last executing test programs: 2m39.231885687s ago: executing program 0 (id=914): unshare$auto(0x40000080) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) listmount$auto(0x0, &(0x7f0000000040)=0x40000000004, 0x6, 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r2, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) sysinfo$auto(&(0x7f0000000100)={0x6, [0x7, 0xc, 0x100], 0x200, 0xd5, 0x0, 0x7, 0x6, 0x1, 0x1, 0x0, 0x100000004, 0x7, 0x219}) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, 0x0) execveat$auto(r3, 0x0, &(0x7f00000000c0)=&(0x7f0000000340)='/sys/kerneh/deync\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdc\xb3\"\xd4=e\x13\xb2T\xd9\xf4\xc2\\vxI\xf0\x06W\x96\xc1\xf1\xb8$\xb8(\xe2\x13\xde9d\x8c\xf8\"y\xce\xf0t\x98\x1d2w#\xa7\x0f\xf0\xce\x9akS\x0f]\xf7\xbdT\xe8J\x1b\x18\x03-6\x11\x16\xc14sz\xbcR\"\x83\x1eOcM%\x85\x1c@2\x81\xe2\xd3\xe6\x0e\x82\xbd\xa4\xc1\x92\xb0\x16\x11\x90@\xf2\xa8Q<\x10\x99\xfcTb\xf5\x01\x8c\xad\x85\x9b\xf1z\xa2\xa5OM\xca`#\xa6!\xb7\x12\xbd\x05f\b^\xff\x8e+\x84\x8c\xd9\xd8\x9eF;\xe2\x92\xfac\x04\x11K\x86s6eP\x03^\xd4\xc9\x11\xc29\xc5\x86F\xc9l-\x87\vV\x85\xac\xc1,\xff1[\x8fR\r\xe3\xee\x1e\x88\x1b\x00\xf0^\x91\xf8qYQ/\xb4\x06\x06\x18f', 0x0, 0x8) mmap$auto(0x40000000000000, 0x2020008, 0x8002000006, 0xeb1, 0xffffffffffffffff, 0x200008000) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r4, 0x0, 0x1f40) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) r6 = socket(0x2, 0x801, 0x106) getsockopt$auto(r6, 0x6, 0x21, 0x0, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f0000001640)="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") openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) 2m36.443038054s ago: executing program 0 (id=923): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x1000000000d, 0x1, 0x948b, 0x6, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x5, 0x2, 0x2]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pwrite64$auto(0xc8, 0x0, 0xe, 0x3) socket(0x18, 0xa, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.0/detach\x00', 0x2501, 0x0) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) write$auto(0x3, 0x0, 0xfdf3) read$auto_check_wx_fops_(0xffffffffffffffff, &(0x7f0000000140)=""/154, 0x9a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) ioctl$auto(0x3, 0x40081271, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x200007, 0x8) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) 2m34.863604043s ago: executing program 0 (id=927): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/packet\x00', 0x2880, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x218, 0x1001, 0x24, 0x1, 0xffffffffffffffff, 0x0, 0x5}, 0x4f4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x7, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)="e7696e5891a9bccbf2a814c2b1c2da6a4642e71e423e55bb3bdfb80fb3496c6bac2cd2cc3aa9633c3668b1128be76976577ef8b494eb27dd7c5c3009036684e6ce3fba9b6c44624a383a1a8daaf2a07cdc3efb51136711a3d8b8d74233b4c4ecce84f9d2a5ca501114d56c1a0499ae8acb22ed5caafa45df6d315664bd5e8188ad7fe06a284669d94a69dc6fb65b3fed2d93b01461860e9360cb1674e2869745a587809f441d6c6e3b306ec365b787e5b9b57f29", 0xb4) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf25040000000a0016070000000400000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r1, r4, 0xfffe) socket(0x26, 0x6, 0x66) r5 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r5, &(0x7f0000000080)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x100, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x5) writev$auto(0xffffffffffffffff, 0x0, 0x3) recvmsg$auto(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)="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", 0x8, &(0x7f0000000600)={&(0x7f00000003c0)="444debcb5d4827b41b873d646e2663fb2d4aa24da78f4b3472bd8daf8c57304fe5302fe1869cfca458a5a39bd4006710640f6032088c509f0c082c1b04896afe04d524b8b80ce2949dae1a1d2bec705c343bc92a41212ae3ed0a036e67d0c6d7b35e6cb8956ef9b289a7e42615af9f0470dc70d3deea952a1d85a1a845530a190757f55d6e53993d1e8f22b49f44b8a5b9b989d8ed44e1a1f0002bb9f9c8813bee34cfb9b329b8b45794054ee04fdb17a945013b532f53854704c99cc8f02c1582b9c91704e2ed3d57e019cf6205", 0x3}, 0xd3, &(0x7f0000000500)="6bfee52cc6d76e1c2f8b714f9ce8de29c2b8c6a36fd1081b8f6753c4db3a957fc9f3c8ce5a1f6aae5db64bc4b8383dea96682820b78f0fdf870dba5430e851305d4713df7f1124096ace834632a497cc07ffb3b6254aa69082434244066c46fe36fd6a587c8d1a8b40662762a5e48ddb2c86fa27c693a26df7fa2dd4f5762a1616bbbc094ba84c2f033b83814b8572c7bb08c224a9b33f1ac650d8c51cff0960141e613531d3f03e45860d2c2f7110f12d60c0b21f6a1556472a2f918584", 0xc, 0xffffffff}, 0xfff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x10000000000001, 0xffffffffffff0009, 0x4) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x41000, 0x0) 2m33.992535344s ago: executing program 1 (id=928): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mseal$auto(0x0, 0x7dda, 0x0) getpgrp(0xffffffffffffffff) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/ext4/sda1/fc_info\x00', 0x10b402, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x4000000000000005, 0x2020009, 0xaf, 0x19, r1, 0xf43) madvise$auto(0x0, 0x2000040080000004, 0xe) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(r3, 0x2, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x29, 0x5, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x2, 0x1ff, 0x7, 0x5, 0x7181, 0x4, 0x7, 0x3, 0x8009, 0x7, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0x5a61fda4, 0x8, 0x10007, 0x80, 0x4, 0x0, 0xa, 0xffffffff, 0x1, 0x0, 0x84, 0x0, 0xfff, 0x4, 0x0, 0x2, [0x9a8, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0, 0x4000, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4ab, 0x0, 0x0, 0x0, 0x0, 0x77ff, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x6, 0x0, 0x0, 0x10000]}, 0x1fe, 0xd) readv$auto(r0, 0x0, 0x7) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/general_profit\x00', 0xa800, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffffffffffd03, &(0x7f00000001c0)) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={0x0, 0x55}, 0x6, 0x66, 0x0) ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)=0x8) 2m33.301969586s ago: executing program 0 (id=931): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x2) r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r0, &(0x7f0000008d40)='($}-)#@\x00', 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x10cc3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r1 = socket(0xf, 0xa, 0xf) setsockopt$auto(r1, 0x1, 0xc, 0x0, 0x7fffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0xd, 0x400000004, 0x0, 0x5, 0xb) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r4 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189082, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/kernel/kexec_load_disabled\x00', 0x202, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="002400cffce64a", @ANYRES8=r5, @ANYBLOB="00022abd7000fbdbdf250200000008000300000000000500040000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x20040885) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf251c"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES16=r4], 0x1ac}}, 0x40000) 2m32.199712272s ago: executing program 0 (id=934): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) mmap$auto(0x1, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="a7665db4b1e04a788bfa03"], 0x14}, 0x1, 0x0, 0x0, 0x4000881}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002040)={'bond_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r4, 0xc0b45545, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0x9, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd9, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x8000000000000001, 0x7, 0x100000000000007, 0xd, 0xd, 0x1, 0xfffffffffffffffe]}, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r1, 0x4c81, r5) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, &(0x7f0000000080)="a3c72e71ed506a221381f0538fef", 0xe) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x80280, 0x0) 2m31.966733853s ago: executing program 1 (id=936): mmap$auto(0x0, 0x101, 0xdf, 0x6bb, 0x2, 0x8002) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x24004004}, 0x80) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0xa, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) listen$auto(0x3, 0x81) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) close_range$auto(0x2, 0xa, 0x0) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x89f1, 0x24) mmap$auto(0x1, 0x20009, 0x400df, 0xeb1, r2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x4, 0x0) setresgid$auto(0x0, 0x6, 0x0) clone$auto(0x0, 0x3, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0xff09, 0x0) sysfs$auto(0x1, 0x5, 0xfffffffffffffffd) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) 2m30.820063344s ago: executing program 0 (id=938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, 0x0, 0x800) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0x1000, 0x8, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, 0x0, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048010}, 0x80) mmap$auto(0x0, 0x20009, 0x29b010c0, 0x100000eb1, 0x40000000000a1, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) socket(0x2b, 0x5, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}, 0x2}}, 0x53) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "22342c707bff2459b582b1a63a7f"}, 0x6a) sendmmsg$auto(r6, 0x0, 0x7, 0x4008) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, 0x0, 0x4000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/user_reserve_kbytes\x00', 0x103142, 0x0) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/udp_port\x00', 0x202, 0x0) sendfile$auto(r8, r7, 0x0, 0x6) move_pages$auto(0x1, 0x400000000f54, 0x0, 0x0, 0x0, 0x8000000000000000) r9 = getpgid(0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, r9, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x8, 0xe, 0x5, @_kill={r9, r2}}}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000240)='\xac +Y\x87\x16\xbf\x82\x18\\ g\xc8qh\x12P\x1b\xd2\xd3\xe6\xb5Z\x94Wt\xf0:\x03\x17\x92W\xd2L\x863\xfa#\x1e\xd4i\xc3B.n$!\xac.)\x17>\xc5\x1b\xf9A~a\xeaG\x02\x87\x1a\xc8p\x86\xb3\xa0\xd5\xf5=\xc9\xe9>\xbfp&\xd5q\x18+\x9b*\t\xdaeV\a\x00?\xcb\x046\xa6n0\f\x96\x85\xe5N\xdbn^\x00cw7\xbb\xb4\x0f\xf7\xb8%-\x83.L@\x02g\xe4*\x99\x15o\x0f\x18\xc1\xff\xfey@\x9e\xf7\xaa\xaa\xb2_\x01\v|\xdb.Vo/\xf9a\xef\x9cE\xdc\xcd+\xc5\xcb\x98\x86\x9f\x02\xd6)\xc3\xa8\xf4\xc2\x8a\x8d\xef-\x17\x0f\xa2\x13\x10)\xa6\x8e\xf5^;\xa3{\xe8X$\xdc\xd0\xec\xab\\,', 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 2m30.426899065s ago: executing program 1 (id=940): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x2000, 0x0) mmap$auto(0x0, 0xfe, 0xde, 0xdb72, r0, 0x9) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(0xffffffffffffffff, 0xc1004111, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\xfc\xff\xff\xff\xff\xff\xff\xffRN8\x99\x88\xf5s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\xae\x18\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xdac$w\x883\xac\xcd\x96\xc2\x93\x0e\x12/v0\x90\x915?', 0x4c, 0x9) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex, 0x7f, 0x99, 0x8, 0x1, @relative_fd, 0xd}, 0x92) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) futex$auto(&(0x7f0000000080)=0x3, 0x3, 0x1f, 0x0, &(0x7f0000000100)=0x4, 0x440a48d3) select$auto(0x10, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x1007, 0xd, 0x2d, 0x400000000000948b, 0x3, 0x15f4da09, 0x3, 0x3, 0x7, 0x400000000040, 0x3, 0x1, 0x9, 0xffffffffffffffff, 0xffffffdffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000240)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000b3dd) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/ep_00/type\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000540)=""/4093, 0xffd) unshare$auto(0x40000080) socket(0x29, 0x5, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/kcm\x00', 0x480, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000040)=""/87, 0x57) read$auto(r4, &(0x7f0000000300)='2\x06J Nwe0\xbd\"\x8f\xe5h_b\xde\x19\xa5\x0e\xfa\xe0\xcb\xb7\xaceW\x1a\x1f\xae\xd8\xfe\x01Y\xd6\xba\xde3\xc7\xf8\x91\xda\xf6_%\xf30\xdc\x97<\xf3A\xa7\xb4\x8dj\xbd\x02\xb1}{e\xf64\xec4\x83,\xecp7j\xf8<\xc8x\xd4\xb0\x1d\b\xb0\x18\x01\x9e\x9et\x8aa\xe1\re\xcf\x8e\x02\xeeW\xf0z\vk#_\xdb\x15f8>;zM\xa95\x16\xe9l\xf5\xaa\xaa\x03\x18p\x0e\xde$\xc3\xa9\xac\xc7\x98\x05<\xef\xcd@z\fx}F\x93\xe1\xbd\xb3s\x80\xc1w\x1eP\xd0\xea\xab\x8f\xc7\a\xe6\xad\ni\n~-u)\x88\x97\xed\xa7\x9b\x0f\xef\x99\x13\xdc<\xd1{\br\xd6[\xd3\xa9-(KH\b\xdfJ\xdek\xef\xc9\xd7\n\x83m\x86\xf2\a\x8d\x19\xe0\\\xf0lg?\x98\xc8\x8e\xbd2?C\xa5\x8a\xe3\xc6\xd7\x00\x14n\xb8<\xab\x96\x8d\xa1\xf4\x87\xe5\a:z\xea\xcc\xa1\x8d\xae8\x12\xa6\xb9\xd99\xaa\xc5\x10\xad\xdd\x89\xdd\xbb\xf5\xd2Q\x92\xcd\xcc\x9f\x1a\xdbR\xeeL:\x87\xb3#\x00\x1bR\xf2\xe2/\xa3\x0e\x90\x98\x8c\xc0\xa4\xda', 0x805644) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0xb02, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x0, 0x0, 0x6f3) getsockopt$auto_SO_PASSCRED(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$auto_regulator_summary_fops_(0xffffffffffffffff, &(0x7f0000000400)=""/17, 0x11) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 2m29.383943934s ago: executing program 1 (id=943): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/packet\x00', 0x2880, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x218, 0x1001, 0x24, 0x1, 0xffffffffffffffff, 0x0, 0x5}, 0x4f4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x7, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)="e7696e5891a9bccbf2a814c2b1c2da6a4642e71e423e55bb3bdfb80fb3496c6bac2cd2cc3aa9633c3668b1128be76976577ef8b494eb27dd7c5c3009036684e6ce3fba9b6c44624a383a1a8daaf2a07cdc3efb51136711a3d8b8d74233b4c4ecce84f9d2a5ca501114d56c1a0499ae8acb22ed5caafa45df6d315664bd5e8188ad7fe06a284669d94a69dc6fb65b3fed2d93b01461860e9360cb1674e2869745a587809f441d6c6e3b306ec365b787e5b9b57f29", 0xb4) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf25040000000a0016070000000400000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r1, r4, 0xfffe) socket(0x26, 0x6, 0x66) open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x100, 0x0) ioctl$auto(r5, 0x901064aa, 0xffeffffffffffdff) read$auto(0xffffffffffffffff, 0x0, 0x5) writev$auto(0xffffffffffffffff, 0x0, 0x3) recvmsg$auto(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)="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", 0x8, &(0x7f0000000600)={&(0x7f00000003c0)="444debcb5d4827b41b873d646e2663fb2d4aa24da78f4b3472bd8daf8c57304fe5302fe1869cfca458a5a39bd4006710640f6032088c509f0c082c1b04896afe04d524b8b80ce2949dae1a1d2bec705c343bc92a41212ae3ed0a036e67d0c6d7b35e6cb8956ef9b289a7e42615af9f0470dc70d3deea952a1d85a1a845530a190757f55d6e53993d1e8f22b49f44b8a5b9b989d8ed44e1a1f0002bb9f9c8813bee34cfb9b329b8b45794054ee04fdb17a945013b532f53854704c99cc8f02c1582b9c91704e2ed3d57e019cf6205", 0x3}, 0xd3, &(0x7f0000000500)="6bfee52cc6d76e1c2f8b714f9ce8de29c2b8c6a36fd1081b8f6753c4db3a957fc9f3c8ce5a1f6aae5db64bc4b8383dea96682820b78f0fdf870dba5430e851305d4713df7f1124096ace834632a497cc07ffb3b6254aa69082434244066c46fe36fd6a587c8d1a8b40662762a5e48ddb2c86fa27c693a26df7fa2dd4f5762a1616bbbc094ba84c2f033b83814b8572c7bb08c224a9b33f1ac650d8c51cff0960141e613531d3f03e45860d2c2f7110f12d60c0b21f6a1556472a2f918584", 0xc, 0xffffffff}, 0xfff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x10000000000001, 0xffffffffffff0009, 0x4) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x41000, 0x0) 2m28.391991435s ago: executing program 1 (id=945): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(0x0, 0x0, 0x41) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x480200, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x144000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1f5}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull\x00', 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) preadv$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0}, 0x6, 0x22, 0x80) 2m28.21789622s ago: executing program 1 (id=946): r0 = socket(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000000), 0xffffffffffffffff) r3 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/prev\x00', 0x101002, 0x0) write$auto_proc_pid_attr_operations_base(r3, &(0x7f0000000200)="a597d9ce6359203d", 0x8) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/controlC1\x00', 0x68800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000000040)={0x1, 0xffffffba}) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010004000000000000000100000006000200000000000500070010000000080009000101000008000a000200000014001f00fc020000000000000000000000000001"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) pread64$auto(r0, &(0x7f0000000200)='/dev/raw-gadget\x00', 0x9a9, 0x4) connect$auto(r1, &(0x7f00000001c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/platform/vhci_hcd.4/usb18/18-0:1.0/usb18-port6/connect_type\x00', 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r5, r5, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) io_uring_setup$auto(0x6, 0x0) r6 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r6, 0x3b8a, 0x38) r7 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r7, 0xc0085504, &(0x7f0000000040)={0x6, 0x9f70, 0x0, "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"}) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x10, 0x2, 0x100000001, 0x63, 0x0, 0x0, 0x0, 0x1000000006, 0x7, 0x7fffffffffffffff, 0x5, 0x7fffffff, 0x5, 0x7, 0x7, 0x61, 0x40000103}) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r8, @ANYBLOB="20062abd7000fddbdf25020000006d"], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x80) mount$auto(&(0x7f0000000000)='veth0_macvtap\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) listen$auto(0x3, 0x83) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) 2m20.794708728s ago: executing program 3 (id=963): mincore$auto(0x1ff, 0x2, &(0x7f0000000000)='\x00') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/tty/ptyy9/power/runtime_active_time\x00', 0x80, 0x0) socket(0x10, 0x2, 0xc) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r0, 0x64c6, 0x1e2) close_range$auto(r0, r0, 0x0) pidfd_send_signal$auto_SIGCONT(r0, 0x12, &(0x7f0000000040)={@_si_pad}, 0x3ff) mmap$auto(0xfffffffffffffffd, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) getpgrp(0x0) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x2000d, 0xa3, 0x11, 0x404, 0x10008000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x100, 0x0) ioctl$auto(r3, 0x901064aa, 0xffeffffffffffdff) 2m19.854556833s ago: executing program 3 (id=967): msgctl$auto_IPC_RMID(0x3, 0x0, &(0x7f00000000c0)={{0x7, 0x0, 0x0, 0x10004, 0x3, 0x1, 0x2}, 0x0, 0x0, 0x3ff, 0xfffffffffffffffc, 0x2b, 0x200, 0x3, 0x47, 0x6, 0x7, @raw=0x1ff}) mmap$auto(0x31, 0x8, 0xdf, 0xeb1, 0xffffffffffffffff, 0x10001) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) nanosleep$auto(&(0x7f0000000180)={0x2, 0x44d4}, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dmmidi2\x00', 0x2841, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000040)={0x0, 0x318f, 0x4, 0x0, 0xff, "50cfeeca8e00"}) prctl$auto(0x3e, 0x69a, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3c, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x1, 0x4000000000df, 0xd8, 0xffffffffffffffff, 0x300000000000) socket(0xa, 0x5, 0x84) r3 = socket(0x22, 0x3, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), r3) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000001c0)={[0x1ff, 0x7, 0xd, 0x1, 0xe000, 0x3, 0x15f4da0a, 0x3, 0x1003, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000140)) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) mknod$auto(0x0, 0x83c1, 0x4400) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7f, 0x0) io_uring_register$auto(0x2, 0x5, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) 2m18.930618446s ago: executing program 3 (id=969): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/packet\x00', 0x2880, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x218, 0x1001, 0x24, 0x1, 0xffffffffffffffff, 0x0, 0x5}, 0x4f4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x7, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)="e7696e5891a9bccbf2a814c2b1c2da6a4642e71e423e55bb3bdfb80fb3496c6bac2cd2cc3aa9633c3668b1128be76976577ef8b494eb27dd7c5c3009036684e6ce3fba9b6c44624a383a1a8daaf2a07cdc3efb51136711a3d8b8d74233b4c4ecce84f9d2a5ca501114d56c1a0499ae8acb22ed5caafa45df6d315664bd5e8188ad7fe06a284669d94a69dc6fb65b3fed2d93b01461860e9360cb1674e2869745a587809f441d6c6e3b306ec365b787e5b9b57f29", 0xb4) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf25040000000a0016070000000400000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r1, r4, 0xfffe) socket(0x26, 0x6, 0x66) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000080)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x100, 0x0) ioctl$auto(r5, 0x901064aa, 0xffeffffffffffdff) read$auto(0xffffffffffffffff, 0x0, 0x5) writev$auto(0xffffffffffffffff, 0x0, 0x3) recvmsg$auto(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)="f98fd098ee741065d9f96157679767c34ca0f25ed200e0ad0eba6acc6975617bed08b1962d6214ce71a8239604548a50851b6da80663be61eabbdbf848657841a86470c1b77ea4c4453c2d28736680caf218883c1e1e49ba93148dc75c8a196ca29889f1e1a87a4fbb9874a116100729cff4459b9135817ffe3d785f8ffe44df98d16483db0e064af5c791ab4680bbc74c3d9bf07b90dbc491adf174fc857d1e3c6486e98cbfc99c6bd4cbb718ec9aef7ee99243e78722b9186707fb9d454d7bea97dd3bc6b36d586705fb7d2d541843d7589dde36557977a85485bf427ca7a52d5b50f733dba4b37a51026235594b5b08985fd4004a6169a34d0c", 0x8, &(0x7f0000000600)={&(0x7f00000003c0)="444debcb5d4827b41b873d646e2663fb2d4aa24da78f4b3472bd8daf8c57304fe5302fe1869cfca458a5a39bd4006710640f6032088c509f0c082c1b04896afe04d524b8b80ce2949dae1a1d2bec705c343bc92a41212ae3ed0a036e67d0c6d7b35e6cb8956ef9b289a7e42615af9f0470dc70d3deea952a1d85a1a845530a190757f55d6e53993d1e8f22b49f44b8a5b9b989d8ed44e1a1f0002bb9f9c8813bee34cfb9b329b8b45794054ee04fdb17a945013b532f53854704c99cc8f02c1582b9c91704e2ed3d57e019cf6205", 0x3}, 0xd3, &(0x7f0000000500)="6bfee52cc6d76e1c2f8b714f9ce8de29c2b8c6a36fd1081b8f6753c4db3a957fc9f3c8ce5a1f6aae5db64bc4b8383dea96682820b78f0fdf870dba5430e851305d4713df7f1124096ace834632a497cc07ffb3b6254aa69082434244066c46fe36fd6a587c8d1a8b40662762a5e48ddb2c86fa27c693a26df7fa2dd4f5762a1616bbbc094ba84c2f033b83814b8572c7bb08c224a9b33f1ac650d8c51cff0960141e613531d3f03e45860d2c2f7110f12d60c0b21f6a1556472a2f918584", 0xc, 0xffffffff}, 0xfff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x10000000000001, 0xffffffffffff0009, 0x4) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x41000, 0x0) 2m18.009395946s ago: executing program 3 (id=975): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_kbytes\x00', 0x202, 0x0) (async) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_kbytes\x00', 0x202, 0x0) sendfile$auto(r2, r2, 0x0, 0x77) (async) sendfile$auto(r2, r2, 0x0, 0x77) mmap$auto(0x0, 0x5, 0xffffffffffffffff, 0x19, r1, 0x7ffc) (async) mmap$auto(0x0, 0x5, 0xffffffffffffffff, 0x19, r1, 0x7ffc) madvise$auto(0x0, 0xfffffffffffeff7d, 0x14) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x80800, 0x0) pread64$auto(r3, 0x0, 0x100000009, 0xa4000000000002) (async) pread64$auto(r3, 0x0, 0x100000009, 0xa4000000000002) madvise$auto(0x0, 0x20499d, 0x9) (async) madvise$auto(0x0, 0x20499d, 0x9) pkey_free$auto(0xfffffffd) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) r4 = io_uring_setup$auto(0x6, 0x0) r5 = socket(0x15, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000180)) bind$auto(r2, &(0x7f0000000080)=@llc={0x1a, 0x322, 0x8b, 0x7, 0xa6, 0xf3, @multicast}, 0x40006c) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8) (async) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000280)="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", 0x2, &(0x7f00000000c0)={0x0, 0x4}, 0x9, 0x0, 0x1, 0xb}, 0xfff}, 0x10000, 0x310) preadv2$auto(r0, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x5) write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12df9735b745b9554dfb0ad77a37be296ebe6f598901d632a206d9bb056d8c8d9a5b4cf165c931477ba53f3a80c522fc11555ea", 0x51) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x12d981, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 2m17.854911814s ago: executing program 3 (id=978): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/net/lapb0/mtu\x00', 0xa082, 0x0) mmap$auto(0x3, 0x20009, 0x4, 0x414, 0x401, 0x7ff) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x900, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) open(&(0x7f0000000800)='./file0\x00', 0x1, 0x154) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x3, 0x4, 0x5, 0x7) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000840)={{@raw=0x8, 0x7, 0xba28, 0x0, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2f008b48a8a57689adcc1ca6d2cbfa93b50590c9", @raw=0x6}, 0x0, @bytes=@data="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", "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80480, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) sysfs$auto(0x2, 0x0, 0x0) ioctl$auto_PPPIOCSMAXCID(r3, 0x40047451, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r1) r4 = open(&(0x7f0000000000)='./cgroup\x00', 0x80000, 0x61) fchdir$auto(r4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') 2m16.956271754s ago: executing program 3 (id=981): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) r0 = socket(0xa, 0x5, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000080)=@test={0xffffffffffffffff, 0x82, 0x1ff, 0x19d2e2e9, 0x5, 0x81, 0xfffffff1, 0x1, 0x1, 0x5, 0x9b9, 0x8, 0x7fffffff, 0x4, 0x2}, 0x66) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f00000000c0)) mmap$auto(0x3, 0x4f, 0xe2, 0x10, 0x405, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/dummy_hcd.1/usbmon/usbmon2/power/runtime_active_time\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000400), r0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/numa_node\x00', 0x1a3b02, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) close_range$auto(r4, r1, 0x10001) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$auto_XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={r5, &(0x7f00000000c0)="008dc6a4739661f5135d8c219bd901ee4b9722c0c3864d63eda6615ae6b1dc02a1c969d6630fb0fba56487991d07396c780962e0322904fa9d618b7a5604aca96cad3226fc03a7cbe5ed46fd9c", 0x1, &(0x7f0000000140)="20446fec22ec434abfbbbe1b911ffbc0da78c2877920220a7fead04035883a3a483779a90257e3b2645da7a1032d4a3071cfb9eb10a55acb85fab30fd6e4e4b45b31ad9f0796cfcf85f9d800fec0d10de1b06d797e5135487bc4f383ef23b08a225a048bc33a2cb5cf34b7e1fab7921b42b9da975c28258b37146cfdd9985b2375d246237ff4d71aac569d30ebb8545b6e9aa2b726e095", 0x9, &(0x7f0000000200)="0338e957cfffe2f8159f7422f8bf43e965f28ee97f704376bedbd7c18511fab081348158af88e0aa4b0a524b15508c8401df3020a853b4bb4a4f47566a10edf54d8973b9f922e21e3d0252c3a69449491ef1daf113de98798e634e3ad96d41034284c8836211e9d4f309980e88c26d4324da22f2060a", &(0x7f0000000300)=0x81}) r7 = ioctl$auto_TUNGETFILTER(r6, 0x801054db, &(0x7f00000003c0)={0x1ff, &(0x7f0000000380)={0x8005, 0x6, 0x5, @raw=0x8001}}) ioctl$auto(r7, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x20000008000) socket(0x21, 0x2, 0x2) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop6/queue/rq_affinity\x00', 0x121281, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f0000000200)='5', 0x1) write$auto(0x3, 0x0, 0xffd8) 2m15.644144999s ago: executing program 32 (id=938): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, 0x0, 0x800) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0x1000, 0x8, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r0, 0x0, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048010}, 0x80) mmap$auto(0x0, 0x20009, 0x29b010c0, 0x100000eb1, 0x40000000000a1, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) socket(0x2b, 0x5, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@tipc=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}, 0x2}}, 0x53) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "22342c707bff2459b582b1a63a7f"}, 0x6a) sendmmsg$auto(r6, 0x0, 0x7, 0x4008) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, 0x0, 0x4000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/user_reserve_kbytes\x00', 0x103142, 0x0) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/udp_port\x00', 0x202, 0x0) sendfile$auto(r8, r7, 0x0, 0x6) move_pages$auto(0x1, 0x400000000f54, 0x0, 0x0, 0x0, 0x8000000000000000) r9 = getpgid(0x0) rt_tgsigqueueinfo$auto(0xffffffffffffffff, r9, 0x8, &(0x7f0000000100)={@siginfo_0_0={0x8, 0xe, 0x5, @_kill={r9, r2}}}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)=&(0x7f0000000240)='\xac +Y\x87\x16\xbf\x82\x18\\ g\xc8qh\x12P\x1b\xd2\xd3\xe6\xb5Z\x94Wt\xf0:\x03\x17\x92W\xd2L\x863\xfa#\x1e\xd4i\xc3B.n$!