last executing test programs: 20m38.590365111s ago: executing program 2 (id=178): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(0x0, 0x22240, 0x55) mq_timedsend$auto(r0, &(0x7f00000000c0)='[\x00', 0x3, 0x2e, &(0x7f0000000100)={0x9}) socket(0xa, 0x1, 0x84) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r1, 0x540a, 0x0) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xffd8) getsockopt$auto(r0, 0x84, 0x7c, 0x0, &(0x7f0000000000)=0x7ffe) socket(0xa, 0x1, 0x84) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) open(0x0, 0x22240, 0x55) (async) mq_timedsend$auto(r0, &(0x7f00000000c0)='[\x00', 0x3, 0x2e, &(0x7f0000000100)={0x9}) (async) socket(0xa, 0x1, 0x84) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) (async) ioctl$auto_TCFLSH2(r1, 0x540a, 0x0) (async) io_uring_setup$auto(0x2, 0x0) (async) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x8) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) write$auto(0x3, 0x0, 0xffd8) (async) getsockopt$auto(r0, 0x84, 0x7c, 0x0, &(0x7f0000000000)=0x7ffe) (async) 20m37.816464797s ago: executing program 2 (id=181): setfsuid$auto(0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf25040000000a0016070000000400000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0x22c, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC_HINT={0x57, 0xc8, "96606e34a78656babd24a4bc0b7eb06bb03477ce9f6c4d112b8b85000fe7851f3cc8be31f00ca437440183a632ecaf4b4f6ab6778bafba7e6890b4ba16a4d73b8d527d79d397944c5043df3b5c5efe54a9a6c1"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_REG_ALPHA2={0x4c, 0x21, "c4a176b3d0f1bd36ddd48e76dbb392d74a391de409f6ad05e29be012d007e64101b7250db076208e23ef2bce1b3cc0125ac84ce9f8d7d94caac904be16e99943b677eeae92561c4b"}, @NL80211_ATTR_MBSSID_CONFIG={0x14, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r3}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}]}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0xac, 0x125, "de246fb1b34cb74ebc59ea69f0b5dcfc3a0ac375211c29c755c625912c91fdb659638b5264faae1c718e11f0a4afd4455b6f5ccc4d3dbb468c2fe74542e8d83c723f934002762042d8d1ec4194e33b927041dc896beee1763a975454edc6750e04e91f4d01076c9cf1867db51a3e27e183c0cd45929c3f25b361fe9839a0723665807c615f04a46558409e47e974925c84181c80be74cc71321fa742f5c2bd64c2e352b8e58d37a5"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x3}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x9c, 0x7d, 0x0, 0x1, [@generic="f2dbfb723021c4a30958d1b40e4fc3e71b86dec3bb3b0b7ff4b740bff3c729ef5e71908d1142972d49a5965dd5483d993a5fbdc1ddfc18583e3f808463fbb7136d25c47943f0adb857269714072205458a757c2a94143f42833841b1bff4377627306251747531cf4d0d774c4107a661b266120d67cd82eeee0a504b88a6fb0dc6b54b05bcd447206723b4b79532ec2e", @typed={0x8, 0x113, 0x0, 0x0, @fd=r1}]}]}, 0x22c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) unshare$auto(0x200) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) recvmsg$auto(r4, &(0x7f00000005c0)={&(0x7f00000002c0), 0x8, &(0x7f00000004c0)={&(0x7f00000003c0)="444debcb5d4827b41b873d646e2663fb2d4aa24da78f4b3472bd8daf8c57304fe5302fe1869cfca458a5a39bd4006710640f6032088c509f0c082c1b04896afe04d524b8b80ce2949dae1a1d2bec705c343bc92a41212ae3ed0a036e67d0c6d7b35e6cb8956ef9b289a7e42615af9f0470dc70d3deea952a1d85a1a845530a190757f55d6e53993d1e8f22b49f44b8a5b9b989d8ed44e1a1f0002bb9f9c8813bee34cfb9b329b8b45794054ee04fdb17a945013b532f53854704c99cc8f02c1582b9", 0x3}, 0xd3, 0x0, 0xc, 0xffffffff}, 0xfffffff7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x3, 0xffffffffffff0005, 0xa) madvise$auto(0x0, 0x2003f2, 0x15) r6 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r6, 0x1, &(0x7f0000000000)="140400000000000037") 20m32.344786236s ago: executing program 2 (id=190): unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000980), r0) unshare$auto(0x9) r1 = prctl$auto(0x3e, 0x1, 0xffffffffffffffff, 0x1, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r1) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/softirqs\x00', 0x4063c2, 0x0) r3 = socket(0x11, 0xa, 0x300) getsockname$auto(r3, 0x0, &(0x7f00000009c0)=0x5) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r4, 0x0, 0xc801) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0x9e24, 0x0}) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getpid() gettid() statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x36, 0x67f, 0x1ffde, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0xd8, 0x4, 0x1cd7, 0x1000, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040084}, 0x8040) 20m28.914726257s ago: executing program 2 (id=195): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r0, 0x40085507, &(0x7f00000002c0)={0xf, 0x4a, 0x1000, "19bbeb0dfc7a191e843c51a6caba3616e0ac3b4392cb30cb2892cca1dcc206cc69bf24bda05d4ec3ed1b3f37bf2818ba9f8c87bde99cceb2197193d3c5bb8e90311f0489198ff5082371481b3d8587bc7bf3ba98c796ae8da6c54d653a6684737a6b35cb07f90b96505f38bd7a612b90836ca65a8070cc39b0f0b7adbfb770a89c133c52d8ff1dfff61a4c01783d115930addbe23b45b74c31e796642ef230da84e1d5ae75dbb483e5d76d27e5baf82584a4de2540f05796f03a3bc242d0be8c6a4e4192ea5d3f98749e2980b853afb75bc22af8d3e94c1952fba55a341e0c6088a1be203d587fa741abf70afe966f9cdfab8017"}) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$auto_SNDCTL_TMR_START(r1, 0x5402, 0x0) mmap$auto(0x3fffffffff, 0x7fb, 0x800000000000fff, 0x8000000008010, r0, 0xfffffffffffffffc) socket(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000002f80), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[@ANYBLOB='F\x00\x00\x00', @ANYBLOB="2afb7587ed966305a0c5bb5f2e1b25ec184d822690630f4b86a357b1fad3b1b80175f3fda86cefcc58ce96d62b6a940117288d8a8c753c7adcde702f5a8a3d6d9ed8b663bb8e4159ceea338cb866e06755289198f978ce3b1aa1db9fadccccfd4198070d498187cd14becd6b8d786e9a1cc6630dd5d4aeacf001466c7355596fcfd3ad9af6a3956c7a13390d965dc4f9cbc94756b5810fdee085f2a9568d9f52fe84cc361e9a6451ac8837e91378401432fc0f93f6ca126b41afd14d5742b9580372240b5fae2d83380e86a2bd102169cc19fd4fe6596d2f4af3c7ae32b525e7da5d4e", @ANYBLOB="05002bbd7000fddbdf250000000008000100050000000800020001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'tunl0\x00', 0x0}) r5 = socket(0x2, 0x3, 0x2) getsockopt$auto_SO_SNDBUF(r5, 0x0, 0x7, 0x0, &(0x7f0000000100)) keyctl$auto(0x17, 0x4, 0x7fffffffefff, 0x400, 0x0) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@qipcrtr={0x2a, 0x1}, 0x22) bpf$auto(0xfffffffd, &(0x7f0000000000)=@query={@target_ifindex=r4, 0xa0f, 0x10000, 0x8, 0x84f, @prog_cnt=0x7, 0x0, 0x7, 0x2, 0x7fff, 0xaf}, 0xa3) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r7 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x7ffffffff000, 0x7fffffffeffb, 0x2, 0x8e0, 0x300, 0x50b301a, 0xe4, 0x2c, 0x4, 0x5}) write$auto_ocfs2_control_fops_stack_user(r6, &(0x7f0000003900)='\t', 0x1) openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci2/force_suspend\x00', 0x80800, 0x0) lseek$auto(0x3, 0x8, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) setsockopt$auto(0x4, 0x88, 0x68, &(0x7f0000000000)='!/*\x19(*\'\x00', 0xe) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/virtio_mmio/parameters/device\x00', 0x80480, 0x0) getpid() read$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f00000003c0)=""/4096, 0x1000) 20m28.248023088s ago: executing program 2 (id=198): mmap$auto(0x0, 0x1000000000000004, 0x9, 0x91, 0xffffffffffffffff, 0x300000000000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0xa, 0x1, 0x100) (async) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) (async) r2 = prctl$auto(0x801, 0x1, 0x0, 0x3, 0xfffffffffffffffb) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) (async) socket(0x22, 0x2, 0x2) (async) setsockopt$auto(0x7, 0x114, 0x3, 0xffffffffffffffff, 0xa0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0xdb3, 0xdf, 0xeb1, 0x401, 0x8000) (async) socket(0x11, 0x3, 0x9) (async) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) (async, rerun: 32) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000000), 0x8, &(0x7f0000000100)={&(0x7f0000000200)="4c03000200000029", 0x7f}, 0x5, &(0x7f0000000700), 0x800005, 0x1}, 0x5}, 0x2, 0x87e7) (rerun: 32) r3 = openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080), 0x109c41, 0x0) write$auto(r3, 0x0, 0x5) (async) read$auto(r2, 0x0, 0xe8) (async, rerun: 64) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) (rerun: 64) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async, rerun: 32) r5 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ubifs/chk_index\x00', 0x141c80, 0x0) (rerun: 32) read$auto_dfs_global_fops_debug(r5, 0x0, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async) tkill$auto(0x1, 0x7) 20m25.45476853s ago: executing program 2 (id=206): setfsuid$auto(0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf25040000000a0016070000000400000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0x254, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC_HINT={0x80, 0xc8, "96606e34a78656babd24a4bc0b7eb06bb03477ce9f6c4d112b8b85000fe7851f3cc8be31f00ca437440183a632ecaf4b4f6ab6778bafba7e6890b4ba16a4d73b8d527d79d397944c5043df3b5c5efe54a9a6c1ee236a680e6a9770386401766e8250ef97efa1ea700862c21e3b947bfede6fe09cb62d7f4b493d2cbb"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_REG_ALPHA2={0x4c, 0x21, "c4a176b3d0f1bd36ddd48e76dbb392d74a391de409f6ad05e29be012d007e64101b7250db076208e23ef2bce1b3cc0125ac84ce9f8d7d94caac904be16e99943b677eeae92561c4b"}, @NL80211_ATTR_MBSSID_CONFIG={0x14, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r3}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}]}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0xac, 0x125, "de246fb1b34cb74ebc59ea69f0b5dcfc3a0ac375211c29c755c625912c91fdb659638b5264faae1c718e11f0a4afd4455b6f5ccc4d3dbb468c2fe74542e8d83c723f934002762042d8d1ec4194e33b927041dc896beee1763a975454edc6750e04e91f4d01076c9cf1867db51a3e27e183c0cd45929c3f25b361fe9839a0723665807c615f04a46558409e47e974925c84181c80be74cc71321fa742f5c2bd64c2e352b8e58d37a5"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x3}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x9c, 0x7d, 0x0, 0x1, [@generic="f2dbfb723021c4a30958d1b40e4fc3e71b86dec3bb3b0b7ff4b740bff3c729ef5e71908d1142972d49a5965dd5483d993a5fbdc1ddfc18583e3f808463fbb7136d25c47943f0adb857269714072205458a757c2a94143f42833841b1bff4377627306251747531cf4d0d774c4107a661b266120d67cd82eeee0a504b88a6fb0dc6b54b05bcd447206723b4b79532ec2e", @typed={0x8, 0x113, 0x0, 0x0, @fd=r1}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) unshare$auto(0x200) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) recvmsg$auto(r4, &(0x7f00000005c0)={&(0x7f00000002c0), 0x8, &(0x7f00000004c0)={&(0x7f00000003c0)="444debcb5d4827b41b873d646e2663fb2d4aa24da78f4b3472bd8daf8c57304fe5302fe1869cfca458a5a39bd4006710640f6032088c509f0c082c1b04896afe04d524b8b80ce2949dae1a1d2bec705c343bc92a41212ae3ed0a036e67d0c6d7b35e6cb8956ef9b289a7e42615af9f0470dc70d3deea952a1d85a1a845530a190757f55d6e53993d1e8f22b49f44b8a5b9b989d8ed44e1a1f0002bb9f9c8813bee34cfb9b329b8b45794054ee04fdb17a945013b532f53854704c99cc8f02c1582b9", 0x3}, 0xd3, 0x0, 0xc, 0xffffffff}, 0xfffffff7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x3, 0xffffffffffff0005, 0xa) madvise$auto(0x0, 0x2003f2, 0x15) r6 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r6, 0x1, &(0x7f0000000000)="140400000000000037") 20m24.536798951s ago: executing program 32 (id=206): setfsuid$auto(0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf25040000000a0016070000000400000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)={0x254, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC_HINT={0x80, 0xc8, "96606e34a78656babd24a4bc0b7eb06bb03477ce9f6c4d112b8b85000fe7851f3cc8be31f00ca437440183a632ecaf4b4f6ab6778bafba7e6890b4ba16a4d73b8d527d79d397944c5043df3b5c5efe54a9a6c1ee236a680e6a9770386401766e8250ef97efa1ea700862c21e3b947bfede6fe09cb62d7f4b493d2cbb"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_REG_ALPHA2={0x4c, 0x21, "c4a176b3d0f1bd36ddd48e76dbb392d74a391de409f6ad05e29be012d007e64101b7250db076208e23ef2bce1b3cc0125ac84ce9f8d7d94caac904be16e99943b677eeae92561c4b"}, @NL80211_ATTR_MBSSID_CONFIG={0x14, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r3}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}]}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0xac, 0x125, "de246fb1b34cb74ebc59ea69f0b5dcfc3a0ac375211c29c755c625912c91fdb659638b5264faae1c718e11f0a4afd4455b6f5ccc4d3dbb468c2fe74542e8d83c723f934002762042d8d1ec4194e33b927041dc896beee1763a975454edc6750e04e91f4d01076c9cf1867db51a3e27e183c0cd45929c3f25b361fe9839a0723665807c615f04a46558409e47e974925c84181c80be74cc71321fa742f5c2bd64c2e352b8e58d37a5"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x3}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x9c, 0x7d, 0x0, 0x1, [@generic="f2dbfb723021c4a30958d1b40e4fc3e71b86dec3bb3b0b7ff4b740bff3c729ef5e71908d1142972d49a5965dd5483d993a5fbdc1ddfc18583e3f808463fbb7136d25c47943f0adb857269714072205458a757c2a94143f42833841b1bff4377627306251747531cf4d0d774c4107a661b266120d67cd82eeee0a504b88a6fb0dc6b54b05bcd447206723b4b79532ec2e", @typed={0x8, 0x113, 0x0, 0x0, @fd=r1}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) unshare$auto(0x200) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) recvmsg$auto(r4, &(0x7f00000005c0)={&(0x7f00000002c0), 0x8, &(0x7f00000004c0)={&(0x7f00000003c0)="444debcb5d4827b41b873d646e2663fb2d4aa24da78f4b3472bd8daf8c57304fe5302fe1869cfca458a5a39bd4006710640f6032088c509f0c082c1b04896afe04d524b8b80ce2949dae1a1d2bec705c343bc92a41212ae3ed0a036e67d0c6d7b35e6cb8956ef9b289a7e42615af9f0470dc70d3deea952a1d85a1a845530a190757f55d6e53993d1e8f22b49f44b8a5b9b989d8ed44e1a1f0002bb9f9c8813bee34cfb9b329b8b45794054ee04fdb17a945013b532f53854704c99cc8f02c1582b9", 0x3}, 0xd3, 0x0, 0xc, 0xffffffff}, 0xfffffff7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x3, 0xffffffffffff0005, 0xa) madvise$auto(0x0, 0x2003f2, 0x15) r6 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r6, 0x1, &(0x7f0000000000)="140400000000000037") 2m37.313080287s ago: executing program 1 (id=3050): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0xf, 0x8972562, 0x2000000, 0x0) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x8a403, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) getpid() close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mseal$auto(0x0, 0x7dda, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x80000, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0xa0fc, 0x800000020009, 0x10000000000e1, 0x10, r2, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x3550c0, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4090ae82, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x40ae00, 0x0) 2m36.133345851s ago: executing program 1 (id=3053): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) write$auto(r1, &(0x7f00000004c0)='\x00\x00\x00\x00\x00\x00\x00\x00 \xec(\x1d\x98\xe9\xc4\xc6\xe8\xfc@6=\xab\xdc\x19\xffv\'\xd5\x14\x06S\xae\xadB}\xdf]\x99\xc9\x9f4\xbb\xc5\x81\x9d\x12\xd9Q>y9-\xbc\x8bA\xf7\xa5\xce\x97A\x8ak\xdeB\xcbd\xb4\x05\xe4U\x84\xcb\xb8#\x13\nYU\'\x95R\xc8\x9d\xb7*\xe0.\xd2\xdf\x1b\x88D\x8c{k\xcec\xe1\xa2j\b\x00\xd2\x98\x94I\x102h\x06\x8c\xa2\xc8^\x8a7\xb7t\x13\xf6\x8e\xcf\xabI\xb8\x16\\\x00\x00\x00\x00\x00\xda\xec\'\xef\xef\xf7\x877\xd7`\xbb\xb5\x8f2%\xee\x9d>\xf1\xad\xbd\x12\x9e\x0e\x19B\xd5\xce\x0f\x1a0\xe9\xbf\x94\x9b\xf5W\xc2\x88\xbd\x85\xeeJ\v1\x9c\xa5\xbd*\xeboe\xed\xf4\x81Rk\xf0OK)\x94\x92;\xfdg\"\xe7\x0e\x94|\x1c\'<\xfc\xb5y\xd6\x12\x9f\xbe\x0f=\xa9\x95&W\xa1\x11\xde\x12\x8f\xc5\x17rk\x8c\xd4H\xbe\a\vZ#H\xb9%\xd2\x97\x9f\xfa\xaa\xd7\xce\xe0\xe7\t\xbd\xe1\x01\x04Q\xfb\x03f\xcb{\xbd\xf2,\x82\xeb!\xb8q}A\x829\x15\xb7\x86\xb8\x15\xd4K\x94\x86\x90WP\xb8\xb1\"\x89z\xfd', 0x7ef) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82040, 0x0) r4 = socket(0xa, 0x1, 0x100) r5 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r5, 0x0, 0x7ff, 0x400) close_range$auto(r4, r0, 0x22) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1]}, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x2, 0x8, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010b27bd7000fcdbdf250500000008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000084) 2m34.851508398s ago: executing program 1 (id=3060): madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4048000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) pipe$auto(&(0x7f0000001480)) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000440), 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x81a4, 0xf) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x283f4, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040010}, 0xc0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/bdi/43:352/wb_stats\x00', 0x3c240, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0x100085) 2m33.958624377s ago: executing program 1 (id=3063): truncate$auto(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x6) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy7/queues\x00', 0x20000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f000000b000), 0x80, 0x0) pread64$auto(r0, &(0x7f000000b040)='\x00', 0x7, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) write$auto(0x3, 0x0, 0x17) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xd) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) getpid() mlockall$auto(0x5) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x4) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x100, 0x0) ioctl$auto_TIOCVHANGUP(r2, 0x5437, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0xa, 0x300) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x400, 0x7) 2m33.660547141s ago: executing program 0 (id=3064): openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_OSS_GETVERSION2(r0, 0x80044d76, &(0x7f00000001c0)) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop12\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={"ef65ce7cb454168d6c0000000000002713df81000000ffffffffffffff2900", 0x3ff, 0x402, 0xffc, 0x400004, 0x200000000040000d, 0x0}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) prctl$auto(0x41, 0x7, r2, 0x0, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) r3 = socket(0xf, 0x3, 0x2) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x200003e, 0x1, r2, 0x1, 0xffffffffffffff80) r5 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x202, 0x3, 0xfff, 0x1, 0x948b, 0x8, 0x95f4da2d, 0x7fffffffffffffff, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0x0, 0x7, 0x5]}, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xe1, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x11, 0x80003, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'gretap0\x00', 0x0}) sendto$auto(0x3, 0x0, 0x34, 0xfffffff9, &(0x7f0000000440)=@xdp={0x2c, 0xdd86, r7, 0x10}, 0x22) mmap$auto(0x4, 0x400008, 0x3, 0x9b72, r5, 0x8000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1fb, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x9, 0xfffffffffffffffb, 0x3, 0x7, 0x63, 0x80000021, 0x4, 0x6d3e, 0x7fff, 0x2, 0x6]}, 0x0) socket(0x1d, 0x2, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/pcrypt/pencrypt/serial_cpumask\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000040)=',\x00^\xa2\x02\x00\x05\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xb2s\x83\xbd\xc5_%\xc1\xa3\xd0\x95Hq\xf4zG\x01[{\x17\x05I\xe0\xb1d)\x06z8L\xe6&[\xa9X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2\xec\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a', 0x1004) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) 2m32.640711435s ago: executing program 0 (id=3065): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) prctl$auto(0x16, 0x1, 0x0, 0x7fffffff, 0x4) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x810008, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x200000008000) r1 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$auto_mISDN_fops_timerdev(r1, &(0x7f0000001500)=""/4123, 0x101b) ioctl$auto_IMADDTIMER(r1, 0x80044940, 0x0) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x400801, 0x0) mmap$auto(0x0, 0x2020009, 0xfa06, 0x19, 0xfffffffffffffffa, 0x8001) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) ioctl$auto_VHOST_SET_BACKEND_FEATURES(0xffffffffffffffff, 0x4008af25, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, r2, 0x4b4a) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x48c041, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/dev/audio1\x00\x9aTf)<\xf3#\xa7\xec~\xa9F\xe3\x00\x9d\xdf=O\xccI=\xc21O\xe5\x14\x89\xed}B\x80\x8a\xeaA', 0x8) mmap$auto(0x4, 0x20040009, 0x2000000000e6, 0x13, 0xffffffffffffffff, 0x10081) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r3 = socket(0x23, 0x5, 0x0) bind$auto(r3, &(0x7f0000000140)=@llc={0x1a, 0x320, 0x8, 0x3, 0x1, 0x1, @remote}, 0x80) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) ioctl$auto_FIONREAD(0xffffffffffffffff, 0x541b, 0x2) socket(0xf, 0xa, 0x5) connect$auto(0x3, &(0x7f0000000080)=@can, 0xc9b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r3, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x0, 0x0) 2m31.587559325s ago: executing program 1 (id=3077): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(r0, 0x0, 0x1000e6e) socket(0x15, 0x5, 0x0) prctl$auto(0x41555856, 0x4, 0x2008, 0x0, 0xc0d) epoll_pwait2$auto(0x3, 0x0, 0x4, 0x0, 0x0, 0x7ff6) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x400000], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2800, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) ioctl$auto_BLKSECDISCARD(0xffffffffffffffff, 0x127d, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_METER_CMD_SET(r3, 0x0, 0x40) r4 = open(0x0, 0x22240, 0x154) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000038, 0x0) fsopen$auto(0x0, 0x1) execveat$auto(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rename$auto(&(0x7f0000000000)='./file0\x00', 0x0) unshare$auto(0x40000080) r5 = epoll_create$auto(0x8) epoll_ctl$auto(r5, 0x1, 0x8000000000000000, 0x0) 2m30.849063548s ago: executing program 1 (id=3071): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) ppoll$auto(0x0, 0x100, 0x0, 0x0, 0x8) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x74, 0x0, 0x0) socket(0x2c, 0x1, 0x3) socket(0xa, 0x2, 0x3a) mmap$auto(0x1f00, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r3, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 2m29.616164001s ago: executing program 0 (id=3073): unshare$auto(0x40000080) r0 = open(&(0x7f00000001c0)='./cgroup\x00', 0x80400, 0x42) open_by_handle_at$auto(r0, &(0x7f0000000040)={0x2, 0x2, "0200"}, 0x3ffff) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/bond0/bonding/primary_reselect\x00', 0x1e2142, 0x0) sendfile$auto(r1, r1, 0x0, 0x7fff) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x10, 0x0, [{0x48b, 0x400, 0x9}]}) ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x4c06, 0x0) socket(0x1b, 0x3, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r4, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000002c0), r6) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7027fedbcf25224d0d00000c0003000600000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20040880}, 0x20000800) readv$auto(0x3, 0x0, 0x1) mmap$auto(0xf728, 0x8000000000000, 0xfffffffffffffffe, 0x11, r7, 0x1) socket(0x5, 0xa, 0x2000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) 2m27.010539868s ago: executing program 0 (id=3080): io_setup$auto(0xaa3, &(0x7f0000000000)) (async) io_setup$auto(0x7, &(0x7f0000000040)=0x9) (async) madvise$auto(0x3, 0x0, 0x1a) (async) mmap$auto(0x1, 0x9, 0x8, 0x16, 0xffffffffffffffff, 0x6686) (async) r0 = openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000080), 0x210302, 0x0) write$auto(r0, &(0x7f00000000c0)='\x00', 0x4) (async) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000100)="120fd5eca4f842d165a5c830f6bc6cac4851477db0b2ec2db1a79e90717eeec1e60dc6bf4783a089dd200929c03ea8259944c8f11fc99fd5619ebaf9f76e2df1414063c351896cc6132c9ae332def2867b3590c628fba0af635295714af9a76d3e50d0e27827f291aa5dc756ff334a3e2104c52a03dc354f1de922be7c72b81adc8ce592d1d65188ce26c4967e64fd2e1f52324626dc68f10944602f02", 0x401) (async) mmap$auto(0xffffffff, 0x800, 0xffffffffffffffff, 0x12, r0, 0x4) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/nr14/addr_assign_type\x00', 0x40, 0x0) (async) io_setup$auto(0x8, &(0x7f0000000200)=0x5b) r2 = waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000240)={@_si_pad}, 0xe7, &(0x7f00000002c0)={{0x400, 0x35}, {0xfff, 0x8000000000000001}, 0x0, 0x4, 0x5, 0x1, 0xffffffffffffffff, 0xffff, 0xffffffff, 0xffffffff, 0x6b9d, 0x5, 0x5, 0x1, 0x10000, 0x4}) rt_sigqueueinfo$auto(r2, 0x3, &(0x7f0000000380)={@_si_pad}) (async) io_uring_register$auto_IORING_REGISTER_SEND_MSG_RING(r1, 0x1f, &(0x7f0000000400)="459efa2371035a6ad5e56091ab6ce5b10daea8f820d56dded08257edd6e3dbbc354d9c8bcf78ceacb9cb6f516a24f8666a21c83707fcad27b1c31c2e1c7e7ae382dbb53c7e278881366a9d5d3496b69bb8d099ea28b438ff005317f4fa45cd058b95c571e8bc4615bc25dedf1913d6f584e422dc1695699617c9e2de2ae907fc8bb6b936", 0x4) io_setup$auto(0x1711, &(0x7f00000004c0)=0x100000001) (async) r3 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000500)='/proc/self/gid_map\x00', 0x500, 0x0) getsockopt$auto_SO_MAX_PACING_RATE(r0, 0x8, 0x2f, &(0x7f0000000540)='!