last executing test programs: 2m35.121093944s ago: executing program 3 (id=1791): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/12u\x00', 0x68100, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r0, 0x8000) madvise$auto(0x0, 0x400053, 0x9) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) r1 = socketcall$auto(0x8000ffa, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xa, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1643, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x4020ae76, r1) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="13fd2b"], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x82, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x6, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) r4 = socket(0x29, 0x2, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvmmsg$auto(r5, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r4, 0x89f0, 0x24) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x24, r6, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmsg$auto_ETHTOOL_MSG_PSE_SET(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x8c, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PSE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xeaf3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xc}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7f}]}, @ETHTOOL_A_C33_PSE_ADMIN_CONTROL={0x8, 0x6, 0x2}, @ETHTOOL_A_C33_PSE_AVAIL_PW_LIMIT={0x8, 0xc, 0x1}, @ETHTOOL_A_C33_PSE_ADMIN_CONTROL={0x8, 0x6, 0x7}, @ETHTOOL_A_PSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_PODL_PSE_ADMIN_CONTROL={0x8, 0x3, 0x6}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000004) 2m34.580914513s ago: executing program 3 (id=1793): r0 = socket(0xa, 0x801, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0xe, 0xdf, 0xeb1, r0, 0x3) r2 = fanotify_init$auto(0x5, 0x2000000000002) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clock_gettime$auto(0x1, 0x0) r3 = socket(0xa, 0x5, 0x84) getsockopt$auto(r3, 0x84, 0x1f, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) r4 = socket(0x2, 0x2, 0x1) r5 = socket(0x21, 0x1, 0x10001) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r6, 0xfd}, 0x6a) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x1, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x78, 0x8, 0x0, [0xe, 0x4, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0xfffbffffffffffff, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x4, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x200000, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x8000000000000000, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/43:160/strict_limit\x00', 0x103a42, 0x0) sendfile$auto(r7, r7, 0x0, 0x9) r8 = syz_genetlink_get_family_id$auto_nbd(0x0, r1) sendmsg$auto_NBD_CMD_RECONFIGURE(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=' ', @ANYRES16=r8, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x90) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) listen$auto(0xffffffffffffffff, 0x0) ioctl$auto_BLKALIGNOFF(r2, 0x127a, 0x0) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r9, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0x7155}, 0x2, 0x0, 0x8, 0xa505}, 0x4}, 0x6, 0x4008) 2m33.57385077s ago: executing program 3 (id=1795): unshare$auto(0xe) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram13\x00', 0x1e3a02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b44", 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x2000, 0x0) sendfile$auto(0x3, r1, 0x0, 0x100400000000006) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) mmap$auto(0x4, 0x4000000000000006, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) socket(0x11, 0x3, 0x9) r2 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$auto(r2, 0x6f41, 0x38) openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000880), 0x2400, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000500)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a63c8fa7f7d5152d4831f60eade8e3d8a508f6178de4e7e975de72c549dbc7876cb528ba0841788237bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9611fe2b07c6e7f4732fe36b8018aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098e0200000083b2a643399f10dfdb0f4018b401be4db675d0ac39ca602a3c022f4463a8820f1c6f865d") lseek$auto(0x3, 0x7fffffffffffffff, 0x0) 2m32.296265953s ago: executing program 3 (id=1800): mmap$auto(0x0, 0x80000000203000e, 0x0, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) (rerun: 64) close_range$auto(0x2, 0x8, 0x0) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) open(0x0, 0x22240, 0x175) r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), r0) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, "b6897988c5e7486a9c61c7f55f2bde299a5ab1882e6161a9452f6ef0a1116e6b372de3824ebc6887ebeac8f5ab3c"}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x800) socket(0x1e, 0x3, 0x0) (async, rerun: 32) getsockopt$auto(r0, 0x11, 0x1, 0x0, 0x0) (rerun: 32) 2m31.719343275s ago: executing program 3 (id=1803): r0 = socket(0xa, 0x801, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0xe, 0xdf, 0xeb1, r0, 0x3) r2 = fanotify_init$auto(0x5, 0x2000000000002) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clock_gettime$auto(0x1, 0x0) r3 = socket(0xa, 0x5, 0x84) getsockopt$auto(r3, 0x84, 0x1f, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) r4 = socket(0x2, 0x2, 0x1) r5 = socket(0x21, 0x1, 0x10001) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r6, 0xfd}, 0x6a) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x1, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x78, 0x8, 0x0, [0xe, 0x4, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0xfffbffffffffffff, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x4, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x200000, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x8000000000000000, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/43:160/strict_limit\x00', 0x103a42, 0x0) sendfile$auto(r7, r7, 0x0, 0x9) r8 = syz_genetlink_get_family_id$auto_nbd(0x0, r1) sendmsg$auto_NBD_CMD_RECONFIGURE(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=' ', @ANYRES16=r8, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x90) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) listen$auto(0xffffffffffffffff, 0x0) ioctl$auto_BLKALIGNOFF(r2, 0x127a, 0x0) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r9, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0x7155}, 0x2, 0x0, 0x8, 0xa505}, 0x4}, 0x6, 0x4008) 2m30.65300591s ago: executing program 3 (id=1809): mmap$auto(0x5, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x6fff) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x5, 0x0, 0x10000000000000, 0x2}, 0x885}, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, r0) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r5, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)={0x14, r6, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48080) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-touch11\x00', 0x4400, 0x0) sendmsg$auto_NFSD_CMD_LISTENER_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x50) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r7, 0x1, 0x94d1) ptrace$auto_PTRACE_GET_SYSCALL_USER_DISPATCH_CONFIG(0x4211, r7, 0x100, 0x100000001) lstat$auto(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000240), r0) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r8, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@typed={0x9, 0xe5, 0x0, 0x0, @str='nfsd\x00'}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x90}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x4f3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0xfc}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xdc}]}, 0x64}}, 0x8005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team_slave_0\x00'}) r9 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/slabinfo\x00', 0x0, 0x0) read$auto_proc_pid_maps_operations_internal(r9, &(0x7f00000020c0)=""/4093, 0xffd) socket(0x29, 0x5, 0x0) write$auto(0x3, 0x0, 0x100082) write$auto(0x3, 0x0, 0x1e) 2m16.989495414s ago: executing program 1 (id=1834): r0 = socket(0xa, 0x801, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0xe, 0xdf, 0xeb1, r0, 0x3) r2 = fanotify_init$auto(0x5, 0x2000000000002) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clock_gettime$auto(0x1, 0x0) r3 = socket(0xa, 0x5, 0x84) getsockopt$auto(r3, 0x84, 0x1f, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1d, 0x2, 0x6) r4 = socket(0x2, 0x2, 0x1) r5 = socket(0x21, 0x1, 0x10001) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r6, 0xfd}, 0x6a) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x1, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x78, 0x8, 0x0, [0xe, 0x4, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0xfffbffffffffffff, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x4, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x200000, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x8000000000000000, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/43:160/strict_limit\x00', 0x103a42, 0x0) sendfile$auto(r7, r7, 0x0, 0x9) r8 = syz_genetlink_get_family_id$auto_nbd(0x0, r1) sendmsg$auto_NBD_CMD_RECONFIGURE(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=' ', @ANYRES16=r8, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x90) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) listen$auto(0xffffffffffffffff, 0x0) ioctl$auto_BLKALIGNOFF(r2, 0x127a, 0x0) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r9, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0x7155}, 0x2, 0x0, 0x8, 0xa505}, 0x4}, 0x6, 0x4008) 2m16.622766902s ago: executing program 1 (id=1835): r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r1, r1, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r1, 0x1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x80800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/lockd/parameters/nlm_timeout\x00', 0x68041, 0x0) ioctl$auto(r2, 0x5101, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000041c0)={0x1c, r0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000200)={0x20071026}, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x163041, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r5 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r5, 0xc0109207, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/017/001\x00', 0x20882, 0x0) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/ports/0/pp_hold\x00', 0x80800, 0x0) mmap$auto(0x800, 0xe, 0x400, 0x11, r5, 0x8) 2m16.215800236s ago: executing program 1 (id=1837): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x0) r2 = socketcall$auto(0x5, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r2) r5 = ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2080, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000280)={r0, &(0x7f0000000040)="99513161e1155299d77250e745a8053d85e982aad6d48a819c0d68d0b08b16b68d27853376374edcf9eb546849f44616cb27bcbdc6af4cb3a3d974b28290a7071bbd5bdc0a028b5f2b9bc9826b7e2314c420c6a3f35e83274d3f3958e362501164a393c512029863786044fc250e94e3f7032723f8257c3e323d287b2848030205f65606db057fec6306c21b42890d13c7e3752b4ee980fb1c28c780f3616e9266f7f41ee883839787cf2d4674ce121a29d202e3e2aab206b8b164bee179518b67dbd20f104b6314ee4a0469c9876cacec7a3d7f6611030c0cc06bcb7eaf75dfbcc3c89abba3b839a6e9febd8d454d61fde41522c2", 0x9, &(0x7f0000000140)="b04198de75b8b9f96841eae38efb511c56ba62c24f0450a89a608dfb47bdd1fde4dfc65bb1cc4d80bdba71f29b67d6ab49c4bd8a953a4108a60be9bac7541d25a0dfd8109f4546e3404893956715724e6570a2fc17e144b2350b33b626efea72cc24", 0x2, &(0x7f0000000200)="a30e97c144411f3d26", &(0x7f0000000240)=0x2}) write$auto_proc_projid_map_operations_base(r7, &(0x7f00000002c0)="3d4314efdb0d8c57b2da84ce0fc6d8afce582596d99b37822ea3", 0x1a) mmap$auto(0x0, 0x8000000000000000, 0x3edc2ecf, 0x9b72, 0x2, 0x8000) socket(0xf, 0x800, 0x4000007) r8 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE_OLD(r8, 0x5422, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8001) socket(0xa, 0x3, 0x3b) msync$auto(0x200000, 0x2000000005, 0x6) ioctl$auto_KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000300)={0xe, 0x0, 0xffffffffffffffff, 0x8}) keyctl$auto(0x1f, 0x1, 0x6, r9, 0x3ff) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) socket(0x2, 0x3, 0x6) ioctl$auto_SNDCTL_TMR_CONTINUE(r2, 0x5404, &(0x7f0000000440)="0520693a6456fa8da4d056665317eefd303bda185d4fa93e0b193b2091523986af3f91320b7f20cb4c24e23f29208f4682c1566fc7ca485a575d6e36f95e215aa2d461826782e6ff5ef0dfbca2eb28e76f38fca954b6d1bca301cec828d08d73885be33f289d93733e683973a24ce2163dd5a674f6e720d510de8b91bef288083d90a1be6bce8f860fee00b1bbe1a3e536fc2d97966813a5934a5dcc8e983fd1b7752ac83c5c6d23e07898195e52aaf0eeb2d798508d73be7d528c200dda2f76d64bf9f050f5cb849f") 2m15.546793935s ago: executing program 32 (id=1809): mmap$auto(0x5, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x6fff) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x5, 0x0, 0x10000000000000, 0x2}, 0x885}, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, r0) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40800) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r5, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)={0x14, r6, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48080) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-touch11\x00', 0x4400, 0x0) sendmsg$auto_NFSD_CMD_LISTENER_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r6, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x50) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r7, 0x1, 0x94d1) ptrace$auto_PTRACE_GET_SYSCALL_USER_DISPATCH_CONFIG(0x4211, r7, 0x100, 0x100000001) lstat$auto(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000240), r0) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x64, r8, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@typed={0x9, 0xe5, 0x0, 0x0, @str='nfsd\x00'}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x90}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x4f3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0xfc}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xdc}]}, 0x64}}, 0x8005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team_slave_0\x00'}) r9 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/slabinfo\x00', 0x0, 0x0) read$auto_proc_pid_maps_operations_internal(r9, &(0x7f00000020c0)=""/4093, 0xffd) socket(0x29, 0x5, 0x0) write$auto(0x3, 0x0, 0x100082) write$auto(0x3, 0x0, 0x1e) 2m15.300952232s ago: executing program 1 (id=1840): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty48\x00', 0x40000, 0x0) ioctl$auto_TIOCSWINSZ2(r0, 0x5414, 0x0) r1 = socket(0x1e, 0x1, 0x0) getsockopt$auto(r1, 0x6, 0x7, 0x0, 0x0) 2m14.902837493s ago: executing program 1 (id=1841): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/orangefs/capcache/hard_limit\x00', 0x82042, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000000000)="2dc2", 0x2) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptyt8\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r2 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysinfo$auto(0x0) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r1, 0x4, &(0x7f00000000c0)='@&\x00', &(0x7f0000000100)='Q`', 0x4) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) listen$auto(0x3, 0x81) pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\t/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8fA\x16\x01\xc5.\x7fG\x86L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xa8\xb7\xce\x87\xdb\xb0\xaa\x8al8qF\re\xa7\xda\x1f\x9ad\b!\xddBD\xd9', 0x3f, 0x200001000) mmap$auto(0x0, 0x2020009, 0x3, 0x18, 0xfffffffffffffffa, 0x8000) r3 = socket(0xa, 0x3, 0x8) r4 = getsockopt$auto(r3, 0x3a, 0x1, 0x0, 0x0) execveat$auto(r4, &(0x7f0000000080)='./file0\x00', &(0x7f0000000640)=&(0x7f0000000480)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\t/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8fA\x16\x01\xc5.\x7fG\x86L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xa8\xb7\xce\x87\xdb\xb0\xaa\x8al8qF\re\xa7\xda\x1f\x9ad\b!\xddBD\xd9', &(0x7f00000006c0)=&(0x7f0000000680)='/dev/ptyt8\x00', 0x8) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) ioctl$auto_TUNGETIFF2(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)=0x5) socket(0x2, 0x1, 0x106) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000100), 0x80001, 0x0) socket(0x11, 0x3, 0x9) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x2000000000000001, 0x0) 2m13.582988249s ago: executing program 1 (id=1843): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) (async) madvise$auto(0x1000, 0x400050, 0x9) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/mcfilter\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x14, 0x1, "5e1f970f497f9f23d63e72850177cde9"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) read$auto_proc_pagemap_operations_internal(r0, &(0x7f0000001540)=""/209, 0xd1) (async) mknod$auto(&(0x7f0000000240)=':,\x00', 0xfff, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x2020049, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xfffffffffbff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) timerfd_gettime$auto(0xffffffffffffffff, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vbi28\x00', 0x0, 0x0) (async) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r3, 0x0, 0x400018) (async) ioctl$auto(0x3, 0x4020565a, 0x38) (async) ioctl$auto(0x3, 0x4020565b, 0x38) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/dummy0/proto_down\x00', 0x60282, 0x0) (async) setresuid$auto(0x8, 0x8, 0x0) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) read$auto_proc_pid_smaps_operations_internal(r3, &(0x7f0000000280)=""/106, 0x6a) (async) socket(0x1e, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 1m58.457772184s ago: executing program 33 (id=1843): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) (async) madvise$auto(0x1000, 0x400050, 0x9) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/mcfilter\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x20, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x14, 0x1, "5e1f970f497f9f23d63e72850177cde9"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '-\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) read$auto_proc_pagemap_operations_internal(r0, &(0x7f0000001540)=""/209, 0xd1) (async) mknod$auto(&(0x7f0000000240)=':,\x00', 0xfff, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x2020049, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xfffffffffbff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) timerfd_gettime$auto(0xffffffffffffffff, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vbi28\x00', 0x0, 0x0) (async) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r3, 0x0, 0x400018) (async) ioctl$auto(0x3, 0x4020565a, 0x38) (async) ioctl$auto(0x3, 0x4020565b, 0x38) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/dummy0/proto_down\x00', 0x60282, 0x0) (async) setresuid$auto(0x8, 0x8, 0x0) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) read$auto_proc_pid_smaps_operations_internal(r3, &(0x7f0000000280)=""/106, 0x6a) (async) socket(0x1e, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 1m54.876607747s ago: executing program 0 (id=1876): socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x2282, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) readv$auto(r1, 0x0, 0xaa) r2 = socket(0x10, 0x2, 0x4) write$auto(r2, &(0x7f0000000000)='-\x00', 0x2fb) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), r2) flistxattr$auto(r1, 0x0, 0x6) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mtd0ro\x00', 0xa082, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) ioctl$auto_BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000140)={@raw, 0x2, 0x0, 0x929, 0xe5c1, 0x7cd, "abfd2e69df26f540a1d748ceff20c3ed69a359d46ed201e13aea69af"}) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x9, 0x0, 0x7, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) socket(0x2, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x89\xe8^\x98#\x86\x92\x86w\xa1\x05\x9b\xad}yX\xc5\xc0\x1c\xd1\xd9\x9e\x91\b\xfc=\x18\xf9E\b\xa3Rgu\xf5L\x1d\xf8\ny', 0x401) ioctl$auto_VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) io_uring_register$auto_IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0xbad3) unshare$auto(0x8100000) 1m54.339187372s ago: executing program 0 (id=1877): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), r0) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xb78}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x140000e4) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x8000) sendmsg$auto_TIPC_NL_LINK_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, r1, 0xc8b61cca5f1dec27, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) 1m54.191052268s ago: executing program 0 (id=1878): timer_settime$auto(0xffffffff, 0x9, &(0x7f0000000140)={{0x7, 0x4}, {0x10}}, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x6e642, 0x0) write$auto(r0, &(0x7f0000000400)='odev/audio1\x00', 0x100000a3d9) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/sched_rt_period_us\x00', 0x101202, 0x0) sendfile$auto(r1, r1, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) pivot_root$auto(&(0x7f0000000080)='..M\x11ho\xbd\xc4\xcbS\xd8\xef\xeb\x12H\xaa\x8c\x00\xce\xccCO\xfe\x05\x9b+\x16\x03\xc1a@\x178\xe5\xd1<\xe6\x90j\xda\x93\x04\x15\x80i\x1e\xdc\xd5\xc0/\xaf\xd2Q\x04\xfc\x18\bP\xa1\xa0.\x9c\xe4f%\x8a\x81q~\x06X\xaa\xd6;\xbe\xec\x95\x15`1-Sw\xba\xd8\tb\xd9\x9d\xf61B\x90\x1b\xcb\xda\xbf\xce\xaf\t\x041)V\r\xcc\xf5\xeb\xda', &(0x7f0000000100)='.\x00z\x86E\xb8\xf1\xcbx\xf6cu<\x0e\xd8\xa5\xcd~\xaf\x80\xd3\xf4\xe5\x02\xf9q p\xe2\x8b\xc0\xedf\xba\x16*\x8ar\xa0\'$A\xe5\xc5\x89\xcb\xd5\xac\x98,\xd4Pycv\xdd\xa1\x84\xfb\xe9\r\x82\x15P*IM\xf7.