last executing test programs: 3m43.507276671s ago: executing program 0 (id=3401): r0 = socketpair$auto(0xb, 0xd, 0xfffffffd, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000001c0)='/dev/audio1\x00', 0x100000a3d9) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x40980, 0x0) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) madvise$auto(0x0, 0x2003ed, 0x19) pread64$auto(r2, 0x0, 0x1000f42d, 0x100) sysfs$auto(0x2, 0x23, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) flock$auto(r1, 0xffffffff) ioctl$auto_SNDRV_RAWMIDI_IOCTL_USER_PVERSION(r0, 0x40045702, &(0x7f00000000c0)=0xb) write$auto(r3, 0x0, 0x4) 3m41.77650477s ago: executing program 0 (id=3408): mmap$auto(0x4, 0x2020009, 0x6, 0x56, 0xffffffffffffffff, 0x8000) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x20000010) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/dynamic_debug/control\x00', 0x482, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002fc0)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) madvise$auto(0x1, 0x8000805, 0x1) unshare$auto(0x20000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf251600000018000180140002006e657464657673696d30000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) setsockopt$auto_SO_TXTIME(r0, 0x7, 0x3d, &(0x7f0000000040)='/%*^[\x00', 0x9) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) write$auto(0x3, 0x0, 0xfffffdef) writev$auto(r0, &(0x7f0000000240)={&(0x7f0000000180), 0x9}, 0xb) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transaction_log\x00', 0x8000, 0x0) preadv$auto(r3, &(0x7f0000000040)={&(0x7f0000000200)="5780d0729c28681beb4bdf305043c3d2ddcbf3bd7f707beb72eea073b642916b12b7b9092900bde192c02604c98b1e151365c5923f4fd9565917f37eaeefd98163375e749933be166458b1e7dff87f8c550acefd819df53a5369356ec85fb794724432089c45842e9df5c8fa9e493b75e5339b72701719cfadc02fd654c54ce1f38e02cb011db3a6", 0x80000000}, 0x1ff, 0x800, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/bus/pci/drivers/uhci_hcd/remove_id\x00', 0xa001, 0x0) r4 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x41180, 0x0) read$auto(r4, 0x0, 0x58b22256) write$auto(0x3, 0x0, 0x9) openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x22800, 0x0) inotify_init1$auto(0x3000000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/hid/drivers/cypress/new_id\x00', 0xa001, 0x0) 3m41.035503261s ago: executing program 0 (id=3413): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x2, 0x5, 0x3e) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x5b) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0xe8, 0x6, 0x3, 0xeb1, r0, 0x403) mmap$auto(0x0, 0xa00005, 0x9, 0x40abe, r0, 0x7) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) mmap$auto(0x0, 0x400008, 0xe4, 0x9b72, 0x2, 0x400) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket(0x2, 0x1, 0x106) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) setsockopt$auto(r1, 0x1, 0x12, &(0x7f0000000400)='\'\ak\xb6\xc8\vFx\xed\xd6\xf8\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0xeb66) bpf$auto(0x9, &(0x7f00000000c0)=@batch={0xffffffffffff3c77, 0x37, 0x2, 0x5, 0x9, 0x1, 0x6, 0x80000000005852}, 0x18) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, 0x0, 0x0, 0x1, 0xfff, 0x0, 0x4, 0x9, 0x4, 0x9, 0xf, @raw=0x9}) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000053c0), 0x41, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r2, 0x0, 0xb4d3) msgget$auto(0xb4, 0x80) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) setrlimit$auto(0xb, 0x0) timer_create$auto(0x3, 0x0, 0x0) getcwd$auto(&(0x7f0000000040)='\x00', 0x101) 3m39.674984292s ago: executing program 0 (id=3418): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x2003f2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/event2\x00', 0x200, 0x0) ioctl$auto_EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f00000001c0)={0xf7, 0x9, 0x4, 0x5, "5985defc324a4de75c928e8e44ea648f58059b692f5651c7d7cbf7d23ed8df40"}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r3, 0x5425, 0x0) ioctl$auto_TCSBRKP2(r3, 0x5425, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000200)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r4, 0x0, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) bpf$auto(0x2, 0x0, 0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) 3m38.611349913s ago: executing program 0 (id=3425): mmap$auto(0x4, 0x2020009, 0x6, 0x56, 0xffffffffffffffff, 0x8000) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x20000010) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/dynamic_debug/control\x00', 0x482, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002fc0)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) madvise$auto(0x1, 0x8000805, 0x1) unshare$auto(0x20000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf251600000018000180140002006e657464657673696d30000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) setsockopt$auto_SO_TXTIME(r0, 0x7, 0x3d, &(0x7f0000000040)='/%*^[\x00', 0x9) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) write$auto(0x3, 0x0, 0xfffffdef) writev$auto(r0, &(0x7f0000000240)={&(0x7f0000000180), 0x9}, 0xb) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transaction_log\x00', 0x8000, 0x0) preadv$auto(r3, &(0x7f0000000040)={&(0x7f0000000200)="5780d0729c28681beb4bdf305043c3d2ddcbf3bd7f707beb72eea073b642916b12b7b9092900bde192c02604c98b1e151365c5923f4fd9565917f37eaeefd98163375e749933be166458b1e7dff87f8c550acefd819df53a5369356ec85fb794724432089c45842e9df5c8fa9e493b75e5339b72701719cfadc02fd654c54ce1f38e02cb011db3a6", 0x80000000}, 0x1ff, 0x800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffff6, 0x8000) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/bus/pci/drivers/uhci_hcd/remove_id\x00', 0xa001, 0x0) r4 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x41180, 0x0) read$auto(r4, 0x0, 0x58b22256) write$auto(0x3, 0x0, 0x9) openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x22800, 0x0) inotify_init1$auto(0x3000000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/hid/drivers/cypress/new_id\x00', 0xa001, 0x0) 3m37.915713277s ago: executing program 0 (id=3427): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) r1 = clone3$auto(&(0x7f0000000340)={0x0, 0x4, 0x2b, 0x9, 0x4, 0x28, 0x280000000000, 0x400, 0xfff, 0x401}, 0x400) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000001a80)=ANY=[@ANYBLOB="2c130000", @ANYRES16=0x0, @ANYBLOB="00082cbd7000fcdbdf252300000006000900430200000600090006000000f812288007ff3a8004004c8008008b00", @ANYRES32=r0, @ANYBLOB="0400ae800400bc800000d18000006280000050005a7d19303d4021c132450b6951bbac2a4e01fe2768f45c19d2125e69b20000000000e400", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB], 0x132c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008001) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) select$auto(0x4, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x7, 0x2, 0x1, 0x948b, 0x1000000000000004, 0x15f4da0a, 0x39, 0x3, 0x2fffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x80, 0xfb]}, 0x0) (async) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x2480, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/ocfs2/loaded_cluster_plugins\x00', 0x800, 0x0) (async) syz_clone(0x40005280, &(0x7f0000000400)="f03f0b0be4f2597d8b11ed14dfa636bad65cae9c0d21b998185cb87219dc476546c97594f5d1c08a39ae7d8a11c4a12ce6c28d057e9b069a444b1c4b6fcdff83fa7d087e2b1242707a28f3ccf82671d58e5ccda6d5e8039721992358a842bd3e9351930b3342b3c7ad92a16f836d926ce5881f1d0601855f9fba5ba3c9476ba610ea2dbe130fe36d33000000", 0x8c, 0x0, 0x0, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio1/rate\x00', 0x2, 0x0) write$auto(r2, &(0x7f00000003c0)='\x9c\xb2\xd1\x00\x10\x00\x00U\xff\xf6OL\xc8\xbe\x04\x00u\xb6\xd0\x16\"\xbc\xc7\x9c\x7f\xacu\xcd\xab\xca[a(\x91\'\xbe\xb2\xf0\xb4\x0f\xfd\xd4\xa6\xa7\b\x00\xaa\x11\xd8\xa1\x92z\x8dB\x9ax*=\x1a=#\x811d', 0x6) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) (async, rerun: 64) msgctl$auto_IPC_SET(0x2, 0x1, &(0x7f0000000100)={{0xa, 0x0, 0xffffffffffffffff, 0x9, 0x6, 0x1ab8, 0x8}, &(0x7f0000000000)=0x40, &(0x7f0000000080)=0x2, 0xfffffffffffffffe, 0x4, 0x100, 0x40e, 0x1, 0x462a, 0x401, 0x200, @raw=0x9, @raw=0x3}) (rerun: 64) setresuid$auto(r3, r3, r3) (async) r4 = socket(0xa, 0x1, 0x84) getsockopt$auto(r4, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x2c) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PEER_REMOVE(r5, &(0x7f00000110c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001740)=ANY=[@ANYBLOB="16a3a5cc43c0bc2aaa5e6faf73199c0e1298e0a71bf63d5add6803601c4f3e3d0a06204b61dd74939fcf077a9501c63fe1d921", @ANYRES16=r6, @ANYBLOB="010026bd7000fedbdf25140000005c00078055000200088b4ae114c241818bfd0d51a861020333b011faafebacd4ebe2b1295ca8cee9514a44014a7fa4b66776e8a936023c3488d7ec1bbf5200802f8c885c5ad7d17117fdebe7f13fc8cf8a6bad18ae4bfb6609000000"], 0x70}, 0x1, 0x0, 0x0, 0x20008105}, 0x40) (async) pwrite64$auto(0xc8, 0x0, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 3m22.658600287s ago: executing program 32 (id=3427): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) r1 = clone3$auto(&(0x7f0000000340)={0x0, 0x4, 0x2b, 0x9, 0x4, 0x28, 0x280000000000, 0x400, 0xfff, 0x401}, 0x400) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000001a80)=ANY=[@ANYBLOB="2c130000", @ANYRES16=0x0, @ANYBLOB="00082cbd7000fcdbdf252300000006000900430200000600090006000000f812288007ff3a8004004c8008008b00", @ANYRES32=r0, @ANYBLOB="0400ae800400bc800000d18000006280000050005a7d19303d4021c132450b6951bbac2a4e01fe2768f45c19d2125e69b20000000000e400", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB], 0x132c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008001) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) select$auto(0x4, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x7, 0x2, 0x1, 0x948b, 0x1000000000000004, 0x15f4da0a, 0x39, 0x3, 0x2fffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x80, 0xfb]}, 0x0) (async) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x2480, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/ocfs2/loaded_cluster_plugins\x00', 0x800, 0x0) (async) syz_clone(0x40005280, &(0x7f0000000400)="f03f0b0be4f2597d8b11ed14dfa636bad65cae9c0d21b998185cb87219dc476546c97594f5d1c08a39ae7d8a11c4a12ce6c28d057e9b069a444b1c4b6fcdff83fa7d087e2b1242707a28f3ccf82671d58e5ccda6d5e8039721992358a842bd3e9351930b3342b3c7ad92a16f836d926ce5881f1d0601855f9fba5ba3c9476ba610ea2dbe130fe36d33000000", 0x8c, 0x0, 0x0, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio1/rate\x00', 0x2, 0x0) write$auto(r2, &(0x7f00000003c0)='\x9c\xb2\xd1\x00\x10\x00\x00U\xff\xf6OL\xc8\xbe\x04\x00u\xb6\xd0\x16\"\xbc\xc7\x9c\x7f\xacu\xcd\xab\xca[a(\x91\'\xbe\xb2\xf0\xb4\x0f\xfd\xd4\xa6\xa7\b\x00\xaa\x11\xd8\xa1\x92z\x8dB\x9ax*=\x1a=#\x811d', 0x6) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) (async, rerun: 64) msgctl$auto_IPC_SET(0x2, 0x1, &(0x7f0000000100)={{0xa, 0x0, 0xffffffffffffffff, 0x9, 0x6, 0x1ab8, 0x8}, &(0x7f0000000000)=0x40, &(0x7f0000000080)=0x2, 0xfffffffffffffffe, 0x4, 0x100, 0x40e, 0x1, 0x462a, 0x401, 0x200, @raw=0x9, @raw=0x3}) (rerun: 64) setresuid$auto(r3, r3, r3) (async) r4 = socket(0xa, 0x1, 0x84) getsockopt$auto(r4, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x2c) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PEER_REMOVE(r5, &(0x7f00000110c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001740)=ANY=[@ANYBLOB="16a3a5cc43c0bc2aaa5e6faf73199c0e1298e0a71bf63d5add6803601c4f3e3d0a06204b61dd74939fcf077a9501c63fe1d921", @ANYRES16=r6, @ANYBLOB="010026bd7000fedbdf25140000005c00078055000200088b4ae114c241818bfd0d51a861020333b011faafebacd4ebe2b1295ca8cee9514a44014a7fa4b66776e8a936023c3488d7ec1bbf5200802f8c885c5ad7d17117fdebe7f13fc8cf8a6bad18ae4bfb6609000000"], 0x70}, 0x1, 0x0, 0x0, 0x20008105}, 0x40) (async) pwrite64$auto(0xc8, 0x0, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 2m39.663959095s ago: executing program 3 (id=3588): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000004440)) io_uring_setup$auto(0x6, 0x0) open(0x0, 0xcd1e23e41b02d660, 0x154) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) socket(0x6, 0xb4d7c013128c0e82, 0xf) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) memfd_create$auto(0x0, 0x1800) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x2a782, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xffffffffffffffff, 0x200002, 0x40000007, 0xeb1, r1, 0x7fff) readv$auto(0x3, &(0x7f0000000180)={0x0, 0xffff}, 0x8) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r2, r3, 0x2) open_by_handle_at$auto(r3, &(0x7f00000004c0)={0x1, 0x0, "ed"}, 0xffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 2m38.030428667s ago: executing program 3 (id=3589): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x400003, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = eventfd$auto(0x3) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x1}}}, 0x66) (async) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x2, {{0x0, 0x1}}}, 0x66) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x6, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r2, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) write$auto(r2, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) prctl$auto(0x42, 0x0, 0x0, 0x1, 0x0) timerfd_create$auto(0x9, 0x0) openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x107c1, 0x0) r3 = socket(0xa, 0x2, 0x3a) recvfrom$auto(r3, 0x0, 0x3, 0x9, 0x0, 0x0) (async) recvfrom$auto(r3, 0x0, 0x3, 0x9, 0x0, 0x0) close_range$auto(0x2, r0, 0x0) ioctl$auto_BLKBSZSET(r1, 0x40081271, &(0x7f0000000200)=0x8) (async) ioctl$auto_BLKBSZSET(r1, 0x40081271, &(0x7f0000000200)=0x8) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto_CEC_G_MODE(r1, 0x80046108, &(0x7f00000001c0)=0x2) sendmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x2, 0x0, 0x400}, 0x4}, 0xfff, 0xb07e) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/bus/pci/drivers/net2280/new_id\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000180)='7\x81=\"\xad\xff\x8d\xf9;\x18\xa4\xb0&L\xeb=j\a\xb3\"Yq\'R\"\n\x1d\xa1\xff\a\x17\x00'/42, 0x81) io_uring_register$auto_IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000080)="c31990257ad111ec7ccdb84faf01f723dfba3362ae1de35bbe50ac3f357a75f82f2fba5e2dce5bce09ae66970783570d6d5c41b0cfa01b1023beff2dc236caa09d87421661b2ba7d96c38bb372068125d696818f3b767f7315e11b935dddc17b98937f9ee8a5d61239029950034cea7a", 0x8ef) (async) io_uring_register$auto_IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000080)="c31990257ad111ec7ccdb84faf01f723dfba3362ae1de35bbe50ac3f357a75f82f2fba5e2dce5bce09ae66970783570d6d5c41b0cfa01b1023beff2dc236caa09d87421661b2ba7d96c38bb372068125d696818f3b767f7315e11b935dddc17b98937f9ee8a5d61239029950034cea7a", 0x8ef) 2m37.212024132s ago: executing program 3 (id=3590): openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, 0x0, 0x5a1380, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = socket(0x2, 0x1, 0x106) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x11d802, 0x0) sendmsg$auto_CGROUPSTATS_CMD_GET(r1, 0x0, 0x20000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xa9}, 0x2, 0x0, 0x7, 0x4}, 0xd38e}, 0xa, 0x4004) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @multicast2}, 0x52) read$auto_hwsim_fops_ps_(0xffffffffffffffff, &(0x7f0000000180)=""/115, 0x73) r2 = socket(0x2b, 0x2, 0x81) ioctl$auto(r2, 0x89a0, 0x4) socketpair$auto(0x1d, 0x5, 0x10, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) unshare$auto(0x40000080) sendto$auto(0x3, 0x0, 0x100000000, 0x40000008, 0x0, 0x19) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) fcntl$auto_F_GETSIG(r2, 0xb, 0x62c) fadvise64$auto_POSIX_FADV_DONTNEED(r0, 0x8000000000000000, 0xffff, 0x4) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000040)=0x5) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) r5 = syz_clone(0x44aa8c80, &(0x7f00000006c0)="555e071ac51ff0994c27f2c035f6ff2406e690499531577bc832180582aac92f2c14dc0c14bc8c938210918a31ff108f0dccf9402c14485c25414a7b1c7939f0d166fd4595e17b63f56b0abf7e9f44afdfa7a4d6edfa33df0b11b34d021f4f81353e5669d87120ecde9da4eeed4f9dfb9c3c249f1408127b76124ec3b425df54acf3978702dcae903f7348d04db9f72e345a9f7f697946904fddb951ab1eefab194a363a6c775346236b1dd25b1fa5bf48bd9785f724a518da7466f236f04959aa49fd25a366cb2860c43d579bf55e166e5ef671e69b36758823a51d4a94c465e95742c7218a983392e5631b1aeceb15944580f31012702c93a93b081bd170f06bb815c31d823a732534604206b705bed3652e16cb88334b726d9ea55e544f3f83baf4d1cfc6a9a8dbf94068b32b2b9f5a79fcbd4f48012ca02445eb9a49dbc615b631e11b3af88fdc18f0036c312153620d44d4d1fd0e16dcc110d984145aa32a74c31dfdf5f08dd6aeae5737b56fdc5891884e946f5c7a44a4be6cc76f2e174dd24c9e1b50fb6022436aafb1b7fdb53b0174ba0fcf2157bf3d0d3a8042a6589f88f83b6b38ebdcd1af0e2336d18024ed80a46344baf6841ef4d9f400d9f2a563783673d56fa7d39c7cf305ce75526090c0a0ce1fd03b1053f1240358b6e82ce5c4179914d8fbe6df0af19e8620e54a836d12fbd974339724824b0b285858f770e424b35ed7e58efa87ac13bcfe350e48658ad734b089e4f92e11ceb0d5f86100b61d48216ffbea56ed26e0d6c6e55822de3919c5ceee913a325365a5cf5a8963f729c87c1cfb2db5cb200162c19db39f5edec39953051edaffb63787b98077b16a280af3c1965b3dce8146d08439608abbbd594f5570b9bfeeb3300100e59bf1359d9d0b2103df8ad52fef6cd7ff3be3461278b264ac20a16dbf8728eaa8cf1c38460a9c8b3317c3cafd8bd9c4f286ff445ee5359f18f6ed84fc10438552b66343ea7cd564a7d522c3e3c6439ed48fe188184a7be8eb1de5eb3fa72aadcafe532747a2aace607b839cc171bc4fe51d87854480125b684ac4985c9dbc76ccfe94b9a87f722dba57024255a62bce18a0b5076a1cd703efc0036179e2030657e057468b2e3effd9eaa93786adc40fec67bff72803e457e5830efb0b71749a2ccfb065a65ba35d0280779e4e6d5291e5efcfe4ea39dbec488ed6f1d43bd3d2b2086cb522fc46d4c72b533a42bcef8d7854dce081f392270c09c8db74df9a1fc3bd1b7e8c8d1ff8fd4cb3ff57675c2da03f15edf3ede50c4da403cfc1c939479d14f215282db3aaf4893992702bb8493d0adc600c1807aaa10fd8d4a382a033681dfac3625cdb262ceea49cdc34c5b262ab47eb927eec31deeb79e12faa3672b521622d26349a77480d61509af15e28630500c8e25772cc2620b890d641b463a885a57fc0b0b9fe3739f9d2bc926e3d9bba7f381ded3968b2d94bdc36557f1e737c19eb7b408c7ed78b3cf66647575667e7a0f814aafe79102cdbcd3ade64ad3bd12cd7903ddcdf3ec48eff9992915ae4af3cc3617fcfd6f42603c2aa77c6aa8855d4f3974910c17b43158204903908e1fb6ef68c56acd0b8c05a6509f292e7ee790afa28a2638d1263f7efbb4ba68077e69c5597515c0e8a387f0665fc37b7b704373eb56f09e139036f24d1238bd6fa3d73d1d8c281b8c9ce89efc9f8e439c1ef75056b00da9d06dfde5a1a7307da94f2d8b81cb1b14cdfecdd58cdde35aa4d53e1e5899da0ef1069c1a9d09c8236ae996874a6d8984797ea7a20d7c2dc06f77f3d47d27fe3a5e3e9eab51caf06a7e9a8c90465f550d1f425bef6e20018c1f3fefd69b5f251e03dd59c2fa27af353ad54043136f728779cbc777c9d91f52255ba0fe89bbf795ff493c89d3ff72e4acac3567158a2984429025dea9c56085d597969e542d3ad8a2df7685869d545de4a3e5d3e106e4dff817ea48f65089791e93941f925ca5686ba62f8e012cd017e4fae7032fd0cfa4811205f026030e5d34f284c42b13bae5e8e01d7ce73b78d1ca786e82177915b526f0ff5435fa4f63dde67f295cd1f9648e41c08cbacb9855d8d9dcff6f8fd27e7a7ceba533ab592ca97b07064453caaaf9992ec34c02a0bd5ea6340d4d26eaaed931439827209e3204aa0ae90a259838dd0d17ceb4c900c1a11d4e04a60da2a85b4bbbd8d38bde36ec4e36b2b61411b7dc099c29a2aa8b37b6d3aea90e8a12330ccb7b6ccdad9eda9750f822b65d06e7184fe0d116dfcb959275582f13f0d8ba080ad249edff45ad7cf7043172111a1d07e23d51a7d0b93a317d8b286d27c3b5f6379d39faee8f3b95a632ad97f9ced248bbd740bd7bd5efe79893255a4244467b2962f33bf767b3d507c85006fdaeb380d9f20f994f18bca838cebaec28011a38592c381453a6216717b7a7f6a8852d6968592f9d499acd8384d5e7fec7aef4f093e8111be3ea174d69898f7985b8b3a4a9ebd769ee0350ab1330507b5a14a34e718985131f7e1c3d921a1f643dc50e4f103380aa5fee0de5dbd72875224124c5b59c046e331cacd0986d94b4a3a7830649315d7003f9778609c9b88dc128dfb699df18f785f5201cf4e1f732e8891349a8d6087685c0f9b42dd842803fe17065bff1fe4d44903b1d9649d557123b36e896a63414ee59b437f9874a90c72e395f63d19b71a95cd86a215426778245d7934ffa9761aa23ca10d5f9560d0a7138ae00239129ccddfb3b98872cd141e8338fa7b336f2aedc04601a7eddea3071e153b6a8abc4f9d4fe443ec722e816f0b3f9aeeeb2c578a18ad55cfba8beeb788d3543a14f7016c2a96117946834a4301aab1021e94dfc0bdf02246ca960492a49d5aaaa11ea783b48532fe75b64264ffd935bee60c09bf13894ac14319879f2fbff4e64798ae9c3bbe46505340a6e96df66964256dff688e586bd87cd14972221ffe1ee64f8d93092f28d101e1c486c2268d56d2b1ba84343d641023f2e2d8762548d30fd3914c7c5a3cf16e2682878be8d7d8ea6b75e0641585b9affd2f9ba8672a47f89bfe31535f27ebc3d5ea28efa32eb8d7435fce113bc18da62a099c542930ebcc834f074cb2b1908afa313f189888ee14a70f562606093c7ab2db9fbe03e61f1a126385c490b644be0fef44d89d38108507c8e24167bcf67344aabdcf6eb96e8e99154b4373107fa83927dcdb1390c946ecb4606ba41f43cfeba78eaab340e135dd0b5bfe0d6ca8463970efcab13c7aa3360f324e37111eac38375407856cf9402b466bd68504c441ada1d976c54586e01c315b74740ca4cf3fba96387734eb76e3aca1dd65f003d0152dd5ac6cbdbc958430c29dbb622ed9b7830fbaaa3f26a704a99c470e5e050667ce32bc672981deb5d1712bda18ae78c14b95d4e642981fcd9d3fae6d9c5e05f938a7cb0cfb3f1ff8da96a9b4fcc373a0e878235941204850a3b2cfe08ae100d4b29ad0eeb6907235e05fa38e9035b98ef849457498a7d3e8f11207ff6ba691ebd58e0e486e496068f8fec844282bedca81d3d9ceda51c7a09d9669e47dfe5deb680736036e62e4a83c52ec51d2a6e079e13b66bc16cadbe3b99313242d9211e4092bc7a52f735060cbcca1ffb45a86e9418e05051cc637f3d35f169124834c2ea74394a273572598b65f182b54be502f6529accb005a7ee2895cf286ee53271a82bb40e979537f56a36991ffabba99d4a7d27207165edb3c08e448d0bad8e51c1b83e9f0692633b1c3bc2591d0a21e8e06fef2b04e71198d510d30712a6bee1faab88c3d4b67061f362b97194519304f6c5ac6ca2be18fac8ce4c5d285fea53826ab9fb1af13d202d5d8ef33f0add3e3ac28c019c2c56403815db9df80fe5c3c1584311d4c831348c955288cb91aa4c1867df6388f66e45f9a4b5ef02fec01d7f371770886b195276eaed12a7123296687bd3166ee3be634b088049de25da011b8fad4eeaa2b72ea39e09a1c60a844ec83c82fadc44986b3e58f5c58437369762e1a2b3d16a2ce00d515c6d38797c8f7eb76b14e1001f13be3fad229abfdf8780b413d3d9446463342f40012c9bd3ecfa92c6f80caaf308bb1a177fea8f2f409c47284af82ba95eb6e561c59ee67111d70230855e9a952791c994229561150c0687dc337372e8d4be8c5813c15faaaa9b5e22fc029c14ab2c01390871d162e5d2419c78486c066c06e29a028015eb52848e155ded757177b9e1de64e39f714a2156990e99ba07b3674ad37d18ef8c0a7d1ea6a73b66b50b08877c2c4ebbf14dc685289f178ae5fbef644005ab4a38cea4f16cab829cf0239d93e8e5b0c71f7dc0158ace7f76170c693531795d39beb995afe6e6d967e1363fd41df05c3f293197a92109df725b17eb1aed48583303deb4a08e8058fdd426b963ff944d2e58331ff227a20b1f4aa2e8ecf4ca5cf8b76dab372fe53086f2affc755182da4dba148fa71d29ef41a0ffb5752a02c592fdc3698c978a075baad684a85e841dd3b95b86005c57bad0f4108d935c597e8a641b5e91548c491b51017a7db4c708f3d152d65f5cca914a917ed1c51133c42b6ead6309721dee362fc6ea5b7fa5a01e77ad1ab32d2be040a08db38c3aeb6f058851ba0081ade5ab42dcc43a41e623d7c186a605d27b6dabc8a87dc209108de1b0e80372f1cb5d2075aeba2bc16855859dcb395eec779ccfcd2d711c9717e09df55a405c1726ead5c64f2234d3397942fd7011d8b1bbbf0a9c6dcb926ce991f68b31a9770ca9f04db844cca0f9f03718408315cc1106fb72505b11967696a67fb4c0bee3188695b97285bb6926d2e02709c2fd48860a87f7a5a63e0617279d6e8c725102a1f96e87acef48bb3aae49fc3a60a50c3078e4344ba837e115870d9a633812f1254d57d9f4b2503ab5f7095e11f4cf62652dc0bd8e8520ba8ed162dce0cbe59d57696584434c88f9350bc2e37c0ae49b446a398784d6bc5c111e9c21204ebf4b388bb68568425757bed05c74018ed98643f510ce8ff1692c5e1345de726cd4d901e5177246e4a9a6da8ae1e0c79339afeb4a37538c8c91542e418e40e822595eacd9fd0e37870f4f718ab751d826a0d95ab0d0e2892d89f5b1fc19054d7a9eb88ffd12641594f547bebb95834451c6d2161424e649a7a90ca6a53a7fe6f584726793a3fba5edfefa7c376dc5ed74d649a1880cacb5dbcaecd2841c9ee09f62d43f6f62792de58a4c066366b690141b721c816bb9af87fa35f382e15ddaef01239c9966c85af51c277552b565cd733a3aa3205ca28cdd9f54f512efc0bbbd3bff47a5b4c35d8b0a824d691f1cf17072f2b746ab168408b1b2fc0a9eb0a6d5877c155bc5d46e197f1ae03ee2558cb65f1ba2f35cbaa5f5d5a3a12d6ac08f60202e028d1071cffa7f1de35707172148cc3193932fa8e128a9caea9ea6509e3a9cabbdd980572a76d80109de6ff5edf2d5767a9d2aad9bfb034a3ae0803fb392372277405c23cf5d57dbebd5c3ea8bf3706133ed98eb1c8366fe584c9d567b57c4c89d6334aa8503d37a750c3ad84b104470fa0453611916fa86126cc553102dd0fd609c6dc2fbe8109e265bc71a1ef278249fee6a0ed6f977e7259869e1e8499b182c0ccf240e6c28f4263aab31d0e0bb123a981bc7137c8b82ce1bc27a268c6642c138e9cf383836c627d539f983b905b1f9df9d5a799b8111b9dac79b8f528314ec25ce47f5dcc3fc5135f6c9115be1c7e50980018ca5fa84a1edc9558d9fb784590add516cf6209b9aba7b7cb", 0x1000, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f00000002c0)="2955bd34a9ef6f0a50def4633f7e316e6139b092772f57a11eed6ad82225b72c5e105f761152dd6c2f91f95ff8044ad4e1e02311292efe342c22a975491ce8d287b27880edc252879a5ef31a4364760cc72464b5fefcfc63a31793a3d54e9b4f7b002c4b6c127266801cbf34d12fa946ef15af7129ae828667c10c9cead89c1072bae418ee6e075edc28a3f610484adbaf811a2528f93cc413692cb2bae33bf1ba13c40f318cbb768dfa950ba8227656322b5ee83b1a5126707ba2be1bfff0cc607dadde5afaaf325194a44741a98f68d35216c48cb4ff3d78785209167bf9ad49fa657ef7ddff002c78f4283d") ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000003c0)={{@inferred=r5, 0xf0ee, 0x20009, 0x3, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e00", @inferred=r5}, 0x4, 0x968, 0x3, @inferred=r5, @integer={0x5, 0x0, 0xffffffffffffff00}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) close_range$auto(0x2, 0x8, 0x0) 2m29.238792785s ago: executing program 3 (id=3600): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x5, 0x4, 0x7) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x42800, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mem\x00', 0x200, 0x0) read$auto_proc_mem_operations_base(r0, &(0x7f0000000200)=""/81, 0x51) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x80002, 0x73) r2 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, 0x0, 0x80) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r2, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)="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", 0x9}, 0x8, &(0x7f0000000100)="24db605e3be9a2fef6f279b7ab3f29269d237103029b7444afc7d00200516f4b63091a7c337ee4f0581115f6d81ca8f6e6a3b5125d8b59d562ae3efb9266d293026c7d92248d3334f321d192f3cacffbf4594da76d371f6afa68b6db74bc1e1877914221d8a0cb266d5c29a2aad020cabd23f6aa0efcba5c10e344929c", 0x9, 0x8}, 0x6}, 0x81c, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0xfff}, 0x3) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, 0x0) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) write$auto(0x3, 0x0, 0x70) 2m26.927383981s ago: executing program 3 (id=3604): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={0x0, 0x49}, 0x5, &(0x7f0000000180), 0x6, 0x1000}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) fstat$auto(0xffffffffffffffff, &(0x7f0000000300)={0xff, 0x7, 0x45, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe, 0x803, 0x4, 0x6, 0x0, 0x73, 0x1, 0x1, 0x8}) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) preadv$auto(r2, &(0x7f00000002c0)={0x0, 0xbe78}, 0x5, 0x800000fb, 0x8100000001) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000c00)={0x14, r4, 0x309, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r6 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) ioctl$auto_RTC_UIE_ON(r6, 0x7003, 0x0) r7 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)={0x20, r7, 0x301, 0x70bd23, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x9, 0x2, 'l2tp\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r9) r11 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r10, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x1000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) shmctl$auto_SHM_INFO(0x4, 0xe, &(0x7f0000000140)={{0x4, 0xffffffffffffffff, 0xee01, 0x9, 0x0, 0x4, 0x5}, 0x97cc, 0x5, 0xb10, 0x9, @inferred, @inferred, 0x200, 0x0, &(0x7f0000000200)="0ddf050a4a34ff4b4f96f39c1e8b55e42045ea1185bcb4eac1333d26bdae0f5bfc143e92e0e11eea959717d9e08cef66afdf630ddff9719ad845952547b8a1a56a9ec2534eee81f19c94d12c2aaf79dfbcb6ba4eae07eee7355c4e99e32f6bd2157b5f07338c7ac7a1561dca624cd59c5ce8cf4f3ba884cd48b47f41facf004697744bfb5596769491e6e3ce81648d73ac96", &(0x7f0000000300)="44b600a72c5377663227252bb72c5e9e935c4ec2c82e1f574868f8336202379f9f9fd6de669d74198aa7994dc769701d6c5b2e11f4c5c47de20b6392cecafb9f8b5686b11482dea83e5ee9a44da2b1d14f56a94acf28f03ee16c09c5b2b5d0014cb95138c27ee95ee0fc8bea9c71ddbf5623781143e665d5816c086a8178030ba40602fbcb086b83730e3df4892f8c9661e1375aff6140a8186d8827a2ffddb716550182d10801aaeaf432df47e0bae4b147427f3695aba044e225cb5427cdf282d966c566f8456b09ef94a777bd116c"}) ioctl$auto_BLKTRACESETUP32(r0, 0xc0401273, &(0x7f0000000400)={"343c770069f9877b74bea4609c5a377f2a18ce45a4cd3e4a6d265caca3a9edd4", 0xca80, 0xfffffff6, 0x3, 0x8001, 0x80, 0x0}) sendmsg$auto_NL80211_CMD_TDLS_OPER(r8, &(0x7f0000000c40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000480)={0x774, r10, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_EMA_RNR_ELEMS={0x643, 0x145, 0x0, 0x1, [@nested={0x113, 0x42, 0x0, 0x1, [@nested={0x4, 0xf7}, @generic="d38b064e09862833e684f27cd7d85194a38ed057a7ed2b9a427c4ac7cc020625c58f4162bc2b761184890a0a0079f6faca631ffe507a9428f8ee75eafcff1b3b1ae9bd654cbcb57e4911dd71e38a86875f61876d74f4e09b8526b3721e8707641cca114b5b0d0e983640d4a60ea72dfd81a2466c1ae57b427dab5f15d1b45b3acc603b70d1196c52ceddef13ceafe03beec98ba6a03e3456f7ca6fb04c9fc82cbfe182109681c02886", @generic="3f3171be362a0495054db06ed0bea30a92f1e5aa78eaa9346b6e8919f273e70d7bd80560d4cd32857a53e8b89590e36794299ce5548e0b8c0dba8c4f80de5100adfc96e23bb7f6161b21d0c02a0015542545398ba4da63ced054", @nested={0x4, 0x140}, @nested={0x4, 0xc9}]}, @generic="0e1fd4c4", @nested={0x11f, 0x109, 0x0, 0x1, [@typed={0x8, 0x13a, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x97}, @generic="82bcd531f9eebdd5ef2b97c1e0f06db1992198bdc2459e3d8fe3911811788642f3314440fc641b417a54737710a4fdb7f75090db826f6752cc2e23431bfab0c9a94afc8ddf936fc5b81853927e80d93158078c3b73d59d5309e292457b9f00553bd91e74686e153da59913589ec21833e7fef985015e933c11484297ac523c9d3ebcc0fe2403cdbcc543ddf67fe5abcc0a197669e6c991e4e4faf7a0b5564d1b04cfc0d7527e416ef1771f3a1752102a0ae7de7609d5ec6329a97644256ef1833ab96e89c15ea5a51cd6eebdf373278f43aec7ef3385a4478471192b4bc89a62db5e20cca40dd00a59de162208b120", @typed={0x8, 0x116, 0x0, 0x0, @u32}, @typed={0x8, 0x2b, 0x0, 0x0, @ipv4=@private=0xa010100}, @nested={0x4, 0x14a}, @nested={0x4, 