last executing test programs: 3m5.399052755s ago: executing program 1 (id=556): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000c0001b30000000000000094d1962fb62441ff76466065c26564daa77057d4e09afa2e679c30c6622b191ba757e9ba779bec109e19d3d7a707d1ad7e6cf59efe33c7eed533ca6944156c0ec23947cff99e5dc699c05af15c79c088b84902824265c78e458258b93f70683ac56ec029ad49b1c9b3afb2598a79789172e1b5d5552a8c4ae09a16d20496be"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000003b00)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x600, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) socketpair$auto(0x1, 0x3, 0x5, 0x0) ioctl$auto(0x3, 0xc048aec8, r2) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffffd, 0xb, 0xa, 0x40007fff, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x5e, 0x80000001, 0x7, 0x2, 0x93, 0x400000001, 0x2]}, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x100010008000) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r4, 0x0, 0x7) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x9}, 0x3) io_setup$auto(0xffff, &(0x7f0000000580)) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r6 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000100), r0) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9730a6d093c79c58000000", @ANYRES16=r6, @ANYBLOB="8b7428bd7000fbdbdf25040000004400040099e57ea6438a8aa2bcbd1ff9bd240abaacdc7029d5d95d8884275c7a1d85b9b0b744a9f94db32d68af6e6a2f0c75aab67cdccc29fb3e2ff231f15a"], 0x58}}, 0x92) 3m3.972696244s ago: executing program 1 (id=563): r0 = open(0x0, 0x591083, 0x402) ioctl$auto(0xffffffffffffffff, 0x64c5, 0xffffffffffffffff) ioctl$auto_USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000140)=0x91d) pipe$auto(&(0x7f0000000040)) socket(0x1d, 0x2, 0x2) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x604400, 0x0) ioprio_set$auto(0x3, 0x0, 0x4b34) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8081, 0x0) r1 = socket(0x25, 0xa, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) sendfile$auto(r1, r2, 0x0, 0x9) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x48080) mmap$auto(0x0, 0x2020009, 0x4, 0x10, 0xfffffffffffffffa, 0x8000) open(0x0, 0xc0000, 0x1) writev$auto(0x1, 0x0, 0x1) socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x16, 0x940, 0x1ffe0, 0x3, 0x6, 0x3, 0x9, 0x513, 0x8000000000fff, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x200, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) rt_sigsuspend$auto(&(0x7f0000000000)={0x2}, 0x8) socket(0x10, 0x2, 0x0) userfaultfd$auto(0x1) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) 3m3.749160929s ago: executing program 0 (id=566): socket(0x26, 0x1, 0x300) r0 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, 0x0, 0x440, 0x0) pread64$auto(r0, &(0x7f0000000200)='/dev/nvme-fabrics\x00', 0x7, 0x42799527) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) r1 = socket(0x0, 0x3, 0xb4) sendmmsg$auto(r1, 0x0, 0x2, 0xfd) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r4, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003500)={0x14, r4, 0x1, 0x70bd2b, 0xa5dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/irq/default_smp_affinity\x00', 0x2, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) syz_clone3(0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram3/trace/enable\x00', 0x2062, 0x0) write$auto(r5, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r5, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 3m2.935035871s ago: executing program 1 (id=570): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x0, 0xffffeffe, 0x2) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000000) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x0) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x3, &(0x7f0000000180)={@siginfo_0_0={0x80000000, 0x7, 0x8000, @_kill={0xffffffffffffffff}}}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3m2.634007747s ago: executing program 1 (id=573): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd10/range\x00', 0x70004, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0xe) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf01020000000000000004"], 0x24}, 0x1, 0x0, 0x0, 0x20044c51}, 0xc0804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x100, 0x0) sendmmsg$auto(0x3, &(0x7f0000000140)={{0x0, 0x9, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x1, 0x9}, 0x7}, 0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8800000008011, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000400)={{0x5, 0x400, 0x8672, 0x80}, "66ac010005010000009b5fd59000002000ada7e5ff81dcdbd3d2d9ff01b822f66eb624ad63110d61771574c03dce580002000000000000000b00"}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) ioctl$auto_UI_SET_PHYS(r0, 0x4008556c, 0x0) mmap$auto(0x0, 0x20009, 0x800000007, 0x12, r0, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xebd, 0x404, 0x10008000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) write$auto(0x3, 0x0, 0x100082) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x204100, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000480)='/dev/\x98@d)o2\x00\x94\x18\xdf\xc0\xcel~i<)a\x120^P\xcb{y\xbb\x1fh\x1b\x0eB\xbbt\xcf\x8cN#\xc2\x02\xac!\xa4\x00\x00\x01\x00\x00\x00\x00\x00\xb7\x8d\xe3\x93\xf3ov\xf4\x1c\xf9\x1b\xa9\xd1\xbcw\xdd\b\x93\xc3C6s\xf4a\x02\xf3\xd8\xc4\xe2\xf82}\x12\xfe\x00\x00r\xac\xc6\xd2+\xe2\x9bM\x02\x95dz\xb9\xb3]\xc5\xea2m\xf5\xe1\xbc\xc5 \xef\x9ae\xd3\xf8qb?Y<\xed\x88\x00\xbd\x91\x18\xe2\xa4\'k\xff]rqh\xadE\xd8 \xb0\xe5\xaf\x8ba\x85F\x1d\r m\xfc(\x1b\xd6\x1bE\x17\xcf^\x86r.\xc3\xe8Q\xeb\x7f2\xd5\xae\xa3m\x1bN\x80\xe7\x95\xa1\xc7\xcdX]\x8d\x13i\xa9\xf9\'\xe6F\x06\f\x8b\xcfT\xfe\x96\xa1s\xb8\xf1\x84[\xd1e\"Z\x12\x8e\x9b]V\xb3\x94\x15\x0ed\n\x03\x91\x9c)L\xe6Y\x06\xbeI\x1d\x91WcH/rj\xf8\xbcY\xaf ::w\xfd\x13&\xd6d`\x9b;\xbc\xadX+\xa3U\xb4\xa7*\xc2\x15,\r/Sw\xbf\xb3\xbdf\xd2\xa0q\x16m\xd6;K`\xad\x98P\xcc\x91\x90\xbci\xa4\x9da\x13\xc5\"S*($a G\xb1\xee\xba3', 0x100000a3dc) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000240)={0x60, 0x1, 0x87, 0x7fffffffefff, 0x0, 0x9, 0x54906bd6, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x6}) close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x4, 0x80000000) socket(0x2b, 0x1, 0x0) 3m1.703475092s ago: executing program 1 (id=575): pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, 0x4, &(0x7f0000000380)={@siginfo_0_0={0x3, 0x1, 0x8000, @_rt={0x0, 0xee00, @sival_ptr=&(0x7f00000001c0)="3dcc6d2aa8e243dce35b1d366a91dd7342569c3442489215992e5c6b57d2fce3a21b2984836d0bc54e63d11031b0ca36843d0e8d3e9700e527f6"}}}, 0x4) bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000240)=@bpf_attr_3={0x0, 0x3, 0x4, 0x7, 0x6, 0xd, 0x5, 0x5, 0x8, "83b6a24084b0bf19e60a1412500a9bdd", 0x0, 0xd, 0xffffffffffffffff, 0x6e, 0xc371, 0xf, 0x10, 0x1, 0x3, 0x6, @attach_prog_fd, 0x5, 0x7, 0x10b2, 0x0, 0x2a3e471f}, 0x101) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129c00, 0x0) ioctl$auto(r1, 0xb21064a2, r1) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x7, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40000, 0x0) getdents$auto(r2, &(0x7f0000000f40)={0x1000000000302, 0xfffffffffffffffa, 0x7}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7004feb1df25010000000c000300060000000000000044544c277b851a207336181df9183f916cbcb6e4c5cb7c2faef597a8bdd6403ef8"], 0x20}, 0x1, 0x0, 0x0, 0x20040880}, 0x4) getsockopt$auto_SO_BSDCOMPAT(r0, 0x8, 0xe, &(0x7f0000000140)=':%+,-\x00', &(0x7f0000000180)) sendmsg$auto_ILA_CMD_DEL(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x8e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14004000}, 0x4000) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r0) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)={0x1c, r5, 0x301, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 3m1.532081118s ago: executing program 1 (id=577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000980)=ANY=[@ANYBLOB="8c030000", @ANYRES16=r1, @ANYBLOB="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"], 0x38c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000002f80), 0x2, 0x0) fstat$auto(0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket(0xa, 0x2, 0x73) r3 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video13\x00', 0x20000, 0x0) ioctl$auto(0x3, 0xc0285628, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) r4 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r5 = socket(0x10, 0x2, 0x0) fstatfs$auto(r4, &(0x7f0000000000)={0x6, 0x5, 0x7, 0x1, 0x7, 0x2, 0x9, {[0x6, 0x1ff]}, 0x7, 0x1, 0x4, [0x0, 0x8, 0xd05b, 0x7]}) sendmmsg$auto(r5, 0x0, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) ioctl$auto_XFS_IOC_ALLOCSP64(r3, 0x40305824, &(0x7f0000000540)={0x0, 0x6c68, 0x61882d8f, 0x7fffffffffffffff, 0x0, 0xffffffffffffffff}) sendmsg$auto_NL80211_CMD_GET_MPATH(r2, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYBLOB="b8010000", @ANYRES16=r7, @ANYRES16=0x0, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00', @ANYRES64=r6, @ANYBLOB="a576de989fbc3995937a2e9dcd3443ebf15cfe5af58c6b2a4739a7df53f8154399b5c09c94330d69cd1ff0b8d28a5c9cdd94c2abcd6c2a5fcb3b3a420e0e2ca3f803a4e5f457770af886435bd512ef326a0a62891fc1da2a7ecd0b46733b5226cf6844cc756d3cf109447f2c19711064547c289be4acf29ef82b114c4f04df667ea08488881d88bc8af9e3954c83195b0031bfa415666ae51004e6c91227ff98be1d5e601be784f8d6b77d330d95abed18be0588d8a102902caeb63afce512829b226d92ad1879ae91e341a4bfdaf00ebdd603ea6646671b16de52a95549085cb68dff1ad454a3d44480c7c7cffbc0cdc92389126c40"], 0x1b8}, 0x1, 0x0, 0x0, 0x8041}, 0x801) r10 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000004480), r6) sendmsg$auto_CGROUPSTATS_CMD_GET(r8, &(0x7f0000004540)={0x0, 0x0, &(0x7f0000004500)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010024bd7000fbdbdf250400000008000100", @ANYRES32, @ANYBLOB="315efbdafac78f823ee007c8083aae8d5dadea7b00"/36], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8014) readv$auto(0xca, &(0x7f0000000040)={&(0x7f0000000000), 0x9}, 0x10) 2m56.35031059s ago: executing program 3 (id=598): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/devices\x00', 0x600, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28c000, 0x0) mmap$auto(0x0, 0x7cb, 0x4000000000df, 0x19, 0x401, 0x7f) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x9, 0x3, 0x7, 0x6, 0x5, 0x3, 0x2000000000230006, 0x4, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x6, 0x24, 0x3, 0x103, 0xfffffffffffffff7, 0x0, 0x0, 0x8000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x81) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x7ffffffc, 0xcf, 0x9b70, 0xffffffffffffffff, 0x1) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x642e03, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfs4.idtoname/content\x00', 0x181b80, 0x0) read$auto(r1, 0x0, 0x67b) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dri/card1\x00', 0x48000, 0x0) ioctl$auto(r3, 0x921064a1, 0x9) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video8\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000100)='\x00\x00\x00\x00\x00\xf2\x1e\xadp@f\x1b\xd9\xfb\xfa?$B\xcer\xec\xb2!\xdb\xd1\xcaA\b6q\xf6\x17[\xac;\xe9\xe5\fp\xef\xec\x1a\vt\xae\x86l\xb5k{\x0f\x9e\na\x02v\xe8/\xe1t\xcd\x9aT\xee\xbb\xb1\x04o\x8e\x13\'b\xc5\xf5\x03\x98\f:\x92T(i2U\x84\xbbW\']~\x8b,\x96\x12\xbb4\xfa\xb3X\x17u\xc2\xa8\x01\x92\xf3\xef^\x16w6\xc8\xb6\xe0Y\x01v\xb8\xe1\xcc\xb8d\x98\xdd4\x0f\x9f9c\xa5\xb9\x8d$&H\'\x9e\x80\xa0', 0x100000001) syz_genetlink_get_family_id$auto_cifs(&(0x7f0000000380), r2) 2m55.687350734s ago: executing program 3 (id=600): socket(0x2, 0x1, 0x106) ioctl$auto(0x3, 0x89a0, 0x38) 2m55.570546334s ago: executing program 3 (id=601): r0 = open(0x0, 0x591083, 0x402) ioctl$auto(0xffffffffffffffff, 0x64c5, 0xffffffffffffffff) ioctl$auto_USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000140)=0x91d) pipe$auto(&(0x7f0000000040)) socket(0x1d, 0x2, 0x2) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x604400, 0x0) ioprio_set$auto(0x3, 0x0, 0x4b34) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8081, 0x0) r1 = socket(0x25, 0xa, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) sendfile$auto(r1, r2, 0x0, 0x9) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x48080) mmap$auto(0x0, 0x2020009, 0x4, 0x10, 0xfffffffffffffffa, 0x8000) open(0x0, 0xc0000, 0x1) writev$auto(0x1, 0x0, 0x1) socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x16, 0x940, 0x1ffe0, 0x3, 0x6, 0x3, 0x9, 0x513, 0x8000000000fff, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x200, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3]}, 0x1fe, 0x81) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) rt_sigsuspend$auto(&(0x7f0000000000)={0x2}, 0x8) socket(0x10, 0x2, 0x0) userfaultfd$auto(0x1) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) 2m54.582304634s ago: executing program 3 (id=605): socket(0x2, 0x1, 0x106) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) ioctl$auto(0x3, 0x89a0, 0x38) 2m54.50150885s ago: executing program 3 (id=606): r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/ksm_stat\x00', 0x20000, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x410000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/peer_notif_delay\x00', 0x20502, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) rename$auto(0x0, 0x0) write$auto(r2, 0x0, 0x4) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) sendfile$auto(0x1, r3, 0x0, 0x400007ffff000) msync$auto(0x1ffff000, 0x4, 0x7cfb218c) r4 = fsopen$auto(0x0, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) mmap$auto(0x0, 0x4, 0x7f, 0x40eb1, 0xffffffffffffffff, 0x3000001ffffd) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r5, 0x545c, 0x0) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) read$auto_proc_single_file_operations_base(r0, &(0x7f0000000080)=""/112, 0x70) r6 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x0) ioctl$auto_EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000000)={0x7, 0x6, 0xfffffffffffffff9}) open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) socket(0x2, 0x3, 0xa) setsockopt$auto(r4, 0x4, 0x4, 0x0, 0x408) mmap$auto(0x1, 0x47, 0x4, 0x9a7e, r0, 0x5) execveat$auto(r6, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x24080, 0x0) unlink$auto(&(0x7f0000000040)='./file0\x00') 2m53.562408602s ago: executing program 3 (id=607): socket(0x26, 0x1, 0x300) r0 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) pread64$auto(r0, &(0x7f0000000200)='/dev/nvme-fabrics\x00', 0x7, 0x42799527) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1842, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) r1 = socket(0x0, 0x3, 0xb4) sendmmsg$auto(r1, 0x0, 0x2, 0xfd) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r4, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003500)={0x14, r4, 0x1, 0x70bd2b, 0xa5dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/irq/default_smp_affinity\x00', 0x2, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) syz_clone3(0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram3/trace/enable\x00', 0x2062, 0x0) write$auto(r5, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r5, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 2m49.133445818s ago: executing program 2 (id=616): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x2, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x4000002, 0x4, 0x7234}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0), 0x48}, 0x6, &(0x7f0000000180), 0x5, 0x1000}, 0x7}, 0x2, 0x100) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x8000000000000002, 0xeb1, 0x401, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x123002, 0x0) r1 = io_uring_setup$auto(0x7, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) close_range$auto(0x2, r1, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181942, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)) writev$auto(0xffffffffffffffff, 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(0x0, r2) socket(0x29, 0x2, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x55) keyctl$auto(0x5, 0xffffffffffffffff, 0x5, 0x5, 0x8) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/lockdep_chains\x00', 0x1c9802, 0x0) pread64$auto(r4, &(0x7f0000000380)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, 0x0, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(r0, 0x0, 0x0) ioctl$auto_XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000280)={r3, &(0x7f0000000480)="d4147dc27a9ae98efb184214dacf70f4833b0caba5709163ef475c5fcfd9477e8f605bc3a5a741a0579bc250df16610100c10a3a06d98bc6e6782f7f7c22006b8874ec7968739b1f00000000000000000000000000000000ec0d000000", 0x9, &(0x7f0000000500)="0c54893d92c8e14117e7c244a0e92136581e67e72bdc6a0bfb01a11234512364b048e46d75c95f7795f96638335e65b4cd218823f9da2b00d767022fa3d0741be61ba8386f7fd5a6af69cada86dfdeffac550e0945d29ae22f23b78b424ff4a3f6d591f36f73e0cc9f398b7b", 0x102, &(0x7f00000003c0)="9dabc5884762583f91511cb081057f79f6314d80849a1cadfb6ce5bc28c1008ce0241d57c4f0d4225556d4aa485271346170d5855fe78efcb782f814bb7ff6f88cf42653290d09c39460cca3482f59ffecd0feff4e651ab48bf3ec8dd0dec625bdd669dd599d891170e49a6104c7f1bad23d211b85c3a9fa8f0c2d0275abc0e0ef8c23e6c19103", &(0x7f0000000240)=0x3}) read$auto_ipsec_dbg_fops_ipsec(r5, &(0x7f00000002c0)=""/167, 0xa7) 2m49.005931808s ago: executing program 2 (id=617): mmap$auto(0x0, 0x10005, 0x1, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r0, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r0, 0x40046f41, 0x0) 2m48.778681697s ago: executing program 2 (id=618): socket(0x2, 0x1, 0x106) ioctl$auto(0x3, 0x89a0, 0x38) 2m48.685241999s ago: executing program 32 (id=566): socket(0x26, 0x1, 0x300) r0 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, 0x0, 0x440, 0x0) pread64$auto(r0, &(0x7f0000000200)='/dev/nvme-fabrics\x00', 0x7, 0x42799527) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) r1 = socket(0x0, 0x3, 0xb4) sendmmsg$auto(r1, 0x0, 0x2, 0xfd) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r4, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003500)={0x14, r4, 0x1, 0x70bd2b, 0xa5dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/irq/default_smp_affinity\x00', 0x2, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) syz_clone3(0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram3/trace/enable\x00', 0x2062, 0x0) write$auto(r5, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r5, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 2m48.673323818s ago: executing program 2 (id=620): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x0, 0xffffeffe, 0x2) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000000) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x3, &(0x7f0000000180)={@siginfo_0_0={0x80000000, 0x7, 0x8000, @_kill={0xffffffffffffffff}}}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m48.586622836s ago: executing program 2 (id=621): openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/netfilter/nf_conntrack_log_invalid\x00', 0x101202, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/conf/netdevsim3/arp_ignore\x00', 0x202, 0x0) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x40, 0x40000e2, 0xeb1, 0x401, 0x8000) getsockopt$auto(r0, 0x84, 0x73, 0x0, &(0x7f0000000100)=0x99) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x7a) socket(0x2, 0x1, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0x100, 0x1, 0x9, 0x3, 0x95f4da30, 0xc, 0x8000000000000000, 0x62, 0x400000000000008, 0x7, 0x6d3f, 0x1, 0x5, 0x5]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/version\x00', 0x101243, 0x0) open(&(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x103040, 0xd1) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x101600, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$auto_VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000002600)) 2m47.576827744s ago: executing program 2 (id=622): socket(0x26, 0x1, 0x300) r0 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) pread64$auto(r0, &(0x7f0000000200)='/dev/nvme-fabrics\x00', 0x7, 0x42799527) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) r1 = socket(0x0, 0x3, 0xb4) sendmmsg$auto(r1, 0x0, 0x2, 0xfd) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r4, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003500)={0x14, r4, 0x1, 0x70bd2b, 0xa5dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/irq/default_smp_affinity\x00', 0x2, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) syz_clone3(0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram3/trace/enable\x00', 0x2062, 0x0) write$auto(r5, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r5, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 2m46.375315987s ago: executing program 33 (id=577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000980)=ANY=[@ANYBLOB="8c030000", @ANYRES16=r1, @ANYBLOB="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"], 0x38c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000002f80), 0x2, 0x0) fstat$auto(0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket(0xa, 0x2, 0x73) r3 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video13\x00', 0x20000, 0x0) ioctl$auto(0x3, 0xc0285628, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) r4 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r5 = socket(0x10, 0x2, 0x0) fstatfs$auto(r4, &(0x7f0000000000)={0x6, 0x5, 0x7, 0x1, 0x7, 0x2, 0x9, {[0x6, 0x1ff]}, 0x7, 0x1, 0x4, [0x0, 0x8, 0xd05b, 0x7]}) sendmmsg$auto(r5, 0x0, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) ioctl$auto_XFS_IOC_ALLOCSP64(r3, 0x40305824, &(0x7f0000000540)={0x0, 0x6c68, 0x61882d8f, 0x7fffffffffffffff, 0x0, 0xffffffffffffffff}) sendmsg$auto_NL80211_CMD_GET_MPATH(r2, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYBLOB="b8010000", @ANYRES16=r7, @ANYRES16=0x0, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00', @ANYRES64=r6, @ANYBLOB="a576de989fbc3995937a2e9dcd3443ebf15cfe5af58c6b2a4739a7df53f8154399b5c09c94330d69cd1ff0b8d28a5c9cdd94c2abcd6c2a5fcb3b3a420e0e2ca3f803a4e5f457770af886435bd512ef326a0a62891fc1da2a7ecd0b46733b5226cf6844cc756d3cf109447f2c19711064547c289be4acf29ef82b114c4f04df667ea08488881d88bc8af9e3954c83195b0031bfa415666ae51004e6c91227ff98be1d5e601be784f8d6b77d330d95abed18be0588d8a102902caeb63afce512829b226d92ad1879ae91e341a4bfdaf00ebdd603ea6646671b16de52a95549085cb68dff1ad454a3d44480c7c7cffbc0cdc92389126c40"], 0x1b8}, 0x1, 0x0, 0x0, 0x8041}, 0x801) r10 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000004480), r6) sendmsg$auto_CGROUPSTATS_CMD_GET(r8, &(0x7f0000004540)={0x0, 0x0, &(0x7f0000004500)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010024bd7000fbdbdf250400000008000100", @ANYRES32, @ANYBLOB="315efbdafac78f823ee007c8083aae8d5dadea7b00"/36], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8014) readv$auto(0xca, &(0x7f0000000040)={&(0x7f0000000000), 0x9}, 0x10) 2m38.043964747s ago: executing program 34 (id=607): socket(0x26, 0x1, 0x300) r0 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) pread64$auto(r0, &(0x7f0000000200)='/dev/nvme-fabrics\x00', 0x7, 0x42799527) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1842, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) r1 = socket(0x0, 0x3, 0xb4) sendmmsg$auto(r1, 0x0, 0x2, 0xfd) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r4, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003500)={0x14, r4, 0x1, 0x70bd2b, 0xa5dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/irq/default_smp_affinity\x00', 0x2, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) syz_clone3(0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram3/trace/enable\x00', 0x2062, 0x0) write$auto(r5, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r5, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 2m32.425927476s ago: executing program 35 (id=622): socket(0x26, 0x1, 0x300) r0 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) pread64$auto(r0, &(0x7f0000000200)='/dev/nvme-fabrics\x00', 0x7, 0x42799527) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) r1 = socket(0x0, 0x3, 0xb4) sendmmsg$auto(r1, 0x0, 0x2, 0xfd) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r4, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003500)={0x14, r4, 0x1, 0x70bd2b, 0xa5dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/irq/default_smp_affinity\x00', 0x2, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) syz_clone3(0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram3/trace/enable\x00', 0x2062, 0x0) write$auto(r5, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r5, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 2m4.059239357s ago: executing program 5 (id=705): r0 = open(&(0x7f0000000000)='./file0\x00', 0xa09c2, 0xa4) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/i8042/serio0/id/id\x00', 0xa000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001100)=""/4088, 0xff8) ioctl$auto_SNDRV_PCM_IOCTL_STATUS322(r0, 0x806c4120, &(0x7f0000000080)={0x842a, 0x8, 0x3, 0x6f, 0x8, 0x6, 0x3, 0x8000, 0xffffffc0, 0x4, 0x3, 0x0, 0x9, 0x24, 0xffffa3a4, 0x5, 0x800, 0x8, "35706cd3a8cc5a03c9cf9fe65772cee665eabb4c5c8db48c889aa19e4a6e942817ed6987"}) socket(0x2, 0x801, 0x100) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) sendfile$auto(0x6, 0x3, 0x0, 0xfffffdef) close_range$auto(0x2, 0x8, 0x0) 2m3.601720497s ago: executing program 5 (id=709): r0 = socket(0x1d, 0x3, 0x1) r1 = getsockopt$auto(r0, 0xb416, 0x100, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000767d08073e516e328646a48d3daca4a893172f656e68ba59d9faeaecd0cbfa37cc21131b6fc30cf8517912eb968271c6caa92d11000ca0eb5ebd783c", @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf250500000002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000010) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'macsec0\x00', 0x0}) sendmsg$auto_NL80211_CMD_CONNECT(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0xc4, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x34, 0x84, 0x0, 0x1, [@nested={0x18, 0xdb, 0x0, 0x1, [@typed={0x14, 0xdf, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @typed={0xc, 0x5b, 0x0, 0x0, @u64=0x5}, @typed={0xc, 0x121, 0x0, 0x0, @u64=0xca2}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_SUPPORTED_SELECTORS={0x74, 0x14e, "4073021d170f4fad9e197aa4f9fa54566204348cc4f0fbcb98c348d180a839fe5b6e1e6880c966b0e03d70ed192fd68286733b8136ff4124d1bc11869328880aad47d29899dfbdf28b2c09b499455139fb2028c23691a4ee6ef04a7003b0bd3362c03b583482c299e8c45b7af02ae719"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20040041}, 0x40) 2m3.299024612s ago: executing program 5 (id=710): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) write$auto_proc_pid_attr_operations_base(r0, &(0x7f0000000ec0)='9', 0x1) open(&(0x7f0000000000)='./file0\x00', 0x22240, 0x61) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(r1, 0x89f3, r1) mount$auto(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2800f, 0x0) io_uring_setup$auto(0x6, 0x0) syz_clone3(&(0x7f0000000400)={0x2d5035500, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r2, &(0x7f00000000c0)="621c1bfe595046ab5c98199adf6ad9cdc5b2fc8d6d76e6021e1dcedc5f00e8fdffff00c291dfb4000001bf9f34dc422231cf4d40d401d5f8", 0x38) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$auto(r3, 0x0, 0x39b8) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xffffffffffffffff, 0x5602, 0x1) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, &(0x7f0000000140)) r4 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x0, 0x0) r5 = dup$auto(r4) ioctl$auto_ECCGETLAYOUT(r5, 0x81484d11, &(0x7f0000000340)={0x101, [0x101, 0x1, 0x80000003, 0x3, 0xa, 0x5, 0x1, 0x5, 0x808f, 0xe, 0x5, 0x7, 0x2, 0xf, 0x57, 0x8dbc, 0x7, 0x7, 0xd1, 0x72944006, 0x1, 0xfe54, 0x0, 0xfffff645, 0x9, 0x6, 0x9, 0x80, 0x80000000, 0x8dc, 0x4, 0x8, 0xfffff0bf, 0xa, 0x575e6e2c, 0x101, 0xff, 0x2, 0xffff0000, 0x3, 0x71c7, 0x1, 0x8, 0x90, 0xfffffffb, 0x7, 0x3, 0x5, 0x200, 0x100, 0x71d1, 0xffff, 0x9, 0x8, 0x8, 0x3, 0x2, 0x81, 0xe, 0x17, 0xe0b, 0x1, 0x0, 0x57a1], 0x6, [{0xff, 0x6e14}, {0x9, 0x8}, {0x4d1, 0xb9bc}, {0xe, 0x8}, {0x4, 0x24}, {0x1, 0x8}, {0x1, 0x1ff}, {0x1, 0x40}]}) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000) 2m1.897717582s ago: executing program 5 (id=713): r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r1, 0x80083314, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) shutdown$auto(0xffffffffffffffff, 0x2) r2 = socket(0xa, 0x1, 0x100) r3 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r3, 0x0, 0x7ff, 0x400) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x1, 0x7, 0x1, 0x8, 0x1, 0x1]}, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/kvm/mmu_flooded\x00', 0x224000, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000000640)=ANY=[@ANYBLOB="00000000bad531446a52935eb6e5ff6e7fa01801a895d8c32cb58fc3a90190366652958384d4722b68da93f75ce4b20dda49e75acf59d8e14bc6778c1ee2aad3398ef284e0a74117cfcf5b1c9688eb30b49a591771cbccf897f6e9c5dd60944fe8b5f2b17d199d51fb2edea63cedefc5e173cdf17a40b4935b6bfa0c9800724b79691d087f535ebcfc3848c83ca3f51dacb5af1af4efac8f87df506ff214f0d4972850745697bd62bbffc4f93cc773ea4779190dc1cdb86be72a391640bd7c5e816238a1438850a9bff1", @ANYRES16=r5, @ANYBLOB="010628bd7000fedbcf25040000001c00018015000900ef6735f5058af96b26651160dfbb140872000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r2) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x288, r6, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x2}, @NL80211_ATTR_MAC_ADDRS={0x254, 0xa6, 0x0, 0x1, [@nested={0x4, 0x148}, @nested={0x1c, 0xee, 0x0, 0x1, [@typed={0x8, 0xbe, 0x0, 0x0, @u32=0x7}, @nested={0x4, 0x45}, @typed={0x7, 0xcb, 0x0, 0x0, @str=',#\x00'}, @nested={0x4, 0x44}]}, @nested={0x131, 0xd1, 0x0, 0x1, [@typed={0x8, 0x11b, 0x0, 0x0, @ipv4=@empty}, @generic="825a42", @typed={0xc, 0x83, 0x0, 0x0, @u64=0x2}, @typed={0x4, 0x151}, @generic="3e76c13674944b95fb2455954f2f6bd78bca5b47a107869853f745d6a8f69fcb6c9d48a4ca7161f35b13f078111c12dcd92e4384006ef4f469ea589c2c677b1c70bbdd1bba086c7e7a6dc287f125e3d2968a59d9fcb5c4a42dc95e40e4b783631ba78da66c1ba417092447b910c232fe6846132b207d66bf9a74", @nested={0x4, 0x32}, @generic="e6fe226f201899e803408886dba660b5f1c54639884c5eedd064dccbe00675b671a4e0705f53d56e059c817fd3e7bb2a008078e9854e6c78ade23633b87ee06a3333c6dabac20a7019cd59b45158d9793212ad476f953836f6673417e2f5f4e78f81671e82ddf8075fcc7c24b8a3c37bf8691f354a6111ac1dfe9cfbfe93d8420921a45d9519fa4489229cdac76768e4cf83a346"]}, @nested={0xfc, 0x101, 0x0, 0x1, [@nested={0x4, 0xda}, @typed={0x8, 0xb1, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x8, 0x126, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x20}}, @nested={0x4, 0xd6}, @typed={0xda, 0x105, 0x0, 0x0, @binary="a4bdcbeb282d289e1f4b10e12d8d59d703af506e4626df246cdbd0ab71d9aa6833d34fe5096129543cc4307b5748b58def31ec86bf8ac81cb5e500083157101177b985bad626a420971a3dc0460bea74d45de70223de0ad4bb8e2ce627425331908dfb7389ba9fa5ef44572065706f1a6a56504f63e356ac89b29500ebf2213f7821fdf034fb1246ed14fc9aca6a4003dd26c3046a7775fb200e440dfb157a01c7d8d126b7886ff8033a269e0d6423bf16b68f5c8588747fb9b3c0d7ca9a92f8c0ed8bf66df79e21f0a7d97305bef784cc901d912989"}, @nested={0x4, 0x4e}]}]}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x80}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x4}]}, 0x288}, 0x1, 0x0, 0x0, 0x20000004}, 0x24044044) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) socket(0x23, 0x80805, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r7, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x0, 0x20200, 0x15) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) 1m59.01598043s ago: executing program 5 (id=724): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x0, 0x9, 0x800000000df, 0x9b72, 0xea8a, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mmap$auto(0x0, 0x9, 0x2, 