last executing test programs: 3m4.158898252s ago: executing program 32 (id=2680): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x7fff) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/gid_map\x00', 0x8000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x0, 0x0) r2 = socket(0x3, 0x2, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) sendfile$auto(r3, r3, 0x0, 0xa) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) read$auto(0x3, 0x0, 0x80) r5 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r5, 0x0, 0x9) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0xfd76}, 0x1, 0x0, 0x0, 0x24008055}, 0x40) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002dbd7000ffdbdf25010000006aca63f464409764d87329a5046a42178334fad42fc4ffb2872547fa179654f2d54f9465eafec03f5a841d29d7cca212790646968df858045f8d85a03ed2b42d27c09a9b788f3ad8d2c1043d27b6bf03260a5b93c4f75a05301bbe874f19fcf64d5135be5f292bd80a2fea67bf92d35e6683725859e4b23cb03494fb4752ef916971c3e85d09e1faddaebf86cc843511c72497888ec792816b70680aa66b138c6b1bb898ec78d60ce75d12516b8b81c034892cd3668684f9c38752dec998ede0"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x80000000006}, 0x1, 0x0, 0x1, 0xa}, 0x1007}, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x1, 0x8, 0x400}, 0x9, 0x0) 2m38.315486073s ago: executing program 0 (id=2786): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x1, 0x84) shutdown$auto(0x200000003, 0x2) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xd3, 0x0) chown$auto(&(0x7f0000000000)='}[,&*}\x00', 0xffffffffffffffff, 0x0) uname$auto(0x0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @private=0xa010100}, 0x54) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3b, 0x2, 0x0, 0x7, 0x8006, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0xfffc, 0x80, 0x7, 0x40000, 0x7, 0x5, 0x200, 0x0, 0x100, 0x0, 0x7, 0x0, 0x0, 0x0, [0x49, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffdffffffffffffc, 0x8, 0x0, 0x0, 0x0, 0x8000020, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0xe]}, 0x202, 0xd) epoll_create$auto(0x9) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) 2m37.196619259s ago: executing program 0 (id=2792): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x203e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x100) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f00000001c0)=@link_update={r1, @new_map_fd, 0x91a, @old_map_fd=r0}, 0x3) write$auto(0x3, 0x0, 0x5) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0xc, 0x24, 0x1, 0xffffffffffffffff, 0x0, 0x5}, 0x4f4) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/018/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000280)={0x23, 0x1, 0xfffe, 0xc, 0x0, 0x7fb, 0x0}) capset$auto(0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) io_uring_setup$auto(0x6, 0x0) 2m21.544613083s ago: executing program 33 (id=2792): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x203e2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x100) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f00000001c0)=@link_update={r1, @new_map_fd, 0x91a, @old_map_fd=r0}, 0x3) write$auto(0x3, 0x0, 0x5) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0xc, 0x24, 0x1, 0xffffffffffffffff, 0x0, 0x5}, 0x4f4) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/018/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000280)={0x23, 0x1, 0xfffe, 0xc, 0x0, 0x7fb, 0x0}) capset$auto(0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) io_uring_setup$auto(0x6, 0x0) 1m55.019915607s ago: executing program 34 (id=2880): mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}]}, 0x1c}}, 0x4000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) r2 = socket(0x1d, 0x3, 0x1) getsockname$auto(r2, 0x0, 0x0) socket(0x29, 0x2, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0x9}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0x8d}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x4}, @NL80211_ATTR_TDLS_SUPPORT={0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}]}, 0x38}}, 0x80) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/est_cpulist\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x0) io_uring_setup$auto(0x3, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) r6 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x115) copy_file_range$auto(r5, 0x0, r6, 0x0, 0x2400000000, 0x0) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/compact_memory\x00', 0x80801, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r7, 0x0, 0x0) open_tree_attr$auto(0xffffffffffffff9c, 0x0, 0x100, &(0x7f00000000c0)={0x3, 0x0, 0x7fff, @raw=0x5}, 0x8) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m49.844680831s ago: executing program 35 (id=2900): ioctl$auto_VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000000)={0x7fffffff, 0xffffffffffffffff}) getsockopt$auto_SO_TIMESTAMP_OLD(r0, 0x66b9, 0x1d, &(0x7f0000000040)='\x7f!]\x00', &(0x7f0000000080)=0x8) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/029/001\x00', 0x40000, 0x0) ioctl$auto_BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000000100)={@raw=0x9a, "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"}) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), r0) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000001340)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001300)={&(0x7f0000001180)={0x164, r2, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_TX_RATES={0xef, 0x5a, 0x0, 0x1, [@typed={0xc0, 0xfe, 0x0, 0x0, @binary="55afc4013b93cd3f5984c710fc088e809e96c15bc13a2f461abe5c66969ad24c4cb2a774ceedad9318d4e1298d2eabc3689934ab6677515556e3012ede86f424c7cd0bd7fe7e7035d2d564fd2c1cc2c19ba93c118b5f1422628a6373dbff83309d1350720dc92766b7c333acdff050b608c07813c2bc9b59a436292453d9b238287d28c2d325ccfc59b4cc465960010321bfc43cfa101e81dc402660aa5912e578765dc67bb0f48d6909b077915a3ce66986651e9e57cc97ac0fac9a"}, @generic="475c8d78e8d3f31c5b9e90d363e2dc5b65fd33f62aa2f99de5ca3f6fa85d2846f3e115568997078252ed02"]}, @NL80211_ATTR_MLO_TTLM_DLINK={0x2a, 0x148, "5662ed0df200acf207e8d767b0b495024f8ed6055d2c953ee87adab404ac27d44e28acbef023"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}, @NL80211_ATTR_EMA_RNR_ELEMS={0x14, 0x145, 0x0, 0x1, [@typed={0x8, 0x4d, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x10a, 0x0, 0x0, @fd=r0}]}, @NL80211_ATTR_STA_FLAGS={0x18, 0x11, 0x0, 0x1, [@typed={0x14, 0x42, 0x0, 0x0, @ipv6=@remote}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x40}, 0x44000) r3 = open(&(0x7f0000001380)='./file0\x00', 0x4000, 0x98c66a49e00feea3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000013c0)='./file0\x00', 0x88400, 0x0) fsconfig$auto_SHMEM_HUGE_ADVISE(r3, 0x2, &(0x7f0000001400)='\x00', &(0x7f0000001440)="967fee2eb2951c20f8e2085c4fe857cab4096cfdc6c2ff50f975e4f99ce0a56545c182eb8a782c3e057f86cd7c8aa3f1aa1bbe85b4faa1c0ecc0812546a568c2b8b0deec5e2eb2782d6b880da0ed7a2d78ca20ea49c36d81c84e9137115555ffd7e36c6788bda3033b244cfe16d6dad991f788667dbe7fdd91292458beff91b5bb1210f6e2f915", 0x3) setsockopt$auto_SO_SNDTIMEO_NEW(r4, 0x5, 0x43, &(0x7f0000001500)=']\x00', 0x100) r5 = ioctl$auto_TIOCGPTPEER(r3, 0x5441, 0x0) read$auto_safesetid_gid_file_fops_securityfs(r5, &(0x7f0000001540)=""/32, 0x20) pwritev$auto(r5, &(0x7f0000001680)={&(0x7f0000001580)="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", 0x5}, 0x100, 0x0, 0x3) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000016c0)='/sys/devices/platform/vhci_hcd.13/usb35/power/runtime_suspended_time\x00', 0x482d00, 0x0) ftruncate$auto(r3, 0x8) getsockopt$auto_SO_BUF_LOCK(r4, 0xfff, 0x48, &(0x7f0000001740)=']\x00', &(0x7f0000001780)=0xa) recvmmsg$auto(r6, &(0x7f0000001a40)={{&(0x7f00000017c0)="552482bb80ac7e10815157b93542163ae304eac2d28141ae7f91ed9a6775fc192f782b83d9e3e2a7996e29d0becb8f0692fbd8758b8b94ce4511eda266474e2922815a8722bfa586d88783982e3debd3a627b0049045165dcbe1d10fc4b46911eceea9654ab170cfcb9ae96ed1d7fdeb4ad203321e8fba35184e7191da605fd041f2e095b5931453d3cb6851551b246f03d63cdc5151233a027652ebdb1c8320a775a26472d7a98350216b4c722f3c3142dd8b4019726d6820b99e38963a60dd1cc7b7e617078efe9379e6df8ea12b03bb8127461e4f4bbf2a5d74c1ed", 0x1, &(0x7f0000001900)={&(0x7f00000018c0)="3528e50b3a6b5be5ee02a813ff15c07bd9308c79e46ff2973b0c567aae73153c98011e7d539295b6d21da1e60e5decbc9e945f163240d28ef19e14", 0xc78}, 0x9, &(0x7f0000001940)="31183f6584258f3bb23f6f03646e8c58fff74986356c9126e6a4e72cff25493d1ecc0f1b3da3ec3e8d10f13c9eff72517da8d360395b4213c85cd903313d972d7cc3f0f77e92cb536e1860a4271ac940dd3681f81917b802cb64e038a4ae6ef489a3519acba733ce34a11b53720fbd3993988aeb45890fa7bfb523ba70524b810aab080d705a5f5da9a78c198efd88db8e84bc48bd167bc9bd3e4e0ea2557da7f69fc210bc5e3ae8b513c27c0c495320b8a310e55a4bfdd04521249b0b1879ede8ffccf9e3d7d42d4e39fb", 0x8, 0xf}}, 0x9, 0xc448, &(0x7f0000001a80)={0x6, 0x4}) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001b00), r5) sendmsg$auto_NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x28, r7, 0x30, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) prctl$auto_PR_SET_TSC(0x1a, 0x4, 0x100000001, 0xc, 0x16) sendmsg$auto_NL80211_CMD_LEAVE_MESH(r3, &(0x7f00000020c0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002080)={&(0x7f0000001c40)={0x42c, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x5}, @NL80211_ATTR_SAE_PASSWORD={0x57, 0x115, "bfa07db5dc773892a2a572f14e3c89de2acd61657790bc7a4dc1ac9d210b48987787e734fd0e90756e5d55ae7db09e5b664f1ff2f0dc0d3502f12fbf76ff1c8cf3113852bcc90c1e07c800f008156735eaaabb"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "91a593a1c110"}, @NL80211_ATTR_AUTH_DATA={0x6f, 0x9c, "14e821ddd45c98b3cfd75c4e48c30923b7081a6941c2d4e7b897dc9c92ba3f9074fa6d6c51c1f4d04d8d98fd540695ab01814e7f935be4ca6541a21b84c5e09e3aa833c233b7f224025b65f8e864e4ad8510bf41099429ed6a0bebf8013ee55090f667c6ffca89f1b73d74"}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0xfffffff7}, @NL80211_ATTR_FTM_RESPONDER={0x324, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x62, 0x2, "f2ca52e09afa9632e89782de8ec8326161827783ee18443e0e7ae78d196a90519fb2bc48d171d632de7199e00e316e0f713f7fc9d25e4ad94026f058dc513a8b9bf8101ba8c0d7d1535cd72f0208c9d2683ea8169ee5c8bdb257253db7e9"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x52, 0x2, "2b2f488ee0495b8c1ddb6503e8a61bd7e34234fedcd17dbd3698425b62eab4c55d1c66b7230740370ecbf9b201aad1aed2841f02f38e6099681d6771d9bea83b9038f4f77eaa97e056e356e66795"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xcb, 0x3, "75f298a3e18a968803d8d6f79e415a31017b8f15f5be3aff6308edb22ed5a7e664d3db5a13066a2c3c38304ae70a90b9b19bc3f71fdaa86b2e64877abf9f1f9f797b034c903e9be0e77f2afe9fbd0572b6aae070a52c61e5f6a82eb29f6970bbec08826f188e5075aae622efa23f15797fae830eaeea3c63cc8feca475f54cb1b2963219f6c8f28635a832d1569795a6f758e86e24cc3dd087fb3642c810a0d48cdfcc68b33f48395ec15acd57cfcdbda2f852400ecbadfe6b5881ed2fc34d5752242ffa02b1a3"}, @NL80211_FTM_RESP_ATTR_LCI={0xfb, 0x2, "45df7c6d334c3de5049ab43197b6a66b20a730b2492c1521a412f3cf9b959c5a4d27e8d8da352fa17146b348b7b5e71fe347ee7dfde7bfc2762986a9ed8f717686495a16b4a9f11ec0b5c96eedbf197c15b6cab54a67724307fe0887c0f5cd97176abb4c8b7237af99256bccad2bb7535b52ae81e8518f1d2eae00da6509c83f337b8343e045eeabc361c185b9d33261f1bd65daad3bd69e14c5c9a32d3e72e07305e4da728e5b11908f5afa761956693fe0027166c083a20e857756bcb505c40479a59cdd7be09526e5518788cdcbedc97e3e7a367637562e9f52fe7f245b0c4fae4e746de6d24390e8ec1b0a2b3e2e02ac2f3bd86171"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x8b, 0x2, "8736b7e2c9993c539d355506b76cd95d48359c6e28d3ff55ef001679f99e946867f088b4c646a49c2705657730518f0fd4d4914c23cced0a55e129f3c052fa03672428b4d1e8340fdc11c657d5e3bd09a6fb8a122e17619b631cec9246fa8d682028133409f02863881cab2ba718d002ad040e0e39c3e85f56000c9fc92c4b51557eff6c06a96e"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x6}]}, 0x42c}}, 0x0) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r5, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x80000058}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x1c, r2, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x5}]}, 0x1c}}, 0x1) prctl$auto_PR_SET_TSC(0x1a, 0x1, 0x101, 0x3, 0x7) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002240), r0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000002740)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002700)={&(0x7f0000002280)={0x474, r8, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x42e, 0x3, 0x0, 0x1, [@nested={0x111, 0x45, 0x0, 0x1, [@generic="891455bf4c67abb95ec9aac8793d90a539ca28febd83605cf1c80298b7be1c725b6087b89424f1552841e54616c383c84fd539e1c7f486b560bf22c5d8df8f3afd35265795d42b435da8835c62e60010a5fe8eac22f32c84822464326b362eeaa99975b6fcb17f38d1736417f8a4cada0e184e0999bb88a1e8c1d5eed7197ddd38941f4fb8897c8ec559d65ac17bb65e05c875bf24ff01d1ac162a5f3e9705b2143545286116aa34aaf3c173cd29593257fd6bdf955c4d11d0ec022b3c09fb2414f86f9123cb97ccc73a289af9183031293ee733fa1d96eb912920b290e7d0479f736a1973edc302a2a416584eb1ac31b4", @nested={0x4, 0x144}, @typed={0x8, 0x56, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x147}, @typed={0x8, 0x7d, 0x0, 0x0, @fd=r3}, @generic, @nested={0x4, 0x106}]}, @nested={0x119, 0x59, 0x0, 0x1, [@generic="5d097bc66fe96f9c348b2fb573f706dc21e2a80342a4f90c9f49f42dfb9d0e1fb7bf57fd1cace6ac81dd97de46bbac4679c50beb432030c96524986df6", @typed={0x8, 0x4a, 0x0, 0x0, @fd=r3}, @typed={0xcb, 0x10d, 0x0, 0x0, @binary="ba497954d2182e2cbc1dd1d43ec6d9aa6c4bb1f404d4d17a9f7aa34c47399cb0715c480ef936971b57cee734bac0cb0679d570e5b9800a89907e971cf42b17f6e625053c92545479aaf005c1c6e5d3a3620da627b4a00b16af7d1785c795455d54ee9da3fb9153e0de1662afe1a78491d213e2fe8e5740f3e216258d00dda6f8f364b59f43f6ed9eda866dd198fe453185725ceb3da68f8f27d8f1d9dce3b2e5f66a25d910a58a17136837f42885bcae6036ed593c97bb954c4eaf79760f14c551cbb52b55213e"}, @nested={0x4, 0xc}]}, @generic="20b3eee5af7f643ff90939a74265da9eb76113840676e028a761bdcc5f4036c18ebc22f131c981774d974b793c28a74c8f887b184a17ac6054e2", @nested={0x1c0, 0x115, 0x0, 0x1, [@nested={0x4, 0x52}, @typed={0x4, 0xe2}, @typed={0x9a, 0xd, 0x0, 0x0, @binary="b89ea8df37219883f070cd40e680f3f05a1cee6a1404c39892eacdc14c3d2c66b5405cd7de2d30fc40391fc8bcc6fd2ee9504bbeabbefdf3777194fd50ebfab36b38627439f124cda4e0218e5ecdcf75202c860e818a68848f6f51380243bb854602f9414cde9cde8557fc4eb8d786415911e279b1b42996a8741d8986812748b679dd0c01045f7ddeb7b9ed7dd6d98ceb25e4d722e4"}, @typed={0xfb, 0x11e, 0x0, 0x0, @binary="de934e84c7b47cd5b87d932e680ca5db9fafbbe574a4451bcde6eaad7d241109bc4ab188fda5928d6654b02cc18f51555e0a4f50d22d7425ea60a18d507fcc4d712998c31d702fab907c4fc66aaa2ab1691b824010a13bd97aaded5acffaa41d37696e65ee6bac36742509d7a6ac88af20447c3e084babba4694b998211d173ac03f53cb9c42ff367eb65112fee154bb00242667ccacb19567d7b6fd944a401e33f3667fc9f9f04604e2096b043cfcb7fa902e1c3cc38b0626cbf12124efca1c8bd048703b27f17df75fb6e3c69cf57f10c61474e13cda459af2b469d92138284529925bae277a87ff8815d9683b9890039a02e10576d2"}, @nested={0x4, 0xe4}, @typed={0x7, 0xb5, 0x0, 0x0, @str='/\xe6\x00'}, @nested={0x4, 0x2c}, @typed={0x8, 0x146, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0xaf}]}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}]}, 0x474}, 0x1, 0x0, 0x0, 0x160208c1}, 0x4044811) write$auto_dvb_dvr_fops_dmxdev(r3, &(0x7f0000002780)="419069d0ab3255f0a772dbc13bea53b08a4243b5a186d7b0c22757d657f38e459f24a3e5dbee1b29b10dad91cceda7bee27c40de34309093e00225f4b3c9358c1d9806f9cd5e3df710b41b5ba30261efe352296df7d3042786d220bc78d8ea82c844a09e0dcaf4bfd086e697607a3c5c36edf3b1d42cdc123f71cd8fd98b63a16366a6903d2ec6544fb78daaf99fd218cf92ca6299bec8be6ee916408e038a4e6b38e2f07e61bd953e9f547de4db196a36bd902eb33a6300a3cdc9a378d724dc430ffd0c236d782f12002ed8d82ca3fede65a5ed8d3f48ed47", 0xd9) prctl$auto_PR_SET_TSC(0x1a, 0x7, 0xfff, 0x6, 0x6) writev$auto(r4, &(0x7f00000028c0)={&(0x7f0000002880)="2e4780230733391b239c49aa14495d864446e11a3d2d43ebbb1b3ac7b5950048aeb53be8d7ad7f85e761ec0af43d9e2dd48e", 0xffffffff}, 0x661) ioctl$auto_XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000002900)={0xbc, @raw=0x99, @raw=0x7fff, 0x0, 0xfffffffffffffff7, '\x00', {0x5, 0x7fff, 0x6, 0x0, 0xee00, 0x6cb, 0x5, 0x9, {0x5f76c3ea, 0x1ff}, {0x4, 0x69}, {0x800, 0x6}, 0xffffffffffffffff, 0x6, 0x1d9, 0x6, 0x7, 0x3, 0x3, 0x7, 0xa0, 0x7, '\x00', 0x3ff, 0x1, 0x7, 0x7}}) ioprio_set$auto(0x0, r9, 0x7) 1m49.306176934s ago: executing program 5 (id=2932): r0 = socket(0xa, 0x801, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001bc0), r1) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000004a80), r1) sendmsg$auto_NET_SHAPER_CMD_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf25020000000c000180080001006d94bade204540007c942c260000"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x200000c0) 1m49.115529099s ago: executing program 5 (id=2933): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu0/hotplug/state\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x100000001, 0x9) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) write$auto(r1, 0x0, 0x2) getrlimit$auto(0x3, 0x0) fdatasync$auto(r1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r2, 0x127f, 0x0) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x2) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x108, 0x3a02, 0xdf, 0x9b72, r3, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r4 = socket(0xf, 0xa, 0xf) setsockopt$auto(r4, 0x1, 0xc, 0x0, 0x7fffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm0c/sub4/sw_params\x00', 0x16240, 0x0) execve$auto(0x0, 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') 1m46.646009547s ago: executing program 5 (id=2936): mmap$auto(0x0, 0x80, 0x6, 0xeb1, 0x401, 0xffffffffffff7fff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_available_congestion_control\x00', 0x0, 0x0) r0 = bpf$auto(0x0, 0x0, 0x4f4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x50400, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0xffffffffffffaee1, 0xfffffffffffffffe, 0x2, 0x7, 0xbfb, 0x79, 0x30, 0x3, 0x2}) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/usb/usbmon/33u\x00', 0x20202, 0x0) setsockopt$auto(r0, 0x5, 0x5, &(0x7f0000000380)='\x00', 0x1) pread64$auto(r3, 0x0, 0xfffe, 0x9) close_range$auto(0x2, 0xa, 0x0) sendmmsg$auto(r0, &(0x7f0000000340)={{&(0x7f0000000200)="12ce14524025ad5887bd976484881462c11be9ffc11160f89afa1b43554165c8262e5c0e8381a086ad09ae6040c402fd28f4eca1780a8bfffc325da67b6e0f44a1", 0x0, &(0x7f0000000080)={&(0x7f0000000480)="b9718c258d9bd4e933cf2cada218419feaad249480ff1a6887b687f7d859780196a90bacd1d1c22f8dcf5ca6230e58b8f9cc1890c6fea28696985bb39a552fd09d7a8518fe9b1a560abcce48440806a4884e44cd83d72b30bd62dbd6f9c37e7fec7c29c25c1a5a785e30021be2c5e713be57f5b8a0d893bdc1210de0f486cc34ec122f06dd330bcdbd63542190955e984c26fafb8ccea843676e6321b0c9fed00708c8833add0015a789a6980b18d7738f51c594f0d695e7a4b9f5a33d0f5fbd05151b772a9ab8e73f8f30f3a1e85168a21d7b2a25162d9980c004", 0x400}, 0x3ff, &(0x7f0000000580)="94bc7e3605e88dcce6e2aec02a5c5d8628cba2c163b6ca0d7eb9362ff72f31285111a99ce748a2d80faddd76671020b8202cbc6403d4e3a48e2a00ba351543707c15e98ad245a07980f89972fabf8d72576eebd9ef7058a795a7172a9329ea2407025c640a5dde39b52f1a159779f15e1653040c95a20ee965b174c4d7eb8a72115219c499b1910cf162f082c787aae7e57abd28f3a1cefc7a3ca33660ebd552ed361c4beb39c1bc384dcd2d47e515fc73fe4ad19e420fec8c3b18d364e63e0b0ff53188aa58bae1571e6e640edac162455ff35fddfa6049723b2f866ea93034cfee54fb3d8c13323387b28e69fd4bec", 0xf, 0xff}, 0x5}, 0x7199, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/pts/ptmx\x00', 0xa0540, 0x0) ioctl$auto(r4, 0x80045430, 0x38) 1m45.30012158s ago: executing program 5 (id=2939): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu0/hotplug/state\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x100000001, 0x9) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) write$auto(r1, 0x0, 0x2) getrlimit$auto(0x3, 0x0) fdatasync$auto(r1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r2, 0x127f, 0x0) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) mmap$auto(0xfffffffffffffff3, 0x20009, 0xd8, 0x210, r3, 0x3071) close_range$auto(0xffffffffffffffff, 0x8, 0x2) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x80000000}, 0x5, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0xfffffffb) socket(0xf, 0xa, 0xf) setsockopt$auto(r4, 0x800101, 0x1, 0x0, 0xff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card1/pcm0c/sub4/sw_params\x00', 0x16240, 0x0) execve$auto(0x0, 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') 1m42.124871882s ago: executing program 5 (id=2943): openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/thread-self/mounts\x00', 0x80, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x11, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:03.0/resource1\x00', 0x0, 0x0) mmap$auto(0x0, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8000) 1m41.832409655s ago: executing program 5 (id=2944): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0xa, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) socket(0x840000000002, 0x3, 0xff) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) unshare$auto(0x8000000000000001) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) ioctl$auto_SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r3, 0x401870c8, r1) 1m39.972458057s ago: executing program 36 (id=2924): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x80000001, 0x8) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r0, 0x802064b8, r0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r1, 0x8, 0x0) inotify_init1$auto(0x3000000000000) unshare$auto(0x40000080) socket(0xa, 0x3, 0x3a) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x24000, 0x0) ioctl$auto(r4, 0xab03, 0xffffffffffffffff) brk$auto(0xffffffffffffff66) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r5 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) syz_clone3(&(0x7f0000000380)={0x101045100, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) madvise$auto(0x0, 0x200007, 0x8) 1m32.225093532s ago: executing program 7 (id=2964): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) futex_requeue$auto(&(0x7f00000000c0)={0x3, 0x5, 0x5ad}, 0x0, 0x4, 0xa) socket(0xa, 0x1, 0x84) ioctl$auto_TIOCGSERIAL2(0xffffffffffffffff, 0x541e, &(0x7f00000000c0)) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x7, @local}, 0x54) sigaltstack$auto(0x0, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x7ff, 0xe2, 0xeb4, r1, 0x383) getresgid$auto(&(0x7f00000001c0)=0x10001, &(0x7f0000000200)=0x5, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000380)={0x6d0782, 0x81, 0x7}, 0x18) move_pages$auto(r2, 0x1002, 0x0, 0x0, 0x0, 0x2) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$auto(r3, &(0x7f0000000040)=@ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, 0xfffffffa) ioctl$auto_TIOCSTI2(r3, 0x5412, 0x0) mmap$auto(0x400, 0x400005, 0xfffffffffffffffe, 0x9b72, r0, 0x3) r4 = socket(0x2, 0x1, 0x106) connect$auto(r1, &(0x7f0000000100)=@generic={0x31, "f1e6058a7fb96319ceb4c6817796"}, 0xb) getsockopt$auto(r4, 0x6, 0x1, 0xfffffffffffffffd, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0xc0943, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) 1m31.200128579s ago: executing program 7 (id=2966): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto(0x8000000, &(0x7f0000000000)=@link_detach, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x20000054) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x10040000a, 0xdf, 0x14, 0x2, 0x1) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000001bc0)="51426572911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91dde6727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f6a5d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c622085783f6804edc3913fb9e98c55713fa0bf8101ad0f6f43407ce4be0001d1bb201bec283ade79ab23484c1076e703864629ac9a6031533dc956f705f89f0e0ef7d3109e46859d1f2ad1b8cb3cfcedf868a3be101e8b9acd75e39e6a27a541aa9fe86ad3119b7049c3fad2a901222eb948cabb4b5c3e5ba6ffc02a15bf7d550b00ab0f3dd3002924f7bd0701269ae293c4cb231b9127d1f6b38dd6fbb3429905384eed7eed9330a9c5e732bdd510169d9ca3e420ea2102be3770a0ab598c037b8f01e8910cf8b0942aafb156ac90724cf552df158a7f59c26e62f3fcf32d860c2259cb1b3118a773ff3cfbaf9c5b068dade5cd7778f1ea98700629b62534735fef3071c30afa6ea26f7e651ec140936c07d9e90f1c9faef3e05376b1e121af6a6691616c10e19fd4f16b1858b44d99e597908cda0e8fa8c21d8b700987d7723a4b5a4ff3c371f2d1cb9fb2f054abc58727239ba67a173f1431083fedc7c4304488c13c75e4995a58ac9de085377356ddc5338aeb44e7f3d06f82a5e0c846159c881a0395a3dbf32a9f2530a520721431a752b13b01a89bdf2b38387b72e8a533936623ec396f6ef94ddfcca047bf20a6fe450a03dedb36a57355e2519ff579b5c63095f48407ece8a7c6c4f5b2582616f0a6bba059810c0a28355fb08dceec9e290026452c3135f8ad93f9617f22e590122d43f6fdc1ea0f9ec12c551b5127108443bb081f7a89660034ea4f3c4305108428cc91918dbb28c2a117f09609e40903b13055e92a727afa767b1f97df335ee729686c0113e4cc18aa50f4ad82b1d403cc6c11ac3bf63415560417d7d488df01b69c925ca3fce60ca7ac767fd11df61caf62f3ab67dad043faf1cc334903e0f419c2e97553ecaad5814bf097192e76e9a16bc5c9be932718aba32cd7dbcc6bc634a463c6f709cc81963b39442e710c14c7e107b0aeb7b6a0e3f3757860d10dd741863277c43ce4dcec49f4558959b08f59182baf4f250aa045fee383ceaec280817bf222dfbeeca8c1ec8473176326c1ffd49ea072b5f3c73f36865b6052a1595c1bb76cfe37f976848fbcb408381ddeff9c318a2e6bbfe6c18ef16531fec3c47874a5391238c0d6b0e033db3fce94127cc9c98a4211e5d873f7b4810846d96be2d6cac532fce0ddee737e4d1ddb65b8b2449984a897e4090449ed4fb4006fb9d133e51396d4664a3f0c395c5b24781f8389979ccb565c6461b66db7134d15cff5ae8f935a5bcb23caace2edd2b37a726575e3cb0528de05edd9f03e30feb617767b6a557280a0a288b52af44a1607b6063867e5c9d8d56c44968fd509b5983fa06e6b1eefb2f8cee0c1cb49b8b569cf13b77adbc22ce972cd718167ac571ee41a446d13931f849d5636c729996b36ec84171fde260a4e01e9770cf687591a79833ae6473c51e12c0faab96ef093e6178d485526dbf775c94324c76bd4af2652e9036b1cc0d3df05c9232ee6eef7c4f46a6cf8ad160ad087aba6928bf156bf3ade1d135a965c4a2b283485737da67fe99227f2fbfb3baa74d75fe29122adfd82fcb9325b7ea826a52559654e76d494a374d9535facfcd4ab248e388c516bb8a0dc151b1557e418fd7c625c67ab1c50d6f05b97ba15c55631aeea44b21131aa93ead176f7bfd1418856e38782f004f272738827a64bb695f6b6a08cff8d1917be52a8851bd2bfd57d08bb0660e2ffc23792a419c2e9b006e3b0ad05044d99b97391fd2cceb86cf26acebe089a861340b04fd01e1baa70583032a30ea2e605217b80f7ee16d7e28be43d12bb2b67937dd26a8aeb84fef2f2d52f75232a400e7b279dcfc01953b0c46203477a50b5853e8f7b14b2ba31db742504bca6ed95b18846706c9fd85bf2a3a2642029b9ff2828bf0f7cbd96109a237961be8fe5c62f0fcc04c994f123f4a22f048403eac9308cfd2f2e4350c72e9ef83416ce973d3aa90d281a0275886dd3858b5869784ae58e257aa5af6d373dcc9cf520e364be748833adbb10daa6f6a334b51d27529d86ea5ce874562f9f93da45d244224b936fced3b658abbe7aa1f0d502fffce823f528ab47ea3540722f144733666229ae08cfc7e61247742ea4e3c180938ae7c7b81c1ee975c831f79672e044cefc49894c2ab73bba2580ac476cc0e56b6748b8edbb37a3f8dda7ffad4ec07abce7c4d10fc32e40d5a9db37f7b1e3a6eabedbefa9dd8eef189b92363d3391d384af26b7d47958d3d82845c9b668da5bcbd64058dc9e1c6d903ab5d2aa049d197116a11309a1abe9e5b3f9e7f1c623242b1d8089bc369d145a7070e8a9bdf543dbffe899ff9366009a3b0424a634681b530dad9ef23f136a10c7287068e57f3c2de45adf0a105c328e0035b97168f4c17aa4610b2e6e1a6ba0b71c06417b7a9497be4a009b19d7162adfd4d7b6490faf3782a920281333ad09b848ab5f4d15534b8c4e43dc9604b0630f8d349b2c80a98fde04693c31cbed7d460edfc0138dcc5d3974e682bbd555ac19625bf6e0607d8803391ec9c2dc41fc4e8bceae4f53507137324dd02914a067d52a577b812ddac4a34765c26a98839b3edb6290abff0c75991d6f8c1bd75", 0x850) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x202003, 0x0) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r3 = fcntl$auto_F_GETOWN(r2, 0x9, 0xea6) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000300)=@task_fd_query={r3, r2, 0x6, 0xa, 0x5, 0x5, 0xffffffffffffffff, 0x3, 0xffff}, 0x19) r4 = setfsgid$auto(0xee01) setresgid$auto(r4, 0x0, 0x0) shmctl$auto(0x2, 0xfffff878, &(0x7f00000002c0)={{0xffff8001, 0x0, r4, 0x3, 0x69b, 0xffffff80, 0x3}, 0x401, 0x9, 0x8, 0x7, @raw=0x101, @inferred=r3, 0x7, 0x0, &(0x7f0000000180)="296e75af7f1924ee873b22", &(0x7f0000000200)="cf0c2a43b76ffa0c76080a67699373b7bb"}) prctl$auto(0x4, 0x0, 0x0, 0xeb36, 0x8000000000000003) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) mmap$auto(0x0, 0x400004, 0xde, 0x9b72, 0xffffffffffffffff, 0x7fff) io_uring_setup$auto(0x8008, 0x0) close_range$auto(0x2, 0x8, 0x0) clock_nanosleep$auto(0x2, 0x6, 0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r5, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) fsopen$auto(&(0x7f0000000280)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x6) 1m29.752844631s ago: executing program 7 (id=2968): close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socketcall$auto(0x8000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fbdbdf2502e7ffff0700030080004000080002007f000000"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) ioctl$auto(0x3, 0xae78, 0x38) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae90, &(0x7f0000000300)={0x4002}) 1m29.099261671s ago: executing program 7 (id=2971): set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = setfsuid$auto(0xee00) setreuid$auto(r1, r1) r2 = getegid() r3 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000280)={@_si_pad}, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000001, 0x3, 0x1, 0xf9, 0xfffffffffffffffc, 0x7, 0x6274, 0x7, 0x0, 0xb, 0x35d, 0x439c, 0x6, 0x7}) shmctl$auto_SHM_STAT_ANY(0x0, 0xf, &(0x7f00000006c0)={{0x7, r1, r2, 0x4, 0x6, 0x81, 0x48d}, 0x1, 0x5, 0x8, 0x2, @inferred=r3, @raw=0x5, 0x5, 