\xf3\xca\xffQ\xbc:\xef\xd5\x1a\x9e\xbck\x1d\x114^\x1b\x02\xa1\xb0(\xa2\xdb\xbc\x1a\t\x94\x14\xbb\xc8\xfa\x18I\xff\x7f\xab\xf0\x8f\xd3Gr\xfb5\xf1,\x11\x052u&\xde\x9aF\n\xf0\x06\xfc\x1b\x17\x82%\x14\xb3\x19\x13\f\xbe_\xfdi\x17\xfcv\x82*\xbf<\xfa5\xfd\x8b\x1d\x99\a`\xde\xf4\x8a,\tP) \xf4\xdc\r\x17x\xc6\x18Y\xeaaUY\xeb\xd2\x81\xbare\x00\x8e\xfdA\x93\xb9\xac\xf1\x0eq\x85\xd9\x90\x8a%K\x95\x8fm\v\x98y\x9bc-\xa7;\x117\x19)\x04\xb4\nJ\x0e\x1b\x97e\xee\xdb\xc3\xca\xfe\xa7y\x12\xff\xce') madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x309801, 0x0) getpid() statmount$auto(0x0, 0x0, 0x6, 0x1000000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/net/rose12/operstate\x00', 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000002140)=""/64, 0x40) faccessat2$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2, 0x7ff) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/arch_status\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r3, @ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x2000c8c8}, 0x0) timer_gettime$auto(0x1, &(0x7f0000000000)={{0xfffffffffffeffff, 0xffff}, {0x4, 0x1}}) 1m50.635697807s ago: executing program 0 (id=1882): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x694e, 0x4000000000df, 0xeb1, r0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) newfstatat$auto(r2, 0x0, 0x0, 0xfffff29f) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r1, 0xfffffff9, 0x1, 0xffffffffffffffff, @relative_id=0x9, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x1}, 0x4) r4 = socket(0x2, 0x80002, 0x73) epoll_pwait2$auto(r4, 0xfffffffffffffffc, 0x10001, 0x0, 0x0, 0x8) madvise$auto(0x0, 0x200007, 0x8) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000002980), 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xe46) socket(0x10, 0x2, 0x0) 1m46.225680092s ago: executing program 0 (id=1889): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x694e, 0x4000000000df, 0xeb1, r0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) newfstatat$auto(r2, 0x0, 0x0, 0xfffff29f) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r1, 0xfffffff9, 0x1, 0xffffffffffffffff, @relative_id=0x9, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x1}, 0x4) r4 = socket(0x2, 0x80002, 0x73) epoll_pwait2$auto(r4, 0xfffffffffffffffc, 0x10001, 0x0, 0x0, 0x8) madvise$auto(0x0, 0x200007, 0x8) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000002980), 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xe46) socket(0x10, 0x2, 0x0) 1m43.110819064s ago: executing program 0 (id=1893): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x1000000000df, 0xeb1, r0, 0x7ffc) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) (async) mmap$auto(0x0, 0xaa, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') (async) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) (async) setpriority$auto(0x7, 0x8, 0x8) (async) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r2, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) (async) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm1p/sub4/info\x00', 0x420040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/184, 0xb8) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001) mmap$auto(0x15e1, 0x400008, 0xdf, 0x9b72, r1, 0x3) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) preadv2$auto(r4, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x29, 0x5, 0x0) write$auto(r5, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x15, 0x0, 0x1) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) 1m28.072694919s ago: executing program 34 (id=1893): r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x1000000000df, 0xeb1, r0, 0x7ffc) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) (async) mmap$auto(0x0, 0xaa, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') (async) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) (async) setpriority$auto(0x7, 0x8, 0x8) (async) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r2, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) (async) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm1p/sub4/info\x00', 0x420040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/184, 0xb8) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001) mmap$auto(0x15e1, 0x400008, 0xdf, 0x9b72, r1, 0x3) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) preadv2$auto(r4, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0x29, 0x5, 0x0) write$auto(r5, &(0x7f0000000080)='/de$-audio1\x00', 0x100000a3dc) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x15, 0x0, 0x1) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) 1m26.843889462s ago: executing program 2 (id=1930): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) syz_clone(0x8080000, &(0x7f0000000180)="185734777f221b137c465aa2d002c046ff84aeaf1fb276adf0a11f0808e9292dcb20a8954b5cdd187bd0800b2d9d5c95f08de3c56209f519340b46b476a17239415acefb64d943f0c17e2488682a671fbf8e4d178cd32f3373e6ea8ad06386f0759eb0c132358b623a114ac3fbb32ca8de0c622117a0794245232d84c964f65210235f5f315ddee93a8ffe5126f930a57c6bd3b31f6461d9e8a45b714717f48ac280f98c747e9ea55a95216cfa9e25c529247d1c245e7470c6f4980a018bb6f41d57ec4aa423bbf7cd3712d9cee90db983", 0xd1, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="1cab1395d17bba5ad59bc20fe14bb9f5a8403f4f6fbabe0187e8ad9f5956e83826e892b34394cb539e7c88bcf361d00128") ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) mmap$auto(0x6, 0x2000d, 0xdf, 0xeb1, r0, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) io_uring_register$auto_IORING_UNREGISTER_FILES(r1, 0x3, &(0x7f00000003c0)="dc4c36ceb8a715d39bfd0d7737498397119b20a262c381a0dd4cb5b63dd72f87958f0407b979f2a99439feda", 0xb) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x34000, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x10, &(0x7f0000000000)={0x0, 0xd6c6}, 0x2, 0x0, 0xe, 0x4}, 0x3}, 0x200, 0xb07e) openat$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) open(0x0, 0x22240, 0x155) r2 = socket(0x2, 0x80802, 0x0) r3 = memfd_create$auto(0x0, 0x4) clone$auto(0x5, 0xcb, &(0x7f00000000c0)=0x6, &(0x7f0000000140), 0x100000000) statx$auto(r3, 0x0, 0x1000, 0xbdfc, 0x0) setsockopt$auto(r2, 0x11, 0x67, 0x0, 0x8) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x6, 0x0, 0x9) madvise$auto(0x7, 0x3, 0x0) connect$auto(r2, &(0x7f0000000080)=@sco, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m26.091786431s ago: executing program 2 (id=1932): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0xac, r1, 0x1, 0x70bd2f, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x80, 0x3, 0x0, 0x1, [@nested={0x7b, 0x3, 0x0, 0x1, [@nested={0xc, 0xb7, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}, @generic="1826b53b0396a133939900b1952dcb714e159b6e3ec48999beaacbd3d2bcacbbd9c53b9dd422c8694b3fcb8f959001aedb590fbcb92ad8a78e028f3b513eca8ec78bd54e148b876dd9538cc479f86471ac6908a3c6ae8b0c744f9f61f00f5091e1bc5d575ab74f506f2c36"]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0xac}}, 0x48084) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xffffffffffffffff, 0x1000008000) r2 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) signalfd$auto(r2, 0x0, 0x8) read$auto(r0, &(0x7f0000000000)='team_slave_1\x00', 0x2) 1m25.009017911s ago: executing program 2 (id=1934): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpgid(r0) r2 = socket(0x10, 0x800, 0x80000040) prctl$auto_PR_SET_MM_START_DATA(0x40005, 0x3, r1, 0x8000a, 0xffffffffffffffff) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2000000000000007) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x890) io_uring_setup$auto(0x6, 0x0) socket(0x26, 0x7, 0x82) bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f0000000200)=@raw_tracepoint={0x6, 0xffffffffffffffff, 0x0, 0x81}, 0x9) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) unshare$auto(0x40000080) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) madvise$auto(0x0, 0x2003f2, 0x15) sched_rr_get_interval$auto(0x0, &(0x7f0000000080)={0x7ce9, 0xa49}) shmctl$auto_IPC_RMID(0xde17, 0x0, &(0x7f0000001480)={{0x3, 0x0, 0x0, 0xb, 0x4, 0x5, 0xb57b}, 0x1c0000, 0x6, 0x100000000, 0x6, @inferred, @inferred=r1, 0x3, 0x0, &(0x7f0000000440)="79b3c1359d68bfcf21cb2e0671409575d85a2d60550da327ab", &(0x7f0000000480)="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"}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000380)='3\xc7\xff\xff\xff\x87|P\x11\xd1\t\x00\x00\x00\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x81%\x00\x00\x00\x00\x00\x00\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\xfe\x00\x1dj\x1e\xebQT\xdd\x9b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9b\xc0\xdb\x14\xe0\x9cu\xe5\x1f\x01\x89\x83\xef\xf0\x97\xd3\'\x1a\f\xbb\xfc0q', 0x9) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x202, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x4000, 0x0) mmap$auto(0x0, 0x4, 0x80000001, 0x40eb4, 0x401, 0x3) socket(0x11, 0x80003, 0x300) close_range$auto(0x2, 0xa, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) io_uring_register$auto_IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f0000000300)="8c65b056b4ebf0eaca0149b77e1989c71ed3f6ceef5d0912d79f142868b3e475d160675cb311bf5151cae5f0bb57ced66ef3b8c17f7eb28165471fa3f796d4ccf11e7b2e5c481282788a8137832cc960dd73626b", 0xee9d) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x88042, 0x0) sendfile$auto(r6, r3, 0x0, 0x40000003) 1m22.375494215s ago: executing program 2 (id=1938): mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) pipe2$auto(&(0x7f00000000c0), 0x0) writev$auto(0xca, &(0x7f0000000080)={&(0x7f00000000c0), 0x2}, 0x2000000000000003) capget$auto(0x0, 0xfffffffffffffffe) listmount$auto(0x0, 0x0, 0x1, 0x1) ioctl$auto(0xffffffffffffffff, 0xc0104d07, 0x5) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fchmod$auto(r0, 0x3ff) write$auto(0xca, 0x0, 0x80) ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{0xd, 0x1ff, 0xb3c, 0x6}, "9f92066e4329fda1b1591835573beac556aeefcd6a8049ff83b3a81bd323fda969f33fdec15280cb531c35ba9ad6f033c2a09f65c12d12330c9b932b45d00dcccb58682e97bb067deddcda9e03f0a5cc", 0x1000}) openat$auto_ep0_operations_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_hwsim_fops_rx_rssi_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy6/hwsim/rx_rssi\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x123002, 0x0) r1 = socket(0xa, 0x5, 0x0) r2 = semctl$auto(0x2, 0x0, 0x32ea, 0x687) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0x11, 0x3, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x9, 0x0) setsockopt$auto(r4, 0x107, 0x14, 0x0, 0x4) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x8}) sendmmsg$auto(r3, &(0x7f0000000400)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={0x0, 0x49}, 0x1, 0x0, 0x5, 0x3}, 0x5}, 0x2, 0x100) capget$auto(&(0x7f0000000040)={0x6, r2}, &(0x7f0000000080)={0xfff, 0x4, 0x6}) getsockopt$auto(r1, 0x84, 0x21, 0x0, 0x0) 1m21.777080069s ago: executing program 2 (id=1941): unshare$auto(0x40000080) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xed\xf8\xe1\xbc\x1d\x91D\xe7R\x12\xc4\xcd\xc6\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY2@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(', 0x100000a3dd) (async, rerun: 64) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) io_uring_setup$auto(0xf0, &(0x7f0000000180)={0x6, 0x18, 0xd64, 0xc852, 0x6, 0x7, 0xffffffffffffffff, [0x1, 0x401, 0x1000], {0x7, 0x5, 0x1, 0x4, 0x95, 0xf4c, 0x7fff, 0xfffffffb, 0x65f29f6d}, {0x3, 0xadc, 0x10000, 0x0, 0x5, 0xffffffff, 0x1000, 0x54f, 0x5}}) (async) openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='p\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xb, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='*'], 0x1ac}}, 0x40000) (async, rerun: 32) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa509}, 0x800}, 0x7, 0x4008) 1m19.132880776s ago: executing program 2 (id=1946): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x111000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/234, 0xea) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5d, 0x0) r2 = socket(0xa, 0x1, 0x84) close_range$auto(r2, 0xfffffffffffff000, 0xfff) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) 1m8.721541225s ago: executing program 4 (id=1973): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0xc0100, 0x0) read$auto(r0, 0x0, 0x81) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) close_range$auto(0x0, 0x5, 0x0) r1 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/fib/nexthop_bucket_activity\x00', 0x1, 0x0) write$auto(r1, 0x0, 0x2fc) write$auto(0x6, 0x0, 0x100000001) 1m8.342350496s ago: executing program 6 (id=1975): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) r0 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0x40c05, 0x0) write$auto_tracing_mark_raw_fops_trace(r0, &(0x7f0000000100)="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", 0xfe1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x103103, 0x0) ioctl$auto(r2, 0x6f2d, r2) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(0x0, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x200002, &(0x7f0000000040)="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", 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r1, 0x0, 0x4040) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r3, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) socket(0x15, 0x5, 0x0) prctl$auto(0x0, 0x2, 0x4, 0x5, 0x7) 1m7.551551427s ago: executing program 4 (id=1976): r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) (async) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300), 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000003500)={0x18f8, r2, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_QOS_MAP={0x58, 0xc7, "8b97b8533e3b3a9394195234b77b5df790d51573f305e9f736fa57d0f2f05082c3b55b278a44c90f52b64fa9eb771479636ee1e11bcaac48198cd3b065d52c2d932e19eaf3bb272c7f70fd2314a44a6be7441395"}, @NL80211_ATTR_MLO_TTLM_ULINK={0x1004, 0x149, "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"}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x1}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x4}, @NL80211_ATTR_PROBE_RESP={0x877, 0x91, "a0a28de49d123240aa1ff628bc20ef0d2509b5f2866ef89bc71897a59cd668fa0eeed15932dc7596daf15ee02f46c08dae1445741f6cae2f3310bf0e3eabd14514fd2cc0a0d92da1edc6953a85ad1d879da94efc2ce6296b2cb9c0572a00a9c3dcd6addb6400b350f7105e545aa54be350147048759972fa8418c1488346d09d7ffc798e8c7236d08262c0f3eed0caf2fdf82642d12fbfb0f8f3ee7d6f5fad0567737e161c7b02a2b65bc71569e5d4b4e208ce3a3db0026fe24046b7097df2463435cc4b9d21339f3527c52430e0d7c92e8493030ee62dc8c8a56e73bf2ed455fead1b361520d8fcb119bfaad4e75e779214a25f2c1b9d2649243379fa4a15fbef2ffe9d59ee50a58347fc0d5c6f113399afece31a63e96d9e50b851edee3a68054f6558b75e3d8b2bb08b39f286b16dec4023e9efc70f3c90d9819540b15d3e01d822d1f00a6aafeb57d6afbd6412da149a56ebbaf319748282f5acf1a8c9340ac3daf5edb30d1aa941ed9ac2217e1d18c3165af1c5a1e7d7185107b54694ef6e32923c3ec179e7717aa2a923d5fddedaa5a001cd39796b67545cfe06d046ba86b2fe90fd977617abf3d4f1df60966c04dc5d352605df966b77a24db4866a0a1dba22c94bc3d9e601c95ce6f87d4dc83b56eb285f456cc31a19c02f47df699b17808ba25faeea384de05cc0f7ffd8a085851f1c8ed7d52d0df49b2651c6f58791f2f3ff613a0926b999440b58c7c3d757ec281f639852e21b38d415ca7230e2098bdc1d91e21aa1a17853bb77a90add70ed17b3dca186d2facd1ce118eb35db05e5e7fd542a2752b1a1ffd72dd7c720d2207914b33ad44ff10d89abb19d4db27ca27ff4feec33c49379aab2cde1b5ef3ebfb56064e54fd43340e689702a1b8c0be91d4837675b7cd836f8804e75d34303b3a7b1a9edf1acf73189e054f41a11db066540dafadb6732fc8ee1ab2357e464d4af2b772703a2d06b4afff188237342b2b8c236d956d7a6caccfdf3006abb1e8d039762bdbd5dffc211df2cc91accc5b4e4779a9615ef25da0caf0011d166943dc35dd21f5ee22b3b5dcc1fa4044014049c3c9890798b89d409040c257bd88f5f2d31af63aaec67ff514e894b0df70d2337c64096378809e15d05f6a13c5e669d8fea04beaae2460feb12e94cfe098a8b232dd3b49e38ecb978f1c97762c7efa8441319f1507076e41bfa2142d2b74fd1bdd30204e05897ee1ae51bc2d1e76169859957e75ad2144cca98a00849bb3ea3186cbfa2707a85be7ad80f229807cd2fd30d0f46a3ec5559cb3931acb4d51b258597bc139cdd04cee1464567ce2fac32f12033f46e5de928a9808a755861a73eca9cde8442ace3bd060c2070a63b37590da987d7c02eeff7d2814387efd9edb0ca4258dca52fd8a16b35b529a8f57265b5b1b014027d4481d9127f46cc571993cec0f4483609d6002c3d2cb611091d713ac2427826e5032b22be8b762f9893b12978f48849abb5c3e64acbd714494ef94c970bad5952a1ca11a5e55f3c53dff23fef99eef7f8c3a3cfe311c2ed848eaaa8b204a9e2ac2c87e0c9b8bffef4bae3a7a54e23180a0abbf073c1e51a2aa378f0216b55e6fc916c03e5584ca4da723d86177b7188fb4a67074241aae5baa85657f40e46746b48a1a092c345fd9eedb42d27373699548d5531f910f8cc86f5953a39d291638eea8e7a92e392194ad12c26ef0c67b902d694da7661406496215d9f2e822d5975edca4777373cfcb22454a24411e3549964e87721f617caf38d9462742f4a889d606182c029d03b83fbd8a590ac8c7b3579d3638436d72a302cc8be45e7f7ea077520001ec54f2954bcd533709c984fcdb0cf2915bef6324e2697498c36b1e6496dc7a31213e6a4d9fd3371e62e219d7f2cad7911b7b6c5d191a250110ef7d12333206fef88160301892ae641427e346b81368cecef33978e54e7145609f90f7f095b0979bfcfdd284edb3e31b7a3def0ddee72fa8695ab0b7802288ad62654cf0b367af18f40b37046cc832ba9ad7f6024c192690a260ded4632c8471988a70f39a850523be3b01b58b3693d3db3e9fb7c05749555b47a7bb356c67dd7673acd4fa12c7a7fabfba23939c95ed0f3a8de3468a25799d044cae1f861b18bb4cfaaf33022a9cdabece619132c1e87cc278d6b42a8c728f8ffe8b6edf8d8851ae9655d2253edf98e38d26ef7659cca2aa4cec57c2d208e6c8b60adc97fbb485dc73fc583516d9daecf1ffef0d9a268dce0beead9fc593cbcdc163eb3e422fb309ee10105c0f958830edf645f63455a4401a723605e9ba599202073c3ed28b969633797a3f417631fcc2b407d6009de52a4c543efa5d551d3182c229a734adf11f57fbbef945759c3e88bfeb7f1c179cd1e1772da198cb47cc5421bee7e88d48c59abe8048a4a28091ac7d0edd8166a3193b1cb291c1138560d539349d4d49324af7a6780eacde2f98fedb93a6e42ef5f62843557e46d256466a3f8902ed8a5455ef17fd4fb669c976e317f0f1f99e824085dff242932a29932e17c544cffafeb5b111be5d48b5a4142d014dcdd05403e1dc0f93799b52d5d245a2f0e25e7ca23a092990cf3655d8b1eb0b54f0e909f9cf62b283da4478468a25db4616409ecf17941206d9a2529773fd7eee34390ae776518b4648af6d083b33ba722a54b3d454c77c8247e23ebcfedddf5a6338ac109361307c1b9b30d956df2c2890a97bac49c128ce702b9bcf5ac165f9381a16c7c90222c34004b0e1f95792e4ec900b94bf05238e1caa1a3b77e4e6d012fc10608f7dae274f17a7ec0976eafe544e1107ab19c0cd5a3dbe1167f5c2ed27a8b7871148d69da7a71628d0507efe2c54468432e6dbbb04974add9d5ac707cbbd88524a683b2123e058caa84b564475639228f3442054f77651552b58a94e5918ab398e7d8178f7b2940d4bdf627db5ab46c7a0c6c6225b2186129005e94f96df6db7301d4fa3b638d36a15500a8170199446f46e95b4ae672f3704fbc70e17fecd6137ee483c834c21d285ff6c5e7bc"}]}, 0x18f8}, 0x1, 0x0, 0x0, 0x4044804}, 0x24) madvise$auto(0x8, 0x9, 0x7ff) (async) madvise$auto(0x8, 0x9, 0x7ff) madvise$auto(0x0, 0x2003f2, 0x15) (async) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) (async) madvise$auto(0x0, 0x200007, 0x19) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) (async) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) (async) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) r6 = openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0xc000, 0x0) read$auto_objects_fops_(r6, &(0x7f00000003c0)=""/178, 0xb2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) fanotify_mark$auto(0xffffffffffffffff, 0x61, 0x9, 0xffffffffffffffff, 0x0) write$auto_proc_setgroups_operations_base(0xffffffffffffffff, &(0x7f0000000600)="8a37be8a7a4e4c58791dbe9a61af68360eb87cf7979a27b7db6ef3e373b12f0931e2ca65ab9a9866f72ff869231d185f5f9b1b95b84c549f5a8ba4b06974ccca6ed9287b75c3e021cfc08e5d69e54c32a2a62d3678704fd7704529bb90cae1e6b7c8cdacc1b098324aed29e54d91f63abd17846dc3fe235aed6da79481a97b8dfcbb9741ca4a1317cfb2c54f6312a874621efdcf886a0f54756e3ba4ef499badedec94bd5cf74e545e4aabe4228399", 0xaf) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="21be9be3", @ANYRES16=r3, @ANYBLOB="01032cb57000fbdbdf250a0000000500020000000000060001004002000006000100030000000800020048535200"], 0x34}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) socket(0x10, 0xa, 0xfffffffd) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000034c0), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6406b2c2a3974aae7c6a5c91000093e3d1d1e713d4d288f71ab8214dd3e895f3d9050ca60ce5f974ea52d2667679f857a9d9bf1c1b5b892b3d27add7773d30fbd4b7ea175a05549e4b0200cbf1b203baca39e741886ee0bbc5ae01c5608896fcd2b2a143d64080ce69b98ce6a14221", @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf2503000000080003000100000006000700008000000a000500bbbbbbbbbbbb00000a0005000180c200000e00000a000100bbbbbbbbbbbb00000a000100aaaaaaaaaabb000006000700100000000600060005000000"], 0x64}, 0x1, 0x0, 0x0, 0x40080}, 0x40) 1m7.403746615s ago: executing program 6 (id=1977): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) keyctl$auto_KEYCTL_UPDATE(0x2, 0xffffffffffffffff, 0x6, 0x1, 0x100000000) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16=0xffffffffffffffff, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYRESDEC=r0], 0x14}, 0x1, 0x0, 0x0, 0x20040811}, 0x8000) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4004) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) r3 = socket(0x10, 0x2, 0x0) connect$auto(r3, &(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbf8, 0x2100}, 0x5) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r4) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:0d/eject\x00', 0x62, 0x0) write$auto(r6, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) r7 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/attr/apparmor/current\x00', 0x147182, 0x0) write$auto_proc_pid_attr_operations_base(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001e40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="efff00"], 0x14}, 0x1, 0x0, 0x0, 0x220000c1}, 0x20000050) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r9 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0x800000000ffb, 0x8000000008012, r9, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r10 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/maps\x00', 0x0, 0x0) pread64$auto(r10, 0x0, 0xeda5, 0xc86) 1m6.001560701s ago: executing program 4 (id=1979): clock_adjtime$auto(0x10, &(0x7f0000000640)={0xb7, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x6, 0x3, 0x0, 0x7, 0x6, 0x7fff, {0x0, 0x5}, 0xfffffffffffffff8, 0x3, 0x5, 0x7fffffff, 0x0, 0x16, 0xfffffffffffffffe, 0xaac, 0x5, 0x2, 0x4}) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv$auto(r0, 0x0, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x3, 0xe9) unshare$auto(0x40000080) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') bpf$auto(0x0, &(0x7f0000000000)=@link_update={0x8, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) unshare$auto(0x40000080) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64$auto(r1, 0x0, 0x104, 0x3) mmap$auto(0x6, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x68000, 0x0) io_uring_setup$auto(0x7, 0x0) readv$auto(0x3, &(0x7f0000001100)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0xc090) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) syz_genetlink_get_family_id$auto_net_dm(0x0, 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) prctl$auto(0x4420, 0x1, 0x4, 0x400000005, 0x400000000007) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) 1m5.882082059s ago: executing program 6 (id=1980): r0 = socket(0xa, 0x1, 0x84) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x84) mmap$auto(0x0, 0x400008, 0x9, 0x1009b72, 0x2, 0x8000) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x5, 0x3, 0x15, 0xfffffffffffffffa, 0x8002) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x141702, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/002/001\x00', 0x40101, 0x0) mmap$auto(0x0, 0x810006, 0xffe, 0x8000000008011, 0x3, 0x0) msync$auto(0x0, 0xe0, 0x6) unshare$auto(0x40000080) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x1a6b75d638828712, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) mprotect$auto(0x0, 