\xac.)\x17>\xc5\x1b\xf9A~a\xeaG\x02\x87\x1a\xc8p\x86\xb3\xa0\xd5\xf5=\xc9\xe9>\xbfp&\xd5q\x18+\x9b*\t\xdaeV\a\x00?\xcb\x046\xa6n0\f\x96\x85\xe5N\xdbn^\x00cw7\xbb\xb4\x0f\xf7\xb8%-\x83.L@\x02g\xe4*\x99\x15o\x0f\x18\xc1\xff\xfey@\x9e\xf7\xaa\xaa\xb2_\x01\v|\xdb.Vo/\xf9a\xef\x9cE\xdc\xcd+\xc5\xcb\x98\x86\x9f\x02\xd6)\xc3\xa8\xf4\xc2\x8a\x8d\xef-\x17\x0f\xa2\x13\x10)\xa6\x8e\xf5^;\xa3{\xe8X$\xdc\xd0\xec\xab\\,', 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 2m12.615317404s ago: executing program 33 (id=946): r0 = socket(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000000), 0xffffffffffffffff) r3 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/prev\x00', 0x101002, 0x0) write$auto_proc_pid_attr_operations_base(r3, &(0x7f0000000200)="a597d9ce6359203d", 0x8) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/controlC1\x00', 0x68800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000000040)={0x1, 0xffffffba}) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010004000000000000000100000006000200000000000500070010000000080009000101000008000a000200000014001f00fc020000000000000000000000000001"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) pread64$auto(r0, &(0x7f0000000200)='/dev/raw-gadget\x00', 0x9a9, 0x4) connect$auto(r1, &(0x7f00000001c0)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/platform/vhci_hcd.4/usb18/18-0:1.0/usb18-port6/connect_type\x00', 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r5, r5, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) io_uring_setup$auto(0x6, 0x0) r6 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r6, 0x3b8a, 0x38) r7 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r7, 0xc0085504, &(0x7f0000000040)={0x6, 0x9f70, 0x0, "20755a2e28d7e5a7adf3ffc87324ca67d50cfbb5f5ab56ef09bcd9415564ff5bb5b94889aa396fff17e2ca617b0f5a01b0f0c66a197fb1b4502110e788972bec956e065af7cdf8d42e56fb89bc230706ec06318c9e156eed6ed9aa3619097f0880f15b4b813f34867bf6f8178673a124e3c96cf60c8e4eabe0b81ad37177d74d45f050849598ef5b75caf99c734e6ff457814136ce3042f918c3769e793e2765e112ce21b7343396f6583703cbea78e015dff6577ea08ae818665f9e0a6b8018d749cb9f93ac57affeecafb05d0b5fe6984b607e5420714bd1b4674e815f675347a5d26cd5a4a9f163af5a1ec4d64d636978bf60ef9a3d1d90b4dabe25bcab"}) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x10, 0x2, 0x100000001, 0x63, 0x0, 0x0, 0x0, 0x1000000006, 0x7, 0x7fffffffffffffff, 0x5, 0x7fffffff, 0x5, 0x7, 0x7, 0x61, 0x40000103}) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRES16=r8, @ANYBLOB="20062abd7000fddbdf25020000006d"], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x80) mount$auto(&(0x7f0000000000)='veth0_macvtap\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) listen$auto(0x3, 0x83) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) 2m8.881231393s ago: executing program 4 (id=996): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/packet\x00', 0x2880, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x218, 0x1001, 0x24, 0x1, 0xffffffffffffffff, 0x0, 0x5}, 0x4f4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x7, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)="e7696e5891a9bccbf2a814c2b1c2da6a4642e71e423e55bb3bdfb80fb3496c6bac2cd2cc3aa9633c3668b1128be76976577ef8b494eb27dd7c5c3009036684e6ce3fba9b6c44624a383a1a8daaf2a07cdc3efb51136711a3d8b8d74233b4c4ecce84f9d2a5ca501114d56c1a0499ae8acb22ed5caafa45df6d315664bd5e8188ad7fe06a284669d94a69dc6fb65b3fed2d93b01461860e9360cb1674e2869745a587809f441d6c6e3b306ec365b787e5b9b57f29", 0xb4) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf25040000000a0016070000000400000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r1, r4, 0xfffe) socket(0x26, 0x6, 0x66) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000080)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x100, 0x0) ioctl$auto(r5, 0x901064aa, 0xffeffffffffffdff) read$auto(0xffffffffffffffff, 0x0, 0x5) writev$auto(0xffffffffffffffff, 0x0, 0x3) recvmsg$auto(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)="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", 0x8, &(0x7f0000000600)={&(0x7f00000003c0)="444debcb5d4827b41b873d646e2663fb2d4aa24da78f4b3472bd8daf8c57304fe5302fe1869cfca458a5a39bd4006710640f6032088c509f0c082c1b04896afe04d524b8b80ce2949dae1a1d2bec705c343bc92a41212ae3ed0a036e67d0c6d7b35e6cb8956ef9b289a7e42615af9f0470dc70d3deea952a1d85a1a845530a190757f55d6e53993d1e8f22b49f44b8a5b9b989d8ed44e1a1f0002bb9f9c8813bee34cfb9b329b8b45794054ee04fdb17a945013b532f53854704c99cc8f02c1582b9c91704e2ed3d57e019cf6205", 0x3}, 0xd3, &(0x7f0000000500)="6bfee52cc6d76e1c2f8b714f9ce8de29c2b8c6a36fd1081b8f6753c4db3a957fc9f3c8ce5a1f6aae5db64bc4b8383dea96682820b78f0fdf870dba5430e851305d4713df7f1124096ace834632a497cc07ffb3b6254aa69082434244066c46fe36fd6a587c8d1a8b40662762a5e48ddb2c86fa27c693a26df7fa2dd4f5762a1616bbbc094ba84c2f033b83814b8572c7bb08c224a9b33f1ac650d8c51cff0960141e613531d3f03e45860d2c2f7110f12d60c0b21f6a1556472a2f918584", 0xc, 0xffffffff}, 0xfff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x10000000000001, 0xffffffffffff0009, 0x4) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x41000, 0x0) 2m7.714111387s ago: executing program 4 (id=998): mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) setpriority$auto_PRIO_PGRP(0x1, 0x0, 0xfff) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/ext4/sda1/reserved_clusters\x00', 0x2101, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='6', 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x3}, 0x3) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 2m7.232768656s ago: executing program 4 (id=999): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6, 0xffffffffffffffff}, 0xf) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x8, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) clock_nanosleep$auto(0x8, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0x3}, 0x0) ioctl$auto(r3, 0xc0b45545, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r4 = getpid() r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2) sendmsg$auto_NL80211_CMD_GET_KEY(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r5, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x80000000}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0xf43b}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x7}, @NL80211_ATTR_TIMED_OUT={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008800}, 0x40044) process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000340)="6613ac931f0db42277769a0d2e08f0c4b2b796fa818692ee3243edff1b8cd24217be4b2933c04c7ac618646e804872b9d03402acdb64dc9d6d9fb0fa92a88339fd6ab5a853f22f1c7ba4b755249966ef43e6d2d995c8f6c1d9930eefc3901ada1d3d4a30886461b7cfbd27b03b83aa159509e8287207a2803f7bafecc1ff212ec986c7e6ad57", 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0x9, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x8000000000000001, 0x7, 0x100000000000007, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r1, 0x4c81, r4) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, &(0x7f0000000080)="a3c72e71ed506a221381f0538fef", 0xe) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/button/parameters/lid_init_state\x00', 0x169882, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x80280, 0x0) close_range$auto(0x2, 0x8000, 0x0) 2m6.679412052s ago: executing program 4 (id=1000): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r2, 0xc0b45545, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0x9, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x3, 0x80, 0x3, 0x6, 0x8000000000000001, 0x7, 0x100000000000007, 0xd, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r1, 0x4c81, r3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r4 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x3b70, 0x0) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, &(0x7f0000000080)="a3c72e71ed506a221381f0538fef", 0xe) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x80280, 0x0) close_range$auto(0x2, 0x8000, 0x0) 2m5.898350101s ago: executing program 4 (id=1002): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(0x0, 0x0, 0x41) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x480200, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x144000, 0x0) r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x20680, 0x0) preadv$auto(r0, &(0x7f0000000080)={0x0}, 0x6, 0x22, 0x80) 2m5.77163329s ago: executing program 4 (id=1003): r0 = socket(0x18, 0x805, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x40047452, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd5\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x2020009, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) io_pgetevents$auto(0x8, 0xfffffffffffffffb, 0x3ff, 0x0, 0x0, 0x0) mmap$auto(0x1, 0x9, 0xfffffffffffffffe, 0xe23b, 0x602, 0x8) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = prctl$auto(0x3e, 0x2e, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000001080)='1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe2q$6\x84\xfbI\xf7\xeb\x14\x87\xe7\x05\xe7\xf9\xd1fn\"\xa3s8\x91\xce\x13r\xfboH\x8a\f\x93\vdD\x10(S\xc65\xf3\x7f\x90\a\x8d\x00D{\x04\x8a\xb6m\x864\xe7\xb1\xeb\xa2\a\x19\xde\xd6\x87F\x1b\x17\xca\xd2\xf7\x98~]\xad\xd8A\\O\x95\xf9\x0e\x1eE\x81\xba\x0eK\x98(\xf9\xd4\xec\xac%~\x15\x16\x82\x88[\x9e\x1d-\x16\xcaz\xd7&\x99\f\xa8\x94\xe3\xa7v\xeb\x01\x1c~Z(\x80\xfd\x85\xe9\x11aIP\xa6\xe9g\xbawP\x96\xdb\xf1\xf1\xd7\x9dP\xb4\xee\xba\xa5t@\xd1\xcb=\x82\b\\&\xa2\xa6e\xc1\xediyHXii\x1a\xd6W\x95\xda;@/\xf3\r\x14\xac\x9c\xd5\x16\x81\x1e', 0x100002a7d9) read$auto(0xffffffffffffffff, 0x0, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x0, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa) r4 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r4, &(0x7f0000000040)=""/4096, 0xfffffe82) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') mmap$auto(0x2, 0x400008, 0xdd, 0x9b72, r2, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) futex_waitv$auto(&(0x7f0000000300)={0x30000000000007f, 0x100000002, 0x2}, 0x2, 0xfffffffe, &(0x7f0000000340)={0xffffffffffffffff, 0x6}, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) socket(0x11, 0x2, 0x9) capset$auto(0x0, &(0x7f0000001180)={0x4, 0xfbff, 0x40000}) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 2m1.814973988s ago: executing program 34 (id=981): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) r0 = socket(0xa, 0x5, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000080)=@test={0xffffffffffffffff, 0x82, 0x1ff, 0x19d2e2e9, 0x5, 0x81, 0xfffffff1, 0x1, 0x1, 0x5, 0x9b9, 0x8, 0x7fffffff, 0x4, 0x2}, 0x66) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f00000000c0)) mmap$auto(0x3, 0x4f, 0xe2, 0x10, 0x405, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/dummy_hcd.1/usbmon/usbmon2/power/runtime_active_time\x00', 0x0, 0x0) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000400), r0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/numa_node\x00', 0x1a3b02, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) close_range$auto(r4, r1, 0x10001) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$auto_XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000340)={r5, &(0x7f00000000c0)="008dc6a4739661f5135d8c219bd901ee4b9722c0c3864d63eda6615ae6b1dc02a1c969d6630fb0fba56487991d07396c780962e0322904fa9d618b7a5604aca96cad3226fc03a7cbe5ed46fd9c", 0x1, &(0x7f0000000140)="20446fec22ec434abfbbbe1b911ffbc0da78c2877920220a7fead04035883a3a483779a90257e3b2645da7a1032d4a3071cfb9eb10a55acb85fab30fd6e4e4b45b31ad9f0796cfcf85f9d800fec0d10de1b06d797e5135487bc4f383ef23b08a225a048bc33a2cb5cf34b7e1fab7921b42b9da975c28258b37146cfdd9985b2375d246237ff4d71aac569d30ebb8545b6e9aa2b726e095", 0x9, &(0x7f0000000200)="0338e957cfffe2f8159f7422f8bf43e965f28ee97f704376bedbd7c18511fab081348158af88e0aa4b0a524b15508c8401df3020a853b4bb4a4f47566a10edf54d8973b9f922e21e3d0252c3a69449491ef1daf113de98798e634e3ad96d41034284c8836211e9d4f309980e88c26d4324da22f2060a", &(0x7f0000000300)=0x81}) r7 = ioctl$auto_TUNGETFILTER(r6, 0x801054db, &(0x7f00000003c0)={0x1ff, &(0x7f0000000380)={0x8005, 0x6, 0x5, @raw=0x8001}}) ioctl$auto(r7, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x20000008000) socket(0x21, 0x2, 0x2) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop6/queue/rq_affinity\x00', 0x121281, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f0000000200)='5', 0x1) write$auto(0x3, 0x0, 0xffd8) 1m55.919166906s ago: executing program 6 (id=1031): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) r0 = socket(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000001c0)={0x28, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x10094}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'dvmrp0\x00', 0x0}) r9 = socket(0xa, 0x2, 0x88) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r11, r10, 0x4, 0x1ff, r9, @relative_id=0x13, 0xe600}, 0xf) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x781b7f7d57e4bb13}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x118, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_RINGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xa}]}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8000}, 0x4040800) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r14 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x341102, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x80003, 0x300) socket(0x11, 0x80003, 0x200300) r15 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r15, 0xae01, 0x0) ioctl$auto_KVM_CREATE_VM(r14, 0xaea2, 0x0) 1m55.567267254s ago: executing program 6 (id=1032): socketpair$auto(0x4, 0x0, 0x1, &(0x7f0000000080)=0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd8/queue/discard_zeroes_data\x00', 0x54b581, 0x0) getsockopt$auto(0xffffffffffffffff, 0x3, 0x1, 0x0, 0x0) r0 = socket(0x1e, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0xfffffffe}, 0x66) r1 = socket(0x1e, 0x1, 0x0) connect$auto(r1, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r2) r3 = socket(0xa, 0x1, 0x84) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16], 0x1ac}}, 0x40000) sendmsg$auto_TIPC_NL_NET_SET(r2, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000001300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf250f0000000c0007800800020012545e047cbf7caee591ff7b3caf77776860d1492ea0a50f5ab32ed2d578be98e47c9cd26d50b79ff6bfe6129305ad86c9db00245d5353e35b30399c2fc46da54396b36ea766cc27fc57ff893ce48714af7c009c89d0255833c9024daaa4468d9d3847d044d0fcfa67b5b7ca9b6b8ff8e95e4d16ed0eae084e00000000000db8cd306d50b6f199bbb1b27d1ea8688af4316d0340111d6e9862aee17230a273154212ed689f0f1a1f35836d47948b3b71bce19c39b33b67274f310e65b03b5e71143e3f72111c14171c2842cc90ae72b0dddf2d", @ANYRESOCT=r2, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) socket(0x6, 0x3, 0x1) setxattr$auto(0x0, 0x0, 0x0, 0x800000, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x109c01, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x3, 0x0, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r5) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r5, 0x0, 0x2004c075) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop4\x00', 0x220400, 0x0) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) lseek$auto(0xffffffffffffffff, 0x8a05, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8000b) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0x1f, 0x0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x0) 1m54.671705671s ago: executing program 6 (id=1037): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x34, r1, 0x200, 0x70bd26, 0x25dbdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffff4e2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffffb}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2cb8}, 0x1, 0x0, 0x0, 0x40}, 0x2404c084) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000200), r0) sendmsg$auto_SMC_NETLINK_FLUSH_UEID(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0xc4, r2, 0x8, 0x70bd29, 0x25dfdbfd, {}, "bbacc19435420b8d19a920e9ec0be7afc211eebc1b4d7d056121da36158522ebe12fdd934bbc9030e52faaca52d484cf8f5c1f0d0dcd6d9acacb5dd4eceb7db91ff3b8e469b8ca90a1eff8d5ebce887c8902fac33a437e24676f307ace7816f4ccfb4216db1c0e9259c463cff69dea6ed2725e75fbd3d3f7bb83298841745313aab1586487e6b9011745dbb86e07589cb40119a4e3f94545c344aca09c1f2f36c743c6e0b26144139ddd247b41"}, 0xc4}, 0x1, 0x0, 0x0, 0xc004}, 0x404c000) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x6}, 0x5) bpf$auto(0xfffff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x4, 0xfab2, 0x468, 0x9, 0x2, 0x4, 0x2, 0x4, 0x200, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3) setsockopt$auto_SO_BUSY_POLL(r3, 0x1aa0150b, 0x2e, &(0x7f0000000340)='%!\x00', 0x4) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event1\x00', 0x101000, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) sendmsg$auto_NL80211_CMD_SET_PMKSA(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="000000000097ee9ba513dc8949f2ca19aff4e7", @ANYRES16=r4, @ANYBLOB="02002dbd7000fcdbdf2534000000be00cd006c6b112dd5163723c45cfe440d1febe1b4e48ebd06db1d9789fe2930f24ee455700044721b47cbf4ebd0f121b8fb9c97ad8fe8fa7d8a3a0a63c9d81ce31b2105af230bee09fcf176eed181cbc50875943c4e97d4610d24062c6d9297f192f9afd8a5ddb6420eeef7d0de93300be9cc8a13815c50a54ddc8abdc30e532ad5367863ebf1ac42e947a3a9801ecd902ddf3b5de2b46a1009d5f33c13c950dca00ba42bafa15849315b25368be1e26a4d3d361e2d6dcaefdb793a9ffe0000"], 0xd4}, 0x1, 0x0, 0x0, 0x40010}, 0xc090) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mq_notify$auto(0xffffffffffffffff, &(0x7f0000000200)={@sival_ptr=0x0, @inferred, 0x2, @_tid}) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x0, 0xffffffffffffffff, 0x0, 0x800}, 0x92) 1m54.494980313s ago: executing program 6 (id=1038): r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x12000001, &(0x7f0000000080)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000000c0), 0x8, 0xa507}, 0x800}, 0x7, 0x4008) 1m54.415460406s ago: executing program 6 (id=1039): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1f5}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x20680, 0x0) preadv$auto(r0, &(0x7f0000000080)={0x0}, 0x6, 0x22, 0x80) 1m54.295971791s ago: executing program 6 (id=1041): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/suspend_stats/fail\x00', 0x0, 0x0) rseq$auto(&(0x7f0000000340)={0xe, 0x401, 0x0, 0x806, 0xffffffff, 0x2}, 0x8000, 0x0, 0x8000006) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) clock_getres$auto(0x8000400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SG_GET_NUM_WAITING(r1, 0x227d, 0x0) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x2) mmap$auto(0x0, 0x400005, 0x40df, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) r3 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000080), 0x2140, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r3, 0x454f, 0x5f, 0x0, 0x3f, r3, 0x80000001}, 0x6d4) msgsnd$auto(0x0, 0x0, 0x8, 0x7) membarrier$auto(0x4, 0x8000000000000000, 0xffffffff) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/213, 0xd5) 1m50.641404381s ago: executing program 35 (id=1003): r0 = socket(0x18, 0x805, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x40047452, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd5\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x2020009, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) io_pgetevents$auto(0x8, 0xfffffffffffffffb, 0x3ff, 0x0, 0x0, 0x0) mmap$auto(0x1, 0x9, 0xfffffffffffffffe, 0xe23b, 0x602, 0x8) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = prctl$auto(0x3e, 0x2e, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000001080)='1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe2q$6\x84\xfbI\xf7\xeb\x14\x87\xe7\x05\xe7\xf9\xd1fn\"\xa3s8\x91\xce\x13r\xfboH\x8a\f\x93\vdD\x10(S\xc65\xf3\x7f\x90\a\x8d\x00D{\x04\x8a\xb6m\x864\xe7\xb1\xeb\xa2\a\x19\xde\xd6\x87F\x1b\x17\xca\xd2\xf7\x98~]\xad\xd8A\\O\x95\xf9\x0e\x1eE\x81\xba\x0eK\x98(\xf9\xd4\xec\xac%~\x15\x16\x82\x88[\x9e\x1d-\x16\xcaz\xd7&\x99\f\xa8\x94\xe3\xa7v\xeb\x01\x1c~Z(\x80\xfd\x85\xe9\x11aIP\xa6\xe9g\xbawP\x96\xdb\xf1\xf1\xd7\x9dP\xb4\xee\xba\xa5t@\xd1\xcb=\x82\b\\&\xa2\xa6e\xc1\xediyHXii\x1a\xd6W\x95\xda;@/\xf3\r\x14\xac\x9c\xd5\x16\x81\x1e', 0x100002a7d9) read$auto(0xffffffffffffffff, 0x0, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x0, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) mknod$auto(&(0x7f0000001040)=':,\x00', 0xca, 0xfffffffa) r4 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r4, &(0x7f0000000040)=""/4096, 0xfffffe82) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') mmap$auto(0x2, 0x400008, 0xdd, 0x9b72, r2, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) futex_waitv$auto(&(0x7f0000000300)={0x30000000000007f, 0x100000002, 0x2}, 0x2, 0xfffffffe, &(0x7f0000000340)={0xffffffffffffffff, 0x6}, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) socket(0x11, 0x2, 0x9) capset$auto(0x0, &(0x7f0000001180)={0x4, 0xfbff, 0x40000}) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 1m39.215804708s ago: executing program 36 (id=1041): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/suspend_stats/fail\x00', 0x0, 0x0) rseq$auto(&(0x7f0000000340)={0xe, 0x401, 0x0, 0x806, 0xffffffff, 0x2}, 0x8000, 0x0, 0x8000006) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) clock_getres$auto(0x8000400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SG_GET_NUM_WAITING(r1, 0x227d, 0x0) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x2) mmap$auto(0x0, 0x400005, 0x40df, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) r3 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000080), 0x2140, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r3, 0x454f, 0x5f, 0x0, 0x3f, r3, 0x80000001}, 0x6d4) msgsnd$auto(0x0, 0x0, 0x8, 0x7) membarrier$auto(0x4, 0x8000000000000000, 0xffffffff) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/213, 0xd5) 11.117329678s ago: executing program 8 (id=1423): sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000080}, 0x40090) r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, 0x0, 0xc800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x12000001, &(0x7f0000000080)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000000c0), 0x8, 0xa507}, 0x800}, 0x7, 0x4008) 10.546938866s ago: executing program 8 (id=1424): open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) ioctl$auto_RTC_UIE_ON(0xffffffffffffffff, 0x7003, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ram1\x00', 0x0, 0x0) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x0, 0x0) sendfile$auto(r1, 0x3, 0x0, 0x7fffeffe) fallocate$auto(r0, 0x0, 0x3, 0x4cbd5d) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/loop14/hctx0/active\x00', 0x14800, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) r3 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f0000002200)={@siginfo_0_0={0x1, 0x4, 0x5, @_sigsys={&(0x7f0000002100)="2833dc09bc1b71262f12ee15368a0da246095844e1776855592ff849d63a49718875a627ee20e231079f50fc558377819ca145141c1ce5ae103a660d814014467fe1b61643db8c49ff326f081d51e29d5679762723c2b70bcf82bbb7905ad8b77b8a783c8b47193a0355a9830130990ee2d1542e371477a7714ebc3e3efd6fdb367aaa094861ff2395801e7e7a30cec03e3b75ec77202a3bf5df13bd7f1300f0f7cc734df0375ec7150e87dbcafb3a9cde372ba8aed8112309c9ae63b81c46402a339ef3b3171ba79883d1cf25ef15c51c06248fbaa41844ddd36ad1744ec6cab9759388ddbe63a72d", 