694071][T11306] sock_alloc_file+0x50/0x210 [ 528.694106][T11306] __sys_socket+0x1c0/0x260 [ 528.694131][T11306] ? __pfx___sys_socket+0x10/0x10 [ 528.694154][T11306] ? xfd_validate_state+0x61/0x180 [ 528.694188][T11306] ? __pfx_ksys_write+0x10/0x10 [ 528.694220][T11306] __x64_sys_socket+0x72/0xb0 [ 528.694242][T11306] ? lockdep_hardirqs_on+0x7c/0x110 [ 528.694274][T11306] do_syscall_64+0xcd/0x490 [ 528.694307][T11306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.694329][T11306] RIP: 0033:0x7fc30958ebe9 [ 528.694347][T11306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.694369][T11306] RSP: 002b:00007fc30a38c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 528.694391][T11306] RAX: ffffffffffffffda RBX: 00007fc3097b5fa0 RCX: 00007fc30958ebe9 [ 528.694405][T11306] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 528.694419][T11306] RBP: 00007fc309611e19 R08: 0000000000000000 R09: 0000000000000000 [ 528.694433][T11306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.694446][T11306] R13: 00007fc3097b6038 R14: 00007fc3097b5fa0 R15: 00007ffe5575d118 [ 528.694474][T11306] [ 529.648980][T11317] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(701461408.3520457699.2105489925), cmd(6) [ 531.282704][T11337] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 531.403555][T11337] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 531.541213][T11337] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 533.050865][T11364] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 533.060708][T11364] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 533.069546][T11364] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 533.078213][T11364] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 533.095199][T11364] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 534.170769][T11361] chnl_net:caif_netlink_parms(): no params data found [ 534.858296][T11361] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.893700][T11361] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.935281][T11361] bridge_slave_0: entered allmulticast mode [ 534.942689][T11361] bridge_slave_0: entered promiscuous mode [ 534.988063][T11361] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.026145][T11361] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.063870][T11361] bridge_slave_1: entered allmulticast mode [ 535.090036][T11361] bridge_slave_1: entered promiscuous mode [ 535.185784][T11364] Bluetooth: hci4: command tx timeout [ 535.348656][T11361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.493491][T11361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.641546][T11361] team0: Port device team_slave_0 added [ 535.696153][T11361] team0: Port device team_slave_1 added [ 535.926712][T11361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.933698][T11361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.118443][T11361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.205249][T11361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.212240][T11361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.374398][T11361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.641572][T11361] hsr_slave_0: entered promiscuous mode [ 536.695385][T11361] hsr_slave_1: entered promiscuous mode [ 536.701564][T11361] debugfs: 'hsr0' already exists in 'hsr' [ 536.764516][T11361] Cannot create hsr debugfs directory [ 537.264073][T11364] Bluetooth: hci4: command tx timeout [ 537.753333][T11148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 537.764028][T11148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 537.772250][T11148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 537.783304][T11148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 537.797044][T11361] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 537.804256][T11148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 537.876972][T11361] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 537.914504][T11361] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 537.955977][T11361] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 538.539733][T11361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.629892][T11361] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.712361][T11202] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.719575][T11202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.777313][T11202] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.784513][T11202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.845018][T11396] chnl_net:caif_netlink_parms(): no params data found [ 539.049266][T11361] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 539.228047][T11396] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.244265][T11396] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.264015][T11396] bridge_slave_0: entered allmulticast mode [ 539.278806][T11396] bridge_slave_0: entered promiscuous mode [ 539.327217][T11396] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.344183][T11364] Bluetooth: hci4: command tx timeout [ 539.364282][T11396] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.394248][T11396] bridge_slave_1: entered allmulticast mode [ 539.423295][T11396] bridge_slave_1: entered promiscuous mode [ 539.608589][T11396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.688192][T11396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.904908][T11364] Bluetooth: hci1: command tx timeout [ 539.938575][T11396] team0: Port device team_slave_0 added [ 539.970115][T11396] team0: Port device team_slave_1 added [ 540.108298][T11396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.132991][T11396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.233012][T11396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.297718][T11361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.325813][T11396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.348054][T11396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.470857][T11396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.673918][T11396] hsr_slave_0: entered promiscuous mode [ 540.694134][T11396] hsr_slave_1: entered promiscuous mode [ 540.718351][T11396] debugfs: 'hsr0' already exists in 'hsr' [ 540.740183][T11396] Cannot create hsr debugfs directory [ 541.429170][T11364] Bluetooth: hci4: command tx timeout [ 541.626106][T11361] veth0_vlan: entered promiscuous mode [ 541.662972][T11396] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 541.718826][T11396] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 541.769730][T11396] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 541.815342][T11361] veth1_vlan: entered promiscuous mode [ 541.885853][T11396] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 541.991748][T11364] Bluetooth: hci1: command tx timeout [ 542.207821][T11361] veth0_macvtap: entered promiscuous mode [ 542.245737][T11361] veth1_macvtap: entered promiscuous mode [ 542.362483][T11361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.455771][T11361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.545749][T11431] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.599870][T11431] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.685472][T11396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.733041][T11431] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.762357][T11431] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.880594][T11396] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.121364][T11151] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.128517][T11151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.200646][T11151] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.207852][T11151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.387633][T11152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.427921][T11148] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 543.440413][T11148] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 543.453086][T11148] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 