last executing test programs: 2m57.624917529s ago: executing program 32 (id=1478): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) r2 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy18/netdev:wlan1/stations/08:02:11:00:00:00/rx_fragments\x00', 0x480800, 0x0) write$auto_fops_ulong_ro_(r2, &(0x7f0000000340), 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd2a, 0xc, 0x8, 0x5, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) socket(0xa, 0x2, 0x3a) mmap$auto(0x1f00, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0xf4, 0x810004, 0xffb, 0x8000000008011, r3, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 2m28.773998544s ago: executing program 4 (id=1672): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x6, 0x0) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x6, 0x62, 0x80000000, 0x9, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() mlockall$auto(0x5) rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x6}, 0xffffffffffffffff, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a0080"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='J'], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0xfffffffe, &(0x7f00000002c0)={0x0, 0xc5}, 0x1, 0x0, 0x0, 0x9}, 0x107}, 0x3, 0x0) unshare$auto(0x4) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x13) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) mincore$auto(0x1000, 0x8001, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x0, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) sendfile$auto(r4, r3, 0x0, 0x1000202) 2m28.423785948s ago: executing program 4 (id=1673): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0xf51, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x1fe, 0xd) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = socket(0xa, 0x1, 0x100) mmap$auto(0x0, 0x4, 0xde, 0x9b7e, 0x2, 0x1) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(0xffffffffffffffff, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(r0, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xf, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x2d, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7, 0x40, 0x3, 0x1, 0x9, 0x1, 0xffffffdffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$auto_regulator_summary_fops_(0xffffffffffffffff, &(0x7f0000000400)=""/17, 0x11) inotify_init1$auto(0x3fe) syz_clone(0x50311091, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000d80)=ANY=[], 0x390}, 0x1, 0x0, 0x0, 0x20018810}, 0x44040) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x20000, 0x0) ioctl$auto(r4, 0xab04, 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="8c020000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="00000005043891ec44d3d7"], 0x28c}, 0x1, 0x0, 0x0, 0x20040100}, 0x1) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x60000000) socket(0xa, 0x2, 0x0) 2m27.541114055s ago: executing program 4 (id=1675): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2, 0x0) write$auto(r1, &(0x7f0000000180)=',\x00\x00\xbb\xfd\x8df\x05k^t\xbb\x9axD,k\xb9\x9e\xac_*\x0em:8P]\x02\xffL\xce\"*\xba\xf2\xed\xa5pp\x172\x81\x94\xff\xec\xaac^\x92\xcc{\x91\xc0\xb8\xa3\xc3\x81\xf7\x9c^M\x91\xc6s\xef\f3dg\xfdC$\xf2hQz\xf8\xec-\x91\xa2\x92\xa17K_\xe3\x15k*S\xb5\xf5\xc6\xd55\xc4\xa8\x04\x83\xf8\xab\xdb\\\xde\xd2\\\xe0\xa8\x15\x94\n\x06\xc3\xf7\xc1\xafh #\xbf\xef\xfb#\xcf4\x1c\x8d\x9c}\xba\xc9\x05\xe7g\x94\xb9\x02N\xf8\xa5>R1\xe7U\xd7\xaah\xcc\xa0%|\xaf\x15;t#\xe8\x82N\xca\xe6\xffjx\xf4JK\x8e\xae\xa1`\xbe\x16\x01*\x1f\xe3\xa0\xcfq\x0e\xd9\x12g\xac\xf3\xca+\xf0\xa5\xc1\xd9\xd3\xb9\x19\xb6}mW6%_38\x12r6\xc0\xf8w\xc2\xd2\xc4k\xeb\b\x9a\x14\xdf\xd6\x90\xa1\x11\xf0\xf2\x8a\xba)\x1b^\xa1\xda\\\xee\x7f\xd9\x87\xe6\x80! \x91h\xf5C|`\xec3\xef\xb83\xb5\x8c\x92BNZ\xaf\xe5\xee\xa2\xbd\x01\xaa\x04O\xe93\xa44\xb5\x96J\xbfi\x92\xa1\bW\xe9\x9c\r\xde\xdfT\x18\xa9\x0f\xd2E\xb6R\xfa}\x90\x1b\x96\a\xbe\x9b\xa47\x1fO\xe3\x17\x9bn\xdd w\xc9K=\xaf\xa7x\xe2\xbe\xa6\x90\x8e8(\xf9\x02IC\xe4O5\xfb\x92\xa0\x95\x87\x1fww\x8e\\4b\xc8\x8a<\xd2b\xe5\x12\xf1\xc9\xb5\xb8p\xc6\nC>r\x91\x82\xd4rU\"\x15\xca;K\x9c\xe6Sw(\x12\xc8\x9c\"4\xc43=C\x99c>\xcdD\x9d\xba\xdf<\x8f\t\tEFRa\x1b#\xceC\xad\x93\x97D^\x06\xd2\x16\xcb\x94\xd1\xb6\xb4\'\xa1', 0xb) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x408802, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/nfs4.idtoname/content\x00', 0x181b80, 0x0) read$auto(r2, &(0x7f0000000440)='2\x06J Nwe0\xbd\"\x8f\xe5h_b\xde\x19\xa5\x0e\xfa\xe0\xcb\xb7\xaceW\x1a\x1f\xae\xd8\xfe\x01Y\xd6\xba\xde3\xc7\xf8\x91\xda\xf6_%\xf30\xdc\x97<\xf3A\xa7\xb4\x8dj\xbd\x02\xb1}{e\xf64\xecC\x83,\xecp7j\xf8<\xc8x\xd4\xb0\x1d\b\xb08\x01\x9e\x9et\x8aa\xe1\re\xcf\x8e\x02\xeeW\xf0z\vk\x02_\xdb\x15f8>;zM\xa95\x16\xe9l\xf5\xaa\xaa\x03\x18p\x0e\xde$\xc3\xa9\xac\xc7\x98\x05<\xef\xcd@z\fx}F\x93\xe1\xbd\xb3s\x80\xc1e\xe9T1\xbf\xc8_^\a\x03\xad\ni\n~-u)\x88\x97\xed\xa7\x9b\x0f\xef\x99\x13\xdc<\xd1{\br\xd6[\xd3\xa9-(KH\b\xdfJ\xdek\xef\xc9\xd7\n\x83m\x86\xf2\a\x8d\x19\xe0\\\xf0lg?\x98\xc8\x8e\xbd2?C\xa5\x8a\xe3\xc6\xd7\x00\x14n\xb8<\xab\x96\x8d\xa1\xf4\x87\xe5\a:z\xea\xcc\xa1\x8d\xae8\x12\xa6\xb9\xd99\xaa\xc5\x10\xad\xdd\x89\xddC\xf5\xd2Q\x92\xcd\xcc\x9f\x1a\xdbR\xeeL:\x87\xb3\xb0\x84\x1bR\xf2\xe2/\xa3\x0e\x90\x98\x8c\xc0\xa4\xda+U\b\x88\xa7\x88\x1fC\xbb\xa8\xce\x0f\xd5\xdew\x99\x18G.s\x16\xfa\xf2\x96|\x1e]\xe5\xf8\xb1\x8b.}\x841\xd8\x98\xd8f86h\xab\x94\x7f\xc4<\x03\xdd\x86=\xb6\x1e@\xab6\x81\xce\xaa\xcf\xfd\x947\xc3\x86\xfe\xb7O\xd9\xa9\xb6[\xcc\xd8\xe1\xa9\x84[\xe0\xd4\x03\x90@\x03\xbe\xba\xee\xed\xe9\xb1\xd2\xf1\x8cgn\xb7m/\xf1\"\xc2\xeb\x1d\x04\xf3\xf1\x96\xf2\x00C\xf0wg\xd6\x11\x18\xb5o\x9d\xd7`\xce\x81\x9b1b\x8ce\x99*\xa3\xd2\x8dAw\xd9\xa6l\\\x17\xbb\xf6\xe2\xa2<\n\xc0\f:\x97\xff\xc6y\x05<\xa6\x81\xd92\xc9\x9e\f[\xf9\xfc\xf1ih\"J\x92\xd2\xd4\xc2\xe8\x89 \x81\xbf8C\xa9\x1at\xa1\xdc\x94\xc5\xc8K\xbb\x14h\xa9)\xaa\xf2\xda\xaf\xb1\rs\xe6\x97\x1e\xcc6\x94\xff\x1b\x8e\x98\xf7\xa0', 0x67b) r3 = socket(0x1e, 0x3, 0x5ef) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000140), r3) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f00000017c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001780)={&(0x7f0000000640)={0x1138, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x7}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x80}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x7}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x1}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x10fc, 0x19, 0x0, 0x1, [@nested={0xec, 0xff, 0x0, 0x1, [@nested={0x4, 0xfb}, @typed={0xe1, 0x98, 0x0, 0x0, @binary="b4ee96aa177d5459ff1493144bf258a3020dbc84bdb5a78ce5c7cff7c7b5ee7f6c99516af6aaa97afb65f3a0ccb0931c9d2f0643af1a05528572cdb8ba9fd599a0acf64d933e14bd687646856cd093e8b91393b8365a288991e1927628fddb3028b9a99f190fa50217c6e4c984308fe63f54068b75bf043225213ff29cd44ee65f6ec2420ebb9e97ce02c572af9164745cc646e456399ad733c7e7c4c6869697dcaa6249414cc2007a1203c060034a772c0f68cbed526f682e7a21e702254d95d49a5525037e5c67df11daa02b93d27efb1066c04e0851603dd05a5086"}]}, @generic="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", @typed={0xc, 0x3e, 0x0, 0x0, @u64=0x401}]}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x7}]}, 0x1138}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) setsockopt$auto(0xffffffffffffffff, 0x9, 0x69ce, &(0x7f0000000040)='(%}[\x00', 0x3) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000003400)=ANY=[@ANYBLOB="a015003df11efe1f86c94e397067e07200", @ANYRES16=r6, @ANYBLOB="010326bd7000fedbdf25080000008c150480861501800d001b002f6465762f6662300000000008002900", @ANYRES32=0x0, @ANYBLOB="6411438008009200e00000021000008008002400", @ANYRES32=r0, @ANYBLOB="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"], 0x15a0}, 0x1, 0x0, 0x0, 0x24000055}, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/tty/ptyqe/power/control\x00', 0xa0b02, 0x0) r8 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/security/tomoyo/profile\x00', 0x48802, 0x0) read$auto(r8, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0x70) write$auto(0x3, 0x0, 0xfdef) 2m26.875677797s ago: executing program 4 (id=1679): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x120, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x78, 0xbe, "2851deffd25c1ad8570b3ccab61efec8b5287da5740b3f69513508f66478fa0a946f3a3d7266145466ac77c9ad2c8c402858f8ff080284b3fc289fccf971e084e9b8aec596b715aec67311f3932a1379544aff4f5b730bb2779cc29c75729120f7b386758524dc5054da379991cb65bc7a3a84c6"}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xfffffffc}, @NL80211_ATTR_SAE_PASSWORD={0x84, 0x115, "c3991eff9f839e066026e213626609002100b805414f5b112a44d6875b15c45625a1d8502d7cc067902bf55ce2c5c11d4225f128db3dec1907e02bcf361e22fa649e8610ccef1ef63d274d664ea74441c76891de999e8c4f69131d6669b8c097cab0cf92a7d0c3663de237820b905caf4c1063fc543b92853be961d81dc490ea"}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x5}]}, 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) sendmsg$auto_NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x21}, 0x51) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x16c, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_S1G_CAPABILITY={0x9a, 0x128, "a7a32dd76013c3f47401792eaafb8f70d320b09b4940ff6bb2a27defcf7ac633b7b8be13688e00a4bbbef6d98ad64b5840d49cd042aaa37708a2702b190b094de0e1becdd205f04af08da3df4c015dc9a7cc871cfe98654b072a25433443a26321db81ee821fba985b6aab09694b0161d12adad2df0cc4b97f127c5e96a6a96ef1cdd11d6eea4aed6870bb574dcd0bb0446ec268beca"}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1f}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x3}, @NL80211_ATTR_MAC={0x8b, 0x6, "35f9ba6a352efff99503097d52c184e68a2de5d59f3da1ebb105351ecac505988edca9bd123cae559f8bc29b5b1762ec34966b6fc533395b668f32eb27b1b78ebe25a5c6af169749659b1bff97ab9a57afcd0b4a1b6e69dd80f75d3507ce575462865880b74772e56a534635124aafe80017560181f61a5cd0cd03283a09c635f596ec6d2500be"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x5}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) 2m25.972909892s ago: executing program 4 (id=1680): mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x7, 0x0) futex$auto(0x0, 0x109, 0xb, 0x0, 0x0, 0xa) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x20802, 0x0) ioctl$auto_KVM_GET_SUPPORTED_HV_CPUID(r0, 0xc008aec1, &(0x7f0000000000)={0xa}) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x7, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) madvise$auto(0xaf54, 0x3, 0x2b1) r3 = openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f00000002c0), 0x40042, 0x0) pread64$auto(r3, &(0x7f0000000080)='/sys/kernel/debug/kfence/objects\x00', 0x7, 0x800) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/afs/stats\x00', 0x42500, 0x0) access$auto(0xffffffffffffffff, 0x9) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000001080)=""/244, 0xf4) ioctl$auto(r2, 0x3b8f, r1) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/locks\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0xf42f, 0x7f) waitid$auto_P_ALL(0x0, 0xb7, &(0x7f0000000040)={@_si_pad}, 0xfa, &(0x7f00000001c0)={{0x8b, 0x401}, {0x9, 0x3}, 0xffffffffffff8000, 0xdbb, 0x81, 0x7984, 0x0, 0x25f, 0xd72, 0x71, 0x6, 0x3, 0x1000, 0x3, 0xe90000000000, 0x4}) 2m25.880950012s ago: executing program 4 (id=1681): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x10000000000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x20300, 0x0) r2 = socket(0xa, 0x5, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00'}) bpf$auto(0x40000000, &(0x7f0000000100)=@iter_create={r1, 0x81}, 0x96) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x0, 0xffffffffffffffff, 0x0, 0x800}, 0x92) connect$auto(0x3, 0x0, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) getsockopt$auto(r2, 0x84, 0x1d, 0x0, 0x0) r3 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vgem/clients\x00', 0x60000, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r3, &(0x7f0000000100)=""/153, 0x99) getpid() mincore$auto(0x1000, 0x8001, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r4, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) semget$auto(0x0, 0x13c, 0x1ff) 2m25.281953531s ago: executing program 33 (id=1619): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) r2 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy18/netdev:wlan1/stations/08:02:11:00:00:00/rx_fragments\x00', 0x480800, 0x0) write$auto_fops_ulong_ro_(r2, &(0x7f0000000340)="0e786aecdd482c4730d2d7a1378089009a81864bac875dbd2f8ccd0bf7f9b458dbcf08517e16c83a9657758e2ddec2fa3be0637108355e74fe6ac50d3b2a97a65e8db482712f5cb5fb330ab33712c08371ac4662963eabba8d0f5666328c1ce1ee8cee8cb1f72de8d28acef417455eb6c862a39b573d022b93c4851d7487ed88c182dc44ffa68f5c9b743c98c8021d7f17fd9e0e4743cc1bbc18568d87a76cacd4675df67345d8f0189202916f2970fe413de778a9aa0b89f2b76b195b1fb1c0ae90e4669fa0b11aa07a85f593b39ee5bb0d988d7755c0b687b898f0d1cf95210a8bc915e1f75e11bfd3efe5364091f36c1a88", 0xf3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x5, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x272ca5b0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/acpi/interrupts/gpe02\x00', 0x2, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/kernel/timer_migration\x00', 0x242, 0x0) sendfile$auto(r4, r3, 0x0, 0x7fffe000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket$nl_generic(0x10, 0x3, 0x10) 2m23.362058054s ago: executing program 5 (id=1683): fsetxattr$auto(0xffffffffffffffff, 0x0, &(0x7f0000000280)="8d8bd71a3eb5aa32b921547a06902763baf7b9ca18a7fbdf933d6271bb2989131b719c751d2f32b6daa07fe05b467c6ec0d98783cce2a47474031d054f0459ff85d94ee60d53acf502b5", 0x3, 0x9) madvise$auto(0x0, 0x2003f0, 0x15) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/lockdep\x00', 0x2, 0x0) r0 = inotify_init1$auto(0x800) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) r1 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0xeb1f, 0xdab7c34, 0xeb1, 0x401, 0x8000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000000)={0x1, 0x10000003, 0x1000025}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x9c, 0xff, 0x0, @raw=0xfffff00c}}) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x5b7e, 0x0, 0x0, 0x0, 0x7f, 0x7}, 0x3}, 0x6015, 0x3, 0x0) ppoll$auto(&(0x7f0000000340)={r1, 0x0, 0x89}, 0x2, 0x0, 0x0, 0x8) sysfs$auto(0x2, 0x10000000000002a, 0x81) r3 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r3, 0x15, 0x0, 0x9) r4 = socket(0x10, 0x3, 0x15) write$auto_ep0_operations_inode(r0, &(0x7f0000000080)="6ec8b2eaedb5770ba65f5626608f72403c8ed7b3ff27268f1107eff8f5847af26ed30bed885f98f6f156aaf5", 0x2c) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) connect$auto(0x3, 0x0, 0x54) 2m23.286606875s ago: executing program 5 (id=1687): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (fail_nth: 2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0xc8201, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x120, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x78, 0xbe, "2851deffd25c1ad8570b3ccab61efec8b5287da5740b3f69513508f66478fa0a946f3a3d7266145466ac77c9ad2c8c402858f8ff080284b3fc289fccf971e084e9b8aec596b715aec67311f3932a1379544aff4f5b730bb2779cc29c75729120f7b386758524dc5054da379991cb65bc7a3a84c6"}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xfffffffc}, @NL80211_ATTR_SAE_PASSWORD={0x84, 0x115, "c3991eff9f839e066026e213626609002100b805414f5b112a44d6875b15c45625a1d8502d7cc067902bf55ce2c5c11d4225f128db3dec1907e02bcf361e22fa649e8610ccef1ef63d274d664ea74441c76891de999e8c4f69131d6669b8c097cab0cf92a7d0c3663de237820b905caf4c1063fc543b92853be961d81dc490ea"}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x5}]}, 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x16c, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_S1G_CAPABILITY={0x9b, 0x128, "a7a32dd76013c3f47401792eaafb8f70d320b09b4940ff6bb2a27defcf7ac633b7b8be13688e00a4bbbef6d98ad64b5840d49cd042aaa37708a2702b190b094de0e1becdd205f04af08da3df4c015dc9a7cc871cfe98654b072a25433443a26321db81ee821fba985b6aab09694b0161d12adad2df0cc4b97f127c5e96a6a96ef1cdd11d6eea4aed6870bb574dcd0bb0446ec268becac3"}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1f}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x3}, @NL80211_ATTR_MAC={0x8b, 0x6, "35f9ba6a352efff99503097d52c184e68a2de5d59f3da1ebb105351ecac505988edca9bd123cae559f8bc29b5b1762ec34966b6fc533395b668f32eb27b1b78ebe25a5c6af169749659b1bff97ab9a57afcd0b4a1b6e69dd80f75d3507ce575462865880b74772e56a534635124aafe80017560181f61a5cd0cd03283a09c635f596ec6d2500be"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x5}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x16c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3b, 0x9, 0x2, 0x6]}, 0x0) 2m22.516971951s ago: executing program 2 (id=1690): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/ip_forward_update_priority\x00', 0x202, 0x0) sendfile$auto(r0, r0, 0x0, 0x7ffff000) r1 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x2, 0x400008, 0xdc, 0x20009b72, 0xffffffffffffffff, 0x8000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r2, 0x5646, r2) sendmsg$auto_TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)={0x1a64, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x18d, 0x3, 0x0, 0x1, [@generic="e16fbcf913a95ee87a93eca5841d2318bfdfef8954f279608d", @typed={0x8, 0xdf, 0x0, 0x0, @ipv4=@broadcast}, @typed={0xc, 0xda, 0x0, 0x0, @u64=0xfffffffffffffe5c}, @nested={0x84, 0x9, 0x0, 0x1, [@nested={0x4, 0xb6}, @nested={0x4, 0x15}, @typed={0x8, 0x40, 0x0, 0x0, @uid}, @generic="2b53963ec3ff751c84050857cf186e2857c3a1b39a8a3eccb3ba5cce25e89fa05d22cf6a33e09ac0cdd08ed646c70275f548e0c0edf337cef14603310568d90d5ef05a8d63a8659a114a80831ad374cc8192893434bdffa0d1f91b28b1859dbc8ec1486f323b9b80404cccff", @nested={0x4, 0x102}]}, @nested={0xd8, 0xab, 0x0, 0x1, [@nested={0x4, 0x64}, @nested={0x4, 0x124}, @nested={0x4, 0x19}, @nested={0x4, 0x11d}, @typed={0xc, 0xda, 0x0, 0x0, @u64=0xffffffff00000000}, @generic="21ad847bc365b3602e798e872dd1fb8b2befec7ad34fce96e72c4951b7b657cb3acd094067d009c3828d246859ad78e0e3a215d5e420088a1713da55df4b0807ce01dc83cb1c953c6b7be75dfd5a583c33ac4857d4bde2a4617b2ef3e1054b978e714e6ef2c51e5edb7bc9bac9d4fb0942de4f1c088ef4677253e54022193e9a75203635db9e907c4840f01488c3863efd597eedde1e06c781496c652e5b42e9d0d297da8335059bfa2753de3f906289cff179101f543e39"]}]}, @TIPC_NLA_NAME_TABLE={0x9c, 0x8, 0x0, 0x1, [@typed={0x8, 0x132, 0x0, 0x0, @fd=r0}, @generic="118e0d982cd369d97cb37aca69c363aa4fbd1a72e8460078a4b64c527c6f5cd5758a69eea4dc0db51c9efe7ef84ad89d0285f2387fe52ec9baf2bd6ebe007023f41d2d86fabb459273fb18c84e493f6b0930727ce93463a25544e7221f3bb957be3caba7e30ddaa565a9582480030b101f84413241d2b66debfcb8220a94f9b3e461807f65cd8c33b200a36dce7ae3b4"]}, @TIPC_NLA_UNSPEC={0xa4, 0x0, "c2631f49ac09294874e7320f1dde5c418ac8f5c24d0775057ad009126130f38274da505646a334db98c86a6c79850bbbd0df7fb413fde00a4306b04d064c475d8a23fd06f06c28f6a32ca0bdc223d663bdca9187beda512f595dc8c0d721c93482a25a043d21a62d59c87b42f76ccfa57405b712061ce86975b8132c628165ae66f30db171796a3bbc7fd20042b82e760849e7d7f1e7d3bcbc28d42558ade959"}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NAME_TABLE={0x3e0, 0x8, 0x0, 0x1, [@typed={0xc, 0x121, 0x0, 0x0, @u64=0xde}, @typed={0x7c, 0x2, 0x0, 0x0, @binary="07aa21bad2c6acd6d23448c7c8caeb4c211b6171a9455f161b6e7e58bee60b74ed9afa24fb387033e4c5c81a49971388b5db2b417e2ea8c633e093471abbe0d29ff9fa69cf2ee454d11336cd0bb4d60004d564157d2799e026a2dfcfae304e70c5e759a890a5ee326abb0b964f302fa14fab02dd754b3589"}, @nested={0x1f0, 0x13d, 0x0, 0x1, [@generic="840be8f1a9d9b916de0b3c04b767f29b9382e082b1de86845a5bbae3930da97ad04fcc883b8867e37c1d7bbb1b4e8ffd57e187e918e665193fd58d5ae6c2f3a5f14b6848e7f7d2583c0db4633a0e545956364853299d5c2827685371a2", @generic="f37997e7abf2eabbbf1a8cd86e8ba1dce21557ff7b2ae502bdc1b36f5ac000757e46874b06ba3a4cfaf4e2ca0ecc0a8fe11fbe1834c06c7e", @typed={0xc, 0x6d, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0xd1}, @generic, @typed={0x8, 0x9f, 0x0, 0x0, @fd=r1}, @generic="e9396573ffa1613d0577d822509cf8203f8ebbd4b9d240c3337c8435588972f1c9", @typed={0x32, 0x126, 0x0, 0x0, @str='/proc/sys/net/ipv4/ip_forward_update_priority\x00'}, @generic="c1d6cbb5eedc4eabe9b8e0eadee61dc7c89060015a89b30df803c3e83584789e9902b971df220c79d348d262d1bf5e6317bbdc01424ffd16d8be291f515754e4b8fc76dded43baf865192d3db6989eec7241ab3e92c6d30af5d849a835aa0767ae111b7a0dab10f32fe3e602b983ca0077f6101542cb6a4d4ceef9e1c1ba313607e4d34fe5fc7481e1f709daaa1ce412d42cd7ffac35b1f9c8ecbd745e1e868d9f0bd29a4d35217ea8446ffe10844ea00b0c8d5d3714", @typed={0x32, 0xbf, 0x0, 0x0, @str='/proc/sys/net/ipv4/ip_forward_update_priority\x00'}]}, @nested={0x148, 0x83, 0x0, 0x1, [@generic, @generic="acbea5e48fda5342a40b2c1fd5739586cd3fa30d9cbe1482b1380133d0eeaf418c3a6b40cc760debedefa23847cbe53c57ba1095d49e2cd72523e5699dff9581236966ca8a80e4d850edf6ade431159056bfc2cf04c7bd999af6c633e2e014bff2baaa22b9974a2a67ee0905ee46bd4ee54c46075f78ca5434c92fed86859f647a7235e2299977c94f294af74d942f3ca08d21d3e485aded12f9034294fcfcbe899778", @generic="e54d91747a4745dc9d7e53d130c90c749cdd08c1345ec55b38fee2d99b21cd963590ded8b8c6774048932d835205f971d7992cdae6f5421aed76d37da6cfacc36fb33383d9ff862445e206b6a9c8d33a82a1393d9dc990e9a6f5dde69b550a4b08fe38a5a63e2b7f1fd15ee70aa0d971a5620fae9b0e3f948cca4639beb94b64508cb9986db0808be52b75019750ca38ae7f831370cde1fa95d9ce2cf666171b54"]}, @typed={0x8, 0xd2, 0x0, 0x0, @uid}, @nested={0xc, 0x98, 0x0, 0x1, [@nested={0x4, 0x34}, @typed={0x4, 0x20}]}, @nested={0x8, 0x3a, 0x0, 0x1, [@nested={0x4, 0xec}]}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@nested={0xa8, 0xad, 0x0, 0x1, [@typed={0x8, 0xfe, 0x0, 0x0, @u32=0x3}, @generic="2c8f5ae95dccf1c1c0beaa3bb39ff2f648f3c85f832ed37c511a63040a071c9d225c9bae2e1cde01dbec02704fc6fe6a02608dd266473ab3aa7aea14c9efaf3053a5a2a994f4b4d74021711875e61a76bfdda42fb467ed110dd27e3ed7b5d0ca27d3c814388f2befaeba6ea88cc9ad48ee7e2eb85ce99e2dc4a4fa0db7a0b1197eb945fafde64a406a8d02735bad967266758eff", @typed={0x8, 0x82, 0x0, 0x0, @pid}]}, @typed={0x8, 0x147, 0x0, 0x0, @pid}]}, @TIPC_NLA_NODE={0x2e, 0x6, 0x0, 0x1, [@generic="1c61d64d7efdc74868f73446a7aabef640205b1c2ed8051d80ff6c0e5095e38da02eb7b3d8ae2ef1c0c6"]}, @TIPC_NLA_PUBL={0x12b8, 0x3, 0x0, 0x1, [@typed={0x8, 0x69, 0x0, 0x0, @fd=r2}, @nested={0x8, 0x1e, 0x0, 0x1, [@nested={0x4, 0x109}]}, @typed={0xc, 0xe9, 0x0, 0x0, @u64=0x1}, @nested={0x119e, 0x70, 0x0, 0x1, [@typed={0x4, 0x61}, @generic="08bacc9f50246b353534608185ed9b80b92afdbcc57a2257976def3e8ac6d2106d686050f207220c6c4f5da262ff331757221a619e03484650e56d07df3d158721fe09de5133f89ce7f49e62d7afa260ffcf20936f1fd3c1149aa3edb16a30bab2c60713cbeb5483b258773ad51514444374cef736aad38020359d7a7e098efa3023bdf65bec50b991c8287d8f41f725e26bde96b7724210151690403ba3b25a2b80a8dbd4c2d1f51f7447ad752d7ab08ffc6480de853b48f24ddc7011bc060fe33733bc34b6da9a6b446a11e7d9402e6a37c297e02dd854c7", @generic="b0b8dafb56", @nested={0x4, 0x127}, @nested={0x4, 0xf}, @typed={0x8, 0x114, 0x0, 0x0, @uid}, @typed={0xa0, 0xf9, 0x0, 0x0, @binary="3ecba64b67cc0428a93a099025eb87b2303696f254d21f176a13323b6ca24519897fdcaa1f8f6e41c28b917e17f4fdfd584b7a5ad5790d469487a3af4608e29c361944a507ab94c17ac4c40897b5a8bebd54925b45fcfbd60a3e402bdcae4b425e29ed6049a5a370155b423ae6109736f036fe31c53c37891f624dc3f723216ffc48a41ba47d2ba2c24153b057056f606d5f489444d1b2561da345d6"}, @nested={0x4, 0x12c}, @nested={0x4, 0x12d}, @generic="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"]}, @nested={0xed, 0xa1, 0x0, 0x1, [@generic="2983b516320e850982033b0e08c7627012a0d70d8a0b01e24bf6d0225ea554a0ec1a3fc9a02f7f42d4f490ca84cc3e6516252ed7862360095c483b7d6146dc4059285a1891d250dad671584be6e2f84d73ea9da909eb008b0f73682c3a9540b4993c377761b950819eb64b67e7bcaa06ee0ff2b3d4d209fc8d2e9cbbb0ff6a0c976153f1db5a10ff8a7df9fd79362230b67e05d7ca4601e5d2a13f5962c40ae4b83dde831da8f821923883b48789a5ced324a7138a7378ec57c90363ae5d600ae0e8ee2705ea358996545bfb205eb27f20272b03ef29455523", @nested={0x4, 0xb2}, @nested={0x4, 0x68}, @typed={0x8, 0x78, 0x0, 0x0, @fd}]}, @typed={0x8, 0xcc, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x1a64}, 0x1, 0x0, 0x0, 0x801}, 0x800) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getpid() clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0xc8202, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x120, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x78, 0xbe, "2851deffd25c1ad8570b3ccab61efec8b5287da5740b3f69513508f66478fa0a946f3a3d7266145466ac77c9ad2c8c402858f8ff080284b3fc289fccf971e084e9b8aec596b715aec67311f3932a1379544aff4f5b730bb2779cc29c75729120f7b386758524dc5054da379991cb65bc7a3a84c6"}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xfffffffc}, @NL80211_ATTR_SAE_PASSWORD={0x84, 0x115, "c3991eff9f839e066026e213626609002100b805414f5b112a44d6875b15c45625a1d8502d7cc067902bf55ce2c5c11d4225f128db3dec1907e02bcf361e22fa649e8610ccef1ef63d274d664ea74441c76891de999e8c4f69131d6669b8c097cab0cf92a7d0c3663de237820b905caf4c1063fc543b92853be961d81dc490ea"}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x5}]}, 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, r4, 0x100, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@buf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) close_range$auto(0x2, 0x8, 0x4) socket(0x10, 0x3, 0x6) 2m22.325446514s ago: executing program 5 (id=1691): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f00000000c0), 0x600400, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) setuid$auto(0xe) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x200, 0xfffffdff, 0x1}]}) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, 0x0) mmap$auto(0x0, 0x3, 0x40000000009f, 0x10000000040eb1, 0x401, 0x300000000000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xe, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x6, 0x0, 0x0, 0x20000000}, 0x1fe, 0x81) 2m22.267549492s ago: executing program 2 (id=1692): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0xfffffff9, 0x6, 0x0, 0x9, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x268000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000400)='/proc/swaps\x00', 0x101000, 0x0) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0x8000000000000000, 0x0) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, 0x0, 0x80000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x42000, 0x0) socket(0x10, 0x2, 0xc) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mmap$auto_snd_pcm_oss_f_reg_pcm_oss(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x80010, r1, 0x5) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) socket(0x25, 0x3, 0x6) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x3, 0x0) bpf$auto(0x5, &(0x7f0000001540)=@bpf_attr_3={0x9, 0x9, 0x10000, 0x1, 0x9, 0x80000000, 0x3, 0x5, 0x10000, "06dbde4e070000001b0000000800", 0x0, 0x6, 0x2, 0x2, 0x0, 0x81, 0x4eaf, 0x1, 0x2, 0x5, @attach_prog_fd, 0x3, 0x1ff, 0x100000002, 0x101, 0xe4, 0x6, r2}, 0x1000) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0xffffffffffffffff, 0x8000) ioctl$auto_UI_SET_LEDBIT(r4, 0x40045569, &(0x7f0000000040)=0x9) madvise$auto(0x0, 0x200007, 0x8) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) 2m21.683222027s ago: executing program 2 (id=1693): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x268000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000400)='/proc/swaps\x00', 0x101000, 0x0) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0x8000000000000000, 0x0) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, 0x0, 0x80000, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x42000, 0x0) socket(0x10, 0x2, 0xc) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mmap$auto_snd_pcm_oss_f_reg_pcm_oss(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000004, 0x80010, r1, 0x5) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) socket(0x25, 0x3, 0x6) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x3, 0x0) bpf$auto(0x5, &(0x7f0000001540)=@bpf_attr_3={0x9, 0x9, 0x10000, 0x1, 0x9, 0x80000000, 0x3, 0x5, 0x10000, "06dbde4e070000001b0000000800", 0x0, 0x6, 0x2, 0x2, 0x0, 0x81, 0x4eaf, 0x1, 0x2, 0x5, @attach_prog_fd, 0x3, 0x1ff, 0x100000002, 0x101, 0xe4, 0x6, r2}, 0x1000) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x200007, 0x8) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) madvise$auto(0xf4000000, 0x2003f0, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) 2m21.410678825s ago: executing program 5 (id=1694): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x4dd8, 0x5) (async) mmap$auto(0x0, 0x20009, 0x809, 0xeb1, 0x401, 0x80000000008000) (async) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf250d00000008000300", @ANYRES32, @ANYBLOB="0400028008000100"], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x4) (async) capget$auto(&(0x7f0000000000)={0x19980330}, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000440), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r2) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r5, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) (async) r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) (async) wait4$auto(0x0, 0x0, 0xf, &(0x7f0000000140)={{0x2599}, {0xffffffffffffffff, 0x1000000009}, 0x2, 0x800080000001, 0x1, 0x1000, 0x5, 0x7, 0x5, 0x5, 0xb11c, 0x8, 0xfffffffffffffffd, 0x7, 0xffff, 0x801c0000000}) (async) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x14, r9, 0x301, 0x70bd2d, 0x25dfdbff, {0x11, 0x0, 0xfcff}}, 0x14}}, 0x400c0) (async) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, 0x0, 0x4001090) r10 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r10, 0x0, 0x40000) sendmsg$auto_OVS_DP_CMD_DEL(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) (async) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4) (async) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x7, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84}, 0x1fa, 0xd) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0) (async) sendmsg$auto_OVS_DP_CMD_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000c7dd0a69898376dc4f1e4e6d677f17de487f2fbf00389bdcd26596b3a5e6fd58a80200000000000000391e8a0175d52f8eb0cce61f0b5d", @ANYRES16=r3, @ANYBLOB="050029bd7000fcdbdf250300000008000900", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000c000}, 0x4000024) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 2m21.309140974s ago: executing program 5 (id=1695): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xfffffffc, 0x2}, 0x8002, 0x0, 0x6) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\xf6\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6', 0x4, 0x0) 2m21.266690878s ago: executing program 5 (id=1696): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0xffffffffffffffff, 0x0, 0x6a) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_clone3(0x0, 0x0) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x200000d1) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) r2 = epoll_create$auto(0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r2, 0x0, 0x10) epoll_ctl$auto(r2, 0x1, 0xffffffffffffffff, 0x0) epoll_pwait$auto(r1, 0x0, 0x3, 0x6, 0x0, 0x8) ioctl$auto_UI_DEV_CREATE(0xffffffffffffffff, 0x5501, 0x0) waitid$auto(0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_KEY_SET(r0, 0x0, 0x4004001) write$auto(0xca, &(0x7f0000000240)='\x04=\x01\r\xfb\a\x00\x00\x00\x00\x00\x00\x00\xa2\x00\x00\xccb\xc9\x19AWL\x00\b2\xa7e\xbd\x97\x9c\x05z\xccs\xba\xa2,&\xe9\x11\xfe{ai\x8a\x86V \x8eb=OJC\xaf.D\x8f\x97\x03g*\x1c\x98~\x15\xc3\\\xcbed\xff\xb1\x92~\x89S\"\xdac\x99\xf7!