0x0, &(0x7f0000000500)="4f98c640887224e1536d4e40a39d3c81a9c6e8ae66bc479f7d92b6c649f07587e8084d4fd558d54a2ddca9c318eb050342e0fbb295dd58250b8d185616881413c9b3a8bbc9cb6f3059624b9d64d81f5b347672273ff0eac474a4fce025de7972a1b178c920727aab101d7741be7f42a7acc5ee4675ca2c96a2d08ca9a74b323f548afca84b63a71fb65c71061963f9693b6afa898480b20dc6d2e4f35f2381eabde6ac3f3b34948a7014878f346459ef0a11d7cb4fe7732d8d9e95d0cc7450914c2b63b9054c10080ba951b8f095adaead86e8bf209f5a9ecef565321572507c2b71c3a04fe37344218ffc325a27547ba7f31f1edb3ba545", &(0x7f0000000600)="3b4aab5baf7b70279f51554278b9b2497af28d2f68748361dda23b269d8b59ff913dc2ce2f41389066481eb9ea5492d38b5b950569f4d785c41fe5d0ab02234a66c5d804108051813044b3235a4b452ff0c51b938f2f5440d9ecee6cfad16d8271c93fa2488f5af21c4361fca3799a20b53b6f0c6c3b19b35a674aec24b246c982d5f007b2ecde6cab52699af3b1e94e1a42d4e4"}) msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000000740)={{0x0, r1, 0xee00, 0x9, 0x5, 0x8, 0xfa}, &(0x7f00000001c0)=0x6, 0x0, 0x5, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x89, 0xf, @inferred, @raw=0x67abc800}) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) set_mempolicy$auto(0x5, &(0x7f0000000400)=0xfffffffffffffffd, 0x3b) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b4020000d0e317768c5cd257a4a9c921558ba19db42667e217ec23299ace2df8a72a8fd5dbd8b6c400000000000000001d8e437457d391c05267fbe64d2533766a3744bb471be118", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf250b00000008000b009b0c000005000800070000000500250005000000730219805d012a801400e800fc0100000000000000000000000000019b45edd5b9d87b0e5e9266dfb2240fbe59619ebb0f863a2bd6d8fee0d680876d4be088b44547cc30553285902529be448cec0e729e8a3f582bc0c473bef9528d510def083e6326e67e1d0614a235a32b10a86a5ec52d8547d8b10a03c201eea112568323a553fbbcd03738a046b48e0e9fb4684daf36e87939ff5dc43aed0d5b71c1421e0e159428514150a6bcd27beabb53b1126aae790dfe83d0fecdc79a16685514bb67dca7a8a7953b8a517fc8db", @ANYRES32=r4, @ANYBLOB="e86b703b1f29a1ab57fe4f67fe4aa01f8d03e382b4ff4263189c16b0419e5ce998a74c38a23fe135916ce6c1e5cefa943dde1a950c91914af54bc48b497ee6f49a6ae5b78ec5a0f1f1b4542549533aa7f1c10da25442296f1426d3791f5fe6ce62b1465210f8d0d67004007f8008006300e00000010800e900", @ANYRES32=r5, @ANYBLOB="04001b80000000a9870ccd76e776644e9f39da251a6237d1647ee84ac56427e43c46028a7618ee72498036b08ca198fb5db60ec0a5823f4a9c3fc481590f56b5fab6cad268fb49b86a1c881d326ef6a215c82eae9e74f3b255f4f94a6555e7cd7c4402f2ef7cc63be6844ed6cfcf5d2e54"], 0x2b4}, 0x1, 0x0, 0x0, 0x40}, 0x24008010) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) utime$auto(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={0xffff, 0xd73}) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) pread64$auto(r7, 0x0, 0x10001, 0x82d) write$auto(0xffffffffffffffff, 0x0, 0xc) close_range$auto(0x2, 0x8, 0x0) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x1, 0xfffffffffffff966, 0xffffffff) madvise$auto(0x2, 0x5c61fa2c, 0xf) unshare$auto(0x8000000) 1m27.856430042s ago: executing program 7 (id=2974): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x1, 0x84) shutdown$auto(0x200000003, 0x2) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xd3, 0x0) chown$auto(&(0x7f0000000000)='}[,&*}\x00', 0xffffffffffffffff, 0x0) uname$auto(0x0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @private=0xa010100}, 0x54) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3b, 0x2, 0x0, 0x7, 0x8006, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0xfffc, 0x80, 0x7, 0x40000, 0x7, 0x5, 0x200, 0x0, 0x100, 0x0, 0x7, 0x0, 0x0, 0x0, [0x49, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffdffffffffffffc, 0x8, 0x0, 0x0, 0x0, 0x8000020, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0xe]}, 0x202, 0xd) epoll_create$auto(0x9) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) 1m27.468426443s ago: executing program 7 (id=2976): sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000000a9c100000000010000005e1019d4d1b5c918e920f221ef2738bab1e6b8cf11fbaf44047ac67f569cf13954bca960c654e487901bfd50f2c99bd5bab37a83f4e7cc613df73cf4121007b96e754377793a31cc5d4168b77b8d1894adb937e4b511374942b751d6239fb651366037234c0609b6d9396a", @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf250200000008000900800000000e000500eecd71556377220471e700002a0005005416cf27fe10900ee223ed9f86da74b8a5140f6cc777764fb8f8c059d5a197525eeecd6721280000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x400c994) mmap$auto(0x81, 0x40009, 0xdf, 0x9b7e, 0x7, 0x28000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x15, 0x5, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES16=r0], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) r1 = fanotify_init$auto(0x5, 0x2000000000002) r2 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) fanotify_mark$auto(r1, 0x9, 0x9, r2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = fcntl$auto_F_GETOWN(r0, 0x9, 0x5) r4 = gettid() rt_tgsigqueueinfo$auto(r3, r4, 0x5, &(0x7f0000000100)={@_si_pad}) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe6e) r5 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(r5, 0x0, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x260048d5}, 0x4001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m26.696305377s ago: executing program 37 (id=2944): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0xa, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) socket(0x840000000002, 0x3, 0xff) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) unshare$auto(0x8000000000000001) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) ioctl$auto_SNAPSHOT_CREATE_IMAGE(r2, 0x40043311, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r3, 0x401870c8, r1) 1m22.271818594s ago: executing program 8 (id=2986): futex$auto(&(0x7f00000003c0)=0x58, 0x5, 0x3, 0x0, &(0x7f0000000440)=0x2, 0x2000005) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram6\x00', 0x4040, 0x0) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) mmap$auto(0x0, 0x6, 0xc, 0x40eb0, r0, 0x307ffffffffc) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0xb213, 0x2c, 0x800}) sendmmsg$auto(r1, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000300)="c4ca25615417edab4254c223152299e51a650f4eacd715c6df8e569baf263920f3eb157d8e9bd6291880998b91f9d859677c0b453b8fd8e9c7b034cdf58ce9ef5e6de13ce02841776cae99cf626e4bc01fbbb2bcca4b0be3351b7ecf88508de877e6d477ab5d2cd7b3fa57d1af7e21184761aa", 0x49}, 0x2, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x102) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x20009, 0x4400000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) r3 = socket(0x15, 0x4, 0x0) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000280)="b69bd3b4782c2284e7b66989b679da5b8f19df866d7725381e0a5afd25cc34fdfc8632e26caf4a970258ca2a52bdfa0a04769436f7a901e3305dee4664331e11156bc8a114b522e9ee855e1b47fb1e", 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) bpf$auto(0x5, 0x0, 0x102) getpid() r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_SCAN(r5, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="79a327bd7000fedbdf2520000000327177715a136588c84931d7dd5cb0ab9b9b0c619814ad083c79537e470fde449f5bcc3f09aa28083df4d11b5a39ac08130c2ad6c4b87498da7d1941e152e5daf0205d40bd34fd428e0ba312b69b35381a78bc68690310334992b7aa9aeb6ad5507a85abe947357ff2708a3a7b30cce9d1a40f29afd267fc9a8e586aec9321c8085ec2a15b39d18936fdbb6eefa4c34af74d294520fbcd47a2ae978e87b4373bda"], 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) bpf$auto(0x0, &(0x7f0000000000)=@task_fd_query={0x5, 0x21ea, 0x7fff, 0x83, 0x9, 0x7, 0x202e, 0x5, 0x101}, 0x6f4) read$auto(r4, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 1m20.775855163s ago: executing program 8 (id=2987): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="7992d801d81a8f29e5c5727ad4c42b0c699645da8d53ba485f5385a462b48ffb3cb33e61c432081f8c81e0c858c9a7e679a00e1b6c097aabdbce4ea06ecb79fd14c17d2c379cedd063b396d7801fffe400da24de906792c8c9826938aa42d041f2ce1ea2121ea3f9c413bcc1342b4f5a1a3c253e444b906381dae6ba9c07c0b49ef0378039d17447c1a87da34ba4734d6d5e6d721944e22083612301f8b673f77479691e5c7be39598", @ANYRESDEC=0x0, @ANYBLOB="01012abd7000fddbdf251400000088f8008008000100", @ANYRESOCT], 0x28}, 0x1, 0x0, 0x0, 0x44845}, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x311) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) statmount$auto(0x0, &(0x7f0000000400)={0x8, 0x1, 0x9, 0x3, 0xb, 0x940, 0x1ffde, 0x3, 0x5, 0x2, 0x9, 0x4, 0x6, 0x4, 0x86, 0x7, 0x6, 0x3, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000000001, 0x415f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x50c]}, 0x1fe, 0x81) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) unshare$auto(0x40000080) unshare$auto(0x401) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0x94) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/rose4/queues/tx-0/xps_cpus\x00', 0x501040, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fff) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) unshare$auto(0xa79) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c06, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x42, 0x0) unshare$auto(0x40000080) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r3, r4, 0x0, 0x1000200) write$auto(r2, 0x0, 0xa3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) fcntl$auto(0x3, 0x4, 0xa553) 1m19.291850276s ago: executing program 8 (id=2989): r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(r0, 0x1, 0x21, 0x0, 0xd) ustat$auto(0x801, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/hugepages/hugepages-2048kB/surplus_hugepages\x00', 0x103400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001c00)=""/4111, 0x100f) mmap$auto(0x0, 0x0, 0x4, 0x52, 0xffffffffffffffff, 0x800048000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) capset$auto(0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000004001e2, 0x40000000000eb1, 0x401, 0x400000000000002) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) sendfile$auto(r3, 0x3, 0x0, 0xc03) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) bind$auto(0x3, 0x0, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x9c, 0xf4, 0xb0, @raw=0x89de}}) close_range$auto(0x2, 0x8, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x400100000001, 0x1ff) 1m17.731926331s ago: executing program 8 (id=2991): mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x200006, 0x9, 0x40eb1, 0x602, 0x300000000000) r0 = socket(0x2d, 0x2, 0x0) ioctl$auto(0x3, 0x89e0, 0x91) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x44005}, 0x20000000) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) mmap$auto(0xffffffffffffffff, 0x1, 0xe0, 0xff, r0, 0x8000) mmap$auto(0x0, 0x4, 0x7, 0x9b72, 0x7, 0x28000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x1d, 0x3, 0x1) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x6, 0x400008, 0xdf, 0x9b72, r1, 0x5) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$auto(r2, &(0x7f0000000280)={{&(0x7f00000000c0)="92dc7c21568c3bea4fba1e1cf0c41049731e41ec154e5ab1d9e641090c131cbd9970560cea857e01e6deeffa6b7f8fb33bcb0efaeb4dc5b7589395581168b895f4762ad2afec5352ee277d8d6099bdf9002a4d05f8", 0x4, &(0x7f0000000500)={&(0x7f0000000000)="40aab26616e02880c01c096fa4cb4470d50054beca6c0c21999a5b4f2e42ed657c0616", 0x100}, 0x7, &(0x7f0000000180)="dfb3bb03971853544a28ca2bdcc58d0209490474fb5c83aa1b1f713c8d3efba5348acc9c94c9c54ebebac16f315100222d95827b5c8c968374b4dd0eb24b399f6e13d35bc1ba3043a2c2ed76e676ac7226d4baee36a200073b9f631313f66e3d089391206c0eeb418abc96afdbede5f1d851f67ba66b680954705334907350a5bb9d88d752e8aa534c319655e23cbf0cf31502dddcdd6fdb1dd0c7b9ef15e4a07ebda19f14488b324ed26e21d46444efecd96d36a70f66e8be5aff0d9d6799b92577c9606d951f73843b60a57189c88d041e7a18cb770a07a5e2e132dc2f396f475012", 0xfff, 0xf632}, 0xf}, 0x2, 0x8, &(0x7f00000002c0)={0x1, 0xffffffffffff0001}) r3 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4}, 0x6a) sendto$auto(r3, 0x0, 0xc, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r5}, 0x36) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') brk$auto(0x7fffffffafff) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r6, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sigaltstack$auto(&(0x7f0000000180)={0x0, 0x80000001, 0x40b4}, 0x0) 1m16.11768126s ago: executing program 8 (id=2995): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) prctl$auto(0x9, 0x1, 0x4, 0x5, 0x403) mmap$auto(0x200000000000009, 0xffffffffffffffb6, 0x6, 0xfffffffffffff19f, 0xffffffffffffffff, 0xfffffffffdffeff7) r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy1/aql_txq_limit\x00', 0x822, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:01/PNP0400:00/uid\x00', 0x2000, 0x0) read$auto(r1, 0x0, 0x20) write$auto(r0, 0x0, 0x5) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x2) mmap$auto(0x0, 0x2020009, 0xe, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0x400000008080) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000200)='\x00\x00\x00\x06\x0e\xbbH\r\xa6\x83\xd5Z\x8a\x9e\xb8\x00', 0x100000a3de) r3 = socket(0x23, 0x5, 0x0) bind$auto(r3, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x3, 0xa3}, 0x80) socket(0x21, 0x1, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) open(0x0, 0x78081, 0x0) madvise$auto_MADV_DODUMP(0x8, 0x5, 0x11) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) 1m13.819944678s ago: executing program 8 (id=3000): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$auto(r1, 0x0, 0x40000433, 0x0, 0x9733) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000006e80), 0x1, 0x0) ioctl$auto_PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000006ec0)=0x3) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_VERSION_SET(r4, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x4}, @NFSD_A_SERVER_PROTO_VERSION={0x14, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MINOR={0x8}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0xff}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) r5 = socketpair$auto(0x75, 0x5, 0x7f, 0x0) close_range$auto(r5, r5, 0x0) r6 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r6, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) read$auto(0x3, 0x0, 0x80) ioctl$auto_RNDADDENTROPY2(r5, 0x40085203, &(0x7f0000000000)=[0x400]) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) 1m12.081009527s ago: executing program 38 (id=2976): sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000000a9c100000000010000005e1019d4d1b5c918e920f221ef2738bab1e6b8cf11fbaf44047ac67f569cf13954bca960c654e487901bfd50f2c99bd5bab37a83f4e7cc613df73cf4121007b96e754377793a31cc5d4168b77b8d1894adb937e4b511374942b751d6239fb651366037234c0609b6d9396a", @ANYRES16=0x0, @ANYBLOB="000428bd7000fcdbdf250200000008000900800000000e000500eecd71556377220471e700002a0005005416cf27fe10900ee223ed9f86da74b8a5140f6cc777764fb8f8c059d5a197525eeecd6721280000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x400c994) mmap$auto(0x81, 0x40009, 0xdf, 0x9b7e, 0x7, 0x28000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x15, 0x5, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES16=r0], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) r1 = fanotify_init$auto(0x5, 0x2000000000002) r2 = open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) fanotify_mark$auto(r1, 0x9, 0x9, r2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = fcntl$auto_F_GETOWN(r0, 0x9, 0x5) r4 = gettid() rt_tgsigqueueinfo$auto(r3, r4, 0x5, &(0x7f0000000100)={@_si_pad}) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe6e) r5 = inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(r5, 0x0, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x260048d5}, 0x4001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 58.108734526s ago: executing program 39 (id=3000): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$auto(r1, 0x0, 0x40000433, 0x0, 0x9733) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000006e80), 0x1, 0x0) ioctl$auto_PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000006ec0)=0x3) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_VERSION_SET(r4, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x4}, @NFSD_A_SERVER_PROTO_VERSION={0x14, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MINOR={0x8}, @NFSD_A_VERSION_MAJOR={0x8, 0x1, 0xff}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x4004000) r5 = socketpair$auto(0x75, 0x5, 0x7f, 0x0) close_range$auto(r5, r5, 0x0) r6 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r6, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) read$auto(0x3, 0x0, 0x80) ioctl$auto_RNDADDENTROPY2(r5, 0x40085203, &(0x7f0000000000)=[0x400]) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) 57.22599142s ago: executing program 9 (id=3039): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) mmap$auto(0x0, 0x2020009, 0x3, 0x14, r0, 0x7ff) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r2, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r2, 0x40046f41, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000018c0)='/proc/thread-self/mounts\x00', 0x80, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = pidfd_open$auto(0x1, 0x0) ioctl$auto_XFS_IOC_FREESP(r3, 0x4030580b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000240), r3) r5 = socket(0x15, 0x5, 0x0) sendmsg$auto(r5, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) sendmsg$auto_TIPC_NL_BEARER_GET(r1, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x598, r4, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x53b, 0x6, 0x0, 0x1, [@generic="739db46d0112e72f6b93c4c8089347e21f30a4fd32eadd4abcd83743c9f2cecfd0eaf67dbd1e31f70a750d482d5addbcfa446f0b9e2ce3e577929382debe55394e0f5a16b0d1c2dd50a535cabb6322cbb01ae04d1737f4dc9553203115c591ccc365be0fa4a2", @nested={0x89, 0x137, 0x0, 0x1, [@typed={0x8, 0x11, 0x0, 0x0, @uid}, @nested={0x4, 0xfa}, @generic="192130993475284084dd2266728fd09e4baa556163d17a05426cec90e33a9784b81d21c1f7a630c710c85d2aa68aacf0c4ebd8389f47d6461e7e48fd9b645d7f2da057db12d11c0cd0f5f723f1d16ff485a0eb8ad33b9269f68d31df9d678053b9a20c53564d4680a4b3040ca04e216fb02c5ccd4b18e72661"]}, @typed={0x8, 0x42, 0x0, 0x0, @u32=0x9}, @nested={0x310, 0x95, 0x0, 0x1, [@typed={0x8, 0x1c, 0x0, 0x0, @u32=0x2}, @typed={0xc, 0x82, 0x0, 0x0, @u64=0x5}, @nested={0x4, 0x54}, @generic="f47de67b5efcad2e22dc80cac82a378677c7a2289fef0bb3a9355ce3fe7024014b74ca3e1b53b5422e326b64f0fdc09ab3cd0b4ad30dc5577755527bb2cdea39b9db76ceee4c733266f1167745c8ae55a99ca59abd834c1270076e68a2216aafde4d24511ebe1505a562731213331a36e890b82f395bbc3eab3dfb4448316678692f282688c1e839fb4276193fbad241dfc908b3be776fba5bbe320f2714be29ea1275c9811380c94e9abd511ed196ea8333e2a34e6e82961c5a72fed733907c0198a2dc5eb628e2c5", @generic="e758e24e4ff603c5159c1cb07785afbcd1340ae85e404eda3bd80c3c55302ccdfb5d2569fff4b9a29077eddbcd9999778f7d01eb627d793e44eeae958dfc644ee54c3eb578dcc235bba92157ae0c710ca47213b77c1cd9ef58d5b07f0a97c08c32c646a552209c2f1b3c1f5654892980535dd81584fca19787f0b6298e9c342396c47b8da0dfa5", @typed={0x8, 0x50, 0x0, 0x0, @pid}, @generic="5dcdb37126a172fd373c7bb1ae9626904dd5034605695818f8af393008746d9c9d39d0c87202d09e9701ed6fcf244224d02615c0e63cb030a57ec0bf951b572fe0fd2b745f39abc46b344613c848bbf2c0f6f275a71d215d12a989766157fd3f0c8a5b6aa3648d2d762c03f295cbd2bd9e39c860f393c4ba20d1fdec98f5ef67ea8df27ea1e729525edfc60c6a57eeba79b5ffddf55fbad9", @typed={0xc, 0xd3, 0x0, 0x0, @u64=0x8}, @typed={0xf1, 0xf8, 0x0, 0x0, @binary="17d2044d5605b4988d36538c704950a1f87e7a37597eaf03e0e8330bd8e3bb2b7a9ced47a2fcf540ec75e5fc4d36edbcea3e63e73aefd3fd43baa0e311c6f71f7cf0a05d729162bbcde68242a29214a71aea302f9bc33a61de12dc2a442dfa2c5063ff6089afe291815d6af5964c6a913742d3033c50ed41bf6afd1170eb5c995485ddbc80d8cdd6494fc2e7562a74fd56cb9e23f89352f953bb17b9b976188ae3f26729e478cd9dca0e0de389ce462b72e639408d2c0b6341e132d9087d4b24e5d33a0575c6885e944e9398d878ff51b11e44374fd30ae62a3852d3d097f8f4709e40a1a388dcba33d642b472"}, @nested={0x4, 0x1}]}, @nested={0x2d, 0x0, 0x0, 0x1, [@typed={0x4, 0x70}, @generic="3abf91a6abd028d4eedc3d9e1481510f11adbcd2deda2ade12", @nested={0x4, 0x21}, @typed={0x8, 0x93, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @generic="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"]}, @TIPC_NLA_NAME_TABLE={0x48, 0x8, 0x0, 0x1, [@typed={0x44, 0x9c, 0x0, 0x0, @binary="618a2e571533a860fdaed018476c120f595acdbfbab3ad9baefaf0d4bfc6875bf497e677926ab36d155be834dacf5dc9d2e987f64d45d6b4f18c2e274afebddd"}]}]}, 0x598}, 0x1, 0x0, 0x0, 0x8880}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) mkdir$auto(&(0x7f0000000100)='./file0\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x11, 0x0) getdents64$auto(r0, &(0x7f0000000340)={0x101, 0xf0, 0x5, 0xa, "056bf2efa8e0ebfdf4d9a0646fd5c4426fce04377d8d3c849fb3507db4162853ec30c0c7071865e059fcd7e228a92d19d7792366e77ce21a4d9d8b2a41fef7af831f67cddab87b5dd4e617923ca468fb462d43fd6645e75592f69f9bbdab09afdbc9212c352513876a4e08af57be3ecbfc7f12b713dc818afb8fe2fd1d0255e9ad03062f278cb746db7e5594d62814058967e1eefb5b0aa471a1ade04a034bd0ad277e4a1ad64ceec5e60d237b7e85c0b1703907a7483935cd8a5cca61903eacf87a9f52541003d349999875325102cdbca04f0443d132422a16ca1f37a1bc0fa39cee9cdffdc34d69eaba9a06f8e4"}, 0x5) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r6, 0x5606, 0xffffffffffffffff) ioctl$auto_SIOCGIFHWADDR2(r1, 0x8927, &(0x7f00000001c0)="5e0fc4eb101ac4cc4af60fdc671d2639fcabc00305202c5feb9277eb8585feda2b3e1a8c5e6e25c1333c69e5dce4b36b4ea7185c") r7 = socket(0x28, 0xa, 0x2040084) setsockopt$auto(r7, 0x10000000084, 0x19, 0x0, 0x8) 55.667045022s ago: executing program 9 (id=3043): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x1, 0x7ff) ptrace$auto(0x10, r0, 0x10, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0x10000000000eb1, 0xfffffffffffffffa, 0x1000000000008004) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/pagemap\x00', 0x80240, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x4f1, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) shmctl$auto_IPC_INFO(0x4, 0x3, &(0x7f0000000200)={{0x6, 0xee00, 0x0, 0xfffffffc, 0x8, 0x6, 0x8}, 0x8, 0x7510, 0x5, 0x1f6, @raw=0x8, @inferred=0xffffffffffffffff, 0x7ff, 0x0, &(0x7f00000000c0)="9198c01e37465b884b745e018d04da3be34268b9d4615139e7f99220ab6c594ebce519fc1aea8f5b7732a85c5948069982ae9a579107e82f1c82a67ed47b712b26f8941b44da4773e39e523428f711ea8bccb1cc6e9dfdd2ed7cf0b7bc48fa24c51faf0a567d63126ce82ff2b63f39a3b3e13b0ca078274a72edb95f9cf39f7deb5ad6691a7cc95e8d", &(0x7f0000000000)="01c1da60cab7836c4bde33ae9cb511af9dac98b7184b58585fbfc1f3143426d6628e22e84c2648d26dfc70d4b2b065f46aa5daa96fdb5c1b7c43ef3b9b1f1d33f93172cb7c32877e5c6b43e3a5debc7cf655a83fa33222248291a7"}) setreuid$auto(r2, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) 54.471099527s ago: executing program 9 (id=3045): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = memfd_create$auto(0x0, 0x12) fcntl$auto(0xff80000000000000, 0x409, 0x13) fallocate$auto(r0, 0x3, 0x2, 0x4) close_range$auto(0x0, 0xffffffffffffffff, 0x2) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x80900, 0x0) epoll_create$auto(0x3e) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) lseek$auto(0x3, 0x20000, 0x1) mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0x2, 0x40008000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r1 = pipe$auto(0x0) dup2$auto(0x5, 0x4) write$auto(0x6, 0x0, 0x100000001) splice$auto(0x4, 0x0, r1, 0x0, 0x80000001, 0x9) prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000100)={{@raw=0x2, 0x85, 0x20e, 0x1, "669cbbd9e9756f22fdffa188e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x6}, 0x0, @integer=@value=[0xffffffffffff8000, 0x7, 0xf1, 0xba3, 0x200000000008, 0x8000000000000001, 0xc925, 0x7, 0x6, 0x0, 0x82, 0x9f38, 0x5, 0x6, 0x3, 0xf799, 0x17fb, 0x8000, 0x9, 0x1, 0x1, 0x3, 0x74, 0x7ff, 0xffffffff, 0x2, 0x400, 0x7, 0x5dbd, 0x9, 0x0, 0x7c, 0x2, 0x0, 0x0, 0x0, 0x4, 0x8000000000000001, 0x86e, 0x8, 0x9, 0x6, 0x10, 0x3, 0x101, 0x9, 0xdc4, 0x1, 0x2, 0x1, 0xd, 0x6, 0x140000000000000, 0x4, 0x2, 0x6d7, 0x825, 0x1, 0x4, 0x0, 0xb7, 0x0, 0x1, 0x6, 0x8, 0x7, 0xd085, 0xc36, 0xffffffffffffffff, 0x8, 0x6, 0x6fd7, 0x9, 0x6, 0x1, 0xdd15, 0x8, 0x8, 0x7fffffffffffffff, 0x2, 0x2ec6f9a3, 0x9, 0x3, 0x2, 0xd2, 0x2, 0x2c05, 0x9, 0x100, 0x6, 0xd2, 0xffffffff, 0x8000, 0x7, 0x1000000, 0x8, 0x0, 0x2, 0x4, 0x6, 0x6, 0xf39, 0x9, 0xfffffffffffffff2, 0x2, 0x9, 0x5045da72, 0xdbb, 0x100000001, 0x1, 0x3ff, 0x3bb, 0x30, 0x7ff, 0x7, 0x6, 0xaf6, 0x4, 0x40000000000009, 0x3fff80000, 0x1, 0x6, 0x7, 0xf, 0xb, 0x0, 0x7f, 0x9], "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/udp_early_demux\x00', 0x28802, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 52.45438207s ago: executing program 9 (id=3050): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/ptp/ptp0/max_vclocks\x00', 0x103841, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.9/usb27/27-0:1.0/ep_81/power/runtime_active_time\x00', 0xc8001, 0x0) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000008580)=ANY=[@ANYRES8, @ANYBLOB="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"], 0x4238}, 0x1, 0x0, 0x0, 0x4c098}, 0x4048000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r1, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) write$auto(0x3, 0x0, 0x100082) 51.994316816s ago: executing program 9 (id=3053): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) write$auto(0x3, 0x0, 0xffd8) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)="0040100000008b943dc9a21c566b6049c5d93c2453767d2bfebbb27ed1d6f22ff5db448ee89ea924fbcebb86a26edddc7a9970fe75259018bc60a99a117c76bddba3bcea3a9241ef2f5744ca851a9104b4d494e8978da290b951e8da50c3abe3a9a491f6afee4e7d59539f71f4e35f5cc9d18b5016926013c4e43124b140211a1679f8b52f207141f239bce378e81f3469c591cfde5c927d1e185da1e5a8ef7fe148f01cde5295c41e63503d98740442e51c08701cb3") mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) (async) rmdir$auto(0x0) (async) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x12, 0x7, 0xf7) mkdirat$auto(0xffffffffffffffff, &(0x7f0000000080)='./cgroup\x00', 0x9) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0xffff, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0) pread64$auto(r1, 0x0, 0x80000000008, 0x8000) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) (async) socket(0x11, 0xa, 0x300) (async) setrlimit$auto(0x7, &(0x7f0000000280)={0x0, 0x2}) (async) socket(0x29, 0x2, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) (async) write$auto(0x3, 0x0, 0x5c8) 48.265478866s ago: executing program 9 (id=3059): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/nbd3/queue/iosched/front_merges\x00', 0x2041, 0x0) socket(0x2, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x16621c5b) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x100, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00cf81000000ffffffffffffff291d00", 0x3ff, 0x408, 0xffc, 0x400004, 0x200000000040000d}) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r3, 0xc0686611, &(0x7f0000000080)={0x68, 0x34, 0x7fff, 0x5, 0x80000000009, 0xa, 0x9, 0x1, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x7, 0x5}) socketpair$auto(0xfff, 0xe, 0x7, 0x0) r4 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r4, 0x3b8c, r2) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) madvise$auto(0x0, 0x5, 0x15) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x8658) 43.749317758s ago: executing program 0 (id=3037): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x4, 0x400002020007, 0x3, 0xf8, r1, 0x9) (async) madvise$auto(0x7, 0x2, 0x2) dup$auto(r1) (async) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000340), 0x2800, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x204042, 0x0) (async) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/xfs/xqmstat\x00', 0x20000, 0x0) (async) mmap$auto(0x8, 0x6, 0x0, 0x9b72, 0x2, 0x8000) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000380)={0xfffffffd, 0x0, 0x0, 0x7}) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x18b202, 0x0) r6 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x1) (async) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/tcp\x00', 0x181800, 0x0) read$auto(r7, 0x0, 0x1) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), r8) sendmsg$auto_NETDEV_CMD_DEV_GET(r8, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000009", @ANYRES16=r9, @ANYBLOB="010326bd7000fedbdf2501000000"], 0x14}, 0x1, 0xf0ffff, 0x0, 0x4005}, 0x28044004) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027", @ANYBLOB="5de1523353782950330a"], 0x1ac}}, 0x40000) (rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='J'], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x3, &(0x7f0000000040)={0x0, 0x1}, 0x4, 0x0, 0x0, 0x3ff}, 0x4}, 0x3, 0x1) (async, rerun: 64) openat$auto_vrr_range_fops_(0xffffffffffffff9c, &(0x7f0000000f80)='/sys/kernel/debug/dri/vkms/Writeback-1/vrr_range\x00', 0xa8441, 0x0) (rerun: 64) recvmmsg$auto(r6, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0x7d}, 0x7f, 0x0, 0x3ff, 0x6}, 0x9}, 0x4, 0x200, 0x0) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00027", @ANYBLOB="62010000", @ANYRES64=r5, @ANYRES8=r2, @ANYRES32=r3], 0x1ac}}, 0x40000) (rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(r6, r7, 0x2a97e5de) r10 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x90401, 0x0) ioctl$auto(r10, 0x3b8f, 0xffffffffffffffff) 43.361480261s ago: executing program 0 (id=3071): socket(0x2, 0x2, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0xffffffffffffffff, 0xc0000001, 0x8}, 0x6f4) (async, rerun: 32) socket(0x11, 0x3, 0x80000001) (async, rerun: 32) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20eba91f", @ANYRES16=r1, @ANYBLOB="010025bd700002dcdf2503000000040008000500090080000000"], 0x20}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) (async, rerun: 64) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8100, 0x0) (rerun: 64) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00"}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x200000d, 0x1, 0x948b, 0x7, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) (async) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x3, 0x5, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) (async, rerun: 64) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async, rerun: 64) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyt2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x1, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) (async, rerun: 32) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x2, 0x3ff, 0x8001, 0x5) (async, rerun: 32) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/kernel/threads-max\x00', 0x40001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r5, 0x0, 0xfe5c) 41.674206992s ago: executing program 3 (id=3074): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NFSD_A_SERVER_LEASETIME={0x8}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x2000800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x5, 0x0) pipe2$auto(0x0, 0x80) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) listen$auto(0x3, 0x83) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/003/001\x00', 0x8001, 0x0) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r2, 0x9000643b, 0xffffffffffffffff) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@ethernet={0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x54) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000040)) io_uring_register$auto_IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, &(0x7f0000000300)="457f374935bf676173a9591ccce01b24cc0d9b1f371cfe3d720ac82d3c7b386de645c5858875e315cd1b6a262703c9a2ff6137a82f2de08358bf29ba2e34a2e4a420c7459879c5af3ab4d29095ab2a8f2616ab9d5f9eaadeaa331f1f8546730688e351d6d51e4aa3f3a6f0ff123ceaf7680a6b99dcd712526aac02beabb39eb843ad149d332c004c423868fb1c47f50ddfa4a782c9ade367389d03a7523a4a8143baf19da91cc05489d0b85b8c0d221270a1091130caa5a2cacd2fe7ec6b6062f4cce8e5072f690973439447529a1f11cb66c5ccb5cf9adcd7d0974e9270878b627e72a22bcd8c196e98815e0620e95a4e4b216acc9dc3a480", 0x4) 41.609320372s ago: executing program 0 (id=3075): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x1, 0x84) shutdown$auto(0x200000003, 0x2) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xd3, 0x0) chown$auto(&(0x7f0000000000)='}[,&*}\x00', 0xffffffffffffffff, 0x0) uname$auto(0x0) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @private=0xa010100}, 0x54) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3b, 0x2, 0x0, 0x7, 0x8006, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0xfffc, 0x80, 0x7, 0x40000, 0x7, 0x5, 0x200, 0x0, 0x100, 0x0, 0x7, 0x0, 0x0, 0x0, [0x49, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffdffffffffffffc, 0x8, 0x0, 0x0, 0x0, 0x8000020, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0xe]}, 0x202, 0xd) epoll_create$auto(0x9) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) 41.552825978s ago: executing program 3 (id=3076): set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = setfsuid$auto(0xee00) setreuid$auto(r1, r1) r2 = getegid() r3 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000280)={@_si_pad}, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000001, 0x3, 0x1, 0xf9, 0xfffffffffffffffc, 0x7, 0x6274, 0x7, 0x0, 0xb, 0x35d, 0x439c, 0x6, 0x7}) shmctl$auto_SHM_STAT_ANY(0x0, 0xf, &(0x7f00000006c0)={{0x7, r1, r2, 0x4, 0x6, 0x81, 0x48d}, 0x1, 0x5, 0x8, 0x2, @inferred=r3, @raw=0x5, 0x5, 0x0, &(0x7f0000000500)="4f98c640887224e1536d4e40a39d3c81a9c6e8ae66bc479f7d92b6c649f07587e8084d4fd558d54a2ddca9c318eb050342e0fbb295dd58250b8d185616881413c9b3a8bbc9cb6f3059624b9d64d81f5b347672273ff0eac474a4fce025de7972a1b178c920727aab101d7741be7f42a7acc5ee4675ca2c96a2d08ca9a74b323f548afca84b63a71fb65c71061963f9693b6afa898480b20dc6d2e4f35f2381eabde6ac3f3b34948a7014878f346459ef0a11d7cb4fe7732d8d9e95d0cc7450914c2b63b9054c10080ba951b8f095adaead86e8bf209f5a9ecef565321572507c2b71c3a04fe37344218ffc325a27547ba7f31f1edb3ba545", &(0x7f0000000600)="3b4aab5baf7b70279f51554278b9b2497af28d2f68748361dda23b269d8b59ff913dc2ce2f41389066481eb9ea5492d38b5b950569f4d785c41fe5d0ab02234a66c5d804108051813044b3235a4b452ff0c51b938f2f5440d9ecee6cfad16d8271c93fa2488f5af21c4361fca3799a20b53b6f0c6c3b19b35a674aec24b246c982d5f007b2ecde6cab52699af3b1e94e1a42d4e4"}) msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000000740)={{0x0, r1, 0xee00, 0x9, 0x5, 0x8, 0xfa}, &(0x7f00000001c0)=0x6, 0x0, 0x5, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x89, 0xf, @inferred, @raw=0x67abc800}) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) set_mempolicy$auto(0x5, &(0x7f0000000400)=0xfffffffffffffffd, 0x3b) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b4020000d0e317768c5cd257a4a9c921558ba19db42667e217ec23299ace2df8a72a8fd5dbd8b6c400000000000000001d8e437457d391c05267fbe64d2533766a3744bb471be118", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="e86b703b1f29a1ab57fe4f67fe4aa01f8d03e382b4ff4263189c16b0419e5ce998a74c38a23fe135916ce6c1e5cefa943dde1a950c91914af54bc48b497ee6f49a6ae5b78ec5a0f1f1b4542549533aa7f1c10da25442296f1426d3791f5fe6ce62b1465210f8d0d67004007f8008006300e00000010800e900", @ANYRES32=r5, @ANYBLOB="04001b80000000a9870ccd76e776644e9f39da251a6237d1647ee84ac56427e43c46028a7618ee72498036b08ca198fb5db60ec0a5823f4a9c3fc481590f56b5fab6cad268fb49b86a1c881d326ef6a215c82eae9e74f3b255f4f94a6555e7cd7c4402f2ef7cc63be6844ed6cfcf5d2e54"], 0x2b4}, 0x1, 0x0, 0x0, 0x40}, 0x24008010) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) utime$auto(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={0xffff, 0xd73}) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) pread64$auto(r7, 0x0, 0x10001, 0x82d) write$auto(0xffffffffffffffff, 0x0, 0xc) close_range$auto(0x2, 0x8, 0x0) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x1, 0xfffffffffffff966, 0xffffffff) madvise$auto(0x2, 0x5c61fa2c, 0xf) unshare$auto(0x8000000) 41.385546143s ago: executing program 0 (id=3078): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/vulnerabilities/meltdown\x00', 0x40400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000b00)=""/4077, 0xffd0) capget$auto(0x0, 0xfffffffffffffffe) r1 = socket(0xa, 0x5, 0x0) getsockopt$auto(r1, 0x84, 0x7a, 0x0, 0x0) madvise$auto(0x0, 0x2000000080000001, 0x3) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x206000, 0x0) io_uring_setup$auto(0x6, 0x0) 40.583861075s ago: executing program 3 (id=3080): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)={0x54, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x10, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) unshare$auto(0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) close_range$auto(0x0, r3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) listen$auto(0x3, 0x81) getsockopt$auto(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f00000000c0)=0x28000) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000c00), r4) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x48100, 0x0) fchmod$auto(0xffffffffffffffff, 0x7d29) read$auto(r5, 0x0, 0x20) 39.890460095s ago: executing program 3 (id=3082): openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy7/queues\x00', 0x20000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f000000b000), 0x80, 0x0) pread64$auto(r1, &(0x7f000000b040)='\x00', 0x7, 0x6) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r5, r5, 0x0, 0x3) write$auto(r2, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0x29, 0x5, 0x0) write$auto(0x3, 0x0, 0x100082) write$auto(0x3, 0x0, 0x8) semctl$auto(0x1ff, 0x2, 0x13, 0x1) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/sockstat\x00', 0x22000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r6) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r7, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x18, r7, 0x1, 0x70bd2d, 0x25dfdbfa, {}, [@HWSIM_ATTR_REG_STRICT_REG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000004}, 0x4044820) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fedbdf2500000000060006000900000008000100ffffffff0c0003000700000000000000080002000000000008000700", @ANYRES8, @ANYRES16=r5], 0x40}, 0x1, 0x0, 0x0, 0x20040850}, 0x4048040) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x442101, 0x0) read$auto(0x3, 0x0, 0x1f40) 38.837490376s ago: executing program 3 (id=3084): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x1, 0x84) shutdown$auto(0x200000003, 0x2) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xd3, 0x0) chown$auto(&(0x7f0000000000)='}[,&*}\x00', 0xffffffffffffffff, 0x0) uname$auto(0x0) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @private=0xa010100}, 0x54) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3b, 0x2, 0x0, 0x7, 0x8006, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0xfffc, 0x80, 0x7, 0x40000, 0x7, 0x5, 0x200, 0x0, 0x100, 0x0, 0x7, 0x0, 0x0, 0x0, [0x49, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffdffffffffffffc, 0x8, 0x0, 0x0, 0x0, 0x8000020, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0xe]}, 0x202, 0xd) epoll_create$auto(0x9) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) 38.730377403s ago: executing program 3 (id=3085): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/asound/card1/pcm1c/sub5/sw_params\x00', 0x80000, 0x0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000003640), 0x0, 0x0) ioctl$auto_RTC_PARAM_GET(r1, 0x40187013, &(0x7f0000003680)={0x7, @uvalue=0x2c, 0x4}) (async) pread64$auto(r0, &(0x7f0000000040)='veth1\x00', 0x200000000004, 0x4) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) (async, rerun: 64) socketpair$auto(0x20000001, 0x2, 0x3, 0x0) (rerun: 64) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000140), r4) sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001ec0)={0x14, r5, 0x721, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008004) (async) r6 = socketcall$auto(0x8b6, &(0x7f0000000100)=0xf48) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r6, 0x6) (async) r7 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r7, 0x921064a0, r7) (async, rerun: 64) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) (rerun: 64) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r8 = memfd_create$auto(0x0, 0xe) r9 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x80044944, 0x0) (async) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) r10 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f00000000c0), r3) sendmsg$auto_NCSI_CMD_PKG_INFO(r8, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB="c42500f2", @ANYRES16=r10, @ANYRES8=r3, @ANYRES32=0x0, @ANYRESHEX=r0], 0x5c4}, 0x1, 0x0, 0x0, 0x4080}, 0x4004080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) adjtimex$auto(0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, 0x0) close_range$auto(0x2, 0xa, 0x0) 33.222447547s ago: executing program 40 (id=3059): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/nbd3/queue/iosched/front_merges\x00', 0x2041, 0x0) socket(0x2, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x16621c5b) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x100, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00cf81000000ffffffffffffff291d00", 0x3ff, 0x408, 0xffc, 0x400004, 0x200000000040000d}) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) mmap$auto(0x0, 0x400008, 0x2, 0x9b72, 0x2, 0x8000) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r3, 0xc0686611, &(0x7f0000000080)={0x68, 0x34, 0x7fff, 0x5, 0x80000000009, 0xa, 0x9, 0x1, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x7ff, 0x7, 0x5}) socketpair$auto(0xfff, 0xe, 0x7, 0x0) r4 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r4, 0x3b8c, r2) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) madvise$auto(0x0, 0x5, 0x15) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x8658) 25.906947293s ago: executing program 41 (id=3078): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/vulnerabilities/meltdown\x00', 0x40400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000b00)=""/4077, 0xffd0) capget$auto(0x0, 0xfffffffffffffffe) r1 = socket(0xa, 0x5, 0x0) getsockopt$auto(r1, 0x84, 0x7a, 0x0, 0x0) madvise$auto(0x0, 0x2000000080000001, 0x3) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x206000, 0x0) io_uring_setup$auto(0x6, 0x0) 23.373428549s ago: executing program 42 (id=3085): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/asound/card1/pcm1c/sub5/sw_params\x00', 0x80000, 0x0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000003640), 0x0, 0x0) ioctl$auto_RTC_PARAM_GET(r1, 0x40187013, &(0x7f0000003680)={0x7, @uvalue=0x2c, 0x4}) (async) pread64$auto(r0, &(0x7f0000000040)='veth1\x00', 0x200000000004, 0x4) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) (async, rerun: 64) socketpair$auto(0x20000001, 0x2, 0x3, 0x0) (rerun: 64) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000140), r4) sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001ec0)={0x14, r5, 0x721, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008004) (async) r6 = socketcall$auto(0x8b6, &(0x7f0000000100)=0xf48) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r6, 0x6) (async) r7 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r7, 0x921064a0, r7) (async, rerun: 64) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) (rerun: 64) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r8 = memfd_create$auto(0x0, 0xe) r9 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x80044944, 0x0) (async) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) r10 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f00000000c0), r3) sendmsg$auto_NCSI_CMD_PKG_INFO(r8, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB="c42500f2", @ANYRES16=r10, @ANYRES8=r3, @ANYRES32=0x0, @ANYRESHEX=r0], 0x5c4}, 0x1, 0x0, 0x0, 0x4080}, 0x4004080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) adjtimex$auto(0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, 0x0) close_range$auto(0x2, 0xa, 0x0) 9.031525283s ago: executing program 2 (id=3156): socket(0x10, 0x2, 0xc) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x0, 0x6, 0x2, 0x0) fanotify_init$auto(0x9, 0x3) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000080)='Ic\x00\x00\x00\xa2\xd7\x84\x8c\xffu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97-\xe3\xe3\xc0\t\xfeA\x17\x97\xf9\xc42\x00', 0x100000a3d9) r1 = socket(0xa, 0x801, 0x84) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001bc0), r2) r3 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000004a80), r2) sendmsg$auto_NET_SHAPER_CMD_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf25020000000c000180080001006d94bade204540007c942c260000"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x200000c0) 7.978356832s ago: executing program 4 (id=3160): mmap$auto(0x1, 0x40009, 0xe2, 0x9b72, 0x7, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/acpi/wakeup\x00', 0x48041, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video27\x00', 0x511b81, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x1, 0x84) futex$auto(0x0, 0x8c, 0x1, 0x0, 0x0, 0x1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x2005c085) bpf$auto(0x0, &(0x7f00000001c0)=@test={r1, 0xffff, 0xfffff0b6, 0xffff, 0x80, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x20068198}, 0x6f6) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20004000) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuacct.stat\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000200)=""/163, 0xa3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYBLOB="12"], 0x1ac}}, 0x48001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/trace\x00', 0x1a6b75d638828712, 0x0) r4 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @private=0xa010100}, 0x6a) ioprio_set$auto(0x2, 0x800000000, 0xa8a) setsockopt$auto(r4, 0x0, 0x80000001, 0x0, 0x0) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1e1842, 0x0) 7.927301539s ago: executing program 2 (id=3161): mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) fstat$auto(r0, 0x0) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x541c, r2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x129ec3, 0x0) bpf$auto(0x0, 0x0, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x80840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(&(0x7f0000000280)) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40040, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/mptcp/available_schedulers\x00', 0x0, 0x0) read$auto(r3, &(0x7f00000001c0)='(]\x00\x8cyg\xe6\x95\xb7\x93\x14j\xc0\x021\x1c\xccW:/z\xbbm9\xdf|{*:\xb8\xbe\x93\xca\x82\xd3\xcc]\x02\x00\x00\x00\x00\x00\x00\x00Q\x1bN\x99\xa4\x1d\x01\x94\xb9^u\x92\xf7\xb2E\xb2c\x8b\x87H \xb3\x11\v\xe2\xb9Q\x99\x13\xf8\x95Vq\xee\xeeP\xb6e8\xbf\xce\xd7\x17G\x02G\x80\xc6\xd2\xbd\xe1f;a\x01\xd0h\xc5\xf6\x9f\xa0\xf0t\x18\xe0\xac\xaa\xb79\xed\xce,\x1d\x12QK\xffO\xb9^\x86`Z\xffs\xd0\xa4\nt\xb1\xb6\xb9\xc6\'\xa0\n#j\xc2\xac\xff\xc4\x15O\xba\xc5\xc0\xf3Z\xb5\x18\x92,\x06\xf5\x7f\x92\xd1\xf1N\x0ev]\xa3\xbb\x12\xb9\xb8\xcb_\xa5\x0f\x1f>a\x88\xa0?\xf7\xc2\x16+\x95\x1b\x96\xbd\x15\x15\xe3\x96`\xe6\xf2\x02\xc1{8\xcd\xdbV\xc6ZH4\x03\x98V\xfd-\xa0OM\x9ex\xc5\xc2>8\xdat5=\xff\n\xddB\xee\x96\x1dx\n(\xdd\x14e\x1c\x18\x7f\xae\x8e\xebs4\xb6\x9b0\xca\"\xa2\x8b(T\x03\x81k\x91*w\xe17\x94\xfb\xf1\xbe\xfe8\xe2\xddV\x8b}\x11\xa75\xa4j\x8e\x15\x1d\xfe\x8ar\xfa\xf3%\f\xe2\x1fj\x1e\x97\xd9\x9c_l\x12_\x85\xea\xaew\x02\x8f\xf4\x90&\x99\xb1\x83\xd8he\xe2X\xc8\xcd\x90\xde=\xd2\x81\x8b\xed\xbc\x86\xdb\x8a%\x9c\x00\\\xe1\x84\x7fv!\xc2p\x00\xf1\xf8)\xd2\x97\x90\xb7\x8d\xb2:C\xfa\xa7\x1f\t\xa4Ma\xb4\xb2\x12f\xfa\xae\x8c8\xf0\x91\x9c\xeb\xeb\xc1mi\x1b\xb6\x8c\xbf\x19\xe5z\xcb$:\xe3\xa0\x8a,\xba\xe3\xb5\xd4,\xd5\x15DS\xd08x\xc0\xb9\x11\xb2@\xa2\xe1\xfd\xd4\b\x12\xa4\x90c\x8a\xac\xdc\xa3\x03\xaf\xc7\xd2\x810b\xfb\xac\xf9G\xeb\xf0\xb7\x19/\'\xc8\xb9\xa3\nX\x92\x8b\xe7\xe1\xf1\xaf\xfds\x0e\x9b9\xcc\x80T4N\xd3\x0e\x14\xc92\xde\xbb\xe5\xc2\x02\x8a\xe2(\x0f\x93@\x19?\x96I4h\xf5nXA\v\xc4\xf5\x87P\xe4\xb2\x94(\x12qo\xa9\xb9\x16}B\xbc\xe7\x10tD\x9c\xe2\"\x04-\xb01\x99C\xa8m\xb2`\x8c\x18\x9d\xb4\"\xab\xb1\x06\xa3Q{\x05\x1d\x8c4xo\xea\xd4\x99\x17$\x94\x99\x06\x96\x99\v{u\\\x84\xc0M\xd5\"\xb1\x92\a\x02\xac\t\xde\x8a\xbb\x8d\x88\xd6\xff`\x87|\xc7E\x88N\x17\x8eA\xb8\x95\xces\xba\x8a\x18d\xf9`g\n\xa0\xe4#\xfb\xf0\x84R\xc7xi\xb1\x19\xa4.\xc1\xca\x9d\xdb\x11T\xca\x93\xe3\xdfXk\'\xe2\f\xfc\x94iYt\x0e\xac`*\x1cx>\xb9\x9e\x83cf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = prctl$auto(0x3e, 0x0, 0x4, 0x1, 0x7fe) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) pread64$auto(r4, 0x0, 0x40000000f42c, 0x80002) r5 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000200), r3) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xe000420}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x120, r5, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x4}, @NCSI_ATTR_PACKAGE_LIST={0x101, 0x2, 0x0, 0x1, [@generic="1f659bcdc2b3a24138f5c03057b89ffe071839993d4a8b90bc9e4e1197cc7b9ac6fd5eb08c386b27f95f976c57b748446c1fba1f89a67c6e3695871c9de09f6b151efd3b67c5dd86c1bc73f27d8ebd86458c07f19b665b809ce8d70684af8468e26f71cd71aa8dbd0b7a807e3d7723c4467c93c4b1d547abdc5c1d20b9823460b8c7ae5a82d52cdbae172fb22814f8d8c7a5b2078970589de8828ead2574f4f08198df3d940393b00c18650023b9ab589731f0e413f93fc04c0bb38dc048586a7a0ff49455d0fbbde3e4b08f63a9d98b54b88ce9b1b7ef5e13c2765bdcbbf9a234656244f96c2b5acd81dbedc26693d3763a7ae9ae8eecc1953a78e29f"]}]}, 0x120}}, 0x4000) epoll_ctl$auto(0xffffffffffffffff, 0x80000000, 0xffffffffffffffff, 0x0) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$auto_OSS_GETVERSION2(r6, 0x80044d76, &(0x7f0000000080)) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) r7 = openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) read$auto_rfcomm_sock_debugfs_fops_(r7, &(0x7f0000000040)=""/117, 0x75) ioctl$auto_BTRFS_IOC_SEND_32(r1, 0x40449426, &(0x7f00000005c0)={@raw, 0x100004, 0xd47, 0xe0, 0x8000, 0xfffffffe, "fd64ab47b98fa2408fa518c6aeeb26534e24eab2a94d69169092f351"}) poll$auto(0x0, 0x7e, 0x3) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) 7.211190685s ago: executing program 1 (id=3165): set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = setfsuid$auto(0xee00) setreuid$auto(r1, r1) r2 = getegid() r3 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000280)={@_si_pad}, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000001, 0x3, 0x1, 0xf9, 0xfffffffffffffffc, 0x7, 0x6274, 0x7, 0x0, 0xb, 0x35d, 0x439c, 0x6, 0x7}) shmctl$auto_SHM_STAT_ANY(0x0, 0xf, &(0x7f00000006c0)={{0x7, r1, r2, 0x4, 0x6, 0x81, 0x48d}, 0x1, 0x5, 0x8, 0x2, @inferred=r3, @raw=0x5, 0x5, 0x0, &(0x7f0000000500)="4f98c640887224e1536d4e40a39d3c81a9c6e8ae66bc479f7d92b6c649f07587e8084d4fd558d54a2ddca9c318eb050342e0fbb295dd58250b8d185616881413c9b3a8bbc9cb6f3059624b9d64d81f5b347672273ff0eac474a4fce025de7972a1b178c920727aab101d7741be7f42a7acc5ee4675ca2c96a2d08ca9a74b323f548afca84b63a71fb65c71061963f9693b6afa898480b20dc6d2e4f35f2381eabde6ac3f3b34948a7014878f346459ef0a11d7cb4fe7732d8d9e95d0cc7450914c2b63b9054c10080ba951b8f095adaead86e8bf209f5a9ecef565321572507c2b71c3a04fe37344218ffc325a27547ba7f31f1edb3ba545", &(0x7f0000000600)="3b4aab5baf7b70279f51554278b9b2497af28d2f68748361dda23b269d8b59ff913dc2ce2f41389066481eb9ea5492d38b5b950569f4d785c41fe5d0ab02234a66c5d804108051813044b3235a4b452ff0c51b938f2f5440d9ecee6cfad16d8271c93fa2488f5af21c4361fca3799a20b53b6f0c6c3b19b35a674aec24b246c982d5f007b2ecde6cab52699af3b1e94e1a42d4e4"}) msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000000740)={{0x0, r1, 0xee00, 0x9, 0x5, 0x8, 0xfa}, &(0x7f00000001c0)=0x6, 0x0, 0x5, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x89, 0xf, @inferred, @raw=0x67abc800}) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) set_mempolicy$auto(0x5, &(0x7f0000000400)=0xfffffffffffffffd, 0x3b) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b4020000d0e317768c5cd257a4a9c921558ba19db42667e217ec23299ace2df8a72a8fd5", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf250b00000008000b009b0c000005000800070000000500250005000000730219805d012a801400e800fc0100000000000000000000000000019b45edd5b9d87b0e5e9266dfb2240fbe59619ebb0f863a2bd6d8fee0d680876d4be088b44547cc30553285902529be448cec0e729e8a3f582bc0c473bef9528d510def083e6326e67e1d0614a235a32b10a86a5ec52d8547d8b10a03c201eea112568323a553fbbcd03738a046b48e0e9fb4684daf36e87939ff5dc43aed0d5b71c1421e0e159428514150a6bcd27beabb53b1126aae790dfe83d0fecdc79a16685514bb67dca7a8a7953b8a517fc8db0bf984028daae9b0bb34d2820800fd00", @ANYRES32=r4, @ANYBLOB="e86b703b1f29a1ab57fe4f67fe4aa01f8d03e382b4ff4263189c16b0419e5ce998a74c38a23fe135916ce6c1e5cefa943dde1a950c91914af54bc48b497ee6f49a6ae5b78ec5a0f1f1b4542549533aa7f1c10da25442296f1426d3791f5fe6ce62b1465210f8d0d67004007f8008006300e00000010800e900", @ANYRES32=r5, @ANYBLOB="04001b80000000a9870ccd76e776644e9f39da251a6237d1647ee84ac56427e43c46028a7618ee72498036b08ca198fb5db60ec0a5823f4a9c3fc481590f56b5fab6cad268fb49b86a1c881d326ef6a215c82eae9e74f3b255f4f94a6555e7cd7c4402f2ef7cc63be6844ed6cfcf5d2e54"], 0x2b4}, 0x1, 0x0, 0x0, 0x40}, 0x24008010) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) utime$auto(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={0xffff, 0xd73}) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) pread64$auto(r7, 0x0, 0x10001, 0x82d) write$auto(0xffffffffffffffff, 0x0, 0xc) close_range$auto(0x2, 0x8, 0x0) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x1, 0xfffffffffffff966, 0xffffffff) madvise$auto(0x2, 0x5c61fa2c, 0xf) unshare$auto(0x8000000) 6.933003747s ago: executing program 2 (id=3167): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) symlink$auto(&(0x7f0000001500)='./file0/file0\x00', 0x0) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)=@query={@target_ifindex, 0x4, 0xa6ad, 0x7, 0xca4b, @prog_cnt=0x40, 0x0, 0x4, 0x0, 0x100, 0x2}, 0x122) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)=@bpf_attr_1={0xffffffffffffffff, 0x9, @next_key=0x7, 0x6}, 0x6b) socket(0xb, 0x3, 0x2) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, 0x0, 0x0, 0x0, 0xac, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0xffffffffffffffff, 0x6, 0x6, 0x200000100103}) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xffffffffffffffff, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r1) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000ac0)={0x458, r2, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_PMKR0_NAME={0xec, 0x102, "3a29e2f36e0237ffdf0a889c3044ef8034e99e2621797b1728a1ae76e88d7e2dd8a6ca342d2e8fa50a95647929059f63d48203f1a82f0659da3bb2f5d12a574ea14bfae8081e8fea607c10f151e3268563d61ba5e1ab53111b2ea9521e7437337d2315c9b990fbaed48bfe150c9851fcf18d7a70926071938d019406da70aa8036dadda65a64d3585f94c17b70b2e6aa3e254b97e25e4cb36c6d40cd1f2802ba587cc7f71eca3f0cc5bc4fb47c76853511413c6b997c2387a2796a01a209ebd19cbd2754b57c1034d1db538217ee5b986af6933d6bd3d28819f3efe4a89d5b5861266ad0bee0575c"}, @NL80211_ATTR_STA_WME={0xc, 0x81, 0x0, 0x1, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x2}]}, @NL80211_ATTR_CQM={0x247, 0x5e, 0x0, 0x1, [@generic="d53d3bbd3a665780dad3d53e86b39d870b9ec3ffa0654c2f5d80a9043b2d041995f847593daa9864a7b22b89a8a1b797c77a295cca0a617309d3c20568b2f66e8cb31094c8ccdb72f4f18190165e249034b9dedcf6639a86a078f06e78f32e7aebd45665d01b955610c6ca", @typed={0x13, 0x148, 0x0, 0x0, @str='%-<#+([)/:}(/-\x00'}, @generic="faabea397183b763cdc36f36a43b3d74fb59e04cf4de0f63bf3204e0e4cad1cc93c10a060c7d6c45b52bd7724d7b0b6a490e50e8a9699931a09296e5656e12a07b72e69faafbb4eb9b15e83c34cb59e826003a14b35a3b0cfb54b60098ee793ead406f1f58ec8294bfcce4838cc1b2c14dcc4fa51731096fa5fdb727301792fb09002dda032d3454d82f9893", @generic="0e0ba05d847342c51d7aeb9f03395b84ecd9e623dab79589150bcfc096e0884f69acbf9b5f0c25312064f6fc7da294818b6d44734d8a0c8aca6af2942482a33e38fd6cb1b27bc6d576f69f8df3fdb61df308bee9d19dbd9f58faf61423726a6c093f03f63d0fd228ef6cf6b103105590f8afc1ac8dfc", @nested={0x8, 0x2b, 0x0, 0x1, [@nested={0x4, 0xd}]}, @typed={0x4, 0x88}, @generic="835bc47c2fe49cd62e5d8a474b15813fa0728ac52a283cf1e3f142e014d8a9ef603827a0622dafd10bc8643fa6efd6f1c5c6d85100e302a334a25a409c9b33ed1f34ec31f77e4c554c6259e4e9a5c485d86ebcccccda93245ea9b90c1a4ca1650d590598753d70fabf7610e0d1bcfe08407c76de1df46806646f71dd4c2ad178bd4cb75e0264aa1879597f516a4f9cb21e8761faa19b12dd25c8507f499556e66c1199e03c582ead5c9722f50e81", @typed={0x8, 0x4f, 0x0, 0x0, @u32=0x1}]}, @NL80211_ATTR_PREV_BSSID={0xe6, 0x4f, "79ff1c8f41ec2f1bc3adde4b90c203a7957886b39ba0bdcf27b27e99b763f8d7527da4a0ef01009a03ab8f7c0a3e14c36d6f573dcf2cf4b1339db64ca33d456bc75727b4d7ce43313a9d1fa112cc33f51200847797f9cd6db7f195f3eee36c238ead891da208fab468333be0b090178f593f6382acc964096dd58b20a8763b4e70a712f2a040fbddfffac0defb7364c4328c4f9c14fdaa3d14fe9b791d946e0a192e1d67a39327fb2db96ab2c546e99c5ae5c1feb2980eae49cb8a7eecc3b9222096d0b0602063d440d4420eeb1bdbd90f8759f96da8fea449761adb66d52390c889"}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_KEY_DATA={0x11, 0x7, "2ad7c48fe15459068da601ed2c"}]}, 0x458}, 0x1, 0x0, 0x0, 0x20040844}, 0x0) sendmsg$auto_NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x88, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_QOS_MAP={0x74, 0xc7, "00ef0f6c146a376a85adf15789e151f225b1faa8822b6807f95d2558385ab1354613f6a1e885a5c90d8c33a575fb383b07af6645cbead886f4573a3ed47aeebddb516bd3269410ccb00e323c7393bdec1f958f83a6fffdcf1f6a4ebb68c5bccf23d0be5ba00ffb4c50681af16732f565"}]}, 0x88}, 0x1, 0x0, 0x0, 0x24000080}, 0x44080) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r3 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r4) 6.333504705s ago: executing program 4 (id=3168): set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = setfsuid$auto(0xee00) setreuid$auto(r1, r1) r2 = getegid() r3 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000280)={@_si_pad}, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000001, 0x3, 0x1, 0xf9, 0xfffffffffffffffc, 0x7, 0x6274, 0x7, 0x0, 0xb, 0x35d, 0x439c, 0x6, 0x7}) shmctl$auto_SHM_STAT_ANY(0x0, 0xf, &(0x7f00000006c0)={{0x7, r1, r2, 0x4, 0x6, 0x81, 0x48d}, 0x1, 0x5, 0x8, 0x2, @inferred=r3, @raw=0x5, 0x5, 0x0, &(0x7f0000000500)="4f98c640887224e1536d4e40a39d3c81a9c6e8ae66bc479f7d92b6c649f07587e8084d4fd558d54a2ddca9c318eb050342e0fbb295dd58250b8d185616881413c9b3a8bbc9cb6f3059624b9d64d81f5b347672273ff0eac474a4fce025de7972a1b178c920727aab101d7741be7f42a7acc5ee4675ca2c96a2d08ca9a74b323f548afca84b63a71fb65c71061963f9693b6afa898480b20dc6d2e4f35f2381eabde6ac3f3b34948a7014878f346459ef0a11d7cb4fe7732d8d9e95d0cc7450914c2b63b9054c10080ba951b8f095adaead86e8bf209f5a9ecef565321572507c2b71c3a04fe37344218ffc325a27547ba7f31f1edb3ba545", &(0x7f0000000600)="3b4aab5baf7b70279f51554278b9b2497af28d2f68748361dda23b269d8b59ff913dc2ce2f41389066481eb9ea5492d38b5b950569f4d785c41fe5d0ab02234a66c5d804108051813044b3235a4b452ff0c51b938f2f5440d9ecee6cfad16d8271c93fa2488f5af21c4361fca3799a20b53b6f0c6c3b19b35a674aec24b246c982d5f007b2ecde6cab52699af3b1e94e1a42d4e4"}) msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f0000000740)={{0x0, r1, 0xee00, 0x9, 0x5, 0x8, 0xfa}, &(0x7f00000001c0)=0x6, 0x0, 0x5, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x89, 0xf, @inferred, @raw=0x67abc800}) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) set_mempolicy$auto(0x5, &(0x7f0000000400)=0xfffffffffffffffd, 0x3b) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="e86b703b1f29a1ab57fe4f67fe4aa01f8d03e382b4ff4263189c16b0419e5ce998a74c38a23fe135916ce6c1e5cefa943dde1a950c91914af54bc48b497ee6f49a6ae5b78ec5a0f1f1b4542549533aa7f1c10da25442296f1426d3791f5fe6ce62b1465210f8d0d67004007f8008006300e00000010800e900", @ANYRES32=r5, @ANYBLOB="04001b80000000a9870ccd76e776644e9f39da251a6237d1647ee84ac56427e43c46028a7618ee72498036b08ca198fb5db60ec0a5823f4a9c3fc481590f56b5fab6cad268fb49b86a1c881d326ef6a215c82eae9e74f3b255f4f94a6555e7cd7c4402f2ef7cc63be6844ed6cfcf5d2e54"], 0x2b4}, 0x1, 0x0, 0x0, 0x40}, 0x24008010) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) utime$auto(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={0xffff, 