0x5, 0x1000}}}, 0x6, &(0x7f0000002440)={{0x10005, 0x7}, {0xc, 0x64}, 0xb32f, 0x1, 0x9, 0x7, 0xbe, 0xa8, 0x1, 0x9, 0xb, 0x6, 0x80, 0x6, 0x8000000008, 0x3}) timer_create$auto(0x5, &(0x7f00000002c0)={@sival_int=0x7, @inferred, 0x7, @_tid=r3}, &(0x7f0000000340)=0x200) fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x32820, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f00000004c0)={{@inferred=r3, 0xffffff81, 0xa, 0x105, "50ddcc2d0a7b79ca0e62e667b5000000000000000000000000000000000100ffffffffffffffe700", @raw=0x40}, 0x1, @integer=@value_ptr=0x0, "bee8fd3b16a97731269aff7312ae1a01006266a3bde1f332e1078696becfd044280e7fb7719d4362b09d9f6cb070bad3af7185ae1e691c585914c0b11dd65468f368dfc32254d8ed55c8d806a2ef4bba7bc65cd90676ce6d9800ff5244034ad55049ff128dd27f04ac14d8dbaffacc77596ca0dffa00"}) rename$auto(&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)='./file1\x00') syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r2) mmap$auto(0x0, 0x400008, 0x800000000008001, 0x9b72, 0x2, 0x8014) bpf$auto(0x0, &(0x7f0000001f00)=@bpf_attr_4={0x51de, r2, 0x9, r2}, 0xa3) r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r6, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r6, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r6, 0x40107447, &(0x7f00000000c0)={0x510, &(0x7f0000000000)={0x25, 0x9, 0xb0, @raw=0xfffff008}}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd6\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) r8 = setfsuid$auto(0xee00) r9 = setfsuid$auto(0xee01) socket(0x5, 0x6, 0xa9f6) setresuid$auto(r8, r9, r8) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc0000401}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB='(0\x00\x00', @ANYRES16=r7, @ANYBLOB="10002abd7000fcdbdf251f00000005005900020000000400440004002d01f8163880900000800500e40007000000050053000600000008000a0107000000040046010600d400ffff00001c001300ae1aa91036e3fd4c53e2ef1a49f5ea5e4c03a0807f82a68f0600eb00010000003c002c8038000280340000800800010009000000080002006a000000080001008b0000000800020001000000080002000300000008000200090000000600430108fe000004050080f904f080fb00fa8004007d8004005c8019907a25e656fb483dfa55af72a43d5a41623ce8d31e4df8764d85b7ae1eda89d76e398a46e800bf2481f4993f1826497e5f3b99a645e24b3f3e2d61efbbd87a7e5d742d01f6b7816871f77b143a883baa23e16d5a03a7fe459d09a95a4eccd2c0b0fb212f00ef3990c151383d85de38482d689f9dbd6d5e644ae01e53b98ff6909591aad007c03c114b6483bb11a97df664bd3b5a390ab2b36849b6410822afe257dc3de3854877a94d8770bf762504068cf528485253bf26c6ea4df6f2c527dcbdbf7d2ba45bbce88f114bd1fbc1f9b91e5d1e04c4b599e0a02881263b9de642901da9c31dcaa92f7e9bf4e4513f0008004400000800000700f1002d2d0000b001a3800800dd00", @ANYRES32=r5, @ANYBLOB='\b\x006\x00', @ANYRES32, @ANYRESOCT=r4, @ANYRES32=r0, @ANYBLOB="ab016b8008000f00", @ANYRES32=r6, @ANYBLOB="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"], 0x1728}, 0x1, 0x0, 0x0, 0x1}, 0x80) 9.341600131s ago: executing program 8 (id=1429): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0x23, 0x1, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0xa) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b03, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002480), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r2, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000003680)={0x14, r3, 0x32f, 0x70bd2a, 0x25dfdbff, {0x12, 0x0, 0xf0}}, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x8080) ioctl$auto(r1, 0x540a, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) 6.369133798s ago: executing program 8 (id=1441): close_range$auto(0x2, 0x8, 0x0) (async) r0 = socket(0xa, 0x80002, 0x73) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) (async, rerun: 32) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) (async, rerun: 32) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) (async, rerun: 64) sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(r0, 0x0, 0xaf0, 0x8) prctl$auto(0x16, 0xc, 0x2, 0x8, 0x5) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) (async, rerun: 32) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) (async, rerun: 64) write$auto(0x3, 0x0, 0x7fffffff) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x200000000008000) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async, rerun: 32) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) (async, rerun: 32) socket(0x2c, 0x1, 0x10001) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) sendmsg$auto_NL80211_CMD_NEW_KEY(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES8=r0, @ANYBLOB="000429bd7000fedbdf250b0000002c02318008004b0001000080a8005e8014002d00fe8000000000000000000000000000bb551ef81baa41c88b5876cb12b9b87f06d234d64910bee7f4085e2ab4f8f5ae9a67f7486b6a4d38537a7d70ba6d0ebbbf5c78d4d8609156b04511e40b18ceef5c718bdeb6b1cb293e7ca187998e1dc556bbe4a54e7c1ceb5aea431debd700ac3b1c6e57af793f0601784c9ee2e8464c7b22659f9841a05b054de1cb3bd2231ee31eaac5095f71fb413ca5afb08c5457d5ce88bd00290149c390d8e559ed98d7ebc6c031d8e7f834cc79fb0bd35a6e28d6237b355a775651687a4c6db76b19b63fda38bff4fd7b3565ddc594ec391b4ded3964f25c16608d96dbb7d490c7b537b899b37ef9490924814671a3801bd828ad64463c1b29e79e53788e78f6ba95b1d24e613071f829a78d1a879a6942a641101a5cb9212de1fa344fc9bab5ae4cedef9e01d427baa89b5b4978b6009662f29e8720ca5ec9ef09bed94081d86286133f8b01c48752ebe3301261ebaa36d2000000a8003d8008000100e36f1f5894000300ed1e71f0400162c5cd67ba5b024520c368e1bea55beed13c7c5b7cd72c4c93205ed5ddfe521d8d7785ee7ffbe826b026361385c6bb875346a36616592ae37d458f4150eb7d21122ebdc6efa0fada289c0f24af9fdfdc7ec713b5001809f88767531bea58849595123a903040722060d8c6807af765b8100b3ca7a1cc5c0f468a1d5c5e79f8e1ffbf11d6f59175dd97b60800020005a000000800f800080000000800a4000101000008000d00150400a86f4556d2"], 0x248}, 0x1, 0x0, 0x0, 0x2000c050}, 0xc0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) listen$auto(0x3, 0x83) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x90}}, 0x54) 6.038937036s ago: executing program 7 (id=1443): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = getsockopt$auto(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x3b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000001000)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x2cc}, 0x1, 0x0, 0x0, 0x48845}, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r2, &(0x7f0000000580)="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", 0xfdef) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x1, 0x2020009, 0x3c, 0xf9, 0xfffffffffffffffa, 0x407ffe) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x40000080) io_uring_setup$auto(0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000140)=ANY=[@ANYBLOB='=', @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbdf250b000000", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x890) ioctl$auto_VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)={0x8}) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e80)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x1000000}, 0x400c080) pwrite64$auto(r3, 0x0, 0x1, 0x27) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x62, 0x0, 0x5, &(0x7f0000000340)="87a290", 0xed3, 0x5}, 0x400}, 0x5, 0xb) socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x200, @remote}, 0x6a) 4.950665355s ago: executing program 8 (id=1446): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/packet\x00', 0x2880, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x218, 0x1001, 0x24, 0x1, 0xffffffffffffffff, 0x0, 0x5}, 0x4f4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x7, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)="e7696e5891a9bccbf2a814c2b1c2da6a4642e71e423e55bb3bdfb80fb3496c6bac2cd2cc3aa9633c3668b1128be76976577ef8b494eb27dd7c5c3009036684e6ce3fba9b6c44624a383a1a8daaf2a07cdc3efb51136711a3d8b8d74233b4c4ecce84f9d2a5ca501114d56c1a0499ae8acb22ed5caafa45df6d315664bd5e8188ad7fe06a284669d94a69dc6fb65b3fed2d93b01461860e9360cb1674e2869745a587809f441d6c6e3b306ec365b787e5b9b57f29", 0xb4) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf25040000000a0016070000000400000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r1, r4, 0xfffe) socket(0x26, 0x6, 0x66) r5 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r5, &(0x7f0000000080)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2) r6 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x100, 0x0) ioctl$auto(r6, 0x901064aa, 0xffeffffffffffdff) read$auto(0xffffffffffffffff, 0x0, 0x5) writev$auto(0xffffffffffffffff, 0x0, 0x3) recvmsg$auto(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000002c0)="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", 0x8, &(0x7f0000000600)={&(0x7f00000003c0)="444debcb5d4827b41b873d646e2663fb2d4aa24da78f4b3472bd8daf8c57304fe5302fe1869cfca458a5a39bd4006710640f6032088c509f0c082c1b04896afe04d524b8b80ce2949dae1a1d2bec705c343bc92a41212ae3ed0a036e67d0c6d7b35e6cb8956ef9b289a7e42615af9f0470dc70d3deea952a1d85a1a845530a190757f55d6e53993d1e8f22b49f44b8a5b9b989d8ed44e1a1f0002bb9f9c8813bee34cfb9b329b8b45794054ee04fdb17a945013b532f53854704c99cc8f02c1582b9c91704e2ed3d57e019cf6205", 0x3}, 0xd3, &(0x7f0000000500)="6bfee52cc6d76e1c2f8b714f9ce8de29c2b8c6a36fd1081b8f6753c4db3a957fc9f3c8ce5a1f6aae5db64bc4b8383dea96682820b78f0fdf870dba5430e851305d4713df7f1124096ace834632a497cc07ffb3b6254aa69082434244066c46fe36fd6a587c8d1a8b40662762a5e48ddb2c86fa27c693a26df7fa2dd4f5762a1616bbbc094ba84c2f033b83814b8572c7bb08c224a9b33f1ac650d8c51cff0960141e613531d3f03e45860d2c2f7110f12d60c0b21f6a1556472a2f918584", 0xc, 0xffffffff}, 0xfff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x10000000000001, 0xffffffffffff0009, 0x4) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x41000, 0x0) 4.03514957s ago: executing program 2 (id=1447): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) socketpair$auto(0x1, 0x6, 0x8000000000000000, 0x0) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) write$auto(0x3, 0x0, 0xfffffdef) shutdown$auto(0x200000003, 0x2) 3.713250449s ago: executing program 2 (id=1449): mmap$auto(0x0, 0x0, 0xc00000072, 0xfffffffffffffff7, 0x1000000002, 0x8000) r0 = io_uring_setup$auto(0x86, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0xffffffffffffffff, 0x2, 0x8) socket(0x28, 0x4, 0xffffffc0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r1, 0xa, 0x1) fcntl$auto(r1, 0x10, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ustat$auto(0x12, &(0x7f0000000340)={0x2, 0x80, "417acc606935", "db5f19b5a360"}) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) socket(0x15, 0x5, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000040), 0x2003, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8440, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400004, 0xdd, 0x10011, 0x2, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0x3, 0x3, 0xffffe1d1) splice$auto(r0, &(0x7f00000001c0)=0x2, r2, &(0x7f0000000240)=0x9, 0x4dc0000000000000, 0x2) socket(0xa, 0x3, 0x77) r3 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) write$auto(0x4, 0x0, 0x100082) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/devices/virtual/block/loop15/discard_alignment\x00', 0x1a18c2, 0x0) unshare$auto(0x40000080) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) epoll_ctl$auto_EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000180)={0x5, 0x23}) msgctl$auto_MSG_INFO(0x8, 0xc, &(0x7f00000004c0)={{0x3, 0x0, 0x0, 0x9, 0x5c, 0x4, 0xffff}, &(0x7f0000000440)=0xf8, &(0x7f0000000040)=0x6, 0x2, 0x4, 0xfffffffffffffff8, 0x2, 0x5, 0xb, 0x3, 0x7, @inferred, @inferred=0xffffffffffffffff}) 2.918074086s ago: executing program 5 (id=1451): sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000080}, 0x40090) r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, 0x0, 0xc800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x12000001, &(0x7f0000000080)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000000c0), 0x8, 0xa507}, 0x800}, 0x7, 0x4008) 2.872212641s ago: executing program 2 (id=1452): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) (async, rerun: 32) r1 = getpid() (async) mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r1, 0x0, 0x40000000001, 0x0, 0xa, 0x0) lseek$auto(0x3, 0x8, 0x1) (async, rerun: 64) ioctl$auto(0x3, 0x400454ca, 0x38) (rerun: 64) socket(0x75d2d82a23c5cfb5, 0x4, 0x7) (async) setsockopt$auto(0x3, 0x0, 0x30, 0x0, 0x10001) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) memfd_create$auto(0x0, 0xe) (async, rerun: 64) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (rerun: 64) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) msync$auto(0x0, 0xe0, 0x6) (async, rerun: 32) r3 = io_uring_setup$auto(0x6, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) read$auto_proc_pid_set_timerslack_ns_operations_base(r3, 0x0, 0x0) (async) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x280380, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) 2.735314338s ago: executing program 5 (id=1453): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r0 = socket(0x22, 0x2, 0x300) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, 0x0, 0x2) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmsg$auto_NL80211_CMD_ADD_LINK(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x40000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) epoll_wait$auto(r0, &(0x7f0000000080)={0x1, 0xde38}, 0x178285d3, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dri/renderD128\x00', 0x4002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) setsockopt$auto(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x8004) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES64=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) write$auto(0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0x2fb) pkey_mprotect$auto(0x6, 0x8001, 0x8, 0x2) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 2.521720704s ago: executing program 7 (id=1454): openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cmdline\x00', 0x80, 0x0) (async) r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cmdline\x00', 0x80, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/acpi/interrupts/gpe02\x00', 0x2, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x8001, 0x0) ioctl$auto(r2, 0x401070cd, 0x5) (async) ioctl$auto(r2, 0x401070cd, 0x5) write$auto(r1, &(0x7f0000000040)='\xea:%+/%^\x00', 0xffffffff) finit_module$auto(r0, 0x0, 0x1) 2.402318764s ago: executing program 7 (id=1455): pipe$auto(&(0x7f0000000500)=0xffffffffffffffff) pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x5, 0x0, 0x5, 0x8001, 0x6, 0xac, 0x2000009, 0x3, 0xffffffff, 0x7fffffffffffffff, 0x0, 0x1000, 0x2, 0x8, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffa, 0x5) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x24004001) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0xe0180, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x10, 0x2, 0xc) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO2(0xffffffffffffffff, 0x80184132, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x941c600}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000026bd7000fddbdf250700000005000400080000000500120007000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000080}, 0x20000040) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC1D0p\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) r2 = socket(0x848000000015, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x6b) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x55) sendmsg$auto_NL80211_CMD_GET_MPATH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x100000) ioctl$auto_SNDRV_PCM_IOCTL_STATUS642(0xffffffffffffffff, 0x80984120, 0x0) stat$auto(0x0, &(0x7f0000000380)={0x7c8b, 0x0, 0x80000000000000, 0xffffffff, 0x0, 0xee01, 0x0, 0x2, 0x101, 0x4, 0x1, 0x20fd, 0x3ff, 0x800000401, 0x344d, 0x0, 0xfffffffeffffffff}) r3 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) listmount$auto(&(0x7f0000000000)={0x4, @raw=0x7, 0xd8f, 0x200, 0x3}, 0x0, 0x2, 0x1) writev$auto(r3, &(0x7f00000003c0)={0x0, 0x8}, 0x3) 2.331885344s ago: executing program 2 (id=1456): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) fsopen$auto(0x0, 0x1) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x8, 0xd, 0xe13, 0x81, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0x8627, 0x9, 0x20000800001, 0x3, 0x5, 0x7, 0x6, 0x7, 0x0, 0xffffffee, 0x2a17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x9, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="90014a007f8c392b1dccdb9f593da526acdcffbb166c7f149f9b797323cf1fa21caecf9ef047226bddd094a53ee7a30bc0d4aedb1b98f2d5e048c15fb6d7a7bd2e71174f15ae53db47c206cee11a5482157f824a9d77a0", @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf250200000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x101, 0x103) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x8, 0x7, 0xeb1, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[], 0x7ec}, 0x1, 0x0, 0x0, 0x40040}, 0xc006) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) 1.798445129s ago: executing program 5 (id=1457): mmap$auto(0x0, 0xe986, 0xdb, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a00010000000000000000000600070001"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='&'], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x2afc0e63, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/midi3\x00', 0x20000, 0x0) pread64$auto(r0, 0x0, 0x5, 0xe8f) 1.493309197s ago: executing program 7 (id=1458): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket(0x10, 0x2, 0xc) (async) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000080)={0x1200, 0x9, 0x40, 0x5, 0xc8, 0xffffffffffffffff}) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0xd4, r0, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_KEY={0xa8, 0x1, 0x0, 0x1, [@nested={0xa1, 0x93, 0x0, 0x1, [@generic="835e22faee1a531177eff1f28d6e0656165833b55aa37a1491c03a1b7784dbe650cda9b0ce1f36655ef479c807a02f7db28a9099267d5633db19f7399ede1359c9f740794ed874cbf40a8b8f026dce1948b3971ebcae750df4599643cc9ac0f250bda892630bcbb498244e1e6a1a7a8c3791beaf677f3c94bd3cbb31f7bc1860b819f275c213b8c205ac1eb64d42337cc7", @nested={0x4, 0x1}, @typed={0x8, 0x42, 0x0, 0x0, @pid=r2}]}]}, @OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0xc, 0xb, 0x0, 0x0, @u64=0x8}]}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) r3 = ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) fcntl$auto_F_SETLKW(r3, 0x7, 0x4) 1.42545199s ago: executing program 7 (id=1459): r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/devices\x00', 0x600, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) madvise$auto(0x110c230000, 0x1, 0x9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28c000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xe0, 0xeb1, 0xffffffffffffffff, 0x4) r2 = memfd_secret$auto(0x7) ioctl$auto_BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000200)={"87769ff093ae67048b44711b749a7e4c", 0x7166, 0x6, {0x5, 0x40}, {0x2, 0x5}, 0x8000000000000001, [0x6, 0x8739, 0x8, 0x8, 0x8000, 0x27, 0x7, 0xffffffffffffffff, 0x9, 0x81, 0x5, 0x4, 0x10001, 0x10000, 0x3, 0x9c9]}) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/nvmet_rdma/parameters/srq_size\x00', 0x183841, 0x0) write$auto(r3, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0xc) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=@bpf_attr_3={0x6, 0x9, 0xc000000000, 0xa, 0x5, 0x9, 0x3, 0x3b, 0x4, "87ea8b37db38f77495e94538a62635ba", 0x0, 0x0, r1, 0x8, 0x2, 0x8, 0x0, 0x4, 0xc2, 0xd, @attach_prog_fd=0xffffffffffffffff, 0x0, 0x47, 0x4, 0x7ff, 0x4, r4, r0}, 0xfffffffd) preadv$auto(r0, &(0x7f0000000080)={0x0}, 0x6, 0x22, 0xffc) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000540), r5) 1.422961595s ago: executing program 5 (id=1460): socket(0x11, 0x80003, 0x300) socket(0x22, 0xa, 0x607a6835) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x7) timer_create$auto(0xfffffffa, &(0x7f0000000100)={@sival_int=0x9, @inferred, 0x1, @_sigev_thread={0x0, 0x0}}, &(0x7f0000000140)=0x6) timer_settime$auto(0x0, 0xffffffff, &(0x7f00000000c0)={{0xf, 0x6}}, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x802, 0x0) connect$auto(0x3, &(0x7f0000000000)=@phonet={0x23, 0x0, 0xb, 0x7}, 0x58) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu0/cache/index2/coherency_line_size\x00', 0x80880, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4105, 0x1009) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) bpf$auto(0x14, &(0x7f00000000c0)=@enable_stats={0x1}, 0x7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x101002, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) socket(0xa, 0x3, 0x2f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x407, 0x40000d3e, 0x1, 0x7, 0x3, 0x20000000000c0e, 0x1000010001, 0x3, 0x8, 0x80000001, 0x2000000000007, 0x6d3b, 0x9, 0x40000000000002, 0xfffffffffffffffe]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x30, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[], 0xf5c}, 0x1, 0x0, 0x0, 0x4044055}, 0x10) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0xf240, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50}, 0x80000}, 0x10c, 0x8, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x7ffe) getresuid$auto(&(0x7f00000011c0)=0x7, 0x0, 0x0) 1.389670477s ago: executing program 2 (id=1461): r0 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) writev$auto(r0, &(0x7f00000001c0)={0x0, 0x356b}, 0x4000000000008) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x410000, 0x0) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80001, 0x40) unshare$auto(0x40000080) pwrite64$auto(0xc8, 0x0, 0x5e, 0x39) eventfd2$auto(0x6, 0x4) select$auto(0xd, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getrandom$auto(0x0, 0x2, 0x3) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x4) madvise$auto(0x110c230000, 0x1, 0x9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) lseek$auto(0x3, 0x8, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x17) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, &(0x7f00000020c0)=""/4093, 0xffd) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000004", @ANYRES16=0x0, @ANYBLOB="20002abd7000ffdbdf25700000000600b40000020000"], 0x1c}, 0x1, 0x0, 0x0, 0x6044091}, 0x8050) msync$auto(0x110c230000, 0x200001, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) settimeofday$auto(0x0, &(0x7f0000000100)={0x82, 0x4}) getsockopt$auto(0xffffffffffffffff, 0x10002, 0x2, 0x0, &(0x7f0000000040)=0x2000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1.157355087s ago: executing program 8 (id=1462): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x801, 0x106) bind$auto(r0, &(0x7f0000000040)=@ethernet={0x1, @remote}, 0x6e) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) ioctl$auto_BTRFS_IOC_DEVICES_READY(0xffffffffffffffff, 0x90009427, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3b, 0x1, 0x0, 0xcbe0, 0x0) (async) r2 = prctl$auto(0x3b, 0x1, 0x0, 0xcbe0, 0x0) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) (async) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000240)='//ev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/ip6tnl0/bootp_relay\x00', 0x5014c0, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/ip6tnl0/bootp_relay\x00', 0x5014c0, 0x0) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf250f00000005002e000000000008000300", @ANYRES32=r5, @ANYRESDEC=r2], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) ioctl$auto_MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) (async) ioctl$auto_MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, 0x0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x7, 0xfffff000) (async) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x7, 0xfffff000) socket(0x11, 0x80003, 0x300) ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(r2, 0xc038586c, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x7fffffffffffffff, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, 0x0, 0xa3) (async) r6 = bpf$auto(0x0, 0x0, 0xa3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r6, 0x0) bpf$auto(0x3, 0x0, 0xc) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x9) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, 0x0, 0xc047) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) 418.565036ms ago: executing program 5 (id=1463): set_mempolicy$auto(0x2, &(0x7f0000000200)=0x3, 0x21) ioctl$auto_MEMREADOOB64(0xffffffffffffffff, 0xc0184d16, &(0x7f0000002300)={0xffffffffffffff5c, 0x0, 0x309, 0x7}) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card1\x00', 0x80802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xfffffffffffffc00, &(0x7f0000000100)="a2b36d0449473b7bcbcd6d7f6186e9de29e708c62b9db37658c96e1ed364c5d867daa7438de65e6d2aa369df7e32e2c897c4") shmctl$auto_SHM_STAT_ANY(0x3, 0xf, &(0x7f0000000380)={{0x0, 0xee01, 0x0, 0x8000, 0xfe1, 0x1, 0x3}, 0x101, 0x2, 0x11f6, 0x6, @raw=0x8000, @raw=0x200, 0x1, 0x0, &(0x7f0000000140)="c1f865e55baf88b0eb8f27898bb465fc3afa9ab6f4cf5d0a03789f42bc25492c67a260badc23254ce2654b8c233ed3c3dcf2519759a1b83059", &(0x7f0000000400)="4e11eb8341945d015a48868233239dd3f2a72f6110237a2eed4c46fd114f0785324a436e733fb7c7846cbd01973beab2a1fa2619e065f49b5f6a08b6505e3a087c47364731e8754e7dafc1fbf9af760022be6d8bb52de275005143f3efa12d0b8ffa84e8821ce9e159ae8729318bf177778f578be81984ac83562c7a0df21ed541a07514eb86f4cb732b832ad59d47f360d43e7c58481fa7860e64d0fc7d"}) setfsuid$auto(r0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) mq_open$auto(&(0x7f0000000200)='\\\x00\xa9A\x00', 0x83, 0x7, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x380000}, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/dev_snmp6/nlmon0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msgsnd$auto(0x5, 0x0, 0x3, 0x8) madvise$auto(0x0, 0x200007, 