\a\xfb\xf8Vf\x18\xc8\xbbu\xcd\xf6\x80\x92\xa9\xda(\xa2\x93p\n\xe5t\x1b$\x9f\xa3\x1a\x82\x06\x12\xa6\a\"\xba\x8a\x88t\xf2A\xb9g$H\xcc\xc7\x8eoi\xf5\x02\n\"\xdf9\xa5>\x91\xf2\xde\xa8\xd3\x9f\x9d\xba6\xc0\xcb!w\a\xdd\xbb\xf1kox\x04\xe8a\x93\xf3\x12eE]\f\a\xf7N\xb7\x85\a\xf1+\x05\xe7\xb5\xa9m-+(\xaf\xf9\xa4r\x0fX~\v\xa7\xf3\x9cD\t\x80\x8b\x9d6\x1f\xdc\xc4y\x1d\x9a\xff\x0e\xbb\x8c^\xb9\x06\xcd\xa1\xf9\xec\xc1\xc3\xd7\x0fr\x16Hf\xb5\x17\x10\xf9\x03H\x19\x1a\xa8\xd1\xad\xa2\xd3\xe7\xa7\x883Y\x7fS\x80|\x9e\x91O\xca@\xe45\x80\x95\xdf\xdbn\x01\xde\xfd\vH\xfc\xe6o\xf5\x1c\x034\xf5\xd8\xb1}JX{\xf0\x89\x1d\xb5P`j\x10I\xf2\x16PQ\x85\xa7\t\x98\x1c\xe2Y\xa1\x03\x9b\xdd4VQF\x8d\xc9\xa5\fm\xca\xfd\x92\n\\\xf8\xb5C\xce\xd1\xa9\xdc\xddg\x8e2x\xde\xdf\x14zd\x01s\xaa\xd7v\xfa\xe3\x99\v|\xf7Df\x0e9\x86\x8d\x85\x9a\xc0C\xff\xbaR\x94\x9f\t`W\xdb\r\xbd\xde\xddOe$\x91\xaf\x86\xc20<\xa8\xa5\xfcDu\xbf\xdbRD\xce(\xba\xd4\xce~\x12*%\x06\xed6\xe0bB\xb4+D\x0f\xe8\x0f\x1b\xc4\xd0\xf1T\xae\xfd>-\xb1\xb2\x0e\xf3$R\xa7\x8b\x04S\xa1a\xfa\x83>\aV\"\x026\xce\xdd\f\xd5\x1fx0\x03\xe2\xcc\x0en~\xab\x13\xa2\x91\xe6\xa3\xbd+\xbe\xd8\xa0z\xc4\'\xc92P\x03\x9c\xa2\xb60\x9e\x86R\xe7|\xc2/}\x7f', 0x7) r3 = open_tree_attr$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xf, 0x0, 0x1) preadv$auto(r3, &(0x7f0000000080)={&(0x7f0000000100), 0x8}, 0x7, 0xf4, 0x9) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x1, 0x0) ioctl$auto(r4, 0x5406, r4) ioctl$auto_BLKSSZGET(0xffffffffffffffff, 0x1268, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 2m21.084413042s ago: executing program 2 (id=1697): r0 = openat$auto_hwsim_fops_rx_rssi_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy9/hwsim/rx_rssi\x00', 0x20c800, 0x0) (async, rerun: 32) r1 = open(0x0, 0x4aed00, 0x71) (async, rerun: 32) unshare$auto(0x40000080) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) r2 = socket(0x22, 0x2, 0x1c00) readv$auto(0x3, 0x0, 0x100000007) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x28641, 0x0) (async) mmap$auto(0x7ff, 0x5, 0x8, 0x18, r2, 0x3) close_range$auto(0x2, 0x8, 0x4) (async) socket(0x2, 0x80002, 0x73) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/console\x00', 0x40040, 0x0) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 32) mmap$auto(0x2, 0x8000000007, 0x4, 0xfb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev3\x00', 0x20081, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/pcm1c/sub1/hw_params\x00', 0x61480, 0x0) (async) mmap$auto(0x0, 0xb2, 0xde, 0x9b72, 0x2, 0x8000) (async, rerun: 32) r4 = getpid() (rerun: 32) process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) (async) bpf$auto(0x12, 0x0, 0x26) (async) ioctl$auto(r3, 0xc0845657, r3) (async) r5 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r5, 0x107, 0x2, 0x0, 0x28) (async) sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x2f1f31acb9aa6917) syz_genetlink_get_family_id$auto_macsec(0x0, r1) socket(0x1e, 0xa, 0xfffffffc) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xf0, 0x8fd6, 0x948b, 0x7, 0x15f4da0a, 0x2000003, 0x3, 0x64, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) (async, rerun: 32) r6 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$auto_IOCTL_GET_NUM_DEVICES(r6, 0x40046104, &(0x7f0000000080)=0x7f) mmap$auto(0x0, 0x40009, 0xdf, 0x18, 0x7, 0x28000) (async) write$auto_hwsim_fops_rx_rssi_(r0, &(0x7f0000000040)="6e3286de041a6d9f39cb5f34f04f14ba44f6cafbd1465b5eaa1faa60e39ad4b9f5d8dc55444628b10ec51fe42f2ae16e0ffb920f5e0ab991623169d5da8411df1d43065bdb4f2a75ae9aae74bd91c021872439a10da078f2f17a18045d7a76212150f36402acb30062125e655f94e8e571559bd381471dca5c5c00ecbb66747386d3d33b3bbf2f39caf74088095c72e05276f4ea3ee996881e3d19b0a83a2154016de5591cc585303b176133a12f13e35151ee25a14663728bff68491bc0225975444a0afd7f59757d775464f75ee46dfb55f62983f9792393d0cf1c31a0b59601f843068bdbda", 0xe7) 2m20.82939353s ago: executing program 2 (id=1698): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf25040000000a0016070000000400000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) close_range$auto(0xffffffffffffffff, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) r5 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r5, &(0x7f0000000000)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2) read$auto(0xffffffffffffffff, 0x0, 0x20) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) recvmsg$auto(r4, &(0x7f00000005c0)={&(0x7f00000002c0)="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", 0x8, &(0x7f00000004c0)={&(0x7f00000003c0)="444debcb5d4827b41b873d646e2663fb2d4aa24da78f4b3472bd8daf8c57304fe5302fe1869cfca458a5a39bd4006710640f6032088c509f0c082c1b04896afe04d524b8b80ce2949dae1a1d2bec705c343bc92a41212ae3ed0a036e67d0c6d7b35e6cb8956ef9b289a7e42615af9f0470dc70d3deea952a1d85a1a845530a190757f55d6e53993d1e8f22b49f44b8a5b9b989d8ed44e1a1f0002bb9f9c8813bee34cfb9b329b8b45794054ee04fdb17a945013b532f53854704c99cc8f02c1582b9c91704e2ed3d57e019cf6205", 0x3}, 0xd3, &(0x7f0000000500)="6bfee52cc6d76e1c2f8b714f9ce8de29c2b8c6a36fd1081b8f6753c4db3a957fc9f3c8ce5a1f6aae5db64bc4b8383dea96682820b78f0fdf870dba5430e851305d4713df7f1124096ace834632a497cc07ffb3b6254aa69082434244066c46fe36fd6a587c8d1a8b40662762a5e48ddb2c86fa27c693a26df7fa2dd4f5762a1616bbbc094ba84c2f033b83814b8572c7bb08c224a9b33f1ac650d8c51cff0960141e613531d3f03e45860d2c2f7110f12d60c0b21f6a1556472a2f918584", 0xc, 0xffffffff}, 0xfffffff7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x41000, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-8/tx_timeout\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000080)=""/58, 0x3a) syslog$auto(0x9, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto(r7, 0x4008af24, 0xffffffffffffffff) mmap$auto(0x80, 0x20009, 0x4000000000dc, 0xeb1, r1, 0x8000) 2m20.545255381s ago: executing program 2 (id=1699): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xfffffffc, 0x2}, 0x8002, 0x0, 0x6) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6', 0x4, 0x0) (fail_nth: 19) 2m17.289986897s ago: executing program 34 (id=1660): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) r2 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy18/netdev:wlan1/stations/08:02:11:00:00:00/rx_fragments\x00', 0x480800, 0x0) write$auto_fops_ulong_ro_(r2, &(0x7f0000000340), 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0xf8, 0x5, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) socket(0xa, 0x2, 0x3a) mmap$auto(0x1f00, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r3, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 2m13.603741487s ago: executing program 6 (id=1707): r0 = bpf$auto(0x0, 0x0, 0xa3) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/use_zero_page\x00', 0x28442, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/36, 0x24) unshare$auto(0x40000080) socket(0x12, 0x4, 0x440a) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) syz_genetlink_get_family_id$auto_taskstats(0x0, 0xffffffffffffffff) capget$auto(&(0x7f0000000140), &(0x7f0000000180)={0xff, 0x6ee}) ioctl$auto_XFS_IOC_ALLOCSP64(r0, 0x40305824, &(0x7f00000001c0)={0x7, 0xa, 0x343d, 0x1, 0x2}) wait4$auto(0x0, &(0x7f0000000280)=0x5, 0x0, &(0x7f00000002c0)={{0x8001, 0x2}, {0x800, 0x9f52}, 0x1000, 0x7fff, 0x3, 0x4f, 0x2, 0x8, 0x2, 0x101, 0x4, 0x0, 0x9, 0xab55, 0x6, 0xa}) getpid() mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb1\x00', 0x10001, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000140)="58fcb282bcbc38bfaef257e019406ea6c445cd4f7f7662ac0f8834baa918d5b3cea133243c4f2b9a39e536b67f5a1a2bfdf589da2b1c980e1ce53883444996d1721d7f3ae627c6c604000000000000007910fbc02d899ab93d002d849884a5377ff11be2ed012110f2f520") r3 = socket(0x10, 0x2, 0x4) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r3) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/ip6gre0/power/control\x00', 0x4100, 0x0) socket(0x3, 0x3, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0xa, 0x2, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_MON_PEER_GET(r3, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="dc090000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fddbdf2513000000c70006809f4806b61ffda1c6ad1d3b8d2183e380f5a1c5811282ac76459db2ad5ddee76634f65f82829c97ee87a666039c5a347e23d3ed3f385a02746d608bbdfc6916ee559dd887258e694b9a7e4268e976dcf36e8db9bb185fac412bd7bbffb4c2c1fb76f367241b41a19938e2dd48ed6211c8de5950001b6a8c2ea6c02ef33f0c1c371340170e1c7dd0591a5cada0e222a03ab932ea1f372f54b3046e886ac8511c15ff2a2c1136e212c227ca8ca201000100"/214], 0xdc}, 0x1, 0x0, 0x0, 0x8a0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r7, r6, 0x4, 0x1ff, r4, @relative_id=0x13, 0xe600}, 0xf) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) 2m13.480088071s ago: executing program 6 (id=1708): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf25040000000a0016070000000400000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) close_range$auto(0xffffffffffffffff, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) r5 = open(&(0x7f00000000c0)='./cgroup\x00', 0xebff, 0xb5d1af1605322df2) open_by_handle_at$auto(r5, &(0x7f0000000000)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r6, 0x0, 0x20) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) recvmsg$auto(r4, &(0x7f00000005c0)={&(0x7f00000002c0)="f98fd098ee741065d9f96157679767c34ca0f25ed200e0ad0eba6acc6975617bed08b1962d6214ce71a8239604548a50851b6da80663be61eabbdbf848657841a86470c1b77ea4c4453c2d28736680caf218883c1e1e49ba93148dc75c8a196ca29889f1e1a87a4fbb9874a116100729cff4459b9135817ffe3d785f8ffe44df98d16483db0e064af5c791ab4680bbc74c3d9bf07b90dbc491adf174fc857d1e3c6486e98cbfc99c6bd4cbb718ec9aef7ee99243e78722b9186707fb9d454d7bea97dd3bc6b36d586705fb7d2d541843d7589dde36557977a85485bf427ca7a52d5b50f733dba4b37a51026235594b5b08985fd4004a6169a34d0c", 0x8, &(0x7f00000004c0)={&(0x7f00000003c0)="444debcb5d4827b41b873d646e2663fb2d4aa24da78f4b3472bd8daf8c57304fe5302fe1869cfca458a5a39bd4006710640f6032088c509f0c082c1b04896afe04d524b8b80ce2949dae1a1d2bec705c343bc92a41212ae3ed0a036e67d0c6d7b35e6cb8956ef9b289a7e42615af9f0470dc70d3deea952a1d85a1a845530a190757f55d6e53993d1e8f22b49f44b8a5b9b989d8ed44e1a1f0002bb9f9c8813bee34cfb9b329b8b45794054ee04fdb17a945013b532f53854704c99cc8f02c1582b9c91704e2ed3d57e019cf6205", 0x3}, 0xd3, &(0x7f0000000500)="6bfee52cc6d76e1c2f8b714f9ce8de29c2b8c6a36fd1081b8f6753c4db3a957fc9f3c8ce5a1f6aae5db64bc4b8383dea96682820b78f0fdf870dba5430e851305d4713df7f1124096ace834632a497cc07ffb3b6254aa69082434244066c46fe36fd6a587c8d1a8b40662762a5e48ddb2c86fa27c693a26df7fa2dd4f5762a1616bbbc094ba84c2f033b83814b8572c7bb08c224a9b33f1ac650d8c51cff0960141e613531d3f03e45860d2c2f7110f12d60c0b21f6a1556472a2f918584", 0xc, 0xffffffff}, 0xfffffff7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x41000, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto(r7, 0x4008af24, 0xffffffffffffffff) mmap$auto(0x80, 0x20009, 0x4000000000dc, 0xeb1, r1, 0x8000) socket(0x25, 0x5, 0x6) 2m13.078250878s ago: executing program 6 (id=1709): mount_setattr$auto(0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x6) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/ns/cgroup\x00', 0x8000, 0x0) (async) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/ns/cgroup\x00', 0x8000, 0x0) mmap$auto(0x0, 0x102, 0x4000000000e2, 0x80000000eb1, 0xffffffffffffffff, 0x8000) r0 = prctl$auto_PR_SET_MM_END_DATA(0x2, 0x4, 0xffffffffffffffff, 0x0, 0x9) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002dbd7000fedbdf254f00000008006100010000000500f6230100000004008e00"], 0x28}, 0x1, 0x0, 0x0, 0x40c0}, 0x800) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D2\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0x0, 0x9, 0x5, 0xf870, 0x5}, 0x0, 0x0, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x1, 0xf}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee%\x8d\xc4\xe9d\x03\r\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xff\x7f\x00\x00k8\x83\xcf\xc5\x03\xcc\x8cg\x03\xe6\xfe\x88\xe3\xe9@\xee\xca\x8cH\xf4\xea\xe0p:\xd6\xf7\x97\x0e#', 0x100002a3db) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r3, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/udp\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x11, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/sctp/eps\x00', 0x280, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/sctp/eps\x00', 0x280, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/midi2\x00', 0x1, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/midi2\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyt3\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYRES16=r6, @ANYBLOB="2dbd4000000000000000000000006d40", @ANYRESHEX=r1, @ANYBLOB="08009e00", @ANYRES16=r4], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rename$auto(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') (async) rename$auto(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 2m12.661480926s ago: executing program 6 (id=1710): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x10001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x8], {0x9, 0x1, 0x6, 0x0, 0x420, 0x1001, 0x3fdc, 0x3, 0x5}, {0x2, 0x140, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0x3}}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) semctl$auto(0x7, 0x2, 0x13, 0x1) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b62, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(r1, 0x5, &(0x7f0000000440)={@_si_pad}, 0x2) socket(0x10, 0x3, 0x4) pwrite64$auto(0xc8, &(0x7f0000000680)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe41\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0x96, 0xc421) r2 = openat$auto_userio_fops_userio(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) fcntl$auto_F_DUPFD_QUERY(r2, 0x403, r2) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x3, 0x0) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002240)='/dev/cec26\x00', 0x1a9602, 0x0) ioctl$auto_CEC_DQEVENT(r3, 0xc0506107, 0x0) ioctl$auto_CEC_DQEVENT(r3, 0xc0506107, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x161200, 0x0) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x80001, 0x0) 2m12.536521544s ago: executing program 6 (id=1711): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') rmdir$auto(&(0x7f0000000000)='./file0\x00') 2m12.513485474s ago: executing program 6 (id=1712): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x381400, 0x0) mmap$auto(0x0, 0x200009, 0x3, 0x40eb1, r0, 0x300000000000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x2, 0x801, 0x100) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/ocfs2/loaded_cluster_plugins\x00', 0x800, 0x0) preadv$auto(r1, &(0x7f0000000080)={0x0, 0x6}, 0x7, 0xbbf, 0x69bf) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec8\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={'\x00', 0xffff, 0x6, 0x2, 0x9b4, 0x9, "ce7009002ce100", '\x00', "0200", '\x00', ["00000f0008b330ac007abfc1", "70d900001100", "0800000000000000000000ec", "00deff1000"]}) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @empty}, 0x51) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000300)='/d\x00'/12, 0x100000a3d9) sysfs$auto(0x2, 0x10000000000000e, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) r4 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r4, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0x2000003f, 0x4, 0x1}) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x6, 0x1, 0x0, 0xfffffffffffffffe, 0x800000000000000) open(0x0, 0x14d27e, 0x72) socket(0x22, 0x1, 0xfffffffd) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xfff, 0x1, 0x5, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) write$auto(r1, &(0x7f0000000400), 0x100000a3da) 2m10.498632699s ago: executing program 35 (id=1681): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x10000000000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x20300, 0x0) r2 = socket(0xa, 0x5, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6_vti0\x00'}) bpf$auto(0x40000000, &(0x7f0000000100)=@iter_create={r1, 0x81}, 0x96) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x0, 0xffffffffffffffff, 0x0, 0x800}, 0x92) connect$auto(0x3, 0x0, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) getsockopt$auto(r2, 0x84, 0x1d, 0x0, 0x0) r3 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vgem/clients\x00', 0x60000, 0x0) read$auto_drm_debugfs_entry_fops_drm_debugfs(r3, &(0x7f0000000100)=""/153, 0x99) getpid() mincore$auto(0x1000, 0x8001, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r4, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) semget$auto(0x0, 0x13c, 0x1ff) 2m9.22659887s ago: executing program 7 (id=1713): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x0, 0x0, 0x6f3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (fail_nth: 29) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 2m8.720819493s ago: executing program 7 (id=1714): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x10001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x8], {0x9, 0x1, 0x6, 0x0, 0x420, 0x1001, 0x3fdc, 0x3, 0x5}, {0x2, 0x140, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0x3}}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) semctl$auto(0x7, 0x2, 0x13, 0x1) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x560a, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(r1, 0x5, &(0x7f0000000440)={@_si_pad}, 0x2) socket(0x10, 0x3, 0x4) pwrite64$auto(0xc8, &(0x7f0000000680)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe41\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0x96, 0xc421) r2 = openat$auto_userio_fops_userio(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) fcntl$auto_F_DUPFD_QUERY(r2, 0x403, r2) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x3, 0x0) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002240)='/dev/cec26\x00', 0x1a9602, 0x0) ioctl$auto_CEC_DQEVENT(r3, 0xc0506107, 0x0) ioctl$auto_CEC_DQEVENT(r3, 0xc0506107, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x161200, 0x0) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x80001, 0x0) iopl$auto(0x3c8) 2m8.513476281s ago: executing program 7 (id=1715): mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x8000) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)=@link_detach, 0x9) (async) r0 = bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)=@link_detach={0xffffffffffffffff}, 0x9) ioctl$auto_TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f0000000100)={0x4, &(0x7f00000000c0)={0x84, 0x20, 0x81, @inferred=r0}}) close_range$auto(r1, r2, 0x3) (async) close_range$auto(r1, r2, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x55) socket(0x22, 0x2, 0x3) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2m8.445516287s ago: executing program 7 (id=1716): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') rmdir$auto(&(0x7f0000000000)='./file0\x00') (fail_nth: 2) 2m8.31087253s ago: executing program 7 (id=1717): mknod$auto(&(0x7f00000003c0)='./file0\x00', 0x9, 0x9) mount$auto(&(0x7f0000000000)='veth0_macvtap\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f0000000340)) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x48d0) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') rmdir$auto(&(0x7f0000000000)='./file0\x00') 2m5.280277756s ago: executing program 36 (id=1699): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xfffffffc, 0x2}, 0x8002, 0x0, 0x6) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6', 0x4, 0x0) (fail_nth: 19) 2m5.244016187s ago: executing program 37 (id=1696): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0xffffffffffffffff, 0x0, 0x6a) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_clone3(0x0, 0x0) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x200000d1) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) r2 = epoll_create$auto(0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r2, 0x0, 0x10) epoll_ctl$auto(r2, 0x1, 0xffffffffffffffff, 0x0) epoll_pwait$auto(r1, 0x0, 0x3, 0x6, 0x0, 0x8) ioctl$auto_UI_DEV_CREATE(0xffffffffffffffff, 0x5501, 0x0) waitid$auto(0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_KEY_SET(r0, 0x0, 0x4004001) write$auto(0xca, &(0x7f0000000240)='\x04=\x01\r\xfb\a\x00\x00\x00\x00\x00\x00\x00\xa2\x00\x00\xccb\xc9\x19AWL\x00\b2\xa7e\xbd\x97\x9c\x05z\xccs\xba\xa2,&\xe9\x11\xfe{ai\x8a\x86V \x8eb=OJC\xaf.D\x8f\x97\x03g*\x1c\x98~\x15\xc3\\\xcbed\xff\xb1\x92~\x89S\"\xdac\x99\xf7!\a\xfb\xf8Vf\x18\xc8\xbbu\xcd\xf6\x80\x92\xa9\xda(\xa2\x93p\n\xe5t\x1b$\x9f\xa3\x1a\x82\x06\x12\xa6\a\"\xba\x8a\x88t\xf2A\xb9g$H\xcc\xc7\x8eoi\xf5\x02\n\"\xdf9\xa5>\x91\xf2\xde\xa8\xd3\x9f\x9d\xba6\xc0\xcb!w\a\xdd\xbb\xf1kox\x04\xe8a\x93\xf3\x12eE]\f\a\xf7N\xb7\x85\a\xf1+\x05\xe7\xb5\xa9m-+(\xaf\xf9\xa4r\x0fX~\v\xa7\xf3\x9cD\t\x80\x8b\x9d6\x1f\xdc\xc4y\x1d\x9a\xff\x0e\xbb\x8c^\xb9\x06\xcd\xa1\xf9\xec\xc1\xc3\xd7\x0fr\x16Hf\xb5\x17\x10\xf9\x03H\x19\x1a\xa8\xd1\xad\xa2\xd3\xe7\xa7\x883Y\x7fS\x80|\x9e\x91O\xca@\xe45\x80\x95\xdf\xdbn\x01\xde\xfd\vH\xfc\xe6o\xf5\x1c\x034\xf5\xd8\xb1}JX{\xf0\x89\x1d\xb5P`j\x10I\xf2\x16PQ\x85\xa7\t\x98\x1c\xe2Y\xa1\x03\x9b\xdd4VQF\x8d\xc9\xa5\fm\xca\xfd\x92\n\\\xf8\xb5C\xce\xd1\xa9\xdc\xddg\x8e2x\xde\xdf\x14zd\x01s\xaa\xd7v\xfa\xe3\x99\v|\xf7Df\x0e9\x86\x8d\x85\x9a\xc0C\xff\xbaR\x94\x9f\t`W\xdb\r\xbd\xde\xddOe$\x91\xaf\x86\xc20<\xa8\xa5\xfcDu\xbf\xdbRD\xce(\xba\xd4\xce~\x12*%\x06\xed6\xe0bB\xb4+D\x0f\xe8\x0f\x1b\xc4\xd0\xf1T\xae\xfd>-\xb1\xb2\x0e\xf3$R\xa7\x8b\x04S\xa1a\xfa\x83>\aV\"\x026\xce\xdd\f\xd5\x1fx0\x03\xe2\xcc\x0en~\xab\x13\xa2\x91\xe6\xa3\xbd+\xbe\xd8\xa0z\xc4\'\xc92P\x03\x9c\xa2\xb60\x9e\x86R\xe7|\xc2/}\x7f', 0x7) r3 = open_tree_attr$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xf, 0x0, 0x1) preadv$auto(r3, &(0x7f0000000080)={&(0x7f0000000100), 0x8}, 0x7, 0xf4, 0x9) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x1, 0x0) ioctl$auto(r4, 0x5406, r4) ioctl$auto_BLKSSZGET(0xffffffffffffffff, 0x1268, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 1m57.279699385s ago: executing program 38 (id=1712): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x381400, 0x0) mmap$auto(0x0, 0x200009, 0x3, 0x40eb1, r0, 0x300000000000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x2, 0x801, 0x100) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/ocfs2/loaded_cluster_plugins\x00', 0x800, 0x0) preadv$auto(r1, &(0x7f0000000080)={0x0, 0x6}, 0x7, 0xbbf, 0x69bf) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec8\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={'\x00', 0xffff, 0x6, 0x2, 0x9b4, 0x9, "ce7009002ce100", '\x00', "0200", '\x00', ["00000f0008b330ac007abfc1", "70d900001100", "0800000000000000000000ec", "00deff1000"]}) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @empty}, 0x51) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000300)='/d\x00'/12, 0x100000a3d9) sysfs$auto(0x2, 0x10000000000000e, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) r4 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$auto_UBI_IOCATT(r4, 0x40186f40, &(0x7f0000000080)={0xffffffff, 0x0, 0x2000003f, 0x4, 0x1}) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x6, 0x1, 0x0, 0xfffffffffffffffe, 0x800000000000000) open(0x0, 0x14d27e, 0x72) socket(0x22, 0x1, 0xfffffffd) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xfff, 0x1, 0x5, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x4, 0x5]}, 0x0) write$auto(r1, &(0x7f0000000400), 0x100000a3da) 1m53.19573495s ago: executing program 39 (id=1717): mknod$auto(&(0x7f00000003c0)='./file0\x00', 0x9, 0x9) mount$auto(&(0x7f0000000000)='veth0_macvtap\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f0000000340)) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x48d0) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') rmdir$auto(&(0x7f0000000000)='./file0\x00') 1m26.12517663s ago: executing program 8 (id=1830): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x0, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0xc0200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x1, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(r3, 0x5, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r4) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8010) mmap$auto(0x0, 0x2020009, 0x8000000007, 0x13, 0xfffffffffffffffa, 0x80) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r5, 0x0, 0xfff) msync$auto(0x7f, 0x6, 0x0) clock_nanosleep$auto(0x8001, 0x9, 0x0, &(0x7f0000000240)={0x0, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) r6 = getsid$auto(0xffffffffffffffff) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x200, 0x3, r6, 0x8494, 0x80000001) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) 1m25.03657358s ago: executing program 8 (id=1833): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS2\x00', 0x201, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket(0x1a, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^t\xefn\x81\x88\xca\xd2\vwXE\xa6<\x81\xcf\xfb\x97;\xec\xf1@\xae\xe1\xa7\x01\x1d,\xcc\xd1I,[\x8a\xbe\x1b\x16\xc9\xa3d\xc2\x97.\r\x8b\x8eg\xae\x81\xec\t\xec\xc9k\xe1,\x945#\x9d\xe1q\xe3\xce\xc0\x9d9s\t\xc4C*ru!\xee\xd4\x00\x9c;\xf5\xaeb\x9e\xa5\x15\xd4\n\x04~`\xfej\x8ek\xf0[\xb7\f\xbfG\xd3\xa1\xb7b\xbd2#\x13o\xdctQLo0\xbd\xbf\xd5A\x01\xbb\xf2\xb8\x9b\nu\n]\xec\xfeG\x9a\x98\xdc\x9fj\xc9\xf1\x03=\x9bn\x17\xa0\xa5\xb5<\xa9\x13\x03\x94y \xd3\xb8\xdb\xf8$H&\xbc\xc1\xdf\x11\xb1\xc8\xc1\xc6V.\x1b\xc7!