0x9b72, 0x2, 0x8000000000008000) socketpair$auto(0x2000100, 0x5, 0x5, 0x0) open(0x0, 0x22240, 0x155) ioctl$auto_USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000100)=&(0x7f0000001ac0)="bb1c0275543a8d4904858fad76de7e200b87ed58dcbe46cddfd2fa6504b413ab50506d2497e485a0a7ac50c6e65a34aebd41fbd54ec788e316e8ed02b97646237d316806c4d5477f05867b57719ac466edcad14aad7b8b2f978762162f946126875efc38143808d92af72cc903fba7ddce2e164e86d37fb5a5985b6962deec257b5013ecb9859057ad6f9306d1631e75bdfabc1b9c5c71f837e774dc7027f43a4d9665c3b017d159d68a96e0b89458ab0de0736c288bce81688d0d4b94920ac9b416fec3ec531b2a6400ca4664ea7ed27beea9adee4b61d424fea7272e35e3e7b8559b75f0219a8160eb285f44a66b184804df4a103fbfa8225c9be8aa710e508b86ec2687c6523363955e8a74dfc965f07c924b8f6e33130ad289c804ba8eaea607f10d6f94f0636e188446243d70829b39b22b1e5dd34a684083f86ab7929214f259661efc5a67396e02e23ec52d11a9fcf62a950f1269f6c9795999a4768162ba5da9eb7bdd0bdab9411705b6af990594ab139c7fd25b927b0df5215936ce7c7113eef2a0f34f103b73d03faf9913e8723b7fe9d78d8e394a315a4133cf02d2a1040411a4d1cc031a23bb9fbd20929ac0519cefb93740526754db24b600e869dabcb98a7a5f44254e9f8b792e086d79ab1acfb5af89520567448ae3e518390b0750e512b9d37abec8ac9b2e62544bf4bd6d888b51c4ff9c233263e6d68f4d5969bc9d8e24fa0c24731c35d42e7e323007baf6011eb9499f650be8d1ba7a837d9c77d6549ff962f7e3782298d89524bea7ebd4659c822d1629190ed08e1206f04d9b516788de86f7ddedfbdcdb250198789b66fef84dd9135d392d531200e82eab724a64225816ef8576f03717c48209501339683249bcded51e46cc1961ffe972b943f821207a08e342f4505507f30f784761b67a840a37fe3e2c4785d216455179ff5431569315b5a2a2f40699bccca3ecb17f9dd468536630525000e3a7f096f865d5f89262377f3057d6cc93ce167f28428c092f04dc81b8026a665384be8c98d455450736c2996d16ee015ad633c723ec4283b10b6233a51cc3239ca1e25a811da05dab9b8a3303ebf73f829d2dcdd6e4285ca5639a32beb0c8dff733482fcba64a1c481d4a69ab70d24f8cf572264a6622b6741d609e0aa7587cbf4e79591ddbf5001de3183f885eb43ba65a0ad097ac90263101e393c5986cea2cb087849f232c502cb16f71e7ae0d1c78f165c0f702b8983663e9794e7babc6c66b89fb5e82ce5895b7d5621b43833d9bfd389c9ed8a0cb6c88ba8bdbacace3e71ce569de655e10e2bd7939e07cf274977c133b7b0e0f669a4d5c8f0e3c476a88fc772a4dd72c5da8af21957d3508ff9ae83c9caa94e5a85425dd457552b10c9a0f3f296e1be3805840405051f8b103793cf6f90b81ace3d44081f4f3ae49bd042d7837cc34911450b52585ee44d9e4b6366234f771d6d89dfd03de0e28a1f827ec77ea86605e87a0cbb13abe38dfd04d70df63ff8055d36e4d858ff48f56eb8997fcc20c5c1ff63033e60c3a3909acc8b40be7e2a82dbaffba074ba26f35448900c4c76d25d08b335674ffc89ac6eb1c5cb8417ba141e59acc167b5ab86888a0f58ddc974ca2b2fa2d46629be65440ea841275cfc31f5086abe1ef70ecd296438c4bd4ed05607f526366a886b787d1e47f9581cfdc5eabe9f51ab267348ef25dc5288686e031677d8ad2d37f46530bed914d8b63b5097519878440db4a4e6afe845bf6dfa2b605225c082039c5a7b900aa87878b2495678a903f7e7d997e841abf8d6ff960b30277eaf52497e7b4e37ad1d164e94bd2657ca41b55d73e45bd8ca6cd5b9acc69693bd47d3336e5f434c63e6ca02c136a8e8c7d4c6a3c289e32540bfd773755c55c0931e7f2a5e391b1c2bc5f1fae4fdfd10192668b29fd5da54eaa0f8c058305d8558aee0a369aaeb7e1b7ce9aab958276eecd8933b0917abd1e658c83e8c5bd8903e436c2eb2d08f57d121cd742b90217cf5bcc5109f362148e64de2f50c5c33d349eeb694e252879f14e5ce3807e2c928136f62c40f3a2b3816c0435a4fb2d8b5c59670260755107e4c2851f883f7867ca6703204e2b0d1a76768dab0d320e9f2defe9a0835f87ea683720f9ce806e238edde7e3cce6a98ed5e61465ece934782503c920fa6f0e15002dfa087e08c74d50d3790460de523cdff1fb1e3c15a87b149e39998be03ddfa6c94277f07f74bd8e191af285e7f28f440668dabc1093c2cfccce9e63ee2c186e4b0509f9e3389a9d8a25daa1eea095de3af42b543f633086271855cf03e214dcb0de06fddc5ba3d65868fd33d792d6a359a154fb0a1d2341a008476b8f61c72efdc88b033e992cd788732a514119918c7ad5283362b0334ab568078b12a02bc99a4bc1d87e80c3f83be98dd98369b27ab515ca0850095fe8f535bfc706debf1039ae7fd6e6e1c75772d4c2bbc9fdf1fd719f1c6c2af1739511c99e07a36bf79e89eb5d6f2d82954a0ede5a8d56f5cb76b30b0eff2fffc186f5856d9b54b78e0e6b68e3424a941e6d3fb6315489626bdb29b481e9af7044d823a7f94bb4e93fce2c7d5fd4468bc20299df15e3da4b3c6301bf221aa7859619963954b82da1f33acb8df3fe52781e520e4a4b37e17346d7fcbaff69ace6af8493aebcc256d11a66af9fde7726a5e0d4a17df09314c06ebba90c78d367459678538c9fe3280c59150fface686599a9a18e0b457009c2b6d32b7500e1c99aa25dbe7a180de3f2db4eec9a83771333b2c6b1419105e8b8eed6d8265144de56d54de6462028883a4b694850c1608bc6f82d7228e65041c4fd249dbd9645946fe4ab8d35bfefc3be7b031948e2d66f41c0ce6262d3926ab7fa5c7db93c22326ab73335782c7fb5cfe61ad3968b8c2bc180f77d21c6613e0738fa12a10ddf6fd6f077d44216a6a590462e60483cc062173bacdb44f52458ce60b65cd78a91e2e5b8b2eb3963746bc5b37383fb8ea289ca1474007a053a62bb77d94e317add33ca9d221c2e45ba46f77474d105390730fa3683fe980f9a1592b10c61cddcf320a1ba7e0d3b09d1d1f36737fe21fcf84824d4af92461287d5b8505f7deab6defb2768766f2c6e339c213101d9356ee31964382d82991b07ae78d0164318eec3da43b9d9df061095e7fd949fb4df242da0812c2eb6e379f7ba5edea50b9c4bcc7dae089936ba9476b209f3fbed28c1d4dec1466c1fb8870108554bf5d9417c4486a28c763669ede533958094a83e91baa2f662f21dc351afe968499c309e9fdc968baa762d3de8cd40fd1872a89277f3c1372d634c97fde0a4968db7cd7db566b1d5ad4c767a4b9990506de9a2b947b8147730c79046c6b969373c677e91fabda24b5109f96e1659f1f0cae2423273c5725137ddd84e82ce1db1d29d2853eee97875d25a2af7e4c3835561de89c1a1227fe3a3535d221fe31c0d5669f7203ca47ddf3e6ae9e6ff3f28c8f21ced70e808561a7a76c0ba6450a6e3f92dbcd89f1bcac9e8cbdc3f5c71d9c8df80b5218f1569bb185b56cf99255555b83eac2db38b7337fa80bb56c6a2031374eea0d905b165265096a47b2a9d3868dc1f70ed0a8a6f811e05e737c66af3e4a337905cb9907738693db7c86ed69e216b59bbf9837011784449383debd9ea34d291edf2fe2ba38fb81c9f148e2a923d22b5303ed70b63a5e2bb990b86c09e1f9aa700b05424a872a40fae490cb6508aaceba2dedc7922cbab663fbdc57c88505110fe0a1e267f2243cf2bc0d054612aeadc834f11e39b62c90c1feff4285e63e033e665135000b322ad9e201c3c92e40bbeb61452840838958f8dc1978aa8d081da6485c2c66e92533ee5ef2161fb9fa2404d674e1bd2f43c97a40575aa481b57cb32f5e0d015014de763ebd971048bd5414e9115afb6233925965fa06a18bd8cb660a826fbb047e78dc7cedd9c5a5473f1d856b800d9ce9cbfc313aec7bf6a6ab554dfd123efa7aea19e033f75e3c4fae7507e2094d430124844c85d55d333c12038df2623f13ea7fb2cb235a638c9dadd2e39be7bdaab28eed7338a4033853810def113b6cca9120173200c8f15e91573e87df4dac734e9db799b2e3f4bd11e542a34997e7085bdc92a906dafe5d2ed82ae9ee6b5b12a99710c138d10527a9d926ffb43d31ac9c615a31ccf99bfec1baeb19bccc526aeff9827e9b9ac8dffcdad77fdcc66fc39ff25d5537a01c2e438ff6c5f426411c09b4dadfb491251c582e473c12dc06d0ad114e527d4925c1bb8801e21de5845e75b78de48af5dc766695e02f0b494935a779748b543bd786f2683d69d4ca4daeeb1d074c60e06644d706162c15f0f1b53445d7a286355aab897268ef3fa9cedd8728be0fa75183dc244b008df948a4fec8b6918ddedb3aa8b726d4eeb6b995aecbe6251f35539baacb77ab633ea24a22a42cc6901d1c3a90fa4a9fee87c8237ebaefa393a8b0074b921a5d0a20e6b133072a1a4e771cc61b72ad94dada4aaf7b5cef607166a58e4b763da74adc989446a4738859a3d1f4d7530cdd14706a678fd845f202adc6db859931c5e05bf7438cbbdade1349f0a363aea708c5377ef32a89f3ee39bd0035114f4360a8a85c287558fc60d7e50aa3c3ca2063485a5c8233617f003da4f32f63d4e9ee53272df0b6795f999fb854141d2241f735474bdcc28ea0458e040ec8ef94a8b089863bb362d2d97bf952709a5078dbdc8b0dd320357ebe963f0d3ab700283ca1b6ec30f9d3bbfd677ba6c7aa4130493421e8f4aad891222c9b94806703741d21674e71be0427985312f8faf8d2e9d90d16f34c3f23fea05df18c9902d14c5f988cf0c6b29e68d4dfd78af6ec46ea07224f137e29c2579b669013d44ff23d863b974d196e99fb0fba93dbca321be9492133229a3356c581e6c10db71a586850ebee4fdd3508bfef8802dbaf257cecd7c9952df86a921a637491074ebdb558e15a526d2e774f071cacf514ab5d53f96a3d5f13f37ec20c69bda9a8ea325d9cf11017858bf91ea4bba0cd2730e1f12ebff39b1f7988d0a00bde352a712400f809c1d3fbb71f6cc4ec058d3e102d1c6f9b6ea4bfc757bd17ada9208a778ce27ec007ff5714a3dd46cd01037832fc62982a2ecfac609f7f8b39e1e261733e10d720683f6b222a525215bd70c77c17696bb17706218c1099212ed4b3f35f4fcfe8f0052317e4f17379d642e436e7349c53a53ec826bfa439c716e487391ed31091ea951b87b86cf288f929457b5e8d07290264e240e2c82a70102effe76774fd9394bc5fd57cbce7739c21f3dd38580493084f73a6734bfff8538320b2e2eac79739e1fa7bef3b71bc24a1fbbddd6a3052fdcc24ad1ca9c43e679e039a92e6c38190a509e7b84a133594c3618badc1855a7a058081fd0bd15496ce4e9402b68b22e4904f9262f634bb8e1f2835dde4c2b800def942eed19960a315c29d63216c6fd0341700d84cb0a988758e3b3e4b5712d218624be948154c56faa5f6a796c15c767d45ed9d1718cf24c99a3675806052de55bf8b47f4a8f2a7a3b17f905bac021c3b0d41e4fef3629d2827348dbfc8abc57b02f6481a70220015401efdf75cd9056c1b09209350273e828b4ed3500359d60c7e1032910e14a584bdd5e26201144a79b3640ee6efc2d33317fad04a5ed6a0abafac1490bb87d19dbe8ce01994642b85303a5901b4c4c82b1e17af29c4deb978f568a5a1931d22c4c5c00ddf97b68e95194e0ba694d3e8fb69ddccbed01cb2d3c") ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x400000b7, 0x400, 0x2}]}) mincore$auto(0x0, 0x8000000000005a, 0x0) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) capset$auto(0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) io_uring_setup$auto(0x7, 0x0) prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/cmdline\x00', 0x60502, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m54.998125945s ago: executing program 5 (id=732): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_steam/parameters/lizard_mode\x00', 0xc0481, 0x0) r0 = open(&(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', 0x84842, 0x91) read$auto(r0, 0x0, 0x1) write$auto(0x3, 0x0, 0xfdef) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) writev$auto(r1, &(0x7f0000000180)={&(0x7f0000000080)="3af6b96a4c1220ad", 0x10}, 0x7) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r2 = setfsuid$auto(0x0) setuid$auto(r2) ioprio_set$auto(0xffff99af, r2, 0x7) shmctl$auto_IPC_SET(0x200, 0x1, &(0x7f0000000280)={{0xffffafd2, 0x0, 0x0, 0x9, 0xa62a, 0x5, 0xc8}, 0x17c00, 0x5d7e30e3, 0x9, 0x6, @inferred=0xffffffffffffffff, @inferred, 0xf2d, 0x0, &(0x7f00000001c0)="3e8507cdafcafd89963bd4e1486b1982a8abdb3b89047e56726eebbac7219df32f8417d2ec51ace69d08d02b1c341d3abe4b9fa527a657e945caf22c7c44b4cc74586045c82bda4686367a", 0x0}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000440)={0x0, 0x7}, 0xc00000003) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_STATION(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000c040) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000fc0), r5) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001040), r5) sendmsg$auto_NL80211_CMD_NEW_KEY(r6, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000340)={0x24, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x864) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000240), r6) r8 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x2082, 0x0) write$auto_drm_edid_fops_drm_debugfs(r8, 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4dcf14a44bc57730}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x4c, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x21, 0x13, "aff0b808622e22f0f3c9730fa5fc9601a066167ca20b34b12611f43202"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xd375}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 1m39.695846589s ago: executing program 36 (id=732): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_steam/parameters/lizard_mode\x00', 0xc0481, 0x0) r0 = open(&(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', 0x84842, 0x91) read$auto(r0, 0x0, 0x1) write$auto(0x3, 0x0, 0xfdef) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) writev$auto(r1, &(0x7f0000000180)={&(0x7f0000000080)="3af6b96a4c1220ad", 0x10}, 0x7) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r2 = setfsuid$auto(0x0) setuid$auto(r2) ioprio_set$auto(0xffff99af, r2, 0x7) shmctl$auto_IPC_SET(0x200, 0x1, &(0x7f0000000280)={{0xffffafd2, 0x0, 0x0, 0x9, 0xa62a, 0x5, 0xc8}, 0x17c00, 0x5d7e30e3, 0x9, 0x6, @inferred=0xffffffffffffffff, @inferred, 0xf2d, 0x0, &(0x7f00000001c0)="3e8507cdafcafd89963bd4e1486b1982a8abdb3b89047e56726eebbac7219df32f8417d2ec51ace69d08d02b1c341d3abe4b9fa527a657e945caf22c7c44b4cc74586045c82bda4686367a", 0x0}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000440)={0x0, 0x7}, 0xc00000003) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_STATION(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, 0x0, 0x4, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x2000c040) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000fc0), r5) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001040), r5) sendmsg$auto_NL80211_CMD_NEW_KEY(r6, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000340)={0x24, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_CONFIG={0x4}, @NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x864) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000240), r6) r8 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x2082, 0x0) write$auto_drm_edid_fops_drm_debugfs(r8, 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4dcf14a44bc57730}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x4c, r7, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x21, 0x13, "aff0b808622e22f0f3c9730fa5fc9601a066167ca20b34b12611f43202"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xd375}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 1m38.246167157s ago: executing program 7 (id=777): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) io_uring_setup$auto(0x0, 0x0) socket(0xa, 0x3, 0xff) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x3f) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x96141, 0x0) r0 = socket(0x10, 0x0, 0xb20) madvise$auto(0x0, 0x2000040080000003, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x10d001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10006, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) sysinfo$auto(0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x4040400, 0x0, 0x58, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x801, 0x106) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r1, 0x318, 0x401, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) syz_genetlink_get_family_id$auto_nlctrl(0x0, r0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/midi0\x00', 0x121040, 0x0) pread64$auto(r3, &(0x7f0000000280)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\xc0\xf8\x01V?\x0f\x11\x90^\xdf/\x84\x99!*\xe3\x99s\x81Q\xca\xeb\xee.\xe3\x85\xcd\xd0\xae!\x9fl}x\xd4\xa5D\x16\x94Ip\f\x96\xb8\xfa\xe5\xf9odtQ', 0x87ff, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 1m35.315772175s ago: executing program 7 (id=782): madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) dup$auto(r0) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = clone$auto(0x6db, 0x9, 0x0, 0x0, 0x6) migrate_pages$auto(r1, 0x4, 0x0, &(0x7f0000000180)=0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x101, 0xffffffffffffffff, 0x3, 0x62, 0x5, 0x7, 0x6d3f, 0x8, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa73, 0xd, 0x801, 0x958b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x6, 0x2, 0x10000]}, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x3, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x6) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0x3, 0x6, 0x4, 0x9b4, 0x9, "0800aafc241cd010c7543bfbca2ce1", "0200", '\x00\x00 \x00', "2ff43123", ['\x00', "f8ff0b00fbf2ffff0000b401", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]}) sysfs$auto(0x2, 0x23, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x1100) write$auto(r2, 0x0, 0x4) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x1) 1m31.830409953s ago: executing program 7 (id=786): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000) r0 = socket(0x1d, 0x3, 0x1) r1 = getsockopt$auto(r0, 0xb416, 0x100, 0xffffffffffffffff, 0x0) r2 = open(0x0, 0x14927f, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x40086602, 0x0) lstat$auto(0x0, 0x0) ioprio_get$auto(0x5, 0x0) mmap$auto(0x0, 0xd2, 0x4000000000df, 0xeb1, 0x401, 0x80000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000600)='/dev/audio\x00', 0x20000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000767d08073e516e328646a48d3daca4a893172f656e68ba59d9faeaecd0cbfa37cc21131b6fc30cf8517912eb968271c6caa92d11000ca0eb5ebd783c", @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf250500000002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000010) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x103, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) madvise$auto(0x0, 0x400053, 0x9) r6 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="d3c809000000fedbdf2502000000040002000400048008000100f8ffffff04007bde77fc43d23501131e78b8409bb852061b63e61c71"], 0x28}, 0x1, 0x0, 0x0, 0x4000014}, 0x8080) madvise$auto(0x0, 0x9, 0x2) sendmsg$auto_OVS_METER_CMD_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x44, r6, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0x5}, @OVS_METER_ATTR_USED={0xc, 0x5, 0x6}, @OVS_METER_ATTR_USED={0xc, 0x5, 0x6}, @OVS_METER_ATTR_USED={0xc, 0x5, 0xfffffffffffffffe}, @OVS_METER_ATTR_KBPS={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004811}, 0x4040010) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'macsec0\x00', 0x0}) sendmsg$auto_NL80211_CMD_CONNECT(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0xc4, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x34, 0x84, 0x0, 0x1, [@nested={0x18, 0xdb, 0x0, 0x1, [@typed={0x14, 0xdf, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @typed={0xc, 0x5b, 0x0, 0x0, @u64=0x5}, @typed={0xc, 0x121, 0x0, 0x0, @u64=0xca2}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_SUPPORTED_SELECTORS={0x74, 0x14e, "4073021d170f4fad9e197aa4f9fa54566204348cc4f0fbcb98c348d180a839fe5b6e1e6880c966b0e03d70ed192fd68286733b8136ff4124d1bc11869328880aad47d29899dfbdf28b2c09b499455139fb2028c23691a4ee6ef04a7003b0bd3362c03b583482c299e8c45b7af02ae719"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20040041}, 0x40) 1m29.299099945s ago: executing program 7 (id=791): mmap$auto(0x0, 0x2000c, 0x7, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, 0xffffffffffffffff) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x400180, 0x0) r1 = epoll_create$auto(0x7) epoll_wait$auto(r1, 0x0, 0xe007, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/sessionid\x00', 0x40000, 0x0) socket(0xa, 0x2, 0x88) io_uring_setup$auto(0x6, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000036c0)='/proc/sys/net/ipv6/conf/xfrm0/stable_secret\x00', 0x2000, 0x0) mq_open$auto(0x0, 0x64, 0x4, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f00000001c0), 0x121000, 0x0) open(0x0, 0x22240, 0x154) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b72, r2) ioctl$auto_CEC_G_MODE(r1, 0x80046108, &(0x7f0000000280)=0x8001) 1m28.650257476s ago: executing program 7 (id=793): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000) r0 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r0, 0xb416, 0x100, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x14927f, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x40086602, 0x0) lstat$auto(0x0, 0x0) ioprio_get$auto(0x5, 0x0) mmap$auto(0x0, 0xd2, 0x4000000000df, 0xeb1, 0x401, 0x80000000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000600)='/dev/audio\x00', 0x20000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000767d08073e516e328646a48d3daca4a893172f656e68ba59d9faeaecd0cbfa37cc21131b6fc30cf8517912eb968271c6caa92d11000ca0eb5ebd783c", @ANYRES16=r4, @ANYBLOB="01002dbd7000fddbdf250500000002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000010) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x103, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) madvise$auto(0x0, 0x400053, 0x9) r6 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="d3c809000000fedbdf2502000000040002000400048008000100f8ffffff04007bde77fc43d23501131e78b8409bb852061b63e61c71"], 0x28}, 0x1, 0x0, 0x0, 0x4000014}, 0x8080) madvise$auto(0x0, 0x9, 0x2) sendmsg$auto_OVS_METER_CMD_GET(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)={0x44, r6, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0x5}, @OVS_METER_ATTR_USED={0xc, 0x5, 0x6}, @OVS_METER_ATTR_USED={0xc, 0x5, 0x6}, @OVS_METER_ATTR_USED={0xc, 0x5, 0xfffffffffffffffe}, @OVS_METER_ATTR_KBPS={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004811}, 0x4040010) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_CONNECT(r7, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0xc4, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x34, 0x84, 0x0, 0x1, [@nested={0x18, 0xdb, 0x0, 0x1, [@typed={0x14, 0xdf, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @typed={0xc, 0x5b, 0x0, 0x0, @u64=0x5}, @typed={0xc, 0x121, 0x0, 0x0, @u64=0xca2}]}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SUPPORTED_SELECTORS={0x74, 0x14e, "4073021d170f4fad9e197aa4f9fa54566204348cc4f0fbcb98c348d180a839fe5b6e1e6880c966b0e03d70ed192fd68286733b8136ff4124d1bc11869328880aad47d29899dfbdf28b2c09b499455139fb2028c23691a4ee6ef04a7003b0bd3362c03b583482c299e8c45b7af02ae719"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20040041}, 0x40) ioctl$auto_SOUND_MIXER_READ_STEREODEVS2(r2, 0x80044dfb, 0x0) 1m26.682167112s ago: executing program 7 (id=796): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0x4, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = fanotify_init$auto(0x6a1, 0x2000000000002) socket(0x26, 0x80805, 0x0) socket(0x28, 0x1, 0x0) waitid$auto_P_PID(0x1, 0x0, 0x0, 0x5, 0x0) socket(0x1, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = ioctl$auto_TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000240)=0x200) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)=@bpf_attr_7={@btf_id, 0x3, 0x9d2, r2}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r4, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB='\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x21, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/controlC0\x00', 0x767a2ee7479c905d, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x22042, 0x45) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram14\x00', 0x102, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/dfscache\x00', 0xc2402, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) 1m11.160013813s ago: executing program 37 (id=796): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0x4, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = fanotify_init$auto(0x6a1, 0x2000000000002) socket(0x26, 0x80805, 0x0) socket(0x28, 0x1, 0x0) waitid$auto_P_PID(0x1, 0x0, 0x0, 0x5, 0x0) socket(0x1, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = ioctl$auto_TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000240)=0x200) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)=@bpf_attr_7={@btf_id, 0x3, 0x9d2, r2}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r4, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB='\x00\x00'], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x21, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/controlC0\x00', 0x767a2ee7479c905d, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x22042, 0x45) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram14\x00', 0x102, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/dfscache\x00', 0xc2402, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) 31.647930922s ago: executing program 4 (id=927): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-touch4\x00', 0x40000, 0x0) ioctl$auto(r0, 0x40086602, r0) 31.318596714s ago: executing program 4 (id=929): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002840)='/sys/devices/virtual/net/bond0/bonding/ad_user_port_key\x00', 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002880)=""/226, 0xe2) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./cgroup\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="1b0026bd7400fddbdf250300000004000800048771f1c19f177904859082894f000004000280b0733d15f113782c290eb37ec5c982d6dbf0f8c9550458235e6bcbfcb6dda42a5a6a84b2711a5d8a7109f0c0d44a850b9389ae93341bcefc81d913d5df41ded2f8d8ca600390fa99d88bf542c91e72dcc8f411ed4eb4234eb937dc1399ec4e47c526494706560fbe1433080e7d06ca23f99a722cdc81a22eed2303ce8b162c5575bca9cdcdefd6184887faf84903d2723e8a330700"/201], 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) clock_nanosleep$auto(0x2, 0x6, &(0x7f0000000840)={0x0, 0xc025}, 0x0) 30.28380456s ago: executing program 4 (id=931): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) writev$auto(0x8000, &(0x7f0000000040)={0x0, 0x1000000000004}, 0x2bc) r0 = io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/devices\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000040)=""/9, 0x9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xb, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x3624239c, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000040c0)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x100, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000002480)='/dev/midi2\x00', 0x2841, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000040)={0x0, 0x73d, 0x4, 0x1, 0xff, "50b82e6c92b172b4cfaaca8e"}) mmap$auto(0x401, 0x70, 0xdf, 0x9b72, 0x2, 0x80000000008000) r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x1c, r3, 0x9, 0x70bd2c, 0x25dfdbfb, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x808) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0xa}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0xfffffff9}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x5}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x7}]}, 0x34}}, 0x14000001) read$auto(0x3, 0x0, 0x80) 30.108286367s ago: executing program 4 (id=932): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x0, 0xffffeffe, 0x2) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000000) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x3, &(0x7f0000000180)={@siginfo_0_0={0x80000000, 0x7, 0x8000, @_kill={0xffffffffffffffff}}}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 29.727203012s ago: executing program 4 (id=934): sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x48) mknod$auto(0x0, 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r0 = setfsuid$auto(0x0) setuid$auto(r0) ioprio_set$auto(0xffff99af, r0, 0x7) lstat$auto(0x0, &(0x7f0000000300)={0x4, 0x2, 0x5, 0x7ff, r0, 0x0, 0x0, 0x7f, 0x0, 0x80, 0x5, 0x3a, 0x1ff, 0x3, 0xded4, 0x3, 0x2}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000440)={0x0, 0x7}, 0xc00000003) r3 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x2082, 0x0) write$auto_drm_edid_fops_drm_debugfs(r3, 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) 29.539738866s ago: executing program 4 (id=936): r0 = open(0x0, 0x591083, 0x402) ioctl$auto(0xffffffffffffffff, 0x64c5, 0xffffffffffffffff) ioctl$auto_USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000140)=0x91d) pipe$auto(&(0x7f0000000040)) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x604400, 0x0) ioprio_set$auto(0x3, 0x0, 0x4b34) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8081, 0x0) r1 = socket(0x25, 0xa, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) sendfile$auto(r1, r2, 0x0, 0x9) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x48080) mmap$auto(0x0, 0x2020009, 0x4, 0x10, 0xfffffffffffffffa, 0x8000) open(0x0, 0xc0000, 0x1) writev$auto(0x1, 0x0, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x16, 0x940, 0x1ffe0, 0x3, 0x6, 0x3, 0x9, 0x513, 0x8000000000fff, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x200, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) rt_sigsuspend$auto(&(0x7f0000000000)={0x2}, 0x8) socket(0x10, 0x2, 0x0) userfaultfd$auto(0x1) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) 14.220017766s ago: executing program 38 (id=936): r0 = open(0x0, 0x591083, 0x402) ioctl$auto(0xffffffffffffffff, 0x64c5, 0xffffffffffffffff) ioctl$auto_USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000140)=0x91d) pipe$auto(&(0x7f0000000040)) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x604400, 0x0) ioprio_set$auto(0x3, 0x0, 0x4b34) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8081, 0x0) r1 = socket(0x25, 0xa, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) sendfile$auto(r1, r2, 0x0, 0x9) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x48080) mmap$auto(0x0, 0x2020009, 0x4, 0x10, 0xfffffffffffffffa, 0x8000) open(0x0, 0xc0000, 0x1) writev$auto(0x1, 0x0, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x16, 0x940, 0x1ffe0, 0x3, 0x6, 0x3, 0x9, 0x513, 0x8000000000fff, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x200, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) rt_sigsuspend$auto(&(0x7f0000000000)={0x2}, 0x8) socket(0x10, 0x2, 0x0) userfaultfd$auto(0x1) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) 5.560172041s ago: executing program 9 (id=1012): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x2, 0x80002, 0x73) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r0) sendmsg$auto_TIPC_NL_NET_SET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000001080)={0x12c0, r2, 0xe21, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x53, 0x6, 0x0, 0x1, [@generic="06db4164c657fb64c2378a1c97592fe2fbd0f2c004e6611c16926fd53f103cc04abdce11c1d1a915f8100cbafa1cf5a37a488b95b15f6d20fd0db69a6dc5f4cd456b427e7d95ba212ef6caf3a8a4f9"]}, @TIPC_NLA_NAME_TABLE={0x1ff, 0x8, 0x0, 0x1, [@generic="32ec91ef2f1b9de070465ac3ae74b027519838aca39162200658a6683967d879d27b289f43b2d53da1a532242dc1847a9a9519f792c40ac79bdb1fe68bbd", @generic="f138d346943ea8e8ebcdaee088c14585331720c3628833a9a4784e17fb4bdb8a30346e569452a374f9b5fa23311fabc5c8926e4f7e50aa897d25632a4e69e6ae1983f329c962e8a845743a2b9e1d90eba30d8e8e035d9faeb12eeb031121e002442177c7b2cf2ccc83233fcd04a8a7f175339e7f01bb49", @generic="5ed41fe5233b71493f603c8475f74d055706a5148c0ee109ff598cb02ad9a6b6afef6ecee692cf026a1369a947ae288024943931ea79aa6d07d6c65d813e", @typed={0x8, 0xa7, 0x0, 0x0, @u32=0xd}, @nested={0xbe, 0x2, 0x0, 0x1, [@typed={0xc, 0x10d, 0x0, 0x0, @str='pim6reg\x00'}, @generic="c753484efa112d6aecc0f7cc298a81cecdf217cec90b59fc1f9e2cec494eba555f8d045480b77f76bb32b9821e41f8571cd71aa5f42a147d1e72989e0bd2faae786066d27884530ad1e8440fe1ed85db128f4ea5a3bc473e933b84beaa7e1d2271cdb21f6e6abcdf046af3a2f5f8cbdcfcccbba9be0c9f1f0f48dde25388cf05e4b6e740ef0988d9961ad70e33b211544a55ae7f8f46bc8ab0b02059797078be6e9c37800e7553f10867", @nested={0x4, 0x98}]}, @nested={0x3f, 0xc1, 0x0, 0x1, [@generic="4eb9ef37fe1cbf74a8c0d83f646cc72ddc3c1d94e9e918164f2d3b56ff15ad881aa0639be3385ddaca99173eda9ab95012eac1", @typed={0x8, 0xeb, 0x0, 0x0, @ipv4=@broadcast}]}]}, @TIPC_NLA_BEARER={0x51, 0x1, 0x0, 0x1, [@generic="64439d8c76f68272573a49888f84685fdcc29751c43e9e1bc1a66a7cb11f5336a84db200ccbd34c59ac0502e8a474bf2b78665716f41cde748c55d6a325b1bf1c9f27eddfa730b4f1d88b468ad"]}, @TIPC_NLA_UNSPEC={0x1004, 