0x19) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D3\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fbdbdf25010000000800010020100000500007802c007e802200bd00a7379b928b2fe53f4a96cc49fa078eb62dca03ca1694ea60fe7c14e53bd8000004009a8020003b8014001a00040000000000000000000000000000010800f4002b262b000c00020001"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) bpf$auto(0x0, &(0x7f0000000240)=@bpf_attr_7={@start_id=0x5, 0x2, 0xfffffbff, r4}, 0xa3) close_range$auto(0xffffffffffffffff, 0x8, 0x0) madvise$auto(0x0, 0x2000040080000003, 0xe) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) 148.061522ms ago: executing program 5 (id=1464): getcwd$auto(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40008d0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2000a, 0x4000000000df, 0x2eb1, 0x401, 0x8000) r1 = socket(0x21, 0x2, 0x2) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x4) sendmmsg$auto(r3, 0x0, 0x6, 0x8) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x4048000) write$auto(0x3, 0x0, 0x7fffffff) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x23, 0x2, 0x0) epoll_create$auto(0x9) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, 0x0, 0x100000a3d9) mmap$auto(0x80000, 0x400005, 0x80000001, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/nr8/flags\x00', 0x509a01, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0xe983, 0xdf, 0xeb4, 0x401, 0x80007ffd) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) socket(0x6, 0x2, 0x36f6) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) socket(0x11, 0x80003, 0x300) 128.52498ms ago: executing program 2 (id=1465): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0xd8, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, "c63d9865e4ee33c582314f86116d291a288cc43d9b762fb078e9b0945c103b165daee62c6c221b3f0e3e4918737b648462a3fa38d94b2994b9fc2b35ea765de19b038450d2d5d24b08990459c6fe514ce57880ebdda2340e7374257cae9d5aaf9795d99afc775417d1e10d48c658935cb8ee7e672696188b6fed0e951db60e9914621238d47f1c67c3118dc8308a7a09ab9ba21a6cf5e84205b745b01e2827b7ef9697a4eacf5cf5e54b3be9f341a75ac2280025728a5fe2cd3cd5ddffdf3e43deae"}, 0xd8}, 0x1, 0x0, 0x0, 0x200040c0}, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)={0xf8, r3, 0x6c5679fc7dece1a9, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x34, 0x4, "a8889812d52d4d6a6405c63f882a6d31f6a1e71391ce5ee358ce4f6313227a2ec21c6d2e89bfe2527d041e5086c71dbe"}, @SEG6_ATTR_SECRET={0xa7, 0x4, "3294963978cd448856707b560789987d0557e9c1f64cac86911da34fd136dc23771d42bf9c956ee42d22d05f049a33d93bcd6bbd38b8c88e98595561c604576623862421f7be73e0635a282af5f5b820fc6baa7a11ddda379c84a4b6ffcd56e7f4bd1ec48fa6dd75ccd5232fdeb39408bdf895eb72ed8ae56ee4bcfd3363d0fbf8a7e4ce722cb7a6aa5f7ef0263aea2d7d30ef17df1b43c68e8d07634bfe566c66c3d8"}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0xf8}, 0x1, 0x0, 0x0, 0x24000014}, 0x400c810) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) r5 = socket(0x10, 0x2, 0xc) r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00O', @ANYRES16=r6, @ANYBLOB="10002cbd7000fadbdf250a00000a00000200252f00e2a85c41e75a02715b2d0000005cdcdf28fffe65c31770799fdab838aaf6712a82e628c9e6429a4a38320b2d692863927bd744b4f7b409b29862d3257675d4fd09d74a831929b1005bdd28ef3fc5ae2884ef6a78fedbebbc656141771e57124268c37932c90ec99923926a97bb444f6903a41102463c79baf78c35827f46efb37be97277d81130bd43e31c60347610f3e65f3d60d3d1e231c0cc23ad56ff23565d95cfafc7a92a64da18c0c01c0600010006000000"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) sendmsg$auto_NL80211_CMD_SET_BEACON(r5, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xf9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008840}, 0x40000) write$auto(r4, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f00000006c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbbw\x8dSN\xb2#\xde\xf6\xfe\n_\x86\xccI{0 \xdb8Mh\x16 `\xc7\xe3\xf1\x9f-\xdd\x9a\xd2f\xca\xb3\x99\x81\xb0\xebt\xbc\xde\x0eH\x8db', 0x52) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) fchdir$auto(0xffffffffffffffff) r7 = openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/bdi/43:480/stats\x00', 0x80002, 0x0) bpf$auto(0xfffffffd, &(0x7f0000000880)=@link_update={0xffffffffffffffff, @new_map_fd=r7, 0x4, @old_map_fd}, 0xa3) mmap$auto(0x5, 0x4020008, 0x1001, 0x19, 0xffffffffffffffff, 0x8003) mprotect$auto(0x200000000000, 0x806121, 0x8) futex$auto(0x0, 0x9, 0x3c, &(0x7f0000000080)={0x6, 0x36b}, 0x0, 0x6) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r8) 0s ago: executing program 7 (id=1466): openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x702, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty12\x00', 0x101840, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyq5\x00', 0xa40, 0x0) mlockall$auto(0x7) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x4b67, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyt7\x00', 0x101100, 0x0) read$auto(0x3, 0x0, 0x7) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) r5 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x2840, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r5, &(0x7f0000001100)=""/4096, 0x1000) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x20800, 0x0) fcntl$auto(0x3, 0x4, 0xa553) write$auto(0xffffffffffffffff, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x05\xbaYbR\xc1\xdd\xa2', 0xea) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x4e0082, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), r3) fcntl$auto(r6, 0x9, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x0, 0x0) ioctl$auto_SW_SYNC_IOC_INC(r7, 0x40045731, 0x0) kernel console output (not intermixed with test programs): $⁍)UÑnE-ʙl- -_5Z omfwYh*/xDlݩgkǐA79Xa/f_ARxM vp$^;q3n-6+ek [ 363.746935][T15859] dump_stack_lvl+0x16c/0x1f0 [ 363.746957][T15859] should_fail_ex+0x512/0x640 [ 363.746978][T15859] ? __kmalloc_noprof+0xca/0x880 [ 363.746995][T15859] should_failslab+0xc2/0x120 [ 363.747016][T15859] __kmalloc_noprof+0xdd/0x880 [ 363.747031][T15859] ? udp_init_sock+0x24e/0x450 [ 363.747053][T15859] ? udp_init_sock+0x24e/0x450 [ 363.747070][T15859] udp_init_sock+0x24e/0x450 [ 363.747088][T15859] ? __pfx_udp_init_sock+0x10/0x10 [ 363.747117][T15859] inet_create+0x939/0x1040 [ 363.747140][T15859] ? inet_create+0x93/0x1040 [ 363.747162][T15859] __sock_create+0x335/0x8d0 [ 363.747183][T15859] udp_sock_create4+0xa6/0x450 [ 363.747198][T15859] ? __pfx_udp_sock_create4+0x10/0x10 [ 363.747222][T15859] ? lockdep_hardirqs_on+0x7c/0x110 [ 363.747239][T15859] ? crng_make_state+0x48e/0x6d0 [ 363.747256][T15859] rxrpc_open_socket+0x4f5/0x6b0 [ 363.747279][T15859] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 363.747321][T15859] ? __pfx_rxrpc_client_conn_reap_timeout+0x10/0x10 [ 363.747360][T15859] ? rcu_is_watching+0x12/0xc0 [ 363.747396][T15859] rxrpc_lookup_local+0xa01/0x1220 [ 363.747440][T15859] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 363.747477][T15859] ? __local_bh_enable_ip+0xa4/0x120 [ 363.747514][T15859] rxrpc_sendmsg+0x37e/0x680 [ 363.747545][T15859] ____sys_sendmsg+0xa95/0xc70 [ 363.747574][T15859] ? copy_msghdr_from_user+0x10a/0x160 [ 363.747612][T15859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.747650][T15859] ? __pfx_futex_wake_mark+0x10/0x10 [ 363.747683][T15859] ___sys_sendmsg+0x134/0x1d0 [ 363.747722][T15859] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.747814][T15859] __sys_sendmsg+0x16d/0x220 [ 363.747853][T15859] ? __pfx___sys_sendmsg+0x10/0x10 [ 363.747890][T15859] ? __x64_sys_futex+0x1e0/0x4c0 [ 363.747950][T15859] do_syscall_64+0xcd/0x4b0 [ 363.747984][T15859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.748011][T15859] RIP: 0033:0x7f071398eec9 [ 363.748033][T15859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.748056][T15859] RSP: 002b:00007f0714793038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.748081][T15859] RAX: ffffffffffffffda RBX: 00007f0713be5fa0 RCX: 00007f071398eec9 [ 363.748107][T15859] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000002 [ 363.748123][T15859] RBP: 00007f0713a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 363.748140][T15859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.748157][T15859] R13: 00007f0713be6038 R14: 00007f0713be5fa0 R15: 00007fff60342148 [ 363.748195][T15859] [ 364.254641][T15859] FAULT_INJECTION: forcing a failure. [ 364.254641][T15859] name failslab, interval 1, probability 0, space 0, times 0 [ 364.318823][T15862] zswap: compressor not available [ 364.324950][T15859] CPU: 1 UID: 0 PID: 15859 Comm: syz.3.887 Not tainted syzkaller #0 PREEMPT(full) [ 364.324986][T15859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 364.325003][T15859] Call Trace: [ 364.325013][T15859] [ 364.325024][T15859] dump_stack_lvl+0x16c/0x1f0 [ 364.325061][T15859] should_fail_ex+0x512/0x640 [ 364.325097][T15859] ? __kmalloc_node_noprof+0xcd/0x8a0 [ 364.325134][T15859] should_failslab+0xc2/0x120 [ 364.325180][T15859] __kmalloc_node_noprof+0xe0/0x8a0 [ 364.325214][T15859] ? alloc_slab_obj_exts+0x3a/0xd0 [ 364.325248][T15859] ? alloc_slab_obj_exts+0x3a/0xd0 [ 364.325272][T15859] alloc_slab_obj_exts+0x3a/0xd0 [ 364.325298][T15859] new_slab+0x283/0x360 [ 364.325327][T15859] ___slab_alloc+0xdc4/0x1ae0 [ 364.325356][T15859] ? __d_alloc+0x32/0xae0 [ 364.325402][T15859] ? __d_alloc+0x32/0xae0 [ 364.325432][T15859] ? __slab_alloc.constprop.0+0x63/0x110 [ 364.325456][T15859] __slab_alloc.constprop.0+0x63/0x110 [ 364.325489][T15859] kmem_cache_alloc_lru_noprof+0x443/0x6e0 [ 364.325518][T15859] ? stack_trace_save+0x8e/0xc0 [ 364.325552][T15859] ? __d_alloc+0x32/0xae0 [ 364.325589][T15859] ? __d_alloc+0x32/0xae0 [ 364.325617][T15859] __d_alloc+0x32/0xae0 [ 364.325654][T15859] d_alloc_parallel+0x111/0x1480 [ 364.325703][T15859] ? find_held_lock+0x2b/0x80 [ 364.325737][T15859] ? __pfx_d_alloc_parallel+0x10/0x10 [ 364.325781][T15859] ? __d_lookup+0x266/0x4a0 [ 364.325829][T15859] lookup_open.isra.0+0x665/0x1580 [ 364.325865][T15859] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 364.325914][T15859] ? mnt_get_write_access+0x1e9/0x2f0 [ 364.325958][T15859] path_openat+0x893/0x2cb0 [ 364.326002][T15859] ? __pfx_path_openat+0x10/0x10 [ 364.326044][T15859] do_filp_open+0x20b/0x470 [ 364.326075][T15859] ? __pfx_do_filp_open+0x10/0x10 [ 364.326136][T15859] ? alloc_fd+0x471/0x7d0 [ 364.326181][T15859] do_sys_openat2+0x11b/0x1d0 [ 364.326222][T15859] ? __pfx_do_sys_openat2+0x10/0x10 [ 364.326278][T15859] __x64_sys_openat+0x174/0x210 [ 364.326318][T15859] ? __pfx___x64_sys_openat+0x10/0x10 [ 364.326373][T15859] do_syscall_64+0xcd/0x4b0 [ 364.326408][T15859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.326435][T15859] RIP: 0033:0x7f071398eec9 [ 364.326456][T15859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.326482][T15859] RSP: 002b:00007f0714793038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 364.326508][T15859] RAX: ffffffffffffffda RBX: 00007f0713be5fa0 RCX: 00007f071398eec9 [ 364.326527][T15859] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 364.326544][T15859] RBP: 00007f0713a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 364.326562][T15859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.326579][T15859] R13: 00007f0713be6038 R14: 00007f0713be5fa0 R15: 00007fff60342148 [ 364.326617][T15859] [ 364.607998][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.171080][T15922] zswap: compressor 0="Pق=P not available [ 366.852453][T16039] snd_aloop snd_aloop.0: Parsing timer source ')' failed with -22 [ 366.872284][T16040] FAULT_INJECTION: forcing a failure. [ 366.872284][T16040] name failslab, interval 1, probability 0, space 0, times 0 [ 366.887870][T16040] CPU: 0 UID: 0 PID: 16040 Comm: syz.3.895 Not tainted syzkaller #0 PREEMPT(full) [ 366.887893][T16040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 366.887903][T16040] Call Trace: [ 366.887909][T16040] [ 366.887916][T16040] dump_stack_lvl+0x16c/0x1f0 [ 366.887939][T16040] should_fail_ex+0x512/0x640 [ 366.887961][T16040] ? __kmalloc_cache_noprof+0x5f/0x780 [ 366.887987][T16040] should_failslab+0xc2/0x120 [ 366.888008][T16040] __kmalloc_cache_noprof+0x72/0x780 [ 366.888024][T16040] ? __kthread_create_on_node+0xce/0x3f0 [ 366.888049][T16040] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 366.888069][T16040] ? __kthread_create_on_node+0xce/0x3f0 [ 366.888089][T16040] __kthread_create_on_node+0xce/0x3f0 [ 366.888110][T16040] ? __pfx___kthread_create_on_node+0x10/0x10 [ 366.888141][T16040] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 366.888160][T16040] kthread_create_on_node+0xc7/0x100 [ 366.888181][T16040] ? __pfx_kthread_create_on_node+0x10/0x10 [ 366.888201][T16040] ? find_held_lock+0x2b/0x80 [ 366.888222][T16040] ? setup_udp_tunnel_sock+0x565/0x680 [ 366.888244][T16040] ? do_raw_spin_unlock+0x172/0x230 [ 366.888264][T16040] rxrpc_open_socket+0x3db/0x6b0 [ 366.888285][T16040] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 366.888307][T16040] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 366.888326][T16040] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 366.888352][T16040] ? __pfx_rxrpc_client_conn_reap_timeout+0x10/0x10 [ 366.888374][T16040] ? rcu_is_watching+0x12/0xc0 [ 366.888395][T16040] rxrpc_lookup_local+0xa01/0x1220 [ 366.888420][T16040] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 366.888444][T16040] ? __local_bh_enable_ip+0xa4/0x120 [ 366.888465][T16040] rxrpc_sendmsg+0x37e/0x680 [ 366.888482][T16040] ____sys_sendmsg+0xa95/0xc70 [ 366.888500][T16040] ? copy_msghdr_from_user+0x10a/0x160 [ 366.888520][T16040] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.888540][T16040] ? __pfx_futex_wake_mark+0x10/0x10 [ 366.888559][T16040] ___sys_sendmsg+0x134/0x1d0 [ 366.888582][T16040] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.888627][T16040] __sys_sendmsg+0x16d/0x220 [ 366.888648][T16040] ? __pfx___sys_sendmsg+0x10/0x10 [ 366.888668][T16040] ? __x64_sys_futex+0x1e0/0x4c0 [ 366.888701][T16040] do_syscall_64+0xcd/0x4b0 [ 366.888721][T16040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.888736][T16040] RIP: 0033:0x7f071398eec9 [ 366.888749][T16040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.888764][T16040] RSP: 002b:00007f07117f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.888779][T16040] RAX: ffffffffffffffda RBX: 00007f0713be6270 RCX: 00007f071398eec9 [ 366.888789][T16040] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000004 [ 366.888798][T16040] RBP: 00007f0713a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 366.888808][T16040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.888817][T16040] R13: 00007f0713be6308 R14: 00007f0713be6270 R15: 00007fff60342148 [ 366.888838][T16040] [ 367.541134][T16031] netlink: 338 bytes leftover after parsing attributes in process `syz.1.896'. [ 367.722981][T16073] FAULT_INJECTION: forcing a failure. [ 367.722981][T16073] name fail_futex, interval 1, probability 0, space 0, times 0 [ 367.748595][T16073] CPU: 0 UID: 0 PID: 16073 Comm: syz.1.897 Not tainted syzkaller #0 PREEMPT(full) [ 367.748617][T16073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 367.748626][T16073] Call Trace: [ 367.748632][T16073] [ 367.748638][T16073] dump_stack_lvl+0x16c/0x1f0 [ 367.748662][T16073] should_fail_ex+0x512/0x640 [ 367.748685][T16073] get_futex_key+0x1d0/0x1560 [ 367.748709][T16073] ? __pfx_get_futex_key+0x10/0x10 [ 367.748727][T16073] ? select_task_rq_fair+0x4c4/0x45e0 [ 367.748749][T16073] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 367.748775][T16073] futex_wait_setup+0x9d/0x550 [ 367.748795][T16073] __futex_wait+0x193/0x2f0 [ 367.748810][T16073] ? __pfx___futex_wait+0x10/0x10 [ 367.748824][T16073] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 367.748839][T16073] ? lockdep_hardirqs_on+0x7c/0x110 [ 367.748857][T16073] ? __pfx_futex_wake_mark+0x10/0x10 [ 367.748874][T16073] ? futex_private_hash_put+0x176/0x300 [ 367.748904][T16073] ? futex_private_hash_put+0x18a/0x300 [ 367.748925][T16073] futex_wait+0xe8/0x380 [ 367.748940][T16073] ? __pfx_futex_wait+0x10/0x10 [ 367.748959][T16073] ? kmem_cache_free+0x2d4/0x6c0 [ 367.748977][T16073] ? putname+0x154/0x1a0 [ 367.749000][T16073] do_futex+0x229/0x350 [ 367.749020][T16073] ? __pfx_do_futex+0x10/0x10 [ 367.749045][T16073] __x64_sys_futex+0x1e0/0x4c0 [ 367.749066][T16073] ? __x64_sys_openat+0x174/0x210 [ 367.749088][T16073] ? __pfx___x64_sys_futex+0x10/0x10 [ 367.749107][T16073] ? ksys_write+0x1ac/0x250 [ 367.749130][T16073] do_syscall_64+0xcd/0x4b0 [ 367.749238][T16073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.749264][T16073] RIP: 0033:0x7f03cc18eec9 [ 367.749278][T16073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.749292][T16073] RSP: 002b:00007f03cd0630e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 367.749307][T16073] RAX: ffffffffffffffda RBX: 00007f03cc3e5fa8 RCX: 00007f03cc18eec9 [ 367.749317][T16073] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f03cc3e5fa8 [ 367.749326][T16073] RBP: 00007f03cc3e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 367.749335][T16073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.749344][T16073] R13: 00007f03cc3e6038 R14: 00007ffe735a9320 R15: 00007ffe735a9408 [ 367.749364][T16073] [ 368.818985][T16133] random: crng reseeded on system resumption [ 368.996584][T16135] FAULT_INJECTION: forcing a failure. [ 368.996584][T16135] name failslab, interval 1, probability 0, space 0, times 0 [ 369.041554][T16135] CPU: 0 UID: 0 PID: 16135 Comm: syz.1.902 Not tainted syzkaller #0 PREEMPT(full) [ 369.041579][T16135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 369.041589][T16135] Call Trace: [ 369.041595][T16135] [ 369.041602][T16135] dump_stack_lvl+0x16c/0x1f0 [ 369.041628][T16135] should_fail_ex+0x512/0x640 [ 369.041649][T16135] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 369.041668][T16135] should_failslab+0xc2/0x120 [ 369.041688][T16135] kmem_cache_alloc_noprof+0x75/0x6e0 [ 369.041704][T16135] ? __kernfs_iattrs+0x124/0x3e0 [ 369.041726][T16135] ? __kernfs_iattrs+0x124/0x3e0 [ 369.041741][T16135] ? __pfx___might_resched+0x10/0x10 [ 369.041758][T16135] __kernfs_iattrs+0x124/0x3e0 [ 369.041782][T16135] ? __pfx___kernfs_iattrs+0x10/0x10 [ 369.041801][T16135] ? down_write+0x14d/0x200 [ 369.041819][T16135] ? inode_newsize_ok+0x13b/0x200 [ 369.041844][T16135] __kernfs_setattr+0x4d/0x3c0 [ 369.041865][T16135] kernfs_iop_setattr+0xda/0x120 [ 369.041884][T16135] ? __pfx_kernfs_iop_setattr+0x10/0x10 [ 369.041901][T16135] notify_change+0x6a6/0x1230 [ 369.041928][T16135] do_truncate+0x1d7/0x230 [ 369.041945][T16135] ? __pfx_do_truncate+0x10/0x10 [ 369.041969][T16135] ? mnt_get_write_access+0x1e9/0x2f0 [ 369.041992][T16135] vfs_truncate+0x5d6/0x6e0 [ 369.042011][T16135] ? __pfx_vfs_truncate+0x10/0x10 [ 369.042031][T16135] ? putname+0x154/0x1a0 [ 369.042048][T16135] ? putname+0x154/0x1a0 [ 369.042069][T16135] __x64_sys_truncate+0x172/0x1e0 [ 369.042087][T16135] ? __pfx___x64_sys_truncate+0x10/0x10 [ 369.042111][T16135] do_syscall_64+0xcd/0x4b0 [ 369.042130][T16135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.042145][T16135] RIP: 0033:0x7f03cc18eec9 [ 369.042158][T16135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.042172][T16135] RSP: 002b:00007f03cd042038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 369.042186][T16135] RAX: ffffffffffffffda RBX: 00007f03cc3e6090 RCX: 00007f03cc18eec9 [ 369.042196][T16135] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000040 [ 369.042205][T16135] RBP: 00007f03cc211f91 R08: 0000000000000000 R09: 0000000000000000 [ 369.042214][T16135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.042223][T16135] R13: 00007f03cc3e6128 R14: 00007f03cc3e6090 R15: 00007ffe735a9408 [ 369.042244][T16135] [ 371.531440][T16190] vhci_hcd: not connected 4 [ 371.754746][T16207] netlink: 186 bytes leftover after parsing attributes in process `syz.2.908'. [ 371.898283][ T5849] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 372.499815][T16237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.915'. [ 373.072253][T16269] random: crng reseeded on system resumption                                                                                                                                                                                                                                                                                                             [ 392.964236][T17279] block2mtd: parameter too long syzkaller syzkaller login: [ 394.519177][T17379] snd_aloop snd_aloop.0: Parsing timer source ')' failed with -22 [ 394.531490][T17379] usb usb9: usbfs: interface 0 claimed by hub while 'syz.2.980' sets config #5 [ 394.649100][T17387] FAULT_INJECTION: forcing a failure. [ 394.649100][T17387] name failslab, interval 1, probability 0, space 0, times 0 [ 394.663137][T17387] CPU: 0 UID: 0 PID: 17387 Comm: syz.2.982 Not tainted syzkaller #0 PREEMPT(full) [ 394.663158][T17387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 394.663168][T17387] Call Trace: [ 394.663174][T17387] [ 394.663180][T17387] dump_stack_lvl+0x16c/0x1f0 [ 394.663208][T17387] should_fail_ex+0x512/0x640 [ 394.663228][T17387] ? __kmalloc_cache_noprof+0x5f/0x780 [ 394.663246][T17387] should_failslab+0xc2/0x120 [ 394.663267][T17387] __kmalloc_cache_noprof+0x72/0x780 [ 394.663283][T17387] ? __kthread_create_on_node+0xce/0x3f0 [ 394.663306][T17387] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 394.663326][T17387] ? __kthread_create_on_node+0xce/0x3f0 [ 394.663346][T17387] __kthread_create_on_node+0xce/0x3f0 [ 394.663368][T17387] ? __pfx___kthread_create_on_node+0x10/0x10 [ 394.663399][T17387] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 394.663418][T17387] kthread_create_on_node+0xc7/0x100 [ 394.663439][T17387] ? __pfx_kthread_create_on_node+0x10/0x10 [ 394.663459][T17387] ? find_held_lock+0x2b/0x80 [ 394.663477][T17387] ? setup_udp_tunnel_sock+0x565/0x680 [ 394.663493][T17387] ? do_raw_spin_unlock+0x172/0x230 [ 394.663512][T17387] rxrpc_open_socket+0x3db/0x6b0 [ 394.663534][T17387] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 394.663556][T17387] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 394.663574][T17387] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 394.663600][T17387] ? __pfx_rxrpc_client_conn_reap_timeout+0x10/0x10 [ 394.663622][T17387] ? rcu_is_watching+0x12/0xc0 [ 394.663642][T17387] rxrpc_lookup_local+0xa01/0x1220 [ 394.663667][T17387] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 394.663691][T17387] ? __local_bh_enable_ip+0xa4/0x120 [ 394.663712][T17387] rxrpc_sendmsg+0x37e/0x680 [ 394.663729][T17387] ____sys_sendmsg+0xa95/0xc70 [ 394.663746][T17387] ? copy_msghdr_from_user+0x10a/0x160 [ 394.663766][T17387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.663786][T17387] ? __pfx_futex_wake_mark+0x10/0x10 [ 394.663804][T17387] ___sys_sendmsg+0x134/0x1d0 [ 394.663826][T17387] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.663871][T17387] __sys_sendmsg+0x16d/0x220 [ 394.663892][T17387] ? __pfx___sys_sendmsg+0x10/0x10 [ 394.663912][T17387] ? __x64_sys_futex+0x1e0/0x4c0 [ 394.663939][T17387] ? fput+0x9b/0xd0 [ 394.663962][T17387] do_syscall_64+0xcd/0x4b0 [ 394.663981][T17387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.663995][T17387] RIP: 0033:0x7f3e3678eec9 [ 394.664008][T17387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.664022][T17387] RSP: 002b:00007f3e37658038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.664036][T17387] RAX: ffffffffffffffda RBX: 00007f3e369e5fa0 RCX: 00007f3e3678eec9 [ 394.664046][T17387] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 394.664054][T17387] RBP: 00007f3e36811f91 R08: 0000000000000000 R09: 0000000000000000 [ 394.664064][T17387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 394.664073][T17387] R13: 00007f3e369e6038 R14: 00007f3e369e5fa0 R15: 00007ffc250b2698 [ 394.664093][T17387] [ 394.964759][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.617197][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 396.629396][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 396.637287][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 396.645804][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 396.653703][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 396.990280][T17455] chnl_net:caif_netlink_parms(): no params data found [ 397.124304][T17455] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.131608][T17455] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.140204][T17455] bridge_slave_0: entered allmulticast mode [ 397.148457][T17455] bridge_slave_0: entered promiscuous mode [ 397.162419][T17455] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.170120][T17455] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.178658][T17455] bridge_slave_1: entered allmulticast mode [ 397.188433][T17455] bridge_slave_1: entered promiscuous mode [ 397.240481][T17455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.253864][T17455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.333786][T17455] team0: Port device team_slave_0 added [ 397.352015][T17455] team0: Port device team_slave_1 added [ 397.425723][T17455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.433181][T17455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.483439][T17455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.505564][T17455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.514508][T17455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.556669][T17455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.633862][T17455] hsr_slave_0: entered promiscuous mode [ 397.640933][T17455] hsr_slave_1: entered promiscuous mode [ 397.649239][T17455] debugfs: 'hsr0' already exists in 'hsr' [ 397.655041][T17455] Cannot create hsr debugfs directory [ 397.877903][T17455] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 397.892000][T17455] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 397.904179][T17455] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 397.918011][T17455] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 