0x806121, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r2) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r3, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), r5) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_ILA_CMD_ADD(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010228bd700003dcdf250100000005000800080000000c0001001c00000000000004050007000900000008000400", @ANYRES32=r7, @ANYBLOB="0500080009000000080004009a5dbbfd120c3cf28d8e87e8cb7427e29f141e4f674b284e86c225d075eae4dfc07ff88cc02453b58d729403dfbe260e80a8e0841c008db4b3e331645e0da55565dcdf8748d136bd72b073919f25e8a8cfed1464eb1d4fa2134bb66e7dd80e2e09e5ce19000000000000009a9aa9e7ad6d0b8c68ae2444dad3784b27934a96c2e612ab5b5ab9bc2c33f1a5884681c48080f16ce4b359f4c6b3545cc85cdad660c600c3988cea87fc486d6322653fa54a08216411028614c2f3f11486a544f72f99ae044db6361b95be5f1675c65be412815df07c7791fafb1e041ce879d23c03fb7f11a5414b3a69a6d46beba23f793db5103a66551c62387bb94483b0142bb1730a66e78f9e0bf9d2bcc7903024b11019d3eab122101ea040f099c770cdd6f04e16dbfa66f9fef87e20616b8d49d2d18abc0700e400"/331, @ANYRES32=r7, @ANYBLOB="0c0001000600000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0x38) getsockopt$auto(r0, 0x0, 0x53, 0x0, 0x0) openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim3/ports/3/udp_ports_reset\x00', 0x60000, 0x0) 1m5.060306868s ago: executing program 4 (id=1981): r0 = socket(0x10, 0x3, 0xc) setsockopt$auto(r0, 0x104000000000010e, 0x1, 0x0, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x500, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) lsm_get_self_attr$auto(0x64, 0x0, &(0x7f0000002440)=0x1f9, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/uvcvideo/version\x00', 0x193403, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)="fb", 0x1) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x8002, 0x0) socket(0xa, 0x1, 0x100) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, 0x0, 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/004/001\x00', 0x2802, 0x0) syz_clone3(&(0x7f0000000400)={0x40000000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), {0x2000001}, &(0x7f0000000200)=""/139, 0x8b, &(0x7f0000000500)=""/66, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x8}, 0x58) pidfd_send_signal$auto_PIDFD_SIGNAL_PROCESS_GROUP(r3, 0x4, &(0x7f0000000480)={@_si_pad}, 0x4) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x100000000, 0x1) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0xa00, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) adjtimex$auto(0x0) acct$auto(&(0x7f0000000000)='/dev/sequencer2\x00') ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, 0x0) open(0x0, 0x80800, 0x124) 1m4.698037134s ago: executing program 6 (id=1982): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x694e, 0x4000000000df, 0xeb1, r0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) newfstatat$auto(r2, 0x0, 0x0, 0xfffff29f) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r1, 0xfffffff9, 0x1, 0xffffffffffffffff, @relative_id=0x9, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x1}, 0x4) r4 = socket(0x2, 0x80002, 0x73) epoll_pwait2$auto(r4, 0xfffffffffffffffc, 0x10001, 0x0, 0x0, 0x8) madvise$auto(0x0, 0x200007, 0x8) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000002980), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x38, r6, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, 'nl80211\x00'}]}, 0x38}}, 0x20000000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xe46) socket(0x10, 0x2, 0x0) 1m3.874413013s ago: executing program 35 (id=1946): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x111000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/234, 0xea) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5d, 0x0) r2 = socket(0xa, 0x1, 0x84) close_range$auto(r2, 0xfffffffffffff000, 0xfff) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) 1m3.140607814s ago: executing program 4 (id=1986): mmap$auto(0x0, 0x200104, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) mknod$auto(&(0x7f0000000300)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x1, 0x4) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x7) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00', &(0x7f0000000140)='nfsd\x00', 0x95f, 0x0) access$auto(&(0x7f0000000000)='}[,&*}\x00', 0x6) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, r1) ioctl$auto(r2, 0x4008ae6a, r0) mmap$auto(0x0, 0x0, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x28, 0x1, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) setitimer$auto_ITIMER_PROF(0x2, 0x0, 0x0) socket(0x10, 0x2, 0x0) setresgid$auto(0x81, 0x800000a0, 0x8) setgroups$auto(0xc00000000, 0xfffffffffffffffc) setresuid$auto(0x0, 0x8, 0x8000) shmget$auto(0x8, 0x10564, 0x568d1aef) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000003a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003a00)={&(0x7f0000001200)=ANY=[@ANYBLOB="fc270000", @ANYRES16=r3, @ANYBLOB="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"], 0x27fc}, 0x1, 0x0, 0x0, 0x20008001}, 0x20004000) 1m1.825953648s ago: executing program 4 (id=1988): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) (async) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x57e) ioctl$auto_TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000040)=0x5) (async) fcntl$auto_F_ADD_SEALS(r0, 0x410, 0x0) ioctl$auto_FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)="bd0ae817b69328636407c1767057f1d0") socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff) (async, rerun: 64) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x42802, 0x0) (rerun: 64) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) r2 = epoll_create$auto(0x7) epoll_wait$auto(r2, 0x0, 0xe007, 0x1) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 1m0.498223434s ago: executing program 6 (id=1991): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x4, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) fgetxattr$auto(0xffffffffffffffff, &(0x7f0000000000)='w}!!-\xd7\x00', 0x0, 0x40) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/234, 0xea) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5d, 0x0) r2 = socket(0xa, 0x1, 0x84) close_range$auto(r2, 0xfffffffffffff000, 0xfff) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) 57.821651102s ago: executing program 6 (id=1995): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, 0x0, 0x4000800) socket(0x2, 0x80802, 0x0) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x2, 0x0) fsopen$auto(0x0, 0x1) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x0, 0x0) ioctl$auto(r1, 0x1267, r1) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0ro\x00', 0x0, 0x0) ioctl$auto_BLKPG2(r2, 0x1269, 0x0) ioctl$auto_BLKSECDISCARD(r1, 0x127d, 0x0) 46.709009271s ago: executing program 36 (id=1988): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) (async) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x57e) ioctl$auto_TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000040)=0x5) (async) fcntl$auto_F_ADD_SEALS(r0, 0x410, 0x0) ioctl$auto_FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)="bd0ae817b69328636407c1767057f1d0") socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff) (async, rerun: 64) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x42802, 0x0) (rerun: 64) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) r2 = epoll_create$auto(0x7) epoll_wait$auto(r2, 0x0, 0xe007, 0x1) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 42.450404511s ago: executing program 37 (id=1995): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, 0x0, 0x4000800) socket(0x2, 0x80802, 0x0) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sysfs$auto(0x2, 0x2, 0x0) fsopen$auto(0x0, 0x1) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x0, 0x0) ioctl$auto(r1, 0x1267, r1) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0ro\x00', 0x0, 0x0) ioctl$auto_BLKPG2(r2, 0x1269, 0x0) ioctl$auto_BLKSECDISCARD(r1, 0x127d, 0x0) 13.209568142s ago: executing program 8 (id=2067): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) semget$auto(0x0, 0x2e4a, 0x8000) unshare$auto(0x40000080) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket(0x11, 0x5, 0x100) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(0x0, 0x7f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x40, 0x0) select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0x8, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0) unshare$auto(0x40000080) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0xffff) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') poll$auto(&(0x7f0000000340)={r2, 0x5, 0x3}, 0x4, 0x101) mlock$auto(0x7c88, 0x7fff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write$auto(r3, &(0x7f0000000200)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6\xd5\xc3H\x15I=\xf5\xfb\xa0\x9a][LIU\x9d0\xfb0\xbe5\xbe\xa8\x89\xc2\xc2o', 0x5) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) socket(0x2b, 0x1, 0x1) 12.226959323s ago: executing program 7 (id=2071): unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) madvise$auto(0x8, 0xaf01, 0x10) r0 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0xb, 0x8ff9, 0x10400, 0x6, 0x4, 0x3, 0xffffffffffffffff, [0x0, 0x0, 0x100000], {0x7, 0x200004, 0x7, 0x2a3, 0x100, 0x3, 0x40100101, 0x6, 0x5}, {0xf8, 0x4, 0x9, 0xd, 0x3, 0x40, 0x60, 0x8, 0x100000000}}) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x6, 0x2, 0x20000007, 0x0) pselect6$auto(0x5, &(0x7f0000000400)={[0x9, 0xfffffffffffffffe, 0xffffffffffffffff, 0x6, 0x8001, 0xa, 0xae, 0x200000c, 0xffffffffffffff81, 0xffffffff, 0x7fffffffffffffff, 0x200008000, 0x1000, 0xc, 0x9, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r1, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_ADDR_TRANSMITTER={0xa, 0x2, "a060292f83d9"}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) io_uring_enter$auto(0x3, 0x4, 0xffffffff, 0x6, 0x0, 0x2) setsockopt$auto_SO_SNDBUFFORCE(r0, 0x1000, 0x20, &(0x7f0000000040)='}\x00', 0x7) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket(0xa, 0x2, 0x0) r6 = socket(0xa, 0x801, 0x84) epoll_ctl$auto_EPOLL_CTL_ADD(r6, 0x1, r5, 0x0) sendfile$auto(r4, r4, 0x0, 0x2) ioctl$auto_SNAPSHOT_FREE(r3, 0x3314, 0x0) 10.954829653s ago: executing program 9 (id=2074): unshare$auto(0x40000080) mmap$auto(0x0, 0x402000d, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/mode\x00', 0x121102, 0x0) read$auto(r0, &(0x7f0000000100)='!U\x10', 0x7fff) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) socket(0xa, 0x1, 0x84) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82042, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x29, 0x3, 0x4004) r2 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysinfo$auto(0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_STATUS(r3, 0x0, 0x40) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x1, 0x0, 0xa, 0x0, 0x1f, 0x9}, 0x80000b}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) 9.84264598s ago: executing program 7 (id=2075): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) r1 = socket(0x15, 0x5, 0x0) prctl$auto(0x0, 0x2, 0x4, 0x5, 0x7) unshare$auto(0x40000080) r2 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000100)='/proc/kpageflags\x00', 0x2, 0x0) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000004c0), 0x2202, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_WRITE(r3, 0x40085503, &(0x7f0000000000)={0xf, 0x0, 0x404000}) r4 = setfsuid$auto(0xee00) fchown$auto(r2, r4, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002900), r5) sendmsg$auto_NL802154_CMD_SEND_BEACONS(r5, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000006440)={&(0x7f0000004e80)={0x20, r6, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x40}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) r7 = clone3$auto(&(0x7f0000000100)={0x6, 0x1, 0x8, 0xe5b, 0x0, 0xde8, 0x8, 0xf536, 0xe664, 0x9, 0x9}, 0x7) prctl$auto_SIGCONT(0xfffffffa, 0x12, r7, 0x3, 0x3) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r1, &(0x7f00000007c0)={&(0x7f0000000080), 0xc, &(0x7f0000000780)={&(0x7f0000000840)={0x8a8, r6, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}, @NL802154_ATTR_PEER={0x87c, 0x28, 0x0, 0x1, [@nested={0x255, 0xda, 0x0, 0x1, [@nested={0x4, 0x99}, @generic="aeabd5400c5961f9dfd0e5c3224daad1b37e782b960829d6c236604d275299c4db38c45af92d011226eb91b501ee6fa277ecd5594ce8f4350a05f3155a7f1bd1f86a9c64486677f9be034dede325a7bba373ee1b0473c39118c8d5f41b0a508679c2c9516ed0ba77dc4e3a6f705b2f09b07807c7b71813f50f8df49d413ac034b4ada42858411083773fdfd3d91e43af25c4a7914de85805664e25eeeed6ac82ef871748f65fbca8b4bfb4f887a95ec3906ee73e09f676e6b7e36f146a511ea768344bf1fa4673f57acab7bfb1053757bc8ee1ba646e3f8d", @generic="7a94d6ef4f06c54e6214fdde7c65e25d46341156f3b76dfeb177166337ba0acb094f7ac043e6a217ddac852222536e552047a69a7000594a0897242c699842cd10f69d2bebb4558a5656244daf2e0cf513021354b8f2dac57fd05943a734680fa987857c650f881257ca07d27081a48dac420af547a43c894daea877cfe9ad78b676386dde93ff1df8d50e96a028af3c0857056570e69cce47b6b5383085c3c0c9b9e48afc095a73e7e61b", @typed={0x8, 0x145, 0x0, 0x0, @uid=r4}, @generic="b7f28e9555c34ebaacd9c16e4ae51116ad5efdbcf9c769f158febe571de3f12fd04fb9eab280d70c1213219e634d8dc2d6efb6903b7348778fde482902ef16a4c782ec6462a7bb7e7c60a365f6fdd92a80b0b12301605bc6eeeff853e880dec95d3828122b810a429ab04f7708724ed13942b52fe3355c2969b39957b142177648b75d0d8333722bd463396525d451a5445d9a17be3c14c17593ca77c3b546e51ffcc16e5dfd4f7031aa69641eaa55ae9b3b8a037f82f645af64", @nested={0x4, 0x8}, @nested={0x4, 0x62}]}, @generic="2bb300fee458d788fc635bf0", @nested={0x612, 0xd1, 0x0, 0x1, [@nested={0x3aa, 0xed, 0x0, 0x1, [@nested={0x134, 0x112, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @pid=r7}, @typed={0x14, 0x26, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @generic="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", @typed={0x8, 0x28, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0xd6}, @typed={0x8, 0x4e, 0x0, 0x0, @ipv4=@broadcast}, @generic, @nested={0x4, 0x34}]}, @generic="7e68f5353eb8ad07702b7735472b2f5ca5cc7017b9fab709c3124ef22cdca19f32ee8ac2f6dd68714d39b0b9b78ac861638e0a027bbac019c363d4d07c995cb6eb5cf97ba0ab0af3165eec958d0a4709cadce2a90fd2f8f368f7a229afd69eec0a115b010825a63a3abb60e710ba643afba0a58558f10e1e787a88fd3b41928b672230349fc5510d44e04f66dcb1977d44c7f093f156e1c39c630d672fe900bde3bd2dde61492b2dd29e284994a8c3bd78b2f7815f7753dc90cfc2b2d157db402ffc326c1d55ecc49a91551af5f417ed7bae1d65234ef630da80659f8c97d7af0c170fa71acb46aa", @typed={0xc, 0xbf, 0x0, 0x0, @u64=0x8}, @generic="3ad3683403d6aa3e70095046cb5981b5f84bb2d6ef78b342f1c9b34bf63693abad9a79f3e1e2a4968f07025cb3865580fe2777ce4143d12eee888f32ce17f4a6f789a21adf06ba5b2a863c8faadf5c46e12b51b86954fef7b5871feb334de6f9204e198f36a687d4d94292da00ebb2cc180c40e149609d8084fd21ad22f2ade25e83c9597912b068f045c55fb981e79f68fad1c30bd00f6e753ee91a872c7dc3ef0ae9f75d", @generic="d180fdaf04dceb51c0db09b99867c80b627b342399018976122c22925425cbce6dd181a41c39c33860d19e0f6043fb812b82eba1b90e0a342bb5c03f813cd9b0c2f4da809b0263532a79327c7e15cc80fc3e67be7a9d3a91769614cdc444a0e1c16c064239da84b0388a50b9b7df729b4c00512a9010d028e1d6253bd1f20121b70e25afda8343b8d3df8f6d5a7b76a163d06d5d1958c082817225e540832e44b4b3f241dd974715db92432ff1aa78d0059f230e9fde5584eccea73a36d24933356d34265b5fc51c414b7e753503169e8dd3fa9c9e1239a4f8"]}, @generic="06de231c56b71b015687ae67c98a0e2049dd30e5191251fa52f2c239b949e9a479f018fb7f1501967af5c4aac3ca1487216f5d55617087cd915d8df4ca51275fe09f1d96c1c174a263297682742f20f1d4f8e69a5e7111dc4c3e84482c6da218d59d1dff10ca82137af0603c42aae1456a949019c684261e59d245763b214038c0e3d2089d37828f6590e9b412dfb9a2ec16c52266ea1dd6ed13b7801066440504558a5be9e2446ab63f79", @nested={0x4, 0x154}, @generic="4b6aa81a63fa0c4c2b0ccf35f9bd956440c153e539d278f30caafc20d9338a67c40162238a91a9f42998a42b530d1862156a4d21a9c1cc9bd8b521b7ebb64a4666240d225ce9a24fc77a88af92818be3e3fe3d8214bbd37a399a6ddf67382f0dbd75e76282d84dae1364cc9bff77b0a8bd1b6e29c821b85ffcc72ac00148348e968afb367fc7a24bd3a09963f57168c5d1c9d663360b06e00cc40c4f1fd38514e4f85435aac0e2262713eaef62cfcdbe280f587af87c06a953bdf2f4592535e5fdbd6bc6b9e61d3b5711e775c272bd583d143c15391179", @typed={0x8, 0x105, 0x0, 0x0, @pid=r7}, @typed={0x4}, @generic="c9227ea346d54560a31855628a7ac754e9a246b3cdbfdc5419123b4ab08fc3e020135f5b5722a3fda0892f021e65acf876d020ddd35ac1031e87bc0956a85766be0e2743162e87b46b58c5bcf845918c2ca8c47a324cb36f01ad55b8716157b960206ae3b5d3546600a9c129cd5caa69a3fd8416894efdf10ae80fd488dac22329133a79b11cbaf00967604e8b3038d082ad100f3d313c7bbefc4ab22ccad2a473bfaf9d2d681acc3b3ff81305f63adbfcb3fa5da135efb0520b6abe3bde5c252617fddad4dff1d991676fa5ba19b075"]}]}]}, 0x8a8}, 0x1, 0x0, 0x0, 0x40}, 0x58840) setresuid$auto(0xee01, r4, 0x0) madvise$auto(0xfffffffffffffffd, 0xffffffffffff0001, 0x15) io_uring_setup$auto(0x100006, 0x0) getsockopt$auto_SO_SNDTIMEO_NEW(0xffffffffffffffff, 0x8, 0x43, 0x0, 0x0) keyctl$auto(0x9, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x8) r8 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x170) execveat$auto(r8, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x11000) mmap$auto(0x0, 0x2020009, 0x100000000000003, 0xebe, 0xfffffffffffffffa, 0x8000) r9 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r9, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x105}) 9.695035974s ago: executing program 5 (id=2076): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x1d, 0x1, 0x0) sysfs$auto(0x2, 0xd, 0x0) fsopen$auto(0x0, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x40, r2, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @ipv4=@loopback}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000884}, 0xc880) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="130026bd7000fcdbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000180)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x44, r4, 0x522, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_FLAG_BEST={0x4}, @BATADV_ATTR_LAST_SEEN_MSECS={0x8, 0x17, 0x2}, @BATADV_ATTR_BLA_BACKBONE={0xa, 0x21, @random="b6c9fc7a4350"}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}}, 0x10) mmap$auto(0x1, 0x2000d, 0x5, 0x6fb7d837, 0x6, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0xa505}, 0xffffdfff}, 0x7, 0x4008) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/asound/card1/timer_source\x00', 0x8a9eafcb2b62597c, 0x0) r8 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x123801, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, 0x0) writev$auto(r7, &(0x7f0000000200)={0x0, 0x1}, 0x9) r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x68b82, 0x0) ioctl$auto_KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r9) ioctl$auto(0x3, 0xae41, r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r10 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x6, 0x6, 0x5, 0x80000000, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0xffff, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0xf}}) io_uring_enter$auto(r10, 0x9, 0x820e, 0x8b, 0x0, 0x18) 9.678443486s ago: executing program 9 (id=2077): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x202000c, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000000), r1) memfd_create$auto(0x0, 0xe) r2 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r2, 0x0, 0x80, 0x0, 0x0) r3 = openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) read$auto_component_list_fops_(r3, &(0x7f0000000100)=""/78, 0x4e) unshare$auto(0x40000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0xa0001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000080)='T', 0x1) ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f0000000180)={0x5, &(0x7f0000000140)={0x1, 0x1, 0xd}}) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x147000, 0x0) setresuid$auto(0x8, 0x8, 0x0) setuid$auto(0x0) epoll_create1$auto(0x9) mmap$auto(0xfffffffffffffffe, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) select$auto(0x1100, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x7, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x61, 0x80000000, 0x0, 0x6d3f, 0x8001, 0xb, 0xfffffffffffffffe]}, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) mmap$auto(0x0, 0x40006, 0xdf, 0x200089b72, 0x7, 0x28000) ustat$auto(0x0, 0x0) fadvise64$auto_POSIX_FADV_NORMAL(r4, 0x9, 0x7f, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0xf5, 0x11e6000, 0x3) close_range$auto(0x2, 0xa, 0x0) 9.264140493s ago: executing program 8 (id=2078): preadv$auto(0xffffffffffffffff, 0x0, 0xc, 0x9, 0x402) madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x110d230000, 0x1, 0x3) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, 0x0, 0xc4142, 0x0) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/netfs/requests\x00', 0x40080, 0x0) pread64$auto(r2, 0x0, 0x8100000041, 0x413e) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000040)={@siginfo_0_0={0x2, 0x8, 0xf8, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000280)="79ca6170c72c9b5affac767c0127e58e38f3f407303ed544651fc514ea2bf3a8d8ec1b5efc99d62cbb8043d4582607afd440f400a4fdcd74a0d6cc759ee437d05a5a149e70f79615cb36ed421aea340b2fe6"}}}, 0x20f5, &(0x7f0000000440)={{0x0, 0x7e}, {0x8, 0x2}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x8000000000000001, 0x1, 0x3, 0x3, 0x501, 0xfff, 0x0, 0x3, 0x3, 0xc, 0xfffffffffffffffb}) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000000)={0x7, 0x3, 0x7, 0x2, 0x3ff, 0x7fffffff, "9b2189083b030000000d933475a77466", 0x7, 0x5, 0x9, 0x4, 0x2, 0xb, 0x2}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) migrate_pages$auto(0x0, 0x9, &(0x7f0000000100)=0x7, &(0x7f0000000040)=0x101) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) copy_file_range$auto(r2, &(0x7f0000000200)=0xfffffffffffffffa, r3, &(0x7f0000000300)=0x3, 0x7, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x3) write$auto(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x6, 0x5, 0x2) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) sendfile$auto(r4, r5, 0x0, 0xe5) mmap$auto(0x1, 0xe980, 0x81, 0xebf, 0xffffffffffffffff, 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0x8, 0x19, 0xffffffffffffffff, 0x8000) 7.865662336s ago: executing program 5 (id=2079): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda\x00', 0x14fa02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) preadv2$auto(r0, 0x0, 0x6, 0xfffffffffffffffb, 0x4, 0x800) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r1 = open$dir(0x0, 0x10000, 0x6) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) pwritev$auto(r1, 0x0, 0x2, 0xfffffffffffff274, 0x6) msgget$auto(0xc, 0x77d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000040)=0x1) sendto$auto(0x3, 0x0, 0x1, 0x101, 0x0, 0x1c) ioctl$auto(0x3, 0x541b, 0x38) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/user\x00') getdents$auto(r2, 0x0, 0xa2b0) msync$auto(0x0, 0x2000000005, 0x6) msgrcv$auto(0x0, 0x0, 0xff9, 0x0, 0x3) syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000180), 0xffffffffffffffff) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) mprotect$auto(0x6, 0x1, 0x3) madvise$auto(0x110c230000, 0x8031ca, 0x9) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfffffffc, &(0x7f0000000100)={0x0, 