0x0, "627a63c1fd0938441336190392bce60945dbc690271d5a6de904af4261fa51a6f86dcdf0d09f28d8bce725a8186f7399ae0128ae1622eabde346c2a1e9012304407185d4e23f043e390a2dbe1a882b98f3795532b53aac3350d09db00dc873fe1aeb600f144b4bd11ecbbb0f5b1ea73ad46239bc0058de1e04951f878b0e90394b501c0a213c91db8d49eead3c1248eb21c6797482810673ce2409fa54c34f92075569f166aed86f4e001620d9cbedb9921a6fc429df1e17333c14caebf7acf2c60c9a8abba442b4f3f5965a2ebd5e01f65099cadb14da39797759a0be0dfd8eaa01622233157b44a9a664f9ef1ed1896c1abea7a835885e073286a369ebdb20e9caba6ad779a70a82369f92240c2f3c4181198fad4657f29973c41d5713746680010e8012465f53c406dbcae75624652417e0668edc71238734478c7a90f4c7a480e96dbef7106f99f5d611468cbd6a43d3ad0a928cbd2260abd8dfdd89f2e778f7e349d4ab32780f4c9c5859cbd5131e2a333df268d41bd70282a34f4a282f146b7c10cb340bef724eeacd061a554cc4fb013c649aad0999fce6252d4b879cdd292e4a3a07b9531d55686f85aa98c6b8ebcc98ac4d29969dcf58d72865ee21074b0aa6c2459e92bff314532e58bfdacf03292e73a5bc58032130ed59446ae61c96b435ad1371b404128e977a59c74ea094c2fc6e9583725b70f37fbccf0a364941d4cfe02d99c108beb4d408ad896797df4c2cc112c32f99069efe6fe7a380007f20345054b1d4a4b9c6fbc6a5c574323e36d31ad2968ddd0c52ce826ebb96d465e4c7ae533adc55e25039556d0fd2c1178b388a47ac781d144b193529d11fe5a694ab14cad1d1597aae6a9cc49338c33e870b662f181c7cbf8ffe52ab72ce80ec1a03dc1b409003fdaa9a13c3e3d6313d199233b5f2ee3535f0d3ce291e95be49cfe47c69d8e613c7bb01ae59e37a15335ce485e73a0924ba067638f8a9b3b118fbe0e4f81e476258dfb4f5cfa0c28340080bffa164a228de7a9f62be910a2beb0e4a6b058049a2f2ce6dffa22f8cad950b36b7b4873fd90e0de25bcaebcea40a8529ab4605d2727291cd4aaa889c50b805feaefe44ccfd1d89a0cbb4a05073316908d004c6b7253061cdbbcee89ad19a4afb492a8d2b4bfd598509c4336f7694606ae995174034420641ec53f727b0930d8dfc37b2420edb85ba24308ef89c7b8263b232512eafbda76f25656613a1fe3542f16bbd6a441e98067e102b133ad1be9a51c582dd2358897754771196e56052a8e04d3ec7c54b89252b078a87571aaad78a43258be30c4636608c9461696b546171398b3991eca6988aa0405b72f87c308fb8604a56c0135f410e0cc8dde455ed48b814f649e4fb2efe1effb52d0051d43f0a90d6f112ac81b9b70b55052d2872e4180e1a468817fcb8873e0db5dbe0463e7008a595417e928df491a3b970a23276d5dda2a2cb49ba3238cb8fe85a5ec8434d9104c01270b7f88a8f70539d60ddad8c5ccad8551dbb1126b5043085d0f80fbadf913eda95d4ded013d4043991cfff6c0873b028c1c211f78940698562edbb96f9bb00c3af8d68ae9725d8e9a844757562eb354ebb1756c9e66793c1338696a33f61230b195fab43855d5170a4d96de8535fe976260be5100ee5fcca2801fc1a2993aa1684df933bda4b9fe253341e37bc43a02e257b6032ac7a08fe16682c420ae5b34057435d1dd9049afa03e35fa7d5dd09e6be660bb3dd8db4f8e83208894917f3f47f0ef1e2f430f34693858a31f8c60be1e67babd84dc99fd511a4dbbdfe22e20189c5559c01544012bf652d797a2c609bb8b78b36a742bbb551862b951c40fb817f3e8ad3fa4fd0f1655d69a7f0bae23bb1d3758a95ba5c62e7cbe22ed6febca7c21c5d41b2629a3cbc87ac96fab9a04bbcf19fca9fb7de8a633d16043f7be542f50b6d9994daf96e8311ec0063f7d889647b4208fe0b5742f179483c2c871b961b77e53f63b701ddbc7cb124ce8b5f7d902323dfb3fcf2b2da8e6f842888a1efb7135fdc37bf7909572539ae5c386f2fd0a90f223476c62146056670656c00479d4ae0c6454d793e4008d4e9ad4e034c47d553883113d5599455a9e184f835925e13de1c4ac2ee07a1c97f47510f637c1aab167c6a4c4b9d1e1ec8b0bddcd251184707403ab735f33782de67f6900e889a136696f8744cbd424e1d8dc3d1ed73fbf9c597ff852711a3993e3f8b6625f6b07e5c8989274f21c5a568fa7ee2cc8fbc6b8b81e09be784d4cce3f1491d87d4a37ba49c4f683d7a82faf8b53b8ffb1edd4ae5306e592781bdd912f3a6e1462efc284339287c355736c75e7e04230a49415d06d27952a8b8209f05a50604dc38512d9e9b44943cd2d5cb3791b60c65f4526ff336b4b8358482dafb77f8d9b062b2c90be91da145dbf612bb336a5dfb1fbd3957a7480c5f6f66bb7ac85b9bbabc5ff414c62dd90facc4d7ab144bd15a1dabf219d9e682847a32013dfc416d6e5c9e4323ec02468c16099de3a9dbfb25e75baee6f1c70a2e9ed23c5585f35d0bf7cd787ab3ba42b54b5c63c5e84caad065ccf8313f9a926e50a0a2f5f26bccb8abda06ada225b37d1043ac2388577e5ba405a16151ba7c6ee2a750d760c08ac4b30a6844d94a7f70f929b08ae2132b1e109af917a6f08f7afddfaf7373e19b2bb3d569818d722a0e7807e86f2f34a162c66d87fc3e88f86e9bb5a06f4f38e75ebb1cb7e79b8cd5b4908303cedca3c2ac9f55af6f50fdded0f85a8262314a565722e5f13a92ed934298c198de3af2de1ba66e20629fc3160fc9ede3121e2b42e7609b004156b39f4f51e8aef7a7507631d5344533777d2fb6cc2976fb7a9faa4eea40ced2ccd6d9355e09a1866585e35d2670fd205bac7b50e43b434c3fe14a2bf6916bd11b688e2b74a439adbbf1f3a5a942ad3fc0013480f654314d72374ff6183b2080625370eb03a5498479eba05f16bfb823f86513bb1ed9c3f37497bafb76501c1ecb9d061a8c007000943d93dcdcfb11a87e907f73a87c0718817322b4b92400900f1a3d4cbc4bfd3d3644ce0f27ac9b0180129a3bb1124628fb9559981245ca108666d81a33401d9aed3105761b27a738c7377459895d67f417fa2a974f1af94bbeb83b5953f252379ec14574356ccb21a8eb15140072d48c851b390c18ceb1598b1cf86e46904b611742358b28bda2d2baa85c576ff0ee53feac2caf8303d2e0770cb9018b976008b186059ea05a330586850c5db73804197e3e35460fef7be63efcf15747f7f676b69ddd6ae92fe8131927c8fd92301f020856acaf059d56736c9910e045cd00459843916ca20a54f967e5d7eb1d04e346c5e75afdfd5ae2a5253ef229c4bcbc6cce70bda25725370ee5d5cca4edc955f5f3f2488ba95575c563c045cbd00c42f0642c448880b155402ba1898ded5f41f0a903fc7ae92d5a3d263490aa7e5d35ce807af1fe9eb4a61ccb02d4bac184177e5a78f5b880836b808346a76e833ae84a0842193b3149329f3c4e3238390366c51839edf8499eed5894d3fa8e1be8e203c0277e007a9fcbf0e2848a9324e6ff9b99fea1f0a7dfa43d5f905deddb72becbf7c158cc05337222dd56ddb25b0dfa925307de27849294c6f31ac7a51f50173e0c5d5adbb42f521baa550cba442a0a15a1f8843d05ea713fc6b87619e64028c6527f8881e34ad1cef09b4fdc0abcc87ae543927cad71dd21d0401a36f4bf8b48cba944806dfb7a3e52a08fd6650708fc4e199cb333c2f6527674014149267711e7e797f1cd569436c797413c1f0159b427b4225cc3a032b7949c8d8c3337e3bbdb49621339a25052a339efae834251aa663a75674ebbd271bad11d61bb3284acbcee54d2b4922be91002ba50eb8a5269bd2bf7d26031da41ba799aef8436409c0ae74914a5e4a06d6a2e0eaba06111dd981abf914544b05156ba9ebed44280edcc9f74bc174f186b75d4eae74b4267d6c52258a8e6ff7e31da19af30a4ae449853987b13934fb33db2092ec718f3dc9c5a456972aa6689dd37a3c3524b908b2158d684acfba7bc2ce72210e60ad49426727f2e0c85b62a48daaa9cdb746bc47a00eae233d6e17664a6dc9ed26ff8d80a8701ef5370e9e1b93a43f8d6ce5b7ebe992c8385e21cd50f7a3e72937168287f6793979d8f24ca00cfd77886091f46f2f8b921c567189a999d6b87ab91167da9a235465f6d1c4876919563b46a40ae1f1b23ddcd8c86c9b84786760a2b1127789e0579fe282a588eaa56ce8a5c2d7ab79501b37883b57205e34307884ec526e9a006613342ff22c6a1fad98d09d630915889185e46eb617c532b756042ecc1db66c257f53f82cf9bb21c436d21338d6f19de5d89f1189fba7f0d51e8330b735dd24191c5b281a74810ac974ab0faf69dc3d846e41275566b61c236e8394b2b251ff9c72b8c9fe51cbc450feb58c99f8ce7cb4b343ff8d8089eb75cf8e96efd1781df1166c56ba76a7e6e81bd228637e567e1dda383c3048c0e46fe3c00d87120b71d6a896f545b9cc8f05758d4992f7bfef0157be760f2bb9c1fb48242d29a2b358b35ce36443a6adab7a27c6a1d5f4952e6b6b45be85a9a16206cc8bc733cfd38b7d6108f82d83f2d48c7bf31a2220f5f36f64755bc601f26eb93ee8bb6e2a26cb85d7718b66d06a170d03abf3280023302199bd69251c60091a95dcf5a8196cccdf1671a195c1b4e718c3092c6987dcabb950c876b6ce09d6d6d2ef7749c4a9a10b1bdbbcc5a59341afcd61f74a87d441b5537aa52ef12761f5838acc2d88fb7836a8b28c2c6ac2500800b2ab939f8c494b5df7ba40b5af1a62c5a2ebf9f64ae40733233be29b3214ee801a62e0751b0fdf2a5b679a85a73ad3699b0ff23912ad15487090ca03c2fd29849cc8cfac9f73bca65312c8043bed8d7622c69c0a2fa2dfc9a3112a9cd6539fa29ed074d9a1518be0cafada9e147788a11744327e64b413a279e3da195de0ef63a243a32d629bc3db92d6592527e9fdc39285a228aa3f6d3866c20bd30f79e729d0ed2a9db5b8d7dc490b34f0a72291b62513ddb22387a6287b81e09e35b6345149d7e7a9cb9a99b7dede3d1a4a1c47cb842ba3f368244b9bd36dff916376cf7c95b722c324b4e8835732ed13e9d3ba24b9b465e4884a64f9736cd19910d50ac620edc533019d0e2b076893f1ad89b61c2f7eb959fba1c89f4624b3fbe7734134e8ebb2fb8430cc9654ad379a8c073361b0c1a8bd99242c3a5265dc1b9070bf7e793a79ce76a71b566fd607702fe66bad294f8b21ac2be67560417483c88cec4302bccf5a86d45613c93091b4885c231e398eb1ece79277e847757172750c835ad98ac288ec828e5bdeaa2c9afdbdc4bf713955be9f49445ac0d88015a43d5f7b0d357d5207ab871bae65edb594fac20b56fa8fddf66915cb309ca1e29c214a5867fb1872e09ee2fbd6f12b91f03c72b0288da7bb35490ba2a00c623ffec6984ad5b64ca9e6d798b0f7a96fe1f02ca5a83803d1498eaa9c5a1ebe13473af6e76627d1c48914a9e42252a88931922b7ad7cbd907320fe0a37fcc9d3a58d8c65cbf4898f695f5a5028105fce2bdd2be5620bc22a06cac9f4ca8531a52dadc2bd4a558fb497d0f5e7796df8157038d86043a3a96c36536bd4fcde29c30d9d027e71e48ccdf077ae789ee2fa10723ae3b529f2f0ca30a4e8e17795fabcbd3d966dc3d8129f3ccfcc6ccc34fd20b28bd58761e6acbc3d53601cb0eeca8adff8817425"}]}, 0x12c0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x8000e, 0x0, 0x0, &(0x7f00000002c0)={[0x6, 0x4, 0xf, 0x1, 0x958b, 0x2, 0x8, 0x5, 0x3, 0x62, 0x40008000001f, 0x10, 0x6d3e, 0x9, 0x7, 0x10000]}, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000003fc0)='/dev/bus/usb/017/001\x00', 0xa300, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x4) sysfs$auto(0x2, 0x16, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_3={0xb, 0x9067, 0x18c, 0x6d, 0x0, 0x8, 0x4, 0x57b8, 0xfffffff8, "63acf0e05b2d33ebc15774e816ef77cf", 0x0, 0x543, 0x4, 0x207, 0x3, 0x2001007, 0x1, 0x2, 0xe, 0x5, @attach_prog_fd, 0x166, 0x7fb, 0x6, 0xa, 0x47ffffff, 0xa7c2}, 0x102) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0x1b, &(0x7f0000000040)='!\x00', 0x1ff) rseq$auto(0x0, 0x8000, 0x0, 0x6) ioctl$auto_FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) connect$auto(0x3, 0x0, 0x54) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x4c, r4, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24004840}, 0x4000000) shutdown$auto(0x200000003, 0x2) r5 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000300), 0x841, 0x0) write$auto_bm_register_operations_binfmt_misc(r5, &(0x7f0000000340)="4d96b15940349a69c8f63c", 0xb) sysfs$auto(0x5, 0x7, 0x9) 4.612682837s ago: executing program 6 (id=1014): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000980)=ANY=[@ANYBLOB="8c030000", @ANYRES16=r1, @ANYBLOB="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"], 0x38c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000002f80), 0x2, 0x0) fstat$auto(0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket(0xa, 0x2, 0x73) r3 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video13\x00', 0x20000, 0x0) ioctl$auto(0x3, 0xc0285628, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) r4 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r5 = socket(0x10, 0x2, 0x0) fstatfs$auto(r4, &(0x7f0000000000)={0x6, 0x5, 0x7, 0x1, 0x7, 0x2, 0x9, {[0x6, 0x1ff]}, 0x7, 0x1, 0x4, [0x0, 0x8, 0xd05b, 0x7]}) sendmmsg$auto(r5, 0x0, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r8, &(0x7f00000000c0)={0x0, 0x4b, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="13002cbd7000dddbdf250200000008000300", @ANYRES32=r9, @ANYBLOB="1580207e210000"], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) ioctl$auto_XFS_IOC_ALLOCSP64(r3, 0x40305824, &(0x7f0000000540)={0x0, 0x6c68, 0x61882d8f, 0x7fffffffffffffff, 0x0, 0xffffffffffffffff}) sendmsg$auto_NL80211_CMD_GET_MPATH(r2, 0x0, 0x801) r10 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000004480), r6) sendmsg$auto_CGROUPSTATS_CMD_GET(r8, &(0x7f0000004540)={0x0, 0x0, &(0x7f0000004500)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010024bd7000fbdbdf250400000008000100", @ANYRES32, @ANYBLOB="315efbdafac78f823ee007c8083aae8d5dadea7b00"/36], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8014) readv$auto(0xca, &(0x7f0000000040)={&(0x7f0000000000), 0x9}, 0x10) 4.24786s ago: executing program 9 (id=1015): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000980)=ANY=[@ANYBLOB="8c030000", @ANYRES16=r1, @ANYBLOB="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"], 0x38c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000002f80), 0x2, 0x0) fstat$auto(0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket(0xa, 0x2, 0x73) r3 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video13\x00', 0x20000, 0x0) ioctl$auto(0x3, 0xc0285628, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) r4 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r5 = socket(0x10, 0x2, 0x0) fstatfs$auto(r4, &(0x7f0000000000)={0x6, 0x5, 0x7, 0x1, 0x7, 0x2, 0x9, {[0x6, 0x1ff]}, 0x7, 0x1, 0x4, [0x0, 0x8, 0xd05b, 0x7]}) sendmmsg$auto(r5, 0x0, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r8, &(0x7f00000000c0)={0x0, 0x4b, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="13002cbd7000dddbdf250200000008000300", @ANYRES32=r9, @ANYBLOB="1580207e210000"], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) ioctl$auto_XFS_IOC_ALLOCSP64(r3, 0x40305824, &(0x7f0000000540)={0x0, 0x6c68, 0x61882d8f, 0x7fffffffffffffff, 0x0, 0xffffffffffffffff}) sendmsg$auto_NL80211_CMD_GET_MPATH(r2, 0x0, 0x801) r10 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000004480), r6) sendmsg$auto_CGROUPSTATS_CMD_GET(r8, &(0x7f0000004540)={0x0, 0x0, &(0x7f0000004500)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010024bd7000fbdbdf250400000008000100", @ANYRES32, @ANYBLOB="315efbdafac78f823ee007c8083aae8d5dadea7b00"/36], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8014) readv$auto(0xca, &(0x7f0000000040)={&(0x7f0000000000), 0x9}, 0x10) 4.215081661s ago: executing program 6 (id=1016): mmap$auto(0x9, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) timer_create$auto(0x9, 0x0, 0x0) timer_settime$auto(0x10000, 0xffffff33, &(0x7f00000000c0)={{0x400000000f, 0x800}, {0x9}}, 0x0) r0 = socket(0xa, 0x5, 0x84) sendto$auto(r0, 0x0, 0x401, 0xffff, &(0x7f0000000000)=@generic={0xa, "e3e1ffff00"}, 0x1c) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="20002abd0700fedbdf25970000b8cadd47e0bdbb6ba09b5e76d8f224c843c0930008000d00feffffff04004400"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) timer_gettime$auto(0x2, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) socket(0xa, 0x4, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b3a, r2) sysfs$auto(0x2, 0x0, 0x0) r3 = fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x2, 0x10000002, 0x6}) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) bpf$auto(0x9, &(0x7f0000000100)=@enable_stats, 0x9) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rt_cache\x00', 0x8c82, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x3) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0xa402, 0x0) ioctl$auto_SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f0000000100)="ecad") read$auto(r5, 0x0, 0x6) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000000b, 0x0) socket(0x28, 0x1, 0x0) 3.856822393s ago: executing program 8 (id=1017): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x400000000008000) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000002840)='/sys/kernel/tracing/trace_clock\x00', 0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i915/parameters/mitigations\x00', 0xf0202, 0x0) pwrite64$auto(r1, &(0x7f0000000440)=',^\x00', 0x1, 0x2) r2 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) ustat$auto(0x801, 0x0) r3 = socket(0x1d, 0x3, 0x1) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) setsockopt$auto(r3, 0x65, 0x1, 0x0, 0x0) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) pwrite64$auto(0xc8, &(0x7f0000000000)='\xfc\xff\xff\xff\xff\xff\xff\xffRN8\x99\x88\xf5s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\xae\x18\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xdac$w\x883\xac\xcd\x96\xc2\x93\x0e\x12/v0\x90\x915?', 0x4c, 0x9) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f00000001c0)="2c380a70ac791ee7af33b5df209b8e5935732802de7ee57fbba413c1e505ea8e23cb370d02e2e811537be5676cd1f432551b18fb6da6e0db758c86e652812057f45fda5d18de0e356ecff0fa2f7bedcaefaecef248daf8029e89a5aa09ca906251bd36163a3bfedb5e17c698fdb7cbdac32a049f29214e91be7bda0b00071ff0637700e9a7482c0e2dbefb17263bc8ca897287bb999ad06a30325ab8b0ae75c84ec7495942c028226cbf3b0b1a01e20c9cea1910a6848c9bcdc092b9a687b26b8063f91e15e462b9e0f3abd8d7bcdcb2632be2ee6ae0f88abac538cb") landlock_create_ruleset$auto(&(0x7f0000000000)={0x9, 0x402, 0x101}, 0x6, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r4, 0x5412, &(0x7f0000000000)) ioctl$auto_TIOCSTI2(r4, 0x5412, &(0x7f0000000100)="15") getpid() openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) 3.79548746s ago: executing program 0 (id=988): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="220000c3daf557a3b20c9fe7007f94c741938d5fa072116f5ebeceb6fb50cbb5f326b75b7cd5b916f4b9fc7bdcea47e7b72c22f4331b1284881a96c96a37603b22a8967ce9bdae84a1296afb0df9ce1fe3d772a40c61c353f10d645110eeafbba622a890db4a62b355c4c93356d3c0687190d7d61e81d8ef1b0bee", @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf2504000000080017000800000004000e00"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000", 0x4) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r2 = gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) kill$auto(r2, 0x11) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r3, r4, 0x0, 0x1000200) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x111800, 0x0) 3.60345774s ago: executing program 9 (id=1018): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x80480, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto_F_GETLEASE(r1, 0x401, 0x1) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081}, 0x4000000) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r3 = openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim3/take_snapshot\x00', 0x82622, 0x0) writev$auto(r3, &(0x7f0000000080)={0x0, 0x5}, 0x9) sysfs$auto(0x2, 0x0, 0x0) r4 = epoll_create$auto(0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(r4, 0x1, r5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'nicvf0\x00'}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, 0x0, 0x42001) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto_PPPIOCSMAXCID(r0, 0x40047451, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) rt_sigtimedwait$auto(&(0x7f0000000040)={0xc00000}, 0x0, &(0x7f0000000180), 0x8) close_range$auto(0x2, 0x8, 0x0) 2.977438687s ago: executing program 6 (id=1019): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x3e7, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}, @HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 2.563346655s ago: executing program 0 (id=1020): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x4, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4, 0xec, 0x8b72, 0x8f1, 0x8000) socket(0x2, 0x5, 0x0) bpf$auto(0x5, 0x0, 0x504) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) sendfile$auto(r2, r3, 0x0, 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/uvcvideo/parameters/clock\x00', 0xb02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) 2.527650936s ago: executing program 8 (id=1021): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x0, 0xffffeffe, 0x2) openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, 0x0, 0x181441, 0x0) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x4000000) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) rt_tgsigqueueinfo$auto(0x3, 0x96, 0x3, &(0x7f0000000180)={@siginfo_0_0={0x80000000, 0x7, 0x8000, @_kill={0xffffffffffffffff}}}) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.524137841s ago: executing program 9 (id=1022): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x3ffc, 0xad3, 0x0, 0x0, 0x2) pidfd_getfd$auto(0x3, 0x1, 0x100000000) arch_prctl$auto_ARCH_SET_GS(0x1001, 0x8) socket(0x11, 0x80003, 0x300) pwrite64$auto(0xc8, 0x0, 0x4b, 0x3) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) sendfile$auto(r0, r1, 0x0, 0x5) 2.31024103s ago: executing program 8 (id=1023): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x2, 0x80002, 0x73) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r0) sendmsg$auto_TIPC_NL_NET_SET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000001080)={0x12c0, r2, 0xe21, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x53, 0x6, 0x0, 0x1, [@generic="06db4164c657fb64c2378a1c97592fe2fbd0f2c004e6611c16926fd53f103cc04abdce11c1d1a915f8100cbafa1cf5a37a488b95b15f6d20fd0db69a6dc5f4cd456b427e7d95ba212ef6caf3a8a4f9"]}, @TIPC_NLA_NAME_TABLE={0x1ff, 0x8, 0x0, 0x1, [@generic="32ec91ef2f1b9de070465ac3ae74b027519838aca39162200658a6683967d879d27b289f43b2d53da1a532242dc1847a9a9519f792c40ac79bdb1fe68bbd", @generic="f138d346943ea8e8ebcdaee088c14585331720c3628833a9a4784e17fb4bdb8a30346e569452a374f9b5fa23311fabc5c8926e4f7e50aa897d25632a4e69e6ae1983f329c962e8a845743a2b9e1d90eba30d8e8e035d9faeb12eeb031121e002442177c7b2cf2ccc83233fcd04a8a7f175339e7f01bb49", @generic="5ed41fe5233b71493f603c8475f74d055706a5148c0ee109ff598cb02ad9a6b6afef6ecee692cf026a1369a947ae288024943931ea79aa6d07d6c65d813e", @typed={0x8, 0xa7, 0x0, 0x0, @u32=0xd}, @nested={0xbe, 0x2, 0x0, 0x1, [@typed={0xc, 0x10d, 0x0, 0x0, @str='pim6reg\x00'}, @generic="c753484efa112d6aecc0f7cc298a81cecdf217cec90b59fc1f9e2cec494eba555f8d045480b77f76bb32b9821e41f8571cd71aa5f42a147d1e72989e0bd2faae786066d27884530ad1e8440fe1ed85db128f4ea5a3bc473e933b84beaa7e1d2271cdb21f6e6abcdf046af3a2f5f8cbdcfcccbba9be0c9f1f0f48dde25388cf05e4b6e740ef0988d9961ad70e33b211544a55ae7f8f46bc8ab0b02059797078be6e9c37800e7553f10867", @nested={0x4, 0x98}]}, @nested={0x3f, 0xc1, 0x0, 0x1, [@generic="4eb9ef37fe1cbf74a8c0d83f646cc72ddc3c1d94e9e918164f2d3b56ff15ad881aa0639be3385ddaca99173eda9ab95012eac1", @typed={0x8, 0xeb, 0x0, 0x0, @ipv4=@broadcast}]}]}, @TIPC_NLA_BEARER={0x51, 0x1, 0x0, 0x1, [@generic="64439d8c76f68272573a49888f84685fdcc29751c43e9e1bc1a66a7cb11f5336a84db200ccbd34c59ac0502e8a474bf2b78665716f41cde748c55d6a325b1bf1c9f27eddfa730b4f1d88b468ad"]}, @TIPC_NLA_UNSPEC={0x1004, 0x0, "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"}]}, 0x12c0}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x8000e, 0x0, 0x0, &(0x7f00000002c0)={[0x6, 0x4, 0xf, 0x1, 0x958b, 0x2, 0x8, 0x5, 0x3, 0x62, 0x40008000001f, 0x10, 0x6d3e, 0x9, 0x7, 0x10000]}, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000003fc0)='/dev/bus/usb/017/001\x00', 0xa300, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x4) sysfs$auto(0x2, 0x16, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_3={0xb, 0x9067, 0x18c, 0x6d, 0x0, 0x8, 0x4, 0x57b8, 0xfffffff8, "63acf0e05b2d33ebc15774e816ef77cf", 0x0, 0x543, 0x4, 0x207, 0x3, 0x2001007, 0x1, 0x2, 0xe, 0x5, @attach_prog_fd, 0x166, 0x7fb, 0x6, 0xa, 0x47ffffff, 0xa7c2}, 0x102) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0x1b, &(0x7f0000000040)='!\x00', 0x1ff) rseq$auto(0x0, 0x8000, 0x0, 0x6) ioctl$auto_FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) connect$auto(0x3, 0x0, 0x54) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) r4 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000300), 0x841, 0x0) write$auto_bm_register_operations_binfmt_misc(r4, &(0x7f0000000340)="4d96b15940349a69c8f63c", 0xb) sysfs$auto(0x5, 0x7, 0x9) 2.268165119s ago: executing program 6 (id=1024): r0 = openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) read$auto_lsm_ops_inode(r0, &(0x7f0000000040)=""/190, 0xbe) r1 = getsid$auto(0x0) r2 = prctl$auto_PR_SET_MM_END_DATA(0x100, 0x4, r1, 0xb, 0x1b7cc1d6) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_REG_HINT_ALPHA2={0x5, 0xb, '.'}, @HWSIM_ATTR_USE_CHANCTX={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40810) getsockopt$auto_SO_DEBUG(r0, 0x4, 0x1, &(0x7f0000000200)='!#\x00', &(0x7f0000000240)=0x7) ioctl$auto_SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000280)="9730a180b3825433b4b7632186eb0a76e6ab6ef2c913f7074032720d49221420e7b913c51a6d91e0d5297e8398b78fdb206d74a56903c9309e5db5a9cfd89d9d201c5c44b31f9d2b661139446e70eaf1f5866eaf7552387384902340f7e47265cd83487fb9dd7a42bbcb68210661674fdab5a359a2845c2cd5228ddedd81c0b206a54eabc1fae80aeb5ec9dd87f098b4e67e4373adcc58ce8a1df23985080cbddecd6df27cf8b61c7d9c322ff424bc3d312401") r3 = ioctl$auto_TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000340)=0x20) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r3, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)={0x2ec, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGE={0x90, 0x2, 0x0, 0x1, [@nested={0x8a, 0x0, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @u32=0x4}, @generic="27e4bba3d86bb4dbecf0ee824a7a16d37d7d585e7aaada06b128d051e1113b94edf098ec5bb1cc2e1833a437581a6edb6a1d22ea0738ecb08f96c8d358cff46c076d47b015e1581625221dc0252e6b90606915f7e4d96b7dad6f6e1eb0e24f3de71b6ddb7a2b7381516d", @typed={0x8, 0x125, 0x0, 0x0, @pid=r1}, @typed={0x8, 0x115, 0x0, 0x0, @u32=0x3}, @nested={0x4, 0xae}]}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x22b, 0x3, 0x0, 0x1, [@generic="e61885e3ec6ec1b4295ecfc1a93b45b85f469df2342b3f0b8a0fd8ca0a6841a7602ff3a38712cb04df2cc102d5eacfb1a533c8e80268c18bf4bf3530e5fe8f169bfc192bddd25e28513488c76745bef0aa1c9988cc2e30cbd830e8", @typed={0x4, 0x89}, @typed={0x8, 0xdd, 0x0, 0x0, @pid=r1}, @nested={0x7b, 0xa, 0x0, 0x1, [@generic="dd40f4cd4ec1b5914366487b357fc4db11dc993839b9994504ad429badae5003aee1c3b380edc96e843e16b0a804380ec86397368bcbdc853f471038e2760bd807c0f7d173bedfe27b68d3f66f24a02e32f6e8bc53577beb42663e9751dd4ab773a236", @typed={0x8, 0xd8, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x5c}, @typed={0x4, 0x10f}, @nested={0x4, 0x5d}]}, @nested={0x8e, 0xe0, 0x0, 0x1, [@generic="aeed98461f2821e1f949d6be8dffc736ac609fc857a13de7ae6746db6e584d8dbf4dd738141fa8baf7f84ac4da20075105639a75b2146759caaccd", @typed={0x4, 0xa0}, @generic="ea83158cbb045a5528a813b8f416c2c861fc434c7bd03f2c94caf8d5d6ee89009ab73f7f7fcacfd3982ff56bbf851f4fce6e59e13ba74e3e4089f9553e2b32083a2c7d", @typed={0x4, 0x7a}, @nested={0x4, 0xbe}]}, @generic="8f31c38da468e460bc8c89e4c217d587fbb3445cd51a016f0034beab8fe631ef892c5283ddd8368d7aafe06f7e030dfef3b4bbde7c6e0251f54f3f6cc9e58b26846f121f587d4099c041af19ee14f50e495b9865c2d6a4d946e20b5c0bb2e17fb9072cd7a13a045042bca4083e6ea99218040c804d8c0fd4914f5c81b1e90dccbb5e331f2da48ba666baffee38efc9fa41a952d4f9b25a8df5ebd832", @nested={0x8, 0xc4, 0x0, 0x1, [@nested={0x4, 0x122}]}, @typed={0x8, 0x14f, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x15, 0x0, 0x0, @u32=0x80}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x1c, 0x3, 0x0, 0x1, [@typed={0x8, 0x10e, 0x0, 0x0, @u32=0x2}, @typed={0x5, 0x5, 0x0, 0x0, @str='.'}, @typed={0x8, 0xea, 0x0, 0x0, @u32=0x2}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x4008000}, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000780), r3) syz_clone3(&(0x7f0000000a00)={0x20000, &(0x7f00000007c0), &(0x7f0000000800)=0x0, &(0x7f0000000840), {0x3}, &(0x7f0000000880)=""/115, 0x73, &(0x7f0000000900)=""/171, &(0x7f00000009c0)=[r1, r1, r1, r1, r1, r1, r1, r1, r1], 0x9, {r2}}, 0x58) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000b40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x70, r5, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_SAE_PASSWORD={0x26, 0x115, "00d7e515c8a2e1c7f33898d6426b71fa8bc1d7fc14b4ee90ba8442fe6573397a6df1"}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_FILS_KEK={0x15, 0xf2, "78f157e8d7580fbcdfb97af0b014f63db9"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(r2, &(0x7f0000001300)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000012c0)={&(0x7f0000000bc0)={0x6e4, r5, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_SCHED_SCAN_DELAY={0x8}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x6b8, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x3}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x28e, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x8}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x6}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x404, 0x2, "9966b84e1470a255048db97b5ea27a269a193cf94a92bf6717e612e9bc248f43924a886452cd0e04c50467ce2999074e16ba731cbaace2d21ea87c6223111297d7b96b0cc872872f1f42ca8c16666f7b29b4c629087fa6666cb6c4c5c83760307366e3dea0c24ed6645e43b278470e917b1d7b57e381a33b4c9ebf34340d99ba6556ccdcb0d8f92ace6fe2293877c62ad5130edac9534c9409a54e347803f6cc54f8070270e63e6b89de228effebbd70b0d76c347743021876ff45578383778e7aa432846764a63b7c22e6fc18d4142e343fd6fd981ef6d0ba7758f865f1044ab7fc294b7463d13054cff33c0ace869086283aa877a9cb151ee2d0795e550ac7dfa5e61924294d460e8c1856a2d9314793699ddca3631d8e80cb019ee7c38a1791e9c8fceb88c672c6df8be09b097b26c73870b6ece6691ab03128ac353a93e99e893674e8b1dbdbfe885b52a1b145ab5f575c9e5f37c318a9380c6fed03aea60f91a532610edf1fe8e0c8fdc788fc6aa118c7f6a8ec53c7cf0de154d302ad23ffe095e7d144bbdbe1d3a7d827705647fae11ef1ee36c1024012dd9d8ae74f75a7fd809536d1f8b48035ac1fb930397015144329b4a3d6aa31f5495992c0f7ce1b1e83b60686d6fed956998e20525dcd806a359a0827f9e262c05dd30e8d35c89e27cdfdd398e46ca67af5042e63766244ff77d810ab906463ed9b99a2cb01378f2dc7b7769c31d73b387336fbac89ced295cb757bba022cdc53e5a5a854730211861bbf0b0b4f14fe20bd614cdab2bb09e99228889a7b73a1d354656e268a7088d95ae4de9cd974773498fc9d65b2b209d793a573375d2d238f063758363ade1217a5700f018dc8a562b36b12682a49bf4c8befc42176f706fbca842256cb8eb52a7d19c4b7f119cb37dc0aeedb50c3de73fd5093b317d9835e35cbe93a072e0065ede6637566e1450b9ef304fa6279296e268814dd38656a45fa74561961add7f8f2e4eb027a3a0875a8c2a0a05272ec97766638a9c1229c998bcd9bb90dc2244c47e6720251c75245e9954bd5b70adbad019650202cee11f4ae6e08242fca5b4c02e8be4e161a43857b9a855f3cb20efb623ffb79b5a7d7808ff7ba723a0473041933da22f67f4fc24ffd79bc82a742e883b4dd02db098c5619225251256ab83334078b5acbd04294105f34f5b71198c381d18daab1f85748aef752a82d9158f0f1b7cec07e6cba3be6a8108a7dce48b0f349d32c8f0d93a7019b2f9c7fbb32874876788b933cd792dc668e9e7c93c625e169002ed2a14af3e4114482c4ef4c15e7e5026f8e1561deb1d77c2fe566855c044d1e278e1019517a8cf7b2a1720acfa08797f4fd21463243c1fc528403c69eee9bd03fc94a48eaca7bc44ec45253817e47abf384a3f64471b23df20007a3433e351c340492da2fe2747d9a4a5f"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x6}]}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0x4c}]}, 0x6e4}, 0x1, 0x0, 0x0, 0x90}, 0x0) close_range$auto(r3, r4, 0x9) r7 = socket(0x25, 0xa, 0xff) sendmsg$auto_NL80211_CMD_ADD_NAN_FUNCTION(r7, &(0x7f0000001600)={&(0x7f0000001340), 0xc, &(0x7f00000015c0)={&(0x7f0000001380)={0x204, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_FTM_RESPONDER={0x1b8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x8d, 0x2, "a4c5afd111f3ff34102bf84a8d190e056c2009c005d9a249d5e2f08177f734cec7e0ba5a1d5f9db1a56815090db70df87d2bcd144eabef3473cdbd8cf421fb60bf95bf65a90eec041d10b76518c8e13a2e43b8b352c158958124f4b8571511a2c551d212fac3cd08022c0f5bec4521016d912aa1ab8315499d7922e66fe01374cd2ee55716a0af3ff1"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xd3, 0x3, "02bdb84e80afaeef1aef47f8ea1287f31528893eab6857da6507b68f1124ac9b579d2942e23342b960ced1a6357778b07f7633ef636bb6930fb76c18cb93c93601b43979b31267e83b41a19f76712466596dbfc2381bdee1ea044056408e684f3c1d0f9d5a4a7f2ccf77d8184d01312dcde447745b9f9b4b11bdd9cd3b2bdcc342c9218b2c40442aa7c8eef2976ab7d1f99183d9432aa4888cbfb897881b9bcc57ec8b1026938a8556a87175a040deb883db7469ec2974dc2ee8070c37f13c4bc396f9774503955ba85f0facb8e125"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x3e, 0x3, "1b045eb8ad36d48188d82fe7b3038b8ad2aba75e71de48c83a932f9b1705199910531e436eb67d4c13c2f57135e02ebe0604b50a2b6c54a1834f"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x2}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_HE_CAPABILITY={0x14, 0x10d, "bd11090e7f4c25d43c8b9b8ea501fb72"}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x5}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x204}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001640)='/sys/devices/virtual/tty/ttyw7/power/runtime_status\x00', 0x111200, 0x0) inotify_add_watch$auto(r0, &(0x7f0000001680)='./file0\x00', 0x9) getsockopt$auto_SO_REUSEADDR(r0, 0x9, 0x2, &(0x7f00000016c0)='\x00', &(0x7f0000001700)=0xfd7) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000) syslog$auto_SYSLOG_ACTION_READ(0x2, &(0x7f0000001840)='.', 0xf556) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x3, &(0x7f0000001880)="7012b403d45f8b3817df05289af9f69f4132f8c3dfbf16fa18d13be1408b28df16c5946e7f8867ac9f2c1669f529c1bf6acb0fd2e7982f5b72dceeaa670da090f26eeea26920af2e8b17f36ef61d8f956d3843328fdbaa2f8fcffedc13f7831f5aae00c6de1cec3bffdcef0828d7622ac1a10722b5875cafeb5fb82b95a16ac32f6fcc8592a7ddc0ef2ae43ea3fab1b862bd215a") syz_genetlink_get_family_id$auto_seg6(&(0x7f0000001940), r4) acct$auto(&(0x7f0000001980)='.') r8 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000001a00), r4) sendmsg$auto_IEEE802154_ADD_IFACE(r2, &(0x7f0000001ac0)={&(0x7f00000019c0), 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x40, r8, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, 0x3}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x7}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000088}, 0x44000) ioctl$auto_BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000001b00)={"db86e01af480fc6c66c83dee1ab0d2c3", 0x0, 0x0, {0xfffffffffffffffc}, {0x2f48, 0x9}, 0x80, [0x2, 0x3, 0x101, 0x6, 0x0, 0x6, 0x55a4bcb4, 0x895, 0xe633, 0xfffffffffffffffd, 0x3, 0xffde, 0xff, 0x7f, 0xe0e9, 0x2]}) gettid() openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001c00)='/dev/input/event0\x00', 0x80000, 0x0) 1.936772277s ago: executing program 9 (id=1025): r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/devices\x00', 