398.027920][T17455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.069333][T17455] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.120534][ T6499] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.127704][ T6499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.146191][ T6499] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.153348][ T6499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.491527][T17455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.635358][T17802] FAULT_INJECTION: forcing a failure. [ 398.635358][T17802] name failslab, interval 1, probability 0, space 0, times 0 [ 398.651723][T17802] CPU: 0 UID: 0 PID: 17802 Comm: syz.2.988 Not tainted syzkaller #0 PREEMPT(full) [ 398.651759][T17802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 398.651777][T17802] Call Trace: [ 398.651787][T17802] [ 398.651798][T17802] dump_stack_lvl+0x16c/0x1f0 [ 398.651837][T17802] should_fail_ex+0x512/0x640 [ 398.651886][T17802] ? fs_reclaim_acquire+0xae/0x150 [ 398.651929][T17802] should_failslab+0xc2/0x120 [ 398.651967][T17802] kmem_cache_alloc_noprof+0x75/0x6e0 [ 398.651997][T17802] ? __asan_memcpy+0x3c/0x60 [ 398.652022][T17802] ? __kernfs_new_node+0xd2/0x8e0 [ 398.652062][T17802] ? __kernfs_new_node+0xd2/0x8e0 [ 398.652094][T17802] __kernfs_new_node+0xd2/0x8e0 [ 398.652134][T17802] ? __pfx___kernfs_new_node+0x10/0x10 [ 398.652176][T17802] ? find_held_lock+0x2b/0x80 [ 398.652209][T17802] ? kernfs_root+0xee/0x2a0 [ 398.652252][T17802] kernfs_new_node+0x13c/0x1e0 [ 398.652298][T17802] kernfs_create_link+0xcc/0x240 [ 398.652330][T17802] sysfs_do_create_link_sd+0x90/0x140 [ 398.652365][T17802] sysfs_create_link+0x61/0xc0 [ 398.652397][T17802] __add_disk+0x61e/0xf00 [ 398.652436][T17802] add_disk_fwnode+0x13f/0x5d0 [ 398.652473][T17802] loop_add+0x903/0xb70 [ 398.652509][T17802] ? __pfx_loop_add+0x10/0x10 [ 398.652568][T17802] ? find_held_lock+0x2b/0x80 [ 398.652604][T17802] loop_control_ioctl+0x13e/0x630 [ 398.652638][T17802] ? __pfx_loop_control_ioctl+0x10/0x10 [ 398.652677][T17802] ? __pfx_loop_control_ioctl+0x10/0x10 [ 398.652714][T17802] __x64_sys_ioctl+0x18b/0x210 [ 398.652756][T17802] do_syscall_64+0xcd/0x4b0 [ 398.652790][T17802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.652819][T17802] RIP: 0033:0x7f3e3678eec9 [ 398.652842][T17802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.652876][T17802] RSP: 002b:00007f3e37658038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 398.652903][T17802] RAX: ffffffffffffffda RBX: 00007f3e369e5fa0 RCX: 00007f3e3678eec9 [ 398.652921][T17802] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000009 [ 398.652939][T17802] RBP: 00007f3e36811f91 R08: 0000000000000000 R09: 0000000000000000 [ 398.652956][T17802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.652972][T17802] R13: 00007f3e369e6038 R14: 00007f3e369e5fa0 R15: 00007ffc250b2698 [ 398.653009][T17802] [ 398.707656][ T5849] Bluetooth: hci4: command tx timeout [ 398.711970][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.901729][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.007743][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.238898][T17455] veth0_vlan: entered promiscuous mode [ 399.287187][T17455] veth1_vlan: entered promiscuous mode [ 399.407653][T17455] veth0_macvtap: entered promiscuous mode [ 399.456207][T17455] veth1_macvtap: entered promiscuous mode [ 399.494006][T17455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.544661][T17455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.608510][ T3523] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.636253][ T3523] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.649198][ T3523] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.678324][ T3523] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.761826][ T6490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.774854][ T6490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.793211][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 399.807226][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 399.815608][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 399.824154][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 399.832160][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 399.834273][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.848697][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.226673][T17854] chnl_net:caif_netlink_parms(): no params data found [ 400.413387][T18003] block2mtd: parameter too long [ 400.799969][ T5849] Bluetooth: hci4: command tx timeout [ 400.849281][T17854] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.858110][T17854] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.866726][T17854] bridge_slave_0: entered allmulticast mode [ 400.888110][T17854] bridge_slave_0: entered promiscuous mode [ 400.965387][T17854] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.978108][T17854] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.989200][T17854] bridge_slave_1: entered allmulticast mode [ 400.996694][T17854] bridge_slave_1: entered promiscuous mode [ 401.157216][T17854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.171821][T17854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.252407][T17854] team0: Port device team_slave_0 added [ 401.265526][T17854] team0: Port device team_slave_1 added [ 401.329127][T17854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.336215][T17854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.362179][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.370096][T17854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.392248][T17854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.399471][T17854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.425385][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.441150][T17854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.614699][T18140] random: crng reseeded on system resumption [ 401.729825][T17854] hsr_slave_0: entered promiscuous mode [ 401.759377][T17854] hsr_slave_1: entered promiscuous mode [ 401.766301][T17854] debugfs: 'hsr0' already exists in 'hsr' [ 401.776016][T17854] Cannot create hsr debugfs directory [ 401.906670][ T5849] Bluetooth: hci5: command tx timeout [ 402.763443][T17854] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 402.792433][T17854] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 402.804651][T17854] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 402.831232][T17854] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 402.857440][ T5849] Bluetooth: hci4: command tx timeout [ 403.229004][T17854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.293164][T17854] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.338826][ T6490] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.345953][ T6490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.379688][T18280] block2mtd: parameter too long [ 403.423375][T17854] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 403.434783][T17854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 403.503164][ T6490] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.510337][ T6490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.953245][T18332] FAULT_INJECTION: forcing a failure. [ 403.953245][T18332] name failslab, interval 1, probability 0, space 0, times 0 [ 403.971517][T18332] CPU: 0 UID: 0 PID: 18332 Comm: syz.4.998 Not tainted syzkaller #0 PREEMPT(full) [ 403.971556][T18332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 403.971574][T18332] Call Trace: [ 403.971584][T18332] [ 403.971596][T18332] dump_stack_lvl+0x16c/0x1f0 [ 403.971635][T18332] should_fail_ex+0x512/0x640 [ 403.971670][T18332] ? __kmalloc_cache_noprof+0x5f/0x780 [ 403.971702][T18332] should_failslab+0xc2/0x120 [ 403.971738][T18332] __kmalloc_cache_noprof+0x72/0x780 [ 403.971766][T18332] ? do_raw_spin_unlock+0x172/0x230 [ 403.971794][T18332] ? snd_rawmidi_open+0x3c3/0xbf0 [ 403.971831][T18332] ? snd_rawmidi_open+0x3c3/0xbf0 [ 403.971861][T18332] snd_rawmidi_open+0x3c3/0xbf0 [ 403.971900][T18332] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 403.971940][T18332] ? kobject_get_unless_zero+0x156/0x1e0 [ 403.971978][T18332] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 403.972009][T18332] snd_open+0x22a/0x4c0 [ 403.972047][T18332] ? __pfx_snd_open+0x10/0x10 [ 403.972083][T18332] chrdev_open+0x234/0x6a0 [ 403.972115][T18332] ? __pfx_apparmor_file_open+0x10/0x10 [ 403.972152][T18332] ? __pfx_chrdev_open+0x10/0x10 [ 403.972196][T18332] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 403.972238][T18332] do_dentry_open+0x982/0x1530 [ 403.972272][T18332] ? __pfx_chrdev_open+0x10/0x10 [ 403.972312][T18332] vfs_open+0x82/0x3f0 [ 403.972354][T18332] path_openat+0x1de4/0x2cb0 [ 403.972398][T18332] ? __pfx_path_openat+0x10/0x10 [ 403.972438][T18332] do_filp_open+0x20b/0x470 [ 403.972470][T18332] ? __pfx_do_filp_open+0x10/0x10 [ 403.972529][T18332] ? alloc_fd+0x471/0x7d0 [ 403.972568][T18332] do_sys_openat2+0x11b/0x1d0 [ 403.972605][T18332] ? __pfx_do_sys_openat2+0x10/0x10 [ 403.972658][T18332] __x64_sys_openat+0x174/0x210 [ 403.972702][T18332] ? __pfx___x64_sys_openat+0x10/0x10 [ 403.972756][T18332] do_syscall_64+0xcd/0x4b0 [ 403.972791][T18332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.972818][T18332] RIP: 0033:0x7f6673d8eec9 [ 403.972840][T18332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.972867][T18332] RSP: 002b:00007f6674cba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 403.972893][T18332] RAX: ffffffffffffffda RBX: 00007f6673fe5fa0 RCX: 00007f6673d8eec9 [ 403.972911][T18332] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 403.972929][T18332] RBP: 00007f6673e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 403.972946][T18332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.972963][T18332] R13: 00007f6673fe6038 R14: 00007f6673fe5fa0 R15: 00007fff03bcb2f8 [ 403.973001][T18332] [ 404.236322][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.322856][ T5849] Bluetooth: hci5: command tx timeout [ 404.622266][T17854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.710133][ T30] audit: type=1800 audit(4294967402.469:106): pid=18357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.999" name="features" dev="configfs" ino=35712 res=0 errno=0 [ 404.938621][ T5849] Bluetooth: hci4: command tx timeout [ 405.243163][ T30] audit: type=1800 audit(4294967402.999:107): pid=18387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1000" name="features" dev="configfs" ino=35727 res=0 errno=0 [ 405.574921][T17854] veth0_vlan: entered promiscuous mode [ 405.641036][T17854] veth1_vlan: entered promiscuous mode [ 405.770215][T17854] veth0_macvtap: entered promiscuous mode [ 405.794347][T17854] veth1_macvtap: entered promiscuous mode [ 405.825093][T17854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.850825][T17854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.876908][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.894088][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.913469][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.923610][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.157737][ T6496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.184650][ T6496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.227118][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.237209][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.377672][ T5849] Bluetooth: hci5: command tx timeout [ 407.994523][T18456] sd 0:0:1:0: PR command failed: 1026 [ 408.000148][T18456] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 408.007800][T18456] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 408.325398][T18460] netlink: 206 bytes leftover after parsing attributes in process `syz.5.1008'. [ 408.468458][ T5849] Bluetooth: hci5: command tx timeout [ 408.534905][T18475] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 409.185166][T18490] block2mtd: parameter too long [ 410.269725][T18567] FAULT_INJECTION: forcing a failure. [ 410.269725][T18567] name fail_futex, interval 1, probability 0, space 0, times 0 [ 410.338766][T18567] CPU: 0 UID: 0 PID: 18567 Comm: syz.5.1016 Not tainted syzkaller #0 PREEMPT(full) [ 410.338804][T18567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 410.338821][T18567] Call Trace: [ 410.338831][T18567] [ 410.338843][T18567] dump_stack_lvl+0x16c/0x1f0 [ 410.338881][T18567] should_fail_ex+0x512/0x640 [ 410.338923][T18567] get_futex_key+0x1d0/0x1560 [ 410.338966][T18567] ? __pfx_get_futex_key+0x10/0x10 [ 410.339003][T18567] ? stack_trace_save+0x8e/0xc0 [ 410.339045][T18567] ? __pfx_stack_trace_save+0x10/0x10 [ 410.339082][T18567] ? stack_depot_save_flags+0x29/0x9c0 [ 410.339126][T18567] futex_wait_setup+0x9d/0x550 [ 410.339165][T18567] __futex_wait+0x193/0x2f0 [ 410.339195][T18567] ? __pfx___futex_wait+0x10/0x10 [ 410.339229][T18567] ? __pfx_futex_wake_mark+0x10/0x10 [ 410.339263][T18567] ? futex_private_hash_put+0x176/0x300 [ 410.339304][T18567] ? futex_private_hash_put+0x18a/0x300 [ 410.339343][T18567] futex_wait+0xe8/0x380 [ 410.339370][T18567] ? __pfx_futex_wait+0x10/0x10 [ 410.339404][T18567] ? kmem_cache_free+0x2d4/0x6c0 [ 410.339433][T18567] ? putname+0x154/0x1a0 [ 410.339476][T18567] do_futex+0x229/0x350 [ 410.339510][T18567] ? __pfx_do_futex+0x10/0x10 [ 410.339553][T18567] __x64_sys_futex+0x1e0/0x4c0 [ 410.339591][T18567] ? __x64_sys_openat+0x174/0x210 [ 410.339626][T18567] ? __pfx___x64_sys_futex+0x10/0x10 [ 410.339670][T18567] do_syscall_64+0xcd/0x4b0 [ 410.339705][T18567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.339732][T18567] RIP: 0033:0x7faa9a38eec9 [ 410.339756][T18567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.339782][T18567] RSP: 002b:00007faa9b1d00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 410.339807][T18567] RAX: ffffffffffffffda RBX: 00007faa9a5e5fa8 RCX: 00007faa9a38eec9 [ 410.339825][T18567] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faa9a5e5fa8 [ 410.339843][T18567] RBP: 00007faa9a5e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 410.339860][T18567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 410.339878][T18567] R13: 00007faa9a5e6038 R14: 00007fff2ae215d0 R15: 00007fff2ae216b8 [ 410.339913][T18567] [ 410.780341][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 410.790137][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 410.805626][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 410.817288][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 410.825473][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 411.361900][T18572] chnl_net:caif_netlink_parms(): no params data found [ 411.383436][T18687] netlink: 206 bytes leftover after parsing attributes in process `syz.2.1018'. [ 411.400525][T18691] usb usb23: usbfs: interface 0 claimed by hub while 'syz.5.1019' sets config #0 [ 411.510887][ T30] audit: type=1800 audit(4294967409.269:108): pid=18716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1020" name="members" dev="configfs" ino=37252 res=0 errno=0 [ 411.837826][T18572] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.855217][T18572] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.889871][T18572] bridge_slave_0: entered allmulticast mode [ 411.906510][T18572] bridge_slave_0: entered promiscuous mode [ 411.924158][T18572] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.937108][T18572] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.952097][T18572] bridge_slave_1: entered allmulticast mode [ 411.960664][T18572] bridge_slave_1: entered promiscuous mode [ 411.997851][T18572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.010859][T18572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.075904][T18756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1021'. [ 412.092358][T18572] team0: Port device team_slave_0 added [ 412.247979][T18812] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 412.349677][T18572] team0: Port device team_slave_1 added [ 412.428812][T18572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.437664][T18572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.464757][T18572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.506811][T18572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.514932][T18572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.559223][T18572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.790291][T18572] hsr_slave_0: entered promiscuous mode [ 412.806746][T18572] hsr_slave_1: entered promiscuous mode [ 412.834728][T18572] debugfs: 'hsr0' already exists in 'hsr' [ 412.841773][T18572] Cannot create hsr debugfs directory [ 412.857808][ T53] Bluetooth: hci6: command tx timeout [ 413.365556][T18572] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 413.413823][T18572] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 413.470873][T18572] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 413.507844][T18572] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 413.715353][T18572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.756255][T18572] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.776668][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.783860][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.823219][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.830462][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.889216][T18572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 414.163525][T18572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.744470][T18572] veth0_vlan: entered promiscuous mode [ 414.756040][T18572] veth1_vlan: entered promiscuous mode [ 414.857108][T18572] veth0_macvtap: entered promiscuous mode [ 414.914906][T18572] veth1_macvtap: entered promiscuous mode [ 414.937575][ T53] Bluetooth: hci6: command tx timeout [ 414.955243][T18572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.990266][T18572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.040883][ T6496] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.120034][ T6496] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.143600][ T6496] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.170362][ T6496] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.342360][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.352745][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.388448][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.396305][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.552482][T19021] netlink: 206 bytes leftover after parsing attributes in process `syz.6.1014'. [ 416.585746][T19057] random: crng reseeded on system resumption [ 417.024921][ T53] Bluetooth: hci6: command tx timeout [ 417.758216][T19086] FAULT_INJECTION: forcing a failure. [ 417.758216][T19086] name fail_futex, interval 1, probability 0, space 0, times 0 [ 417.772704][T19086] CPU: 1 UID: 0 PID: 19086 Comm: syz.5.1043 Not tainted syzkaller #0 PREEMPT(full) [ 417.772729][T19086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 417.772738][T19086] Call Trace: [ 417.772744][T19086] [ 417.772750][T19086] dump_stack_lvl+0x16c/0x1f0 [ 417.772772][T19086] should_fail_ex+0x512/0x640 [ 417.772796][T19086] get_futex_key+0x1d0/0x1560 [ 417.772817][T19086] ? __lock_acquire+0xb97/0x1ce0 [ 417.772838][T19086] ? __pfx_get_futex_key+0x10/0x10 [ 417.772864][T19086] futex_wait_setup+0x9d/0x550 [ 417.772883][T19086] __futex_wait+0x193/0x2f0 [ 417.772898][T19086] ? __pfx___futex_wait+0x10/0x10 [ 417.772915][T19086] ? __pfx_futex_wake_mark+0x10/0x10 [ 417.772932][T19086] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 417.772945][T19086] ? __hrtimer_setup+0x176/0x280 [ 417.772961][T19086] ? ktime_add_safe+0x60/0x70 [ 417.772977][T19086] futex_wait+0xe8/0x380 [ 417.772991][T19086] ? __pfx_futex_wait+0x10/0x10 [ 417.773003][T19086] ? __lock_acquire+0xb97/0x1ce0 [ 417.773025][T19086] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 417.773040][T19086] ? irqentry_exit+0x3b/0x90 [ 417.773055][T19086] ? lockdep_hardirqs_on+0x7c/0x110 [ 417.773074][T19086] do_futex+0x229/0x350 [ 417.773094][T19086] ? __pfx_do_futex+0x10/0x10 [ 417.773112][T19086] ? read_tsc+0x9/0x20 [ 417.773131][T19086] ? read_tsc+0xc/0x20 [ 417.773152][T19086] __x64_sys_futex+0x1e0/0x4c0 [ 417.773188][T19086] ? __pfx___x64_sys_futex+0x10/0x10 [ 417.773208][T19086] ? xfd_validate_state+0x61/0x180 [ 417.773224][T19086] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 417.773252][T19086] do_syscall_64+0xcd/0x4b0 [ 417.773271][T19086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.773285][T19086] RIP: 0033:0x7faa9a38eec9 [ 417.773297][T19086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.773311][T19086] RSP: 002b:00007fff2ae21818 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 417.773325][T19086] RAX: ffffffffffffffda RBX: 0000000000065fc2 RCX: 00007faa9a38eec9 [ 417.773335][T19086] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faa9a5e5fac [ 417.773344][T19086] RBP: 0000000000000032 R08: 00007faa9b1d1000 R09: 0000000e2ae21b0f [ 417.773353][T19086] R10: 00007fff2ae21910 R11: 0000000000000246 R12: 00007faa9a5e5fac [ 417.773362][T19086] R13: 00007fff2ae21910 R14: 0000000000065ff4 R15: 00007fff2ae21930 [ 417.773380][T19086] [ 418.013481][ C1] vkms_vblank_simulate: vblank timer overrun [ 418.568536][T19114] blktrace: Concurrent blktraces are not allowed on sg0 [ 419.097968][ T53] Bluetooth: hci6: command tx timeout [ 419.960441][T19148] FAULT_INJECTION: forcing a failure. [ 419.960441][T19148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.990574][T19148] CPU: 1 UID: 0 PID: 19148 Comm: syz.5.1051 Not tainted syzkaller #0 PREEMPT(full) [ 419.990603][T19148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 419.990613][T19148] Call Trace: [ 419.990618][T19148] [ 419.990625][T19148] dump_stack_lvl+0x16c/0x1f0 [ 419.990648][T19148] should_fail_ex+0x512/0x640 [ 419.990679][T19148] strncpy_from_user+0x3b/0x2e0 [ 419.990702][T19148] getname_flags.part.0+0x8f/0x550 [ 419.990728][T19148] getname_flags+0x93/0xf0 [ 419.990744][T19148] do_sys_openat2+0xb8/0x1d0 [ 419.990766][T19148] ? __pfx_do_sys_openat2+0x10/0x10 [ 419.990794][T19148] __x64_sys_openat+0x174/0x210 [ 419.990815][T19148] ? __pfx___x64_sys_openat+0x10/0x10 [ 419.990844][T19148] do_syscall_64+0xcd/0x4b0 [ 419.990863][T19148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.990878][T19148] RIP: 0033:0x7faa9a38d710 [ 419.990890][T19148] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 419.990904][T19148] RSP: 002b:00007faa9b1cff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 419.990919][T19148] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007faa9a38d710 [ 419.990929][T19148] RDX: 0000000000000002 RSI: 00007faa9b1cffa0 RDI: 00000000ffffff9c [ 419.990938][T19148] RBP: 00007faa9b1cffa0 R08: 0000000000000000 R09: 0000000000000000 [ 419.990947][T19148] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 419.990955][T19148] R13: 00007faa9a5e6038 R14: 00007faa9a5e5fa0 R15: 00007fff2ae216b8 [ 419.990975][T19148] [ 420.717682][T19156] vivid-003: ================= START STATUS ================= [ 420.725434][T19156] vivid-003: Radio HW Seek Mode: Bounded [ 420.736015][T19156] vivid-003: Radio Programmable HW Seek: false [ 420.747668][T19156] vivid-003: RDS Rx I/O Mode: Block I/O [ 420.753239][T19156] vivid-003: Generate RBDS Instead of RDS: false [ 420.778471][T19156] vivid-003: RDS Reception: true [ 420.783480][T19156] vivid-003: RDS Program Type: 0 inactive [ 420.789675][T19156] vivid-003: RDS PS Name: inactive [ 420.796871][T19156] vivid-003: RDS Radio Text: inactive [ 420.802812][T19156] vivid-003: RDS Traffic Announcement: false inactive [ 420.810663][T19156] vivid-003: RDS Traffic Program: false inactive [ 420.818502][T19156] vivid-003: RDS Music: false inactive [ 420.824069][T19156] vivid-003: ================== END STATUS ================== [ 421.222793][ T5849] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 421.232160][ T5849] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 421.240141][ T5849] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 421.249043][ T5849] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 421.256868][ T5849] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 421.665698][T19167] chnl_net:caif_netlink_parms(): no params data found [ 421.690226][T19212] RDS: rds_bind could not find a transport for 7bc:c94c:4e37:70c4::, load rds_tcp or rds_rdma? [ 421.913224][T19167] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.932695][T19167] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.952777][T19167] bridge_slave_0: entered allmulticast mode [ 421.970150][T19167] bridge_slave_0: entered promiscuous mode [ 421.994946][T19167] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.003918][T19167] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.013796][T19167] bridge_slave_1: entered allmulticast mode [ 422.021898][T19167] bridge_slave_1: entered promiscuous mode [ 422.193752][T19167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.270984][ T30] audit: type=1800 audit(4294967420.029:109): pid=19374 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1058" name="features" dev="configfs" ino=38144 res=0 errno=0 [ 422.370635][T19167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.485188][T19167] team0: Port device team_slave_0 added [ 422.513803][T19167] team0: Port device team_slave_1 added [ 422.556225][T19433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1060'. [ 422.597452][T19167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.606613][T19167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.632892][T19167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.667215][T19167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.674532][T19167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.702777][T19167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.788318][T19167] hsr_slave_0: entered