0xd73}) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) pread64$auto(r7, 0x0, 0x10001, 0x82d) write$auto(0xffffffffffffffff, 0x0, 0xc) close_range$auto(0x2, 0x8, 0x0) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x1, 0xfffffffffffff966, 0xffffffff) madvise$auto(0x2, 0x5c61fa2c, 0xf) unshare$auto(0x8000000) 6.321604437s ago: executing program 2 (id=3169): r0 = eventfd$auto(0x7f) read$auto_vhci_fops_hci_vhci(r0, &(0x7f0000000200)=""/36, 0x24) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f00000000c0), 0x55) ioctl$auto(0x3, 0x5411, 0x10000000000402) socket(0x2, 0x2, 0x0) bind$auto(0x3, 0x0, 0x67) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x25, 0x4909b6f5, 0x1ffe0, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0x68d, 0x9, 0x8, 0x10003, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x8000000000000000, 0x0, 0x0, 0x0, 0x8, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x90, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x82042, 0x0) mmap$auto(0x0, 0x3, 0xffb, 0x8100200008011, 0x3, 0xfffffdfffff00000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) memfd_secret$auto(0x3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0x40603d07, 0x0) socketpair$auto(0x1e, 0x6, 0x3, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x2000c, 0xdf, 0x14, r2, 0x8000) 5.527349069s ago: executing program 1 (id=3170): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ocfs2/max_locking_protocol\x00', 0xa2500, 0x0) socket(0xa, 0x2, 0x3a) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x408000) r1 = clone$auto(0x20003b4a, 0xecc, 0x0, 0x0, 0x2) r2 = pidfd_open$auto(r1, 0x0) setns(r2, 0x60020000) fsmount$auto(r0, 0x80000000, 0x10001) socket(0x1e, 0x5, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r0) ioctl$auto(0x3, 0x89e0, 0x38) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) ioctl$auto(0xc8, 0x400454d4, 0xe) 5.054966586s ago: executing program 6 (id=3171): close_range$auto(0x2, 0xa, 0x0) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) (async) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x8202, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) r0 = socket(0x29, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_PSE_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='\f', @ANYRES16=0x0, @ANYBLOB="0100273d7000fcdbdf252400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4000050}, 0x40d8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r0, 0x4) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r0, 0x4) r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) close_range$auto(0x0, 0xfffff004, 0x2) socket(0x3, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) (async) r2 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0xf, r2, @relative_fd, 0xe600}, 0xf) (async) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0xf, r2, @relative_fd, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) r5 = socket(0x18, 0x5, 0x1) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000002000), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_DELPDP(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000040)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2a3df8e9420eabf0}, 0x1004c050) (async) sendmsg$auto_GTP_CMD_DELPDP(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000040)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2a3df8e9420eabf0}, 0x1004c050) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) lsm_get_self_attr$auto(0x64, 0x0, &(0x7f0000002440)=0x1ff, 0x0) (async) lsm_get_self_attr$auto(0x64, 0x0, &(0x7f0000002440)=0x1ff, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/x86/tlb_single_page_flush_ceiling\x00', 0x22001, 0x0) 4.92328352s ago: executing program 4 (id=3172): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x0, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x0, 0x80008484, 0x0, 0x0) mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x401, 0x0) r1 = socket(0x6, 0x1, 0x6) pwritev2$auto(r1, &(0x7f00000000c0)={0x0, 0x80000000200}, 0x8000000000000004, 0xffffffffffffffff, 0x8, 0x1000003) unshare$auto(0x40000080) setsockopt$auto(0x400000000000003, 0x2d, 0x1c, 0x0, 0x3) r2 = socket(0x10, 0x2, 0xc) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket(0x10, 0x2, 0xc) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400375528c5ffcf1dff2a9f909a4890e8c90000", @ANYRES16=r5, @ANYBLOB="10002cbd7000fadbdf250a00000a00000200252f00e2a85c41e75a02715bcbc0b04e5cdcdf28fffe65c31770799fdab838aaf6712a82e628c9e6429a4a38320b2d692863927bd744b4f7b409b29862d3257675d4fd09d74a831929b1005bdd28ef3fc5ae2884ef6a78fedbebbc656141771e57124268c37932c90ec99923926a97bb444f6903a41102463c79baf78c35827f46efb37be97277d81130bd43e31c60347610f3e65f3d60d3d1e231c0cc23ad56ff23565d95cfafc7a92a64da18c0c01c0600010006000000"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004859}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10044010) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x143002, 0x0) ioctl$auto_SNDCTL_SEQ_GETTIME(r6, 0x80045113, &(0x7f0000000540)="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") mmap$auto(0x0, 0x5, 0xffb, 0x8000000008011, 0x3, 0x0) socket(0x18, 0xa, 0x1) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x4, 0x4, 0x5, 0x80000200009b72, 0x1000, 0x5) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x3) ioctl$auto(0x3, 0xc0104d03, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) 4.593388917s ago: executing program 6 (id=3173): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)={0x20, 0x0, 0x301, 0x70bd23, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0x9, 0x2, 'l2tp\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="000126bd7000fbdbdf2502"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) socketpair$auto(0x6, 0x8000, 0x3, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setuid$auto(0xe) socket(0x2d, 0x2, 0x0) ioctl$auto(0x3, 0x89e0, 0x91) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x1d, 0x2, 0x6) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r1, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x400, 0x0) write$auto(r1, &(0x7f0000000100)='\x00', 0x10001) ioctl$auto_CEC_S_MODE(r4, 0x40046109, &(0x7f0000000000)=0x22) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x212843, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_SET_HALT(r5, 0x4004550d, &(0x7f0000000080)=0xfffffff9) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$NS_GET_PARENT(r6, 0x8008b705, 0x1000000000000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x30000081}, 0x2c040882) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) 4.316140862s ago: executing program 6 (id=3174): r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x103240, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x80102, 0x0) ioctl$auto_SNDCTL_FM_4OP_ENABLE(r1, 0x4004510f, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) setresuid$auto(0x8, 0x8, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000340)="c80c1b5d529b5881", 0x8) r3 = setfsuid$auto(0xee00) setreuid$auto(r3, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x3, 0x40007, 0xae82, 0x3c, r0, 0x400000000028004) r4 = socket(0x11, 0x80003, 0x300) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f0000000240)='/\x00R\xa6\x00\xc8\xda\xdc\xb1\xb4#\xe4\xeb\xe1e/\x1b/\xb9L\xc6P\x82\xba\x90@\xb8\xb5\xb1\xe8\"\x88s\xdf\x15\xaa\x18\xa9\x86\xc7\x87g>8\xae\x99\xd4~\xc6\xa7\\\xcc\xfeV\x83\f\xdc\xdc~\x8e\xd5\x18\x13\x16\xc5\x93E\x10\xcb\x1c\x02\x00\xd2\xa4_\xa3\xdcS\xe2\xe2\xc6\x85p\xfa\xc3/G\x86\xea\x9f\xb0\x9a\xcc6\x1a\x06\x91\x9f\xcfC\xedU\x00f`\x02\x04\xef\xfe\x10\xec\x17\x83%K\x04\xd5s\x86\xe4\x9d\x15\f\x8c\xd9wj\xe5t\x82o7\xc05ul\xacU\xbf\xc0\xfe\xb4\xd7\t\xe0s]\xcd\xac\x87\xa5\xa6.t\xa9\xe8\xa6>\xf2\xd0\xb1\x83\x83\x91\a\xdc\xe9\xaa\x1dx\x06\xa77\xd6\xe1\xe9\x94\xb9Xi\xbbv_\x9a_bv%\xcb\xc7\xdd\xa3\xb4\tpr%\xdf\xc9\x06\xa2\xe7\xe1\xde\x16\xf7\x03x\xf8\v\v\x1a\xfcm\x87r\xc1\b\xca\x97\xb0\xeb\xd6F\x8f^\x94\xdf\x9ax\xf4\x03e[l\xa5Q\x1f\xff3O\xe67Y\xd0\xfe$\x1f\x82\x8e\x9d\xb2>\xf7\xa8#\xa7+\xaf\x18\x97\x7f\xe3N\x9a\xe1\x02o\xeb\x92\xfd\xd5\x9bU\xe0\xb5\xd2\x95\x92CY\xf9\x99Gi\xdb\xe0m\x0f\xddk\x83\x87\\\x03<\xc0kl\xf6s@f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sched_setattr$auto(0x0, 0x0, 0x7b) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) mremap$auto(0x2, 0x5, 0x0, 0xffffffffffffffff, 0x9) read$auto(r3, &(0x7f0000000080)=',*(,\x00', 0xffffffff) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_DISABLE_EHT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x101801, 0x0) 3.262984977s ago: executing program 1 (id=3176): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) (async) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x4202c3, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) (rerun: 32) r0 = io_uring_setup$auto(0x6, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8000, 0x0) (async, rerun: 32) r2 = socket(0xa, 0x2, 0x88) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$auto_posix_clock_file_operations_posix_clock(r4, 0x40603d07, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async, rerun: 64) sendmsg$auto_ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000680)={0xc4, 0x0, 0xa, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1ff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfdfffffe}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x8000080}, 0x4000000) (async, rerun: 64) bpf$auto(0x0, &(0x7f00000002c0)=@bpf_attr_5={@target_fd=r1, r3, 0x4, 0x401, r2, @relative_fd=r3, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@enable_stats={0x6}, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x0, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (rerun: 64) openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim1/psample/enable\x00', 0x284000, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.subtree_control\x00', 0x142, 0x0) write$auto(r6, 0x0, 0x9) (async, rerun: 32) write$auto_dynamic_events_ops_trace_dynevent(r5, &(0x7f0000000100)="a9e2", 0x2) (rerun: 32) 2.665851833s ago: executing program 2 (id=3177): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(0x3, 0x80000541b, 0xffffffffffffffff) semtimedop$auto(0xd9, 0x0, 0x38ef, 0x0) (async) semtimedop$auto(0xd9, 0x0, 0x38ef, 0x0) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x22302, 0x0) ioctl$auto(r0, 0x81004517, r0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/hwsim0/testing\x00', 0x2, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/hwsim0/testing\x00', 0x2, 0x0) 1.453826496s ago: executing program 6 (id=3178): r0 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) clock_adjtime$auto(0x0, &(0x7f0000000040)={0xfbb, 0x0, 0x7f, 0xfffffffff7fffffe, 0x600, 0x1, 0x7, 0x0, 0x7, 0x8, 0x5, {0x3ff, 0x7}, 0xfffffffffffffffa, 0xa5, 0xa, 0x13c, 0x0, 0xc3, 0x1000, 0x800000000000007, 0x5, 0x90, 0xfffffff5}) getsockopt$auto_SO_BUF_LOCK(r0, 0x36, 0x48, &(0x7f0000000140)='\x00', &(0x7f0000000180)=0x9) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x2, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000040)={0x14000, 0x9, 0xf, 0xffffffffffff8001, 0x2b2, 0x4, 0x5, 0x1, 0x7fff, 0x4, 0x4, 0x9, "cfd1bd1c34f9203c74ff4841d6a15d9c01351e8ee96da4bec5359cb86f52fa7ed1f2ab068e15c2dc61c52ecfa8b004eb2c0fe7c4a5ddfa30"}) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x7) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3}, 0x6a) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) socketpair$auto(0xffffffff, 0x9, 0x8, &(0x7f0000000000)=0x47) 1.349402747s ago: executing program 2 (id=3179): select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x9, 0x2, 0x4, 0xb1, 0xffffffffffffffff, 0x7ff) openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) syz_genetlink_get_family_id$auto_ila(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) io_setup$auto(0x1, 0x0) syz_clone(0x84040400, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = socket(0x23, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[@ANYBLOB="17000000", @ANYBLOB='j\x00%', @ANYBLOB="8e"], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340), 0xfc2}, 0x2, &(0x7f0000000440), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0xfdef) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x28000, 0x0) sendmsg$auto_NL80211_CMD_NEW_STATION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="e8000000", @ANYRES16=0x0, @ANYBLOB="080026bd7000fbdbdf2513000000d100ba00b54424ced0878b75ce327870dd1effe4fc498a9bc99ba5eeac7dd3f6246806000000b5ed9deed5b217e577038578430448c297fb86622340127bc20889e5953302f85b960ab5b6efc01432b42f959867027d8ba5bef5bb21bf3c2885258065771c302da3a90480d1789e9529e8ba9c140aa622ea1adc41a1a32626ab7ccda61a3dfcd68f6c7f517d558baea7136ac0c30a4870a42bf6ba847e7e3fdcb44b9379b5ac899e4ec4179d431697c6326285b8448c601be458c2aa88a35da0414784b45c2d2cb8a6a66af80000000000000000"], 0xe8}}, 0x4040) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) remap_file_pages$auto(0xbe1, 0x20, 0x0, 0x0, 0xb) sendfile$auto(0x1, 0x3, 0x0, 0xd551) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/acpi/parameters/ec_event_clearing\x00', 0x129882, 0x0) sendfile$auto(r1, r1, 0x0, 0x8) futex$auto(0x0, 0x5, 0x1, 0x0, &(0x7f0000000000)=0x9, 0x672318f4) 1.290325987s ago: executing program 1 (id=3180): mmap$auto(0x10000000001, 0x83, 0x400000000000db, 0x2000000000000d6, 0xffffffffffffffff, 0x7ffe) r0 = socket(0x2, 0x1, 0x0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$auto(0x0, 0x400005, 0x80000000df, 0x16, 0xffffffffffffffff, 0x8000) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000280), 0x4080, 0x0) madvise$auto(0x46, 0xffffffffffff0001, 0x76) ioctl$auto_RTC_IRQP_READ(r1, 0x8008700b, 0x0) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/cmdline\x00', 0x0, 0x0) keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x100, 0x0, 0x80000c, 0x0, 0x1f, 0x501}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r2 = openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x80, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r2, 0x7, 0xd, 0x0) write$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), r0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x309183, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000036, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r4, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES16=r3, @ANYRESHEX=r1, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4040812) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x80000000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) 1.113971152s ago: executing program 6 (id=3181): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) socket(0xa, 0xa, 0x88) socket(0x1f, 0x2, 0xc) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r1, 0x1, r0) close_range$auto(r1, r1, 0x0) pidfd_send_signal$auto_SIGCONT(r1, 0x12, &(0x7f0000000040)={@_si_pad}, 0x3ff) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x1) mmap$auto(0x0, 0x2000d, 0xa3, 0x11, 0x404, 0x10008000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x15, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = socket(0x23, 0x80805, 0x0) bind$auto(r4, &(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x3) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$auto(r3, &(0x7f0000000400)='/de/,\xf7f\x85P\x83:|', 0x100000a3d9) select$auto(0x10001, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0xa31a, 0x6, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0) write$auto(r2, 0x0, 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdb, 0x9b72, 0x7, 0x28000) 495.411002ms ago: executing program 4 (id=3182): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x48100, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpgid(0x0) pidfd_open$auto(r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000240), 0xffffffffffffffff) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, 0x0, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r4) write$auto(r5, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/025/001\x00', 0x8901, 0x0) 141.932502ms ago: executing program 1 (id=3183): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0xa, 0x0) r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x6, @broadcast}, 0x6a) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x6}, 0x7, 0x0, 0x4, 0xb}, 0xfff}, 0x5, 0x8088) 0s ago: executing program 6 (id=3184): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000300), 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) unshare$auto(0x400) select$auto(0xd, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0xff, 0x2000000000000002, 0x9, 0xfffffffffffff761, 0x103, 0xa, 0x4, 0x7fff, 0x5, 0x4006]}, 0x0, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x7ff, 0x400) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb5, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x100000000000]}, 0x1fe, 0xd) dup3$auto(0x8000000000000001, 0x5, 0x800080000) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffffffffffd03, &(0x7f00000001c0)) socket(0x15, 0x5, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x1, @remote}, 0x8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/ip6tnl0/bootp_relay\x00', 0x5014c0, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x82000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89fc, &(0x7f0000000040)={'veth0_macvtap\x00'}) ioctl$auto_TUNSETNOCSUM(r1, 0x400454c8, &(0x7f0000000080)=0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c091}, 0x40000) kernel console output (not intermixed with test programs): Program Type: 0 [ 1055.512434][T19237] veth0_vlan: left allmulticast mode [ 1055.539230][T19228] inactive [ 1055.548231][T19228] vivid-003: RDS PS Name: inactive [ 1055.558259][T19228] vivid-003: RDS Radio Text: inactive [ 1055.570735][T19228] vivid-003: RDS Traffic Announcement: false inactive [ 1055.584299][T19228] vivid-003: RDS Traffic Program: false inactive [ 1055.593095][T19228] vivid-003: RDS Music: false inactive [ 1055.598773][T19228] vivid-003: ================== END STATUS ================== [ 1055.994390][T19246] FAULT_INJECTION: forcing a failure. [ 1055.994390][T19246] name failslab, interval 1, probability 0, space 0, times 0 [ 1056.024123][T19246] CPU: 0 UID: 0 PID: 19246 Comm: syz.4.2793 Not tainted syzkaller #0 PREEMPT(full) [ 1056.024164][T19246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1056.024179][T19246] Call Trace: [ 1056.024188][T19246] [ 1056.024198][T19246] dump_stack_lvl+0x16c/0x1f0 [ 1056.024232][T19246] should_fail_ex+0x512/0x640 [ 1056.024269][T19246] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 1056.024300][T19246] should_failslab+0xc2/0x120 [ 1056.024334][T19246] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 1056.024362][T19246] ? __d_alloc+0x32/0xae0 [ 1056.024396][T19246] ? __d_alloc+0x32/0xae0 [ 1056.024421][T19246] __d_alloc+0x32/0xae0 [ 1056.024448][T19246] ? stack_trace_save+0x8e/0xc0 [ 1056.024479][T19246] d_alloc_parallel+0x111/0x1510 [ 1056.024533][T19246] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1056.024573][T19246] ? lockdep_init_map_type+0x5c/0x280 [ 1056.024610][T19246] ? lockdep_init_map_type+0x5c/0x280 [ 1056.024650][T19246] __lookup_slow+0x193/0x460 [ 1056.024687][T19246] ? __pfx___lookup_slow+0x10/0x10 [ 1056.024742][T19246] ? lookup_fast+0x156/0x610 [ 1056.024768][T19246] walk_component+0x353/0x5b0 [ 1056.024793][T19246] link_path_walk+0x627/0xe20 [ 1056.024828][T19246] path_openat+0x1b0/0x2cb0 [ 1056.024864][T19246] ? __pfx_path_openat+0x10/0x10 [ 1056.024893][T19246] ? __lock_acquire+0xb8a/0x1c90 [ 1056.024929][T19246] do_filp_open+0x20b/0x470 [ 1056.024956][T19246] ? __pfx_do_filp_open+0x10/0x10 [ 1056.025006][T19246] ? alloc_fd+0x471/0x7d0 [ 1056.025038][T19246] do_sys_openat2+0x11b/0x1d0 [ 1056.025074][T19246] ? __pfx_do_sys_openat2+0x10/0x10 [ 1056.025123][T19246] __x64_sys_openat+0x174/0x210 [ 1056.025166][T19246] ? __pfx___x64_sys_openat+0x10/0x10 [ 1056.025217][T19246] do_syscall_64+0xcd/0xfa0 [ 1056.025249][T19246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.025274][T19246] RIP: 0033:0x7ffa96b8f749 [ 1056.025293][T19246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1056.025318][T19246] RSP: 002b:00007ffa97a8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1056.025342][T19246] RAX: ffffffffffffffda RBX: 00007ffa96de6090 RCX: 00007ffa96b8f749 [ 1056.025358][T19246] RDX: 0000000000040302 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1056.025375][T19246] RBP: 00007ffa96c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1056.025390][T19246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1056.025405][T19246] R13: 00007ffa96de6128 R14: 00007ffa96de6090 R15: 00007ffcb7038378 [ 1056.025438][T19246] [ 1058.217477][T19267] QAT: Device 250 not found [ 1059.840871][T19288] netlink: 178 bytes leftover after parsing attributes in process `syz.4.2802'. [ 1060.070612][T19292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2805'. [ 1060.680994][T19296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2806'. [ 1060.743527][T19296] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2806'. [ 1060.984338][T19302] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 1061.641837][T19176] mkiss: ax0: crc mode is auto. [ 1062.424163][T19331] Invalid ELF header magic: != ELF [ 1062.807730][T19338] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1063.368209][T19346] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2817'. [ 1063.377637][T19347] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2817'. [ 1063.479676][T19340] ima: policy update failed [ 1063.492992][ T30] audit: type=1802 audit(1763623382.761:22): pid=19340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2816" res=0 errno=0 [ 1063.522511][ T5923] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1063.530640][ T5923] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1063.539724][ T5923] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1063.547543][ T5923] rtc_cmos 00:00: Alarms can be up to one day in the future [ 1063.562735][ T5923] rtc rtc0: __rtc_set_alarm: err=-22 [ 1065.384721][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1065.391111][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1066.392313][T19397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2828'. [ 1067.759777][T19420] netlink: 'syz.2.2834': attribute type 2 has an invalid length. [ 1068.735032][T19433] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2837'. [ 1068.827546][T19435] sctp: [Deprecated]: syz.1.2837 (pid 19435) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1068.827546][T19435] Use struct sctp_sack_info instead [ 1069.415939][T12009] Bluetooth: hci1: unexpected event 0x09 length: 435 > 3 [ 1072.497223][T16910] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1072.514735][T16910] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1072.527583][T16910] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1072.543305][T16910] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1072.551012][T16910] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1073.058494][T19335] mkiss: ax0: crc mode is auto. [ 1073.133273][T19478] input: 00 [ 1073.133273][T19478] as /devices/virtual/input/input21 [ 1073.507389][T19475] chnl_net:caif_netlink_parms(): no params data found [ 1073.690232][T19491] futex_wake_op: syz.1.2847 tries to shift op by -2048; fix this program [ 1073.966358][T19475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.986801][T19475] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.018653][T19475] bridge_slave_0: entered allmulticast mode [ 1074.049320][T19475] bridge_slave_0: entered promiscuous mode [ 1074.073626][T19475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.092880][T19475] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.118780][T19475] bridge_slave_1: entered allmulticast mode [ 1074.188407][T19475] bridge_slave_1: entered promiscuous mode [ 1074.652873][T16910] Bluetooth: hci4: command tx timeout [ 1074.701900][T19505] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2849'. [ 1075.056030][T19475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1075.072401][T19475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1075.321175][T19475] team0: Port device team_slave_0 added [ 1075.354218][T19475] team0: Port device team_slave_1 added [ 1075.411935][T19475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1075.419206][T19475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.447417][T19475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1075.475608][T19475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1075.482621][T19475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.509303][T19475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1075.595672][T19475] hsr_slave_0: entered promiscuous mode [ 1075.610030][T19475] hsr_slave_1: entered promiscuous mode [ 1075.616827][T19475] debugfs: 'hsr0' already exists in 'hsr' [ 1075.622621][T19475] Cannot create hsr debugfs directory [ 1076.360801][T19475] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1076.398259][T19475] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1076.428151][T19475] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1076.449407][T19475] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1076.542977][T19547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2860'. [ 1076.733266][T16910] Bluetooth: hci4: command tx timeout [ 1077.175747][T19556] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 1077.445639][T19475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1077.493873][T19475] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.580192][ T7713] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.587442][ T7713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.619996][ T7713] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.627258][ T7713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.849629][T19577] usb usb23: usbfs: interface 0 claimed by hub while 'syz.2.2865' sets config #-1 [ 1077.924772][T19580] bond0: option packets_per_slave: invalid value ( Xµn‘pæ) [ 1077.936159][T19580] bond0: option packets_per_slave: allowed values 0 - 65535 [ 1078.869512][T16910] Bluetooth: hci4: command tx timeout [ 1079.765795][T19475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1080.897296][T16910] Bluetooth: hci4: command tx timeout [ 1081.690431][T19475] veth0_vlan: entered promiscuous mode [ 1081.741948][T19475] veth1_vlan: entered promiscuous mode [ 1081.926310][T19475] veth0_macvtap: entered promiscuous mode [ 1081.979132][T19475] veth1_macvtap: entered promiscuous mode [ 1082.297831][T19475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1082.369335][T19475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1082.422541][T16527] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.432477][T16527] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.443050][T16527] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.451783][T16527] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1082.932601][T13741] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.941212][T13741] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.101086][T16527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.116892][T16527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.650947][T19660] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2881'. [ 1084.349129][T19500] mkiss: ax0: crc mode is auto. [ 1084.936198][T19694] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1085.010887][T19694] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1088.358984][T19739] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2901'. [ 1088.368411][T19739] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 1088.376195][T19739] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 1088.636962][T19750] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2904'. [ 1088.681558][T19750] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2904'. [ 1088.694961][T19748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2903'. [ 1089.192524][T19753] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 1090.933455][T12009] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1090.947080][T12009] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1090.955362][T12009] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1090.967562][T12009] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1090.980555][T12009] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1091.361549][T19777] chnl_net:caif_netlink_parms(): no params data found [ 1091.495924][T19777] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.503826][T19777] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.514472][T19777] bridge_slave_0: entered allmulticast mode [ 1091.523729][T19777] bridge_slave_0: entered promiscuous mode [ 1091.535736][T19777] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.543685][T19777] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.551045][T19777] bridge_slave_1: entered allmulticast mode [ 1091.560049][T19777] bridge_slave_1: entered promiscuous mode [ 1091.620047][T19777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1091.635063][T19777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1091.711522][T19777] team0: Port device team_slave_0 added [ 1091.723273][T19777] team0: Port device team_slave_1 added [ 1091.762313][T19777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1091.769504][T19777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1091.795615][T19777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1091.820118][T19777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1091.827977][T19777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1091.854822][T19777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1091.915941][T19777] hsr_slave_0: entered promiscuous mode [ 1091.930884][T19777] hsr_slave_1: entered promiscuous mode [ 1091.938450][T19777] debugfs: 'hsr0' already exists in 'hsr' [ 1091.945258][T19777] Cannot create hsr debugfs directory [ 1092.136201][T19777] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.208992][T19777] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.305013][T19777] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.408853][T19777] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.652446][T19777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1092.668216][T19777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1092.684377][T19777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1092.697551][T19777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1092.908282][T19777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1092.957723][T19777] 8021q: adding VLAN 0 to HW filter on device team0 [ 1092.976343][T13738] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.983529][T13738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1093.035046][T13756] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.042299][T13756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1093.057935][T16910] Bluetooth: hci1: command tx timeout [ 1093.138540][T19777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1093.436313][T19777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1093.589269][T19777] veth0_vlan: entered promiscuous mode [ 1093.614379][T19777] veth1_vlan: entered promiscuous mode [ 1093.713270][T19777] veth0_macvtap: entered promiscuous mode [ 1093.734327][T19777] veth1_macvtap: entered promiscuous mode [ 1093.806541][T19777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1093.824328][T19777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1093.839613][T13756] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.866740][T13756] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.878077][T13756] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.895029][T13756] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.064471][T16526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.084290][T16526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.140091][ T7713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.150637][ T7713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.133098][T16910] Bluetooth: hci1: command tx timeout [ 1095.276800][T19823] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2915'. [ 1095.591755][T19696] mkiss: ax0: crc mode is auto. [ 1096.677466][T19841] FAULT_INJECTION: forcing a failure. [ 1096.677466][T19841] name failslab, interval 1, probability 0, space 0, times 0 [ 1096.692111][T19841] CPU: 0 UID: 0 PID: 19841 Comm: syz.5.2920 Not tainted syzkaller #0 PREEMPT(full) [ 1096.692153][T19841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1096.692174][T19841] Call Trace: [ 1096.692185][T19841] [ 1096.692197][T19841] dump_stack_lvl+0x16c/0x1f0 [ 1096.692244][T19841] should_fail_ex+0x512/0x640 [ 1096.692294][T19841] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1096.692332][T19841] should_failslab+0xc2/0x120 [ 1096.692380][T19841] __kmalloc_cache_noprof+0x72/0x780 [ 1096.692414][T19841] ? newseg+0x25a/0xe60 [ 1096.692456][T19841] ? newseg+0x25a/0xe60 [ 1096.692489][T19841] ? __pfx___might_resched+0x10/0x10 [ 1096.692524][T19841] newseg+0x25a/0xe60 [ 1096.692568][T19841] ? __pfx_newseg+0x10/0x10 [ 1096.692606][T19841] ? __sched_setaffinity+0x173/0x280 [ 1096.692656][T19841] ipcget+0xf6/0xfa0 [ 1096.692695][T19841] ? do_futex+0x122/0x350 [ 1096.692743][T19841] ? __pfx_do_futex+0x10/0x10 [ 1096.692788][T19841] ? sched_setaffinity+0xe0/0x400 [ 1096.692828][T19841] ? __pfx_ipcget+0x10/0x10 [ 1096.692868][T19841] ? __x64_sys_futex+0x1e0/0x4c0 [ 1096.692911][T19841] ? __x64_sys_futex+0x1e9/0x4c0 [ 1096.692973][T19841] __x64_sys_shmget+0x13b/0x1b0 [ 1096.693014][T19841] ? __pfx___x64_sys_shmget+0x10/0x10 [ 1096.693060][T19841] ? rcu_is_watching+0x12/0xc0 [ 1096.693100][T19841] do_syscall_64+0xcd/0xfa0 [ 1096.693145][T19841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.693180][T19841] RIP: 0033:0x7fa14478f749 [ 1096.693208][T19841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1096.693241][T19841] RSP: 002b:00007fa1456f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 1096.693273][T19841] RAX: ffffffffffffffda RBX: 00007fa1449e6090 RCX: 00007fa14478f749 [ 1096.693296][T19841] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 1096.693317][T19841] RBP: 00007fa144813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1096.693338][T19841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1096.693359][T19841] R13: 00007fa1449e6128 R14: 00007fa1449e6090 R15: 00007ffe9c523088 [ 1096.693407][T19841] [ 1097.220506][T16910] Bluetooth: hci1: command tx timeout [ 1098.336535][T12009] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1098.345656][T12009] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1098.354290][T12009] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1098.362363][T12009] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1098.374001][T12009] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1098.668182][T19858] chnl_net:caif_netlink_parms(): no params data found [ 1098.789997][T19858] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.797726][T19858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.808124][T19858] bridge_slave_0: entered allmulticast mode [ 1098.816925][T19858] bridge_slave_0: entered promiscuous mode [ 1098.829552][T19858] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.837354][T19858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.844954][T19858] bridge_slave_1: entered allmulticast mode [ 1098.853403][T19858] bridge_slave_1: entered promiscuous mode [ 1098.903082][T19858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1098.919360][T19858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1098.968130][T19858] team0: Port device team_slave_0 added [ 1098.979869][T19858] team0: Port device team_slave_1 added [ 1099.020491][T19858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1099.029630][T19858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1099.060036][T19858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1099.074667][T19858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1099.081889][T19858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1099.111297][T19858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1099.251738][T19858] hsr_slave_0: entered promiscuous mode [ 1099.258939][T19858] hsr_slave_1: entered promiscuous mode [ 1099.265550][T19858] debugfs: 'hsr0' already exists in 'hsr' [ 1099.271321][T19858] Cannot create hsr debugfs directory [ 1099.298074][T12009] Bluetooth: hci1: command tx timeout [ 1099.788276][T19858] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1099.814746][T19858] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1099.849772][T19858] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1099.876445][T19858] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1100.043962][T19858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1100.092055][T19858] 8021q: adding VLAN 0 to HW filter on device team0 [ 1100.128494][T13756] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.135663][T13756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1100.157729][T13756] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.164908][T13756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1100.269376][T19858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1100.412961][T12009] Bluetooth: hci5: command tx timeout [ 1100.589196][T19858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1101.200490][T19858] veth0_vlan: entered promiscuous mode [ 1101.217614][T19858] veth1_vlan: entered promiscuous mode [ 1101.258869][T19858] veth0_macvtap: entered promiscuous mode [ 1101.309489][T19858] veth1_macvtap: entered promiscuous mode [ 1101.360328][T19858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1101.386781][T19858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1101.401747][T16526] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.415426][T16526] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.462174][T16526] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.472438][T16526] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.540241][T13738] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.551881][T13738] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1101.594214][T13741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.602425][T13741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.234016][T19896] FAULT_INJECTION: forcing a failure. [ 1102.234016][T19896] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.264618][T19896] CPU: 1 UID: 0 PID: 19896 Comm: syz.6.2925 Not tainted syzkaller #0 PREEMPT(full) [ 1102.264664][T19896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1102.264685][T19896] Call Trace: [ 1102.264697][T19896] [ 1102.264710][T19896] dump_stack_lvl+0x16c/0x1f0 [ 1102.264767][T19896] should_fail_ex+0x512/0x640 [ 1102.264818][T19896] ? __kmalloc_cache_node_noprof+0x62/0x7a0 [ 1102.264866][T19896] should_failslab+0xc2/0x120 [ 1102.264913][T19896] __kmalloc_cache_node_noprof+0x75/0x7a0 [ 1102.264953][T19896] ? look_up_lock_class+0x59/0x150 [ 1102.264993][T19896] ? __get_vm_area_node+0x101/0x330 [ 1102.265048][T19896] ? __get_vm_area_node+0x101/0x330 [ 1102.265094][T19896] __get_vm_area_node+0x101/0x330 [ 1102.265139][T19896] ? __lock_acquire+0xb8a/0x1c90 [ 1102.265188][T19896] __vmalloc_node_range_noprof+0x271/0x1480 [ 1102.265239][T19896] ? n_tty_open+0x1a/0x170 [ 1102.265281][T19896] ? do_raw_spin_unlock+0x172/0x230 [ 1102.265325][T19896] ? n_tty_open+0x1a/0x170 [ 1102.265380][T19896] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1102.265429][T19896] ? console_unlock+0x184/0x210 [ 1102.265461][T19896] ? __pfx_console_unlock+0x10/0x10 [ 1102.265499][T19896] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1102.265552][T19896] ? n_tty_open+0x1a/0x170 [ 1102.265595][T19896] __vmalloc_node_noprof+0xad/0xf0 [ 1102.265641][T19896] ? n_tty_open+0x1a/0x170 [ 1102.265683][T19896] ? __pfx_n_tty_open+0x10/0x10 [ 1102.265737][T19896] n_tty_open+0x1a/0x170 [ 1102.265788][T19896] ? __pfx_n_tty_open+0x10/0x10 [ 1102.265831][T19896] tty_ldisc_open+0x9f/0x120 [ 1102.265864][T19896] tty_ldisc_setup+0x40/0x100 [ 1102.265900][T19896] tty_init_dev.part.0+0x1ec/0x500 [ 1102.265946][T19896] tty_open+0xa4f/0xf90 [ 1102.265995][T19896] ? __pfx_tty_open+0x10/0x10 [ 1102.266035][T19896] ? chrdev_open+0x10b/0x6a0 [ 1102.266083][T19896] ? __pfx_tty_open+0x10/0x10 [ 1102.266123][T19896] chrdev_open+0x234/0x6a0 [ 1102.266162][T19896] ? __pfx_apparmor_file_open+0x10/0x10 [ 1102.266214][T19896] ? __pfx_chrdev_open+0x10/0x10 [ 1102.266257][T19896] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1102.266302][T19896] do_dentry_open+0x982/0x1530 [ 1102.266342][T19896] ? __pfx_chrdev_open+0x10/0x10 [ 1102.266392][T19896] vfs_open+0x82/0x3f0 [ 1102.266447][T19896] path_openat+0x1de4/0x2cb0 [ 1102.266500][T19896] ? __pfx_path_openat+0x10/0x10 [ 1102.266543][T19896] ? __lock_acquire+0xb8a/0x1c90 [ 1102.266594][T19896] do_filp_open+0x20b/0x470 [ 1102.266633][T19896] ? __pfx_do_filp_open+0x10/0x10 [ 1102.266702][T19896] ? alloc_fd+0x471/0x7d0 [ 1102.266755][T19896] do_sys_openat2+0x11b/0x1d0 [ 1102.266804][T19896] ? __pfx_do_sys_openat2+0x10/0x10 [ 1102.266871][T19896] __x64_sys_openat+0x174/0x210 [ 1102.266924][T19896] ? __pfx___x64_sys_openat+0x10/0x10 [ 1102.266995][T19896] do_syscall_64+0xcd/0xfa0 [ 1102.267040][T19896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.267075][T19896] RIP: 0033:0x7fe13958f749 [ 1102.267103][T19896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1102.267138][T19896] RSP: 002b:00007fe1377d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1102.267170][T19896] RAX: ffffffffffffffda RBX: 00007fe1397e6090 RCX: 00007fe13958f749 [ 1102.267194][T19896] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1102.267217][T19896] RBP: 00007fe139613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1102.267238][T19896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1102.267260][T19896] R13: 00007fe1397e6128 R14: 00007fe1397e6090 R15: 00007ffc44d2ee58 [ 1102.267307][T19896] [ 1102.271065][T19896] warn_alloc: 1 callbacks suppressed [ 1102.271086][T19896] syz.6.2925: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1102.494410][T12009] Bluetooth: hci5: command tx timeout [ 1102.684864][T19896] ,cpuset=/,mems_allowed=0-1 [ 1102.689583][T19896] CPU: 0 UID: 0 PID: 19896 Comm: syz.6.2925 Not tainted syzkaller #0 PREEMPT(full) [ 1102.689629][T19896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1102.689650][T19896] Call Trace: [ 1102.689662][T19896] [ 1102.689684][T19896] dump_stack_lvl+0x16c/0x1f0 [ 1102.689731][T19896] warn_alloc+0x248/0x3a0 [ 1102.689769][T19896] ? __pfx_warn_alloc+0x10/0x10 [ 1102.689798][T19896] ? rcu_is_watching+0x12/0xc0 [ 1102.689838][T19896] ? __kmalloc_cache_node_noprof+0x2df/0x7a0 [ 1102.689891][T19896] ? __kasan_kmalloc+0x8a/0xb0 [ 1102.689932][T19896] ? __get_vm_area_node+0x208/0x330 [ 1102.689989][T19896] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 1102.690039][T19896] ? do_raw_spin_unlock+0x172/0x230 [ 1102.690083][T19896] ? n_tty_open+0x1a/0x170 [ 1102.690138][T19896] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1102.690187][T19896] ? console_unlock+0x184/0x210 [ 1102.690219][T19896] ? __pfx_console_unlock+0x10/0x10 [ 1102.690257][T19896] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1102.690310][T19896] ? n_tty_open+0x1a/0x170 [ 1102.690352][T19896] __vmalloc_node_noprof+0xad/0xf0 [ 1102.690402][T19896] ? n_tty_open+0x1a/0x170 [ 1102.690447][T19896] ? __pfx_n_tty_open+0x10/0x10 [ 1102.690493][T19896] n_tty_open+0x1a/0x170 [ 1102.690536][T19896] ? __pfx_n_tty_open+0x10/0x10 [ 1102.690580][T19896] tty_ldisc_open+0x9f/0x120 [ 1102.690614][T19896] tty_ldisc_setup+0x40/0x100 [ 1102.690652][T19896] tty_init_dev.part.0+0x1ec/0x500 [ 1102.690706][T19896] tty_open+0xa4f/0xf90 [ 1102.690756][T19896] ? __pfx_tty_open+0x10/0x10 [ 1102.690813][T19896] ? chrdev_open+0x10b/0x6a0 [ 1102.690862][T19896] ? __pfx_tty_open+0x10/0x10 [ 1102.690903][T19896] chrdev_open+0x234/0x6a0 [ 1102.690944][T19896] ? __pfx_apparmor_file_open+0x10/0x10 [ 1102.690998][T19896] ? __pfx_chrdev_open+0x10/0x10 [ 1102.691043][T19896] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1102.691091][T19896] do_dentry_open+0x982/0x1530 [ 1102.691132][T19896] ? __pfx_chrdev_open+0x10/0x10 [ 1102.691181][T19896] vfs_open+0x82/0x3f0 [ 1102.691235][T19896] path_openat+0x1de4/0x2cb0 [ 1102.691290][T19896] ? __pfx_path_openat+0x10/0x10 [ 1102.691332][T19896] ? __lock_acquire+0xb8a/0x1c90 [ 1102.691385][T19896] do_filp_open+0x20b/0x470 [ 1102.691424][T19896] ? __pfx_do_filp_open+0x10/0x10 [ 1102.691496][T19896] ? alloc_fd+0x471/0x7d0 [ 1102.691545][T19896] do_sys_openat2+0x11b/0x1d0 [ 1102.691595][T19896] ? __pfx_do_sys_openat2+0x10/0x10 [ 1102.691664][T19896] __x64_sys_openat+0x174/0x210 [ 1102.691727][T19896] ? __pfx___x64_sys_openat+0x10/0x10 [ 1102.691800][T19896] do_syscall_64+0xcd/0xfa0 [ 1102.691848][T19896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.691883][T19896] RIP: 0033:0x7fe13958f749 [ 1102.691910][T19896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1102.691942][T19896] RSP: 002b:00007fe1377d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1102.691974][T19896] RAX: ffffffffffffffda RBX: 00007fe1397e6090 RCX: 00007fe13958f749 [ 1102.691996][T19896] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1102.692019][T19896] RBP: 00007fe139613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1102.692039][T19896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1102.692060][T19896] R13: 00007fe1397e6128 R14: 00007fe1397e6090 R15: 00007ffc44d2ee58 [ 1102.692108][T19896] [ 1102.692122][T19896] Mem-Info: [ 1103.062774][T19896] active_anon:21383 inactive_anon:2 isolated_anon:0 [ 1103.062774][T19896] active_file:10729 inactive_file:51227 isolated_file:0 [ 1103.062774][T19896] unevictable:768 dirty:521 writeback:0 [ 1103.062774][T19896] slab_reclaimable:12911 slab_unreclaimable:108577 [ 1103.062774][T19896] mapped:46767 shmem:10507 pagetables:1208 [ 1103.062774][T19896] sec_pagetables:0 bounce:0 [ 1103.062774][T19896] kernel_misc_reclaimable:0 [ 1103.062774][T19896] free:1242518 free_pcp:20170 free_cma:0 [ 1103.253249][T19896] Node 0 active_anon:89784kB inactive_anon:8kB active_file:42916kB inactive_file:204776kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:192208kB dirty:2084kB writeback:0kB shmem:43568kB shmem_thp:10240kB shmem_pmdmapped:8192kB anon_thp:16384kB kernel_stack:13916kB pagetables:4672kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1103.375914][T19896] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1103.458175][T19896] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1103.524862][T19896] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 1103.530765][T19896] Node 0 DMA32 free:1070248kB boost:0kB min:34364kB low:42952kB high:51540kB reserved_highatomic:0KB free_highatomic:0KB active_anon:88280kB inactive_anon:8kB active_file:42916kB inactive_file:204776kB unevictable:1536kB writepending:2084kB zspages:0kB present:3129332kB managed:2545072kB mlocked:0kB bounce:0kB free_pcp:41684kB local_pcp:16560kB free_cma:0kB [ 1103.602837][T19896] lowmem_reserve[]: 0 0 1 1 1 [ 1103.607674][T19896] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1103.658793][T19896] lowmem_reserve[]: 0 0 0 0 0 [ 1103.668920][T19896] Node 1 Normal free:3863192kB boost:0kB min:55512kB low:69388kB high:83264kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:42432kB local_pcp:22400kB free_cma:0kB [ 1103.792939][T19896] lowmem_reserve[]: 0 0 0 0 0 [ 1103.800173][T19896] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1103.834486][T19896] Node 0 DMA32: 1634*4kB (UME) 20*8kB (UE) 181*16kB (ME) 733*32kB (ME) 775*64kB (ME) 602*128kB (ME) 400*256kB (UME) 309*512kB (UM) 204*1024kB (UME) 4*2048kB (UM) 100*4096kB (M) = 1047000kB [ 1103.882782][T19896] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1103.912965][T19896] Node 1 Normal: 142*4kB (UME) 68*8kB (UME) 60*16kB (UME) 46*32kB (UME) 37*64kB (UME) 53*128kB (UME) 33*256kB (UME) 16*512kB (M) 2*1024kB (UM) 3*2048kB (UME) 934*4096kB (M) = 3863192kB [ 1103.955554][T19896] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1103.978197][T19896] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1103.987979][T19896] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1104.003299][T19896] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1104.020142][T16910] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1104.024329][T19896] 74990 total pagecache pages [ 1104.034078][T16910] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1104.042286][T19896] 4 pages in swap cache [ 1104.042509][T16910] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1104.052537][T19896] Free swap = 124980kB [ 1104.060478][T19896] Total swap = 124996kB [ 1104.073093][T19896] 2097051 pages RAM [ 1104.077003][T19896] 0 pages HighMem/MovableOnly [ 1104.081851][T19896] 428693 pages reserved [ 1104.082132][T16910] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1104.086981][T19896] 0 pages cma reserved [ 1104.102948][T16910] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1104.118770][T19896] tty tty29: ldisc open failed (-12), clearing slot 28 [ 1104.526122][T19911] chnl_net:caif_netlink_parms(): no params data found [ 1104.619418][T19924] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1104.734151][T16910] Bluetooth: hci5: command tx timeout [ 1105.112213][T19911] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.119502][T19911] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.173260][T19911] bridge_slave_0: entered allmulticast mode [ 1105.202414][T19911] bridge_slave_0: entered promiscuous mode [ 1105.215970][T19911] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.233223][T19911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.240485][T19911] bridge_slave_1: entered allmulticast mode [ 1105.258906][T19911] bridge_slave_1: entered promiscuous mode [ 1105.864827][T19911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1105.912611][T19911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.169110][T19911] team0: Port device team_slave_0 added [ 1106.175187][T16910] Bluetooth: hci6: command tx timeout [ 1106.198282][T19911] team0: Port device team_slave_1 added [ 1106.368610][T19911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.376064][T19911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1106.402720][T19911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.435052][T19911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.465268][T19911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1106.598461][T19911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.813738][T16910] Bluetooth: hci5: command tx timeout [ 1106.962058][T19911] hsr_slave_0: entered promiscuous mode [ 1107.011052][T19911] hsr_slave_1: entered promiscuous mode [ 1107.044242][T19911] debugfs: 'hsr0' already exists in 'hsr' [ 1107.059873][T19911] Cannot create hsr debugfs directory [ 1107.165935][T19840] mkiss: ax0: crc mode is auto. [ 1107.520668][T19911] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1107.534024][T19911] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1107.545057][T19911] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1107.567161][T19911] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1107.766046][T19911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.833969][T19911] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.876734][T16527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.883971][T16527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1107.916419][T16527] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.923671][T16527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1107.964705][T19958] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2940'. [ 1108.257587][T16910] Bluetooth: hci6: command tx timeout [ 1108.501516][T19911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1109.168100][T19911] veth0_vlan: entered promiscuous mode [ 1109.190140][T19911] veth1_vlan: entered promiscuous mode [ 1109.248496][T19911] veth0_macvtap: entered promiscuous mode [ 1109.268727][T19911] veth1_macvtap: entered promiscuous mode [ 1109.390030][T19911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1109.448168][T19911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1109.497542][T19980] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2941'. [ 1109.560791][T19980] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 1109.570733][T13741] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.581778][T13741] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.611263][T13741] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.661803][T13741] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.918191][T13756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.945177][T13756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.102382][T16526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.136017][T16526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.180109][T19985] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 1110.333104][T16910] Bluetooth: hci6: command tx timeout [ 1110.770350][T19987] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 1110.953505][T19997] zram: Removed device: zram0 [ 1112.415178][T16910] Bluetooth: hci6: command tx timeout [ 1113.631453][T12009] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1113.664123][T12009] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1113.677981][T12009] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1113.722427][T12009] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1113.737395][T12009] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1114.848755][T20028] chnl_net:caif_netlink_parms(): no params data found [ 1115.288397][T20028] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.297876][T20028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.305790][T20028] bridge_slave_0: entered allmulticast mode [ 1115.316808][T20028] bridge_slave_0: entered promiscuous mode [ 1115.340159][T20028] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.351184][T20028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.362440][T20028] bridge_slave_1: entered allmulticast mode [ 1115.404958][T20028] bridge_slave_1: entered promiscuous mode [ 1115.595167][T20028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1115.766122][T20028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1115.787407][T12009] Bluetooth: hci7: command tx timeout [ 1115.939527][T20028] team0: Port device team_slave_0 added [ 1115.995254][T20028] team0: Port device team_slave_1 added [ 1116.168179][T20028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1116.185246][T20028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1116.213439][T20028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1116.226668][T20028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1116.233719][T20028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1116.266435][T20028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1116.349286][T20028] hsr_slave_0: entered promiscuous mode [ 1116.356339][T20028] hsr_slave_1: entered promiscuous mode [ 1116.363344][T20028] debugfs: 'hsr0' already exists in 'hsr' [ 1116.370630][T20028] Cannot create hsr debugfs directory [ 1117.561742][T20028] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1117.660736][T20028] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1117.862976][T12009] Bluetooth: hci7: command tx timeout [ 1117.894929][T20028] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1118.164043][T20028] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1118.523123][T19963] mkiss: ax0: crc mode is auto. [ 1118.767483][T20028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1118.826533][T20028] 8021q: adding VLAN 0 to HW filter on device team0 [ 1118.846306][T16527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1118.853521][T16527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1118.924492][T16527] bridge0: port 2(bridge_slave_1) entered blocking state [ 1118.931673][T16527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1119.934827][T16910] Bluetooth: hci7: command tx timeout [ 1119.943554][T20028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1120.890612][T20111] FAULT_INJECTION: forcing a failure. [ 1120.890612][T20111] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.916180][T20111] CPU: 0 UID: 0 PID: 20111 Comm: syz.7.2964 Not tainted syzkaller #0 PREEMPT(full) [ 1120.916213][T20111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1120.916229][T20111] Call Trace: [ 1120.916237][T20111] [ 1120.916247][T20111] dump_stack_lvl+0x16c/0x1f0 [ 1120.916283][T20111] should_fail_ex+0x512/0x640 [ 1120.916325][T20111] should_failslab+0xc2/0x120 [ 1120.916359][T20111] __kmalloc_noprof+0xdd/0x880 [ 1120.916397][T20111] ? __local_bh_enable_ip+0xa4/0x120 [ 1120.916426][T20111] ? lockdep_hardirqs_on+0x7c/0x110 [ 1120.916459][T20111] ? sctp_bind_addrs_to_raw+0x12c/0x3e0 [ 1120.916492][T20111] ? sctp_bind_addrs_to_raw+0x12c/0x3e0 [ 1120.916516][T20111] sctp_bind_addrs_to_raw+0x12c/0x3e0 [ 1120.916546][T20111] ? xfrm_lookup_with_ifid+0x8b4/0x1e40 [ 1120.916569][T20111] ? __pfx_sctp_bind_addrs_to_raw+0x10/0x10 [ 1120.916599][T20111] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 1120.916629][T20111] sctp_make_init+0x148/0xdc0 [ 1120.916658][T20111] ? __x64_sys_connect+0x72/0xb0 [ 1120.916698][T20111] ? __pfx_sctp_make_init+0x10/0x10 [ 1120.916729][T20111] ? __lock_acquire+0x622/0x1c90 [ 1120.916767][T20111] ? sctp_sm_lookup_event+0x15b/0x570 [ 1120.916792][T20111] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 1120.916823][T20111] sctp_sf_do_prm_asoc+0xbf/0x360 [ 1120.916858][T20111] ? __pfx_sctp_pname+0x10/0x10 [ 1120.916883][T20111] sctp_do_sm+0x181/0x5c80 [ 1120.916915][T20111] ? find_held_lock+0x2b/0x80 [ 1120.916940][T20111] ? sctp_ulpevent_notify_peer_addr_change+0xf1/0xc00 [ 1120.916978][T20111] ? sctp_ulpevent_notify_peer_addr_change+0xf1/0xc00 [ 1120.917015][T20111] ? __pfx_sctp_do_sm+0x10/0x10 [ 1120.917070][T20111] ? sctp_connect_new_asoc+0x41e/0x770 [ 1120.917109][T20111] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1120.917154][T20111] sctp_primitive_ASSOCIATE+0x9c/0xd0 [ 1120.917197][T20111] __sctp_connect+0xa08/0xc60 [ 1120.917237][T20111] ? do_raw_spin_lock+0x12c/0x2b0 [ 1120.917276][T20111] ? __pfx___sctp_connect+0x10/0x10 [ 1120.917315][T20111] ? __pfx_sctp_inet_connect+0x10/0x10 [ 1120.917352][T20111] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1120.917395][T20111] ? __pfx_sctp_inet_connect+0x10/0x10 [ 1120.917429][T20111] sctp_inet_connect+0x15f/0x200 [ 1120.917467][T20111] __sys_connect_file+0x141/0x1a0 [ 1120.917507][T20111] __sys_connect+0x13b/0x160 [ 1120.917542][T20111] ? __pfx___sys_connect+0x10/0x10 [ 1120.917588][T20111] ? xfd_validate_state+0x61/0x180 [ 1120.917630][T20111] __x64_sys_connect+0x72/0xb0 [ 1120.917665][T20111] ? lockdep_hardirqs_on+0x7c/0x110 [ 1120.917694][T20111] do_syscall_64+0xcd/0xfa0 [ 