\xb2\xe7\xc3\xcd\xee\xdcI\x81\xa1\xddK\x9a,\xc2\xdan\xe6\xd4\x1d$r\x9c\xfd@\x98@\x82+\xe3\xf5\r\xd6\xdb\x9a\xe8\\\xbe}8\x81\x83F:\xbd$\x9c\x18\x87otV\xb4\x95\b\xb8^X[\x16]\xb0\x8d\xba\xa2}z\xbag8\x8c$u\xd9L\x0e\xc8\xa4\x80\xe3\x9evm\xac', 0x110000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), r2) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x20008}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x4a}]}, 0x24}}, 0x20000080) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mbind$auto(0x2000, 0x100000004, 0x5, 0x0, 0xffffffffffffff39, 0xffffffff) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@generic={0xb, "444cf575c02dd753ff403ac8c6ea"}, 0x6a) shutdown$auto(0x200000003, 0x2) listen$auto(0x3, 0x83) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/rpc/auth.unix.ip/flush\x00', 0x100, 0x0) clock_nanosleep$auto(0x0, 0x400001, 0x0, &(0x7f0000000040)={0x7fff, 0x7}) 1m23.904610461s ago: executing program 8 (id=1837): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xaa102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r0, 0x29, 0xce, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/misc/cpu_dma_latency/power/runtime_active_time\x00', 0x200, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) madvise$auto(0x0, 0x2003f0, 0x18) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socket(0x80000000000000a, 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0) write$auto(r2, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card0/pcm0c/sub1/hw_params\x00', 0x101000, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xb4d3) pread64$auto(r3, 0x0, 0x8, 0xffff) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) 1m22.533503559s ago: executing program 8 (id=1839): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event0\x00', 0x2, 0x0) io_uring_setup$auto(0xc, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x30}, 0x1) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x11, 0x80003, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x14, 0x0, 0x5, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x80080) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/statm\x00', 0x800, 0x0) lseek$auto(r4, 0x5, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r1) sendmsg$auto_NL80211_CMD_NEW_STATION(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010029bd7000fddbdf251300000028000e005256441b633b87bba3bd6e38e194879ade12e8512ef3ab6a65fae7f2ee80ef36de7ef6f3"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40004) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r5, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_PMK={0x11, 0xfe, "8b7a0d09d41a413df7404b98d8"}, @NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'sit0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x40) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) setreuid$auto(0x0, 0x7) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/options/test_nop_refuse\x00', 0x800, 0x0) r6 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) semctl$auto_IPC_INFO(0x8, 0x5, 0x3, 0x7) fcntl$auto(r6, 0x6, 0x0) r7 = openat$auto_virtual_ncidev_fops_virtual_ncidev(0xffffffffffffff9c, &(0x7f00000002c0), 0x410000, 0x0) getsockname$auto(r7, &(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, &(0x7f0000000380)=0x100) r8 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r8, &(0x7f0000000180)=""/250, 0xfa) sendmsg$auto_NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000ac0)={0x1028, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0xf}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x7}, @NL80211_ATTR_QOS_MAP={0x1004, 0xc7, "15fd38963da228dee579522ac6c8988a3a7c4b7be24b1bb67e23ffb34d73f310cf624dd52e5af1aab48a3af99901fec852b2ebff53aac4ee773cf6f5c24ac97631d4563911f5f9a4a178363bdd7abf2e58559a1e088c5f006841a7e30e30f0ff7e1292098ad90e672fccdd8d1af03429ae3b8ed6ee211bb4e4dd33940e062244cc614e9aca0596fce09dda7bfa8132d335a70e00281a08cdda60d450aed85176a97f98e5fac45fdcb8c5c4d3c9399c81bd129a440541c0afe0ee4744bf6a62a3fb7350d371583e55f3c6b379bc6409b11fcd294010b8fb4a5c8016a5fe33800d47f84e9111d9c2f2826c4027795ae89fed7eeaf6425891a987e91f96f97b296eb9db64ed06b67b4445a9b96c84752445b558eacd5a136f7614bcd809f6876d02fc81634893fce1abb20186b3681f23eaed2c0cfa3f936eb28ba0fd4167eee36f2db7f441a34e547c53dba85c8a8f98987c57f8a0e71883aef5c1fd30002c25b940e006735d3d9686ac6a57a960322d96a428d69d48cc190b52f06786274728dc29a057cb77cbe8c0da8c64d03ea970775154e7014cca992d8ced30a1df53a860c2708686b1a67cc4b8bd3d572d1494abe1859b3cce32029897ab3606e0ae6f4ba9b059698f1e7d1c92bd59da42e30c42ec3a8a6c22e69be8dddcc574c52ee9adee8b1b1cc70affbad759c4801b218b0799471b15ddd8afa77d43f28b9db48e4c5b57da4b3c72af09ad80319168b8de4e7161af4d1084319f18dce1eab7a055cc5dafb3206b3ae301883c715ceebe7317cdcde667bab9330a93b4e0c434945967302e3956bbaf8c897673e0cac46b7cd2721e0b986d685b32ea660f8bce0744ad96b4ee364310f7692748ebc3f898b65f358c5ce8bf78f414a9ac1da41d5342fcf8f1fe05f73a76cd958ce90087250f7a8e15a0ab763cb95ffcd081261b071fa24ba88ef8f6456f3ba5c2280d1b9f8201b55d8e8e1310a7e4065fa04c881d1313bd738f2616dc9a3265753951f615d71d873886478babd262f9c65168e16528d8a33bd55572b9e27c86b857c0f6f8021f55fc8b4436d0d7d91aaca973596c973587312c16d93cb4676d4117bcc439354c5ff69cdf8dfc2290f8f5c5f1fbcb5bd9c2c13520a54fd92465cb559e4fc052749987f0c4d867853f819fe270906fcbba101c5ef8417cabb576d3dc5a1e1c3446e51a257baf4d5914729609da46eed935add70b124ee8aca0dca4d39301f24cf90580824849b3870b250051e14a659ab3e199d4efe5a023a616306086c4403e2f2905ec3d9966ed016d93ce51ef6a953d32825644f9cab80d3aa42c0cb6b3a09cf9444875117af465fca2f228394159c2e1bcd0ebcba996534f5d09007eb5b4b83b9410d8f22fe7ec22ccfb60981ef101bede03fe13736badee5e97901151dc792d8a3d21200be66e69b65937149e58c48fdb823debb3958f965803d788ed1778bb236efb49dcd54c12a347f86a3385dffcb8602bfd0b18b44d52d008d4080d48144d2e57074037b7012b401bcc386d4000b5a3b8ced7215c98461ffd911b7765022c323cd0f02328f9685f790fad698f9ec06561ee5e560794a4277292243d4b965c241b977f88c47cbe8e8a3457beaaa9b9a0ed832cb40f48975c3fa0be7d6880c8018ea918aab75bf7f4941a1ea86e5e625ca8ec25ef64744e5e92bd6b3d085b3d1ac3ac54fca3734a30fb13fa613750e77a8c8508e41cade766eac1f0a18f4e3ea59064bfbd40006d022654c0b2aca93a99081369fd7d790ccc8386a7997f175e89793acdd3677e7084b29831f42821bb8334678f478b3191c475d796a00e211e69954d92989bee36a48cf49b01d5ec4a4984d7e30e3ac24cf43e0d42510c178300ebd7d06d127b9fbab16dfde0b084eaa2a010e9bcbe7059eb3613ce58c33c8cfad988a5b13c0842ba79692951fe972f430c7985579069112424b345f9c9853a9ff35d10ee4ffc5a95233deefeff0ccb7dc96a71a4ed8fd15cdd4b86cb5831997d7855096b36ae2b07ecaf6c798e85dfc0420a54ce208a375212b14e648e8884de0bf5463a62fb7e28a48096a0eadf665069ac58f4d94747de31ed60f466b7d230c33f0d14091cfec9b1505ca38328232d8a308866d47060f3c76792f0dbb29577326e016a6a11475ebbee1ce4cb026da28244f3da0e0cab7c3b6539cded6c6a3094ae5cf5432e23bafdb7315981caf20a343ee4e6e7f9f8372241a9533d69fd233cb4bfd03106bdad8d5dfe440feb1b81135f427e5b70122fcc034a760d3bc10bc3acf7582574ca9100d56c93e89ebfc9e58d1e3447940c19426781a20c21052a8ce84ed16a34b1098f573824f681e5669dfe76c53ca1cd626a2b4b37134d3b23840aa229a619cfed2916b9c7cc0dd4514c507665047dce28990826d17bbab71b91332e7dc789eab161c01bde034eeee5cc6a4c4dce0622f0bac9bee237470382e7e9341d7197d6d11288ac0a9e1f58c0b4eff41c5ca0793e6a70cdc4234b2ab1d7a3db3fc2cb64f40ee50f014f3d0e3d64585e65dfb96fda1b272b2440091d314ed740964e583da69036c6701ed5e7f7b69d9278a22b950e7bee58c0a8bf70826ff4fc24e654fb1e8ce3f456fd77030536a5b13d4a3ed3413335f67e5b6d7595bce032aafcccf5c4c7fdf77398c8bef57353f3828ab7393f6996757ab4060755177725ba237e39980ede68568f576b8a026ff78994b629ef16d1a9453c7a82d13d6e6c8940db5c7ecf670bfcbbfdf0db346ec7609900050600f86f7c035907aedaf101b26e47374792c3592468abfec395168bbfe7d8ae0e64a6bae4643deee143dd589b4a289c462ea9c8beee03c5cded588e22ac43f3b41d9954053c389dd115bd5b2acb87a865edd6ea5b4a020b6dbc2b71fccafa1e77a55d4a9e89d31b1a33aa92c0605de1145bb2c71503a65987dda7cc1add95366e94f02a2d28f105aa36c4b29c94a1f4465ed791dce9cbedfab3f75bd1954648c3861ed3cf0893ee367437101c4e919c8f2f4f1ac280c810f8d9afbb41b6a748302a01cbe4df02f953a4cf4837b1ae7136f69aeff645a7113c94fb5d0cb31bb65bdab732a5c08c7aa73ec13f288f5264b64d1415b83057fc96307fecc8f9520a28821ade19377d09b3882bc7edd5649105db6d8b571ac323ed3bf92649477b607aaf146566466ed58aabe4e8f6f499e13d669dcbb0664aa38be0b9a2953d178b06727ae0db0b2a2749d88f81343c7c301dcad6602112118ae9218c2360a89ab0416e13a76616011e9da0eba93986b4ab7f37c03b4eec78b8e8847ff761c6834e9cde1994ff5d0729407012c43eb1b36649f740fbc94c80b1ba9a2ae00f3d0de05fb62c9cb527137cc49e8f361d9dfa3a56a9961f230d17d1538fd29defd5be6cb7b65a745acb9ef95fcf1a450999f44dd866f171e9bac6fab0f13747ea6246bced254f5b97b6b529803191204361af3a423fce0d2f1dc492b14cf0ff8966639398ec43927025a5edb877632ae894ef17d225798d76e1f6727c067cae51a40ea4fb9b50e8405e22183a6460b34ac780136f58176af5bdb1f8d7f9a36d7cad1d89f80e0fe2072be81be1fa4c42e27099965a6e7e769cd9fb055cb8a0ef1a34418231153a53647a1abf64da233f91a7e0e24305c7380f1114c4b4b32caa901134c31026f1a5a08bda59fbc5dd1a418a63ca7d45a6d7830322d51698fe357181a56884e34c463701ea51c777f655ac97e573cd35a087e6b8338039f00f8b0018bb72e0b3f434a9f6293104fd2293fe4db6d3c7697e7077012525d7069c34239ed062e2c9911e99dac0713074a4d3dc8c578d1bc5b62b4462a4b0dd778c62b58aa972c061139e16c30bfa06e95c0c4d1b03f2c2e806051339369ec66832a4e190dc2042d3f05e6d79da4a164b4fb360ff16459b968b472ee76f5eac36c26d66667edcee268bbd2b813858379839cbfdce11d4d60c23c7135f277f4c61e6143c357bc218754d97ae19e2af8e887f8ec57fc6465e9fa0916e279e08fb5e016c860c075a91576b2e7e7de69e70989c229e29f37129adf1a20bea2f663ab567725859156a3cf72682e3ad2b6baea51a3371eeb2c2325b446e58498cd373539a56fd464827e1e1dc079ee8d7d021249a4812b5c33ba9a1ef422021af12b583f58459829b53b2e1fe7ecd7f2a6696eacbdae6d705195a23c45b6b198c7a0c5b55b310ea6cb64447626c5358df694e6caeaaffb0c5001c568136ab2d955e8ad9874ce20c88baa81d5c60d1b132956de0ae3b3ed5deb5873345da1834738b3c4d933a15a7bc036aeaf123fde411f08f3d5606cf15a1c01cbc34bbdaef13e9a52797c3326162a9c0199f94edb94cdff6b08bcfa82c4d4ee79102c378a58c5eb60a36d132d423c1e2ae87e1f09040d86c5c114c34072076b3a9c260eb2f76bd98140619cfbcb3eb7f3990f9cef406116087f84ae2f1ef70d8ba6ec35bdeb387244e953568b371e4d76daea9e87309f1ae97922cfddd288b2ca91aec18b3ad8b844dcf2b5a4678d3619b478fcefb7baad7929e360ebc4c199959b98181ef5540ff95203d5c8b3f89fca769fc5d556b54f202b1014af65d3aebe5cf492486d8195a5ef8afc2bb22a5b4108a2a2cd55e995cac6c859998e04f24278dd461f6d70a9c0915d1d90e37c07e1952deb5d8a5a4ffe0216fc66d34d7c821163685a295ee681ca00b90798861212f5b4a7ee6ea1ad20234e5de35532491c61fb3cd2357134729546c5f854c8f22d8ef703d53f0a2a905bd97d04919be576ef5b5c860eeed0e2fca77b2b2e40e9d3e66ede22488ae56d2e004e7e09089f8a301a358f5735272479b347f5eb307e526511ddd3e8e410fa4dc5bb42ffacf8378fe1cd0877b044faf0319390538bae397d7986afe511e24206f6e554eb7a281533e5279fe61b5603f04f78f24268911c0db9c2fac5b03e519c8922b0e4e72e44115c246e928dfa88d58af48921d3f1cc8ec6e31fb57fa3df4a70a6485f6cc47a453ab4cdbe7141d5130c60835ec923123a55a538c5c6df568e4fba9df2792e34374bdf84253b2ff549332593323791f2b8d698e650be45b16c69fbc5579a5b8a3650778134574f3594e16f267f0fc41ed27f06400b9c5f3f66492413d3bd3c267b308a4b1df2cf03d3fd33e8d4c83a84991f39ad9507e2b6535998d537301cbd2f941ddf50d2ed6ee951265498951a29837ee5da5d56a02fd164461ccac9b98e8eacac2699c444b46750f2fd7f1dd7d0b59efac115fe86160fb38215a7cec63a5f8c3c8e1bcea322a3a3e2a083a37db114c0c47800fc23c5889e7e97f95ff437f83377ae2337f527b4e31459cf226df93eafe354fdad6763bb9568c711e4ae836b50421de87db470d1f0150dd5957688e3322a6c786bfa6bc883f82554e85ebeaa4264aa8cc5b0216a54087e868243a4c40d113649645b4b156dd28b66d0f5eef74b2f0677e664253c5885adefb2eb643cd92dcd6ada12160dfe8afd3b71523cfc189e63c0a55cf09c73ea079febaec144668e04a55de0c11ac0640736415a4bf7f17962fc8b89acb71c61216b59530271d7827c710e0300ad37448b96e1b18c14b0412b4b81d93576976caad5cce748859271eb20b464908dd46594895484b73c0224f9bfe6e182bd8aeeb0669192aca93dae7508f12bc122f211fbb9132dbddb4a502bbd2810ad88d09459c867b25959c6075082343242fd60260406b769edeafbb85b15429867a55f35cc52b01e2c0ce200373fdabfcb67c744f0880dbaba6e1ad2008"}]}, 0x1028}, 0x1, 0x0, 0x0, 0x804}, 0x4000) 1m22.289160152s ago: executing program 8 (id=1840): openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) sendfile$auto(0x1, r1, 0x0, 0x400007ffff000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x6, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x3, 0xa) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r3, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) r4 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) read$auto_check_wx_fops_(r4, &(0x7f0000000080)=""/228, 0xe4) 1m21.670558493s ago: executing program 8 (id=1841): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) r2 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy18/netdev:wlan1/stations/08:02:11:00:00:00/rx_fragments\x00', 0x480800, 0x0) write$auto_fops_ulong_ro_(r2, &(0x7f0000000340), 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd2a, 0xc, 0x8, 0x5, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) socket(0xa, 0x2, 0x3a) mmap$auto(0x1f00, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0xf0, 0x810004, 0xffb, 0x8000000008011, r3, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 1m6.192533088s ago: executing program 40 (id=1841): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) r2 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy18/netdev:wlan1/stations/08:02:11:00:00:00/rx_fragments\x00', 0x480800, 0x0) write$auto_fops_ulong_ro_(r2, &(0x7f0000000340), 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd2a, 0xc, 0x8, 0x5, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) socket(0xa, 0x2, 0x3a) mmap$auto(0x1f00, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0xf0, 0x810004, 0xffb, 0x8000000008011, r3, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 21.804961055s ago: executing program 1 (id=2007): r0 = openat$auto_fops_u32_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim0/ports/0/ethtool/ring/tx_max_pending\x00', 0x1, 0x0) fadvise64$auto(r0, 0x9, 0x3, 0x6) r1 = openat$auto_fops_u32_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim7/udp_ports_sleep\x00', 0x204400, 0x0) write$auto_fops_u32_(r1, &(0x7f0000000180)="74f3f6046bd229351fae81659aaebfed50cd4599d3c48b881165081a68fc110b66033c20cc0911222c993702ec7458e007e20b", 0x33) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x202000c, 0x1000000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1d, 0x800, 0x0) r4 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) mq_timedsend$auto(r3, 0x0, 0x6, 0xc91, &(0x7f00000000c0)={0x6, 0x7}) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptys2\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r5, 0x541a, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r1, @ANYRESHEX], 0x1ac}, 0x1, 0x0, 0x0, 0x240080c0}, 0x4000011) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) 21.497289883s ago: executing program 1 (id=2008): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1000, 0xffffffff, 0xffeffffe, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cgroup\x00', 0x100382, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000040), 0x669400, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/card0/pcm0p/sub3/xrun_injection\x00', 0x8a180, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x383, 0x0) mmap$auto(0x0, 0x180000, 0xdf, 0x9b72, 0x4, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf) 21.142316451s ago: executing program 1 (id=2011): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f0000000180)={@siginfo_0_0={0x3, 0x9, 0xb0fb, @_rt={0xffffffffffffffff, 0xee01, @sival_ptr=&(0x7f0000000240)="f64cef9ffb82dd279f3115e665b367936994f351d984cd7b62d855106f2a4a7d5c1dd88eae707d22e86f668fd0355c60df3dfd420f3944034056094cd2fac3a537d8fd5954a5d7b85832e029bffee20394def26f723b3a3a31d07e02e379a39d381763731524d49dbcff906571df5d70d1c56b7a651efd02ce3829b667732a148e986378c5898cc78ca484c21552fe8fbbb02872a2e5"}}}, 0x3, &(0x7f0000000300)={{0x10001, 0x7}, {0x3ff, 0x7c8b}, 0x5, 0x81, 0x8000000000000001, 0xfffffffffffffffb, 0x7, 0x80000000, 0x1ff, 0x2, 0x562, 0xa8ab, 0x5, 0xff, 0x0, 0x100000000}) sendmsg$auto_NL80211_CMD_MODIFY_LINK_STA(r0, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="68030000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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"], 0x368}}, 0x40040) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) r4 = open(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0xa0400, 0x8) open_by_handle_at$auto(r4, &(0x7f0000000040)={0x8, 0x2, "0200000000000000"}, 0x3ffff) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_FIDEDUPERANGE(r5, 0xc0189436, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x11, 0x0) fsopen$auto(0x0, 0x1) fsopen$auto(0x0, 0x1) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x18b002, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, 0x0) r7 = getpid() process_vm_readv$auto(r7, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(0x3, 0x0, 0x80) 20.656884369s ago: executing program 1 (id=2013): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x6, 0xff, @count=0xe35c, 0x0, 0x5, 0x6, 0x6, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x4001090) sysfs$auto(0x2, 0x23, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptya5\x00', 0x163c01, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x1d0601, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/tty34\x00', 0x2200, 0x0) r0 = openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000080), 0xa100, 0x0) read$auto_vga_arb_device_fops_vgaarb(r0, &(0x7f0000000140)=""/16, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyua\x00', 0x109000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x4, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mincore$auto(0x1000, 0x8001, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710}, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto_tun_fops_tun(r2, &(0x7f0000000340)="538ed6f9db1f5427c051496ce0730708793caf6bb210e9e5cbfde6332f16bf50b795e49896ba6bcf52dbedff465b6aa27e792e46da6d660fe663e3afb83958e5ecaaeb27984015f2324fc0f77cdb109a16f41d84e0c217fce3639bc5985ed485f2499f87372727b185f6140438742b2de08e9d33628e90e40884198a6cac0192bd07a8a587ec54fb6a51f0dcb42a4b1aaed64f397eb12ac0dc762b12df7670f59a296e6d23af20f5f2be69970a91403e5e76b0e561f5460d3e5a", 0xba) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munmap$auto(0x20001000, 0x7fb3) ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f) 18.189261839s ago: executing program 1 (id=2023): socket(0x1d, 0x1, 0x7fff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x3fdafc9, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) 17.378042044s ago: executing program 1 (id=2026): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000a00)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)='1\x00\x00', 0x3) 15.206153455s ago: executing program 3 (id=2038): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) r1 = fanotify_init$auto(0x5, 0x2000000000002) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x80000002}, 0x0) fanotify_mark$auto(r1, 0x451, 0x800000a, r0, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) unshare$auto(0x20000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/pcm0c/sub6/info\x00', 0xa0000, 0x0) pread64$auto(r4, 0x0, 0x200000000004, 0x4) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto_TIOCSTI2(r3, 0x5412, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x210000, 0x0) poll$auto(&(0x7f0000000180)={r5, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto_VHOST_SET_OWNER(r6, 0xaf01, 0x0) r7 = fsopen$auto(0x0, 0x1) fsconfig$auto(r7, 0x8, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_cifs(&(0x7f0000000040), r7) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x3498c2, 0x0) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r9) ioctl$auto_KVM_GET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0xda0, 0xe3, 0x7f}]}) execveat$auto(r2, 0x0, 0x0, 0x0, 0x11000) 15.009666238s ago: executing program 3 (id=2041): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1000, 0xffffffff, 0xffeffffe, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cgroup\x00', 0x100382, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) mmap$auto(0x0, 0x180000, 0xdf, 0x9b72, 0x4, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf) 14.288273537s ago: executing program 3 (id=2050): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_NEW_KEY(r1, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYRES16=r0, @ANYBLOB="010029bd7000fddbdf250b00000008000300", @ANYRES32=r0, @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x890) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x40000002c55, 0x0) r3 = socket(0xa, 0x801, 0x84) getsockopt$auto(r3, 0x84, 0x7f, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0xe8202, 0x0) sendfile$auto(r4, r4, 0x0, 0xcd) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab/kmalloc-64/objects\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000008c0)=""/61, 0x3d) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) memfd_create$auto(0x0, 0xe) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd10\x00', 0x1206c2, 0x0) write$auto(r7, &(0x7f0000000000)='//\xf2\x00', 0x80000000) ioctl$auto_BLKRRPART(r6, 0x125f, 0x0) unshare$auto(0x40000080) socketpair$auto(0x1, 0x4, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r8, 0x5425, 0x0) 14.103790629s ago: executing program 0 (id=2043): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x406a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0x8) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000480)="d4a53c1e09ffaf5ebc3aede6a25994dd4a3410405ee65d2d0e9663c899d2a2eb5ade7a0d9e0ba02677893f0ee8cb4dcd03cab961286a75d7638b30fe3d69832c92780bbd99b87e70769861cf1276b4403dd0639634946f605cedc1a6af15d51e655080849f7b8862b6741ab817b317382edd1cb17f94cb918e2ede7a594f3dc5f8c35e17d54288b799751eb014279941474096b819f6a34f777a546f03107a35fb297f793ff68af1953f8030587517b58e3bcabf373986444f35f159b0f2274659a37a74e1e7d0c1e24f083a024cfabfe49c5c81c83b3f3669294e36d468913c65ad470fcb594e35568a72cdbfd37e32cc19ede87f73206e3309ca9e11dc8c9e9436c2e940f624c1458d2df3ca2d5dfcdf184234ccf79645843da58f018c32999b737c596ab28c8ddf1d10291f72c21d2af839b0adf97e0acb7aca38a36305b94fe7115eb33fc6dec7be5f67476479a2f5a71262a00b4d952ec723032f70b96772c768066d8b280a70089732d1267ad0f331d420aa496c0a4e8346c177ae5ec29eee6cc7e86774f220c5690146e1af352ca1e9d0e7b577b7fde37bfb9efbd50aab54519ab3742d", 0x10, &(0x7f0000000180)={0x0, 0x1dff8}, 0x7, 0x0, 0x80000000010002, 0xb}, 0xf9c}, 0xa, 0x7) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000ed4f", @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf250200000008000100fcffffff08000100ffff0000"], 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) r3 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy18/netdev:wlan1/stations/08:02:11:00:00:00/rx_fragments\x00', 0x480800, 0x0) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) ioctl$auto(r4, 0x921064a3, 0x1000000000000003) write$auto_fops_ulong_ro_(r3, &(0x7f0000000340)="0e786aecdd482c4730d2d7a1378089009a81864bac875dbd2f8ccd0bf7f9b458dbcf08517e16c83a9657758e2ddec2fa3be0637108355e74fe6ac50d3b2a97a65e8db482712f5cb5fb330ab33712c08371ac4662963eabba8d0f5666328c1ce1ee8cee8cb1f72de8d28acef417455eb6c862a39b573d022b93c4851d7487ed88c182dc44ffa68f5c9b743c98c8021d7f17fd9e0e4743cc1bbc18568d87a76cacd4675df67345d8f0189202916f2970fe413de778a9aa0b89f2b76b195b1fb1c0ae90e4669fa0b11aa07a85f593b39ee5bb0d988d7755c0b687b898f0d1cf95210a8bc915e1f75e11bfd3efe5364091f36c1a88", 0xf3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x10000000, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x7, 0xd08, 0xc, 0x8, 0x5, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x272ca5b0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/acpi/interrupts/gpe02\x00', 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/kernel/timer_migration\x00', 0x242, 0x0) 13.016799233s ago: executing program 3 (id=2045): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x1d, 0x3, 0x3a) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0xf7, 0x2, 0x40eb2, 0x401, 0x300000000000) write$auto(0x3, 0x0, 0x81) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) getpid() clock_nanosleep$auto(0x4, 0x2, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0xc8201, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, 0x0, 0xd0) sendmsg$auto_NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x21}, 0x51) 12.96416787s ago: executing program 0 (id=2046): unshare$auto(0x40000080) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x74) unshare$auto(0x40000080) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x27c500, 0x0) ioctl$auto_BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000180)) write$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x54) listmount$auto(0x0, &(0x7f00000001c0)=0x4, 0x4, 0x101) keyctl$auto(0x4, 0xfffffffe, 0x6, 0xffffffffffffffff, 0xe) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x9c2342, 0x0) sendfile$auto(r1, r1, 0x0, 0x4000000a1f) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2b, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x64c8, 0x1e2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x502, 0x0) ioctl$auto_FS_IOC_FIEMAP(r2, 0xc020660b, 0x9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) getrandom$auto(0x0, 0x6000000, 0x3) 11.446760116s ago: executing program 0 (id=2051): socket(0x11, 0x80003, 0x300) r0 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) pread64$auto(r0, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x10, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1842, 0x0) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/set_event\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/192, 0xc0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x10000, 0x2000008000, 0xeb1, r1, 0x8000) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) getpid() openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x0, 0x0) 11.12132944s ago: executing program 9 (id=2052): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) setsockopt$auto(0x400000000000003, 0x29, 0x22, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x90000, 0x0) socket(0x1a, 0x5, 0xfffffffd) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x80801, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000140), 0x7111}, 0x8) r2 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) 10.811925183s ago: executing program 9 (id=2053): socket(0x1d, 0x1, 0x7fff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x3fdafc9, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) 1.620304246s ago: executing program 41 (id=2026): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000a00)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)='1\x00\x00', 0x3) 1.602841513s ago: executing program 9 (id=2055): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x10001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1401, 0x8], {0x9, 0x1, 0x6, 0x0, 0x420, 0x1001, 0x3fdc, 0x1, 0x5}, {0x2, 0x140, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0x3}}) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) semctl$auto(0x7, 0x2, 0x13, 0x1) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x560a, 0x7) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50000000aa1895bb80d43d38e57c17489f0c7e0197c54a08753a35b29f185a29bda40aec99d3ce6e794850a47e04e281852beedbafda35402f902da2c3e10c0084e536759b8c715c39facf6ed5fdd16eedc6a906e2496dd2167580870b900f6c3ffdcb0782f0ad2dbf690171a279168050b065e261501c2c0c08b1efa3e7e3533d6698b4e041ab872ef048e2fad0f2690700000000000000952963acb8f8777a75222863cf600000000000000000000000000000a1896f25642ae152d530de1b7e69c946eae2fc8ce6e0fee46b23dd354e5b6e61515d8fa46a390701e7b82e818d526fce06edab42ebba8b94dbcec867dd3960a584bab1c950df69fdb9f30213d6ba3584cef0280c03ed381278604b88940792835e590df553faf43da761c1cefc7054a112148c", @ANYRES16=r1, @ANYBLOB="010025bd7000f7dbdf250100003f0600020001000000050007005800000008000c000800000008000a0008000000080011000b0000001400200000000000000000000000ffffffffffff"], 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(r3, 0x5, &(0x7f0000000440)={@_si_pad}, 0x2) socket(0x10, 0x3, 0x4) pwrite64$auto(0xc8, &(0x7f0000000680)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe41\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0x96, 0xc421) r4 = openat$auto_userio_fops_userio(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) fcntl$auto_F_DUPFD_QUERY(r4, 