promiscuous mode [ 422.795495][T19167] hsr_slave_1: entered promiscuous mode [ 422.803082][T19167] debugfs: 'hsr0' already exists in 'hsr' [ 422.811593][T19167] Cannot create hsr debugfs directory [ 423.047087][T19506] block2mtd: parameter too long [ 423.150438][T19540] sd 0:0:1:0: PR command failed: 1026 [ 423.155952][T19540] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 423.163564][T19540] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 423.337597][ T5849] Bluetooth: hci7: command tx timeout [ 424.414086][T19167] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 424.454183][T19167] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 424.472927][T19167] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 424.484212][T19167] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 424.930741][T19167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.047008][T19167] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.080578][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.087801][ T3523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.148860][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.156015][ T3523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.417581][ T5849] Bluetooth: hci7: command tx timeout [ 426.053350][T19167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.294190][T19752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1069'. [ 426.710718][T19167] veth0_vlan: entered promiscuous mode [ 426.759156][T19167] veth1_vlan: entered promiscuous mode [ 426.830569][T19167] veth0_macvtap: entered promiscuous mode [ 426.871689][T19167] veth1_macvtap: entered promiscuous mode [ 426.926042][T19167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.940958][T19762] vivid-007: ================= START STATUS ================= [ 426.958709][T19762] vivid-007: Generate PTS: true [ 426.972948][T19167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.987733][T19762] vivid-007: Generate SCR: true [ 426.999983][T19762] tpg source WxH: 320x240 (Y'CbCr) [ 427.005479][T19762] tpg field: 1 [ 427.009307][ T4193] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.027487][T19762] tpg crop: (0,0)/320x240 [ 427.031846][T19762] tpg compose: (0,0)/320x240 [ 427.036659][T19762] tpg colorspace: 8 [ 427.046741][ T4193] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.047612][T19762] tpg transfer function: 0/0 [ 427.056711][ T4193] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.070978][ T4193] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.081387][T19762] tpg Y'CbCr encoding: 0/0 [ 427.085838][T19762] tpg quantization: 0/0 [ 427.090094][T19762] tpg RGB range: 0/2 [ 427.094019][T19762] vivid-007: ================== END STATUS ================== [ 427.307916][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.327817][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.399207][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.426066][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.497884][ T5849] Bluetooth: hci7: command tx timeout [ 427.566155][T19800] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1054'. [ 429.366368][T19839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1075'. [ 429.577698][ T5849] Bluetooth: hci7: command tx timeout [ 429.619804][T19838] blktrace: Concurrent blktraces are not allowed on sg0 [ 431.284621][T19905] Invalid ELF header magic: != ELF [ 431.804274][T19906] nbd: must specify an index to disconnect [ 432.806926][ T30] audit: type=1800 audit(4294967430.559:110): pid=19953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1084" name="features" dev="configfs" ino=38836 res=0 errno=0 [ 432.887849][ T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 432.898591][ T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 432.908553][ T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 432.918837][ T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 432.926659][ T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 433.165745][T19985] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 433.200452][T19985] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1085'. [ 433.259342][T19985] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1085'. [ 433.622386][ T30] audit: type=1800 audit(4294967431.359:111): pid=20008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1087" name="features" dev="configfs" ino=38883 res=0 errno=0 [ 433.811108][T19954] chnl_net:caif_netlink_parms(): no params data found [ 434.170021][T19954] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.192104][T19954] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.235310][T19954] bridge_slave_0: entered allmulticast mode [ 434.248882][T19954] bridge_slave_0: entered promiscuous mode [ 434.269929][T19954] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.277781][T19954] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.284963][T19954] bridge_slave_1: entered allmulticast mode [ 434.321379][T19954] bridge_slave_1: entered promiscuous mode [ 434.494304][T19954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.528805][T19954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.603932][T19954] team0: Port device team_slave_0 added [ 434.624587][T19954] team0: Port device team_slave_1 added [ 434.784212][T19954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.839441][T19954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.915383][T19954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.935573][T19954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.944572][T19954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.970501][ C1] vkms_vblank_simulate: vblank timer overrun [ 435.030722][ T5849] Bluetooth: hci8: command tx timeout [ 435.055399][T19954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.352205][T19954] hsr_slave_0: entered promiscuous mode [ 435.359361][T19954] hsr_slave_1: entered promiscuous mode [ 435.365369][T19954] debugfs: 'hsr0' already exists in 'hsr' [ 435.388251][T19954] Cannot create hsr debugfs directory [ 436.352286][T20352] netlink: 206 bytes leftover after parsing attributes in process `syz.2.1095'. [ 436.402271][T20362] netlink: 9972 bytes leftover after parsing attributes in process `syz.7.1097'. [ 436.614284][T19954] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 436.647244][T19954] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 436.711868][T20395] CIFS: VFS: Invalid SecurityFlags: [ 436.719074][T19954] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 436.748641][T19954] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 437.005410][T20399] block2mtd: parameter too long [ 437.097708][ T5849] Bluetooth: hci8: command tx timeout [ 437.366720][T20458] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 437.477987][T19954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.603292][T19954] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.681200][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.688443][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.780442][ T6499] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.787680][ T6499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.408605][T19954] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 438.475299][T19954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 439.108606][ T30] audit: type=1800 audit(4294967436.859:112): pid=20539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1105" name="features" dev="configfs" ino=41411 res=0 errno=0 [ 439.177854][ T5849] Bluetooth: hci8: command tx timeout [ 439.490330][T19954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.550169][T20549] FAULT_INJECTION: forcing a failure. [ 439.550169][T20549] name failslab, interval 1, probability 0, space 0, times 0 [ 439.574142][T20549] CPU: 0 UID: 0 PID: 20549 Comm: syz.7.1107 Not tainted syzkaller #0 PREEMPT(full) [ 439.574184][T20549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 439.574201][T20549] Call Trace: [ 439.574211][T20549] [ 439.574222][T20549] dump_stack_lvl+0x16c/0x1f0 [ 439.574263][T20549] should_fail_ex+0x512/0x640 [ 439.574299][T20549] ? __kmalloc_cache_noprof+0x5f/0x780 [ 439.574330][T20549] should_failslab+0xc2/0x120 [ 439.574368][T20549] __kmalloc_cache_noprof+0x72/0x780 [ 439.574396][T20549] ? __kthread_create_on_node+0xce/0x3f0 [ 439.574437][T20549] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 439.574472][T20549] ? __kthread_create_on_node+0xce/0x3f0 [ 439.574508][T20549] __kthread_create_on_node+0xce/0x3f0 [ 439.574547][T20549] ? __pfx___kthread_create_on_node+0x10/0x10 [ 439.574599][T20549] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 439.574642][T20549] kthread_create_on_node+0xc7/0x100 [ 439.574682][T20549] ? __pfx_kthread_create_on_node+0x10/0x10 [ 439.574718][T20549] ? find_held_lock+0x2b/0x80 [ 439.574751][T20549] ? setup_udp_tunnel_sock+0x565/0x680 [ 439.574780][T20549] ? do_raw_spin_unlock+0x172/0x230 [ 439.574816][T20549] rxrpc_open_socket+0x3db/0x6b0 [ 439.574856][T20549] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 439.574903][T20549] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 439.574938][T20549] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 439.574984][T20549] ? __pfx_rxrpc_client_conn_reap_timeout+0x10/0x10 [ 439.575024][T20549] ? rcu_is_watching+0x12/0xc0 [ 439.575062][T20549] rxrpc_lookup_local+0xa01/0x1220 [ 439.575106][T20549] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 439.575145][T20549] ? __local_bh_enable_ip+0xa4/0x120 [ 439.575184][T20549] rxrpc_sendmsg+0x37e/0x680 [ 439.575217][T20549] ____sys_sendmsg+0xa95/0xc70 [ 439.575247][T20549] ? copy_msghdr_from_user+0x10a/0x160 [ 439.575284][T20549] ? __pfx_____sys_sendmsg+0x10/0x10 [ 439.575323][T20549] ? __pfx_futex_wake_mark+0x10/0x10 [ 439.575356][T20549] ___sys_sendmsg+0x134/0x1d0 [ 439.575396][T20549] ? __pfx____sys_sendmsg+0x10/0x10 [ 439.575478][T20549] __sys_sendmsg+0x16d/0x220 [ 439.575516][T20549] ? __pfx___sys_sendmsg+0x10/0x10 [ 439.575552][T20549] ? __x64_sys_futex+0x1e0/0x4c0 [ 439.575614][T20549] do_syscall_64+0xcd/0x4b0 [ 439.575655][T20549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.575680][T20549] RIP: 0033:0x7fe6d098eec9 [ 439.575701][T20549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.575724][T20549] RSP: 002b:00007fe6d18b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 439.575749][T20549] RAX: ffffffffffffffda RBX: 00007fe6d0be5fa0 RCX: 00007fe6d098eec9 [ 439.575768][T20549] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000002 [ 439.575783][T20549] RBP: 00007fe6d0a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 439.575800][T20549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.575817][T20549] R13: 00007fe6d0be6038 R14: 00007fe6d0be5fa0 R15: 00007ffd86a98c18 [ 439.575854][T20549] [ 439.922821][T20552] FAULT_INJECTION: forcing a failure. [ 439.922821][T20552] name fail_futex, interval 1, probability 0, space 0, times 0 [ 439.948748][T20549] FAULT_INJECTION: forcing a failure. [ 439.948748][T20549] name fail_futex, interval 1, probability 0, space 0, times 0 [ 439.986555][T20549] CPU: 1 UID: 0 PID: 20549 Comm: syz.7.1107 Not tainted syzkaller #0 PREEMPT(full) [ 439.986603][T20549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 439.986621][T20549] Call Trace: [ 439.986631][T20549] [ 439.986642][T20549] dump_stack_lvl+0x16c/0x1f0 [ 439.986681][T20549] should_fail_ex+0x512/0x640 [ 439.986722][T20549] get_futex_key+0x1d0/0x1560 [ 439.986765][T20549] ? __pfx_get_futex_key+0x10/0x10 [ 439.986802][T20549] ? stack_trace_save+0x8e/0xc0 [ 439.986834][T20549] ? __pfx_stack_trace_save+0x10/0x10 [ 439.986869][T20549] ? stack_depot_save_flags+0x29/0x9c0 [ 439.986911][T20549] futex_wait_setup+0x9d/0x550 [ 439.986950][T20549] __futex_wait+0x193/0x2f0 [ 439.986978][T20549] ? __pfx___futex_wait+0x10/0x10 [ 439.987012][T20549] ? __pfx_futex_wake_mark+0x10/0x10 [ 439.987045][T20549] ? futex_private_hash_put+0x176/0x300 [ 439.987085][T20549] ? futex_private_hash_put+0x18a/0x300 [ 439.987124][T20549] futex_wait+0xe8/0x380 [ 439.987150][T20549] ? __pfx_futex_wait+0x10/0x10 [ 439.987185][T20549] ? kmem_cache_free+0x2d4/0x6c0 [ 439.987214][T20549] ? putname+0x154/0x1a0 [ 439.987256][T20549] do_futex+0x229/0x350 [ 439.987298][T20549] ? __pfx_do_futex+0x10/0x10 [ 439.987341][T20549] __x64_sys_futex+0x1e0/0x4c0 [ 439.987379][T20549] ? __x64_sys_openat+0x174/0x210 [ 439.987418][T20549] ? __pfx___x64_sys_futex+0x10/0x10 [ 439.987471][T20549] do_syscall_64+0xcd/0x4b0 [ 439.987506][T20549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.987533][T20549] RIP: 0033:0x7fe6d098eec9 [ 439.987555][T20549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.987589][T20549] RSP: 002b:00007fe6d18b30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 439.987615][T20549] RAX: ffffffffffffffda RBX: 00007fe6d0be5fa8 RCX: 00007fe6d098eec9 [ 439.987634][T20549] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe6d0be5fa8 [ 439.987651][T20549] RBP: 00007fe6d0be5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 439.987668][T20549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.987684][T20549] R13: 00007fe6d0be6038 R14: 00007ffd86a98b30 R15: 00007ffd86a98c18 [ 439.987720][T20549] [ 440.206595][ C1] vkms_vblank_simulate: vblank timer overrun [ 440.219508][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.225977][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.247480][T20552] CPU: 0 UID: 0 PID: 20552 Comm: syz.2.1109 Not tainted syzkaller #0 PREEMPT(full) [ 440.247515][T20552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 440.247532][T20552] Call Trace: [ 440.247542][T20552] [ 440.247553][T20552] dump_stack_lvl+0x16c/0x1f0 [ 440.247591][T20552] should_fail_ex+0x512/0x640 [ 440.247634][T20552] get_futex_key+0x1d0/0x1560 [ 440.247676][T20552] ? __pfx_get_futex_key+0x10/0x10 [ 440.247715][T20552] ? __lock_acquire+0x62e/0x1ce0 [ 440.247758][T20552] futex_wake+0xea/0x530 [ 440.247781][T20552] ? futex_wait+0x120/0x380 [ 440.247819][T20552] ? __pfx_futex_wake+0x10/0x10 [ 440.247853][T20552] ? __fget_files+0x204/0x3c0 [ 440.247891][T20552] do_futex+0x1e3/0x350 [ 440.247928][T20552] ? __pfx_do_futex+0x10/0x10 [ 440.247965][T20552] ? fdget+0x187/0x210 [ 440.247992][T20552] ? __sys_sendmsg+0x18c/0x220 [ 440.248035][T20552] __x64_sys_futex+0x1e0/0x4c0 [ 440.248077][T20552] ? __pfx___x64_sys_futex+0x10/0x10 [ 440.248129][T20552] do_syscall_64+0xcd/0x4b0 [ 440.248164][T20552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.248191][T20552] RIP: 0033:0x7f3e3678eec9 [ 440.248214][T20552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.248239][T20552] RSP: 002b:00007f3e376580e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 440.248265][T20552] RAX: ffffffffffffffda RBX: 00007f3e369e5fa8 RCX: 00007f3e3678eec9 [ 440.248283][T20552] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3e369e5fac [ 440.248300][T20552] RBP: 00007f3e369e5fa0 R08: 00007f3e37659000 R09: 0000000000000000 [ 440.248318][T20552] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 440.248335][T20552] R13: 00007f3e369e6038 R14: 00007ffc250b25b0 R15: 00007ffc250b2698 [ 440.248371][T20552] [ 441.259049][ T5849] Bluetooth: hci8: command tx timeout [ 441.413453][T19954] veth0_vlan: entered promiscuous mode [ 441.483797][T19954] veth1_vlan: entered promiscuous mode [ 441.647134][T19954] veth0_macvtap: entered promiscuous mode [ 441.715464][T19954] veth1_macvtap: entered promiscuous mode [ 441.790033][T19954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.819550][T19954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.909327][ T4212] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.948459][ T30] audit: type=1800 audit(4294967439.709:113): pid=20668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1112" name="features" dev="configfs" ino=40424 res=0 errno=0 [ 442.006877][ T4212] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.049178][ T4212] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.327118][ T4212] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.707953][T20714] netlink: 146 bytes leftover after parsing attributes in process `syz.7.1118'. [ 442.758099][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.798587][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.845926][ T4193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.875285][ T4193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.745413][T20770] ima: policy update failed [ 443.787061][ T30] audit: type=1802 audit(4294967441.539:114): pid=20770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1122" res=0 errno=0 [ 445.014264][T20851] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 445.212355][T20864] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1129'. [ 446.138128][T20895] FAULT_INJECTION: forcing a failure. [ 446.138128][T20895] name failslab, interval 1, probability 0, space 0, times 0 [ 446.170599][T20895] CPU: 1 UID: 0 PID: 20895 Comm: syz.7.1133 Not tainted syzkaller #0 PREEMPT(full) [ 446.170639][T20895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 446.170656][T20895] Call Trace: [ 446.170666][T20895] [ 446.170678][T20895] dump_stack_lvl+0x16c/0x1f0 [ 446.170716][T20895] should_fail_ex+0x512/0x640 [ 446.170752][T20895] ? fs_reclaim_acquire+0xae/0x150 [ 446.170791][T20895] should_failslab+0xc2/0x120 [ 446.170829][T20895] __kmalloc_noprof+0xdd/0x880 [ 446.170856][T20895] ? kfree+0x252/0x6d0 [ 446.170878][T20895] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 446.170915][T20895] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 446.170945][T20895] tomoyo_realpath_from_path+0xc2/0x6e0 [ 446.170986][T20895] tomoyo_check_open_permission+0x2ab/0x3c0 [ 446.171024][T20895] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 446.171121][T20895] ? do_raw_spin_lock+0x12c/0x2b0 [ 446.171159][T20895] tomoyo_file_open+0x6b/0x90 [ 446.171196][T20895] security_file_open+0x84/0x1e0 [ 446.171225][T20895] do_dentry_open+0x596/0x1530 [ 446.171270][T20895] vfs_open+0x82/0x3f0 [ 446.171308][T20895] path_openat+0x1de4/0x2cb0 [ 446.171348][T20895] ? __pfx_path_openat+0x10/0x10 [ 446.171394][T20895] do_filp_open+0x20b/0x470 [ 446.171427][T20895] ? __pfx_do_filp_open+0x10/0x10 [ 446.171487][T20895] ? alloc_fd+0x471/0x7d0 [ 446.171528][T20895] do_sys_openat2+0x11b/0x1d0 [ 446.171568][T20895] ? __pfx_do_sys_openat2+0x10/0x10 [ 446.171622][T20895] __x64_sys_openat+0x174/0x210 [ 446.171661][T20895] ? __pfx___x64_sys_openat+0x10/0x10 [ 446.171716][T20895] do_syscall_64+0xcd/0x4b0 [ 446.171751][T20895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.171779][T20895] RIP: 0033:0x7fe6d098eec9 [ 446.171800][T20895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.171826][T20895] RSP: 002b:00007fe6d18b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 446.171852][T20895] RAX: ffffffffffffffda RBX: 00007fe6d0be5fa0 RCX: 00007fe6d098eec9 [ 446.171871][T20895] RDX: 0000000000105600 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 446.171889][T20895] RBP: 00007fe6d0a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 446.171906][T20895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.171923][T20895] R13: 00007fe6d0be6038 R14: 00007fe6d0be5fa0 R15: 00007ffd86a98c18 [ 446.171961][T20895] [ 446.171973][T20895] ERROR: Out of memory at tomoyo_realpath_from_path. [ 446.882459][T20922] netlink: 206 bytes leftover after parsing attributes in process `syz.2.1138'. [ 446.898585][T20912] FAULT_INJECTION: forcing a failure. [ 446.898585][T20912] name fail_futex, interval 1, probability 0, space 0, times 0 [ 446.961831][T20912] CPU: 0 UID: 0 PID: 20912 Comm: syz.5.1137 Not tainted syzkaller #0 PREEMPT(full) [ 446.961869][T20912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 446.961886][T20912] Call Trace: [ 446.961895][T20912] [ 446.961906][T20912] dump_stack_lvl+0x16c/0x1f0 [ 446.961944][T20912] should_fail_ex+0x512/0x640 [ 446.961985][T20912] get_futex_key+0x1d0/0x1560 [ 446.962027][T20912] ? find_held_lock+0x2b/0x80 [ 446.962058][T20912] ? __pfx_get_futex_key+0x10/0x10 [ 446.962107][T20912] ? __lock_acquire+0xb97/0x1ce0 [ 446.962155][T20912] futex_wake+0xea/0x530 [ 446.962187][T20912] ? __pfx_futex_wake+0x10/0x10 [ 446.962214][T20912] ? find_held_lock+0x2b/0x80 [ 446.962244][T20912] ? __might_fault+0xe3/0x190 [ 446.962271][T20912] ? __might_fault+0x13b/0x190 [ 446.962309][T20912] do_futex+0x1e3/0x350 [ 446.962345][T20912] ? __pfx_do_futex+0x10/0x10 [ 446.962392][T20912] __x64_sys_futex+0x1e0/0x4c0 [ 446.962435][T20912] ? __pfx___x64_sys_futex+0x10/0x10 [ 446.962477][T20912] ? fput+0x9b/0xd0 [ 446.962519][T20912] do_syscall_64+0xcd/0x4b0 [ 446.962553][T20912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.962580][T20912] RIP: 0033:0x7faa9a38eec9 [ 446.962602][T20912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.962627][T20912] RSP: 002b:00007faa9b1d00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 446.962654][T20912] RAX: ffffffffffffffda RBX: 00007faa9a5e5fa8 RCX: 00007faa9a38eec9 [ 446.962672][T20912] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faa9a5e5fac [ 446.962689][T20912] RBP: 00007faa9a5e5fa0 R08: 00007faa9b1d1000 R09: 0000000000000000 [ 446.962707][T20912] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 446.962723][T20912] R13: 00007faa9a5e6038 R14: 00007fff2ae215d0 R15: 00007fff2ae216b8 [ 446.962759][T20912] [ 447.583120][T20941] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 447.597954][T20941] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 447.604460][T20941] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 447.626323][T20941] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 447.638142][T20941] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 447.648628][T20941] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 447.699567][T20941] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 447.711077][T20941] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 447.717886][T20941] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 447.734816][T20941] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 447.746393][T20941] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 447.763092][T20941] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 447.818250][T20941] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 447.852618][T20941] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 447.866492][T20941] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 447.948882][T20941] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 447.963955][T20941] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 447.989368][T20941] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 448.108772][T20941] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 448.123810][T20940] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1139'. [ 449.658697][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 449.660298][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 449.664800][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 449.676347][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 449.677383][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 449.737489][T21184] Bluetooth: hci5: command 0x0c1a tx timeout [ 449.817422][T21184] Bluetooth: hci6: command 0x0c1a tx timeout [ 449.908644][T21184] Bluetooth: hci7: command 0x0c1a tx timeout [ 449.985041][T21184] Bluetooth: hci8: command 0x0c1a tx timeout [ 450.224714][T21198] netlink: 206 bytes leftover after parsing attributes in process `syz.2.1148'. [ 450.283202][T21201] binder: 21200:21201 ioctl 40046210 0 returned -14 [ 450.951830][T21238] openvswitch: netlink: Flow key attr not present in new flow. [ 451.095264][T21249] tipc: Started in network mode [ 451.123500][T21249] tipc: Node identity 45e5412, cluster identity 4711 [ 451.168143][T21249] tipc: Node number set to 73290770 [ 451.178449][T21254] delete_channel: no stack [ 451.786420][T21184] Bluetooth: hci4: command 0x0c1a tx timeout [ 451.817706][T21184] Bluetooth: hci5: command 0x0c1a tx timeout [ 451.906279][T21184] Bluetooth: hci6: command 0x0c1a tx timeout [ 451.978853][T21184] Bluetooth: hci7: command 0x0c1a tx timeout [ 452.067511][T21184] Bluetooth: hci8: command 0x0c1a tx timeout [ 452.584273][T21258] openvswitch: netlink: IP tunnel dst address not specified [ 452.978657][T21318] snd_aloop snd_aloop.0: Parsing timer source ')' failed with -22 [ 453.818891][T21184] Bluetooth: hci4: command 0x0c1a tx timeout [ 453.898044][T21184] Bluetooth: hci5: command 0x0c1a tx timeout [ 453.979670][T21184] Bluetooth: hci6: command 0x0c1a tx timeout [ 454.061350][T21184] Bluetooth: hci7: command 0x0c1a tx timeout [ 454.158242][T17458] Bluetooth: hci8: command 0x0c1a tx timeout [ 454.746989][T21377] snd_aloop snd_aloop.0: Parsing timer source ')' failed with -22 [ 454.809810][T21377] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1168'. [ 457.412096][T21490] openvswitch: netlink: Tunnel attr 242 out of range max 16 [ 457.547667][T21503] FAULT_INJECTION: forcing a failure. [ 457.547667][T21503] name failslab, interval 1, probability 0, space 0, times 0 [ 457.568323][T21503] CPU: 0 UID: 0 PID: 21503 Comm: syz.5.1180 Not tainted syzkaller #0 PREEMPT(full) [ 457.568359][T21503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 457.568375][T21503] Call Trace: [ 457.568384][T21503] [ 457.568394][T21503] dump_stack_lvl+0x16c/0x1f0 [ 457.568431][T21503] should_fail_ex+0x512/0x640 [ 457.568467][T21503] ? fs_reclaim_acquire+0xae/0x150 [ 457.568507][T21503] should_failslab+0xc2/0x120 [ 457.568541][T21503] __kmalloc_noprof+0xdd/0x880 [ 457.568575][T21503] ? tomoyo_encode2+0x100/0x3e0 [ 457.568611][T21503] ? tomoyo_encode2+0x100/0x3e0 [ 457.568637][T21503] tomoyo_encode2+0x100/0x3e0 [ 457.568673][T21503] tomoyo_encode+0x29/0x50 [ 457.568697][T21503] tomoyo_realpath_from_path+0x18f/0x6e0 [ 457.568726][T21503] ? tomoyo_profile+0x47/0x60 [ 