1120.917725][T20111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.917750][T20111] RIP: 0033:0x7ff82838f749 [ 1120.917784][T20111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1120.917809][T20111] RSP: 002b:00007ff829202038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1120.917832][T20111] RAX: ffffffffffffffda RBX: 00007ff8285e5fa0 RCX: 00007ff82838f749 [ 1120.917848][T20111] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 1120.917862][T20111] RBP: 00007ff828413f91 R08: 0000000000000000 R09: 0000000000000000 [ 1120.917877][T20111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1120.917891][T20111] R13: 00007ff8285e6038 R14: 00007ff8285e5fa0 R15: 00007ffd735f4918 [ 1120.917929][T20111] [ 1121.562274][T20028] veth0_vlan: entered promiscuous mode [ 1121.577864][T20028] veth1_vlan: entered promiscuous mode [ 1121.679399][T20028] veth0_macvtap: entered promiscuous mode [ 1121.718542][T20028] veth1_macvtap: entered promiscuous mode [ 1121.744164][T20028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1121.945748][T20028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1121.970007][T20129] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 1122.009767][T16527] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.018950][T16910] Bluetooth: hci7: command tx timeout [ 1122.049145][T16527] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.131242][T16527] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.162153][T16527] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.342137][T20132] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1122.501523][T20130] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 1122.731729][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1122.749314][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1122.910939][T16527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1122.926524][T16527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.178303][T20139] netlink: 338 bytes leftover after parsing attributes in process `syz.8.2949'. [ 1123.266979][T20139] vxcan1: entered promiscuous mode [ 1123.423742][T20142] netlink: 334 bytes leftover after parsing attributes in process `syz.7.2968'. [ 1126.827041][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.833687][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1127.127771][T12009] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1127.143429][T12009] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1127.154407][T12009] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1127.162314][T12009] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1127.170134][T12009] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1128.223309][T20185] chnl_net:caif_netlink_parms(): no params data found [ 1128.502225][T20185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.513398][T20185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.520734][T20185] bridge_slave_0: entered allmulticast mode [ 1128.533832][T20185] bridge_slave_0: entered promiscuous mode [ 1128.545166][T20185] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.552441][T20185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.560257][T20185] bridge_slave_1: entered allmulticast mode [ 1128.576334][T20185] bridge_slave_1: entered promiscuous mode [ 1128.629649][T20195] FAULT_INJECTION: forcing a failure. [ 1128.629649][T20195] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1128.648246][T20185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1128.667134][T20185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1128.679417][T20195] CPU: 0 UID: 0 PID: 20195 Comm: syz.8.2983 Not tainted syzkaller #0 PREEMPT(full) [ 1128.679470][T20195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1128.679491][T20195] Call Trace: [ 1128.679504][T20195] [ 1128.679518][T20195] dump_stack_lvl+0x16c/0x1f0 [ 1128.679564][T20195] should_fail_ex+0x512/0x640 [ 1128.679624][T20195] should_fail_alloc_page+0xe7/0x130 [ 1128.679672][T20195] prepare_alloc_pages+0x3c2/0x610 [ 1128.679722][T20195] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1128.679765][T20195] ? rcu_is_watching+0x12/0xc0 [ 1128.679803][T20195] ? trace_mm_page_alloc+0x11f/0x1a0 [ 1128.679849][T20195] ? __alloc_frozen_pages_noprof+0x292/0x2470 [ 1128.679893][T20195] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1128.679936][T20195] ? is_bpf_text_address+0x8a/0x1a0 [ 1128.679983][T20195] ? bpf_ksym_find+0x124/0x1c0 [ 1128.680025][T20195] ? is_bpf_text_address+0x94/0x1a0 [ 1128.680074][T20195] ? kernel_text_address+0x8d/0x100 [ 1128.680105][T20195] ? __kernel_text_address+0xd/0x40 [ 1128.680135][T20195] ? unwind_get_return_address+0x59/0xa0 [ 1128.680185][T20195] alloc_pages_bulk_noprof+0x77a/0x1410 [ 1128.680221][T20195] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1128.680282][T20195] ? policy_nodemask+0xea/0x4e0 [ 1128.680340][T20195] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1128.680379][T20195] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1128.680447][T20195] kasan_populate_vmalloc+0x112/0x2d0 [ 1128.680486][T20195] ? alloc_vmap_area+0x8b5/0x29e0 [ 1128.680538][T20195] alloc_vmap_area+0x960/0x29e0 [ 1128.680601][T20195] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1128.680658][T20195] __get_vm_area_node+0x1ca/0x330 [ 1128.680714][T20195] __vmalloc_node_range_noprof+0x271/0x1480 [ 1128.680765][T20195] ? n_tty_open+0x1a/0x170 [ 1128.680808][T20195] ? do_raw_spin_unlock+0x172/0x230 [ 1128.680853][T20195] ? n_tty_open+0x1a/0x170 [ 1128.680908][T20195] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1128.680958][T20195] ? console_unlock+0x184/0x210 [ 1128.680991][T20195] ? __pfx_console_unlock+0x10/0x10 [ 1128.681030][T20195] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1128.681083][T20195] ? n_tty_open+0x1a/0x170 [ 1128.681125][T20195] __vmalloc_node_noprof+0xad/0xf0 [ 1128.681174][T20195] ? n_tty_open+0x1a/0x170 [ 1128.681217][T20195] ? __pfx_n_tty_open+0x10/0x10 [ 1128.681262][T20195] n_tty_open+0x1a/0x170 [ 1128.681305][T20195] ? __pfx_n_tty_open+0x10/0x10 [ 1128.681412][T20195] tty_ldisc_open+0x9f/0x120 [ 1128.681446][T20195] tty_ldisc_setup+0x40/0x100 [ 1128.681481][T20195] tty_init_dev.part.0+0x1ec/0x500 [ 1128.681526][T20195] tty_open+0xa4f/0xf90 [ 1128.681575][T20195] ? __pfx_tty_open+0x10/0x10 [ 1128.681613][T20195] ? chrdev_open+0x10b/0x6a0 [ 1128.681658][T20195] ? __pfx_tty_open+0x10/0x10 [ 1128.681695][T20195] chrdev_open+0x234/0x6a0 [ 1128.681735][T20195] ? __pfx_apparmor_file_open+0x10/0x10 [ 1128.681787][T20195] ? __pfx_chrdev_open+0x10/0x10 [ 1128.681832][T20195] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1128.681879][T20195] do_dentry_open+0x982/0x1530 [ 1128.681920][T20195] ? __pfx_chrdev_open+0x10/0x10 [ 1128.681970][T20195] vfs_open+0x82/0x3f0 [ 1128.682024][T20195] path_openat+0x1de4/0x2cb0 [ 1128.682077][T20195] ? __pfx_path_openat+0x10/0x10 [ 1128.682119][T20195] ? __lock_acquire+0xb8a/0x1c90 [ 1128.682170][T20195] do_filp_open+0x20b/0x470 [ 1128.682209][T20195] ? __pfx_do_filp_open+0x10/0x10 [ 1128.682280][T20195] ? alloc_fd+0x471/0x7d0 [ 1128.682334][T20195] do_sys_openat2+0x11b/0x1d0 [ 1128.682385][T20195] ? __pfx_do_sys_openat2+0x10/0x10 [ 1128.682454][T20195] __x64_sys_openat+0x174/0x210 [ 1128.682505][T20195] ? __pfx___x64_sys_openat+0x10/0x10 [ 1128.682575][T20195] do_syscall_64+0xcd/0xfa0 [ 1128.682622][T20195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.682654][T20195] RIP: 0033:0x7f2aa618f749 [ 1128.682683][T20195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1128.682716][T20195] RSP: 002b:00007f2aa700b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1128.682749][T20195] RAX: ffffffffffffffda RBX: 00007f2aa63e6180 RCX: 00007f2aa618f749 [ 1128.682772][T20195] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1128.682795][T20195] RBP: 00007f2aa6213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1128.682816][T20195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1128.682838][T20195] R13: 00007f2aa63e6218 R14: 00007f2aa63e6180 R15: 00007fffd52a47f8 [ 1128.682886][T20195] [ 1129.173172][T20195] syz.8.2983: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1129.188631][T20195] CPU: 1 UID: 0 PID: 20195 Comm: syz.8.2983 Not tainted syzkaller #0 PREEMPT(full) [ 1129.188677][T20195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1129.188699][T20195] Call Trace: [ 1129.188711][T20195] [ 1129.188725][T20195] dump_stack_lvl+0x16c/0x1f0 [ 1129.188775][T20195] warn_alloc+0x248/0x3a0 [ 1129.188813][T20195] ? __pfx_warn_alloc+0x10/0x10 [ 1129.188851][T20195] ? __get_vm_area_node+0x2cd/0x330 [ 1129.188909][T20195] ? __get_vm_area_node+0x2cd/0x330 [ 1129.188952][T20195] ? __get_vm_area_node+0x1dc/0x330 [ 1129.188996][T20195] ? __get_vm_area_node+0x208/0x330 [ 1129.189054][T20195] __vmalloc_node_range_noprof+0xaf5/0x1480 [ 1129.189106][T20195] ? do_raw_spin_unlock+0x172/0x230 [ 1129.189150][T20195] ? n_tty_open+0x1a/0x170 [ 1129.189208][T20195] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1129.189259][T20195] ? console_unlock+0x184/0x210 [ 1129.189303][T20195] ? __pfx_console_unlock+0x10/0x10 [ 1129.189344][T20195] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 1129.189398][T20195] ? n_tty_open+0x1a/0x170 [ 1129.189441][T20195] __vmalloc_node_noprof+0xad/0xf0 [ 1129.189488][T20195] ? n_tty_open+0x1a/0x170 [ 1129.189533][T20195] ? __pfx_n_tty_open+0x10/0x10 [ 1129.189579][T20195] n_tty_open+0x1a/0x170 [ 1129.189622][T20195] ? __pfx_n_tty_open+0x10/0x10 [ 1129.189666][T20195] tty_ldisc_open+0x9f/0x120 [ 1129.189700][T20195] tty_ldisc_setup+0x40/0x100 [ 1129.189737][T20195] tty_init_dev.part.0+0x1ec/0x500 [ 1129.189784][T20195] tty_open+0xa4f/0xf90 [ 1129.189834][T20195] ? __pfx_tty_open+0x10/0x10 [ 1129.189877][T20195] ? chrdev_open+0x10b/0x6a0 [ 1129.189924][T20195] ? __pfx_tty_open+0x10/0x10 [ 1129.189964][T20195] chrdev_open+0x234/0x6a0 [ 1129.190004][T20195] ? __pfx_apparmor_file_open+0x10/0x10 [ 1129.190057][T20195] ? __pfx_chrdev_open+0x10/0x10 [ 1129.190103][T20195] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1129.190152][T20195] do_dentry_open+0x982/0x1530 [ 1129.190194][T20195] ? __pfx_chrdev_open+0x10/0x10 [ 1129.190245][T20195] vfs_open+0x82/0x3f0 [ 1129.190309][T20195] path_openat+0x1de4/0x2cb0 [ 1129.190365][T20195] ? __pfx_path_openat+0x10/0x10 [ 1129.190407][T20195] ? __lock_acquire+0xb8a/0x1c90 [ 1129.190461][T20195] do_filp_open+0x20b/0x470 [ 1129.190501][T20195] ? __pfx_do_filp_open+0x10/0x10 [ 1129.190573][T20195] ? alloc_fd+0x471/0x7d0 [ 1129.190622][T20195] do_sys_openat2+0x11b/0x1d0 [ 1129.190672][T20195] ? __pfx_do_sys_openat2+0x10/0x10 [ 1129.190740][T20195] __x64_sys_openat+0x174/0x210 [ 1129.190794][T20195] ? __pfx___x64_sys_openat+0x10/0x10 [ 1129.190866][T20195] do_syscall_64+0xcd/0xfa0 [ 1129.190912][T20195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.190947][T20195] RIP: 0033:0x7f2aa618f749 [ 1129.190975][T20195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1129.191009][T20195] RSP: 002b:00007f2aa700b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1129.191041][T20195] RAX: ffffffffffffffda RBX: 00007f2aa63e6180 RCX: 00007f2aa618f749 [ 1129.191064][T20195] RDX: 0000000000000800 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1129.191086][T20195] RBP: 00007f2aa6213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1129.191108][T20195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1129.191129][T20195] R13: 00007f2aa63e6218 R14: 00007f2aa63e6180 R15: 00007fffd52a47f8 [ 1129.191177][T20195] [ 1129.191191][T20195] Mem-Info: [ 1129.544748][T12009] Bluetooth: hci8: command tx timeout [ 1129.573074][T20195] active_anon:48016 inactive_anon:2 isolated_anon:0 [ 1129.573074][T20195] active_file:10722 inactive_file:51249 isolated_file:0 [ 1129.573074][T20195] unevictable:768 dirty:615 writeback:0 [ 1129.573074][T20195] slab_reclaimable:13195 slab_unreclaimable:116659 [ 1129.573074][T20195] mapped:74095 shmem:35261 pagetables:1366 [ 1129.573074][T20195] sec_pagetables:0 bounce:0 [ 1129.573074][T20195] kernel_misc_reclaimable:0 [ 1129.573074][T20195] free:1178026 free_pcp:15511 free_cma:0 [ 1129.643143][T20195] Node 0 active_anon:195228kB inactive_anon:8kB active_file:42888kB inactive_file:204864kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:296396kB dirty:2480kB writeback:0kB shmem:144644kB shmem_thp:8192kB shmem_pmdmapped:6144kB anon_thp:16384kB kernel_stack:14928kB pagetables:5316kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1129.677849][T20195] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1129.713904][T20195] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1129.745122][T20195] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 1129.763038][T20195] Node 0 DMA32 free:827752kB boost:0kB min:34364kB low:42952kB high:51540kB reserved_highatomic:0KB free_highatomic:0KB active_anon:198628kB inactive_anon:8kB active_file:42888kB inactive_file:204864kB unevictable:1536kB writepending:2480kB zspages:0kB present:3129332kB managed:2545072kB mlocked:0kB bounce:0kB free_pcp:20860kB local_pcp:11476kB free_cma:0kB [ 1129.812354][T20185] team0: Port device team_slave_0 added [ 1129.833050][T20195] lowmem_reserve[]: 0 0 1 1 1 [ 1129.838688][T20195] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1129.933479][T20195] lowmem_reserve[]: 0 0 0 0 0 [ 1129.938556][T20195] Node 1 Normal free:3863240kB boost:0kB min:55512kB low:69388kB high:83264kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:40404kB local_pcp:23508kB free_cma:0kB [ 1130.005350][T20185] team0: Port device team_slave_1 added [ 1130.053321][T20100] mkiss: ax0: crc mode is auto. [ 1130.057777][T20195] lowmem_reserve[]: 0 0 0 0 0 [ 1130.067925][T20195] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1130.094023][T20195] Node 0 DMA32: 63*4kB (E) 1*8kB (U) 2*16kB (ME) 1*32kB (U) 0*64kB 430*128kB (UM) 405*256kB (M) 313*512kB (UM) 209*1024kB (UME) 1*2048kB (M) 68*4096kB (M) = 813892kB [ 1130.142946][T20195] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1130.164714][T20185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1130.181886][T20195] Node 1 Normal: 10*4kB (UME) 74*8kB (UM) 61*16kB (UM) 52*32kB (UM) 38*64kB (UME) 53*128kB (UME) 34*256kB (UME) 16*512kB (M) 2*1024kB (UM) 3*2048kB (UME) 934*4096kB (M) = 3863240kB [ 1130.200768][T20185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.253159][T20195] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1130.263229][T20195] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1130.272602][T20195] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1130.272848][T20185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1130.295071][T20195] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1130.304665][T20195] 103208 total pagecache pages [ 1130.309487][T20195] 5 pages in swap cache [ 1130.315656][T20195] Free swap = 124980kB [ 1130.322901][T20195] Total swap = 124996kB [ 1130.327132][T20195] 2097051 pages RAM [ 1130.330991][T20195] 0 pages HighMem/MovableOnly [ 1130.337122][T20195] 428693 pages reserved [ 1130.341367][T20195] 0 pages cma reserved [ 1130.346594][T20185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1130.354400][T20185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.381025][T20195] tty tty29: ldisc open failed (-12), clearing slot 28 [ 1130.402910][T20185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1130.558381][T20185] hsr_slave_0: entered promiscuous mode [ 1130.579339][T20185] hsr_slave_1: entered promiscuous mode [ 1130.595296][T20185] debugfs: 'hsr0' already exists in 'hsr' [ 1130.612804][T20185] Cannot create hsr debugfs directory [ 1131.306479][T20185] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1131.337832][T20185] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1131.392117][T20185] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1131.405910][T20185] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1131.595872][T20185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1131.618404][T16910] Bluetooth: hci8: command tx timeout [ 1131.633391][T20185] 8021q: adding VLAN 0 to HW filter on device team0 [ 1131.696488][T13741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.703711][T13741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1131.770918][T16526] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.771036][T16526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1132.414696][T20185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1133.411471][T20185] veth0_vlan: entered promiscuous mode [ 1133.426887][T20185] veth1_vlan: entered promiscuous mode [ 1133.535212][T20185] veth0_macvtap: entered promiscuous mode [ 1133.655090][T20185] veth1_macvtap: entered promiscuous mode [ 1133.693658][T16910] Bluetooth: hci8: command tx timeout [ 1133.757798][T20185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1133.837824][T20185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1134.022146][T16253] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.044789][T16253] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.061153][T16253] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.089144][T16253] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.683921][T16526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.749314][T16526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.876646][T16526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.913043][T16526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1135.774641][T16910] Bluetooth: hci8: command tx timeout [ 1136.169597][T20279] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1136.281096][T20267] FAULT_INJECTION: forcing a failure. [ 1136.281096][T20267] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1136.382547][T20267] CPU: 0 UID: 0 PID: 20267 Comm: syz.8.2991 Not tainted syzkaller #0 PREEMPT(full) [ 1136.382590][T20267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1136.382610][T20267] Call Trace: [ 1136.382624][T20267] [ 1136.382636][T20267] dump_stack_lvl+0x16c/0x1f0 [ 1136.382681][T20267] should_fail_ex+0x512/0x640 [ 1136.382747][T20267] get_futex_key+0x293/0x1560 [ 1136.382795][T20267] ? __pfx_get_futex_key+0x10/0x10 [ 1136.382838][T20267] ? __mutex_trylock_common+0xe9/0x250 [ 1136.382897][T20267] futex_wake+0xea/0x530 [ 1136.382954][T20267] ? __pfx_futex_wake+0x10/0x10 [ 1136.383002][T20267] ? __lock_acquire+0xb8a/0x1c90 [ 1136.383064][T20267] do_futex+0x1e3/0x350 [ 1136.383108][T20267] ? __pfx_do_futex+0x10/0x10 [ 1136.383148][T20267] ? __might_fault+0xe3/0x190 [ 1136.383192][T20267] mm_release+0x24e/0x300 [ 1136.383228][T20267] do_exit+0x68e/0x2bf0 [ 1136.383282][T20267] ? __pfx_do_exit+0x10/0x10 [ 1136.383327][T20267] ? do_raw_spin_lock+0x12c/0x2b0 [ 1136.383378][T20267] ? find_held_lock+0x2b/0x80 [ 1136.383418][T20267] do_group_exit+0xd3/0x2a0 [ 1136.383465][T20267] get_signal+0x2671/0x26d0 [ 1136.383513][T20267] ? do_raw_spin_lock+0x12c/0x2b0 [ 1136.383561][T20267] ? __pfx_get_signal+0x10/0x10 [ 1136.383591][T20267] ? do_futex+0x122/0x350 [ 1136.383635][T20267] ? __pfx_do_futex+0x10/0x10 [ 1136.383683][T20267] arch_do_signal_or_restart+0x8f/0x790 [ 1136.383737][T20267] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1136.383801][T20267] exit_to_user_mode_loop+0x85/0x130 [ 1136.383853][T20267] do_syscall_64+0x426/0xfa0 [ 1136.383896][T20267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1136.383927][T20267] RIP: 0033:0x7f2aa618f749 [ 1136.383974][T20267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1136.384004][T20267] RSP: 002b:00007f2aa700b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1136.384037][T20267] RAX: fffffffffffffe00 RBX: 00007f2aa63e6188 RCX: 00007f2aa618f749 [ 1136.384059][T20267] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2aa63e6188 [ 1136.384079][T20267] RBP: 00007f2aa63e6180 R08: 0000000000000000 R09: 0000000000000000 [ 1136.384099][T20267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1136.384118][T20267] R13: 00007f2aa63e6218 R14: 00007fffd52a4710 R15: 00007fffd52a47f8 [ 1136.384164][T20267] [ 1138.043678][T20296] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1138.060957][T20296] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1138.091903][T20296] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1138.112260][T20296] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1138.239271][T20296] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1138.301734][T20296] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1138.319951][T20296] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1138.331879][T20296] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1138.346716][T20296] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1138.353568][T20296] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1138.368540][T20296] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1138.387546][T20296] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1138.440941][T20296] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1138.453995][T20296] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1138.466016][T20296] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1138.473199][T20296] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1138.482332][T20296] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1138.494368][T20296] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1138.523254][T20296] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1138.534306][T20296] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1138.569525][T20296] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1138.593230][T20296] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1138.635819][T20296] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1140.093198][T16910] Bluetooth: hci2: command 0x0c1a tx timeout [ 1140.093219][T12009] Bluetooth: hci3: command 0x0406 tx timeout [ 1140.093269][T12009] Bluetooth: hci0: command 0x0406 tx timeout [ 1140.343192][T12009] Bluetooth: hci4: command 0x0c1a tx timeout [ 1140.401667][T20305] FAULT_INJECTION: forcing a failure. [ 1140.401667][T20305] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1140.414729][T12009] Bluetooth: hci5: command 0x0c1a tx timeout [ 1140.414739][ T5150] Bluetooth: hci1: command 0x0c1a tx timeout [ 1140.421123][T20305] CPU: 1 UID: 0 PID: 20305 Comm: syz.9.2998 Not tainted syzkaller #0 PREEMPT(full) [ 1140.421169][T20305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1140.421193][T20305] Call Trace: [ 1140.421206][T20305] [ 1140.421221][T20305] dump_stack_lvl+0x16c/0x1f0 [ 1140.421271][T20305] should_fail_ex+0x512/0x640 [ 1140.421335][T20305] get_futex_key+0x1d0/0x1560 [ 1140.421391][T20305] ? __pfx_get_futex_key+0x10/0x10 [ 1140.421448][T20305] ? __mutex_trylock_common+0xe9/0x250 [ 1140.421514][T20305] futex_wake+0xea/0x530 [ 1140.421576][T20305] ? __pfx_futex_wake+0x10/0x10 [ 1140.421630][T20305] ? __lock_acquire+0xb8a/0x1c90 [ 1140.421700][T20305] do_futex+0x1e3/0x350 [ 1140.421751][T20305] ? __pfx_do_futex+0x10/0x10 [ 1140.421799][T20305] ? __might_fault+0xe3/0x190 [ 1140.421847][T20305] mm_release+0x24e/0x300 [ 1140.421890][T20305] do_exit+0x68e/0x2bf0 [ 1140.421951][T20305] ? __pfx_do_exit+0x10/0x10 [ 1140.422000][T20305] ? do_raw_spin_lock+0x12c/0x2b0 [ 1140.422059][T20305] ? find_held_lock+0x2b/0x80 [ 1140.422104][T20305] do_group_exit+0xd3/0x2a0 [ 1140.422159][T20305] get_signal+0x2671/0x26d0 [ 1140.422206][T20305] ? kmem_cache_free+0x2d4/0x6c0 [ 1140.422257][T20305] ? __pfx_get_signal+0x10/0x10 [ 1140.422300][T20305] ? do_futex+0x122/0x350 [ 1140.422353][T20305] ? __pfx_do_futex+0x10/0x10 [ 1140.422415][T20305] arch_do_signal_or_restart+0x8f/0x790 [ 1140.422465][T20305] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1140.422526][T20305] ? xfd_validate_state+0x61/0x180 [ 1140.422589][T20305] exit_to_user_mode_loop+0x85/0x130 [ 1140.422651][T20305] do_syscall_64+0x426/0xfa0 [ 1140.422700][T20305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.422737][T20305] RIP: 0033:0x7fa7fe98f749 [ 1140.422766][T20305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1140.422802][T20305] RSP: 002b:00007fa7fcbac0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1140.422837][T20305] RAX: fffffffffffffe00 RBX: 00007fa7febe6188 RCX: 00007fa7fe98f749 [ 1140.422863][T20305] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa7febe6188 [ 1140.422886][T20305] RBP: 00007fa7febe6180 R08: 0000000000000000 R09: 0000000000000000 [ 1140.422909][T20305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1140.422932][T20305] R13: 00007fa7febe6218 R14: 00007ffd7b781520 R15: 00007ffd7b781608 [ 1140.422980][T20305] [ 1140.492789][T12009] Bluetooth: hci6: command 0x0c1a tx timeout [ 1140.575812][ T5150] Bluetooth: hci8: command 0x0c1a tx timeout [ 1140.583736][T12009] Bluetooth: hci7: command 0x0c1a tx timeout [ 1141.447309][T20208] mkiss: ax0: crc mode is auto. [ 1141.973742][ T5150] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1141.984809][ T5150] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1141.997339][ T5150] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1142.006004][ T5150] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1142.020500][ T5150] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1142.174992][ T5150] Bluetooth: hci2: command 0x0c1a tx timeout [ 1142.242195][T20349] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3009'. [ 1142.410760][T20346] chnl_net:caif_netlink_parms(): no params data found [ 1142.417837][ T5150] Bluetooth: hci4: command 0x0c1a tx timeout [ 1142.492749][ T5150] Bluetooth: hci5: command 0x0c1a tx timeout [ 1142.573139][ T5150] Bluetooth: hci1: command 0x0c1a tx timeout [ 1142.665091][ T5150] Bluetooth: hci8: command 0x0c1a tx timeout [ 1142.665101][T12009] Bluetooth: hci6: command 0x0c1a tx timeout [ 1142.705292][T20346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1142.720402][T20346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1142.729910][T20346] bridge_slave_0: entered allmulticast mode [ 1142.736962][ T5150] Bluetooth: hci7: command 0x0c1a tx timeout [ 1142.757859][T20346] bridge_slave_0: entered promiscuous mode [ 1142.772554][T20346] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.791848][T20346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.799407][T20346] bridge_slave_1: entered allmulticast mode [ 1142.820844][T20346] bridge_slave_1: entered promiscuous mode [ 1142.998724][T20346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1143.012422][T20346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1143.098387][T20346] team0: Port device team_slave_0 added [ 1143.108995][T20346] team0: Port device team_slave_1 added [ 1143.177768][T20346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1143.184944][T20346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1143.263364][T20346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1143.293917][T20346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1143.306883][T20346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1143.355331][T20346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1143.670234][T20346] hsr_slave_0: entered promiscuous mode [ 1143.696682][T20346] hsr_slave_1: entered promiscuous mode [ 1143.721179][T20346] debugfs: 'hsr0' already exists in 'hsr' [ 1143.737107][T20346] Cannot create hsr debugfs directory [ 1144.084720][T20382] hub 1-0:1.0: USB hub found [ 1144.094757][ T5150] Bluetooth: hci9: command tx timeout [ 1144.101895][T20382] hub 1-0:1.0: 1 port detected [ 1144.253992][ T5150] Bluetooth: hci2: command 0x0c1a tx timeout [ 1144.456283][T20382] hub 1-0:1.0: USB hub found [ 1144.484430][T20382] hub 1-0:1.0: 1 port detected [ 1144.493630][ T5150] Bluetooth: hci4: command 0x0c1a tx timeout [ 1144.578404][ T5150] Bluetooth: hci5: command 0x0c1a tx timeout [ 1144.637960][T20346] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.652929][ T5150] Bluetooth: hci1: command 0x0c1a tx timeout [ 1144.744708][ T5150] Bluetooth: hci8: command 0x0c1a tx timeout [ 1144.744719][T12009] Bluetooth: hci6: command 0x0c1a tx timeout [ 1144.785530][T20346] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.812786][ T5150] Bluetooth: hci7: command 0x0c1a tx timeout [ 1145.015369][T20346] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.126502][T20346] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.425863][T20346] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1145.449121][T20346] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1145.467909][T20346] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1145.505150][T20346] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1145.741288][T20346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1145.814059][T20346] 8021q: adding VLAN 0 to HW filter on device team0 [ 1145.838346][T16526] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.845610][T16526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1145.944152][T16526] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.951353][T16526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1146.183218][ T5150] Bluetooth: hci9: command tx timeout [ 1146.505963][T20346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1146.608337][T20346] veth0_vlan: entered promiscuous mode [ 1146.626486][T20346] veth1_vlan: entered promiscuous mode [ 1146.707210][T20346] veth0_macvtap: entered promiscuous mode [ 1146.722341][T20346] veth1_macvtap: entered promiscuous mode [ 