0x403, r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SEND_BEACONS(r5, &(0x7f0000002640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002600)={&(0x7f0000000040)={0xec4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x9791}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x800000000000000}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x21}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xfffffffeffffffff}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xc7}, @NL802154_ATTR_CCA_MODE={0x8}, @NL802154_ATTR_SUPPORTED_COMMANDS={0xe6d, 0x19, 0x0, 0x1, [@generic="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"]}]}, 0xec4}, 0x1, 0x0, 0x0, 0x20000880}, 0x54) close_range$auto(0x2, 0x8, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x20480, 0x0) io_uring_setup$auto(0x3, 0x0) r6 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002240)='/dev/cec26\x00', 0x1a9602, 0x0) ioctl$auto_CEC_DQEVENT(r6, 0xc0506107, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.592206663s ago: executing program 3 (id=2062): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x8de, 0xdf, 0x591b, 0x2, 0xb) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = socketpair$auto(0x1, 0x800, 0x0, &(0x7f00000001c0)) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) r5 = getsid$auto(0x0) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="88020000", @ANYRES16=0x0, @ANYBLOB="000428bd7000ffdbdf2509000000710203807e533d459feda9c0df80f5126ea226fa0e7147087405ba14872fa6178b66efb1e55178a3575cf13219874d69cd7792b51e0944df72342b756970aa9a72cc87afb8d745e0ec4882989f62812fc565100800f900", @ANYRES32=r4, @ANYBLOB="ef0da858ea9571dce630c439664c97fd0b113cb3f7ef65805d90ddb61256aeeb0733a8e2663a88fa5ad345f7acd5333ee1cfe9d4ad78bf747a0663df6f05543ffcce7c8b3f7fd7d7a7e00eeb7dbe405b5952ed4d076835b8a096d0ef493b6e77f4b350453807e24846696a12e321a785248a06ea423c87d567a62b4636da9033dcacf325f5d3bd3eb83bbef1aeee40c00eb029ff36e49fd4ea1008006e00", @ANYRES32=r0, @ANYBLOB="0b008200275c272a282800006c000d8008001500", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00'], 0x288}, 0x1, 0x0, 0x0, 0x8084}, 0x4000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) ioctl$auto(0xffffffffffffffff, 0x8983, 0x4) write$auto(r2, 0x0, 0x100000a3d9) select$auto(0x9, 0x0, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) kcmp$auto(0x1, 0x1, 0x0, r6, r6) openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0xb02, 0x0) write$auto(0x3, 0x0, 0xfffffdef) 1.591521074s ago: executing program 0 (id=2056): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_NEW_KEY(r1, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r1, @ANYRES16=r0, @ANYBLOB="010029bd7000fddbdf250b00000008000300", @ANYRES32=r0, @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x890) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x40000002c55, 0x0) r3 = socket(0xa, 0x801, 0x84) getsockopt$auto(r3, 0x84, 0x7f, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0xe8202, 0x0) sendfile$auto(r4, r4, 0x0, 0xcd) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab/kmalloc-64/objects\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000008c0)=""/61, 0x3d) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) memfd_create$auto(0x0, 0xe) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd10\x00', 0x1206c2, 0x0) write$auto(r7, &(0x7f0000000000)='//\xf2\x00', 0x80000000) ioctl$auto_BLKRRPART(r6, 0x125f, 0x0) unshare$auto(0x40000080) socketpair$auto(0x1, 0x4, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r8, 0x5425, 0x0) 1.118553524s ago: executing program 9 (id=2057): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1000, 0xffffffff, 0xffeffffe, 0x0) inotify_init1$auto(0x3000000000000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x15, 0x5, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cgroup\x00', 0x100382, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/irq.pressure\x00', 0x101102, 0x0) mmap$auto(0x0, 0x180000, 0xdf, 0x9b72, 0x4, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf) 646.23598ms ago: executing program 3 (id=2058): socket(0x1d, 0x1, 0x7fff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x3fdafc9, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) 634.76992ms ago: executing program 9 (id=2066): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1000, 0xffffffff, 0xffeffffe, 0x0) inotify_init1$auto(0x3000000000000) mmap$auto(0x0, 0x180000, 0xdf, 0x9b72, 0x4, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf) 466.041089ms ago: executing program 0 (id=2059): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x3, 0x9, 0x10001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x8], {0x9, 0x1, 0x6, 0x0, 0x420, 0x1001, 0x3fdc, 0x3, 0x5}, {0x2, 0x140, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0x3}}) close_range$auto(0x2, 0x8, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x20200, 0x0) ioctl$auto(0x3, 0x541b, 0x38) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) semctl$auto(0x7, 0x2, 0x13, 0x1) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x560a, 0x7) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010025bd7000f7dbdf250100003f0600020001000000050007005800000008000c000800000008000a0008000000080011000b0000001400200000000000000000000000ffffffffffff"], 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(r3, 0x5, &(0x7f0000000440)={@_si_pad}, 0x2) socket(0x10, 0x3, 0x4) pwrite64$auto(0xc8, &(0x7f0000000680)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe41\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0x96, 0xc421) r4 = openat$auto_userio_fops_userio(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) fcntl$auto_F_DUPFD_QUERY(r4, 0x403, r4) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x3, 0x0) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002240)='/dev/cec26\x00', 0x1a9602, 0x0) ioctl$auto_CEC_DQEVENT(r5, 0xc0506107, 0x0) mount$auto(&(0x7f0000000040)='geneve0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='\x00', 0xff1, &(0x7f00000002c0)="47239e26ac5c574e43c77feca97ffbf611f4bed7e42438c4659e9bf5d6c2da019c8fdfb4f92e6279aae8932eb5ff9c2590358566741ed54ea8f884c3a25d75b75981487f6d56faa73477ec6497fd2a1f380a99a26a6c06e8a0b39792f61c592f615fe4bd73bf3d9c5b801db8700fb8a2ccac549f970cc25670f24afcb3ddcb716ac78d723a47f642d770007ea99cac4fcbc9a84767a1dd73a0d82999a246174d2c35cdb628a1ac9e645bf79145ab") ioctl$auto_CEC_DQEVENT(r5, 0xc0506107, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x161200, 0x0) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x80001, 0x0) 272.742866ms ago: executing program 9 (id=2060): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x800, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01ffffff7f00ffdbdf250200000008000100fcffffff08000100ffff0000"], 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) r2 = openat$auto_fops_ulong_ro_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy18/netdev:wlan1/stations/08:02:11:00:00:00/rx_fragments\x00', 0x480800, 0x0) write$auto_fops_ulong_ro_(r2, &(0x7f0000000340), 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0x8, 0x1, 0x80000001, 0x4, 0x15f4da0e, 0x3, 0xd2a, 0xc, 0x8, 0x5, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x26, 0xffffffffffffffff, 0xffff) socket(0xa, 0x2, 0x3a) mmap$auto(0x1f00, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0) ioctl$auto_PROCMAP_QUERY(r3, 0xc0686611, &(0x7f0000000080)={0x67, 0x0, 0x7fff, 0x5, 0x80000000007, 0x1, 0x80000001, 0xff, 0x5, 0x4, 0xfbfffffe, 0x5, 0x7fb, 0x7, 0x9}) 0s ago: executing program 0 (id=2061): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) kernel console output (not intermixed with test programs): oth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 385.298155][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 385.305675][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 385.313818][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 385.321915][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 385.455977][T13157] chnl_net:caif_netlink_parms(): no params data found [ 385.515119][T13157] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.522555][T13157] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.530906][T13157] bridge_slave_0: entered allmulticast mode [ 385.537604][T13157] bridge_slave_0: entered promiscuous mode [ 385.545824][T13157] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.566933][T13157] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.584654][T13157] bridge_slave_1: entered allmulticast mode [ 385.600729][T13157] bridge_slave_1: entered promiscuous mode [ 385.642303][T13157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.654094][T13157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.677144][T13157] team0: Port device team_slave_0 added [ 385.686846][T13157] team0: Port device team_slave_1 added [ 385.703967][T13157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.711339][T13157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.737853][T13157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.749566][T13157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.756658][T13157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.783020][T13157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.857621][T13157] hsr_slave_0: entered promiscuous mode [ 385.867362][T13157] hsr_slave_1: entered promiscuous mode [ 385.873705][T13157] debugfs: 'hsr0' already exists in 'hsr' [ 385.880528][T13157] Cannot create hsr debugfs directory [ 386.077402][T13157] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 386.094673][T13157] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 386.105047][T13157] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 386.124616][T13157] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 386.167349][T13157] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.174553][T13157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.181996][T13157] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.189088][T13157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.261907][T13157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.276710][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.287104][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.304614][T13157] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.316180][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.323339][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.345562][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.352722][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.499483][T13157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.699725][T13157] veth0_vlan: entered promiscuous mode [ 386.713604][T13157] veth1_vlan: entered promiscuous mode [ 386.742913][T13192] vivid-003: ================= START STATUS ================= [ 386.751056][T13192] vivid-003: Radio HW Seek Mode: Bounded [ 386.756724][T13192] vivid-003: Radio Programmable HW Seek: false [ 386.763625][T13192] vivid-003: RDS Rx I/O Mode: Block I/O [ 386.769187][T13192] vivid-003: Generate RBDS Instead of RDS: false [ 386.776699][T13192] vivid-003: RDS Reception: true [ 386.782622][T13192] vivid-003: RDS Program Type: 0 inactive [ 386.788449][T13192] vivid-003: RDS PS Name: inactive [ 386.794604][T13192] vivid-003: RDS Radio Text: inactive [ 386.802559][T13192] vivid-003: RDS Traffic Announcement: false inactive [ 386.810972][T13157] veth0_macvtap: entered promiscuous mode [ 386.821179][T13192] vivid-003: RDS Traffic Program: false inactive [ 386.828469][T13157] veth1_macvtap: entered promiscuous mode [ 386.832898][T13192] vivid-003: RDS Music: false inactive [ 386.843797][T13192] vivid-003: ================== END STATUS ================== [ 386.854033][T13157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.866576][T13157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.878866][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.887830][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.898734][ T1099] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.907909][ T1099] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.951262][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.960206][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 386.979783][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 386.988457][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.168015][T13207] FAULT_INJECTION: forcing a failure. [ 387.168015][T13207] name failslab, interval 1, probability 0, space 0, times 0 [ 387.199406][T13207] CPU: 1 UID: 0 PID: 13207 Comm: syz.5.1687 Not tainted syzkaller #0 PREEMPT(full) [ 387.199427][T13207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 387.199436][T13207] Call Trace: [ 387.199442][T13207] [ 387.199448][T13207] dump_stack_lvl+0x16c/0x1f0 [ 387.199470][T13207] should_fail_ex+0x512/0x640 [ 387.199491][T13207] should_failslab+0xc2/0x120 [ 387.199510][T13207] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 387.199529][T13207] ? __alloc_skb+0x2b2/0x380 [ 387.199547][T13207] __alloc_skb+0x2b2/0x380 [ 387.199562][T13207] ? __pfx___alloc_skb+0x10/0x10 [ 387.199578][T13207] ? rcu_is_watching+0x12/0xc0 [ 387.199594][T13207] __ip6_append_data+0x2b74/0x4750 [ 387.199613][T13207] ? __pfx_raw6_getfrag+0x10/0x10 [ 387.199634][T13207] ? rcu_is_watching+0x12/0xc0 [ 387.199648][T13207] ? lock_release+0x201/0x2f0 [ 387.199666][T13207] ? __pfx___ip6_append_data+0x10/0x10 [ 387.199681][T13207] ? __pfx_ip6_mtu+0x10/0x10 [ 387.199693][T13207] ? ip6_setup_cork+0xc51/0x1530 [ 387.199707][T13207] ip6_append_data+0x1bd/0x4c0 [ 387.199722][T13207] ? __pfx_raw6_getfrag+0x10/0x10 [ 387.199743][T13207] rawv6_sendmsg+0x163d/0x4820 [ 387.199757][T13207] ? aa_label_sk_perm+0x195/0x600 [ 387.199774][T13207] ? up_write+0x1b2/0x520 [ 387.199793][T13207] ? aa_profile_af_perm+0x310/0x3a0 [ 387.199817][T13207] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 387.199838][T13207] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 387.199868][T13207] ? rcu_is_watching+0x12/0xc0 [ 387.199903][T13207] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 387.199927][T13207] ? inet_sendmsg+0x11c/0x140 [ 387.199949][T13207] inet_sendmsg+0x11c/0x140 [ 387.199970][T13207] ____sys_sendmsg+0x973/0xc70 [ 387.200003][T13207] ? copy_msghdr_from_user+0x10a/0x160 [ 387.200031][T13207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.200053][T13207] ? __pfx__kstrtoull+0x10/0x10 [ 387.200070][T13207] ? rcu_is_watching+0x12/0xc0 [ 387.200084][T13207] ___sys_sendmsg+0x134/0x1d0 [ 387.200101][T13207] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.200121][T13207] ? rcu_is_watching+0x12/0xc0 [ 387.200140][T13207] __sys_sendmmsg+0x200/0x420 [ 387.200158][T13207] ? __pfx___sys_sendmmsg+0x10/0x10 [ 387.200174][T13207] ? lock_release+0x201/0x2f0 [ 387.200193][T13207] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 387.200215][T13207] ? fput+0x9b/0xd0 [ 387.200233][T13207] ? ksys_write+0x1ac/0x250 [ 387.200247][T13207] ? __pfx_ksys_write+0x10/0x10 [ 387.200264][T13207] __x64_sys_sendmmsg+0x9c/0x100 [ 387.200287][T13207] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 387.200309][T13207] do_syscall_64+0xcd/0x490 [ 387.200327][T13207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.200341][T13207] RIP: 0033:0x7fe4ec38ebe9 [ 387.200353][T13207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.200367][T13207] RSP: 002b:00007fe4ed2bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 387.200381][T13207] RAX: ffffffffffffffda RBX: 00007fe4ec5b6090 RCX: 00007fe4ec38ebe9 [ 387.200391][T13207] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 387.200400][T13207] RBP: 00007fe4ed2bd090 R08: 0000000000000000 R09: 0000000000000000 [ 387.200408][T13207] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.200417][T13207] R13: 00007fe4ec5b6128 R14: 00007fe4ec5b6090 R15: 00007ffca2d05988 [ 387.200430][T13207] [ 387.534339][ T51] Bluetooth: hci5: command tx timeout [ 387.632182][T13207] vivid-003: ================= START STATUS ================= [ 387.632198][T13207] vivid-003: Radio HW Seek Mode: Bounded [ 387.632215][T13207] vivid-003: Radio Programmable HW Seek: false [ 387.632229][T13207] vivid-003: RDS Rx I/O Mode: Block I/O [ 387.632242][T13207] vivid-003: Generate RBDS Instead of RDS: false [ 387.632255][T13207] vivid-003: RDS Reception: true [ 387.632268][T13207] vivid-003: RDS Program Type: 0 inactive [ 387.632284][T13207] vivid-003: RDS PS Name: inactive [ 387.632299][T13207] vivid-003: RDS Radio Text: inactive [ 387.632315][T13207] vivid-003: RDS Traffic Announcement: false inactive [ 387.632330][T13207] vivid-003: RDS Traffic Program: false inactive [ 387.632346][T13207] vivid-003: RDS Music: false inactive [ 387.632361][T13207] vivid-003: ================== END STATUS ================== [ 387.892108][T13215] vivid-003: ================= START STATUS ================= [ 387.899787][T13215] vivid-003: Radio HW Seek Mode: Bounded [ 387.907394][T13215] vivid-003: Radio Programmable HW Seek: false [ 387.913830][T13215] vivid-003: RDS Rx I/O Mode: Block I/O [ 387.919657][T13215] vivid-003: Generate RBDS Instead of RDS: false [ 387.926383][T13215] vivid-003: RDS Reception: true [ 387.931685][T13215] vivid-003: RDS Program Type: 0 inactive [ 387.937460][T13215] vivid-003: RDS PS Name: inactive [ 387.943019][T13215] vivid-003: RDS Radio Text: inactive [ 387.948672][T13215] vivid-003: RDS Traffic Announcement: false inactive [ 387.955776][T13215] vivid-003: RDS Traffic Program: false inactive [ 387.969615][T13215] vivid-003: RDS Music: false inactive [ 387.977355][T13215] vivid-003: ================== END STATUS ================== [ 389.580003][ T51] Bluetooth: hci5: command tx timeout [ 389.833071][T13253] FAULT_INJECTION: forcing a failure. [ 389.833071][T13253] name failslab, interval 1, probability 0, space 0, times 0 [ 389.847442][T13253] CPU: 0 UID: 0 PID: 13253 Comm: syz.2.1699 Not tainted syzkaller #0 PREEMPT(full) [ 389.847464][T13253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 389.847473][T13253] Call Trace: [ 389.847478][T13253] [ 389.847484][T13253] dump_stack_lvl+0x16c/0x1f0 [ 389.847505][T13253] should_fail_ex+0x512/0x640 [ 389.847526][T13253] should_failslab+0xc2/0x120 [ 389.847544][T13253] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 389.847565][T13253] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 389.847585][T13253] ? __d_alloc+0x32/0xae0 [ 389.847601][T13253] ? lock_release+0x201/0x2f0 [ 389.847619][T13253] __d_alloc+0x32/0xae0 [ 389.847634][T13253] ? _raw_spin_unlock+0x28/0x50 [ 389.847649][T13253] d_make_root+0x3e/0x90 [ 389.847665][T13253] simple_fill_super+0x278/0x720 [ 389.847682][T13253] ? __pfx_nfsd_fill_super+0x10/0x10 [ 389.847698][T13253] nfsd_fill_super+0x90/0x530 [ 389.847713][T13253] ? __pfx_set_anon_super_fc+0x10/0x10 [ 389.847727][T13253] ? __pfx_nfsd_fill_super+0x10/0x10 [ 389.847741][T13253] get_tree_keyed+0x10b/0x1d0 [ 389.847756][T13253] vfs_get_tree+0x8b/0x340 [ 389.847769][T13253] path_mount+0x1513/0x2000 [ 389.847787][T13253] ? __pfx_path_mount+0x10/0x10 [ 389.847803][T13253] ? kmem_cache_free+0x2d1/0x4d0 [ 389.847817][T13253] ? putname+0x154/0x1a0 [ 389.847836][T13253] ? putname+0x154/0x1a0 [ 389.847859][T13253] ? __x64_sys_mount+0x28d/0x310 [ 389.847875][T13253] __x64_sys_mount+0x28d/0x310 [ 389.847891][T13253] ? __pfx___x64_sys_mount+0x10/0x10 [ 389.847910][T13253] do_syscall_64+0xcd/0x490 [ 389.847929][T13253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.847943][T13253] RIP: 0033:0x7f1a00f8ebe9 [ 389.847955][T13253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.847969][T13253] RSP: 002b:00007f1a01db7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 389.847983][T13253] RAX: ffffffffffffffda RBX: 00007f1a011b5fa0 RCX: 00007f1a00f8ebe9 [ 389.847993][T13253] RDX: 0000200000000100 RSI: 00002000000000c0 RDI: 0000000000000000 [ 389.848002][T13253] RBP: 00007f1a01db7090 R08: 0000000000000000 R09: 0000000000000000 [ 389.848010][T13253] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 389.848018][T13253] R13: 00007f1a011b6038 R14: 00007f1a011b5fa0 R15: 00007ffc801903b8 [ 389.848031][T13253] [ 391.660016][ T51] Bluetooth: hci5: command tx timeout [ 393.252321][ T5865] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 393.259590][ T5865] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 393.267172][ T5865] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 393.274907][ T5865] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 393.282789][ T5865] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 393.379628][T13256] chnl_net:caif_netlink_parms(): no params data found [ 393.420031][T13256] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.427162][T13256] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.434679][T13256] bridge_slave_0: entered allmulticast mode [ 393.442037][T13256] bridge_slave_0: entered promiscuous mode [ 393.449066][T13256] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.456335][T13256] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.463581][T13256] bridge_slave_1: entered allmulticast mode [ 393.470294][T13256] bridge_slave_1: entered promiscuous mode [ 393.487969][T13256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.500625][T13256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.521422][T13256] team0: Port device team_slave_0 added [ 393.528386][T13256] team0: Port device team_slave_1 added [ 393.545073][T13256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.552650][T13256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.579349][T13256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.591613][T13256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.598569][T13256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.625281][T13256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.653806][T13256] hsr_slave_0: entered promiscuous mode [ 393.659930][T13256] hsr_slave_1: entered promiscuous mode [ 393.665934][T13256] debugfs: 'hsr0' already exists in 'hsr' [ 393.671920][T13256] Cannot create hsr debugfs directory [ 393.739968][ T51] Bluetooth: hci5: command tx timeout [ 393.742593][T13256] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 393.755470][T13256] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 393.764442][T13256] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 393.774338][T13256] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 393.794957][T13256] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.802079][T13256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.809524][T13256] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.816657][T13256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.853137][T13256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.866199][ T1340] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.874217][ T1340] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.886518][T13256] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.898326][ T1340] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.905481][ T1340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.917319][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.924565][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.042567][T13256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.191147][T13256] veth0_vlan: entered promiscuous mode [ 394.209701][T13256] veth1_vlan: entered promiscuous mode [ 394.243545][T13256] veth0_macvtap: entered promiscuous mode [ 394.252924][T13256] veth1_macvtap: entered promiscuous mode [ 394.271771][T13256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.284484][T13256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 394.295511][ T9956] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.304489][ T9956] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.316195][ T9956] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.326943][ T9956] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.367161][ T9956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.379255][ T9956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.402861][ T9956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.411052][ T9956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.456815][T13284] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 395.341416][ T51] Bluetooth: hci6: command tx timeout [ 395.673881][T13293] deleting an unspecified loop device is not supported. [ 397.420037][ T51] Bluetooth: hci6: command tx timeout [ 399.500269][ T51] Bluetooth: hci6: command tx timeout [ 399.985534][ T5865] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 399.992942][ T5865] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 400.001049][ T5865] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 400.008983][ T5865] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 400.016771][ T5865] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 400.111885][T13328] chnl_net:caif_netlink_parms(): no params data found [ 400.152417][T13328] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.160649][T13328] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.168037][T13328] bridge_slave_0: entered allmulticast mode [ 400.175883][T13328] bridge_slave_0: entered promiscuous mode [ 400.183162][T13328] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.191156][T13328] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.198329][T13328] bridge_slave_1: entered allmulticast mode [ 400.205079][T13328] bridge_slave_1: entered promiscuous mode [ 400.223858][T13328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.235111][T13328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.258693][T13328] team0: Port device team_slave_0 added [ 400.266049][T13328] team0: Port device team_slave_1 added [ 400.284393][T13328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.291467][T13328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.317908][T13328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.329678][T13328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.337181][T13328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.363959][T13328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.394547][T13328] hsr_slave_0: entered promiscuous mode [ 400.400810][T13328] hsr_slave_1: entered promiscuous mode [ 400.406711][T13328] debugfs: 'hsr0' already exists in 'hsr' [ 400.412493][T13328] Cannot create hsr debugfs directory [ 400.485838][T13328] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 400.494655][T13328] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 400.503654][T13328] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 400.513105][T13328] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 400.534523][T13328] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.541816][T13328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.549112][T13328] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.556423][T13328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.595844][T13328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.609030][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.617078][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.629149][T13328] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.643518][ T9956] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.650653][ T9956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.662337][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.669470][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.784507][T13328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.924573][T13328] veth0_vlan: entered promiscuous mode [ 400.934716][T13328] veth1_vlan: entered promiscuous mode [ 400.955287][T13328] veth0_macvtap: entered promiscuous mode [ 400.963656][T13328] veth1_macvtap: entered promiscuous mode [ 400.979132][T13328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.993028][T13328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.004798][ T1340] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.014207][ T1340] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.024018][ T1340] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.035478][ T1340] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.075844][ T9956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.092941][ T9956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.112540][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.120648][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.161219][T13353] FAULT_INJECTION: forcing a failure. [ 