543.462909][T11148] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 543.481915][T11148] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 543.518612][T11152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.833504][T11202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.905575][T11202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.080546][T11148] Bluetooth: hci1: command tx timeout [ 545.126338][T11396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.212564][T11460] chnl_net:caif_netlink_parms(): no params data found [ 545.500715][T11148] Bluetooth: hci6: command tx timeout [ 546.019984][T11460] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.066842][T11460] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.108924][T11460] bridge_slave_0: entered allmulticast mode [ 546.140188][T11148] Bluetooth: hci1: command tx timeout [ 546.159816][T11460] bridge_slave_0: entered promiscuous mode [ 546.191188][T11460] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.204082][T11460] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.252353][T11460] bridge_slave_1: entered allmulticast mode [ 546.297407][T11460] bridge_slave_1: entered promiscuous mode [ 546.652435][T11460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.745296][T11460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.968542][T11460] team0: Port device team_slave_0 added [ 547.036972][T11460] team0: Port device team_slave_1 added [ 547.071600][T11511] svc: failed to register nfsdv3 RPC service (errno 111). [ 547.134130][T11511] svc: failed to register nfsaclv3 RPC service (errno 111). [ 547.200511][T11460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.243047][T11460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.289232][T11517] netlink: 16 bytes leftover after parsing attributes in process `syz.8.888'. [ 547.373260][T11460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.440001][T11460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.468911][T11460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.532461][T11460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.580546][T11148] Bluetooth: hci6: command tx timeout [ 547.591902][T11396] veth0_vlan: entered promiscuous mode [ 547.754669][T11396] veth1_vlan: entered promiscuous mode [ 548.073887][T11460] hsr_slave_0: entered promiscuous mode [ 548.100449][T11460] hsr_slave_1: entered promiscuous mode [ 548.106742][T11460] debugfs: 'hsr0' already exists in 'hsr' [ 548.150618][T11460] Cannot create hsr debugfs directory [ 548.384388][T11396] veth0_macvtap: entered promiscuous mode [ 548.474701][T11396] veth1_macvtap: entered promiscuous mode [ 548.727555][T11396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.796433][T11396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.083413][T11151] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.139709][T11151] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.279990][T11151] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.336754][T11151] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.668636][T11148] Bluetooth: hci6: command tx timeout [ 549.772787][T11545] ptrace attach of "./syz-executor exec"[6811] was attempted by "./syz-executor exec"[11545] [ 550.169555][T11202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.246396][T11202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.534144][T11431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.597660][T11431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.769962][T11460] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 550.840827][T11460] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 550.958655][T11460] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 551.119587][T11460] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 551.578574][T11570] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 551.712592][T11460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.737085][T11148] Bluetooth: hci6: command tx timeout [ 551.840021][T11460] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.918957][T11152] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.926140][T11152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.081062][T11152] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.088332][T11152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.811404][T11460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.143121][T11601] FAULT_INJECTION: forcing a failure. [ 554.143121][T11601] name failslab, interval 1, probability 0, space 0, times 0 [ 554.163896][T11460] veth0_vlan: entered promiscuous mode [ 554.255553][T11601] CPU: 1 UID: 0 PID: 11601 Comm: syz.8.898 Not tainted syzkaller #0 PREEMPT(full) [ 554.255586][T11601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 554.255601][T11601] Call Trace: [ 554.255609][T11601] [ 554.255618][T11601] dump_stack_lvl+0x16c/0x1f0 [ 554.255656][T11601] should_fail_ex+0x512/0x640 [ 554.255691][T11601] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 554.255728][T11601] should_failslab+0xc2/0x120 [ 554.255760][T11601] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 554.255791][T11601] ? kasan_save_stack+0x33/0x60 [ 554.255817][T11601] ? kasan_save_track+0x14/0x30 [ 554.255843][T11601] ? __kasan_kmalloc+0xaa/0xb0 [ 554.255868][T11601] ? kstrdup_const+0x63/0x80 [ 554.255897][T11601] ? vfs_mkdir+0x590/0x8c0 [ 554.255922][T11601] kstrdup+0x53/0x100 [ 554.255952][T11601] kstrdup_const+0x63/0x80 [ 554.255981][T11601] __kernfs_new_node+0x9b/0x8e0 [ 554.256020][T11601] ? __pfx___kernfs_new_node+0x10/0x10 [ 554.256059][T11601] ? find_held_lock+0x2b/0x80 [ 554.256084][T11601] ? kernfs_root+0xee/0x2a0 [ 554.256120][T11601] kernfs_new_node+0x13c/0x1e0 [ 554.256164][T11601] ? kasan_save_track+0x14/0x30 [ 554.256195][T11601] kernfs_create_dir_ns+0x4c/0x1a0 [ 554.256235][T11601] cgroup_mkdir+0x40f/0x11f0 [ 554.256279][T11601] ? __pfx_cgroup_mkdir+0x10/0x10 [ 554.256317][T11601] kernfs_iop_mkdir+0x10e/0x190 [ 554.256351][T11601] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 554.256384][T11601] vfs_mkdir+0x590/0x8c0 [ 554.256410][T11601] do_mkdirat+0x304/0x3e0 [ 554.256441][T11601] ? __pfx_do_mkdirat+0x10/0x10 [ 554.256473][T11601] ? getname_flags.part.0+0x1c5/0x550 [ 554.256514][T11601] __x64_sys_mkdir+0xef/0x140 [ 554.256544][T11601] do_syscall_64+0xcd/0x490 [ 554.256580][T11601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.256604][T11601] RIP: 0033:0x7f484578ebe9 [ 554.256623][T11601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.256647][T11601] RSP: 002b:00007f484660d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 554.256670][T11601] RAX: ffffffffffffffda RBX: 00007f48459b5fa0 RCX: 00007f484578ebe9 [ 554.256686][T11601] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000080 [ 554.256700][T11601] RBP: 00007f4845811e19 R08: 0000000000000000 R09: 0000000000000000 [ 554.256715][T11601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.256729][T11601] R13: 00007f48459b6038 R14: 00007f48459b5fa0 R15: 00007ffebe4178d8 [ 554.256759][T11601] [ 554.518906][T11460] veth1_vlan: entered promiscuous mode [ 554.544105][T11460] veth0_macvtap: entered promiscuous mode [ 554.553437][T11460] veth1_macvtap: entered promiscuous mode [ 554.570739][T11460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.582772][T11460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.267205][T11148] Bluetooth: hci5: unexpected event 0x3e length: 726 > 260 [ 555.267239][T11148] Bluetooth: hci5: unexpected subevent 0x0d length: 725 > 260 [ 555.282652][T11148] Bluetooth: hci5: Unknown advertising packet type: 0x7f [ 555.282710][T11148] Bluetooth: hci5: adv larger than maximum supported [ 555.292065][T11148] Bluetooth: hci5: Unknown advertising packet type: 0x5b [ 555.299175][T11148] Bluetooth: hci5: adv larger than maximum supported [ 555.306892][T11148] Bluetooth: hci5: Malformed LE Event: 0x0d [ 