0x48}, @nested={0x4, 0x6e}, @nested={0x4, 0x8b}]}, @generic="cd60571c3191e4acc9c58517769df9bb816d969da35bf2bdbbde8feb9dfb421147e97d186b2e111fdc433d3b3f79ba704bb4324a98726926db15fb7a2748caae228c8abf430c670d529af78c5f60739fd63296abd46ef87a7beb556533717032221951ee6b24069abbcdfc7fb8d48fd7efb19fa50f46ac505c7ba514a00d6bf2b0d9174702c97884751f64e6736a931014a5efe030da81a367490e9bbd650b1f9b6c2aafbc2e2f2f8b7744755bb09addc4e52e97015ab2cd", @nested={0xa0, 0x64, 0x0, 0x1, [@nested={0x4, 0x126}, @generic="f2ecefe650b5c3d2e9121080ff332f8b3e53fab8ec1322d0d0efc35b1f569ac89aad092e9d52a6bcb3f9e04e20473d2d74340cc8fdba30b2487f7c813f0704633ab0b9720a8167689ef77f053372e8e7192e778e100c8bde549b51313b39d2f5d8018f90f27105502183399f5bbb34c5bf2b43ef952a6077", @nested={0x4, 0x4}, @typed={0x8, 0x5f, 0x0, 0x0, @uid=r12}, @typed={0x14, 0x16, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}}]}, @nested={0xc, 0xff, 0x0, 0x1, [@typed={0x8, 0x8c, 0x0, 0x0, @pid=r13}]}, @generic="3c38db32c6c299c8b9b88cd5beb2d96b6ca9a612a4087810e24c0f8a972650ffc81f7d0fd82b9fda7eb72a4f952267370fe47c4e18e04460b9d67db8e5114633f258072aaf36390272958a255360f9ec3c3e446f578b1f0bbc4927033ee5cf4e0ebc61716d25f5749ce4f5905e7533ab593118268225b55c5a9463f75ed3b5ed61ce9629d0a5144c8c9674811023e56de148b7e78b992de797af711bd341eea1ef50187e84a869dd74eefb6b132a77f203a2ae4da01803fb291830eae229bbf2372ae24366e89f56d51458ee0f33b1d596875da4480d46245c14d07331480091bc2448618bd586", @nested={0xc0, 0xd5, 0x0, 0x1, [@generic="1fdf41b046f48262de4b91fb0b2f0123a582a4", @generic="10c1032fd44245dacb3880898ac8e81100f5cef214dba30c4846e8", @nested={0x4, 0x9f}, @typed={0x4, 0x142}, @nested={0x4, 0x97}, @typed={0x8, 0xac, 0x0, 0x0, @ipv4=@loopback}, @generic="f62e1812afbd3d8bfec0904d9df51a2a248e2882402bcd1384e97f68dbda72656299c9f6abae65d61e297df0bdc7de087134535de47af73078612ba4768d35aee20937c5e54b995f0de90d6b36e94299664db388cf5bd4025fc104dfff881432dd90de7e9fbff62588b3657ffc409522207f89a07804", @nested={0x4, 0x2}]}, @generic="0d3d998d1cb5ebf8aab2f3d543ca423756f222b44f35901e50c356faa89e6f70f67a86372eb6805dcc611ac76d3048a7018d9f0920d220bf705e5d66546c5da911dc4ec8d4350f6dac9977dfe9e85c125184b6e0dae86cff4978ecaa4334eb8fd68a084c45669d4c711a184950eda0544b4adeb4a9a4d83f19f9b8709b21bff56e1f6cc3c0197f8734a808847f58634f300639a030ea04a5c14adf284a60a9ddecb0885ae79204c1fa85000006902bb4effe6eddaa944597ed827b864f3d8121e0af9a2d170b175a0143032301239008b698081927801045d74c1d02978bbc456f85b6787be37ea59052c38ad8d0d81da7ad69c2", @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@loopback}]}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0x1}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x3}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x8}, @NL80211_ATTR_PMKID={0x103, 0x55, "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"}]}, 0x774}, 0x1, 0x0, 0x0, 0xc010}, 0x4000080) socket(0xa, 0x3, 0xff) 2m25.474346095s ago: executing program 3 (id=3607): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) (async) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) (async) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_RTC_SET_TIME(r3, 0x4024700a, 0x0) (async) ioctl$auto_RTC_SET_TIME(r3, 0x4024700a, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x9, 0x10001, 0x1, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x5) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x16) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x16) read$auto_proc_pid_maps_operations_internal(r1, &(0x7f0000001480)=""/4104, 0x1008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r3, 0x8000) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) (async) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8401, 0x0) 2m16.240593792s ago: executing program 1 (id=3627): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) statx$auto(0xffffffffffffffff, 0x0, 0x2, 0x8001, &(0x7f0000000300)={0x7, 0x1, 0xfffffffbfffffff9, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, 0x401, 0x1, 0x4, 0x1fc, {0x80000001, 0xfb44}, {0x7, 0x28}, {0xfffffffffffffffc, 0x1ff}, {0xffffffffffffff60, 0x9}, 0x2, 0x6, 0x80000000, 0x17e9, 0x709c, 0x101, 0x5, 0x4, 0x8, 0x5, 0xb6a, 0xdfc, [0xe32, 0x2, 0x80000001, 0x1, 0xffffffff, 0x1c9fb31b, 0xfffffffffffffffa, 0xe, 0x3]}) r0 = socket(0x10, 0x802, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1f000000", @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_netdev(0x0, r0) 2m15.81366769s ago: executing program 1 (id=3628): prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) setreuid$auto(0x0, 0x7) fcntl$auto(0x2, 0x40c, 0x7f) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x3e00, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x8000000) 2m15.30902961s ago: executing program 1 (id=3629): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, &(0x7f0000000180), 0x6, 0x1000}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) fstat$auto(0xffffffffffffffff, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) preadv$auto(r2, &(0x7f00000002c0)={0x0, 0xbe78}, 0x5, 0x800000fb, 0x8100000001) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000c00)={0x14, r4, 0x309, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r6 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) ioctl$auto_RTC_UIE_ON(r6, 0x7003, 0x0) r7 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)={0x20, r7, 0x301, 0x70bd23, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x9, 0x2, 'l2tp\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r9) r11 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r10, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x1000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) shmctl$auto_SHM_INFO(0x4, 0xe, &(0x7f0000000140)={{0x4, 0xffffffffffffffff, 0xee01, 0x9, 0x0, 0x4, 0x5}, 0x97cc, 0x5, 0xb10, 0x9, @inferred, @inferred, 0x200, 0x0, &(0x7f0000000200)="0ddf050a4a34ff4b4f96f39c1e8b55e42045ea1185bcb4eac1333d26bdae0f5bfc143e92e0e11eea959717d9e08cef66afdf630ddff9719ad845952547b8a1a56a9ec2534eee81f19c94d12c2aaf79dfbcb6ba4eae07eee7355c4e99e32f6bd2157b5f07338c7ac7a1561dca624cd59c5ce8cf4f3ba884cd48b47f41facf004697744bfb5596769491e6e3ce81648d73ac96", &(0x7f0000000300)="44b600a72c5377663227252bb72c5e9e935c4ec2c82e1f574868f8336202379f9f9fd6de669d74198aa7994dc769701d6c5b2e11f4c5c47de20b6392cecafb9f8b5686b11482dea83e5ee9a44da2b1d14f56a94acf28f03ee16c09c5b2b5d0014cb95138c27ee95ee0fc8bea9c71ddbf5623781143e665d5816c086a8178030ba40602fbcb086b83730e3df4892f8c9661e1375aff6140a8186d8827a2ffddb716550182d10801aaeaf432df47e0bae4b147427f3695aba044e225cb5427cdf282d966c566f8456b09ef94a777bd116c"}) ioctl$auto_BLKTRACESETUP32(r0, 0xc0401273, &(0x7f0000000400)={"343c770069f9877b74bea4609c5a377f2a18ce45a4cd3e4a6d265caca3a9edd4", 0xca80, 0xfffffff6, 0x3, 0x8001, 0x80, 0x0}) sendmsg$auto_NL80211_CMD_TDLS_OPER(r8, &(0x7f0000000c40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000480)={0x774, r10, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_EMA_RNR_ELEMS={0x643, 0x145, 0x0, 0x1, [@nested={0x113, 0x42, 0x0, 0x1, [@nested={0x4, 0xf7}, @generic="d38b064e09862833e684f27cd7d85194a38ed057a7ed2b9a427c4ac7cc020625c58f4162bc2b761184890a0a0079f6faca631ffe507a9428f8ee75eafcff1b3b1ae9bd654cbcb57e4911dd71e38a86875f61876d74f4e09b8526b3721e8707641cca114b5b0d0e983640d4a60ea72dfd81a2466c1ae57b427dab5f15d1b45b3acc603b70d1196c52ceddef13ceafe03beec98ba6a03e3456f7ca6fb04c9fc82cbfe182109681c02886", @generic="3f3171be362a0495054db06ed0bea30a92f1e5aa78eaa9346b6e8919f273e70d7bd80560d4cd32857a53e8b89590e36794299ce5548e0b8c0dba8c4f80de5100adfc96e23bb7f6161b21d0c02a0015542545398ba4da63ced054", @nested={0x4, 0x140}, @nested={0x4, 0xc9}]}, @generic="0e1fd4c4", @nested={0x11f, 0x109, 0x0, 0x1, [@typed={0x8, 0x13a, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x97}, @generic="82bcd531f9eebdd5ef2b97c1e0f06db1992198bdc2459e3d8fe3911811788642f3314440fc641b417a54737710a4fdb7f75090db826f6752cc2e23431bfab0c9a94afc8ddf936fc5b81853927e80d93158078c3b73d59d5309e292457b9f00553bd91e74686e153da59913589ec21833e7fef985015e933c11484297ac523c9d3ebcc0fe2403cdbcc543ddf67fe5abcc0a197669e6c991e4e4faf7a0b5564d1b04cfc0d7527e416ef1771f3a1752102a0ae7de7609d5ec6329a97644256ef1833ab96e89c15ea5a51cd6eebdf373278f43aec7ef3385a4478471192b4bc89a62db5e20cca40dd00a59de162208b120", @typed={0x8, 0x116, 0x0, 0x0, @u32}, @typed={0x8, 0x2b, 0x0, 0x0, @ipv4=@private=0xa010100}, @nested={0x4, 0x14a}, @nested={0x4, 0x48}, @nested={0x4, 0x6e}, @nested={0x4, 0x8b}]}, @generic="cd60571c3191e4acc9c58517769df9bb816d969da35bf2bdbbde8feb9dfb421147e97d186b2e111fdc433d3b3f79ba704bb4324a98726926db15fb7a2748caae228c8abf430c670d529af78c5f60739fd63296abd46ef87a7beb556533717032221951ee6b24069abbcdfc7fb8d48fd7efb19fa50f46ac505c7ba514a00d6bf2b0d9174702c97884751f64e6736a931014a5efe030da81a367490e9bbd650b1f9b6c2aafbc2e2f2f8b7744755bb09addc4e52e97015ab2cd", @nested={0xa0, 0x64, 0x0, 0x1, [@nested={0x4, 0x126}, @generic="f2ecefe650b5c3d2e9121080ff332f8b3e53fab8ec1322d0d0efc35b1f569ac89aad092e9d52a6bcb3f9e04e20473d2d74340cc8fdba30b2487f7c813f0704633ab0b9720a8167689ef77f053372e8e7192e778e100c8bde549b51313b39d2f5d8018f90f27105502183399f5bbb34c5bf2b43ef952a6077", @nested={0x4, 0x4}, @typed={0x8, 0x5f, 0x0, 0x0, @uid=r12}, @typed={0x14, 0x16, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}}]}, @nested={0xc, 0xff, 0x0, 0x1, [@typed={0x8, 0x8c, 0x0, 0x0, @pid=r13}]}, @generic="3c38db32c6c299c8b9b88cd5beb2d96b6ca9a612a4087810e24c0f8a972650ffc81f7d0fd82b9fda7eb72a4f952267370fe47c4e18e04460b9d67db8e5114633f258072aaf36390272958a255360f9ec3c3e446f578b1f0bbc4927033ee5cf4e0ebc61716d25f5749ce4f5905e7533ab593118268225b55c5a9463f75ed3b5ed61ce9629d0a5144c8c9674811023e56de148b7e78b992de797af711bd341eea1ef50187e84a869dd74eefb6b132a77f203a2ae4da01803fb291830eae229bbf2372ae24366e89f56d51458ee0f33b1d596875da4480d46245c14d07331480091bc2448618bd586", @nested={0xc0, 0xd5, 0x0, 0x1, [@generic="1fdf41b046f48262de4b91fb0b2f0123a582a4", @generic="10c1032fd44245dacb3880898ac8e81100f5cef214dba30c4846e8", @nested={0x4, 0x9f}, @typed={0x4, 0x142}, @nested={0x4, 0x97}, @typed={0x8, 0xac, 0x0, 0x0, @ipv4=@loopback}, @generic="f62e1812afbd3d8bfec0904d9df51a2a248e2882402bcd1384e97f68dbda72656299c9f6abae65d61e297df0bdc7de087134535de47af73078612ba4768d35aee20937c5e54b995f0de90d6b36e94299664db388cf5bd4025fc104dfff881432dd90de7e9fbff62588b3657ffc409522207f89a07804", @nested={0x4, 0x2}]}, @generic="0d3d998d1cb5ebf8aab2f3d543ca423756f222b44f35901e50c356faa89e6f70f67a86372eb6805dcc611ac76d3048a7018d9f0920d220bf705e5d66546c5da911dc4ec8d4350f6dac9977dfe9e85c125184b6e0dae86cff4978ecaa4334eb8fd68a084c45669d4c711a184950eda0544b4adeb4a9a4d83f19f9b8709b21bff56e1f6cc3c0197f8734a808847f58634f300639a030ea04a5c14adf284a60a9ddecb0885ae79204c1fa85000006902bb4effe6eddaa944597ed827b864f3d8121e0af9a2d170b175a0143032301239008b698081927801045d74c1d02978bbc456f85b6787be37ea59052c38ad8d0d81da7ad69c2", @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@loopback}]}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0x1}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x3}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x8}, @NL80211_ATTR_PMKID={0x103, 0x55, "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"}]}, 0x774}, 0x1, 0x0, 0x0, 0xc010}, 0x4000080) socket(0xa, 0x3, 0xff) 2m14.707116853s ago: executing program 1 (id=3632): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0x6a6, 0x2}, 0x7ffe, 0x0, 0x6) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_setup$auto(0x2, 0x0) mlockall$auto(0x7) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) mmap$auto(0xfffffffffffff25c, 0x3, 0x121, 0x16, r0, 0x8) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{@raw=0x2, 0x85, 0x20e, 0x1, "669cbbd9e9756f22fdffa199e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x8}, 0x0, @integer=@value=[0x0, 0x4, 0x400000000000f, 0x80000001, 0xfffffffffffffff7, 0x4, 0xc, 0x3, 0x8f, 0x2, 0x3, 0xa4f, 0x101, 0x5, 0x0, 0x8, 0x1, 0x6, 0x3, 0x2, 0x2, 0x1, 0x0, 0x4, 0x2, 0x0, 0x7, 0xfb, 0xf, 0x100000000, 0x14, 0x6, 0x10da, 0x7, 0x8000000000000008, 0x81, 0x8, 0x6, 0x6, 0x8, 0x56d1, 0x1, 0x7, 0x0, 0x7, 0xc, 0x9, 0xd4, 0x800, 0x3, 0x2, 0x25489d7a, 0x2, 0x90000000000000, 0x9, 0xfffffffffffffff8, 0x2d, 0x7, 0xffff, 0x6, 0x400000000000005, 0x3, 0xc69, 0x95, 0x7, 0x5, 0x2, 0x5, 0xfffffffffffffffd, 0x4, 0x4, 0xb000000000, 0x6, 0x80000001, 0x1, 0x8, 0x4, 0x14, 0xd8, 0xa, 0x443, 0xffffffff, 0x1, 0x4, 0x3, 0x9, 0xc, 0x1, 0x5, 0x80, 0x1, 0x0, 0x10001, 0x1, 0x7, 0xfffffffffffffffe, 0x2, 0xfffffffffffffff9, 0x5, 0x3, 0xfffffffffffffff8, 0xffffffff7fffffff, 0xa7, 0x4, 0x1, 0x100000000, 0x51a, 0x1, 0x6, 0x4, 0x2d4, 0x40e9, 0x5, 0x5, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x7fffffffffffffff, 0x552, 0x39e, 0x1, 0x1, 0x9, 0x8, 0x2, 0x5], "282f77b07e718e11749a346177741dc299a28a585e87e0d908e2c8e50de501951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c8500"}) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x40040, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x183941, 0x0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7fff) close_range$auto(0x2, 0x8, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/udp_early_demux\x00', 0x28802, 0x0) read$auto(0x3, 0x0, 0x80) r1 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim0/ports/3/pp_hold\x00', 0xc0b02, 0x0) write$auto(r1, 0x0, 0xc70) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x503100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) io_uring_setup$auto(0x6, 0x0) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x29, 0x40, 0x0, 0x110) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) 2m13.672265359s ago: executing program 1 (id=3635): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, 0x0, 0x6, 0x1000}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) fstat$auto(0xffffffffffffffff, &(0x7f0000000300)={0xff, 0x7, 0x45, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe, 0x803, 0x4, 0x6, 0x0, 0x73, 0x1, 0x1, 0x8}) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) preadv$auto(r2, &(0x7f00000002c0)={0x0, 0xbe78}, 0x5, 0x800000fb, 0x8100000001) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000c00)={0x14, r4, 0x309, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r6 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) ioctl$auto_RTC_UIE_ON(r6, 0x7003, 0x0) r7 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)={0x20, r7, 0x301, 0x70bd23, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x9, 0x2, 'l2tp\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r9) r11 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r10, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x1000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) shmctl$auto_SHM_INFO(0x4, 0xe, &(0x7f0000000140)={{0x4, 0xffffffffffffffff, 0xee01, 0x9, 0x0, 0x4, 0x5}, 0x97cc, 0x5, 0xb10, 0x9, @inferred, @inferred, 0x200, 0x0, &(0x7f0000000200)="0ddf050a4a34ff4b4f96f39c1e8b55e42045ea1185bcb4eac1333d26bdae0f5bfc143e92e0e11eea959717d9e08cef66afdf630ddff9719ad845952547b8a1a56a9ec2534eee81f19c94d12c2aaf79dfbcb6ba4eae07eee7355c4e99e32f6bd2157b5f07338c7ac7a1561dca624cd59c5ce8cf4f3ba884cd48b47f41facf004697744bfb5596769491e6e3ce81648d73ac96", &(0x7f0000000300)="44b600a72c5377663227252bb72c5e9e935c4ec2c82e1f574868f8336202379f9f9fd6de669d74198aa7994dc769701d6c5b2e11f4c5c47de20b6392cecafb9f8b5686b11482dea83e5ee9a44da2b1d14f56a94acf28f03ee16c09c5b2b5d0014cb95138c27ee95ee0fc8bea9c71ddbf5623781143e665d5816c086a8178030ba40602fbcb086b83730e3df4892f8c9661e1375aff6140a8186d8827a2ffddb716550182d10801aaeaf432df47e0bae4b147427f3695aba044e225cb5427cdf282d966c566f8456b09ef94a777bd116c"}) ioctl$auto_BLKTRACESETUP32(r0, 0xc0401273, &(0x7f0000000400)={"343c770069f9877b74bea4609c5a377f2a18ce45a4cd3e4a6d265caca3a9edd4", 0xca80, 0xfffffff6, 0x3, 0x8001, 0x80, 0x0}) sendmsg$auto_NL80211_CMD_TDLS_OPER(r8, &(0x7f0000000c40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000480)={0x774, r10, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_EMA_RNR_ELEMS={0x643, 0x145, 0x0, 0x1, [@nested={0x113, 0x42, 0x0, 0x1, [@nested={0x4, 0xf7}, @generic="d38b064e09862833e684f27cd7d85194a38ed057a7ed2b9a427c4ac7cc020625c58f4162bc2b761184890a0a0079f6faca631ffe507a9428f8ee75eafcff1b3b1ae9bd654cbcb57e4911dd71e38a86875f61876d74f4e09b8526b3721e8707641cca114b5b0d0e983640d4a60ea72dfd81a2466c1ae57b427dab5f15d1b45b3acc603b70d1196c52ceddef13ceafe03beec98ba6a03e3456f7ca6fb04c9fc82cbfe182109681c02886", @generic="3f3171be362a0495054db06ed0bea30a92f1e5aa78eaa9346b6e8919f273e70d7bd80560d4cd32857a53e8b89590e36794299ce5548e0b8c0dba8c4f80de5100adfc96e23bb7f6161b21d0c02a0015542545398ba4da63ced054", @nested={0x4, 0x140}, @nested={0x4, 0xc9}]}, @generic="0e1fd4c4", @nested={0x11f, 0x109, 0x0, 0x1, [@typed={0x8, 0x13a, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x97}, @generic="82bcd531f9eebdd5ef2b97c1e0f06db1992198bdc2459e3d8fe3911811788642f3314440fc641b417a54737710a4fdb7f75090db826f6752cc2e23431bfab0c9a94afc8ddf936fc5b81853927e80d93158078c3b73d59d5309e292457b9f00553bd91e74686e153da59913589ec21833e7fef985015e933c11484297ac523c9d3ebcc0fe2403cdbcc543ddf67fe5abcc0a197669e6c991e4e4faf7a0b5564d1b04cfc0d7527e416ef1771f3a1752102a0ae7de7609d5ec6329a97644256ef1833ab96e89c15ea5a51cd6eebdf373278f43aec7ef3385a4478471192b4bc89a62db5e20cca40dd00a59de162208b120", @typed={0x8, 0x116, 0x0, 0x0, @u32}, @typed={0x8, 0x2b, 0x0, 0x0, @ipv4=@private=0xa010100}, @nested={0x4, 0x14a}, @nested={0x4, 0x48}, @nested={0x4, 0x6e}, @nested={0x4, 0x8b}]}, @generic="cd60571c3191e4acc9c58517769df9bb816d969da35bf2bdbbde8feb9dfb421147e97d186b2e111fdc433d3b3f79ba704bb4324a98726926db15fb7a2748caae228c8abf430c670d529af78c5f60739fd63296abd46ef87a7beb556533717032221951ee6b24069abbcdfc7fb8d48fd7efb19fa50f46ac505c7ba514a00d6bf2b0d9174702c97884751f64e6736a931014a5efe030da81a367490e9bbd650b1f9b6c2aafbc2e2f2f8b7744755bb09addc4e52e97015ab2cd", @nested={0xa0, 0x64, 0x0, 0x1, [@nested={0x4, 0x126}, @generic="f2ecefe650b5c3d2e9121080ff332f8b3e53fab8ec1322d0d0efc35b1f569ac89aad092e9d52a6bcb3f9e04e20473d2d74340cc8fdba30b2487f7c813f0704633ab0b9720a8167689ef77f053372e8e7192e778e100c8bde549b51313b39d2f5d8018f90f27105502183399f5bbb34c5bf2b43ef952a6077", @nested={0x4, 0x4}, @typed={0x8, 0x5f, 0x0, 0x0, @uid=r12}, @typed={0x14, 0x16, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}}]}, @nested={0xc, 0xff, 0x0, 0x1, [@typed={0x8, 0x8c, 0x0, 0x0, @pid=r13}]}, @generic="3c38db32c6c299c8b9b88cd5beb2d96b6ca9a612a4087810e24c0f8a972650ffc81f7d0fd82b9fda7eb72a4f952267370fe47c4e18e04460b9d67db8e5114633f258072aaf36390272958a255360f9ec3c3e446f578b1f0bbc4927033ee5cf4e0ebc61716d25f5749ce4f5905e7533ab593118268225b55c5a9463f75ed3b5ed61ce9629d0a5144c8c9674811023e56de148b7e78b992de797af711bd341eea1ef50187e84a869dd74eefb6b132a77f203a2ae4da01803fb291830eae229bbf2372ae24366e89f56d51458ee0f33b1d596875da4480d46245c14d07331480091bc2448618bd586", @nested={0xc0, 0xd5, 0x0, 0x1, [@generic="1fdf41b046f48262de4b91fb0b2f0123a582a4", @generic="10c1032fd44245dacb3880898ac8e81100f5cef214dba30c4846e8", @nested={0x4, 0x9f}, @typed={0x4, 0x142}, @nested={0x4, 0x97}, @typed={0x8, 0xac, 0x0, 0x0, @ipv4=@loopback}, @generic="f62e1812afbd3d8bfec0904d9df51a2a248e2882402bcd1384e97f68dbda72656299c9f6abae65d61e297df0bdc7de087134535de47af73078612ba4768d35aee20937c5e54b995f0de90d6b36e94299664db388cf5bd4025fc104dfff881432dd90de7e9fbff62588b3657ffc409522207f89a07804", @nested={0x4, 0x2}]}, @generic="0d3d998d1cb5ebf8aab2f3d543ca423756f222b44f35901e50c356faa89e6f70f67a86372eb6805dcc611ac76d3048a7018d9f0920d220bf705e5d66546c5da911dc4ec8d4350f6dac9977dfe9e85c125184b6e0dae86cff4978ecaa4334eb8fd68a084c45669d4c711a184950eda0544b4adeb4a9a4d83f19f9b8709b21bff56e1f6cc3c0197f8734a808847f58634f300639a030ea04a5c14adf284a60a9ddecb0885ae79204c1fa85000006902bb4effe6eddaa944597ed827b864f3d8121e0af9a2d170b175a0143032301239008b698081927801045d74c1d02978bbc456f85b6787be37ea59052c38ad8d0d81da7ad69c2", @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@loopback}]}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0x1}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x3}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x8}, @NL80211_ATTR_PMKID={0x103, 0x55, "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"}]}, 0x774}, 0x1, 0x0, 0x0, 0xc010}, 0x4000080) socket(0xa, 0x3, 0xff) 2m13.037002133s ago: executing program 1 (id=3636): openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/loginuid\x00', 0x1, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r0, 0x110, 0x2, 0x0, 0x40000) r1 = setfsuid$auto(0xee00) setreuid$auto(r1, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000440), r0) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x24000004) r2 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) sendmmsg$auto(r2, &(0x7f0000000180)={{&(0x7f0000000580)="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", 0xe, &(0x7f0000000140)={&(0x7f0000000040)="8d6aedd19d64e60338778fdf4b45069686a3d55d525a502b336036fe005456d85ee595d5eb3f281e6e31632918d37c4aff48eb752dd70cf645dd7989343c2d2ccbea0505f2d7e77bcb6b4eb64af54b2b61300c0f38fafa3fb1c7c2517867b797a6742729e6f05ba104b8855566204828fc573e41c740369588cbfc0755e002e948d7530c297b41b75bb9000dcf9251423cdc8f71198d12a4a2382aa73de3726f49e2ac41428c0e8f2018029ac40586a568a9dcee3deda3577425c6ac795088edfc708834767bd5", 0xf8}, 0x2e, &(0x7f0000000280)="252e159cd9d10f70f3f9714c794ac9c1933601fc69cd3ce2221ee459ffde99bcf8d75caf40db3aa4a6a40cf5788780866a37345cdccd43fec73fff6da3b9cf32e958c607d09009743ee5cb695d6cfdf59b52572e2929d1d271a0b7134145293f1c3fa2f5f95fb5f7375c7e4267eddcc39f79862d642b4120f7330424a88c02343e6b5de0b4d0122e00bb8dd35e4d8194097b7187b5b617c6cfc6358665a91c2a2aed75475dc985a7bfd79afb70e61aa4978e2e535647569c741c4d652081d83754d4da8197da5ee5682c1b6bcf56ffc01fbb2c5a2c9db7943fccc8eed1e75d8cc4d53cccbf3ac0e2f6c8a19bfffd1c85128a64", 0x3, 0x38}, 0xcb8}, 0x2, 0xffff0001) r3 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r3, &(0x7f0000000080)="65507307ff6587a725ca87720ef9769f20592e7748315620724892e74526afb97ab17a24948c80c0330e81cdf0a589966954526f4548210eee03e9df0e5e1af908387ecc25c8de6717e11b31ead2e4f452ee89d77cc56ac221fde7e6cf58162474a55f166c6498ec03208a", 0x6b) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) semctl$auto(0x800, 0x1, 0x9, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) bpf$auto(0x1a, &(0x7f0000000480)=@link_create={@prog_fd=r5, @target_ifindex=r4, 0x3, 0x81, @uprobe_multi={0x3, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x96) 2m10.333011312s ago: executing program 33 (id=3607): unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) (async) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) (async) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES16, @ANYBLOB="df250c0000000000000000"], 0x14}}, 0x24048004) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_RTC_SET_TIME(r3, 0x4024700a, 0x0) (async) ioctl$auto_RTC_SET_TIME(r3, 0x4024700a, 0x0) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x1, 0x0) mmap$auto(0x9, 0x10001, 0x1, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x5) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x16) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x16) read$auto_proc_pid_maps_operations_internal(r1, &(0x7f0000001480)=""/4104, 0x1008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r3, 0x8000) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) (async) setsockopt$auto(0x3, 0x0, 0xf, 0x0, 0xb) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8401, 0x0) 1m57.53434302s ago: executing program 34 (id=3636): openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/loginuid\x00', 0x1, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r0, 0x110, 0x2, 0x0, 0x40000) r1 = setfsuid$auto(0xee00) setreuid$auto(r1, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000440), r0) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x24000004) r2 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x841, 0x0) sendmmsg$auto(r2, &(0x7f0000000180)={{&(0x7f0000000580)="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", 0xe, &(0x7f0000000140)={&(0x7f0000000040)="8d6aedd19d64e60338778fdf4b45069686a3d55d525a502b336036fe005456d85ee595d5eb3f281e6e31632918d37c4aff48eb752dd70cf645dd7989343c2d2ccbea0505f2d7e77bcb6b4eb64af54b2b61300c0f38fafa3fb1c7c2517867b797a6742729e6f05ba104b8855566204828fc573e41c740369588cbfc0755e002e948d7530c297b41b75bb9000dcf9251423cdc8f71198d12a4a2382aa73de3726f49e2ac41428c0e8f2018029ac40586a568a9dcee3deda3577425c6ac795088edfc708834767bd5", 0xf8}, 0x2e, &(0x7f0000000280)="252e159cd9d10f70f3f9714c794ac9c1933601fc69cd3ce2221ee459ffde99bcf8d75caf40db3aa4a6a40cf5788780866a37345cdccd43fec73fff6da3b9cf32e958c607d09009743ee5cb695d6cfdf59b52572e2929d1d271a0b7134145293f1c3fa2f5f95fb5f7375c7e4267eddcc39f79862d642b4120f7330424a88c02343e6b5de0b4d0122e00bb8dd35e4d8194097b7187b5b617c6cfc6358665a91c2a2aed75475dc985a7bfd79afb70e61aa4978e2e535647569c741c4d652081d83754d4da8197da5ee5682c1b6bcf56ffc01fbb2c5a2c9db7943fccc8eed1e75d8cc4d53cccbf3ac0e2f6c8a19bfffd1c85128a64", 0x3, 0x38}, 0xcb8}, 0x2, 0xffff0001) r3 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x542, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r3, &(0x7f0000000080)="65507307ff6587a725ca87720ef9769f20592e7748315620724892e74526afb97ab17a24948c80c0330e81cdf0a589966954526f4548210eee03e9df0e5e1af908387ecc25c8de6717e11b31ead2e4f452ee89d77cc56ac221fde7e6cf58162474a55f166c6498ec03208a", 0x6b) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) semctl$auto(0x800, 0x1, 0x9, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) bpf$auto(0x1a, &(0x7f0000000480)=@link_create={@prog_fd=r5, @target_ifindex=r4, 0x3, 0x81, @uprobe_multi={0x3, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x96) 1m42.642705879s ago: executing program 2 (id=3699): openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/nbd11/sched/write2_next_rq\x00', 0x2, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/saved_cmdlines\x00', 0x64180, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC2\x00', 0x80, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(r1, 0xc0285628, r0) read$auto(0x3, 0x0, 0x80) r2 = timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0x0) write$auto_dfs_global_fops_debug(r2, &(0x7f0000000040)='B', 0x1) r3 = eventfd$auto(0x7f) read$auto_vhci_fops_hci_vhci(r3, &(0x7f0000000200)=""/36, 0x24) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x801, 0x100) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x27, 0x4909b6f5, 0x1ffe0, 0x7, 0xffffffff, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0x68d, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0x6, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0xffffffff, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x8, 0x90, 0x6, 0xbdcc, 0x10000, 0xfffffffffffffffe, 0x0, 0x100]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbf9, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1m40.660835787s ago: executing program 2 (id=3704): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x542f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000001980)=ANY=[@ANYBLOB="a21032a480aabb2cefafea28accc8a06244107557042357bc35342d9b0a41e3bd2010aba0b6841749b42f18294e4de1e8a51c6b88e7aa8a0f250b4c4a14073c2d6722c7b0a0000000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1028}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0xa, 0x1, 0x84) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0x67, 0xa, 0x4009) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty0\x00', 0x102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x440041, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x4, 0x0) mmap$auto(0xfffffffffffffffd, 0x40000b, 0x20000df, 0x10, 0xffffffffffffffff, 0xb9) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/kpagecgroup\x00', 0x20000, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x400c091) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 1m39.271493428s ago: executing program 2 (id=3711): openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/nbd11/sched/write2_next_rq\x00', 0x2, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/saved_cmdlines\x00', 0x64180, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC2\x00', 0x80, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(r1, 0xc0285628, r0) read$auto(0x3, 0x0, 0x80) r2 = timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0x0) write$auto_dfs_global_fops_debug(r2, &(0x7f0000000040)='B', 0x1) r3 = eventfd$auto(0x7f) read$auto_vhci_fops_hci_vhci(r3, &(0x7f0000000200)=""/36, 0x24) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x801, 0x100) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x27, 0x4909b6f5, 0x1ffe0, 0x7, 0xffffffff, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0x68d, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0x6, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0xffffffff, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x8, 0x90, 0x6, 0xbdcc, 0x10000, 0xfffffffffffffffe, 0x0, 0x100]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) r5 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, r5, 0x1, 0x70bd29, 0x25dfdbf9, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1m37.759571097s ago: executing program 2 (id=3719): mmap$auto(0x0, 0x6, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="770e0000", @ANYRES16=0x0, @ANYRES8=r0], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x405b) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) prctl$auto(0x1000000003b, 0x100001, 0x4, 0x80a, 0x6) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) ioctl$auto_UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000080)={0x130, 0x8, 0x10001}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) r2 = epoll_create1$auto(0x48) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000c00)={0x858, r3, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x1}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x5}, @NL80211_ATTR_IE_RIC={0x826, 