$(\x00', &(0x7f0000000580)=0x3) (async) rt_sigtimedwait$auto(&(0x7f00000005c0)={0x9}, &(0x7f0000000600)={@_si_pad}, &(0x7f0000000680)={0x3, 0xa}, 0x8) (async) io_setup$auto(0x40, &(0x7f00000006c0)=0x60000000) (async) ioctl$auto(r0, 0x80000000, r3) (async) capset$auto(&(0x7f0000000700)={0x8, r2}, &(0x7f0000000740)={0x401, 0x400, 0xfff}) rt_tgsigqueueinfo$auto(r4, r2, 0x9, &(0x7f0000000780)={@_si_pad}) r5 = prctl$auto(0x5, 0xe, r4, 0x1, 0x40) ioctl$auto_SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000800)={0x5, 0x7, 0x9, 0x8, 0x4, 0x8, 0x5, 0x7, 0x80, 0x6, 0xfffffff9, 0xfffffffb, "6b013750be130adeacdde94d6c4d97fab451afde78a0b2833f93602db6384e6d09b45f505c9dbeb096d571ed70c346888eb6321f56c402ea"}) (async) io_setup$auto(0xfffff000, &(0x7f00000008c0)=0x3) (async) r6 = mq_open$auto(&(0x7f0000000900)='/sys/devices/virtual/net/nr14/addr_assign_type\x00', 0xb, 0x1, &(0x7f0000000940)={0x4, 0x7, 0x44d, 0x7fff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_STATION(r7, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10c040}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x9c, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}, @NL80211_ATTR_QOS_MAP={0x80, 0xc7, "9e67bce36e18b9deef876d9d65c841f7e22be1e2a4db2019e5ecbc0d97f6ef0db8c6583bcff978f1ef25d393b06bbf0088fcbc072e2b61997594a956cf808ce3b0b508a2445cd29918a87fe9d4d4ba0c9510c2d659fbc0979f98eeec76e3a3c9d591224c6ca1afeeaf967de3043677f42750a643725e2c4c23c73645"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000020}, 0x40000) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000b00), r5) (async) openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f0000000b40), 0x4001, 0x0) (async) ioctl$auto_TUNSETOWNER(r6, 0x400454cc, &(0x7f0000000b80)=0x1ff) 2m26.748893594s ago: executing program 0 (id=3083): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyrd\x00', 0x4000, 0x0) read$auto(r0, 0x0, 0x42) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa}, 0x58) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000000e, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x1, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0x8000) sendfile$auto(0x1, r1, 0x0, 0xc01) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/018/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x2, 0xc, 0x0, 0x7fb, 0x0}) mmap$auto(0x0, 0x38, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) quotactl_fd$auto(0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) setpgid$auto(0x0, 0x0) getdents64$auto(0xffffffffffffffff, 0x0, 0x400) ioctl$auto_VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) r4 = getpgrp(0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000400)=ANY=[@ANYBLOB="b0060000", @ANYRES16=0x0, @ANYRES32=r4, @ANYRES32=0x0, @ANYRES16=r2, @ANYRESOCT=r1, @ANYBLOB="86510cc3cd6061314b76cbd6296368756c76b9ca04ee400ef60888333e463068c9b4fb5a306fcfc811d2acfc4e97f7a7def51eb46114cd73b200c9ca0400ee80040020807616a11c5caead23f3dee800cb055671bfd8bb5bb3518624683921f92f8f4919a883df0810815e9f9633c58a19589c2e9e43c8fe35aa33f0f4918d45bdca54f9840e0933e8bc8db6f8e367e142f30000000000120001007a069ca08a588fc06709fa692e8f0000040008001200010042dd1c1c56771367e93a1777e1ab0000"], 0x694}}, 0x4800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) read$auto(0x3, 0x0, 0x1f40) read$auto(0x3, 0x0, 0x1f40) 2m25.672626127s ago: executing program 0 (id=3088): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="030527bd7000ffdbdf25040000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="e79a0053cf81965438d80fe3215b633fe7ddbfc35bb30c25de59653fcd100af0a110c1035f000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) socket(0x23, 0x800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0xe, 0x2, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x5, 0x0, 0x7, 0x4, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000c80), r1) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) write$auto_proc_pid_attr_operations_base(r3, &(0x7f0000000ec0)='9', 0x1) getsockopt$auto_SO_PASSCRED(r3, 0x7, 0x10, 0x0, &(0x7f0000000d00)=0x1fe) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, 0x0, 0x80, 0x0) sysfs$auto(0x2, 0x4, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) fanotify_init$auto(0x602, 0x1) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0x0, 0xe) setrlimit$auto(0x1000000007, 0x0) arch_prctl$auto(0x5002, 0x1) 2m17.360953261s ago: executing program 4 (id=3110): madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4048000) mmap$auto(0x320467fd, 0x10e986, 0xdf, 0xeb1, 0x401, 0x200000000000003) close_range$auto(0x2, 0x8, 0x0) pipe$auto(&(0x7f0000001480)) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000440), 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x3, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x81a4, 0xf) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x283f4, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040010}, 0xc0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/bdi/43:352/wb_stats\x00', 0x3c240, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0x100085) 2m16.43046167s ago: executing program 4 (id=3112): mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) mmap$auto(0x0, 0x200005, 0x4, 0x16, 0x602, 0x2fffffffdffd) mremap$auto(0x200000, 0x7, 0x3fd6, 0x3, 0x20000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x42, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0xd25, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [0x0, 0x3ff], {0x6, 0x9, 0x8c48, 0x29b, 0x3, 0x400007f, 0x0, 0x6}, {0xf, 0x1, 0x52, 0x85, 0x4, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) socket(0x1d, 0x3, 0x1) bind$auto(r2, &(0x7f0000000040)=@ax25={0x3, @bcast, 0x4}, 0x6a) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) ioperm$auto(0x7, 0x5ad2, 0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x14140, 0x0) r4 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) pread64$auto(r4, 0x0, 0x7ff, 0x400) socket(0x21, 0x3, 0x9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0xc, 0x3, 0x4, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) ioctl$auto_tracing_buffers_fops_trace(r3, 0x5220, 0x0) poll$auto(&(0x7f0000000040)={r1, 0x1, 0x40}, 0x8, 0x8000) socket(0xa, 0x1, 0x100) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_OTPSELECT(0xffffffffffffffff, 0x80044d0d, &(0x7f00000000c0)=0x10009) socket(0x2, 0x1, 0x20) shutdown$auto(0x200000003, 0x2) 2m15.218232672s ago: executing program 33 (id=3071): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) ppoll$auto(0x0, 0x100, 0x0, 0x0, 0x8) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x74, 0x0, 0x0) socket(0x2c, 0x1, 0x3) socket(0xa, 0x2, 0x3a) mmap$auto(0x1f00, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r3, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 2m15.199068547s ago: executing program 4 (id=3117): madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4048000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) pipe$auto(&(0x7f0000001480)) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000440), 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x81a4, 0xf) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x283f4, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040010}, 0xc0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/bdi/43:352/wb_stats\x00', 0x3c240, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0x100085) 2m14.133275326s ago: executing program 4 (id=3120): openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_OSS_GETVERSION2(r0, 0x80044d76, &(0x7f00000001c0)) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x600200, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={"ef65ce7cb454168d680000000000002713db81000000ffffffffffffff2900", 0x3ff, 0x402, 0xffc, 0x400004, 0x200000000040000d, 0x0}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0x10, 0x3, 0x4e) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x200003e, 0x1, r2, 0x1, 0xffffffffffffff80) r5 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x202, 0x3, 0xfff, 0x1, 0x948b, 0x8, 0x95f4da2d, 0x7fffffffffffffff, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0x0, 0x7, 0x5]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x4, 0x400008, 0x3, 0x9b72, r5, 0x8000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1fb, 0x6, 0x1, 0xfffffffffffffff7, 0x948b, 0x9, 0xfffffffffffffffb, 0x3, 0x7, 0x63, 0x80000021, 0x2405, 0x3, 0x7fff, 0x2, 0x6]}, 0x0) socket(0x1d, 0x2, 0x3) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/pcrypt/pencrypt/serial_cpumask\x00', 0xa001, 0x0) futimesat$auto(r4, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)={0x500000000, 0x7}) write$auto(r6, &(0x7f0000000040)=',\x00^\xa2\x02\x00\x05\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xb2s\x83\xbd\xc5_%\xc1\xa3\xd0\x95Hq\xf4zG\x01[{\x17\x05I\xe0\xb1d)\x06z8L\xe6&[\xa9X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2\xec\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a', 0x1000) r7 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000000240)={0x2, 0x6b7f, 0x9, 0x8}) madvise$auto(0x110c230000, 0x8031ca, 0x9) r8 = socket$nl_generic(0x10, 0x3, 0x10) read$auto(r8, &(0x7f000000be80)='batadv0\x00', 0xf) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) 2m11.922419297s ago: executing program 4 (id=3124): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/vidtv.0/i2c-0/name\x00', 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/114, 0x72) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0x5, 0x0) epoll_create$auto(0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r1, 0x0) capset$auto(0x0, 0x0) epoll_ctl$auto(0x5, 0x3, r1, 0x0) close_range$auto(0x2, 0x8, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) fchown$auto(r2, 0x0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sg0\x00', 0x20000, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 2m11.642569776s ago: executing program 4 (id=3126): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/fib_multipath_hash_policy\x00', 0x880, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/stack\x00', 0x18106, 0x0) close_range$auto(0x2, 0x8, 0x0) lsm_get_self_attr$auto(0x64, &(0x7f0000001400)={0x10, 0x1, 0x7fffffffffffffff}, &(0x7f0000002440)=0x1fb, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000040)={0x8020000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) mmap$auto(0x3, 0x20009, 0x4, 0x200000000eb1, r1, 0x1) close_range$auto(0x2, r0, 0x0) time$auto(&(0x7f0000000000)=0x101) io_uring_setup$auto(0x6, 0x0) socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) clone$auto(0xff, 0x8ae, &(0x7f00000001c0)=0x1, &(0x7f0000000200)=0x2, 0x1b5) socket(0x2b, 0x801, 0x100) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendfile$auto(r2, r2, 0x0, 0x10000800000003) umount2$auto(&(0x7f0000000240)='ovs_ct_limit\x00', 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000000040)={0x404, '\x00', 0x57, 0x200, 0x8, 0xd, 0x3, 0x5, 0x8007ff, 0x7, 0xd251, 0x7fffffff, 0x3, 0x3, 0x7, 0x3ff, 0x3, 0x8, 0xff, "2c084b1dbd6b7127aff2eaf5ddb8222e6b25bc06"}) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) 2m9.88363074s ago: executing program 34 (id=3088): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="030527bd7000ffdbdf25040000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="e79a0053cf81965438d80fe3215b633fe7ddbfc35bb30c25de59653fcd100af0a110c1035f000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0xc0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) socket(0x23, 0x800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0xe, 0x2, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x5, 0x0, 0x7, 0x4, 0x3}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000c80), r1) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) write$auto_proc_pid_attr_operations_base(r3, &(0x7f0000000ec0)='9', 0x1) getsockopt$auto_SO_PASSCRED(r3, 0x7, 0x10, 0x0, &(0x7f0000000d00)=0x1fe) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, 0x0, 0x80, 0x0) sysfs$auto(0x2, 0x4, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) fanotify_init$auto(0x602, 0x1) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x4, 0xfffffffe, 0xffffffffffffffff, 0x0, 0xe) setrlimit$auto(0x1000000007, 0x0) arch_prctl$auto(0x5002, 0x1) 1m56.477248189s ago: executing program 35 (id=3126): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/fib_multipath_hash_policy\x00', 0x880, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/stack\x00', 0x18106, 0x0) close_range$auto(0x2, 0x8, 0x0) lsm_get_self_attr$auto(0x64, &(0x7f0000001400)={0x10, 0x1, 0x7fffffffffffffff}, &(0x7f0000002440)=0x1fb, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000040)={0x8020000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) mmap$auto(0x3, 0x20009, 0x4, 0x200000000eb1, r1, 0x1) close_range$auto(0x2, r0, 0x0) time$auto(&(0x7f0000000000)=0x101) io_uring_setup$auto(0x6, 0x0) socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) clone$auto(0xff, 0x8ae, &(0x7f00000001c0)=0x1, &(0x7f0000000200)=0x2, 0x1b5) socket(0x2b, 0x801, 0x100) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendfile$auto(r2, r2, 0x0, 0x10000800000003) umount2$auto(&(0x7f0000000240)='ovs_ct_limit\x00', 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000000040)={0x404, '\x00', 0x57, 0x200, 0x8, 0xd, 0x3, 0x5, 0x8007ff, 0x7, 0xd251, 0x7fffffff, 0x3, 0x3, 0x7, 0x3ff, 0x3, 0x8, 0xff, "2c084b1dbd6b7127aff2eaf5ddb8222e6b25bc06"}) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) 1m3.63882337s ago: executing program 6 (id=3326): r0 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/tty/console/active\x00', 0x103280, 0x0) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r3) prctl$auto(0x23, 0x7, 0x2008, 0x0, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000080)={0x4, 0x0, r3}) ioperm$auto(0x7, 0x1, 0x7) ioperm$auto(0x7, 0x6, 0x2) r5 = gettid() openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000280)=""/102, 0x66) r6 = socket(0x26, 0xa, 0x7) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x32001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r7, &(0x7f0000003280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c00000092b0f58b30a9af58e298f7b447c30d83a63463c9bb0526019f50cde4428cdc6e", @ANYBLOB="100025bd7000fbdbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="080039000700000005002e00010000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity$auto(r5, 0x4, &(0x7f0000000240)=0x6) prctl$auto(0x6, 0x2, r5, 0x4, 0xd) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {0x7e, 0x0, 0x2c01}}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) unshare$auto(0x40000080) ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) close_range$auto(r4, 0xa, 0x0) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/exec\x00', 0x101002, 0x0) pread64$auto(r0, 0x0, 0x7ff, 0x800) r9 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000340), r6) sendmsg$auto_BATADV_CMD_TP_METER(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r9, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFNAME={0x14, 0x4, 'dvmrp0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x4085) 1m3.175757275s ago: executing program 6 (id=3328): madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4048000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) pipe$auto(0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000440), 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x81a4, 0xf) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x283f4, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040010}, 0xc0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/bdi/43:352/wb_stats\x00', 0x3c240, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0x100085) 1m1.936730716s ago: executing program 6 (id=3334): openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/ports/3/pp_hold\x00', 0x101001, 0x0) socket(0x1b, 0x3, 0x1) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/nbd3\x00', 0x707c2, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x420001, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x2ab01, 0x0) ioctl$auto_USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, 0x0) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x400000000008) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) rmdir$auto(&(0x7f0000000080)='./cgroup/../file0\x00') syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4) mmap$auto(0xfffffffffffffffd, 0x2, 0x4000000000df, 0x10010, r1, 0x300000000400) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) writev$auto(0x3, 0x0, 0x8009) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x7fffffff, 0x10000000, 0x80) fsopen$auto(0x0, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x8, 0xd, 0xe13, 0x81, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x7ffffffd, 0x8627, 0x9, 0x20000800001, 0x3, 0x5, 0x1eb68525, 0x6, 0x7, 0x0, 0xffffffee, 0x2a17, 0x0, 0xffffffffffffffff, 0x10000, 0x0, 0x4, 0x80000000, [0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x8, 0x0, 0x1, 0x0, 0x0, 0x650f, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2]}, 0x209, 0x81) sendmsg$auto_IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000400)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x4000000) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c000010617a1dd94f0fe4962271ec0666112967bb8eceda69e1545b039cd9f4cae3d855ed3461d6f6687eaef7e752821811507635819ec231727379743693d1f35a9f8d323098a166639264a7387e39be81d4ac", @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf250a0000006500038004003f001400b40000000000000000000000000000000000addc3bf3c89c8ade785ffa295c9fb97944baca8471b66ffde937adaee18305ead514d7efefc8a9c562871bb4d987f07a2a75fe5b11f657345685473bbf0c0089000500"/118], 0x7c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) r5 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x101, 0x103) read$auto_mon_fops_text_t_mon_text(r5, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x10001, 0x2100002, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x8, 0xc354, 0x5, 0x2c, 0x3, 0x7}) 59.99361368s ago: executing program 6 (id=3338): r0 = socket(0x15, 0x5, 0x0) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000001f40), 0x2040, 0x0) r1 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, r1, 0x28000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7f9, 0x0, 0x8, 0x0, 0x1, 0xffff}, 0x0) 59.670932689s ago: executing program 6 (id=3340): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0xc0200, 0x0) r1 = socket(0x1e, 0x6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8850) mmap$auto(0x0, 0x2020009, 0x8000000007, 0x11, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r3, 0x0, 0xfff) msync$auto(0x7f, 0x6, 0x0) clock_nanosleep$auto(0x7ff4, 0x3, &(0x7f00000000c0)={0x5, 0x7f}, &(0x7f0000000240)={0x0, 0x9}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r5 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/default/drop_gratuitous_arp\x00', 0x141241, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8200, 0x1, 0x9, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "7829000000000000000200", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000002c80)={0x16fc, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_CQM={0x16cc, 0x5e, 0x0, 0x1, [@nested={0x19, 0x109, 0x0, 0x1, [@generic="7ff52db748b0b524902e9fa8005c2bb29d", @nested={0x4, 0xe2}]}, @typed={0x8, 0x47, 0x0, 0x0, @fd=r7}, @nested={0x276, 0x43, 0x0, 0x1, [@generic="a62b0bb58173c1095955bd5e847862e2b8cd2e891bcf58c617ee64d20238bac7f654ac83835fc8dbe6fb47bc7e9a22e65a8a32913cd47454b8a56f1a90d33796a4547c81294662dab549e94755e43c27b141e8ec38ca7abf612f45cee7f4", @nested={0x4, 0x2f}, @generic="6b3ea9a066bf842556bd7e7e3f197f12fce03566d82937bcf3326d54dd9210eeff22cc869f05cddf84c1d9ae516fe4112434b45332cc59ebdfc1d78f229269582f545e7eff3e638808749151c021a6dd7e227e2c8300583d7c69a845465ec7c9bd81906d5983e7f0be5e6e269957d0292e1314773d2c0940be37f57b6e9e3c91d225681a1ded32c4a4e1ed6213a038bcd6c802ebb0db7f50186478eb365eb2eb9045e80c54c78d1948d1875d2298f7bf0a0d49a332b08d8ea84aadea728aec589491790206cc88b35d441b0ab6c3fa3d9cda34b5e187c345ff622d738791553de57da797fcb9961c3ac8d2a9fa3b0267ce239f8d576f69b538e835620a", @nested={0x4, 0xf7}, @typed={0x8, 0x76, 0x0, 0x0, @uid}, @nested={0x4, 0x4b}, @typed={0x4, 0x24}, @typed={0x9d, 0xca, 0x0, 0x0, @binary="38002a51f6c5bb7cd3b8008912e65266ec37735c43c618512073058936175c69b24f1227ba22c23fb491946e4146b8404d141aa4e76853c565a3d4752491423d0c84e8574440a8757088ab12143d60cc321fe708c22a871a1ad325b00e295ca4de581f7fc1e24d6300cc967cc5d91face50ea8136d0b62519c03b3efa013c795ad28abfa242b2a9e2eb41cba1c077689f9fff6fba3c5e2199b"}, @generic="881aea536007cc8c9a70dcd11748d97962260f64c494fa0dffebf77075a5f9f2bdaa6706a32047b2f7f3ae59a1d2e6b10c13f05d428f7a5e48021b39e856d8959f844358869e36d1f9c2b8b9206303fc00000000000000", @typed={0x8, 0xb6, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0x362, 0x81, 0x0, 0x1, [@nested={0x15a, 0x11b, 0x0, 0x1, [@nested={0x4, 0x15}, @generic="fe724b6f636449df5e4ffe02659987357898113f8c552dbf78f95cffac3a913f70a2a0f6173838a27c1dec720a7a86e12fa410e55bc6f92031cbe0dfcfa277d2bda28a6efaf05a892a5753362b291d6408e8ac37591853ad3603794d957c210c31fdeb85e27640db4280", @typed={0xdc, 0x139, 0x0, 0x0, @binary="b92429cc52bb3729cc9296e103d2055014b2f917752390dbfce1d0b591c3cbdaeb8803e5f0a95dcf9cc906d06fbde62b0825794b3ea1b8fa8467e4b848849a6ed7f3563e744907651f26c519b5b23aa5184b84b9c741e7ca94c1cbff5eb2329f33d66d3561ecabb5967f055ae8b07eb69c2ea28683c9612deac7a8de8c6c316980189cf4a648bc2bc914e6ed958a7a58badd75872f58d0a91856e974cf877a4b1191603731f7c06d3329ea375d1eedb714bed1f4842813eb1a5e987fb2449044905a6c138308238732e5252a7a959e3e7e2085ed14dfd59a"}, @nested={0x4, 0x7d}, @typed={0x8, 0x34, 0x0, 0x0, @pid}]}, @typed={0x8, 0xa8, 0x0, 0x0, @uid}, @generic="91edc60d3006d5324ecd4ca0dcf346176ff43c7f41054055a00c08456816a8e1537c1600a31d51c74e1596ae3e4a743fb0bcf275c9cac5a782fb420a7f37c16ec4cca3313d70a1c43dc8820099ef279c22cf720f0a173a0ec3901caa7f23c65261a7be5e864b", @nested={0x166, 0x128, 0x0, 0x1, [@generic="cb531ac3dbdf9b619bc30f5a0ea3ff991373f170510a3e1e9c2cbde966347e883beeb319e9049f0f94bcd10930f2fb114578432a43519ef1ed74ec4bcf08d4f572b584d7879d138052a41d29f1e0a20293ca3d0245a5ec89eb0cbf96a30444f1e3181dd46dfc148f061d6fb8541c0be69d24757d606336afd4fb8078cabed19c49057f33d4249e1407c325344bae5139f45d637ea597ed98f57a3858cfb3b0ff033b9bf0b92f80cc488d0ecfcd29139b7de520ab6b61b0da56f6d137842b17634bf0455ec6ff2227d31a3a1927b10cb42dfeb0e0bd4ea10037c71603402a55aac3b30b246196204c429193e4ed821ae2b6a8b9e290f9e290e3", @generic="57713e5ec1d669755b71004281f00fce5f0c38335e38d11b9e4527c6ed5fea98d28464ed71dd5cac136d4813d9289b3426d53204f9d0425894e91ae2ea075630643a5c269a99802e9f4decbbf0e77ab5cb7ff062d2621f1554745f365be30c8840032f4e4e", @typed={0x4, 0xe4}]}, @typed={0x8, 0x5a, 0x0, 0x0, @ipv4=@loopback}, @nested={0x1c, 0x33, 0x0, 0x1, [@nested={0x4, 0x13c}, @typed={0x14, 0x138, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, @typed={0x8, 0x82, 0x0, 0x0, @uid}]}, @typed={0x4, 0xf4}, @generic="678c7ba25e87106cec73d331db3ac0635387ee325d3f063e28c44c9dad89dc0350f861ec47858145249df3d10841fb7af83a222006e845f16e0a5b4d3b2ed5f5da7994c3e62b647a5ec9387f97838cc5", @nested={0x106c, 0xb7, 0x0, 0x1, [@generic="8a70444d080c8b9f3f24545f274bf38c10237344a48e742f265832c58a24c8bc2e742a7dad4987ea20be489f0fa930854acbb3f0efcdf87e3f518b5dcc58f6026df89c610576eec6949ff0c54ff966d3a00e194b18c754fc0529bf07", @typed={0x8, 0xd1, 0x0, 0x0, @fd}, @nested={0x4, 0x106}, @generic="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"]}, @typed={0x8, 0x152, 0x0, 0x0, @fd=r6}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x9}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xfe}]}, 0x16fc}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x10, 0x2, 0x4) 58.04489461s ago: executing program 6 (id=3343): socket(0x6, 0x1, 0x300) r0 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) pread64$auto(r0, &(0x7f0000000200)='/dev/nvme-fabrics\x00', 0x7, 0x42799527) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, 0x0, 0x2, 0xfd) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r4, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003500)={0x14, r4, 0x1, 0x70bd2b, 0xa5dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_clone3(0x0, 0x0) r5 = openat$auto_fops_u64_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim2/psample/out_tc_occ_max\x00', 0x0, 0x0) read$auto_fops_u64_(r5, 0x0, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram3/trace/enable\x00', 0x2062, 0x0) write$auto(r6, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r6, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x1) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r7, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 42.366411907s ago: executing program 36 (id=3343): socket(0x6, 0x1, 0x300) r0 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) pread64$auto(r0, &(0x7f0000000200)='/dev/nvme-fabrics\x00', 0x7, 0x42799527) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, 0x0, 0x2, 0xfd) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x44, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r4, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f0000003500)={0x14, r4, 0x1, 0x70bd2b, 0xa5dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_clone3(0x0, 0x0) r5 = openat$auto_fops_u64_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim2/psample/out_tc_occ_max\x00', 0x0, 0x0) read$auto_fops_u64_(r5, 0x0, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram3/trace/enable\x00', 0x2062, 0x0) write$auto(r6, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r6, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x10000, 0x8000, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x1) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r7, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 8.726038729s ago: executing program 5 (id=3444): r0 = socket(0x1a, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x80240, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9a72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r2 = socket(0x2b, 0x1, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x33a, r2, 0xc) statx$auto(0xffffffffffffffff, 0x0, 0x6d7, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) getsockopt$auto_SO_TXREHASH(r0, 0xced5, 0x4a, &(0x7f0000000080)='/dev/kvm\x00', &(0x7f0000000180)=0x7) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x0, 0x9}, 0x800009}, 0x7, 0x20000000) io_uring_setup$auto(0x8, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mlock$auto(0x1, 0x6) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x8, 0x0) io_uring_register$auto(0x2, 0x10, 0x0, 0x7f) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) 7.56241872s ago: executing program 5 (id=3448): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x20, 0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x11, 0xa, 0x300) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0xfffffefffffffffe, 0x200009) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x100000, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) mmap$auto(0x0, 0x20009, 0xe0, 0xeb1, 0xffffffffffffffff, 0x4) write$auto(r0, 0x0, 