0xfbe}, 0x8, 0x0, 0x8, 0x1}, 0x3}, 0xc, 0x4008) 7.540248402s ago: executing program 9 (id=2080): mmap$auto(0x0, 0x6, 0x4, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vkms/clients\x00', 0x2100, 0x0) ioctl$auto(r0, 0x80026f47, r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) timerfd_create$auto_CLOCK_REALTIME(0x0, 0x83) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) pwrite64$auto(r3, 0x0, 0x8, 0x3) write$auto(0x3, 0x0, 0x1) lseek$auto(r2, 0x5, 0x1) sendfile$auto(0x3, 0xffffffffffffffff, 0x0, 0x400000000006) mmap$auto(0x0, 0x8000400008, 0xdf, 0x9b72, 0x2, 0x4f) sysfs$auto(0x2, 0xd, 0x0) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) read$auto_usbfs_devices_fops_usb(r4, 0x0, 0x2d) read$auto_regulator_summary_fops_(r4, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x58) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) r5 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x84}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) io_uring_enter$auto(r5, 0x9, 0x820e, 0x8b, 0x0, 0x18) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 5.996831683s ago: executing program 7 (id=2081): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x0) sysfs$auto(0x2, 0xd, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) fsmount$auto(0x4, 0x3f000000, 0x200003) close_range$auto(0x2, 0x8, 0x0) 5.652969348s ago: executing program 8 (id=2082): openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0xc0800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20000, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f00000001c0)={0x5, 0x0, [{0x580, 0x8, 0x45}]}) getsockopt$auto(0xffffffffffffffff, 0x114, 0x271e, 0xfffffffffffffffc, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x64b15845) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram1\x00', 0x20001, 0x0) ioctl$auto_BLKRRPART(r3, 0x125f, 0x700000000000000) io_uring_setup$auto(0x55, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x10482, 0x0) r4 = socket(0x1d, 0x2, 0x6) setsockopt$auto(r4, 0x6a, 0x5, 0x0, 0x40000d) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sysfs$auto(0x2, 0x45, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) read$auto(0x3, 0x0, 0x5) ioctl$auto(0x3, 0x402c542b, 0x38) 5.426724105s ago: executing program 7 (id=2083): mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec26\x00', 0x3c9000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000180)={'\x00', 0x0, 0x5, 0x2, 0x9b7, 0x9, "fafffffc3924222ce18c1000", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "6c6529a30418fffffffff300", "ef5ac4927aed9c5c00000080", ' \x00\x00\x00\x00\x00\t\x00']}) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, 0x0) r2 = socket(0xa, 0x1, 0x84) r3 = getsockopt$auto(r2, 0x0, 0x53, 0x0, 0x0) mmap$auto(0xea8c, 0x8, 0xc, 0xfffffffffffffffb, 0x3, 0x3) shmctl$auto_SHM_LOCK(0x6, 0xb, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) socket(0x29, 0x2, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400005, 0x9, 0xff, r3, 0x8000) r4 = getpgrp(0x0) process_vm_readv$auto(r4, 0x0, 0x800000005, &(0x7f00000000c0)={0x0, 0x1fffffffe}, 0x2, 0x1) setsockopt$auto(r1, 0x140400, 0x40000005, 0x0, 0x8000008) unshare$auto(0x40000080) mmap$auto(0x2, 0x2020009, 0x3, 0x400000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) setfsuid$auto(0xee00) getsockopt$auto_SO_TXTIME(r2, 0x9, 0x3d, 0x0, 0x0) prctl$auto(0x23, 0x6, 0x0, 0x7e, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) socket(0x2, 0x2, 0x73) socket(0x2, 0x80002, 0x73) futex$auto(0x0, 0x8, 0x8, 0x0, 0x0, 0x10007) 4.081527023s ago: executing program 5 (id=2084): unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) madvise$auto(0x8, 0xaf01, 0x10) r0 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0xb, 0x8ff9, 0x10400, 0x6, 0x4, 0x3, 0xffffffffffffffff, [0x0, 0x0, 0x100000], {0x7, 0x200004, 0x7, 0x2a3, 0x100, 0x3, 0x40100101, 0x6, 0x5}, {0xf8, 0x4, 0x9, 0xd, 0x3, 0x40, 0x60, 0x8, 0x100000000}}) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x6, 0x2, 0x20000007, 0x0) pselect6$auto(0x5, &(0x7f0000000400)={[0x9, 0xfffffffffffffffe, 0xffffffffffffffff, 0x6, 0x8001, 0xa, 0xae, 0x200000c, 0xffffffffffffff81, 0xffffffff, 0x7fffffffffffffff, 0x200008000, 0x1000, 0xc, 0x9, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r1, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_ADDR_TRANSMITTER={0xa, 0x2, "a060292f83d9"}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) io_uring_enter$auto(0x3, 0x4, 0xffffffff, 0x6, 0x0, 0x2) setsockopt$auto_SO_SNDBUFFORCE(r0, 0x1000, 0x20, &(0x7f0000000040)='}\x00', 0x7) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket(0xa, 0x2, 0x0) r6 = socket(0xa, 0x801, 0x84) epoll_ctl$auto_EPOLL_CTL_ADD(r6, 0x1, r5, 0x0) sendfile$auto(r4, r4, 0x0, 0x2) ioctl$auto_SNAPSHOT_FREE(r3, 0x3314, 0x0) 3.574495202s ago: executing program 9 (id=2085): select$auto(0xd, &(0x7f00000000c0)={[0x5, 0x9, 0x3, 0x3, 0x2, 0xb8, 0x0, 0x9, 0x8000000000000001, 0xffffffffffffff73, 0x8001, 0x2, 0x4, 0x8, 0x3e7, 0x8]}, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) setresuid$auto(0x0, 0x8, 0x8000) ioctl$auto_FS_IOC_SETFLAGS2(r0, 0x40086602, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x28da, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x7fffffff, 0x7f, 0x2eb1, 0x401, 0x2000000000008000) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$auto_SO_BROADCAST(0xffffffffffffffff, 0x6, 0x6, 0x0, 0x40) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x103041, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) writev$auto(r2, 0x0, 0x3) bind$auto(0x3, 0x0, 0x6a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r3) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x10, 0x0, [{0x488, 0x400, 0x9}]}) socket(0x28, 0x5, 0x0) socket(0x1d, 0x2, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @multicast2}, 0x54) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="2f212cbd7010ca705d845526cc0008000380", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8810) 3.343642779s ago: executing program 8 (id=2086): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0x12, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) listen$auto(0x3, 0x81) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) r0 = fsopen$auto(0x0, 0x6) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c000000843db60b7c6ca517dc0ec70f3607d88c72098197c0923db43e6e79890be1e47a964165c27b43f06d4725131ada42db59a5719c6f3bd5ec5ecf332f5c4f1534111e1b2f2f405a6fb0fd09cb7f9ee4911018d5cb4dccc54548207ecd5cebb9926a9fd7e7889cf0f944f07c1d05cb5d6ca3b984b9a2a557bccee2b1a0058247d57ede00000000", @ANYRES64=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0xc090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0xa1) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/vrf/strict_mode\x00', 0x4000, 0x0) sendfile$auto(r2, r1, 0x0, 0xfffffffffffffff8) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0xffffffff, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card1/pcm0c/xrun_debug\x00', 0x200, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x101100, 0x0) r3 = socket(0x2d, 0x2, 0x0) bind$auto(r3, &(0x7f0000000040)=@qipcrtr, 0x8) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0xe40, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x0, 0xa}, 0x5, 0x108) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000140), 0xec042, 0x0) 2.121877757s ago: executing program 5 (id=2087): unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/ram8/events\x00', 0xd02, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000480)=""/48, 0xfffffffffffffecf) getpid() accept4$auto(r0, &(0x7f0000000080)=@generic={0x25, "cfd3c6888ae69e3054a030f4ff77"}, &(0x7f0000000540)=0xcfd, 0xfffffffb) r2 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x183) socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r0, 0xe, 0x1) linkat$auto(r2, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000380)='./file0\x00', 0x3) set_mempolicy$auto(0x3c, &(0x7f0000000080)=0x2, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/platform/vhci_hcd.12/usb33/33-0:1.0/usb33-port4/quirks\x00', 0x400, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/memory.force_empty\x00', 0xa043, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) setdomainname$auto(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r4) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x410000, 0x0) sendmsg$auto_NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r5, @ANYBLOB="00032dbd7008fcdbdf250f0000000520390100000000800800fa00", @ANYRES32=0x0, @ANYBLOB="1400390000000000000000000000ffffe0000002040034800400ef80aac604b00558ffc9bbf28a3efe69902a860a81f39ae314a9cb1cd1667b83a398964252a425e4410068a4f204e5919b002b6193a97fce0551bf80539ff303a8bb2807d95f9e30795fe12103df092219ae2ef9b57fe6bead83fbd64c03bf395f73d2c1b0035fd66db3acb61cf1f5183b65b4c5d49efab88af06d26cde4bc24fcdbef9bfb1a53198af01badb1b963b31de20400be80090034002a2d212b000000000400bd800800ef000e000000"], 0xf4}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000000) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f00000003c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x7, 0x6, 0x1ff, 0x7, r3, 0x5, 0x8}, 0x7) r6 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r6, 0x40026f34, 0x0) r7 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x100401, 0x0) write$auto_evm_xattr_ops_evm_secfs(r7, &(0x7f0000000240)="003bf0dea2d07ba00c00000071a2320fa813300400b7123265ec37779047b1f4d198c06b7a0c5cfb16e8a9d1769e30852aae5ab574e19dc18eb97ea463f60b326fb3e41233f88421656b4cfc2d7c938701a0b54d44e015c77d8e1a065d5a83228c30bb386589bbc49fdd0be4538d9c32fb5af2e184b9a3568a62254d73", 0x7d) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x88800, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 1.970077463s ago: executing program 8 (id=2088): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) r1 = socket(0x2, 0x801, 0x106) setsockopt$auto(r1, 0x3, 0x4, &(0x7f0000000040)='\xe2 \xa8\xf4', 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r2) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NET_SET(r2, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000040)={0x20, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=0xee00}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000080), 0x48040, 0x0) sendmsg$auto_TIPC_NL_BEARER_ADD(r1, &(0x7f0000001980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044040}, 0x20004000) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card1\x00', 0x101002, 0x0) ioctl$auto(r4, 0x9000643a, 0xc35) write$auto(0x3, 0x0, 0xfffffdef) read$auto(r0, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) fchownat$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6) 1.949275302s ago: executing program 9 (id=2089): sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0040ebc4b100000000b50000000000", @ANYRES16=0x0, @ANYBLOB="010b27bd7000fcdbdf25050000000800318004000e00"], 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x240088e4) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x1}, @NL80211_ATTR_FILS_CACHE_ID={0x2d, 0xfd, "bf4310ebfa33d65f55bbb56e82e26de1d0fe0c29e1982c73dfa948b5ca0172f1b15862f1f44973ab6e"}]}, 0x4c}}, 0x20000040) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r0, 0x0, 0x8014) sendmmsg$auto(r0, &(0x7f0000000480)={{&(0x7f00000000c0), 0x2, &(0x7f00000003c0)={0x0, 0xb9d}, 0x3, 0x0, 0x3, 0x5}, 0xfff}, 0x101, 0xc3a4) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) read$auto(0x3, 0x0, 0x80) sendmsg$auto_NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="34000000a1e89c18437b63888f16efc5a0d573de9d5c79e1fc0d2d", @ANYRES16=0x0, @ANYBLOB="000126bd7000fbdbdf250400000008000200000000000800010006000000080001009d0900000800020001040000"], 0x34}, 0x1, 0x0, 0x0, 0x20044001}, 0x80) write$auto(0x3, 0x0, 0x100000000) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, 0x0, 0xa040, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r2, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0456ed"], 0x14}, 0x1, 0x0, 0x0, 0x4854}, 0x40) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r2) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r2) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000080)=ANY=[@ANYBLOB="17000000", @ANYRES16=r3, @ANYBLOB="010027bd7000001400b223"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0xfffffffb, 0x1000000) socket(0x1d, 0x2, 0x2) r4 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) read$auto_vcs_fops_vc_screen(r4, &(0x7f0000000080)=""/238, 0xffffffe9) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x6) 1.822217393s ago: executing program 7 (id=2090): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x20c40, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x7, 0x400008, 0x3, 0x9b72, 0x2, 0x8) (async) sysfs$auto(0x2, 0x2, 0x0) (async) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="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") mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket(0x10, 0x2, 0x0) (async) setsockopt$auto(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x4) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) (async) open(&(0x7f0000000800)='./file0\x00', 0x62a40, 0x147) (async) execve$auto(0x0, 0x0, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4ae02, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000004c0)=&(0x7f0000000340)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5', 0x0) (async) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async) ioctl$auto_SNDCTL_DSP_GETODELAY(r1, 0x80045017, &(0x7f0000000180)) (async) read$auto(0xffffffffffffffff, 0x0, 0x1f40) (async) ioctl$auto(0xc8, 0x800454e1, 0x5c8d) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) read$auto(0x3, 0x0, 0x8080) (async) sendmsg$auto_SMC_NETLINK_DUMP_UEID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40015}, 0x4) (async) write$auto(0xffffffffffffffff, 0x0, 0x81) 959.699163ms ago: executing program 5 (id=2091): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001140)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x40802, 0x0) read$auto(r0, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) r1 = openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000580), 0x654b03, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r1, 0x8000) socket(0xa, 0x801, 0x84) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x2020209, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) modify_ldt$auto(0x6, 0x0, 0x7) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000004c0), 0x2202, 0x0) r4 = openat$auto_ubifs_dir_operations_ubifs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) read$auto_ubifs_dir_operations_ubifs(r4, &(0x7f0000000100)=""/83, 0x53) ioctl$auto_USB_RAW_IOCTL_EP0_WRITE(r3, 0x40085503, &(0x7f0000000000)={0xf, 0x0, 0x400000}) ioctl$auto(r2, 0x4b4c, 0x1) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip6_tables_targets\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r5, &(0x7f0000000540)=""/58, 0x3a) setsockopt$auto(0x3, 0x10000000084, 0x75, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r6, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4db}, 0x6, 0x0, 0x3d1d, 0x7fe}, 0x1000}, 0x8000, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffffffff, &(0x7f00000002c0)={0x0, 0x100c4}, 0x5d49, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 853.276008ms ago: executing program 7 (id=2092): read$auto(0xffffffffffffffff, 0x0, 0x4) r0 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x170) execveat$auto(r0, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x11000) write$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(r0, &(0x7f0000000000)="24c021f996", 0x5) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8002) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r1, 0x0, 0xfffffdf1) linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) write$auto(0xca, 0x0, 0x0) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r3, 0x0, 0x400018) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/186, 0xba) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) prctl$auto_PR_GET_NO_NEW_PRIVS(0x27, 0x4, 0x6bd, 0x10000, 0x4) r5 = open(&(0x7f0000000200)='&&\x00', 0x0, 0xe1d2b27bdc14aabc) fallocate$auto(r5, 0x0, 0x7, 0x4cbd5d) mmap$auto(0x0, 0x2020049, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 288.526855ms ago: executing program 9 (id=2093): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x28, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x20000040) read$auto(0x3, 0x0, 0x8080) unshare$auto(0x40000080) socket(0x2c, 0x1, 0x0) mmap$auto(0xffffffffffffffff, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) umask$auto(0x7) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) ioctl$auto(0x3, 0x5521, 0x1) sendfile$auto(r2, r2, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000e3, 0x10000040eb2, 0x402, 0x300000000000) get_mempolicy$auto(0x0, 0x0, 0xfffffffffffffffe, 0x99d6, 0x3) r3 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r3, 0x0, 0x7, 0x4cbd5d) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) fremovexattr$auto(r4, &(0x7f0000000000)='system.posix_acl_access\x00') sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000a80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f0000000440)={0x5f8, 0x0, 0x902, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_TAIL={0x5d3, 0xf, "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"}, @NL80211_ATTR_WDEV={0xc, 0x99, 0xfffffffffffffffe}, @NL80211_ATTR_RADAR_BACKGROUND={0x4}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x8000}, 0x4810) mmap$auto(0xea88, 0x810004, 0xd, 0x10, 0x3, 0x8000) unshare$auto(0x40000080) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r5, 0x8000) keyctl$auto_KEYCTL_INSTANTIATE_IOV(0x14, 0x80, 0x1, 0x31, 0x0) setsockopt$auto(0x3, 0x1, 0x2d, 0x0, 0x8) 105.091206ms ago: executing program 5 (id=2094): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setitimer$auto_ITIMER_REAL(0x0, &(0x7f0000000180)={{0x7, 0x6}, {0x51, 0xd8bd}}, 0x0) mmap$auto(0x0, 0x7, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000040), 0x1000) io_uring_register$auto(0x2, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), r0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c00005f", @ANYRES16=r1, @ANYBLOB="01032cb57000fbdbdf250a00000008000a0008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x102, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/MOSCHIP usb-ethernet driver/remove_id\x00', 0xa42, 0x0) getsockopt$auto(r2, 0x1, 0x5, 0xfffffffffffffffc, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, 0x0, 0x81) write$auto(0x3, 0x0, 0xfffffdef) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) 0s ago: executing program 8 (id=2095): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) r0 = fsopen$auto(0x0, 0x1) r1 = socket(0x10, 0x2, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/dev_snmp6/dummy0\x00', 0x109800, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x0, 0x8, 0x11, 0xe13, 0x81, 0xe, 0x2000200000000002, 0x0, 0x9, 0x1, 0x1, 0x80000001, 0x8627, 0x9, 0x20000800001, 0x3, 0x6, 0x7, 0x6, 0x7, 0x0, 0x200, 0x2a17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x80000001, 0xffffffffffffbffc, 0x4, 0x0, 0x0, 0x0, 0x9e06, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x77f08ac9, 0x0, 0x0, 0x0, 0x0, 0x806, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe]}, 0x9, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r0, @ANYRES8=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x4009080}, 0x2404c890) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1) openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x200000000020009, 0x7fffffff, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db", @ANYRES32=r4, @ANYBLOB="0c002e010800000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x44004) setsockopt$auto_SO_DETACH_REUSEPORT_BPF(r1, 0x8b, 0x44, &(0x7f0000000100)='/\\$\x00', 0x45) setfsuid$auto(0xee01) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c810}, 0x800) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0xd}}, 0x54) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) kernel console output (not intermixed with test programs): inode #274: comm syz.3.702: iget: checksum invalid [ 303.938544][ T9398] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 303.986969][ T9398] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.702: iget: checksum invalid [ 304.034833][ T9398] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 304.077377][ T9398] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 304.162091][ T9398] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 307.543375][ T9490] netlink: 322 bytes leftover after parsing attributes in process `syz.3.723'. [ 307.975092][ T9497] netlink: 334 bytes leftover after parsing attributes in process `syz.3.724'. [ 309.244186][ T9517] netlink: 28 bytes leftover after parsing attributes in process `syz.1.729'. [ 309.310404][ T9517] ipvlan1: entered promiscuous mode [ 309.348891][ T9517] ipvlan1: entered allmulticast mode [ 309.429546][ T9517] veth0_vlan: entered allmulticast mode [ 309.831645][ T9529] random: crng reseeded on system resumption [ 309.986879][ T4950] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 309.986911][ T4950] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 310.003870][ T4950] Bluetooth: hci2: Dropping invalid advertising data [ 310.011144][ T4950] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 310.011174][ T4950] Bluetooth: hci2: Dropping invalid advertising data [ 310.029234][ T4950] Bluetooth: hci2: Malformed LE Event: 0x02 [ 311.538713][ T9555] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 311.861621][ T9562] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input32 [ 312.037723][ T9567] block nbd0: Unsupported socket: should be TCP or UNIX. [ 313.952976][ T9599] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.743: iget: checksum invalid [ 314.148478][ T9599] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 314.330104][ T9599] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.743: iget: checksum invalid [ 314.457820][ T9599] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 314.535493][ T9599] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.743: iget: checksum invalid [ 314.659280][ T9599] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 314.730626][ T9599] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.743: iget: checksum invalid [ 314.797689][ T9599] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 314.865262][ T9599] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 314.928792][ T9599] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 315.938180][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.946762][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.188538][ T4950] Bluetooth: hci1: unexpected event 0x23 length: 16 > 13 [ 320.004089][ T9716] netlink: 