0xb2, "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"}]}, 0x858}, 0x1, 0x0, 0x0, 0x1}, 0x8040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB=' 6\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fcdbdf250300000004000180083601"], 0x3620}, 0x1, 0x0, 0x0, 0x20000000}, 0x200400d0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0x400a507}, 0x800}, 0xa, 0x8) write$auto_proc_mem_operations_base(r0, &(0x7f0000000400)="94c5be883ae7ee95e2bff5f990f6f7249475e8960bf6c1ee8796193bfbd249c19c9460ea0c1c18bb983b84aebb8629e8e9e25558c9bfeb22ed79fdab8065d67eec271b56d08971f043224fe7604598e2506e785c6318c1b7696b10324d1e7db02961facdf9fab2640716f07dd1c617dcb6f1bb648821a53f78be14a6dc8f336e92e389609b991019c180950ed085b91123", 0x91) r6 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x101a00, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r6, &(0x7f0000000340)=""/179, 0xb3) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2900, 0x0) acct$auto(&(0x7f0000000000)='/dev/tty\x00`Mx\x9d\xfa\xb3\x1f\xc6k\x01\x13\x9b\x15[\xf7\xaan\x1fOgo\xbb(\xcbx\x9bJ\x91*\xa5a\x02\xf3\x1b\x9d\xddy\xef\xee\xe4h\xd5\nH\x80\x8a\xd7Y\xb8\xcb\x90') statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0xfffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0xa, 0x0, 0x0, 0xfffffffffffffffc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x5]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c001300fcdbbc2353f74fa9256563b979e41af25e403ec2c853d4662dc2477fb8ce947bdc0f5c0513ff03a03e2f969bf97ff8acf360d119aec1eb971d4cc78fc8e0d10db928bac2c986c79fec", @ANYRESHEX], 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) 1m33.093027921s ago: executing program 2 (id=3731): mmap$auto(0x7, 0x400000000003, 0xc, 0xeb1, 0x405, 0xd) getcwd$auto(0x0, 0xffffffffffffffff) madvise$auto(0x5, 0xc0, 0xfff) shutdown$auto(0x200000003, 0x2) unshare$auto(0x5) prctl$auto(0x3ff, 0x6, 0x4, 0x5, 0x1) connect$auto(0x3, 0x0, 0x55) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0) write$auto(0x3, 0x0, 0x5c8) remap_file_pages$auto(0x5, 0x7f, 0x0, 0x8, 0x9) madvise$auto(0xb6, 0x2, 0x0) semctl$auto_SETVAL(0xb134, 0x9, 0x10, 0x3) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe$auto(0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xcfk', 0x81) r1 = gettid() kcmp$auto(r1, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/uts\x00') mmap$auto(0x8bd4, 0xf, 0xc14, 0xeb1, 0xfffffffffffffffa, 0x8000) landlock_create_ruleset$auto(0x0, 0x9, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x3) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x4785, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptysa\x00', 0x0, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) ioctl$auto_TCFLSH2(r4, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) 1m31.113484057s ago: executing program 2 (id=3740): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0xc0000103, 0x400, 0x2}]}) mmap$auto(0x400000000000000, 0x7, 0x1, 0xeb1, 0x404, 0x10008000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) timerfd_settime$auto(r3, 0x6, &(0x7f0000000080)={{0x7, 0x10}, {0x2a7}}, &(0x7f00000000c0)={{0x62}, {0x4, 0x7fffffffffffffff}}) bind$auto(0x3, &(0x7f0000000040)=@qipcrtr={0x2a, 0x989639a28e1e4f82, 0x7ffe}, 0x6e) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x420, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1, 0x0) openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000180), 0x8041, 0x0) r4 = socket(0x2b, 0x1, 0x1) ioctl$auto(r4, 0x89a0, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) 1m16.090664243s ago: executing program 35 (id=3740): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0xc0000103, 0x400, 0x2}]}) mmap$auto(0x400000000000000, 0x7, 0x1, 0xeb1, 0x404, 0x10008000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) timerfd_settime$auto(r3, 0x6, &(0x7f0000000080)={{0x7, 0x10}, {0x2a7}}, &(0x7f00000000c0)={{0x62}, {0x4, 0x7fffffffffffffff}}) bind$auto(0x3, &(0x7f0000000040)=@qipcrtr={0x2a, 0x989639a28e1e4f82, 0x7ffe}, 0x6e) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x420, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1, 0x0) openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000180), 0x8041, 0x0) r4 = socket(0x2b, 0x1, 0x1) ioctl$auto(r4, 0x89a0, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) 46.622074022s ago: executing program 5 (id=3920): unshare$auto(0x40000080) statx$auto(0xffffffffffffffff, 0x0, 0x2, 0x8001, &(0x7f0000000300)={0x7, 0x1, 0xfffffffbfffffff9, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, 0x401, 0x1, 0x4, 0x1fc, {0x80000001, 0xfb44}, {0x7, 0x28}, {0xfffffffffffffffc, 0x1ff}, {0xffffffffffffff60, 0x9}, 0x2, 0x6, 0x80000000, 0x17e9, 0x709c, 0x101, 0x5, 0x4, 0x8, 0x5, 0xb6a, 0xdfc, [0xe32, 0x2, 0x80000001, 0x1, 0xffffffff, 0x1c9fb31b, 0xfffffffffffffffa, 0xe, 0x3]}) r0 = socket(0x10, 0x802, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1f000000", @ANYBLOB="1200", @ANYBLOB], 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_netdev(0x0, r0) 45.782704414s ago: executing program 5 (id=3921): sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x80000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x30f821, 0x0) r0 = socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x2, 0xdf, 0x80000011, 0xffffffffffffffff, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) mmap$auto(0x3, 0x20009, 0x80000000000dd, 0x13, r3, 0x6ad) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x2201, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xca, 0x0, 0x82) r5 = socketpair$auto(0x4c, 0x2, 0x8000000000000000, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(0x0, 0x0, 0x0) open(0x0, 0x22240, 0x154) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x216641, 0x0) execve$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x1, 0x4000000000df, 0xebe, 0x401, 0x4) statmount$auto(0x0, 0x0, 0x1fe, 0x200c) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/uprobe_events\x00', 0xe42, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000040)="34aeede041849254d06ca5ca1d398846733719729502f8bd8ebb5f8fce88e90f6fac4cc750762526d157c0b0bfaa5f2cc931cda9de707b99242453bffdd8a43338842dd9569a2a165dc2", 0x4a) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24000045}, 0x20040016) 43.613770497s ago: executing program 5 (id=3928): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/vm/dirty_bytes\x00', 0x8a042, 0x0) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) mmap$auto(0x235, 0x40000a, 0x20000000000d, 0x208018, 0xffffffffffffffff, 0x200000001) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x40a40, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40800, 0x0) openat2$dir(0xffffff9c, 0x0, &(0x7f00000002c0)={0x400000, 0x71fae78b53f8a505, 0x20}, 0x18) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0x2, 0x8000) get_mempolicy$auto(0x0, 0x0, 0x7f, 0x8, 0x3) r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:04.0/enable\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) r3 = epoll_create$auto(0x75) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r4], 0x1ac}}, 0x40000) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_FEC_AUTO={0x5, 0x3, 0x1c}, @ETHTOOL_A_FEC_AUTO={0x5, 0x3, 0x7}, @ETHTOOL_A_FEC_AUTO={0x5, 0x3, 0xa}, @ETHTOOL_A_FEC_AUTO={0x5, 0x3, 0x4}, @ETHTOOL_A_FEC_AUTO={0x5, 0x3, 0x1}, @ETHTOOL_A_FEC_AUTO={0x5, 0x3, 0xf8}]}, 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = getpgid(r6) waitid$auto_P_PGID(0x2, r7, 0x0, 0x6, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000300), r5) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r8, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10}]}, 0x1c}}, 0x0) write$auto(r1, &(0x7f0000008d40)='($}-)#@\x00', 0x3) sendfile$auto(r0, r0, 0x0, 0x48) 42.801639519s ago: executing program 5 (id=3934): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0xb, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) (fail_nth: 9) 42.080357189s ago: executing program 5 (id=3935): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyp6\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) read$auto(r0, 0x0, 0x6) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x84080, 0x0) connect$auto(0x3, 0x0, 0x58) 41.960864599s ago: executing program 5 (id=3936): ioperm$auto(0x1, 0x1004, 0x7f) iopl$auto(0x2) r0 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x488cc3, 0x0) write$auto_event_trigger_fops_trace(r0, &(0x7f0000000240)='!', 0x1) write$auto(0xffffffffffffffff, &(0x7f0000000100)='9\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x1) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b61, r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, &(0x7f00000003c0)='/dev/snd/pcmC1D1c\x00', 0x9, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x16) r2 = prctl$auto_PR_SET_MM_START_BRK(0x9, 0x6, 0x0, 0x4, 0x3) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), r2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8) unshare$auto(0x40000080) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@xdp={0x2c, 0xdd86, r4, 0x2f}, 0x22) setsockopt$auto_SO_BUSY_POLL_BUDGET(0xffffffffffffffff, 0x0, 0x46, &(0x7f00000000c0), 0xfff) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0) write$auto(r5, &(0x7f00000000c0)=')]..$(\xbc:\x00\x0f\b!\x9b\xe3\a1\xac\xb9Mm\x04\xb7\x88\'\xae\x05\xf3\xeb\xf5\x0fkl\x81\x8bpLY\x80\x17\xa6|x\xbb\x0fy\xb5\x80\x10z\xea\xff\x10\xf5\xa0V\x7f\r\x16\x1dz\xd5\xbd\x81\xceSRY\x98\xf0\xd7a\xf0\xce\xe7\x82\x8b\xaaP/\x11\t-W\xae\b\xe5\x1b\xea\x04\xe1\xce\xbf|', 0x45c) close_range$auto(0x2, 0x8, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x80201, 0x0) 26.777038368s ago: executing program 36 (id=3936): ioperm$auto(0x1, 0x1004, 0x7f) iopl$auto(0x2) r0 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x488cc3, 0x0) write$auto_event_trigger_fops_trace(r0, &(0x7f0000000240)='!', 0x1) write$auto(0xffffffffffffffff, &(0x7f0000000100)='9\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x1) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b61, r1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, &(0x7f00000003c0)='/dev/snd/pcmC1D1c\x00', 0x9, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x16) r2 = prctl$auto_PR_SET_MM_START_BRK(0x9, 0x6, 0x0, 0x4, 0x3) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000040), r2) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8) unshare$auto(0x40000080) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$auto(0x3, 0x0, 0x13, 0xfffffff8, &(0x7f0000000440)=@xdp={0x2c, 0xdd86, r4, 0x2f}, 0x22) setsockopt$auto_SO_BUSY_POLL_BUDGET(0xffffffffffffffff, 0x0, 0x46, &(0x7f00000000c0), 0xfff) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0) write$auto(r5, &(0x7f00000000c0)=')]..$(\xbc:\x00\x0f\b!\x9b\xe3\a1\xac\xb9Mm\x04\xb7\x88\'\xae\x05\xf3\xeb\xf5\x0fkl\x81\x8bpLY\x80\x17\xa6|x\xbb\x0fy\xb5\x80\x10z\xea\xff\x10\xf5\xa0V\x7f\r\x16\x1dz\xd5\xbd\x81\xceSRY\x98\xf0\xd7a\xf0\xce\xe7\x82\x8b\xaaP/\x11\t-W\xae\b\xe5\x1b\xea\x04\xe1\xce\xbf|', 0x45c) close_range$auto(0x2, 0x8, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x80201, 0x0) 8.409100007s ago: executing program 8 (id=4056): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000f9dbdf250100000008000c00c508000005000700020000000c000f00000020000000000008000a000800000000000014002000fe8000000000000000000000000000aa06001b004e2100002a8a92e78d3a9f92961c3ba453407b625e049a3ff2747f73284543d1414e6a7b500884b8980078fcdd6e01e981ede71c444289e8406e59f8d51ce85997d89b5ad82bc0d86946ff76d8edc66eb9c7dff7755908d025042f836305a03883b7e3cda5f4972e03446ff1d3c9d65f6ec8fae0eb16151250da288d726c16e113693e2658388ee951fa2e485fe836218975502748f3c337f3ec87b55b700f7360e1c9e5347f8bfa080365d1d7b43da59f840cbe8d93c21cabf964fb6bff5fd1e208ed897aae306f0f8e06d17497c44c0e86f598d327735234e7e4c7321bd06512ab0796764f7d"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="72010000", @ANYRESDEC=r0], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x84}, 0x4040000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r3 = socket(0x2, 0x1, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x46a01, 0x0) getsockopt$auto_SO_BUSY_POLL(r3, 0x6, 0x2e, 0x0, &(0x7f0000000280)) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x169000, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b43, 0x2, 0x0, 0x0, 0x2) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x3c41, 0x0) r4 = getpid() r5 = gettid() r6 = open(0x0, 0x80400, 0xb5d1af1605322dd2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000100), 0x28000, 0x0) read$auto_lowpan_enable_fops_(r6, &(0x7f00000002c0)=""/120, 0x78) rt_tgsigqueueinfo$auto(r4, r5, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffe, @_sigsys={0x0, 0x2, 0xffffffff}}}) 7.469577657s ago: executing program 4 (id=4059): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast1}, 0x6a) r1 = epoll_create$auto(0x7) epoll_wait$auto(r1, 0x0, 0xe007, 0xe8a4e409) ioctl$auto_VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000180)={0xfff}) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xffffeffe, 0x2) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000100)="e60a2314e3edb785ebf993d7d29f611e7f5580e52504ed6fe508a953b9976ae2ea26bf54e5df8dfcd20cfa7c3382a470ebd7b871f2727932f59bb9242d480a0c74874a35e032e0") openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0x694f82, 0x0) unshare$auto(0x40000080) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$auto_state_fops_(0xffffffffffffff9c, 0x0, 0x540000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$auto(r2, &(0x7f00000003c0)={{0x0, 0x6, &(0x7f0000000280)={0x0, 0x4040009}, 0xc, &(0x7f0000000500), 0x15, 0x8}, 0x5a55}, 0xd, 0x3, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(0x0, r2) prctl$auto_PR_SET_SECCOMP(0x16, 0x4, 0x1, 0x5, 0x8) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCMSET2(r3, 0x5418, &(0x7f00000000c0)="deaa2f") setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/msr/msr0/uevent\x00', 0x400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000140)=""/123, 0x7b) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) 7.174309487s ago: executing program 8 (id=4061): r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3) (async, rerun: 64) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) (rerun: 64) mmap$auto(0x0, 0x2020009, 0x0, 0x10011, r0, 0x7ffc) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/pci0000:00/0000:00:04.0/broken_parity_status\x00', 0xc3002, 0x0) (async) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES64=r2, @ANYRES16=r2, @ANYBLOB="04ffffff2a2969c7482947edb4ff0000000000a00d4819a9edc65215652442fdbea9a8ac", @ANYRES32=r3, @ANYBLOB="080001000200000005000f00040000000600090040000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40040) (async, rerun: 64) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x710f}, 0x2008) (async, rerun: 64) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) fcntl$auto_F_OFD_SETLKW(r4, 0x26, 0x1298) (async) socket(0x26, 0x0, 0x84) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x400081, 0x0) (async) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000240)={0x5a02, 0x0, [{0xc, 0xffff, 0x6}]}) (async) writev$auto(0xffffffffffffffff, 0x0, 0x8) (async) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) ioctl$auto_SNAPSHOT_S2RAM(r6, 0x330b, 0x0) (async) write$auto(0xffffffffffffffff, 0x0, 0xfffffdef) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) (async, rerun: 64) timer_create$auto(0x3, 0x0, 0x0) (rerun: 64) 6.555297988s ago: executing program 8 (id=4064): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, &(0x7f0000000180), 0x6, 0x1000}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) fstat$auto(0xffffffffffffffff, &(0x7f0000000300)={0xff, 0x7, 0x45, 0x4, 0x0, 0x0, 0x0, 0x0, 0xe, 0x803, 0x4, 0x6, 0x0, 0x73, 0x1, 0x1, 0x8}) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) preadv$auto(r2, &(0x7f00000002c0)={0x0, 0xbe78}, 0x5, 0x800000fb, 0x8100000001) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000c00)={0x14, r4, 0x309, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r6 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) ioctl$auto_RTC_UIE_ON(r6, 0x7003, 0x0) r7 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)={0x14, r7, 0x301, 0x70bd23, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r9) r11 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r9, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r10, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r11}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x1000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) shmctl$auto_SHM_INFO(0x4, 0xe, &(0x7f0000000140)={{0x4, 0xffffffffffffffff, 0xee01, 0x9, 0x0, 0x4, 0x5}, 0x97cc, 0x5, 0xb10, 0x9, @inferred, @inferred, 0x200, 0x0, &(0x7f0000000200)="0ddf050a4a34ff4b4f96f39c1e8b55e42045ea1185bcb4eac1333d26bdae0f5bfc143e92e0e11eea959717d9e08cef66afdf630ddff9719ad845952547b8a1a56a9ec2534eee81f19c94d12c2aaf79dfbcb6ba4eae07eee7355c4e99e32f6bd2157b5f07338c7ac7a1561dca624cd59c5ce8cf4f3ba884cd48b47f41facf004697744bfb5596769491e6e3ce81648d73ac96", &(0x7f0000000300)="44b600a72c5377663227252bb72c5e9e935c4ec2c82e1f574868f8336202379f9f9fd6de669d74198aa7994dc769701d6c5b2e11f4c5c47de20b6392cecafb9f8b5686b11482dea83e5ee9a44da2b1d14f56a94acf28f03ee16c09c5b2b5d0014cb95138c27ee95ee0fc8bea9c71ddbf5623781143e665d5816c086a8178030ba40602fbcb086b83730e3df4892f8c9661e1375aff6140a8186d8827a2ffddb716550182d10801aaeaf432df47e0bae4b147427f3695aba044e225cb5427cdf282d966c566f8456b09ef94a777bd116c"}) ioctl$auto_BLKTRACESETUP32(r0, 0xc0401273, &(0x7f0000000400)={"343c770069f9877b74bea4609c5a377f2a18ce45a4cd3e4a6d265caca3a9edd4", 0xca80, 0xfffffff6, 0x3, 0x8001, 0x80, 0x0}) sendmsg$auto_NL80211_CMD_TDLS_OPER(r8, &(0x7f0000000c40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000480)={0x774, r10, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_EMA_RNR_ELEMS={0x643, 0x145, 0x0, 0x1, [@nested={0x113, 0x42, 0x0, 0x1, [@nested={0x4, 0xf7}, @generic="d38b064e09862833e684f27cd7d85194a38ed057a7ed2b9a427c4ac7cc020625c58f4162bc2b761184890a0a0079f6faca631ffe507a9428f8ee75eafcff1b3b1ae9bd654cbcb57e4911dd71e38a86875f61876d74f4e09b8526b3721e8707641cca114b5b0d0e983640d4a60ea72dfd81a2466c1ae57b427dab5f15d1b45b3acc603b70d1196c52ceddef13ceafe03beec98ba6a03e3456f7ca6fb04c9fc82cbfe182109681c02886", @generic="3f3171be362a0495054db06ed0bea30a92f1e5aa78eaa9346b6e8919f273e70d7bd80560d4cd32857a53e8b89590e36794299ce5548e0b8c0dba8c4f80de5100adfc96e23bb7f6161b21d0c02a0015542545398ba4da63ced054", @nested={0x4, 0x140}, @nested={0x4, 0xc9}]}, @generic="0e1fd4c4", @nested={0x11f, 0x109, 0x0, 0x1, [@typed={0x8, 0x13a, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x97}, @generic="82bcd531f9eebdd5ef2b97c1e0f06db1992198bdc2459e3d8fe3911811788642f3314440fc641b417a54737710a4fdb7f75090db826f6752cc2e23431bfab0c9a94afc8ddf936fc5b81853927e80d93158078c3b73d59d5309e292457b9f00553bd91e74686e153da59913589ec21833e7fef985015e933c11484297ac523c9d3ebcc0fe2403cdbcc543ddf67fe5abcc0a197669e6c991e4e4faf7a0b5564d1b04cfc0d7527e416ef1771f3a1752102a0ae7de7609d5ec6329a97644256ef1833ab96e89c15ea5a51cd6eebdf373278f43aec7ef3385a4478471192b4bc89a62db5e20cca40dd00a59de162208b120", @typed={0x8, 0x116, 0x0, 0x0, @u32}, @typed={0x8, 0x2b, 0x0, 0x0, @ipv4=@private=0xa010100}, @nested={0x4, 0x14a}, @nested={0x4, 0x48}, @nested={0x4, 0x6e}, @nested={0x4, 0x8b}]}, @generic="cd60571c3191e4acc9c58517769df9bb816d969da35bf2bdbbde8feb9dfb421147e97d186b2e111fdc433d3b3f79ba704bb4324a98726926db15fb7a2748caae228c8abf430c670d529af78c5f60739fd63296abd46ef87a7beb556533717032221951ee6b24069abbcdfc7fb8d48fd7efb19fa50f46ac505c7ba514a00d6bf2b0d9174702c97884751f64e6736a931014a5efe030da81a367490e9bbd650b1f9b6c2aafbc2e2f2f8b7744755bb09addc4e52e97015ab2cd", @nested={0xa0, 0x64, 0x0, 0x1, [@nested={0x4, 0x126}, @generic="f2ecefe650b5c3d2e9121080ff332f8b3e53fab8ec1322d0d0efc35b1f569ac89aad092e9d52a6bcb3f9e04e20473d2d74340cc8fdba30b2487f7c813f0704633ab0b9720a8167689ef77f053372e8e7192e778e100c8bde549b51313b39d2f5d8018f90f27105502183399f5bbb34c5bf2b43ef952a6077", @nested={0x4, 0x4}, @typed={0x8, 0x5f, 0x0, 0x0, @uid=r12}, @typed={0x14, 0x16, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x15}}]}, @nested={0xc, 0xff, 0x0, 0x1, [@typed={0x8, 0x8c, 0x0, 0x0, @pid=r13}]}, @generic="3c38db32c6c299c8b9b88cd5beb2d96b6ca9a612a4087810e24c0f8a972650ffc81f7d0fd82b9fda7eb72a4f952267370fe47c4e18e04460b9d67db8e5114633f258072aaf36390272958a255360f9ec3c3e446f578b1f0bbc4927033ee5cf4e0ebc61716d25f5749ce4f5905e7533ab593118268225b55c5a9463f75ed3b5ed61ce9629d0a5144c8c9674811023e56de148b7e78b992de797af711bd341eea1ef50187e84a869dd74eefb6b132a77f203a2ae4da01803fb291830eae229bbf2372ae24366e89f56d51458ee0f33b1d596875da4480d46245c14d07331480091bc2448618bd586", @nested={0xc0, 0xd5, 0x0, 0x1, [@generic="1fdf41b046f48262de4b91fb0b2f0123a582a4", @generic="10c1032fd44245dacb3880898ac8e81100f5cef214dba30c4846e8", @nested={0x4, 0x9f}, @typed={0x4, 0x142}, @nested={0x4, 0x97}, @typed={0x8, 0xac, 0x0, 0x0, @ipv4=@loopback}, @generic="f62e1812afbd3d8bfec0904d9df51a2a248e2882402bcd1384e97f68dbda72656299c9f6abae65d61e297df0bdc7de087134535de47af73078612ba4768d35aee20937c5e54b995f0de90d6b36e94299664db388cf5bd4025fc104dfff881432dd90de7e9fbff62588b3657ffc409522207f89a07804", @nested={0x4, 0x2}]}, @generic="0d3d998d1cb5ebf8aab2f3d543ca423756f222b44f35901e50c356faa89e6f70f67a86372eb6805dcc611ac76d3048a7018d9f0920d220bf705e5d66546c5da911dc4ec8d4350f6dac9977dfe9e85c125184b6e0dae86cff4978ecaa4334eb8fd68a084c45669d4c711a184950eda0544b4adeb4a9a4d83f19f9b8709b21bff56e1f6cc3c0197f8734a808847f58634f300639a030ea04a5c14adf284a60a9ddecb0885ae79204c1fa85000006902bb4effe6eddaa944597ed827b864f3d8121e0af9a2d170b175a0143032301239008b698081927801045d74c1d02978bbc456f85b6787be37ea59052c38ad8d0d81da7ad69c2", @typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@loopback}]}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, 0x1}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x3}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x8}, @NL80211_ATTR_PMKID={0x103, 0x55, "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"}]}, 0x774}, 0x1, 0x0, 0x0, 0xc010}, 0x4000080) socket(0xa, 0x3, 0xff) 6.42371914s ago: executing program 6 (id=4065): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x3, 0x4) mmap$auto(0x0, 0x2000a, 0x10000000000dc, 0xeb2, 0x401, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r2, 0xc0104d08, r2) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r4, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000000000)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_FLAGS={0x8, 0x4, 0x1}, @HWSIM_ATTR_ADDR_TRANSMITTER={0xa, 0x2, "a060292f83d9"}, @HWSIM_ATTR_COOKIE={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) socket(0x2, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xffffeffe, 0x2) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0xa0900, 0x0) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0xf82, 0x0) pipe$auto(0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2, 0x0) unshare$auto(0x40000080) 5.872456973s ago: executing program 4 (id=4066): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty51\x00', 0x80, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1801c0, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x9, 0x100010, r0, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/modalias\x00', 0x80500, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) read$auto(0x3, 0x0, 0x7fffffff) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x6) prctl$auto(0x4000002a, 0xffffffffffffffff, 0x0, 0x1, 0x1) write$auto(0xffffffffffffffff, 0x0, 0xe43) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon39\x00', 0xc4a00, 0x0) read$auto_mon_fops_binary_mon_bin(r1, 0x0, 0x0) ioctl$auto_MON_IOCG_STATS(r1, 0x80089203, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x88b40, 0x0) r3 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r3, 0x3b84, r2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x0, 0x0) recvmmsg$auto(0xffffffffffffffff, 0x0, 0xfffffff9, 0x10, 0x0) socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyp6\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) 5.872204852s ago: executing program 7 (id=4067): open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8001) socket(0x10, 0x4, 0x14) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_PPPIOCSDEBUG(r1, 0x40047440, 0x0) socket(0x27, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) close_range$auto(0x0, 0x5, 0x0) read$auto_cachefiles_daemon_fops_internal(0xffffffffffffffff, &(0x7f0000000140)=""/42, 0x2a) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptyya\x00', 0x80800, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="13002cbd7000dddbdf2501ffffe608000300", @ANYRES32=r5, @ANYRESHEX=r2], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000240), r0) socket(0x2, 0x1, 0x106) r6 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f00000000c0), 0x109002, 0x0) pread64$auto(r6, 0x0, 0x6, 0x400000008) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 5.018728957s ago: executing program 6 (id=4068): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/nbd11/sched/write2_next_rq\x00', 0x2, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/saved_cmdlines\x00', 0x64180, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC2\x00', 0x80, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(r2, 0xc0285628, r1) read$auto(0x3, 0x0, 0x80) r3 = timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0x0) write$auto_dfs_global_fops_debug(r3, &(0x7f0000000040)='B', 0x1) r4 = eventfd$auto(0x7f) read$auto_vhci_fops_hci_vhci(r4, &(0x7f0000000200)=""/36, 0x24) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x801, 0x100) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x27, 0x4909b6f5, 0x1ffe0, 0x7, 0xffffffff, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0x68d, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0x6, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0xffffffff, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x8, 0x90, 0x6, 0xbdcc, 0x10000, 0xfffffffffffffffe, 0x0, 0x100]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) r6 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, r6, 0x1, 0x70bd29, 0x25dfdbf9, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f0000003a40)=""/4096, 0x1000) 5.005598217s ago: executing program 8 (id=4069): prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) setreuid$auto(0x0, 0x7) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x3e00, 0x0) read$auto(r0, 0x0, 0x1f40) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x2a2000, 0x0) socketcall$auto(0xffe, 0x0) mmap$auto(0x0, 0x2020005, 0x4, 0x400eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x101, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x8) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) ioctl$auto(0x3, 0xc0303e03, r1) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) unshare$auto(0x40000080) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0xe8202, 0x0) write$auto(r3, &(0x7f0000000080)='\x00', 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r4, 0x0, 0x7) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x9}, 0x6) r6 = socket(0x1e, 0x1, 0x4000000) bind$auto(r6, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41}, 0xffffffff}}, 0x66) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_clock\x00', 0xc0002, 0x0) 4.848907131s ago: executing program 7 (id=4070): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x542f, 0x0) sendmsg$auto_NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x20000010) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x4, 0x0) mmap$auto(0xfffffffffffffffd, 0x40000b, 0x20000df, 0x10, 0xffffffffffffffff, 0xb9) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/kpagecgroup\x00', 0x20000, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x400c091) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 4.6588358s ago: executing program 6 (id=4071): mmap$auto(0x4, 0x2020009, 0x6, 0x56, 0xffffffffffffffff, 0x8000) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x20000010) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/dynamic_debug/control\x00', 0x482, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) madvise$auto(0x1, 0x8000805, 0x1) unshare$auto(0x20000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf251600000018000180140002006e657464657673696d30000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) setsockopt$auto_SO_TXTIME(r0, 0x7, 0x3d, &(0x7f0000000040)='/%*^[\x00', 0x9) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) write$auto(0x3, 0x0, 0xfffffdef) writev$auto(r0, &(0x7f0000000240)={&(0x7f0000000180), 0x9}, 0xb) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/transaction_log\x00', 0x8000, 0x0) preadv$auto(r3, &(0x7f0000000040)={&(0x7f0000000200)="5780d0729c28681beb4bdf305043c3d2ddcbf3bd7f707beb72eea073b642916b12b7b9092900bde192c02604c98b1e151365c5923f4fd9565917f37eaeefd98163375e749933be166458b1e7dff87f8c550acefd819df53a5369356ec85fb794724432089c45842e9df5c8fa9e493b75e5339b72701719cfadc02fd654c54ce1f38e02cb011db3a6", 0x80000000}, 0x1ff, 0x800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffff6, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/bus/pci/drivers/uhci_hcd/remove_id\x00', 0xa001, 0x0) r4 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x41180, 0x0) read$auto(r4, 0x0, 0x58b22256) write$auto(0x3, 0x0, 0x9) openat$auto_mgts_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x22800, 0x0) inotify_init1$auto(0x3000000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/hid/drivers/cypress/new_id\x00', 0xa001, 0x0) 4.570316666s ago: executing program 4 (id=4072): r0 = socket(0x2, 0x1, 0x106) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f00000001c0)) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) write$auto(0x3, 0x0, 0x100082) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001fc, 0x7, 0xd3e, 