0x8000000000000001) readv$auto(r1, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r2, 0x560c, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_vport(0x0, r3) sendmsg$auto_OVS_VPORT_CMD_DEL(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f00000041c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf25020000000800"/26, @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x80) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x4, 0x800, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0xa901, 0x0) setsockopt$auto(0x3, 0x1, 0x28, 0x0, 0x808) 5.053578824s ago: executing program 3 (id=3455): r0 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14010000", @ANYRES16=r0, @ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) socket(0x22, 0x2, 0x4) (async) ioctl$auto(0x3, 0x80044944, 0x10000000000402) (async) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) (async) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) nanosleep$auto(0x0, &(0x7f0000000100)={0x0, 0x864}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) socket(0x2b, 0x1, 0x1) (async) pipe2$auto(0x0, 0x80) (async) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1e, 0x1, 0x0) (async) socket(0x28, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) pipe2$auto(0x0, 0x80) (async) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x4) (async) socket(0x2, 0x80002, 0x73) socket(0xa, 0x801, 0xd) (async) openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/bdi/1:15/stats\x00', 0x20802, 0x0) (async) lseek$auto(0x3, 0x430, 0x80008) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) 4.921070398s ago: executing program 8 (id=3456): quotactl$auto(0x9, 0x0, 0x62a0, 0x0) (async) quotactl$auto(0x9, 0x0, 0x62a0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) r0 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r0, @ANYBLOB="000229bd7000ffffdf251300000002000000060000000500050008ec000005001d0004000000050017000d00000005082800120000000500210002000000"], 0x44}}, 0xc80) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) unshare$auto(0x40000085) (async) unshare$auto(0x40000085) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) (async) ioctl$auto(0x3, 0xae41, r2) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000001c0), 0xab81c0, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0x4004ae8b, 0x80ffff) (async) ioctl$auto_KVM_CREATE_VM(r1, 0x4004ae8b, 0x80ffff) madvise$auto(0x0, 0x2003f0, 0x17) (async) madvise$auto(0x0, 0x2003f0, 0x17) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0xbb, 0x0, 0x8, 0x0, 0x81, 0x9}, 0xfffffffb}, 0x5, 0x6586, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x55) (async) connect$auto(0xffffffffffffffff, 0x0, 0x55) ioctl$auto_XFS_IOC_SWAPEXT(r3, 0xc0c0586d, 0x0) 4.265204913s ago: executing program 5 (id=3457): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000000)="351ff6218163cce8505bf40fca856149f185354f86f6766b73aeb066b2a65290e689cb5a9cd45a63766508ae821ea42a555887244ce3a5676c4a8f62c1dadfd6efc8b8dd0eae0c03292f536b2b5042c923", 0x51) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002684ed0aecda9aace96039a270cc9560", @ANYRES32=0x4, @ANYBLOB="11000100c2000000000000000a39acce0000000008000200", @ANYRES32=0x9, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x80) 4.172512805s ago: executing program 3 (id=3458): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0xa, 0x5, 0x0) mq_getsetattr$auto(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x101, 0x5, 0xfffffffffffffffa}, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x4, 0x7, 0xfffffff1) (async) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r0) (async) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0) r3 = fcntl$getown(r2, 0x9) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001840), r0) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x2c, r4, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x7fff}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x9}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c041}, 0x40) (async, rerun: 64) msgctl$auto_IPC_INFO(0x631, 0x3, &(0x7f00000003c0)={{0x8, 0x0, 0x0, 0x4, 0x9, 0x6, 0x9d6e}, &(0x7f00000001c0)=0xa, &(0x7f0000000380)=0x7f, 0x72, 0xf7f4, 0x2, 0xfffffffffffeffff, 0x6, 0x300, 0xffff, 0xfdd, @inferred, @inferred=r3}) (async, rerun: 64) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f00000017c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001780)={&(0x7f0000000140)=ANY=[@ANYBLOB="14160000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="08002100ffffffff"], 0x1614}, 0x1, 0x0, 0x0, 0x8810}, 0x1) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) pipe$auto(&(0x7f0000000040)=r0) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) madvise$auto(0x0, 0x2003f0, 0x15) 3.846742287s ago: executing program 8 (id=3460): madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4048000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) pipe$auto(&(0x7f0000001480)) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000440), 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x81a4, 0xf) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x283f4, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040010}, 0xc0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/bdi/43:352/wb_stats\x00', 0x3c240, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x3, 0xcad7) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0x100085) 3.670081427s ago: executing program 7 (id=3462): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x5, 0x0) setsockopt$auto(r1, 0x0, 0x2a, 0x0, 0x108) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/loop14\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r2, 0x8000) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x129e01, 0x0) ioctl$auto(r3, 0x9210640c, r0) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim4/health/break_health\x00', 0x8080, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b71, 0x1) sync_file_range$auto(r0, 0x5, 0x0, 0x9) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r5, 0x4b4d, 0xffffffffffffffff) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0x1002, 0x8, 0x80000008000000a, 0x40000402, 0x9, 0x8, 0xffffffff80000000, 0x800000000000d, 0x6, 0x240000100103}) r7 = socket(0xa, 0x3, 0x3c) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) r8 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x40, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r8, 0xc1105511, &(0x7f0000000300)={{@raw=0x4, 0x4, 0xf8, 0x5, "a401d243991a4de376cc2bd4dbe3e10d3cff152230323227f8d6c24be7ceeed84366bbadec1b7ea40209a468", @raw}, 0x1ea, 0x3, 0x1, @raw=0x8f10, @reserved="1f21b2aa03e626d5da400a9e13f017f54c625fbe785ff8a079f5f335840ca5ee5c72d7c5dd9684cc9ec3d4551843651db67be7a66dc7420e0baebb7eb8a880fe494bb541abf1fad77749d5d4e58490133df980172cacbfd9fe2e372ddc298dcd9e9b59e603a8f2cd3f3500e3850bf32ab968e7afd0388afaa3712b60835ab268", "2bb2d72b107f43a0d30100000000000000ae4a5be70b75810dfa4cc9182ed519d3613ea5b4243440fc9595b760cee784decb284ff015aa97d8f86dd61fd4f929"}) write$auto(r7, &(0x7f0000000080)='<&\x00I\xaar\x1c\xbb\xde\ah\x15,\xeb|\x85\xe8\x97Z\xc30\xae}\xa1\x17K(\x80]]\x8d\xb5\xeb-\x9d\xc1\xceU\xbb_\xcf\xe8#U\xd0_|\x15f\x92\xaa\x9f\xa0l}7z#u\xf6\xd1\xe1\x8d\x05=w\xf1\xb9K\xf4\\\a\xdf\x87\xbb\x03d6\xe1\x14\xb1|\x98\x82$\xf3\xb2\xcf\xb7\x7f\xf8f*/\xc2\x82\x8c2\x8d^\x10\xc6\x1cs', 0x263f) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) r9 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r0) r10 = epoll_create$auto(0x3e) epoll_ctl$auto(r10, 0x1, 0x8000000000000000, 0x0) r11 = waitid$auto(0x8001, 0xffffffffffffffff, &(0x7f0000000140)={@_si_pad}, 0xd4dc, &(0x7f00000001c0)={{0x6, 0x8}, {0x6, 0x9}, 0x40, 0x1, 0x1, 0xb, 0xfffffffffffffff7, 0x29727d12, 0x8, 0xffff, 0x4, 0x2, 0x1, 0x7, 0x5, 0x8}) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)={0x1e8, r9, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SUPPORTED_COMMANDS={0x80, 0x19, 0x0, 0x1, [@generic="80a78a0f8b6e7590d4694edf195cc415ba948eb9cbaa2d208378a22c5692bf7290794ac576bd74cf85e51605b8891462888d7d84fb8f4a7e1c244cb0c871f481b40a5a0c4ff36b2d17f79429577b0ffa1128bfb78cf944940867ee958cf812afb04d17e496a5856b3dff510f61e4299d5075fef41342eaf25bc56bba"]}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r10}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1000}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xfff}, @NL802154_ATTR_SEC_DEVICE={0x12a, 0x2e, 0x0, 0x1, [@nested={0x88, 0xec, 0x0, 0x1, [@generic="515f2c45820de77ff88bba5a40bbe067e3f75167ee72e22ed8e7d4bd2b8b73449558c4c8eaf05ae2a0a30a1cbc2f99fef7dd583a78b661b1061c44b7e6b97ad729ec27c068eee4d41d9c4506c500bebc3e758c08d83011d76257bccfdc34f83c1ccce13a", @typed={0x8, 0x12f, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x57, 0x0, 0x0, @u32=0xed22}, @nested={0x4, 0x12f}, @typed={0x8, 0x19, 0x0, 0x0, @pid=r11}, @typed={0x4, 0x13c}]}, @generic="9e9b6bd744c6f6b7d243c4d72bc066c32f47e2bf53373ff82a54b8266617f3ef9111c906d6c109d9d99913ae5d5021d26289bd0573b244f7cea503c2b959239705a060bb1a74f1ad8fc318f670fae7d0aa75ca21be4fd85ae1497ea8bc354b62cfa7466019dd7150ddf67c623f273b4791f5e19a7326e71320a4641d7c89df09dce33855855811e080a995d6b05e77ab3a2a32813abeefea50d97939dbc3"]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4080}, 0x40004) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0xeb1, r2, 0x8000) 3.427923897s ago: executing program 8 (id=3463): mmap$auto(0x0, 0x400008, 0xdf, 0x9b7e, 0x2, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x450000, 0x1, 0x1}, 0x18) mount_setattr$auto(r1, &(0x7f0000000100)='./file0\x00', 0x36, &(0x7f0000000140)={0x45, 0x6, 0x80000001, @raw=0x305}, 0x80000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000640), 0x401, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/serio/drivers/psmouse/description\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/222, 0xde) write$auto(r2, 0x0, 0xff) finit_module$auto(r0, &(0x7f0000000340)='\'$\x00', 0x0) r4 = geteuid() msgctl$auto_IPC_RMID(0x6, 0x0, &(0x7f0000000200)={{0x7ff, 0x0, 0x0, 0x1, 0x1ff, 0x7, 0x9}, &(0x7f0000000180)=0x40, &(0x7f00000001c0)=0x9, 0x1, 0xf7fffffffffffffe, 0x400, 0x5, 0x5, 0x7, 0x402, 0xf, @raw=0x2}) fstat$auto(0xffffffffffffffff, &(0x7f0000000280)={0x8, 0xc, 0x5, 0x5, r4, r5, 0x0, 0x5, 0x5, 0xff, 0x80, 0x5, 0x9, 0x6, 0x8, 0x7, 0x8000}) unshare$auto(0x5) read$auto(0x3, 0x0, 0xf34) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/dfscache\x00', 0x101a41, 0x0) write$auto(r6, 0x0, 0x6) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) socket(0xf, 0x3, 0x2) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0xcd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) write$auto(r7, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x6, 0x4, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x5, 0x3000, 0x0, 0x6, 0x10002, 0x80, 0x400, 0x0, 0x6, 0x1ffc, 0x8203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x5, 0x0, [0xffffffffffffffff, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x2, 0x8001, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5, 0x0, 0x4]}, 0x1fe, 0xd) 3.278692806s ago: executing program 3 (id=3464): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) sendfile$auto(r0, r0, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x55) connect$auto(r1, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @my=0x1}, 0x55) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'erspan0\x00'}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(0x0, 0x86, 0x8, &(0x7f0000000280)={0x40000000000800, 0x9}, 0x0, 0x7) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket(0x10, 0x2, 0x4) bind$auto(r4, &(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x2}, 0xe) socket(0x2, 0x80802, 0x0) close_range$auto(0x2, r3, 0x0) mmap$auto(0x0, 0x20005, 0xe2, 0x7f6, 0xffffffffffffffff, 0xb) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0xd97f760c479e8c8e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_ubifs_dir_operations_ubifs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/power\x00', 0x400, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) 3.026291667s ago: executing program 5 (id=3465): fchdir$auto(0xffffffffffffffff) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r0 = getpid() unshare$auto(0x40000080) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r2 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r2, &(0x7f0000000680)={&(0x7f0000000300)="64074c974bc700bf3e0ea3cb2a0e6fb39becec71e3a4d0a56fd330f661933ddee8f7e24e910a635beff3ee8ee14b1c06ea42210c954dbb2646ec4926a181e72e60e162246177fab5b4ca997754a8c9cddab6d3c54cbfb66c3783772d50cc1e5778975d5b19cb2cf6de8f594e2311768d1b3d94adef00"/136, 0x40200}, 0x3) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESOCT=r0], 0x68}, 0x1, 0x0, 0x0, 0x20000084}, 0x44098) socket(0x18, 0x3, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004) mmap$auto(0x0, 0x0, 0x4000000df, 0x9b72, 0x2, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) r4 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x7e, 0x0, 0x7) fsmount$auto(r4, 0xfff, 0x7) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) setsockopt$auto(0xffffffffffffffff, 0x10000000084, 0x23, 0x0, 0x8) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x4000000) mbind$auto(0x2000, 0x800000100000004, 0x100000000, 0x0, 0x1003, 0x2) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) open(&(0x7f0000000080)='./cgroup\x00', 0x101000, 0x0) socket(0x1d, 0x3, 0x1) ppoll$auto(&(0x7f0000000040)={r2, 0x9, 0x910}, 0x1, &(0x7f0000000240)={0x8000000000000001, 0x6}, &(0x7f0000000280)={0x1000}, 0x8) write$auto(r5, &(0x7f0000000000)='.\x00', 0x81) setsockopt$auto(r3, 0xfffffffe, 0x105, 0x0, 0xaf8) 2.99594729s ago: executing program 7 (id=3466): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0xa, 0x0) sysfs$auto(0x2, 0x10000000000002a, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x8000800) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x60742, 0x0) socket(0x2, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x6, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) connect$auto(0x3, 0x0, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000180)={'bond0\x00'}) msync$auto(0xfffffffffffffffe, 0x2, 0x6) read$auto_nvram_misc_fops_nvram(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x8658) keyctl$auto(0x5, 0x0, 0x0, 0x0, 0x7) mmap$auto(0x0, 0x400005, 0xdb, 0x16, 0xffffffffffffffff, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x82101, 0x0) madvise$auto(0xfff, 0x8, 0xab8) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) newfstatat$auto(r3, &(0x7f0000000240)='./file0\x00', &(0x7f0000000500)={0x5, 0xd4e, 0x3, 0xfb, 0xee00, 0xee00, 0x0, 0x9, 0x8, 0x4, 0x0, 0xffffffff80000000, 0xfffffffffffffff4, 0x4, 0xfff, 0x7, 0x4}, 0x2) msgctl$auto_MSG_STAT_ANY(0x4, 0xd, 0x0) mmap$auto(0x1, 0x3, 0x3, 0x55, r2, 0x8001) socket$nl_generic(0x10, 0x3, 0x10) 2.266581531s ago: executing program 3 (id=3467): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/machinecheck/machinecheck1/ignore_ce\x00', 0xa0202, 0x0) sendfile$auto(r0, r0, 0x0, 0x20000000a) read$auto(r0, &(0x7f00000001c0)='ovs_p\x04\x00\x00\x00\x00\x00', 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0xfffffffffffffffc, 0x20000000400008, 0xe0, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, &(0x7f0000000200)={0x0, 0x3}, 0x3) accept$auto(r2, 0x0, 0x0) connect$auto(0x3, 0x0, 0x54) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x24008010) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7114}, 0x8) keyctl$auto(0xffffff82, 0x7, 0x0, 0x0, 0x3) select$auto(0x3, &(0x7f0000000040)={[0x4, 0x20002, 0x34, 0x3, 0x9, 0xfffffffffffffffe, 0x7, 0x8, 0xb, 0x0, 0xa044, 0x2, 0x5, 0x213, 0x5, 0xffffffffffffffff]}, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="0700000000000000df25020000002c00018028003c80ceea994b8e7587d1654723f5b3cc330b4212ef00045d1d55fec5b15800"/60], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004855) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004811}, 0x800) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) ioctl$auto(r0, 0x4b67, r3) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x6d1, 0x0) ioctl$auto(0xffffffffffffffff, 0xe, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_IEEE802154_SET_MACPARAMS(r6, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x40005}, 0x20000080) read$auto(r4, 0x0, 0x4) write$auto(0xffffffffffffffff, 0x0, 0xfdf4) unshare$auto(0x40000080) 2.164714263s ago: executing program 8 (id=3468): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto(r0, 0x8100451b, r0) (async) rseq$auto(&(0x7f0000000300)={0x5, 0x8, 0x2, 0x7ffffffc, 0x14, 0x3, "d90926732f26c41017bf0021c9c2d3a8d58e4ae2e22c3ee73d2fa7c225a0b6f7f869cbc505f5ffcd0307b4a8572e679e02fbf4d0b0490ac3baa4d800c6a2ae91727a90c091c8532308b87d07bd03003d1962979ad0f0b9efabae66ec8ceaa562f328bc1c71d271f4accca60c3d65edcc5543417dc4e84733da"}, 0x3, 0x2, 0xf8b) (async) socket(0x2b, 0x1, 0x1) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001400c7d2a2e1917949643de42b"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async) r2 = socket(0x2b, 0x1, 0x1) recvmmsg$auto(r1, &(0x7f0000000580)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x80000001}, 0x1}, 0x3, 0x6, 0x0) (async) dup3$auto(r2, r1, 0xd) capget$auto(&(0x7f0000000080)={0xfffffffe, 0xffffffffffffffff}, &(0x7f00000000c0)={0x8, 0x5, 0x1}) (async) write$auto(r0, &(0x7f0000000000)='\x00', 0x1) 1.916478815s ago: executing program 7 (id=3469): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages\x00', 0xa0862, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) mprotect$auto(0x1000, 0x401000, 0x4) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b4b, r1) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = socket(0x2b, 0x1, 0x1) listen$auto(r2, 0x8000) mprotect$auto(0x200000000000, 0x806121, 0xc) newfstatat$auto(0xffffffffffffffff, &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x784c) read$auto(0xffffffffffffffff, 0x0, 0x9) 1.650686228s ago: executing program 8 (id=3470): setxattr$auto(0x0, &(0x7f0000000200)='*\x00', 0x0, 0x800000, 0x0) (async) madvise$auto(0x0, 0x2000040080000004, 0xe) (async) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x109c01, 0x0) ioctl$auto(r0, 0x92106411, 0xffffffffffffffff) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd9\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8000b) (async, rerun: 64) madvise$auto(0xe8, 0xffffffffffff0005, 0x1b) (async, rerun: 64) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x4, 0x4000000000df, 0x2078, 0x4, 0x300000000000) (async) madvise$auto(0xffffffffffffffff, 0x200007, 0x19) syslog$auto(0x3, 0x0, 0x5) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x2000000000000003, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) (async) write$auto(r1, &(0x7f0000000140)='\xe7\xff\xffJ\xd4hclC\xa2', 0x100000a3dc) (async, rerun: 32) r2 = getpid() (async, rerun: 32) mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r2, &(0x7f00000000c0)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) select$auto(0xd, 0x0, 0x0, 0x0, 0x0) getrandom$auto(&(0x7f0000000100)=':^\x00', 0x7, 0x80000000) (async, rerun: 32) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x80280, 0x0) (rerun: 32) 1.613008689s ago: executing program 7 (id=3471): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/security/tomoyo/stat\x00', 0x40802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) r1 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000240), 0xa002, 0x0) writev$auto(r2, 0x0, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mprotect$auto(0x200000000000, 0x806121, 0x8) newfstatat$auto(0xffffffffffffffff, &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x784a) ioctl$auto_UBI_IOCDET(r1, 0x40046f41, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/mtu\x00', 0xe3542, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r4 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/1/cpuid\x00', 0xa580, 0x0) readv$auto(r4, &(0x7f0000000680)={&(0x7f0000000540), 0x40200}, 0x3) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) ppoll$auto(&(0x7f0000000000)={r3, 0x40}, 0x2, 0x0, 0x0, 0x8) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0xfffffffffffffffc) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$auto_ECCGETSTATS(r5, 0x80104d12, &(0x7f0000000280)={0xffffffff, 0x0, 0x4, 0x8000006}) r6 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) pread64$auto(r6, 0x0, 0x5, 0x8000400) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$auto_OVS_FLOW_CMD_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01df250100000000000000000003"], 0x14}, 0x1, 0x0, 0x0, 0x2004c080}, 0x4000044) r8 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r7, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r8, 0x0, 0x20000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x40, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/net/wireless\x00', 0x80, 0x0) 1.500186351s ago: executing program 5 (id=3472): madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4048000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) pipe$auto(&(0x7f0000001480)) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000440), 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x81a4, 0xf) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x283f4, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040010}, 0xc0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/bdi/43:352/wb_stats\x00', 0x3c240, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0x100085) 1.088186429s ago: executing program 3 (id=3473): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{&(0x7f0000000000), 0x406a33, 0x0, 0x4, 0x0, 0x93e, 0x84}, 0xfffffffb}, 0x7f, 0xdb22, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan1\x00'}) r0 = socket(0x2, 0xa, 0x0) fallocate$auto(r0, 0x4, 0x4, 0x47) sendmmsg$auto(r0, &(0x7f00000000c0)={{&(0x7f0000000000), 0xd1, &(0x7f0000000040)={0x0, 0x5ea}, 0x1, 0x0, 0x1, 0xaf23}, 0x6}, 0x5, 0x1997b23d) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/query\x00', 0xc0001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r1) socket(0x8, 0xa, 0xcc0a) 1.085890226s ago: executing program 7 (id=3474): madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) sendmsg$auto_VDPA_CMD_DEV_VSTATS_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4048000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) pipe$auto(&(0x7f0000001480)) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000440), 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x81a4, 0xf) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x283f4, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20040010}, 0xc0) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/bdi/43:352/wb_stats\x00', 0x3c240, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) (fail_nth: 1) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0x100085) 613.710486ms ago: executing program 3 (id=3475): mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x1) open$dir(&(0x7f0000000000)='./file0\x00', 0x511081, 0x4) socket(0x10, 0x2, 0x4) connect$auto(0x3, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB=']'], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r1, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/capability\x00', 0x129102, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/binderfs/binder0\x00', 0x102, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff49, 0x5, 0x1823, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x0, 0x1]}, 0x0) r3 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) read$auto_state_fops_(r3, &(0x7f0000000180)=""/61, 0xfffffeeb) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x18, 0x401, 0x300000000000) prctl$auto_SECCOMP_MODE_STRICT(0xf, 0x1, 0x0, 0x9, 0x2) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0) 420.448112ms ago: executing program 5 (id=3476): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r1 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r1, 0x40000000000000d, 0x2009, 0x0) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400004, 0xdf, 0x1c, 0x2, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x2) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(r0, 0x0, 0x2400c080) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0x18, 0x5, 0x1) connect$auto(r3, &(0x7f0000000000)=@l2tp={0x2, 0x0, @private=0xa010102, 0x3}, 0x26) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, &(0x7f00000001c0)={&(0x7f0000000000)="75069306718961289362e447303b5943cb6da353036498c823d4148aeeec98ef1d3c18058651f24eb225ecce17d85d22e4bae47c749fb6da2f5267c2daeb5eaec03b57c3c82ae241c3c6d0ddd2fd220443ef2cd1bde1726c1c5608763de0c70b8b2c44c6b5ff5be2fc1d7ae88f4c29e4e63f543cdc4e3122dab03c9d8934e1947870dddcfc87a9a65d0a36faa2691a4cb3c04e3e4a38cebcf6ce3ffcea8aea93617c8887bf47345489346803c41c0bac9e55d851388657f48debb807c036e0be4858", 0xd7c9}, 0x200, 0xfffffffe, 0x860) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/neigh/ip6tnl0/unres_qlen_bytes\x00', 0x2002, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) sendfile$auto(r4, r5, 0x0, 0x4) munlock$auto(0xffff, 0x400) mprotect$auto(0x200000000000, 0x806124, 0x8) mq_getsetattr$auto(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x101, 0x5, 0xfffffffffffffffa}, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/net/eql/statistics/tx_carrier_errors\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000000)=""/45, 0x2d) 374.865291ms ago: executing program 8 (id=3477): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x8, 0x2020009, 0x3, 0x100000eb1, r0, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) close_range$auto(r0, 0xfffffffffffff001, 0x6) socket(0x11, 0x80003, 0x300) open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x210400, 0x0) read$auto(r2, 0x0, 0x20) recvmsg$auto(r1, 0x0, 0xfffffff7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8, 0x15) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000031c0)='/dev/ttyva\x00', 0x4b26c0, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon2\x00', 0x80000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/cache/index2/size\x00', 0x180, 0x0) pipe$auto(0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback}, 