401.161219][T13353] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 401.174930][T13353] CPU: 0 UID: 0 PID: 13353 Comm: syz.7.1713 Not tainted syzkaller #0 PREEMPT(full) [ 401.174964][T13353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 401.174980][T13353] Call Trace: [ 401.174988][T13353] [ 401.174997][T13353] dump_stack_lvl+0x16c/0x1f0 [ 401.175031][T13353] should_fail_ex+0x512/0x640 [ 401.175069][T13353] should_fail_alloc_page+0xe7/0x130 [ 401.175092][T13353] prepare_alloc_pages+0x3c2/0x610 [ 401.175113][T13353] ? rcu_is_watching+0x12/0xc0 [ 401.175128][T13353] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 401.175145][T13353] ? stack_depot_save_flags+0x29/0x9c0 [ 401.175164][T13353] ? kasan_save_stack+0x33/0x60 [ 401.175180][T13353] ? kasan_save_track+0x14/0x30 [ 401.175194][T13353] ? __kasan_slab_alloc+0x89/0x90 [ 401.175211][T13353] ? kasan_save_stack+0x42/0x60 [ 401.175226][T13353] ? kasan_save_stack+0x33/0x60 [ 401.175240][T13353] ? kasan_save_track+0x14/0x30 [ 401.175254][T13353] ? __kasan_slab_alloc+0x89/0x90 [ 401.175269][T13353] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 401.175285][T13353] ? __anon_vma_prepare+0x344/0x5e0 [ 401.175299][T13353] ? __vmf_anon_prepare+0x11c/0x240 [ 401.175319][T13353] ? do_pte_missing+0x10bd/0x3ba0 [ 401.175331][T13353] ? __handle_mm_fault+0x152a/0x2a50 [ 401.175344][T13353] ? handle_mm_fault+0x589/0xd10 [ 401.175357][T13353] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 401.175373][T13353] ? vm_mmap_pgoff+0x37f/0x470 [ 401.175391][T13353] ? __x64_sys_mmap+0x125/0x190 [ 401.175412][T13353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.175426][T13353] ? rcu_is_watching+0x12/0xc0 [ 401.175440][T13353] ? local_lock_release+0x99/0x140 [ 401.175458][T13353] ? rcu_is_watching+0x12/0xc0 [ 401.175471][T13353] ? rcu_is_watching+0x12/0xc0 [ 401.175484][T13353] ? lock_acquire+0x2cd/0x350 [ 401.175501][T13353] ? rcu_is_watching+0x12/0xc0 [ 401.175520][T13353] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 401.175541][T13353] ? policy_nodemask+0xea/0x4e0 [ 401.175559][T13353] alloc_pages_mpol+0x1fb/0x550 [ 401.175576][T13353] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 401.175593][T13353] ? lock_release+0x201/0x2f0 [ 401.175611][T13353] folio_alloc_mpol_noprof+0x36/0x2f0 [ 401.175631][T13353] vma_alloc_folio_noprof+0xed/0x1e0 [ 401.175650][T13353] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 401.175670][T13353] ? rcu_is_watching+0x12/0xc0 [ 401.175685][T13353] do_pte_missing+0x2230/0x3ba0 [ 401.175700][T13353] __handle_mm_fault+0x152a/0x2a50 [ 401.175716][T13353] ? __pfx___handle_mm_fault+0x10/0x10 [ 401.175730][T13353] ? __pte_offset_map_lock+0x174/0x310 [ 401.175753][T13353] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 401.175777][T13353] handle_mm_fault+0x589/0xd10 [ 401.175792][T13353] __get_user_pages+0x551/0x34a0 [ 401.175814][T13353] ? __pfx___get_user_pages+0x10/0x10 [ 401.175834][T13353] ? __pfx___might_resched+0x10/0x10 [ 401.175848][T13353] ? cap_capable+0xb3/0x250 [ 401.175863][T13353] populate_vma_page_range+0x267/0x3f0 [ 401.175884][T13353] ? __pfx_populate_vma_page_range+0x10/0x10 [ 401.175904][T13353] ? __pfx_find_vma_intersection+0x10/0x10 [ 401.175923][T13353] ? do_mmap+0x69c/0x1210 [ 401.175942][T13353] __mm_populate+0x1d8/0x380 [ 401.175962][T13353] ? __pfx___mm_populate+0x10/0x10 [ 401.175983][T13353] ? up_write+0x1b2/0x520 [ 401.176002][T13353] vm_mmap_pgoff+0x37f/0x470 [ 401.176021][T13353] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 401.176039][T13353] ? __fget_files+0x20e/0x3c0 [ 401.176056][T13353] ksys_mmap_pgoff+0x7d/0x5c0 [ 401.176074][T13353] ? __pfx_ksys_write+0x10/0x10 [ 401.176091][T13353] __x64_sys_mmap+0x125/0x190 [ 401.176111][T13353] do_syscall_64+0xcd/0x490 [ 401.176129][T13353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.176142][T13353] RIP: 0033:0x7fe641b8ebe9 [ 401.176154][T13353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.176168][T13353] RSP: 002b:00007fe642a76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 401.176182][T13353] RAX: ffffffffffffffda RBX: 00007fe641db5fa0 RCX: 00007fe641b8ebe9 [ 401.176192][T13353] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 401.176200][T13353] RBP: 00007fe642a76090 R08: 0000000000000002 R09: 0000000000008000 [ 401.176209][T13353] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000002 [ 401.176218][T13353] R13: 00007fe641db6038 R14: 00007fe641db5fa0 R15: 00007ffd74524c28 [ 401.176232][T13353] [ 401.580109][ T51] Bluetooth: hci6: command tx timeout [ 401.901977][T13363] FAULT_INJECTION: forcing a failure. [ 401.901977][T13363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.916401][T13363] CPU: 0 UID: 0 PID: 13363 Comm: syz.7.1716 Not tainted syzkaller #0 PREEMPT(full) [ 401.916437][T13363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 401.916452][T13363] Call Trace: [ 401.916460][T13363] [ 401.916470][T13363] dump_stack_lvl+0x16c/0x1f0 [ 401.916504][T13363] should_fail_ex+0x512/0x640 [ 401.916547][T13363] strncpy_from_user+0x3b/0x2e0 [ 401.916577][T13363] getname_flags.part.0+0x8f/0x550 [ 401.916613][T13363] __x64_sys_rmdir+0xb0/0x110 [ 401.916647][T13363] do_syscall_64+0xcd/0x490 [ 401.916676][T13363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.916700][T13363] RIP: 0033:0x7fe641b8ebe9 [ 401.916720][T13363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.916742][T13363] RSP: 002b:00007fe642a76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 401.916766][T13363] RAX: ffffffffffffffda RBX: 00007fe641db5fa0 RCX: 00007fe641b8ebe9 [ 401.916784][T13363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 401.916799][T13363] RBP: 00007fe642a76090 R08: 0000000000000000 R09: 0000000000000000 [ 401.916813][T13363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.916828][T13363] R13: 00007fe641db6038 R14: 00007fe641db5fa0 R15: 00007ffd74524c28 [ 401.916856][T13363] [ 402.060727][ T51] Bluetooth: hci7: command tx timeout [ 404.150017][ T51] Bluetooth: hci7: command tx timeout [ 405.317057][ T5865] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 405.324406][ T5866] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 405.336083][ T5866] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 405.340072][ T5865] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 405.350515][ T5865] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 405.358022][ T5866] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 405.371229][ T5865] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 405.372344][ T5866] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 405.380764][ T5865] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 405.387500][ T5866] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 405.578251][T13367] chnl_net:caif_netlink_parms(): no params data found [ 405.595738][T13369] chnl_net:caif_netlink_parms(): no params data found [ 405.662971][T13367] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.670311][T13367] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.677503][T13367] bridge_slave_0: entered allmulticast mode [ 405.686472][T13367] bridge_slave_0: entered promiscuous mode [ 405.694925][T13367] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.702536][T13367] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.711001][T13367] bridge_slave_1: entered allmulticast mode [ 405.718012][T13367] bridge_slave_1: entered promiscuous mode [ 405.750440][T13369] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.758018][T13369] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.765562][T13369] bridge_slave_0: entered allmulticast mode [ 405.772205][T13369] bridge_slave_0: entered promiscuous mode [ 405.781324][T13367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.790946][T13369] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.798435][T13369] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.806140][T13369] bridge_slave_1: entered allmulticast mode [ 405.814031][T13369] bridge_slave_1: entered promiscuous mode [ 405.830404][T13367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.853809][T13369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.870747][T13369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.890333][T13367] team0: Port device team_slave_0 added [ 405.904904][T13367] team0: Port device team_slave_1 added [ 405.914768][T13369] team0: Port device team_slave_0 added [ 405.929443][T13369] team0: Port device team_slave_1 added [ 405.948425][T13367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.955881][T13367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.982427][T13367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.000779][T13367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.008091][T13367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.035165][T13367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.050838][T13369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.057808][T13369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.084331][T13369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.097703][T13369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.105353][T13369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.132447][T13369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.173782][T13367] hsr_slave_0: entered promiscuous mode [ 406.180390][T13367] hsr_slave_1: entered promiscuous mode [ 406.186420][T13367] debugfs: 'hsr0' already exists in 'hsr' [ 406.192540][T13367] Cannot create hsr debugfs directory [ 406.208610][T13369] hsr_slave_0: entered promiscuous mode [ 406.215729][T13369] hsr_slave_1: entered promiscuous mode [ 406.220374][ T5866] Bluetooth: hci7: command tx timeout [ 406.223624][T13369] debugfs: 'hsr0' already exists in 'hsr' [ 406.232600][T13369] Cannot create hsr debugfs directory [ 406.378550][T13367] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 406.387834][T13367] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 406.406144][T13367] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 406.416543][T13367] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 406.440495][T13369] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 406.450832][T13369] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 406.463405][T13369] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 406.473693][T13369] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 406.492799][T13367] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.499957][T13367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.507366][T13367] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.514519][T13367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.535610][T13369] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.542752][T13369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.550173][T13369] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.557290][T13369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.568205][ T9956] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.576408][ T9956] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.584532][ T9956] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.592821][ T9956] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.653299][T13367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.677556][T13369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.687888][T13367] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.704186][ T9951] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.711388][ T9951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.727689][ T9954] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.734953][ T9954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.744844][T13369] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.758889][ T9954] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.766077][ T9954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.783720][ T9954] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.790873][ T9954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.004865][T13367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.013642][T13369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.253345][T13369] veth0_vlan: entered promiscuous mode [ 407.263735][T13367] veth0_vlan: entered promiscuous mode [ 407.276548][T13369] veth1_vlan: entered promiscuous mode [ 407.284494][T13367] veth1_vlan: entered promiscuous mode [ 407.314736][T13369] veth0_macvtap: entered promiscuous mode [ 407.323855][T13367] veth0_macvtap: entered promiscuous mode [ 407.333993][T13369] veth1_macvtap: entered promiscuous mode [ 407.346144][T13367] veth1_macvtap: entered promiscuous mode [ 407.362895][T13369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.374238][T13369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.391402][ T9954] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.405353][T13367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.413079][ T9954] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.422039][ T5866] Bluetooth: hci9: command tx timeout [ 407.422073][ T5866] Bluetooth: hci8: command tx timeout [ 407.433453][ T9954] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.450673][ T9954] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.464985][T13367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.480317][ T1156] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.490376][ T1156] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.499297][ T1340] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.508778][ T1340] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.557028][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.567938][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.598541][ T9956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.606818][ T9956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.646995][ T9954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.670669][ T9954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.711167][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.719124][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.927979][T13426] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 408.303392][ T5865] Bluetooth: hci7: command tx timeout [ 409.002028][T13438] vivid-003: ================= START STATUS ================= [ 409.011164][T13438] vivid-003: Radio HW Seek Mode: Bounded [ 409.016885][T13438] vivid-003: Radio Programmable HW Seek: false [ 409.048284][T13438] vivid-003: RDS Rx I/O Mode: Block I/O [ 409.058591][T13438] vivid-003: Generate RBDS Instead of RDS: false [ 409.118845][T13438] vivid-003: RDS Reception: true [ 409.146844][T13438] vivid-003: RDS Program Type: 0 inactive [ 409.153304][T13438] vivid-003: RDS PS Name: inactive [ 409.161099][T13438] vivid-003: RDS Radio Text: inactive [ 409.167913][T13438] vivid-003: RDS Traffic Announcement: false inactive [ 409.175021][T13438] vivid-003: RDS Traffic Program: false inactive [ 409.185455][T13438] vivid-003: RDS Music: false inactive [ 409.192303][T13438] vivid-003: ================== END STATUS ================== [ 409.499978][ T5865] Bluetooth: hci8: command tx timeout [ 409.505473][ T5865] Bluetooth: hci9: command tx timeout [ 409.725660][T13448] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 410.714077][T13460] vhci_hcd: invalid port number 23 [ 410.719340][T13460] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 411.589955][ T5866] Bluetooth: hci8: command tx timeout [ 411.589951][ T5865] Bluetooth: hci9: command tx timeout [ 413.593000][ T5865] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 413.620103][ T5865] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 413.627717][ T5865] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 413.640854][ T5865] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 413.649769][ T5865] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 413.659973][ T5865] Bluetooth: hci9: command tx timeout [ 413.666838][ T5868] Bluetooth: hci8: command tx timeout [ 413.915325][T13506] vivid-003: ================= START STATUS ================= [ 413.923244][T13506] vivid-003: Radio HW Seek Mode: Bounded [ 413.932063][T13506] vivid-003: Radio Programmable HW Seek: false [ 413.941081][T13506] vivid-003: RDS Rx I/O Mode: Block I/O [ 413.954176][T13506] vivid-003: Generate RBDS Instead of RDS: false [ 413.961612][T13506] vivid-003: RDS Reception: true [ 413.968372][T13506] vivid-003: RDS Program Type: 0 inactive [ 413.975576][T13509] chnl_net:caif_netlink_parms(): no params data found [ 413.980941][T13506] vivid-003: RDS PS Name: inactive [ 413.996774][T13506] vivid-003: RDS Radio Text: inactive [ 414.004950][T13506] vivid-003: RDS Traffic Announcement: false inactive [ 414.014888][T13506] vivid-003: RDS Traffic Program: false inactive [ 414.023455][T13506] vivid-003: RDS Music: false inactive [ 414.032131][T13506] vivid-003: ================== END STATUS ================== [ 414.134026][T13509] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.141185][T13509] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.148394][T13509] bridge_slave_0: entered allmulticast mode [ 414.155324][T13509] bridge_slave_0: entered promiscuous mode [ 414.162846][T13509] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.170433][T13509] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.177855][T13509] bridge_slave_1: entered allmulticast mode [ 414.186368][T13509] bridge_slave_1: entered promiscuous mode [ 414.231617][T13509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.248021][T13509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.328989][T13509] team0: Port device team_slave_0 added [ 414.353309][T13509] team0: Port device team_slave_1 added [ 414.429058][T13509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.447955][T13509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.480825][T13509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.494610][T13509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.502294][T13509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.542646][T13509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.647991][T13509] hsr_slave_0: entered promiscuous mode [ 414.657895][T13509] hsr_slave_1: entered promiscuous mode [ 414.707297][T13509] debugfs: 'hsr0' already exists in 'hsr' [ 414.719581][T13509] Cannot create hsr debugfs directory [ 414.817844][T13530] random: crng reseeded on system resumption [ 414.943750][T13509] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.133292][T13509] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.235918][T13509] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.324074][T13509] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.540636][T13509] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 415.556731][T13509] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 415.566744][T13509] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 415.578129][T13509] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 415.744743][ T5868] Bluetooth: hci10: command tx timeout [ 415.751265][T13509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.772343][T13509] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.788006][ T9951] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.795137][ T9951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.843794][ T9951] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.851427][ T9951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.918676][T13548] vivid-003: ================= START STATUS ================= [ 415.927515][T13548] vivid-003: Radio HW Seek Mode: Bounded [ 415.939191][T13548] vivid-003: Radio Programmable HW Seek: false [ 415.982120][T13548] vivid-003: RDS Rx I/O Mode: Block I/O [ 416.016818][T13548] vivid-003: Generate RBDS Instead of RDS: false [ 416.033507][T13548] vivid-003: RDS Reception: true [ 416.040262][T13548] vivid-003: RDS Program Type: 0 inactive [ 416.102670][T13548] vivid-003: RDS PS Name: inactive [ 416.143680][T13548] vivid-003: RDS Radio Text: inactive [ 416.338438][T13548] vivid-003: RDS Traffic Announcement: false inactive [ 416.373781][T13548] vivid-003: RDS Traffic Program: false inactive [ 416.384579][T13548] vivid-003: RDS Music: false inactive [ 416.391826][T13548] vivid-003: ================== END STATUS ================== [ 416.565952][T13509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.597393][T13509] veth0_vlan: entered promiscuous mode [ 416.607887][T13509] veth1_vlan: entered promiscuous mode [ 416.636916][T13509] veth0_macvtap: entered promiscuous mode [ 416.647575][T13509] veth1_macvtap: entered promiscuous mode [ 416.706319][T13509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.742097][T13509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.773117][ T9951] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.829419][ T9951] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.854362][ T9951] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.888522][ T9951] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.933993][T13565] zswap: compressor not available [ 416.986406][ T9956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.003023][ T9956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.062905][ T9956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.076637][ T9956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.567216][ T5866] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 417.575085][ T5866] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 417.600033][ T5866] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 417.620752][ T5866] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 417.628448][ T5866] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 417.826512][ T5866] Bluetooth: hci10: command tx timeout [ 417.855787][T13565] netlink: 330 bytes leftover after parsing attributes in process `syz.9.1745'. [ 417.886119][T13575] vivid-003: ================= START STATUS ================= [ 417.999945][T13575] vivid-003: Radio HW Seek Mode: Bounded [ 418.011182][T13579] chnl_net:caif_netlink_parms(): no params data found [ 418.018272][T13575] vivid-003: Radio Programmable HW Seek: false [ 418.040117][T13575] vivid-003: RDS Rx I/O Mode: Block I/O [ 418.045687][T13575] vivid-003: Generate RBDS Instead of RDS: false [ 418.093211][T13575] vivid-003: RDS Reception: true [ 418.099083][T13575] vivid-003: RDS Program Type: 0 inactive [ 418.105132][T13575] vivid-003: RDS PS Name: inactive [ 418.111977][T13575] vivid-003: RDS Radio Text: inactive [ 418.117481][T13575] vivid-003: RDS Traffic Announcement: false inactive [ 418.124464][T13575] vivid-003: RDS Traffic Program: false inactive [ 418.130968][T13575] vivid-003: RDS Music: false inactive [ 418.136452][T13575] vivid-003: ================== END STATUS ================== [ 418.282383][T13579] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.317328][T13579] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.337658][T13579] bridge_slave_0: entered allmulticast mode [ 418.370311][T13579] bridge_slave_0: entered promiscuous mode [ 418.615383][T13579] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.615443][T13579] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.615605][T13579] bridge_slave_1: entered allmulticast mode [ 418.616208][T13579] bridge_slave_1: entered promiscuous mode [ 418.664909][T13579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.671923][T13579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.736552][T13592] vivid-003: ================= START STATUS ================= [ 418.736568][T13592] vivid-003: Radio HW Seek Mode: Bounded [ 418.736585][T13592] vivid-003: Radio Programmable HW Seek: false [ 418.736600][T13592] vivid-003: RDS Rx I/O Mode: Block I/O [ 418.736614][T13592] vivid-003: Generate RBDS Instead of RDS: false [ 418.736628][T13592] vivid-003: RDS Reception: true [ 418.736642][T13592] vivid-003: RDS Program Type: 0 inactive [ 418.736659][T13592] vivid-003: RDS PS Name: inactive [ 418.736675][T13592] vivid-003: RDS Radio Text: inactive [ 418.736691][T13592] vivid-003: RDS Traffic Announcement: false inactive [ 418.736707][T13592] vivid-003: RDS Traffic Program: false inactive [ 418.736722][T13592] vivid-003: RDS Music: false inactive [ 418.736737][T13592] vivid-003: ================== END STATUS ================== [ 418.793272][T13579] team0: Port device team_slave_0 added [ 418.986525][T13579] team0: Port device team_slave_1 added [ 419.030858][T13579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.038116][T13579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.161214][T13579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.173521][T13579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.584308][T13579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.610931][T13579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.625408][T13603] FAULT_INJECTION: forcing a failure. [ 419.625408][T13603] name failslab, interval 1, probability 0, space 0, times 0 [ 419.660224][ T5866] Bluetooth: hci11: command tx timeout [ 419.709034][T13603] CPU: 0 UID: 0 PID: 13603 Comm: syz.0.1751 Not tainted syzkaller #0 PREEMPT(full) [ 419.709072][T13603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 419.709095][T13603] Call Trace: [ 419.709105][T13603] [ 419.709115][T13603] dump_stack_lvl+0x16c/0x1f0 [ 419.709152][T13603] should_fail_ex+0x512/0x640 [ 419.709189][T13603] should_failslab+0xc2/0x120 [ 419.709222][T13603] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 419.709251][T13603] ? lock_release+0x201/0x2f0 [ 419.709282][T13603] ? __proc_create+0x2ce/0x8e0 [ 419.709318][T13603] __proc_create+0x2ce/0x8e0 [ 419.709352][T13603] ? __pfx___proc_create+0x10/0x10 [ 419.709385][T13603] ? lock_release+0x201/0x2f0 [ 419.709418][T13603] ? _raw_write_unlock+0x28/0x50 [ 419.709447][T13603] ? proc_register+0x314/0x5f0 [ 419.709483][T13603] proc_create_reg+0x7d/0x180 [ 419.709520][T13603] proc_create_seq_private+0x8e/0x180 [ 419.709557][T13603] ? __pfx_proc_create_seq_private+0x10/0x10 [ 419.709592][T13603] ? __pfx_nl_fib_input+0x10/0x10 [ 419.709627][T13603] ? __pfx_ip_rt_do_proc_init+0x10/0x10 [ 419.709664][T13603] ip_rt_do_proc_init+0xac/0x1b0 [ 419.709699][T13603] ops_init+0x1df/0x5f0 [ 419.709736][T13603] setup_net+0x10f/0x380 [ 419.709765][T13603] ? lockdep_init_map_type+0x5c/0x280 [ 419.709800][T13603] ? __pfx_setup_net+0x10/0x10 [ 419.709830][T13603] ? debug_mutex_init+0x37/0x70 [ 419.709852][T13603] copy_net_ns+0x2a6/0x5f0 [ 419.709885][T13603] create_new_namespaces+0x3ea/0xa90 [ 419.709916][T13603] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 419.709944][T13603] ksys_unshare+0x45b/0xa40 [ 419.709977][T13603] ? __pfx_ksys_unshare+0x10/0x10 [ 419.710009][T13603] ? xfd_validate_state+0x61/0x180 [ 419.710048][T13603] __x64_sys_unshare+0x31/0x40 [ 419.710088][T13603] do_syscall_64+0xcd/0x490 [ 419.710120][T13603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.710143][T13603] RIP: 0033:0x7f92a398ebe9 [ 419.710164][T13603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.710189][T13603] RSP: 002b:00007f92a1bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 419.710214][T13603] RAX: ffffffffffffffda RBX: 00007f92a3bb5fa0 RCX: 00007f92a398ebe9 [ 419.710230][T13603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 419.710248][T13603] RBP: 00007f92a3a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 419.710265][T13603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.710281][T13603] R13: 00007f92a3bb6038 R14: 00007f92a3bb5fa0 R15: 00007ffd86a1f6e8 [ 419.710305][T13603] [ 419.983665][ T5866] Bluetooth: hci10: command tx timeout [ 420.048117][T13579] hsr_slave_0: entered promiscuous mode [ 420.059485][T13579] hsr_slave_1: entered promiscuous mode [ 420.068894][T13579] debugfs: 'hsr0' already exists in 'hsr' [ 420.075197][T13579] Cannot create hsr debugfs directory [ 420.247625][T13596] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 420.295624][T13579] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.357868][T13615] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1753'. [ 