0x1, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x5, 0x5, 0x6d3f, 0x7, 0x6, 0x6]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x3, 0x3, 0x3, 0x3, 0x8000000000000000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_psample(&(0x7f0000007a40), 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r4, &(0x7f0000007b00)={0x0, 0x0, &(0x7f0000007ac0)={&(0x7f0000007a80)={0x14, r5, 0x311, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xf0}, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x2, 0x8, 0x0) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0x10ffffffff}, 0x6, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) setsockopt$auto(r0, 0x1, 0xd, &(0x7f0000000000)='\'-+\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0x9) socket(0x2, 0x801, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/ram8/trace/pid\x00', 0x101042, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 3.892492739s ago: executing program 7 (id=4073): unshare$auto(0x40000080) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp1\x00', 0x286440, 0x0) ioctl$auto_SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) clone$auto(0x4, 0x9, &(0x7f0000000040)=0x3, &(0x7f0000000080), 0x8) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x800, 0x0) ioctl$auto_SNDCTL_MIDI_PRETIME(r1, 0xc0046d00, &(0x7f0000000280)="3c56e86300") openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70001cdddf250200020008000308"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) unshare$auto(0x40000080) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x805aa, 0x0, 0x2e, 0x0, 0x7, 0x80001083}, 0x5}, 0xaf2, 0x100) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0x2, 0x3, 0x9) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x155) r2 = socket(0x11, 0x80003, 0x3ff) setsockopt$auto(r2, 0x107, 0xf, 0x0, 0x6) 3.681825526s ago: executing program 8 (id=4074): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14ab3f) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./cgroup\x00') sendmsg$auto_NETDEV_CMD_QSTATS_GET(r5, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000127bd7000ffdbdf250c0000000c000400080000000000000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08200100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB], 0x48}}, 0x80) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r6, 0xae03, 0x51) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="9c000000c1f8f0df53c953ccda08bc7f6a3309766215615667badf60552a6aae6e5b5780caeef0c2", @ANYRES16=r1, @ANYBLOB="010329bd7000fedbdf250c00000008000100", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x40000) 3.475468063s ago: executing program 6 (id=4075): unshare$auto(0x40000080) statx$auto(0xffffffffffffffff, 0x0, 0x2, 0x8001, &(0x7f0000000300)={0x7, 0x1, 0xfffffffbfffffff9, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, 0x401, 0x1, 0x4, 0x1fc, {0x80000001, 0xfb44}, {0x7, 0x28}, {0xfffffffffffffffc, 0x1ff}, {0xffffffffffffff60, 0x9}, 0x2, 0x6, 0x80000000, 0x17e9, 0x709c, 0x101, 0x5, 0x4, 0x8, 0x5, 0xb6a, 0xdfc, [0xe32, 0x2, 0x80000001, 0x1, 0xffffffff, 0x1c9fb31b, 0xfffffffffffffffa, 0xe, 0x3]}) r0 = socket(0x10, 0x802, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_netdev(0x0, r0) 1.85618538s ago: executing program 4 (id=4076): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x542f, 0x0) sendmsg$auto_NL80211_CMD_JOIN_OCB(0xffffffffffffffff, 0x0, 0x20000010) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, 0x0, 0x54) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x4, 0x0) mmap$auto(0xfffffffffffffffd, 0x40000b, 0x20000df, 0x10, 0xffffffffffffffff, 0xb9) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x20000, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x400c091) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 1.718190062s ago: executing program 8 (id=4077): syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x10, 0xffffffffffffffff, 0x7fff) timer_create$auto(0x2, 0x0, 0x0) r0 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000100)={0x6, 0x4, "dcfe24cd147f"}, 0x4) ioctl$auto(r0, 0x4, r0) timer_settime$auto(0x0, 0x7ff, &(0x7f0000000000)={{0xa6, 0x7}, {0x0, 0x3}}, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x4, 0x4}, {0x0, 0x83}}, 0x0) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x5, 0xe1, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40000008000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dmmidi2\x00', 0x40c000, 0x0) mmap$auto(0x0, 0x40000f, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x7) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x80000000, 0x3000}, 0x4) 1.691831039s ago: executing program 4 (id=4078): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x5, 0x4, 0x7) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x42800, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mem\x00', 0x200, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) r1 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, 0x0, 0x80) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r1, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)="bd7f05b68213e7d141bcf8a0b01260faa03ead820058a9b5fff22abb801359fe628c9a5c49990b23d7f26172073e5be49d879271113305bdb3e3fbc6e314391d589ad2629171d0ab7e469266f2f47f6bf59b2a93d90c1fdd8f77ee46fe9cbbc16e3db924f77cd5c2acff42b863b42d50c4fce35956e849b63866b7137e5bb703f50febdcece59d07d5d6316510d9feddb53e7deb4a2d5de58439c93a6015c169d6ba48cace7ccc8a4f0b412beca9cdc7d9d102f2ae9ea83f5c964054517abf151cd873f4831c3f1dbfbbbfd028bbc93d0f20fd92ec9a8744c108cd7481787bbc4b1ade61de082d4a5bf5d1dac5ab87533fd6366ff1db027882f0ec03af908b477a8c494c288410f4c3acdbae9479c0b58d0e93e9daed0bfb70f45eb943ed4f010781a3f6d33386695e25ba21fd9c2be6e0c0a7f7719af520050beb1a97568de71f696ffe3a4f3c0ef99a418ab1157b5a8bdb8bd270a6180558ddc5945310a8e90e76d73ce86e1306c8f40d99ca188e9780947d755004fa9595eb170d2fe616e8c796cd31230456e76d5e2832b367a8926a8b3588ec5602f9b1f17d3fad8c01bad8d6b0a56ac326234aa32adab7d392ef8437a7d1fae9d77db6b2b496e447c2b93835c20a9c0302324c64fe4281de4928cdb5b914221f600c76142e70a9401c687e2dc9b2c33fa72e2ba3d1819c46f094e1fe170a5cf3f8d68e38d0f9d9d2e1532c83b7cd629a4855cc4b239f8e723d14b1e2158b5e953de200bd87b2dc08616b67cbff54cd7b4b5cc8a5884be7966895619261df022b8a97dad36bb3bfe5e3322835e67572377d44aa313f90c3e47b17a00f1de9843c4d7cde7663e784ffa038da90920de557785ac1517d75a7b40a4827bcf9d794922413f9f3b08dac2316f1231af1c70f5b27d287f65d1f4c8acab3705a08df6428c10acb69240c46ed85012c3deec7f9bd028040445870332cf8f755036989b28aa1b59a39e929777395012c3e5b9f4dcfac837cf96a174a119787b51b8f18f3e6ba3b9903787d9d39e13e37b891a6f9c02635e2a7793f49a71dd1a6fb1913df21252c68f4dd31975eafc64f29c8e586297d48e2cf63bca2a699bb242f76666c0bdaa4eb0d9f741a4d885aec24d799a89db2fd9ebf8eb06da646718b645debef55c00d65951909c46352b4b040f33fe82f76e68cabae305f473822095fa5d75075b000359634ee204f2bf5a4e95b456d94311128ba25f86145b42e476d7a6cfbf053e84f200bc162f6b612cacbb2cc0b1afb8238b314ad29d809f6b1cb126361047c2cdd7211f576da72ea1cdf58422fa137baa40df3d621c24710dcb70f5e6e12c25a5d05d9ab80dc15066d2d4052f8c5916aaaa7d3b341050a1596aab3aba34864416f940699fe60fa5f1e834cb21c49ce2899c1352be546cb4cca6d417efcfcb9d82760e727cb4b61f6a856a183d705456fcf92cf94052a4d34fdf7fac3ce5ea634fa96664804655fd1f0e739136a6f3e2609ea4f21536375550fa639f9b808a92811cd2f37f1890ec49e5417212b9683ebb03617b650b4f833b2c74b4f32e106041f5da48802409a65a6c12d087298ca7d4b5836c3615e63ddd7ba75b9daab7731cfb06c0100c2b01cf946c148e8474d1b8dd76bf357cb8b17a42babb4f896b2d556a367d4920d0b322c9740849adf49275e1d03d4daf1f112f93ac9dd7e7d1d163108f477d6c2fb21a16ec5f5b6e66d83acdb7a81608b253dc36705d5e41cd88a5d5a3580d657f72e308871c207ca1aec38cdb45224c9146bb92663b1dbde549a91becd7c196a47f889b8353a3bff7cf91d7fd01b53c342b7fa12e0530e78bbe0a9b8bb46079b2b7972599648927ae2232d65aeb1599cec14ed80ff2cf924aad72a8168ed5a34a2ad0da14c33b9df3e8cd08b0c78df0f5bb5c0b768f74350c2ebdf8d68af14007b475d7bacd178b029e8d48319472e9cfcbe941c279a134c3db68aebcd5010e9b85002ae541e578da816f05d60daa747333b805732b09da854b2b1a7e13056aa7f3b58976b93e46e7c3f8105d3c71bca2f1592d26f91fa4be07ebe920c232406e696fc54803671af8e45d0560055bc8af0428f1bdbc1e609cebca4b79cdd78179def08763310f0e09f113e72075e59e04ea9f942ebd3c784f7f85e49c22a2d97b3314a126892521398f9a78495ef3e607a24b09917a34dfe59dafff62b51f769cab0e43b64d9199fe266877c6cfd4c12b0c22425043990f7bc51b733feac1254fb0b9839321c76c84c44985fad4d3326816d1a4e20492f73b766ecb7b3d8c34105040c623b3ffd88c0917dae216ed96134793e583e7b301ee4247e3acb1dad8e6eeca5ce2f9109517346a0da0c21b4863ec8f63ba80c2601b6bae31f955163b60cd28f97785e47209404e9c95e31e54fdd3103a3e69d74ea729c9c268dd608b62fd6d6bfdae12ac4c82cd7f4556d8287e3bd50720e5be2e9e05ef63d5701186da6ea895063c40833255c9410aaf3a8032f411bb32a2ba7a2b6f6b4a6479a6b64137b413ac786b210ab5615621e9c1c1fa9ac6b13efe60f7029ca019cfc6cb239821b92768ecd89ba8205b57a778cdc1ca68e17e91049f5f22a3fc0bdfc43544340e04a95e80c04abe3f41e6b86237526bfb531fbea0efbcb62de0366dbc6b77b1e0a264f895c48ac6dd4e6bdd2069c06f90016edb64ab7b868694a39f4290905dba6d2d5a0d1f6124111892ceb24ba9aa35b6ca5fb29b6b3289dc808c7665556344c6a436f62ec648e8646ef987460bf6ccc89f78fbbaf0a0c74915178723260963b", 0x9}, 0x8, &(0x7f0000000100)="24db605e3be9a2fef6f279b7ab3f29269d237103029b7444afc7d00200516f4b63091a7c337ee4f0581115f6d81ca8f6e6a3b5125d8b59d562ae3efb9266d293026c7d92248d3334f321d192f3cacffbf4594da76d371f6afa68b6db74bc1e1877914221d8a0cb266d5c29a2aad020cabd23f6aa0efcba5c10e344929c", 0x9, 0x8}, 0x6}, 0x81c, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000040), 0xfff}, 0x3) acct$auto(&(0x7f0000000180)=':.\xf8}/\x00') ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, 0x0) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) write$auto(0x3, 0x0, 0x70) 1.28701574s ago: executing program 6 (id=4079): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x8) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x5, 0x80000001, 0x40, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x100) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xffffffffffffffff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0xa00005, 0x9, 0x40abe, r1, 0x7) madvise$auto(0x2000, 0x20499d, 0x9) 1.162907951s ago: executing program 7 (id=4080): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/nbd11/sched/write2_next_rq\x00', 0x2, 0x0) openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/saved_cmdlines\x00', 0x64180, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC2\x00', 0x80, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(r2, 0xc0285628, r1) read$auto(0x3, 0x0, 0x80) r3 = timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0x0) write$auto_dfs_global_fops_debug(r3, &(0x7f0000000040)='B', 0x1) r4 = eventfd$auto(0x7f) read$auto_vhci_fops_hci_vhci(r4, &(0x7f0000000200)=""/36, 0x24) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x801, 0x100) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x27, 0x4909b6f5, 0x1ffe0, 0x7, 0xffffffff, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0x68d, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0x6, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0xffffffff, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x8, 0x90, 0x6, 0xbdcc, 0x10000, 0xfffffffffffffffe, 0x0, 0x100]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) r6 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, r6, 0x1, 0x70bd29, 0x25dfdbf9, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f0000003a40)=""/4096, 0x1000) 498.967586ms ago: executing program 4 (id=4081): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) unlink$auto(0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) socket(0xa, 0x3, 0x3a) semctl$auto(0x80001ff, 0x804, 0x13, 0x4) setsockopt$auto(0x400000000000003, 0x29, 0xd2, 0x0, 0x567) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000000c0)={0x3, 0x81, 0x5b, 0x4, &(0x7f0000000280), 0xd22ff64, 0xeb90, 0x2, @number_of_packets=0x4, 0x7, 0x476, 0x0}) unshare$auto(0xfff) 479.536132ms ago: executing program 7 (id=4082): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0xc}, @ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4089c}, 0x300) 403.160338ms ago: executing program 6 (id=4083): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0xa, 0x5, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/dummy0/carrier\x00', 0x8182, 0x0) write$auto_fops_init_pkru_pkeys(r0, &(0x7f0000000440)='\v', 0x1) (async, rerun: 64) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{@raw=0xc48, 0x3, 0xcf, 0x8, "16a0d89bf208384507b5375a677609aa1bc737276563c3b8a2fc9d99d5797ab7a108002bc341c4bd3692e535"}, 0x1, @integer=@value=[0xdbcd, 0x8, 0x3, 0x81, 0x9, 0x5, 0x3, 0x7, 0x0, 0x8, 0x0, 0x1, 0xf, 0x8, 0xffffffff, 0xf, 0x14, 0x8, 0x200, 0x1ffbff, 0x4, 0x3113d46d, 0x6, 0x100000001, 0x0, 0x5, 0x8, 0xff, 0x8, 0x80000000, 0x7, 0x100000000000007, 0xffffffffffffffff, 0x7d76, 0xfffffffffffffffa, 0x962, 0x80, 0x7, 0x80000001, 0x2, 0x2, 0x2, 0x4, 0x800, 0x5f49, 0x4, 0xfe, 0x9, 0x3ff, 0x7ff, 0x5, 0x9, 0x2, 0x7fffffffffffffff, 0x3, 0x9, 0x94, 0x4, 0x0, 0xd, 0x59, 0x2, 0x2, 0x8001, 0x9, 0x101, 0x1, 0x6, 0x100, 0x3, 0x6d, 0x400, 0xd143, 0x7, 0x9e, 0x800, 0xfffffffffffffffe, 0x40, 0x1, 0x2, 0x101, 0x2, 0x80000001, 0x8, 0x0, 0xfffffffffffffff9, 0x2, 0x4, 0xdc1, 0x8, 0xffffffffffffe355, 0x8, 0x20a, 0x35ed, 0x4, 0x9, 0x8000, 0x9, 0x0, 0x4, 0x8, 0x6, 0x5, 0xfff, 0x3, 0x7, 0x5, 0x6, 0x4638, 0x81, 0x6977, 0x6, 0x8525, 0x1, 0x20c1, 0x1ff, 0x10, 0xb, 0x4, 0x6, 0x81, 0x4f, 0x7fffffff, 0xb0, 0x9, 0x7fffffff, 0x9], "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x7, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x210001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x3], {0x9, 0x3, 0x6, 0x0, 0x4, 0x895, 0x3fdc, 0x6, 0x5}, {0x2, 0x1d11, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0xb}}) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x200008b8}, 0x8000) (async, rerun: 32) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) open(0x0, 0x22040, 0x75) (rerun: 32) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3}, 0x3ef3}, 0x3, 0x0) (async, rerun: 32) socket(0x15, 0x5, 0x0) (rerun: 32) socket(0xa, 0x1, 0x84) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) write$auto(0x6, 0x0, 0x100000001) (async) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) (async, rerun: 64) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0) (async, rerun: 64) read$auto_clear_warn_once_fops_(r2, &(0x7f0000000300)=""/169, 0xa9) 0s ago: executing program 7 (id=4084): unshare$auto(0x40000080) statx$auto(0xffffffffffffffff, 0x0, 0x2, 0x8001, &(0x7f0000000300)={0x7, 0x1, 0xfffffffbfffffff9, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0, 0x401, 0x1, 0x4, 0x1fc, {0x80000001, 0xfb44}, {0x7, 0x28}, {0xfffffffffffffffc, 0x1ff}, {0xffffffffffffff60, 0x9}, 0x2, 0x6, 0x80000000, 0x17e9, 0x709c, 0x101, 0x5, 0x4, 0x8, 0x5, 0xb6a, 0xdfc, [0xe32, 0x2, 0x80000001, 0x1, 0xffffffff, 0x1c9fb31b, 0xfffffffffffffffa, 0xe, 0x3]}) r0 = socket(0x10, 0x802, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_netdev(0x0, r0) kernel console output (not intermixed with test programs): 0794] ? alloc_fs_context+0x57/0xf50 [ 1017.396463][T20794] ? alloc_fs_context+0x57/0xf50 [ 1017.396486][T20794] alloc_fs_context+0x57/0xf50 [ 1017.396515][T20794] mq_init_ns+0x16e/0x810 [ 1017.396543][T20794] copy_ipcs+0x3db/0x7d0 [ 1017.396570][T20794] create_new_namespaces+0x20a/0xab0 [ 1017.396605][T20794] ? security_capable+0x7e/0x260 [ 1017.396647][T20794] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1017.396683][T20794] ksys_unshare+0x45b/0xa40 [ 1017.396722][T20794] ? __pfx_ksys_unshare+0x10/0x10 [ 1017.396761][T20794] ? xfd_validate_state+0x61/0x180 [ 1017.396792][T20794] __x64_sys_unshare+0x31/0x40 [ 1017.396829][T20794] do_syscall_64+0xcd/0xf80 [ 1017.396869][T20794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.396893][T20794] RIP: 0033:0x7fc14298f7c9 [ 1017.396912][T20794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1017.396935][T20794] RSP: 002b:00007fc143778038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1017.396958][T20794] RAX: ffffffffffffffda RBX: 00007fc142be5fa0 RCX: 00007fc14298f7c9 [ 1017.396974][T20794] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 1017.396989][T20794] RBP: 00007fc142a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1017.397004][T20794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1017.397018][T20794] R13: 00007fc142be6038 R14: 00007fc142be5fa0 R15: 00007ffd4f37e6a8 [ 1017.397049][T20794] [ 1017.941714][T20794] overlayfs: missing 'lowerdir' [ 1018.123020][ T7216] bridge_slave_1: left allmulticast mode [ 1018.137480][ T7216] bridge_slave_1: left promiscuous mode [ 1018.143247][ T7216] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.323670][ T7216] bridge_slave_0: left allmulticast mode [ 1018.329911][ T7216] bridge_slave_0: left promiscuous mode [ 1018.349066][ T7216] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.534168][ T7216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1021.598313][ T7216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1021.625645][ T7216] bond0 (unregistering): Released all slaves [ 1025.178150][T20881] FAULT_INJECTION: forcing a failure. [ 1025.178150][T20881] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1025.210596][T20881] CPU: 1 UID: 0 PID: 20881 Comm: syz.3.3589 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1025.210664][T20881] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1025.210682][T20881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1025.210702][T20881] Call Trace: [ 1025.210713][T20881] [ 1025.210725][T20881] dump_stack_lvl+0x16c/0x1f0 [ 1025.210780][T20881] should_fail_ex+0x512/0x640 [ 1025.210829][T20881] get_futex_key+0x1d0/0x15f0 [ 1025.210869][T20881] ? __pfx_get_futex_key+0x10/0x10 [ 1025.210916][T20881] futex_wake+0xea/0x530 [ 1025.210976][T20881] ? __pfx_futex_wake+0x10/0x10 [ 1025.211030][T20881] ? kmem_cache_free+0x171/0x770 [ 1025.211077][T20881] do_futex+0x1e3/0x350 [ 1025.211114][T20881] ? __pfx_do_futex+0x10/0x10 [ 1025.211149][T20881] ? __pfx___might_resched+0x10/0x10 [ 1025.211196][T20881] ? blkcg_maybe_throttle_current+0x650/0xf30 [ 1025.211236][T20881] ? _raw_spin_unlock_irq+0x23/0x50 [ 1025.211284][T20881] __x64_sys_futex+0x1e0/0x4c0 [ 1025.211341][T20881] ? __do_sys_close_range+0x278/0x730 [ 1025.211393][T20881] ? __pfx___x64_sys_futex+0x10/0x10 [ 1025.211433][T20881] ? rcu_is_watching+0x12/0xc0 [ 1025.211490][T20881] do_syscall_64+0xcd/0xf80 [ 1025.211543][T20881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.211577][T20881] RIP: 0033:0x7fbbed18f7c9 [ 1025.211603][T20881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1025.211638][T20881] RSP: 002b:00007fbbedf8d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1025.211669][T20881] RAX: ffffffffffffffda RBX: 00007fbbed3e5fa8 RCX: 00007fbbed18f7c9 [ 1025.211691][T20881] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbbed3e5fac [ 1025.211713][T20881] RBP: 00007fbbed3e5fa0 R08: 00007fbbedf8e000 R09: 0000000000000000 [ 1025.211734][T20881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1025.211755][T20881] R13: 00007fbbed3e6038 R14: 00007ffdeccaad40 R15: 00007ffdeccaae28 [ 1025.211806][T20881] [ 1026.097304][ T7216] hsr_slave_0: left promiscuous mode [ 1026.149146][ T7216] hsr_slave_1: left promiscuous mode [ 1026.182302][ T7216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.211532][ T7216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.290123][ T7216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1026.315661][ T7216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1026.627108][ T7216] veth1_macvtap: left promiscuous mode [ 1026.632670][ T7216] veth0_macvtap: left promiscuous mode [ 1026.649920][ T7216] veth1_vlan: left promiscuous mode [ 1026.655266][ T7216] veth0_vlan: left promiscuous mode [ 1028.656948][T20910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3592'. [ 1029.259842][T20913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3593'. [ 1029.957851][ T7216] team0 (unregistering): Port device team_slave_1 removed [ 1030.165494][ T7216] team0 (unregistering): Port device team_slave_0 removed [ 1031.793477][T20910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1031.839205][T20910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.909623][T20910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1031.927725][T20910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.800140][T20925] snd_virmidi snd_virmidi.0: control 61678:13:5:yª:8 is already present [ 1033.995182][T20934] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1034.017912][T20934] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1034.037561][T20934] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1034.058797][T20934] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1035.690901][T20984] Bluetooth: hci0: command 0x0406 tx timeout [ 1036.000333][T20991] vmstat_refresh: nr_hugetlb -14336 [ 1036.070696][T20984] Bluetooth: hci1: command 0x0406 tx timeout [ 1036.079116][T20993] Bluetooth: hci2: command 0x0406 tx timeout [ 1036.126124][T20984] Bluetooth: hci3: command 0x0c1a tx timeout [ 1036.624137][T21000] can: request_module (can-proto-0) failed. [ 1037.561591][T21013] dyndbg: expected <4096 bytes into control [ 1037.626739][T21013] dyndbg: bad flag-op €, at start of € [ 1037.659178][T21013] dyndbg: flags parse failed [ 1041.569620][T21071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3615'. [ 1041.651154][T21074] vhci_hcd vhci_hcd.0: invalid port number 16 [ 1046.637520][T21132] snd_virmidi snd_virmidi.0: control 61678:131081:3:yª:1 is already present [ 1046.823306][T21125] dyndbg: expected <4096 bytes into control [ 1046.836494][T21125] dyndbg: bad flag-op €, at start of € [ 1046.842068][T21125] dyndbg: flags parse failed [ 1047.235351][T21142] FAULT_INJECTION: forcing a failure. [ 1047.235351][T21142] name failslab, interval 1, probability 0, space 0, times 0 [ 1047.258714][T21142] CPU: 0 UID: 7 PID: 21142 Comm: syz.1.3628 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1047.258794][T21142] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1047.258816][T21142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1047.258836][T21142] Call Trace: [ 1047.258848][T21142] [ 1047.258862][T21142] dump_stack_lvl+0x16c/0x1f0 [ 1047.258922][T21142] should_fail_ex+0x512/0x640 [ 1047.258961][T21142] ? fs_reclaim_acquire+0xae/0x150 [ 1047.259020][T21142] should_failslab+0xc2/0x120 [ 1047.259073][T21142] kmem_cache_alloc_noprof+0x83/0x770 [ 1047.259114][T21142] ? __pfx_map_id_range_down+0x10/0x10 [ 1047.259175][T21142] ? security_inode_alloc+0x3b/0x2b0 [ 1047.259231][T21142] ? security_inode_alloc+0x3b/0x2b0 [ 1047.259265][T21142] security_inode_alloc+0x3b/0x2b0 [ 1047.259304][T21142] inode_init_always_gfp+0xced/0x1040 [ 1047.259358][T21142] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1047.259410][T21142] alloc_inode+0x86/0x240 [ 1047.259449][T21142] new_inode+0x22/0x1c0 [ 1047.259488][T21142] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1047.259538][T21142] mqueue_get_inode+0x2e/0xdd0 [ 1047.259588][T21142] ? sget_fc+0x808/0xc20 [ 1047.259635][T21142] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1047.259686][T21142] mqueue_fill_super+0x14d/0x260 [ 1047.259738][T21142] get_tree_nodev+0xdd/0x190 [ 1047.259788][T21142] mqueue_get_tree+0xf1/0x130 [ 1047.259839][T21142] vfs_get_tree+0x8e/0x330 [ 1047.259880][T21142] fc_mount_longterm+0x1a/0x270 [ 1047.259925][T21142] mq_init_ns+0x482/0x810 [ 1047.259964][T21142] copy_ipcs+0x3db/0x7d0 [ 1047.260009][T21142] create_new_namespaces+0x20a/0xab0 [ 1047.260074][T21142] ? security_capable+0x7e/0x260 [ 1047.260136][T21142] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1047.260194][T21142] ksys_unshare+0x45b/0xa40 [ 1047.260253][T21142] ? __pfx_ksys_unshare+0x10/0x10 [ 1047.260311][T21142] ? xfd_validate_state+0x61/0x180 [ 1047.260355][T21142] __x64_sys_unshare+0x31/0x40 [ 1047.260410][T21142] do_syscall_64+0xcd/0xf80 [ 1047.260473][T21142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.260509][T21142] RIP: 0033:0x7f9fb858f7c9 [ 1047.260538][T21142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1047.260574][T21142] RSP: 002b:00007f9fb94a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1047.260607][T21142] RAX: ffffffffffffffda RBX: 00007f9fb87e5fa0 RCX: 00007f9fb858f7c9 [ 1047.260631][T21142] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 1047.260652][T21142] RBP: 00007f9fb8613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1047.260674][T21142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1047.260695][T21142] R13: 00007f9fb87e6038 R14: 00007f9fb87e5fa0 R15: 00007ffd3aede198 [ 1047.260741][T21142] [ 1048.889959][T20984] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1052.113249][T21229] FAULT_INJECTION: forcing a failure. [ 1052.113249][T21229] name failslab, interval 1, probability 0, space 0, times 0 [ 1052.142911][T21229] CPU: 1 UID: 0 PID: 21229 Comm: syz.2.3640 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1052.142984][T21229] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1052.143002][T21229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1052.143021][T21229] Call Trace: [ 1052.143032][T21229] [ 1052.143044][T21229] dump_stack_lvl+0x16c/0x1f0 [ 1052.143099][T21229] should_fail_ex+0x512/0x640 [ 1052.143134][T21229] ? fs_reclaim_acquire+0xae/0x150 [ 1052.143188][T21229] should_failslab+0xc2/0x120 [ 1052.143237][T21229] __kmalloc_noprof+0xeb/0x910 [ 1052.143272][T21229] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1052.143323][T21229] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1052.143366][T21229] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1052.143421][T21229] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1052.143461][T21229] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1052.143536][T21229] ? do_raw_spin_lock+0x12c/0x2b0 [ 1052.143594][T21229] tomoyo_file_open+0x6b/0x90 [ 1052.143646][T21229] security_file_open+0x84/0x1e0 [ 1052.143690][T21229] do_dentry_open+0x597/0x1590 [ 1052.143740][T21229] ? security_inode_permission+0xbf/0x260 [ 1052.143783][T21229] vfs_open+0x82/0x3f0 [ 1052.143821][T21229] path_openat+0x2078/0x3140 [ 1052.143882][T21229] ? __pfx_path_openat+0x10/0x10 [ 1052.143948][T21229] do_filp_open+0x20b/0x470 [ 1052.143998][T21229] ? __pfx_do_filp_open+0x10/0x10 [ 1052.144074][T21229] ? alloc_fd+0x471/0x7d0 [ 1052.144131][T21229] do_sys_openat2+0x121/0x290 [ 1052.144167][T21229] ? __pfx_do_sys_openat2+0x10/0x10 [ 1052.144217][T21229] __x64_sys_openat+0x174/0x210 [ 1052.144253][T21229] ? __pfx___x64_sys_openat+0x10/0x10 [ 1052.144307][T21229] do_syscall_64+0xcd/0xf80 [ 1052.144358][T21229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.144392][T21229] RIP: 0033:0x7f6630f8f7c9 [ 1052.144417][T21229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1052.144450][T21229] RSP: 002b:00007f6631d6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1052.144481][T21229] RAX: ffffffffffffffda RBX: 00007f66311e5fa0 RCX: 00007f6630f8f7c9 [ 1052.144502][T21229] RDX: 0000000000004000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1052.144523][T21229] RBP: 00007f6631013f91 R08: 0000000000000000 R09: 0000000000000000 [ 1052.144543][T21229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1052.144562][T21229] R13: 00007f66311e6038 R14: 00007f66311e5fa0 R15: 00007ffebaa0c1c8 [ 1052.144610][T21229] [ 1052.144788][T21229] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1053.015809][T21240] ERROR: Out of memory at tomoyo_memory_ok. [ 1053.145788][T20961] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1053.155335][T20961] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1053.166755][T20961] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1053.182494][T20961] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1053.190325][T20961] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1053.740008][T21244] chnl_net:caif_netlink_parms(): no params data found [ 1054.105291][T21244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.136482][T21244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.144067][T21244] bridge_slave_0: entered allmulticast mode [ 1054.165391][T21244] bridge_slave_0: entered promiscuous mode [ 1054.179348][T21244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.196111][T21244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.216457][T21244] bridge_slave_1: entered allmulticast mode [ 1054.235155][T21244] bridge_slave_1: entered promiscuous mode [ 1054.311403][T21244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.328479][T21244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.475682][T21244] team0: Port device team_slave_0 added [ 1054.504110][T21244] team0: Port device team_slave_1 added [ 1054.579915][T21244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.599501][T21244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.655975][T21244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.684531][T21244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.703749][T21244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1054.771555][T21244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.970870][T21244] hsr_slave_0: entered promiscuous mode [ 1054.977448][T21244] hsr_slave_1: entered promiscuous mode [ 1054.983716][T21244] debugfs: 'hsr0' already exists in 'hsr' [ 1054.990974][T21244] Cannot create hsr debugfs directory [ 1055.246203][T20961] Bluetooth: hci4: command tx timeout [ 1055.655260][T21244] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1055.696685][T21244] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1055.711939][T21244] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1055.725808][T21274] dyndbg: expected <4096 bytes into control [ 1055.751107][T21274] dyndbg: bad flag-op €, at start of € [ 1055.762238][T21244] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1055.782363][T21274] dyndbg: flags parse failed [ 1056.071211][T21244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1056.149398][T21244] 8021q: adding VLAN 0 to HW filter on device team0 [ 1056.181540][T20988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.188746][T20988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.261723][T20988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.268966][T20988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.847496][T21244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1057.326193][T20961] Bluetooth: hci4: command tx timeout [ 1057.578738][T21244] veth0_vlan: entered promiscuous mode [ 1057.604375][T21244] veth1_vlan: entered promiscuous mode [ 1057.704415][T21244] veth0_macvtap: entered promiscuous mode [ 1057.740610][T21244] veth1_macvtap: entered promiscuous mode [ 1057.798399][T21244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1057.843286][T21244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1057.980806][T20975] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.996653][T20975] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.020022][T20975] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.041830][T20975] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.291376][T20978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1058.321474][T20978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1058.376144][T20978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1058.386877][T20978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.406639][T20961] Bluetooth: hci4: command tx timeout [ 1059.441818][T21316] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1059.462714][T21316] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1059.471889][T21324] sctp: [Deprecated]: syz.2.3650 (pid 21324) Use of int in maxseg socket option. [ 1059.471889][T21324] Use struct sctp_assoc_value instead [ 1059.490683][T21316] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1059.497682][T21316] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1059.510573][T21316] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1059.534204][T21316] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1059.548034][T21316] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1059.579711][T21316] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1059.955335][ T31] audit: type=1326 audit(6062643594.818:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21327 comm="syz.5.3655" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f920398f7c9 code=0x0 [ 1060.766423][T20961] Bluetooth: hci0: command 0x0406 tx timeout [ 1060.960077][T21343] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3657'. [ 1061.065228][T21344] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1061.498941][T20961] Bluetooth: hci2: command 0x0406 tx timeout [ 1061.537308][T21343] team0: Port device team_slave_1 removed [ 1061.578623][T20961] Bluetooth: hci4: command 0x0c1a tx timeout [ 1061.584722][T20961] Bluetooth: hci1: command 0x0406 tx timeout [ 1061.592705][T20984] Bluetooth: hci3: command 0x0c1a tx timeout [ 1063.075151][T21366] snd_virmidi snd_virmidi.0: control 61678:13:5:yª:8 is already present [ 1063.647108][T20993] Bluetooth: hci3: command 0x0c1a tx timeout [ 1063.654577][T21346] Bluetooth: hci4: command 0x0c1a tx timeout [ 1063.814919][T21375] sctp: [Deprecated]: syz.5.3666 (pid 21375) Use of int in maxseg socket option. [ 1063.814919][T21375] Use struct sctp_assoc_value instead [ 1064.425681][T21381] blktrace: Concurrent blktraces are not allowed on loop2 [ 1064.893735][T21385] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.128.4294967291), cmd(3) [ 1064.962784][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.969332][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1065.740777][T21346] Bluetooth: hci4: command 0x0c1a tx timeout [ 1065.833479][T20993] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1065.843756][T20993] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1065.857910][T20993] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1065.867272][T20993] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1065.875140][T20993] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1066.680439][T21394] chnl_net:caif_netlink_parms(): no params data found [ 1067.213189][T21394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.356110][T21394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.382114][T21394] bridge_slave_0: entered allmulticast mode [ 1067.419354][T21394] bridge_slave_0: entered promiscuous mode [ 1067.474955][T21394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.511822][T21394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.546167][T21394] bridge_slave_1: entered allmulticast mode [ 1067.588500][T21394] bridge_slave_1: entered promiscuous mode [ 1067.821381][T21394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.878934][T21394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.970967][T20993] Bluetooth: hci5: command tx timeout [ 1068.006390][T21394] team0: Port device team_slave_0 added [ 1068.019034][T21394] team0: Port device team_slave_1 added [ 1068.078244][T21394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1068.085303][T21394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1068.111826][T21394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1068.125348][T21394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1068.136063][T21394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1068.178415][T21394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1068.307543][T21394] hsr_slave_0: entered promiscuous mode [ 1068.314461][T21394] hsr_slave_1: entered promiscuous mode [ 1068.327235][T21394] debugfs: 'hsr0' already exists in 'hsr' [ 1068.333082][T21394] Cannot create hsr debugfs directory [ 1068.857501][T21425] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3677'. [ 1068.901748][T21427] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3677'. [ 1069.004835][T21425] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3677'. [ 1069.025537][T21425] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3677'. [ 1069.035076][T21425] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3677'. [ 1069.084991][T21425] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3677'. [ 1069.119198][T21425] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3677'. [ 1069.161954][T21425] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3677'. [ 1069.240472][T21425] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3677'. [ 1069.295683][T21425] netlink: 334 bytes leftover after parsing attributes in process `syz.4.3677'. [ 1069.332668][T21394] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1069.396116][T21394] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1069.435644][T21394] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1069.474949][T21394] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1069.752003][T21394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1069.967410][T21394] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.001489][T21020] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.008680][T21020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.050153][T20993] Bluetooth: hci5: command tx timeout [ 1070.088186][T21020] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.095421][T21020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.793682][T21394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1071.086491][T21444] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1071.186438][T21444] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1071.213200][T21444] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1071.244461][T21444] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1071.286625][T21444] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1071.307849][T21444] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1071.397360][T21444] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1071.496229][T21455] snd_virmidi snd_virmidi.0: control 61678:13:5:yª:8 is already present [ 1071.660985][T21394] veth0_vlan: entered promiscuous mode [ 1071.713186][T21394] veth1_vlan: entered promiscuous mode [ 1071.845465][T21394] veth0_macvtap: entered promiscuous mode [ 1071.880717][T21394] veth1_macvtap: entered promiscuous mode [ 1071.959072][T21394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1071.999869][T21394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1072.045481][T20968] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.108570][T20968] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.129365][T20968] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.163304][T20968] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.222952][T15707] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1072.367270][T15707] CPU: 1 UID: 0 PID: 15707 Comm: syz-executor Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1072.367340][T15707] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1072.367357][T15707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1072.367376][T15707] Call Trace: [ 1072.367387][T15707] [ 1072.367400][T15707] dump_stack_lvl+0x16c/0x1f0 [ 1072.367455][T15707] dump_header+0x101/0x960 [ 1072.367495][T15707] oom_kill_process+0x176/0x910 [ 1072.367537][T15707] out_of_memory+0x350/0x1700 [ 1072.367573][T15707] ? __lock_acquire+0x436/0x2890 [ 1072.367611][T15707] ? __pfx_out_of_memory+0x10/0x10 [ 1072.367659][T15707] mem_cgroup_out_of_memory+0x118/0x130 [ 1072.367698][T15707] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1072.367748][T15707] ? do_raw_spin_unlock+0x172/0x230 [ 1072.367794][T15707] try_charge_memcg+0x695/0xd30 [ 1072.367855][T15707] ? __pfx_try_charge_memcg+0x10/0x10 [ 1072.367917][T15707] ? find_held_lock+0x2b/0x80 [ 1072.367965][T15707] charge_memcg+0x8a/0x230 [ 1072.368018][T15707] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 1072.368069][T15707] __read_swap_cache_async+0x397/0x500 [ 1072.368117][T15707] ? __pfx___read_swap_cache_async+0x10/0x10 [ 1072.368162][T15707] ? __lock_acquire+0x436/0x2890 [ 1072.368193][T15707] ? lockdep_hardirqs_on+0x7c/0x110 [ 1072.368252][T15707] swap_cluster_readahead+0x432/0x770 [ 1072.368305][T15707] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1072.368353][T15707] ? __lock_acquire+0x436/0x2890 [ 1072.368386][T15707] ? _raw_spin_unlock+0x28/0x50 [ 1072.368453][T15707] ? get_vma_policy+0x242/0x3c0 [ 1072.368484][T15707] swapin_readahead+0x160/0x1220 [ 1072.368537][T15707] ? __pfx_swapin_readahead+0x10/0x10 [ 1072.368576][T15707] ? find_held_lock+0x2b/0x80 [ 1072.368614][T15707] ? swap_cache_get_folio+0x267/0x8e0 [ 1072.368647][T15707] ? swap_cache_get_folio+0x267/0x8e0 [ 1072.368681][T15707] ? swap_cache_get_folio+0x267/0x8e0 [ 1072.368719][T15707] ? swap_cache_get_folio+0x267/0x8e0 [ 1072.368753][T15707] ? swap_cache_get_folio+0x293/0x8e0 [ 1072.368790][T15707] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1072.368825][T15707] ? __pfx_get_swap_device+0x10/0x10 [ 1072.368870][T15707] ? rcu_read_unlock+0x2d/0xb0 [ 1072.368914][T15707] ? do_swap_page+0x962/0x64a0 [ 1072.368943][T15707] do_swap_page+0x962/0x64a0 [ 1072.368982][T15707] ? __lock_acquire+0x436/0x2890 [ 1072.369020][T15707] ? __pfx_do_swap_page+0x10/0x10 [ 1072.369085][T15707] ? __pfx_default_wake_function+0x10/0x10 [ 1072.369163][T15707] ? rcu_is_watching+0x12/0xc0 [ 1072.369214][T15707] ? ___pte_offset_map+0x175/0x380 [ 1072.369265][T15707] __handle_mm_fault+0x19cb/0x2bb0 [ 1072.369305][T15707] ? reacquire_held_locks+0xcd/0x1f0 [ 1072.369336][T15707] ? __pfx___handle_mm_fault+0x10/0x10 [ 1072.369375][T15707] ? lock_vma_under_rcu+0x176/0x580 [ 1072.369422][T15707] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1072.369478][T15707] handle_mm_fault+0x3fe/0xad0 [ 1072.369520][T15707] do_user_addr_fault+0x60c/0x1370 [ 1072.369565][T15707] ? rcu_is_watching+0x12/0xc0 [ 1072.369617][T15707] exc_page_fault+0x64/0xc0 [ 1072.369666][T15707] asm_exc_page_fault+0x26/0x30 [ 1072.369699][T15707] RIP: 0033:0x7f6630fb75f0 [ 1072.369726][T15707] Code: 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 <64> 48 8b 04 25 10 00 00 00 8b 90 08 03 00 00 48 8d b8 08 03 00 00 [ 1072.369757][T15707] RSP: 002b:00007ffebaa0c4d8 EFLAGS: 00010246 [ 1072.369784][T15707] RAX: 0000000000000000 RBX: 0000000000000484 RCX: 00007f6630fc2085 [ 1072.369805][T15707] RDX: 00007ffebaa0c520 RSI: 0000000000000000 RDI: 0000000000000000 [ 1072.369825][T15707] RBP: 00007ffebaa0c58c R08: 0000000000000000 R09: 0000000000000000 [ 1072.369847][T15707] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 1072.369867][T15707] R13: 00000000000927c0 R14: 0000000000104d8d R15: 00007ffebaa0c5e0 [ 1072.369912][T15707] [ 1072.808251][T15707] memory: usage 3072kB, limit 3072kB, failcnt 95995 [ 1072.825958][T15707] memory+swap: usage 104592kB, limit 9007199254740988kB, failcnt 0 [ 1073.159916][T15707] kmem: usage 2804kB, limit 9007199254740988kB, failcnt 0 [ 1073.169512][T20993] Bluetooth: hci0: command 0x0406 tx timeout [ 1073.196024][T15707] Memory cgroup stats for /syz2: [ 1073.196231][T15707] cache 0 [ 1073.221392][T15707] rss 0 [ 1073.224222][T15707] rss_huge 0 [ 1073.246351][T15707] shmem 0 [ 1073.248779][T20961] Bluetooth: hci2: command 0x0406 tx timeout [ 1073.249343][T15707] mapped_file 0 [ 1073.255550][T21346] Bluetooth: hci3: command 0x0c1a tx timeout [ 1073.265872][T20993] Bluetooth: hci4: command 0x0c1a tx timeout [ 1073.286052][T15707] dirty 0 [ 1073.304124][T15707] writeback 0 [ 1073.307632][T15707] workingset_refault_anon 9537 [ 1073.312539][T15707] workingset_refault_file 16605 [ 1073.326434][T21346] Bluetooth: hci5: command 0x0419 tx timeout [ 1073.332617][T20971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.340192][T15707] swap 103956480 [ 1073.344013][T15707] swapcached 274432 [ 1073.347607][T20971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.386069][T15707] pgpgin 1184924 [ 1073.389690][T15707] pgpgout 1202742 [ 1073.393803][T15707] pgfault 805114 [ 1073.441109][T15707] pgmajfault 4689 [ 1073.444800][T15707] inactive_anon 12288 [ 1073.458117][T21009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.459670][T15707] active_anon 262144 [ 1073.466746][T21009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.516053][T15707] inactive_file 0 [ 1073.519795][T15707] active_file 0 [ 1073.523279][T15707] unevictable 0 [ 1073.546591][T15707] hierarchical_memory_limit 3145728 [ 1073.551861][T15707] hierarchical_memsw_limit 9223372036854771712 [ 1073.586005][T15707] total_cache 0 [ 1073.589538][T15707] total_rss 0 [ 1073.592858][T15707] total_rss_huge 0 [ 1073.606358][T15707] total_shmem 0 [ 1073.609882][T15707] total_mapped_file 0 [ 1073.613924][T15707] total_dirty 0 [ 1073.625182][T15707] total_writeback 0 [ 1073.630645][T15707] total_workingset_refault_anon 9537 [ 1073.655980][T15707] total_workingset_refault_file 16605 [ 1073.685956][T15707] total_swap 103956480 [ 1073.690094][T15707] total_swapcached 274432 [ 1073.694456][T15707] total_pgpgin 1184924 [ 1073.719208][T15707] total_pgpgout 1202742 [ 1073.723457][T15707] total_pgfault 805114 [ 1073.782414][T15707] total_pgmajfault 4689 [ 1073.798917][T15707] total_inactive_anon 12288 [ 1073.826076][T15707] total_active_anon 262144 [ 1073.830560][T15707] total_inactive_file 0 [ 1073.834774][T15707] total_active_file 0 [ 1073.877776][T15707] total_unevictable 0 [ 1073.893600][T15707] anon_cost 0 [ 1073.903858][T15707] file_cost 0 [ 1073.913780][T15707] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3560,pid=20741,uid=0 [ 1074.006745][T15707] Memory cgroup out of memory: Killed process 20741 (syz.2.3560) total-vm:137244kB, anon-rss:1176kB, file-rss:55984kB, shmem-rss:0kB, UID:0 pgtables:284kB oom_score_adj:1000 [ 1075.406214][T21346] Bluetooth: hci5: command 0x0419 tx timeout [ 1077.489057][T21346] Bluetooth: hci5: command 0x0419 tx timeout [ 1078.656211][T21517] dyndbg: expected <4096 bytes into control [ 1078.990396][T21503] dyndbg: bad flag-op /, at start of /%*^[ [ 1079.039717][T21503] dyndbg: flags parse failed [ 1079.566197][T21346] Bluetooth: hci5: command 0x0419 tx timeout [ 1079.977316][T21346] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1079.993135][T21503] dyndbg: bad flag-op 1, at start of 1162 [ 1080.002917][T21503] dyndbg: flags parse failed [ 1080.502375][T21548] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1081.118428][T21554] __nla_validate_parse: 56 callbacks suppressed [ 1081.118446][T21554] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3699'. [ 1081.186216][T21548] dyndbg: expected <4096 bytes into control [ 1081.223406][T21548] dyndbg: bad flag-op /, at start of /%*^[ [ 1081.259120][T21548] dyndbg: flags parse failed [ 1081.306099][T21560] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1081.397159][T21554] team0: Port device team_slave_1 removed [ 1082.244225][T21548] dyndbg: bad flag-op 6, at start of 63 [ 1082.270331][T21548] dyndbg: flags parse failed [ 1082.816106][T21589] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1082.943644][T21596] FAULT_INJECTION: forcing a failure. [ 1082.943644][T21596] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.976046][T21596] CPU: 1 UID: 0 PID: 21596 Comm: syz.4.3709 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1082.976117][T21596] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1082.976135][T21596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1082.976154][T21596] Call Trace: [ 1082.976165][T21596] [ 1082.976178][T21596] dump_stack_lvl+0x16c/0x1f0 [ 1082.976229][T21596] should_fail_ex+0x512/0x640 [ 1082.976264][T21596] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1082.976315][T21596] should_failslab+0xc2/0x120 [ 1082.976365][T21596] kmem_cache_alloc_noprof+0x83/0x770 [ 1082.976404][T21596] ? getname_flags.part.0+0x4c/0x550 [ 1082.976448][T21596] ? getname_flags.part.0+0x4c/0x550 [ 1082.976482][T21596] getname_flags.part.0+0x4c/0x550 [ 1082.976520][T21596] getname_flags+0x93/0xf0 [ 1082.976564][T21596] do_sys_openat2+0xb9/0x290 [ 1082.976599][T21596] ? __pfx_do_sys_openat2+0x10/0x10 [ 1082.976637][T21596] ? __fget_files+0x20e/0x3c0 [ 1082.976688][T21596] __x64_sys_openat+0x174/0x210 [ 1082.976723][T21596] ? __pfx___x64_sys_openat+0x10/0x10 [ 1082.976756][T21596] ? ksys_write+0x1ac/0x250 [ 1082.976813][T21596] do_syscall_64+0xcd/0xf80 [ 1082.976864][T21596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.976895][T21596] RIP: 0033:0x7fc14298f7c9 [ 1082.976919][T21596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1082.976949][T21596] RSP: 002b:00007fc143757038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1082.976980][T21596] RAX: ffffffffffffffda RBX: 00007fc142be6090 RCX: 00007fc14298f7c9 [ 1082.977001][T21596] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1082.977021][T21596] RBP: 00007fc143757090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.977042][T21596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1082.977061][T21596] R13: 00007fc142be6128 R14: 00007fc142be6090 R15: 00007ffd4f37e6a8 [ 1082.977102][T21596] [ 1083.379072][T21589] dyndbg: expected <4096 bytes into control [ 1083.437035][T21598] dyndbg: bad flag-op /, at start of /%*^[ [ 1083.469941][T21598] dyndbg: flags parse failed [ 1084.082234][T21608] Console: switching to colour frame buffer device 4x6 [ 1084.560207][T21617] capability: warning: `syz.5.3713' uses deprecated v2 capabilities in a way that may be insecure [ 1084.607255][T21610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3711'. [ 1084.800118][T21610] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1085.296460][T21634] FAULT_INJECTION: forcing a failure. [ 1085.296460][T21634] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.326516][T21634] CPU: 1 UID: 0 PID: 21634 Comm: syz.5.3718 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1085.326570][T21634] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1085.326585][T21634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1085.326600][T21634] Call Trace: [ 1085.326608][T21634] [ 1085.326618][T21634] dump_stack_lvl+0x16c/0x1f0 [ 1085.326661][T21634] should_fail_ex+0x512/0x640 [ 1085.326689][T21634] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1085.326723][T21634] should_failslab+0xc2/0x120 [ 1085.326762][T21634] kmem_cache_alloc_noprof+0x83/0x770 [ 1085.326792][T21634] ? getname_flags.part.0+0x4c/0x550 [ 1085.326825][T21634] ? getname_flags.part.0+0x4c/0x550 [ 1085.326851][T21634] getname_flags.part.0+0x4c/0x550 [ 1085.326881][T21634] getname_flags+0x93/0xf0 [ 1085.326915][T21634] do_sys_openat2+0xb9/0x290 [ 1085.326943][T21634] ? __pfx_do_sys_openat2+0x10/0x10 [ 1085.326969][T21634] ? __pfx___up_read+0x10/0x10 [ 1085.326998][T21634] ? __do_sys_kcmp+0x36b/0xd70 [ 1085.327041][T21634] __x64_sys_openat+0x174/0x210 [ 1085.327071][T21634] ? __pfx___x64_sys_openat+0x10/0x10 [ 1085.327111][T21634] do_syscall_64+0xcd/0xf80 [ 1085.327161][T21634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.327187][T21634] RIP: 0033:0x7f920398e010 [ 1085.327207][T21634] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 1085.327232][T21634] RSP: 002b:00007f920479cf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1085.327254][T21634] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f920398e010 [ 1085.327270][T21634] RDX: 0000000000000002 RSI: 00007f920479cfa0 RDI: 00000000ffffff9c [ 1085.327286][T21634] RBP: 00007f920479cfa0 R08: 0000000000000000 R09: 00007f920479ccd6 [ 1085.327302][T21634] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1085.327317][T21634] R13: 00007f9203be6038 R14: 00007f9203be5fa0 R15: 00007ffe93669f08 [ 1085.327348][T21634] [ 1086.884523][T21659] netlink: zone id is out of range [ 1086.890074][T21659] netlink: zone id is out of range [ 1086.911823][T21659] netlink: zone id is out of range [ 1086.956010][T21659] netlink: zone id is out of range [ 1086.961206][T21659] netlink: zone id is out of range [ 1086.966524][T21659] netlink: zone id is out of range [ 1087.008378][T21659] netlink: zone id is out of range [ 1087.023319][T21659] netlink: zone id is out of range [ 1087.150341][T21659] netlink: zone id is out of range [ 1087.155528][T21659] netlink: zone id is out of range [ 1090.468659][T21692] dyndbg: expected <4096 bytes into control [ 1090.506296][T21692] dyndbg: bad flag-op /, at start of /%*^[ [ 1090.526626][T21692] dyndbg: flags parse failed [ 1090.567508][T21693] FAULT_INJECTION: forcing a failure. [ 1090.567508][T21693] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1090.617203][T21693] CPU: 1 UID: 0 PID: 21693 Comm: syz.2.3731 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1090.617277][T21693] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1090.617298][T21693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1090.617319][T21693] Call Trace: [ 1090.617331][T21693] [ 1090.617345][T21693] dump_stack_lvl+0x16c/0x1f0 [ 1090.617403][T21693] should_fail_ex+0x512/0x640 [ 1090.617449][T21693] should_fail_alloc_page+0xe7/0x130 [ 1090.617506][T21693] prepare_alloc_pages+0x401/0x670 [ 1090.617559][T21693] ? __kasan_slab_free+0x5f/0x80 [ 1090.617607][T21693] ? kmem_cache_free+0x2d8/0x770 [ 1090.617655][T21693] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1090.617699][T21693] ? do_user_addr_fault+0x60c/0x1370 [ 1090.617750][T21693] ? exc_page_fault+0x64/0xc0 [ 1090.617817][T21693] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1090.617871][T21693] ? __lock_acquire+0x436/0x2890 [ 1090.617917][T21693] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1090.617971][T21693] ? policy_nodemask+0xea/0x4e0 [ 1090.618025][T21693] alloc_pages_mpol+0x1fb/0x550 [ 1090.618077][T21693] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1090.618130][T21693] ? swap_entry_swapped+0x1df/0x290 [ 1090.618181][T21693] ? __pfx_swap_entry_swapped+0x10/0x10 [ 1090.618239][T21693] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1090.618275][T21693] __read_swap_cache_async+0x20a/0x500 [ 1090.618323][T21693] ? __pfx___read_swap_cache_async+0x10/0x10 [ 1090.618377][T21693] ? up_write+0x282/0x4e0 [ 1090.618405][T21693] ? css_rstat_updated+0x1d1/0x590 [ 1090.618433][T21693] swap_cluster_readahead+0x432/0x770 [ 1090.618471][T21693] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1090.618505][T21693] ? __lock_acquire+0x436/0x2890 [ 1090.618541][T21693] ? get_vma_policy+0x242/0x3c0 [ 1090.618565][T21693] swapin_readahead+0x160/0x1220 [ 1090.618605][T21693] ? __pfx_swapin_readahead+0x10/0x10 [ 1090.618636][T21693] ? find_held_lock+0x2b/0x80 [ 1090.618666][T21693] ? swap_cache_get_folio+0x267/0x8e0 [ 1090.618712][T21693] ? swap_cache_get_folio+0x267/0x8e0 [ 1090.618738][T21693] ? swap_cache_get_folio+0x267/0x8e0 [ 1090.618769][T21693] ? swap_cache_get_folio+0x267/0x8e0 [ 1090.618796][T21693] ? swap_cache_get_folio+0x293/0x8e0 [ 1090.618825][T21693] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1090.618852][T21693] ? __pfx_get_swap_device+0x10/0x10 [ 1090.618887][T21693] ? rcu_read_unlock+0x2d/0xb0 [ 1090.618920][T21693] ? do_swap_page+0x962/0x64a0 [ 1090.618942][T21693] do_swap_page+0x962/0x64a0 [ 1090.618971][T21693] ? __lock_acquire+0x436/0x2890 [ 1090.619000][T21693] ? __pfx_do_swap_page+0x10/0x10 [ 1090.619027][T21693] ? __pfx_default_wake_function+0x10/0x10 [ 1090.619064][T21693] ? find_held_lock+0x2b/0x80 [ 1090.619096][T21693] ? rcu_is_watching+0x12/0xc0 [ 1090.619130][T21693] ? ___pte_offset_map+0x175/0x380 [ 1090.619167][T21693] __handle_mm_fault+0x19cb/0x2bb0 [ 1090.619196][T21693] ? reacquire_held_locks+0xcd/0x1f0 [ 1090.619219][T21693] ? __pfx___handle_mm_fault+0x10/0x10 [ 1090.619248][T21693] ? lock_vma_under_rcu+0x176/0x580 [ 1090.619281][T21693] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1090.619322][T21693] handle_mm_fault+0x3fe/0xad0 [ 1090.619351][T21693] do_user_addr_fault+0x60c/0x1370 [ 1090.619383][T21693] ? rcu_is_watching+0x12/0xc0 [ 1090.619419][T21693] exc_page_fault+0x64/0xc0 [ 1090.619455][T21693] asm_exc_page_fault+0x26/0x30 [ 1090.619477][T21693] RIP: 0033:0x7f6630f3ab5b [ 1090.619496][T21693] Code: 00 00 00 0f 45 d0 85 d2 0f 85 11 06 00 00 45 85 e4 0f 88 b8 00 00 00 4c 8b a4 24 90 00 00 00 41 80 3c 24 00 0f 84 a5 00 00 00 <48> 8b 05 56 2e de 00 48 89 44 24 78 48 85 c0 0f 85 40 1a 00 00 48 [ 1090.619521][T21693] RSP: 002b:00007f6631d6e7d0 EFLAGS: 00010202 [ 1090.619539][T21693] RAX: 0000000000000001 RBX: 00007f6631d6ed30 RCX: 0000000000000000 [ 1090.619555][T21693] RDX: 0000000000000000 RSI: 00007f6631013ccc RDI: 00007f6631d6efb0 [ 1090.619570][T21693] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 1090.619584][T21693] R10: 000000000000049c R11: 0000000000000000 R12: 00007f6631013cdc [ 1090.619599][T21693] R13: 00007f6631d6eeb0 R14: 0000000000000000 R15: 00007f6631d6ed30 [ 1090.619628][T21693] [ 1090.619778][T21700] snd_virmidi snd_virmidi.0: control 61678:13:5:yª:8 is already present [ 1091.644831][T21711] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3737'. [ 1091.911380][T21711] team0: Port device team_slave_1 removed [ 1093.670570][T21758] FAULT_INJECTION: forcing a failure. [ 1093.670570][T21758] name failslab, interval 1, probability 0, space 0, times 0 [ 1093.717946][T21758] CPU: 1 UID: 0 PID: 21758 Comm: syz.4.3744 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1093.718015][T21758] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1093.718034][T21758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1093.718053][T21758] Call Trace: [ 1093.718064][T21758] [ 1093.718077][T21758] dump_stack_lvl+0x16c/0x1f0 [ 1093.718132][T21758] should_fail_ex+0x512/0x640 [ 1093.718167][T21758] ? kmem_cache_alloc_noprof+0x62/0x770 [ 1093.718211][T21758] should_failslab+0xc2/0x120 [ 1093.718261][T21758] kmem_cache_alloc_noprof+0x83/0x770 [ 1093.718299][T21758] ? security_file_alloc+0x34/0x2b0 [ 1093.718351][T21758] ? security_file_alloc+0x34/0x2b0 [ 1093.718389][T21758] security_file_alloc+0x34/0x2b0 [ 1093.718432][T21758] init_file+0x93/0x4c0 [ 1093.718467][T21758] alloc_empty_file+0x73/0x1e0 [ 1093.718505][T21758] path_openat+0xde/0x3140 [ 1093.718559][T21758] ? do_syscall_64+0xcd/0xf80 [ 1093.718608][T21758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.718654][T21758] ? __pfx_path_openat+0x10/0x10 [ 1093.718717][T21758] do_filp_open+0x20b/0x470 [ 1093.718767][T21758] ? __pfx_do_filp_open+0x10/0x10 [ 1093.718847][T21758] ? alloc_fd+0x471/0x7d0 [ 1093.718905][T21758] do_sys_openat2+0x121/0x290 [ 1093.718942][T21758] ? __pfx_do_sys_openat2+0x10/0x10 [ 1093.718984][T21758] ? __fget_files+0x20e/0x3c0 [ 1093.719037][T21758] __x64_sys_openat+0x174/0x210 [ 1093.719074][T21758] ? __pfx___x64_sys_openat+0x10/0x10 [ 1093.719110][T21758] ? ksys_write+0x1ac/0x250 [ 1093.719170][T21758] do_syscall_64+0xcd/0xf80 [ 1093.719224][T21758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.719256][T21758] RIP: 0033:0x7fc14298f7c9 [ 1093.719282][T21758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1093.719314][T21758] RSP: 002b:00007fc143757038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1093.719346][T21758] RAX: ffffffffffffffda RBX: 00007fc142be6090 RCX: 00007fc14298f7c9 [ 1093.719368][T21758] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1093.719389][T21758] RBP: 00007fc143757090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.719409][T21758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1093.719429][T21758] R13: 00007fc142be6128 R14: 00007fc142be6090 R15: 00007ffd4f37e6a8 [ 1093.719474][T21758] [ 1094.381990][T21767] dyndbg: expected <4096 bytes into control [ 1094.629101][T21761] dyndbg: bad flag-op /, at start of /%*^[ [ 1094.678823][T21761] dyndbg: flags parse failed [ 1095.364346][T21761] dyndbg: bad flag-op 1, at start of 116 [ 1095.396042][T21761] dyndbg: flags parse failed [ 1096.004621][T21784] FAULT_INJECTION: forcing