0x55) mincore$auto(0x0, 0x1, 0x0) socket(0x11, 0x3, 0x2) getpeername$auto(0x3, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x35, 0x0, 0x9) 0s ago: executing program 7 (id=3478): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x8fb6, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x5, 0x5]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xffffffffffffffe7, 0x800000000000948b, 0x3, 0x15f4da0a, 0x3, 0x4000000000000003, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x8, 0x6]}, 0x0) mmap$auto(0x0, 0x40006, 0xdf, 0x9b72, 0x7, 0x28000) semctl$auto_SEM_INFO(0x0, 0xfffffffd, 0x13, 0x1) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) listen$auto(r0, 0xffffffff) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x4010c230000, 0x80, 0x200) kernel console output (not intermixed with test programs): o_alloc_mpol_noprof+0x36/0x2f0 [ 1149.738637][ T5703] shmem_alloc_folio+0x135/0x160 [ 1149.738660][ T5703] shmem_alloc_and_add_folio+0x499/0xc20 [ 1149.738692][ T5703] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1149.738722][ T5703] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 1149.738754][ T5703] shmem_get_folio_gfp+0x67f/0x1600 [ 1149.738787][ T5703] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1149.738817][ T5703] ? filemap_map_pages+0xf58/0x1670 [ 1149.738848][ T5703] shmem_fault+0x1fe/0xa30 [ 1149.738876][ T5703] ? __pfx_shmem_fault+0x10/0x10 [ 1149.738906][ T5703] ? __pfx_filemap_map_pages+0x10/0x10 [ 1149.738962][ T5703] ? __pfx_filemap_map_pages+0x10/0x10 [ 1149.738989][ T5703] __do_fault+0x10d/0x490 [ 1149.739020][ T5703] ? __pfx_filemap_map_pages+0x10/0x10 [ 1149.739047][ T5703] do_pte_missing+0xf50/0x3ba0 [ 1149.739072][ T5703] ? find_held_lock+0x2b/0x80 [ 1149.739095][ T5703] ? __handle_mm_fault+0x14fd/0x2a50 [ 1149.739123][ T5703] __handle_mm_fault+0x152a/0x2a50 [ 1149.739150][ T5703] ? mt_find+0x3ef/0xa30 [ 1149.739174][ T5703] ? __pfx___handle_mm_fault+0x10/0x10 [ 1149.739196][ T5703] ? __pfx_mt_find+0x10/0x10 [ 1149.739237][ T5703] ? find_vma+0xbf/0x140 [ 1149.739268][ T5703] ? __pfx_find_vma+0x10/0x10 [ 1149.739301][ T5703] handle_mm_fault+0x589/0xd10 [ 1149.739327][ T5703] ? trace_raw_output_exceptions+0x131/0x150 [ 1149.739366][ T5703] do_user_addr_fault+0x7a6/0x1370 [ 1149.739405][ T5703] ? rcu_is_watching+0x12/0xc0 [ 1149.739432][ T5703] exc_page_fault+0x5c/0xb0 [ 1149.739484][ T5703] asm_exc_page_fault+0x26/0x30 [ 1149.739507][ T5703] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1149.739538][ T5703] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1149.739561][ T5703] RSP: 0018:ffffc900039e79f8 EFLAGS: 00050206 [ 1149.739580][ T5703] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000038 [ 1149.739595][ T5703] RDX: fffff5200073cf50 RSI: 0000000000000000 RDI: ffffc900039e7a48 [ 1149.739610][ T5703] RBP: 0000000000000038 R08: 0000000000000001 R09: fffff5200073cf4f [ 1149.739625][ T5703] R10: ffffc900039e7a7f R11: 0000000000000000 R12: 0000000000000000 [ 1149.739639][ T5703] R13: ffffc900039e7a48 R14: ffffc900039e7b40 R15: ffffc900039e7a48 [ 1149.739671][ T5703] _copy_from_user+0x98/0xd0 [ 1149.739699][ T5703] copy_msghdr_from_user+0x98/0x160 [ 1149.739737][ T5703] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1149.739780][ T5703] ? __pfx__kstrtoull+0x10/0x10 [ 1149.739819][ T5703] ___sys_sendmsg+0xfe/0x1d0 [ 1149.739857][ T5703] ? __pfx____sys_sendmsg+0x10/0x10 [ 1149.739908][ T5703] ? find_held_lock+0x2b/0x80 [ 1149.739950][ T5703] __sys_sendmmsg+0x200/0x420 [ 1149.739991][ T5703] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1149.740038][ T5703] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1149.740088][ T5703] ? fput+0x9b/0xd0 [ 1149.740122][ T5703] ? ksys_write+0x1ac/0x250 [ 1149.740149][ T5703] ? __pfx_ksys_write+0x10/0x10 [ 1149.740182][ T5703] __x64_sys_sendmmsg+0x9c/0x100 [ 1149.740219][ T5703] ? lockdep_hardirqs_on+0x7c/0x110 [ 1149.740261][ T5703] do_syscall_64+0xcd/0x4c0 [ 1149.740283][ T5703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.740307][ T5703] RIP: 0033:0x7fef4338eba9 [ 1149.740325][ T5703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1149.740348][ T5703] RSP: 002b:00007fef415d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1149.740369][ T5703] RAX: ffffffffffffffda RBX: 00007fef435d6090 RCX: 00007fef4338eba9 [ 1149.740385][ T5703] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 1149.740399][ T5703] RBP: 00007fef415d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1149.740414][ T5703] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000001 [ 1149.740428][ T5703] R13: 00007fef435d6128 R14: 00007fef435d6090 R15: 00007ffd327ca7c8 [ 1149.740458][ T5703] [ 1150.571588][T20510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.578773][T20510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1151.329915][ T4673] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1151.343169][ T4673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1151.987901][ T5811] can: request_module (can-proto-3) failed. [ 1152.318479][ T4673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1153.092868][ T30] audit: type=1800 audit(4294967706.860:92): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2648" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1153.861354][ T4673] veth0_vlan: entered promiscuous mode [ 1153.888575][ T4673] veth1_vlan: entered promiscuous mode [ 1154.088285][ T4673] veth0_macvtap: entered promiscuous mode [ 1154.303853][ T4673] veth1_macvtap: entered promiscuous mode [ 1154.431192][ T4673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1154.509743][ T4673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1154.680197][ T5913] ima: policy update failed [ 1154.685384][ T30] audit: type=1802 audit(4294967708.468:93): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1154.714050][ T481] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.753113][ T30] audit: type=1800 audit(4294967708.538:94): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=80101 res=0 errno=0 [ 1154.776812][ T481] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.817004][ T481] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.858188][ T481] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.008604][T20509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.059984][T20509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.189858][T16926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.279708][T16926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.455588][ T481] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 11 with max blocks 77 with error 117 [ 1155.488282][ T481] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1155.488282][ T481] [ 1155.647796][ T5959] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1155.654587][ T5959] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1155.740036][ T5956] can: request_module (can-proto-3) failed. [ 1155.879035][ T5959] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1156.017191][ T5959] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1156.051054][ T5959] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1156.180398][ T5959] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1156.281053][ T5959] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1156.307106][ T5959] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1156.432790][ T5959] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1156.593726][ T5959] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1156.600039][ T5959] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1156.700490][ T5959] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1156.729809][ T5969] netlink: 'syz.1.2657': attribute type 1 has an invalid length. [ 1157.682032][ T5881] Bluetooth: hci4: command 0x0c1a tx timeout [ 1158.080273][ T5881] Bluetooth: hci0: command 0x0c1a tx timeout [ 1158.308909][ T5881] Bluetooth: hci1: command 0x0c1a tx timeout [ 1158.437338][ T6106] ima: policy update failed [ 1158.452539][ T30] audit: type=1802 audit(4294967712.258:95): pid=6106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1158.577691][ T30] audit: type=1800 audit(4294967712.378:96): pid=6121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2661" name="lu_gp_id" dev="configfs" ino=80504 res=0 errno=0 [ 1158.632213][ T5881] Bluetooth: hci2: command 0x0c1a tx timeout [ 1159.742056][ T5881] Bluetooth: hci4: command 0x0c1a tx timeout [ 1160.149297][ T5881] Bluetooth: hci0: command 0x0c1a tx timeout [ 1160.388129][ T5881] Bluetooth: hci1: command 0x0c1a tx timeout [ 1160.634177][ T6177] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2671'. [ 1160.697190][ T5881] Bluetooth: hci2: command 0x0c1a tx timeout [ 1160.842077][ T6189] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1161.116867][ T6198] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2677'. [ 1161.556557][ T6226] ima: policy update failed [ 1161.561295][ T30] audit: type=1802 audit(4294967715.384:97): pid=6226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1161.638527][ T30] audit: type=1800 audit(4294967715.464:98): pid=6200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2679" name="lu_gp_id" dev="configfs" ino=80627 res=0 errno=0 [ 1161.810805][ T5881] Bluetooth: hci4: command 0x0c1a tx timeout [ 1162.206786][ T6241] FAULT_INJECTION: forcing a failure. [ 1162.206786][ T6241] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1162.208652][ T5881] Bluetooth: hci0: command 0x0c1a tx timeout [ 1162.239796][ T6241] CPU: 1 UID: 0 PID: 6241 Comm: syz.3.2684 Tainted: G U syzkaller #0 PREEMPT(full) [ 1162.239853][ T6241] Tainted: [U]=USER [ 1162.239866][ T6241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1162.239886][ T6241] Call Trace: [ 1162.239898][ T6241] [ 1162.239912][ T6241] dump_stack_lvl+0x16c/0x1f0 [ 1162.239972][ T6241] should_fail_ex+0x512/0x640 [ 1162.240012][ T6241] should_fail_alloc_page+0xe7/0x130 [ 1162.240066][ T6241] prepare_alloc_pages+0x3c2/0x610 [ 1162.240119][ T6241] ? rcu_is_watching+0x12/0xc0 [ 1162.240160][ T6241] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1162.240205][ T6241] ? css_rstat_updated+0x1c2/0x510 [ 1162.240245][ T6241] ? __pfx_css_rstat_updated+0x10/0x10 [ 1162.240298][ T6241] ? __lock_acquire+0x62e/0x1ce0 [ 1162.240352][ T6241] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1162.240410][ T6241] ? __lock_acquire+0x62e/0x1ce0 [ 1162.240462][ T6241] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1162.240518][ T6241] ? policy_nodemask+0xea/0x4e0 [ 1162.240570][ T6241] alloc_pages_mpol+0x1fb/0x550 [ 1162.240621][ T6241] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1162.240674][ T6241] ? __lock_acquire+0x62e/0x1ce0 [ 1162.240726][ T6241] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1162.240784][ T6241] vma_alloc_folio_noprof+0xed/0x1e0 [ 1162.240840][ T6241] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1162.240909][ T6241] do_pte_missing+0x2230/0x3ba0 [ 1162.240946][ T6241] ? find_held_lock+0x2b/0x80 [ 1162.240991][ T6241] __handle_mm_fault+0x152a/0x2a50 [ 1162.241039][ T6241] ? __pfx___handle_mm_fault+0x10/0x10 [ 1162.241081][ T6241] ? __pte_offset_map_lock+0x174/0x310 [ 1162.241132][ T6241] ? find_held_lock+0x2b/0x80 [ 1162.241181][ T6241] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 1162.241255][ T6241] handle_mm_fault+0x589/0xd10 [ 1162.241302][ T6241] __get_user_pages+0x551/0x34a0 [ 1162.241376][ T6241] ? __pfx___get_user_pages+0x10/0x10 [ 1162.241444][ T6241] populate_vma_page_range+0x267/0x3f0 [ 1162.241505][ T6241] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1162.241561][ T6241] ? __pfx_find_vma_intersection+0x10/0x10 [ 1162.241615][ T6241] ? do_mmap+0x69c/0x1210 [ 1162.241670][ T6241] __mm_populate+0x1d8/0x380 [ 1162.241705][ T6241] ? __pfx___mm_populate+0x10/0x10 [ 1162.241766][ T6241] ? up_write+0x1b2/0x520 [ 1162.241822][ T6241] vm_mmap_pgoff+0x37f/0x470 [ 1162.241880][ T6241] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1162.241943][ T6241] ? __x64_sys_futex+0x1e0/0x4c0 [ 1162.241988][ T6241] ? __x64_sys_futex+0x1e9/0x4c0 [ 1162.242039][ T6241] ksys_mmap_pgoff+0x7d/0x5c0 [ 1162.242089][ T6241] ? xfd_validate_state+0x61/0x180 [ 1162.242141][ T6241] ? __pfx___do_sys_close_range+0x10/0x10 [ 1162.242190][ T6241] __x64_sys_mmap+0x125/0x190 [ 1162.242268][ T6241] do_syscall_64+0xcd/0x4c0 [ 1162.242321][ T6241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.242359][ T6241] RIP: 0033:0x7f0874f8eba9 [ 1162.242387][ T6241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1162.242433][ T6241] RSP: 002b:00007f0875d7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1162.242465][ T6241] RAX: ffffffffffffffda RBX: 00007f08751d5fa0 RCX: 00007f0874f8eba9 [ 1162.242488][ T6241] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1162.242509][ T6241] RBP: 00007f0875011e19 R08: 0000000000000002 R09: 0000000000008000 [ 1162.242531][ T6241] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1162.242552][ T6241] R13: 00007f08751d6038 R14: 00007f08751d5fa0 R15: 00007ffccb7c7218 [ 1162.242596][ T6241] [ 1162.604474][ T5881] Bluetooth: hci1: command 0x0c1a tx timeout [ 1162.765769][ T5881] Bluetooth: hci2: command 0x0c1a tx timeout [ 1163.786986][ T6273] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1164.122854][ T6305] can: request_module (can-proto-3) failed. [ 1164.713059][ T6331] ima: policy update failed [ 1164.771221][ T30] audit: type=1802 audit(4294967718.560:99): pid=6331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1164.831580][ T30] audit: type=1800 audit(4294967718.560:100): pid=6331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=81957 res=0 errno=0 [ 1166.912638][ T6380] can: request_module (can-proto-3) failed. [ 1167.166265][ T6405] ima: policy update failed [ 1167.171325][ T30] audit: type=1802 audit(4294967721.023:101): pid=6405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1167.228766][ T30] audit: type=1800 audit(4294967721.023:102): pid=6405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=82108 res=0 errno=0 [ 1169.215883][ T6499] can: request_module (can-proto-3) failed. [ 1169.332013][ T6504] netlink: 93 bytes leftover after parsing attributes in process `syz.3.2724'. [ 1169.762139][ T6543] ima: policy update failed [ 1169.781169][ T30] audit: type=1802 audit(4294967723.647:103): pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1169.840320][ T6500] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1169.948634][ T6500] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1169.958659][ T30] audit: type=1800 audit(4294967723.667:104): pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=82334 res=0 errno=0 [ 1169.988471][ T6500] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1169.994926][ T6500] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1170.309740][ T6593] ima: policy update failed [ 1170.325146][ T30] audit: type=1802 audit(4294967724.189:105): pid=6593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1170.426139][ T30] audit: type=1800 audit(4294967724.189:106): pid=6593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=81762 res=0 errno=0 [ 1171.918084][T23991] Bluetooth: hci4: command 0x0c1a tx timeout [ 1171.997643][T23991] Bluetooth: hci2: command 0x0c1a tx timeout [ 1172.003762][T23991] Bluetooth: hci1: command 0x0c1a tx timeout [ 1172.005577][ T5881] Bluetooth: hci0: command 0x0c1a tx timeout [ 1172.361933][ T6774] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2736'. [ 1172.546918][ T6745] ima: policy update failed [ 1172.551859][ T30] audit: type=1802 audit(4294967726.431:107): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1172.577800][ T30] audit: type=1800 audit(4294967726.461:108): pid=6745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=82492 res=0 errno=0 [ 1173.424591][ T6783] can: request_module (can-proto-3) failed. [ 1173.841233][ T30] audit: type=1800 audit(4294967727.738:109): pid=6794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=81888 res=0 errno=0 [ 1174.259357][ T6793] ima: policy update failed [ 1174.264262][ T30] audit: type=1802 audit(4294967728.150:110): pid=6793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2740" res=0 errno=0 [ 1175.424724][ T6846] ima: policy update failed [ 1175.454725][ T30] audit: type=1802 audit(4294967729.336:111): pid=6846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1175.474385][ T30] audit: type=1800 audit(4294967729.346:112): pid=6846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=82621 res=0 errno=0 [ 1175.905135][ T486] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1319 with max blocks 24 with error 117 [ 1175.952937][ T486] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1175.952937][ T486] [ 1176.108869][ T6873] can: request_module (can-proto-3) failed. [ 1177.085549][ T6903] blktrace: Concurrent blktraces are not allowed on ram7 [ 1177.132171][ T6890] can: request_module (can-proto-3) failed. [ 1177.576241][ T6929] ima: policy update failed [ 1177.584850][ T30] audit: type=1802 audit(4294967731.497:113): pid=6929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1177.698095][ T30] audit: type=1800 audit(4294967731.497:114): pid=6929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=83068 res=0 errno=0 [ 1178.655879][ T6948] ima: policy update failed [ 1178.735055][ T30] audit: type=1802 audit(4294967732.653:115): pid=6948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1178.806913][ T30] audit: type=1800 audit(4294967732.724:116): pid=6961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2761" name="lu_gp_id" dev="configfs" ino=83147 res=0 errno=0 [ 1179.518240][ T6987] can: request_module (can-proto-3) failed. [ 1180.480589][ T30] audit: type=1800 audit(4294967734.392:117): pid=7138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=83229 res=0 errno=0 [ 1181.411024][ T7105] ima: policy update failed [ 1181.416775][ T30] audit: type=1802 audit(4294967735.347:118): pid=7105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2776" res=0 errno=0 [ 1182.205240][ T7171] can: request_module (can-proto-3) failed. [ 1182.348690][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.355160][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.899813][ T7201] ima: policy update failed [ 1182.967763][ T30] audit: type=1802 audit(4294967736.895:119): pid=7201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1183.032016][ T30] audit: type=1800 audit(4294967736.976:120): pid=7222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2775" name="lu_gp_id" dev="configfs" ino=83308 res=0 errno=0 [ 1183.047424][ T7215] can: request_module (can-proto-3) failed. [ 1186.057622][ T7364] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78002 [ 1186.080461][ T7364] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1186.112564][ T7364] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1186.157339][ T7364] page_type: f5(slab) [ 1186.161547][ T7364] raw: 00fff00000000040 ffff88801b841b40 0000000000000000 0000000000000001 [ 1186.172191][ T7364] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1186.180940][ T7364] head: 00fff00000000040 ffff88801b841b40 0000000000000000 0000000000000001 [ 1186.194395][ T7364] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1186.273233][ T7364] head: 00fff00000000001 ffffea0001e00081 00000000ffffffff 00000000ffffffff [ 1186.340430][ T7364] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1186.401316][ T7364] page dumped because: unmovable page [ 1186.435869][ T7364] page_owner tracks the page as allocated [ 1186.441711][ T7364] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5826, tgid 5820 (syz.1.2646), ts 1152098796998, free_ts 1134775756685 [ 1186.485114][ T7364] post_alloc_hook+0x1c0/0x230 [ 1186.489966][ T7364] get_page_from_freelist+0x132b/0x38e0 [ 1186.496164][ T7364] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1186.502645][ T7364] alloc_pages_mpol+0x1fb/0x550 [ 1186.507664][ T7364] new_slab+0x247/0x330 [ 1186.511872][ T7364] ___slab_alloc+0xcf2/0x1750 [ 1186.528546][ T7364] __slab_alloc.constprop.0+0x56/0xb0 [ 1186.534373][ T7364] __kmalloc_noprof+0x2f2/0x510 [ 1186.539413][ T7364] iter_file_splice_write+0x1cc/0x12e0 [ 1186.545565][ T7364] direct_splice_actor+0x18f/0x6c0 [ 1186.550846][ T7364] splice_direct_to_actor+0x342/0xa30 [ 1186.584423][ T7364] do_splice_direct+0x174/0x240 [ 1186.589729][ T7364] do_sendfile+0xb06/0xe50 [ 1186.597251][ T7364] __x64_sys_sendfile64+0x1d8/0x220 [ 1186.602822][ T7364] do_syscall_64+0xcd/0x4c0 [ 1186.607472][ T7364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.614564][ T7364] page last free pid 4584 tgid 4584 stack trace: [ 1186.643835][ T7364] __free_frozen_pages+0x7d5/0x10f0 [ 1186.649624][ T7364] vfree+0x1fd/0xb50 [ 1186.702938][ T7364] kcov_close+0x34/0x60 [ 1186.707389][ T7364] __fput+0x402/0xb70 [ 1186.712469][ T7364] task_work_run+0x14d/0x240 [ 1186.717188][ T7364] do_exit+0x86f/0x2bf0 [ 1186.727426][ T7364] do_group_exit+0xd3/0x2a0 [ 1186.732639][ T7364] get_signal+0x2673/0x26d0 [ 1186.741211][ T7364] arch_do_signal_or_restart+0x8f/0x790 [ 1186.758316][ T7364] irqentry_exit_to_user_mode+0x13e/0x290 [ 1186.774375][ T7364] asm_exc_page_fault+0x26/0x30 [ 1188.158017][ T7419] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1188.177564][ T7419] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1188.185844][ T7419] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1188.194981][ T7419] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1188.934612][ T30] audit: type=1806 audit(4294968765.890:121): xattr="." res=0 [ 1189.788045][ T7477] ima: policy update failed [ 1189.788829][ T30] audit: type=1802 audit(4294968766.764:122): pid=7477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1189.790407][ T30] audit: type=1800 audit(4294968766.764:123): pid=7477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=83635 res=0 errno=0 [ 1189.846926][ T7457] sp0: Synchronizing with TNC [ 1189.986391][ T5881] Bluetooth: hci4: command 0x0c1a tx timeout [ 1189.989184][ T7452] [U] [ 1190.225111][ T4681] Bluetooth: hci1: command 0x0c1a tx timeout [ 1190.231271][ T4681] Bluetooth: hci0: command 0x0c1a tx timeout [ 1190.237588][ T5881] Bluetooth: hci2: command 0x0c1a tx timeout [ 1191.101992][ T7526] syz.1.2812 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1191.265199][ T7518] can: request_module (can-proto-3) failed. [ 1192.611514][ T7567] can: request_module (can-proto-3) failed. [ 1192.664478][ T7582] ima: policy update failed [ 1192.682002][ T30] audit: type=1802 audit(4294968769.667:124): pid=7582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1192.790396][ T30] audit: type=1800 audit(4294968769.698:125): pid=7582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=83793 res=0 errno=0 [ 1193.336070][ T7629] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 1194.195045][ T7634] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 1194.563652][ T7653] can: request_module (can-proto-3) failed. [ 1195.751636][ T7708] HfR: entered promiscuous mode [ 1195.926586][ T7719] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2834'. [ 1196.330920][ T7719] team0: Port device team_slave_1 removed [ 1196.586708][ T7733] can: request_module (can-proto-3) failed. [ 1196.609536][ T7737] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1198.532452][ T7852] FAULT_INJECTION: forcing a failure. [ 1198.532452][ T7852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1198.565732][ T7852] CPU: 0 UID: 0 PID: 7852 Comm: syz.4.2845 Tainted: G U syzkaller #0 PREEMPT(full) [ 1198.565770][ T7852] Tainted: [U]=USER [ 1198.565778][ T7852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1198.565792][ T7852] Call Trace: [ 1198.565800][ T7852] [ 1198.565810][ T7852] dump_stack_lvl+0x16c/0x1f0 [ 1198.565851][ T7852] should_fail_ex+0x512/0x640 [ 1198.565877][ T7852] _copy_to_user+0x32/0xd0 [ 1198.565905][ T7852] simple_read_from_buffer+0xcb/0x170 [ 1198.565932][ T7852] proc_fail_nth_read+0x197/0x240 [ 1198.565958][ T7852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1198.565986][ T7852] ? rw_verify_area+0xcf/0x6c0 [ 1198.566009][ T7852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1198.566040][ T7852] vfs_read+0x1e1/0xcf0 [ 1198.566071][ T7852] ? __pfx___mutex_lock+0x10/0x10 [ 1198.566092][ T7852] ? __pfx_vfs_read+0x10/0x10 [ 1198.566126][ T7852] ? __fget_files+0x20e/0x3c0 [ 1198.566160][ T7852] ksys_read+0x12a/0x250 [ 1198.566185][ T7852] ? __pfx_ksys_read+0x10/0x10 [ 1198.566212][ T7852] ? fdget+0x187/0x210 [ 1198.566241][ T7852] do_syscall_64+0xcd/0x4c0 [ 1198.566263][ T7852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.566287][ T7852] RIP: 0033:0x7fca56d8d5bc [ 1198.566305][ T7852] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1198.566328][ T7852] RSP: 002b:00007fca57b72030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1198.566349][ T7852] RAX: ffffffffffffffda RBX: 00007fca56fd6090 RCX: 00007fca56d8d5bc [ 1198.566365][ T7852] RDX: 000000000000000f RSI: 00007fca57b720a0 RDI: 0000000000000006 [ 1198.566379][ T7852] RBP: 00007fca57b72090 R08: 0000000000000000 R09: 0000000000000000 [ 1198.566394][ T7852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1198.566408][ T7852] R13: 00007fca56fd6128 R14: 00007fca56fd6090 R15: 00007ffd08766ad8 [ 1198.566437][ T7852] [ 1199.459539][ T7843] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1199.465926][ T7843] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1199.472518][ T7843] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1199.478775][ T7843] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1199.511609][ T7854] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1199.514327][ T7859] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1201.140826][ T4681] Bluetooth: hci4: command 0x0c1a tx timeout [ 1201.391337][ T484] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 4 with max blocks 46 with error 117 [ 1201.432058][ T484] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1201.432058][ T484] [ 1201.533433][ T4681] Bluetooth: hci2: command 0x0c1a tx timeout [ 1201.540797][ T4681] Bluetooth: hci1: command 0x0c1a tx timeout [ 1201.547491][ T5881] Bluetooth: hci0: command 0x0c1a tx timeout [ 1201.698301][ T7970] FAULT_INJECTION: forcing a failure. [ 1201.698301][ T7970] name failslab, interval 1, probability 0, space 0, times 0 [ 1201.712718][ T7970] CPU: 1 UID: 0 PID: 7970 Comm: syz.1.2857 Tainted: G U syzkaller #0 PREEMPT(full) [ 1201.712771][ T7970] Tainted: [U]=USER [ 1201.712783][ T7970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1201.712804][ T7970] Call Trace: [ 1201.712816][ T7970] [ 1201.712829][ T7970] dump_stack_lvl+0x16c/0x1f0 [ 1201.712890][ T7970] should_fail_ex+0x512/0x640 [ 1201.712921][ T7970] ? __kmalloc_noprof+0xbf/0x510 [ 1201.712967][ T7970] ? cache_create_net+0x9d/0x220 [ 1201.713012][ T7970] should_failslab+0xc2/0x120 [ 1201.713059][ T7970] __kmalloc_noprof+0xd2/0x510 [ 1201.713118][ T7970] cache_create_net+0x9d/0x220 [ 1201.713170][ T7970] nfsd_idmap_init+0x11f/0x250 [ 1201.713222][ T7970] ? __pfx_nfsd_net_init+0x10/0x10 [ 1201.713262][ T7970] nfsd_net_init+0x69/0x3d0 [ 1201.713304][ T7970] ? __pfx_nfsd_net_init+0x10/0x10 [ 1201.713345][ T7970] ops_init+0x1e2/0x5f0 [ 1201.713382][ T7970] setup_net+0x10f/0x380 [ 1201.713412][ T7970] ? lockdep_init_map_type+0x5c/0x280 [ 1201.713464][ T7970] ? __pfx_setup_net+0x10/0x10 [ 1201.713500][ T7970] ? debug_mutex_init+0x37/0x70 [ 1201.713540][ T7970] copy_net_ns+0x2a6/0x5f0 [ 1201.713583][ T7970] create_new_namespaces+0x3ea/0xa90 [ 1201.713634][ T7970] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1201.713680][ T7970] ksys_unshare+0x45b/0xa40 [ 1201.713731][ T7970] ? __pfx_ksys_unshare+0x10/0x10 [ 1201.713783][ T7970] ? xfd_validate_state+0x61/0x180 [ 1201.713863][ T7970] __x64_sys_unshare+0x31/0x40 [ 1201.713914][ T7970] do_syscall_64+0xcd/0x4c0 [ 1201.713950][ T7970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.713986][ T7970] RIP: 0033:0x7fae1fd8eba9 [ 1201.714014][ T7970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1201.714050][ T7970] RSP: 002b:00007fae20b44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1201.714083][ T7970] RAX: ffffffffffffffda RBX: 00007fae1ffd6180 RCX: 00007fae1fd8eba9 [ 1201.714114][ T7970] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1201.714136][ T7970] RBP: 00007fae1fe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1201.714158][ T7970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1201.714180][ T7970] R13: 00007fae1ffd6218 R14: 00007fae1ffd6180 R15: 00007ffed58ca6e8 [ 1201.714226][ T7970] [ 1204.982180][ T8031] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2867'. [ 1205.032648][ T8031] veth1_macvtap: left promiscuous mode [ 1206.037632][ T8091] FAULT_INJECTION: forcing a failure. [ 1206.037632][ T8091] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.133971][ T8091] CPU: 1 UID: 0 PID: 8091 Comm: syz.0.2873 Tainted: G U syzkaller #0 PREEMPT(full) [ 1206.134023][ T8091] Tainted: [U]=USER [ 1206.134035][ T8091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1206.134055][ T8091] Call Trace: [ 1206.134067][ T8091] [ 1206.134079][ T8091] dump_stack_lvl+0x16c/0x1f0 [ 1206.134137][ T8091] should_fail_ex+0x512/0x640 [ 1206.134180][ T8091] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1206.134220][ T8091] should_failslab+0xc2/0x120 [ 1206.134264][ T8091] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1206.134297][ T8091] ? __pfx_aa_file_perm+0x10/0x10 [ 1206.134349][ T8091] ? find_held_lock+0x2b/0x80 [ 1206.134379][ T8091] ? handle_policy_update+0xd0/0x1230 [ 1206.134416][ T8091] handle_policy_update+0xd0/0x1230 [ 1206.134452][ T8091] ? __pfx_handle_policy_update+0x10/0x10 [ 1206.134483][ T8091] ? apparmor_capable+0x114/0x1d0 [ 1206.134524][ T8091] ? bpf_lsm_capable+0x9/0x10 [ 1206.134555][ T8091] ? security_capable+0x7e/0x260 [ 1206.134595][ T8091] ? __pfx_safesetid_uid_file_write+0x10/0x10 [ 1206.134626][ T8091] safesetid_uid_file_write+0x84/0xc0 [ 1206.134663][ T8091] vfs_writev+0x5dc/0xde0 [ 1206.134719][ T8091] ? __pfx_vfs_writev+0x10/0x10 [ 1206.134754][ T8091] ? __mutex_lock+0x1c5/0x1060 [ 1206.134799][ T8091] ? __pfx___mutex_lock+0x10/0x10 [ 1206.134844][ T8091] ? __fget_files+0x20e/0x3c0 [ 1206.134878][ T8091] ? __fget_files+0x1e0/0x3c0 [ 1206.134925][ T8091] ? do_writev+0x132/0x340 [ 1206.134958][ T8091] do_writev+0x132/0x340 [ 1206.134995][ T8091] ? __pfx_do_writev+0x10/0x10 [ 1206.135044][ T8091] do_syscall_64+0xcd/0x4c0 [ 1206.135078][ T8091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.135111][ T8091] RIP: 0033:0x7fef4338eba9 [ 1206.135137][ T8091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1206.135169][ T8091] RSP: 002b:00007fef415f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1206.135200][ T8091] RAX: ffffffffffffffda RBX: 00007fef435d5fa0 RCX: 00007fef4338eba9 [ 1206.135222][ T8091] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 1206.135243][ T8091] RBP: 00007fef415f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1206.135263][ T8091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1206.135283][ T8091] R13: 00007fef435d6038 R14: 00007fef435d5fa0 R15: 00007ffd327ca7c8 [ 1206.135326][ T8091] [ 1206.629987][ T481] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 3547 with max blocks 37 with error 117 [ 1206.667669][ T481] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1206.667669][ T481] [ 1206.693284][ T481] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 3325 with max blocks 32 with error 117 [ 1206.708126][ T481] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1206.708126][ T481] [ 1207.424941][ T8059] Process accounting resumed [ 1208.892198][ T8177] can: request_module (can-proto-3) failed. [ 1209.767531][ T30] audit: type=1800 audit(4294968786.838:126): pid=8238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2886" name="lu_gp_id" dev="configfs" ino=85437 res=0 errno=0 [ 1209.884124][ T8209] can: request_module (can-proto-3) failed. [ 1210.154225][ T8257] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2890'. [ 1210.174718][ T8257] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2890'. [ 1213.492712][ T481] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 899 with max blocks 1 with error 117 [ 1213.600697][ T481] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1213.600697][ T481] [ 1215.590779][ T8445] can: request_module (can-proto-3) failed. [ 1215.790467][ T8423] Process accounting resumed [ 1216.366102][ T8456] can: request_module (can-proto-3) failed. [ 1217.326348][ T8516] netlink: 'syz.3.2916': attribute type 1 has an invalid length. [ 1218.509184][ T8634] FAULT_INJECTION: forcing a failure. [ 1218.509184][ T8634] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.536024][ T8634] CPU: 0 UID: 0 PID: 8634 Comm: syz.1.2920 Tainted: G U syzkaller #0 PREEMPT(full) [ 1218.536076][ T8634] Tainted: [U]=USER [ 1218.536088][ T8634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1218.536109][ T8634] Call Trace: [ 1218.536121][ T8634] [ 1218.536133][ T8634] dump_stack_lvl+0x16c/0x1f0 [ 1218.536190][ T8634] should_fail_ex+0x512/0x640 [ 1218.536220][ T8634] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1218.536262][ T8634] should_failslab+0xc2/0x120 [ 1218.536307][ T8634] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1218.536343][ T8634] ? mark_held_locks+0x49/0x80 [ 1218.536384][ T8634] ? rfkill_fop_open+0x1b6/0x750 [ 1218.536440][ T8634] rfkill_fop_open+0x1b6/0x750 [ 1218.536487][ T8634] ? __pfx_rfkill_fop_open+0x10/0x10 [ 1218.536531][ T8634] misc_open+0x35d/0x420 [ 1218.536574][ T8634] ? __pfx_misc_open+0x10/0x10 [ 1218.536617][ T8634] chrdev_open+0x234/0x6a0 [ 1218.536660][ T8634] ? __pfx_apparmor_file_open+0x10/0x10 [ 1218.536701][ T8634] ? __pfx_chrdev_open+0x10/0x10 [ 1218.536749][ T8634] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1218.536797][ T8634] do_dentry_open+0x982/0x1530 [ 1218.536841][ T8634] ? __pfx_chrdev_open+0x10/0x10 [ 1218.536894][ T8634] vfs_open+0x82/0x3f0 [ 1218.536950][ T8634] path_openat+0x1de4/0x2cb0 [ 1218.537006][ T8634] ? __pfx_path_openat+0x10/0x10 [ 1218.537058][ T8634] do_filp_open+0x20b/0x470 [ 1218.537101][ T8634] ? __pfx_do_filp_open+0x10/0x10 [ 1218.537174][ T8634] ? alloc_fd+0x471/0x7d0 [ 1218.537223][ T8634] do_sys_openat2+0x11b/0x1d0 [ 1218.537275][ T8634] ? __pfx_do_sys_openat2+0x10/0x10 [ 1218.537331][ T8634] ? __pfx___might_resched+0x10/0x10 [ 1218.537377][ T8634] __x64_sys_openat+0x174/0x210 [ 1218.537408][ T8634] ? __pfx___x64_sys_openat+0x10/0x10 [ 1218.537467][ T8634] do_syscall_64+0xcd/0x4c0 [ 1218.537501][ T8634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.537535][ T8634] RIP: 0033:0x7fae1fd8eba9 [ 1218.537561][ T8634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1218.537594][ T8634] RSP: 002b:00007fae20b86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1218.537626][ T8634] RAX: ffffffffffffffda RBX: 00007fae1ffd5fa0 RCX: 00007fae1fd8eba9 [ 1218.537647][ T8634] RDX: 0000000000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1218.537668][ T8634] RBP: 00007fae1fe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1218.537689][ T8634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1218.537710][ T8634] R13: 00007fae1ffd6038 R14: 00007fae1ffd5fa0 R15: 00007ffed58ca6e8 [ 1218.537753][ T8634] [ 1220.102078][ T8670] can: request_module (can-proto-3) failed. [ 1221.288709][ T8713] can: request_module (can-proto-3) failed. [ 1221.435622][ T8642] Process accounting resumed [ 1222.076773][ T8744] block nbd8: shutting down sockets [ 1222.158015][ T8758] netlink: 'syz.1.2930': attribute type 1 has an invalid length. [ 1224.725691][ T8885] usb usb37: usbfs: process 8885 (syz.4.2941) did not claim interface 0 before use [ 1226.553337][ T8978] FAULT_INJECTION: forcing a failure. [ 1226.553337][ T8978] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.663550][ T8978] CPU: 0 UID: 0 PID: 8978 Comm: syz.3.2950 Tainted: G U syzkaller #0 PREEMPT(full) [ 1226.663608][ T8978] Tainted: [U]=USER [ 1226.663619][ T8978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1226.663640][ T8978] Call Trace: [ 1226.663653][ T8978] [ 1226.663665][ T8978] dump_stack_lvl+0x16c/0x1f0 [ 1226.663730][ T8978] should_fail_ex+0x512/0x640 [ 1226.663761][ T8978] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1226.663818][ T8978] should_failslab+0xc2/0x120 [ 1226.663866][ T8978] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1226.663905][ T8978] ? sctp_endpoint_new+0x7c/0xcd0 [ 1226.663958][ T8978] ? lockdep_init_map_type+0x5c/0x280 [ 1226.664012][ T8978] sctp_endpoint_new+0x7c/0xcd0 [ 1226.664071][ T8978] sctp_init_sock+0xe2d/0x1330 [ 1226.664119][ T8978] ? __pfx_sctp_init_sock+0x10/0x10 [ 1226.664169][ T8978] inet_create+0x939/0x1040 [ 1226.664212][ T8978] ? inet_create+0x93/0x1040 [ 1226.664261][ T8978] __sock_create+0x338/0x8d0 [ 1226.664296][ T8978] __sys_socket+0x14d/0x260 [ 1226.664327][ T8978] ? __pfx___sys_socket+0x10/0x10 [ 1226.664357][ T8978] ? xfd_validate_state+0x61/0x180 [ 1226.664392][ T8978] ? __pfx_ksys_write+0x10/0x10 [ 1226.664427][ T8978] __x64_sys_socket+0x72/0xb0 [ 1226.664456][ T8978] ? lockdep_hardirqs_on+0x7c/0x110 [ 1226.664492][ T8978] do_syscall_64+0xcd/0x4c0 [ 1226.664516][ T8978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.664540][ T8978] RIP: 0033:0x7f0874f8eba9 [ 1226.664560][ T8978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1226.664584][ T8978] RSP: 002b:00007f0875d7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1226.664607][ T8978] RAX: ffffffffffffffda RBX: 00007f08751d5fa0 RCX: 00007f0874f8eba9 [ 1226.664624][ T8978] RDX: 0000000000000084 RSI: 0000000000000801 RDI: 0000000000000002 [ 1226.664654][ T8978] RBP: 00007f0875011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1226.664669][ T8978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1226.664690][ T8978] R13: 00007f08751d6038 R14: 00007f08751d5fa0 R15: 00007ffccb7c7218 [ 1226.664720][ T8978] [ 1226.883093][ C0] vkms_vblank_simulate: vblank timer overrun [ 1227.121098][ T9004] ima: policy update failed [ 1227.128143][ T30] audit: type=1802 audit(4294968804.269:127): pid=9004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1227.178303][ T8994] netlink: 'syz.4.2949': attribute type 1 has an invalid length. [ 1227.186397][ T30] audit: type=1800 audit(4294968804.269:128): pid=9004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=87158 res=0 errno=0 [ 1227.683202][ T9025] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2953'. [ 1229.103098][ T9117] can: request_module (can-proto-3) failed. [ 1231.056428][ T9155] block nbd8: shutting down sockets [ 1231.090363][ T9163] Invalid ELF header magic: != ELF [ 1232.138419][ T9186] can: request_module (can-proto-3) failed. [ 1234.482030][ T9225] can: request_module (can-proto-3) failed. [ 1234.654252][ T9239] can: request_module (can-proto-0) failed. [ 1235.446487][ T9281] netlink: 'syz.3.2981': attribute type 1 has an invalid length. [ 1235.640204][ T9293] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 1239.043696][T20510] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 3553 with max blocks 31 with error 117 [ 1239.075076][T20510] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1239.075076][T20510] [ 1240.983433][ T9484] can: request_module (can-proto-3) failed. [ 1243.457227][ T9574] FAULT_INJECTION: forcing a failure. [ 1243.457227][ T9574] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1243.500636][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.507168][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.600977][ T9574] CPU: 0 UID: 0 PID: 9574 Comm: syz.1.2999 Tainted: G U syzkaller #0 PREEMPT(full) [ 1243.601031][ T9574] Tainted: [U]=USER [ 1243.601042][ T9574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1243.601062][ T9574] Call Trace: [ 1243.601072][ T9574] [ 1243.601084][ T9574] dump_stack_lvl+0x16c/0x1f0 [ 1243.601127][ T9574] should_fail_ex+0x512/0x640 [ 1243.601151][ T9574] get_futex_key+0x1d0/0x1560 [ 1243.601182][ T9574] ? __pfx_get_futex_key+0x10/0x10 [ 1243.601209][ T9574] ? find_held_lock+0x2b/0x80 [ 1243.601237][ T9574] futex_wake+0xea/0x530 [ 1243.601272][ T9574] ? __pfx_futex_wake+0x10/0x10 [ 1243.601321][ T9574] ? find_held_lock+0x2b/0x80 [ 1243.601352][ T9574] ? __might_fault+0xe3/0x190 [ 1243.601395][ T9574] do_futex+0x1e3/0x350 [ 1243.601438][ T9574] ? __pfx_do_futex+0x10/0x10 [ 1243.601479][ T9574] ? snd_pcm_oss_ioctl+0x2c2/0x37a0 [ 1243.601528][ T9574] __x64_sys_futex+0x1e0/0x4c0 [ 1243.601574][ T9574] ? __fget_files+0x20e/0x3c0 [ 1243.601610][ T9574] ? __pfx___x64_sys_futex+0x10/0x10 [ 1243.601657][ T9574] ? fput+0x9b/0xd0 [ 1243.601718][ T9574] do_syscall_64+0xcd/0x4c0 [ 1243.601750][ T9574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1243.601784][ T9574] RIP: 0033:0x7fae1fd8eba9 [ 1243.601809][ T9574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1243.601842][ T9574] RSP: 002b:00007fae20b860e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1243.601874][ T9574] RAX: ffffffffffffffda RBX: 00007fae1ffd5fa8 RCX: 00007fae1fd8eba9 [ 1243.601896][ T9574] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fae1ffd5fac [ 1243.601917][ T9574] RBP: 00007fae1ffd5fa0 R08: 00007fae20b87000 R09: 0000000000000000 [ 1243.601937][ T9574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1243.601956][ T9574] R13: 00007fae1ffd6038 R14: 00007ffed58ca600 R15: 00007ffed58ca6e8 [ 1243.601996][ T9574] [ 1245.811702][ T9648] FAULT_INJECTION: forcing a failure. [ 1245.811702][ T9648] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1245.913012][ T9648] CPU: 1 UID: 0 PID: 9648 Comm: syz.4.3003 Tainted: G U syzkaller #0 PREEMPT(full) [ 1245.913066][ T9648] Tainted: [U]=USER [ 1245.913078][ T9648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1245.913097][ T9648] Call Trace: [ 1245.913109][ T9648] [ 1245.913123][ T9648] dump_stack_lvl+0x16c/0x1f0 [ 1245.913181][ T9648] should_fail_ex+0x512/0x640 [ 1245.913220][ T9648] should_fail_alloc_page+0xe7/0x130 [ 1245.913279][ T9648] prepare_alloc_pages+0x3c2/0x610 [ 1245.913338][ T9648] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1245.913380][ T9648] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 1245.913429][ T9648] ? do_raw_spin_lock+0x12c/0x2b0 [ 1245.913531][ T9648] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1245.913573][ T9648] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1245.913620][ T9648] ? kvm_mmu_notifier_invalidate_range_start+0x742/0xb00 [ 1245.913706][ T9648] ? __lock_acquire+0xb97/0x1ce0 [ 1245.913745][ T9648] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1245.913797][ T9648] ? policy_nodemask+0xea/0x4e0 [ 1245.913841][ T9648] alloc_pages_mpol+0x1fb/0x550 [ 1245.913886][ T9648] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1245.913927][ T9648] ? do_raw_spin_lock+0x12c/0x2b0 [ 1245.913974][ T9648] ? find_held_lock+0x2b/0x80 [ 1245.914012][ T9648] alloc_pages_noprof+0x131/0x390 [ 1245.914056][ T9648] __pmd_alloc+0x3b/0x930 [ 1245.914100][ T9648] ? __pud_alloc+0x526/0x750 [ 1245.914149][ T9648] copy_page_range+0x3eaf/0x5c80 [ 1245.914187][ T9648] ? copy_process+0x4081/0x7690 [ 1245.914256][ T9648] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1245.914307][ T9648] ? mas_wr_store_entry+0xa14/0x2550 [ 1245.914341][ T9648] ? mas_destroy+0x5de/0xa20 [ 1245.914373][ T9648] ? __pfx_copy_page_range+0x10/0x10 [ 1245.914410][ T9648] ? mas_store+0x7a9/0x1160 [ 1245.914444][ T9648] ? find_held_lock+0x2b/0x80 [ 1245.914476][ T9648] ? __pfx_mas_store+0x10/0x10 [ 1245.914506][ T9648] ? __vma_enter_locked+0x163/0x3f0 [ 1245.914558][ T9648] dup_mmap+0xe88/0x21d0 [ 1245.914623][ T9648] ? __pfx_dup_mmap+0x10/0x10 [ 1245.914700][ T9648] copy_process+0x4081/0x7690 [ 1245.914778][ T9648] ? __pfx_copy_process+0x10/0x10 [ 1245.914822][ T9648] ? futex_private_hash_put+0x176/0x300 [ 1245.914870][ T9648] ? futex_private_hash_put+0x18a/0x300 [ 1245.914917][ T9648] kernel_clone+0xfc/0x930 [ 1245.914961][ T9648] ? __pfx_futex_wake+0x10/0x10 [ 1245.915010][ T9648] ? __pfx_kernel_clone+0x10/0x10 [ 1245.915052][ T9648] ? rcu_is_watching+0x12/0xc0 [ 1245.915111][ T9648] __do_sys_clone+0xce/0x120 [ 1245.915175][ T9648] ? __pfx___do_sys_clone+0x10/0x10 [ 1245.915220][ T9648] ? __pfx___might_resched+0x10/0x10 [ 1245.915280][ T9648] ? xfd_validate_state+0x61/0x180 [ 1245.915329][ T9648] ? __pfx___do_sys_close_range+0x10/0x10 [ 1245.915382][ T9648] do_syscall_64+0xcd/0x4c0 [ 1245.915415][ T9648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.915451][ T9648] RIP: 0033:0x7fca56d8eba9 [ 1245.915479][ T9648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1245.915513][ T9648] RSP: 002b:00007fca57b92fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1245.915546][ T9648] RAX: ffffffffffffffda RBX: 00007fca56fd5fa0 RCX: 00007fca56d8eba9 [ 1245.915570][ T9648] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020a08200 [ 1245.915592][ T9648] RBP: 00007fca56e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1245.915613][ T9648] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1245.915635][ T9648] R13: 00007fca56fd6038 R14: 00007fca56fd5fa0 R15: 00007ffd08766ad8 [ 1245.915680][ T9648] [ 1247.631687][ T9262] Process accounting paused [ 1247.665636][ T9669] Invalid ELF header magic: != ELF [ 1248.538969][ T9704] netlink: 'syz.4.3009': attribute type 1 has an invalid length. [ 1248.598433][ T9704] netlink: zone id is out of range [ 1248.604229][ T9704] netlink: zone id is out of range [ 1248.609384][ T9704] netlink: zone id is out of range [ 1248.648279][ T9704] netlink: zone id is out of range [ 1248.744222][ T9704] netlink: zone id is out of range [ 1248.749410][ T9704] netlink: zone id is out of range [ 1248.801826][ T9704] netlink: zone id is out of range [ 1248.807203][ T9704] netlink: zone id is out of range [ 1248.822685][ T9704] netlink: zone id is out of range [ 1248.839937][ T9704] netlink: zone id is out of range [ 1248.985736][ T30] audit: type=1804 audit(4294968826.222:129): pid=9704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3009" name="/newroot/sys/kernel/tracing/current_tracer" dev="tracefs" ino=1239 res=1 errno=0 [ 1249.299818][ T9727] can: request_module (can-proto-3) failed. [ 1253.248517][ T30] audit: type=1326 audit(4294968830.512:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9869 comm="syz.4.3021" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca56d8eba9 code=0x0 [ 1253.482915][ T9864] netlink: 268 bytes leftover after parsing attributes in process `syz.1.3020'. [ 1254.744431][ T9528] Process accounting paused [ 1255.584856][ T9893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3031'. [ 1255.661097][ T9893] ecryptfs_miscdev_write: Invalid packet size [0] [ 1255.759899][ T9893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3031'. [ 1256.846127][ T9908] can: request_module (can-proto-3) failed. [ 1257.849411][ T9923] FAULT_INJECTION: forcing a failure. [ 1257.849411][ T9923] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1257.872034][ T9923] CPU: 0 UID: 0 PID: 9923 Comm: syz.1.3030 Tainted: G U syzkaller #0 PREEMPT(full) [ 1257.872079][ T9923] Tainted: [U]=USER [ 1257.872087][ T9923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1257.872101][ T9923] Call Trace: [ 1257.872108][ T9923] [ 1257.872117][ T9923] dump_stack_lvl+0x16c/0x1f0 [ 1257.872156][ T9923] should_fail_ex+0x512/0x640 [ 1257.872183][ T9923] should_fail_alloc_page+0xe7/0x130 [ 1257.872217][ T9923] prepare_alloc_pages+0x3c2/0x610 [ 1257.872250][ T9923] ? rcu_is_watching+0x12/0xc0 [ 1257.872280][ T9923] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 1257.872316][ T9923] ? stack_depot_save_flags+0x29/0x9c0 [ 1257.872341][ T9923] ? __lock_acquire+0x62e/0x1ce0 [ 1257.872377][ T9923] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1257.872415][ T9923] ? __lock_acquire+0x62e/0x1ce0 [ 1257.872449][ T9923] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1257.872484][ T9923] ? policy_nodemask+0xea/0x4e0 [ 1257.872523][ T9923] alloc_pages_mpol+0x1fb/0x550 [ 1257.872553][ T9923] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1257.872586][ T9923] ? __lock_acquire+0x62e/0x1ce0 [ 1257.872618][ T9923] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1257.872653][ T9923] vma_alloc_folio_noprof+0xed/0x1e0 [ 1257.872687][ T9923] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1257.872730][ T9923] do_pte_missing+0x2230/0x3ba0 [ 1257.872753][ T9923] ? find_held_lock+0x2b/0x80 [ 1257.872782][ T9923] __handle_mm_fault+0x152a/0x2a50 [ 1257.872812][ T9923] ? __pfx___handle_mm_fault+0x10/0x10 [ 1257.872839][ T9923] ? __pte_offset_map_lock+0x174/0x310 [ 1257.872870][ T9923] ? find_held_lock+0x2b/0x80 [ 1257.872900][ T9923] ? follow_page_pte.constprop.0+0x5cf/0x1390 [ 1257.872959][ T9923] handle_mm_fault+0x589/0xd10 [ 1257.872994][ T9923] __get_user_pages+0x551/0x34a0 [ 1257.873042][ T9923] ? __pfx___get_user_pages+0x10/0x10 [ 1257.873086][ T9923] populate_vma_page_range+0x267/0x3f0 [ 1257.873126][ T9923] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1257.873164][ T9923] ? __pfx_find_vma_intersection+0x10/0x10 [ 1257.873201][ T9923] ? do_mmap+0x69c/0x1210 [ 1257.873238][ T9923] __mm_populate+0x1d8/0x380 [ 1257.873260][ T9923] ? __pfx___mm_populate+0x10/0x10 [ 1257.873302][ T9923] ? up_write+0x1b2/0x520 [ 1257.873340][ T9923] vm_mmap_pgoff+0x37f/0x470 [ 1257.873378][ T9923] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1257.873419][ T9923] ? __x64_sys_futex+0x1e0/0x4c0 [ 1257.873448][ T9923] ? __x64_sys_futex+0x1e9/0x4c0 [ 1257.873482][ T9923] ksys_mmap_pgoff+0x7d/0x5c0 [ 1257.873519][ T9923] ? xfd_validate_state+0x61/0x180 [ 1257.873554][ T9923] ? __pfx_do_writev+0x10/0x10 [ 1257.873583][ T9923] __x64_sys_mmap+0x125/0x190 [ 1257.873624][ T9923] do_syscall_64+0xcd/0x4c0 [ 1257.873648][ T9923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.873672][ T9923] RIP: 0033:0x7fae1fd8eba9 [ 1257.873690][ T9923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1257.873714][ T9923] RSP: 002b:00007fae20b86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1257.873736][ T9923] RAX: ffffffffffffffda RBX: 00007fae1ffd5fa0 RCX: 00007fae1fd8eba9 [ 1257.873763][ T9923] RDX: 0000000000000003 RSI: 0000000000040009 RDI: 0000000000000000 [ 1257.873777][ T9923] RBP: 00007fae1fe11e19 R08: 0000000000000007 R09: 0000000000028000 [ 1257.873809][ T9923] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1257.873823][ T9923] R13: 00007fae1ffd6038 R14: 00007fae1ffd5fa0 R15: 00007ffed58ca6e8 [ 1257.873853][ T9923] [ 1259.006268][ T9947] can: request_module (can-proto-3) failed. [ 1259.387912][T20510] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 4 with max blocks 2 with error 117 [ 1259.425093][T20510] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1259.425093][T20510] [ 1259.624494][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1259.634597][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1260.369751][ T9993] can: request_module (can-proto-3) failed. [ 1260.688196][T10049] kAFS: unparsable volume name [ 1260.823640][T10053] ptrace attach of "./syz-executor exec"[10054] was attempted by "./syz-executor exec"[10053] [ 1261.181411][T10077] netlink: 'syz.1.3042': attribute type 1 has an invalid length. [ 1261.346664][T10063] tipc: Started in network mode [ 1261.374132][T10063] tipc: Node identity ee00, cluster identity 4711 [ 1261.383441][T10063] tipc: Node number set to 60928 [ 1261.434795][T10077] Process accounting resumed [ 1262.586453][T10110] can: request_module (can-proto-3) failed. [ 1262.645096][T10093] can: request_module (can-proto-3) failed. [ 1263.694983][T10131] ima: policy update failed [ 1263.737822][T10072] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1263.746143][ T30] audit: type=1802 audit(4294968841.071:131): pid=10131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1263.780344][T10072] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1263.809079][T10072] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1263.815172][T10072] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1263.828742][ T30] audit: type=1800 audit(4294968841.081:132): pid=10131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=89662 