420.513906][T13579] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.603908][T13579] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.666742][T13579] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.787556][T13579] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 420.805532][T13579] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 420.818238][T13579] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 420.832003][T13579] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 421.116110][T13579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.176992][T13579] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.198399][ T1156] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.205621][ T1156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.275269][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.282464][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.779912][ T5866] Bluetooth: hci11: command tx timeout [ 422.060372][ T5866] Bluetooth: hci10: command tx timeout [ 422.065352][T13579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.207187][T13579] veth0_vlan: entered promiscuous mode [ 422.253320][T13579] veth1_vlan: entered promiscuous mode [ 422.287464][T13579] veth0_macvtap: entered promiscuous mode [ 422.297394][T13579] veth1_macvtap: entered promiscuous mode [ 422.316420][T13579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.363002][T13579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.386256][ T9956] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.419297][ T9956] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.473974][ T9956] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.501646][ T9956] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.631445][ T9951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.639275][ T9951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.736935][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.759570][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.820173][ T5866] Bluetooth: hci11: command tx timeout [ 424.038603][T13681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1763'. [ 425.214510][T13683] FAULT_INJECTION: forcing a failure. [ 425.214510][T13683] name failslab, interval 1, probability 0, space 0, times 0 [ 425.274821][T13683] CPU: 1 UID: 0 PID: 13683 Comm: syz.8.1764 Not tainted syzkaller #0 PREEMPT(full) [ 425.274858][T13683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.274868][T13683] Call Trace: [ 425.274874][T13683] [ 425.274881][T13683] dump_stack_lvl+0x16c/0x1f0 [ 425.274904][T13683] should_fail_ex+0x512/0x640 [ 425.274926][T13683] should_failslab+0xc2/0x120 [ 425.274946][T13683] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 425.274962][T13683] ? lock_release+0x201/0x2f0 [ 425.274979][T13683] ? __proc_create+0x2ce/0x8e0 [ 425.275000][T13683] __proc_create+0x2ce/0x8e0 [ 425.275019][T13683] ? __pfx___proc_create+0x10/0x10 [ 425.275037][T13683] ? lock_release+0x201/0x2f0 [ 425.275060][T13683] ? _raw_write_unlock+0x28/0x50 [ 425.275077][T13683] ? proc_register+0x314/0x5f0 [ 425.275098][T13683] proc_create_reg+0x7d/0x180 [ 425.275120][T13683] proc_create_seq_private+0x8e/0x180 [ 425.275142][T13683] ? __pfx_proc_create_seq_private+0x10/0x10 [ 425.275164][T13683] ? __pfx_nl_fib_input+0x10/0x10 [ 425.275186][T13683] ? __pfx_ip_rt_do_proc_init+0x10/0x10 [ 425.275207][T13683] ip_rt_do_proc_init+0xac/0x1b0 [ 425.275227][T13683] ops_init+0x1df/0x5f0 [ 425.275246][T13683] setup_net+0x10f/0x380 [ 425.275262][T13683] ? lockdep_init_map_type+0x5c/0x280 [ 425.275281][T13683] ? __pfx_setup_net+0x10/0x10 [ 425.275299][T13683] ? debug_mutex_init+0x37/0x70 [ 425.275312][T13683] copy_net_ns+0x2a6/0x5f0 [ 425.275332][T13683] create_new_namespaces+0x3ea/0xa90 [ 425.275353][T13683] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 425.275369][T13683] ksys_unshare+0x45b/0xa40 [ 425.275388][T13683] ? __pfx_ksys_unshare+0x10/0x10 [ 425.275406][T13683] ? xfd_validate_state+0x61/0x180 [ 425.275428][T13683] __x64_sys_unshare+0x31/0x40 [ 425.275446][T13683] do_syscall_64+0xcd/0x490 [ 425.275464][T13683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.275478][T13683] RIP: 0033:0x7faa6618ebe9 [ 425.275491][T13683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.275505][T13683] RSP: 002b:00007faa67024038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 425.275518][T13683] RAX: ffffffffffffffda RBX: 00007faa663b5fa0 RCX: 00007faa6618ebe9 [ 425.275528][T13683] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 425.275537][T13683] RBP: 00007faa66211e19 R08: 0000000000000000 R09: 0000000000000000 [ 425.275546][T13683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.275555][T13683] R13: 00007faa663b6038 R14: 00007faa663b5fa0 R15: 00007ffce53ae498 [ 425.275569][T13683] [ 425.904629][T13696] FAULT_INJECTION: forcing a failure. [ 425.904629][T13696] name failslab, interval 1, probability 0, space 0, times 0 [ 425.917420][T13696] CPU: 0 UID: 0 PID: 13696 Comm: syz.3.1767 Not tainted syzkaller #0 PREEMPT(full) [ 425.917455][T13696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 425.917471][T13696] Call Trace: [ 425.917480][T13696] [ 425.917490][T13696] dump_stack_lvl+0x16c/0x1f0 [ 425.917529][T13696] should_fail_ex+0x512/0x640 [ 425.917566][T13696] should_failslab+0xc2/0x120 [ 425.917600][T13696] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 425.917630][T13696] ? stack_depot_save_flags+0x29/0x9c0 [ 425.917663][T13696] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 425.917693][T13696] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 425.917723][T13696] idr_get_free+0x528/0xa30 [ 425.917757][T13696] idr_alloc_u32+0x190/0x2f0 [ 425.917786][T13696] ? __pfx_idr_alloc_u32+0x10/0x10 [ 425.917813][T13696] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 425.917846][T13696] ? __pfx___debug_object_init+0x10/0x10 [ 425.917876][T13696] idr_alloc+0xc0/0x130 [ 425.917902][T13696] ? __pfx_idr_alloc+0x10/0x10 [ 425.917929][T13696] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 425.917970][T13696] tipc_conn_alloc+0x337/0x590 [ 425.917997][T13696] tipc_topsrv_kern_subscr+0x11c/0x3c0 [ 425.918025][T13696] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 425.918055][T13696] ? lock_release+0x201/0x2f0 [ 425.918089][T13696] tipc_group_create+0x4ab/0x660 [ 425.918117][T13696] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 425.918156][T13696] tipc_setsockopt+0x7f0/0xdb0 [ 425.918190][T13696] ? __pfx_tipc_setsockopt+0x10/0x10 [ 425.918242][T13696] ? __pfx_tipc_setsockopt+0x10/0x10 [ 425.918277][T13696] do_sock_setsockopt+0xf3/0x1d0 [ 425.918318][T13696] __sys_setsockopt+0x120/0x1a0 [ 425.918349][T13696] __x64_sys_setsockopt+0xbd/0x160 [ 425.918379][T13696] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 425.918416][T13696] do_syscall_64+0xcd/0x490 [ 425.918448][T13696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.918475][T13696] RIP: 0033:0x7fa780f8ebe9 [ 425.918495][T13696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.918519][T13696] RSP: 002b:00007fa781def038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 425.918542][T13696] RAX: ffffffffffffffda RBX: 00007fa7811b5fa0 RCX: 00007fa780f8ebe9 [ 425.918556][T13696] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000007 [ 425.918568][T13696] RBP: 00007fa781011e19 R08: 0000000000000014 R09: 0000000000000000 [ 425.918577][T13696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.918586][T13696] R13: 00007fa7811b6038 R14: 00007fa7811b5fa0 R15: 00007ffd38f67188 [ 425.918599][T13696] [ 425.990992][ T5866] Bluetooth: hci11: command tx timeout [ 425.991997][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.188010][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.193998][ C0] hrtimer: interrupt took 274175775 ns [ 426.294045][ C0] vkms_vblank_simulate: vblank timer overrun [ 427.372665][T13711] nvme_fabrics: missing parameter 'transport=%s' [ 427.379015][T13711] nvme_fabrics: missing parameter 'nqn=%s' [ 427.513094][T13707] vivid-003: ================= START STATUS ================= [ 427.523839][T13707] vivid-003: Radio HW Seek Mode: Bounded [ 427.529523][T13707] vivid-003: Radio Programmable HW Seek: false [ 427.560322][T13707] vivid-003: RDS Rx I/O Mode: Block I/O [ 427.576821][T13707] vivid-003: Generate RBDS Instead of RDS: false [ 427.686625][T13707] vivid-003: RDS Reception: true [ 427.700667][T13707] vivid-003: RDS Program Type: 0 inactive [ 427.736673][T13707] vivid-003: RDS PS Name: inactive [ 427.787019][T13707] vivid-003: RDS Radio Text: inactive [ 427.879722][T13707] vivid-003: RDS Traffic Announcement: false inactive [ 427.887448][T13707] vivid-003: RDS Traffic Program: false inactive [ 427.914997][T13707] vivid-003: RDS Music: false inactive [ 427.933924][T13707] vivid-003: ================== END STATUS ================== [ 428.360272][T13726] vivid-003: ================= START STATUS ================= [ 428.406118][T13726] vivid-003: Radio HW Seek Mode: Bounded [ 428.418126][T13726] vivid-003: Radio Programmable HW Seek: false [ 428.451744][T13726] vivid-003: RDS Rx I/O Mode: Block I/O [ 428.469510][T13726] vivid-003: Generate RBDS Instead of RDS: false [ 428.476275][T13726] vivid-003: RDS Reception: true [ 428.487871][T13726] vivid-003: RDS Program Type: 0 inactive [ 428.499991][T13726] vivid-003: RDS PS Name: inactive [ 428.505304][T13726] vivid-003: RDS Radio Text: inactive [ 428.538893][T13726] vivid-003: RDS Traffic Announcement: false inactive [ 428.560563][T13726] vivid-003: RDS Traffic Program: false inactive [ 428.589548][T13726] vivid-003: RDS Music: false inactive [ 428.595706][T13726] vivid-003: ================== END STATUS ================== [ 428.759530][T13734] FAULT_INJECTION: forcing a failure. [ 428.759530][T13734] name failslab, interval 1, probability 0, space 0, times 0 [ 428.789263][T13734] CPU: 0 UID: 0 PID: 13734 Comm: syz.9.1776 Not tainted syzkaller #0 PREEMPT(full) [ 428.789305][T13734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 428.789321][T13734] Call Trace: [ 428.789331][T13734] [ 428.789340][T13734] dump_stack_lvl+0x16c/0x1f0 [ 428.789372][T13734] should_fail_ex+0x512/0x640 [ 428.789394][T13734] ? ops_init+0x77/0x5f0 [ 428.789413][T13734] should_failslab+0xc2/0x120 [ 428.789432][T13734] __kmalloc_noprof+0xd2/0x510 [ 428.789448][T13734] ? __pfx_recent_net_init+0x10/0x10 [ 428.789469][T13734] ops_init+0x77/0x5f0 [ 428.789488][T13734] setup_net+0x10f/0x380 [ 428.789505][T13734] ? lockdep_init_map_type+0x5c/0x280 [ 428.789524][T13734] ? __pfx_setup_net+0x10/0x10 [ 428.789542][T13734] ? debug_mutex_init+0x37/0x70 [ 428.789557][T13734] copy_net_ns+0x2a6/0x5f0 [ 428.789577][T13734] create_new_namespaces+0x3ea/0xa90 [ 428.789594][T13734] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 428.789611][T13734] ksys_unshare+0x45b/0xa40 [ 428.789630][T13734] ? __pfx_ksys_unshare+0x10/0x10 [ 428.789648][T13734] ? xfd_validate_state+0x61/0x180 [ 428.789670][T13734] __x64_sys_unshare+0x31/0x40 [ 428.789687][T13734] do_syscall_64+0xcd/0x490 [ 428.789705][T13734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.789720][T13734] RIP: 0033:0x7f23d8b8ebe9 [ 428.789732][T13734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.789746][T13734] RSP: 002b:00007f23d9ace038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 428.789759][T13734] RAX: ffffffffffffffda RBX: 00007f23d8db5fa0 RCX: 00007f23d8b8ebe9 [ 428.789769][T13734] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 428.789778][T13734] RBP: 00007f23d8c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 428.789788][T13734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.789801][T13734] R13: 00007f23d8db6038 R14: 00007f23d8db5fa0 R15: 00007ffc12110ab8 [ 428.789822][T13734] [ 428.987389][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.226379][T13735] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1775'. [ 429.334732][T13735] veth0_macvtap: left promiscuous mode [ 430.015722][T13750] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 433.461253][T13810] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input15 [ 433.847640][T13818] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 434.173976][T13820] bond0: option all_slaves_active: invalid value () [ 435.690740][T13845] vivid-003: ================= START STATUS ================= [ 435.698526][T13845] vivid-003: Radio HW Seek Mode: Bounded [ 435.760019][T13845] vivid-003: Radio Programmable HW Seek: false [ 435.790935][T13845] vivid-003: RDS Rx I/O Mode: Block I/O [ 435.796531][T13845] vivid-003: Generate RBDS Instead of RDS: false [ 435.835165][T13845] vivid-003: RDS Reception: true [ 435.841639][T13845] vivid-003: RDS Program Type: 0 inactive [ 435.853046][T13845] vivid-003: RDS PS Name: inactive [ 435.858386][T13845] vivid-003: RDS Radio Text: inactive [ 435.868546][T13845] vivid-003: RDS Traffic Announcement: false inactive [ 435.891281][T13845] vivid-003: RDS Traffic Program: false inactive [ 435.909381][T13845] vivid-003: RDS Music: false inactive [ 436.004745][T13845] vivid-003: ================== END STATUS ================== [ 436.555383][T13871] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input16 [ 436.598071][T13874] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1809'. [ 436.646034][T13864] vivid-003: ================= START STATUS ================= [ 436.654023][T13864] vivid-003: Radio HW Seek Mode: Bounded [ 436.660193][T13864] vivid-003: Radio Programmable HW Seek: false [ 436.666502][T13864] vivid-003: RDS Rx I/O Mode: Block I/O [ 436.673151][T13864] vivid-003: Generate RBDS Instead of RDS: false [ 436.679587][T13864] vivid-003: RDS Reception: true [ 436.688217][T13864] vivid-003: RDS Program Type: 0 inactive [ 436.695037][T13864] vivid-003: RDS PS Name: inactive [ 436.704830][T13864] vivid-003: RDS Radio Text: inactive [ 436.857115][T13864] vivid-003: RDS Traffic Announcement: false inactive [ 436.881903][T13864] vivid-003: RDS Traffic Program: false inactive [ 437.145009][T13864] vivid-003: RDS Music: false inactive [ 437.168170][T13864] vivid-003: ================== END STATUS ================== [ 437.222209][T13881] netlink: 25 bytes leftover after parsing attributes in process `syz.9.1803'. [ 437.569194][T13883] [U]  [ 437.572126][T13883] [U] [ 437.574814][T13883] [U] [ 437.577510][T13883] [U] [ 437.600557][T13883] [U] [ 437.603307][T13883] [U] [ 437.606107][T13883] [U] [ 437.608821][T13883] [U] [ 437.611849][T13883] [U] [ 437.614582][T13883] [U] [ 437.617276][T13883] [U] [ 437.619990][T13883] [U] [ 437.646361][T13883] [U] [ 437.649113][T13883] [U] [ 437.651829][T13883] [U] [ 437.654547][T13883] [U] [ 437.661691][T13883] [U] [ 437.664412][T13883] [U] [ 437.667086][T13883] [U] [ 437.669948][T13883] [U] [ 437.690055][T13883] [U] [ 437.692810][T13883] [U] [ 437.695523][T13883] [U] [ 437.698236][T13883] [U] [ 437.783908][T13883] [U] [ 437.786631][T13883] [U] [ 437.789309][T13883] [U] [ 437.791983][T13883] [U] [ 437.824631][T13883] [U] [ 437.827371][T13883] [U] [ 437.830079][T13883] [U] [ 437.832762][T13883] [U] [ 437.845204][T13883] [U] [ 437.847921][T13883] [U] [ 437.850596][T13883] [U] [ 437.853271][T13883] [U] [ 437.856895][T13883] [U] [ 437.859593][T13883] [U] [ 437.862287][T13883] [U] [ 437.864961][T13883] [U] [ 437.909765][T13883] [U] [ 437.912528][T13883] [U] [ 437.915201][T13883] [U] [ 437.917871][T13883] [U] [ 437.962632][T13883] [U] [ 437.965351][T13883] [U] [ 437.968025][T13883] [U] [ 437.970702][T13883] [U] [ 438.201988][T13883] [U] [ 438.204734][T13883] [U] [ 438.207448][T13883] [U] [ 438.210159][T13883] [U] [ 438.279991][T13883] [U] [ 438.746855][T13899] vivid-003: ================= START STATUS ================= [ 438.795142][T13899] vivid-003: Radio HW Seek Mode: Bounded [ 438.800931][T13899] vivid-003: Radio Programmable HW Seek: false [ 438.807195][T13899] vivid-003: RDS Rx I/O Mode: Block I/O [ 438.813046][T13899] vivid-003: Generate RBDS Instead of RDS: false [ 438.819482][T13899] vivid-003: RDS Reception: true [ 438.824521][T13899] vivid-003: RDS Program Type: 0 inactive [ 438.830417][T13899] vivid-003: RDS PS Name: inactive [ 438.835632][T13899] vivid-003: RDS Radio Text: inactive [ 438.841238][T13899] vivid-003: RDS Traffic Announcement: false inactive [ 438.848096][T13899] vivid-003: RDS Traffic Program: false inactive [ 438.854545][T13899] vivid-003: RDS Music: false inactive [ 438.919101][T13899] vivid-003: ================== END STATUS ================== [ 440.231950][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.238288][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.070254][T13939] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1816'. [ 441.897868][T13954] vivid-003: ================= START STATUS ================= [ 441.905850][T13954] vivid-003: Radio HW Seek Mode: Bounded [ 441.923322][T13954] vivid-003: Radio Programmable HW Seek: false [ 441.929513][T13954] vivid-003: RDS Rx I/O Mode: Block I/O [ 441.993686][T13954] vivid-003: Generate RBDS Instead of RDS: false [ 442.018524][T13954] vivid-003: RDS Reception: true [ 442.024327][T13954] vivid-003: RDS Program Type: 0 inactive [ 442.031576][T13954] vivid-003: RDS PS Name: inactive [ 442.038172][T13954] vivid-003: RDS Radio Text: inactive [ 442.045976][T13954] vivid-003: RDS Traffic Announcement: false inactive [ 442.065820][T13954] vivid-003: RDS Traffic Program: false inactive [ 442.110029][T13954] vivid-003: RDS Music: false inactive [ 442.137913][T13954] vivid-003: ================== END STATUS ================== [ 442.411624][T13964] FAULT_INJECTION: forcing a failure. [ 442.411624][T13964] name failslab, interval 1, probability 0, space 0, times 0 [ 442.424290][T13964] CPU: 1 UID: 0 PID: 13964 Comm: syz.0.1823 Not tainted syzkaller #0 PREEMPT(full) [ 442.424313][T13964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 442.424323][T13964] Call Trace: [ 442.424329][T13964] [ 442.424335][T13964] dump_stack_lvl+0x16c/0x1f0 [ 442.424357][T13964] should_fail_ex+0x512/0x640 [ 442.424380][T13964] should_failslab+0xc2/0x120 [ 442.424399][T13964] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 442.424416][T13964] ? lock_release+0x201/0x2f0 [ 442.424434][T13964] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 442.424451][T13964] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 442.424467][T13964] idr_get_free+0x528/0xa30 [ 442.424486][T13964] idr_alloc_u32+0x190/0x2f0 [ 442.424502][T13964] ? __pfx_idr_alloc_u32+0x10/0x10 [ 442.424518][T13964] ? rcu_is_watching+0x12/0xc0 [ 442.424533][T13964] idr_alloc_cyclic+0x10b/0x230 [ 442.424550][T13964] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 442.424565][T13964] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 442.424587][T13964] map_create+0xae3/0x1f80 [ 442.424608][T13964] ? __pfx_map_create+0x10/0x10 [ 442.424625][T13964] ? __might_fault+0x13b/0x190 [ 442.424641][T13964] ? rcu_is_watching+0x12/0xc0 [ 442.424654][T13964] ? __might_fault+0xe3/0x190 [ 442.424668][T13964] ? lock_release+0x201/0x2f0 [ 442.424687][T13964] __sys_bpf+0x44d2/0x4de0 [ 442.424707][T13964] ? __pfx___sys_bpf+0x10/0x10 [ 442.424726][T13964] ? ksys_write+0x190/0x250 [ 442.424742][T13964] ? rcu_is_watching+0x12/0xc0 [ 442.424755][T13964] ? lock_release+0x201/0x2f0 [ 442.424772][T13964] ? do_futex+0x122/0x350 [ 442.424789][T13964] ? __pfx_do_futex+0x10/0x10 [ 442.424808][T13964] ? fput+0x9b/0xd0 [ 442.424826][T13964] ? xfd_validate_state+0x61/0x180 [ 442.424845][T13964] ? __pfx_ksys_write+0x10/0x10 [ 442.424862][T13964] __x64_sys_bpf+0x78/0xc0 [ 442.424882][T13964] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 442.424902][T13964] do_syscall_64+0xcd/0x490 [ 442.424921][T13964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.424935][T13964] RIP: 0033:0x7f92a398ebe9 [ 442.424948][T13964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.424963][T13964] RSP: 002b:00007f92a1bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 442.424978][T13964] RAX: ffffffffffffffda RBX: 00007f92a3bb5fa0 RCX: 00007f92a398ebe9 [ 442.424987][T13964] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000000 [ 442.424996][T13964] RBP: 00007f92a3a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 442.425005][T13964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.425014][T13964] R13: 00007f92a3bb6038 R14: 00007f92a3bb5fa0 R15: 00007ffd86a1f6e8 [ 442.425028][T13964] [ 442.756728][T13968] netlink: 25 bytes leftover after parsing attributes in process `syz.9.1824'. [ 443.531941][T13970] vivid-003: ================= START STATUS ================= [ 443.539598][T13970] vivid-003: Radio HW Seek Mode: Bounded [ 443.570997][T13970] vivid-003: Radio Programmable HW Seek: false [ 443.594641][T13970] vivid-003: RDS Rx I/O Mode: Block I/O [ 443.615429][T13970] vivid-003: Generate RBDS Instead of RDS: false [ 443.645835][T13970] vivid-003: RDS Reception: true [ 443.666705][T13970] vivid-003: RDS Program Type: 0 inactive [ 443.672926][T13970] vivid-003: RDS PS Name: inactive [ 443.678567][T13970] vivid-003: RDS Radio Text: inactive [ 443.687500][T13970] vivid-003: RDS Traffic Announcement: false inactive [ 443.697626][T13970] vivid-003: RDS Traffic Program: false inactive [ 443.720076][T13970] vivid-003: RDS Music: false inactive [ 443.738899][T13970] vivid-003: ================== END STATUS ================== [ 444.187775][T13986] vivid-003: ================= START STATUS ================= [ 444.205892][T13986] vivid-003: Radio HW Seek Mode: Bounded [ 444.215667][T13986] vivid-003: Radio Programmable HW Seek: false [ 444.261210][T13986] vivid-003: RDS Rx I/O Mode: Block I/O [ 444.295271][T13986] vivid-003: Generate RBDS Instead of RDS: false [ 444.316125][T13986] vivid-003: RDS Reception: true [ 444.336351][T13986] vivid-003: RDS Program Type: 0 inactive [ 444.361989][T13986] vivid-003: RDS PS Name: inactive [ 444.389899][T13986] vivid-003: RDS Radio Text: inactive [ 444.450857][T13986] vivid-003: RDS Traffic Announcement: false inactive [ 444.461353][T13986] vivid-003: RDS Traffic Program: false inactive [ 444.482250][T13986] vivid-003: RDS Music: false inactive [ 444.492275][T13986] vivid-003: ================== END STATUS ================== [ 444.525042][T13981] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 445.694195][T14009] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1834'. [ 446.603725][T14023] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1835'. [ 447.576160][T14025] vivid-003: ================= START STATUS ================= [ 447.598185][T14025] vivid-003: Radio HW Seek Mode: Bounded [ 447.638489][T14025] vivid-003: Radio Programmable HW Seek: false [ 447.729013][T14025] vivid-003: RDS Rx I/O Mode: Block I/O [ 447.812640][T14025] vivid-003: Generate RBDS Instead of RDS: false [ 447.818999][T14025] vivid-003: RDS Reception: true [ 447.850007][T14025] vivid-003: RDS Program Type: 0 inactive [ 447.855844][T14025] vivid-003: RDS PS Name: inactive [ 447.861402][T14025] vivid-003: RDS Radio Text: inactive [ 447.905971][T14025] vivid-003: RDS Traffic Announcement: false inactive [ 447.959900][T14025] vivid-003: RDS Traffic Program: false inactive [ 448.011552][T14025] vivid-003: RDS Music: false inactive [ 448.017362][T14025] vivid-003: ================== END STATUS ================== [ 451.113901][ T30] audit: type=1800 audit(4294967377.240:8): pid=14066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1843" name="dbroot" dev="configfs" ino=53636 res=0 errno=0 [ 451.547310][T14075] vivid-003: ================= START STATUS ================= [ 451.597347][T14075] vivid-003: Radio HW Seek Mode: Bounded [ 451.625227][T14075] vivid-003: Radio Programmable HW Seek: false [ 451.635360][T14075] vivid-003: RDS Rx I/O Mode: Block I/O [ 451.643296][T14075] vivid-003: Generate RBDS Instead of RDS: false [ 451.651488][T14075] vivid-003: RDS Reception: true [ 451.670230][T14075] vivid-003: RDS Program Type: 0 inactive [ 451.680018][T14075] vivid-003: RDS PS Name: inactive [ 451.695031][T14075] vivid-003: RDS Radio Text: inactive [ 451.706242][T14075] vivid-003: RDS Traffic Announcement: false inactive [ 451.748888][T14075] vivid-003: RDS Traffic Program: false inactive [ 451.758407][T14075] vivid-003: RDS Music: false inactive [ 451.766719][T14075] vivid-003: ================== END STATUS ================== [ 454.339654][T14097] netlink: 13 bytes leftover after parsing attributes in process `syz.9.1849'. [ 454.703945][T14099] vivid-003: ================= START STATUS ================= [ 454.714127][T14099] vivid-003: Radio HW Seek Mode: Bounded [ 454.722018][T14099] vivid-003: Radio Programmable HW Seek: false [ 454.749120][T14099] vivid-003: RDS Rx I/O Mode: Block I/O [ 454.762010][T14099] vivid-003: Generate RBDS Instead of RDS: false [ 454.787523][T14099] vivid-003: RDS Reception: true [ 454.800271][T14099] vivid-003: RDS Program Type: 0 inactive [ 454.806051][T14099] vivid-003: RDS PS Name: inactive [ 454.835690][T14099] vivid-003: RDS Radio Text: inactive [ 454.842683][T14099] vivid-003: RDS Traffic Announcement: false inactive [ 454.850093][T14099] vivid-003: RDS Traffic Program: false inactive [ 454.858592][T14099] vivid-003: RDS Music: false inactive [ 454.864629][T14099] vivid-003: ================== END STATUS ================== [ 455.871199][T14120] vivid-003: ================= START STATUS ================= [ 455.878890][T14120] vivid-003: Radio HW Seek Mode: Bounded [ 456.102080][T14120] vivid-003: Radio Programmable HW Seek: false [ 456.126423][T14120] vivid-003: RDS Rx I/O Mode: Block I/O [ 456.138806][T14120] vivid-003: Generate RBDS Instead of RDS: false [ 456.154482][T14120] vivid-003: RDS Reception: true [ 456.159481][T14120] vivid-003: RDS Program Type: 0 inactive [ 456.190224][T14120] vivid-003: RDS PS Name: inactive [ 456.195503][T14120] vivid-003: RDS Radio Text: inactive [ 456.232180][T14120] vivid-003: RDS Traffic Announcement: false inactive [ 456.248734][T14120] vivid-003: RDS Traffic Program: false inactive [ 456.256117][T14120] vivid-003: RDS Music: false inactive [ 456.264939][T14120] vivid-003: ================== END STATUS ================== [ 456.283097][T14119] vivid-003: ================= START STATUS ================= [ 456.294488][T14119] vivid-003: Radio HW Seek Mode: Bounded [ 456.303355][T14119] vivid-003: Radio Programmable HW Seek: false [ 456.313499][T14119] vivid-003: RDS Rx I/O Mode: Block I/O [ 456.321863][T14119] vivid-003: Generate RBDS Instead of RDS: false [ 456.345086][T14119] vivid-003: RDS Reception: true [ 456.350266][T14119] vivid-003: RDS Program Type: 0 inactive [ 456.356079][T14119] vivid-003: RDS PS Name: inactive [ 456.361652][T14119] vivid-003: RDS Radio Text: inactive [ 456.367182][T14119] vivid-003: RDS Traffic Announcement: false inactive [ 456.374387][T14119] vivid-003: RDS Traffic Program: false inactive [ 456.406772][T14119] vivid-003: RDS Music: false inactive [ 456.413915][T14119] vivid-003: ================== END STATUS ================== [ 460.147287][T14177] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1867'. [ 461.094314][T14186] [U]  [ 461.097122][T14186] [U] [ 461.099826][T14186] [U] [ 461.102529][T14186] [U] [ 461.152652][T14186] [U] [ 461.155451][T14186] [U] [ 461.158149][T14186] [U] [ 461.160843][T14186] [U] [ 461.165383][T14186] [U] [ 461.168125][T14186] [U] [ 461.170923][T14186] [U] [ 461.173629][T14186] [U] [ 461.180127][T14186] [U] [ 461.182872][T14186] [U] [ 461.185582][T14186] [U] [ 461.188285][T14186] [U] [ 461.200232][T14186] [U] [ 461.202989][T14186] [U] [ 461.205708][T14186] [U] [ 461.208427][T14186] [U] [ 461.220013][T14186] [U] [ 461.222719][T14186] [U] [ 461.225391][T14186] [U] [ 461.228087][T14186] [U] [ 461.231536][T14186] [U] [ 461.234262][T14186] [U] [ 461.236983][T14186] [U] [ 461.239710][T14186] [U] [ 461.243153][T14186] [U] [ 461.245834][T14186] [U] [ 461.248534][T14186] [U] [ 461.251243][T14186] [U] [ 461.254484][T14186] [U] [ 461.257172][T14186] [U] [ 461.259866][T14186] [U] [ 461.262575][T14186] [U] [ 461.265961][T14186] [U] [ 461.268793][T14186] [U] [ 461.271505][T14186] [U] [ 461.274218][T14186] [U] [ 461.277503][T14186] [U] [ 461.280214][T14186] [U] [ 461.282931][T14186] [U] [ 461.285635][T14186] [U] [ 461.290025][T14186] [U] [ 461.292740][T14186] [U] [ 461.295439][T14186] [U] [ 461.298111][T14186] [U] [ 461.301927][T14189] vivid-003: ================= START STATUS ================= [ 461.310662][T14189] vivid-003: Radio HW Seek Mode: Bounded [ 461.316759][T14186] [U] [ 