457.568759][T21503] tomoyo_path_number_perm+0x245/0x580 [ 457.568796][T21503] ? tomoyo_path_number_perm+0x237/0x580 [ 457.568836][T21503] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 457.568858][T21503] ? futex_wake+0x1ad/0x530 [ 457.568891][T21503] ? find_held_lock+0x2b/0x80 [ 457.568907][T21503] ? hook_file_ioctl_common+0x145/0x410 [ 457.568927][T21503] ? __fget_files+0x20e/0x3c0 [ 457.568946][T21503] security_file_ioctl+0x9b/0x240 [ 457.568961][T21503] __x64_sys_ioctl+0xb7/0x210 [ 457.568984][T21503] do_syscall_64+0xcd/0x4b0 [ 457.569007][T21503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.569022][T21503] RIP: 0033:0x7faa9a38eec9 [ 457.569035][T21503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.569050][T21503] RSP: 002b:00007faa9b18e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 457.569064][T21503] RAX: ffffffffffffffda RBX: 00007faa9a5e6180 RCX: 00007faa9a38eec9 [ 457.569074][T21503] RDX: 0000000000000038 RSI: 000000080000541b RDI: 0000000000000003 [ 457.569082][T21503] RBP: 00007faa9a411f91 R08: 0000000000000000 R09: 0000000000000000 [ 457.569091][T21503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.569100][T21503] R13: 00007faa9a5e6218 R14: 00007faa9a5e6180 R15: 00007fff2ae216b8 [ 457.569119][T21503] [ 457.574150][T21503] ERROR: Out of memory at tomoyo_realpath_from_path. [ 458.352679][T21547] FAULT_INJECTION: forcing a failure. [ 458.352679][T21547] name failslab, interval 1, probability 0, space 0, times 0 [ 458.365442][T21547] CPU: 0 UID: 0 PID: 21547 Comm: syz.2.1184 Not tainted syzkaller #0 PREEMPT(full) [ 458.365474][T21547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 458.365489][T21547] Call Trace: [ 458.365498][T21547] [ 458.365509][T21547] dump_stack_lvl+0x16c/0x1f0 [ 458.365546][T21547] should_fail_ex+0x512/0x640 [ 458.365583][T21547] ? __kmalloc_cache_noprof+0x5f/0x780 [ 458.365615][T21547] should_failslab+0xc2/0x120 [ 458.365649][T21547] __kmalloc_cache_noprof+0x72/0x780 [ 458.365677][T21547] ? __kthread_create_on_node+0xce/0x3f0 [ 458.365720][T21547] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 458.365756][T21547] ? __kthread_create_on_node+0xce/0x3f0 [ 458.365792][T21547] __kthread_create_on_node+0xce/0x3f0 [ 458.365832][T21547] ? __pfx___kthread_create_on_node+0x10/0x10 [ 458.365890][T21547] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 458.365926][T21547] kthread_create_on_node+0xc7/0x100 [ 458.365964][T21547] ? __pfx_kthread_create_on_node+0x10/0x10 [ 458.365999][T21547] ? find_held_lock+0x2b/0x80 [ 458.366034][T21547] ? setup_udp_tunnel_sock+0x565/0x680 [ 458.366063][T21547] ? do_raw_spin_unlock+0x172/0x230 [ 458.366100][T21547] rxrpc_open_socket+0x3db/0x6b0 [ 458.366140][T21547] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 458.366181][T21547] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 458.366215][T21547] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 458.366272][T21547] ? __pfx_rxrpc_client_conn_reap_timeout+0x10/0x10 [ 458.366316][T21547] ? rcu_is_watching+0x12/0xc0 [ 458.366356][T21547] rxrpc_lookup_local+0xa01/0x1220 [ 458.366402][T21547] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 458.366441][T21547] ? __local_bh_enable_ip+0xa4/0x120 [ 458.366477][T21547] rxrpc_sendmsg+0x37e/0x680 [ 458.366508][T21547] ____sys_sendmsg+0xa95/0xc70 [ 458.366538][T21547] ? copy_msghdr_from_user+0x10a/0x160 [ 458.366574][T21547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 458.366615][T21547] ___sys_sendmsg+0x134/0x1d0 [ 458.366654][T21547] ? __pfx____sys_sendmsg+0x10/0x10 [ 458.366740][T21547] __sys_sendmsg+0x16d/0x220 [ 458.366779][T21547] ? __pfx___sys_sendmsg+0x10/0x10 [ 458.366814][T21547] ? __x64_sys_futex+0x1e0/0x4c0 [ 458.366874][T21547] do_syscall_64+0xcd/0x4b0 [ 458.366906][T21547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.366934][T21547] RIP: 0033:0x7f3e3678eec9 [ 458.366956][T21547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.366983][T21547] RSP: 002b:00007f3e37658038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 458.367009][T21547] RAX: ffffffffffffffda RBX: 00007f3e369e5fa0 RCX: 00007f3e3678eec9 [ 458.367028][T21547] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000002 [ 458.367044][T21547] RBP: 00007f3e36811f91 R08: 0000000000000000 R09: 0000000000000000 [ 458.367061][T21547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.367078][T21547] R13: 00007f3e369e6038 R14: 00007f3e369e5fa0 R15: 00007ffc250b2698 [ 458.367116][T21547] [ 458.819916][T21547] FAULT_INJECTION: forcing a failure. [ 458.819916][T21547] name fail_futex, interval 1, probability 0, space 0, times 0 [ 458.942827][T21547] CPU: 0 UID: 0 PID: 21547 Comm: syz.2.1184 Not tainted syzkaller #0 PREEMPT(full) [ 458.942867][T21547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 458.942884][T21547] Call Trace: [ 458.942894][T21547] [ 458.942904][T21547] dump_stack_lvl+0x16c/0x1f0 [ 458.942942][T21547] should_fail_ex+0x512/0x640 [ 458.942984][T21547] get_futex_key+0x1d0/0x1560 [ 458.943026][T21547] ? __pfx_get_futex_key+0x10/0x10 [ 458.943061][T21547] ? stack_trace_save+0x8e/0xc0 [ 458.943095][T21547] ? __pfx_stack_trace_save+0x10/0x10 [ 458.943129][T21547] ? stack_depot_save_flags+0x29/0x9c0 [ 458.943171][T21547] futex_wait_setup+0x9d/0x550 [ 458.943218][T21547] __futex_wait+0x193/0x2f0 [ 458.943249][T21547] ? __pfx___futex_wait+0x10/0x10 [ 458.943283][T21547] ? __pfx_futex_wake_mark+0x10/0x10 [ 458.943317][T21547] ? futex_private_hash_put+0x176/0x300 [ 458.943358][T21547] ? futex_private_hash_put+0x18a/0x300 [ 458.943396][T21547] futex_wait+0xe8/0x380 [ 458.943423][T21547] ? __pfx_futex_wait+0x10/0x10 [ 458.943457][T21547] ? kmem_cache_free+0x2d4/0x6c0 [ 458.943485][T21547] ? putname+0x154/0x1a0 [ 458.943527][T21547] do_futex+0x229/0x350 [ 458.943564][T21547] ? __pfx_do_futex+0x10/0x10 [ 458.943611][T21547] __x64_sys_futex+0x1e0/0x4c0 [ 458.943650][T21547] ? __x64_sys_openat+0x174/0x210 [ 458.943689][T21547] ? __pfx___x64_sys_futex+0x10/0x10 [ 458.943740][T21547] do_syscall_64+0xcd/0x4b0 [ 458.943775][T21547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.943810][T21547] RIP: 0033:0x7f3e3678eec9 [ 458.943833][T21547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.943859][T21547] RSP: 002b:00007f3e376580e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 458.943886][T21547] RAX: ffffffffffffffda RBX: 00007f3e369e5fa8 RCX: 00007f3e3678eec9 [ 458.943905][T21547] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3e369e5fa8 [ 458.943922][T21547] RBP: 00007f3e369e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 458.943939][T21547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.943955][T21547] R13: 00007f3e369e6038 R14: 00007ffc250b25b0 R15: 00007ffc250b2698 [ 458.943990][T21547] [ 459.590507][T21568] FAULT_INJECTION: forcing a failure. [ 459.590507][T21568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.607448][T21568] CPU: 0 UID: 0 PID: 21568 Comm: syz.5.1187 Not tainted syzkaller #0 PREEMPT(full) [ 459.607480][T21568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 459.607495][T21568] Call Trace: [ 459.607503][T21568] [ 459.607513][T21568] dump_stack_lvl+0x16c/0x1f0 [ 459.607549][T21568] should_fail_ex+0x512/0x640 [ 459.607586][T21568] _copy_to_iter+0x463/0x1710 [ 459.607630][T21568] ? __pfx__copy_to_iter+0x10/0x10 [ 459.607663][T21568] ? c_start+0x187/0x230 [ 459.607690][T21568] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 459.607728][T21568] seq_read_iter+0x71e/0x12d0 [ 459.607768][T21568] proc_reg_read_iter+0x118/0x310 [ 459.607805][T21568] do_iter_readv_writev+0x743/0x9e0 [ 459.607834][T21568] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 459.607868][T21568] ? rw_verify_area+0xcf/0x6c0 [ 459.607895][T21568] vfs_readv+0x4cb/0x8b0 [ 459.607929][T21568] ? __pfx_vfs_readv+0x10/0x10 [ 459.607956][T21568] ? find_held_lock+0x2b/0x80 [ 459.608008][T21568] ? __fget_files+0x20e/0x3c0 [ 459.608043][T21568] ? do_preadv+0x1a6/0x270 [ 459.608066][T21568] do_preadv+0x1a6/0x270 [ 459.608093][T21568] ? __pfx_do_preadv+0x10/0x10 [ 459.608131][T21568] do_syscall_64+0xcd/0x4b0 [ 459.608161][T21568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.608186][T21568] RIP: 0033:0x7faa9a38eec9 [ 459.608207][T21568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.608231][T21568] RSP: 002b:00007faa9b1d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 459.608254][T21568] RAX: ffffffffffffffda RBX: 00007faa9a5e5fa0 RCX: 00007faa9a38eec9 [ 459.608272][T21568] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000003 [ 459.608286][T21568] RBP: 00007faa9b1d0090 R08: 0000000000000080 R09: 0000000000000000 [ 459.608302][T21568] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 459.608317][T21568] R13: 00007faa9a5e6038 R14: 00007faa9a5e5fa0 R15: 00007fff2ae216b8 [ 459.608353][T21568] [ 461.016047][ T30] audit: type=1800 audit(4294967458.769:115): pid=21641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1191" name="features" dev="configfs" ino=42544 res=0 errno=0 [ 461.373461][T21656] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1194'. [ 462.202411][T21661] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2856086983.2626480262.113777393), cmd(3) [ 462.235769][T21661] FAULT_INJECTION: forcing a failure. [ 462.235769][T21661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.251889][T21661] CPU: 0 UID: 0 PID: 21661 Comm: syz.2.1196 Not tainted syzkaller #0 PREEMPT(full) [ 462.251926][T21661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 462.251943][T21661] Call Trace: [ 462.251953][T21661] [ 462.251964][T21661] dump_stack_lvl+0x16c/0x1f0 [ 462.252004][T21661] should_fail_ex+0x512/0x640 [ 462.252045][T21661] _copy_to_user+0x32/0xd0 [ 462.252085][T21661] ctl_ioctl+0x4e8/0xd70 [ 462.252123][T21661] ? __pfx_ctl_ioctl+0x10/0x10 [ 462.252195][T21661] ? __fget_files+0x20e/0x3c0 [ 462.252238][T21661] dm_ctl_ioctl+0x22/0x30 [ 462.252270][T21661] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 462.252304][T21661] __x64_sys_ioctl+0x18b/0x210 [ 462.252343][T21661] do_syscall_64+0xcd/0x4b0 [ 462.252389][T21661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.252416][T21661] RIP: 0033:0x7f3e3678eec9 [ 462.252435][T21661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.252460][T21661] RSP: 002b:00007f3e37658038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 462.252484][T21661] RAX: ffffffffffffffda RBX: 00007f3e369e5fa0 RCX: 00007f3e3678eec9 [ 462.252502][T21661] RDX: 0000200000000380 RSI: fffffffffffffd03 RDI: 0000000000000004 [ 462.252516][T21661] RBP: 00007f3e36811f91 R08: 0000000000000000 R09: 0000000000000000 [ 462.252531][T21661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.252542][T21661] R13: 00007f3e369e6038 R14: 00007f3e369e5fa0 R15: 00007ffc250b2698 [ 462.252571][T21661] [ 462.898874][T21702] block2mtd: parameter too long [ 463.419186][T21772] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1203'. [ 463.747470][T21786] netlink: 206 bytes leftover after parsing attributes in process `syz.5.1206'. [ 463.806853][T21784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1205'. [ 464.297699][ T30] audit: type=1800 audit(4294967462.049:116): pid=21835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1207" name="features" dev="configfs" ino=43559 res=0 errno=0 [ 465.455735][T21889] FAULT_INJECTION: forcing a failure. [ 465.455735][T21889] name failslab, interval 1, probability 0, space 0, times 0 [ 465.476344][T21889] CPU: 1 UID: 0 PID: 21889 Comm: syz.2.1211 Not tainted syzkaller #0 PREEMPT(full) [ 465.476383][T21889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 465.476401][T21889] Call Trace: [ 465.476410][T21889] [ 465.476423][T21889] dump_stack_lvl+0x16c/0x1f0 [ 465.476461][T21889] should_fail_ex+0x512/0x640 [ 465.476498][T21889] ? __kmalloc_noprof+0xca/0x880 [ 465.476528][T21889] should_failslab+0xc2/0x120 [ 465.476566][T21889] __kmalloc_noprof+0xdd/0x880 [ 465.476594][T21889] ? udp_init_sock+0x24e/0x450 [ 465.476635][T21889] ? udp_init_sock+0x24e/0x450 [ 465.476667][T21889] udp_init_sock+0x24e/0x450 [ 465.476700][T21889] ? __pfx_udp_init_sock+0x10/0x10 [ 465.476736][T21889] inet_create+0x939/0x1040 [ 465.476768][T21889] ? inet_create+0x93/0x1040 [ 465.476805][T21889] __sock_create+0x335/0x8d0 [ 465.476843][T21889] udp_sock_create4+0xa6/0x450 [ 465.476869][T21889] ? __pfx_udp_sock_create4+0x10/0x10 [ 465.476915][T21889] ? lockdep_hardirqs_on+0x7c/0x110 [ 465.476945][T21889] ? crng_make_state+0x48e/0x6d0 [ 465.476984][T21889] rxrpc_open_socket+0x4f5/0x6b0 [ 465.477027][T21889] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 465.477084][T21889] ? __pfx_rxrpc_client_conn_reap_timeout+0x10/0x10 [ 465.477127][T21889] ? rcu_is_watching+0x12/0xc0 [ 465.477166][T21889] rxrpc_lookup_local+0xa01/0x1220 [ 465.477213][T21889] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 465.477256][T21889] ? __local_bh_enable_ip+0xa4/0x120 [ 465.477299][T21889] rxrpc_sendmsg+0x37e/0x680 [ 465.477328][T21889] ____sys_sendmsg+0xa95/0xc70 [ 465.477357][T21889] ? copy_msghdr_from_user+0x10a/0x160 [ 465.477389][T21889] ? __pfx_____sys_sendmsg+0x10/0x10 [ 465.477425][T21889] ? __pfx_futex_wake_mark+0x10/0x10 [ 465.477459][T21889] ___sys_sendmsg+0x134/0x1d0 [ 465.477498][T21889] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.477585][T21889] __sys_sendmsg+0x16d/0x220 [ 465.477624][T21889] ? __pfx___sys_sendmsg+0x10/0x10 [ 465.477656][T21889] ? __x64_sys_futex+0x1e0/0x4c0 [ 465.477708][T21889] do_syscall_64+0xcd/0x4b0 [ 465.477742][T21889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.477766][T21889] RIP: 0033:0x7f3e3678eec9 [ 465.477789][T21889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.477814][T21889] RSP: 002b:00007f3e37658038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.477841][T21889] RAX: ffffffffffffffda RBX: 00007f3e369e5fa0 RCX: 00007f3e3678eec9 [ 465.477859][T21889] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000002 [ 465.477876][T21889] RBP: 00007f3e36811f91 R08: 0000000000000000 R09: 0000000000000000 [ 465.477892][T21889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.477908][T21889] R13: 00007f3e369e6038 R14: 00007f3e369e5fa0 R15: 00007ffc250b2698 [ 465.477945][T21889] [ 465.904191][T21889] FAULT_INJECTION: forcing a failure. [ 465.904191][T21889] name failslab, interval 1, probability 0, space 0, times 0 [ 465.926251][T21889] CPU: 0 UID: 0 PID: 21889 Comm: syz.2.1211 Not tainted syzkaller #0 PREEMPT(full) [ 465.926289][T21889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 465.926304][T21889] Call Trace: [ 465.926312][T21889] [ 465.926322][T21889] dump_stack_lvl+0x16c/0x1f0 [ 465.926359][T21889] should_fail_ex+0x512/0x640 [ 465.926394][T21889] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 465.926430][T21889] should_failslab+0xc2/0x120 [ 465.926468][T21889] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 465.926497][T21889] ? __pfx___might_resched+0x10/0x10 [ 465.926527][T21889] ? task_mm_cid_work+0x37b/0x900 [ 465.926555][T21889] ? sock_alloc_inode+0x25/0x1c0 [ 465.926588][T21889] ? __pfx_sock_alloc_inode+0x10/0x10 [ 465.926613][T21889] ? sock_alloc_inode+0x25/0x1c0 [ 465.926638][T21889] sock_alloc_inode+0x25/0x1c0 [ 465.926664][T21889] alloc_inode+0x61/0x240 [ 465.926700][T21889] sock_alloc+0x40/0x280 [ 465.926738][T21889] __sock_create+0xc1/0x8d0 [ 465.926775][T21889] __sys_socket+0x14d/0x260 [ 465.926807][T21889] ? __pfx___sys_socket+0x10/0x10 [ 465.926838][T21889] ? xfd_validate_state+0x61/0x180 [ 465.926873][T21889] __x64_sys_socket+0x72/0xb0 [ 465.926902][T21889] ? lockdep_hardirqs_on+0x7c/0x110 [ 465.926932][T21889] do_syscall_64+0xcd/0x4b0 [ 465.926965][T21889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.926991][T21889] RIP: 0033:0x7f3e3678eec9 [ 465.927013][T21889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.927039][T21889] RSP: 002b:00007f3e37658038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 465.927065][T21889] RAX: ffffffffffffffda RBX: 00007f3e369e5fa0 RCX: 00007f3e3678eec9 [ 465.927084][T21889] RDX: 0000000000000088 RSI: 0000000000000002 RDI: 0000000000000002 [ 465.927100][T21889] RBP: 00007f3e36811f91 R08: 0000000000000000 R09: 0000000000000000 [ 465.927117][T21889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.927133][T21889] R13: 00007f3e369e6038 R14: 00007f3e369e5fa0 R15: 00007ffc250b2698 [ 465.927169][T21889] [ 465.927235][T21889] socket: no more sockets [ 466.735438][T21906] snd_aloop snd_aloop.0: Parsing timer source ')' failed with -22 [ 466.968470][T21899] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1213'. [ 467.465699][T21899] ipvlan0: entered promiscuous mode [ 467.507701][T21899] ipvlan0: entered allmulticast mode [ 467.513027][T21899] veth0_vlan: entered allmulticast mode [ 468.849657][T21996] binder: 21993:21996 ioctl c018620c 0 returned -14 [ 469.341013][T22018] netlink: 206 bytes leftover after parsing attributes in process `syz.8.1223'. [ 469.889561][T22036] snd_aloop snd_aloop.0: Parsing timer source ')' failed with -22 [ 470.659766][T22060] random: crng reseeded on system resumption [ 471.243391][T22118] netlink: 206 bytes leftover after parsing attributes in process `syz.2.1233'. [ 473.710757][T22229] FAULT_INJECTION: forcing a failure. [ 473.710757][T22229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.737663][T22229] CPU: 0 UID: 0 PID: 22229 Comm: syz.7.1242 Not tainted syzkaller #0 PREEMPT(full) [ 473.737698][T22229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 473.737713][T22229] Call Trace: [ 473.737722][T22229] [ 473.737731][T22229] dump_stack_lvl+0x16c/0x1f0 [ 473.737773][T22229] should_fail_ex+0x512/0x640 [ 473.737813][T22229] _copy_to_user+0x32/0xd0 [ 473.737851][T22229] simple_read_from_buffer+0xcb/0x170 [ 473.737893][T22229] proc_fail_nth_read+0x197/0x240 [ 473.737921][T22229] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 473.737950][T22229] ? rw_verify_area+0xcf/0x6c0 [ 473.737975][T22229] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 473.738004][T22229] vfs_read+0x1e4/0xcf0 [ 473.738037][T22229] ? __pfx___mutex_lock+0x10/0x10 [ 473.738067][T22229] ? __pfx_vfs_read+0x10/0x10 [ 473.738105][T22229] ? __fget_files+0x20e/0x3c0 [ 473.738147][T22229] ksys_read+0x12a/0x250 [ 473.738174][T22229] ? __pfx_ksys_read+0x10/0x10 [ 473.738211][T22229] do_syscall_64+0xcd/0x4b0 [ 473.738244][T22229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.738270][T22229] RIP: 0033:0x7fe6d098d8dc [ 473.738292][T22229] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 473.738315][T22229] RSP: 002b:00007fe6d1892030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 473.738338][T22229] RAX: ffffffffffffffda RBX: 00007fe6d0be6090 RCX: 00007fe6d098d8dc [ 473.738355][T22229] RDX: 000000000000000f RSI: 00007fe6d18920a0 RDI: 0000000000000002 [ 473.738371][T22229] RBP: 00007fe6d1892090 R08: 0000000000000000 R09: 0000000000000000 [ 473.738386][T22229] R10: 0000000000000067 R11: 0000000000000246 R12: 0000000000000001 [ 473.738400][T22229] R13: 00007fe6d0be6128 R14: 00007fe6d0be6090 R15: 00007ffd86a98c18 [ 473.738442][T22229] [ 474.448884][T22244] snd_aloop snd_aloop.0: control 1:262152:7::0 is already present [ 474.480815][T22250] snd_aloop snd_aloop.0: Parsing timer source ')' failed with -22 [ 475.625079][T22337] block2mtd: parameter too long [ 475.684850][ T30] audit: type=1800 audit(4294967473.379:117): pid=22328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1248" name="features" dev="configfs" ino=44303 res=0 errno=0 [ 475.916681][T22344] cgroup: fork rejected by pids controller in /syz2 [ 476.493457][T22408] ima: policy update failed [ 476.509094][ T30] audit: type=1802 audit(4294967474.269:118): pid=22408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.1253" res=0 errno=0 [ 477.293406][T22534] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1255'. [ 478.327030][T22587] random: crng reseeded on system resumption [ 478.746324][T22621] vivid-003: ================= START STATUS ================= [ 478.768806][T22621] vivid-003: Radio HW Seek Mode: Bounded [ 478.807661][T22621] vivid-003: Radio Programmable HW Seek: false [ 478.814216][T22621] vivid-003: RDS Rx I/O Mode: Block I/O [ 478.845684][T22621] vivid-003: Generate RBDS Instead of RDS: false [ 478.855348][T22621] vivid-003: RDS Reception: true [ 478.906961][T22621] vivid-003: RDS Program Type: 0 inactive [ 479.006907][T22621] vivid-003: RDS PS Name: inactive [ 479.012594][T22621] vivid-003: RDS Radio Text: inactive [ 479.018429][T22621] vivid-003: RDS Traffic Announcement: false inactive [ 479.030796][T22621] vivid-003: RDS Traffic Program: false inactive [ 479.107457][T22621] vivid-003: RDS Music: false inactive [ 479.113085][T22621] vivid-003: ================== END STATUS ================== [ 479.250892][ T30] audit: type=1800 audit(4294967477.009:119): pid=22636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1264" name="members" dev="configfs" ino=45309 res=0 errno=0 [ 479.347582][T22639] netlink: 342 bytes leftover after parsing attributes in process `syz.7.1264'. [ 481.376843][T22710] FAULT_INJECTION: forcing a failure. [ 481.376843][T22710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.391934][T22710] CPU: 0 UID: 0 PID: 22710 Comm: syz.2.1271 Not tainted syzkaller #0 PREEMPT(full) [ 481.391955][T22710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 481.391964][T22710] Call Trace: [ 481.391970][T22710] [ 481.391976][T22710] dump_stack_lvl+0x16c/0x1f0 [ 481.391998][T22710] should_fail_ex+0x512/0x640 [ 481.392021][T22710] _copy_to_user+0x32/0xd0 [ 481.392043][T22710] poll_select_finish+0x339/0x6b0 [ 481.392060][T22710] ? __pfx_poll_select_finish+0x10/0x10 [ 481.392076][T22710] ? read_tsc+0x9/0x20 [ 481.392094][T22710] ? ktime_get_ts64+0x256/0x400 [ 481.392119][T22710] kern_select+0x16e/0x1e0 [ 481.392133][T22710] ? __pfx_kern_select+0x10/0x10 [ 481.392150][T22710] ? xfd_validate_state+0x61/0x180 [ 481.392162][T22710] ? __pfx_ksys_read+0x10/0x10 [ 481.392181][T22710] __x64_sys_select+0xbd/0x160 [ 481.392194][T22710] ? do_syscall_64+0x91/0x4b0 [ 481.392211][T22710] ? lockdep_hardirqs_on+0x7c/0x110 [ 481.392227][T22710] do_syscall_64+0xcd/0x4b0 [ 481.392245][T22710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.392259][T22710] RIP: 0033:0x7f3e3678eec9 [ 481.392271][T22710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.392285][T22710] RSP: 002b:00007f3e37637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 481.392299][T22710] RAX: ffffffffffffffda RBX: 00007f3e369e6090 RCX: 00007f3e3678eec9 [ 481.392309][T22710] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 0000000000000006 [ 481.392318][T22710] RBP: 00007f3e36811f91 R08: 0000200000000000 R09: 0000000000000000 [ 481.392326][T22710] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 481.392335][T22710] R13: 00007f3e369e6128 R14: 00007f3e369e6090 R15: 00007ffc250b2698 [ 481.392354][T22710] [ 481.702015][T22712] zswap: compressor not available [ 481.951128][T22745] netlink: 62 bytes leftover after parsing attributes in process `syz.2.1274'. [ 482.683513][T22782] netlink: 'syz.8.1278': attribute type 1 has an invalid length. [ 482.706843][T22782] netlink: 13 bytes leftover after parsing attributes in process `syz.8.1278'. [ 483.201685][T22806] netlink: 206 bytes leftover after parsing attributes in process `syz.5.1281'. [ 483.960848][T22869] netlink: set zone limit has 8 unknown bytes [ 484.000916][T22871] netlink: zone id is out of range [ 484.006202][T22871] netlink: del zone limit has 4 unknown bytes [ 484.083921][T22869] HfR: entered promiscuous mode [ 484.094805][T22790] kexec: Could not allocate control_code_buffer [ 486.701993][T22958] delete_channel: no stack [ 486.838656][T22953] tipc: Started in network mode [ 486.851995][T22953] tipc: Node identity 45e5412, cluster identity 4711 [ 486.884345][T22953] tipc: Node number set to 73290770 [ 487.053847][T22969] snd_aloop snd_aloop.0: Parsing timer source ')' failed with -22 [ 487.173389][T22977] netlink: 306 bytes leftover after parsing attributes in process `syz.8.1298'. [ 488.019843][T23038] block2mtd: parameter too long [ 488.052063][ T30] audit: type=1800 audit(4294967485.799:120): pid=23051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1301" name="features" dev="configfs" ino=45713 res=0 errno=0 [ 490.852659][T23180] snd_aloop snd_aloop.0: Parsing timer source ')' failed with -22 [ 491.590371][T23194] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input17 [ 491.651449][ T5847] Process accounting resumed [ 492.073642][T17458] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 492.089188][T17458] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 493.709264][T23227] block2mtd: parameter too long [ 494.980573][ T30] audit: type=1800 audit(4294967492.739:121): pid=23298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1322" name="features" dev="configfs" ino=46012 res=0 errno=0 [ 496.386743][T23381] block2mtd: parameter too long [ 497.958130][T23569] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 498.336394][T23592] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1338'. [ 499.198505][T23621] cougar: G6 mapped to space [ 499.890094][T23652] FAULT_INJECTION: forcing a failure. [ 499.890094][T23652] name failslab, interval 1, probability 0, space 0, times 0 [ 499.924008][T23664] block2mtd: parameter too long [ 499.929780][T23652] CPU: 0 UID: 0 PID: 23652 Comm: syz.7.1346 Not tainted syzkaller #0 PREEMPT(full) [ 499.929802][T23652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 499.929812][T23652] Call Trace: [ 499.929817][T23652] [ 499.929824][T23652] dump_stack_lvl+0x16c/0x1f0 [ 499.929847][T23652] should_fail_ex+0x512/0x640 [ 499.929868][T23652] ? fs_reclaim_acquire+0xae/0x150 [ 499.929890][T23652] should_failslab+0xc2/0x120 [ 499.929911][T23652] kmem_cache_alloc_noprof+0x75/0x6e0 [ 499.929927][T23652] ? __pfx_map_id_range_down+0x10/0x10 [ 499.929942][T23652] ? security_inode_alloc+0x3b/0x2b0 [ 