16 bytes leftover after parsing attributes in process `syz.1.768'. [ 324.241132][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.786'. [ 324.385003][ T4950] Bluetooth: hci1: unexpected event 0x14 length: 16 > 6 [ 324.974163][ T9797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.594694][ T9838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.796'. [ 326.640163][ T9838] veth1_macvtap: left promiscuous mode [ 326.668846][ T9838] macsec0: entered promiscuous mode [ 326.706558][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.796'. [ 326.748274][ T9838] macsec0: entered allmulticast mode [ 327.725472][ T9856] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 327.765512][ T9853] netlink: 'syz.3.800': attribute type 33 has an invalid length. [ 327.827236][ T9853] netlink: 322 bytes leftover after parsing attributes in process `syz.3.800'. [ 328.084239][ T9864] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.803: iget: checksum invalid [ 328.133735][ T9852] netlink: 'syz.3.800': attribute type 33 has an invalid length. [ 328.168422][ T9852] netlink: 322 bytes leftover after parsing attributes in process `syz.3.800'. [ 328.241318][ T9864] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 328.494154][ T9864] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.803: iget: checksum invalid [ 328.652130][ T9864] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 328.782967][ T9864] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.803: iget: checksum invalid [ 328.926486][ T9864] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 329.080266][ T9864] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.803: iget: checksum invalid [ 329.202480][ T9864] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 329.232368][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.809'. [ 329.303764][ T9903] netlink: 354 bytes leftover after parsing attributes in process `syz.1.809'. [ 329.326571][ T9864] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 329.406427][ T9864] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 333.058400][ T9983] netlink: 'syz.0.827': attribute type 4 has an invalid length. [ 335.496836][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'. [ 338.649477][T10103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.855'. [ 338.751446][T10103] netlink: 25 bytes leftover after parsing attributes in process `syz.1.855'. [ 339.963950][T10119] netlink: 146 bytes leftover after parsing attributes in process `syz.0.858'. [ 342.570666][T10160] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input33 [ 342.993887][T10163] cgroup: fork rejected by pids controller in /syz0 [ 343.592968][T10211] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.871: iget: checksum invalid [ 343.642782][T10211] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 343.695543][T10211] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.871: iget: checksum invalid [ 343.750385][T10211] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 343.811454][T10211] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.871: iget: checksum invalid [ 343.884438][T10211] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 343.935898][T10211] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.871: iget: checksum invalid [ 343.991345][T10211] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 344.033110][T10211] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 344.076555][T10211] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 346.567887][T10239] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 346.864017][T10254] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.3.879: bg 4: bad block bitmap checksum [ 346.922247][T10254] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 74 [ 346.984947][T10254] EXT4-fs (sda1): This should not happen!! Data will be lost [ 346.984947][T10254] [ 347.721741][T10250] EXT4-fs error (device sda1): ext4_discard_preallocations:5696: comm syz.0.878: Error -117 reading block bitmap for 4 [ 347.985355][T10242] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 349.698235][T10299] ubi31: attaching mtd0 [ 349.717410][T10299] ubi31: scanning is finished [ 349.717458][T10299] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 349.745861][T10305] netlink: 'syz.2.891': attribute type 2 has an invalid length. [ 350.225351][T10299] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 351.315530][T10340] netlink: 338 bytes leftover after parsing attributes in process `syz.0.897'. [ 351.684748][T10338] ima: Unable to open file: /surit‹¯Ròy/integrity?iqa/policy (-2) [ 351.698267][T10338] netlink: 314 bytes leftover after parsing attributes in process `syz.1.896'. [ 351.819115][T10337] ima: policy update failed [ 351.864830][ T30] audit: type=1802 audit(4294968436.253:7): pid=10337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.896" res=0 errno=0 [ 352.237180][T10362] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.3.903: bg 5: bad block bitmap checksum [ 352.328843][T10362] EXT4-fs (sda1): Delayed block allocation failed for inode 2022 at logical offset 0 with max blocks 1 with error 74 [ 352.397737][T10362] EXT4-fs (sda1): This should not happen!! Data will be lost [ 352.397737][T10362] [ 353.278786][T10384] HfR: entered promiscuous mode [ 353.474973][T10383] openvswitch: HfR: Dropping previously announced user features [ 353.604939][T10380] block nbd2: not configured, cannot reconfigure [ 354.972661][T10416] EXT4-fs error (device sda1): ext4_discard_preallocations:5696: comm syz.1.913: Error -117 reading block bitmap for 5 [ 357.164532][T10461] netlink: 206 bytes leftover after parsing attributes in process `syz.3.919'. [ 361.540160][T10550] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input35 [ 361.668564][T10550] FAULT_INJECTION: forcing a failure. [ 361.668564][T10550] name fail_futex, interval 1, probability 0, space 0, times 0 [ 361.865771][T10550] CPU: 0 UID: 0 PID: 10550 Comm: syz.1.935 Tainted: G U L syzkaller #0 PREEMPT(full) [ 361.865813][T10550] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 361.865823][T10550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 361.865841][T10550] Call Trace: [ 361.865849][T10550] [ 361.865860][T10550] dump_stack_lvl+0x100/0x190 [ 361.865911][T10550] should_fail_ex.cold+0x5/0xa [ 361.865947][T10550] get_futex_key+0x1d2/0x1510 [ 361.865976][T10550] ? __pfx_get_futex_key+0x10/0x10 [ 361.865997][T10550] ? find_held_lock+0x2b/0x80 [ 361.866029][T10550] ? device_add+0x1444/0x1950 [ 361.866161][T10550] ? device_add+0x1444/0x1950 [ 361.866194][T10550] ? kasan_quarantine_put+0x104/0x240 [ 361.866229][T10550] futex_wait_setup+0x83/0x510 [ 361.866269][T10550] __futex_wait+0x19f/0x300 [ 361.866304][T10550] ? __pfx___futex_wait+0x10/0x10 [ 361.866336][T10550] ? look_up_lock_class+0x55/0x120 [ 361.866366][T10550] ? __pfx_futex_wake_mark+0x10/0x10 [ 361.866410][T10550] ? futex_hash+0x2ad/0x370 [ 361.866434][T10550] ? futex_hash+0x141/0x370 [ 361.866460][T10550] futex_wait+0xe6/0x370 [ 361.866493][T10550] ? __pfx_futex_wait+0x10/0x10 [ 361.866524][T10550] ? do_raw_spin_lock+0x128/0x260 [ 361.866563][T10550] ? uinput_ioctl_handler.isra.0+0x279/0x1d20 [ 361.866667][T10550] do_futex+0x1ef/0x350 [ 361.866694][T10550] ? __pfx_do_futex+0x10/0x10 [ 361.866723][T10550] ? find_held_lock+0x2b/0x80 [ 361.866758][T10550] __x64_sys_futex+0x34f/0x4d0 [ 361.866789][T10550] ? __pfx___x64_sys_futex+0x10/0x10 [ 361.866821][T10550] ? rcu_is_watching+0x12/0xc0 [ 361.866854][T10550] do_syscall_64+0x115/0x840 [ 361.866877][T10550] ? clear_bhb_loop+0x40/0x90 [ 361.866907][T10550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.866932][T10550] RIP: 0033:0x7f4654d9ce59 [ 361.866952][T10550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.866976][T10550] RSP: 002b:00007f4655cf50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 361.867003][T10550] RAX: ffffffffffffffda RBX: 00007f4655015fa8 RCX: 00007f4654d9ce59 [ 361.867019][T10550] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4655015fa8 [ 361.867033][T10550] RBP: 00007f4655015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 361.867048][T10550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.867062][T10550] R13: 00007f4655016038 R14: 00007ffeae581d10 R15: 00007ffeae581df8 [ 361.867093][T10550] [ 363.848477][T10583] netlink: 342 bytes leftover after parsing attributes in process `syz.2.942'. [ 367.613375][T10632] netlink: 12 bytes leftover after parsing attributes in process `syz.0.953'. [ 369.827085][ T30] audit: type=1326 audit(2147483664.311:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10663 comm="syz.1.960" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4654d9ce59 code=0x0 [ 369.901266][T10671] synth uevent: /bus/usb-serial/drivers/moto_modem: unknown uevent action string [ 370.246474][T10676] netlink: 334 bytes leftover after parsing attributes in process `syz.3.962'. [ 372.681832][T10711] ecryptfs_parse_packet_length: Error parsing packet length [ 372.794197][T10711] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 374.095961][T10734] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.973: iget: checksum invalid [ 374.136438][T10734] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 374.223356][T10734] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.973: iget: checksum invalid [ 374.267927][T10734] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 374.281532][T10751] netlink: 'syz.2.977': attribute type 27 has an invalid length. [ 374.309500][T10751] netlink: 'syz.2.977': attribute type 28 has an invalid length. [ 374.320708][T10734] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.973: iget: checksum invalid [ 374.345034][T10751] netlink: 'syz.2.977': attribute type 29 has an invalid length. [ 374.380187][T10751] netlink: 'syz.2.977': attribute type 30 has an invalid length. [ 374.395042][T10734] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 374.417306][T10751] netlink: 'syz.2.977': attribute type 31 has an invalid length. [ 374.430906][T10734] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.973: iget: checksum invalid [ 374.445935][T10751] netlink: 'syz.2.977': attribute type 32 has an invalid length. [ 374.465894][T10751] netlink: 'syz.2.977': attribute type 33 has an invalid length. [ 374.480478][T10734] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 374.511613][T10751] netlink: 'syz.2.977': attribute type 35 has an invalid length. [ 374.521868][T10734] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 374.544075][T10751] netlink: 'syz.2.977': attribute type 37 has an invalid length. [ 374.561133][T10734] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 374.584095][T10751] netlink: 18 bytes leftover after parsing attributes in process `syz.2.977'. [ 374.880330][T10764] FAULT_INJECTION: forcing a failure. [ 374.880330][T10764] name failslab, interval 1, probability 0, space 0, times 0 [ 374.918716][T10764] CPU: 0 UID: 0 PID: 10764 Comm: syz.1.980 Tainted: G U L syzkaller #0 PREEMPT(full) [ 374.918758][T10764] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 374.918767][T10764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 374.918784][T10764] Call Trace: [ 374.918792][T10764] [ 374.918801][T10764] dump_stack_lvl+0x100/0x190 [ 374.918850][T10764] should_fail_ex.cold+0x5/0xa [ 374.918881][T10764] should_failslab+0xc2/0x120 [ 374.918914][T10764] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 374.918939][T10764] ? vm_area_alloc+0x1f/0x160 [ 374.918983][T10764] vm_area_alloc+0x1f/0x160 [ 374.919022][T10764] __mmap_region+0x104d/0x2dd0 [ 374.919050][T10764] ? __pfx___mmap_region+0x10/0x10 [ 374.919101][T10764] ? find_held_lock+0x2b/0x80 [ 374.919132][T10764] ? ima_match_policy+0x8c4/0x2350 [ 374.919245][T10764] ? ima_match_policy+0x8c4/0x2350 [ 374.919310][T10764] ? process_measurement+0x4c8/0x2350 [ 374.919389][T10764] mmap_region+0x527/0x620 [ 374.919417][T10764] ? __pfx_mmap_region+0x10/0x10 [ 374.919446][T10764] ? cap_mmap_addr+0x4b/0x120 [ 374.919579][T10764] ? bpf_lsm_mmap_addr+0x9/0x30 [ 374.919623][T10764] ? security_mmap_addr+0x71/0x1e0 [ 374.919716][T10764] ? __get_unmapped_area+0x255/0x3e0 [ 374.919754][T10764] do_mmap+0xc63/0x12f0 [ 374.919794][T10764] ? __pfx_do_mmap+0x10/0x10 [ 374.919827][T10764] ? __pfx_down_write_killable+0x10/0x10 [ 374.919863][T10764] vm_mmap_pgoff+0x29e/0x470 [ 374.919908][T10764] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 374.919940][T10764] ? __fget_files+0x215/0x3d0 [ 374.919976][T10764] ? __fget_files+0x21f/0x3d0 [ 374.920016][T10764] ksys_mmap_pgoff+0x3cb/0x610 [ 374.920049][T10764] ? __x64_sys_futex+0x358/0x4d0 [ 374.920076][T10764] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 374.920108][T10764] ? xfd_validate_state+0x129/0x190 [ 374.920132][T10764] ? ksys_write+0x1ac/0x250 [ 374.920168][T10764] __x64_sys_mmap+0x125/0x190 [ 374.920197][T10764] do_syscall_64+0x115/0x840 [ 374.920220][T10764] ? clear_bhb_loop+0x40/0x90 [ 374.920250][T10764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.920275][T10764] RIP: 0033:0x7f4654d9ce59 [ 374.920295][T10764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.920318][T10764] RSP: 002b:00007f4655cd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 374.920341][T10764] RAX: ffffffffffffffda RBX: 00007f4655016090 RCX: 00007f4654d9ce59 [ 374.920357][T10764] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000000000 [ 374.920372][T10764] RBP: 00007f4654e32d6f R08: 00000000000000dd R09: 0000000000000000 [ 374.920387][T10764] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 374.920401][T10764] R13: 00007f4655016128 R14: 00007f4655016090 R15: 00007ffeae581df8 [ 374.920432][T10764] [ 378.221405][T10848] FAULT_INJECTION: forcing a failure. [ 378.221405][T10848] name failslab, interval 1, probability 0, space 0, times 0 [ 378.347970][T10848] CPU: 0 UID: 0 PID: 10848 Comm: syz.1.997 Tainted: G U L syzkaller #0 PREEMPT(full) [ 378.348011][T10848] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 378.348020][T10848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 378.348035][T10848] Call Trace: [ 378.348042][T10848] [ 378.348051][T10848] dump_stack_lvl+0x100/0x190 [ 378.348099][T10848] should_fail_ex.cold+0x5/0xa [ 378.348130][T10848] should_failslab+0xc2/0x120 [ 378.348162][T10848] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 378.348188][T10848] ? __d_alloc+0x35/0xa50 [ 378.348222][T10848] ? lockdep_hardirqs_on+0x78/0x100 [ 378.348246][T10848] ? ktime_get_coarse_real_ts64_mg+0x249/0x300 [ 378.348277][T10848] __d_alloc+0x35/0xa50 [ 378.348321][T10848] d_alloc_pseudo+0x1c/0xc0 [ 378.348346][T10848] alloc_file_pseudo+0x118/0x290 [ 378.348389][T10848] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 378.348428][T10848] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 378.348467][T10848] create_pipe_files+0x360/0x970 [ 378.348505][T10848] do_pipe2+0xbd/0x1e0 [ 378.348538][T10848] ? __pfx_do_pipe2+0x10/0x10 [ 378.348570][T10848] ? xfd_validate_state+0x129/0x190 [ 378.348603][T10848] __x64_sys_pipe+0x33/0x50 [ 378.348637][T10848] do_syscall_64+0x115/0x840 [ 378.348660][T10848] ? clear_bhb_loop+0x40/0x90 [ 378.348689][T10848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.348714][T10848] RIP: 0033:0x7f4654d9ce59 [ 378.348733][T10848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.348757][T10848] RSP: 002b:00007f4655cf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 378.348780][T10848] RAX: ffffffffffffffda RBX: 00007f4655015fa0 RCX: 00007f4654d9ce59 [ 378.348796][T10848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 378.348814][T10848] RBP: 00007f4654e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 378.348829][T10848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.348844][T10848] R13: 00007f4655016038 R14: 00007f4655015fa0 R15: 00007ffeae581df8 [ 378.348875][T10848] [ 378.879601][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.879657][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.702322][T10875] tipc: Started in network mode [ 379.830949][T10875] tipc: Node identity ee00, cluster identity 4711 [ 379.902376][T10875] tipc: Node number set to 60928 [ 381.023753][T10906] netlink: Invalid conntrack helper [ 383.159920][T10937] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1013'. [ 383.698837][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1015'. [ 385.370357][T10998] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1025'. [ 386.220239][T11015] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1028'. [ 386.397508][T11015] bond0: entered promiscuous mode [ 386.440288][T11015] bond_slave_0: entered promiscuous mode [ 386.511069][T11015] bond_slave_1: entered promiscuous mode [ 389.417191][ T4950] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 391.467907][ T8660] Bluetooth: hci2: command 0x0c1a tx timeout [ 391.563683][T11103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1046'. [ 391.738530][ T8660] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 391.881481][T11124] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1049'. [ 391.970794][T11125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1049'. [ 392.658795][ T8660] Bluetooth: hci3: unexpected event 0x1c length: 725 > 5 [ 397.539480][T11233] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1075'. [ 401.078570][ T30] audit: type=1800 audit(2147483670.768:9): pid=11302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1089" name="dbroot" dev="configfs" ino=34709 res=0 errno=0 [ 403.576924][T11351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1097'. [ 405.324914][T11391] MTRR 1 not used [ 408.105543][T11439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1112'. [ 408.968400][T11454] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1118'. [ 410.579618][T11493] __vm_enough_memory: pid: 11493, comm: syz.2.1124, bytes: 4398046457856 not enough memory for the allocation [ 411.412187][T11513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1128'. [ 411.531394][T11521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1128'. [ 414.847133][T11588] netlink: 'syz.0.1140': attribute type 2 has an invalid length. [ 416.329061][T11615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1143'. [ 419.541168][T11665] netlink: 'syz.3.1151': attribute type 2 has an invalid length. [ 423.356265][T11736] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5640] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[11736] [ 423.718975][T11733] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1165'. [ 423.883227][T11736] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5640] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[11736] [ 424.069031][T11733] veth0_macvtap: left promiscuous mode [ 424.192771][T11733] macvtap0: entered promiscuous mode [ 424.253714][T11733] macvtap0: entered allmulticast mode [ 424.428854][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.441719][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.450718][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.461323][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.468352][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.475658][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.483522][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.490410][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.504595][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.512400][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.519318][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.527011][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.535756][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.543294][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.550704][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.557645][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.564971][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.571954][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.578850][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.585835][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.592903][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.599811][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.606794][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.614678][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.624382][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.632420][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.641088][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.648018][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.656617][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.664715][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.678484][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.685557][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.692525][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.701074][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.707991][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.715497][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.723939][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.734526][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.741611][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.749293][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.756306][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.765659][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.773306][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.780626][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.789024][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.796464][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.803805][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.811856][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.819063][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.826290][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.837304][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.845204][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.854484][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.861492][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.870122][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.877512][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.885225][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.893620][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.900609][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.907604][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.915004][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.922607][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.930072][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.942688][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 