res=0 errno=0 [ 1263.889223][T23991] Bluetooth: hci4: command 0x0c1a tx timeout [ 1264.514901][ T30] audit: type=1326 audit(4294968841.835:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10188 comm="syz.3.3049" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0874f8eba9 code=0x0 [ 1264.571311][T10186] can: request_module (can-proto-3) failed. [ 1265.659298][T10209] can: request_module (can-proto-3) failed. [ 1265.790239][T23991] Bluetooth: hci0: command 0x0c1a tx timeout [ 1265.879398][T23991] Bluetooth: hci2: command 0x0c1a tx timeout [ 1265.885528][ T4681] Bluetooth: hci1: command 0x0c1a tx timeout [ 1266.784797][ T30] audit: type=1800 audit(4294968844.106:134): pid=10244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3055" name="members" dev="configfs" ino=89787 res=0 errno=0 [ 1266.864687][T10222] can: request_module (can-proto-3) failed. [ 1267.877044][T10314] bridge0: port 3(syz_tun) entered blocking state [ 1267.901334][T10314] bridge0: port 3(syz_tun) entered disabled state [ 1267.917416][T10314] syz_tun: entered allmulticast mode [ 1267.930761][T10314] syz_tun: entered promiscuous mode [ 1267.945208][T10314] bridge0: port 3(syz_tun) entered blocking state [ 1267.951879][T10314] bridge0: port 3(syz_tun) entered forwarding state [ 1269.173988][T10352] can: request_module (can-proto-3) failed. [ 1269.276945][T10285] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1269.335396][T10285] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1269.401869][T10285] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1269.412685][T10285] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1269.717146][ T30] audit: type=1326 audit(4294968847.059:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10362 comm="syz.0.3065" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef4338eba9 code=0x0 [ 1269.771960][T23991] Bluetooth: hci4: command 0x0c1a tx timeout [ 1269.780698][ T30] audit: type=1800 audit(4294968847.100:136): pid=10364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3066" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1270.350570][T10392] can: request_module (can-proto-3) failed. [ 1270.833352][T10407] FAULT_INJECTION: forcing a failure. [ 1270.833352][T10407] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.876327][T10407] CPU: 1 UID: 0 PID: 10407 Comm: syz.1.3077 Tainted: G U syzkaller #0 PREEMPT(full) [ 1270.876388][T10407] Tainted: [U]=USER [ 1270.876401][T10407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1270.876424][T10407] Call Trace: [ 1270.876438][T10407] [ 1270.876453][T10407] dump_stack_lvl+0x16c/0x1f0 [ 1270.876540][T10407] should_fail_ex+0x512/0x640 [ 1270.876577][T10407] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 1270.876618][T10407] should_failslab+0xc2/0x120 [ 1270.876671][T10407] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 1270.876717][T10407] ? __addrconf_sysctl_register+0xbb/0x360 [ 1270.876761][T10407] kmemdup_noprof+0x29/0x60 [ 1270.876805][T10407] __addrconf_sysctl_register+0xbb/0x360 [ 1270.876847][T10407] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 1270.876879][T10407] ? trace_kmalloc+0x2b/0xd0 [ 1270.876919][T10407] ? addrconf_init_net+0x1e9/0x8e0 [ 1270.876956][T10407] ? __asan_memcpy+0x3c/0x60 [ 1270.876986][T10407] addrconf_init_net+0x50c/0x8e0 [ 1270.877024][T10407] ? __pfx_addrconf_init_net+0x10/0x10 [ 1270.877056][T10407] ops_init+0x1e2/0x5f0 [ 1270.877088][T10407] setup_net+0x10f/0x380 [ 1270.877116][T10407] ? lockdep_init_map_type+0x5c/0x280 [ 1270.877157][T10407] ? __pfx_setup_net+0x10/0x10 [ 1270.877190][T10407] ? debug_mutex_init+0x37/0x70 [ 1270.877227][T10407] copy_net_ns+0x2a6/0x5f0 [ 1270.877260][T10407] create_new_namespaces+0x3ea/0xa90 [ 1270.877301][T10407] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1270.877342][T10407] ksys_unshare+0x45b/0xa40 [ 1270.877381][T10407] ? __pfx_ksys_unshare+0x10/0x10 [ 1270.877425][T10407] ? xfd_validate_state+0x61/0x180 [ 1270.877477][T10407] __x64_sys_unshare+0x31/0x40 [ 1270.877522][T10407] do_syscall_64+0xcd/0x4c0 [ 1270.877551][T10407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.877578][T10407] RIP: 0033:0x7fae1fd8eba9 [ 1270.877601][T10407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1270.877629][T10407] RSP: 002b:00007fae20b86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1270.877656][T10407] RAX: ffffffffffffffda RBX: 00007fae1ffd5fa0 RCX: 00007fae1fd8eba9 [ 1270.877674][T10407] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1270.877691][T10407] RBP: 00007fae1fe11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1270.877708][T10407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1270.877726][T10407] R13: 00007fae1ffd6038 R14: 00007fae1ffd5fa0 R15: 00007ffed58ca6e8 [ 1270.877760][T10407] [ 1271.363358][T23991] Bluetooth: hci0: command 0x0c1a tx timeout [ 1271.453346][T23991] Bluetooth: hci2: command 0x0c1a tx timeout [ 1271.459485][ T4681] Bluetooth: hci1: command 0x0c1a tx timeout [ 1272.481860][T10460] can: request_module (can-proto-3) failed. [ 1274.930287][T10548] can: request_module (can-proto-3) failed. [ 1275.000277][T10485] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1275.033369][T10485] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1275.049778][T10485] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1275.057795][T10485] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1275.842187][T23991] Bluetooth: hci4: command 0x0c1a tx timeout [ 1276.168716][T10602] ima: policy update failed [ 1276.213955][ T30] audit: type=1802 audit(4294968853.560:137): pid=10602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1276.260934][ T30] audit: type=1800 audit(4294968853.560:138): pid=10602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=90738 res=0 errno=0 [ 1277.112273][T23991] Bluetooth: hci2: command 0x0c1a tx timeout [ 1277.116369][ T4681] Bluetooth: hci1: command 0x0c1a tx timeout [ 1277.119197][ T5881] Bluetooth: hci0: command 0x0c1a tx timeout [ 1277.211326][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1277.225730][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1278.268002][T10666] can: request_module (can-proto-3) failed. [ 1278.795196][T10674] can: request_module (can-proto-3) failed. [ 1282.385693][T10815] kAFS: unparsable volume name [ 1282.946076][T10844] ima: policy update failed [ 1282.961052][ T30] audit: type=1802 audit(4294968860.372:139): pid=10844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1283.203252][ T30] audit: type=1800 audit(4294968860.402:140): pid=10844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=91030 res=0 errno=0 [ 1283.575699][T10867] could not allocate digest TFM handle [ 1284.372707][T10883] can: request_module (can-proto-3) failed. [ 1285.157996][T10892] kAFS: unparsable volume name [ 1286.364310][T10903] can: request_module (can-proto-3) failed. [ 1287.128624][T10942] netlink: 334 bytes leftover after parsing attributes in process `'. [ 1287.628295][T10949] can: request_module (can-proto-3) failed. [ 1287.943231][T23991] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1287.954747][T23991] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1287.967245][T23991] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1287.977242][T23991] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1287.985134][T23991] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1288.537352][T10994] can: request_module (can-proto-3) failed. [ 1288.973222][T10955] chnl_net:caif_netlink_parms(): no params data found [ 1289.207096][T10955] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.233634][T10955] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.246696][T10955] bridge_slave_0: entered allmulticast mode [ 1289.255150][T10955] bridge_slave_0: entered promiscuous mode [ 1289.267235][T10955] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.290581][T10955] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.303904][T10955] bridge_slave_1: entered allmulticast mode [ 1289.335404][T10955] bridge_slave_1: entered promiscuous mode [ 1289.676292][T10955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1289.725706][T10955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1290.097057][T23991] Bluetooth: hci3: command tx timeout [ 1290.148039][T10955] team0: Port device team_slave_0 added [ 1290.253447][T10955] team0: Port device team_slave_1 added [ 1290.441502][T10955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1290.453559][T10955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1290.504099][T10955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1290.547039][T10955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1290.572742][T10955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1290.636533][T10955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1290.900362][T10955] hsr_slave_0: entered promiscuous mode [ 1290.908029][T10955] hsr_slave_1: entered promiscuous mode [ 1290.914395][T10955] debugfs: 'hsr0' already exists in 'hsr' [ 1290.921626][T10955] Cannot create hsr debugfs directory [ 1290.931406][T11241] can: request_module (can-proto-3) failed. [ 1291.625386][T10955] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1291.644478][T10955] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1291.661237][T10955] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1291.684506][T10955] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1291.867454][T10955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1291.910994][T10955] 8021q: adding VLAN 0 to HW filter on device team0 [ 1291.924986][ T481] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.932317][ T481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1291.951096][ T481] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.958301][ T481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1292.158671][T23991] Bluetooth: hci3: command tx timeout [ 1292.232313][T10955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1292.386405][ T495] Process accounting resumed [ 1292.740936][T10955] veth0_vlan: entered promiscuous mode [ 1292.771561][T10955] veth1_vlan: entered promiscuous mode [ 1292.822050][ T5881] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1292.832099][ T5881] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1292.833996][T10955] veth0_macvtap: entered promiscuous mode [ 1292.846415][ T5881] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1292.852224][T10955] veth1_macvtap: entered promiscuous mode [ 1292.861145][ T5881] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1292.872395][ T5881] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1292.917188][T10955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1292.999834][T10955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1293.028156][ T486] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.054570][ T486] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.064635][ T486] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.080022][ T486] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1293.282002][T11361] chnl_net:caif_netlink_parms(): no params data found [ 1293.381485][T19777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1293.398036][T19777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1293.482559][T11361] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.490432][T11361] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.497662][T11361] bridge_slave_0: entered allmulticast mode [ 1293.505590][T11361] bridge_slave_0: entered promiscuous mode [ 1293.516724][T16846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1293.527514][T11361] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.528040][T16846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1293.540036][T11361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.550865][T11361] bridge_slave_1: entered allmulticast mode [ 1293.560054][T11361] bridge_slave_1: entered promiscuous mode [ 1293.642667][T11361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1293.679401][T11361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1293.858391][T11361] team0: Port device team_slave_0 added [ 1293.871209][T11361] team0: Port device team_slave_1 added [ 1293.942196][T11361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.950219][T11361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1293.993839][T11361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1294.027846][T11361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1294.034936][T11361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1294.063317][T11361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1294.217936][ T5881] Bluetooth: hci3: command tx timeout [ 1294.273091][T11361] hsr_slave_0: entered promiscuous mode [ 1294.281351][T11361] hsr_slave_1: entered promiscuous mode [ 1294.289483][T11361] debugfs: 'hsr0' already exists in 'hsr' [ 1294.296494][T11361] Cannot create hsr debugfs directory [ 1294.828790][T11361] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1294.888826][T11361] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1294.925082][T11361] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1294.942184][ T5881] Bluetooth: hci5: command tx timeout [ 1295.023319][T11361] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1295.273048][T11361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1295.292652][T11735] can: request_module (can-proto-3) failed. [ 1295.349366][T11361] 8021q: adding VLAN 0 to HW filter on device team0 [ 1295.369812][T19777] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.377068][T19777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1295.408131][T19777] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.415326][T19777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1296.073360][T11361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1296.303336][ T5881] Bluetooth: hci3: command tx timeout [ 1296.756976][T11775] zswap: compressor 000 not available [ 1297.007272][ T5881] Bluetooth: hci5: command tx timeout [ 1297.100021][T11361] veth0_vlan: entered promiscuous mode [ 1297.161524][T11361] veth1_vlan: entered promiscuous mode [ 1297.224666][T11361] veth0_macvtap: entered promiscuous mode [ 1297.263272][T11361] veth1_macvtap: entered promiscuous mode [ 1297.361919][T11361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1297.397857][T11790] netlink: 'syz.3.3138': attribute type 1 has an invalid length. [ 1297.443776][T11361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1297.453956][T11790] Unable to find swap-space signature [ 1297.501531][T11791] netlink: 'syz.3.3138': attribute type 1 has an invalid length. [ 1297.528677][T19777] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.538350][T19777] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.593643][T19777] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.611774][T16846] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1297.746544][ T484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1297.781376][ T484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1297.858078][ T30] audit: type=1400 audit(4294968875.332:141): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=11795 comm="syz.3.3139" [ 1297.884709][T19777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1297.893054][T19777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1298.192982][T11845] netlink: 62 bytes leftover after parsing attributes in process `syz.6.3128'. [ 1299.111251][ T5881] Bluetooth: hci5: command tx timeout [ 1299.946463][T11954] [U]  [ 1299.949438][T11954] [U] [ 1299.952203][T11954] [U] [ 1299.954944][T11954] [U] [ 1300.007232][T11954] [U] [ 1300.010040][T11954] [U] [ 1300.012821][T11954] [U] [ 1300.012875][T11954] [U] [ 1300.043912][T11954] [U] [ 1300.046696][T11954] [U] [ 1300.049424][T11954] [U] [ 1300.052135][T11954] [U] [ 1300.064163][T11954] [U] [ 1300.066939][T11954] [U] [ 1300.069687][T11954] [U] [ 1300.072421][T11954] [U] [ 1300.111913][T11954] [U] [ 1300.114792][T11954] [U] [ 1300.117562][T11954] [U] [ 1300.120288][T11954] [U] [ 1300.276823][T11972] [U] [ 1300.279614][T11972] [U] [ 1300.282379][T11972] [U] [ 1300.285123][T11972] [U] [ 1300.299480][T11972] [U] [ 1300.302289][T11972] [U] [ 1300.305042][T11972] [U] [ 1300.307794][T11972] [U] [ 1300.345043][T11972] [U] [ 1300.347906][T11972] [U] [ 1300.350635][T11972] [U] [ 1300.353432][T11972] [U] [ 1300.477582][T11972] [U] [ 1300.522226][T11986] can: request_module (can-proto-3) failed. [ 1301.148337][ T5881] Bluetooth: hci5: command tx timeout [ 1301.502866][T12028] ima: policy update failed [ 1301.507814][ T30] audit: type=1802 audit(4294968878.999:142): pid=12028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1301.563354][ T30] audit: type=1800 audit(4294968879.029:143): pid=12028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=93751 res=0 errno=0 [ 1302.189622][T12063] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1302.295167][T12063] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1302.328367][T12063] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1302.335684][T12063] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1302.343563][T12063] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1302.350029][T12063] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1302.402935][T12079] ima: policy update failed [ 1302.411774][ T30] audit: type=1802 audit(4294968879.913:144): pid=12079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1302.458100][ T30] audit: type=1800 audit(4294968879.913:145): pid=12079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=93050 res=0 errno=0 [ 1302.680100][T12063] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1302.777943][T12063] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1302.794761][T12063] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1303.132149][T12063] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1304.248775][ T5881] Bluetooth: hci0: command 0x0c1a tx timeout [ 1304.254874][T23991] Bluetooth: hci4: command 0x0c1a tx timeout [ 1304.328477][ T5881] Bluetooth: hci2: command 0x0c1a tx timeout [ 1304.328540][T23991] Bluetooth: hci1: command 0x0c1a tx timeout [ 1304.408019][T23991] Bluetooth: hci3: command 0x0c1a tx timeout [ 1304.655943][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1304.663000][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1304.806439][T23991] Bluetooth: hci5: command 0x0c1a tx timeout [ 1305.078291][T12152] can: request_module (can-proto-3) failed. [ 1306.444546][T12182] can: request_module (can-proto-3) failed. [ 1306.494100][T23991] Bluetooth: hci3: command 0x0c1a tx timeout [ 1306.636859][ T5881] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1306.650511][ T5881] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1306.658922][ T5881] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1306.668123][ T5881] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1306.675996][ T5881] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1306.876973][T23991] Bluetooth: hci5: command 0x0c1a tx timeout [ 1307.356856][T12203] chnl_net:caif_netlink_parms(): no params data found [ 1307.850046][T12350] zswap: compressor not available [ 1307.855669][T12353] zswap: compressor not available [ 1308.038623][T12376] can: request_module (can-proto-3) failed. [ 1308.098562][T12203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.190577][T12203] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.197911][T12203] bridge_slave_0: entered allmulticast mode [ 1308.301764][T12203] bridge_slave_0: entered promiscuous mode [ 1308.325623][T12203] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.396632][T12203] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.427144][T12393] can: request_module (can-proto-3) failed. [ 1308.452831][T12203] bridge_slave_1: entered allmulticast mode [ 1308.487422][T12203] bridge_slave_1: entered promiscuous mode [ 1308.558442][T23991] Bluetooth: hci3: command 0x0c1a tx timeout [ 1308.707921][T23991] Bluetooth: hci6: command tx timeout [ 1308.727115][T12203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1308.796943][T12203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1308.947968][T23991] Bluetooth: hci5: command 0x0c1a tx timeout [ 1309.055392][T12203] team0: Port device team_slave_0 added [ 1309.068623][T12203] team0: Port device team_slave_1 added [ 1309.417680][T12203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1309.434177][T12203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1309.491658][T12203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1309.573018][T12203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1309.580305][T12203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1309.610455][T12203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1309.755176][T12453] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1309.772483][T12453] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1309.780683][T12453] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1309.790147][T12453] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1309.796641][T12453] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1309.805470][T12453] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1309.815803][T12453] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1309.840277][T12453] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1309.913316][T12453] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1310.083500][T12556] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1310.417547][T12203] hsr_slave_0: entered promiscuous mode [ 1310.424862][T12203] hsr_slave_1: entered promiscuous mode [ 1310.450401][T12203] debugfs: 'hsr0' already exists in 'hsr' [ 1310.456381][T12203] Cannot create hsr debugfs directory [ 1310.942650][T12640] ima: policy update failed [ 1310.954712][ T30] audit: type=1802 audit(4294968888.493:146): pid=12640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1310.971138][ T30] audit: type=1800 audit(4294968888.493:147): pid=12640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=94401 res=0 errno=0 [ 1311.096684][T23991] Bluetooth: hci4: command 0x0c1a tx timeout [ 1311.814005][T23991] Bluetooth: hci6: command 0x040f tx timeout [ 1311.820109][T23991] Bluetooth: hci5: command 0x0c1a tx timeout [ 1311.826610][ T5881] Bluetooth: hci3: command 0x0c1a tx timeout [ 1311.826647][ T4681] Bluetooth: hci2: command 0x0c1a tx timeout [ 1311.832654][ T5881] Bluetooth: hci1: command 0x0c1a tx timeout [ 1311.839028][ T4681] Bluetooth: hci0: command 0x0c1a tx timeout [ 1311.881559][T12203] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1311.916971][T12203] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1311.944824][T12203] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1312.120903][T12203] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1312.892957][T12703] blktrace: Concurrent blktraces are not allowed on loop12 [ 1313.007173][T12203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1313.063945][T12203] 8021q: adding VLAN 0 to HW filter on device team0 [ 1313.122193][T20509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1313.129392][T20509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1313.300330][T20509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1313.307697][T20509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1313.507413][T12712] can: request_module (can-proto-3) failed. [ 1313.884022][T12679] Bluetooth: hci6: command 0x040f tx timeout [ 1314.107708][T12755] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input32 [ 1314.171615][T12203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1314.352602][T12769] ima: policy update failed [ 1314.359198][ T30] audit: type=1802 audit(4294968891.909:148): pid=12769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1314.407696][T12761] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3186'. [ 1314.456997][ T30] audit: type=1800 audit(4294968891.909:149): pid=12769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=94772 res=0 errno=0 [ 1315.533491][T12794] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3189'. [ 1315.567973][T12794] FAULT_INJECTION: forcing a failure. [ 1315.567973][T12794] name failslab, interval 1, probability 0, space 0, times 0 [ 1315.585559][T12794] CPU: 1 UID: 0 PID: 12794 Comm: syz.5.3189 Tainted: G U syzkaller #0 PREEMPT(full) [ 1315.585611][T12794] Tainted: [U]=USER [ 1315.585623][T12794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1315.585643][T12794] Call Trace: [ 1315.585654][T12794] [ 1315.585668][T12794] dump_stack_lvl+0x16c/0x1f0 [ 1315.585726][T12794] should_fail_ex+0x512/0x640 [ 1315.585757][T12794] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1315.585796][T12794] should_failslab+0xc2/0x120 [ 1315.585842][T12794] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1315.585887][T12794] ? percpu_ref_init+0xec/0x410 [ 1315.585939][T12794] ? __pfx_css_release+0x10/0x10 [ 1315.585985][T12794] percpu_ref_init+0xec/0x410 [ 1315.586041][T12794] cgroup_mkdir+0x2e0/0x11f0 [ 1315.586102][T12794] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1315.586158][T12794] kernfs_iop_mkdir+0x10e/0x190 [ 1315.586205][T12794] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1315.586253][T12794] vfs_mkdir+0x593/0x8c0 [ 1315.586292][T12794] do_mkdirat+0x304/0x3e0 [ 1315.586338][T12794] ? __pfx_do_mkdirat+0x10/0x10 [ 1315.586384][T12794] ? getname_flags.part.0+0x1c5/0x550 [ 1315.586443][T12794] __x64_sys_mkdir+0xef/0x140 [ 1315.586487][T12794] do_syscall_64+0xcd/0x4c0 [ 1315.586521][T12794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.586555][T12794] RIP: 0033:0x7efcdd78eba9 [ 1315.586582][T12794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1315.586615][T12794] RSP: 002b:00007efcde558038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1315.586647][T12794] RAX: ffffffffffffffda RBX: 00007efcdd9d5fa0 RCX: 00007efcdd78eba9 [ 1315.586670][T12794] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 1315.586691][T12794] RBP: 