1146.767585][T20346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1146.791116][T20346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1146.830507][T16527] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.857236][T16527] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.874244][T16527] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.920671][T16527] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.087693][T13756] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1147.100891][T13756] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1147.188390][T16253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1147.197262][T16253] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1147.413000][T20406] nfsd: Unknown parameter '^BÔ-' [ 1148.235910][T20415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3021'. [ 1148.260715][T20417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3021'. [ 1148.273613][ T5150] Bluetooth: hci9: command tx timeout [ 1150.342901][ T5150] Bluetooth: hci9: command tx timeout [ 1150.374135][T20439] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3024'. [ 1151.959805][T20454] zswap: compressor not available [ 1152.205002][T20463] Invalid ELF header magic: != ELF [ 1152.860973][T20360] mkiss: ax0: crc mode is auto. [ 1155.331449][T20516] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1156.618019][T12009] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1156.632945][T12009] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1156.647145][T12009] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1156.655789][T12009] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1156.667997][T12009] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1156.865215][T20535] netlink: 'syz.6.3040': attribute type 28 has an invalid length. [ 1156.903498][T20535] netlink: 334 bytes leftover after parsing attributes in process `syz.6.3040'. [ 1157.749686][T20540] FAULT_INJECTION: forcing a failure. [ 1157.749686][T20540] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.814751][T20540] CPU: 0 UID: 0 PID: 20540 Comm: syz.3.3042 Not tainted syzkaller #0 PREEMPT(full) [ 1157.814798][T20540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1157.814819][T20540] Call Trace: [ 1157.814851][T20540] [ 1157.814866][T20540] dump_stack_lvl+0x16c/0x1f0 [ 1157.814914][T20540] should_fail_ex+0x512/0x640 [ 1157.814965][T20540] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 1157.815017][T20540] should_failslab+0xc2/0x120 [ 1157.815063][T20540] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 1157.815109][T20540] ? devinet_init_net+0xc3/0x910 [ 1157.815163][T20540] ? kmemdup_noprof+0x29/0x60 [ 1157.815198][T20540] kmemdup_noprof+0x29/0x60 [ 1157.815234][T20540] devinet_init_net+0xc3/0x910 [ 1157.815281][T20540] ? __pfx_devinet_init_net+0x10/0x10 [ 1157.815332][T20540] ops_init+0x1e2/0x5f0 [ 1157.815374][T20540] setup_net+0x100/0x390 [ 1157.815411][T20540] ? __pfx_setup_net+0x10/0x10 [ 1157.815449][T20540] ? debug_mutex_init+0x37/0x70 [ 1157.815491][T20540] copy_net_ns+0x2f8/0x690 [ 1157.815535][T20540] create_new_namespaces+0x3ea/0xa90 [ 1157.815585][T20540] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1157.815630][T20540] ksys_unshare+0x45b/0xa40 [ 1157.815676][T20540] ? __pfx_ksys_unshare+0x10/0x10 [ 1157.815723][T20540] ? xfd_validate_state+0x61/0x180 [ 1157.815787][T20540] __x64_sys_unshare+0x31/0x40 [ 1157.815833][T20540] do_syscall_64+0xcd/0xfa0 [ 1157.815878][T20540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.815914][T20540] RIP: 0033:0x7effe998f749 [ 1157.815940][T20540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1157.815974][T20540] RSP: 002b:00007effea787038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1157.816006][T20540] RAX: ffffffffffffffda RBX: 00007effe9be5fa0 RCX: 00007effe998f749 [ 1157.816030][T20540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1157.816051][T20540] RBP: 00007effe9a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1157.816073][T20540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1157.816094][T20540] R13: 00007effe9be6038 R14: 00007effe9be5fa0 R15: 00007ffce9cad838 [ 1157.816141][T20540] [ 1158.752109][ T5150] Bluetooth: hci10: command tx timeout [ 1159.441675][T20529] chnl_net:caif_netlink_parms(): no params data found [ 1159.726176][T20559] vivid-003: ================= START STATUS ================= [ 1159.753118][T20559] vivid-003: Radio HW Seek Mode: Bounded [ 1159.758869][T20559] vivid-003: Radio Programmable HW Seek: false [ 1159.773631][T20559] vivid-003: RDS Rx I/O Mode: Block I/O [ 1159.781239][T20559] vivid-003: Generate RBDS Instead of RDS: false [ 1159.788098][T20559] vivid-003: RDS Reception: true [ 1159.822828][T20559] vivid-003: RDS Program Type: 0 inactive [ 1159.828673][T20559] vivid-003: RDS PS Name: inactive [ 1159.853456][T20559] vivid-003: RDS Radio Text: inactive [ 1159.859034][T20559] vivid-003: RDS Traffic Announcement: false inactive [ 1159.892487][T20559] vivid-003: RDS Traffic Program: false inactive [ 1159.914869][T20559] vivid-003: RDS Music: false inactive [ 1159.922725][T20559] vivid-003: ================== END STATUS ================== [ 1160.817209][ T5150] Bluetooth: hci10: command tx timeout [ 1160.929087][T20585] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3052'. [ 1161.066138][T20529] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.095147][T20529] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.134797][T20529] bridge_slave_0: entered allmulticast mode [ 1161.154904][T20529] bridge_slave_0: entered promiscuous mode [ 1162.199797][T20529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.217358][T20529] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.293904][T20529] bridge_slave_1: entered allmulticast mode [ 1162.302004][T20529] bridge_slave_1: entered promiscuous mode [ 1162.818890][T20599] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 1162.904591][ T5150] Bluetooth: hci10: command tx timeout [ 1162.946830][T20529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1162.996396][T20529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1163.263208][T20529] team0: Port device team_slave_0 added [ 1163.302952][T20529] team0: Port device team_slave_1 added [ 1163.678713][T20529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1163.700491][T20529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1163.746080][T20529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1164.232672][T20529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1164.270212][T20529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1164.375385][T20529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1164.705840][T20529] hsr_slave_0: entered promiscuous mode [ 1164.721312][T20529] hsr_slave_1: entered promiscuous mode [ 1164.744216][T20529] debugfs: 'hsr0' already exists in 'hsr' [ 1164.777504][T20529] Cannot create hsr debugfs directory [ 1164.977098][ T5150] Bluetooth: hci10: command tx timeout [ 1165.132805][T20503] mkiss: ax0: crc mode is auto. [ 1165.534574][T20529] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.749499][T20529] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.974440][T20529] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.160314][T20529] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.352820][T20622] bond0: option all_slaves_active: invalid value (15) [ 1166.638682][T20529] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1166.681281][T20529] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1166.713205][T20529] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1166.759362][T20529] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1166.933622][T20627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.964256][T20627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1167.353947][T20529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1167.425434][T20529] 8021q: adding VLAN 0 to HW filter on device team0 [ 1167.481364][T13741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.488626][T13741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1167.564891][T13741] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.572155][T13741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1168.427350][T20529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1168.490089][T20529] veth0_vlan: entered promiscuous mode [ 1168.525462][T20529] veth1_vlan: entered promiscuous mode [ 1168.575950][T20529] veth0_macvtap: entered promiscuous mode [ 1168.592967][T20529] veth1_macvtap: entered promiscuous mode [ 1168.635958][T20529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1168.660846][T20529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1168.683800][T13738] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.703236][T13738] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.748859][T13738] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.795464][T13738] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.963378][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.985173][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1169.045591][T13738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1169.055856][T13738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1169.639614][T20659] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.860698][T20685] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3072'. [ 1170.891483][T20685] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3072'. [ 1170.914128][T20685] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3072'. [ 1170.924314][T20685] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3072'. [ 1171.338629][T20692] netlink: 'syz.3.3074': attribute type 4 has an invalid length. [ 1171.425716][T20694] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3075'. [ 1174.202661][T20731] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3084'. [ 1175.827750][T20745] syz.6.3088 (20745): attempted to duplicate a private mapping with mremap. This is not supported. [ 1175.843560][T20745] netlink: 334 bytes leftover after parsing attributes in process `syz.6.3088'. [ 1175.855341][T20745] netlink: 334 bytes leftover after parsing attributes in process `syz.6.3088'. [ 1176.042298][T20750] FAULT_INJECTION: forcing a failure. [ 1176.042298][T20750] name failslab, interval 1, probability 0, space 0, times 0 [ 1176.056881][T20750] CPU: 1 UID: 0 PID: 20750 Comm: syz.6.3091 Not tainted syzkaller #0 PREEMPT(full) [ 1176.056913][T20750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1176.056928][T20750] Call Trace: [ 1176.056936][T20750] [ 1176.056946][T20750] dump_stack_lvl+0x16c/0x1f0 [ 1176.056980][T20750] should_fail_ex+0x512/0x640 [ 1176.057017][T20750] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1176.057045][T20750] should_failslab+0xc2/0x120 [ 1176.057078][T20750] __kmalloc_cache_noprof+0x72/0x780 [ 1176.057102][T20750] ? snd_timer_instance_new+0x47/0x2e0 [ 1176.057140][T20750] ? snd_timer_instance_new+0x47/0x2e0 [ 1176.057171][T20750] snd_timer_instance_new+0x47/0x2e0 [ 1176.057203][T20750] snd_seq_timer_open+0x1cc/0x600 [ 1176.057231][T20750] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 1176.057258][T20750] ? find_held_lock+0x2b/0x80 [ 1176.057288][T20750] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1176.057317][T20750] ? lockdep_hardirqs_on+0x7c/0x110 [ 1176.057347][T20750] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1176.057379][T20750] queue_use+0xe3/0x250 [ 1176.057414][T20750] snd_seq_queue_alloc+0x2e5/0x5a0 [ 1176.057456][T20750] snd_seq_ioctl_create_queue+0xa9/0x390 [ 1176.057489][T20750] call_seq_client_ctl+0x9f/0x110 [ 1176.057518][T20750] snd_seq_kernel_client_ctl+0x77/0xd0 [ 1176.057557][T20750] alloc_seq_queue+0xda/0x180 [ 1176.057588][T20750] ? __pfx_alloc_seq_queue+0x10/0x10 [ 1176.057635][T20750] ? mark_held_locks+0x49/0x80 [ 1176.057668][T20750] ? _raw_spin_unlock_irq+0x23/0x50 [ 1176.057694][T20750] ? lockdep_hardirqs_on+0x7c/0x110 [ 1176.057726][T20750] snd_seq_oss_open+0x38c/0xa20 [ 1176.057763][T20750] odev_open+0x79/0xc0 [ 1176.057790][T20750] ? __pfx_odev_open+0x10/0x10 [ 1176.057818][T20750] soundcore_open+0x40c/0x580 [ 1176.057850][T20750] ? __pfx_soundcore_open+0x10/0x10 [ 1176.057879][T20750] chrdev_open+0x234/0x6a0 [ 1176.057908][T20750] ? __pfx_apparmor_file_open+0x10/0x10 [ 1176.057946][T20750] ? __pfx_chrdev_open+0x10/0x10 [ 1176.057977][T20750] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1176.058011][T20750] do_dentry_open+0x982/0x1530 [ 1176.058041][T20750] ? __pfx_chrdev_open+0x10/0x10 [ 1176.058077][T20750] vfs_open+0x82/0x3f0 [ 1176.058115][T20750] path_openat+0x1de4/0x2cb0 [ 1176.058151][T20750] ? kasan_save_stack+0x42/0x60 [ 1176.058179][T20750] ? __pfx_path_openat+0x10/0x10 [ 1176.058204][T20750] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 1176.058228][T20750] ? getname_flags.part.0+0x4c/0x550 [ 1176.058262][T20750] ? getname_flags+0x93/0xf0 [ 1176.058284][T20750] ? acct_on+0x82/0xa00 [ 1176.058318][T20750] ? __x64_sys_acct+0x81/0x1e0 [ 1176.058354][T20750] ? do_syscall_64+0xcd/0xfa0 [ 1176.058382][T20750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.058411][T20750] do_filp_open+0x20b/0x470 [ 1176.058439][T20750] ? __pfx_do_filp_open+0x10/0x10 [ 1176.058490][T20750] ? find_held_lock+0x2b/0x80 [ 1176.058513][T20750] ? __might_fault+0xe3/0x190 [ 1176.058543][T20750] ? __might_fault+0xe3/0x190 [ 1176.058565][T20750] ? __might_fault+0x13b/0x190 [ 1176.058595][T20750] file_open_name+0x2a3/0x450 [ 1176.058632][T20750] ? __pfx_file_open_name+0x10/0x10 [ 1176.058673][T20750] ? getname_flags.part.0+0x1c5/0x550 [ 1176.058715][T20750] acct_on+0xc7/0xa00 [ 1176.058753][T20750] ? __pfx_acct_on+0x10/0x10 [ 1176.058792][T20750] ? bpf_lsm_capable+0x9/0x10 [ 1176.058831][T20750] __x64_sys_acct+0x81/0x1e0 [ 1176.058867][T20750] ? lockdep_hardirqs_on+0x7c/0x110 [ 1176.058896][T20750] do_syscall_64+0xcd/0xfa0 [ 1176.058928][T20750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.058952][T20750] RIP: 0033:0x7fe13958f749 [ 1176.058971][T20750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1176.058995][T20750] RSP: 002b:00007fe1377f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 1176.059017][T20750] RAX: ffffffffffffffda RBX: 00007fe1397e5fa0 RCX: 00007fe13958f749 [ 1176.059033][T20750] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 1176.059048][T20750] RBP: 00007fe139613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1176.059063][T20750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1176.059077][T20750] R13: 00007fe1397e6038 R14: 00007fe1397e5fa0 R15: 00007ffc44d2ee58 [ 1176.059109][T20750] [ 1176.495016][T20751] vivid-007: ================= START STATUS ================= [ 1176.503235][T20751] vivid-007: Generate PTS: true [ 1176.511899][T20751] vivid-007: Generate SCR: true [ 1176.518026][T20751] tpg source WxH: 320x240 (Y'CbCr) [ 1176.523237][T20751] tpg field: 1 [ 1176.526769][T20751] tpg crop: (0,0)/320x240 [ 1176.531248][T20751] tpg compose: (0,0)/320x240 [ 1176.535883][T20751] tpg colorspace: 8 [ 1176.539707][T20751] tpg transfer function: 0/0 [ 1176.544629][T20751] tpg Y'CbCr encoding: 0/0 [ 1176.549113][T20751] tpg quantization: 0/0 [ 1176.553371][T20751] tpg RGB range: 0/2 [ 1176.557298][T20751] vivid-007: ================== END STATUS ================== [ 1176.609525][T20624] mkiss: ax0: crc mode is auto. [ 1178.689401][T20775] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1180.225361][T12009] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1180.239872][T12009] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1180.268006][T12009] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1180.277098][T12009] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1180.288475][T12009] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1180.967180][T20792] chnl_net:caif_netlink_parms(): no params data found [ 1181.394352][T20792] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.401643][T20792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.424577][T20792] bridge_slave_0: entered allmulticast mode [ 1181.439912][T20792] bridge_slave_0: entered promiscuous mode [ 1181.455866][T20792] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.463075][T20792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.474800][T20792] bridge_slave_1: entered allmulticast mode [ 1181.494282][T20792] bridge_slave_1: entered promiscuous mode [ 1181.590890][T20792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1181.606817][T20792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1181.687485][T20792] team0: Port device team_slave_0 added [ 1181.706922][T20792] team0: Port device team_slave_1 added [ 1181.811899][T20792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1181.820293][T20792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1181.857899][T20792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1182.044624][T20792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1182.051601][T20792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.132366][T20792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1182.230459][T20792] hsr_slave_0: entered promiscuous mode [ 1182.237093][T20792] hsr_slave_1: entered promiscuous mode [ 1182.243324][T20792] debugfs: 'hsr0' already exists in 'hsr' [ 1182.253939][T20792] Cannot create hsr debugfs directory [ 1182.344194][ T5150] Bluetooth: hci11: command tx timeout [ 1182.501669][T20792] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.628221][T20792] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.839964][T20792] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.949879][T20792] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.035531][T20792] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.323431][T20792] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1183.355337][T20792] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1183.382039][T20792] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1183.401622][T20792] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1183.614056][T20792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1183.650601][T20792] 8021q: adding VLAN 0 to HW filter on device team0 [ 1183.697500][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.704741][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1183.732526][T16526] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.739730][T16526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1183.838017][T20792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1184.250342][T20792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1184.341639][T20792] veth0_vlan: entered promiscuous mode [ 1184.361862][T20792] veth1_vlan: entered promiscuous mode [ 1184.427186][ T5150] Bluetooth: hci11: command tx timeout [ 1184.458564][T20792] veth0_macvtap: entered promiscuous mode [ 1184.473295][T20792] veth1_macvtap: entered promiscuous mode [ 1184.512760][T20792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1184.531966][T20792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1184.569095][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.581030][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.609963][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.635215][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.796446][T16526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.838407][T16526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.878515][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.886610][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.508373][ T5150] Bluetooth: hci11: command tx timeout [ 1186.661345][ T5150] Bluetooth: hci11: unexpected event 0x36 length: 123 > 7 [ 1186.680261][T20846] Invalid ELF header magic: != ELF [ 1187.583482][T12009] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1187.594415][T12009] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1187.603195][T12009] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1187.612131][T12009] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1187.620664][T12009] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1187.867560][T20768] mkiss: ax0: crc mode is auto. [ 1187.996936][T20860] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 1188.074787][T20853] chnl_net:caif_netlink_parms(): no params data found [ 1188.273914][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1188.284759][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1188.379532][T20853] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.392645][T20853] bridge0: port 1(bridge_slave_0) entered disabled state [ 1188.419643][T20853] bridge_slave_0: entered allmulticast mode [ 1188.439754][T20853] bridge_slave_0: entered promiscuous mode [ 1188.462426][T20853] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.472364][T20853] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.480695][T20853] bridge_slave_1: entered allmulticast mode [ 1188.491813][T20853] bridge_slave_1: entered promiscuous mode [ 1188.563933][T20853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1188.584461][T20853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1188.611208][ T5150] Bluetooth: hci11: command tx timeout [ 1188.663247][T20853] team0: Port device team_slave_0 added [ 1188.699304][T20853] team0: Port device team_slave_1 added [ 1189.035033][T20853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1189.064109][T20853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.090132][ C0] vkms_vblank_simulate: vblank timer overrun [ 1189.158855][T20853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1189.172054][T20853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1189.179115][T20853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1189.205128][T20853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1189.298883][T20853] hsr_slave_0: entered promiscuous mode [ 1189.310290][T20853] hsr_slave_1: entered promiscuous mode [ 1189.320719][T20853] debugfs: 'hsr0' already exists in 'hsr' [ 1189.330245][T20853] Cannot create hsr debugfs directory [ 1189.331938][T20883] netlink: 330 bytes leftover after parsing attributes in process `syz.6.3118'. [ 1189.722887][ T5150] Bluetooth: hci12: command tx timeout [ 1190.523108][T12009] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1190.543295][T12009] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1190.558634][T12009] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1190.569328][T12009] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1190.577281][T12009] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1190.880462][T20853] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.003629][T20853] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.092828][T20853] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.227840][T20853] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.788716][T12009] Bluetooth: hci12: command tx timeout [ 1191.807305][T20891] chnl_net:caif_netlink_parms(): no params data found [ 1191.871897][T20853] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1191.925453][T20853] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1191.958660][T20853] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1192.016455][T20853] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1192.167334][T20891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.178874][T20891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.203534][T20891] bridge_slave_0: entered allmulticast mode [ 1192.221190][T20891] bridge_slave_0: entered promiscuous mode [ 1192.273645][T20891] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.284058][T20891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.296569][T20891] bridge_slave_1: entered allmulticast mode [ 1192.305318][T20891] bridge_slave_1: entered promiscuous mode [ 1192.362549][T20891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1192.406069][T20891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1192.618867][T20891] team0: Port device team_slave_0 added [ 1192.629224][T20891] team0: Port device team_slave_1 added [ 1192.669482][T12009] Bluetooth: hci13: command tx timeout [ 1192.858665][T20891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1192.868380][T20891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1192.897318][T20891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1192.959895][T20891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1192.967740][T20891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1192.993793][ C0] vkms_vblank_simulate: vblank timer overrun [ 1193.001801][T20891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1193.188107][T20918] FAULT_INJECTION: forcing a failure. [ 1193.188107][T20918] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1193.206311][T20918] CPU: 1 UID: 0 PID: 20918 Comm: syz.2.3124 Not tainted syzkaller #0 PREEMPT(full) [ 1193.206354][T20918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1193.206375][T20918] Call Trace: [ 1193.206386][T20918] [ 1193.206399][T20918] dump_stack_lvl+0x16c/0x1f0 [ 1193.206446][T20918] should_fail_ex+0x512/0x640 [ 1193.206501][T20918] get_futex_key+0x293/0x1560 [ 1193.206551][T20918] ? __pfx_get_futex_key+0x10/0x10 [ 1193.206593][T20918] ? __mutex_trylock_common+0xe9/0x250 [ 1193.206652][T20918] futex_wake+0xea/0x530 [ 1193.206707][T20918] ? __pfx_futex_wake+0x10/0x10 [ 1193.206754][T20918] ? __lock_acquire+0xb8a/0x1c90 [ 1193.206818][T20918] do_futex+0x1e3/0x350 [ 1193.206864][T20918] ? __pfx_do_futex+0x10/0x10 [ 1193.206907][T20918] ? __might_fault+0xe3/0x190 [ 1193.206952][T20918] mm_release+0x24e/0x300 [ 1193.206991][T20918] do_exit+0x68e/0x2bf0 [ 1193.207044][T20918] ? __pfx_do_exit+0x10/0x10 [ 1193.207089][T20918] ? do_raw_spin_lock+0x12c/0x2b0 [ 1193.207140][T20918] ? find_held_lock+0x2b/0x80 [ 1193.207190][T20918] do_group_exit+0xd3/0x2a0 [ 1193.207239][T20918] get_signal+0x2671/0x26d0 [ 1193.207294][T20918] ? __pfx_get_signal+0x10/0x10 [ 1193.207331][T20918] ? do_futex+0x122/0x350 [ 1193.207377][T20918] ? __pfx_do_futex+0x10/0x10 [ 1193.207426][T20918] arch_do_signal_or_restart+0x8f/0x790 [ 1193.207471][T20918] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1193.207526][T20918] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1193.207575][T20918] exit_to_user_mode_loop+0x85/0x130 [ 1193.207627][T20918] do_syscall_64+0x426/0xfa0 [ 1193.207671][T20918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.207704][T20918] RIP: 0033:0x7f740418f749 [ 1193.207731][T20918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1193.207764][T20918] RSP: 002b:00007f7404faa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1193.207795][T20918] RAX: fffffffffffffe00 RBX: 00007f74043e6098 RCX: 00007f740418f749 [ 1193.207817][T20918] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f74043e6098 [ 1193.207838][T20918] RBP: 00007f74043e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1193.207863][T20918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1193.207884][T20918] R13: 00007f74043e6128 R14: 00007ffcfe6ab260 R15: 00007ffcfe6ab348 [ 1193.207930][T20918] [ 1193.551636][T20891] hsr_slave_0: entered promiscuous mode [ 1193.558793][T20891] hsr_slave_1: entered promiscuous mode [ 1193.732450][T20891] debugfs: 'hsr0' already exists in 'hsr' [ 1193.738283][T20891] Cannot create hsr debugfs directory [ 1193.787558][T20853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1193.869879][T12009] Bluetooth: hci12: command tx timeout [ 1194.149131][T20853] 8021q: adding VLAN 0 to HW filter on device team0 [ 1194.342146][T20931] pim6reg: entered allmulticast mode [ 1194.360537][ T7714] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.367738][ T7714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1194.507435][T20891] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.561425][ T7714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.568657][ T7714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1194.663001][T20891] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.764699][T12009] Bluetooth: hci13: command tx timeout [ 1195.085472][T20891] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.374756][T20891] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1195.494307][T20853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1195.788678][T20891] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1195.814091][T20891] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1195.851793][T20891] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1195.865531][T20891] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1195.907569][T20961] delete_channel: no stack [ 1195.970797][T12009] Bluetooth: hci12: command tx timeout [ 1196.241167][T20891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1196.332443][T20891] 8021q: adding VLAN 0 to HW filter on device team0 [ 1196.364957][T13739] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.372203][T13739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1196.414523][T13739] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.421780][T13739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1196.475703][T20853] veth0_vlan: entered promiscuous mode [ 1196.533074][T20853] veth1_vlan: entered promiscuous mode [ 1196.699345][T20853] veth0_macvtap: entered promiscuous mode [ 1196.747183][T20853] veth1_macvtap: entered promiscuous mode [ 1196.805452][T20853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1196.832028][T12009] Bluetooth: hci13: command tx timeout [ 1196.901897][T20853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1196.982094][T16255] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.019844][ T7714] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.044016][ T7714] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.087981][ T7714] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.269453][ T7714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.285909][ T7714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.350766][T20891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1197.421679][ T7714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.429568][ T7714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.700302][T20891] veth0_vlan: entered promiscuous mode [ 1197.832513][T20891] veth1_vlan: entered promiscuous mode [ 1197.991033][T20891] veth0_macvtap: entered promiscuous mode [ 1198.033927][T20891] veth1_macvtap: entered promiscuous mode [ 1198.110860][T20891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1198.159589][T20891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1198.238060][T13739] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.270841][T13739] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.348924][T13739] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.381677][T13739] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.701898][ T7719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.767710][ T7719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.912502][T12009] Bluetooth: hci13: command tx timeout [ 1198.921651][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.933111][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.943297][T20995] syz.4.3138(20995): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1199.231423][T20875] mkiss: ax0: crc mode is auto. [ 1199.721927][T21008] FAULT_INJECTION: forcing a failure. [ 1199.721927][T21008] name failslab, interval 1, probability 0, space 0, times 0 [ 1199.736474][T21008] CPU: 0 UID: 0 PID: 21008 Comm: syz.2.3135 Not tainted syzkaller #0 PREEMPT(full) [ 1199.736521][T21008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1199.736543][T21008] Call Trace: [ 1199.736554][T21008] [ 1199.736568][T21008] dump_stack_lvl+0x16c/0x1f0 [ 1199.736617][T21008] should_fail_ex+0x512/0x640 [ 1199.736669][T21008] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1199.736709][T21008] should_failslab+0xc2/0x120 [ 1199.736755][T21008] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1199.736792][T21008] ? __proc_create+0x2ce/0x8e0 [ 1199.736849][T21008] ? __proc_create+0x2ce/0x8e0 [ 1199.736903][T21008] __proc_create+0x2ce/0x8e0 [ 1199.736955][T21008] ? __pfx___proc_create+0x10/0x10 [ 1199.737011][T21008] ? _raw_write_unlock+0x28/0x50 [ 1199.737051][T21008] ? proc_register+0x559/0x8b0 [ 1199.737107][T21008] proc_create_reg+0x7d/0x180 [ 1199.737164][T21008] proc_create_seq_private+0x8e/0x180 [ 1199.737220][T21008] ? __pfx_proc_create_seq_private+0x10/0x10 [ 1199.737290][T21008] xt_proto_init+0x45b/0xc10 [ 1199.737340][T21008] ? __pfx_xt_proto_init+0x10/0x10 [ 1199.737385][T21008] ? kasan_save_track+0x14/0x30 [ 1199.737429][T21008] ? ops_init+0x77/0x5f0 [ 1199.737468][T21008] ? __pfx_arp_tables_net_init+0x10/0x10 [ 1199.737504][T21008] ops_init+0x1e2/0x5f0 [ 1199.737544][T21008] setup_net+0x100/0x390 [ 1199.737581][T21008] ? __pfx_setup_net+0x10/0x10 [ 1199.737619][T21008] ? debug_mutex_init+0x37/0x70 [ 1199.737660][T21008] copy_net_ns+0x2f8/0x690 [ 1199.737705][T21008] create_new_namespaces+0x3ea/0xa90 [ 1199.737754][T21008] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1199.737797][T21008] ksys_unshare+0x45b/0xa40 [ 1199.737843][T21008] ? __pfx_ksys_unshare+0x10/0x10 [ 1199.737897][T21008] ? xfd_validate_state+0x61/0x180 [ 1199.737960][T21008] __x64_sys_unshare+0x31/0x40 [ 1199.738004][T21008] do_syscall_64+0xcd/0xfa0 [ 1199.738050][T21008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.738084][T21008] RIP: 0033:0x7f740418f749 [ 1199.738112][T21008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1199.738144][T21008] RSP: 002b:00007f7404fcb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1199.738173][T21008] RAX: ffffffffffffffda RBX: 00007f74043e5fa0 RCX: 00007f740418f749 [ 1199.738189][T21008] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1199.738204][T21008] RBP: 00007f7404213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1199.738219][T21008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1199.738235][T21008] R13: 00007f74043e6038 R14: 00007f74043e5fa0 R15: 00007ffcfe6ab348 [ 1199.738267][T21008] [ 1200.636268][T21019] futex_wake_op: syz.6.3141 tries to shift op by -2048; fix this program [ 1200.663232][T21019] futex_wake_op: syz.6.3141 tries to shift op by -2048; fix this program [ 1201.667271][T21037] ubi31: attaching mtd0 [ 1201.697716][T21037] ubi31 error: validate_ec_hdr: bad VID header offset 64, expected 514 [ 1201.770943][T21037] ubi31 error: validate_ec_hdr: bad EC header [ 1201.804914][T21037] Erase counter header dump: [ 1201.861025][T21037] magic 0x55424923 [ 1201.878871][T21037] version 1 [ 1201.888477][T21037] ec 1 [ 1201.894345][T21037] vid_hdr_offset 64 [ 1201.898375][T21037] data_offset 128 [ 1201.913482][T21037] image_seq 237808050 [ 1201.921044][T21037] hdr_crc 0x72e7a017 [ 1201.934409][T21037] erase counter header hexdump: [ 1201.939431][T21037] CPU: 1 UID: 0 PID: 21037 Comm: syz.1.3146 Not tainted syzkaller #0 PREEMPT(full) [ 1201.939472][T21037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1201.939493][T21037] Call Trace: [ 1201.939506][T21037] [ 1201.939519][T21037] dump_stack_lvl+0x16c/0x1f0 [ 1201.939566][T21037] validate_ec_hdr+0x28c/0x330 [ 1201.939616][T21037] ubi_io_read_ec_hdr+0x63b/0x6c0 [ 1201.939670][T21037] ubi_attach+0x601/0x4be0 [ 1201.939728][T21037] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1201.939779][T21037] ? __pfx_ubi_msg+0x10/0x10 [ 1201.939814][T21037] ? __pfx_ubi_attach+0x10/0x10 [ 1201.939854][T21037] ? ubi_attach_mtd_dev+0x155b/0x35d0 [ 1201.939889][T21037] ? __vmalloc_node_noprof+0xad/0xf0 [ 1201.939939][T21037] ? ubi_attach_mtd_dev+0x155b/0x35d0 [ 1201.939980][T21037] ubi_attach_mtd_dev+0x15a7/0x35d0 [ 1201.940038][T21037] ? __pfx_ubi_attach_mtd_dev+0x10/0x10 [ 1201.940074][T21037] ? __pfx_get_mtd_device+0x10/0x10 [ 1201.940134][T21037] ctrl_cdev_ioctl+0x337/0x3d0 [ 1201.940170][T21037] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 1201.940220][T21037] ? __pfx_ctrl_cdev_ioctl+0x10/0x10 [ 1201.940260][T21037] __x64_sys_ioctl+0x18e/0x210 [ 1201.940316][T21037] do_syscall_64+0xcd/0xfa0 [ 1201.940361][T21037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1201.940395][T21037] RIP: 0033:0x7fefc158f749 [ 1201.940421][T21037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1201.940454][T21037] RSP: 002b:00007fefc24fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1201.940485][T21037] RAX: ffffffffffffffda RBX: 00007fefc17e5fa0 RCX: 00007fefc158f749 [ 1201.940508][T21037] RDX: 0000200000000080 RSI: 0000000040186f40 RDI: 0000000000000006 [ 1201.940528][T21037] RBP: 00007fefc1613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1201.940548][T21037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1201.940568][T21037] R13: 00007fefc17e6038 R14: 00007fefc17e5fa0 R15: 00007ffd1b24ada8 [ 1201.940615][T21037] [ 1201.940628][T21037] ubi31 error: ubi_io_read_ec_hdr: validation failed for PEB 0 [ 1202.411066][T21037] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1202.624454][T21044] vhci_hcd: invalid port number 9 [ 1203.715802][T21066] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 1203.825224][T21068] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3154'. [ 1203.856724][T21071] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3153'. [ 1204.129665][T21069] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 1204.213635][T21079] FAULT_INJECTION: forcing a failure. [ 1204.213635][T21079] name failslab, interval 1, probability 0, space 0, times 0 [ 1204.253561][T21079] CPU: 1 UID: 0 PID: 21079 Comm: syz.6.3157 Not tainted syzkaller #0 PREEMPT(full) [ 1204.253616][T21079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1204.253636][T21079] Call Trace: [ 1204.253647][T21079] [ 1204.253660][T21079] dump_stack_lvl+0x16c/0x1f0 [ 1204.253706][T21079] should_fail_ex+0x512/0x640 [ 1204.253757][T21079] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1204.253797][T21079] should_failslab+0xc2/0x120 [ 1204.253842][T21079] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1204.253877][T21079] ? __proc_create+0x2ce/0x8e0 [ 1204.253932][T21079] ? __proc_create+0x2ce/0x8e0 [ 1204.253978][T21079] __proc_create+0x2ce/0x8e0 [ 1204.254028][T21079] ? __pfx___proc_create+0x10/0x10 [ 1204.254082][T21079] ? _raw_write_unlock+0x28/0x50 [ 1204.254125][T21079] ? proc_register+0x559/0x8b0 [ 1204.254179][T21079] proc_create_reg+0x7d/0x180 [ 1204.254237][T21079] proc_create_seq_private+0x8e/0x180 [ 1204.254292][T21079] ? __pfx_proc_create_seq_private+0x10/0x10 [ 1204.254359][T21079] xt_proto_init+0x5b8/0xc10 [ 1204.254410][T21079] ? __pfx_xt_proto_init+0x10/0x10 [ 1204.254456][T21079] ? kasan_save_track+0x14/0x30 [ 1204.254497][T21079] ? ops_init+0x77/0x5f0 [ 1204.254535][T21079] ? __pfx_arp_tables_net_init+0x10/0x10 [ 1204.254569][T21079] ops_init+0x1e2/0x5f0 [ 1204.254615][T21079] setup_net+0x100/0x390 [ 1204.254651][T21079] ? __pfx_setup_net+0x10/0x10 [ 1204.254688][T21079] ? debug_mutex_init+0x37/0x70 [ 1204.254727][T21079] copy_net_ns+0x2f8/0x690 [ 1204.254772][T21079] create_new_namespaces+0x3ea/0xa90 [ 1204.254822][T21079] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1204.254866][T21079] ksys_unshare+0x45b/0xa40 [ 1204.254914][T21079] ? __pfx_ksys_unshare+0x10/0x10 [ 1204.254961][T21079] ? xfd_validate_state+0x61/0x180 [ 1204.255022][T21079] __x64_sys_unshare+0x31/0x40 [ 1204.255066][T21079] do_syscall_64+0xcd/0xfa0 [ 1204.255111][T21079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.255146][T21079] RIP: 0033:0x7fe13958f749 [ 1204.255174][T21079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1204.255208][T21079] RSP: 002b:00007fe1377f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1204.255242][T21079] RAX: ffffffffffffffda RBX: 00007fe1397e5fa0 RCX: 00007fe13958f749 [ 1204.255265][T21079] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1204.255287][T21079] RBP: 00007fe139613f91 R08: 0000000000000000 R09: 0000000000000000 [ 1204.255308][T21079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1204.255329][T21079] R13: 00007fe1397e6038 R14: 00007fe1397e5fa0 R15: 00007ffc44d2ee58 [ 1204.255376][T21079] [ 1204.635830][ T1155] netdevsim netdevsim1335 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.358491][T21087] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1205.365954][T21090] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1206.280487][T21118] netlink: 186 bytes leftover after parsing attributes in process `syz.2.3167'. [ 1206.787607][T21124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3169'. [ 1206.980334][T21124] team0: Port device team_slave_0 removed [ 1208.428302][T21143] netlink: 93 bytes leftover after parsing attributes in process `syz.4.3172'. [ 1210.977549][T21014] mkiss: ax0: crc mode is auto. [ 1211.126144][T21164] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1211.216006][T21165] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1212.484724][T21181] overlayfs: missing 'lowerdir' [ 1212.947271][T21178] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 1213.241959][ T31] INFO: task syz-executor:5826 blocked for more than 143 seconds. [ 1213.250497][ T31] Not tainted syzkaller #0 [ 1213.255485][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1213.271796][ T31] task:syz-executor state:D stack:24024 pid:5826 tgid:5826 ppid:1 task_flags:0x400140 flags:0x00080003 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1213.309366][ T31] Call Trace: [ 1213.312717][ T31] [ 1213.319895][ T31] __schedule+0x1190/0x5de0 [ 1213.324516][ T31] ? __pfx___schedule+0x10/0x10 [ 1213.329700][ T31] ? find_held_lock+0x2b/0x80 [ 1213.334492][ T31] ? schedule+0x2d7/0x3a0 [ 1213.338882][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1213.344606][ T31] schedule+0xe7/0x3a0 [ 1213.348747][ T31] schedule_preempt_disabled+0x13/0x30 [ 1213.354369][ T31] __mutex_lock+0x818/0x1060 [ 1213.387821][ T31] ? __lock_acquire+0x622/0x1c90 [ 1213.402279][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1213.407679][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1213.412928][ T31] ? net_generic+0xea/0x2a0 [ 1213.417546][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1213.423033][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 1213.428219][ T31] nfsd_umount+0x48/0xe0 [ 1213.432676][ T31] deactivate_locked_super+0xc1/0x1a0 [ 1213.438145][ T31] deactivate_super+0xde/0x100 [ 1213.443151][ T31] cleanup_mnt+0x225/0x450 [ 1213.447631][ T31] task_work_run+0x150/0x240 [ 1213.454922][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1213.469223][ T31] ? __pfx___x64_sys_umount+0x10/0x10 [ 1213.512264][ T31] exit_to_user_mode_loop+0xec/0x130 [ 1213.517707][ T31] do_syscall_64+0x426/0xfa0 [ 1213.549322][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.560819][ T31] RIP: 0033:0x7f501cb90a77 [ 1213.565397][ T31] RSP: 002b:00007ffc3172c688 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1213.570808][T21200] FAULT_INJECTION: forcing a failure. [ 1213.570808][T21200] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.580178][ T31] RAX: 0000000000000000 RBX: 00007f501cc13d7d RCX: 00007f501cb90a77 [ 1213.595309][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc3172c740 [ 1213.607840][ T31] RBP: 00007ffc3172c740 R08: 0000000000000000 R09: 0000000000000000 [ 1213.616415][ T31] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc3172d7d0 [ 1213.625148][ T31] R13: 00007f501cc13d7d R14: 0000000000101b52 R15: 00007ffc3172d810 [ 1213.633593][T21200] CPU: 0 UID: 0 PID: 21200 Comm: syz.4.3182 Not tainted syzkaller #0 PREEMPT(full) [ 1213.633644][T21200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1213.633665][T21200] Call Trace: [ 1213.633678][T21200] [ 1213.633692][T21200] dump_stack_lvl+0x16c/0x1f0 [ 1213.633740][T21200] should_fail_ex+0x512/0x640 [ 1213.633793][T21200] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1213.633833][T21200] should_failslab+0xc2/0x120 [ 1213.633880][T21200] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1213.633916][T21200] ? kcm_create+0x11e/0x690 [ 1213.633956][T21200] ? kcm_create+0x11e/0x690 [ 1213.633985][T21200] kcm_create+0x11e/0x690 [ 1213.634021][T21200] __sock_create+0x338/0x8d0 [ 1213.634077][T21200] __sys_socket+0x14d/0x260 [ 1213.634123][T21200] ? __x64_sys_openat+0x174/0x210 [ 1213.634176][T21200] ? __pfx___sys_socket+0x10/0x10 [ 1213.634223][T21200] ? xfd_validate_state+0x61/0x180 [ 1213.634284][T21200] __x64_sys_socket+0x72/0xb0 [ 1213.634329][T21200] ? lockdep_hardirqs_on+0x7c/0x110 [ 1213.634370][T21200] do_syscall_64+0xcd/0xfa0 [ 1213.634417][T21200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1213.634452][T21200] RIP: 0033:0x7fe50718f749 [ 1213.634480][T21200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1213.634514][T21200] RSP: 002b:00007fe50805a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1213.634545][T21200] RAX: ffffffffffffffda RBX: 00007fe5073e5fa0 RCX: 00007fe50718f749 [ 1213.634567][T21200] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 1213.634596][T21200] RBP: 00007fe507213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1213.634618][T21200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1213.634638][T21200] R13: 00007fe5073e6038 R14: 00007fe5073e5fa0 R15: 00007ffdfe1d0c68 [ 1213.634683][T21200] [ 1213.823450][ C0] vkms_vblank_simulate: vblank timer overrun [ 1213.838015][ T31] [ 1213.841351][ T31] [ 1213.841351][ T31] Showing all locks held in the system: [ 1213.849176][ T31] 1 lock held by khungtaskd/31: [ 1213.854179][ T31] #0: ffffffff8e3c45e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1213.868482][ T31] 3 locks held by syz-executor/5816: [ 1213.874405][ T31] 2 locks held by syz-executor/5826: [ 1213.884256][ T31] #0: ffff88802a3c80e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1213.897140][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1213.908748][ T31] 2 locks held by syz.3.2680/18650: [ 1213.916159][ T31] #0: ffffffff9018f090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1213.925692][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1213.936042][ T31] 2 locks held by syz.1.2711/18831: [ 1213.941345][ T31] #0: ffff88806cc3a0e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1213.951805][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1213.961593][ T31] 2 locks held by syz-executor/18861: [ 1213.967040][ T31] #0: ffff8880311ce0e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1213.977521][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1213.989569][ T31] 2 locks held by syz-executor/19475: [ 1213.995087][ T31] #0: ffff888097dac0e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1214.007159][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1214.018282][ T31] 2 locks held by syz.2.2880/19650: [ 1214.024035][ T31] #0: ffffffff9018f090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1214.032441][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1214.042692][ T31] 2 locks held by syz-executor/19777: [ 1214.048259][ T31] #0: ffff888078dca0e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1214.058919][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1214.068977][ T31] 2 locks held by syz-executor/19911: [ 1214.074495][ T31] #0: ffff88807de420e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1214.085123][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1214.148271][ T31] 2 locks held by syz-executor/20185: [ 1214.179681][ T31] #0: ffff8880591fe0e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1214.320938][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1214.330961][ T31] 2 locks held by syz.8.3000/20312: [ 1214.336420][ T31] #0: ffffffff9018f090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1214.344994][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc4/0x7a0 [ 1214.355322][ T31] 2 locks held by syz-executor/20346: [ 1214.361614][ T31] #0: ffff88807ac700e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1214.372230][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1214.382186][ T31] 2 locks held by syz-executor/20529: [ 1214.387711][ T31] #0: ffff8880a2faa0e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1214.399079][ T31] #1: ffffffff8e7ed348 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1214.409742][ T31] 2 locks held by syz-executor/20785: [ 1214.421310][ T31] 2 locks held by syz-executor/20849: [ 1214.429143][ T31] 2 locks held by syz-executor/20886: [ 1214.436907][ T31] 2 locks held by syz-executor/20891: [ 1214.534027][ T31] 3 locks held by syz.1.3170/21146: [ 1214.539308][ T31] 1 lock held by syz.2.3179/21178: [ 1214.552413][ T31] #0: ffffffff8e3cfb78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1214.570227][ T31] 1 lock held by syz.4.3182/21201: [ 1214.575428][ T31] 2 locks held by syz.4.3182/21202: [ 1214.582206][ T31] [ 1214.584611][ T31] ============================================= [ 1214.584611][ T31] [ 1214.600265][ T31] NMI backtrace for cpu 0 [ 1214.600287][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1214.600323][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1214.600343][ T31] Call Trace: [ 1214.600355][ T31] [ 1214.600367][ T31] dump_stack_lvl+0x116/0x1f0 [ 1214.600412][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1214.600461][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1214.600499][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1214.600546][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1214.600599][ T31] watchdog+0xf3f/0x1170 [ 1214.600637][ T31] ? rcu_is_watching+0x12/0xc0 [ 1214.600671][ T31] ? __pfx_watchdog+0x10/0x10 [ 1214.600706][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1214.600747][ T31] ? __kthread_parkme+0x19e/0x250 [ 1214.600789][ T31] ? __pfx_watchdog+0x10/0x10 [ 1214.600820][ T31] kthread+0x3c5/0x780 [ 1214.600866][ T31] ? __pfx_kthread+0x10/0x10 [ 1214.600915][ T31] ? rcu_is_watching+0x12/0xc0 [ 1214.600949][ T31] ? __pfx_kthread+0x10/0x10 [ 1214.600995][ T31] ret_from_fork+0x675/0x7d0 [ 1214.601039][ T31] ? __pfx_kthread+0x10/0x10 [ 1214.601085][ T31] ret_from_fork_asm+0x1a/0x30 [ 1214.601147][ T31] [ 1214.601159][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1214.735939][ C1] NMI backtrace for cpu 1 [ 1214.735962][ C1] CPU: 1 UID: 0 PID: 1155 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 1214.735995][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1214.736013][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 1214.736054][ C1] RIP: 0010:unwind_next_frame+0xd2f/0x20a0 [ 1214.736084][ C1] Code: ff 48 8b 7c 24 18 e8 d0 e8 ff ff 48 89 ee 48 8b 4c 24 20 48 ba 00 00 00 00 00 fc ff df 48 c1 ee 03 4c 8b 44 24 28 80 3c 16 00 <0f> 85 d3 0e 00 00 48 8b 14 24 49 89 45 48 48 b8 00 00 00 00 00 fc [ 1214.736110][ C1] RSP: 0018:ffffc90003eef248 EFLAGS: 00000246 [ 1214.736130][ C1] RAX: ffffffff8223cfa4 RBX: 0000000000000001 RCX: ffffffff91245db4 [ 1214.736147][ C1] RDX: dffffc0000000000 RSI: 1ffff920007dde60 RDI: ffffc90003eef600 [ 1214.736165][ C1] RBP: ffffc90003eef300 R08: ffffffff91245db8 R09: 0000000000000000 [ 1214.736182][ C1] R10: 0000000000000000 R11: 00000000000123cf R12: ffffc90003eef308 [ 1214.736198][ C1] R13: ffffc90003eef2b8 R14: ffffc90003eef608 R15: ffffc90003eef2ec [ 1214.736216][ C1] FS: 0000000000000000(0000) GS:ffff888124b0d000(0000) knlGS:0000000000000000 [ 1214.736240][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1214.736277][ C1] CR2: 0000001b340ecff8 CR3: 000000007f2f4000 CR4: 00000000003526f0 [ 1214.736294][ C1] Call Trace: [ 1214.736303][ C1] [ 1214.736313][ C1] ? kasan_save_stack+0x33/0x60 [ 1214.736347][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1214.736381][ C1] arch_stack_walk+0x94/0x100 [ 1214.736410][ C1] ? kasan_save_stack+0x33/0x60 [ 1214.736444][ C1] stack_trace_save+0x8e/0xc0 [ 1214.736474][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1214.736506][ C1] ? __lock_acquire+0x622/0x1c90 [ 1214.736543][ C1] kasan_save_stack+0x33/0x60 [ 1214.736573][ C1] ? kasan_save_stack+0x33/0x60 [ 1214.736632][ C1] kasan_save_track+0x14/0x30 [ 1214.736662][ C1] __kasan_slab_alloc+0x89/0x90 [ 1214.736701][ C1] kmem_cache_alloc_noprof+0x250/0x6e0 [ 1214.736728][ C1] ? kmem_alloc_batch+0x49/0x170 [ 1214.736763][ C1] ? kmem_alloc_batch+0x49/0x170 [ 1214.736791][ C1] kmem_alloc_batch+0x49/0x170 [ 1214.736823][ C1] debug_objects_fill_pool+0x23f/0x520 [ 1214.736856][ C1] ? __pfx_debug_objects_fill_pool+0x10/0x10 [ 1214.736891][ C1] ? arch_stack_walk+0x94/0x100 [ 1214.736919][ C1] debug_object_assert_init+0x105/0x2f0 [ 1214.736955][ C1] ? __pfx_debug_object_assert_init+0x10/0x10 [ 1214.736989][ C1] ? stack_trace_save+0x8e/0xc0 [ 1214.737020][ C1] ? stack_depot_save_flags+0x29/0x9c0 [ 1214.737066][ C1] __mod_timer+0xad/0xd30 [ 1214.737102][ C1] ? kfree_skbmem+0x1a4/0x1f0 [ 1214.737135][ C1] ? sk_skb_reason_drop+0x136/0x1a0 [ 1214.737162][ C1] ? ieee80211_iface_work+0x435/0x1360 [ 1214.737190][ C1] ? __pfx___mod_timer+0x10/0x10 [ 1214.737226][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1214.737267][ C1] ? round_jiffies+0x10a/0x150 [ 1214.737298][ C1] ? __pfx_round_jiffies+0x10/0x10 [ 1214.737334][ C1] ieee80211_ibss_work+0x477/0x1480 [ 1214.737378][ C1] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 1214.737420][ C1] ? __lock_acquire+0xb8a/0x1c90 [ 1214.737463][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 1214.737504][ C1] ? find_held_lock+0x2b/0x80 [ 1214.737532][ C1] ? mark_held_locks+0x49/0x80 [ 1214.737566][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1214.737596][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 1214.737628][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1214.737661][ C1] ieee80211_iface_work+0xe6d/0x1360 [ 1214.737688][ C1] ? rcu_is_watching+0x12/0xc0 [ 1214.737723][ C1] cfg80211_wiphy_work+0x2c7/0x580 [ 1214.737760][ C1] process_one_work+0x9cf/0x1b70 [ 1214.737807][ C1] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 1214.737842][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1214.737889][ C1] ? assign_work+0x1a0/0x250 [ 1214.737928][ C1] worker_thread+0x6c8/0xf10 [ 1214.737960][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1214.738000][ C1] kthread+0x3c5/0x780 [ 1214.738039][ C1] ? __pfx_kthread+0x10/0x10 [ 1214.738078][ C1] ? rcu_is_watching+0x12/0xc0 [ 1214.738105][ C1] ? __pfx_kthread+0x10/0x10 [ 1214.738143][ C1] ret_from_fork+0x675/0x7d0 [ 1214.738181][ C1] ? __pfx_kthread+0x10/0x10 [ 1214.738218][ C1] ret_from_fork_asm+0x1a/0x30 [ 1214.738265][ C1] [ 1215.897319][T13739] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.083172][T13739] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.191677][T13739] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.294466][T13739] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.661194][T13739] bridge_slave_1: left allmulticast mode [ 1216.666913][T13739] bridge_slave_1: left promiscuous mode [ 1216.691202][T13739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.723137][T13739] bridge_slave_0: left allmulticast mode [ 1216.728857][T13739] bridge_slave_0: left promiscuous mode [ 1216.740004][T13739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.474340][T13739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1217.488426][T13739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1217.507809][T13739] bond0 (unregistering): Released all slaves [ 1217.938122][T13739] hsr_slave_0: left promiscuous mode [ 1217.950912][T13739] hsr_slave_1: left promiscuous mode [ 1217.960724][T13739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1217.968882][T13739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1217.977970][T13739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1217.985701][T13739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1218.023317][T13739] veth1_macvtap: left promiscuous mode [ 1218.028930][T13739] veth0_macvtap: left promiscuous mode [ 1218.035302][T13739] veth1_vlan: left promiscuous mode [ 1218.040689][T13739] veth0_vlan: left promiscuous mode [ 1218.209427][T13739] pim6reg (unregistering): left allmulticast mode [ 1218.687042][T13739] team0 (unregistering): Port device team_slave_1 removed [ 1219.687061][T13739] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.771972][T13739] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.865173][T13739] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.977148][T13739] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.237595][T13739] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.320992][T13739] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.406193][T13739] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.511839][T13739] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.735420][T13739] netdevsim netdevsim1335 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1220.888656][T13739] bridge_slave_1: left allmulticast mode [ 1220.894604][T13739] bridge_slave_1: left promiscuous mode [ 1220.900438][T13739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.912271][T13739] bridge_slave_0: left allmulticast mode [ 1220.918452][T13739] bridge_slave_0: left promiscuous mode [ 1220.927850][T13739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1220.948186][T13739] bridge_slave_1: left allmulticast mode [ 1220.954147][T13739] bridge_slave_1: left promiscuous mode [ 1220.959972][T13739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1220.977011][T13739] bridge_slave_0: left allmulticast mode [ 1220.984647][T13739] bridge_slave_0: left promiscuous mode [ 1220.990473][T13739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.578162][T13739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1221.598298][T13739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1221.608712][T13739] bond0 (unregistering): Released all slaves [ 1221.971115][T13739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1221.983700][T13739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1221.994840][T13739] bond0 (unregistering): Released all slaves [ 1222.341242][T21185] mkiss: ax0: crc mode is auto. [ 1222.643861][T13739] hsr_slave_0: left promiscuous mode [ 1222.650277][T13739] hsr_slave_1: left promiscuous mode [ 1222.657132][T13739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1222.667077][T13739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1222.676581][T13739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1222.684522][T13739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1222.698486][T13739] hsr_slave_0: left promiscuous mode [ 1222.708548][T13739] hsr_slave_1: left promiscuous mode [ 1222.719712][T13739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1222.733244][T13739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1222.743019][T13739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1222.753211][T13739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1222.824668][T13739] veth1_macvtap: left promiscuous mode [ 1222.830283][T13739] veth0_macvtap: left promiscuous mode [ 1222.839282][T13739] veth1_vlan: left promiscuous mode [ 1222.844960][T13739] veth0_vlan: left promiscuous mode [ 1222.854541][T13739] veth1_macvtap: left promiscuous mode [ 1222.860081][T13739] veth0_macvtap: left promiscuous mode [ 1222.866011][T13739] veth1_vlan: left promiscuous mode [ 1222.871806][T13739] veth0_vlan: left promiscuous mode