a failure. [ 1096.004621][T21784] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.038498][T21784] CPU: 1 UID: 0 PID: 21784 Comm: syz.4.3749 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1096.038576][T21784] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1096.038604][T21784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1096.038626][T21784] Call Trace: [ 1096.038638][T21784] [ 1096.038652][T21784] dump_stack_lvl+0x16c/0x1f0 [ 1096.038711][T21784] should_fail_ex+0x512/0x640 [ 1096.038749][T21784] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1096.038794][T21784] should_failslab+0xc2/0x120 [ 1096.038848][T21784] __kmalloc_cache_noprof+0x80/0x800 [ 1096.038889][T21784] ? open_substream+0xec/0x9d0 [ 1096.038924][T21784] ? mark_held_locks+0x49/0x80 [ 1096.038960][T21784] ? open_substream+0xec/0x9d0 [ 1096.038992][T21784] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1096.039040][T21784] open_substream+0xec/0x9d0 [ 1096.039081][T21784] rawmidi_open_priv+0x543/0x6e0 [ 1096.039129][T21784] snd_rawmidi_open+0x4cb/0xbf0 [ 1096.039177][T21784] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 1096.039218][T21784] ? __pfx_default_wake_function+0x10/0x10 [ 1096.039269][T21784] ? soundcore_open+0x35a/0x580 [ 1096.039323][T21784] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 1096.039365][T21784] soundcore_open+0x40c/0x580 [ 1096.039419][T21784] ? __pfx_soundcore_open+0x10/0x10 [ 1096.039467][T21784] chrdev_open+0x234/0x6a0 [ 1096.039535][T21784] ? __pfx_apparmor_file_open+0x10/0x10 [ 1096.039570][T21784] ? __pfx_chrdev_open+0x10/0x10 [ 1096.039634][T21784] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1096.039698][T21784] do_dentry_open+0x748/0x1590 [ 1096.039748][T21784] ? __pfx_chrdev_open+0x10/0x10 [ 1096.039811][T21784] vfs_open+0x82/0x3f0 [ 1096.039852][T21784] path_openat+0x2078/0x3140 [ 1096.039916][T21784] ? __pfx_path_openat+0x10/0x10 [ 1096.039981][T21784] do_filp_open+0x20b/0x470 [ 1096.040033][T21784] ? __pfx_do_filp_open+0x10/0x10 [ 1096.040113][T21784] ? alloc_fd+0x471/0x7d0 [ 1096.040174][T21784] do_sys_openat2+0x121/0x290 [ 1096.040212][T21784] ? __pfx_do_sys_openat2+0x10/0x10 [ 1096.040266][T21784] __x64_sys_openat+0x174/0x210 [ 1096.040305][T21784] ? __pfx___x64_sys_openat+0x10/0x10 [ 1096.040360][T21784] do_syscall_64+0xcd/0xf80 [ 1096.040415][T21784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.040449][T21784] RIP: 0033:0x7fc14298f7c9 [ 1096.040476][T21784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1096.040509][T21784] RSP: 002b:00007fc143778038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1096.040542][T21784] RAX: ffffffffffffffda RBX: 00007fc142be5fa0 RCX: 00007fc14298f7c9 [ 1096.040564][T21784] RDX: 0000000000040002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1096.040586][T21784] RBP: 00007fc142a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1096.040615][T21784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1096.040635][T21784] R13: 00007fc142be6038 R14: 00007fc142be5fa0 R15: 00007ffd4f37e6a8 [ 1096.040679][T21784] [ 1097.018200][T21792] FAULT_INJECTION: forcing a failure. [ 1097.018200][T21792] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1097.070714][T21792] CPU: 1 UID: 0 PID: 21792 Comm: syz.6.3750 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1097.070776][T21792] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1097.070789][T21792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1097.070804][T21792] Call Trace: [ 1097.070813][T21792] [ 1097.070822][T21792] dump_stack_lvl+0x16c/0x1f0 [ 1097.070862][T21792] should_fail_ex+0x512/0x640 [ 1097.070894][T21792] get_futex_key+0x1d0/0x15f0 [ 1097.070925][T21792] ? __pfx_get_futex_key+0x10/0x10 [ 1097.070960][T21792] futex_wake+0xea/0x530 [ 1097.070995][T21792] ? __pfx_futex_wake+0x10/0x10 [ 1097.071040][T21792] do_futex+0x1e3/0x350 [ 1097.071068][T21792] ? __pfx_do_futex+0x10/0x10 [ 1097.071096][T21792] ? ktime_get_ts64+0x2d2/0x400 [ 1097.071125][T21792] __x64_sys_futex+0x1e0/0x4c0 [ 1097.071156][T21792] ? __pfx___x64_sys_futex+0x10/0x10 [ 1097.071183][T21792] ? __x64_sys_poll+0x123/0x450 [ 1097.071218][T21792] ? __pfx___x64_sys_poll+0x10/0x10 [ 1097.071268][T21792] do_syscall_64+0xcd/0xf80 [ 1097.071307][T21792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.071331][T21792] RIP: 0033:0x7f7e45b8f7c9 [ 1097.071350][T21792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1097.071374][T21792] RSP: 002b:00007f7e46af40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1097.071397][T21792] RAX: ffffffffffffffda RBX: 00007f7e45de5fa8 RCX: 00007f7e45b8f7c9 [ 1097.071413][T21792] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7e45de5fac [ 1097.071428][T21792] RBP: 00007f7e45de5fa0 R08: 00007f7e46af5000 R09: 0000000000000000 [ 1097.071443][T21792] R10: 0000000000000023 R11: 0000000000000246 R12: 0000000000000000 [ 1097.071457][T21792] R13: 00007f7e45de6038 R14: 00007ffd432da4b0 R15: 00007ffd432da598 [ 1097.071490][T21792] [ 1097.543456][T21796] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1097.567931][T21796] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1097.599027][T21796] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1097.615638][T21796] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1097.690727][T21796] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1097.706953][T21796] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1098.359127][T21797] syz.6.3750 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1098.410349][T21797] CPU: 0 UID: 0 PID: 21797 Comm: syz.6.3750 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1098.410407][T21797] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1098.410420][T21797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1098.410435][T21797] Call Trace: [ 1098.410443][T21797] [ 1098.410452][T21797] dump_stack_lvl+0x16c/0x1f0 [ 1098.410493][T21797] dump_header+0x101/0x960 [ 1098.410523][T21797] oom_kill_process+0x176/0x910 [ 1098.410553][T21797] out_of_memory+0x350/0x1700 [ 1098.410579][T21797] ? __lock_acquire+0x436/0x2890 [ 1098.410606][T21797] ? __pfx_out_of_memory+0x10/0x10 [ 1098.410641][T21797] mem_cgroup_out_of_memory+0x118/0x130 [ 1098.410671][T21797] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1098.410707][T21797] ? do_raw_spin_unlock+0x172/0x230 [ 1098.410740][T21797] try_charge_memcg+0x695/0xd30 [ 1098.410784][T21797] ? __pfx_try_charge_memcg+0x10/0x10 [ 1098.410828][T21797] ? find_held_lock+0x2b/0x80 [ 1098.410864][T21797] charge_memcg+0x8a/0x230 [ 1098.410902][T21797] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 1098.410931][T21797] __read_swap_cache_async+0x397/0x500 [ 1098.410965][T21797] ? __pfx___read_swap_cache_async+0x10/0x10 [ 1098.410997][T21797] ? mlock_drain_local+0x1f0/0x4e0 [ 1098.411034][T21797] swap_cluster_readahead+0x432/0x770 [ 1098.411071][T21797] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1098.411105][T21797] ? __lock_acquire+0x436/0x2890 [ 1098.411138][T21797] ? get_vma_policy+0x242/0x3c0 [ 1098.411164][T21797] swapin_readahead+0x160/0x1220 [ 1098.411203][T21797] ? __pfx_swapin_readahead+0x10/0x10 [ 1098.411236][T21797] ? swap_cache_get_folio+0x267/0x8e0 [ 1098.411263][T21797] ? swap_cache_get_folio+0x267/0x8e0 [ 1098.411290][T21797] ? swap_cache_get_folio+0x267/0x8e0 [ 1098.411319][T21797] ? swap_cache_get_folio+0x267/0x8e0 [ 1098.411347][T21797] ? swap_cache_get_folio+0x293/0x8e0 [ 1098.411376][T21797] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1098.411408][T21797] ? __pfx_get_swap_device+0x10/0x10 [ 1098.411443][T21797] ? rcu_read_unlock+0x2d/0xb0 [ 1098.411475][T21797] ? do_swap_page+0x962/0x64a0 [ 1098.411498][T21797] do_swap_page+0x962/0x64a0 [ 1098.411536][T21797] ? __pfx_do_swap_page+0x10/0x10 [ 1098.411564][T21797] ? __pfx_default_wake_function+0x10/0x10 [ 1098.411599][T21797] ? ___pte_offset_map+0x175/0x380 [ 1098.411633][T21797] ? pte_offset_map_ro_nolock+0x11c/0x1f0 [ 1098.411669][T21797] ? __pfx_pte_offset_map_ro_nolock+0x10/0x10 [ 1098.411707][T21797] ? __pfx_mt_find+0x10/0x10 [ 1098.411732][T21797] __collapse_huge_page_swapin+0x111/0x650 [ 1098.411763][T21797] ? __pfx___collapse_huge_page_swapin+0x10/0x10 [ 1098.411803][T21797] ? hugepage_vma_revalidate.isra.0+0x86/0x570 [ 1098.411832][T21797] collapse_huge_page+0x537/0x3420 [ 1098.411871][T21797] ? __pfx_collapse_huge_page+0x10/0x10 [ 1098.411896][T21797] ? mark_held_locks+0x49/0x80 [ 1098.411919][T21797] ? lockdep_hardirqs_on+0x7c/0x110 [ 1098.411953][T21797] ? irqentry_exit+0x1dd/0x8c0 [ 1098.411985][T21797] ? trace_irq_disable.constprop.0+0xd4/0x110 [ 1098.412031][T21797] ? find_held_lock+0x2b/0x80 [ 1098.412060][T21797] ? hpage_collapse_scan_pmd+0xd0b/0x13d0 [ 1098.412087][T21797] hpage_collapse_scan_pmd+0xd4b/0x13d0 [ 1098.412119][T21797] ? __pfx_hpage_collapse_scan_pmd+0x10/0x10 [ 1098.412151][T21797] madvise_collapse+0x6b4/0xa40 [ 1098.412180][T21797] ? __pfx_madvise_collapse+0x10/0x10 [ 1098.412203][T21797] ? finish_task_switch.isra.0+0x207/0xbd0 [ 1098.412234][T21797] ? lockdep_hardirqs_on+0x11/0x110 [ 1098.412280][T21797] madvise_vma_behavior+0xe8a/0x29e0 [ 1098.412306][T21797] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 1098.412364][T21797] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1098.412389][T21797] ? mas_prev+0x9b/0xf0 [ 1098.412418][T21797] ? __pfx_mas_prev+0x10/0x10 [ 1098.412451][T21797] ? find_vma_prev+0xd3/0x150 [ 1098.412486][T21797] ? find_held_lock+0x2b/0x80 [ 1098.412517][T21797] ? __pfx_find_vma_prev+0x10/0x10 [ 1098.412564][T21797] ? __futex_wait+0x24b/0x2f0 [ 1098.412602][T21797] madvise_walk_vmas+0x31f/0xac0 [ 1098.412632][T21797] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1098.412665][T21797] madvise_do_behavior+0x1e2/0x530 [ 1098.412689][T21797] ? futex_private_hash_put+0x160/0x1b0 [ 1098.412716][T21797] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1098.412743][T21797] ? down_read+0x13d/0x460 [ 1098.412782][T21797] do_madvise+0x176/0x240 [ 1098.412805][T21797] ? __pfx_do_madvise+0x10/0x10 [ 1098.412828][T21797] ? do_futex+0x122/0x350 [ 1098.412889][T21797] ? __sys_sendmsg+0x18c/0x220 [ 1098.412949][T21797] ? xfd_validate_state+0x61/0x180 [ 1098.412991][T21797] __x64_sys_madvise+0xa9/0x110 [ 1098.413026][T21797] ? lockdep_hardirqs_on+0x7c/0x110 [ 1098.413064][T21797] do_syscall_64+0xcd/0xf80 [ 1098.413104][T21797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.413130][T21797] RIP: 0033:0x7f7e45b8f7c9 [ 1098.413150][T21797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1098.413176][T21797] RSP: 002b:00007f7e46ad3038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1098.413198][T21797] RAX: ffffffffffffffda RBX: 00007f7e45de6090 RCX: 00007f7e45b8f7c9 [ 1098.413215][T21797] RDX: 0000000000000019 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 1098.413231][T21797] RBP: 00007f7e45c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1098.413246][T21797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1098.413261][T21797] R13: 00007f7e45de6128 R14: 00007f7e45de6090 R15: 00007ffd432da598 [ 1098.413294][T21797] [ 1098.957091][T21797] memory: usage 3072kB, limit 3072kB, failcnt 106749 [ 1098.963844][T21797] memory+swap: usage 41808kB, limit 9007199254740988kB, failcnt 0 [ 1098.972472][T21797] kmem: usage 2900kB, limit 9007199254740988kB, failcnt 0 [ 1098.979674][T21797] Memory cgroup stats for /syz2: [ 1098.979941][T21797] cache 4096 [ 1098.988228][T21797] rss 0 [ 1098.991884][T21797] rss_huge 0 [ 1098.995098][T21797] shmem 0 [ 1098.998925][T21797] mapped_file 0 [ 1099.002398][T21797] dirty 0 [ 1099.005341][T21797] writeback 0 [ 1099.008725][T20993] Bluetooth: hci0: command 0x0406 tx timeout [ 1099.014743][T21797] workingset_refault_anon 10407 [ 1099.026019][T21797] workingset_refault_file 22986 [ 1099.030912][T21797] swap 39665664 [ 1099.034377][T21797] swapcached 172032 [ 1099.052387][T21797] pgpgin 1198575 [ 1099.056985][T21797] pgpgout 1216417 [ 1099.060631][T21797] pgfault 808010 [ 1099.064247][T21797] pgmajfault 5321 [ 1099.067936][T21797] inactive_anon 172032 [ 1099.072667][T21797] active_anon 0 [ 1099.076283][T21797] inactive_file 4096 [ 1099.080186][T21797] active_file 0 [ 1099.083648][T21797] unevictable 0 [ 1099.087212][T21797] hierarchical_memory_limit 3145728 [ 1099.092415][T21797] hierarchical_memsw_limit 9223372036854771712 [ 1099.099442][T21797] total_cache 4096 [ 1099.103174][T21797] total_rss 0 [ 1099.107393][T21797] total_rss_huge 0 [ 1099.111188][T21797] total_shmem 0 [ 1099.114656][T21797] total_mapped_file 0 [ 1099.119392][T21797] total_dirty 0 [ 1099.123058][T21797] total_writeback 0 [ 1099.126985][T21797] total_workingset_refault_anon 10407 [ 1099.132384][T21797] total_workingset_refault_file 22986 [ 1099.137919][T21797] total_swap 39665664 [ 1099.141932][T21797] total_swapcached 172032 [ 1099.146368][T21797] total_pgpgin 1198575 [ 1099.150517][T21797] total_pgpgout 1216417 [ 1099.154681][T21797] total_pgfault 808010 [ 1099.158795][T21797] total_pgmajfault 5321 [ 1099.163013][T21797] total_inactive_anon 172032 [ 1099.168809][T21797] total_active_anon 0 [ 1099.173366][T21797] total_inactive_file 4096 [ 1099.178122][T21797] total_active_file 0 [ 1099.182113][T21797] total_unevictable 0 [ 1099.186239][T21797] anon_cost 0 [ 1099.189534][T21797] file_cost 0 [ 1099.192832][T21797] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3650,pid=21314,uid=0 [ 1099.210717][T21797] Memory cgroup out of memory: Killed process 21314 (syz.2.3650) total-vm:104216kB, anon-rss:1264kB, file-rss:55696kB, shmem-rss:0kB, UID:0 pgtables:208kB oom_score_adj:1000 [ 1099.521927][T21816] dyndbg: expected <4096 bytes into control [ 1099.537042][T21816] dyndbg: bad flag-op /, at start of /%*^[ [ 1099.542939][T21816] dyndbg: flags parse failed [ 1099.655663][T21346] Bluetooth: hci2: command 0x0406 tx timeout [ 1099.662012][T20993] Bluetooth: hci3: command 0x0c1a tx timeout [ 1099.692183][T21821] serio: Serial port pty6 [ 1099.736143][T21346] Bluetooth: hci4: command 0x0c1a tx timeout [ 1099.742251][T20993] Bluetooth: hci5: command 0x0419 tx timeout [ 1100.992686][T21838] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3760'. [ 1101.013782][T21838] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.119578][T21838] bridge_slave_1 (unregistering): left allmulticast mode [ 1101.146021][T21838] bridge_slave_1 (unregistering): left promiscuous mode [ 1101.162576][T21838] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.378335][T21843] FAULT_INJECTION: forcing a failure. [ 1101.378335][T21843] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.415822][T21843] CPU: 1 UID: 0 PID: 21843 Comm: syz.4.3762 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1101.415903][T21843] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1101.415929][T21843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1101.415949][T21843] Call Trace: [ 1101.415960][T21843] [ 1101.415988][T21843] dump_stack_lvl+0x16c/0x1f0 [ 1101.416045][T21843] should_fail_ex+0x512/0x640 [ 1101.416084][T21843] ? fs_reclaim_acquire+0xae/0x150 [ 1101.416139][T21843] should_failslab+0xc2/0x120 [ 1101.416189][T21843] kmem_cache_alloc_noprof+0x83/0x770 [ 1101.416230][T21843] ? __pfx_map_id_range_down+0x10/0x10 [ 1101.416277][T21843] ? security_inode_alloc+0x3b/0x2b0 [ 1101.416323][T21843] ? security_inode_alloc+0x3b/0x2b0 [ 1101.416358][T21843] security_inode_alloc+0x3b/0x2b0 [ 1101.416397][T21843] inode_init_always_gfp+0xced/0x1040 [ 1101.416452][T21843] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1101.416506][T21843] alloc_inode+0x86/0x240 [ 1101.416544][T21843] new_inode+0x22/0x1c0 [ 1101.416585][T21843] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1101.416636][T21843] mqueue_get_inode+0x2e/0xdd0 [ 1101.416687][T21843] ? sget_fc+0x808/0xc20 [ 1101.416735][T21843] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1101.416786][T21843] mqueue_fill_super+0x14d/0x260 [ 1101.416840][T21843] get_tree_nodev+0xdd/0x190 [ 1101.416891][T21843] mqueue_get_tree+0xf1/0x130 [ 1101.416944][T21843] vfs_get_tree+0x8e/0x330 [ 1101.416994][T21843] fc_mount_longterm+0x1a/0x270 [ 1101.417040][T21843] mq_init_ns+0x482/0x810 [ 1101.417081][T21843] copy_ipcs+0x3db/0x7d0 [ 1101.417121][T21843] create_new_namespaces+0x20a/0xab0 [ 1101.417169][T21843] ? security_capable+0x7e/0x260 [ 1101.417230][T21843] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1101.417282][T21843] ksys_unshare+0x45b/0xa40 [ 1101.417337][T21843] ? __pfx_ksys_unshare+0x10/0x10 [ 1101.417394][T21843] ? xfd_validate_state+0x61/0x180 [ 1101.417437][T21843] __x64_sys_unshare+0x31/0x40 [ 1101.417490][T21843] do_syscall_64+0xcd/0xf80 [ 1101.417546][T21843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.417582][T21843] RIP: 0033:0x7fc14298f7c9 [ 1101.417609][T21843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1101.417643][T21843] RSP: 002b:00007fc143778038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1101.417677][T21843] RAX: ffffffffffffffda RBX: 00007fc142be5fa0 RCX: 00007fc14298f7c9 [ 1101.417700][T21843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 1101.417722][T21843] RBP: 00007fc142a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1101.417744][T21843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1101.417766][T21843] R13: 00007fc142be6038 R14: 00007fc142be5fa0 R15: 00007ffd4f37e6a8 [ 1101.417812][T21843] [ 1101.726189][T20993] Bluetooth: hci3: command 0x0c1a tx timeout [ 1101.956215][T21856] sctp: [Deprecated]: syz.4.3766 (pid 21856) Use of int in maxseg socket option. [ 1101.956215][T21856] Use struct sctp_assoc_value instead [ 1102.214313][T21862] serio: Serial port pty6 [ 1103.401162][T21884] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3773'. [ 1104.488064][T21910] snd_virmidi snd_virmidi.0: control 61678:13:5:yª:8 is already present [ 1104.672219][T21899] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1104.679247][T21899] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1104.698300][T21899] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1104.705965][T21899] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1104.727201][T21899] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1105.785448][T21941] dyndbg: expected <4096 bytes into control [ 1105.835709][T21941] dyndbg: bad flag-op /, at start of /%*^[ [ 1105.904055][T21941] dyndbg: flags parse failed [ 1106.221088][T20993] Bluetooth: hci0: command 0x0406 tx timeout [ 1106.595359][T21958] serio: Serial port pty6 [ 1106.688073][T21346] Bluetooth: hci2: command 0x0406 tx timeout [ 1106.694138][T20993] Bluetooth: hci3: command 0x0c1a tx timeout [ 1106.766020][T20993] Bluetooth: hci4: command 0x0c1a tx timeout [ 1106.772237][T21346] Bluetooth: hci5: command 0x0419 tx timeout [ 1107.427712][T20993] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1107.446877][T20993] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1107.478974][T20993] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1107.487538][T20993] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1107.515776][T20993] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1108.021909][T21980] FAULT_INJECTION: forcing a failure. [ 1108.021909][T21980] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1108.066057][T21980] CPU: 1 UID: 0 PID: 21980 Comm: syz.6.3803 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1108.066133][T21980] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1108.066154][T21980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1108.066177][T21980] Call Trace: [ 1108.066189][T21980] [ 1108.066202][T21980] dump_stack_lvl+0x16c/0x1f0 [ 1108.066260][T21980] should_fail_ex+0x512/0x640 [ 1108.066306][T21980] get_futex_key+0x1d0/0x15f0 [ 1108.066349][T21980] ? __pfx_get_futex_key+0x10/0x10 [ 1108.066400][T21980] futex_wake+0xea/0x530 [ 1108.066452][T21980] ? __pfx_futex_wake+0x10/0x10 [ 1108.066530][T21980] do_futex+0x1e3/0x350 [ 1108.066571][T21980] ? __pfx_do_futex+0x10/0x10 [ 1108.066612][T21980] ? ktime_get_ts64+0x2d2/0x400 [ 1108.066653][T21980] __x64_sys_futex+0x1e0/0x4c0 [ 1108.066699][T21980] ? __pfx___x64_sys_futex+0x10/0x10 [ 1108.066740][T21980] ? __x64_sys_poll+0x123/0x450 [ 1108.066788][T21980] ? __pfx___x64_sys_poll+0x10/0x10 [ 1108.066850][T21980] do_syscall_64+0xcd/0xf80 [ 1108.066905][T21980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.066940][T21980] RIP: 0033:0x7f7e45b8f7c9 [ 1108.066966][T21980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1108.066999][T21980] RSP: 002b:00007f7e46af40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1108.067032][T21980] RAX: ffffffffffffffda RBX: 00007f7e45de5fa8 RCX: 00007f7e45b8f7c9 [ 1108.067054][T21980] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7e45de5fac [ 1108.067076][T21980] RBP: 00007f7e45de5fa0 R08: 00007f7e46af5000 R09: 0000000000000000 [ 1108.067098][T21980] R10: 0000000000000023 R11: 0000000000000246 R12: 0000000000000000 [ 1108.067120][T21980] R13: 00007f7e45de6038 R14: 00007ffd432da4b0 R15: 00007ffd432da598 [ 1108.067172][T21980] [ 1108.284214][T21971] chnl_net:caif_netlink_parms(): no params data found [ 1108.395203][T21983] dyndbg: expected <4096 bytes into control [ 1108.402138][T21983] dyndbg: bad flag-op /, at start of /%*^[ [ 1108.410907][T21983] dyndbg: flags parse failed [ 1108.614945][T21971] bridge0: port 1(bridge_slave_0) entered blocking state [ 1108.636169][T21971] bridge0: port 1(bridge_slave_0) entered disabled state [ 1108.674987][T21971] bridge_slave_0: entered allmulticast mode [ 1108.697921][T21971] bridge_slave_0: entered promiscuous mode [ 1108.720709][T21971] bridge0: port 2(bridge_slave_1) entered blocking state [ 1108.746157][T21971] bridge0: port 2(bridge_slave_1) entered disabled state [ 1108.758484][T21971] bridge_slave_1: entered allmulticast mode [ 1108.774217][T21971] bridge_slave_1: entered promiscuous mode [ 1108.849380][T21971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1108.880335][T21971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1109.064066][T21971] team0: Port device team_slave_0 added [ 1109.081033][T21971] team0: Port device team_slave_1 added [ 1109.217198][T21971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1109.244633][T21971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1109.285265][T21971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1109.299479][T21971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1109.308562][T21971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1109.347349][T21971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1109.569301][T20993] Bluetooth: hci1: command tx timeout [ 1109.576516][T21971] hsr_slave_0: entered promiscuous mode [ 1109.595721][T21971] hsr_slave_1: entered promiscuous mode [ 1109.606944][T21971] debugfs: 'hsr0' already exists in 'hsr' [ 1109.626469][T21971] Cannot create hsr debugfs directory [ 1110.109781][T21971] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1110.151537][T21971] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1110.200203][T21971] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1110.239384][T21971] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1110.602968][T21971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1110.641573][T21971] 8021q: adding VLAN 0 to HW filter on device team0 [ 1110.671717][T21467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.678969][T21467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1110.700719][T21467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.707998][T21467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1111.388809][T21971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1111.646294][T20993] Bluetooth: hci1: command tx timeout [ 1111.928755][T21971] veth0_vlan: entered promiscuous mode [ 1111.952874][T21971] veth1_vlan: entered promiscuous mode [ 1112.013264][T22040] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1112.021279][T21971] veth0_macvtap: entered promiscuous mode [ 1112.035262][T22040] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1112.067088][T21971] veth1_macvtap: entered promiscuous mode [ 1112.076315][T22040] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1112.107417][T22040] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1112.136897][T22040] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1112.186283][T22040] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1112.192361][T22040] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1112.247592][T21971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.271059][T21971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.303288][T22040] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1112.387244][T21345] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.422648][T21345] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.460703][T21345] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.507267][T21345] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.691997][T21570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.712096][T21570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.787889][T21347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.803633][T21347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.156734][T22062] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3800'. [ 1113.268606][T22062] team0: Port device team_slave_1 removed [ 1113.287751][T22065] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 1113.495180][T20993] Bluetooth: hci0: command 0x0406 tx timeout [ 1114.000298][T20993] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1114.056289][T20993] Bluetooth: hci2: command 0x0406 tx timeout [ 1114.065040][T22082] dyndbg: expected <4096 bytes into control [ 1114.113006][T22080] dyndbg: bad flag-op /, at start of /%*^[ [ 1114.123289][T22080] dyndbg: flags parse failed [ 1114.145583][T21346] Bluetooth: hci3: command 0x0c1a tx timeout [ 1114.156494][T20993] Bluetooth: hci4: command 0x0c1a tx timeout [ 1114.211761][T21346] Bluetooth: hci5: command 0x0419 tx timeout [ 1114.223181][T20993] Bluetooth: hci1: command 0x0419 tx timeout [ 1116.288183][T21346] Bluetooth: hci1: command 0x0419 tx timeout [ 1116.333271][T22117] dyndbg: expected <4096 bytes into control [ 1116.360389][T22117] dyndbg: bad flag-op /, at start of /%*^[ [ 1116.396086][T22117] dyndbg: flags parse failed [ 1116.523884][T22122] dyndbg: expected <4096 bytes into control [ 1116.584812][T22126] dyndbg: expected <4096 bytes into control [ 1116.606944][T22126] dyndbg: bad flag-op /, at start of /%*^[ [ 1116.632253][T22126] dyndbg: flags parse failed [ 1116.657225][T22128] dyndbg: bad flag-op /, at start of /%*^[ [ 1116.679454][T22128] dyndbg: flags parse failed [ 1117.940779][T22153] net_ratelimit: 167 callbacks suppressed [ 1117.940800][T22153] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1118.273718][T22160] snd_virmidi snd_virmidi.0: control 61678:13:5:yª:8 is already present [ 1118.366121][T21346] Bluetooth: hci1: command 0x0419 tx timeout [ 1118.869766][T22137] random: crng reseeded on system resumption [ 1118.886264][T22165] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3840'. [ 1120.235975][T22197] serio: Serial port pty6 [ 1120.422111][T22199] serio: Serial port pty6 [ 1120.446150][T21346] Bluetooth: hci1: command 0x0419 tx timeout [ 1123.472716][T22251] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1124.392751][T22265] serio: Serial port pty6 [ 1125.191738][T22274] dyndbg: expected <4096 bytes into control [ 1125.218694][T22274] dyndbg: bad flag-op /, at start of /%*^[ [ 1125.224552][T22274] dyndbg: flags parse failed [ 1126.067761][T22293] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1126.370287][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.376774][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.394545][T22299] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3872'. [ 1127.299980][T22313] serio: Serial port pty6 [ 1128.236280][T22332] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1130.730481][T22381] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1131.905264][T22396] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1132.268453][T22409] FAULT_INJECTION: forcing a failure. [ 1132.268453][T22409] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1132.291355][T22409] CPU: 0 UID: 0 PID: 22409 Comm: syz.4.3902 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1132.291430][T22409] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1132.291450][T22409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1132.291472][T22409] Call Trace: [ 1132.291483][T22409] [ 1132.291497][T22409] dump_stack_lvl+0x16c/0x1f0 [ 1132.291554][T22409] should_fail_ex+0x512/0x640 [ 1132.291599][T22409] should_fail_alloc_page+0xe7/0x130 [ 1132.291655][T22409] prepare_alloc_pages+0x401/0x670 [ 1132.291725][T22409] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1132.291784][T22409] ? __pfx___might_resched+0x10/0x10 [ 1132.291835][T22409] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1132.291884][T22409] ? rcu_is_watching+0x12/0xc0 [ 1132.291937][T22409] ? __alloc_frozen_pages_noprof+0x292/0x2430 [ 1132.291981][T22409] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1132.292035][T22409] ? is_bpf_text_address+0x94/0x1a0 [ 1132.292080][T22409] ? kernel_text_address+0x8d/0x100 [ 1132.292118][T22409] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1132.292171][T22409] ? policy_nodemask+0xea/0x4e0 [ 1132.292225][T22409] alloc_pages_mpol+0x1fb/0x550 [ 1132.292278][T22409] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1132.292341][T22409] alloc_pages_noprof+0x131/0x390 [ 1132.292394][T22409] kimage_alloc_pages+0x74/0x350 [ 1132.292448][T22409] kimage_alloc_control_pages+0x153/0xa00 [ 1132.292506][T22409] ? alloc_pages_mpol+0x25a/0x550 [ 1132.292560][T22409] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 