555.550382][T11182] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.570875][T11182] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.820158][T11182] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.873474][T11182] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.309812][T11143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.413368][T11143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.671531][T11202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.733372][T11202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.677221][T11729] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 561.966854][T11737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.914'. [ 568.424797][T11820] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 568.434864][T11821] kafs: addr_prefs: Invalid Command [ 569.340664][T11835] netlink: 4 bytes leftover after parsing attributes in process `syz.8.927'. [ 573.438090][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.444426][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.629766][T11875] kexec: Could not allocate control_code_buffer [ 576.030097][T11925] __vm_enough_memory: pid: 11925, comm: syz.5.941, bytes: 4398046511104 not enough memory for the allocation [ 576.379408][T11934] netlink: 4 bytes leftover after parsing attributes in process `syz.8.942'. [ 576.801202][T11364] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 576.835266][T11364] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 576.843545][T11364] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 576.853506][T11364] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 576.863066][T11364] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 577.538831][ T30] audit: type=1326 audit(4294967365.302:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11951 comm="syz.5.945" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc30958ebe9 code=0x0 [ 578.221524][T11938] chnl_net:caif_netlink_parms(): no params data found [ 578.923356][T11364] Bluetooth: hci7: command tx timeout [ 579.679843][T11938] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.729811][T11938] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.767731][T11938] bridge_slave_0: entered allmulticast mode [ 579.812858][T11938] bridge_slave_0: entered promiscuous mode [ 579.866927][T11938] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.918996][T11938] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.956863][T11938] bridge_slave_1: entered allmulticast mode [ 580.008136][T11938] bridge_slave_1: entered promiscuous mode [ 581.002432][T11364] Bluetooth: hci7: command tx timeout [ 581.169625][T11938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.442308][T11938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.741364][T11938] team0: Port device team_slave_0 added [ 581.794537][T11938] team0: Port device team_slave_1 added [ 582.198146][T11938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.264494][T11938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.457288][T11938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.619772][T11938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.677896][T11938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 582.832603][T11938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.081138][T11364] Bluetooth: hci7: command tx timeout [ 583.370167][T11938] hsr_slave_0: entered promiscuous mode [ 583.404177][T11938] hsr_slave_1: entered promiscuous mode [ 583.452991][T11938] debugfs: 'hsr0' already exists in 'hsr' [ 583.481363][T11938] Cannot create hsr debugfs directory [ 585.161453][T11364] Bluetooth: hci7: command tx timeout [ 586.632002][T12045] syz.8.955: vmalloc error: size 12288, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 586.819465][T12045] CPU: 1 UID: 0 PID: 12045 Comm: syz.8.955 Not tainted syzkaller #0 PREEMPT(full) [ 586.819496][T12045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 586.819511][T12045] Call Trace: [ 586.819519][T12045] [ 586.819527][T12045] dump_stack_lvl+0x16c/0x1f0 [ 586.819563][T12045] warn_alloc+0x248/0x3a0 [ 586.819593][T12045] ? __pfx_warn_alloc+0x10/0x10 [ 586.819621][T12045] ? alloc_pages_mpol+0x25a/0x550 [ 586.819653][T12045] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 586.819694][T12045] __vmalloc_node_range_noprof+0x11d4/0x14b0 [ 586.819727][T12045] ? kernel_clone+0xfc/0x930 [ 586.819764][T12045] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 586.819796][T12045] ? kernel_clone+0xfc/0x930 [ 586.819823][T12045] __vmalloc_node_noprof+0xad/0xf0 [ 586.819844][T12045] ? kernel_clone+0xfc/0x930 [ 586.819876][T12045] copy_process+0x2c70/0x7690 [ 586.819904][T12045] ? __pfx___futex_wait+0x10/0x10 [ 586.819937][T12045] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 586.819964][T12045] ? lockdep_hardirqs_on+0x7c/0x110 [ 586.820001][T12045] ? __pfx_copy_process+0x10/0x10 [ 586.820029][T12045] ? futex_private_hash_put+0x176/0x300 [ 586.820060][T12045] ? futex_private_hash_put+0x18a/0x300 [ 586.820092][T12045] kernel_clone+0xfc/0x930 [ 586.820130][T12045] ? __pfx_kernel_clone+0x10/0x10 [ 586.820176][T12045] __do_sys_clone+0xce/0x120 [ 586.820206][T12045] ? __pfx___do_sys_clone+0x10/0x10 [ 586.820236][T12045] ? __pfx___might_resched+0x10/0x10 [ 586.820271][T12045] ? xfd_validate_state+0x61/0x180 [ 586.820315][T12045] do_syscall_64+0xcd/0x490 [ 586.820350][T12045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.820373][T12045] RIP: 0033:0x7f484578ebe9 [ 586.820391][T12045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.820414][T12045] RSP: 002b:00007f48465ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 586.820437][T12045] RAX: ffffffffffffffda RBX: 00007f48459b6090 RCX: 00007f484578ebe9 [ 586.820453][T12045] RDX: 0000000000000000 RSI: 0100000000000005 RDI: 0000000020003b46 [ 586.820467][T12045] RBP: 00007f4845811e19 R08: 0000000000000002 R09: 0000000000000000 [ 586.820481][T12045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.820500][T12045] R13: 00007f48459b6128 R14: 00007f48459b6090 R15: 00007ffebe4178d8 [ 586.820529][T12045] [ 586.820537][T12045] Mem-Info: [ 589.969790][T11938] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 590.045244][T11938] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 590.164798][T11938] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 590.263851][T11938] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 590.971292][T12045] active_anon:46904 inactive_anon:13 isolated_anon:0 [ 590.971292][T12045] active_file:6230 inactive_file:54014 isolated_file:0 [ 590.971292][T12045] unevictable:768 dirty:357 writeback:0 [ 590.971292][T12045] slab_reclaimable:12834 slab_unreclaimable:114088 [ 590.971292][T12045] mapped:53573 shmem:37454 pagetables:1596 [ 590.971292][T12045] sec_pagetables:0 bounce:0 [ 590.971292][T12045] kernel_misc_reclaimable:0 [ 590.971292][T12045] free:1210116 free_pcp:10968 free_cma:0 [ 591.417273][T11938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.838795][T12045] Node 0 active_anon:182480kB inactive_anon:52kB active_file:24920kB inactive_file:215912kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:226080kB dirty:1728kB writeback:0kB shmem:141292kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14000kB pagetables:6196kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 591.969500][T11938] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.139900][T11151] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.147116][T11151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.222058][T11151] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.229282][T11151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.274540][T12045] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:144kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 592.579533][T12045] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 592.948646][T12045] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 593.039318][T12045] Node 0 DMA32 free:929976kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:176192kB inactive_anon:60kB active_file:24920kB inactive_file:214596kB unevictable:1536kB writepending:1908kB present:3129332kB managed:2539588kB mlocked:0kB bounce:0kB free_pcp:52144kB local_pcp:52144kB