424.951205][ T4950] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 428.681947][T11846] synth uevent: /devices/virtual/tty/ttyr7: unknown uevent action string [ 428.733948][T11846] tty ttyr7: uevent: failed to send synthetic uevent: -22 [ 430.908662][T11866] bridge0: port 3(batadv0) entered blocking state [ 430.991770][T11866] bridge0: port 3(batadv0) entered disabled state [ 431.051348][T11866] batadv0: entered allmulticast mode [ 431.131156][T11866] batadv0: entered promiscuous mode [ 431.212331][T11866] bridge0: port 3(batadv0) entered blocking state [ 431.218948][T11866] bridge0: port 3(batadv0) entered forwarding state [ 431.274511][ T9265] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 431.284293][ T9265] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 431.969061][ T30] audit: type=1804 audit(2147483701.809:10): pid=11893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1193" name="/newroot/268/file0" dev="tmpfs" ino=1406 res=1 errno=0 [ 438.282662][T12012] FAULT_INJECTION: forcing a failure. [ 438.282662][T12012] name failslab, interval 1, probability 0, space 0, times 0 [ 438.370941][T12012] CPU: 0 UID: 0 PID: 12012 Comm: syz.1.1215 Tainted: G U L syzkaller #0 PREEMPT(full) [ 438.370982][T12012] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 438.370991][T12012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 438.371006][T12012] Call Trace: [ 438.371014][T12012] [ 438.371024][T12012] dump_stack_lvl+0x100/0x190 [ 438.371075][T12012] should_fail_ex.cold+0x5/0xa [ 438.371107][T12012] should_failslab+0xc2/0x120 [ 438.371141][T12012] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 438.371166][T12012] ? sk_prot_alloc+0x60/0x2a0 [ 438.371211][T12012] sk_prot_alloc+0x60/0x2a0 [ 438.371258][T12012] sk_alloc+0x36/0xe80 [ 438.371288][T12012] rds_create+0x9e/0x5f0 [ 438.371427][T12012] __sock_create+0x339/0x860 [ 438.371473][T12012] __sys_socket+0x14d/0x260 [ 438.371497][T12012] ? __pfx___sys_socket+0x10/0x10 [ 438.371529][T12012] __x64_sys_socket+0x72/0xb0 [ 438.371551][T12012] ? lockdep_hardirqs_on+0x78/0x100 [ 438.371576][T12012] do_syscall_64+0x115/0x840 [ 438.371599][T12012] ? clear_bhb_loop+0x40/0x90 [ 438.371630][T12012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.371655][T12012] RIP: 0033:0x7f4654d9ce59 [ 438.371675][T12012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.371700][T12012] RSP: 002b:00007f4655cd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 438.371725][T12012] RAX: ffffffffffffffda RBX: 00007f4655016090 RCX: 00007f4654d9ce59 [ 438.371741][T12012] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 438.371756][T12012] RBP: 00007f4654e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 438.371771][T12012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.371786][T12012] R13: 00007f4655016128 R14: 00007f4655016090 R15: 00007ffeae581df8 [ 438.371818][T12012] [ 439.666208][ T30] audit: type=1326 audit(2147483709.552:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12001 comm="syz.3.1213" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f164539ce59 code=0x0 [ 439.791761][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.798406][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.219112][T12062] ucma_write: process 1271 (syz.1.1226) changed security contexts after opening file descriptor, this is not allowed. [ 442.947710][ T4950] Bluetooth: hci3: unexpected event 0x1c length: 725 > 5 [ 444.257228][T12100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1235'. [ 445.140225][T12128] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 445.148330][T12128] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 445.322057][T12128] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1238'. [ 445.653067][T12128] hsr_slave_0: left promiscuous mode [ 445.698830][T12128] hsr_slave_1: left promiscuous mode [ 447.136130][T12153] netlink: 'syz.3.1242': attribute type 1 has an invalid length. [ 453.936213][T12221] Process accounting resumed [ 454.007057][T12241] kexec: Could not allocate control_code_buffer [ 454.443637][T12274] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1267'. [ 456.154212][T12294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1271'. [ 459.065453][T12298] can: request_module (can-proto-0) failed. [ 459.666364][T12354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1280'. [ 461.024847][T12376] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1283'. [ 466.502030][T12443] ima: policy update failed [ 466.535610][ T30] audit: type=1802 audit(2147483736.572:12): pid=12443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1296" res=0 errno=0 [ 468.391711][T12481] Invalid ELF header magic: != ELF [ 469.783314][ T30] audit: type=1804 audit(2147483739.840:13): pid=12512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1307" name="file0" dev="tmpfs" ino=1827 res=1 errno=0 [ 470.582315][T12526] syz.2.1312 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 472.489020][T12560] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1318'. [ 472.518754][T12550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1318'. [ 474.464449][ T30] audit: type=1804 audit(2147483744.547:14): pid=12601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1326" name="/newroot/298/file0" dev="tmpfs" ino=1561 res=1 errno=0 [ 474.761334][T12611] netlink: Unknown nat attribute (0) [ 475.263441][T12627] openvswitch: netlink: IP tunnel dst address not specified [ 475.301290][T12626] openvswitch: netlink: IP tunnel dst address not specified [ 479.920617][T12729] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1355'. [ 480.579144][T12737] random: crng reseeded on system resumption [ 480.729218][T12746] futex_wake_op: syz.3.1360 tries to shift op by -2048; fix this program [ 480.904704][ T4950] Bluetooth: hci3: unexpected event 0x10 length: 124 > 1 [ 480.907148][ T8660] Bluetooth: hci3: hardware error 0x00 [ 482.560663][T12756] Process accounting resumed [ 482.984761][ T8660] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 485.904337][T12851] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1379: iget: checksum invalid [ 486.149664][T12851] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 486.426539][T12856] random: crng reseeded on system resumption [ 486.433938][T12851] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1379: iget: checksum invalid [ 486.640731][T12851] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 486.729643][T12851] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1379: iget: checksum invalid [ 486.826031][T12851] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 486.860028][T12851] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1379: iget: checksum invalid [ 486.905414][T12851] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 486.951180][T12851] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 487.011369][T12851] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 487.290301][T12881] i2c i2c-0: new_device: Can't parse I2C address [ 487.552779][ T8660] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 487.945118][T12902] futex_wake_op: syz.0.1386 tries to shift op by -2048; fix this program [ 488.010053][T12903] futex_wake_op: syz.0.1386 tries to shift op by -2048; fix this program [ 488.514628][T12908] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5635] was attempted by ""[12908] [ 488.814567][T12912] FAULT_INJECTION: forcing a failure. [ 488.814567][T12912] name fail_futex, interval 1, probability 0, space 0, times 0 [ 488.992132][T12912] CPU: 0 UID: 0 PID: 12912 Comm: syz.1.1387 Tainted: G U L syzkaller #0 PREEMPT(full) [ 488.992175][T12912] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 488.992190][T12912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 488.992205][T12912] Call Trace: [ 488.992212][T12912] [ 488.992222][T12912] dump_stack_lvl+0x100/0x190 [ 488.992270][T12912] should_fail_ex.cold+0x5/0xa [ 488.992301][T12912] get_futex_key+0x1d2/0x1510 [ 488.992329][T12912] ? __pfx_get_futex_key+0x10/0x10 [ 488.992354][T12912] ? do_mmap+0x93f/0x12f0 [ 488.992387][T12912] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 488.992441][T12912] futex_wake+0xea/0x530 [ 488.992475][T12912] ? __pfx_futex_wake+0x10/0x10 [ 488.992520][T12912] do_futex+0x32b/0x350 [ 488.992547][T12912] ? __pfx_do_futex+0x10/0x10 [ 488.992576][T12912] ? fput+0x79/0x100 [ 488.992616][T12912] __x64_sys_futex+0x34f/0x4d0 [ 488.992646][T12912] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 488.992679][T12912] ? __pfx___x64_sys_futex+0x10/0x10 [ 488.992705][T12912] ? file_write_and_wait_range+0xa2/0x140 [ 488.992751][T12912] ? rcu_is_watching+0x12/0xc0 [ 488.992786][T12912] do_syscall_64+0x115/0x840 [ 488.992809][T12912] ? clear_bhb_loop+0x40/0x90 [ 488.992839][T12912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.992865][T12912] RIP: 0033:0x7f4654d9ce59 [ 488.992884][T12912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.992908][T12912] RSP: 002b:00007f4655cd40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 488.992931][T12912] RAX: ffffffffffffffda RBX: 00007f4655016098 RCX: 00007f4654d9ce59 [ 488.992948][T12912] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f465501609c [ 488.992963][T12912] RBP: 00007f4655016090 R08: 0000000000000001 R09: 0000000000000000 [ 488.992980][T12912] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 488.992996][T12912] R13: 00007f4655016128 R14: 00007ffeae581d10 R15: 00007ffeae581df8 [ 488.993026][T12912] [ 489.525332][T12934] openvswitch: netlink: Duplicate key (type 15). [ 489.598695][ T4950] Bluetooth: hci1: command 0x0c1a tx timeout [ 489.817596][T12934] random: crng reseeded on system resumption [ 489.899408][T12941] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1393'. [ 490.136220][T12945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'. [ 490.904909][T12968] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1396: iget: checksum invalid [ 490.993766][T12968] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 491.076651][T12968] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1396: iget: checksum invalid [ 491.129322][T12968] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 491.229243][T12968] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1396: iget: checksum invalid [ 491.363082][T12968] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 491.471664][T12968] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1396: iget: checksum invalid [ 491.524002][T12968] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 491.593677][T12968] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 491.642365][T12968] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 491.660906][ T4950] Bluetooth: hci1: command 0x0c1a tx timeout [ 492.267050][T12986] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1400: iget: checksum invalid [ 492.450727][T12986] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 492.703253][T12986] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1400: iget: checksum invalid [ 493.002740][T12986] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 493.241218][T12986] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1400: iget: checksum invalid [ 493.442584][T12986] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 493.560995][T12986] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1400: iget: checksum invalid [ 493.619613][T12986] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 493.673882][T12986] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 493.720880][T12986] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 494.268077][T13014] FAULT_INJECTION: forcing a failure. [ 494.268077][T13014] name fail_futex, interval 1, probability 0, space 0, times 0 [ 494.329597][T13014] CPU: 0 UID: 0 PID: 13014 Comm: syz.1.1406 Tainted: G U L syzkaller #0 PREEMPT(full) [ 494.329637][T13014] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 494.329645][T13014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 494.329659][T13014] Call Trace: [ 494.329666][T13014] [ 494.329674][T13014] dump_stack_lvl+0x100/0x190 [ 494.329719][T13014] should_fail_ex.cold+0x5/0xa [ 494.329750][T13014] get_futex_key+0x1d2/0x1510 [ 494.329779][T13014] ? __pfx_get_futex_key+0x10/0x10 [ 494.329811][T13014] futex_wake+0xea/0x530 [ 494.329841][T13014] ? __pfx___might_resched+0x10/0x10 [ 494.329893][T13014] ? __pfx_futex_wake+0x10/0x10 [ 494.329927][T13014] ? lockdep_init_map_type+0x5c/0x250 [ 494.329957][T13014] do_futex+0x32b/0x350 [ 494.329982][T13014] ? __pfx_do_futex+0x10/0x10 [ 494.330015][T13014] __x64_sys_futex+0x34f/0x4d0 [ 494.330042][T13014] ? fd_install+0x223/0x580 [ 494.330071][T13014] ? __pfx___x64_sys_futex+0x10/0x10 [ 494.330102][T13014] ? rcu_is_watching+0x12/0xc0 [ 494.330133][T13014] do_syscall_64+0x115/0x840 [ 494.330155][T13014] ? clear_bhb_loop+0x40/0x90 [ 494.330183][T13014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.330207][T13014] RIP: 0033:0x7f4654d9ce59 [ 494.330225][T13014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.330248][T13014] RSP: 002b:00007f4655cf50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 494.330270][T13014] RAX: ffffffffffffffda RBX: 00007f4655015fa8 RCX: 00007f4654d9ce59 [ 494.330285][T13014] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4655015fac [ 494.330299][T13014] RBP: 00007f4655015fa0 R08: 0000000000000001 R09: 0000000000000000 [ 494.330313][T13014] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 494.330327][T13014] R13: 00007f4655016038 R14: 00007ffeae581d10 R15: 00007ffeae581df8 [ 494.330356][T13014] [ 496.825691][T13063] random: crng reseeded on system resumption [ 498.065130][T13080] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1418: iget: checksum invalid [ 498.121743][T13080] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 498.221523][T13080] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1418: iget: checksum invalid [ 498.262066][T13080] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 498.297365][T13080] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1418: iget: checksum invalid [ 498.363948][T13080] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 498.414139][T13080] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1418: iget: checksum invalid [ 498.466124][T13080] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 498.535767][T13080] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 498.604370][T13080] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 498.886697][T13100] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1423'. [ 500.280752][T13126] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1427: iget: checksum invalid [ 500.374321][T13126] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 500.456003][T13135] netlink: 146 bytes leftover after parsing attributes in process `syz.2.1428'. [ 500.548438][T13126] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1427: iget: checksum invalid [ 500.663667][T13126] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 500.803277][T13126] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1427: iget: checksum invalid [ 500.885846][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.892344][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.933481][T13126] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 501.024248][T13126] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1427: iget: checksum invalid [ 501.091377][T13126] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 501.138327][T13126] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 501.183767][T13126] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 502.901432][T13175] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1434'. [ 503.882589][T13202] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1442'. [ 505.694746][T13226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1447'. [ 505.760575][T13226] veth1_macvtap: left promiscuous mode [ 505.790927][T13226] macsec0: entered promiscuous mode [ 505.831551][T13229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1447'. [ 505.880174][T13226] macsec0: entered allmulticast mode [ 508.068673][ T8660] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 508.483763][T13282] block nbd0: Unsupported socket: should be TCP or UNIX. [ 510.383599][T13317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1465'. [ 511.347608][ T8660] Bluetooth: hci2: unexpected event 0x14 length: 16 > 6 [ 512.893073][T13323] Process accounting paused [ 513.702253][T13385] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1479'. [ 517.326049][T13430] netlink: 'syz.1.1485': attribute type 1 has an invalid length. [ 522.611673][T13548] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5635] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[13548] [ 522.691324][T13545] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1511'. [ 522.735269][T13548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1512'. [ 522.778330][T13545] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1511'. [ 522.815387][T13548] veth0_macvtap: left promiscuous mode [ 522.831633][T13548] macvtap0: entered promiscuous mode [ 522.838674][T13548] macvtap0: entered allmulticast mode [ 523.817347][ T8660] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 526.165836][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1530'. [ 529.074699][T13657] Process accounting resumed [ 530.955747][T13732] FAULT_INJECTION: forcing a failure. [ 530.955747][T13732] name failslab, interval 1, probability 0, space 0, times 0 [ 531.050340][T13732] CPU: 0 UID: 0 PID: 13732 Comm: syz.1.1544 Tainted: G U L syzkaller #0 PREEMPT(full) [ 531.050384][T13732] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 531.050394][T13732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 531.050410][T13732] Call Trace: [ 531.050418][T13732] [ 531.050427][T13732] dump_stack_lvl+0x100/0x190 [ 531.050480][T13732] should_fail_ex.cold+0x5/0xa [ 531.050513][T13732] should_failslab+0xc2/0x120 [ 531.050546][T13732] __kmalloc_node_noprof+0xe6/0x850 [ 531.050572][T13732] ? load_msg+0x43/0x4a0 [ 531.050617][T13732] load_msg+0x43/0x4a0 [ 531.050645][T13732] do_msgsnd+0x1ad/0x1790 [ 531.050674][T13732] ? do_futex+0x192/0x350 [ 531.050700][T13732] ? __pfx_do_futex+0x10/0x10 [ 531.050731][T13732] ? __pfx_do_msgsnd+0x10/0x10 [ 531.050760][T13732] ? find_held_lock+0x2b/0x80 [ 531.050792][T13732] ? __might_fault+0xc5/0x140 [ 531.050814][T13732] ? __might_fault+0xc5/0x140 [ 531.050844][T13732] ? __x64_sys_msgsnd+0xe5/0x130 [ 531.050872][T13732] __x64_sys_msgsnd+0xe5/0x130 [ 531.050903][T13732] do_syscall_64+0x115/0x840 [ 531.050927][T13732] ? clear_bhb_loop+0x40/0x90 [ 531.050957][T13732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.050983][T13732] RIP: 0033:0x7f4654d9ce59 [ 531.051002][T13732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.051027][T13732] RSP: 002b:00007f4655cb3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 531.051050][T13732] RAX: ffffffffffffffda RBX: 00007f4655016180 RCX: 00007f4654d9ce59 [ 531.051067][T13732] RDX: 0000000000001000 RSI: 0000200000000040 RDI: 0000000000000000 [ 531.051082][T13732] RBP: 00007f4654e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 531.051097][T13732] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 531.051111][T13732] R13: 00007f4655016218 R14: 00007f4655016180 R15: 00007ffeae581df8 [ 531.051142][T13732] [ 531.518255][T13731] netlink: 'syz.2.1546': attribute type 33 has an invalid length. [ 531.545528][T13731] netlink: 322 bytes leftover after parsing attributes in process `syz.2.1546'. [ 532.314832][T13745] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 532.862186][T13756] random: crng reseeded on system resumption [ 533.216306][T13761] netlink: zone id is out of range [ 533.307150][T13761] netlink: zone id is out of range [ 533.397287][T13761] netlink: zone id is out of range [ 533.479728][T13761] netlink: zone id is out of range [ 533.569032][T13761] netlink: zone id is out of range [ 533.618876][T13780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1556'. [ 533.629665][T13761] netlink: zone id is out of range [ 533.673958][T13761] netlink: zone id is out of range [ 533.729336][T13761] netlink: zone id is out of range [ 533.775703][T13786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1556'. [ 533.784844][T13761] netlink: zone id is out of range [ 533.824302][T13761] netlink: zone id is out of range [ 535.111278][T13778] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5635] was attempted by ""[13778] [ 537.617068][T13861] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1572'. [ 537.763362][T13861] ipvlan1: entered promiscuous mode [ 537.811972][T13861] ipvlan1: entered allmulticast mode [ 537.865416][T13861] veth0_vlan: entered allmulticast mode [ 538.736104][T13882] netlink: 'syz.0.1577': attribute type 1 has an invalid length. [ 538.760122][T13882] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1577'. [ 539.829065][T13899] Invalid ELF header magic: != ELF [ 543.050812][T13959] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1591'. [ 544.452323][T13966] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5644] was attempted by ""[13966] [ 544.782868][T13990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1599'. [ 544.825575][T13987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1599'. [ 544.919302][T13993] netlink: 346 bytes leftover after parsing attributes in process `syz.1.1600'. [ 545.256947][T13997] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1601'. [ 545.359951][T13997] usb usb15: usbfs: interface 0 claimed by hub while 'syz.1.1601' sets config #0 [ 548.928602][T14082] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1620: iget: checksum invalid [ 549.179952][T14082] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 549.377896][T14082] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1620: iget: checksum invalid [ 549.550035][T14082] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 549.668433][T14082] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1620: iget: checksum invalid [ 549.777264][T14082] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 549.919387][T14082] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1620: iget: checksum invalid [ 550.052284][T14082] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 550.155122][T14082] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 550.299844][T14082] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 558.399975][T14222] netlink: 384 bytes leftover after parsing attributes in process `syz.0.1650'. [ 559.241312][T14216] Process accounting paused [ 562.003359][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.018183][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.252127][T14285] net_ratelimit: 