1132.292627][T22409] machine_kexec_prepare+0x1a9/0x1720 [ 1132.292701][T22409] ? __pfx_machine_kexec_prepare+0x10/0x10 [ 1132.292759][T22409] ? __pfx_alloc_pgt_page+0x10/0x10 [ 1132.292816][T22409] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 1132.292882][T22409] do_kexec_load+0x61d/0x860 [ 1132.292915][T22409] ? __pfx_do_kexec_load+0x10/0x10 [ 1132.292952][T22409] ? _copy_from_user+0x59/0xd0 [ 1132.293011][T22409] __x64_sys_kexec_load+0x1bf/0x230 [ 1132.293049][T22409] do_syscall_64+0xcd/0xf80 [ 1132.293106][T22409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.293143][T22409] RIP: 0033:0x7fc14298f7c9 [ 1132.293171][T22409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1132.293207][T22409] RSP: 002b:00007fc143757038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 1132.293242][T22409] RAX: ffffffffffffffda RBX: 00007fc142be6090 RCX: 00007fc14298f7c9 [ 1132.293265][T22409] RDX: 0000200000000080 RSI: 0000000000000002 RDI: 00000000000000ff [ 1132.293287][T22409] RBP: 00007fc142a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1132.293309][T22409] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1132.293330][T22409] R13: 00007fc142be6128 R14: 00007fc142be6090 R15: 00007ffd4f37e6a8 [ 1132.293377][T22409] [ 1132.621192][T22413] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1132.680137][T22408] dyndbg: expected <4096 bytes into control [ 1132.688603][T22408] dyndbg: bad flag-op /, at start of /%*^[ [ 1132.694475][T22408] dyndbg: flags parse failed [ 1133.424759][T22434] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3909'. [ 1133.574915][T21346] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1134.836760][T22457] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3922'. [ 1135.169161][T22465] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1135.970909][T22475] dyndbg: expected <4096 bytes into control [ 1135.996941][T22475] dyndbg: bad flag-op /, at start of /%*^[ [ 1136.025356][T22475] dyndbg: flags parse failed [ 1136.590604][T22483] FAULT_INJECTION: forcing a failure. [ 1136.590604][T22483] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1136.646050][T22483] CPU: 1 UID: 0 PID: 22483 Comm: syz.7.3919 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1136.646128][T22483] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1136.646149][T22483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1136.646172][T22483] Call Trace: [ 1136.646184][T22483] [ 1136.646197][T22483] dump_stack_lvl+0x16c/0x1f0 [ 1136.646254][T22483] should_fail_ex+0x512/0x640 [ 1136.646300][T22483] get_futex_key+0x1d0/0x15f0 [ 1136.646344][T22483] ? __pfx_get_futex_key+0x10/0x10 [ 1136.646404][T22483] futex_wake+0xea/0x530 [ 1136.646457][T22483] ? __pfx_futex_wake+0x10/0x10 [ 1136.646523][T22483] do_futex+0x1e3/0x350 [ 1136.646563][T22483] ? __pfx_do_futex+0x10/0x10 [ 1136.646604][T22483] ? ktime_get_ts64+0x2d2/0x400 [ 1136.646645][T22483] __x64_sys_futex+0x1e0/0x4c0 [ 1136.646691][T22483] ? __pfx___x64_sys_futex+0x10/0x10 [ 1136.646730][T22483] ? __x64_sys_poll+0x123/0x450 [ 1136.646778][T22483] ? __pfx___x64_sys_poll+0x10/0x10 [ 1136.646838][T22483] do_syscall_64+0xcd/0xf80 [ 1136.646893][T22483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.646926][T22483] RIP: 0033:0x7fd43918f7c9 [ 1136.646953][T22483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1136.646987][T22483] RSP: 002b:00007fd439f470e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1136.647025][T22483] RAX: ffffffffffffffda RBX: 00007fd4393e5fa8 RCX: 00007fd43918f7c9 [ 1136.647049][T22483] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd4393e5fac [ 1136.647071][T22483] RBP: 00007fd4393e5fa0 R08: 00007fd439f48000 R09: 0000000000000000 [ 1136.647094][T22483] R10: 0000000000000023 R11: 0000000000000246 R12: 0000000000000000 [ 1136.647116][T22483] R13: 00007fd4393e6038 R14: 00007ffe812494b0 R15: 00007ffe81249598 [ 1136.647161][T22483] [ 1136.990308][T21346] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 1137.006390][T21346] Bluetooth: hci5: Invalid handle: 0x3a4a > 0x0eff [ 1137.013667][T21346] Bluetooth: hci5: unexpected subevent 0x01 length: 123 > 18 [ 1137.024608][T21346] Bluetooth: hci5: Invalid handle: 0x3a4a > 0x0eff [ 1137.314231][T22493] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3921'. [ 1138.100005][T22493] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.437411][T22493] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.695253][T22493] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.040214][T22493] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.276566][T22529] FAULT_INJECTION: forcing a failure. [ 1140.276566][T22529] name failslab, interval 1, probability 0, space 0, times 0 [ 1140.303751][T22529] CPU: 1 UID: 7 PID: 22529 Comm: syz.7.3933 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1140.303829][T22529] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1140.303850][T22529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1140.303872][T22529] Call Trace: [ 1140.303885][T22529] [ 1140.303905][T22529] dump_stack_lvl+0x16c/0x1f0 [ 1140.303965][T22529] should_fail_ex+0x512/0x640 [ 1140.304003][T22529] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 1140.304055][T22529] should_failslab+0xc2/0x120 [ 1140.304109][T22529] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 1140.304155][T22529] ? mqueue_alloc_inode+0x25/0x50 [ 1140.304215][T22529] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1140.304268][T22529] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 1140.304321][T22529] ? mqueue_alloc_inode+0x25/0x50 [ 1140.304371][T22529] ? lockdep_init_map_type+0x5c/0x270 [ 1140.304412][T22529] mqueue_alloc_inode+0x25/0x50 [ 1140.304466][T22529] alloc_inode+0x64/0x240 [ 1140.304507][T22529] new_inode+0x22/0x1c0 [ 1140.304549][T22529] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1140.304602][T22529] mqueue_get_inode+0x2e/0xdd0 [ 1140.304652][T22529] ? sget_fc+0x808/0xc20 [ 1140.304700][T22529] ? __pfx_mqueue_fill_super+0x10/0x10 [ 1140.304752][T22529] mqueue_fill_super+0x14d/0x260 [ 1140.304807][T22529] get_tree_nodev+0xdd/0x190 [ 1140.304858][T22529] mqueue_get_tree+0xf1/0x130 [ 1140.304911][T22529] vfs_get_tree+0x8e/0x330 [ 1140.304951][T22529] fc_mount_longterm+0x1a/0x270 [ 1140.304997][T22529] mq_init_ns+0x482/0x810 [ 1140.305036][T22529] copy_ipcs+0x3db/0x7d0 [ 1140.305094][T22529] create_new_namespaces+0x20a/0xab0 [ 1140.305141][T22529] ? security_capable+0x7e/0x260 [ 1140.305201][T22529] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1140.305253][T22529] ksys_unshare+0x45b/0xa40 [ 1140.305308][T22529] ? __pfx_ksys_unshare+0x10/0x10 [ 1140.305362][T22529] ? xfd_validate_state+0x61/0x180 [ 1140.305411][T22529] __x64_sys_unshare+0x31/0x40 [ 1140.305466][T22529] do_syscall_64+0xcd/0xf80 [ 1140.305523][T22529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.305558][T22529] RIP: 0033:0x7fd43918f7c9 [ 1140.305585][T22529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1140.305618][T22529] RSP: 002b:00007fd439f47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1140.305652][T22529] RAX: ffffffffffffffda RBX: 00007fd4393e5fa0 RCX: 00007fd43918f7c9 [ 1140.305676][T22529] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 1140.305697][T22529] RBP: 00007fd439213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1140.305718][T22529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1140.305739][T22529] R13: 00007fd4393e6038 R14: 00007fd4393e5fa0 R15: 00007ffe81249598 [ 1140.305786][T22529] [ 1140.599588][T22532] FAULT_INJECTION: forcing a failure. [ 1140.599588][T22532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1140.619666][T22532] CPU: 1 UID: 0 PID: 22532 Comm: syz.5.3934 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1140.619735][T22532] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1140.619753][T22532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1140.619773][T22532] Call Trace: [ 1140.619784][T22532] [ 1140.619797][T22532] dump_stack_lvl+0x16c/0x1f0 [ 1140.619850][T22532] should_fail_ex+0x512/0x640 [ 1140.619892][T22532] _copy_to_iter+0x29f/0x1710 [ 1140.619932][T22532] ? chacha_block_generic+0x211/0x330 [ 1140.619973][T22532] ? __pfx__copy_to_iter+0x10/0x10 [ 1140.620014][T22532] ? lockdep_hardirqs_on+0x7c/0x110 [ 1140.620065][T22532] ? crng_make_state+0x48e/0x6c0 [ 1140.620105][T22532] get_random_bytes_user+0x17f/0x3c0 [ 1140.620142][T22532] ? __pfx_get_random_bytes_user+0x10/0x10 [ 1140.620196][T22532] ? __mutex_unlock_slowpath+0x161/0x790 [ 1140.620258][T22532] ? import_ubuf+0x1b6/0x220 [ 1140.620295][T22532] __x64_sys_getrandom+0x183/0x290 [ 1140.620340][T22532] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 1140.620375][T22532] ? fput+0x70/0xf0 [ 1140.620422][T22532] do_syscall_64+0xcd/0xf80 [ 1140.620474][T22532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.620507][T22532] RIP: 0033:0x7f920398f7c9 [ 1140.620532][T22532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1140.620562][T22532] RSP: 002b:00007f920479d038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 1140.620594][T22532] RAX: ffffffffffffffda RBX: 00007f9203be5fa0 RCX: 00007f920398f7c9 [ 1140.620615][T22532] RDX: 0000000000000003 RSI: 0000000006000000 RDI: 0000000000000000 [ 1140.620635][T22532] RBP: 00007f920479d090 R08: 0000000000000000 R09: 0000000000000000 [ 1140.620656][T22532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1140.620675][T22532] R13: 00007f9203be6038 R14: 00007f9203be5fa0 R15: 00007ffe93669f08 [ 1140.620718][T22532] [ 1142.930481][T22560] dyndbg: expected <4096 bytes into control [ 1142.938396][T22560] dyndbg: bad flag-op /, at start of /%*^[ [ 1142.944253][T22560] dyndbg: flags parse failed [ 1143.345678][T22566] FAULT_INJECTION: forcing a failure. [ 1143.345678][T22566] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1143.359099][T22566] CPU: 0 UID: 0 PID: 22566 Comm: syz.7.3943 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1143.359175][T22566] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1143.359194][T22566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1143.359213][T22566] Call Trace: [ 1143.359223][T22566] [ 1143.359235][T22566] dump_stack_lvl+0x16c/0x1f0 [ 1143.359287][T22566] should_fail_ex+0x512/0x640 [ 1143.359328][T22566] get_futex_key+0x1d0/0x15f0 [ 1143.359366][T22566] ? __pfx_get_futex_key+0x10/0x10 [ 1143.359411][T22566] futex_wake+0xea/0x530 [ 1143.359456][T22566] ? __pfx_futex_wake+0x10/0x10 [ 1143.359515][T22566] do_futex+0x1e3/0x350 [ 1143.359549][T22566] ? __pfx_do_futex+0x10/0x10 [ 1143.359584][T22566] ? ktime_get_ts64+0x2d2/0x400 [ 1143.359621][T22566] __x64_sys_futex+0x1e0/0x4c0 [ 1143.359663][T22566] ? __pfx___x64_sys_futex+0x10/0x10 [ 1143.359697][T22566] ? __x64_sys_poll+0x123/0x450 [ 1143.359741][T22566] ? __pfx___x64_sys_poll+0x10/0x10 [ 1143.359797][T22566] do_syscall_64+0xcd/0xf80 [ 1143.359848][T22566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1143.359880][T22566] RIP: 0033:0x7fd43918f7c9 [ 1143.359904][T22566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1143.359938][T22566] RSP: 002b:00007fd439f470e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1143.359969][T22566] RAX: ffffffffffffffda RBX: 00007fd4393e5fa8 RCX: 00007fd43918f7c9 [ 1143.359990][T22566] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd4393e5fac [ 1143.360011][T22566] RBP: 00007fd4393e5fa0 R08: 00007fd439f48000 R09: 0000000000000000 [ 1143.360032][T22566] R10: 0000000000000023 R11: 0000000000000246 R12: 0000000000000000 [ 1143.360052][T22566] R13: 00007fd4393e6038 R14: 00007ffe812494b0 R15: 00007ffe81249598 [ 1143.360093][T22566] [ 1144.028555][T22576] nvme_fcloop: unknown parameter or missing value '7' [ 1144.216521][T22582] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3946'. [ 1145.067918][T22591] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3949'. [ 1145.597675][T22595] FAULT_INJECTION: forcing a failure. [ 1145.597675][T22595] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1145.646282][T22595] CPU: 1 UID: 0 PID: 22595 Comm: syz.6.3950 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1145.646355][T22595] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1145.646376][T22595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1145.646397][T22595] Call Trace: [ 1145.646408][T22595] [ 1145.646421][T22595] dump_stack_lvl+0x16c/0x1f0 [ 1145.646477][T22595] should_fail_ex+0x512/0x640 [ 1145.646522][T22595] get_futex_key+0x1d0/0x15f0 [ 1145.646565][T22595] ? __pfx_get_futex_key+0x10/0x10 [ 1145.646614][T22595] futex_wake+0xea/0x530 [ 1145.646663][T22595] ? __pfx_futex_wake+0x10/0x10 [ 1145.646727][T22595] do_futex+0x1e3/0x350 [ 1145.646767][T22595] ? __pfx_do_futex+0x10/0x10 [ 1145.646813][T22595] ? ktime_get_ts64+0x2d2/0x400 [ 1145.646854][T22595] __x64_sys_futex+0x1e0/0x4c0 [ 1145.646916][T22595] ? __pfx___x64_sys_futex+0x10/0x10 [ 1145.646953][T22595] ? __x64_sys_poll+0x123/0x450 [ 1145.647002][T22595] ? __pfx___x64_sys_poll+0x10/0x10 [ 1145.647070][T22595] do_syscall_64+0xcd/0xf80 [ 1145.647120][T22595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.647151][T22595] RIP: 0033:0x7f7e45b8f7c9 [ 1145.647180][T22595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1145.647209][T22595] RSP: 002b:00007f7e46af40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1145.647238][T22595] RAX: ffffffffffffffda RBX: 00007f7e45de5fa8 RCX: 00007f7e45b8f7c9 [ 1145.647258][T22595] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7e45de5fac [ 1145.647278][T22595] RBP: 00007f7e45de5fa0 R08: 00007f7e46af5000 R09: 0000000000000000 [ 1145.647297][T22595] R10: 0000000000000023 R11: 0000000000000246 R12: 0000000000000000 [ 1145.647316][T22595] R13: 00007f7e45de6038 R14: 00007ffd432da4b0 R15: 00007ffd432da598 [ 1145.647353][T22595] [ 1147.259141][T22614] FAULT_INJECTION: forcing a failure. [ 1147.259141][T22614] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.376056][T22614] CPU: 0 UID: 0 PID: 22614 Comm: syz.4.3953 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1147.376126][T22614] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1147.376144][T22614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1147.376164][T22614] Call Trace: [ 1147.376175][T22614] [ 1147.376188][T22614] dump_stack_lvl+0x16c/0x1f0 [ 1147.376242][T22614] should_fail_ex+0x512/0x640 [ 1147.376280][T22614] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 1147.376325][T22614] should_failslab+0xc2/0x120 [ 1147.376377][T22614] kmem_cache_alloc_node_noprof+0x86/0x800 [ 1147.376420][T22614] ? __alloc_skb+0x156/0x410 [ 1147.376478][T22614] ? __alloc_skb+0x156/0x410 [ 1147.376509][T22614] __alloc_skb+0x156/0x410 [ 1147.376562][T22614] ? __alloc_skb+0x35d/0x410 [ 1147.376598][T22614] ? __pfx___alloc_skb+0x10/0x10 [ 1147.376635][T22614] ? genl_rcv_msg+0x540/0x800 [ 1147.376662][T22614] ? genl_rcv_msg+0x4bb/0x800 [ 1147.376704][T22614] netlink_ack+0x15d/0xb80 [ 1147.376768][T22614] netlink_rcv_skb+0x332/0x420 [ 1147.376815][T22614] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1147.376848][T22614] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1147.376919][T22614] ? netlink_deliver_tap+0x1ae/0xd30 [ 1147.376970][T22614] genl_rcv+0x28/0x40 [ 1147.377016][T22614] netlink_unicast+0x5aa/0x870 [ 1147.377071][T22614] ? __pfx_netlink_unicast+0x10/0x10 [ 1147.377136][T22614] netlink_sendmsg+0x8c8/0xdd0 [ 1147.377196][T22614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1147.377249][T22614] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 1147.377312][T22614] ____sys_sendmsg+0xa5d/0xc30 [ 1147.377366][T22614] ? copy_msghdr_from_user+0x10a/0x160 [ 1147.377410][T22614] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1147.377481][T22614] ___sys_sendmsg+0x134/0x1d0 [ 1147.377527][T22614] ? __pfx____sys_sendmsg+0x10/0x10 [ 1147.377621][T22614] __sys_sendmsg+0x16d/0x220 [ 1147.377667][T22614] ? __pfx___sys_sendmsg+0x10/0x10 [ 1147.377738][T22614] do_syscall_64+0xcd/0xf80 [ 1147.377792][T22614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1147.377825][T22614] RIP: 0033:0x7fc14298f7c9 [ 1147.377851][T22614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1147.377896][T22614] RSP: 002b:00007fc143757038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1147.377929][T22614] RAX: ffffffffffffffda RBX: 00007fc142be6090 RCX: 00007fc14298f7c9 [ 1147.377952][T22614] RDX: 0000000000000000 RSI: 0000200000000cc0 RDI: 0000000000000003 [ 1147.377973][T22614] RBP: 00007fc143757090 R08: 0000000000000000 R09: 0000000000000000 [ 1147.377994][T22614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1147.378014][T22614] R13: 00007fc142be6128 R14: 00007fc142be6090 R15: 00007ffd4f37e6a8 [ 1147.378060][T22614] [ 1148.087705][T22623] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3957'. [ 1148.098933][T22623] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1148.509477][T22627] FAULT_INJECTION: forcing a failure. [ 1148.509477][T22627] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1148.564796][T22627] CPU: 0 UID: 0 PID: 22627 Comm: syz.6.3959 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1148.564869][T22627] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1148.564889][T22627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1148.564909][T22627] Call Trace: [ 1148.564921][T22627] [ 1148.564934][T22627] dump_stack_lvl+0x16c/0x1f0 [ 1148.564992][T22627] should_fail_ex+0x512/0x640 [ 1148.565038][T22627] should_fail_alloc_page+0xe7/0x130 [ 1148.565090][T22627] prepare_alloc_pages+0x401/0x670 [ 1148.565147][T22627] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1148.565197][T22627] ? __lock_acquire+0x436/0x2890 [ 1148.565229][T22627] ? kimage_alloc_pages+0x2bc/0x350 [ 1148.565281][T22627] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1148.565327][T22627] ? lock_acquire+0x179/0x330 [ 1148.565363][T22627] ? find_next_iomem_res+0x3fb/0x4b0 [ 1148.565418][T22627] ? do_raw_read_unlock+0x44/0xe0 [ 1148.565455][T22627] ? _raw_read_unlock+0x28/0x50 [ 1148.565499][T22627] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1148.565562][T22627] ? policy_nodemask+0xea/0x4e0 [ 1148.565616][T22627] alloc_pages_mpol+0x1fb/0x550 [ 1148.565667][T22627] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1148.565744][T22627] alloc_pages_noprof+0x131/0x390 [ 1148.565793][T22627] get_zeroed_page_noprof+0x18/0xb0 [ 1148.565840][T22627] machine_kexec_prepare+0xf4a/0x1720 [ 1148.565906][T22627] ? __pfx_machine_kexec_prepare+0x10/0x10 [ 1148.565961][T22627] ? __pfx_alloc_pgt_page+0x10/0x10 [ 1148.566013][T22627] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 1148.566075][T22627] do_kexec_load+0x61d/0x860 [ 1148.566106][T22627] ? __pfx_do_kexec_load+0x10/0x10 [ 1148.566138][T22627] ? _copy_from_user+0x59/0xd0 [ 1148.566177][T22627] __x64_sys_kexec_load+0x1bf/0x230 [ 1148.566210][T22627] do_syscall_64+0xcd/0xf80 [ 1148.566258][T22627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.566288][T22627] RIP: 0033:0x7f7e45b8f7c9 [ 1148.566311][T22627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1148.566342][T22627] RSP: 002b:00007f7e46ad3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 1148.566370][T22627] RAX: ffffffffffffffda RBX: 00007f7e45de6090 RCX: 00007f7e45b8f7c9 [ 1148.566391][T22627] RDX: 0000200000000080 RSI: 0000000000000002 RDI: 00000000000000ff [ 1148.566410][T22627] RBP: 00007f7e45c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1148.566429][T22627] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1148.566449][T22627] R13: 00007f7e45de6128 R14: 00007f7e45de6090 R15: 00007ffd432da598 [ 1148.566490][T22627] [ 1148.987045][T22634] snd_virmidi snd_virmidi.0: control 61678:13:5:yª:8 is already present [ 1151.480071][T22672] FAULT_INJECTION: forcing a failure. [ 1151.480071][T22672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1151.493387][T22672] CPU: 1 UID: 0 PID: 22672 Comm: syz.4.3974 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1151.493451][T22672] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1151.493467][T22672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1151.493486][T22672] Call Trace: [ 1151.493497][T22672] [ 1151.493508][T22672] dump_stack_lvl+0x16c/0x1f0 [ 1151.493568][T22672] should_fail_ex+0x512/0x640 [ 1151.493608][T22672] _copy_to_iter+0x29f/0x1710 [ 1151.493656][T22672] ? chacha_block_generic+0x211/0x330 [ 1151.493690][T22672] ? __pfx__copy_to_iter+0x10/0x10 [ 1151.493725][T22672] ? lockdep_hardirqs_on+0x7c/0x110 [ 1151.493770][T22672] ? crng_make_state+0x48e/0x6c0 [ 1151.493804][T22672] get_random_bytes_user+0x17f/0x3c0 [ 1151.493837][T22672] ? __pfx_get_random_bytes_user+0x10/0x10 [ 1151.493873][T22672] ? __mutex_unlock_slowpath+0x161/0x790 [ 1151.493928][T22672] ? import_ubuf+0x1b6/0x220 [ 1151.493959][T22672] __x64_sys_getrandom+0x183/0x290 [ 1151.493992][T22672] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 1151.494023][T22672] ? fput+0x70/0xf0 [ 1151.494065][T22672] do_syscall_64+0xcd/0xf80 [ 1151.494112][T22672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.494140][T22672] RIP: 0033:0x7fc14298f7c9 [ 1151.494163][T22672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1151.494192][T22672] RSP: 002b:00007fc143778038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 1151.494237][T22672] RAX: ffffffffffffffda RBX: 00007fc142be5fa0 RCX: 00007fc14298f7c9 [ 1151.494257][T22672] RDX: 0000000000000003 RSI: 0000000006000000 RDI: 0000000000000000 [ 1151.494277][T22672] RBP: 00007fc143778090 R08: 0000000000000000 R09: 0000000000000000 [ 1151.494296][T22672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1151.494315][T22672] R13: 00007fc142be6038 R14: 00007fc142be5fa0 R15: 00007ffd4f37e6a8 [ 1151.494356][T22672] [ 1152.994911][T22698] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3982'. [ 1153.705991][T22716] serio: Serial port pty6 [ 1153.851225][T22719] FAULT_INJECTION: forcing a failure. [ 1153.851225][T22719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1153.867823][T22719] CPU: 0 UID: 0 PID: 22719 Comm: syz.4.3987 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1153.867895][T22719] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1153.867914][T22719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1153.867934][T22719] Call Trace: [ 1153.867946][T22719] [ 1153.867959][T22719] dump_stack_lvl+0x16c/0x1f0 [ 1153.868014][T22719] should_fail_ex+0x512/0x640 [ 1153.868056][T22719] _copy_to_user+0x32/0xd0 [ 1153.868095][T22719] simple_read_from_buffer+0xcb/0x170 [ 1153.868147][T22719] proc_fail_nth_read+0x197/0x240 [ 1153.868203][T22719] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1153.868262][T22719] ? rw_verify_area+0xcf/0x6c0 [ 1153.868304][T22719] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1153.868365][T22719] vfs_read+0x1e4/0xcf0 [ 1153.868412][T22719] ? __pfx___mutex_lock+0x10/0x10 [ 1153.868468][T22719] ? __pfx_vfs_read+0x10/0x10 [ 1153.868526][T22719] ? __fget_files+0x20e/0x3c0 [ 1153.868587][T22719] ksys_read+0x12a/0x250 [ 1153.868631][T22719] ? __pfx_ksys_read+0x10/0x10 [ 1153.868689][T22719] do_syscall_64+0xcd/0xf80 [ 1153.868741][T22719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.868775][T22719] RIP: 0033:0x7fc14298f7c9 [ 1153.868800][T22719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1153.868831][T22719] RSP: 002b:00007fc143778038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1153.868863][T22719] RAX: ffffffffffffffda RBX: 00007fc142be5fa0 RCX: 00007fc14298f7c9 [ 1153.868885][T22719] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000002 [ 1153.868906][T22719] RBP: 00007fc143778090 R08: 0000000000000000 R09: 0000000000000000 [ 1153.868926][T22719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1153.868946][T22719] R13: 00007fc142be6038 R14: 00007fc142be5fa0 R15: 00007ffd4f37e6a8 [ 1153.868991][T22719] [ 1154.357722][T22724] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3989'. [ 1156.619793][T20993] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1156.644294][T20993] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1156.666150][T20993] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1156.676831][T20993] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1156.689757][T20993] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1157.278343][T22758] chnl_net:caif_netlink_parms(): no params data found [ 1157.853610][T22758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.926126][T22758] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.933612][T22758] bridge_slave_0: entered allmulticast mode [ 1157.968398][T22758] bridge_slave_0: entered promiscuous mode [ 1157.998341][T22758] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.005650][T22758] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.036013][T22758] bridge_slave_1: entered allmulticast mode [ 1158.044456][T22758] bridge_slave_1: entered promiscuous mode [ 1158.197215][T22758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1158.225175][T22758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1158.289218][T22777] FAULT_INJECTION: forcing a failure. [ 1158.289218][T22777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1158.366105][T22777] CPU: 0 UID: 0 PID: 22777 Comm: syz.6.4001 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1158.366172][T22777] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1158.366189][T22777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1158.366207][T22777] Call Trace: [ 1158.366217][T22777] [ 1158.366228][T22777] dump_stack_lvl+0x16c/0x1f0 [ 1158.366277][T22777] should_fail_ex+0x512/0x640 [ 1158.366318][T22777] _copy_from_user+0x2e/0xd0 [ 1158.366356][T22777] kstrtouint_from_user+0xd6/0x1d0 [ 1158.366402][T22777] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1158.366448][T22777] ? __lock_acquire+0x436/0x2890 [ 1158.366484][T22777] ? lock_acquire+0x179/0x330 [ 1158.366523][T22777] proc_fail_nth_write+0x83/0x220 [ 1158.366557][T22777] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1158.366600][T22777] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1158.366630][T22777] vfs_write+0x2a0/0x11d0 [ 1158.366678][T22777] ? __pfx___mutex_lock+0x10/0x10 [ 1158.366736][T22777] ? __pfx_vfs_write+0x10/0x10 [ 1158.366786][T22777] ? __fget_files+0x20e/0x3c0 [ 1158.366849][T22777] ksys_write+0x12a/0x250 [ 1158.366896][T22777] ? __pfx_ksys_write+0x10/0x10 [ 1158.366955][T22777] do_syscall_64+0xcd/0xf80 [ 1158.367011][T22777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1158.367044][T22777] RIP: 0033:0x7f7e45b8e27f [ 1158.367069][T22777] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1158.367099][T22777] RSP: 002b:00007f7e46ad3030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1158.367129][T22777] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7e45b8e27f [ 1158.367150][T22777] RDX: 0000000000000001 RSI: 00007f7e46ad30a0 RDI: 0000000000000003 [ 1158.367170][T22777] RBP: 00007f7e46ad3090 R08: 0000000000000000 R09: 0000000000000000 [ 1158.367190][T22777] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1158.367208][T22777] R13: 00007f7e45de6128 R14: 00007f7e45de6090 R15: 00007ffd432da598 [ 1158.367254][T22777] [ 1158.369145][T22758] team0: Port device team_slave_0 added [ 1158.766296][T20993] Bluetooth: hci6: command tx timeout [ 1158.873008][T22758] team0: Port device team_slave_1 added [ 1159.013711][T22758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1159.031886][T22758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1159.078700][T22758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1159.144167][T22758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1159.161444][T22758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1159.225960][T22758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1159.480651][T22758] hsr_slave_0: entered promiscuous mode [ 1159.508084][T22758] hsr_slave_1: entered promiscuous mode [ 1159.538115][T22758] debugfs: 'hsr0' already exists in 'hsr' [ 1159.557307][T22758] Cannot create hsr debugfs directory [ 1160.251439][T22799] snd_virmidi snd_virmidi.0: control 61678:13:5:yª:8 is already present [ 1160.616243][T22758] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1160.669512][T22758] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1160.808405][T22804] dyndbg: expected <4096 bytes into control [ 1160.815002][T22804] dyndbg: bad flag-op /, at start of /%*^[ [ 1160.821766][T22804] dyndbg: flags parse failed [ 1160.848704][T20993] Bluetooth: hci6: command tx timeout [ 1160.893218][T22758] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1160.963880][T22758] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1161.867739][T22758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1162.049422][T22758] 8021q: adding VLAN 0 to HW filter on device team0 [ 1162.120470][T21035] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.127735][T21035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1162.193020][T21552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.200251][T21552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1163.026190][T22836] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1163.038954][T22836] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1163.045136][T22836] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1163.045574][T20993] Bluetooth: hci6: command tx timeout [ 1163.096137][T22836] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1163.139196][T22836] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1163.166746][T22836] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1163.222072][T22836] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1163.267584][T22836] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1163.286249][T22836] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1163.316980][T22836] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1163.371964][T22758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1163.385698][T22836] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1163.392171][T22848] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4016'. [ 