free_cma:0kB [ 593.458566][T12045] lowmem_reserve[]: 0 0 1 1 1 [ 593.545818][T12045] Node 0 Normal free:12kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 594.025779][T12045] lowmem_reserve[]: 0 0 0 0 0 [ 594.071154][T12045] Node 1 Normal free:3895368kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:144kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:6404kB local_pcp:6404kB free_cma:0kB [ 594.517789][T12045] lowmem_reserve[]: 0 0 0 0 0 [ 594.522563][T12045] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 594.611066][T11938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.648134][T12045] Node 0 DMA32: 569*4kB (UME) 664*8kB (UM) 15*16kB (UME) 127*32kB (UME) 787*64kB (UME) 303*128kB (UME) 64*256kB (ME) 17*512kB (ME) 5*1024kB (UM) 3*2048kB (UM) 197*4096kB (M) = 944308kB [ 594.698949][T12126] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 594.777499][T12045] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 594.945167][T12045] Node 1 Normal: 218*4kB (UME) 58*8kB (UE) 49*16kB (UME) 232*32kB (UE) 102*64kB (UME) 39*128kB (UME) 16*256kB (UM) 9*512kB (UME) 3*1024kB (UM) 2*2048kB (ME) 942*4096kB (M) = 3895368kB [ 594.976685][T11938] veth0_vlan: entered promiscuous mode [ 594.987113][T12139] netlink: 28 bytes leftover after parsing attributes in process `syz.5.963'. [ 595.056617][T11938] veth1_vlan: entered promiscuous mode [ 595.109706][T12045] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 595.178587][T12045] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 595.238901][T12045] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 595.301213][T12045] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 595.369887][T12045] 93421 total pagecache pages [ 595.424012][T11938] veth0_macvtap: entered promiscuous mode [ 595.429946][T12045] 29 pages in swap cache [ 595.434198][T12045] Free swap = 122884kB [ 595.496274][T12045] Total swap = 124996kB [ 595.500521][T12045] 2097051 pages RAM [ 595.504334][T12045] 0 pages HighMem/MovableOnly [ 595.512978][T11938] veth1_macvtap: entered promiscuous mode [ 595.591145][T12045] 430192 pages reserved [ 595.638991][T12045] 0 pages cma reserved [ 595.688093][T11938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.757259][T11938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.082193][T11431] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.138905][T11431] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.281769][T11431] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.384014][T11431] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.714254][T11182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.722109][T11182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.994907][T11182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.063970][T11182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.323070][T12172] netlink: 8 bytes leftover after parsing attributes in process `syz.8.968'. [ 599.345996][T12211] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 603.950305][T12282] FAULT_INJECTION: forcing a failure. [ 603.950305][T12282] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 604.199755][T12282] CPU: 1 UID: 0 PID: 12282 Comm: syz.5.981 Not tainted syzkaller #0 PREEMPT(full) [ 604.199787][T12282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 604.199802][T12282] Call Trace: [ 604.199810][T12282] [ 604.199819][T12282] dump_stack_lvl+0x16c/0x1f0 [ 604.199856][T12282] should_fail_ex+0x512/0x640 [ 604.199894][T12282] should_fail_alloc_page+0xe7/0x130 [ 604.199930][T12282] prepare_alloc_pages+0x3c2/0x610 [ 604.199972][T12282] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 604.200006][T12282] ? __lock_acquire+0x62e/0x1ce0 [ 604.200042][T12282] ? __vmf_anon_prepare+0x11c/0x240 [ 604.200076][T12282] ? do_pte_missing+0x10bd/0x3ba0 [ 604.200098][T12282] ? __handle_mm_fault+0x152a/0x2a50 [ 604.200120][T12282] ? __get_user_pages+0x551/0x34a0 [ 604.200156][T12282] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 604.200197][T12282] ? __lock_acquire+0xb97/0x1ce0 [ 604.200233][T12282] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 604.200272][T12282] ? policy_nodemask+0xea/0x4e0 [ 604.200310][T12282] alloc_pages_mpol+0x1fb/0x550 [ 604.200343][T12282] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 604.200377][T12282] ? __anon_vma_prepare+0x2db/0x5e0 [ 604.200408][T12282] folio_alloc_mpol_noprof+0x36/0x2f0 [ 604.200446][T12282] vma_alloc_folio_noprof+0xed/0x1e0 [ 604.200483][T12282] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 604.200519][T12282] ? __anon_vma_prepare+0x2e2/0x5e0 [ 604.200552][T12282] do_pte_missing+0x2230/0x3ba0 [ 604.200582][T12282] ? __pmd_alloc+0x3fb/0x930 [ 604.200620][T12282] __handle_mm_fault+0x152a/0x2a50 [ 604.200671][T12282] ? __pfx___handle_mm_fault+0x10/0x10 [ 604.200729][T12282] handle_mm_fault+0x589/0xd10 [ 604.200760][T12282] __get_user_pages+0x551/0x34a0 [ 604.200804][T12282] ? __pfx_validate_mm+0x10/0x10 [ 604.200833][T12282] ? __pfx___get_user_pages+0x10/0x10 [ 604.200878][T12282] get_user_pages_remote+0x243/0xab0 [ 604.200921][T12282] ? __pfx_get_user_pages_remote+0x10/0x10 [ 604.200957][T12282] ? __pfx_vma_link+0x10/0x10 [ 604.200995][T12282] get_arg_page+0xf4/0x310 [ 604.201020][T12282] ? __pfx_get_arg_page+0x10/0x10 [ 604.201044][T12282] ? up_write+0x1b2/0x520 [ 604.201084][T12282] copy_string_kernel+0x182/0x520 [ 604.201116][T12282] do_execveat_common.isra.0+0x2ed/0x610 [ 604.201150][T12282] __x64_sys_execve+0x8e/0xb0 [ 604.201177][T12282] do_syscall_64+0xcd/0x490 [ 604.201213][T12282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.201237][T12282] RIP: 0033:0x7fc30958ebe9 [ 604.201256][T12282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.201280][T12282] RSP: 002b:00007fc30a36b038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 604.201303][T12282] RAX: ffffffffffffffda RBX: 00007fc3097b6090 RCX: 00007fc30958ebe9 [ 604.201319][T12282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 604.201333][T12282] RBP: 00007fc309611e19 R08: 0000000000000000 R09: 0000000000000000 [ 604.201348][T12282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.201362][T12282] R13: 00007fc3097b6128 R14: 00007fc3097b6090 R15: 00007ffe5575d118 [ 604.201392][T12282] [ 604.508071][ C1] vkms_vblank_simulate: vblank timer overrun [ 608.880272][T12326] FAULT_INJECTION: forcing a failure. [ 608.880272][T12326] name failslab, interval 1, probability 0, space 0, times 0 [ 609.004388][T12326] CPU: 1 UID: 0 PID: 12326 Comm: syz.5.985 Not tainted syzkaller #0 PREEMPT(full) [ 609.004426][T12326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 609.004440][T12326] Call Trace: [ 609.004448][T12326] [ 609.004456][T12326] dump_stack_lvl+0x16c/0x1f0 [ 609.004493][T12326] should_fail_ex+0x512/0x640 [ 609.004525][T12326] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 609.004556][T12326] should_failslab+0xc2/0x120 [ 609.004588][T12326] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 609.004614][T12326] ? __pfx_acct_collect+0x10/0x10 [ 609.004650][T12326] ? taskstats_exit+0x654/0xbe0 [ 609.004688][T12326] taskstats_exit+0x654/0xbe0 [ 609.004723][T12326] ? __pfx_taskstats_exit+0x10/0x10 [ 609.004765][T12326] do_exit+0x5dc/0x2bf0 [ 609.004803][T12326] ? __pfx_do_exit+0x10/0x10 [ 609.004834][T12326] ? do_raw_spin_lock+0x12c/0x2b0 [ 609.004870][T12326] ? find_held_lock+0x2b/0x80 [ 609.004897][T12326] do_group_exit+0xd3/0x2a0 [ 609.004932][T12326] get_signal+0x2673/0x26d0 [ 609.004969][T12326] ? __pfx_get_signal+0x10/0x10 [ 609.004995][T12326] ? do_futex+0x122/0x350 [ 609.005025][T12326] ? __pfx_do_futex+0x10/0x10 [ 609.005057][T12326] arch_do_signal_or_restart+0x8f/0x790 [ 609.005090][T12326] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 609.005129][T12326] ? __pfx___do_sys_close_range+0x10/0x10 [ 609.005163][T12326] exit_to_user_mode_loop+0x84/0x110 [ 609.005199][T12326] do_syscall_64+0x3f6/0x490 [ 609.005233][T12326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.005266][T12326] RIP: 0033:0x7fc30958ebe9 [ 