461.319575][T14186] [U] [ 461.322314][T14186] [U] [ 461.325007][T14186] [U] [ 461.327951][T14189] vivid-003: Radio Programmable HW Seek: false [ 461.334440][T14186] [U] [ 461.334811][T14189] vivid-003: RDS Rx I/O Mode: Block I/O [ 461.337169][T14186] [U] [ 461.337208][T14186] [U] [ 461.344167][T14189] vivid-003: Generate RBDS Instead of RDS: [ 461.345390][T14186] [U] [ 461.348105][T14189] false [ 461.361840][T14189] vivid-003: RDS Reception: true [ 461.367014][T14189] vivid-003: RDS Program Type: 0 inactive [ 461.373046][T14186] [U] [ 461.373363][T14189] vivid-003: RDS PS Name: [ 461.375752][T14186] [U] [ 461.375796][T14189] [ 461.380181][T14186] [U] [ 461.380218][T14186] [U] [ 461.386798][T14186] [U] [ 461.393782][T14186] [U] [ 461.396459][T14186] [U] [ 461.399143][T14186] [U] [ 461.405030][T14189] inactive [ 461.408199][T14189] vivid-003: RDS Radio Text: [ 461.408308][T14186] [U] [ 461.412997][T14186] [U] [ 461.413034][T14186] [U] [ 461.413068][T14186] [U] [ 461.415383][T14186] [U] [ 461.427011][T14186] [U] [ 461.429743][T14186] [U] [ 461.432436][T14186] [U] [ 461.437007][T14189] inactive [ 461.440701][T14189] vivid-003: RDS Traffic Announcement: [ 461.440856][T14186] [U] [ 461.449069][T14186] [U] [ 461.451766][T14186] [U] [ 461.454439][T14189] false inactive [ 461.454462][T14186] [U] [ 461.460993][T14189] vivid-003: RDS Traffic Program: false inactive [ 461.467585][T14189] vivid-003: RDS Music: false inactive [ 461.473645][T14186] [U] [ 461.476368][T14186] [U] [ 461.476761][T14189] vivid-003: ================== END STATUS ================== [ 461.479063][T14186] [U] [ 461.489362][T14186] [U] [ 461.493751][T14186] [U] [ 461.496530][T14186] [U] [ 461.499239][T14186] [U] [ 461.501948][T14186] [U] [ 461.507237][T14186] [U] [ 461.509952][T14186] [U] [ 461.512657][T14186] [U] [ 461.515359][T14186] [U] [ 461.522261][T14186] [U] [ 461.524982][T14186] [U] [ 461.527699][T14186] [U] [ 461.530408][T14186] [U] [ 461.534389][T14186] [U] [ 461.537114][T14186] [U] [ 461.539818][T14186] [U] [ 461.542506][T14186] [U] [ 461.547433][T14186] [U] [ 461.550161][T14186] [U] [ 461.552861][T14186] [U] [ 461.555694][T14186] [U] [ 461.559443][T14186] [U] [ 461.562147][T14186] [U] [ 461.564834][T14186] [U] [ 461.567517][T14186] [U] [ 461.571065][T14186] [U] [ 461.573796][T14186] [U] [ 461.576499][T14186] [U] [ 461.579194][T14186] [U] [ 461.582900][T14186] [U] [ 461.585620][T14186] [U] [ 461.588326][T14186] [U] [ 461.591041][T14186] [U] [ 461.594428][T14186] [U] [ 461.597145][T14186] [U] [ 461.599850][T14186] [U] [ 461.602561][T14186] [U] [ 461.620953][T14186] [U] [ 461.623701][T14186] [U] [ 461.626408][T14186] [U] [ 461.629160][T14186] [U] [ 461.655355][T14186] [U] [ 461.658103][T14186] [U] [ 461.660819][T14186] [U] [ 461.663521][T14186] [U] [ 461.703791][T14186] [U] [ 461.706536][T14186] [U] [ 461.709240][T14186] [U] [ 461.841918][T14184] [U] [ 462.319763][T14201] vivid-003: ================= START STATUS ================= [ 462.329123][T14201] vivid-003: Radio HW Seek Mode: Bounded [ 462.337187][T14201] vivid-003: Radio Programmable HW Seek: false [ 462.346189][T14201] vivid-003: RDS Rx I/O Mode: Block I/O [ 462.351821][T14201] vivid-003: Generate RBDS Instead of RDS: false [ 462.358235][T14201] vivid-003: RDS Reception: true [ 462.363246][T14201] vivid-003: RDS Program Type: 0 inactive [ 462.369048][T14201] vivid-003: RDS PS Name: inactive [ 462.374321][T14201] vivid-003: RDS Radio Text: inactive [ 462.380055][T14201] vivid-003: RDS Traffic Announcement: false inactive [ 462.398075][T14201] vivid-003: RDS Traffic Program: false inactive [ 462.406837][T14201] vivid-003: RDS Music: false inactive [ 462.412636][T14201] vivid-003: ================== END STATUS ================== [ 462.839109][ T30] audit: type=1800 audit(4294967388.960:9): pid=14197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1871" name="dbroot" dev="configfs" ino=54404 res=0 errno=0 [ 464.454120][ T5868] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 464.475192][ T5868] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 464.490217][ T5868] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 464.497984][ T5868] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 464.505564][ T5868] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 464.857280][T14222] chnl_net:caif_netlink_parms(): no params data found [ 465.240918][T14222] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.248035][T14222] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.283795][T14222] bridge_slave_0: entered allmulticast mode [ 465.292032][T14222] bridge_slave_0: entered promiscuous mode [ 465.319717][T14222] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.326999][T14222] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.334653][T14222] bridge_slave_1: entered allmulticast mode [ 465.341793][T14222] bridge_slave_1: entered promiscuous mode [ 465.366503][T14222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.386996][T14222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.465364][T14222] team0: Port device team_slave_0 added [ 465.496682][T14222] team0: Port device team_slave_1 added [ 465.564938][T14244] [U]  [ 465.567743][T14244] [U] [ 465.570419][T14244] [U] [ 465.573118][T14244] [U] [ 465.577212][T14222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.604777][T14244] [U] [ 465.607524][T14244] [U] [ 465.610225][T14244] [U] [ 465.612917][T14244] [U] [ 465.615612][T14222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.618902][T14244] [U] [ 465.644195][T14244] [U] [ 465.646901][T14244] [U] [ 465.649600][T14244] [U] [ 465.667157][T14244] [U] [ 465.669893][T14244] [U] [ 465.670598][T14222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.672587][T14244] [U] [ 465.685740][T14244] [U] [ 465.694696][T14222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.699521][T14244] [U] [ 465.704443][T14244] [U] [ 465.707229][T14244] [U] [ 465.709929][T14244] [U] [ 465.710211][T14222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.746977][T14222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.761129][T14244] [U] [ 465.764034][T14244] [U] [ 465.766757][T14244] [U] [ 465.769466][T14244] [U] [ 465.806422][T14244] [U] [ 465.809346][T14244] [U] [ 465.812063][T14244] [U] [ 465.814776][T14244] [U] [ 465.836915][T14244] [U] [ 465.855468][T14222] hsr_slave_0: entered promiscuous mode [ 465.870693][T14222] hsr_slave_1: entered promiscuous mode [ 465.881510][T14222] debugfs: 'hsr0' already exists in 'hsr' [ 465.897266][T14222] Cannot create hsr debugfs directory [ 466.049608][T14222] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.106636][T14222] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.187199][T14222] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.282275][T14222] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.540143][ T5866] Bluetooth: hci12: command tx timeout [ 466.560345][T14222] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 466.581811][T14222] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 466.614630][T14222] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 466.648190][T14222] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 466.874797][T14222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.904981][T14222] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.915206][ T9937] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.922357][ T9937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.964686][ T9937] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.971852][ T9937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.253087][T14273] bond0: option all_slaves_active: invalid value () [ 467.475234][T14222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.614204][T14222] veth0_vlan: entered promiscuous mode [ 467.716669][T14222] veth1_vlan: entered promiscuous mode [ 467.790070][T14222] veth0_macvtap: entered promiscuous mode [ 467.821880][T14222] veth1_macvtap: entered promiscuous mode [ 467.874632][T14222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.899113][T14222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.919425][ T1099] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.950599][ T1099] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.968449][ T1099] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.988480][ T1099] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.040453][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.048933][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.256955][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.277105][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.630608][ T5866] Bluetooth: hci12: command tx timeout [ 468.890475][T14283] vivid-003: ================= START STATUS ================= [ 468.944187][T14283] vivid-003: Radio HW Seek Mode: Bounded [ 468.953844][T14283] vivid-003: Radio Programmable HW Seek: false [ 468.994945][T14283] vivid-003: RDS Rx I/O Mode: Block I/O [ 469.037094][T14283] vivid-003: Generate RBDS Instead of RDS: false [ 469.053778][T14283] vivid-003: RDS Reception: true [ 469.058786][T14283] vivid-003: RDS Program Type: 0 inactive [ 469.064936][T14283] vivid-003: RDS PS Name: inactive [ 469.074859][T14283] vivid-003: RDS Radio Text: inactive [ 469.081817][T14283] vivid-003: RDS Traffic Announcement: false inactive [ 469.088755][T14283] vivid-003: RDS Traffic Program: false inactive [ 469.204555][T14283] vivid-003: RDS Music: false inactive [ 469.240090][T14283] vivid-003: ================== END STATUS ================== [ 470.680830][T14308] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 470.697975][T14305] FAULT_INJECTION: forcing a failure. [ 470.697975][T14305] name failslab, interval 1, probability 0, space 0, times 0 [ 470.718199][T14305] CPU: 1 UID: 0 PID: 14305 Comm: syz.0.1888 Not tainted syzkaller #0 PREEMPT(full) [ 470.718242][T14305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 470.718260][T14305] Call Trace: [ 470.718270][T14305] [ 470.718280][T14305] dump_stack_lvl+0x16c/0x1f0 [ 470.718317][T14305] should_fail_ex+0x512/0x640 [ 470.718351][T14305] ? ops_init+0x77/0x5f0 [ 470.718382][T14305] should_failslab+0xc2/0x120 [ 470.718412][T14305] __kmalloc_noprof+0xd2/0x510 [ 470.718440][T14305] ? __pfx_ip_set_net_init+0x10/0x10 [ 470.718476][T14305] ops_init+0x77/0x5f0 [ 470.718509][T14305] setup_net+0x10f/0x380 [ 470.718540][T14305] ? lockdep_init_map_type+0x5c/0x280 [ 470.718576][T14305] ? __pfx_setup_net+0x10/0x10 [ 470.718606][T14305] ? debug_mutex_init+0x37/0x70 [ 470.718632][T14305] copy_net_ns+0x2a6/0x5f0 [ 470.718667][T14305] create_new_namespaces+0x3ea/0xa90 [ 470.718699][T14305] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 470.718728][T14305] ksys_unshare+0x45b/0xa40 [ 470.718759][T14305] ? __pfx_ksys_unshare+0x10/0x10 [ 470.718789][T14305] ? xfd_validate_state+0x61/0x180 [ 470.718827][T14305] __x64_sys_unshare+0x31/0x40 [ 470.718857][T14305] do_syscall_64+0xcd/0x490 [ 470.718889][T14305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.718914][T14305] RIP: 0033:0x7f92a398ebe9 [ 470.718935][T14305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.718962][T14305] RSP: 002b:00007f92a1bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 470.718988][T14305] RAX: ffffffffffffffda RBX: 00007f92a3bb5fa0 RCX: 00007f92a398ebe9 [ 470.719006][T14305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 470.719022][T14305] RBP: 00007f92a3a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 470.719037][T14305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.719053][T14305] R13: 00007f92a3bb6038 R14: 00007f92a3bb5fa0 R15: 00007ffd86a1f6e8 [ 470.719077][T14305] [ 470.720338][ T5866] Bluetooth: hci12: command tx timeout [ 472.724950][T14334] FAULT_INJECTION: forcing a failure. [ 472.724950][T14334] name failslab, interval 1, probability 0, space 0, times 0 [ 472.809942][T14334] CPU: 0 UID: 0 PID: 14334 Comm: syz.3.1901 Not tainted syzkaller #0 PREEMPT(full) [ 472.809978][T14334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 472.809991][T14334] Call Trace: [ 472.809997][T14334] [ 472.810003][T14334] dump_stack_lvl+0x16c/0x1f0 [ 472.810026][T14334] should_fail_ex+0x512/0x640 [ 472.810049][T14334] should_failslab+0xc2/0x120 [ 472.810069][T14334] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 472.810086][T14334] ? lock_release+0x201/0x2f0 [ 472.810104][T14334] ? __proc_create+0x2ce/0x8e0 [ 472.810125][T14334] __proc_create+0x2ce/0x8e0 [ 472.810143][T14334] ? __pfx___proc_create+0x10/0x10 [ 472.810165][T14334] ? _raw_write_unlock+0x28/0x50 [ 472.810182][T14334] proc_create_reg+0x7d/0x180 [ 472.810212][T14334] proc_create_net_data+0x8e/0x1c0 [ 472.810234][T14334] ? __pfx_proc_create_net_data+0x10/0x10 [ 472.810257][T14334] ? __pfx___netlink_kernel_create+0x10/0x10 [ 472.810279][T14334] ? fib4_semantics_init+0x25/0x100 [ 472.810296][T14334] fib_proc_init+0xf4/0x1b0 [ 472.810313][T14334] fib_net_init+0x2af/0x3f0 [ 472.810333][T14334] ? __pfx_fib_net_init+0x10/0x10 [ 472.810351][T14334] ? lockdep_init_map_type+0x5c/0x280 [ 472.810369][T14334] ? __pfx_nl_fib_input+0x10/0x10 [ 472.810389][T14334] ? devinet_init_net+0x5c2/0x910 [ 472.810409][T14334] ? __pfx_fib_net_init+0x10/0x10 [ 472.810427][T14334] ops_init+0x1df/0x5f0 [ 472.810445][T14334] setup_net+0x10f/0x380 [ 472.810462][T14334] ? lockdep_init_map_type+0x5c/0x280 [ 472.810480][T14334] ? __pfx_setup_net+0x10/0x10 [ 472.810498][T14334] ? debug_mutex_init+0x37/0x70 [ 472.810511][T14334] copy_net_ns+0x2a6/0x5f0 [ 472.810532][T14334] create_new_namespaces+0x3ea/0xa90 [ 472.810550][T14334] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 472.810566][T14334] ksys_unshare+0x45b/0xa40 [ 472.810585][T14334] ? __pfx_ksys_unshare+0x10/0x10 [ 472.810604][T14334] ? xfd_validate_state+0x61/0x180 [ 472.810626][T14334] __x64_sys_unshare+0x31/0x40 [ 472.810644][T14334] do_syscall_64+0xcd/0x490 [ 472.810665][T14334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.810679][T14334] RIP: 0033:0x7fa780f8ebe9 [ 472.810692][T14334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.810708][T14334] RSP: 002b:00007fa781dce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 472.810722][T14334] RAX: ffffffffffffffda RBX: 00007fa7811b6090 RCX: 00007fa780f8ebe9 [ 472.810732][T14334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 472.810741][T14334] RBP: 00007fa781011e19 R08: 0000000000000000 R09: 0000000000000000 [ 472.810751][T14334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.810760][T14334] R13: 00007fa7811b6128 R14: 00007fa7811b6090 R15: 00007ffd38f67188 [ 472.810774][T14334] [ 473.094762][ T5866] Bluetooth: hci12: command tx timeout [ 475.698841][T14378] nvme_fabrics: missing parameter 'transport=%s' [ 475.719841][T14378] nvme_fabrics: missing parameter 'nqn=%s' [ 477.952446][T14398] vivid-003: ================= START STATUS ================= [ 477.960301][T14398] vivid-003: Radio HW Seek Mode: Bounded [ 477.965966][T14398] vivid-003: Radio Programmable HW Seek: false [ 478.079234][T14398] vivid-003: RDS Rx I/O Mode: Block I/O [ 478.085774][T14398] vivid-003: Generate RBDS Instead of RDS: false [ 478.139459][T14398] vivid-003: RDS Reception: true [ 478.144930][ T5866] Bluetooth: hci4: command 0x0406 tx timeout [ 478.192163][T14398] vivid-003: RDS Program Type: 0 inactive [ 478.269186][T14398] vivid-003: RDS PS Name: inactive [ 478.277717][T14398] vivid-003: RDS Radio Text: inactive [ 478.293674][T14398] vivid-003: RDS Traffic Announcement: false inactive [ 478.384373][T14398] vivid-003: RDS Traffic Program: false inactive [ 478.472616][T14398] vivid-003: RDS Music: false inactive [ 478.478267][T14398] vivid-003: ================== END STATUS ================== [ 478.523489][T14397] vivid-003: ================= START STATUS ================= [ 478.538482][T14397] vivid-003: Radio HW Seek Mode: Bounded [ 478.548652][T14397] vivid-003: Radio Programmable HW Seek: false [ 478.575573][T14397] vivid-003: RDS Rx I/O Mode: Block I/O [ 478.591766][T14397] vivid-003: Generate RBDS Instead of RDS: false [ 478.609133][T14397] vivid-003: RDS Reception: true [ 478.628048][T14397] vivid-003: RDS Program Type: 0 inactive [ 478.635461][T14397] vivid-003: RDS PS Name: inactive [ 478.653005][T14397] vivid-003: RDS Radio Text: inactive [ 478.668743][T14397] vivid-003: RDS Traffic Announcement: false inactive [ 478.709473][T14397] vivid-003: RDS Traffic Program: false inactive [ 478.729400][T14397] vivid-003: RDS Music: false inactive [ 478.738553][T14397] vivid-003: ================== END STATUS ================== [ 478.762306][T14403] vivid-003: ================= START STATUS ================= [ 478.771468][T14403] vivid-003: Radio HW Seek Mode: Bounded [ 478.785071][T14403] vivid-003: Radio Programmable HW Seek: false [ 478.811543][T14403] vivid-003: RDS Rx I/O Mode: Block I/O [ 478.827337][T14403] vivid-003: Generate RBDS Instead of RDS: false [ 478.845242][T14403] vivid-003: RDS Reception: true [ 478.877042][T14403] vivid-003: RDS Program Type: 0 inactive [ 478.907451][T14403] vivid-003: RDS PS Name: inactive [ 478.926401][T14403] vivid-003: RDS Radio Text: inactive [ 479.008802][T14403] vivid-003: RDS Traffic Announcement: false inactive [ 479.017843][T14403] vivid-003: RDS Traffic Program: false inactive [ 479.036293][T14403] vivid-003: RDS Music: false inactive [ 479.056021][T14403] vivid-003: ================== END STATUS ================== [ 480.056433][T14415] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 480.622903][T14428] vivid-003: ================= START STATUS ================= [ 480.638131][T14428] vivid-003: Radio HW Seek Mode: Bounded [ 480.665339][T14428] vivid-003: Radio Programmable HW Seek: false [ 480.688461][T14428] vivid-003: RDS Rx I/O Mode: Block I/O [ 480.707113][T14428] vivid-003: Generate RBDS Instead of RDS: false [ 480.718234][T14428] vivid-003: RDS Reception: true [ 480.728410][T14428] vivid-003: RDS Program Type: 0 inactive [ 480.739916][T14428] vivid-003: RDS PS Name: inactive [ 480.758438][T14428] vivid-003: RDS Radio Text: inactive [ 480.765438][T14428] vivid-003: RDS Traffic Announcement: false inactive [ 480.772439][T14428] vivid-003: RDS Traffic Program: false inactive [ 480.779010][T14428] vivid-003: RDS Music: false inactive [ 480.798700][T14428] vivid-003: ================== END STATUS ================== [ 480.828842][T14436] vivid-003: ================= START STATUS ================= [ 480.840043][T14436] vivid-003: Radio HW Seek Mode: Bounded [ 480.847105][T14436] vivid-003: Radio Programmable HW Seek: false [ 480.953320][T14436] vivid-003: RDS Rx I/O Mode: Block I/O [ 480.959897][T14436] vivid-003: Generate RBDS Instead of RDS: false [ 480.966374][T14436] vivid-003: RDS Reception: true [ 481.020306][T14436] vivid-003: RDS Program Type: 0 inactive [ 481.026128][T14436] vivid-003: RDS PS Name: inactive [ 481.050242][T14436] vivid-003: RDS Radio Text: inactive [ 481.081055][T14436] vivid-003: RDS Traffic Announcement: false inactive [ 481.116280][T14436] vivid-003: RDS Traffic Program: false inactive [ 481.128508][T14436] vivid-003: RDS Music: false inactive [ 481.138768][T14436] vivid-003: ================== END STATUS ================== [ 482.850307][T14468] vivid-003: ================= START STATUS ================= [ 482.858122][T14468] vivid-003: Radio HW Seek Mode: Bounded [ 482.864020][T14468] vivid-003: Radio Programmable HW Seek: false [ 482.870667][T14468] vivid-003: RDS Rx I/O Mode: Block I/O [ 482.895337][T14468] vivid-003: Generate RBDS Instead of RDS: false [ 482.958388][T14468] vivid-003: RDS Reception: true [ 482.963477][T14468] vivid-003: RDS Program Type: 0 inactive [ 482.993956][T14468] vivid-003: RDS PS Name: inactive [ 482.999657][T14468] vivid-003: RDS Radio Text: inactive [ 483.005344][T14468] vivid-003: RDS Traffic Announcement: false inactive [ 483.057693][T14468] vivid-003: RDS Traffic Program: false inactive [ 483.065658][T14468] vivid-003: RDS Music: false inactive [ 483.071500][T14468] vivid-003: ================== END STATUS ================== [ 484.391846][T14483] zswap: compressor not available [ 484.986447][T14490] vivid-003: ================= START STATUS ================= [ 485.038032][T14490] vivid-003: Radio HW Seek Mode: Bounded [ 485.059532][T14490] vivid-003: Radio Programmable HW Seek: false [ 485.096338][T14490] vivid-003: RDS Rx I/O Mode: Block I/O [ 485.106421][T14490] vivid-003: Generate RBDS Instead of RDS: false [ 485.113849][T14490] vivid-003: RDS Reception: true [ 485.164206][T14490] vivid-003: RDS Program Type: 0 inactive [ 485.235623][T14490] vivid-003: RDS PS Name: inactive [ 485.340118][T14490] vivid-003: RDS Radio Text: inactive [ 485.386255][T14490] vivid-003: RDS Traffic Announcement: false inactive [ 485.400403][T14490] vivid-003: RDS Traffic Program: false inactive [ 485.456147][T14490] vivid-003: RDS Music: false inactive [ 485.467337][T14490] vivid-003: ================== END STATUS ================== [ 485.533511][T14483] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1921'. [ 485.839882][T14508] nvme_fabrics: missing parameter 'transport=%s' [ 485.889471][T14508] nvme_fabrics: missing parameter 'nqn=%s' [ 486.653006][T14513] vhci_hcd: invalid port number 23 [ 486.673510][T14513] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 490.294139][T14584] vivid-003: ================= START STATUS ================= [ 490.324422][T14584] vivid-003: Radio HW Seek Mode: Bounded [ 490.332417][T14584] vivid-003: Radio Programmable HW Seek: false [ 490.348840][T14584] vivid-003: RDS Rx I/O Mode: Block I/O [ 490.373333][T14584] vivid-003: Generate RBDS Instead of RDS: false [ 490.393623][T14584] vivid-003: RDS Reception: true [ 490.398612][T14584] vivid-003: RDS Program Type: 0 inactive [ 490.407948][T14584] vivid-003: RDS PS Name: inactive [ 490.449038][T14584] vivid-003: RDS Radio Text: inactive [ 490.455108][T14584] vivid-003: RDS Traffic Announcement: false inactive [ 490.486276][T14584] vivid-003: RDS Traffic Program: false inactive [ 490.496180][T14584] vivid-003: RDS Music: false inactive [ 490.503010][T14584] vivid-003: ================== END STATUS ================== [ 493.096049][T14642] serio: Serial port ttyS0 [ 493.210090][T14645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1946'. [ 493.229073][T14645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.260224][T14645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.280504][T14645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.287896][T14645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.967739][T14706] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 496.997095][T14706] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 497.027554][T14706] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 497.085141][T14706] page_type: f5(slab) [ 497.089337][T14706] raw: 00fff00000000040 ffff88801b84b500 0000000000000000 0000000000000001 [ 497.109918][T14706] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 497.164777][T14706] head: 00fff00000000040 ffff88801b84b500 0000000000000000 0000000000000001 [ 497.203064][T14706] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 497.218561][T14706] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 497.258013][T14706] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 497.299965][T14706] page dumped because: unmovable page [ 497.310607][T14706] page_owner tracks the page as allocated [ 497.330849][T14706] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5234, tgid 5234 (udevd), ts 39785793458, free_ts 39777785469 [ 497.357784][T14706] post_alloc_hook+0x1c0/0x230 [ 497.363383][T14706] get_page_from_freelist+0x132b/0x38e0 [ 497.383174][T14706] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 497.415919][T14706] alloc_pages_mpol+0x1fb/0x550 [ 497.451947][T14706] new_slab+0x247/0x330 [ 497.466329][T14706] ___slab_alloc+0xcf2/0x1740 [ 497.496778][T14706] __slab_alloc.constprop.0+0x56/0xb0 [ 497.559900][T14706] __kvmalloc_node_noprof+0x3b1/0x620 [ 497.571629][T14706] seq_read_iter+0x826/0x12c0 [ 497.583066][T14706] kernfs_fop_read_iter+0x40f/0x5a0 [ 497.608816][T14706] vfs_read+0x8bf/0xcf0 [ 497.637378][T14706] ksys_read+0x12a/0x250 [ 497.656450][T14706] do_syscall_64+0xcd/0x490 [ 497.714208][T14706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.721355][T14706] page last free pid 5505 tgid 5505 stack trace: [ 497.732189][T14706] __free_frozen_pages+0x7d5/0x10f0 [ 497.781026][T14706] __put_partials+0x165/0x1c0 [ 497.790912][T14706] qlist_free_all+0x4d/0x120 [ 497.796597][T14706] kasan_quarantine_reduce+0x195/0x1e0 [ 497.802553][T14706] __kasan_slab_alloc+0x69/0x90 [ 497.807532][T14706] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 497.813378][T14706] mas_alloc_nodes+0x18b/0x8b0 [ 497.818298][T14706] mas_node_count_gfp+0x105/0x130 [ 497.824210][T14706] mas_preallocate+0x7e0/0xde0 [ 497.829319][T14706] commit_merge+0x2a8/0x1030 [ 497.834265][T14706] vma_expand+0x3ac/0x910 [ 497.838645][T14706] vma_merge_new_range+0x2ef/0xa50 [ 497.844945][T14706] __mmap_region+0x877/0x27b0 [ 497.849681][T14706] mmap_region+0x1ab/0x3f0 [ 497.876974][T14706] do_mmap+0xa3e/0x1210 [ 497.901364][T14706] vm_mmap_pgoff+0x29e/0x470 [ 500.960067][T14772] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1972'. [ 500.989508][T14772] veth0_macvtap: left promiscuous mode [ 501.662540][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.668973][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.635150][T14806] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 503.372189][T14811] nvme_fabrics: missing parameter 'transport=%s' [ 503.407177][T14811] nvme_fabrics: missing parameter 'nqn=%s' [ 504.580284][T14857] FAULT_INJECTION: forcing a failure. [ 504.580284][T14857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.682713][T14857] CPU: 1 UID: 0 PID: 14857 Comm: syz.1.1990 Not tainted syzkaller #0 PREEMPT(full) [ 504.682735][T14857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 504.682744][T14857] Call Trace: [ 504.682749][T14857] [ 504.682754][T14857] dump_stack_lvl+0x16c/0x1f0 [ 504.682776][T14857] should_fail_ex+0x512/0x640 [ 504.682797][T14857] _copy_to_user+0x32/0xd0 [ 504.682810][T14857] do_fcntl+0x168/0x15a0 [ 504.682830][T14857] ? __pfx_do_fcntl+0x10/0x10 [ 504.682849][T14857] ? ksys_write+0x1ac/0x250 [ 504.682864][T14857] ? tomoyo_file_fcntl+0x6c/0xc0 [ 504.682879][T14857] __x64_sys_fcntl+0x163/0x200 [ 504.682898][T14857] do_syscall_64+0xcd/0x490 [ 504.682916][T14857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.682930][T14857] RIP: 0033:0x7f9a2278ebe9 [ 504.682942][T14857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.682956][T14857] RSP: 002b:00007f9a2355b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 504.682970][T14857] RAX: ffffffffffffffda RBX: 00007f9a229b5fa0 RCX: 00007f9a2278ebe9 [ 504.682980][T14857] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 8000000000000001 [ 504.682988][T14857] RBP: 00007f9a2355b090 R08: 0000000000000000 R09: 0000000000000000 [ 504.682997][T14857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.683005][T14857] R13: 00007f9a229b6038 R14: 00007f9a229b5fa0 R15: 00007ffe63315958 [ 504.683018][T14857] [ 504.916723][T14844] ptrace attach of "./syz-executor exec"[13509] was attempted by "./syz-executor exec"[14844] [ 506.328504][T14873] nvme_fabrics: missing parameter 'transport=%s' [ 506.366828][T14873] nvme_fabrics: missing parameter 'nqn=%s' [ 506.443699][T14885] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1996'. [ 506.483958][T14885] veth0_macvtap: left promiscuous mode [ 507.757402][T14916] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 507.766329][T14916] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 507.775202][T14916] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 507.803393][T14916] page_type: f5(slab) [ 507.807504][T14916] raw: 00fff00000000040 ffff88801b84b500 0000000000000000 0000000000000001 [ 507.840774][T14916] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 507.849680][T14916] head: 00fff00000000040 ffff88801b84b500 0000000000000000 0000000000000001 [ 507.858519][T14916] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 507.868406][T14916] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 507.877227][T14916] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 