47 callbacks suppressed [ 562.252148][T14285] openvswitch: netlink: IP tunnel attribute has 24 unknown bytes. [ 562.727003][T14296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1663'. [ 562.796576][T14296] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.871911][T14296] bridge_slave_0 (unregistering): left allmulticast mode [ 562.904651][T14296] bridge_slave_0 (unregistering): left promiscuous mode [ 562.944032][T14296] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.806919][T14351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1676'. [ 565.898020][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1676'. [ 567.561519][T14388] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1681'. [ 567.958143][T14397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1682'. [ 570.002443][T14419] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1686'. [ 570.190655][T14421] random: crng reseeded on system resumption [ 571.809864][ T8660] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 571.809896][ T8660] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 571.824950][ T8660] Bluetooth: hci1: Dropping invalid advertising data [ 571.832038][ T8660] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 571.832069][ T8660] Bluetooth: hci1: Dropping invalid advertising data [ 571.847441][ T8660] Bluetooth: hci1: Malformed LE Event: 0x02 [ 571.941939][ T8660] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 571.941971][ T8660] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 571.958838][ T8660] Bluetooth: hci1: Dropping invalid advertising data [ 571.965818][ T8660] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 571.965851][ T8660] Bluetooth: hci1: Dropping invalid advertising data [ 571.981441][ T8660] Bluetooth: hci1: Malformed LE Event: 0x02 [ 574.992813][T14498] pim6reg: entered allmulticast mode [ 575.164668][T14504] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1703'. [ 575.179217][T14505] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 578.988644][T14553] ima: policy update failed [ 579.041153][ T30] audit: type=1802 audit(2147483849.677:15): pid=14553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1714" res=0 errno=0 [ 579.831307][ T8660] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 581.897272][T14582] Bluetooth: hci2: command 0x0c1a tx timeout [ 583.966686][ T8660] Bluetooth: hci2: command 0x0c1a tx timeout [ 584.425053][T14659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1731'. [ 585.205832][T14675] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1734: iget: checksum invalid [ 585.368096][T14675] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 585.481447][T14675] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1734: iget: checksum invalid [ 585.580916][T14675] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 585.687942][T14675] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1734: iget: checksum invalid [ 585.907264][T14675] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 586.087622][T14675] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1734: iget: checksum invalid [ 586.202117][T14675] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 586.312586][T14675] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 586.364333][T14675] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 587.306411][T14701] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input36 [ 587.436523][T14701] FAULT_INJECTION: forcing a failure. [ 587.436523][T14701] name failslab, interval 1, probability 0, space 0, times 0 [ 587.645983][T14701] CPU: 0 UID: 0 PID: 14701 Comm: syz.1.1739 Tainted: G U L syzkaller #0 PREEMPT(full) [ 587.646033][T14701] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 587.646042][T14701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 587.646058][T14701] Call Trace: [ 587.646065][T14701] [ 587.646074][T14701] dump_stack_lvl+0x100/0x190 [ 587.646124][T14701] should_fail_ex.cold+0x5/0xa [ 587.646157][T14701] should_failslab+0xc2/0x120 [ 587.646191][T14701] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 587.646216][T14701] ? __kernfs_new_node+0xd2/0xa10 [ 587.646259][T14701] __kernfs_new_node+0xd2/0xa10 [ 587.646299][T14701] ? __pfx___kernfs_new_node+0x10/0x10 [ 587.646342][T14701] ? find_held_lock+0x2b/0x80 [ 587.646375][T14701] ? kernfs_root+0xee/0x2a0 [ 587.646405][T14701] ? kernfs_root+0xee/0x2a0 [ 587.646444][T14701] kernfs_new_node+0x117/0x150 [ 587.646486][T14701] __kernfs_create_file+0x53/0x350 [ 587.646514][T14701] sysfs_add_file_mode_ns+0x207/0x3c0 [ 587.646552][T14701] sysfs_merge_group+0x194/0x340 [ 587.646587][T14701] ? __pfx_sysfs_merge_group+0x10/0x10 [ 587.646620][T14701] ? bus_add_device+0x368/0x6b0 [ 587.646647][T14701] ? __pfx_bus_add_device+0x10/0x10 [ 587.646669][T14701] ? __pfx_dev_add_physical_location+0x10/0x10 [ 587.646778][T14701] dpm_sysfs_add+0x237/0x280 [ 587.646848][T14701] device_add+0x9ef/0x1950 [ 587.646888][T14701] ? __pfx_device_add+0x10/0x10 [ 587.646926][T14701] ? kobject_get+0xbb/0x150 [ 587.646961][T14701] cdev_device_add+0x12b/0x270 [ 587.647004][T14701] evdev_connect+0x3a8/0x4b0 [ 587.647077][T14701] input_attach_handler.isra.0+0x177/0x1e0 [ 587.647126][T14701] input_register_device.cold+0x139/0x375 [ 587.647175][T14701] uinput_ioctl_handler.isra.0+0x8d8/0x1d20 [ 587.647220][T14701] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 587.647254][T14701] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 587.647305][T14701] ? find_held_lock+0x2b/0x80 [ 587.647337][T14701] ? __fget_files+0x215/0x3d0 [ 587.647381][T14701] ? __pfx_uinput_ioctl+0x10/0x10 [ 587.647417][T14701] __x64_sys_ioctl+0x18e/0x210 [ 587.647451][T14701] do_syscall_64+0x115/0x840 [ 587.647475][T14701] ? clear_bhb_loop+0x40/0x90 [ 587.647506][T14701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.647531][T14701] RIP: 0033:0x7f4654d9ce59 [ 587.647552][T14701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.647577][T14701] RSP: 002b:00007f4655cf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.647602][T14701] RAX: ffffffffffffffda RBX: 00007f4655015fa0 RCX: 00007f4654d9ce59 [ 587.647618][T14701] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 587.647633][T14701] RBP: 00007f4654e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 587.647648][T14701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.647663][T14701] R13: 00007f4655016038 R14: 00007f4655015fa0 R15: 00007ffeae581df8 [ 587.647695][T14701] [ 588.081890][T14717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1742'. [ 590.577270][T14750] netlink: 'syz.0.1747': attribute type 4 has an invalid length. [ 591.126913][T14701] input: failed to attach handler evdev to device input36, error: -12 [ 591.273613][T14701] Process accounting resumed [ 593.369628][T14810] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1757'. [ 594.474522][T14831] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1762: iget: checksum invalid [ 594.595579][T14831] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 594.713333][T14831] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1762: iget: checksum invalid [ 594.819292][T14831] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 594.896462][T14831] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1762: iget: checksum invalid [ 594.979227][T14831] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 595.055454][T14831] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1762: iget: checksum invalid [ 595.157062][T14831] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 595.214145][T14831] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 595.241392][T14820] Process accounting resumed [ 595.264615][T14831] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 598.558731][T14884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1773'. [ 600.980164][T14922] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1782'. [ 601.063739][T14925] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1782'. [ 604.131922][T14974] futex_wake_op: syz.2.1790 tries to shift op by -2048; fix this program [ 608.604993][T15055] random: crng reseeded on system resumption [ 609.053253][T15044] hub 1-0:1.0: USB hub found [ 609.105742][T15044] hub 1-0:1.0: 1 port detected [ 610.929064][T15094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1815'. [ 610.955513][T15100] futex_wake_op: syz.2.1817 tries to shift op by -2048; fix this program [ 611.002604][T15100] futex_wake_op: syz.2.1817 tries to shift op by -2048; fix this program [ 622.858207][T15211] capability: warning: `syz.1.1835' uses deprecated v2 capabilities in a way that may be insecure [ 623.129985][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.138956][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.905259][T15219] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 624.031235][T15219] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 624.165328][T15219] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 624.517127][T15229] sysfs_service_op_store: Client not running :-5: [ 624.782669][ T8660] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 624.795359][ T8660] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 624.806562][ T8660] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 624.816920][ T8660] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 624.829898][ T8660] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 625.633583][T15228] Process accounting paused [ 626.747715][T15271] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1844'. [ 626.867745][T14582] Bluetooth: hci4: command tx timeout [ 627.959424][T14582] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 628.258420][T15232] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.280139][T15232] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.304022][T15232] bridge_slave_0: entered allmulticast mode [ 628.327691][T15232] bridge_slave_0: entered promiscuous mode [ 628.364982][T15232] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.390417][T15232] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.411621][T15232] bridge_slave_1: entered allmulticast mode [ 628.437298][T15232] bridge_slave_1: entered promiscuous mode [ 628.664688][T15232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.711138][T15232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.937414][T14582] Bluetooth: hci4: command tx timeout [ 629.188601][T15232] team0: Port device team_slave_0 added [ 629.213992][T15232] team0: Port device team_slave_1 added [ 629.588260][T15232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.612142][T15232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.699666][T15232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.872780][T15298] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1848: iget: checksum invalid [ 629.894737][T15232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.915637][T15232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 629.991560][T15298] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 630.007046][T15232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 630.090520][T15298] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1848: iget: checksum invalid [ 630.168570][T15298] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 630.247646][T15298] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1848: iget: checksum invalid [ 630.332238][T15298] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 630.415543][T15298] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1848: iget: checksum invalid [ 630.510764][T15298] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 630.612668][T15298] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 630.667446][T15232] hsr_slave_0: entered promiscuous mode [ 630.693602][T15232] hsr_slave_1: entered promiscuous mode [ 630.713609][T15232] debugfs: 'hsr0' already exists in 'hsr' [ 630.729546][T15298] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 630.738434][T15232] Cannot create hsr debugfs directory [ 631.007901][T14582] Bluetooth: hci4: command tx timeout [ 631.628528][T15232] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 631.682025][T15232] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 631.708965][T15232] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 631.742327][T15232] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 631.767955][T15232] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 631.820509][T15232] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 631.845082][T15232] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 631.885642][T15232] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 632.184382][T15232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.270887][T15232] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.308433][T10336] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.315667][T10336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.385027][T10336] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.392268][T10336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.078625][T14582] Bluetooth: hci4: command tx timeout [ 633.119944][T15324] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1850'. [ 633.240351][T15312] syz_tun: tun_chr_ioctl cmd 1074812117 [ 633.886491][T15232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.721890][T15232] veth0_vlan: entered promiscuous mode [ 634.776040][T15232] veth1_vlan: entered promiscuous mode [ 634.879723][T15232] veth0_macvtap: entered promiscuous mode [ 634.921741][T15232] veth1_macvtap: entered promiscuous mode [ 634.989407][T15232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 635.032805][T15232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.101302][T10336] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.133287][T10336] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.182510][T10336] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.214049][T10336] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.529389][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.568594][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.690929][T10336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.727238][T10336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.754758][T15352] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1839'. [ 637.288132][T15365] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1855'. [ 639.860067][T15392] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1859'. [ 639.938829][T15392] IPv6: NLM_F_CREATE should be specified when creating new route [ 639.998221][T15392] IPv6: Can't replace route, no match found [ 640.582121][T15407] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1862'. [ 640.644361][T15414] netlink: 266 bytes leftover after parsing attributes in process `syz.2.1865'. [ 640.665751][T15414] IPv6: NLM_F_CREATE should be specified when creating new route [ 640.723580][T15415] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1862'. [ 641.529589][ T8660] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 641.548290][ T8660] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 641.563485][ T8660] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 641.582206][ T8660] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 641.591892][ T8660] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 642.766429][T15461] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 643.662385][T14582] Bluetooth: hci5: command tx timeout [ 645.280821][T15434] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.322428][T15434] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.358908][T15434] bridge_slave_0: entered allmulticast mode [ 645.393401][T15434] bridge_slave_0: entered promiscuous mode [ 645.429571][T15434] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.467102][T15434] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.496677][T15434] bridge_slave_1: entered allmulticast mode [ 645.530724][T15434] bridge_slave_1: entered promiscuous mode [ 645.690611][T15434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.732919][T14582] Bluetooth: hci5: command tx timeout [ 645.852139][T15434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.110013][T15434] team0: Port device team_slave_0 added [ 646.163509][T15434] team0: Port device team_slave_1 added [ 646.413221][T15434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.446170][T15434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.565759][T15434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.592895][T15520] FAULT_INJECTION: forcing a failure. [ 646.592895][T15520] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 646.631237][T15434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.658360][T15434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.739189][T15520] CPU: 0 UID: 0 PID: 15520 Comm: syz.4.1879 Tainted: G U L syzkaller #0 PREEMPT(full) [ 646.739232][T15520] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 646.739242][T15520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 646.739257][T15520] Call Trace: [ 646.739266][T15520] [ 646.739274][T15520] dump_stack_lvl+0x100/0x190 [ 646.739323][T15520] should_fail_ex.cold+0x5/0xa [ 646.739350][T15520] ? prepare_alloc_pages+0x16d/0x5f0 [ 646.739387][T15520] should_fail_alloc_page+0xeb/0x140 [ 646.739421][T15520] prepare_alloc_pages+0x1f0/0x5f0 [ 646.739461][T15520] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 646.739494][T15520] ? rcu_is_watching+0x12/0xc0 [ 646.739525][T15520] ? trace_mm_page_alloc+0x163/0x1d0 [ 646.739560][T15520] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 646.739586][T15520] ? orc_sort_cmp+0xd1/0x120 [ 646.739616][T15520] ? arch_stack_walk+0xa6/0xf0 [ 646.739646][T15520] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 646.739686][T15520] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 646.739713][T15520] ? stack_depot_save_flags+0x27/0x9d0 [ 646.739833][T15520] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 646.739858][T15520] ? pcpu_create_chunk+0x254/0x730 [ 646.739892][T15520] ? kasan_save_stack+0x3f/0x50 [ 646.739918][T15520] ? kasan_save_stack+0x30/0x50 [ 646.739951][T15520] alloc_pages_bulk_noprof+0x649/0x1360 [ 646.739985][T15520] ? policy_nodemask+0xed/0x4f0 [ 646.740020][T15520] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 646.740063][T15520] __kasan_populate_vmalloc+0xf0/0x210 [ 646.740097][T15520] pcpu_get_vm_areas+0x2df1/0x55d0 [ 646.740152][T15520] ? __pfx_pcpu_get_vm_areas+0x10/0x10 [ 646.740192][T15520] pcpu_create_chunk+0x254/0x730 [ 646.740222][T15520] pcpu_alloc_noprof+0x182c/0x1cc0 [ 646.740261][T15520] bpf_map_alloc_percpu+0x9a/0xf0 [ 646.740310][T15520] ? __pfx_bpf_map_alloc_percpu+0x10/0x10 [ 646.740351][T15520] ? __pfx___might_resched+0x10/0x10 [ 646.740379][T15520] ? __bpf_map_area_alloc+0x13a/0x200 [ 646.740410][T15520] htab_map_alloc+0x1054/0x14e0 [ 646.740452][T15520] ? ns_capable+0xd2/0xf0 [ 646.740483][T15520] ? __pfx_htab_map_mem_usage+0x10/0x10 [ 646.740520][T15520] map_create+0x84e/0x2bc0 [ 646.740556][T15520] ? futex_unqueue+0x13d/0x2c0 [ 646.740582][T15520] ? __futex_wait+0x256/0x300 [ 646.740621][T15520] ? __pfx_map_create+0x10/0x10 [ 646.740658][T15520] ? __might_fault+0xc5/0x140 [ 646.740680][T15520] ? __might_fault+0xc5/0x140 [ 646.740714][T15520] __sys_bpf+0x2091/0x4b90 [ 646.740743][T15520] ? __pfx___sys_bpf+0x10/0x10 [ 646.740768][T15520] ? __pfx_futex_wait+0x10/0x10 [ 646.740806][T15520] ? do_writev+0x214/0x340 [ 646.740842][T15520] ? do_futex+0x192/0x350 [ 646.740891][T15520] ? xfd_validate_state+0x129/0x190 [ 646.740924][T15520] __x64_sys_bpf+0x7b/0xc0 [ 646.740949][T15520] ? lockdep_hardirqs_on+0x78/0x100 [ 646.740974][T15520] do_syscall_64+0x115/0x840 [ 646.740996][T15520] ? clear_bhb_loop+0x40/0x90 [ 646.741027][T15520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.741053][T15520] RIP: 0033:0x7f73d9d9ce59 [ 646.741073][T15520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.741097][T15520] RSP: 002b:00007f73dac9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 646.741121][T15520] RAX: ffffffffffffffda RBX: 00007f73da015fa0 RCX: 00007f73d9d9ce59 [ 646.741137][T15520] RDX: 00000000000000a3 RSI: 0000200000000780 RDI: 0000000000000000 [ 646.741152][T15520] RBP: 00007f73d9e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 646.741167][T15520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 646.741182][T15520] R13: 00007f73da016038 R14: 00007f73da015fa0 R15: 00007fff1bac6bd8 [ 646.741214][T15520] [ 647.499252][T15434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.788955][T15434] hsr_slave_0: entered promiscuous mode [ 647.813159][T15434] hsr_slave_1: entered promiscuous mode [ 647.822888][T15434] debugfs: 'hsr0' already exists in 'hsr' [ 647.836245][T15434] Cannot create hsr debugfs directory [ 647.850685][T14582] Bluetooth: hci5: command tx timeout [ 648.762641][T15434] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 648.820539][T15434] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 648.859127][T15434] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 648.909860][T15434] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 648.997982][T15434] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 649.112366][T15434] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 649.152198][T15434] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 649.197606][T15434] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 649.871085][T14582] Bluetooth: hci5: command tx timeout [ 649.976835][T15434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.071455][T15434] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.135593][T10336] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.142805][T10336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 650.233717][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.240949][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.657533][T15434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.871903][T15434] veth0_vlan: entered promiscuous mode [ 653.932627][T15434] veth1_vlan: entered promiscuous mode [ 654.071364][T15434] veth0_macvtap: entered promiscuous mode [ 654.123691][T15434] veth1_macvtap: entered promiscuous mode [ 654.219759][T15434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.279438][T15434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.357292][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.406480][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.467768][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.513230][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.024304][T15603] pci 0000:00:00.0: MSI/MSI-X allowed for future drivers [ 655.078257][T15605] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 