609.005283][T12326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.005306][T12326] RSP: 002b:00007fc30a38c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 609.005328][T12326] RAX: fffffffffffffe00 RBX: 00007fc3097b5fa8 RCX: 00007fc30958ebe9 [ 609.005344][T12326] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc3097b5fa8 [ 609.005358][T12326] RBP: 00007fc3097b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 609.005372][T12326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.005385][T12326] R13: 00007fc3097b6038 R14: 00007ffe5575d030 R15: 00007ffe5575d118 [ 609.005414][T12326] [ 609.539903][T12333] netlink: 24 bytes leftover after parsing attributes in process `syz.8.986'. [ 609.641229][T12332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.987'. [ 609.652804][T12336] QAT: Stopping all acceleration devices. [ 609.698151][T12335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.987'. [ 612.548090][T12377] FAULT_INJECTION: forcing a failure. [ 612.548090][T12377] name failslab, interval 1, probability 0, space 0, times 0 [ 612.698547][T12377] CPU: 1 UID: 0 PID: 12377 Comm: syz.1.993 Not tainted syzkaller #0 PREEMPT(full) [ 612.698580][T12377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 612.698594][T12377] Call Trace: [ 612.698602][T12377] [ 612.698610][T12377] dump_stack_lvl+0x16c/0x1f0 [ 612.698646][T12377] should_fail_ex+0x512/0x640 [ 612.698680][T12377] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 612.698713][T12377] should_failslab+0xc2/0x120 [ 612.698745][T12377] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 612.698775][T12377] ? __kernfs_new_node+0xd2/0x8e0 [ 612.698810][T12377] __kernfs_new_node+0xd2/0x8e0 [ 612.698845][T12377] ? __pfx___kernfs_new_node+0x10/0x10 [ 612.698884][T12377] ? find_held_lock+0x2b/0x80 [ 612.698908][T12377] ? kernfs_root+0xee/0x2a0 [ 612.698944][T12377] kernfs_new_node+0x13c/0x1e0 [ 612.698984][T12377] __kernfs_create_file+0x53/0x350 [ 612.699011][T12377] sysfs_add_file_mode_ns+0x207/0x3c0 [ 612.699057][T12377] sysfs_merge_group+0x1aa/0x340 [ 612.699091][T12377] ? __pfx_sysfs_merge_group+0x10/0x10 [ 612.699128][T12377] ? __pfx_dev_add_physical_location+0x10/0x10 [ 612.699168][T12377] ? bus_to_subsys+0x131/0x160 [ 612.699197][T12377] dpm_sysfs_add+0x237/0x280 [ 612.699236][T12377] device_add+0x9a6/0x1aa0 [ 612.699260][T12377] ? __pfx_device_add+0x10/0x10 [ 612.699281][T12377] ? lockdep_init_map_type+0x5c/0x280 [ 612.699315][T12377] ? __init_waitqueue_head+0xca/0x150 [ 612.699359][T12377] netdev_register_kobject+0x1a9/0x3d0 [ 612.699403][T12377] register_netdevice+0x13dc/0x2270 [ 612.699444][T12377] ? __pfx_register_netdevice+0x10/0x10 [ 612.699490][T12377] __tun_chr_ioctl+0x1ed9/0x48b0 [ 612.699512][T12377] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 612.699555][T12377] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 612.699581][T12377] ? hook_file_ioctl_common+0x145/0x410 [ 612.699621][T12377] ? __fget_files+0x20e/0x3c0 [ 612.699651][T12377] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 612.699675][T12377] __x64_sys_ioctl+0x18e/0x210 [ 612.699716][T12377] do_syscall_64+0xcd/0x490 [ 612.699751][T12377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.699775][T12377] RIP: 0033:0x7fd62c18ebe9 [ 612.699793][T12377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.699817][T12377] RSP: 002b:00007fd62cfed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 612.699839][T12377] RAX: ffffffffffffffda RBX: 00007fd62c3b5fa0 RCX: 00007fd62c18ebe9 [ 612.699855][T12377] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000003 [ 612.699869][T12377] RBP: 00007fd62c211e19 R08: 0000000000000000 R09: 0000000000000000 [ 612.699884][T12377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.699897][T12377] R13: 00007fd62c3b6038 R14: 00007fd62c3b5fa0 R15: 00007ffc1441d798 [ 612.699943][T12377] [ 615.305909][T12408] FAULT_INJECTION: forcing a failure. [ 615.305909][T12408] name fail_futex, interval 1, probability 0, space 0, times 0 [ 615.433017][T12425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1001'. [ 615.568199][T12425] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1001'. [ 615.672747][T12430] Invalid ELF header magic: != ELF [ 615.748903][T12408] CPU: 1 UID: 0 PID: 12408 Comm: syz.3.999 Not tainted syzkaller #0 PREEMPT(full) [ 615.748937][T12408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 615.748952][T12408] Call Trace: [ 615.748960][T12408] [ 615.748969][T12408] dump_stack_lvl+0x16c/0x1f0 [ 615.749005][T12408] should_fail_ex+0x512/0x640 [ 615.749044][T12408] get_futex_key+0x1d0/0x1560 [ 615.749075][T12408] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 615.749105][T12408] ? __pfx_get_futex_key+0x10/0x10 [ 615.749137][T12408] ? __pfx_wake_up_new_task+0x10/0x10 [ 615.749165][T12408] futex_wake+0xea/0x530 [ 615.749201][T12408] ? kernel_clone+0x253/0x930 [ 615.749232][T12408] ? __pfx_futex_wake+0x10/0x10 [ 615.749280][T12408] do_futex+0x1e3/0x350 [ 615.749311][T12408] ? __pfx_do_futex+0x10/0x10 [ 615.749341][T12408] ? __pfx_task_mm_cid_work+0x10/0x10 [ 615.749363][T12408] ? __pfx___might_resched+0x10/0x10 [ 615.749390][T12408] __x64_sys_futex+0x1e0/0x4c0 [ 615.749422][T12408] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 615.749454][T12408] ? __pfx___x64_sys_futex+0x10/0x10 [ 615.749484][T12408] ? xfd_validate_state+0x61/0x180 [ 615.749524][T12408] ? __pfx_do_writev+0x10/0x10 [ 615.749559][T12408] do_syscall_64+0xcd/0x490 [ 615.749594][T12408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.749618][T12408] RIP: 0033:0x7ff0a198ebe9 [ 615.749637][T12408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.749661][T12408] RSP: 002b:00007ff0a27b10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 615.749683][T12408] RAX: ffffffffffffffda RBX: 00007ff0a1bb5fa8 RCX: 00007ff0a198ebe9 [ 615.749698][T12408] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff0a1bb5fac [ 615.749713][T12408] RBP: 00007ff0a1bb5fa0 R08: 00007ff0a27b2000 R09: 0000000000000000 [ 615.749728][T12408] R10: 000000000000002c R11: 0000000000000246 R12: 0000000000000000 [ 615.749748][T12408] R13: 00007ff0a1bb6038 R14: 00007ffc5b63f2b0 R15: 00007ffc5b63f398 [ 615.749777][T12408] [ 615.961094][T12425] geneve1: entered promiscuous mode [ 615.966429][T12425] geneve1: entered allmulticast mode [ 616.244398][T12433] IPVS: length: 131 != 8 [ 617.519538][T12459] FAULT_INJECTION: forcing a failure. [ 617.519538][T12459] name failslab, interval 1, probability 0, space 0, times 0 [ 617.599593][T12459] CPU: 1 UID: 0 PID: 12459 Comm: syz.5.1008 Not tainted syzkaller #0 PREEMPT(full) [ 617.599627][T12459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 617.599642][T12459] Call Trace: [ 617.599650][T12459] [ 617.599660][T12459] dump_stack_lvl+0x16c/0x1f0 [ 617.599695][T12459] should_fail_ex+0x512/0x640 [ 617.599730][T12459] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 617.599762][T12459] should_failslab+0xc2/0x120 [ 617.599795][T12459] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 617.599829][T12459] ? __pfx___might_resched+0x10/0x10 [ 617.599853][T12459] ? __anon_vma_prepare+0x344/0x5e0 [ 617.599884][T12459] __anon_vma_prepare+0x344/0x5e0 [ 617.599909][T12459] ? __filemap_get_folio+0x32b/0xc30 [ 617.599945][T12459] __vmf_anon_prepare+0x11c/0x240 [ 617.599984][T12459] hugetlb_fault+0x1ba4/0x2f40 [ 617.600013][T12459] ? __pfx_hugetlb_fault+0x10/0x10 [ 617.600048][T12459] ? find_vma+0xbf/0x140 [ 617.600079][T12459] ? __pfx_find_vma+0x10/0x10 [ 617.600114][T12459] handle_mm_fault+0xbfa/0xd10 [ 617.600141][T12459] ? __bpf_trace_exceptions+0x1/0x40 [ 617.600180][T12459] do_user_addr_fault+0x7a6/0x1370 [ 617.600221][T12459] ? rcu_is_watching+0x12/0xc0 [ 617.600249][T12459] exc_page_fault+0x5c/0xb0 [ 617.600280][T12459] asm_exc_page_fault+0x26/0x30 [ 617.600302][T12459] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 617.600328][T12459] Code: e9 14 1f 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f [ 617.600351][T12459] RSP: 0018:ffffc9000c9f7db0 EFLAGS: 00050206 [ 617.600370][T12459] RAX: 000000000000002f RBX: 0000000000000005 RCX: 