0x600, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28c000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f00000001c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="28720acef29e96ccd226fdb9318222c63c81d1cd5c61f14d2d0b944c0e844e645a465a424124ad4738e5abe721453ff0878533959bfea5be155e0b5fe3086a12298fd965aad4913a6be1f207bb51933f3a0f8d4cb7449c7e89918dceb452022b271d4b5648c04047186b092f32fa911cc0f1c9422e3ba8423618eb9acdfcf4443b5fe24fef54f5d2b7a3bc804829812079b746214ef79faa7038bf", @ANYRES16=r3, @ANYRESHEX=r2], 0x90}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) r4 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cpu/0/msr\x00', 0x1b1f83, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_NAPI_GET(r5, &(0x7f0000000c40)={0x0, 0x300, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NETDEV_A_NAPI_ID={0x8, 0x2, 0x31}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) r7 = socket(0xa, 0x3, 0x5) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(r7, &(0x7f0000000000)={{&(0x7f0000000040), 0xc88, 0x0, 0x0, &(0x7f00000000c0), 0x8, 0x200}, 0x5}, 0x3b8b, 0x800) mmap$auto(0x0, 0x20009, 0xe0, 0xeb1, 0xffffffffffffffff, 0x4) write$auto(r1, 0x0, 0x8000000000000001) readv$auto(r4, &(0x7f00000000c0)={0x0, 0x101d0}, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f00000041c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fbdbdf25020000000800"/26, @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x80) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb5, 0x404, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) preadv$auto(r0, &(0x7f0000000080)={0x0}, 0x6, 0x22, 0xffc) 1.906971583s ago: executing program 0 (id=1026): r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/ksm_stat\x00', 0x20000, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/peer_notif_delay\x00', 0x20502, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) rename$auto(0x0, 0x0) write$auto(r2, 0x0, 0x4) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) sendfile$auto(0x1, r3, 0x0, 0x400007ffff000) msync$auto(0x1ffff000, 0x4, 0x7cfb218c) fsopen$auto(0x0, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) mmap$auto(0x0, 0x4, 0x7f, 0x40eb1, 0xffffffffffffffff, 0x3000001ffffd) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r4, 0x545c, 0x0) ioctl$auto_TIOCVHANGUP2(r4, 0x5437, 0x0) read$auto_proc_single_file_operations_base(r0, &(0x7f0000000080)=""/112, 0x70) r5 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x0) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r6, 0x80104592, &(0x7f0000000000)={0x7, 0x6, 0xfffffffffffffff9}) open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) r7 = socket(0x2, 0x3, 0xa) setsockopt$auto(r7, 0x0, 0x4, 0x0, 0x28) mmap$auto(0x1, 0x47, 0x4, 0x9a7e, r0, 0x5) execveat$auto(r5, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x5ad880, 0x0) unlink$auto(&(0x7f0000000040)='./file0\x00') 1.19589052s ago: executing program 6 (id=1027): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x10341, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x1, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) write$auto_lockdown_ops_lockdown(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) read$auto_check_wx_fops_(r3, &(0x7f0000000080)=""/228, 0xe4) close_range$auto(0x2, 0x8000, 0x0) 1.095621472s ago: executing program 8 (id=1028): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) setsockopt$auto(0x3, 0x10000000084, 0x79, 0x0, 0x8) socket(0x2, 0x1, 0x106) ioctl$auto(0x3, 0x8982, 0x38) 766.865597ms ago: executing program 0 (id=1029): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000, 0x0) (async) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x40242, 0x0) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x40242, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) socket(0x1e, 0x4, 0x0) (async) r1 = socket(0x1e, 0x4, 0x0) setsockopt$auto(0x2, 0x1, 0x50, &(0x7f0000000000)='\x00', 0x5) (async) setsockopt$auto(0x2, 0x1, 0x50, &(0x7f0000000000)='\x00', 0x5) unshare$auto(0x20000080) sendmmsg$auto(r0, 0x0, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r2 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r2, 0x40000000000000d, 0x2009, 0x0) mmap$auto(0x6, 0x4400009, 0x7, 0x19, r1, 0x100) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) (async) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, 0x0, 0x2400c080) (async) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, 0x0, 0x2400c080) write$auto(0x3, 0x0, 0xfffffdef) prctl$auto(0x1000000003b, 0x1, 0x0, 0x3, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x20202, 0x0) mprotect$auto(0x200000000000, 0x806124, 0x8) mq_getsetattr$auto(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x101, 0x5, 0xfffffffffffffffa}, 0x0) pidfd_getfd$auto(r3, r4, 0x1) ioctl$auto_USB_RAW_IOCTL_INIT(r4, 0x41015500, &(0x7f0000000440)={"33890936ba2d39681da7eb960ddb83603eeda72f7eba937031d10af308f3d0bd0dc775f8a217085e19dc05dc010c6fb5adb822788179318c27ea09f95a27293910e7549253e0fe318e0fdefd8e0f043dc8fc1bdd0a7fa489098983360c406356f3d4ff1809af9b4d1514da7a95e82775ff3ed320cc8a445be4a15d8406f352b6", "348303fdf9c168862aa8a19aaa5e3e89b5b65e77ee51f485c76bb60ec46f8653a26fec51ffb0e078e0dd0df58a159b50fb4f06495e5a181e323dae5f53714f2cd9a4e9bce062ebf596202f57d6ceb2e826bdb58efbf12db6ba8c786173d93deaa26f0cb7708fb8fd09c2198951f171977649e85d25f461fa452b855ce2c402d7", 0xe}) (async) ioctl$auto_USB_RAW_IOCTL_INIT(r4, 0x41015500, &(0x7f0000000440)={"33890936ba2d39681da7eb960ddb83603eeda72f7eba937031d10af308f3d0bd0dc775f8a217085e19dc05dc010c6fb5adb822788179318c27ea09f95a27293910e7549253e0fe318e0fdefd8e0f043dc8fc1bdd0a7fa489098983360c406356f3d4ff1809af9b4d1514da7a95e82775ff3ed320cc8a445be4a15d8406f352b6", "348303fdf9c168862aa8a19aaa5e3e89b5b65e77ee51f485c76bb60ec46f8653a26fec51ffb0e078e0dd0df58a159b50fb4f06495e5a181e323dae5f53714f2cd9a4e9bce062ebf596202f57d6ceb2e826bdb58efbf12db6ba8c786173d93deaa26f0cb7708fb8fd09c2198951f171977649e85d25f461fa452b855ce2c402d7", 0xe}) msgrcv$auto(0x0, 0x0, 0x5, 0x1, 0x5068accc) (async) msgrcv$auto(0x0, 0x0, 0x5, 0x1, 0x5068accc) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)=""/45, 0x2d) (async) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)=""/45, 0x2d) 765.073898ms ago: executing program 8 (id=1030): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/devices\x00', 0x600, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x9, 0x4, 0x0) r2 = socket(0x10, 0x2, 0x9) setsockopt$auto(r2, 0x104000000000010e, 0x1, 0x0, 0x16) close_range$auto(0x2, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) mmap$auto(0x0, 0x20009, 0xe0, 0xeb1, 0xffffffffffffffff, 0x4) write$auto(r1, 0x0, 0x8000000000000001) readv$auto(r3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) close_range$auto(0x2, 0x8000, 0x0) r4 = syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f00000041c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf25020000000800"/26, @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x80) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) preadv$auto(r0, &(0x7f0000000080)={0x0}, 0x6, 0x22, 0xffc) 350.596915ms ago: executing program 6 (id=1031): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/devices\x00', 0x600, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x22b42, 0x0) mmap$auto(0x0, 0x2000c, 0x6, 0xeb1, 0x401, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) read$auto(r1, &(0x7f0000000100)='nl80211\x00', 0xbe62) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000000000600010000000a0005000000000000000000b3fc010000000000000000000a0001000000000000000000060006000500000008000200", @ANYRES32=0x0, @ANYBLOB="080004000301"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) socket(0x2, 0x3, 0x6) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c014}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc5}, 0x1, 0x0, 0x5, 0x9}, 0x7}, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28c000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xe0, 0xeb1, 0xffffffffffffffff, 0x4) write$auto(r0, 0x0, 0x8000000000000001) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) 304.210352ms ago: executing program 9 (id=1032): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0) (async) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) write$auto_tty_fops_tty_io(r0, &(0x7f0000000200)="352c8efa610c0bcf83a4ebdb040000000000000021cb244b19a48bb5e0d12df9735b745b9554dfb0ad77a37be296ebe6f598901d632a206d9bb056d8c8d9a5b4cf165c931477ba53f3a80c522fc11555ea", 0x51) (async) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) (async) ustat$auto(0x801, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) (async) io_uring_setup$auto(0x1, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/graphics/fbcon/cursor_blink\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000140)='7\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) read$auto(r2, 0x0, 0xb4d3) (async) write$auto(0x3, 0x0, 0xffd8) (async) ioprio_get$auto_IOPRIO_WHO_PGRP(0x2, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) fsconfig$auto_XFS_DAX_NEVER(r4, 0x6, &(0x7f0000000180)='{*\\]\x00', &(0x7f0000000280)="672fa97305c87621ab7aa624d1fe6f2babdb0e11e3795a87e4bb39db19c856282af3ff6a286eda1e87c2b54f5ac06c4d54d3bb233544f3e720b8f7ed5c19990a553699b7a128fc23577e6e0817a5718827a41ffe51506526865597b3984a37d2b9fdc5af58197acc5e619df3a901ecc719b41b875986eb8100c1f976314529", 0x2) 2.654539ms ago: executing program 0 (id=1033): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0xb, 0x8000f, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) socket(0x2, 0x3, 0xa) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x5, 0x0, 0x28) futex_requeue$auto(&(0x7f0000000180)={0x80000000000003c3, 0x406, 0x4}, 0x47d, 0x5, 0x10009) close_range$auto(0x2, 0x5, 0x0) getsockopt$auto_SO_LOCK_FILTER(r0, 0x0, 0x2c, 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/erspan0/statistics/rx_over_errors\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/44, 0x2c) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x810) r3 = socket(0xa, 0x3, 0x3a) close$auto(r3) io_uring_setup$auto(0x6, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r4, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r4, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0xc, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) semget$auto(0xb, 0xe, 0xe0000) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) 0s ago: executing program 8 (id=1034): r0 = gettid() rt_tgsigqueueinfo$auto(r0, r0, 0x620, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, 0x0, 0x24008831) ioctl$auto_LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xffffffffffffffff) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x80302, 0x0) ioctl$auto_SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000080)=0xffffffff) mmap$auto(0x0, 0x42000b, 0x3, 0x14, 0xffffffffffffffff, 0x9) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1e2142, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x2, 0x400000) socket(0x2, 0x3, 0x9) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001ac0), 0xffffffffffffffff) r5 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fd038004001298"], 0x20}, 0x1, 0x0, 0x0, 0x4000012}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYRESOCT=r3, @ANYRESDEC=r5], 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20008800) kernel console output (not intermixed with test programs): ][ T6021] ======================================================= [ 108.163769][ T6021] WARNING: The mand mount option has been deprecated and [ 108.163769][ T6021] and is ignored by this kernel. Remove the mand [ 108.163769][ T6021] option from the mount to silence this warning. [ 108.163769][ T6021] ======================================================= [ 108.828218][ T6049] random: crng reseeded on system resumption [ 108.919013][ T6049] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 109.755643][ T6042] netlink: 16 bytes leftover after parsing attributes in process `syz.0.25'. [ 110.358699][ T6085] random: crng reseeded on system resumption [ 111.434839][ T6079] FAULT_INJECTION: forcing a failure. [ 111.434839][ T6079] name fail_futex, interval 1, probability 0, space 0, times 1 [ 111.487182][ T6079] CPU: 0 UID: 0 PID: 6079 Comm: syz.1.29 Not tainted syzkaller #0 PREEMPT(full) [ 111.487221][ T6079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 111.487236][ T6079] Call Trace: [ 111.487244][ T6079] [ 111.487255][ T6079] dump_stack_lvl+0x16c/0x1f0 [ 111.487289][ T6079] should_fail_ex+0x512/0x640 [ 111.487321][ T6079] get_futex_key+0x293/0x1560 [ 111.487349][ T6079] ? __pfx_get_futex_key+0x10/0x10 [ 111.487373][ T6079] ? __mutex_trylock_common+0xe9/0x250 [ 111.487406][ T6079] futex_wake+0xea/0x530 [ 111.487426][ T6079] ? __pfx_futex_wake+0x10/0x10 [ 111.487452][ T6079] do_futex+0x1e3/0x350 [ 111.487478][ T6079] ? __pfx_do_futex+0x10/0x10 [ 111.487502][ T6079] ? __might_fault+0xe3/0x190 [ 111.487527][ T6079] mm_release+0x24e/0x300 [ 111.487560][ T6079] do_exit+0x68e/0x2bf0 [ 111.487579][ T6079] ? __pfx_do_exit+0x10/0x10 [ 111.487593][ T6079] ? do_raw_spin_lock+0x12c/0x2b0 [ 111.487611][ T6079] ? find_held_lock+0x2b/0x80 [ 111.487634][ T6079] do_group_exit+0xd3/0x2a0 [ 111.487651][ T6079] get_signal+0x2671/0x26d0 [ 111.487679][ T6079] ? poll_select_finish+0x376/0x6b0 [ 111.487699][ T6079] ? __pfx_get_signal+0x10/0x10 [ 111.487723][ T6079] ? __pfx_do_futex+0x10/0x10 [ 111.487751][ T6079] arch_do_signal_or_restart+0x8f/0x790 [ 111.487777][ T6079] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 111.487807][ T6079] ? xfd_validate_state+0x61/0x180 [ 111.487821][ T6079] ? __pfx___do_sys_prctl+0x10/0x10 [ 111.487843][ T6079] exit_to_user_mode_loop+0x85/0x130 [ 111.487862][ T6079] do_syscall_64+0x419/0x4b0 [ 111.487882][ T6079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.487900][ T6079] RIP: 0033:0x7fa31378eec9 [ 111.487914][ T6079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.487930][ T6079] RSP: 002b:00007fa314643038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 111.487947][ T6079] RAX: fffffffffffffdfe RBX: 00007fa3139e5fa0 RCX: 00007fa31378eec9 [ 111.487957][ T6079] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 111.487967][ T6079] RBP: 00007fa313811f91 R08: 0000000000000000 R09: 0000000000000000 [ 111.487976][ T6079] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 111.487986][ T6079] R13: 00007fa3139e6038 R14: 00007fa3139e5fa0 R15: 00007fffe90b1628 [ 111.488006][ T6079] [ 111.748670][ T6111] random: crng reseeded on system resumption [ 112.885722][ T6132] sp0: Synchronizing with TNC [ 113.268169][ T6136] random: crng reseeded on system resumption [ 113.945346][ T6140] netlink: 16 bytes leftover after parsing attributes in process `syz.2.39'. [ 114.376275][ T6155] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.687210][ T6179] random: crng reseeded on system resumption [ 118.569006][ T6200] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input5 [ 118.806749][ T979] Process accounting resumed [ 119.060069][ T6225] random: crng reseeded on system resumption [ 119.107457][ T6225] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 119.324112][ T6229] random: crng reseeded on system resumption [ 119.442075][ T6226] FAULT_INJECTION: forcing a failure. [ 119.442075][ T6226] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 119.476070][ T6226] CPU: 1 UID: 0 PID: 6226 Comm: syz.3.54 Not tainted syzkaller #0 PREEMPT(full) [ 119.476109][ T6226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 119.476137][ T6226] Call Trace: [ 119.476146][ T6226] [ 119.476157][ T6226] dump_stack_lvl+0x16c/0x1f0 [ 119.476193][ T6226] should_fail_ex+0x512/0x640 [ 119.476247][ T6226] should_fail_alloc_page+0xe7/0x130 [ 119.476287][ T6226] prepare_alloc_pages+0x3c2/0x610 [ 119.476323][ T6226] ? rcu_is_watching+0x12/0xc0 [ 119.476359][ T6226] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 119.476396][ T6226] ? __lock_acquire+0x62e/0x1ce0 [ 119.476441][ T6226] ? css_rstat_updated+0x1c2/0x510 [ 119.476479][ T6226] ? __pfx_css_rstat_updated+0x10/0x10 [ 119.476515][ T6226] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 119.476561][ T6226] ? rcu_is_watching+0x12/0xc0 [ 119.476601][ T6226] ? __lock_acquire+0xb97/0x1ce0 [ 119.476677][ T6226] ? __lock_acquire+0x62e/0x1ce0 [ 119.476738][ T6226] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 119.476785][ T6226] ? policy_nodemask+0xea/0x4e0 [ 119.476828][ T6226] alloc_pages_mpol+0x1fb/0x550 [ 119.476869][ T6226] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 119.476912][ T6226] ? filemap_get_entry+0x1a7/0x3b0 [ 119.476948][ T6226] folio_alloc_noprof+0x20/0x2d0 [ 119.476978][ T6226] filemap_alloc_folio_noprof+0x3a1/0x470 [ 119.477021][ T6226] ? filemap_add_folio+0x110/0x610 [ 119.477067][ T6226] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 119.477112][ T6226] ? rcu_is_watching+0x12/0xc0 [ 119.477159][ T6226] __filemap_get_folio+0x5e1/0xc30 [ 119.477201][ T6226] ioctx_alloc+0x761/0x2120 [ 119.477254][ T6226] ? __pfx_ioctx_alloc+0x10/0x10 [ 119.477286][ T6226] ? __might_fault+0x13b/0x190 [ 119.477328][ T6226] __x64_sys_io_setup+0xc9/0x210 [ 119.477361][ T6226] do_syscall_64+0xcd/0x4b0 [ 119.477388][ T6226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.477412][ T6226] RIP: 0033:0x7f7d2958eec9 [ 119.477432][ T6226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.477454][ T6226] RSP: 002b:00007f7d2a3e9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 119.477476][ T6226] RAX: ffffffffffffffda RBX: 00007f7d297e6090 RCX: 00007f7d2958eec9 [ 119.477491][ T6226] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 119.477506][ T6226] RBP: 00007f7d29611f91 R08: 0000000000000000 R09: 0000000000000000 [ 119.477520][ T6226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.477541][ T6226] R13: 00007f7d297e6128 R14: 00007f7d297e6090 R15: 00007ffd5b533fa8 [ 119.477574][ T6226] [ 122.088759][ T6255] netlink: 16 bytes leftover after parsing attributes in process `syz.3.59'. [ 123.460899][ T6270] syz.0.64 (6270) used greatest stack depth: 17928 bytes left [ 123.479701][ T6274] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 123.506874][ T6274] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 123.575310][ T6274] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 123.611387][ T6274] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 123.637074][ T6274] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 123.659871][ T6274] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 123.676192][ T6274] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 123.690314][ T6274] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 123.705179][ T6274] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 123.718655][ T6274] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 123.732954][ T6274] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 123.748495][ T6274] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 124.859225][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.657210][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.736906][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.737025][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.693170][ T6329] sp0: Synchronizing with TNC [ 126.718408][ T6329] sp0: Found TNC [ 126.937701][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.306371][ T6350] tipc: Started in network mode [ 127.314807][ T6350] tipc: Node identity ee00, cluster identity 4711 [ 127.321643][ T6350] tipc: Node number set to 60928 [ 127.746962][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.816933][ T5837] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.827122][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.874140][ T6327] kexec: Could not allocate control_code_buffer [ 128.020342][ T6350] Process accounting resumed [ 128.454139][ T6355] netlink: 28 bytes leftover after parsing attributes in process `syz.0.81'. [ 128.571904][ T6355] team0: Port device team_slave_0 removed [ 129.016994][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.793618][ T6386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.86'. [ 129.819212][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 129.899674][ T5837] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.899757][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.046612][ T6409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.92'. [ 131.068435][ T6422] random: crng reseeded on system resumption [ 131.308764][ T6422] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 131.823773][ T6422] FAULT_INJECTION: forcing a failure. [ 131.823773][ T6422] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 131.848449][ T6422] CPU: 0 UID: 0 PID: 6422 Comm: syz.1.94 Not tainted syzkaller #0 PREEMPT(full) [ 131.848489][ T6422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 131.848505][ T6422] Call Trace: [ 131.848515][ T6422] [ 131.848526][ T6422] dump_stack_lvl+0x16c/0x1f0 [ 131.848564][ T6422] should_fail_ex+0x512/0x640 [ 131.848606][ T6422] should_fail_alloc_page+0xe7/0x130 [ 131.848650][ T6422] prepare_alloc_pages+0x3c2/0x610 [ 131.848692][ T6422] ? rcu_is_watching+0x12/0xc0 [ 131.848730][ T6422] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 131.848770][ T6422] ? __lock_acquire+0x62e/0x1ce0 [ 131.848818][ T6422] ? css_rstat_updated+0x1c2/0x510 [ 131.848858][ T6422] ? __pfx_css_rstat_updated+0x10/0x10 [ 131.848897][ T6422] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 131.848938][ T6422] ? rcu_is_watching+0x12/0xc0 [ 131.848980][ T6422] ? __lock_acquire+0xb97/0x1ce0 [ 131.849029][ T6422] ? __lock_acquire+0x62e/0x1ce0 [ 131.849075][ T6422] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 131.849112][ T6422] ? policy_nodemask+0xea/0x4e0 [ 131.849157][ T6422] alloc_pages_mpol+0x1fb/0x550 [ 131.849200][ T6422] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 131.849256][ T6422] ? filemap_get_entry+0x1a7/0x3b0 [ 131.849297][ T6422] folio_alloc_noprof+0x20/0x2d0 [ 131.849323][ T6422] filemap_alloc_folio_noprof+0x3a1/0x470 [ 131.849365][ T6422] ? filemap_add_folio+0x110/0x610 [ 131.849401][ T6422] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 131.849444][ T6422] ? rcu_is_watching+0x12/0xc0 [ 131.849489][ T6422] __filemap_get_folio+0x5e1/0xc30 [ 131.849536][ T6422] ioctx_alloc+0x761/0x2120 [ 131.849592][ T6422] ? __pfx_ioctx_alloc+0x10/0x10 [ 131.849625][ T6422] ? __might_fault+0x13b/0x190 [ 131.849667][ T6422] __x64_sys_io_setup+0xc9/0x210 [ 131.849707][ T6422] do_syscall_64+0xcd/0x4b0 [ 131.849740][ T6422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.849767][ T6422] RIP: 0033:0x7fa31378eec9 [ 131.849791][ T6422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.849816][ T6422] RSP: 002b:00007fa314643038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 131.849844][ T6422] RAX: ffffffffffffffda RBX: 00007fa3139e5fa0 RCX: 00007fa31378eec9 [ 131.849862][ T6422] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 131.849881][ T6422] RBP: 00007fa313811f91 R08: 0000000000000000 R09: 0000000000000000 [ 131.849898][ T6422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.849915][ T6422] R13: 00007fa3139e6038 R14: 00007fa3139e5fa0 R15: 00007fffe90b1628 [ 131.849953][ T6422] [ 132.413104][ T6441] random: crng reseeded on system resumption [ 134.822884][ T6486] random: crng reseeded on system resumption [ 135.432691][ T5840] Bluetooth: hci2: unexpected subevent 0x0c length: 118 > 5 [ 135.621373][ T6499] process 'syz.2.109' launched ':,' with NULL argv: empty string added [ 135.845667][ T6501] random: crng reseeded on system resumption [ 138.304929][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.313109][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.685589][ T6592] random: crng reseeded on system resumption [ 140.926121][ T6587] netlink: 16 bytes leftover after parsing attributes in process `syz.0.127'. [ 142.111921][ T6618] random: crng reseeded on system resumption [ 144.538214][ T6658] random: crng reseeded on system resumption [ 145.029617][ T6659] netlink: 334 bytes leftover after parsing attributes in process `syz.3.139'. [ 146.478092][ T6678] vivid-003: ================= START STATUS ================= [ 146.486153][ T6678] vivid-003: Radio HW Seek Mode: Bounded [ 146.492566][ T6678] vivid-003: Radio Programmable HW Seek: false [ 146.499152][ T6678] vivid-003: RDS Rx I/O Mode: Block I/O [ 146.504775][ T6678] vivid-003: Generate RBDS Instead of RDS: false [ 146.511516][ T6678] vivid-003: RDS Reception: true [ 146.516544][ T6678] vivid-003: RDS Program Type: 0 inactive [ 146.522517][ T6678] vivid-003: RDS PS Name: inactive [ 146.527982][ T6678] vivid-003: RDS Radio Text: inactive [ 146.533544][ T6678] vivid-003: RDS Traffic Announcement: false inactive [ 146.541537][ T6678] vivid-003: RDS Traffic Program: false inactive [ 146.548730][ T6678] vivid-003: RDS Music: false inactive [ 146.554304][ T6678] vivid-003: ================== END STATUS ================== [ 146.910466][ T6685] FAULT_INJECTION: forcing a failure. [ 146.910466][ T6685] name failslab, interval 1, probability 0, space 0, times 0 [ 146.936221][ T6685] CPU: 1 UID: 0 PID: 6685 Comm: syz.1.146 Not tainted syzkaller #0 PREEMPT(full) [ 146.936248][ T6685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 146.936258][ T6685] Call Trace: [ 146.936264][ T6685] [ 146.936274][ T6685] dump_stack_lvl+0x16c/0x1f0 [ 146.936298][ T6685] should_fail_ex+0x512/0x640 [ 146.936321][ T6685] ? fs_reclaim_acquire+0xae/0x150 [ 146.936349][ T6685] should_failslab+0xc2/0x120 [ 146.936376][ T6685] __kmalloc_noprof+0xdd/0x880 [ 146.936394][ T6685] ? tomoyo_encode2+0x100/0x3e0 [ 146.936425][ T6685] ? tomoyo_encode2+0x100/0x3e0 [ 146.936449][ T6685] tomoyo_encode2+0x100/0x3e0 [ 146.936478][ T6685] tomoyo_encode+0x29/0x50 [ 146.936504][ T6685] tomoyo_realpath_from_path+0x18f/0x6e0 [ 146.936538][ T6685] tomoyo_check_open_permission+0x2ab/0x3c0 [ 146.936562][ T6685] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 146.936606][ T6685] ? do_raw_spin_lock+0x12c/0x2b0 [ 146.936632][ T6685] tomoyo_file_open+0x6b/0x90 [ 146.936651][ T6685] security_file_open+0x84/0x1e0 [ 146.936677][ T6685] do_dentry_open+0x596/0x1530 [ 146.936706][ T6685] vfs_open+0x82/0x3f0 [ 146.936734][ T6685] path_openat+0x1de4/0x2cb0 [ 146.936768][ T6685] ? __pfx_path_openat+0x10/0x10 [ 146.936796][ T6685] do_filp_open+0x20b/0x470 [ 146.936817][ T6685] ? __pfx_do_filp_open+0x10/0x10 [ 146.936855][ T6685] ? alloc_fd+0x471/0x7d0 [ 146.936880][ T6685] do_sys_openat2+0x11b/0x1d0 [ 146.936907][ T6685] ? __pfx_do_sys_openat2+0x10/0x10 [ 146.936948][ T6685] ? __sys_sendmsg+0x18c/0x220 [ 146.936990][ T6685] __x64_sys_openat+0x174/0x210 [ 146.937034][ T6685] ? __pfx___x64_sys_openat+0x10/0x10 [ 146.937074][ T6685] do_syscall_64+0xcd/0x4b0 [ 146.937096][ T6685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.937115][ T6685] RIP: 0033:0x7fa31378eec9 [ 146.937130][ T6685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.937147][ T6685] RSP: 002b:00007fa314643038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 146.937164][ T6685] RAX: ffffffffffffffda RBX: 00007fa3139e5fa0 RCX: 00007fa31378eec9 [ 146.937175][ T6685] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 146.937185][ T6685] RBP: 00007fa313811f91 R08: 0000000000000000 R09: 0000000000000000 [ 146.937195][ T6685] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 146.937209][ T6685] R13: 00007fa3139e6038 R14: 00007fa3139e5fa0 R15: 00007fffe90b1628 [ 146.937247][ T6685] [ 147.245513][ T6685] ERROR: Out of memory at tomoyo_realpath_from_path. [ 147.776854][ T30] audit: type=1800 audit(1759514440.886:2): pid=6690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.148" name="members" dev="configfs" ino=11613 res=0 errno=0 [ 147.900612][ T6695] random: crng reseeded on system resumption [ 151.450785][ T6769] random: crng reseeded on system resumption [ 152.880940][ T6795] random: crng reseeded on system resumption [ 154.853363][ T6825] random: crng reseeded on system resumption [ 156.123789][ T6832] netlink: 16 bytes leftover after parsing attributes in process `syz.2.174'. [ 156.416653][ T6851] random: crng reseeded on system resumption [ 156.454013][ T6852] netlink: 28 bytes leftover after parsing attributes in process `syz.1.177'. [ 157.830627][ T6873] random: crng reseeded on system resumption [ 158.607603][ T6874] Process accounting paused [ 159.260555][ T6885] sp0: Synchronizing with TNC [ 159.289323][ T6885] sp0: Found TNC [ 161.215117][ T6920] random: crng reseeded on system resumption [ 161.702117][ T6928] usb usb17: usbfs: process 6928 (syz.0.191) did not claim interface 0 before use [ 163.058030][ T6930] netlink: 'syz.1.193': attribute type 1 has an invalid length. [ 163.239253][ T6953] mmap: syz.3.195 (6953) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 163.404170][ T6957] random: crng reseeded on system resumption [ 163.914515][ T6957] FAULT_INJECTION: forcing a failure. [ 163.914515][ T6957] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 163.990266][ T6957] CPU: 0 UID: 0 PID: 6957 Comm: syz.0.197 Not tainted syzkaller #0 PREEMPT(full) [ 163.990310][ T6957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 163.990328][ T6957] Call Trace: [ 163.990338][ T6957] [ 163.990350][ T6957] dump_stack_lvl+0x16c/0x1f0 [ 163.990390][ T6957] should_fail_ex+0x512/0x640 [ 163.990433][ T6957] should_fail_alloc_page+0xe7/0x130 [ 163.990482][ T6957] prepare_alloc_pages+0x3c2/0x610 [ 163.990524][ T6957] ? kmem_cache_alloc_lru_noprof+0x2a5/0x6e0 [ 163.990557][ T6957] ? rcu_is_watching+0x12/0xc0 [ 163.990600][ T6957] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 163.990644][ T6957] ? __lock_acquire+0x62e/0x1ce0 [ 163.990694][ T6957] ? css_rstat_updated+0x1c2/0x510 [ 163.990733][ T6957] ? __pfx_css_rstat_updated+0x10/0x10 [ 163.990772][ T6957] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 163.990814][ T6957] ? rcu_is_watching+0x12/0xc0 [ 163.990857][ T6957] ? __lock_acquire+0xb97/0x1ce0 [ 163.990906][ T6957] ? __lock_acquire+0x62e/0x1ce0 [ 163.990951][ T6957] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 163.990988][ T6957] ? policy_nodemask+0xea/0x4e0 [ 163.991045][ T6957] alloc_pages_mpol+0x1fb/0x550 [ 163.991091][ T6957] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 163.991138][ T6957] ? filemap_get_entry+0x1a7/0x3b0 [ 163.991180][ T6957] folio_alloc_noprof+0x20/0x2d0 [ 163.991211][ T6957] filemap_alloc_folio_noprof+0x3a1/0x470 [ 163.991252][ T6957] ? filemap_add_folio+0x110/0x610 [ 163.991282][ T6957] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 163.991328][ T6957] ? rcu_is_watching+0x12/0xc0 [ 163.991375][ T6957] __filemap_get_folio+0x5e1/0xc30 [ 163.991421][ T6957] ioctx_alloc+0x761/0x2120 [ 163.991478][ T6957] ? __pfx_ioctx_alloc+0x10/0x10 [ 163.991511][ T6957] ? __might_fault+0x13b/0x190 [ 163.991556][ T6957] __x64_sys_io_setup+0xc9/0x210 [ 163.991598][ T6957] do_syscall_64+0xcd/0x4b0 [ 163.991634][ T6957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.991660][ T6957] RIP: 0033:0x7f24da78eec9 [ 163.991684][ T6957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.991712][ T6957] RSP: 002b:00007f24db646038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 163.991742][ T6957] RAX: ffffffffffffffda RBX: 00007f24da9e5fa0 RCX: 00007f24da78eec9 [ 163.991761][ T6957] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 163.991779][ T6957] RBP: 00007f24da811f91 R08: 0000000000000000 R09: 0000000000000000 [ 163.991797][ T6957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.991814][ T6957] R13: 00007f24da9e6038 R14: 00007f24da9e5fa0 R15: 00007ffce4c86ae8 [ 163.991854][ T6957] [ 164.259664][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.276981][ T6966] random: crng reseeded on system resumption [ 165.774975][ T6987] netlink: 16 bytes leftover after parsing attributes in process `syz.0.199'. [ 166.796006][ T7002] zswap: compressor not available [ 167.140914][ T7004] zswap: compressor not available [ 167.626101][ T7027] FAULT_INJECTION: forcing a failure. [ 167.626101][ T7027] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 167.699217][ T7027] CPU: 0 UID: 0 PID: 7027 Comm: syz.0.204 Not tainted syzkaller #0 PREEMPT(full) [ 167.699259][ T7027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 167.699274][ T7027] Call Trace: [ 167.699283][ T7027] [ 167.699295][ T7027] dump_stack_lvl+0x16c/0x1f0 [ 167.699333][ T7027] should_fail_ex+0x512/0x640 [ 167.699371][ T7027] should_fail_alloc_page+0xe7/0x130 [ 167.699417][ T7027] prepare_alloc_pages+0x3c2/0x610 [ 167.699457][ T7027] ? rcu_is_watching+0x12/0xc0 [ 167.699498][ T7027] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 167.699538][ T7027] ? __lock_acquire+0x62e/0x1ce0 [ 167.699583][ T7027] ? css_rstat_updated+0x1c2/0x510 [ 167.699620][ T7027] ? __pfx_css_rstat_updated+0x10/0x10 [ 167.699657][ T7027] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 167.699695][ T7027] ? rcu_is_watching+0x12/0xc0 [ 167.699735][ T7027] ? __lock_acquire+0xb97/0x1ce0 [ 167.699780][ T7027] ? __lock_acquire+0x62e/0x1ce0 [ 167.699823][ T7027] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 167.699857][ T7027] ? policy_nodemask+0xea/0x4e0 [ 167.699901][ T7027] alloc_pages_mpol+0x1fb/0x550 [ 167.699943][ T7027] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 167.699987][ T7027] ? filemap_get_entry+0x1a7/0x3b0 [ 167.700026][ T7027] folio_alloc_noprof+0x20/0x2d0 [ 167.700061][ T7027] filemap_alloc_folio_noprof+0x3a1/0x470 [ 167.700101][ T7027] ? filemap_add_folio+0x110/0x610 [ 167.700136][ T7027] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 167.700178][ T7027] ? rcu_is_watching+0x12/0xc0 [ 167.700221][ T7027] __filemap_get_folio+0x5e1/0xc30 [ 167.700264][ T7027] ioctx_alloc+0x761/0x2120 [ 167.700317][ T7027] ? __pfx_ioctx_alloc+0x10/0x10 [ 167.700349][ T7027] ? __might_fault+0x13b/0x190 [ 167.700391][ T7027] __x64_sys_io_setup+0xc9/0x210 [ 167.700428][ T7027] do_syscall_64+0xcd/0x4b0 [ 167.700461][ T7027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.700490][ T7027] RIP: 0033:0x7f24da78eec9 [ 167.700514][ T7027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.700540][ T7027] RSP: 002b:00007f24db646038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 167.700568][ T7027] RAX: ffffffffffffffda RBX: 00007f24da9e5fa0 RCX: 00007f24da78eec9 [ 167.700587][ T7027] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 167.700603][ T7027] RBP: 00007f24da811f91 R08: 0000000000000000 R09: 0000000000000000 [ 167.700619][ T7027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.700635][ T7027] R13: 00007f24da9e6038 R14: 00007f24da9e5fa0 R15: 00007ffce4c86ae8 [ 167.700673][ T7027] [ 169.609735][ T7050] random: crng reseeded on system resumption [ 171.763928][ T7064] kAFS: Invalid Command on /proc/fs/afs/cells file [ 173.004086][ T7103] random: crng reseeded on system resumption [ 177.181716][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.232'. [ 177.507525][ T7165] Invalid ELF header magic: != ELF [ 177.616106][ T7164] delete_channel: no stack [ 178.532462][ T7199] random: crng reseeded on system resumption [ 178.697157][ T7204] random: crng reseeded on system resumption [ 179.606479][ T7212] netlink: 16 bytes leftover after parsing attributes in process `syz.1.244'. [ 179.699567][ T7216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.244'. [ 179.758179][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.245'. [ 179.841215][ T7218] Invalid ELF header magic: != ELF [ 179.941370][ T7217] delete_channel: no stack [ 179.958893][ T7221] random: crng reseeded on system resumption [ 180.871683][ T7248] random: crng reseeded on system resumption [ 182.949896][ T7286] netlink: 28 bytes leftover after parsing attributes in process `syz.1.264'. [ 183.203664][ T7293] random: crng reseeded on system resumption [ 186.338582][ T7358] netlink: 28 bytes leftover after parsing attributes in process `syz.1.280'. [ 186.499905][ T7345] netlink: 16 bytes leftover after parsing attributes in process `syz.0.277'. [ 187.245254][ T7376] random: crng reseeded on system resumption [ 188.838171][ T7387] Process accounting resumed [ 189.419121][ T7408] random: crng reseeded on system resumption [ 190.708040][ T7413] netlink: 16 bytes leftover after parsing attributes in process `syz.3.292'. [ 192.329753][ T7472] netlink: 28 bytes leftover after parsing attributes in process `syz.0.298'. [ 192.493670][ T7484] random: crng reseeded on system resumption [ 194.214900][ T7518] random: crng reseeded on system resumption [ 196.663224][ T7561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.313'. [ 196.675024][ T7584] random: crng reseeded on system resumption [ 196.723613][ T7564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.313'. [ 198.596920][ T7622] netlink: 28 bytes leftover after parsing attributes in process `syz.3.322'. [ 198.634378][ T7620] random: crng reseeded on system resumption [ 199.741014][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.747472][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.718118][ T7665] random: crng reseeded on system resumption [ 202.196166][ T7679] netlink: 16 bytes leftover after parsing attributes in process `syz.3.334'. [ 202.434278][ T7693] random: crng reseeded on system resumption [ 203.055350][ T7706] netlink: 28 bytes leftover after parsing attributes in process `syz.0.340'. [ 203.988462][ T7714] random: crng reseeded on system resumption [ 204.371164][ T7719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.344'. [ 204.576920][ T7721] FAULT_INJECTION: forcing a failure. [ 204.576920][ T7721] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 204.616995][ T7721] CPU: 1 UID: 0 PID: 7721 Comm: syz.1.343 Not tainted syzkaller #0 PREEMPT(full) [ 204.617036][ T7721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 204.617052][ T7721] Call Trace: [ 204.617062][ T7721] [ 204.617074][ T7721] dump_stack_lvl+0x16c/0x1f0 [ 204.617121][ T7721] should_fail_ex+0x512/0x640 [ 204.617163][ T7721] should_fail_alloc_page+0xe7/0x130 [ 204.617211][ T7721] prepare_alloc_pages+0x3c2/0x610 [ 204.617254][ T7721] ? kmem_cache_alloc_lru_noprof+0x2a5/0x6e0 [ 204.617287][ T7721] ? rcu_is_watching+0x12/0xc0 [ 204.617328][ T7721] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 204.617371][ T7721] ? __lock_acquire+0x62e/0x1ce0 [ 204.617420][ T7721] ? css_rstat_updated+0x1c2/0x510 [ 204.617460][ T7721] ? __pfx_css_rstat_updated+0x10/0x10 [ 204.617498][ T7721] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 204.617540][ T7721] ? rcu_is_watching+0x12/0xc0 [ 204.617584][ T7721] ? __lock_acquire+0xb97/0x1ce0 [ 204.617633][ T7721] ? __lock_acquire+0x62e/0x1ce0 [ 204.617679][ T7721] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 204.617716][ T7721] ? policy_nodemask+0xea/0x4e0 [ 204.617763][ T7721] alloc_pages_mpol+0x1fb/0x550 [ 204.617809][ T7721] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 204.617853][ T7721] ? filemap_get_entry+0x1a7/0x3b0 [ 204.617910][ T7721] folio_alloc_noprof+0x20/0x2d0 [ 204.617946][ T7721] filemap_alloc_folio_noprof+0x3a1/0x470 [ 204.617991][ T7721] ? filemap_add_folio+0x110/0x610 [ 204.618029][ T7721] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 204.618075][ T7721] ? rcu_is_watching+0x12/0xc0 [ 204.618148][ T7721] __filemap_get_folio+0x5e1/0xc30 [ 204.618199][ T7721] ioctx_alloc+0x761/0x2120 [ 204.618262][ T7721] ? __pfx_ioctx_alloc+0x10/0x10 [ 204.618296][ T7721] ? __might_fault+0x13b/0x190 [ 204.618346][ T7721] __x64_sys_io_setup+0xc9/0x210 [ 204.618388][ T7721] do_syscall_64+0xcd/0x4b0 [ 204.618426][ T7721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.618456][ T7721] RIP: 0033:0x7fa31378eec9 [ 204.618480][ T7721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.618508][ T7721] RSP: 002b:00007fa314622038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 204.618536][ T7721] RAX: ffffffffffffffda RBX: 00007fa3139e6090 RCX: 00007fa31378eec9 [ 204.618555][ T7721] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 204.618572][ T7721] RBP: 00007fa313811f91 R08: 0000000000000000 R09: 0000000000000000 [ 204.618589][ T7721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.618606][ T7721] R13: 00007fa3139e6128 R14: 00007fa3139e6090 R15: 00007fffe90b1628 [ 204.618647][ T7721] [ 208.587256][ T7810] random: crng reseeded on system resumption [ 209.593404][ T7792] netlink: 'syz.0.356': attribute type 1 has an invalid length. [ 211.520686][ T7841] netlink: 16 bytes leftover after parsing attributes in process `syz.3.364'. [ 211.860367][ T7883] random: crng reseeded on system resumption [ 212.325828][ T7868] netlink: 'syz.0.365': attribute type 1 has an invalid length. [ 212.364042][ T7889] netlink: 28 bytes leftover after parsing attributes in process `syz.1.370'. [ 212.435334][ T7883] FAULT_INJECTION: forcing a failure. [ 212.435334][ T7883] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 212.467305][ T7883] CPU: 0 UID: 0 PID: 7883 Comm: syz.3.368 Not tainted syzkaller #0 PREEMPT(full) [ 212.467349][ T7883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.467367][ T7883] Call Trace: [ 212.467377][ T7883] [ 212.467388][ T7883] dump_stack_lvl+0x16c/0x1f0 [ 212.467427][ T7883] should_fail_ex+0x512/0x640 [ 212.467469][ T7883] should_fail_alloc_page+0xe7/0x130 [ 212.467516][ T7883] prepare_alloc_pages+0x3c2/0x610 [ 212.467560][ T7883] ? rcu_is_watching+0x12/0xc0 [ 212.467600][ T7883] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 212.467642][ T7883] ? __lock_acquire+0x62e/0x1ce0 [ 212.467691][ T7883] ? css_rstat_updated+0x1c2/0x510 [ 212.467723][ T7883] ? __pfx_css_rstat_updated+0x10/0x10 [ 212.467754][ T7883] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 212.467787][ T7883] ? rcu_is_watching+0x12/0xc0 [ 212.467821][ T7883] ? __lock_acquire+0xb97/0x1ce0 [ 212.467857][ T7883] ? __lock_acquire+0x62e/0x1ce0 [ 212.467897][ T7883] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 212.467948][ T7883] ? policy_nodemask+0xea/0x4e0 [ 212.467993][ T7883] alloc_pages_mpol+0x1fb/0x550 [ 212.468026][ T7883] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 212.468069][ T7883] ? filemap_get_entry+0x1a7/0x3b0 [ 212.468109][ T7883] folio_alloc_noprof+0x20/0x2d0 [ 212.468143][ T7883] filemap_alloc_folio_noprof+0x3a1/0x470 [ 212.468176][ T7883] ? filemap_add_folio+0x110/0x610 [ 212.468210][ T7883] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 212.468253][ T7883] ? rcu_is_watching+0x12/0xc0 [ 212.468294][ T7883] __filemap_get_folio+0x5e1/0xc30 [ 212.468339][ T7883] ioctx_alloc+0x761/0x2120 [ 212.468395][ T7883] ? __pfx_ioctx_alloc+0x10/0x10 [ 212.468430][ T7883] ? __might_fault+0x13b/0x190 [ 212.468477][ T7883] __x64_sys_io_setup+0xc9/0x210 [ 212.468519][ T7883] do_syscall_64+0xcd/0x4b0 [ 212.468555][ T7883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.468582][ T7883] RIP: 0033:0x7f7d2958eec9 [ 212.468604][ T7883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.468626][ T7883] RSP: 002b:00007f7d2a40a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 212.468650][ T7883] RAX: ffffffffffffffda RBX: 00007f7d297e5fa0 RCX: 00007f7d2958eec9 [ 212.468668][ T7883] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 212.468684][ T7883] RBP: 00007f7d29611f91 R08: 0000000000000000 R09: 0000000000000000 [ 212.468698][ T7883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.468712][ T7883] R13: 00007f7d297e6038 R14: 00007f7d297e5fa0 R15: 00007ffd5b533fa8 [ 212.468746][ T7883] [ 213.300284][ T7904] random: crng reseeded on system resumption [ 216.742754][ T7981] netlink: 28 bytes leftover after parsing attributes in process `syz.1.393'. [ 217.931339][ T8001] netlink: 16 bytes leftover after parsing attributes in process `syz.1.389'. [ 218.678752][ T8003] netlink: 'syz.2.387': attribute type 1 has an invalid length. [ 219.818473][ T7989] Process accounting paused [ 221.174568][ T8073] random: crng reseeded on system resumption [ 221.660852][ T8073] FAULT_INJECTION: forcing a failure. [ 221.660852][ T8073] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 221.681905][ T8073] CPU: 0 UID: 0 PID: 8073 Comm: syz.3.400 Not tainted syzkaller #0 PREEMPT(full) [ 221.681948][ T8073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 221.681965][ T8073] Call Trace: [ 221.681976][ T8073] [ 221.681988][ T8073] dump_stack_lvl+0x16c/0x1f0 [ 221.682026][ T8073] should_fail_ex+0x512/0x640 [ 221.682068][ T8073] should_fail_alloc_page+0xe7/0x130 [ 221.682113][ T8073] prepare_alloc_pages+0x3c2/0x610 [ 221.682156][ T8073] ? kmem_cache_alloc_lru_noprof+0x2a5/0x6e0 [ 221.682185][ T8073] ? rcu_is_watching+0x12/0xc0 [ 221.682224][ T8073] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 221.682263][ T8073] ? __lock_acquire+0x62e/0x1ce0 [ 221.682311][ T8073] ? css_rstat_updated+0x1c2/0x510 [ 221.682351][ T8073] ? __pfx_css_rstat_updated+0x10/0x10 [ 221.682389][ T8073] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 221.682427][ T8073] ? rcu_is_watching+0x12/0xc0 [ 221.682469][ T8073] ? __lock_acquire+0xb97/0x1ce0 [ 221.682515][ T8073] ? __lock_acquire+0x62e/0x1ce0 [ 221.682561][ T8073] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 221.682596][ T8073] ? policy_nodemask+0xea/0x4e0 [ 221.682643][ T8073] alloc_pages_mpol+0x1fb/0x550 [ 221.682688][ T8073] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 221.682736][ T8073] ? filemap_get_entry+0x1a7/0x3b0 [ 221.682788][ T8073] folio_alloc_noprof+0x20/0x2d0 [ 221.682824][ T8073] filemap_alloc_folio_noprof+0x3a1/0x470 [ 221.682869][ T8073] ? filemap_add_folio+0x110/0x610 [ 221.682906][ T8073] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 221.682950][ T8073] ? rcu_is_watching+0x12/0xc0 [ 221.682996][ T8073] __filemap_get_folio+0x5e1/0xc30 [ 221.683042][ T8073] ioctx_alloc+0x761/0x2120 [ 221.683098][ T8073] ? __pfx_ioctx_alloc+0x10/0x10 [ 221.683131][ T8073] ? __might_fault+0x13b/0x190 [ 221.683176][ T8073] __x64_sys_io_setup+0xc9/0x210 [ 221.683218][ T8073] do_syscall_64+0xcd/0x4b0 [ 221.683254][ T8073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.683283][ T8073] RIP: 0033:0x7f7d2958eec9 [ 221.683308][ T8073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.683337][ T8073] RSP: 002b:00007f7d2a40a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 221.683367][ T8073] RAX: ffffffffffffffda RBX: 00007f7d297e5fa0 RCX: 00007f7d2958eec9 [ 221.683386][ T8073] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 221.683404][ T8073] RBP: 00007f7d29611f91 R08: 0000000000000000 R09: 0000000000000000 [ 221.683422][ T8073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.683438][ T8073] R13: 00007f7d297e6038 R14: 00007f7d297e5fa0 R15: 00007ffd5b533fa8 [ 221.683478][ T8073] [ 223.933439][ T8133] random: crng reseeded on system resumption [ 224.122891][ T8141] netlink: 28 bytes leftover after parsing attributes in process `syz.1.409'. [ 224.509312][ T8133] FAULT_INJECTION: forcing a failure. [ 224.509312][ T8133] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 224.540011][ T8133] CPU: 1 UID: 0 PID: 8133 Comm: syz.3.407 Not tainted syzkaller #0 PREEMPT(full) [ 224.540051][ T8133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 224.540067][ T8133] Call Trace: [ 224.540077][ T8133] [ 224.540088][ T8133] dump_stack_lvl+0x16c/0x1f0 [ 224.540125][ T8133] should_fail_ex+0x512/0x640 [ 224.540165][ T8133] should_fail_alloc_page+0xe7/0x130 [ 224.540210][ T8133] prepare_alloc_pages+0x3c2/0x610 [ 224.540249][ T8133] ? kmem_cache_alloc_lru_noprof+0x2a5/0x6e0 [ 224.540280][ T8133] ? rcu_is_watching+0x12/0xc0 [ 224.540318][ T8133] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 224.540357][ T8133] ? __lock_acquire+0x62e/0x1ce0 [ 224.540403][ T8133] ? css_rstat_updated+0x1c2/0x510 [ 224.540440][ T8133] ? __pfx_css_rstat_updated+0x10/0x10 [ 224.540474][ T8133] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 224.540511][ T8133] ? rcu_is_watching+0x12/0xc0 [ 224.540550][ T8133] ? __lock_acquire+0xb97/0x1ce0 [ 224.540595][ T8133] ? __lock_acquire+0x62e/0x1ce0 [ 224.540637][ T8133] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 224.540669][ T8133] ? policy_nodemask+0xea/0x4e0 [ 224.540709][ T8133] alloc_pages_mpol+0x1fb/0x550 [ 224.540759][ T8133] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 224.540800][ T8133] ? filemap_get_entry+0x1a7/0x3b0 [ 224.540839][ T8133] folio_alloc_noprof+0x20/0x2d0 [ 224.540867][ T8133] filemap_alloc_folio_noprof+0x3a1/0x470 [ 224.540906][ T8133] ? filemap_add_folio+0x110/0x610 [ 224.540939][ T8133] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 224.540979][ T8133] ? rcu_is_watching+0x12/0xc0 [ 224.541022][ T8133] __filemap_get_folio+0x5e1/0xc30 [ 224.541064][ T8133] ioctx_alloc+0x761/0x2120 [ 224.541115][ T8133] ? __pfx_ioctx_alloc+0x10/0x10 [ 224.541144][ T8133] ? __might_fault+0x13b/0x190 [ 224.541185][ T8133] __x64_sys_io_setup+0xc9/0x210 [ 224.541222][ T8133] do_syscall_64+0xcd/0x4b0 [ 224.541255][ T8133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.541284][ T8133] RIP: 0033:0x7f7d2958eec9 [ 224.541308][ T8133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.541333][ T8133] RSP: 002b:00007f7d2a40a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 224.541361][ T8133] RAX: ffffffffffffffda RBX: 00007f7d297e5fa0 RCX: 00007f7d2958eec9 [ 224.541380][ T8133] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 224.541397][ T8133] RBP: 00007f7d29611f91 R08: 0000000000000000 R09: 0000000000000000 [ 224.541414][ T8133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.541430][ T8133] R13: 00007f7d297e6038 R14: 00007f7d297e5fa0 R15: 00007ffd5b533fa8 [ 224.541469][ T8133] [ 225.270231][ T8158] random: crng reseeded on system resumption [ 228.499982][ T8200] netlink: 16 bytes leftover after parsing attributes in process `syz.2.419'. [ 229.779015][ T8226] netlink: 28 bytes leftover after parsing attributes in process `syz.3.423'. [ 230.307577][ T8248] ubi0: attaching mtd0 [ 230.365654][ T8248] ubi0: scanning is finished [ 230.432151][ T8248] ubi0: empty MTD device detected [ 230.693186][ T8248] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 230.701177][ T8248] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 230.719290][ T8248] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 230.752117][ T8248] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 230.777036][ T8248] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 230.802527][ T8248] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 230.875093][ T8248] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2866047243 [ 230.940318][ T8248] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 231.019456][ T8258] ubi0: background thread "ubi_bgt0d" started, PID 8258 [ 231.029804][ T8251] ubi0: detaching mtd0 [ 231.130656][ T8251] ubi0: mtd0 is detached [ 231.596038][ T8277] netlink: 28 bytes leftover after parsing attributes in process `syz.0.431'. [ 232.427057][ T8272] netlink: 'syz.3.430': attribute type 1 has an invalid length. [ 233.519776][ T8322] vhci_hcd: invalid port number 21 [ 234.120491][ T8336] capability: warning: `syz.1.437' uses 32-bit capabilities (legacy support in use) [ 234.851362][ T8341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.441'. [ 236.995481][ T8364] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 239.150038][ T8423] random: crng reseeded on system resumption [ 244.557666][ T8510] netlink: 342 bytes leftover after parsing attributes in process `syz.2.467'. [ 245.872578][ T8534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.470'. [ 246.379787][ T8546] random: crng reseeded on system resumption [ 247.433357][ T8570] random: crng reseeded on system resumption [ 249.033295][ T8594] netlink: 28 bytes leftover after parsing attributes in process `syz.1.481'. [ 250.138970][ T8601] Process accounting resumed [ 250.239745][ T8632] random: crng reseeded on system resumption [ 251.425429][ T8656] random: crng reseeded on system resumption [ 252.616364][ T8674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.494'. [ 254.582625][ T8706] netlink: 342 bytes leftover after parsing attributes in process `syz.0.497'. [ 254.997029][ T8715] can: request_module (can-proto-5) failed. [ 256.204307][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.504'. [ 256.491267][ T8745] random: crng reseeded on system resumption [ 258.408842][ T8766] MTRR 1 not used [ 258.711360][ T8773] sp0: Synchronizing with TNC [ 258.958201][ T8781] random: crng reseeded on system resumption [ 259.186626][ T8778] mkiss: ax0: crc mode is auto. [ 260.607151][ T8796] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 260.632074][ T8792] netlink: 'syz.1.515': attribute type 1 has an invalid length. [ 261.207216][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.213766][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.508350][ T8817] random: crng reseeded on system resumption [ 261.957085][ T8832] Line length is too long: Should be less than 4094 [ 263.151455][ T8845] netlink: 302 bytes leftover after parsing attributes in process `syz.0.526'. [ 263.308356][ T8812] netlink: 'syz.2.517': attribute type 1 has an invalid length. [ 264.224978][ T8860] random: crng reseeded on system resumption [ 265.019512][ T8872] block2mtd: device name too long [ 265.596102][ T8884] random: crng reseeded on system resumption [ 267.379213][ T8907] debugfs: '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211' [ 267.484897][ T30] audit: type=1800 audit(4294967301.380:3): pid=8910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.541" name="version" dev="configfs" ino=20750 res=0 errno=0 [ 271.206434][ T8958] netlink: 'syz.0.551': attribute type 1 has an invalid length. [ 271.342546][ T8974] random: crng reseeded on system resumption [ 271.751515][ T8981] random: crng reseeded on system resumption [ 272.740660][ T9000] ubi0: attaching mtd0 [ 272.753159][ T9000] ubi0: scanning is finished [ 272.974635][ T9000] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 272.994772][ T9000] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 273.017203][ T9000] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 273.065003][ T9000] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 273.118203][ T9000] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 273.145033][ T9000] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 273.236145][ T9000] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2866047243 [ 273.286923][ T9000] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 273.346842][ T9011] ubi0: background thread "ubi_bgt0d" started, PID 9011 [ 273.354054][ T9003] ubi0: detaching mtd0 [ 273.380612][ T9003] ubi0: mtd0 is detached [ 273.408795][ T9016] input: f¬ as /devices/virtual/input/input6 [ 273.866580][ T9027] random: crng reseeded on system resumption [ 274.096570][ T9034] ubi0: attaching mtd0 [ 274.110517][ T9032] input: f¬ as /devices/virtual/input/input7 [ 274.140404][ T9034] ubi0: scanning is finished [ 274.170810][ T9034] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 274.532426][ T9034] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 274.797416][ T9041] random: crng reseeded on system resumption [ 275.493941][ T9059] random: crng reseeded on system resumption [ 276.329919][ T9074] netlink: 342 bytes leftover after parsing attributes in process `syz.3.585'. [ 276.846813][ T9080] Invalid ELF header magic: != ELF [ 276.925618][ T9083] random: crng reseeded on system resumption [ 277.646449][ T9091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.588'. [ 278.533831][ T9118] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 278.805183][ T9120] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 279.787201][ T9144] random: crng reseeded on system resumption [ 279.819470][ T9147] ubi0: attaching mtd0 [ 279.825869][ T9147] ubi0: scanning is finished [ 279.831048][ T9147] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 280.010988][ T9147] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 280.215522][ T9153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.597'. [ 280.609824][ T9152] Process accounting paused [ 282.185706][ T9208] bond0: option peer_notif_delay: invalid value () [ 282.193232][ T9208] bond0: option peer_notif_delay: allowed values 0 - 300000 [ 282.670321][ T9209] netlink: 'syz.2.604': attribute type 1 has an invalid length. [ 285.873278][ T9261] netlink: 16 bytes leftover after parsing attributes in process `syz.2.612'. [ 286.023101][ T9264] nbd: must specify an index to disconnect [ 286.626451][ T9270] netlink: zone id is out of range [ 286.631741][ T9270] netlink: zone id is out of range [ 286.637437][ T9270] netlink: zone id is out of range [ 286.642596][ T9270] netlink: zone id is out of range [ 286.648588][ T9270] netlink: zone id is out of range [ 286.653740][ T9270] netlink: zone id is out of range [ 286.659543][ T9270] netlink: zone id is out of range [ 286.664692][ T9270] netlink: zone id is out of range [ 286.671476][ T9270] netlink: zone id is out of range [ 286.677373][ T9270] netlink: zone id is out of range [ 287.646840][ T9282] ubi0: attaching mtd0 [ 287.653674][ T9282] ubi0: scanning is finished [ 287.658936][ T9282] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 287.780322][ T9282] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 288.202505][ T30] audit: type=1800 audit(4294967302.590:4): pid=9292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.621" name="version" dev="configfs" ino=22052 res=0 errno=0 [ 288.281957][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 288.291539][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 288.308612][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 288.318113][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 288.327492][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 288.545903][ T9294] chnl_net:caif_netlink_parms(): no params data found [ 288.661622][ T9294] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.672205][ T9294] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.681273][ T9294] bridge_slave_0: entered allmulticast mode [ 288.689457][ T9294] bridge_slave_0: entered promiscuous mode [ 288.700654][ T9294] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.708399][ T9294] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.715695][ T9294] bridge_slave_1: entered allmulticast mode [ 288.724584][ T9294] bridge_slave_1: entered promiscuous mode [ 288.792937][ T9294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.808181][ T9294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.856210][ T9294] team0: Port device team_slave_0 added [ 288.871486][ T9294] team0: Port device team_slave_1 added [ 288.913662][ T9294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.927395][ T9294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.955876][ T9294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.969477][ T9294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.978324][ T9294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.004530][ T9294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.117889][ T9294] hsr_slave_0: entered promiscuous mode [ 289.126179][ T9294] hsr_slave_1: entered promiscuous mode [ 289.134647][ T9294] debugfs: 'hsr0' already exists in 'hsr' [ 289.141226][ T9294] Cannot create hsr debugfs directory [ 289.363687][ T9294] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 289.374473][ T9294] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 289.391456][ T9294] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 289.402824][ T9294] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 289.439281][ T9294] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.446854][ T9294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.455258][ T9294] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.462581][ T9294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.505035][ T3470] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.513878][ T3470] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.548889][ T9294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.570216][ T9294] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.582634][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.589876][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.608130][ T3470] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.615294][ T3470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.821782][ T9294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.051578][ T9294] veth0_vlan: entered promiscuous mode [ 290.064230][ T9294] veth1_vlan: entered promiscuous mode [ 290.095608][ T9294] veth0_macvtap: entered promiscuous mode [ 290.108340][ T9294] veth1_macvtap: entered promiscuous mode [ 290.128475][ T9294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.144637][ T9294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.164260][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.173374][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.192724][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.202819][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.296425][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.320254][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.361656][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.370890][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.377721][ T5837] Bluetooth: hci4: command tx timeout [ 290.499185][ T9325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.619'. [ 290.594972][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 290.604847][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 290.615293][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 290.625708][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 290.635336][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 290.836435][ T9327] chnl_net:caif_netlink_parms(): no params data found [ 290.927936][ T9327] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.935114][ T9327] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.944141][ T9327] bridge_slave_0: entered allmulticast mode [ 290.951985][ T9327] bridge_slave_0: entered promiscuous mode [ 290.962949][ T9327] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.970198][ T9327] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.977873][ T9327] bridge_slave_1: entered allmulticast mode [ 290.985159][ T9327] bridge_slave_1: entered promiscuous mode [ 291.021192][ T9327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.035929][ T9327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.074299][ T9327] team0: Port device team_slave_0 added [ 291.082349][ T9327] team0: Port device team_slave_1 added [ 291.119624][ T9327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.128296][ T9327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.154988][ T9327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.169256][ T9327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.177673][ T9327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.203908][ T9327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.268837][ T9327] hsr_slave_0: entered promiscuous mode [ 291.275467][ T9327] hsr_slave_1: entered promiscuous mode [ 291.282830][ T9327] debugfs: 'hsr0' already exists in 'hsr' [ 291.290078][ T9327] Cannot create hsr debugfs directory [ 291.665387][ T9327] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 291.679868][ T9327] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 291.692117][ T9327] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 291.704422][ T9327] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 291.912020][ T9327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.941725][ T9327] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.959413][ T803] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.966873][ T803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.989806][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.999445][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.292705][ T9327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.467085][ T5840] Bluetooth: hci4: command tx timeout [ 292.699883][ T5840] Bluetooth: hci5: command tx timeout [ 292.741609][ T9327] veth0_vlan: entered promiscuous mode [ 292.781881][ T9327] veth1_vlan: entered promiscuous mode [ 292.854385][ T9327] veth0_macvtap: entered promiscuous mode [ 292.871178][ T9327] veth1_macvtap: entered promiscuous mode [ 292.911313][ T9327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.930348][ T9327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.963796][ T803] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.975864][ T803] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.993641][ T803] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.008308][ T803] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.105250][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.123724][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.199207][ T803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.207462][ T803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.425202][ T9370] random: crng reseeded on system resumption [ 293.787503][ T9365] netlink: 'syz.4.628': attribute type 1 has an invalid length. [ 294.537278][ T5840] Bluetooth: hci4: command tx timeout [ 294.777141][ T5840] Bluetooth: hci5: command tx timeout [ 295.513113][ T9398] netlink: 16 bytes leftover after parsing attributes in process `syz.5.631'. [ 295.683148][ T9413] netlink: 28 bytes leftover after parsing attributes in process `syz.5.632'. [ 296.570123][ T9425] random: crng reseeded on system resumption [ 296.624486][ T5840] Bluetooth: hci4: command tx timeout [ 296.856909][ T5840] Bluetooth: hci5: command tx timeout [ 297.695191][ T9433] netlink: 'syz.5.636': attribute type 1 has an invalid length. [ 297.716652][ T30] audit: type=1800 audit(4294967297.060:5): pid=9443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.637" name="version" dev="configfs" ino=22936 res=0 errno=0 [ 298.938456][ T5840] Bluetooth: hci5: command tx timeout [ 299.664839][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 299.676330][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 299.687875][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 299.707292][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 299.716931][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 300.292935][ T9487] random: crng reseeded on system resumption [ 300.310347][ T9487] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 300.429033][ T9487] FAULT_INJECTION: forcing a failure. [ 300.429033][ T9487] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 300.442860][ T9487] CPU: 1 UID: 0 PID: 9487 Comm: syz.5.642 Not tainted syzkaller #0 PREEMPT(full) [ 300.442900][ T9487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 300.442917][ T9487] Call Trace: [ 300.442927][ T9487] [ 300.442939][ T9487] dump_stack_lvl+0x16c/0x1f0 [ 300.442981][ T9487] should_fail_ex+0x512/0x640 [ 300.443022][ T9487] should_fail_alloc_page+0xe7/0x130 [ 300.443069][ T9487] prepare_alloc_pages+0x3c2/0x610 [ 300.443112][ T9487] ? rcu_is_watching+0x12/0xc0 [ 300.443153][ T9487] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 300.443195][ T9487] ? __lock_acquire+0x62e/0x1ce0 [ 300.443243][ T9487] ? css_rstat_updated+0x1c2/0x510 [ 300.443284][ T9487] ? __pfx_css_rstat_updated+0x10/0x10 [ 300.443318][ T9487] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 300.443356][ T9487] ? rcu_is_watching+0x12/0xc0 [ 300.443397][ T9487] ? __lock_acquire+0xb97/0x1ce0 [ 300.443444][ T9487] ? __lock_acquire+0x62e/0x1ce0 [ 300.443488][ T9487] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 300.443523][ T9487] ? policy_nodemask+0xea/0x4e0 [ 300.443586][ T9487] alloc_pages_mpol+0x1fb/0x550 [ 300.443629][ T9487] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 300.443673][ T9487] ? filemap_get_entry+0x1a7/0x3b0 [ 300.443714][ T9487] folio_alloc_noprof+0x20/0x2d0 [ 300.443743][ T9487] filemap_alloc_folio_noprof+0x3a1/0x470 [ 300.443786][ T9487] ? filemap_add_folio+0x110/0x610 [ 300.443822][ T9487] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 300.443868][ T9487] ? rcu_is_watching+0x12/0xc0 [ 300.443915][ T9487] __filemap_get_folio+0x5e1/0xc30 [ 300.443962][ T9487] ioctx_alloc+0x761/0x2120 [ 300.444019][ T9487] ? __pfx_ioctx_alloc+0x10/0x10 [ 300.444053][ T9487] ? __might_fault+0x13b/0x190 [ 300.444098][ T9487] __x64_sys_io_setup+0xc9/0x210 [ 300.444140][ T9487] do_syscall_64+0xcd/0x4b0 [ 300.444175][ T9487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.444205][ T9487] RIP: 0033:0x7fb1b838eec9 [ 300.444231][ T9487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.444261][ T9487] RSP: 002b:00007fb1b930d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 300.444290][ T9487] RAX: ffffffffffffffda RBX: 00007fb1b85e5fa0 RCX: 00007fb1b838eec9 [ 300.444311][ T9487] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 300.444329][ T9487] RBP: 00007fb1b8411f91 R08: 0000000000000000 R09: 0000000000000000 [ 300.444344][ T9487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.444360][ T9487] R13: 00007fb1b85e6038 R14: 00007fb1b85e5fa0 R15: 00007fff59c83d28 [ 300.444400][ T9487] [ 300.753709][ T9489] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 301.323591][ T9473] chnl_net:caif_netlink_parms(): no params data found [ 301.670142][ T9473] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.681326][ T9473] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.697949][ T9473] bridge_slave_0: entered allmulticast mode [ 301.710465][ T9473] bridge_slave_0: entered promiscuous mode [ 301.744410][ T9473] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.770567][ T9473] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.783830][ T9473] bridge_slave_1: entered allmulticast mode [ 301.796919][ T9473] bridge_slave_1: entered promiscuous mode [ 301.822898][ T5840] Bluetooth: hci6: command tx timeout [ 301.970867][ T9473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.005603][ T9473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.037665][ T9514] random: crng reseeded on system resumption [ 302.125989][ T9473] team0: Port device team_slave_0 added [ 302.147103][ T9473] team0: Port device team_slave_1 added [ 302.197393][ T9516] net_ratelimit: 138 callbacks suppressed [ 302.197418][ T9516] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 302.230217][ T9473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.247243][ T9473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.290991][ T9473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.316363][ T9473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.325904][ T9473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.352241][ T9473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.504226][ T9473] hsr_slave_0: entered promiscuous mode [ 302.523214][ T9473] hsr_slave_1: entered promiscuous mode [ 302.543950][ T9473] debugfs: 'hsr0' already exists in 'hsr' [ 302.564284][ T9473] Cannot create hsr debugfs directory [ 302.898178][ T9520] netlink: 28 bytes leftover after parsing attributes in process `syz.5.648'. [ 303.124128][ T9473] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 303.183468][ T9473] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 303.217178][ T9473] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 303.257380][ T9473] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 303.673044][ T9473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.774519][ T9473] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.819390][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.826619][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.877896][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.885146][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.906976][ T5840] Bluetooth: hci6: command tx timeout [ 304.862132][ T9473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.072816][ T9557] FAULT_INJECTION: forcing a failure. [ 305.072816][ T9557] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 305.201668][ T9557] CPU: 1 UID: 0 PID: 9557 Comm: syz.5.652 Not tainted syzkaller #0 PREEMPT(full) [ 305.201708][ T9557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 305.201726][ T9557] Call Trace: [ 305.201737][ T9557] [ 305.201748][ T9557] dump_stack_lvl+0x16c/0x1f0 [ 305.201787][ T9557] should_fail_ex+0x512/0x640 [ 305.201828][ T9557] _copy_from_user+0x2e/0xd0 [ 305.201867][ T9557] restore_altstack+0x93/0x170 [ 305.201896][ T9557] ? __pfx_restore_altstack+0x10/0x10 [ 305.201948][ T9557] ? _raw_spin_unlock_irq+0x23/0x50 [ 305.201993][ T9557] ? lockdep_hardirqs_on+0x7c/0x110 [ 305.202021][ T9557] ? _raw_spin_unlock_irq+0x2e/0x50 [ 305.202061][ T9557] ? set_current_blocked+0xdd/0x120 [ 305.202097][ T9557] __do_sys_rt_sigreturn+0x13c/0x230 [ 305.202139][ T9557] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 305.202190][ T9557] do_syscall_64+0xcd/0x4b0 [ 305.202223][ T9557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.202251][ T9557] RIP: 0033:0x7fb1b832af79 [ 305.202274][ T9557] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 305.202303][ T9557] RSP: 002b:00007fb1b930ca80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 305.202332][ T9557] RAX: ffffffffffffffda RBX: 00007fb1b85e5fa0 RCX: 00007fb1b832af79 [ 305.202352][ T9557] RDX: 00007fb1b930ca80 RSI: 00007fb1b930cbb0 RDI: 0000000000000011 [ 305.202370][ T9557] RBP: 00007fb1b8411f91 R08: 0000000000000000 R09: 0000000000000000 [ 305.202388][ T9557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.202405][ T9557] R13: 00007fb1b85e6038 R14: 00007fb1b85e5fa0 R15: 00007fff59c83d28 [ 305.202445][ T9557] [ 305.389786][ T5837] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 305.402476][ T5837] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 305.420221][ T5837] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 305.494359][ T5837] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 305.509886][ T5837] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 305.757271][ T9557] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 305.763600][ T9557] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 305.822496][ T9557] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 305.829430][ T9557] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 305.839131][ T9557] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 305.954118][ T9557] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 305.990671][ T5840] Bluetooth: hci6: command tx timeout [ 306.031497][ T9557] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 306.136506][ T9557] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 306.197518][ T9557] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 306.418796][ T9473] veth0_vlan: entered promiscuous mode [ 306.434968][ T9473] veth1_vlan: entered promiscuous mode [ 306.498888][ T9557] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 306.520219][ T9557] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 306.526349][ T9557] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 306.577350][ T9473] veth0_macvtap: entered promiscuous mode [ 306.584864][ T9557] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 306.609653][ T9557] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 306.612354][ T9473] veth1_macvtap: entered promiscuous mode [ 306.619411][ T9557] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 306.778658][ T9557] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 306.850499][ T9473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.914409][ T9473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.999724][ T59] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.043216][ T59] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.145876][ T59] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.187923][ T59] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.284757][ T9586] netlink: 'syz.4.653': attribute type 1 has an invalid length. [ 307.657169][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 307.819165][ T5840] Bluetooth: hci1: command 0x0c1a tx timeout [ 307.901057][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 307.908421][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 307.914622][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 308.029586][ T803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.075186][ T803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.147110][ T5840] Bluetooth: hci5: command 0x0c1a tx timeout [ 308.259692][ T9561] chnl_net:caif_netlink_parms(): no params data found [ 308.450834][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.471244][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.544768][ T5840] Bluetooth: hci6: command 0x0c1a tx timeout [ 308.619550][ T5840] Bluetooth: hci7: command 0x041b tx timeout [ 308.712600][ T9561] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.736265][ T9561] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.825737][ T9561] bridge_slave_0: entered allmulticast mode [ 308.847845][ T9561] bridge_slave_0: entered promiscuous mode [ 309.069562][ T9561] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.077068][ T9561] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.084346][ T9561] bridge_slave_1: entered allmulticast mode [ 309.105248][ T9561] bridge_slave_1: entered promiscuous mode [ 309.496412][ T9561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.589185][ T9608] netlink: 'syz.5.655': attribute type 1 has an invalid length. [ 309.741770][ T9561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.885318][ T9613] netlink: 16 bytes leftover after parsing attributes in process `syz.6.638'. [ 309.986791][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 310.123456][ T9561] team0: Port device team_slave_0 added [ 310.192678][ T9561] team0: Port device team_slave_1 added [ 310.217027][ T5840] Bluetooth: hci5: command 0x0c1a tx timeout [ 310.617148][ T5840] Bluetooth: hci6: command 0x0c1a tx timeout [ 310.707204][ T5840] Bluetooth: hci7: command 0x041b tx timeout [ 310.733721][ T9561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.787304][ T9561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.856744][ T9561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.189217][ T9561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.225089][ T9561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.297064][ T9561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.843739][ T9561] hsr_slave_0: entered promiscuous mode [ 311.859215][ T9561] hsr_slave_1: entered promiscuous mode [ 311.865884][ T9561] debugfs: 'hsr0' already exists in 'hsr' [ 311.872464][ T9561] Cannot create hsr debugfs directory [ 312.056882][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 312.297022][ T5840] Bluetooth: hci5: command 0x0c1a tx timeout [ 312.540647][ T9655] netlink: 28 bytes leftover after parsing attributes in process `syz.6.663'. [ 312.700046][ T5840] Bluetooth: hci6: command 0x0c1a tx timeout [ 312.777507][ T5840] Bluetooth: hci7: command 0x041b tx timeout [ 312.794480][ T9648] netlink: 16 bytes leftover after parsing attributes in process `syz.4.662'. [ 313.123304][ T9669] random: crng reseeded on system resumption [ 313.146544][ T9561] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 313.182662][ T9561] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 313.202383][ T9561] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 313.262570][ T9561] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 313.512753][ T9561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.537829][ T9561] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.603392][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.611039][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.684133][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.691384][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.932652][ T9693] random: crng reseeded on system resumption [ 314.586945][ T9561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.865737][ T5840] Bluetooth: hci7: command 0x041b tx timeout [ 315.666757][ T9561] veth0_vlan: entered promiscuous mode [ 315.684180][ T9561] veth1_vlan: entered promiscuous mode [ 315.861857][ T9561] veth0_macvtap: entered promiscuous mode [ 315.927753][ T9561] veth1_macvtap: entered promiscuous mode [ 316.005404][ T9561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.032147][ T9561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.066216][ T9616] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.077906][ T9616] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.473634][ T59] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.526559][ T59] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.937448][ T5840] Bluetooth: hci7: command 0x041b tx timeout [ 316.959665][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.012706][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.367921][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.416837][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.493916][ T9728] netlink: 16 bytes leftover after parsing attributes in process `syz.4.672'. [ 317.547206][ T9732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.672'. [ 318.080612][ T9733] netlink: 'syz.5.673': attribute type 1 has an invalid length. [ 318.949583][ T9755] FAULT_INJECTION: forcing a failure. [ 318.949583][ T9755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.969670][ T9755] CPU: 1 UID: 0 PID: 9755 Comm: syz.5.676 Not tainted syzkaller #0 PREEMPT(full) [ 318.969712][ T9755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 318.969728][ T9755] Call Trace: [ 318.969738][ T9755] [ 318.969750][ T9755] dump_stack_lvl+0x16c/0x1f0 [ 318.969787][ T9755] should_fail_ex+0x512/0x640 [ 318.969828][ T9755] _copy_to_user+0x32/0xd0 [ 318.969865][ T9755] simple_read_from_buffer+0xcb/0x170 [ 318.969898][ T9755] proc_fail_nth_read+0x197/0x240 [ 318.969933][ T9755] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.969969][ T9755] ? rw_verify_area+0xcf/0x6c0 [ 318.970000][ T9755] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.970035][ T9755] vfs_read+0x1e4/0xcf0 [ 318.970075][ T9755] ? __pfx___mutex_lock+0x10/0x10 [ 318.970105][ T9755] ? __pfx_vfs_read+0x10/0x10 [ 318.970149][ T9755] ? __fget_files+0x20e/0x3c0 [ 318.970192][ T9755] ksys_read+0x12a/0x250 [ 318.970227][ T9755] ? __pfx_ksys_read+0x10/0x10 [ 318.970273][ T9755] do_syscall_64+0xcd/0x4b0 [ 318.970306][ T9755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.970335][ T9755] RIP: 0033:0x7fb1b838d8dc [ 318.970360][ T9755] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 318.970389][ T9755] RSP: 002b:00007fb1b930d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 318.970424][ T9755] RAX: ffffffffffffffda RBX: 00007fb1b85e5fa0 RCX: 00007fb1b838d8dc [ 318.970443][ T9755] RDX: 000000000000000f RSI: 00007fb1b930d0a0 RDI: 0000000000000005 [ 318.970460][ T9755] RBP: 00007fb1b930d090 R08: 0000000000000000 R09: 0000000000000000 [ 318.970489][ T9755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.970505][ T9755] R13: 00007fb1b85e6038 R14: 00007fb1b85e5fa0 R15: 00007fff59c83d28 [ 318.970544][ T9755] [ 319.017704][ T5840] Bluetooth: hci7: command 0x041b tx timeout [ 319.353401][ T9759] random: crng reseeded on system resumption [ 319.941894][ T30] audit: type=1800 audit(4294967299.450:6): pid=9769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.679" name="version" dev="configfs" ino=26241 res=0 errno=0 [ 321.072355][ T9778] netlink: 28 bytes leftover after parsing attributes in process `syz.4.681'. [ 322.107315][ T9799] random: crng reseeded on system resumption [ 322.621683][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.628134][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.951569][ T9797] netlink: 'syz.6.682': attribute type 1 has an invalid length. [ 324.287181][ T9835] random: crng reseeded on system resumption [ 324.803575][ T30] audit: type=1800 audit(4294967299.030:7): pid=9846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.689" name="version" dev="configfs" ino=26817 res=0 errno=0 [ 327.141893][ T9863] netlink: 'syz.4.691': attribute type 1 has an invalid length. [ 328.519552][ T9897] random: crng reseeded on system resumption [ 329.105242][ T9898] sp0: Synchronizing with TNC [ 329.260892][ T9896] netlink: 16 bytes leftover after parsing attributes in process `syz.6.697'. [ 330.288632][ T9932] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 331.836150][ T30] audit: type=1800 audit(4294967301.810:8): pid=9962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.704" name="version" dev="configfs" ino=26977 res=0 errno=0 [ 333.323219][ T9988] netlink: 28 bytes leftover after parsing attributes in process `syz.7.707'. [ 333.374374][ T9988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.407311][ T9988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.428228][ T9988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.440975][ T9988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.881902][ T9993] zram0: detected capacity change from 0 to 8 [ 334.513003][ T9984] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 334.524464][ T9984] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 334.533490][ T9984] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 334.540718][ T9984] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 334.553683][ T9984] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 334.570227][ T9984] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 334.586775][ T9984] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 334.598857][ T9984] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 334.914009][T10013] random: crng reseeded on system resumption [ 335.261697][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 336.538951][ T5157] Bluetooth: hci1: command 0x0c1a tx timeout [ 336.545248][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 336.616805][ T5840] Bluetooth: hci7: command 0x041b tx timeout [ 336.622917][ T5157] Bluetooth: hci6: command 0x0c1a tx timeout [ 336.622957][ T5837] Bluetooth: hci5: command 0x0c1a tx timeout [ 336.629009][ T5157] Bluetooth: hci4: command 0x0c1a tx timeout [ 336.629061][ T5157] Bluetooth: hci3: command 0x0c1a tx timeout [ 336.777141][T10060] FAULT_INJECTION: forcing a failure. [ 336.777141][T10060] name failslab, interval 1, probability 0, space 0, times 0 [ 336.790168][T10060] CPU: 1 UID: 0 PID: 10060 Comm: syz.6.721 Not tainted syzkaller #0 PREEMPT(full) [ 336.790208][T10060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 336.790226][T10060] Call Trace: [ 336.790236][T10060] [ 336.790247][T10060] dump_stack_lvl+0x16c/0x1f0 [ 336.790283][T10060] should_fail_ex+0x512/0x640 [ 336.790317][T10060] ? __kmalloc_cache_noprof+0x5f/0x780 [ 336.790352][T10060] should_failslab+0xc2/0x120 [ 336.790393][T10060] __kmalloc_cache_noprof+0x72/0x780 [ 336.790424][T10060] ? net_alloc_generic+0x1e/0x70 [ 336.790458][T10060] ? copy_net_ns+0xe9/0x690 [ 336.790491][T10060] ? copy_net_ns+0x136/0x690 [ 336.790534][T10060] ? copy_net_ns+0x136/0x690 [ 336.790569][T10060] copy_net_ns+0x136/0x690 [ 336.790603][T10060] ? copy_cgroup_ns+0x71/0x6b0 [ 336.790647][T10060] create_new_namespaces+0x3ea/0xa90 [ 336.790696][T10060] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 336.790739][T10060] ksys_unshare+0x45b/0xa40 [ 336.790784][T10060] ? __pfx_ksys_unshare+0x10/0x10 [ 336.790832][T10060] ? syscall_user_dispatch+0x78/0x140 [ 336.790875][T10060] __x64_sys_unshare+0x31/0x40 [ 336.790920][T10060] do_syscall_64+0xcd/0x4b0 [ 336.790948][T10060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.790971][T10060] RIP: 0033:0x7f53c878eec9 [ 336.790996][T10060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.791026][T10060] RSP: 002b:00007f53c69b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 336.791055][T10060] RAX: ffffffffffffffda RBX: 00007f53c89e6180 RCX: 00007f53c878eec9 [ 336.791074][T10060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 336.791102][T10060] RBP: 00007f53c8811f91 R08: 0000000000000000 R09: 0000000000000000 [ 336.791120][T10060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.791139][T10060] R13: 00007f53c89e6218 R14: 00007f53c89e6180 R15: 00007ffdf4f4c9d8 [ 336.791180][T10060] [ 338.088185][ T30] audit: type=1800 audit(4294967308.070:9): pid=10081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.726" name="dbroot" dev="configfs" ino=27223 res=0 errno=0 [ 339.404515][T10098] netlink: 'syz.7.727': attribute type 1 has an invalid length. [ 339.480944][T10102] netlink: 'syz.6.728': attribute type 1 has an invalid length. [ 340.445175][T10112] random: crng reseeded on system resumption [ 341.166617][ T30] audit: type=1800 audit(4294967299.090:10): pid=10123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.731" name="version" dev="configfs" ino=27810 res=0 errno=0 [ 344.173588][T10170] random: crng reseeded on system resumption [ 344.302810][T10155] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input10 [ 344.396440][ T892] Process accounting resumed [ 345.765067][T10183] sp0: Synchronizing with TNC [ 345.852232][T10183] netlink: 'syz.6.740': attribute type 1 has an invalid length. [ 347.468950][T10209] netlink: 'syz.6.743': attribute type 1 has an invalid length. [ 348.530225][T10187] kexec: Could not allocate control_code_buffer [ 348.828335][T10221] netlink: 28 bytes leftover after parsing attributes in process `syz.6.745'. [ 349.997627][T10254] random: crng reseeded on system resumption [ 350.194043][T10256] serio: Serial port pty6 [ 350.448650][T10240] netlink: 'syz.4.749': attribute type 1 has an invalid length. [ 351.548573][ T30] audit: type=1800 audit(4294967298.560:11): pid=10281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.755" name="version" dev="configfs" ino=28056 res=0 errno=0 [ 352.573911][T10283] netlink: 'syz.4.754': attribute type 1 has an invalid length. [ 353.581042][T10312] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 353.739188][T10308] sp0: Synchronizing with TNC [ 353.758488][T10315] sp0: Found TNC [ 353.964929][T10323] random: crng reseeded on system resumption [ 354.596404][T10332] netlink: 342 bytes leftover after parsing attributes in process `syz.6.765'. [ 356.208438][T10367] Invalid ELF header magic: != ELF [ 356.693949][T10377] netlink: 25 bytes leftover after parsing attributes in process `syz.4.771'. [ 356.839811][T10355] netlink: 'syz.6.769': attribute type 1 has an invalid length. [ 357.638962][T10391] netlink: 28 bytes leftover after parsing attributes in process `syz.7.775'. [ 358.312013][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 358.333991][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 358.347619][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 358.362107][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 358.370626][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 360.476936][ T5837] Bluetooth: hci8: command tx timeout [ 360.529522][T10412] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 360.539931][T10412] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 360.549564][T10412] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 360.561333][T10412] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 360.568618][T10412] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 360.605505][T10412] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 360.623860][T10412] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 360.632171][T10412] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 360.660792][T10412] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 360.667345][T10412] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 360.697637][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 360.734849][T10412] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 360.785503][T10422] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 360.809601][T10451] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 361.193165][T10407] chnl_net:caif_netlink_parms(): no params data found [ 361.546993][ T30] audit: type=1800 audit(4294967301.770:12): pid=10470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.781" name="version" dev="configfs" ino=28391 res=0 errno=0 [ 361.701853][T10407] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.727204][T10407] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.759194][T10407] bridge_slave_0: entered allmulticast mode [ 361.902835][T10407] bridge_slave_0: entered promiscuous mode [ 362.228299][T10407] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.274736][T10407] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.317670][T10407] bridge_slave_1: entered allmulticast mode [ 362.325023][T10407] bridge_slave_1: entered promiscuous mode [ 362.617233][ T5837] Bluetooth: hci5: command 0x0c1a tx timeout [ 362.623597][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 362.631234][ T5840] Bluetooth: hci3: command 0x0c1a tx timeout [ 362.632163][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 362.637496][ T5837] Bluetooth: hci1: command 0x0c1a tx timeout [ 362.663020][T10407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.681968][T10407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.697047][ T5837] Bluetooth: hci8: command 0x040f tx timeout [ 362.710265][ T5840] Bluetooth: hci7: command 0x041b tx timeout [ 362.716527][ T5840] Bluetooth: hci6: command 0x0c1a tx timeout [ 362.951287][T10407] team0: Port device team_slave_0 added [ 363.000269][T10407] team0: Port device team_slave_1 added [ 363.323042][T10407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.336786][T10407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.412260][T10407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.744298][T10407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.776819][T10407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.802933][ C0] vkms_vblank_simulate: vblank timer overrun [ 363.852964][T10407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.289086][T10407] hsr_slave_0: entered promiscuous mode [ 364.295768][T10407] hsr_slave_1: entered promiscuous mode [ 364.347770][T10407] debugfs: 'hsr0' already exists in 'hsr' [ 364.353577][T10407] Cannot create hsr debugfs directory [ 364.525716][T10507] netlink: 'syz.6.785': attribute type 1 has an invalid length. [ 364.777080][ T5840] Bluetooth: hci8: command 0x040f tx timeout [ 366.857383][ T5840] Bluetooth: hci8: command 0x040f tx timeout [ 367.218785][T10407] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 367.360982][T10555] random: crng reseeded on system resumption [ 367.569814][T10407] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 367.702811][T10407] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 367.752491][T10407] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 367.910397][T10559] netlink: 28 bytes leftover after parsing attributes in process `syz.6.792'. [ 368.230896][T10407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.454666][T10407] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.478705][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.486424][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.598716][ T9616] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.606483][ T9616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.936816][ T5840] Bluetooth: hci8: command 0x040f tx timeout [ 369.663502][T10592] random: crng reseeded on system resumption [ 369.985966][T10407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.016932][ T5840] Bluetooth: hci8: command 0x040f tx timeout [ 371.425514][T10407] veth0_vlan: entered promiscuous mode [ 371.628631][T10407] veth1_vlan: entered promiscuous mode [ 371.708479][T10407] veth0_macvtap: entered promiscuous mode [ 371.721858][T10407] veth1_macvtap: entered promiscuous mode [ 371.759451][T10407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.770245][T10407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.787784][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.829314][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.906093][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.947209][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.795459][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.816915][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.969770][ T3470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.033578][ T3470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.697221][T10647] netlink: 28 bytes leftover after parsing attributes in process `syz.4.800'. [ 374.447388][T10642] netlink: 4 bytes leftover after parsing attributes in process `syz.8.773'. [ 375.674351][T10657] netlink: 28 bytes leftover after parsing attributes in process `syz.4.801'. [ 375.695820][T10669] random: crng reseeded on system resumption [ 378.679915][T10715] zswap: compressor ¼[âãá¿.