499.929967][T23652] ? security_inode_alloc+0x3b/0x2b0 [ 499.929985][T23652] security_inode_alloc+0x3b/0x2b0 [ 499.930007][T23652] inode_init_always_gfp+0xce4/0x1030 [ 499.930026][T23652] alloc_inode+0x86/0x240 [ 499.930046][T23652] path_from_stashed+0x25b/0x750 [ 499.930067][T23652] open_namespace+0x8e/0x190 [ 499.930083][T23652] ? __pfx_open_namespace+0x10/0x10 [ 499.930100][T23652] ? bpf_lsm_capable+0x9/0x10 [ 499.930124][T23652] open_related_ns+0x41/0x70 [ 499.930139][T23652] __tun_chr_ioctl+0x1fae/0x4880 [ 499.930158][T23652] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 499.930183][T23652] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 499.930203][T23652] ? hook_file_ioctl_common+0x145/0x410 [ 499.930224][T23652] ? __fget_files+0x20e/0x3c0 [ 499.930243][T23652] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 499.930262][T23652] __x64_sys_ioctl+0x18b/0x210 [ 499.930285][T23652] do_syscall_64+0xcd/0x4b0 [ 499.930304][T23652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.930319][T23652] RIP: 0033:0x7fe6d098eec9 [ 499.930332][T23652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 499.930346][T23652] RSP: 002b:00007fe6d18b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 499.930360][T23652] RAX: ffffffffffffffda RBX: 00007fe6d0be5fa0 RCX: 00007fe6d098eec9 [ 499.930370][T23652] RDX: 0000000000005c8d RSI: 00000000000054e3 RDI: 00000000000000c8 [ 499.930379][T23652] RBP: 00007fe6d0a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 499.930388][T23652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 499.930396][T23652] R13: 00007fe6d0be6038 R14: 00007fe6d0be5fa0 R15: 00007ffd86a98c18 [ 499.930416][T23652] [ 500.162589][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.094700][T23702] hub 1-0:1.0: USB hub found [ 501.119843][T23702] hub 1-0:1.0: 1 port detected [ 501.500920][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.507735][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.648419][T17458] Bluetooth: hci8: unexpected event 0x3e length: 726 > 260 [ 501.648450][T17458] Bluetooth: hci8: unexpected subevent 0x0d length: 725 > 260 [ 501.666110][T17458] Bluetooth: hci8: Unknown advertising packet type: 0x7f [ 501.666179][T17458] Bluetooth: hci8: adv larger than maximum supported [ 501.675569][T17458] Bluetooth: hci8: adv larger than maximum supported [ 501.682511][T17458] Bluetooth: hci8: Malformed LE Event: 0x0d [ 502.647582][T23792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1360'. [ 502.668762][T23792] netlink: 25 bytes leftover after parsing attributes in process `syz.5.1360'. [ 503.120450][T23746] i2c i2c-0: new_device: Missing parameters [ 503.616588][T23864] random: crng reseeded on system resumption [ 503.809020][T23857] block2mtd: parameter too long [ 506.152058][T24014] snd_aloop snd_aloop.0: Parsing timer source ')' failed with -22 [ 506.162056][T24016] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1370'. [ 506.336314][T24022] netlink: 322 bytes leftover after parsing attributes in process `syz.2.1371'. [ 507.675588][T24102] FAULT_INJECTION: forcing a failure. [ 507.675588][T24102] name fail_futex, interval 1, probability 0, space 0, times 0 [ 507.700861][T24102] CPU: 1 UID: 0 PID: 24102 Comm: syz.8.1377 Not tainted syzkaller #0 PREEMPT(full) [ 507.700882][T24102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 507.700891][T24102] Call Trace: [ 507.700896][T24102] [ 507.700902][T24102] dump_stack_lvl+0x16c/0x1f0 [ 507.700926][T24102] should_fail_ex+0x512/0x640 [ 507.700949][T24102] should_fail_futex+0x4c/0x60 [ 507.700970][T24102] __x64_sys_futex+0x25e/0x4c0 [ 507.700992][T24102] ? __pfx___x64_sys_futex+0x10/0x10 [ 507.701013][T24102] ? xfd_validate_state+0x61/0x180 [ 507.701032][T24102] do_syscall_64+0xcd/0x4b0 [ 507.701051][T24102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.701066][T24102] RIP: 0033:0x7fb32918eec9 [ 507.701078][T24102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.701093][T24102] RSP: 002b:00007ffe17e60208 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 507.701106][T24102] RAX: ffffffffffffffda RBX: 000000000007befd RCX: 00007fb32918eec9 [ 507.701116][T24102] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb3293e5fac [ 507.701124][T24102] RBP: 0000000000000032 R08: 00007fb329f70000 R09: 0000000e17e604ff [ 507.701133][T24102] R10: 00007ffe17e60300 R11: 0000000000000246 R12: 00007fb3293e5fac [ 507.701141][T24102] R13: 00007ffe17e60300 R14: 000000000007bf2f R15: 00007ffe17e60320 [ 507.701159][T24102] [ 509.018377][ T30] audit: type=1800 audit(4294968529.773:122): pid=24187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1379" name="features" dev="configfs" ino=51061 res=0 errno=0 [ 509.379335][T24190] netlink: 25 bytes leftover after parsing attributes in process `syz.8.1380'. [ 510.544956][T24258] random: crng reseeded on system resumption [ 511.631546][T24260] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1383'. [ 511.994273][T24271] bond0: option arp_interval: invalid value () [ 512.021304][T24271] bond0: option arp_interval: allowed values 0 - 2147483647 [ 515.614683][ T30] audit: type=1800 audit(4294968536.360:123): pid=24439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1403" name="lu_gp_id" dev="configfs" ino=52765 res=0 errno=0 [ 515.920403][T24450] FAULT_INJECTION: forcing a failure. [ 515.920403][T24450] name failslab, interval 1, probability 0, space 0, times 0 [ 515.951994][T24398] FAULT_INJECTION: forcing a failure. [ 515.951994][T24398] name failslab, interval 1, probability 0, space 0, times 0 [ 515.964683][T24398] CPU: 1 UID: 0 PID: 24398 Comm: syz.2.1400 Not tainted syzkaller #0 PREEMPT(full) [ 515.964706][T24398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 515.964725][T24398] Call Trace: [ 515.964734][T24398] [ 515.964745][T24398] dump_stack_lvl+0x16c/0x1f0 [ 515.964781][T24398] should_fail_ex+0x512/0x640 [ 515.964808][T24398] should_failslab+0xc2/0x120 [ 515.964829][T24398] kmem_cache_alloc_noprof+0x75/0x6e0 [ 515.964845][T24398] ? pcpu_alloc_noprof+0x949/0x14c0 [ 515.964860][T24398] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 515.964887][T24398] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 515.964909][T24398] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 515.964935][T24398] idr_get_free+0x528/0xa30 [ 515.964957][T24398] idr_alloc_u32+0x190/0x2f0 [ 515.964974][T24398] ? __pfx_idr_alloc_u32+0x10/0x10 [ 515.964992][T24398] ? lock_acquire+0x179/0x350 [ 515.965017][T24398] idr_alloc_cyclic+0x10b/0x230 [ 515.965034][T24398] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 515.965049][T24398] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 515.965064][T24398] ? lsm_blob_alloc+0x2b/0x90 [ 515.965085][T24398] map_create+0x143e/0x27e0 [ 515.965107][T24398] ? __pfx_map_create+0x10/0x10 [ 515.965120][T24398] ? __might_fault+0xe3/0x190 [ 515.965142][T24398] ? __might_fault+0xe3/0x190 [ 515.965156][T24398] ? __might_fault+0x13b/0x190 [ 515.965178][T24398] __sys_bpf+0x3d9d/0x4980 [ 515.965194][T24398] ? futex_private_hash_put+0x18a/0x300 [ 515.965216][T24398] ? __pfx___sys_bpf+0x10/0x10 [ 515.965232][T24398] ? __pfx_futex_wait+0x10/0x10 [ 515.965257][T24398] ? do_futex+0x122/0x350 [ 515.965287][T24398] ? fput+0x9b/0xd0 [ 515.965307][T24398] ? xfd_validate_state+0x61/0x180 [ 515.965320][T24398] ? __pfx_ksys_write+0x10/0x10 [ 515.965340][T24398] __x64_sys_bpf+0x78/0xc0 [ 515.965355][T24398] ? lockdep_hardirqs_on+0x7c/0x110 [ 515.965373][T24398] do_syscall_64+0xcd/0x4b0 [ 515.965393][T24398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.965408][T24398] RIP: 0033:0x7f3e3678eec9 [ 515.965421][T24398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.965435][T24398] RSP: 002b:00007f3e37658038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 515.965449][T24398] RAX: ffffffffffffffda RBX: 00007f3e369e5fa0 RCX: 00007f3e3678eec9 [ 515.965459][T24398] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000000 [ 515.965468][T24398] RBP: 00007f3e36811f91 R08: 0000000000000000 R09: 0000000000000000 [ 515.965477][T24398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.965486][T24398] R13: 00007f3e369e6038 R14: 00007f3e369e5fa0 R15: 00007ffc250b2698 [ 515.965505][T24398] [ 516.125177][T24450] CPU: 0 UID: 0 PID: 24450 Comm: syz.7.1405 Not tainted syzkaller #0 PREEMPT(full) [ 516.125213][T24450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 516.125231][T24450] Call Trace: [ 516.125242][T24450] [ 516.125254][T24450] dump_stack_lvl+0x16c/0x1f0 [ 516.125292][T24450] should_fail_ex+0x512/0x640 [ 516.125328][T24450] ? __kmalloc_cache_noprof+0x5f/0x780 [ 516.125359][T24450] should_failslab+0xc2/0x120 [ 516.125408][T24450] __kmalloc_cache_noprof+0x72/0x780 [ 516.125437][T24450] ? resv_map_alloc+0x46/0x400 [ 516.125477][T24450] ? resv_map_alloc+0x46/0x400 [ 516.125512][T24450] resv_map_alloc+0x46/0x400 [ 516.125549][T24450] hugetlbfs_get_inode+0x33f/0x730 [ 516.125586][T24450] hugetlb_file_setup+0x15b/0x620 [ 516.125620][T24450] ksys_mmap_pgoff+0x189/0x5c0 [ 516.125659][T24450] __x64_sys_mmap+0x125/0x190 [ 516.125690][T24450] do_syscall_64+0xcd/0x4b0 [ 516.125724][T24450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.125751][T24450] RIP: 0033:0x7fe6d098eec9 [ 516.125771][T24450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.125798][T24450] RSP: 002b:00007fe6d18b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 516.125824][T24450] RAX: ffffffffffffffda RBX: 00007fe6d0be5fa0 RCX: 00007fe6d098eec9 [ 516.125842][T24450] RDX: 00004000000000df RSI: 0000000000000003 RDI: 0000000000000000 [ 516.125859][T24450] RBP: 00007fe6d0a11f91 R08: 0000000000000401 R09: 0000300000000000 [ 516.125878][T24450] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 516.125894][T24450] R13: 00007fe6d0be6038 R14: 00007fe6d0be5fa0 R15: 00007ffd86a98c18 [ 516.125929][T24450] [ 516.521147][T24444] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1403'. [ 516.530191][T24444] bond_slave_1: entered allmulticast mode [ 516.609029][T24450] netlink: set zone limit has 8 unknown bytes [ 517.852552][T24519] sd 0:0:1:0: PR command failed: 1026 [ 517.862010][T24519] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 517.881524][T24519] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 518.697281][T24557] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 518.711395][T24557] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 518.721069][T24557] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 518.763102][T24557] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 518.763481][T24557] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 518.763749][T24557] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 518.764027][T24557] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 518.764338][T24557] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 518.771921][T24557] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 520.172229][T17458] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 520.713453][T17458] Bluetooth: hci0: command 0x0c1a tx timeout [ 520.797249][T17458] Bluetooth: hci8: command 0x0c1a tx timeout [ 520.803298][T17458] Bluetooth: hci7: command 0x0c1a tx timeout [ 520.809664][T21184] Bluetooth: hci6: command 0x0c1a tx timeout [ 520.815712][T21184] Bluetooth: hci5: command 0x0c1a tx timeout [ 520.821994][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout [ 520.828220][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 520.834224][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 520.840515][T21184] Bluetooth: hci2: command 0x0c1a tx timeout [ 522.479079][T24705] block2mtd: parameter too long [ 522.870350][T24657] Bluetooth: hci1: command 0x0c1a tx timeout [ 524.146724][ T30] audit: type=1800 audit(4294968544.886:124): pid=24797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1434" name="features" dev="configfs" ino=53804 res=0 errno=0 [ 524.616994][T24822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1435'. [ 527.800304][T24939] block2mtd: parameter too long [ 529.052555][T25057] Invalid ELF header magic: != ELF [ 529.343399][T25063] snd_aloop snd_aloop.0: Parsing timer source ')' failed with -22 [ 529.359475][T25065] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1456'. [ 529.497559][T25065] bridge_slave_1: left allmulticast mode [ 529.503364][T25065] bridge_slave_1: left promiscuous mode [ 529.512792][T25065] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.549121][T25065] bridge_slave_0: left allmulticast mode [ 529.554939][T25065] bridge_slave_0: left promiscuous mode [ 529.566256][T25065] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.669187][T25102] zswap: compressor not available [ 531.267475][T25143] nbd: socks must be embedded in a SOCK_ITEM attr [ 531.594566][ T31] INFO: task syz-executor:5840 blocked for more than 143 seconds. [ 531.618158][ T31] Not tainted syzkaller #0 [ 531.632038][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 531.647006][ T31] task:syz-executor state:D stack:22616 pid:5840 tgid:5840 ppid:1 task_flags:0x400140 flags:0x00080002 [ 531.670260][ T31] Call Trace: [ 531.688496][ T31] [ 531.701857][ T31] __schedule+0x1190/0x5de0 [ 531.712794][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 531.733664][ T31] ? __pfx___schedule+0x10/0x10 [ 531.758929][ T31] ? find_held_lock+0x2b/0x80 [ 531.799721][ T31] ? schedule+0x2d7/0x3a0 [ 531.856422][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 531.906394][ T31] schedule+0xe7/0x3a0 [ 531.937292][ T31] schedule_preempt_disabled+0x13/0x30 [ 531.943872][ T31] __mutex_lock+0x818/0x1060 [ 531.954057][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 531.966941][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 531.973711][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 531.979906][ T31] ? net_generic+0xea/0x2a0 [ 531.988273][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 532.000351][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 532.010102][ T31] nfsd_umount+0x48/0xe0 [ 532.021157][ T31] deactivate_locked_super+0xbe/0x1a0 [ 532.028762][ T31] deactivate_super+0xde/0x100 [ 532.033689][ T31] cleanup_mnt+0x225/0x450 [ 532.038131][ T31] task_work_run+0x14d/0x240 [ 532.042849][ T31] ? __pfx_task_work_run+0x10/0x10 [ 532.047971][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 532.054335][ T31] exit_to_user_mode_loop+0xec/0x130 [ 532.060566][ T31] do_syscall_64+0x419/0x4b0 [ 532.065326][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.071317][ T31] RIP: 0033:0x7f03cc1901f7 [ 532.076521][ T31] RSP: 002b:00007ffe735a8698 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 532.086070][ T31] RAX: 0000000000000000 RBX: 00007f03cc211d7d RCX: 00007f03cc1901f7 [ 532.094477][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe735a8750 [ 532.102472][ T31] RBP: 00007ffe735a8750 R08: 0000000000000000 R09: 0000000000000000 [ 532.111103][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe735a97e0 [ 532.119185][ T31] R13: 00007f03cc211d7d R14: 000000000005d903 R15: 00007ffe735a9820 [ 532.127954][ T31] [ 532.132544][ T31] INFO: task syz.0.938:16659 blocked for more than 143 seconds. [ 532.141050][ T31] Not tainted syzkaller #0 [ 532.146172][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 532.163223][ T31] task:syz.0.938 state:D stack:27640 pid:16659 tgid:16651 ppid:5855 task_flags:0x400140 flags:0x00080002 [ 532.175295][ T31] Call Trace: [ 532.183001][ T31] [ 532.187140][ T31] __schedule+0x1190/0x5de0 [ 532.192691][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 532.206237][ T31] ? nfsd4_deleg_getattr_conflict+0x815/0xa60 [ 532.215257][ T31] ? __pfx___schedule+0x10/0x10 [ 532.222062][ T31] ? find_held_lock+0x2b/0x80 [ 532.251293][ T31] ? schedule+0x2d7/0x3a0 [ 532.264477][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 532.284416][ T31] schedule+0xe7/0x3a0 [ 532.296413][ T31] schedule_preempt_disabled+0x13/0x30 [ 532.312162][ T31] __mutex_lock+0x818/0x1060 [ 532.325321][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 532.340791][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 532.366623][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 532.376759][ T31] ? net_generic+0xea/0x2a0 [ 532.392831][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 532.405775][ T31] nfsd_nl_threads_set_doit+0x687/0xbc0 [ 532.423100][ T31] genl_family_rcv_msg_doit+0x206/0x2f0 [ 532.440096][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 532.473229][ T31] ? rcu_is_watching+0x12/0xc0 [ 532.478402][ T31] ? bpf_lsm_capable+0x9/0x10 [ 532.483295][ T31] ? security_capable+0x7e/0x260 [ 532.488390][ T31] genl_rcv_msg+0x55c/0x800 [ 532.493171][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.498408][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 532.531940][ T31] netlink_rcv_skb+0x158/0x420 [ 532.538215][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 532.545224][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 532.550848][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 532.558488][ T31] genl_rcv+0x28/0x40 [ 532.562741][ T31] netlink_unicast+0x5a7/0x870 [ 532.569052][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 532.576049][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 532.581066][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.587129][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 532.593679][ T31] ____sys_sendmsg+0xa95/0xc70 [ 532.598814][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 532.604900][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 532.611175][ T31] ? __page_table_check_ptes_set+0x1ae/0x420 [ 532.617684][ T31] ? do_pte_missing+0x8a3/0x3ba0 [ 532.630634][ T31] ___sys_sendmsg+0x134/0x1d0 [ 532.650956][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.660421][ T31] __sys_sendmsg+0x16d/0x220 [ 532.668479][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 532.678166][ T31] ? find_held_lock+0x2b/0x80 [ 532.686526][ T31] ? do_user_addr_fault+0x843/0x1370 [ 532.694413][ T31] do_syscall_64+0xcd/0x4b0 [ 532.702060][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.711856][ T31] RIP: 0033:0x7fa8eed8eec9 [ 532.719829][ T31] RSP: 002b:00007fa8efbc8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.737258][ T31] RAX: ffffffffffffffda RBX: 00007fa8eefe6090 RCX: 00007fa8eed8eec9 [ 532.757329][ T31] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000006 [ 532.769597][ T31] RBP: 00007fa8eee11f91 R08: 0000000000000000 R09: 0000000000000000 [ 532.792216][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.800885][ T31] R13: 00007fa8eefe6128 R14: 00007fa8eefe6090 R15: 00007fff102d8e88 [ 532.809420][ T31] [ 532.838957][ T31] [ 532.838957][ T31] Showing all locks held in the system: [ 532.849227][ T31] 1 lock held by pool_workqueue_/3: [ 532.855599][ T31] #0: ffffffff8e1cd7b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 532.867061][ T31] 1 lock held by khungtaskd/31: [ 532.874159][ T31] #0: ffffffff8e1c2220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 532.892037][ T31] 2 locks held by syz-executor/5840: [ 532.915532][ T31] #0: ffff88807baf00e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 532.941132][ T31] #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 532.956223][ T31] 2 locks held by syz-executor/5846: [ 532.961641][ T31] #0: ffff8880305240e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 532.972400][ T31] #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 532.985140][ T31] 2 locks held by syz.0.938/16652: [ 533.000117][ T31] #0: ffffffff8ff8c250 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 533.008748][ T31] #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 533.019245][ T31] 2 locks held by syz.0.938/16659: [ 533.030186][ T31] #0: ffffffff8ff8c250 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 533.040079][ T31] #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 533.053129][ T31] 2 locks held by getty/17320: [ 533.058242][ T31] #0: ffff88814d09c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 533.068409][ T31] #1: ffffc90003a732f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 533.079278][ T31] 2 locks held by syz-executor/17455: [ 533.085655][ T31] #0: ffff888012a020e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 533.096440][ T31] #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 533.106465][ T31] 2 locks held by syz-executor/18572: [ 533.111935][ T31] #0: ffff8880585680e0 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 533.123564][ T31] #1: ffffffff8e5e9848 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 533.133673][ T31] 4 locks held by kworker/u8:22/21235: [ 533.139235][ T31] #0: ffff88801bedf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 533.150154][ T31] #1: ffffc9001a53fd10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 533.161895][ T31] #2: ffffffff8fed24d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 533.171612][ T31] #3: ffffffff8fee8908 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x8b/0xaf0 [ 533.182768][ T31] 1 lock held by syz.8.1413/24570: [ 533.188301][ T31] 1 lock held by syz.8.1462/25121: [ 533.220092][ T31] [ 533.222603][ T31] ============================================= [ 533.222603][ T31] [ 533.264093][ T31] NMI backtrace for cpu 1 [ 533.264116][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 533.264146][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 533.264161][ T31] Call Trace: [ 533.264170][ T31] [ 533.264180][ T31] dump_stack_lvl+0x116/0x1f0 [ 533.264214][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 533.264248][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 533.264276][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 533.264314][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 533.264353][ T31] watchdog+0xf3f/0x1170 [ 533.264381][ T31] ? rcu_is_watching+0x12/0xc0 [ 533.264409][ T31] ? __pfx_watchdog+0x10/0x10 [ 533.264430][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 533.264456][ T31] ? __kthread_parkme+0x19e/0x250 [ 533.264490][ T31] ? __pfx_watchdog+0x10/0x10 [ 533.264513][ T31] kthread+0x3c5/0x780 [ 533.264543][ T31] ? __pfx_kthread+0x10/0x10 [ 533.264568][ T31] ? rcu_is_watching+0x12/0xc0 [ 533.264595][ T31] ? __pfx_kthread+0x10/0x10 [ 533.264618][ T31] ret_from_fork+0x56a/0x730 [ 533.264641][ T31] ? __pfx_kthread+0x10/0x10 [ 533.264665][ T31] ret_from_fork_asm+0x1a/0x30 [ 533.264713][ T31] [ 533.264722][ T31] Sending NMI from CPU 1 to CPUs 0: [ 533.394675][ C0] NMI backtrace for cpu 0 [ 533.394695][ C0] CPU: 0 UID: 0 PID: 6499 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 533.394725][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 533.394743][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 533.394781][ C0] RIP: 0010:lock_acquire+0xf4/0x350 [ 533.394821][ C0] Code: 44 89 f2 48 89 de e8 5b d0 fe ff 5f 41 58 65 ff 0d 51 34 e4 11 0f 85 4f ff ff ff e8 76 f2 94 ff e9 45 ff ff ff 48 8b 74 24 68 <48> 89 df e8 54 0b 8b 00 8b 0d d2 45 c9 0e 85 c9 0f 84 b1 00 00 00 [ 533.394846][ C0] RSP: 0018:ffffc9000eedfb88 EFLAGS: 00000002 [ 533.394864][ C0] RAX: 0000000000000001 RBX: ffff8880213006e8 RCX: 0000000000000000 [ 533.394881][ C0] RDX: 0000000000000000 RSI: ffffffff8b50cef6 RDI: ffffffff8dac7e40 [ 533.394898][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 533.394913][ C0] R10: ffffffff905ff197 R11: 0000000000000000 R12: 0000000000000001 [ 533.394930][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 533.394945][ C0] FS: 0000000000000000(0000) GS:ffff888124e6f000(0000) knlGS:0000000000000000 [ 533.394968][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 533.394984][ C0] CR2: 000020000051a000 CR3: 000000003220e000 CR4: 00000000003526f0 [ 533.395001][ C0] Call Trace: [ 533.395009][ C0] [ 533.395024][ C0] _raw_spin_lock_irq+0x36/0x50 [ 533.395049][ C0] ? cfg80211_wiphy_work+0xf2/0x580 [ 533.395080][ C0] cfg80211_wiphy_work+0xf2/0x580 [ 533.395119][ C0] ? rcu_is_watching+0x12/0xc0 [ 533.395151][ C0] process_one_work+0x9cc/0x1b70 [ 533.395184][ C0] ? __pfx_process_one_work+0x10/0x10 [ 533.395215][ C0] ? assign_work+0x1a0/0x250 [ 533.395239][ C0] worker_thread+0x6c8/0xf10 [ 533.395269][ C0] ? __kthread_parkme+0x19e/0x250 [ 533.395304][ C0] ? __pfx_worker_thread+0x10/0x10 [ 533.395330][ C0] kthread+0x3c5/0x780 [ 533.395353][ C0] ? __pfx_kthread+0x10/0x10 [ 533.395376][ C0] ? rcu_is_watching+0x12/0xc0 [ 533.395405][ C0] ? __pfx_kthread+0x10/0x10 [ 533.395428][ C0] ret_from_fork+0x56a/0x730 [ 533.395452][ C0] ? __pfx_kthread+0x10/0x10 [ 533.395475][ C0] ret_from_fork_asm+0x1a/0x30 [ 533.395516][ C0] [ 533.663649][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 533.670540][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 533.679662][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 533.689724][ T31] Call Trace: [ 533.693002][ T31] [ 533.695928][ T31] dump_stack_lvl+0x3d/0x1f0 [ 533.700532][ T31] vpanic+0x640/0x6f0 [ 533.704516][ T31] panic+0xca/0xd0 [ 533.708237][ T31] ? __pfx_panic+0x10/0x10 [ 533.712655][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 533.718048][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 533.724218][ T31] ? watchdog+0xe48/0x1170 [ 533.728634][ T31] ? watchdog+0xe3b/0x1170 [ 533.733054][ T31] watchdog+0xe59/0x1170 [ 533.737308][ T31] ? rcu_is_watching+0x12/0xc0 [ 533.742080][ T31] ? __pfx_watchdog+0x10/0x10 [ 533.746757][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 533.751959][ T31] ? __kthread_parkme+0x19e/0x250 [ 533.757006][ T31] ? __pfx_watchdog+0x10/0x10 [ 533.761704][ T31] kthread+0x3c5/0x780 [ 533.765837][ T31] ? __pfx_kthread+0x10/0x10 [ 533.770436][ T31] ? rcu_is_watching+0x12/0xc0 [ 533.775223][ T31] ? __pfx_kthread+0x10/0x10 [ 533.779932][ T31] ret_from_fork+0x56a/0x730 [ 533.784528][ T31] ? __pfx_kthread+0x10/0x10 [ 533.789125][ T31] ret_from_fork_asm+0x1a/0x30 [ 533.793921][ T31] [ 533.797070][ T31] Kernel Offset: disabled [ 533.801413][ T31] Rebooting in 86400 seconds..