00007efcdd811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1315.586712][T12794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1315.586732][T12794] R13: 00007efcdd9d6038 R14: 00007efcdd9d5fa0 R15: 00007ffd53c88f38 [ 1315.586776][T12794] [ 1315.955799][T12679] Bluetooth: hci6: command 0x040f tx timeout [ 1316.160699][T12203] veth0_vlan: entered promiscuous mode [ 1316.199100][T12203] veth1_vlan: entered promiscuous mode [ 1316.206383][T12876] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input33 [ 1316.309320][T12203] veth0_macvtap: entered promiscuous mode [ 1316.331274][T12203] veth1_macvtap: entered promiscuous mode [ 1316.512134][T12203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1316.565955][T12203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1316.596628][T20509] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.607449][T20509] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.624150][T20509] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.638670][T20509] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.651075][T12901] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 1316.944298][T12910] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 1317.042789][T20509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.075314][T20509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.597664][ T481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.634414][ T481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.745410][T12955] can: request_module (can-proto-3) failed. [ 1318.024846][T12679] Bluetooth: hci6: command 0x040f tx timeout [ 1319.819756][T13056] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input36 [ 1319.968195][T13072] netlink: 342 bytes leftover after parsing attributes in process `syz.7.3199'. [ 1320.062233][T20509] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 4 with max blocks 2 with error 117 [ 1320.078990][T20509] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1320.078990][T20509] [ 1320.094618][T12679] Bluetooth: hci6: command 0x040f tx timeout [ 1321.128686][T13158] ima: policy update failed [ 1321.184730][ T30] audit: type=1800 audit(4294968898.771:150): pid=13160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=96260 res=0 errno=0 [ 1321.407042][ T30] audit: type=1802 audit(4294968898.801:151): pid=13158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.3202" res=0 errno=0 [ 1321.543095][T13163] can: request_module (can-proto-3) failed. [ 1322.325111][T12679] Bluetooth: hci5: Malformed LE Event: 0x1b [ 1322.587123][T13205] ima: policy update failed [ 1322.592126][ T30] audit: type=1802 audit(4294968900.178:152): pid=13205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1322.614266][ T30] audit: type=1800 audit(4294968900.208:153): pid=13205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=95693 res=0 errno=0 [ 1323.643064][T13258] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input37 [ 1323.905385][T13258] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3212'. [ 1323.985732][T13288] netlink: 252 bytes leftover after parsing attributes in process `syz.5.3214'. [ 1324.131498][T13306] netlink: 252 bytes leftover after parsing attributes in process `syz.5.3214'. [ 1324.243567][T13274] zswap: compressor not available [ 1325.005070][T13346] binder: 13329:13346 ioctl c018620c 0 returned -1 [ 1326.353304][T12679] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 1326.413600][T13405] binder: 13383:13405 ioctl 40103e05 ffffffffffffffff returned -22 [ 1327.905382][T13500] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3230'. [ 1327.937031][T13500] vlan1: entered allmulticast mode [ 1327.953561][T13500] veth0_vlan: entered allmulticast mode [ 1328.474562][T13499] can: request_module (can-proto-3) failed. [ 1328.701295][T13530] bond0: option primary_reselect: invalid value () [ 1330.449507][T13649] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1330.485429][T13641] ima: policy update failed [ 1330.490829][ T30] audit: type=1802 audit(4294968908.125:154): pid=13641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1330.553146][ T30] audit: type=1800 audit(4294968908.145:155): pid=13641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=96004 res=0 errno=0 [ 1331.113671][T12679] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1331.134889][T13683] binder: 13679:13683 ioctl 40103e05 ffffffffffffffff returned -22 [ 1333.084959][T13799] ima: policy update failed [ 1333.095024][ T30] audit: type=1802 audit(4294968910.737:156): pid=13799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1333.246238][ T30] audit: type=1800 audit(4294968910.737:157): pid=13799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=96804 res=0 errno=0 [ 1333.710488][T12679] Bluetooth: hci4: command 0x0c1a tx timeout [ 1333.717170][T13711] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1333.899737][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1333.906967][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1333.931386][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1333.937877][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1333.999577][T13711] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1334.005841][T13711] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1334.018516][T13711] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1334.023830][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1334.039598][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1334.052845][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1334.059416][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1334.066000][T13711] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1334.080601][T13711] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1334.096128][T13711] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1334.103207][T13711] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1334.130573][T13711] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1334.195866][T13722] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1334.822562][ T30] audit: type=1800 audit(4294968912.475:158): pid=13885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3248" name="members" dev="configfs" ino=96861 res=0 errno=0 [ 1335.780885][T12679] Bluetooth: hci0: command 0x0c1a tx timeout [ 1335.807229][T13928] netlink: 184 bytes leftover after parsing attributes in process `syz.6.3251'. [ 1335.818693][T13928] FAULT_INJECTION: forcing a failure. [ 1335.818693][T13928] name failslab, interval 1, probability 0, space 0, times 0 [ 1335.869196][T13928] CPU: 1 UID: 0 PID: 13928 Comm: syz.6.3251 Tainted: G U syzkaller #0 PREEMPT(full) [ 1335.869252][T13928] Tainted: [U]=USER [ 1335.869264][T13928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1335.869287][T13928] Call Trace: [ 1335.869298][T13928] [ 1335.869312][T13928] dump_stack_lvl+0x16c/0x1f0 [ 1335.869373][T13928] should_fail_ex+0x512/0x640 [ 1335.869404][T13928] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1335.869450][T13928] should_failslab+0xc2/0x120 [ 1335.869504][T13928] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1335.869545][T13928] ? __fget_files+0x20e/0x3c0 [ 1335.869581][T13928] ? getname_flags.part.0+0x4c/0x550 [ 1335.869638][T13928] getname_flags.part.0+0x4c/0x550 [ 1335.869679][T13928] __x64_sys_mkdir+0xd8/0x140 [ 1335.869710][T13928] do_syscall_64+0xcd/0x4c0 [ 1335.869734][T13928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1335.869759][T13928] RIP: 0033:0x7f150918eba9 [ 1335.869778][T13928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1335.869803][T13928] RSP: 002b:00007f150a0bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1335.869827][T13928] RAX: ffffffffffffffda RBX: 00007f15093d6090 RCX: 00007f150918eba9 [ 1335.869843][T13928] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 1335.869858][T13928] RBP: 00007f1509211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1335.869874][T13928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1335.869888][T13928] R13: 00007f15093d6128 R14: 00007f15093d6090 R15: 00007ffc0c5e2278 [ 1335.869918][T13928] [ 1336.031510][T12679] Bluetooth: hci2: command 0x0c1a tx timeout [ 1336.037586][T12679] Bluetooth: hci1: command 0x0c1a tx timeout [ 1336.107002][T24109] Bluetooth: hci5: command 0x0c1a tx timeout [ 1336.113095][T12679] Bluetooth: hci3: command 0x0c1a tx timeout [ 1336.178819][T24109] Bluetooth: hci6: command 0x040f tx timeout [ 1336.604223][T13922] zswap: compressor not available [ 1337.144525][T13969] mtrr: base(0x1000000) is not aligned on a size(0x0000) boundary [ 1338.169472][T12679] Bluetooth: hci3: command 0x0c1a tx timeout [ 1338.175596][T24109] Bluetooth: hci5: command 0x0c1a tx timeout [ 1338.772696][T13987] FAULT_INJECTION: forcing a failure. [ 1338.772696][T13987] name failslab, interval 1, probability 0, space 0, times 0 [ 1338.785701][ T30] audit: type=1800 audit(4294968916.444:159): pid=13981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=96254 res=0 errno=0 [ 1338.826003][T13987] CPU: 0 UID: 0 PID: 13987 Comm: syz.5.3257 Tainted: G U syzkaller #0 PREEMPT(full) [ 1338.826065][T13987] Tainted: [U]=USER [ 1338.826077][T13987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1338.826097][T13987] Call Trace: [ 1338.826108][T13987] [ 1338.826121][T13987] dump_stack_lvl+0x16c/0x1f0 [ 1338.826178][T13987] should_fail_ex+0x512/0x640 [ 1338.826208][T13987] ? __kmalloc_noprof+0xbf/0x510 [ 1338.826251][T13987] ? lsm_blob_alloc+0x68/0x90 [ 1338.826281][T13987] should_failslab+0xc2/0x120 [ 1338.826327][T13987] __kmalloc_noprof+0xd2/0x510 [ 1338.826377][T13987] lsm_blob_alloc+0x68/0x90 [ 1338.826409][T13987] security_sk_alloc+0x30/0x270 [ 1338.826452][T13987] sk_prot_alloc+0x1c7/0x2a0 [ 1338.826493][T13987] sk_alloc+0x36/0xc20 [ 1338.826541][T13987] packet_create+0x127/0x8e0 [ 1338.826589][T13987] __sock_create+0x338/0x8d0 [ 1338.826638][T13987] __sys_socket+0x14d/0x260 [ 1338.826680][T13987] ? __pfx___sys_socket+0x10/0x10 [ 1338.826721][T13987] ? xfd_validate_state+0x61/0x180 [ 1338.826780][T13987] ? __pfx_do_writev+0x10/0x10 [ 1338.826825][T13987] __x64_sys_socket+0x72/0xb0 [ 1338.826864][T13987] ? lockdep_hardirqs_on+0x7c/0x110 [ 1338.826916][T13987] do_syscall_64+0xcd/0x4c0 [ 1338.826948][T13987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.826982][T13987] RIP: 0033:0x7efcdd78eba9 [ 1338.827009][T13987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1338.827042][T13987] RSP: 002b:00007efcde558038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1338.827074][T13987] RAX: ffffffffffffffda RBX: 00007efcdd9d5fa0 RCX: 00007efcdd78eba9 [ 1338.827096][T13987] RDX: 0000000000000009 RSI: 0000000000000003 RDI: 0000000000000011 [ 1338.827116][T13987] RBP: 00007efcdd811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1338.827137][T13987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1338.827157][T13987] R13: 00007efcdd9d6038 R14: 00007efcdd9d5fa0 R15: 00007ffd53c88f38 [ 1338.827200][T13987] [ 1339.196648][T13980] ima: policy update failed [ 1339.223576][ T30] audit: type=1802 audit(4294968916.876:160): pid=13980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.3256" res=0 errno=0 [ 1339.366635][T24109] Bluetooth: hci6: unexpected subevent 0x0c length: 118 > 5 [ 1339.374342][T24109] Bluetooth: hci6: unexpected subevent 0x0c length: 118 > 5 [ 1340.067416][T14041] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input38 [ 1340.404538][T14042] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input39 [ 1340.927040][T14112] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input40 [ 1341.640553][T14134] blktrace: Concurrent blktraces are not allowed on ram7 [ 1342.058767][T14115] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input41 [ 1342.719776][T14183] erspan0: entered allmulticast mode [ 1343.842724][T14210] futex_wake_op: syz.5.3278 tries to shift op by -2048; fix this program [ 1345.159832][T14226] kexec: Could not allocate control_code_buffer [ 1346.008495][T14272] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3288'. [ 1346.066701][T14272] netlink: 93 bytes leftover after parsing attributes in process `syz.6.3288'. [ 1346.148648][T14281] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1346.268805][T14282] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input42 [ 1346.937824][T14305] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input43 [ 1349.019499][T14471] net_ratelimit: 480 callbacks suppressed [ 1349.019586][T14471] netlink: zone id is out of range [ 1349.035857][T14471] netlink: zone id is out of range [ 1349.041545][T14471] netlink: zone id is out of range [ 1349.053264][T14471] netlink: zone id is out of range [ 1349.064387][T14471] netlink: zone id is out of range [ 1349.070771][T14471] netlink: zone id is out of range [ 1349.077836][T14471] netlink: zone id is out of range [ 1349.090286][T14471] netlink: zone id is out of range [ 1349.097036][T14471] netlink: zone id is out of range [ 1349.103156][T14471] netlink: zone id is out of range [ 1349.312968][T14488] kAFS: unparsable volume name [ 1349.313766][T14471] hub 1-0:1.0: USB hub found [ 1349.342638][T14471] hub 1-0:1.0: 1 port detected [ 1350.540907][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1350.548415][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1350.558640][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1350.565329][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1350.568447][ T481] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1363 with max blocks 3 with error 117 [ 1350.617341][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1350.624392][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1350.676721][ T481] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1350.676721][ T481] [ 1350.685443][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1350.700697][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1352.661540][T14615] FAULT_INJECTION: forcing a failure. [ 1352.661540][T14615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1352.675211][T14615] CPU: 1 UID: 0 PID: 14615 Comm: syz.3.3306 Tainted: G U syzkaller #0 PREEMPT(full) [ 1352.675263][T14615] Tainted: [U]=USER [ 1352.675275][T14615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1352.675296][T14615] Call Trace: [ 1352.675308][T14615] [ 1352.675321][T14615] dump_stack_lvl+0x16c/0x1f0 [ 1352.675378][T14615] should_fail_ex+0x512/0x640 [ 1352.675415][T14615] _copy_from_user+0x2e/0xd0 [ 1352.675456][T14615] memdup_user+0x6b/0xe0 [ 1352.675501][T14615] strndup_user+0x78/0xe0 [ 1352.675554][T14615] __x64_sys_mount+0x180/0x310 [ 1352.675602][T14615] ? __pfx___x64_sys_mount+0x10/0x10 [ 1352.675675][T14615] do_syscall_64+0xcd/0x4c0 [ 1352.675708][T14615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.675742][T14615] RIP: 0033:0x7f0874f8eba9 [ 1352.675767][T14615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1352.675800][T14615] RSP: 002b:00007f0875d7c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1352.675832][T14615] RAX: ffffffffffffffda RBX: 00007f08751d5fa0 RCX: 00007f0874f8eba9 [ 1352.675854][T14615] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000200000000140 [ 1352.675876][T14615] RBP: 00007f0875d7c090 R08: 0000000000000000 R09: 0000000000000000 [ 1352.675901][T14615] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 1352.675921][T14615] R13: 00007f08751d6038 R14: 00007f08751d5fa0 R15: 00007ffccb7c7218 [ 1352.675964][T14615] [ 1356.941825][T14755] nfs4: Unknown parameter '' [ 1356.947188][T14756] nfs4: Unknown parameter '' [ 1356.954229][T14699] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1357.802142][T14773] HfR: entered promiscuous mode [ 1358.752854][T14833] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1360.419568][ T30] audit: type=1800 audit(4294968938.166:161): pid=14894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3333" name="dbroot" dev="configfs" ino=98828 res=0 errno=0 [ 1360.482518][T14887] db_root: cannot open: [ 1361.190001][T14924] tipc: Started in network mode [ 1361.197052][T14924] tipc: Node identity ee00, cluster identity 4711 [ 1361.210690][T14924] tipc: Node number set to 60928 [ 1361.429631][T14930] kAFS: unparsable volume name [ 1365.133840][T15037] bridge0: port 3(vlan1) entered blocking state [ 1365.232872][T15037] bridge0: port 3(vlan1) entered disabled state [ 1365.278960][T15037] vlan1: entered promiscuous mode [ 1365.324928][T15037] bridge0: port 3(vlan1) entered blocking state [ 1365.331383][T15037] bridge0: port 3(vlan1) entered forwarding state [ 1365.802642][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1365.814336][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.210353][T15138] kAFS: unparsable volume name [ 1367.584546][T15110] serio: Serial port pty6 [ 1368.711761][T15194] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input44 [ 1369.380317][T15199] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45 [ 1370.105096][T24109] Bluetooth: hci1: unexpected event 0x1c length: 725 > 5 [ 1370.991955][T15282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3356'. [ 1373.733376][T15357] FAULT_INJECTION: forcing a failure. [ 1373.733376][T15357] name failslab, interval 1, probability 0, space 0, times 0 [ 1373.746912][T15357] CPU: 1 UID: 0 PID: 15357 Comm: syz.3.3361 Tainted: G U syzkaller #0 PREEMPT(full) [ 1373.746960][T15357] Tainted: [U]=USER [ 1373.746969][T15357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1373.746984][T15357] Call Trace: [ 1373.746993][T15357] [ 1373.747003][T15357] dump_stack_lvl+0x16c/0x1f0 [ 1373.747044][T15357] should_fail_ex+0x512/0x640 [ 1373.747066][T15357] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1373.747094][T15357] should_failslab+0xc2/0x120 [ 1373.747125][T15357] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1373.747151][T15357] ? snd_seq_create_port+0xf7/0xae0 [ 1373.747178][T15357] snd_seq_create_port+0xf7/0xae0 [ 1373.747209][T15357] snd_seq_ioctl_create_port+0x253/0x950 [ 1373.747250][T15357] ? __pfx_snd_seq_ioctl_create_port+0x10/0x10 [ 1373.747291][T15357] ? kasan_save_stack+0x42/0x60 [ 1373.747317][T15357] ? kasan_save_stack+0x33/0x60 [ 1373.747343][T15357] ? kasan_save_track+0x14/0x30 [ 1373.747373][T15357] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 1373.747402][T15357] create_port+0x197/0x260 [ 1373.747426][T15357] ? __pfx_create_port+0x10/0x10 [ 1373.747455][T15357] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 1373.747484][T15357] ? __pfx_free_devinfo+0x10/0x10 [ 1373.747529][T15357] ? mark_held_locks+0x49/0x80 [ 1373.747559][T15357] ? _raw_spin_unlock_irq+0x23/0x50 [ 1373.747595][T15357] snd_seq_oss_open+0x36c/0xa20 [ 1373.747626][T15357] odev_open+0x6f/0x90 [ 1373.747646][T15357] ? __pfx_odev_open+0x10/0x10 [ 1373.747668][T15357] soundcore_open+0x40c/0x580 [ 1373.747693][T15357] ? __pfx_soundcore_open+0x10/0x10 [ 1373.747715][T15357] chrdev_open+0x234/0x6a0 [ 1373.747745][T15357] ? __pfx_apparmor_file_open+0x10/0x10 [ 1373.747773][T15357] ? __pfx_chrdev_open+0x10/0x10 [ 1373.747806][T15357] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1373.747839][T15357] do_dentry_open+0x982/0x1530 [ 1373.747868][T15357] ? __pfx_chrdev_open+0x10/0x10 [ 1373.747905][T15357] vfs_open+0x82/0x3f0 [ 1373.747951][T15357] path_openat+0x1de4/0x2cb0 [ 1373.747990][T15357] ? __pfx_path_openat+0x10/0x10 [ 1373.748026][T15357] do_filp_open+0x20b/0x470 [ 1373.748055][T15357] ? __pfx_do_filp_open+0x10/0x10 [ 1373.748105][T15357] ? alloc_fd+0x471/0x7d0 [ 1373.748138][T15357] do_sys_openat2+0x11b/0x1d0 [ 1373.748175][T15357] ? __pfx_do_sys_openat2+0x10/0x10 [ 1373.748223][T15357] __x64_sys_openat+0x174/0x210 [ 1373.748244][T15357] ? __pfx___x64_sys_openat+0x10/0x10 [ 1373.748277][T15357] do_syscall_64+0xcd/0x4c0 [ 1373.748300][T15357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.748324][T15357] RIP: 0033:0x7f0874f8eba9 [ 1373.748343][T15357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1373.748366][T15357] RSP: 002b:00007f0875d7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1373.748388][T15357] RAX: ffffffffffffffda RBX: 00007f08751d5fa0 RCX: 00007f0874f8eba9 [ 1373.748404][T15357] RDX: 000000000006ef40 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1373.748420][T15357] RBP: 00007f0875011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1373.748435][T15357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1373.748449][T15357] R13: 00007f08751d6038 R14: 00007f08751d5fa0 R15: 00007ffccb7c7218 [ 1373.748479][T15357] [ 1373.748489][T15357] ALSA: seq_oss: can't create port [ 1374.231570][T15357] FAULT_INJECTION: forcing a failure. [ 1374.231570][T15357] name failslab, interval 1, probability 0, space 0, times 0 [ 1374.245006][T15357] CPU: 0 UID: 0 PID: 15357 Comm: syz.3.3361 Tainted: G U syzkaller #0 PREEMPT(full) [ 1374.245078][T15357] Tainted: [U]=USER [ 1374.245089][T15357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1374.245110][T15357] Call Trace: [ 1374.245121][T15357] [ 1374.245133][T15357] dump_stack_lvl+0x16c/0x1f0 [ 1374.245192][T15357] should_fail_ex+0x512/0x640 [ 1374.245223][T15357] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1374.245264][T15357] should_failslab+0xc2/0x120 [ 1374.245311][T15357] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1374.245347][T15357] ? usbdev_open+0x9d/0x8b0 [ 1374.245397][T15357] usbdev_open+0x9d/0x8b0 [ 1374.245444][T15357] ? kobject_get_unless_zero+0x156/0x1e0 [ 1374.245477][T15357] ? __pfx_usbdev_open+0x10/0x10 [ 1374.245524][T15357] ? chrdev_open+0x10b/0x6a0 [ 1374.245574][T15357] ? __pfx_usbdev_open+0x10/0x10 [ 1374.245629][T15357] chrdev_open+0x234/0x6a0 [ 1374.245669][T15357] ? __pfx_apparmor_file_open+0x10/0x10 [ 1374.245706][T15357] ? __pfx_chrdev_open+0x10/0x10 [ 1374.245750][T15357] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1374.245794][T15357] do_dentry_open+0x982/0x1530 [ 1374.245834][T15357] ? __pfx_chrdev_open+0x10/0x10 [ 1374.245889][T15357] vfs_open+0x82/0x3f0 [ 1374.245968][T15357] path_openat+0x1de4/0x2cb0 [ 1374.246022][T15357] ? __pfx_path_openat+0x10/0x10 [ 1374.246076][T15357] do_filp_open+0x20b/0x470 [ 1374.246118][T15357] ? __pfx_do_filp_open+0x10/0x10 [ 1374.246190][T15357] ? alloc_fd+0x471/0x7d0 [ 1374.246238][T15357] do_sys_openat2+0x11b/0x1d0 [ 1374.246291][T15357] ? __pfx_do_sys_openat2+0x10/0x10 [ 1374.246346][T15357] ? __pfx___might_resched+0x10/0x10 [ 1374.246392][T15357] __x64_sys_openat+0x174/0x210 [ 1374.246423][T15357] ? __pfx___x64_sys_openat+0x10/0x10 [ 1374.246471][T15357] do_syscall_64+0xcd/0x4c0 [ 1374.246504][T15357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.246538][T15357] RIP: 0033:0x7f0874f8eba9 [ 1374.246565][T15357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1374.246597][T15357] RSP: 002b:00007f0875d7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1374.246629][T15357] RAX: ffffffffffffffda RBX: 00007f08751d5fa0 RCX: 00007f0874f8eba9 [ 1374.246651][T15357] RDX: 0000000000020882 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1374.246675][T15357] RBP: 00007f0875011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1374.246697][T15357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1374.246718][T15357] R13: 00007f08751d6038 R14: 00007f08751d5fa0 R15: 00007ffccb7c7218 [ 1374.246759][T15357] [ 1375.074337][T15365] vivid-007: ================= START STATUS ================= [ 1375.096685][T15365] vivid-007: Generate PTS: true [ 1375.110922][T15365] vivid-007: Generate SCR: true [ 1375.118810][T15365] tpg source WxH: 320x240 (Y'CbCr) [ 1375.141409][T15365] tpg field: 1 [ 1375.144838][T15365] tpg crop: (0,0)/320x240 [ 1375.150947][T15367] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 1375.180362][T15365] tpg compose: (0,0)/320x240 [ 1375.195664][T15365] tpg colorspace: 8 [ 1375.217389][T15365] tpg transfer function: 0/0 [ 1375.222239][T15365] tpg Y'CbCr encoding: 0/0 [ 1375.232128][T15365] tpg quantization: 0/0 [ 1375.248387][T15365] tpg RGB range: 0/2 [ 1375.252362][T15365] vivid-007: ================== END STATUS ================== [ 1375.326463][T15372] can: request_module (can-proto-0) failed. [ 1375.714449][T15368] can: request_module (can-proto-3) failed. [ 1379.398675][T15533] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 11 with max blocks 17 with error 117 [ 1379.415347][T15533] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1379.415347][T15533] [ 1381.003348][T19777] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1363 with max blocks 3 with error 117 [ 1381.083243][T19777] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1381.083243][T19777] [ 1381.130175][T12679] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1381.178335][T12679] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1381.187784][T12679] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1381.201083][T12679] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1381.209028][T12679] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1382.898428][T15548] chnl_net:caif_netlink_parms(): no params data found [ 1383.237498][T12679] Bluetooth: hci7: command tx timeout [ 1385.307689][T12679] Bluetooth: hci7: command tx timeout [ 1385.684966][T15548] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.723065][T15548] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.773650][T15548] bridge_slave_0: entered allmulticast mode [ 1385.797802][T15548] bridge_slave_0: entered promiscuous mode [ 1385.817269][T15548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.824448][T15548] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.853301][T15548] bridge_slave_1: entered allmulticast mode [ 1385.874881][T15548] bridge_slave_1: entered promiscuous mode [ 1386.736438][T15767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3375'. [ 1387.015079][T15548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1387.076554][T15548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1387.382786][T12679] Bluetooth: hci7: command tx timeout [ 1387.461671][T15548] team0: Port device team_slave_0 added [ 1387.479475][T15548] team0: Port device