\ªÉQ`±Ó)£J³øÏ=‚¿Ð௟1 not available [ 378.791356][T10715] usb usb15: usbfs: process 10715 (syz.4.809) did not claim interface 0 before use [ 380.276606][T10732] netlink: 'syz.6.811': attribute type 1 has an invalid length. [ 381.248265][T10749] netlink: 28 bytes leftover after parsing attributes in process `syz.6.814'. [ 381.588705][T10754] random: crng reseeded on system resumption [ 383.256047][ T30] audit: type=1800 audit(4294967300.190:13): pid=10787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.818" name="version" dev="configfs" ino=30050 res=0 errno=0 [ 384.085476][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.095051][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.774069][T10797] bond0: option peer_notif_delay: invalid value () [ 384.802301][T10797] bond0: option peer_notif_delay: allowed values 0 - 300000 [ 384.905978][T10801] random: crng reseeded on system resumption [ 386.236219][T10817] FAULT_INJECTION: forcing a failure. [ 386.236219][T10817] name failslab, interval 1, probability 0, space 0, times 0 [ 386.250010][T10817] CPU: 0 UID: 0 PID: 10817 Comm: syz.8.825 Not tainted syzkaller #0 PREEMPT(full) [ 386.250051][T10817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 386.250068][T10817] Call Trace: [ 386.250078][T10817] [ 386.250090][T10817] dump_stack_lvl+0x16c/0x1f0 [ 386.250130][T10817] should_fail_ex+0x512/0x640 [ 386.250165][T10817] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 386.250206][T10817] should_failslab+0xc2/0x120 [ 386.250252][T10817] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 386.250291][T10817] ? alloc_inode+0x64/0x240 [ 386.250342][T10817] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 386.250381][T10817] ? alloc_inode+0x64/0x240 [ 386.250423][T10817] alloc_inode+0x64/0x240 [ 386.250468][T10817] new_inode+0x22/0x1c0 [ 386.250516][T10817] __debugfs_create_file+0x11c/0x6b0 [ 386.250565][T10817] debugfs_create_file_full+0x41/0x60 [ 386.250614][T10817] ref_tracker_dir_debugfs+0x19d/0x290 [ 386.250653][T10817] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 386.250730][T10817] ? lockdep_init_map_type+0x5c/0x280 [ 386.250788][T10817] preinit_net.part.0+0x437/0x8a0 [ 386.250835][T10817] copy_net_ns+0x3ba/0x690 [ 386.250878][T10817] create_new_namespaces+0x3ea/0xa90 [ 386.250929][T10817] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 386.250975][T10817] ksys_unshare+0x45b/0xa40 [ 386.251022][T10817] ? __pfx_ksys_unshare+0x10/0x10 [ 386.251069][T10817] ? xfd_validate_state+0x61/0x180 [ 386.251110][T10817] __x64_sys_unshare+0x31/0x40 [ 386.251155][T10817] do_syscall_64+0xcd/0x4b0 [ 386.251192][T10817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.251223][T10817] RIP: 0033:0x7fcc9998eec9 [ 386.251248][T10817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.251278][T10817] RSP: 002b:00007fcc97bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 386.251308][T10817] RAX: ffffffffffffffda RBX: 00007fcc99be6180 RCX: 00007fcc9998eec9 [ 386.251329][T10817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 386.251346][T10817] RBP: 00007fcc99a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 386.251364][T10817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.251382][T10817] R13: 00007fcc99be6218 R14: 00007fcc99be6180 R15: 00007ffdce99f808 [ 386.251423][T10817] [ 386.251444][T10817] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff888027d349a0' [ 386.959369][ T5837] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 386.978912][ T5837] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 386.995624][ T5837] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 387.004226][ T5837] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 387.012365][ T5837] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 387.691721][T10822] netlink: 'syz.4.827': attribute type 72 has an invalid length. [ 387.717264][T10822] netlink: 16 bytes leftover after parsing attributes in process `syz.4.827'. [ 388.083931][T10824] chnl_net:caif_netlink_parms(): no params data found [ 388.280287][T10850] random: crng reseeded on system resumption [ 388.948262][T10824] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.956639][T10824] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.067097][T10824] bridge_slave_0: entered allmulticast mode [ 389.096815][ T5837] Bluetooth: hci7: command tx timeout [ 389.138308][T10824] bridge_slave_0: entered promiscuous mode [ 389.173487][T10824] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.193939][T10824] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.204198][T10824] bridge_slave_1: entered allmulticast mode [ 389.249303][T10824] bridge_slave_1: entered promiscuous mode [ 389.720952][T10824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.903165][T10824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.040490][T10824] team0: Port device team_slave_0 added [ 390.164914][T10824] team0: Port device team_slave_1 added [ 390.330097][T10824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.343843][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.346215][T10869] netlink: 16 bytes leftover after parsing attributes in process `syz.8.834'. [ 390.373588][T10824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.399787][T10824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.438907][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.518831][T10824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.674099][T10824] hsr_slave_0: entered promiscuous mode [ 390.688421][T10824] hsr_slave_1: entered promiscuous mode [ 390.705783][T10824] debugfs: 'hsr0' already exists in 'hsr' [ 390.732510][T10824] Cannot create hsr debugfs directory [ 391.176939][ T5837] Bluetooth: hci7: command tx timeout [ 391.811044][T10824] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 391.874328][T10824] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 391.992366][T10824] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 392.037665][T10886] netlink: 'syz.8.837': attribute type 1 has an invalid length. [ 392.090943][T10824] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 392.445813][T10824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.582519][T10824] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.660016][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.667228][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.693321][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.700507][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.866946][T10897] netlink: 28 bytes leftover after parsing attributes in process `syz.4.839'. [ 393.256997][ T5837] Bluetooth: hci7: command tx timeout [ 393.391664][T10824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 393.450127][T10911] Format for deleting device is "id" (uint). [ 393.595526][T10911] FAULT_INJECTION: forcing a failure. [ 393.595526][T10911] name fail_futex, interval 1, probability 0, space 0, times 0 [ 393.647455][T10911] CPU: 0 UID: 0 PID: 10911 Comm: syz.8.840 Not tainted syzkaller #0 PREEMPT(full) [ 393.647500][T10911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 393.647519][T10911] Call Trace: [ 393.647529][T10911] [ 393.647540][T10911] dump_stack_lvl+0x16c/0x1f0 [ 393.647580][T10911] should_fail_ex+0x512/0x640 [ 393.647623][T10911] get_futex_key+0x1d0/0x1560 [ 393.647674][T10911] ? __pfx_get_futex_key+0x10/0x10 [ 393.647716][T10911] ? futex_private_hash_put+0x176/0x300 [ 393.647773][T10911] futex_wake+0xea/0x530 [ 393.647809][T10911] ? __pfx_futex_wake+0x10/0x10 [ 393.647855][T10911] ? __lock_acquire+0x62e/0x1ce0 [ 393.647913][T10911] do_futex+0x1e3/0x350 [ 393.647959][T10911] ? __pfx_do_futex+0x10/0x10 [ 393.648008][T10911] ? find_held_lock+0x2b/0x80 [ 393.648049][T10911] __x64_sys_futex+0x1e0/0x4c0 [ 393.648096][T10911] ? __fget_files+0x20e/0x3c0 [ 393.648131][T10911] ? __pfx___x64_sys_futex+0x10/0x10 [ 393.648184][T10911] ? fdget+0x187/0x210 [ 393.648224][T10911] do_syscall_64+0xcd/0x4b0 [ 393.648261][T10911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.648292][T10911] RIP: 0033:0x7fcc9998eec9 [ 393.648318][T10911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.648348][T10911] RSP: 002b:00007fcc97bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 393.648378][T10911] RAX: ffffffffffffffda RBX: 00007fcc99be6098 RCX: 00007fcc9998eec9 [ 393.648399][T10911] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcc99be609c [ 393.648418][T10911] RBP: 00007fcc99be6090 R08: 00007fcc9a740000 R09: 0000000000000000 [ 393.648437][T10911] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 393.648456][T10911] R13: 00007fcc99be6128 R14: 00007ffdce99f720 R15: 00007ffdce99f808 [ 393.648496][T10911] [ 393.840469][ C0] vkms_vblank_simulate: vblank timer overrun [ 394.501446][T10824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.340848][ T5837] Bluetooth: hci7: command tx timeout [ 395.690140][T10824] veth0_vlan: entered promiscuous mode [ 395.762868][T10824] veth1_vlan: entered promiscuous mode [ 395.798583][T10824] veth0_macvtap: entered promiscuous mode [ 395.912671][T10824] veth1_macvtap: entered promiscuous mode [ 396.396288][T10824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.489556][T10824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.565115][ T59] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.603057][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.692839][ T59] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.726776][ T59] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.053580][T10959] FAULT_INJECTION: forcing a failure. [ 397.053580][T10959] name failslab, interval 1, probability 0, space 0, times 0 [ 397.086982][T10959] CPU: 0 UID: 0 PID: 10959 Comm: syz.8.844 Not tainted syzkaller #0 PREEMPT(full) [ 397.087017][T10959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 397.087028][T10959] Call Trace: [ 397.087034][T10959] [ 397.087041][T10959] dump_stack_lvl+0x16c/0x1f0 [ 397.087065][T10959] should_fail_ex+0x512/0x640 [ 397.087086][T10959] ? fs_reclaim_acquire+0xae/0x150 [ 397.087114][T10959] should_failslab+0xc2/0x120 [ 397.087140][T10959] kmem_cache_alloc_noprof+0x75/0x6e0 [ 397.087160][T10959] ? __pfx_map_id_range_down+0x10/0x10 [ 397.087178][T10959] ? security_inode_alloc+0x3b/0x2b0 [ 397.087203][T10959] ? security_inode_alloc+0x3b/0x2b0 [ 397.087223][T10959] security_inode_alloc+0x3b/0x2b0 [ 397.087245][T10959] inode_init_always_gfp+0xce4/0x1030 [ 397.087269][T10959] alloc_inode+0x86/0x240 [ 397.087294][T10959] new_inode+0x22/0x1c0 [ 397.087322][T10959] __debugfs_create_file+0x11c/0x6b0 [ 397.087350][T10959] debugfs_create_file_full+0x41/0x60 [ 397.087377][T10959] ref_tracker_dir_debugfs+0x19d/0x290 [ 397.087399][T10959] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 397.087440][T10959] ? lockdep_init_map_type+0x5c/0x280 [ 397.087471][T10959] preinit_net.part.0+0x24e/0x8a0 [ 397.087493][T10959] copy_net_ns+0x3ba/0x690 [ 397.087517][T10959] create_new_namespaces+0x3ea/0xa90 [ 397.087545][T10959] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 397.087571][T10959] ksys_unshare+0x45b/0xa40 [ 397.087597][T10959] ? __pfx_ksys_unshare+0x10/0x10 [ 397.087625][T10959] ? syscall_user_dispatch+0x78/0x140 [ 397.087649][T10959] __x64_sys_unshare+0x31/0x40 [ 397.087675][T10959] do_syscall_64+0xcd/0x4b0 [ 397.087695][T10959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.087713][T10959] RIP: 0033:0x7fcc9998eec9 [ 397.087729][T10959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.087749][T10959] RSP: 002b:00007fcc97bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 397.087767][T10959] RAX: ffffffffffffffda RBX: 00007fcc99be6180 RCX: 00007fcc9998eec9 [ 397.087779][T10959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 397.087789][T10959] RBP: 00007fcc99a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 397.087799][T10959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.087809][T10959] R13: 00007fcc99be6218 R14: 00007fcc99be6180 R15: 00007ffdce99f808 [ 397.087830][T10959] [ 397.087862][T10959] debugfs: out of free dentries, can not create file 'net_refcnt@ffff88807971c928' [ 397.696413][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.750322][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.095730][T10954] netlink: 'syz.4.843': attribute type 1 has an invalid length. [ 398.268289][T10966] netlink: 'syz.6.845': attribute type 1 has an invalid length. [ 398.661563][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.705737][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.173881][T10996] random: crng reseeded on system resumption [ 400.921988][T10993] netlink: 'syz.8.848': attribute type 1 has an invalid length. [ 402.855910][T11040] netlink: 28 bytes leftover after parsing attributes in process `syz.6.854'. [ 403.915083][T11047] random: crng reseeded on system resumption [ 405.724494][T11067] random: crng reseeded on system resumption [ 406.092161][T11065] netlink: 'syz.9.859': attribute type 1 has an invalid length. [ 406.860527][T11090] netlink: 28 bytes leftover after parsing attributes in process `syz.9.863'. [ 408.570031][T11115] random: crng reseeded on system resumption [ 409.617686][T11147] random: crng reseeded on system resumption [ 411.153454][ T30] audit: type=1800 audit(4294967302.360:14): pid=11165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.873" name="version" dev="configfs" ino=31719 res=0 errno=0 [ 412.624588][T11179] netlink: 342 bytes leftover after parsing attributes in process `syz.6.877'. [ 413.810009][T11201] netlink: 330 bytes leftover after parsing attributes in process `syz.6.883'. [ 414.180625][T11204] zswap: compressor 000 not available [ 415.835696][T11219] netlink: 'syz.9.887': attribute type 1 has an invalid length. [ 416.123740][ T30] audit: type=1800 audit(4294967297.540:15): pid=11245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.893" name="version" dev="configfs" ino=32223 res=0 errno=0 [ 416.134185][T11246] random: crng reseeded on system resumption [ 416.815283][T11242] zswap: compressor 000 not available [ 418.225284][T11284] zswap: compressor 000 not available [ 419.064017][T11303] zswap: compressor 000 not available [ 419.395760][T11318] random: crng reseeded on system resumption [ 424.350372][T11352] kexec: Could not allocate control_code_buffer [ 424.583520][T11386] syz.4.924 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 425.143046][T11398] bond0: option fail_over_mac: invalid value () [ 425.510798][T11402] netlink: 28 bytes leftover after parsing attributes in process `syz.4.929'. [ 425.616106][T11406] random: crng reseeded on system resumption [ 427.835146][T11437] syz.6.938 uses obsolete (PF_INET,SOCK_PACKET) [ 429.233304][T11460] nvme_fabrics: missing parameter 'transport=%s' [ 429.247055][T11460] nvme_fabrics: missing parameter 'nqn=%s' [ 431.148469][T11466] netlink: 'syz.9.946': attribute type 1 has an invalid length. [ 432.390655][T11522] random: crng reseeded on system resumption [ 434.639640][T11552] FAULT_INJECTION: forcing a failure. [ 434.639640][T11552] name failslab, interval 1, probability 0, space 0, times 0 [ 434.685346][T11552] CPU: 0 UID: 0 PID: 11552 Comm: syz.8.961 Not tainted syzkaller #0 PREEMPT(full) [ 434.685390][T11552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 434.685407][T11552] Call Trace: [ 434.685429][T11552] [ 434.685441][T11552] dump_stack_lvl+0x16c/0x1f0 [ 434.685481][T11552] should_fail_ex+0x512/0x640 [ 434.685526][T11552] ? __kmalloc_cache_noprof+0x5f/0x780 [ 434.685579][T11552] should_failslab+0xc2/0x120 [ 434.685626][T11552] __kmalloc_cache_noprof+0x72/0x780 [ 434.685658][T11552] ? net_generic+0xf4/0x2a0 [ 434.685691][T11552] ? fib_net_init+0x1a4/0x3f0 [ 434.685736][T11552] ? fib_net_init+0x1a4/0x3f0 [ 434.685763][T11552] fib_net_init+0x1a4/0x3f0 [ 434.685787][T11552] ? __pfx___register_sysctl_table+0x10/0x10 [ 434.685815][T11552] ? __pfx_fib_net_init+0x10/0x10 [ 434.685837][T11552] ? lockdep_init_map_type+0x5c/0x280 [ 434.685865][T11552] ? do_init_timer+0xc9/0x110 [ 434.685891][T11552] ? devinet_init_net+0x5c2/0x910 [ 434.685922][T11552] ? __pfx_fib_net_init+0x10/0x10 [ 434.685943][T11552] ops_init+0x1e2/0x5f0 [ 434.685966][T11552] setup_net+0x100/0x390 [ 434.685987][T11552] ? __pfx_setup_net+0x10/0x10 [ 434.686007][T11552] ? debug_mutex_init+0x37/0x70 [ 434.686031][T11552] copy_net_ns+0x2f8/0x690 [ 434.686055][T11552] create_new_namespaces+0x3ea/0xa90 [ 434.686084][T11552] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 434.686109][T11552] ksys_unshare+0x45b/0xa40 [ 434.686136][T11552] ? __pfx_ksys_unshare+0x10/0x10 [ 434.686163][T11552] ? xfd_validate_state+0x61/0x180 [ 434.686186][T11552] __x64_sys_unshare+0x31/0x40 [ 434.686212][T11552] do_syscall_64+0xcd/0x4b0 [ 434.686232][T11552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.686250][T11552] RIP: 0033:0x7fcc9998eec9 [ 434.686265][T11552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.686282][T11552] RSP: 002b:00007fcc97bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 434.686299][T11552] RAX: ffffffffffffffda RBX: 00007fcc99be6090 RCX: 00007fcc9998eec9 [ 434.686311][T11552] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 434.686321][T11552] RBP: 00007fcc99a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 434.686331][T11552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.686341][T11552] R13: 00007fcc99be6128 R14: 00007fcc99be6090 R15: 00007ffdce99f808 [ 434.686363][T11552] [ 435.400726][T11558] random: crng reseeded on system resumption [ 436.586026][T11575] random: crng reseeded on system resumption [ 436.833186][T11577] netlink: 16 bytes leftover after parsing attributes in process `syz.8.967'. [ 439.235383][T11614] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 439.489720][T11618] netlink: 16 bytes leftover after parsing attributes in process `syz.8.976'. [ 440.004726][T11613] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 440.017030][T11613] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 440.032577][T11613] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 440.040242][T11613] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 440.047900][T11613] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 440.054287][T11613] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 440.062261][T11613] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 440.069056][T11613] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 440.075477][T11613] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 440.083589][T11613] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 440.095057][T11613] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 440.268129][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.6.979'. [ 440.299339][T11627] netlink: 25 bytes leftover after parsing attributes in process `syz.6.979'. [ 441.259221][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 441.807603][T11649] netlink: 342 bytes leftover after parsing attributes in process `syz.8.985'. [ 442.056882][ T5840] Bluetooth: hci4: command 0x0c1a tx timeout [ 442.059724][ T5157] Bluetooth: hci3: command 0x0c1a tx timeout [ 442.064108][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 442.071967][ T5157] Bluetooth: hci1: command 0x0c1a tx timeout [ 442.076386][ T5837] Bluetooth: hci5: command 0x0c1a tx timeout [ 442.139666][T11655] Bluetooth: hci7: command 0x0c1a tx timeout [ 442.139775][ T5837] Bluetooth: hci8: command 0x040f tx timeout [ 442.146451][T11655] Bluetooth: hci6: command 0x0c1a tx timeout [ 442.273651][T11656] netlink: 342 bytes leftover after parsing attributes in process `syz.9.987'. [ 443.045593][T11661] netlink: 16 bytes leftover after parsing attributes in process `syz.8.989'. [ 443.408990][ T5837] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 443.420203][ T5837] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 443.429377][ T5837] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 443.442470][ T5837] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 443.464356][ T5837] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 443.589655][T11682] random: crng reseeded on system resumption [ 444.229846][T11655] Bluetooth: hci7: command 0x0c1a tx timeout [ 444.280353][T11677] chnl_net:caif_netlink_parms(): no params data found [ 444.798133][T11677] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.812113][T11677] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.821270][T11677] bridge_slave_0: entered allmulticast mode [ 444.836319][T11677] bridge_slave_0: entered promiscuous mode [ 444.987708][T11677] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.005078][T11677] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.023792][T11677] bridge_slave_1: entered allmulticast mode [ 445.035309][T11677] bridge_slave_1: entered promiscuous mode [ 445.361526][T11677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.468799][T11677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.502386][T11655] Bluetooth: hci9: command tx timeout [ 445.503982][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.514554][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.869906][T11677] team0: Port device team_slave_0 added [ 445.910174][T11677] team0: Port device team_slave_1 added [ 446.018296][T11677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.025671][T11677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.051684][ C0] vkms_vblank_simulate: vblank timer overrun [ 446.071928][T11677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.093968][T11677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.101018][T11677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.126952][ C0] vkms_vblank_simulate: vblank timer overrun [ 446.133472][T11677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.296991][T11655] Bluetooth: hci7: command 0x0c1a tx timeout [ 446.724251][T11677] hsr_slave_0: entered promiscuous mode [ 446.731281][T11677] hsr_slave_1: entered promiscuous mode [ 446.738159][T11677] debugfs: 'hsr0' already exists in 'hsr' [ 446.744053][T11677] Cannot create hsr debugfs directory [ 447.283497][T11677] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.547389][T11677] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.579176][T11655] Bluetooth: hci9: command tx timeout [ 447.722295][T11677] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.780665][T11727] zswap: compressor 000 not available [ 447.847781][T11733] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1003'. [ 447.935816][T11677] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.992025][T11733] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.026595][T11733] bridge_slave_1 (unregistering): left allmulticast mode [ 448.034434][T11733] bridge_slave_1 (unregistering): left promiscuous mode [ 448.042910][T11733] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.445369][T11677] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 448.460447][T11677] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 448.476244][T11677] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 448.491938][T11677] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 448.739777][T11677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.793737][T11677] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.813136][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.820816][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.884545][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.891842][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.084894][T11677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 449.707454][T11655] Bluetooth: hci9: command tx timeout [ 450.485263][T11677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.925516][T11677] veth0_vlan: entered promiscuous mode [ 450.962828][T11677] veth1_vlan: entered promiscuous mode [ 451.021078][T11774] zswap: compressor 000 not available [ 451.104701][T11677] veth0_macvtap: entered promiscuous mode [ 451.148307][T11677] veth1_macvtap: entered promiscuous mode [ 451.219594][T11783] FAULT_INJECTION: forcing a failure. [ 451.219594][T11783] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 451.220370][T11677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.277445][T11783] CPU: 1 UID: 0 PID: 11783 Comm: syz.8.1013 Not tainted syzkaller #0 PREEMPT(full) [ 451.277475][T11783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 451.277485][T11783] Call Trace: [ 451.277491][T11783] [ 451.277498][T11783] dump_stack_lvl+0x16c/0x1f0 [ 451.277522][T11783] should_fail_ex+0x512/0x640 [ 451.277546][T11783] should_fail_alloc_page+0xe7/0x130 [ 451.277574][T11783] prepare_alloc_pages+0x3c2/0x610 [ 451.277603][T11783] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 451.277623][T11783] ? arch_stack_walk+0xa6/0x100 [ 451.277651][T11783] ? stack_trace_save+0x8e/0xc0 [ 451.277675][T11783] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 451.277695][T11783] ? stack_depot_save_flags+0x29/0x9c0 [ 451.277730][T11783] ? __kasan_slab_alloc+0x89/0x90 [ 451.277752][T11783] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 451.277770][T11783] ? __pmd_alloc+0xbf/0x8b0 [ 451.277794][T11783] ? __handle_mm_fault+0xada/0x2aa0 [ 451.277809][T11783] ? handle_mm_fault+0x589/0xd10 [ 451.277823][T11783] ? do_user_addr_fault+0x7a6/0x1370 [ 451.277842][T11783] ? exc_page_fault+0x5c/0xb0 [ 451.277856][T11783] ? asm_exc_page_fault+0x26/0x30 [ 451.277872][T11783] ? strncpy_from_user+0x147/0x2e0 [ 451.277888][T11783] ? getname_flags.part.0+0x8f/0x550 [ 451.277913][T11783] ? getname_flags+0x93/0xf0 [ 451.277930][T11783] ? do_sys_openat2+0xb8/0x1d0 [ 451.277955][T11783] ? __x64_sys_openat+0x174/0x210 [ 451.277970][T11783] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 451.277991][T11783] ? policy_nodemask+0xea/0x4e0 [ 451.278018][T11783] alloc_pages_mpol+0x1fb/0x550 [ 451.278044][T11783] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 451.278075][T11783] alloc_pages_noprof+0x131/0x390 [ 451.278101][T11783] pte_alloc_one+0x1e/0x350 [ 451.278123][T11783] __pte_alloc+0x6d/0x380 [ 451.278145][T11783] ? __pfx___pte_alloc+0x10/0x10 [ 451.278170][T11783] ? do_raw_spin_lock+0x12c/0x2b0 [ 451.278191][T11783] do_pte_missing+0x282c/0x3ba0 [ 451.278208][T11783] ? do_raw_spin_unlock+0x172/0x230 [ 451.278227][T11783] ? _raw_spin_unlock+0x28/0x50 [ 451.278252][T11783] ? __pmd_alloc+0x64f/0x8b0 [ 451.278279][T11783] __handle_mm_fault+0x1556/0x2aa0 [ 451.278298][T11783] ? mt_find+0x3e2/0xa20 [ 451.278319][T11783] ? __pfx___handle_mm_fault+0x10/0x10 [ 451.278335][T11783] ? __pfx_mt_find+0x10/0x10 [ 451.278365][T11783] ? find_vma+0xbf/0x140 [ 451.278386][T11783] ? __pfx_find_vma+0x10/0x10 [ 451.278411][T11783] handle_mm_fault+0x589/0xd10 [ 451.278429][T11783] ? __pkru_allows_pkey+0x31/0xb0 [ 451.278448][T11783] do_user_addr_fault+0x7a6/0x1370 [ 451.278471][T11783] ? rcu_is_watching+0x12/0xc0 [ 451.278496][T11783] exc_page_fault+0x5c/0xb0 [ 451.278512][T11783] asm_exc_page_fault+0x26/0x30 [ 451.278528][T11783] RIP: 0010:strncpy_from_user+0x147/0x2e0 [ 451.278547][T11783] Code: 00 00 4d 89 74 1d 00 48 83 ed 08 bf 07 00 00 00 48 83 c3 08 48 89 ee e8 27 61 e9 fc 48 83 fd 07 76 22 e8 ac 65 e9 fc 45 31 ff <49> 8b 04 1c 31 ff 44 89 fe 49 89 c6 e8 d8 60 e9 fc 45 85 ff 0f 84 [ 451.278564][T11783] RSP: 0018:ffffc900030b7d10 EFLAGS: 00050246 [ 451.278579][T11783] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff84d13f16 [ 451.278590][T11783] RDX: ffff88802ff60000 RSI: ffffffff84d13fb4 RDI: 0000000000000007 [ 451.278600][T11783] RBP: 0000000000000fe0 R08: 0000000000000007 R09: 0000000000000007 [ 451.278610][T11783] R10: 0000000000000fe0 R11: 0000000000000000 R12: 0000000000000000 [ 451.278620][T11783] R13: ffff88803fcf4420 R14: 0000000000000fe0 R15: 0000000000000000 [ 451.278636][T11783] ? strncpy_from_user+0xa6/0x2e0 [ 451.278652][T11783] ? strncpy_from_user+0x144/0x2e0 [ 451.278676][T11783] getname_flags.part.0+0x8f/0x550 [ 451.278718][T11783] getname_flags+0x93/0xf0 [ 451.278747][T11783] do_sys_openat2+0xb8/0x1d0 [ 451.278788][T11783] ? __pfx_do_sys_openat2+0x10/0x10 [ 451.278846][T11783] __x64_sys_openat+0x174/0x210 [ 451.278874][T11783] ? __pfx___x64_sys_openat+0x10/0x10 [ 451.278914][T11783] do_syscall_64+0xcd/0x4b0 [ 451.278947][T11783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.278975][T11783] RIP: 0033:0x7fcc9998eec9 [ 451.278998][T11783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.279025][T11783] RSP: 002b:00007fcc9a73f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 451.279050][T11783] RAX: ffffffffffffffda RBX: 00007fcc99be5fa0 RCX: 00007fcc9998eec9 [ 451.279068][T11783] RDX: 0000000000008000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 451.279086][T11783] RBP: 00007fcc99a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 451.279102][T11783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.279119][T11783] R13: 00007fcc99be6038 R14: 00007fcc99be5fa0 R15: 00007ffdce99f808 [ 451.279159][T11783] [ 451.747131][T11655] Bluetooth: hci9: command tx timeout [ 451.773600][T11677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.824723][ T9616] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.840443][ T9616] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.906858][ T9616] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.170074][T11794] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1014'. [ 452.232887][ T9616] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.486806][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.528371][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.665064][ T803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.684116][ T803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.828559][T11798] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1015'. [ 454.498388][T11839] zswap: compressor 