507.886483][T14916] page dumped because: unmovable page [ 507.892242][T14916] page_owner tracks the page as allocated [ 507.899134][T14916] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5234, tgid 5234 (udevd), ts 39785793458, free_ts 39777785469 [ 507.921511][T14916] post_alloc_hook+0x1c0/0x230 [ 507.926400][T14916] get_page_from_freelist+0x132b/0x38e0 [ 507.932167][T14916] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 507.938255][T14916] alloc_pages_mpol+0x1fb/0x550 [ 507.943282][T14916] new_slab+0x247/0x330 [ 507.947524][T14916] ___slab_alloc+0xcf2/0x1740 [ 507.952333][T14916] __slab_alloc.constprop.0+0x56/0xb0 [ 507.958987][T14916] __kvmalloc_node_noprof+0x3b1/0x620 [ 507.967469][T14916] seq_read_iter+0x826/0x12c0 [ 507.972309][T14916] kernfs_fop_read_iter+0x40f/0x5a0 [ 507.977591][T14916] vfs_read+0x8bf/0xcf0 [ 507.992950][T14916] ksys_read+0x12a/0x250 [ 508.000882][T14916] do_syscall_64+0xcd/0x490 [ 508.032936][T14916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.065177][T14916] page last free pid 5505 tgid 5505 stack trace: [ 508.112758][T14916] __free_frozen_pages+0x7d5/0x10f0 [ 508.118477][T14916] __put_partials+0x165/0x1c0 [ 508.124302][T14916] qlist_free_all+0x4d/0x120 [ 508.128963][T14916] kasan_quarantine_reduce+0x195/0x1e0 [ 508.135361][T14916] __kasan_slab_alloc+0x69/0x90 [ 508.141092][T14916] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 508.146845][T14916] mas_alloc_nodes+0x18b/0x8b0 [ 508.152131][T14916] mas_node_count_gfp+0x105/0x130 [ 508.157310][T14916] mas_preallocate+0x7e0/0xde0 [ 508.162687][T14916] commit_merge+0x2a8/0x1030 [ 508.167460][T14916] vma_expand+0x3ac/0x910 [ 508.172171][T14916] vma_merge_new_range+0x2ef/0xa50 [ 508.177324][T14916] __mmap_region+0x877/0x27b0 [ 508.182446][T14916] mmap_region+0x1ab/0x3f0 [ 508.187369][T14916] do_mmap+0xa3e/0x1210 [ 508.191967][T14916] vm_mmap_pgoff+0x29e/0x470 [ 508.769107][T14927] can: request_module (can-proto-0) failed. [ 508.860027][ T5866] Bluetooth: hci5: command 0x0406 tx timeout [ 509.235345][T14925] nvme_fabrics: missing parameter 'transport=%s' [ 509.246112][T14925] nvme_fabrics: missing parameter 'nqn=%s' [ 509.383770][T14945] FAULT_INJECTION: forcing a failure. [ 509.383770][T14945] name failslab, interval 1, probability 0, space 0, times 0 [ 509.452508][T14945] CPU: 0 UID: 0 PID: 14945 Comm: syz.1.2011 Not tainted syzkaller #0 PREEMPT(full) [ 509.452532][T14945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 509.452542][T14945] Call Trace: [ 509.452547][T14945] [ 509.452554][T14945] dump_stack_lvl+0x16c/0x1f0 [ 509.452577][T14945] should_fail_ex+0x512/0x640 [ 509.452600][T14945] should_failslab+0xc2/0x120 [ 509.452620][T14945] __kvmalloc_node_noprof+0x137/0x620 [ 509.452638][T14945] ? trace_kmalloc+0x2b/0xd0 [ 509.452657][T14945] ? __kvmalloc_node_noprof+0x298/0x620 [ 509.452674][T14945] ? io_alloc_cache_init+0x33/0x170 [ 509.452695][T14945] ? io_alloc_cache_init+0x33/0x170 [ 509.452715][T14945] io_alloc_cache_init+0x33/0x170 [ 509.452738][T14945] io_rsrc_cache_init+0x26/0x50 [ 509.452758][T14945] io_uring_setup+0x68b/0x2080 [ 509.452775][T14945] ? __pfx_io_uring_setup+0x10/0x10 [ 509.452792][T14945] ? do_futex+0x122/0x350 [ 509.452809][T14945] ? __pfx_do_futex+0x10/0x10 [ 509.452830][T14945] ? xfd_validate_state+0x61/0x180 [ 509.452850][T14945] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 509.452871][T14945] __x64_sys_io_uring_setup+0xc2/0x170 [ 509.452889][T14945] do_syscall_64+0xcd/0x490 [ 509.452907][T14945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.452922][T14945] RIP: 0033:0x7f9a2278ebe9 [ 509.452934][T14945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.452948][T14945] RSP: 002b:00007f9a2355b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 509.452962][T14945] RAX: ffffffffffffffda RBX: 00007f9a229b5fa0 RCX: 00007f9a2278ebe9 [ 509.452972][T14945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 509.452980][T14945] RBP: 00007f9a22811e19 R08: 0000000000000000 R09: 0000000000000000 [ 509.452989][T14945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.452998][T14945] R13: 00007f9a229b6038 R14: 00007f9a229b5fa0 R15: 00007ffe63315958 [ 509.453012][T14945] [ 509.656457][ C0] vkms_vblank_simulate: vblank timer overrun [ 510.211453][T14953] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2014'. [ 511.482434][T14986] ptrace attach of "./syz-executor exec"[14222] was attempted by "./syz-executor exec"[14986] [ 512.655163][T14991] nvme_fabrics: missing parameter 'transport=%s' [ 512.680796][T14991] nvme_fabrics: missing parameter 'nqn=%s' [ 514.261990][T15038] vivid-003: ================= START STATUS ================= [ 514.269913][T15038] vivid-003: Radio HW Seek Mode: Bounded [ 514.275740][T15038] vivid-003: Radio Programmable HW Seek: false [ 514.285869][T15038] vivid-003: RDS Rx I/O Mode: Block I/O [ 514.295806][T15038] vivid-003: Generate RBDS Instead of RDS: false [ 514.304791][T15038] vivid-003: RDS Reception: true [ 514.355093][T15038] vivid-003: RDS Program Type: 0 inactive [ 514.361646][T15038] vivid-003: RDS PS Name: inactive [ 514.367156][T15038] vivid-003: RDS Radio Text: inactive [ 514.372977][T15038] vivid-003: RDS Traffic Announcement: false inactive [ 514.382522][T15038] vivid-003: RDS Traffic Program: false inactive [ 514.390044][T15038] vivid-003: RDS Music: false inactive [ 514.401793][T15038] vivid-003: ================== END STATUS ================== [ 514.687165][T15045] nvme_fabrics: missing parameter 'transport=%s' [ 514.694101][T15045] nvme_fabrics: missing parameter 'nqn=%s' [ 514.999710][T15052] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2036'. [ 515.035636][T15052] veth0_macvtap: left promiscuous mode [ 517.759204][T15106] vivid-003: ================= START STATUS ================= [ 517.778978][T15106] vivid-003: Radio HW Seek Mode: Bounded [ 517.788044][T15106] vivid-003: Radio Programmable HW Seek: false [ 517.796034][T15106] vivid-003: RDS Rx I/O Mode: Block I/O [ 517.809418][T15106] vivid-003: Generate RBDS Instead of RDS: false [ 517.816921][T15106] vivid-003: RDS Reception: true [ 517.822831][T15106] vivid-003: RDS Program Type: 0 inactive [ 517.828589][T15106] vivid-003: RDS PS Name: inactive [ 517.835117][T15106] vivid-003: RDS Radio Text: inactive [ 517.841478][T15106] vivid-003: RDS Traffic Announcement: false inactive [ 517.848272][T15106] vivid-003: RDS Traffic Program: false inactive [ 517.874968][T15106] vivid-003: RDS Music: false inactive [ 517.897522][T15106] vivid-003: ================== END STATUS ================== [ 519.102824][ T5866] Bluetooth: hci6: command 0x0406 tx timeout [ 519.257489][T15128] FAULT_INJECTION: forcing a failure. [ 519.257489][T15128] name failslab, interval 1, probability 0, space 0, times 0 [ 519.299881][T15128] CPU: 1 UID: 0 PID: 15128 Comm: syz.9.2052 Not tainted syzkaller #0 PREEMPT(full) [ 519.299917][T15128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 519.299933][T15128] Call Trace: [ 519.299942][T15128] [ 519.299952][T15128] dump_stack_lvl+0x16c/0x1f0 [ 519.299988][T15128] should_fail_ex+0x512/0x640 [ 519.300022][T15128] should_failslab+0xc2/0x120 [ 519.300055][T15128] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 519.300092][T15128] ? security_inode_alloc+0x3b/0x2b0 [ 519.300122][T15128] security_inode_alloc+0x3b/0x2b0 [ 519.300151][T15128] inode_init_always_gfp+0xce4/0x1030 [ 519.300180][T15128] alloc_inode+0x86/0x240 [ 519.300214][T15128] sock_alloc+0x40/0x280 [ 519.300248][T15128] __sock_create+0xc1/0x8d0 [ 519.300273][T15128] __sys_socket+0x14d/0x260 [ 519.300294][T15128] ? __pfx___sys_socket+0x10/0x10 [ 519.300319][T15128] ? xfd_validate_state+0x61/0x180 [ 519.300355][T15128] ? __pfx_do_writev+0x10/0x10 [ 519.300385][T15128] __x64_sys_socket+0x72/0xb0 [ 519.300411][T15128] do_syscall_64+0xcd/0x490 [ 519.300440][T15128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.300466][T15128] RIP: 0033:0x7f23d8b8ebe9 [ 519.300488][T15128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.300514][T15128] RSP: 002b:00007f23d9ace038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 519.300540][T15128] RAX: ffffffffffffffda RBX: 00007f23d8db5fa0 RCX: 00007f23d8b8ebe9 [ 519.300559][T15128] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 519.300575][T15128] RBP: 00007f23d8c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 519.300593][T15128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.300610][T15128] R13: 00007f23d8db6038 R14: 00007f23d8db5fa0 R15: 00007ffc12110ab8 [ 519.300636][T15128] [ 519.300703][T15128] socket: no more sockets [ 522.149967][T12229] svc: failed to register nfsdv3 RPC service (errno 512). [ 522.157666][T12229] svc: failed to register nfsaclv3 RPC service (errno 512). [ 524.219897][ T5866] Bluetooth: hci7: command 0x0406 tx timeout [ 528.972650][ T51] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 528.982480][ T51] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 528.992700][ T51] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 529.006826][ T51] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 529.018336][ T51] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 529.340209][ T51] Bluetooth: hci8: command 0x0406 tx timeout [ 529.340258][ T5866] Bluetooth: hci9: command 0x0406 tx timeout [ 529.427242][T15150] chnl_net:caif_netlink_parms(): no params data found [ 529.601989][T15150] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.620216][T15150] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.635257][T15150] bridge_slave_0: entered allmulticast mode [ 529.662192][T15150] bridge_slave_0: entered promiscuous mode [ 529.677908][T15150] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.707063][T15150] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.726996][T15150] bridge_slave_1: entered allmulticast mode [ 529.875348][T15150] bridge_slave_1: entered promiscuous mode [ 530.157217][T15150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.249246][T15150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.414909][T15150] team0: Port device team_slave_0 added [ 530.438433][T15150] team0: Port device team_slave_1 added [ 530.460706][ T31] INFO: task syz-executor:12507 blocked for more than 143 seconds. [ 530.468904][ T31] Not tainted syzkaller #0 [ 530.474438][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 530.483694][ T31] task:syz-executor state:D stack:24296 pid:12507 tgid:12507 ppid:1 task_flags:0x400140 flags:0x00004004 [ 530.487008][T15150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.503022][ T31] Call Trace: [ 530.508774][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 530.512091][T15150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.565989][T15150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.569357][ T31] __schedule+0x1190/0x5de0 [ 530.578066][T15150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.588551][T15150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.615785][T15150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.626273][ T31] ? stack_trace_snprint+0x71/0xd0 [ 530.626315][ T31] ? stack_depot_save_flags+0x29/0x9c0 [ 530.626349][ T31] ? __pfx___schedule+0x10/0x10 [ 530.626372][ T31] ? kasan_save_stack+0x33/0x60 [ 530.626398][ T31] ? kasan_record_aux_stack+0xa7/0xc0 [ 530.626430][ T31] ? __call_rcu_common.constprop.0+0xa5/0xa10 [ 530.626464][ T31] ? deactivate_locked_super+0x94/0x1a0 [ 530.626492][ T31] ? schedule+0x2d7/0x3a0 [ 530.626515][ T31] ? rcu_is_watching+0x12/0xc0 [ 530.754703][ T31] ? lock_release+0x201/0x2f0 [ 530.767885][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 530.775354][ T31] schedule+0xe7/0x3a0 [ 530.779473][ T31] schedule_preempt_disabled+0x13/0x30 [ 530.785993][ T31] __mutex_lock+0x81b/0x1060 [ 530.792265][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 530.797645][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 530.803070][ T31] ? net_generic+0xea/0x2a0 [ 530.807606][ T31] ? rcu_is_watching+0x12/0xc0 [ 530.814980][ T31] ? lock_release+0x201/0x2f0 [ 530.820268][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 530.825673][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 530.831550][ T31] nfsd_umount+0x48/0xe0 [ 530.835929][ T31] deactivate_locked_super+0xc1/0x1a0 [ 530.845274][ T31] deactivate_super+0xde/0x100 [ 530.850356][ T31] cleanup_mnt+0x225/0x450 [ 530.854913][ T31] task_work_run+0x14d/0x240 [ 530.859545][ T31] ? __pfx_task_work_run+0x10/0x10 [ 530.865301][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 530.871001][ T31] exit_to_user_mode_loop+0xeb/0x110 [ 530.876377][ T31] do_syscall_64+0x3f6/0x490 [ 530.881283][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.916892][ T31] RIP: 0033:0x7f2c1238ff17 [ 530.927002][ T31] RSP: 002b:00007ffe2e8a2958 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 531.000123][ T31] RAX: 0000000000000000 RBX: 00007f2c12411c05 RCX: 00007f2c1238ff17 [ 531.008185][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe2e8a3aa0 [ 531.039859][ T31] RBP: 00007ffe2e8a3a8c R08: 0000000000000000 R09: 0000000000000000 [ 531.049223][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe2e8a3aa0 [ 531.079849][ T31] R13: 00007f2c12411c05 R14: 000000000005dd98 R15: 00007ffe2e8a3ae0 [ 531.087933][ T31] [ 531.109979][ T31] INFO: task syz.3.1619:12895 blocked for more than 144 seconds. [ 531.117787][ T31] Not tainted syzkaller #0 [ 531.122855][ T5865] Bluetooth: hci13: command tx timeout [ 531.139790][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 531.159800][ T31] task:syz.3.1619 state:D stack:27456 pid:12895 tgid:12894 ppid:5854 task_flags:0x400140 flags:0x00004004 [ 531.183737][ T31] Call Trace: [ 531.187082][ T31] [ 531.190086][ T31] __schedule+0x1190/0x5de0 [ 531.194754][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 531.202238][ T31] ? stack_depot_save_flags+0x1/0x9c0 [ 531.207764][ T31] ? __pfx___schedule+0x10/0x10 [ 531.212727][ T31] ? netlink_rcv_skb+0x155/0x420 [ 531.217840][ T31] ? genl_rcv+0x28/0x40 [ 531.222078][ T31] ? netlink_unicast+0x5aa/0x870 [ 531.227466][ T31] ? ____sys_sendmsg+0xa95/0xc70 [ 531.232546][ T31] ? schedule+0x2d7/0x3a0 [ 531.237206][ T31] ? rcu_is_watching+0x12/0xc0 [ 531.242242][ T31] ? lock_release+0x201/0x2f0 [ 531.248278][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 531.254103][ T31] schedule+0xe7/0x3a0 [ 531.258183][ T31] schedule_preempt_disabled+0x13/0x30 [ 531.264063][ T31] __mutex_lock+0x81b/0x1060 [ 531.268698][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 531.274491][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 531.279522][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 531.285300][ T31] ? net_generic+0xea/0x2a0 [ 531.289878][ T31] ? rcu_is_watching+0x12/0xc0 [ 531.294674][ T31] ? lock_release+0x201/0x2f0 [ 531.299341][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 531.305179][ T31] nfsd_nl_threads_set_doit+0x687/0xbc0 [ 531.310813][ T31] genl_family_rcv_msg_doit+0x206/0x2f0 [ 531.316406][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 531.322506][ T31] ? rcu_is_watching+0x12/0xc0 [ 531.327281][ T31] ? bpf_lsm_capable+0x9/0x10 [ 531.332460][ T31] ? security_capable+0x7e/0x260 [ 531.337436][ T31] genl_rcv_msg+0x55c/0x800 [ 531.342236][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 531.347299][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 531.355022][ T31] netlink_rcv_skb+0x155/0x420 [ 531.359886][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 531.364942][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 531.370308][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 531.375614][ T31] genl_rcv+0x28/0x40 [ 531.379595][ T31] netlink_unicast+0x5aa/0x870 [ 531.384395][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 531.389690][ T31] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 531.395769][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 531.400587][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.405872][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 531.411999][ T31] ____sys_sendmsg+0xa95/0xc70 [ 531.416870][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 531.422398][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 531.427701][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 531.433391][ T31] ___sys_sendmsg+0x134/0x1d0 [ 531.438113][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 531.443552][ T31] ? futex_private_hash_put+0x11c/0x300 [ 531.449140][ T31] ? rcu_is_watching+0x12/0xc0 [ 531.455125][ T31] __sys_sendmsg+0x16d/0x220 [ 531.459790][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 531.464940][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 531.470146][ T31] do_syscall_64+0xcd/0x490 [ 531.474673][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.480613][ T31] RIP: 0033:0x7ff6af58ebe9 [ 531.485150][ T31] RSP: 002b:00007ff6b0377038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.493710][ T31] RAX: ffffffffffffffda RBX: 00007ff6af7b5fa0 RCX: 00007ff6af58ebe9 [ 531.501778][ T31] RDX: 0000000000040010 RSI: 00002000000000c0 RDI: 0000000000000007 [ 531.509862][ T31] RBP: 00007ff6af611e19 R08: 0000000000000000 R09: 0000000000000000 [ 531.518126][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.526233][ T31] R13: 00007ff6af7b6038 R14: 00007ff6af7b5fa0 R15: 00007ffd39ecdf48 [ 531.534650][ T31] [ 531.537698][ T31] INFO: task syz.1.1660:13057 blocked for more than 144 seconds. [ 531.569571][ T31] Not tainted syzkaller #0 [ 531.585632][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 531.595930][ T31] task:syz.1.1660 state:D stack:27264 pid:13057 tgid:13056 ppid:5857 task_flags:0x400140 flags:0x00004004 [ 531.613063][ T31] Call Trace: [ 531.616383][ T31] [ 531.619447][ T31] __schedule+0x1190/0x5de0 [ 531.625572][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 531.633820][ T31] ? stack_trace_save+0x8e/0xc0 [ 531.639972][ T31] ? stack_depot_save_flags+0x1/0x9c0 [ 531.645384][ T31] ? kfree_skbmem+0x1a4/0x1f0 [ 531.653113][ T31] ? __pfx___schedule+0x10/0x10 [ 531.661679][ T31] ? netlink_rcv_skb+0x155/0x420 [ 531.666658][ T31] ? genl_rcv+0x28/0x40 [ 531.673442][ T31] ? netlink_unicast+0x5aa/0x870 [ 531.678594][ T31] ? ____sys_sendmsg+0xa95/0xc70 [ 531.683600][ T31] ? schedule+0x2d7/0x3a0 [ 531.687969][ T31] ? rcu_is_watching+0x12/0xc0 [ 531.696119][ T31] ? lock_release+0x201/0x2f0 [ 531.702265][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 531.708026][ T31] schedule+0xe7/0x3a0 [ 531.714858][ T31] schedule_preempt_disabled+0x13/0x30 [ 531.724566][ T31] __mutex_lock+0x81b/0x1060 [ 531.729206][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 531.735328][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 531.742343][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 531.748314][ T31] ? net_generic+0xea/0x2a0 [ 531.753077][ T31] ? rcu_is_watching+0x12/0xc0 [ 531.757988][ T31] ? lock_release+0x201/0x2f0 [ 531.764074][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 531.769924][ T31] nfsd_nl_threads_set_doit+0x687/0xbc0 [ 531.775628][ T31] genl_family_rcv_msg_doit+0x206/0x2f0 [ 531.781520][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 531.787637][ T31] ? rcu_is_watching+0x12/0xc0 [ 531.792457][ T31] ? bpf_lsm_capable+0x9/0x10 [ 531.797174][ T31] ? security_capable+0x7e/0x260 [ 531.802436][ T31] genl_rcv_msg+0x55c/0x800 [ 531.806966][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 531.812072][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 531.818186][ T31] netlink_rcv_skb+0x155/0x420 [ 531.823083][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 531.828131][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 531.833580][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 531.838920][ T31] genl_rcv+0x28/0x40 [ 531.843371][ T31] netlink_unicast+0x5aa/0x870 [ 531.848169][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 531.853730][ T31] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 531.859805][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 531.865735][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.871141][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 531.877224][ T31] ____sys_sendmsg+0xa95/0xc70 [ 531.882061][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 531.887575][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 531.892908][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 531.898380][ T31] ? try_to_wake_up+0xa67/0x1870 [ 531.903688][ T31] ___sys_sendmsg+0x134/0x1d0 [ 531.908401][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 531.914348][ T31] ? futex_private_hash_put+0x11c/0x300 [ 531.920185][ T31] ? rcu_is_watching+0x12/0xc0 [ 531.924979][ T31] __sys_sendmsg+0x16d/0x220 [ 531.929930][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 531.935121][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 531.940120][ T31] do_syscall_64+0xcd/0x490 [ 531.945080][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.951076][ T31] RIP: 0033:0x7f8b0d98ebe9 [ 531.955658][ T31] RSP: 002b:00007f8b0e802038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.965291][ T31] RAX: ffffffffffffffda RBX: 00007f8b0dbb5fa0 RCX: 00007f8b0d98ebe9 [ 531.973367][ T31] RDX: 0000000000040010 RSI: 00002000000000c0 RDI: 0000000000000007 [ 531.981621][ T31] RBP: 00007f8b0da11e19 R08: 0000000000000000 R09: 0000000000000000 [ 531.989638][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.997876][ T31] R13: 00007f8b0dbb6038 R14: 00007f8b0dbb5fa0 R15: 00007ffc880c71c8 [ 532.005938][ T31] [ 532.009017][ T31] INFO: lockdep is turned off. [ 532.013867][ T31] NMI backtrace for cpu 1 [ 532.013886][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 532.013913][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 532.013928][ T31] Call Trace: [ 532.013937][ T31] [ 532.013946][ T31] dump_stack_lvl+0x116/0x1f0 [ 532.013978][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 532.013998][ T31] ? watchdog+0xd17/0x1260 [ 532.014031][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 532.014063][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 532.014088][ T31] watchdog+0xf0e/0x1260 [ 532.014122][ T31] ? __pfx_watchdog+0x10/0x10 [ 532.014150][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 532.014177][ T31] ? __kthread_parkme+0x19e/0x250 [ 532.014203][ T31] ? __pfx_watchdog+0x10/0x10 [ 532.014231][ T31] kthread+0x3c5/0x780 [ 532.014262][ T31] ? __pfx_kthread+0x10/0x10 [ 532.014292][ T31] ? rcu_is_watching+0x12/0xc0 [ 532.014317][ T31] ? __pfx_kthread+0x10/0x10 [ 532.014348][ T31] ret_from_fork+0x5d4/0x6f0 [ 532.014381][ T31] ? __pfx_kthread+0x10/0x10 [ 532.014413][ T31] ret_from_fork_asm+0x1a/0x30 [ 532.014446][ T31] [ 532.014458][ T31] Sending NMI from CPU 1 to CPUs 0: [ 532.139589][ C0] NMI backtrace for cpu 0 [ 532.139619][ C0] CPU: 0 UID: 0 PID: 15150 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 532.139649][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 532.139665][ C0] RIP: 0010:unwind_next_frame+0x1b/0x20a0 [ 532.139699][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 41 57 48 89 fa 41 56 48 c1 ea 03 41 55 <49> 89 fd 41 54 55 53 48 83 ec 38 0f b6 04 02 84 c0 74 08 3c 03 0f [ 532.139724][ C0] RSP: 0018:ffffc9000c1f76f8 EFLAGS: 00000a02 [ 532.139746][ C0] RAX: dffffc0000000000 RBX: ffffc9000c1f7718 RCX: ffffc9000c1f8001 [ 532.139761][ C0] RDX: 1ffff9200183eee3 RSI: ffffffff818418bd RDI: ffffc9000c1f7718 [ 532.139775][ C0] RBP: ffffc9000c1f77a8 R08: 0000000000000001 R09: 0000000000000000 [ 532.139788][ C0] R10: ffffc9000c1f7718 R11: 00000000000132da R12: ffffffff81a67470 [ 532.139803][ C0] R13: ffffc9000c1f77d8 R14: 0000000000000000 R15: ffff888031eada00 [ 532.139818][ C0] FS: 0000000000000000(0000) GS:ffff8881246c4000(0000) knlGS:0000000000000000 [ 532.139840][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 532.139856][ C0] CR2: 0000001b3060cff8 CR3: 000000000e380000 CR4: 00000000003526f0 [ 532.139874][ C0] Call Trace: [ 532.139882][ C0] [ 532.139892][ C0] arch_stack_walk+0x94/0x100 [ 532.139923][ C0] ? task_work_run+0x14d/0x240 [ 532.139968][ C0] stack_trace_save+0x8e/0xc0 [ 532.139995][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 532.140021][ C0] ? rcu_is_watching+0x12/0xc0 [ 532.140046][ C0] ? rcu_is_watching+0x12/0xc0 [ 532.140070][ C0] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 532.140111][ C0] save_stack+0x160/0x1f0 [ 532.140136][ C0] ? __pfx_save_stack+0x10/0x10 [ 532.140160][ C0] ? __page_table_check_zero+0x33c/0x5d0 [ 532.140189][ C0] ? __free_frozen_pages+0x7d5/0x10f0 [ 532.140213][ C0] ? vfree+0x1fd/0xb50 [ 532.140247][ C0] ? kcov_close+0x34/0x60 [ 532.140278][ C0] ? __fput+0x3ff/0xb70 [ 532.140309][ C0] ? task_work_run+0x14d/0x240 [ 532.140348][ C0] ? lock_release+0x201/0x2f0 [ 532.140378][ C0] ? rcu_read_lock_held+0x9/0x50 [ 532.140410][ C0] __reset_page_owner+0x84/0x1a0 [ 532.140438][ C0] __free_frozen_pages+0x7d5/0x10f0 [ 532.140466][ C0] vfree+0x1fd/0xb50 [ 532.140506][ C0] ? kcov_close+0x2b/0x60 [ 532.140537][ C0] ? rcu_is_watching+0x12/0xc0 [ 532.140562][ C0] ? rcu_is_watching+0x12/0xc0 [ 532.140586][ C0] ? trace_irq_enable.constprop.0+0xd4/0x120 [ 532.140624][ C0] ? __pfx_kcov_close+0x10/0x10 [ 532.140656][ C0] kcov_close+0x34/0x60 [ 532.140696][ C0] __fput+0x3ff/0xb70 [ 532.140729][ C0] ? cleanup_mnt+0x26b/0x450 [ 532.140754][ C0] task_work_run+0x14d/0x240 [ 532.140790][ C0] ? __pfx_task_work_run+0x10/0x10 [ 532.140830][ C0] do_exit+0x86f/0x2bf0 [ 532.140865][ C0] ? put_pid+0x1f/0x30 [ 532.140895][ C0] ? __pfx_do_exit+0x10/0x10 [ 532.140925][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 532.140962][ C0] ? get_signal+0x8f5/0x26d0 [ 532.140989][ C0] ? rcu_is_watching+0x12/0xc0 [ 532.141014][ C0] do_group_exit+0xd3/0x2a0 [ 532.141047][ C0] get_signal+0x2673/0x26d0 [ 532.141077][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 532.141105][ C0] ? __pfx_get_signal+0x10/0x10 [ 532.141137][ C0] arch_do_signal_or_restart+0x8f/0x790 [ 532.141169][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 532.141205][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 532.141239][ C0] ? dnotify_flush+0x79/0x4c0 [ 532.141272][ C0] exit_to_user_mode_loop+0x84/0x110 [ 532.141309][ C0] do_syscall_64+0x3f6/0x490 [ 532.141341][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.141366][ C0] RIP: 0033:0x7f2ddab90a7c [ 532.141384][ C0] Code: Unable to access opcode bytes at 0x7f2ddab90a52. [ 532.141395][ C0] RSP: 002b:00007ffc2ee69180 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 532.141418][ C0] RAX: 0000000000000064 RBX: 00007f2ddb8e4620 RCX: 00007f2ddab90a7c [ 532.141434][ C0] RDX: 0000000000000064 RSI: 00007f2ddb8e4670 RDI: 0000000000000003 [ 532.141450][ C0] RBP: 0000000000000000 R08: 00007ffc2ee691d4 R09: 000000000000000c [ 532.141465][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 532.141480][ C0] R13: 0000000000000000 R14: 00007f2ddb8e4670 R15: 0000000000000000 [ 532.141508][ C0] [ 532.142955][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 532.142974][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 532.143003][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 532.143018][ T31] Call Trace: [ 532.143027][ T31] [ 532.143036][ T31] dump_stack_lvl+0x3d/0x1f0 [ 532.143069][ T31] vpanic+0x6e8/0x7a0 [ 532.143102][ T31] ? __pfx_vpanic+0x10/0x10 [ 532.143134][ T31] ? __pfx___irq_work_queue_local+0x10/0x10 [ 532.143170][ T31] panic+0xca/0xd0 [ 532.143199][ T31] ? __pfx_panic+0x10/0x10 [ 532.143230][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 532.143262][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 532.143287][ T31] ? watchdog+0xd78/0x1260 [ 532.143318][ T31] ? watchdog+0xd6b/0x1260 [ 532.143349][ T31] watchdog+0xd89/0x1260 [ 532.143384][ T31] ? __pfx_watchdog+0x10/0x10 [ 532.143414][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 532.143443][ T31] ? __kthread_parkme+0x19e/0x250 [ 532.143472][ T31] ? __pfx_watchdog+0x10/0x10 [ 532.143502][ T31] kthread+0x3c5/0x780 [ 532.143534][ T31] ? __pfx_kthread+0x10/0x10 [ 532.143566][ T31] ? rcu_is_watching+0x12/0xc0 [ 532.143590][ T31] ? __pfx_kthread+0x10/0x10 [ 532.143622][ T31] ret_from_fork+0x5d4/0x6f0 [ 532.143655][ T31] ? __pfx_kthread+0x10/0x10 [ 532.143687][ T31] ret_from_fork_asm+0x1a/0x30 [ 532.143721][ T31] [ 532.694338][ T31] Kernel Offset: disabled [ 532.698672][ T31] Rebooting in 86400 seconds..