1164.102823][T22867] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4019'. [ 1164.148922][T22758] veth0_vlan: entered promiscuous mode [ 1164.235059][T22758] veth1_vlan: entered promiscuous mode [ 1164.479303][T22758] veth0_macvtap: entered promiscuous mode [ 1164.564414][T22758] veth1_macvtap: entered promiscuous mode [ 1164.689874][T22758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1164.746727][T22758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1164.807185][T21144] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.847376][T21144] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.856591][T21346] Bluetooth: hci0: command 0x0406 tx timeout [ 1164.870245][T21144] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.893539][T21144] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.086545][T20993] Bluetooth: hci3: command 0x0c1a tx timeout [ 1165.094841][T21346] Bluetooth: hci2: command 0x0406 tx timeout [ 1165.167598][T21346] Bluetooth: hci4: command 0x0c1a tx timeout [ 1165.234116][T21100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1165.252422][T21346] Bluetooth: hci5: command 0x0419 tx timeout [ 1165.288043][T21100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.329651][T20993] Bluetooth: hci1: command 0x0419 tx timeout [ 1165.339880][T21346] Bluetooth: hci6: command 0x0c1a tx timeout [ 1165.565058][T21144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1165.587532][T21144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1165.853441][T22887] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3997'. [ 1165.920379][T22890] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1165.973827][T22887] team0: Port device team_slave_1 removed [ 1166.336423][T22894] dyndbg: expected <4096 bytes into control [ 1166.354985][T22894] dyndbg: bad flag-op /, at start of /%*^[ [ 1166.366393][T22901] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1166.379366][T22894] dyndbg: flags parse failed [ 1167.054700][T22911] : Can't lookup blockdev [ 1167.166935][T21346] Bluetooth: hci3: command 0x0c1a tx timeout [ 1167.246951][T21346] Bluetooth: hci4: command 0x0c1a tx timeout [ 1167.404308][T22917] FAULT_INJECTION: forcing a failure. [ 1167.404308][T22917] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1167.409433][T21346] Bluetooth: hci6: command 0x0c1a tx timeout [ 1167.418542][T22917] CPU: 1 UID: 0 PID: 22917 Comm: syz.6.4031 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1167.418731][T22917] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1167.418783][T22917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1167.418841][T22917] Call Trace: [ 1167.418865][T22917] [ 1167.418904][T22917] dump_stack_lvl+0x16c/0x1f0 [ 1167.419049][T22917] should_fail_ex+0x512/0x640 [ 1167.419188][T22917] should_fail_alloc_page+0xe7/0x130 [ 1167.419358][T22917] prepare_alloc_pages+0x401/0x670 [ 1167.419506][T22917] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1167.419622][T22917] ? __lock_acquire+0x436/0x2890 [ 1167.419730][T22917] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1167.419858][T22917] ? find_held_lock+0x2b/0x80 [ 1167.419976][T22917] ? __lock_acquire+0x436/0x2890 [ 1167.420065][T22917] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1167.420202][T22917] ? policy_nodemask+0xea/0x4e0 [ 1167.420329][T22917] alloc_pages_mpol+0x1fb/0x550 [ 1167.420486][T22917] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1167.420698][T22917] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1167.420786][T22917] shmem_alloc_folio+0x135/0x160 [ 1167.420931][T22917] shmem_alloc_and_add_folio+0x494/0xc20 [ 1167.421056][T22917] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1167.421205][T22917] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 1167.421325][T22917] shmem_get_folio_gfp+0x67f/0x1610 [ 1167.421444][T22917] ? kasan_save_stack+0x42/0x60 [ 1167.421559][T22917] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1167.421654][T22917] ? kfree+0x2f8/0x6e0 [ 1167.421754][T22917] ? __x64_sys_poll+0x1a6/0x450 [ 1167.421870][T22917] ? do_syscall_64+0xcd/0xf80 [ 1167.422005][T22917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.422126][T22917] shmem_fault+0x1fe/0xa00 [ 1167.422233][T22917] ? __lock_acquire+0x436/0x2890 [ 1167.422308][T22917] ? __pfx_shmem_fault+0x10/0x10 [ 1167.422473][T22917] __do_fault+0x10d/0x490 [ 1167.422602][T22917] do_fault+0x302/0x1ad0 [ 1167.422724][T22917] ? __pfx_filemap_map_pages+0x10/0x10 [ 1167.422865][T22917] __handle_mm_fault+0x1919/0x2bb0 [ 1167.422995][T22917] ? __pfx___handle_mm_fault+0x10/0x10 [ 1167.423116][T22917] ? __pte_offset_map_lock+0x174/0x310 [ 1167.423255][T22917] ? find_held_lock+0x2b/0x80 [ 1167.423419][T22917] ? follow_page_pte+0x5cf/0x1390 [ 1167.423578][T22917] handle_mm_fault+0x3fe/0xad0 [ 1167.423693][T22917] __get_user_pages+0x54e/0x3590 [ 1167.423770][T22917] ? __pfx___get_user_pages+0x10/0x10 [ 1167.423916][T22917] faultin_page_range+0x338/0x940 [ 1167.424088][T22917] madvise_do_behavior+0x34c/0x530 [ 1167.424185][T22917] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1167.424284][T22917] ? down_read+0x13d/0x460 [ 1167.424427][T22917] do_madvise+0x176/0x240 [ 1167.424529][T22917] ? __pfx_do_madvise+0x10/0x10 [ 1167.424605][T22917] ? do_futex+0x122/0x350 [ 1167.424774][T22917] ? xfd_validate_state+0x61/0x180 [ 1167.424855][T22917] ? __pfx___x64_sys_poll+0x10/0x10 [ 1167.424997][T22917] __x64_sys_madvise+0xa9/0x110 [ 1167.425078][T22917] ? lockdep_hardirqs_on+0x7c/0x110 [ 1167.425215][T22917] do_syscall_64+0xcd/0xf80 [ 1167.425387][T22917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.425472][T22917] RIP: 0033:0x7f7e45b8f7c9 [ 1167.425538][T22917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1167.425632][T22917] RSP: 002b:00007f7e46af4038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1167.425710][T22917] RAX: ffffffffffffffda RBX: 00007f7e45de5fa0 RCX: 00007f7e45b8f7c9 [ 1167.425765][T22917] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 1167.425826][T22917] RBP: 00007f7e45c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1167.425881][T22917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1167.425933][T22917] R13: 00007f7e45de6038 R14: 00007f7e45de5fa0 R15: 00007ffd432da598 [ 1167.426047][T22917] [ 1168.659323][T22928] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4034'. [ 1168.861016][T22935] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4036'. [ 1168.894165][T22935] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1169.667746][T22947] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4041'. [ 1169.896428][T21346] Bluetooth: hci6: command 0x0c1a tx timeout [ 1170.490084][T22962] snd_virmidi snd_virmidi.0: control 61678:13:5:yª:8 is already present [ 1170.943650][T22965] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4044'. [ 1173.238880][T22996] FAULT_INJECTION: forcing a failure. [ 1173.238880][T22996] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1173.390863][T22996] CPU: 1 UID: 0 PID: 22996 Comm: syz.7.4052 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1173.390952][T22996] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1173.390974][T22996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1173.390994][T22996] Call Trace: [ 1173.391006][T22996] [ 1173.391019][T22996] dump_stack_lvl+0x16c/0x1f0 [ 1173.391071][T22996] should_fail_ex+0x512/0x640 [ 1173.391109][T22996] should_fail_alloc_page+0xe7/0x130 [ 1173.391156][T22996] prepare_alloc_pages+0x401/0x670 [ 1173.391201][T22996] ? rcu_is_watching+0x12/0xc0 [ 1173.391244][T22996] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 1173.391282][T22996] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1173.391328][T22996] ? is_bpf_text_address+0x94/0x1a0 [ 1173.391367][T22996] ? kernel_text_address+0x8d/0x100 [ 1173.391400][T22996] ? __kernel_text_address+0xd/0x40 [ 1173.391431][T22996] ? unwind_get_return_address+0x59/0xa0 [ 1173.391469][T22996] ? arch_stack_walk+0xa6/0x100 [ 1173.391506][T22996] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1173.391554][T22996] ? stack_depot_save_flags+0x29/0x9b0 [ 1173.391585][T22996] ? __pfx_stack_trace_save+0x10/0x10 [ 1173.391630][T22996] ? interleave_nodes+0x164/0x410 [ 1173.391678][T22996] ? policy_nodemask+0xea/0x4e0 [ 1173.391723][T22996] alloc_pages_mpol+0x1fb/0x550 [ 1173.391767][T22996] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1173.391819][T22996] alloc_pages_noprof+0x131/0x390 [ 1173.391864][T22996] kimage_alloc_pages+0x74/0x350 [ 1173.391921][T22996] kimage_alloc_control_pages+0x153/0xa00 [ 1173.391975][T22996] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 1173.392031][T22996] do_kexec_load+0x439/0x860 [ 1173.392058][T22996] ? __pfx_do_kexec_load+0x10/0x10 [ 1173.392088][T22996] ? _copy_from_user+0x59/0xd0 [ 1173.392122][T22996] __x64_sys_kexec_load+0x1bf/0x230 [ 1173.392152][T22996] do_syscall_64+0xcd/0xf80 [ 1173.392197][T22996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.392226][T22996] RIP: 0033:0x7fd43918f7c9 [ 1173.392248][T22996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1173.392275][T22996] RSP: 002b:00007fd439f47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 1173.392301][T22996] RAX: ffffffffffffffda RBX: 00007fd4393e5fa0 RCX: 00007fd43918f7c9 [ 1173.392321][T22996] RDX: 0000200000000080 RSI: 0000000000000002 RDI: 00000000000000ff [ 1173.392341][T22996] RBP: 00007fd439213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1173.392360][T22996] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 1173.392377][T22996] R13: 00007fd4393e6038 R14: 00007fd4393e5fa0 R15: 00007ffe81249598 [ 1173.392413][T22996] [ 1173.392567][T22996] kexec: Could not allocate control_code_buffer [ 1174.087861][T23003] serio: Serial port pty6 [ 1175.729655][T23017] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4056'. [ 1175.937460][T23023] dyndbg: expected <4096 bytes into control [ 1175.943853][T23023] dyndbg: bad flag-op /, at start of /%*^[ [ 1175.949835][T23023] dyndbg: flags parse failed [ 1176.084566][T23032] random: crng reseeded on system resumption [ 1176.646963][T23048] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4065'. [ 1177.944162][T23058] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4067'. [ 1178.107500][T23066] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4068'. [ 1178.158581][T23066] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1178.388324][T23071] FAULT_INJECTION: forcing a failure. [ 1178.388324][T23071] name failslab, interval 1, probability 0, space 0, times 0 [ 1178.472082][T23071] CPU: 1 UID: 0 PID: 23071 Comm: syz.8.4069 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1178.472156][T23071] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1178.472177][T23071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1178.472198][T23071] Call Trace: [ 1178.472209][T23071] [ 1178.472222][T23071] dump_stack_lvl+0x16c/0x1f0 [ 1178.472278][T23071] should_fail_ex+0x512/0x640 [ 1178.472316][T23071] ? fs_reclaim_acquire+0xae/0x150 [ 1178.472374][T23071] should_failslab+0xc2/0x120 [ 1178.472424][T23071] __kmalloc_noprof+0xeb/0x910 [ 1178.472458][T23071] ? __pfx_prepend_path+0x10/0x10 [ 1178.472496][T23071] ? ima_alloc_init_template+0xb5/0x720 [ 1178.472540][T23071] ? ima_alloc_init_template+0xb5/0x720 [ 1178.472583][T23071] ima_alloc_init_template+0xb5/0x720 [ 1178.472623][T23071] ? __pfx_d_absolute_path+0x10/0x10 [ 1178.472668][T23071] ima_store_measurement+0x1eb/0x5c0 [ 1178.472711][T23071] ? __pfx_ima_store_measurement+0x10/0x10 [ 1178.472751][T23071] ? vfs_getxattr_alloc+0xec/0x350 [ 1178.472811][T23071] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1178.472869][T23071] process_measurement+0x17fa/0x22d0 [ 1178.472936][T23071] ? lock_acquire+0x179/0x330 [ 1178.472967][T23071] ? __pfx_process_measurement+0x10/0x10 [ 1178.473026][T23071] ? find_held_lock+0x2b/0x80 [ 1178.473070][T23071] ? rcu_read_unlock+0x17/0x60 [ 1178.473141][T23071] ? seq_open+0x116/0x170 [ 1178.473177][T23071] ? __pfx_tracing_clock_show+0x10/0x10 [ 1178.473213][T23071] ? single_open+0x15f/0x1f0 [ 1178.473251][T23071] ? inode_to_bdi+0x9e/0x160 [ 1178.473298][T23071] ima_file_check+0xc7/0x110 [ 1178.473352][T23071] ? __pfx_ima_file_check+0x10/0x10 [ 1178.473415][T23071] security_file_post_open+0x8e/0x210 [ 1178.473459][T23071] path_openat+0xe5f/0x3140 [ 1178.473520][T23071] ? __pfx_path_openat+0x10/0x10 [ 1178.473591][T23071] do_filp_open+0x20b/0x470 [ 1178.473659][T23071] ? __pfx_do_filp_open+0x10/0x10 [ 1178.473738][T23071] ? alloc_fd+0x471/0x7d0 [ 1178.473798][T23071] do_sys_openat2+0x121/0x290 [ 1178.473834][T23071] ? __pfx_do_sys_openat2+0x10/0x10 [ 1178.473888][T23071] __x64_sys_openat+0x174/0x210 [ 1178.473927][T23071] ? __pfx___x64_sys_openat+0x10/0x10 [ 1178.473982][T23071] do_syscall_64+0xcd/0xf80 [ 1178.474034][T23071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1178.474066][T23071] RIP: 0033:0x7fcc0538f7c9 [ 1178.474092][T23071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1178.474125][T23071] RSP: 002b:00007fcc0618e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1178.474156][T23071] RAX: ffffffffffffffda RBX: 00007fcc055e6090 RCX: 00007fcc0538f7c9 [ 1178.474179][T23071] RDX: 00000000000c0002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1178.474200][T23071] RBP: 00007fcc05413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1178.474221][T23071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1178.474241][T23071] R13: 00007fcc055e6128 R14: 00007fcc055e6090 R15: 00007ffcd9976f38 [ 1178.474285][T23071] [ 1178.823895][ T31] audit: type=1804 audit(6062643713.688:28): pid=23071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.8.4069" name="/newroot/sys/kernel/tracing/trace_clock" dev="tracefs" ino=107 res=0 errno=0 [ 1179.036462][T23073] dyndbg: expected <4096 bytes into control [ 1179.042845][T23073] dyndbg: bad flag-op /, at start of /%*^[ [ 1179.092971][T23073] dyndbg: flags parse failed [ 1179.569774][T23091] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4074'. [ 1182.176051][T23121] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4080'. [ 1182.325713][T23122] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1183.326150][ T32] INFO: task kworker/u8:41:7216 blocked for more than 143 seconds. [ 1183.335927][ T32] Tainted: G U W L XTNJ syzkaller #0 [ 1183.360389][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1183.398204][ T32] task:kworker/u8:41 state:D stack:23544 pid:7216 tgid:7216 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1183.465964][ T32] Workqueue: netns cleanup_net SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1183.507232][ T32] Call Trace: [ 1183.510691][ T32] [ 1183.513675][ T32] ? __schedule+0x10b9/0x6150 [ 1183.545955][ T32] __schedule+0x1139/0x6150 [ 1183.566114][ T32] ? __pfx___schedule+0x10/0x10 [ 1183.585985][ T32] ? find_held_lock+0x2b/0x80 [ 1183.590788][ T32] ? schedule+0x2d7/0x3a0 [ 1183.625058][ T32] schedule+0xe7/0x3a0 [ 1183.639518][ T32] schedule_timeout+0x257/0x290 [ 1183.664229][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 1183.690327][ T32] ? mark_held_locks+0x49/0x80 [ 1183.716017][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 1183.735902][ T32] __wait_for_common+0x2fc/0x4e0 [ 1183.740999][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 1183.746567][ T32] ? __pfx___wait_for_common+0x10/0x10 [ 1183.752110][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 1183.766038][ T32] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 1183.772041][ T32] __flush_workqueue+0x3e2/0x1230 [ 1183.777234][ T32] ? find_held_lock+0x2b/0x80 [ 1183.782407][ T32] ? find_held_lock+0x2b/0x80 [ 1183.787276][ T32] ? __pfx___flush_workqueue+0x10/0x10 [ 1183.792873][ T32] ? __queue_work+0x431/0x10e0 [ 1183.797807][ T32] ? queue_work_on+0x12a/0x1f0 [ 1183.802632][ T32] ? lockdep_hardirqs_on+0x7c/0x110 [ 1183.825946][ T32] rxrpc_destroy_all_connections+0xed/0x440 [ 1183.831989][ T32] ? __pfx_rxrpc_destroy_all_connections+0x10/0x10 [ 1183.852075][ T32] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 1183.866660][T23107] kexec: Could not allocate control_code_buffer [ 1183.877531][ T32] rxrpc_exit_net+0x7b/0xc0 [ 1183.888216][ T32] ? __pfx_rxrpc_exit_net+0x10/0x10 [ 1183.901294][ T32] ops_undo_list+0x2ee/0xab0 [ 1183.913978][ T32] ? __pfx_ops_undo_list+0x10/0x10 [ 1183.929759][ T32] ? cleanup_net+0x347/0x830 [ 1183.944535][ T32] ? idr_destroy+0x62/0x2e0 [ 1183.995911][ T32] cleanup_net+0x41b/0x830 [ 1184.000455][ T32] ? __pfx_cleanup_net+0x10/0x10 [ 1184.056024][ T32] ? rcu_is_watching+0x12/0xc0 [ 1184.060929][ T32] process_one_work+0x9ba/0x1b20 [ 1184.106322][ T32] ? __pfx_cleanup_net+0x10/0x10 [ 1184.111392][ T32] ? __pfx_process_one_work+0x10/0x10 [ 1184.165943][ T32] ? assign_work+0x1a0/0x250 [ 1184.170727][ T32] worker_thread+0x6c8/0xf10 [ 1184.175394][ T32] ? __kthread_parkme+0x19e/0x250 [ 1184.215945][ T32] ? __pfx_worker_thread+0x10/0x10 [ 1184.221162][ T32] kthread+0x3c5/0x780 [ 1184.225290][ T32] ? __pfx_kthread+0x10/0x10 [ 1184.251248][ T32] ? rcu_is_watching+0x12/0xc0 [ 1184.256910][ T32] ? __pfx_kthread+0x10/0x10 [ 1184.261572][ T32] ret_from_fork+0x983/0xb10 [ 1184.276189][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1184.281481][ T32] ? __switch_to+0x7af/0x10d0 [ 1184.305921][ T32] ? __pfx_kthread+0x10/0x10 [ 1184.310606][ T32] ret_from_fork_asm+0x1a/0x30 [ 1184.315461][ T32] [ 1184.361066][ T32] INFO: task syz.3.3607:21019 blocked for more than 144 seconds. [ 1184.385978][ T32] Tainted: G U W L XTNJ syzkaller #0 [ 1184.392909][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1184.456647][ T32] task:syz.3.3607 state:D stack:27496 pid:21019 tgid:21018 ppid:16267 task_flags:0x400140 flags:0x00080002 [ 1184.475234][ T32] Call Trace: [ 1184.485906][ T32] [ 1184.488911][ T32] ? __schedule+0x10b9/0x6150 [ 1184.493662][ T32] __schedule+0x1139/0x6150 [ 1184.498655][ T32] ? __pfx___schedule+0x10/0x10 [ 1184.503581][ T32] ? find_held_lock+0x2b/0x80 [ 1184.515917][ T32] ? schedule+0x2d7/0x3a0 [ 1184.520345][ T32] schedule+0xe7/0x3a0 [ 1184.524568][ T32] schedule_timeout+0x257/0x290 [ 1184.545898][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 1184.551373][ T32] ? mark_held_locks+0x49/0x80 [ 1184.575897][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 1184.581202][ T32] __wait_for_common+0x2fc/0x4e0 [ 1184.596559][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 1184.602363][ T32] ? __pfx___wait_for_common+0x10/0x10 [ 1184.615940][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 1184.621231][ T32] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 1184.646003][ T32] __flush_workqueue+0x3e2/0x1230 [ 1184.651137][ T32] ? __pfx___flush_workqueue+0x10/0x10 [ 1184.666600][ T32] ? rxrpc_discard_prealloc+0xb6/0x9c0 [ 1184.672139][ T32] ? rxrpc_release_calls_on_socket+0x237/0x4e0 [ 1184.683262][ T32] rxrpc_release+0x2a7/0x6a0 [ 1184.688332][ T32] sock_release+0x91/0x1d0 [ 1184.692839][ T32] afs_open_socket+0x334/0x400 [ 1184.698082][ T32] ? __pfx_afs_open_socket+0x10/0x10 [ 1184.703759][ T32] ? proc_create_net_single_write+0x149/0x1b0 [ 1184.715908][ T32] ? __pfx_proc_create_net_single_write+0x10/0x10 [ 1184.722404][ T32] afs_net_init+0x825/0xb00 [ 1184.735954][ T32] ? __pfx_afs_net_init+0x10/0x10 [ 1184.741051][ T32] ops_init+0x1e2/0x5f0 [ 1184.745254][ T32] setup_net+0x11d/0x3a0 [ 1184.765940][ T32] ? __pfx_setup_net+0x10/0x10 [ 1184.770885][ T32] ? lockdep_init_map_type+0x5c/0x270 [ 1184.785932][ T32] ? mutex_init_lockep+0x110/0x150 [ 1184.791120][ T32] copy_net_ns+0x351/0x7c0 [ 1184.795667][ T32] create_new_namespaces+0x3ea/0xab0 [ 1184.815944][ T32] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1184.821676][ T32] ksys_unshare+0x45b/0xa40 [ 1184.826785][ T32] ? __pfx_ksys_unshare+0x10/0x10 [ 1184.831896][ T32] ? do_user_addr_fault+0x843/0x1370 [ 1184.837322][ T32] __x64_sys_unshare+0x31/0x40 [ 1184.842151][ T32] do_syscall_64+0xcd/0xf80 [ 1184.846830][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.852812][ T32] RIP: 0033:0x7fbbed18f7c9 [ 1184.857326][ T32] RSP: 002b:00007fbbedf8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1184.865786][ T32] RAX: ffffffffffffffda RBX: 00007fbbed3e5fa0 RCX: 00007fbbed18f7c9 [ 1184.873979][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1184.883589][ T32] RBP: 00007fbbed213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1184.892708][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1184.900930][ T32] R13: 00007fbbed3e6038 R14: 00007fbbed3e5fa0 R15: 00007ffdeccaae28 [ 1184.909827][ T32] [ 1184.914553][ T32] [ 1184.914553][ T32] Showing all locks held in the system: [ 1185.017412][ T32] 1 lock held by khungtaskd/32: [ 1185.022342][ T32] #0: ffffffff8e3c9520 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1185.066051][ T32] 3 locks held by kworker/0:11/7057: [ 1185.071434][ T32] #0: ffff8880b843add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1185.116020][ T32] #1: ffff8880b8424608 (psi_seq){-.-.}-{0:0}, at: __schedule+0x19b1/0x6150 [ 1185.124870][ T32] #2: ffff8880b84262d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x127/0x1d0 [ 1185.167914][ T32] 3 locks held by kworker/u8:41/7216: [ 1185.173368][ T32] #0: ffff88801badf148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 1185.205922][ T32] #1: ffffc9000bb77c90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 1185.225977][ T32] #2: ffffffff9012ecd0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x830 [ 1185.235524][ T32] 2 locks held by getty/19709: [ 1185.255935][ T32] #0: ffff8880354b00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1185.285914][ T32] #1: ffffc9000c5e72f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 1185.315939][ T32] 3 locks held by kworker/u11:7/20996: [ 1185.321486][ T32] #0: ffff88813ff69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 1185.355953][ T32] #1: ffffc90004a17c90 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 1185.395956][ T32] #2: ffffffff901454a8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1185.405225][ T32] 1 lock held by syz.3.3607/21019: [ 1185.456009][ T32] #0: ffffffff9012ecd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0 [ 1185.465565][ T32] 1 lock held by syz.1.3636/21195: [ 1185.496106][ T32] #0: ffff88805903e3c8 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 1185.524010][ T32] 2 locks held by syz-executor/21394: [ 1185.549726][ T32] #0: ffffffff901454a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1185.575936][ T32] #1: ffffffff8e3d4c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1185.590803][ T32] 1 lock held by syz.2.3740/21731: [ 1185.596311][ T32] #0: ffffffff9012ecd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0 [ 1185.607353][ T32] 1 lock held by syz.4.3807/22007: [ 1185.612530][ T32] 1 lock held by syz.5.3936/22546: [ 1185.618933][ T32] #0: ffffffff9012ecd0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x333/0x7c0 [ 1185.629239][ T32] 1 lock held by syz.7.4073/23088: [ 1185.634399][ T32] #0: ffffffff901454a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1185.643961][ T32] 1 lock held by syz.8.4077/23107: [ 1185.650158][ T32] #0: ffffffff901454a8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1185.669598][ T32] [ 1185.671995][ T32] ============================================= [ 1185.671995][ T32] [ 1185.681154][ T32] NMI backtrace for cpu 1 [ 1185.681178][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1185.681236][ T32] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1185.681253][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1185.681270][ T32] Call Trace: [ 1185.681279][ T32] [ 1185.681291][ T32] dump_stack_lvl+0x116/0x1f0 [ 1185.681339][ T32] nmi_cpu_backtrace+0x27b/0x390 [ 1185.681374][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1185.681404][ T32] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1185.681442][ T32] sys_info+0x133/0x180 [ 1185.681469][ T32] watchdog+0xe66/0x1180 [ 1185.681520][ T32] ? rcu_is_watching+0x12/0xc0 [ 1185.681560][ T32] ? __pfx_watchdog+0x10/0x10 [ 1185.681601][ T32] ? lockdep_hardirqs_on+0x7c/0x110 [ 1185.681647][ T32] ? __kthread_parkme+0x19e/0x250 [ 1185.681691][ T32] ? __pfx_watchdog+0x10/0x10 [ 1185.681760][ T32] kthread+0x3c5/0x780 [ 1185.681789][ T32] ? __pfx_kthread+0x10/0x10 [ 1185.681820][ T32] ? rcu_is_watching+0x12/0xc0 [ 1185.681859][ T32] ? __pfx_kthread+0x10/0x10 [ 1185.681889][ T32] ret_from_fork+0x983/0xb10 [ 1185.681919][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1185.681951][ T32] ? __switch_to+0x7af/0x10d0 [ 1185.681989][ T32] ? __pfx_kthread+0x10/0x10 [ 1185.682020][ T32] ret_from_fork_asm+0x1a/0x30 [ 1185.682081][ T32] [ 1185.682091][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1185.832056][ C0] NMI backtrace for cpu 0 [ 1185.832081][ C0] CPU: 0 UID: 0 PID: 7057 Comm: kworker/0:11 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1185.832133][ C0] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1185.832148][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1185.832166][ C0] Workqueue: events free_obj_work [ 1185.832207][ C0] RIP: 0010:stack_trace_consume_entry+0x26/0x170 [ 1185.832253][ C0] Code: 90 90 90 90 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 55 53 48 89 fb 48 83 c7 10 48 89 fa 48 c1 ea 03 48 83 ec 08 0f b6 04 02 <84> c0 74 08 3c 03 0f 8e e7 00 00 00 48 8d 7b 08 8b 6b 10 48 b8 00 [ 1185.832278][ C0] RSP: 0018:ffffc9000bb176c0 EFLAGS: 00000286 [ 1185.832298][ C0] RAX: 0000000000000000 RBX: ffffc9000bb177a0 RCX: ffffc9000bb17778 [ 1185.832316][ C0] RDX: 1ffff92001762ef6 RSI: ffffffff81a8fc9e RDI: ffffc9000bb177b0 [ 1185.832334][ C0] RBP: ffffc9000bb17770 R08: 0000000000000001 R09: 0000000077c2901c [ 1185.832351][ C0] R10: 0000000000000002 R11: 000000000000633f R12: ffffffff81a8f9f0 [ 1185.832368][ C0] R13: ffffc9000bb177a0 R14: 0000000000000000 R15: ffff88802d650000 [ 1185.832385][ C0] FS: 0000000000000000(0000) GS:ffff8881248fc000(0000) knlGS:0000000000000000 [ 1185.832409][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1185.832427][ C0] CR2: 000055cee1db5000 CR3: 000000007d1ca000 CR4: 00000000003526f0 [ 1185.832445][ C0] Call Trace: [ 1185.832453][ C0] [ 1185.832462][ C0] ? unwind_get_return_address+0x59/0xa0 [ 1185.832499][ C0] arch_stack_walk+0x88/0x100 [ 1185.832533][ C0] ? stack_trace_save+0x8e/0xc0 [ 1185.832576][ C0] stack_trace_save+0x8e/0xc0 [ 1185.832616][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1185.832663][ C0] kasan_save_stack+0x33/0x60 [ 1185.832729][ C0] kasan_save_track+0x14/0x30 [ 1185.832765][ C0] kasan_save_free_info+0x3b/0x60 [ 1185.832793][ C0] __kasan_slab_free+0x5f/0x80 [ 1185.832831][ C0] kmem_cache_free+0x2d8/0x770 [ 1185.832864][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 1185.832893][ C0] ? free_object_list.isra.0+0xf8/0x2a0 [ 1185.832935][ C0] ? free_object_list.isra.0+0xf8/0x2a0 [ 1185.832989][ C0] free_object_list.isra.0+0xf8/0x2a0 [ 1185.833027][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1185.833068][ C0] free_obj_work+0x19d/0x3d0 [ 1185.833107][ C0] ? __pfx_free_obj_work+0x10/0x10 [ 1185.833147][ C0] ? rcu_is_watching+0x12/0xc0 [ 1185.833186][ C0] process_one_work+0x9ba/0x1b20 [ 1185.833223][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1185.833258][ C0] ? assign_work+0x1a0/0x250 [ 1185.833286][ C0] worker_thread+0x6c8/0xf10 [ 1185.833319][ C0] ? __kthread_parkme+0x19e/0x250 [ 1185.833359][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1185.833387][ C0] kthread+0x3c5/0x780 [ 1185.833412][ C0] ? __pfx_kthread+0x10/0x10 [ 1185.833439][ C0] ? rcu_is_watching+0x12/0xc0 [ 1185.833475][ C0] ? __pfx_kthread+0x10/0x10 [ 1185.833500][ C0] ret_from_fork+0x983/0xb10 [ 1185.833526][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1185.833553][ C0] ? rcu_is_watching+0x12/0xc0 [ 1185.833588][ C0] ? __switch_to+0x7af/0x10d0 [ 1185.833621][ C0] ? __pfx_kthread+0x10/0x10 [ 1185.833647][ C0] ret_from_fork_asm+0x1a/0x30 [ 1185.833695][ C0] [ 1186.154844][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1186.161758][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1186.172516][ T32] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1186.182613][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1186.192696][ T32] Call Trace: [ 1186.195998][ T32] [ 1186.198980][ T32] dump_stack_lvl+0x3d/0x1f0 [ 1186.203606][ T32] vpanic+0x640/0x6f0 [ 1186.207630][ T32] panic+0xca/0xd0 [ 1186.211401][ T32] ? __pfx_panic+0x10/0x10 [ 1186.215898][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1186.221926][ T32] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 1186.228111][ T32] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 1186.234327][ T32] ? watchdog+0xe83/0x1180 [ 1186.238817][ T32] ? watchdog+0xe76/0x1180 [ 1186.243293][ T32] watchdog+0xe94/0x1180 [ 1186.247602][ T32] ? rcu_is_watching+0x12/0xc0 [ 1186.252418][ T32] ? __pfx_watchdog+0x10/0x10 [ 1186.257139][ T32] ? lockdep_hardirqs_on+0x7c/0x110 [ 1186.262407][ T32] ? __kthread_parkme+0x19e/0x250 [ 1186.267485][ T32] ? __pfx_watchdog+0x10/0x10 [ 1186.272213][ T32] kthread+0x3c5/0x780 [ 1186.276324][ T32] ? __pfx_kthread+0x10/0x10 [ 1186.280960][ T32] ? rcu_is_watching+0x12/0xc0 [ 1186.285774][ T32] ? __pfx_kthread+0x10/0x10 [ 1186.290400][ T32] ret_from_fork+0x983/0xb10 [ 1186.295025][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1186.300171][ T32] ? __switch_to+0x7af/0x10d0 [ 1186.304893][ T32] ? __pfx_kthread+0x10/0x10 [ 1186.309517][ T32] ret_from_fork_asm+0x1a/0x30 [ 1186.314400][ T32] [ 1186.318034][ T32] Kernel Offset: disabled [ 1186.322371][ T32] Rebooting in 86400 seconds..