000 not available [ 455.063374][T11860] bond0: option peer_notif_delay: invalid value () [ 455.081800][T11860] bond0: option peer_notif_delay: allowed values 0 - 300000 [ 456.190024][T11868] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 456.350480][T11880] netlink: 'syz.6.1031': attribute type 10 has an invalid length. [ 456.399784][T11880] netlink: 230 bytes leftover after parsing attributes in process `syz.6.1031'. [ 456.629431][T11880] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 456.904835][T11896] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 457.018539][ T31] INFO: task syz-executor:5844 blocked for more than 163 seconds. [ 457.027789][ T31] Not tainted syzkaller #0 [ 457.032864][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 457.041703][ T31] task:syz-executor state:D stack:23768 pid:5844 tgid:5844 ppid:1 task_flags:0x400140 flags:0x00080002 [ 457.054587][ T31] Call Trace: [ 457.061871][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 457.064947][ T31] __schedule+0x1190/0x5de0 [ 457.076124][ T31] ? __pfx___schedule+0x10/0x10 [ 457.126854][ T31] ? find_held_lock+0x2b/0x80 [ 457.131920][ T31] ? schedule+0x2d7/0x3a0 [ 457.136481][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 457.142140][ T31] schedule+0xe7/0x3a0 [ 457.146385][ T31] schedule_preempt_disabled+0x13/0x30 [ 457.215536][ T31] __mutex_lock+0x818/0x1060 [ 457.228457][T11894] netlink: 342 bytes leftover after parsing attributes in process `syz.8.1034'. [ 457.243143][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 457.251327][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 457.266798][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 457.274117][ T31] ? net_generic+0xea/0x2a0 [ 457.322698][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 457.397275][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 457.467389][ T31] nfsd_umount+0x48/0xe0 [ 457.471759][ T31] deactivate_locked_super+0xbe/0x1a0 [ 457.555677][ T31] deactivate_super+0xde/0x100 [ 457.588887][ T31] cleanup_mnt+0x225/0x450 [ 457.593399][ T31] task_work_run+0x150/0x240 [ 457.600294][ T31] ? __pfx_task_work_run+0x10/0x10 [ 457.616682][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 457.622850][ T31] exit_to_user_mode_loop+0xec/0x130 [ 457.640794][ T31] do_syscall_64+0x419/0x4b0 [ 457.645485][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.651679][ T31] RIP: 0033:0x7fa3137901f7 [ 457.656135][ T31] RSP: 002b:00007fffe90b08b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 457.671947][ T31] RAX: 0000000000000000 RBX: 00007fa313811d7d RCX: 00007fa3137901f7 [ 457.680508][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffe90b0970 [ 457.690219][ T31] RBP: 00007fffe90b0970 R08: 0000000000000000 R09: 0000000000000000 [ 457.700017][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffe90b1a00 [ 457.708959][ T31] R13: 00007fa313811d7d R14: 0000000000043207 R15: 00007fffe90b1a40 [ 457.718163][ T31] [ 457.749291][ T31] INFO: task syz.0.566:9012 blocked for more than 164 seconds. [ 457.783570][ T31] Not tainted syzkaller #0 [ 457.807204][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 457.826719][ T31] task:syz.0.566 state:D stack:26712 pid:9012 tgid:9008 ppid:5835 task_flags:0x400140 flags:0x00080002 [ 457.856685][ T31] Call Trace: [ 457.860032][ T31] [ 457.867065][ T31] __schedule+0x1190/0x5de0 [ 457.871687][ T31] ? is_bpf_text_address+0x94/0x1a0 [ 457.888501][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 457.893620][ T31] ? __pfx___schedule+0x10/0x10 [ 457.936732][ T31] ? find_held_lock+0x2b/0x80 [ 457.942261][ T31] ? schedule+0x2d7/0x3a0 [ 457.986747][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 457.992669][ T31] schedule+0xe7/0x3a0 [ 458.014806][ T31] schedule_preempt_disabled+0x13/0x30 [ 458.026821][ T31] __mutex_lock+0x818/0x1060 [ 458.031914][ T31] ? ____sys_sendmsg+0xa95/0xc70 [ 458.066882][ T31] ? ___sys_sendmsg+0x134/0x1d0 [ 458.086705][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 458.092614][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 458.120786][ T31] ? __asan_memset+0x23/0x50 [ 458.125469][ T31] ? __nla_validate_parse+0x600/0x2880 [ 458.164685][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 458.176888][ T31] nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 458.182718][ T31] ? rcu_is_watching+0x12/0xc0 [ 458.198087][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 458.204429][ T31] ? __nla_parse+0x40/0x60 [ 458.247494][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 458.254960][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 458.276726][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 458.282734][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 458.306737][ T31] ? rcu_is_watching+0x12/0xc0 [ 458.311644][ T31] ? bpf_lsm_capable+0x9/0x10 [ 458.325559][ T31] ? security_capable+0x7e/0x260 [ 458.336725][ T31] genl_rcv_msg+0x55c/0x800 [ 458.342500][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 458.356708][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 458.363062][ T31] netlink_rcv_skb+0x158/0x420 [ 458.386778][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 458.391899][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 458.398648][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 458.404004][ T31] genl_rcv+0x28/0x40 [ 458.408407][ T31] netlink_unicast+0x5a7/0x870 [ 458.413307][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 458.419498][ T31] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 458.426103][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 458.431420][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 458.436247][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.442002][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 458.450786][ T31] ____sys_sendmsg+0xa95/0xc70 [ 458.456399][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 458.463868][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 458.469556][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 458.475058][ T31] ___sys_sendmsg+0x134/0x1d0 [ 458.480049][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 458.485401][ T31] __sys_sendmsg+0x16d/0x220 [ 458.490068][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 458.495299][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 458.500558][ T31] do_syscall_64+0xcd/0x4b0 [ 458.505129][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.511147][ T31] RIP: 0033:0x7f24da78eec9 [ 458.515629][ T31] RSP: 002b:00007f24db625038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 458.524782][ T31] RAX: ffffffffffffffda RBX: 00007f24da9e6090 RCX: 00007f24da78eec9 [ 458.533403][ T31] RDX: 0000000000000000 RSI: 0000200000003700 RDI: 0000000000000003 [ 458.541762][ T31] RBP: 00007f24da811f91 R08: 0000000000000000 R09: 0000000000000000 [ 458.550919][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.559941][ T31] R13: 00007f24da9e6128 R14: 00007f24da9e6090 R15: 00007ffce4c86ae8 [ 458.568625][ T31] [ 458.591522][ T31] INFO: task syz.3.607:9231 blocked for more than 165 seconds. [ 458.607458][ T31] Not tainted syzkaller #0 [ 458.612456][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 458.621353][ T31] task:syz.3.607 state:D stack:27688 pid:9231 tgid:9223 ppid:5842 task_flags:0x400140 flags:0x00080002 [ 458.634149][ T31] Call Trace: [ 458.637617][ T31] [ 458.640705][ T31] __schedule+0x1190/0x5de0 [ 458.645244][ T31] ? is_bpf_text_address+0x94/0x1a0 [ 458.650533][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 458.657026][ T31] ? __pfx___schedule+0x10/0x10 [ 458.661977][ T31] ? find_held_lock+0x2b/0x80 [ 458.666727][ T31] ? schedule+0x2d7/0x3a0 [ 458.671214][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 458.677496][ T31] schedule+0xe7/0x3a0 [ 458.681641][ T31] schedule_preempt_disabled+0x13/0x30 [ 458.687486][ T31] __mutex_lock+0x818/0x1060 [ 458.692215][ T31] ? ____sys_sendmsg+0xa95/0xc70 [ 458.697247][ T31] ? ___sys_sendmsg+0x134/0x1d0 [ 458.702130][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 458.708132][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 458.713287][ T31] ? __asan_memset+0x23/0x50 [ 458.717981][ T31] ? __nla_validate_parse+0x600/0x2880 [ 458.723500][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 458.729506][ T31] nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 458.735847][ T31] ? rcu_is_watching+0x12/0xc0 [ 458.740719][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 458.746983][ T31] ? __nla_parse+0x40/0x60 [ 458.751466][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 458.760617][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 458.768095][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 458.773680][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 458.780283][ T31] ? rcu_is_watching+0x12/0xc0 [ 458.785127][ T31] ? bpf_lsm_capable+0x9/0x10 [ 458.790172][ T31] ? security_capable+0x7e/0x260 [ 458.795139][ T31] genl_rcv_msg+0x55c/0x800 [ 458.799737][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 458.804989][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 458.811327][ T31] netlink_rcv_skb+0x158/0x420 [ 458.816158][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 458.821356][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 458.826840][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 458.832171][ T31] genl_rcv+0x28/0x40 [ 458.836174][ T31] netlink_unicast+0x5a7/0x870 [ 458.841983][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 458.847369][ T31] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 458.853424][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 458.859497][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 458.864935][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.870409][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 458.876711][ T31] ____sys_sendmsg+0xa95/0xc70 [ 458.881531][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 458.887225][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 458.892802][ T31] ___sys_sendmsg+0x134/0x1d0 [ 458.897977][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 458.903279][ T31] __sys_sendmsg+0x16d/0x220 [ 458.907980][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 458.913226][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 458.918411][ T31] do_syscall_64+0xcd/0x4b0 [ 458.923006][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.929017][ T31] RIP: 0033:0x7f7d2958eec9 [ 458.933467][ T31] RSP: 002b:00007f7d2a3c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 458.943341][ T31] RAX: ffffffffffffffda RBX: 00007f7d297e6180 RCX: 00007f7d2958eec9 [ 458.951531][ T31] RDX: 0000000020000000 RSI: 0000200000005380 RDI: 0000000000000004 [ 458.960605][ T31] RBP: 00007f7d29611f91 R08: 0000000000000000 R09: 0000000000000000 [ 458.969464][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.977549][ T31] R13: 00007f7d297e6218 R14: 00007f7d297e6180 R15: 00007ffd5b533fa8 [ 458.985828][ T31] [ 458.988950][ T31] INFO: task syz.3.607:9236 blocked for more than 165 seconds. [ 458.996537][ T31] Not tainted syzkaller #0 [ 459.001731][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 459.010816][ T31] task:syz.3.607 state:D stack:28248 pid:9236 tgid:9223 ppid:5842 task_flags:0x400140 flags:0x00080002 [ 459.023084][ T31] Call Trace: [ 459.026573][ T31] [ 459.029596][ T31] __schedule+0x1190/0x5de0 [ 459.034269][ T31] ? is_bpf_text_address+0x94/0x1a0 [ 459.039765][ T31] ? __pfx___schedule+0x10/0x10 [ 459.045356][ T31] ? find_held_lock+0x2b/0x80 [ 459.050234][ T31] ? schedule+0x2d7/0x3a0 [ 459.054724][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 459.060766][ T31] schedule+0xe7/0x3a0 [ 459.066279][ T31] schedule_preempt_disabled+0x13/0x30 [ 459.072009][ T31] __mutex_lock+0x818/0x1060 [ 459.076680][ T31] ? ____sys_sendmsg+0xa95/0xc70 [ 459.081840][ T31] ? ___sys_sendmsg+0x134/0x1d0 [ 459.086797][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 459.092667][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 459.098127][ T31] ? __asan_memset+0x23/0x50 [ 459.102947][ T31] ? __nla_validate_parse+0x600/0x2880 [ 459.108875][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 459.114733][ T31] nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 459.120795][ T31] ? rcu_is_watching+0x12/0xc0 [ 459.125701][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 459.132122][ T31] ? __nla_parse+0x40/0x60 [ 459.136748][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 459.144875][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 459.152476][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 459.158180][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 459.165274][ T31] ? rcu_is_watching+0x12/0xc0 [ 459.170802][ T31] ? bpf_lsm_capable+0x9/0x10 [ 459.175634][ T31] ? security_capable+0x7e/0x260 [ 459.182037][ T31] genl_rcv_msg+0x55c/0x800 [ 459.187014][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 459.192095][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 459.198464][ T31] netlink_rcv_skb+0x158/0x420 [ 459.203294][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 459.208495][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 459.214275][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 459.219656][ T31] genl_rcv+0x28/0x40 [ 459.223709][ T31] netlink_unicast+0x5a7/0x870 [ 459.228653][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 459.234079][ T31] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 459.240421][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 459.246044][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 459.251585][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.257102][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 459.263305][ T31] ____sys_sendmsg+0xa95/0xc70 [ 459.269223][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 459.275564][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.280947][ T31] ? __page_table_check_ptes_set+0x1ae/0x420 [ 459.287018][ T31] ? do_pte_missing+0x8a3/0x3ba0 [ 459.291999][ T31] ___sys_sendmsg+0x134/0x1d0 [ 459.296888][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.302323][ T31] __sys_sendmsg+0x16d/0x220 [ 459.307068][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 459.312213][ T31] ? find_held_lock+0x2b/0x80 [ 459.316985][ T31] ? do_user_addr_fault+0x843/0x1370 [ 459.322324][ T31] do_syscall_64+0xcd/0x4b0 [ 459.326901][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.332848][ T31] RIP: 0033:0x7f7d2958eec9 [ 459.337698][ T31] RSP: 002b:00007f7d2a3a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.346334][ T31] RAX: ffffffffffffffda RBX: 00007f7d297e6270 RCX: 00007f7d2958eec9 [ 459.355294][ T31] RDX: 0000000000000000 RSI: 0000200000003700 RDI: 0000000000000003 [ 459.363602][ T31] RBP: 00007f7d29611f91 R08: 0000000000000000 R09: 0000000000000000 [ 459.373385][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.381524][ T31] R13: 00007f7d297e6308 R14: 00007f7d297e6270 R15: 00007ffd5b533fa8 [ 459.389599][ T31] [ 459.392648][ T31] INFO: task syz.2.622:9303 blocked for more than 166 seconds. [ 459.400318][ T31] Not tainted syzkaller #0 [ 459.405295][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 459.416151][ T31] task:syz.2.622 state:D stack:26552 pid:9303 tgid:9302 ppid:5833 task_flags:0x400140 flags:0x00080002 [ 459.428421][ T31] Call Trace: [ 459.431761][ T31] [ 459.434725][ T31] __schedule+0x1190/0x5de0 [ 459.439332][ T31] ? is_bpf_text_address+0x94/0x1a0 [ 459.444631][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 459.449776][ T31] ? __pfx___schedule+0x10/0x10 [ 459.455393][ T31] ? find_held_lock+0x2b/0x80 [ 459.460520][ T31] ? schedule+0x2d7/0x3a0 [ 459.465113][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 459.472084][ T31] schedule+0xe7/0x3a0 [ 459.477006][ T31] schedule_preempt_disabled+0x13/0x30 [ 459.482615][ T31] __mutex_lock+0x818/0x1060 [ 459.487607][ T31] ? ____sys_sendmsg+0xa95/0xc70 [ 459.492593][ T31] ? ___sys_sendmsg+0x134/0x1d0 [ 459.498989][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 459.505237][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 459.510616][ T31] ? __asan_memset+0x23/0x50 [ 459.515423][ T31] ? __nla_validate_parse+0x600/0x2880 [ 459.521261][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 459.527337][ T31] nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 459.533029][ T31] ? rcu_is_watching+0x12/0xc0 [ 459.537885][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 459.544827][ T31] ? __nla_parse+0x40/0x60 [ 459.549412][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 459.557757][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 459.565308][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 459.571242][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 459.580274][ T31] ? rcu_is_watching+0x12/0xc0 [ 459.585131][ T31] ? bpf_lsm_capable+0x9/0x10 [ 459.590022][ T31] ? security_capable+0x7e/0x260 [ 459.595283][ T31] genl_rcv_msg+0x55c/0x800 [ 459.599925][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 459.605178][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 459.611708][ T31] netlink_rcv_skb+0x158/0x420 [ 459.616548][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 459.621825][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 459.627188][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 459.632529][ T31] genl_rcv+0x28/0x40 [ 459.636518][ T31] netlink_unicast+0x5a7/0x870 [ 459.642210][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 459.648879][ T31] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 459.655436][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 459.661767][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 459.667267][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.672788][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 459.681677][ T31] ____sys_sendmsg+0xa95/0xc70 [ 459.686740][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 459.692492][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.697936][ T31] ___sys_sendmsg+0x134/0x1d0 [ 459.702654][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.708877][ T31] __sys_sendmsg+0x16d/0x220 [ 459.713627][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 459.718933][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 459.724045][ T31] do_syscall_64+0xcd/0x4b0 [ 459.728863][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.734805][ T31] RIP: 0033:0x7fde3ed8eec9 [ 459.739849][ T31] RSP: 002b:00007fde3fcaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.749196][ T31] RAX: ffffffffffffffda RBX: 00007fde3efe5fa0 RCX: 00007fde3ed8eec9 [ 459.758250][ T31] RDX: 0000000020000000 RSI: 0000200000005380 RDI: 0000000000000004 [ 459.766301][ T31] RBP: 00007fde3ee11f91 R08: 0000000000000000 R09: 0000000000000000 [ 459.774963][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.785270][ T31] R13: 00007fde3efe6038 R14: 00007fde3efe5fa0 R15: 00007fff84965ee8 [ 459.793541][ T31] [ 459.797074][ T31] INFO: task syz.2.622:9305 blocked for more than 166 seconds. [ 459.804793][ T31] Not tainted syzkaller #0 [ 459.810462][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 459.823269][ T31] task:syz.2.622 state:D stack:24520 pid:9305 tgid:9302 ppid:5833 task_flags:0x400140 flags:0x00080002 [ 459.835303][ T31] Call Trace: [ 459.838673][ T31] [ 459.841633][ T31] __schedule+0x1190/0x5de0 [ 459.846155][ T31] ? is_bpf_text_address+0x94/0x1a0 [ 459.851585][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 459.856607][ T31] ? __pfx___schedule+0x10/0x10 [ 459.862250][ T31] ? find_held_lock+0x2b/0x80 [ 459.867088][ T31] ? schedule+0x2d7/0x3a0 [ 459.871560][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 459.877481][ T31] schedule+0xe7/0x3a0 [ 459.882702][ T31] schedule_preempt_disabled+0x13/0x30 [ 459.888977][ T31] __mutex_lock+0x818/0x1060 [ 459.893609][ T31] ? ____sys_sendmsg+0xa95/0xc70 [ 459.898626][ T31] ? ___sys_sendmsg+0x134/0x1d0 [ 459.903523][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 459.909664][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 459.914748][ T31] ? __asan_memset+0x23/0x50 [ 459.919425][ T31] ? __nla_validate_parse+0x600/0x2880 [ 459.925012][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 459.931096][ T31] nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 459.936914][ T31] ? rcu_is_watching+0x12/0xc0 [ 459.941794][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 459.948119][ T31] ? __nla_parse+0x40/0x60 [ 459.952722][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 459.960197][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 459.968397][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 459.974122][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 459.980361][ T31] ? rcu_is_watching+0x12/0xc0 [ 459.985898][ T31] ? bpf_lsm_capable+0x9/0x10 [ 459.991251][ T31] ? security_capable+0x7e/0x260 [ 459.996344][ T31] genl_rcv_msg+0x55c/0x800 [ 460.000987][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 460.006062][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 460.012378][ T31] netlink_rcv_skb+0x158/0x420 [ 460.017521][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 460.022613][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 460.028035][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 460.033358][ T31] genl_rcv+0x28/0x40 [ 460.037474][ T31] netlink_unicast+0x5a7/0x870 [ 460.042310][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 460.047687][ T31] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 460.053800][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 460.059552][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 460.064392][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.070367][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 460.076498][ T31] ____sys_sendmsg+0xa95/0xc70 [ 460.081374][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 460.087921][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 460.093951][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 460.099528][ T31] ___sys_sendmsg+0x134/0x1d0 [ 460.104255][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 460.110145][ T31] __sys_sendmsg+0x16d/0x220 [ 460.114886][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 460.120095][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 460.125118][ T31] do_syscall_64+0xcd/0x4b0 [ 460.130187][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.136152][ T31] RIP: 0033:0x7fde3ed8eec9 [ 460.140797][ T31] RSP: 002b:00007fde3fc8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.149915][ T31] RAX: ffffffffffffffda RBX: 00007fde3efe6090 RCX: 00007fde3ed8eec9 [ 460.158842][ T31] RDX: 0000000000000000 RSI: 0000200000003700 RDI: 0000000000000003 [ 460.167871][ T31] RBP: 00007fde3ee11f91 R08: 0000000000000000 R09: 0000000000000000 [ 460.175971][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.184545][ T31] R13: 00007fde3efe6128 R14: 00007fde3efe6090 R15: 00007fff84965ee8 [ 460.194953][ T31] [ 460.217947][ T31] [ 460.217947][ T31] Showing all locks held in the system: [ 460.228084][ T31] 1 lock held by pool_workqueue_/3: [ 460.233339][ T31] 1 lock held by khungtaskd/31: [ 460.241351][ T31] #0: ffffffff8e1c3fa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 460.251571][ T31] 4 locks held by kworker/u8:2/36: [ 460.260813][ T31] #0: ffff88801bede948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 460.272040][ T31] #1: ffffc90000ac7d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 460.282613][ T31] #2: ffffffff8feca2b0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 460.294056][ T31] #3: ffffffff8fee06c8 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1b/0x230 [ 460.304703][ T31] 2 locks held by kworker/u8:3/49: [ 460.309928][ T31] #0: ffff8881476a8948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 460.321231][ T31] #1: ffffc90000ba7d10 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 460.332897][ T31] 2 locks held by getty/5602: [ 460.337910][ T31] #0: ffff8880348550a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 460.348189][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 460.358618][ T31] 2 locks held by syz-executor/5844: [ 460.364397][ T31] #0: ffff88807ca1c0e0 (&type->s_umount_key#50){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 460.375729][ T31] #1: ffffffff8e5e6388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 460.385904][ T31] 2 locks held by syz.0.566/9009: [ 460.391090][ T31] #0: ffffffff8ff83f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 460.401718][ T31] #1: ffffffff8e5e6388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 460.412162][ T31] 2 locks held by syz.0.566/9012: [ 460.417250][ T31] #0: ffffffff8ff83f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 460.425710][ T31] #1: ffffffff8e5e6388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 460.435984][ T31] 2 locks held by syz.3.607/9231: [ 460.441071][ T31] #0: ffffffff8ff83f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 460.449363][ T31] #1: ffffffff8e5e6388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 460.459868][ T31] 2 locks held by syz.3.607/9236: [ 460.465512][ T31] #0: ffffffff8ff83f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 460.474561][ T31] #1: ffffffff8e5e6388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 460.484829][ T31] 2 locks held by syz-executor/9294: [ 460.490709][ T31] #0: ffff88807f2360e0 (&type->s_umount_key#50){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 460.504200][ T31] #1: ffffffff8e5e6388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 460.514045][ T31] 2 locks held by syz.2.622/9303: [ 460.519247][ T31] #0: ffffffff8ff83f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 460.527801][ T31] #1: ffffffff8e5e6388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 460.539194][ T31] 2 locks held by syz.2.622/9305: [ 460.544446][ T31] #0: ffffffff8ff83f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 460.552797][ T31] #1: ffffffff8e5e6388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 460.563328][ T31] 2 locks held by syz-executor/9327: [ 460.568841][ T31] #0: ffff88805f8de0e0 (&type->s_umount_key#50){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 460.579820][ T31] #1: ffffffff8e5e6388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 460.589591][ T31] 1 lock held by syz-executor/9473: [ 460.594894][ T31] #0: ffffffff8fee06c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 460.605822][ T31] 1 lock held by syz-executor/10407: [ 460.612469][ T31] #0: ffffffff8e1cf400 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6e0 [ 460.626724][ T31] 2 locks held by syz.7.796/10602: [ 460.632115][ T31] #0: ffffffff8ff83f30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 460.640487][ T31] #1: ffffffff8e5e6388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 460.650941][ T31] 2 locks held by syz-executor/10824: [ 460.656333][ T31] #0: ffffffff8fee06c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 460.665392][ T31] #1: ffffffff8e1cf538 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 460.676935][ T31] 1 lock held by syz-executor/11677: [ 460.682280][ T31] #0: ffffffff8fee06c8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 460.691964][ T31] [ 460.694320][ T31] ============================================= [ 460.694320][ T31] [ 460.719759][ T31] NMI backtrace for cpu 0 [ 460.719783][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 460.719814][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 460.719830][ T31] Call Trace: [ 460.719838][ T31] [ 460.719848][ T31] dump_stack_lvl+0x116/0x1f0 [ 460.719881][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 460.719915][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 460.719959][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 460.720003][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 460.720044][ T31] watchdog+0xf3f/0x1170 [ 460.720079][ T31] ? rcu_is_watching+0x12/0xc0 [ 460.720108][ T31] ? __pfx_watchdog+0x10/0x10 [ 460.720131][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 460.720157][ T31] ? __kthread_parkme+0x19e/0x250 [ 460.720193][ T31] ? __pfx_watchdog+0x10/0x10 [ 460.720218][ T31] kthread+0x3c5/0x780 [ 460.720241][ T31] ? __pfx_kthread+0x10/0x10 [ 460.720267][ T31] ? rcu_is_watching+0x12/0xc0 [ 460.720295][ T31] ? __pfx_kthread+0x10/0x10 [ 460.720320][ T31] ret_from_fork+0x56d/0x730 [ 460.720342][ T31] ? __pfx_kthread+0x10/0x10 [ 460.720366][ T31] ret_from_fork_asm+0x1a/0x30 [ 460.720414][ T31] [ 460.720424][ T31] Sending NMI from CPU 0 to CPUs 1: [ 460.853925][ C1] NMI backtrace for cpu 1 [ 460.853947][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 460.853975][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 460.853987][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 460.854015][ C1] Code: 6e 63 02 e9 c3 09 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 4c 21 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 460.854037][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 460.854057][ C1] RAX: 00000000003aa11f RBX: 0000000000000001 RCX: ffffffff8b48ba59 [ 460.854072][ C1] RDX: 0000000000000000 RSI: ffffffff8d81dc19 RDI: ffffffff8bd016c0 [ 460.854087][ C1] RBP: ffffed1003b58b58 R08: 0000000000000001 R09: ffffed10170e6655 [ 460.854101][ C1] R10: ffff8880b87332ab R11: 0000000000000000 R12: 0000000000000001 [ 460.854115][ C1] R13: ffff88801dac5ac0 R14: ffffffff905f6a90 R15: 0000000000000000 [ 460.854129][ C1] FS: 0000000000000000(0000) GS:ffff888124f8c000(0000) knlGS:0000000000000000 [ 460.854152][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 460.854167][ C1] CR2: 000055b3e504b000 CR3: 0000000034438000 CR4: 00000000003526f0 [ 460.854181][ C1] Call Trace: [ 460.854188][ C1] [ 460.854196][ C1] default_idle+0x13/0x20 [ 460.854221][ C1] default_idle_call+0x6c/0xb0 [ 460.854247][ C1] do_idle+0x38d/0x500 [ 460.854275][ C1] ? __pfx_do_idle+0x10/0x10 [ 460.854300][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 460.854327][ C1] cpu_startup_entry+0x4f/0x60 [ 460.854352][ C1] start_secondary+0x21d/0x2b0 [ 460.854384][ C1] ? __pfx_start_secondary+0x10/0x10 [ 460.854420][ C1] common_startup_64+0x13e/0x148 [ 460.854456][ C1] [ 460.855126][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 461.032448][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 461.041752][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 461.052079][ T31] Call Trace: [ 461.055378][ T31] [ 461.058409][ T31] dump_stack_lvl+0x3d/0x1f0 [ 461.063023][ T31] vpanic+0x640/0x6f0 [ 461.067020][ T31] panic+0xca/0xd0 [ 461.070754][ T31] ? __pfx_panic+0x10/0x10 [ 461.075191][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 461.080605][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 461.086797][ T31] ? watchdog+0xe48/0x1170 [ 461.091228][ T31] ? watchdog+0xe3b/0x1170 [ 461.095660][ T31] watchdog+0xe59/0x1170 [ 461.099934][ T31] ? rcu_is_watching+0x12/0xc0 [ 461.104825][ T31] ? __pfx_watchdog+0x10/0x10 [ 461.109576][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 461.114914][ T31] ? __kthread_parkme+0x19e/0x250 [ 461.119987][ T31] ? __pfx_watchdog+0x10/0x10 [ 461.124691][ T31] kthread+0x3c5/0x780 [ 461.128787][ T31] ? __pfx_kthread+0x10/0x10 [ 461.133405][ T31] ? rcu_is_watching+0x12/0xc0 [ 461.138187][ T31] ? __pfx_kthread+0x10/0x10 [ 461.142794][ T31] ret_from_fork+0x56d/0x730 [ 461.147417][ T31] ? __pfx_kthread+0x10/0x10 [ 461.152065][ T31] ret_from_fork_asm+0x1a/0x30 [ 461.156913][ T31] [ 461.160222][ T31] Kernel Offset: disabled [ 461.164651][ T31] Rebooting in 86400 seconds..