team_slave_1 added [ 1388.749138][T15548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1388.758519][T15548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1388.822665][T15548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1388.987640][T15548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1389.014710][T15548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1389.064230][T15548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1389.448473][T12679] Bluetooth: hci7: command tx timeout [ 1390.400143][T20500] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1358 with max blocks 5 with error 117 [ 1390.437435][T20500] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1390.437435][T20500] [ 1390.591336][T15548] hsr_slave_0: entered promiscuous mode [ 1390.614239][T15548] hsr_slave_1: entered promiscuous mode [ 1390.620797][T15548] debugfs: 'hsr0' already exists in 'hsr' [ 1390.655166][T15548] Cannot create hsr debugfs directory [ 1392.457151][T15995] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3386'. [ 1393.480779][T15548] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1393.581636][T15548] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1393.952110][T16057] FAULT_INJECTION: forcing a failure. [ 1393.952110][T16057] name failslab, interval 1, probability 0, space 0, times 0 [ 1394.000814][T16057] CPU: 1 UID: 0 PID: 16057 Comm: syz.5.3389 Tainted: G U syzkaller #0 PREEMPT(full) [ 1394.000865][T16057] Tainted: [U]=USER [ 1394.000877][T16057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1394.000897][T16057] Call Trace: [ 1394.000908][T16057] [ 1394.000921][T16057] dump_stack_lvl+0x16c/0x1f0 [ 1394.000978][T16057] should_fail_ex+0x512/0x640 [ 1394.001008][T16057] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 1394.001049][T16057] should_failslab+0xc2/0x120 [ 1394.001094][T16057] __kmalloc_cache_noprof+0x6a/0x3e0 [ 1394.001131][T16057] ? devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 1394.001195][T16057] devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 1394.001255][T16057] devlink_fmsg_u64_pair_put+0x270/0x2f0 [ 1394.001290][T16057] ? __pfx_devlink_fmsg_u64_pair_put+0x10/0x10 [ 1394.001329][T16057] ? devlink_fmsg_nest_common.part.0+0xcd/0x1e0 [ 1394.001404][T16057] nsim_dev_dummy_fmsg_put+0x61/0x1e0 [ 1394.001460][T16057] devlink_health_do_dump+0x243/0x620 [ 1394.001502][T16057] devlink_health_report+0x3c9/0x9c0 [ 1394.001545][T16057] ? __pfx_devlink_health_report+0x10/0x10 [ 1394.001582][T16057] ? _copy_from_user+0x59/0xd0 [ 1394.001626][T16057] nsim_dev_health_break_write+0x166/0x210 [ 1394.001682][T16057] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 1394.001750][T16057] full_proxy_write+0x12e/0x1a0 [ 1394.001807][T16057] ? __pfx_full_proxy_write+0x10/0x10 [ 1394.001860][T16057] vfs_write+0x2a0/0x11d0 [ 1394.001907][T16057] ? __pfx___mutex_lock+0x10/0x10 [ 1394.001937][T16057] ? __pfx_vfs_write+0x10/0x10 [ 1394.001989][T16057] ? __fget_files+0x20e/0x3c0 [ 1394.002039][T16057] ksys_write+0x12a/0x250 [ 1394.002079][T16057] ? __pfx_ksys_write+0x10/0x10 [ 1394.002132][T16057] do_syscall_64+0xcd/0x4c0 [ 1394.002166][T16057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1394.002201][T16057] RIP: 0033:0x7efcdd78eba9 [ 1394.002246][T16057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1394.002280][T16057] RSP: 002b:00007efcde558038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1394.002312][T16057] RAX: ffffffffffffffda RBX: 00007efcdd9d5fa0 RCX: 00007efcdd78eba9 [ 1394.002336][T16057] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000009 [ 1394.002376][T16057] RBP: 00007efcdd811e19 R08: 0000000000000000 R09: 0000000000000000 [ 1394.002397][T16057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1394.002417][T16057] R13: 00007efcdd9d6038 R14: 00007efcdd9d5fa0 R15: 00007ffd53c88f38 [ 1394.002462][T16057] [ 1394.611677][T15548] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1394.731312][T15548] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1395.324743][T15548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1395.646980][T15548] 8021q: adding VLAN 0 to HW filter on device team0 [ 1395.734876][ T486] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.742085][ T486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1395.836105][T16926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.843341][T16926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1396.102788][T15548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1397.259070][T16188] binder: 16187:16188 ioctl 40046210 0 returned -14 [ 1397.792780][T15548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1399.324966][T15548] veth0_vlan: entered promiscuous mode [ 1399.579418][T15548] veth1_vlan: entered promiscuous mode [ 1399.801797][T15548] veth0_macvtap: entered promiscuous mode [ 1399.905219][T15548] veth1_macvtap: entered promiscuous mode [ 1400.071597][T15548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1400.087271][T15548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1400.180937][T19777] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.218722][T19777] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.271098][T20509] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.306715][T20509] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1400.714119][T20509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.734503][T20509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.935393][T19776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.947319][T19776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.698166][T16263] Invalid ELF header magic: != ELF [ 1402.671174][T16295] ima: policy update failed [ 1402.690150][ T30] audit: type=1802 audit(4294968980.664:162): pid=16295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1402.750340][ T30] audit: type=1800 audit(4294968980.695:163): pid=16295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=101460 res=0 errno=0 [ 1403.969988][T16331] netlink: 100 bytes leftover after parsing attributes in process `syz.7.3414'. [ 1403.993909][T16336] netlink: 100 bytes leftover after parsing attributes in process `syz.7.3414'. [ 1406.749678][T16421] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1407.993729][T16468] ima: policy update failed [ 1408.007630][ T30] audit: type=1802 audit(4294968985.989:164): pid=16468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.3422" res=0 errno=0 [ 1408.126568][ T30] audit: type=1800 audit(4294968986.030:165): pid=16467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=101100 res=0 errno=0 [ 1411.468631][T16635] ima: policy update failed [ 1411.525325][ T30] audit: type=1802 audit(4294971037.540:166): pid=16635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1411.680699][ T30] audit: type=1800 audit(4294971037.691:167): pid=16636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3435" name="lu_gp_id" dev="configfs" ino=101254 res=0 errno=0 [ 1412.074831][T16661] netlink: 93 bytes leftover after parsing attributes in process `syz.3.3436'. [ 1413.255821][T16714] random: crng reseeded on system resumption [ 1413.938004][ T30] audit: type=1800 audit(4294971039.963:168): pid=16752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3445" name="members" dev="configfs" ino=102078 res=0 errno=0 [ 1415.660440][T16806] ima: policy update failed [ 1415.682163][ T30] audit: type=1802 audit(4294971041.712:169): pid=16806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1415.873978][ T30] audit: type=1800 audit(4294971041.913:170): pid=16813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3449" name="lu_gp_id" dev="configfs" ino=102505 res=0 errno=0 [ 1416.784108][T16757] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1417.009098][T16857] netlink: 'syz.3.3453': attribute type 19 has an invalid length. [ 1417.017090][T16857] netlink: 226 bytes leftover after parsing attributes in process `syz.3.3453'. [ 1417.199005][T16876] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3452'. [ 1417.240699][T16876] veth0_macvtap: left promiscuous mode [ 1420.187603][T17030] FAULT_INJECTION: forcing a failure. [ 1420.187603][T17030] name failslab, interval 1, probability 0, space 0, times 0 [ 1420.269889][T17030] CPU: 0 UID: 0 PID: 17030 Comm: syz.3.3467 Tainted: G U syzkaller #0 PREEMPT(full) [ 1420.269945][T17030] Tainted: [U]=USER [ 1420.269957][T17030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1420.269985][T17030] Call Trace: [ 1420.270002][T17030] [ 1420.270016][T17030] dump_stack_lvl+0x16c/0x1f0 [ 1420.270077][T17030] should_fail_ex+0x512/0x640 [ 1420.270109][T17030] ? __kmalloc_noprof+0xbf/0x510 [ 1420.270154][T17030] ? kernfs_fop_write_iter+0x237/0x510 [ 1420.270186][T17030] should_failslab+0xc2/0x120 [ 1420.270234][T17030] __kmalloc_noprof+0xd2/0x510 [ 1420.270274][T17030] ? __pfx_aa_file_perm+0x10/0x10 [ 1420.270336][T17030] kernfs_fop_write_iter+0x237/0x510 [ 1420.270377][T17030] do_iter_readv_writev+0x65f/0x9e0 [ 1420.270420][T17030] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1420.270502][T17030] vfs_writev+0x35f/0xde0 [ 1420.270554][T17030] ? __pfx_vfs_writev+0x10/0x10 [ 1420.270591][T17030] ? __mutex_lock+0x1c5/0x1060 [ 1420.270635][T17030] ? __pfx___mutex_lock+0x10/0x10 [ 1420.270682][T17030] ? __fget_files+0x20e/0x3c0 [ 1420.270734][T17030] ? do_writev+0x132/0x340 [ 1420.270769][T17030] do_writev+0x132/0x340 [ 1420.270808][T17030] ? __pfx_do_writev+0x10/0x10 [ 1420.270860][T17030] do_syscall_64+0xcd/0x4c0 [ 1420.270895][T17030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1420.270931][T17030] RIP: 0033:0x7f0874f8eba9 [ 1420.270970][T17030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1420.271006][T17030] RSP: 002b:00007f0875d7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1420.271039][T17030] RAX: ffffffffffffffda RBX: 00007f08751d5fa0 RCX: 00007f0874f8eba9 [ 1420.271063][T17030] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 1420.271084][T17030] RBP: 00007f0875011e19 R08: 0000000000000000 R09: 0000000000000000 [ 1420.271106][T17030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1420.271127][T17030] R13: 00007f08751d6038 R14: 00007f08751d5fa0 R15: 00007ffccb7c7218 [ 1420.271171][T17030] [ 1420.482567][ C0] vkms_vblank_simulate: vblank timer overrun [ 1420.675466][ T30] audit: type=1800 audit(4294971046.718:171): pid=17046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3470" name="features" dev="configfs" ino=102732 res=0 errno=0 [ 1421.776837][T17078] FAULT_INJECTION: forcing a failure. [ 1421.776837][T17078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1421.837098][T17078] CPU: 1 UID: 0 PID: 17078 Comm: syz.7.3474 Tainted: G U syzkaller #0 PREEMPT(full) [ 1421.837149][T17078] Tainted: [U]=USER [ 1421.837160][T17078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1421.837179][T17078] Call Trace: [ 1421.837191][T17078] [ 1421.837203][T17078] dump_stack_lvl+0x16c/0x1f0 [ 1421.837258][T17078] should_fail_ex+0x512/0x640 [ 1421.837295][T17078] _copy_from_user+0x2e/0xd0 [ 1421.837341][T17078] copy_msghdr_from_user+0x98/0x160 [ 1421.837395][T17078] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1421.837455][T17078] ? __pfx__kstrtoull+0x10/0x10 [ 1421.837510][T17078] ___sys_sendmsg+0xfe/0x1d0 [ 1421.837564][T17078] ? __pfx____sys_sendmsg+0x10/0x10 [ 1421.837635][T17078] ? find_held_lock+0x2b/0x80 [ 1421.837694][T17078] __sys_sendmmsg+0x200/0x420 [ 1421.837752][T17078] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1421.837818][T17078] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1421.837888][T17078] ? fput+0x9b/0xd0 [ 1421.837935][T17078] ? ksys_write+0x1ac/0x250 [ 1421.837973][T17078] ? __pfx_ksys_write+0x10/0x10 [ 1421.838020][T17078] __x64_sys_sendmmsg+0x9c/0x100 [ 1421.838072][T17078] ? lockdep_hardirqs_on+0x7c/0x110 [ 1421.838122][T17078] do_syscall_64+0xcd/0x4c0 [ 1421.838154][T17078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1421.838188][T17078] RIP: 0033:0x7f5aed18eba9 [ 1421.838214][T17078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1421.838247][T17078] RSP: 002b:00007f5aedff3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1421.838278][T17078] RAX: ffffffffffffffda RBX: 00007f5aed3d5fa0 RCX: 00007f5aed18eba9 [ 1421.838301][T17078] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1421.838321][T17078] RBP: 00007f5aedff3090 R08: 0000000000000000 R09: 0000000000000000 [ 1421.838348][T17078] R10: 000000000000cad7 R11: 0000000000000246 R12: 0000000000000001 [ 1421.838368][T17078] R13: 00007f5aed3d6038 R14: 00007f5aed3d5fa0 R15: 00007fffc2b7ba18 [ 1421.838410][T17078] [ 1422.491900][ T31] INFO: task syz.0.3088:10628 blocked for more than 142 seconds. [ 1422.534014][ T31] Tainted: G U syzkaller #0 [ 1422.640744][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1422.678616][ T31] task:syz.0.3088 state:D stack:27336 pid:10628 tgid:10627 ppid:495 task_flags:0x400140 flags:0x00004004 [ 1422.692294][T17089] ima: policy update failed [ 1422.713737][ T30] audit: type=1802 audit(4294971048.778:172): pid=17089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="" res=0 errno=0 [ 1422.748911][ T31] Call Trace: [ 1422.771031][ T30] audit: type=1800 audit(4294971048.788:173): pid=17089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=102797 res=0 errno=0 [ 1422.800054][ T31] [ 1422.803142][ T31] __schedule+0x1190/0x5de0 [ 1422.809700][ T31] ? __pfx___schedule+0x10/0x10 [ 1422.815058][ T31] ? find_held_lock+0x2b/0x80 [ 1422.819874][ T31] ? schedule+0x2d7/0x3a0 [ 1422.824365][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xb6/0x1170 [ 1422.831233][ T31] schedule+0xe7/0x3a0 [ 1422.835735][ T31] schedule_preempt_disabled+0x13/0x30 [ 1422.841461][ T31] __mutex_lock+0x81b/0x1060 [ 1422.846538][ T31] ? kasan_save_stack+0x42/0x60 [ 1422.851612][ T31] ? kasan_save_stack+0x33/0x60 [ 1422.857020][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xb6/0x1170 [ 1422.863416][ T31] ? __netlink_dump_start+0x6d6/0x990 [ 1422.869404][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1422.874941][ T31] ? ____sys_sendmsg+0xa98/0xc70 [ 1422.881446][ T31] ? ___sys_sendmsg+0x134/0x1d0 [ 1422.903487][ T31] ? __sys_sendmsg+0x16d/0x220 [ 1422.993694][ T31] ? nfsd_nl_rpc_status_get_dumpit+0xb6/0x1170 [ 1423.066770][ T31] nfsd_nl_rpc_status_get_dumpit+0xb6/0x1170 [ 1423.097445][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 1423.143463][ T31] ? rcu_is_watching+0x12/0xc0 [ 1423.169744][ T31] ? trace_kmalloc+0x2b/0xd0 [ 1423.183385][ T31] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 1423.190173][ T31] ? __alloc_skb+0x166/0x380 [ 1423.195462][ T31] ? __asan_memset+0x23/0x50 [ 1423.200115][ T31] ? __build_skb_around+0x278/0x3b0 [ 1423.206299][ T31] ? __alloc_skb+0x200/0x380 [ 1423.211058][ T31] ? __pfx___alloc_skb+0x10/0x10 [ 1423.216217][ T31] genl_dumpit+0x122/0x230 [ 1423.220679][ T31] netlink_dump+0x539/0xd30 [ 1423.227929][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 1423.235894][ T31] ? __asan_memset+0x23/0x50 [ 1423.246164][ T31] ? genl_start+0x67f/0x980 [ 1423.258511][ T31] __netlink_dump_start+0x6d6/0x990 [ 1423.271853][ T31] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 1423.298187][ T31] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1423.313272][ T31] ? find_held_lock+0x2b/0x80 [ 1423.318032][ T31] ? __pfx_genl_get_cmd+0x10/0x10 [ 1423.327715][ T31] ? __pfx_genl_start+0x10/0x10 [ 1423.333180][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 1423.338692][ T31] ? __pfx_genl_done+0x10/0x10 [ 1423.343791][ T31] ? __radix_tree_lookup+0x21f/0x2c0 [ 1423.349112][ T31] genl_rcv_msg+0x46e/0x800 [ 1423.353760][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1423.358805][ T31] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 1423.369203][ T31] netlink_rcv_skb+0x158/0x420 [ 1423.376025][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1423.381108][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1423.388033][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1423.393535][ T31] genl_rcv+0x28/0x40 [ 1423.397677][ T31] netlink_unicast+0x5a7/0x870 [ 1423.402662][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1423.408021][ T31] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1423.415165][ T31] ? __lock_acquire+0xb97/0x1ce0 [ 1423.420169][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 1423.431218][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1423.453460][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1423.459762][ T31] ____sys_sendmsg+0xa98/0xc70 [ 1423.465439][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 1423.471043][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1423.476452][ T31] ___sys_sendmsg+0x134/0x1d0 [ 1423.481400][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1423.486712][ T31] __sys_sendmsg+0x16d/0x220 [ 1423.492455][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1423.497644][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 1423.502787][ T31] do_syscall_64+0xcd/0x4c0 [ 1423.507342][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.514830][ T31] RIP: 0033:0x7fef4338eba9 [ 1423.519331][ T31] RSP: 002b:00007fef415f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1423.528117][ T31] RAX: ffffffffffffffda RBX: 00007fef435d5fa0 RCX: 00007fef4338eba9 [ 1423.536379][ T31] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 1423.544555][ T31] RBP: 00007fef43411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1423.552609][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1423.560614][ T31] R13: 00007fef435d6038 R14: 00007fef435d5fa0 R15: 00007ffd327ca7c8 [ 1423.568752][ T31] [ 1423.571958][ T31] [ 1423.571958][ T31] Showing all locks held in the system: [ 1423.633129][ T31] 1 lock held by ksoftirqd/0/15: [ 1423.638239][ T31] 3 locks held by kworker/1:0/24: [ 1423.644835][ T31] #0: ffff8880b843a458 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1423.665794][ T31] #1: ffff8880b8524088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 1423.693684][ T31] #2: ffff888033784fe0 (&r->consumer_lock#2){+.+.}-{3:3}, at: wg_packet_decrypt_worker+0x2aa/0x540 [ 1423.734901][ T31] 1 lock held by khungtaskd/31: [ 1423.754585][ T31] #0: ffffffff8e5c1420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1423.768249][ T31] 1 lock held by udevd/5236: [ 1423.773188][ T31] 2 locks held by getty/7584: [ 1423.777901][ T31] #0: ffff8880316340a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1423.789360][ T31] #1: ffffc9000348b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1423.803093][ T31] 5 locks held by kworker/u8:21/20509: [ 1423.824969][ T31] #0: ffff88801c6fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1423.839022][ T31] #1: ffffc9000ba27d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1423.852462][ T31] #2: ffffffff903725d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 1423.862008][ T31] #3: ffffffff903888c8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0 [ 1423.871254][ T31] #4: ffffffff8e5cc9b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 1423.881451][ T31] 2 locks held by kworker/u8:22/20510: [ 1423.886942][ T31] #0: ffff888146af6948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1423.900212][ T31] #1: ffffc9000b907d10 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1423.911862][ T31] 2 locks held by syz-executor/4673: [ 1423.917180][ T31] #0: ffff88805c68a0e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1423.928711][ T31] #1: ffffffff8e9d9c88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1423.939927][ T31] 2 locks held by syz.1.3071/10426: [ 1423.945160][ T31] #0: ffffffff9042bd90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1423.953484][ T31] #1: ffffffff8e9d9c88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1423.963862][ T31] 3 locks held by syz.0.3088/10628: [ 1423.969206][ T31] #0: ffffffff9042bd90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1423.977476][ T31] #1: ffff888028f2d6d8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990 [ 1423.988136][ T31] #2: ffffffff8e9d9c88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xb6/0x1170 [ 1424.000687][ T31] 2 locks held by syz.6.3343/15033: [ 1424.005942][ T31] #0: ffffffff9042bd90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1424.014510][ T31] #1: ffffffff8e9d9c88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1424.025426][ T31] 2 locks held by syz.6.3343/15034: [ 1424.030750][ T31] #0: ffffffff9042bd90 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1424.039156][ T31] #1: ffffffff8e9d9c88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1424.049450][ T31] [ 1424.051808][ T31] ============================================= [ 1424.051808][ T31] [ 1424.060402][ T31] NMI backtrace for cpu 1 [ 1424.060429][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U syzkaller #0 PREEMPT(full) [ 1424.060474][ T31] Tainted: [U]=USER [ 1424.060485][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1424.060505][ T31] Call Trace: [ 1424.060517][ T31] [ 1424.060530][ T31] dump_stack_lvl+0x116/0x1f0 [ 1424.060587][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1424.060626][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1424.060676][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1424.060728][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1424.060786][ T31] watchdog+0xf0e/0x1260 [ 1424.060843][ T31] ? __pfx_watchdog+0x10/0x10 [ 1424.060888][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1424.060982][ T31] ? __kthread_parkme+0x19e/0x250 [ 1424.061026][ T31] ? __pfx_watchdog+0x10/0x10 [ 1424.061074][ T31] kthread+0x3c5/0x780 [ 1424.061123][ T31] ? __pfx_kthread+0x10/0x10 [ 1424.061173][ T31] ? rcu_is_watching+0x12/0xc0 [ 1424.061206][ T31] ? __pfx_kthread+0x10/0x10 [ 1424.061257][ T31] ret_from_fork+0x56d/0x730 [ 1424.061325][ T31] ? __pfx_kthread+0x10/0x10 [ 1424.061374][ T31] ret_from_fork_asm+0x1a/0x30 [ 1424.061435][ T31] [ 1424.061447][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1424.191471][ C0] NMI backtrace for cpu 0 [ 1424.191495][ C0] CPU: 0 UID: 0 PID: 20500 Comm: kworker/u8:20 Tainted: G U syzkaller #0 PREEMPT(full) [ 1424.191533][ C0] Tainted: [U]=USER [ 1424.191541][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1424.191558][ C0] Workqueue: bat_events batadv_nc_worker [ 1424.191597][ C0] RIP: 0010:hlock_class+0x13/0x70 [ 1424.191625][ C0] Code: 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f b7 47 20 66 25 ff 1f 0f b7 c0 48 0f a3 05 8d 35 46 14 <73> 15 48 8d 04 80 48 8d 04 80 48 8d 04 c5 60 29 dd 95 c3 cc cc cc [ 1424.191651][ C0] RSP: 0018:ffffc9000cd579d8 EFLAGS: 00000007 [ 1424.191670][ C0] RAX: 0000000000000772 RBX: ffff88802a8f8af0 RCX: 00000000c1a8e7e0 [ 1424.191686][ C0] RDX: 0000000000000000 RSI: ffff88802a8f8b40 RDI: ffff88802a8f8b18 [ 1424.191702][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1424.191717][ C0] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88802a8f8b40 [ 1424.191733][ C0] R13: ffff88802a8f8000 R14: 0000000000000002 R15: 0000000000000001 [ 1424.191749][ C0] FS: 0000000000000000(0000) GS:ffff8881246ba000(0000) knlGS:0000000000000000 [ 1424.191773][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1424.191790][ C0] CR2: 000055557117b5c8 CR3: 0000000077fcc000 CR4: 00000000003526f0 [ 1424.191807][ C0] Call Trace: [ 1424.191816][ C0] [ 1424.191825][ C0] __lock_acquire+0xa9f/0x1ce0 [ 1424.191873][ C0] lock_acquire+0x179/0x350 [ 1424.191908][ C0] ? batadv_nc_worker+0x159/0x1030 [ 1424.191943][ C0] ? batadv_nc_worker+0x895/0x1030 [ 1424.191979][ C0] batadv_nc_worker+0x16a/0x1030 [ 1424.192011][ C0] ? batadv_nc_worker+0x159/0x1030 [ 1424.192047][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1424.192086][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1424.192125][ C0] ? rcu_is_watching+0x12/0xc0 [ 1424.192154][ C0] process_one_work+0x9cf/0x1b70 [ 1424.192182][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 1424.192216][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1424.192262][ C0] ? assign_work+0x1a0/0x250 [ 1424.192301][ C0] worker_thread+0x6c8/0xf10 [ 1424.192328][ C0] ? __kthread_parkme+0x19e/0x250 [ 1424.192360][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1424.192383][ C0] kthread+0x3c5/0x780 [ 1424.192420][ C0] ? __pfx_kthread+0x10/0x10 [ 1424.192477][ C0] ? rcu_is_watching+0x12/0xc0 [ 1424.192503][ C0] ? __pfx_kthread+0x10/0x10 [ 1424.192542][ C0] ret_from_fork+0x56d/0x730 [ 1424.192583][ C0] ? __pfx_kthread+0x10/0x10 [ 1424.192622][ C0] ret_from_fork_asm+0x1a/0x30 [ 1424.192662][ C0] [ 1424.193585][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1424.451872][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U syzkaller #0 PREEMPT(full) [ 1424.462593][ T31] Tainted: [U]=USER [ 1424.466402][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1424.476470][ T31] Call Trace: [ 1424.479769][ T31] [ 1424.482821][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1424.487496][ T31] vpanic+0x6e8/0x7a0 [ 1424.491510][ T31] ? __pfx_vpanic+0x10/0x10 [ 1424.496049][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1424.502096][ T31] panic+0xca/0xd0 [ 1424.505903][ T31] ? __pfx_panic+0x10/0x10 [ 1424.510384][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1424.515814][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1424.522023][ T31] ? watchdog+0xd78/0x1260 [ 1424.526468][ T31] ? watchdog+0xd6b/0x1260 [ 1424.530920][ T31] watchdog+0xd89/0x1260 [ 1424.535225][ T31] ? __pfx_watchdog+0x10/0x10 [ 1424.539932][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1424.545171][ T31] ? __kthread_parkme+0x19e/0x250 [ 1424.550252][ T31] ? __pfx_watchdog+0x10/0x10 [ 1424.554988][ T31] kthread+0x3c5/0x780 [ 1424.559108][ T31] ? __pfx_kthread+0x10/0x10 [ 1424.563742][ T31] ? rcu_is_watching+0x12/0xc0 [ 1424.568535][ T31] ? __pfx_kthread+0x10/0x10 [ 1424.573210][ T31] ret_from_fork+0x56d/0x730 [ 1424.577836][ T31] ? __pfx_kthread+0x10/0x10 [ 1424.582479][ T31] ret_from_fork_asm+0x1a/0x30 [ 1424.587285][ T31] [ 1424.590666][ T31] Kernel Offset: disabled [ 1424.595023][ T31] Rebooting in 86400 seconds..