0000000000000005 [ 617.600385][T12459] RDX: ffffed1006b21640 RSI: ffff88803590b1fb RDI: 0000000000000000 [ 617.600400][T12459] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed1006b2163f [ 617.600414][T12459] R10: ffff88803590b1ff R11: 0000000000000000 R12: ffff88803590b1fb [ 617.600429][T12459] R13: 0000000000000005 R14: 00007ffffffff000 R15: 0000000000000000 [ 617.600459][T12459] _copy_to_user+0xbb/0xd0 [ 617.600484][T12459] __do_sys_getcwd+0x483/0x930 [ 617.600526][T12459] ? __pfx___do_sys_getcwd+0x10/0x10 [ 617.600559][T12459] ? fput+0x9b/0xd0 [ 617.600596][T12459] ? xfd_validate_state+0x61/0x180 [ 617.600630][T12459] ? __pfx_ksys_write+0x10/0x10 [ 617.600668][T12459] do_syscall_64+0xcd/0x490 [ 617.600702][T12459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.600726][T12459] RIP: 0033:0x7fc30958ebe9 [ 617.600744][T12459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 617.600766][T12459] RSP: 002b:00007fc30a38c038 EFLAGS: 00000246 ORIG_RAX: 000000000000004f [ 617.600787][T12459] RAX: ffffffffffffffda RBX: 00007fc3097b5fa0 RCX: 00007fc30958ebe9 [ 617.600802][T12459] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000000 [ 617.600823][T12459] RBP: 00007fc309611e19 R08: 0000000000000000 R09: 0000000000000000 [ 617.600838][T12459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 617.600852][T12459] R13: 00007fc3097b6038 R14: 00007fc3097b5fa0 R15: 00007ffe5575d118 [ 617.600882][T12459] [ 617.913357][ C1] vkms_vblank_simulate: vblank timer overrun [ 621.230215][T12489] netlink: 268 bytes leftover after parsing attributes in process `syz.8.1013'. [ 627.225185][T12604] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1029'. [ 629.428056][T12620] netlink: zone id is out of range [ 629.433216][T12620] netlink: zone id is out of range [ 629.627515][T12620] netlink: zone id is out of range [ 629.750047][T12620] netlink: zone id is out of range [ 629.755416][T12620] netlink: zone id is out of range [ 629.930959][T12620] netlink: zone id is out of range [ 630.028313][T12620] netlink: zone id is out of range [ 630.126287][T12620] netlink: zone id is out of range [ 630.170633][T12620] netlink: zone id is out of range [ 630.210194][T12620] netlink: zone id is out of range [ 633.675873][T12665] zswap: compressor 000 not available [ 634.381569][T12681] random: crng reseeded on system resumption [ 634.822482][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.828952][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 637.088389][T11148] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 637.107154][T11148] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 637.115859][T11148] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 637.128019][T11148] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 637.139117][T11148] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 637.658005][T12697] cgroup: fork rejected by pids controller in /syz8 [ 638.276103][T12718] chnl_net:caif_netlink_parms(): no params data found [ 639.221600][T11148] Bluetooth: hci8: command tx timeout [ 640.047471][T12718] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.103299][T12718] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.110656][T12718] bridge_slave_0: entered allmulticast mode [ 640.192597][T12813] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1054'. [ 640.237595][T12718] bridge_slave_0: entered promiscuous mode [ 640.306627][T12718] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.345311][T12718] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.385146][T12718] bridge_slave_1: entered allmulticast mode [ 640.450377][T12718] bridge_slave_1: entered promiscuous mode [ 640.773609][T12826] __vm_enough_memory: pid: 12826, comm: syz.1.1056, bytes: 4398046511104 not enough memory for the allocation [ 641.033886][T12718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.264561][T12718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.294769][T11148] Bluetooth: hci8: command tx timeout [ 641.879740][T12718] team0: Port device team_slave_0 added [ 642.224953][T12718] team0: Port device team_slave_1 added [ 642.561818][T12718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.594534][T12718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 642.738636][T12718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.816946][T12718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.853080][T12718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 642.978195][T12718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.371631][T11148] Bluetooth: hci8: command tx timeout [ 643.607948][T12718] hsr_slave_0: entered promiscuous mode [ 643.640357][T12718] hsr_slave_1: entered promiscuous mode [ 643.709294][T12718] debugfs: 'hsr0' already exists in 'hsr' [ 643.735071][T12718] Cannot create hsr debugfs directory [ 645.451397][T11148] Bluetooth: hci8: command tx timeout [ 647.815016][T12718] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 647.941337][T12718] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 648.000474][T12718] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 648.097153][T12718] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 649.415803][T12718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.552656][T12718] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.588401][T11143] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.588524][T11143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.669231][T12466] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.669324][T12466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.871338][T12718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 650.787394][T12957] could not allocate digest TFM handle [ 651.414850][T12718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.035454][T12718] veth0_vlan: entered promiscuous mode [ 653.103507][T12718] veth1_vlan: entered promiscuous mode [ 653.363212][T12718] veth0_macvtap: entered promiscuous mode [ 653.428186][T12718] veth1_macvtap: entered promiscuous mode [ 653.543684][T12718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.618360][T12718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.689742][T11143] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.760985][T11143] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.817473][T11143] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.883666][T11143] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.225817][T11431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.275055][T11431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.439475][T11143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 654.491900][T11143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.614237][T13023] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1075'. [ 657.157092][T13053] FAULT_INJECTION: forcing a failure. [ 657.157092][T13053] name failslab, interval 1, probability 0, space 0, times 0 [ 657.226110][T13053] CPU: 1 UID: 0 PID: 13053 Comm: syz.5.1080 Not tainted syzkaller #0 PREEMPT(full) [ 657.226143][T13053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 657.226159][T13053] Call Trace: [ 657.226167][T13053] [ 657.226176][T13053] dump_stack_lvl+0x16c/0x1f0 [ 657.226215][T13053] should_fail_ex+0x512/0x640 [ 657.226261][T13053] ? __kmalloc_noprof+0xbf/0x510 [ 657.226293][T13053] ? __netlink_kernel_create+0x17f/0x750 [ 657.226327][T13053] should_failslab+0xc2/0x120 [ 657.226360][T13053] __kmalloc_noprof+0xd2/0x510 [ 657.226396][T13053] __netlink_kernel_create+0x17f/0x750 [ 657.226433][T13053] ? __pfx___netlink_kernel_create+0x10/0x10 [ 657.226478][T13053] uevent_net_init+0xf8/0x350 [ 657.226516][T13053] ? __pfx_uevent_net_init+0x10/0x10 [ 657.226557][T13053] ? __pfx_uevent_net_rcv+0x10/0x10 [ 657.226605][T13053] ? __pfx_uevent_net_init+0x10/0x10 [ 657.226643][T13053] ops_init+0x1e2/0x5f0 [ 657.226681][T13053] setup_net+0x10f/0x380 [ 657.226714][T13053] ? lockdep_init_map_type+0x5c/0x280 [ 657.226749][T13053] ? __pfx_setup_net+0x10/0x10 [ 657.226786][T13053] ? debug_mutex_init+0x37/0x70 [ 657.226813][T13053] copy_net_ns+0x2a6/0x5f0 [ 657.226856][T13053] create_new_namespaces+0x3ea/0xa90 [ 657.226892][T13053] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 657.226923][T13053] ksys_unshare+0x45b/0xa40 [ 657.226959][T13053] ? __pfx_ksys_unshare+0x10/0x10 [ 657.226995][T13053] ? xfd_validate_state+0x61/0x180 [ 657.227041][T13053] __x64_sys_unshare+0x31/0x40 [ 657.227074][T13053] do_syscall_64+0xcd/0x490 [ 657.227111][T13053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.227141][T13053] RIP: 0033:0x7fc30958ebe9 [ 657.227160][T13053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.227185][T13053] RSP: 002b:00007fc30a38c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 657.227208][T13053] RAX: ffffffffffffffda RBX: 00007fc3097b5fa0 RCX: 00007fc30958ebe9 [ 657.227225][T13053] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 657.227245][T13053] RBP: 00007fc309611e19 R08: 0000000000000000 R09: 0000000000000000 [ 657.227260][T13053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 657.227275][T13053] R13: 00007fc3097b6038 R14: 00007fc3097b5fa0 R15: 00007ffe5575d118 [ 657.227306][T13053] [ 657.227450][T13053] kobject_uevent: unable to create netlink socket! [ 657.557198][T11148] Bluetooth: hci4: command 0x0406 tx timeout [ 658.983838][T13072] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 662.483980][T11148] Bluetooth: hci1: command 0x0406 tx timeout [ 664.919727][T13144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1090'. [ 667.255795][T13176] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 667.268064][T13176] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 667.277402][T13176] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 667.286396][T13176] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 667.295366][T13176] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 667.380469][T13178] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1093'. [ 667.601161][T13176] Bluetooth: hci6: command 0x0406 tx timeout [ 668.856136][T13174] chnl_net:caif_netlink_parms(): no params data found [ 669.362078][T11364] Bluetooth: hci9: command tx timeout [ 670.007613][T13202] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1096'. [ 670.037766][T13176] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 670.058670][T13176] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 670.068611][T13176] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 670.080622][T13176] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 670.089583][T13176] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 670.213243][T13174] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.268495][T13174] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.275843][T13174] bridge_slave_0: entered allmulticast mode [ 670.376929][T13174] bridge_slave_0: entered promiscuous mode [ 670.457405][T13174] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.518032][T13174] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.525461][T13174] bridge_slave_1: entered allmulticast mode [ 670.622925][T13174] bridge_slave_1: entered promiscuous mode [ 671.277510][ T31] INFO: task syz.6.838:11092 blocked for more than 143 seconds. [ 671.290499][ T31] Not tainted syzkaller #0 [ 671.295499][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 671.379845][ T31] task:syz.6.838 state:D stack:26696 pid:11092 tgid:11088 ppid:9782 task_flags:0x400140 flags:0x00004006 [ 671.439662][T13174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.457082][T13176] Bluetooth: hci9: command tx timeout [ 671.512907][ T31] Call Trace: [ 671.516250][ T31] [ 671.570058][T13174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.579525][ T31] __schedule+0x1190/0x5de0 [ 671.584121][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 671.652292][ T31] ? __pfx___schedule+0x10/0x10 [ 671.706774][ T31] ? find_held_lock+0x2b/0x80 [ 671.764098][ T31] ? schedule+0x2d7/0x3a0 [ 671.778232][ T31] schedule+0xe7/0x3a0 [ 671.782366][ T31] schedule_timeout+0x257/0x290 [ 671.836743][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 671.842213][ T31] ? mark_held_locks+0x49/0x80 [ 671.926632][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 671.950155][ T31] __wait_for_common+0x2fc/0x4e0 [ 671.955252][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 672.026251][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 672.078554][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 672.126064][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 672.166559][T13176] Bluetooth: hci10: command tx timeout [ 672.176355][ T31] __flush_workqueue+0x3e2/0x1230 [ 672.211026][ T31] ? find_held_lock+0x2b/0x80 [ 672.215782][ T31] ? find_held_lock+0x2b/0x80 [ 672.286377][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 672.291929][ T31] ? queue_work_on+0x12a/0x1f0 [ 672.415339][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 672.476475][ T31] rxrpc_destroy_all_connections+0xed/0x440 [ 672.539790][ T31] ? __pfx_rxrpc_destroy_all_connections+0x10/0x10 [ 672.590093][ T31] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 672.635188][ T31] rxrpc_exit_net+0x7b/0xc0 [ 672.666269][ T31] ? __pfx_rxrpc_exit_net+0x10/0x10 [ 672.671634][ T31] ops_undo_list+0x2ee/0xab0 [ 672.716484][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 672.721700][ T31] ? ops_init+0x2fa/0x5f0 [ 672.783445][ T31] setup_net+0x1f1/0x380 [ 672.796982][ T31] ? lockdep_init_map_type+0x1/0x280 [ 672.802459][ T31] ? __pfx_setup_net+0x10/0x10 [ 672.853749][ T31] ? debug_mutex_init+0x37/0x70 [ 672.886423][ T31] copy_net_ns+0x2a6/0x5f0 [ 672.906030][ T31] create_new_namespaces+0x3ea/0xa90 [ 672.911450][ T31] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 672.936056][ T31] ksys_unshare+0x45b/0xa40 [ 672.952639][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 672.976438][ T31] ? xfd_validate_state+0x61/0x180 [ 672.981819][ T31] __x64_sys_unshare+0x31/0x40 [ 673.016088][ T31] do_syscall_64+0xcd/0x490 [ 673.020672][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.045929][ T31] RIP: 0033:0x7fe7ee98ebe9 [ 673.050398][ T31] RSP: 002b:00007fe7ef814038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 673.097702][ T31] RAX: ffffffffffffffda RBX: 00007fe7eebb6090 RCX: 00007fe7ee98ebe9 [ 673.125904][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 673.133949][ T31] RBP: 00007fe7eea11e19 R08: 0000000000000000 R09: 0000000000000000 [ 673.186036][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.194152][ T31] R13: 00007fe7eebb6128 R14: 00007fe7eebb6090 R15: 00007ffd89cd07b8 [ 673.235883][ T31] [ 673.252082][ T31] INFO: task kworker/u10:2:11146 blocked for more than 145 seconds. [ 673.291691][ T31] Not tainted syzkaller #0 [ 673.405918][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 673.415115][ T31] task:kworker/u10:2 state:D stack:26952 pid:11146 tgid:11146 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 673.503915][ T31] Workqueue: netns cleanup_net [ 673.515843][T13176] Bluetooth: hci9: command tx timeout [ 673.536306][ T31] Call Trace: [ 673.539632][ T31] [ 673.542582][ T31] __schedule+0x1190/0x5de0 [ 673.586417][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 673.591527][ T31] ? __pfx___schedule+0x10/0x10 [ 673.645930][ T31] ? find_held_lock+0x2b/0x80 [ 673.650698][ T31] ? schedule+0x2d7/0x3a0 [ 673.715725][ T31] schedule+0xe7/0x3a0 [ 673.720065][ T31] schedule_timeout+0x257/0x290 [ 673.725362][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 673.785710][ T31] ? mark_held_locks+0x49/0x80 [ 673.790566][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 673.825656][ T31] __wait_for_common+0x2fc/0x4e0 [ 673.830684][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 673.887230][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 673.892845][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 673.935562][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 673.942025][ T31] __flush_workqueue+0x3e2/0x1230 [ 673.996017][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 674.001675][ T31] ? rxrpc_discard_prealloc+0xb6/0x9c0 [ 674.045523][ T31] ? rxrpc_release+0x568/0x670 [ 674.050547][ T31] ? rxrpc_release_calls_on_socket+0x237/0x4e0 [ 674.105517][ T31] rxrpc_release+0x27a/0x670 [ 674.110236][ T31] sock_release+0x91/0x1d0 [ 674.114694][ T31] afs_close_socket+0x21b/0x3e0 [ 674.170606][ T31] ? afs_wait_for_servers+0xec/0x220 [ 674.215361][ T31] ? __pfx_afs_close_socket+0x10/0x10 [ 674.225715][ T31] ? __timer_delete_sync+0x108/0x1b0 [ 674.231287][ T31] ? __pfx_afs_net_exit+0x10/0x10 [ 674.236734][T13176] Bluetooth: hci10: command tx timeout [ 674.297048][ T31] afs_net_exit+0x93/0x140 [ 674.301884][ T31] ops_undo_list+0x2ee/0xab0 [ 674.343389][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 674.356116][ T31] ? cleanup_net+0x334/0x890 [ 674.361066][ T31] ? idr_destroy+0x62/0x2e0 [ 674.425025][ T31] cleanup_net+0x408/0x890 [ 674.432215][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 674.466019][ T31] ? rcu_is_watching+0x12/0xc0 [ 674.471139][ T31] process_one_work+0x9cf/0x1b70 [ 674.527411][ T31] ? __pfx_process_one_work+0x10/0x10 [ 674.533757][ T31] ? assign_work+0x1a0/0x250 [ 674.580872][ T31] worker_thread+0x6c8/0xf10 [ 674.620230][ T31] ? __kthread_parkme+0x19e/0x250 [ 674.642490][ T31] ? __pfx_worker_thread+0x10/0x10 [ 674.674507][ T31] kthread+0x3c5/0x780 [ 674.692783][ T31] ? __pfx_kthread+0x10/0x10 [ 674.732175][ T31] ? rcu_is_watching+0x12/0xc0 [ 674.746502][ T31] ? __pfx_kthread+0x10/0x10 [ 674.751263][ T31] ret_from_fork+0x5d4/0x6f0 [ 674.794847][ T31] ? __pfx_kthread+0x10/0x10 [ 674.825156][ T31] ret_from_fork_asm+0x1a/0x30 [ 674.830386][ T31] [ 674.886903][ T31] [ 674.886903][ T31] Showing all locks held in the system: [ 674.894714][ T31] 1 lock held by khungtaskd/31: [ 675.055272][ T31] #0: ffffffff8e5c10a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 675.099707][ T31] 2 locks held by kworker/1:4/5935: [ 675.199215][ T31] #0: ffff88801b880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 675.267989][ T31] #1: ffffc9000a8f7d10 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 675.334860][ T31] 2 locks held by getty/9128: [ 675.339583][ T31] #0: ffff888030ed20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 675.414856][ T31] #1: ffffc900030432f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 675.494866][ T31] 1 lock held by syz.0.618/9679: [ 675.544936][ T31] 2 locks held by dhcpcd/10648: [ 675.575084][ T31] #0: ffff8880354a5608 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 675.597751][T13176] Bluetooth: hci9: command tx timeout [ 675.651515][ T31] #1: ffffffff8e5cc638 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 675.725695][ T31] 1 lock held by syz.6.838/11092: [ 675.730965][ T31] #0: ffffffff90370850 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 675.854650][ T31] 3 locks held by kworker/u10:1/11145: [ 675.874577][ T31] #0: ffff8880b853a458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 675.934526][ T31] #1: ffff8880b8524088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 675.943358][ T31] #2: ffff88805d140768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x99/0x580 [ 676.080589][ T31] 3 locks held by kworker/u10:2/11146: [ 676.104664][ T31] #0: ffff88801c6fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 676.162639][ T31] #1: ffffc9000dcc7d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 676.212344][ T31] #2: ffffffff90370850 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 676.274346][ T31] 3 locks held by kworker/u10:6/11202: [ 676.281212][ T31] #0: ffff88801b889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 676.324658][T13176] Bluetooth: hci10: command tx timeout [ 676.364335][ T31] #1: ffffc9000c927d10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 676.414729][ T31] #2: ffffffff90386b48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 676.454524][ T31] 1 lock held by syz.7.857/11228: [ 676.460071][ T31] #0: ffffffff90370850 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 676.505175][ T31] 1 lock held by syz.9.911/11700: [ 676.511146][ T31] #0: ffffffff90370850 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 676.555093][ T31] 1 lock held by syz.3.1014/12506: [ 676.560319][ T31] #0: ffffffff90370850 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 676.584180][ T31] 1 lock held by syz.8.1072/12956: [ 676.589977][ T31] #0: ffff88803d710808 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 676.634313][ T31] 1 lock held by syz.1.1074/12992: [ 676.654226][ T31] #0: ffff888012624408 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 676.674941][ T31] 4 locks held by syz.4.1096/13216: [ 676.694196][ T31] #0: ffff88803ddd0dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 676.730191][ T31] #1: ffff88803ddd00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 676.764102][ T31] #2: ffffffff905eeba8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 676.795041][ T31] #3: ffff8880340d6338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 676.816548][ T31] 1 lock held by syz.5.1099/13223: [ 676.822506][ T31] #0: ffffffff90386b48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 676.874369][ T31] 2 locks held by syz-executor/13222: [ 676.880088][ T31] #0: ffffffff90370850 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 676.904203][ T31] #1: ffffffff90386b48 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21d/0x7d0 [ 676.994459][ T31] [ 676.997305][ T31] ============================================= [ 676.997305][ T31] [ 677.206584][ T31] NMI backtrace for cpu 1 [ 677.206605][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 677.206632][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 677.206646][ T31] Call Trace: [ 677.206654][ T31] [ 677.206663][ T31] dump_stack_lvl+0x116/0x1f0 [ 677.206699][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 677.206721][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 677.206753][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 677.206793][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 677.206819][ T31] watchdog+0xf0e/0x1260 [ 677.206860][ T31] ? __pfx_watchdog+0x10/0x10 [ 677.206892][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 677.206923][ T31] ? __kthread_parkme+0x19e/0x250 [ 677.206955][ T31] ? __pfx_watchdog+0x10/0x10 [ 677.206988][ T31] kthread+0x3c5/0x780 [ 677.207022][ T31] ? __pfx_kthread+0x10/0x10 [ 677.207058][ T31] ? rcu_is_watching+0x12/0xc0 [ 677.207082][ T31] ? __pfx_kthread+0x10/0x10 [ 677.207116][ T31] ret_from_fork+0x5d4/0x6f0 [ 677.207153][ T31] ? __pfx_kthread+0x10/0x10 [ 677.207187][ T31] ret_from_fork_asm+0x1a/0x30 [ 677.207229][ T31] [ 677.207246][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 677.362555][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 677.376175][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 677.389857][ T31] Call Trace: [ 677.395378][ T31] [ 677.398612][ T31] dump_stack_lvl+0x3d/0x1f0 [ 677.405990][ T31] vpanic+0x6e8/0x7a0 [ 677.410431][ T31] ? __pfx_vpanic+0x10/0x10 [ 677.415635][ T31] panic+0xca/0xd0 [ 677.420774][ T31] ? __pfx_panic+0x10/0x10 [ 677.425992][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 677.432424][ T31] ? irq_work_queue+0xce/0x100 [ 677.438538][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 677.445903][ T31] ? __wake_up_klogd.part.0+0x99/0xf0 [ 677.452866][ T31] ? watchdog+0xd78/0x1260 [ 677.458988][ T31] ? watchdog+0xd6b/0x1260 [ 677.464899][ T31] watchdog+0xd89/0x1260 [ 677.471833][ T31] ? __pfx_watchdog+0x10/0x10 [ 677.478932][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 677.484677][ T31] ? __kthread_parkme+0x19e/0x250 [ 677.491978][ T31] ? __pfx_watchdog+0x10/0x10 [ 677.497851][ T31] kthread+0x3c5/0x780 [ 677.502763][ T31] ? __pfx_kthread+0x10/0x10 [ 677.509983][ T31] ? rcu_is_watching+0x12/0xc0 [ 677.516553][ T31] ? __pfx_kthread+0x10/0x10 [ 677.522829][ T31] ret_from_fork+0x5d4/0x6f0 [ 677.529617][ T31] ? __pfx_kthread+0x10/0x10 [ 677.536564][ T31] ret_from_fork_asm+0x1a/0x30 [ 677.542021][ T31] [ 677.548174][ T31] Kernel Offset: disabled [ 677.555056][ T31] Rebooting in 86400 seconds..