655.126776][T10336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.181239][T10336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.300628][T15605] FAULT_INJECTION: forcing a failure. [ 655.300628][T15605] name failslab, interval 1, probability 0, space 0, times 0 [ 655.377958][ T9264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 655.410577][ T9264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 655.434479][T15605] CPU: 0 UID: 0 PID: 15605 Comm: syz.4.1892 Tainted: G U L syzkaller #0 PREEMPT(full) [ 655.434522][T15605] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 655.434532][T15605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 655.434547][T15605] Call Trace: [ 655.434554][T15605] [ 655.434563][T15605] dump_stack_lvl+0x100/0x190 [ 655.434613][T15605] should_fail_ex.cold+0x5/0xa [ 655.434646][T15605] should_failslab+0xc2/0x120 [ 655.434680][T15605] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 655.434706][T15605] ? ptlock_alloc+0x1f/0x70 [ 655.434750][T15605] ? __pfx_filemap_map_pages+0x10/0x10 [ 655.434775][T15605] ptlock_alloc+0x1f/0x70 [ 655.434814][T15605] pte_alloc_one+0x82/0x3d0 [ 655.434849][T15605] __do_fault+0x26c/0x440 [ 655.434879][T15605] do_fault+0x2db/0x1750 [ 655.434913][T15605] ? __pmd_alloc+0x3fb/0x950 [ 655.434949][T15605] __handle_mm_fault+0x187d/0x2a00 [ 655.434995][T15605] ? mt_find+0x45e/0x8e0 [ 655.435025][T15605] ? __pfx___handle_mm_fault+0x10/0x10 [ 655.435064][T15605] ? __pfx_mt_find+0x10/0x10 [ 655.435105][T15605] ? find_vma+0xbf/0x140 [ 655.435134][T15605] ? __pfx_find_vma+0x10/0x10 [ 655.435168][T15605] handle_mm_fault+0x37b/0xa30 [ 655.435214][T15605] do_user_addr_fault+0x74c/0x12f0 [ 655.435247][T15605] ? trace_page_fault_kernel+0x7a/0x200 [ 655.435278][T15605] exc_page_fault+0x6f/0xd0 [ 655.435328][T15605] asm_exc_page_fault+0x26/0x30 [ 655.435353][T15605] RIP: 0010:__put_user_8+0xd/0x20 [ 655.435376][T15605] Code: 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca e9 46 d9 03 00 66 0f 1f 44 00 00 90 90 90 [ 655.435400][T15605] RSP: 0018:ffffc90006477ed8 EFLAGS: 00050246 [ 655.435420][T15605] RAX: 0000000000000018 RBX: 0000000000000000 RCX: 0000000000000000 [ 655.435435][T15605] RDX: 0000000000080000 RSI: ffffffff82581231 RDI: ffffffff8c1c6500 [ 655.435451][T15605] RBP: 0000000000000000 R08: 0000000000000001 R09: 00000000000001cb [ 655.435466][T15605] R10: 0000000000000200 R11: 0000000000000000 R12: 00007f73dac7b9a0 [ 655.435481][T15605] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000112 [ 655.435508][T15605] ? __might_fault+0x111/0x140 [ 655.435537][T15605] __x64_sys_get_robust_list+0xbf/0x150 [ 655.435569][T15605] do_syscall_64+0x115/0x840 [ 655.435591][T15605] ? clear_bhb_loop+0x40/0x90 [ 655.435621][T15605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.435646][T15605] RIP: 0033:0x7f73d9d9ce59 [ 655.435664][T15605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.435689][T15605] RSP: 002b:00007f73dac7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000112 [ 655.435710][T15605] RAX: ffffffffffffffda RBX: 00007f73da016090 RCX: 00007f73d9d9ce59 [ 655.435727][T15605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 655.435742][T15605] RBP: 00007f73d9e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 655.435757][T15605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.435771][T15605] R13: 00007f73da016128 R14: 00007f73da016090 R15: 00007fff1bac6bd8 [ 655.435802][T15605] [ 656.559362][T15618] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 656.751226][T15621] serio: Serial port ttyS0 [ 656.795998][T15623] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1895'. [ 662.895935][T15677] serio: Serial port ttyS0 [ 665.220623][T15709] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1911: iget: checksum invalid [ 665.316244][T15709] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 665.335162][T15706] FAULT_INJECTION: forcing a failure. [ 665.335162][T15706] name failslab, interval 1, probability 0, space 0, times 0 [ 665.380701][T15706] CPU: 0 UID: 0 PID: 15706 Comm: syz.4.1909 Tainted: G U L syzkaller #0 PREEMPT(full) [ 665.380745][T15706] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 665.380758][T15706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 665.380772][T15706] Call Trace: [ 665.380781][T15706] [ 665.380790][T15706] dump_stack_lvl+0x100/0x190 [ 665.380849][T15706] should_fail_ex.cold+0x5/0xa [ 665.380881][T15706] ? get_callchain_buffers+0x123/0x380 [ 665.380916][T15706] should_failslab+0xc2/0x120 [ 665.380947][T15706] __kmalloc_noprof+0xe0/0x850 [ 665.380973][T15706] ? rcu_is_cpu_rrupt_from_idle+0x200/0x270 [ 665.381011][T15706] get_callchain_buffers+0x123/0x380 [ 665.381047][T15706] ? bpf_lsm_capable+0x9/0x10 [ 665.381076][T15706] ? security_capable+0x80/0x260 [ 665.381109][T15706] stack_map_alloc+0x316/0x610 [ 665.381142][T15706] ? __pfx_stack_map_mem_usage+0x10/0x10 [ 665.381173][T15706] map_create+0x84e/0x2bc0 [ 665.381212][T15706] ? futex_unqueue+0x13d/0x2c0 [ 665.381237][T15706] ? __futex_wait+0x256/0x300 [ 665.381276][T15706] ? __pfx_map_create+0x10/0x10 [ 665.381313][T15706] ? __might_fault+0xc5/0x140 [ 665.381336][T15706] ? __might_fault+0xc5/0x140 [ 665.381370][T15706] __sys_bpf+0x2091/0x4b90 [ 665.381399][T15706] ? __pfx___sys_bpf+0x10/0x10 [ 665.381423][T15706] ? __pfx_futex_wait+0x10/0x10 [ 665.381462][T15706] ? ksys_write+0x190/0x250 [ 665.381502][T15706] ? do_futex+0x192/0x350 [ 665.381544][T15706] ? xfd_validate_state+0x129/0x190 [ 665.381577][T15706] __x64_sys_bpf+0x7b/0xc0 [ 665.381602][T15706] ? lockdep_hardirqs_on+0x78/0x100 [ 665.381627][T15706] do_syscall_64+0x115/0x840 [ 665.381649][T15706] ? clear_bhb_loop+0x40/0x90 [ 665.381680][T15706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.381705][T15706] RIP: 0033:0x7f73d9d9ce59 [ 665.381725][T15706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.381750][T15706] RSP: 002b:00007f73dac7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 665.381774][T15706] RAX: ffffffffffffffda RBX: 00007f73da016090 RCX: 00007f73d9d9ce59 [ 665.381791][T15706] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000 [ 665.381806][T15706] RBP: 00007f73d9e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 665.381826][T15706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 665.381841][T15706] R13: 00007f73da016128 R14: 00007f73da016090 R15: 00007fff1bac6bd8 [ 665.381873][T15706] [ 665.889305][T15709] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1911: iget: checksum invalid [ 665.913050][T15709] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 665.965807][T15709] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1911: iget: checksum invalid [ 666.044598][T15709] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 666.104014][T15709] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1911: iget: checksum invalid [ 666.189877][T15709] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 666.224335][T15709] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 666.308314][T15709] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 671.893443][ T8660] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 671.915176][ T8660] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 671.925754][ T8660] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 671.943918][ T8660] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 671.956153][ T8660] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 673.317149][T15799] FAULT_INJECTION: forcing a failure. [ 673.317149][T15799] name failslab, interval 1, probability 0, space 0, times 0 [ 673.389548][T15799] CPU: 0 UID: 0 PID: 15799 Comm: syz.5.1929 Tainted: G U L syzkaller #0 PREEMPT(full) [ 673.389591][T15799] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 673.389600][T15799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 673.389616][T15799] Call Trace: [ 673.389623][T15799] [ 673.389632][T15799] dump_stack_lvl+0x100/0x190 [ 673.389682][T15799] should_fail_ex.cold+0x5/0xa [ 673.389712][T15799] ? __register_sysctl_table+0xac/0x1650 [ 673.389752][T15799] should_failslab+0xc2/0x120 [ 673.389784][T15799] __kmalloc_noprof+0xe0/0x850 [ 673.389816][T15799] __register_sysctl_table+0xac/0x1650 [ 673.389854][T15799] ? is_module_address+0x5f/0xf0 [ 673.389885][T15799] ? __pfx___register_sysctl_table+0x10/0x10 [ 673.389923][T15799] ? is_module_address+0x69/0xf0 [ 673.389947][T15799] ? register_net_sysctl_sz+0x222/0x430 [ 673.390066][T15799] __devinet_sysctl_register+0x1b9/0x360 [ 673.390118][T15799] ? trace_kmalloc+0xe3/0x110 [ 673.390151][T15799] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 673.390200][T15799] ? __asan_memcpy+0x3c/0x60 [ 673.390226][T15799] devinet_init_net+0x334/0x8d0 [ 673.390252][T15799] ? __pfx_devinet_init_net+0x10/0x10 [ 673.390276][T15799] ops_init+0x1e2/0x5f0 [ 673.390312][T15799] setup_net+0x118/0x3a0 [ 673.390345][T15799] ? __pfx_setup_net+0x10/0x10 [ 673.390379][T15799] ? mutex_init_lockdep+0xf1/0x120 [ 673.390409][T15799] copy_net_ns+0x46f/0x7c0 [ 673.390447][T15799] create_new_namespaces+0x3ea/0xac0 [ 673.390488][T15799] unshare_nsproxy_namespaces+0xf2/0x220 [ 673.390523][T15799] ksys_unshare+0x438/0xab0 [ 673.390561][T15799] ? __pfx_ksys_unshare+0x10/0x10 [ 673.390596][T15799] ? xfd_validate_state+0x129/0x190 [ 673.390619][T15799] ? exit_to_user_mode_loop+0xf3/0x670 [ 673.390653][T15799] __x64_sys_unshare+0x31/0x40 [ 673.390689][T15799] do_syscall_64+0x115/0x840 [ 673.390712][T15799] ? clear_bhb_loop+0x40/0x90 [ 673.390742][T15799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.390768][T15799] RIP: 0033:0x7f4ca659ce59 [ 673.390789][T15799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.390814][T15799] RSP: 002b:00007f4ca750a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 673.390838][T15799] RAX: ffffffffffffffda RBX: 00007f4ca6815fa0 RCX: 00007f4ca659ce59 [ 673.390855][T15799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 673.390870][T15799] RBP: 00007f4ca6632d6f R08: 0000000000000000 R09: 0000000000000000 [ 673.390884][T15799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.390899][T15799] R13: 00007f4ca6816038 R14: 00007f4ca6815fa0 R15: 00007ffc52ce48e8 [ 673.390930][T15799] [ 674.114295][ T8660] Bluetooth: hci6: command tx timeout [ 674.691734][T15840] netlink: 186 bytes leftover after parsing attributes in process `syz.4.1935'. [ 675.903945][T15802] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.932407][T15802] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.954717][T15802] bridge_slave_0: entered allmulticast mode [ 675.981614][T15802] bridge_slave_0: entered promiscuous mode [ 676.077818][T15802] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.101016][T15802] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.127366][T15802] bridge_slave_1: entered allmulticast mode [ 676.136496][T14582] Bluetooth: hci6: command tx timeout [ 676.163223][T15802] bridge_slave_1: entered promiscuous mode [ 676.297975][T15802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.354168][T15802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.568348][T15802] team0: Port device team_slave_0 added [ 676.609448][T15802] team0: Port device team_slave_1 added [ 676.763337][T15802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.797619][T15802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.906622][T15802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.977790][T15802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.001653][T15802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.106697][T15802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.143061][T14582] Bluetooth: hci2: SCO packet too small [ 677.436167][T15802] hsr_slave_0: entered promiscuous mode [ 677.461839][T15802] hsr_slave_1: entered promiscuous mode [ 677.487487][T15802] debugfs: 'hsr0' already exists in 'hsr' [ 677.512186][T15802] Cannot create hsr debugfs directory [ 677.838520][T15871] netlink: 354 bytes leftover after parsing attributes in process `syz.4.1942'. [ 678.205938][T14582] Bluetooth: hci6: command tx timeout [ 679.040737][T15871] kexec: Could not allocate control_code_buffer [ 679.276483][ T30] audit: type=1800 audit(2147483678.127:16): pid=15881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1944" name="dbroot" dev="configfs" ino=59070 res=0 errno=0 [ 679.501918][T15878] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 679.634070][T15802] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 679.700707][T15802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 679.747062][T15802] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 679.781243][T15802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 679.813833][T15802] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 679.846837][T15802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 679.921558][T15802] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 679.975772][T15802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 680.033848][T15889] Console: switching to colour VGA+ 80x25 [ 680.277099][T14582] Bluetooth: hci6: command tx timeout [ 680.512352][T15802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.633925][T15901] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1947'. [ 680.672265][T15802] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.757050][T10336] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.764295][T10336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.843446][T10336] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.850693][T10336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.288857][T15911] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1949'. [ 682.089855][T15930] netlink: 'syz.4.1953': attribute type 1 has an invalid length. [ 682.130644][T15930] netlink: 33 bytes leftover after parsing attributes in process `syz.4.1953'. [ 683.189515][T15802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.257625][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 684.273080][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 684.573149][T15802] veth0_vlan: entered promiscuous mode [ 684.581324][T15958] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 684.606014][T15958] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 684.648633][T15958] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 684.696446][T15958] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 684.732247][T15958] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 684.788751][T15958] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 684.848920][T15958] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 684.879323][T15958] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 684.956850][T15802] veth1_vlan: entered promiscuous mode [ 684.978016][T15958] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 685.028616][T15958] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 685.077419][T15958] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 685.153156][T15958] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 685.187580][T15802] veth0_macvtap: entered promiscuous mode [ 685.248915][T15802] veth1_macvtap: entered promiscuous mode [ 685.357500][T15802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.444003][T15802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.523422][ T48] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.566035][ T48] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.622785][ T48] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.666263][ T48] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.086360][T14582] Bluetooth: hci0: command 0x0c1a tx timeout [ 686.122628][ T9260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.122673][ T9260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.314141][T10336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.314165][T10336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.644290][T14582] Bluetooth: hci1: command 0x0c1a tx timeout [ 686.724754][T14582] Bluetooth: hci4: command 0x0c1a tx timeout [ 686.730853][ T8660] Bluetooth: hci2: command 0x0c1a tx timeout [ 686.781699][T15992] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1927'. [ 686.883504][T14582] Bluetooth: hci5: command 0x0c1a tx timeout [ 687.041009][T14582] Bluetooth: hci6: command 0x0c1a tx timeout [ 688.792798][T14582] Bluetooth: hci4: command 0x0c1a tx timeout [ 688.951517][T14582] Bluetooth: hci5: command 0x0c1a tx timeout [ 689.111383][T14582] Bluetooth: hci6: command 0x0c1a tx timeout [ 689.686431][T16037] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1970'. [ 689.797292][T16036] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1970'. [ 690.559584][T16040] misc userio: No port type given on /dev/userio [ 690.698632][T16040] device-mapper: ioctl: Invalid ioctl structure: name þÿÿÿÿÿÿÿd, dev 3000000000 [ 690.862553][T14582] Bluetooth: hci4: command 0x0c1a tx timeout [ 691.020657][T14582] Bluetooth: hci5: command 0x0c1a tx timeout [ 691.080963][T16055] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 691.180651][T14582] Bluetooth: hci6: command 0x0c1a tx timeout [ 692.626403][T16066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1976'. [ 692.710931][T16071] zswap: compressor not available [ 693.396700][T16089] random: crng reseeded on system resumption [ 694.157914][T16092] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1980'. [ 695.061623][T16111] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1983'. [ 695.513159][T16114] nbd: must specify at least one socket [ 695.712836][T16121] netlink: 'syz.5.1984': attribute type 11 has an invalid length. [ 696.215065][ T8660] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 696.231902][ T8660] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 696.247554][ T8660] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 696.272883][ T8660] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 696.285233][ T8660] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 698.343228][ T8660] Bluetooth: hci7: command tx timeout [ 698.948063][ T30] audit: type=1804 audit(2147483697.898:17): pid=16163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.1992" name="/newroot/sys/kernel/tracing/set_event_notrace_pid" dev="tracefs" ino=32 res=1 errno=0 [ 699.033631][T16125] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.062626][T16125] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.095115][T16125] bridge_slave_0: entered allmulticast mode [ 699.135359][T16125] bridge_slave_0: entered promiscuous mode [ 699.180732][T16125] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.204448][T16125] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.239493][T16125] bridge_slave_1: entered allmulticast mode [ 699.265604][T16125] bridge_slave_1: entered promiscuous mode [ 699.384149][T16125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.435492][T16125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.575389][T16125] team0: Port device team_slave_0 added [ 699.613822][T16125] team0: Port device team_slave_1 added [ 699.805306][T16125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.849695][T16125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.971600][T16175] could not allocate digest TFM handle [ 699.998644][T16125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.063760][T16125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.096978][T16125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.229267][T16125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.413833][ T8660] Bluetooth: hci7: command tx timeout [ 700.486714][T16125] hsr_slave_0: entered promiscuous mode [ 700.519873][T16125] hsr_slave_1: entered promiscuous mode [ 700.549872][T16125] debugfs: 'hsr0' already exists in 'hsr' [ 700.580495][T16125] Cannot create hsr debugfs directory [ 701.138693][T16180] hub 1-0:1.0: USB hub found [ 701.227939][T16180] hub 1-0:1.0: 1 port detected [ 701.784584][T16125] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 701.822294][T16125] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 701.853164][T16125] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 701.904632][T16125] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 701.933777][T16125] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 701.983336][T16125] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 702.014239][T16125] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 702.057429][T16125] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 702.256004][T16125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.299042][T16125] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.339811][T10336] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.347101][T10336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.424257][T10336] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.431454][T10336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.483243][ T8660] Bluetooth: hci7: command tx timeout [ 703.538624][T16125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.162537][T16125] veth0_vlan: entered promiscuous mode [ 704.190711][T16125] veth1_vlan: entered promiscuous mode [ 704.261728][T16125] veth0_macvtap: entered promiscuous mode [ 704.284624][T16125] veth1_macvtap: entered promiscuous mode [ 704.345582][T16125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.374141][T16125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.410422][T10336] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.432902][T10336] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.464121][T10336] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.493960][T10336] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.552348][ T8660] Bluetooth: hci7: command tx timeout [ 704.794594][ T9264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.826315][ T9264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.896831][ T9264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.913102][ T9264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.690122][T16221] sd 0:0:1:0: PR command failed: 1026 [ 705.701494][T16221] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 705.718311][T16221] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 708.310356][T16255] futex_wake_op: syz.7.2001 tries to shift op by -2048; fix this program [ 708.349915][T16255] 0x000000000001-0x000000020000 : "" [ 708.370942][T16255] ftl_cs: FTL header corrupt! [ 710.443793][T16267] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2004'. [ 712.987798][T16288] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 713.011153][T16288] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 713.024374][T16288] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 713.039271][T16288] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 713.049013][T16288] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 713.695944][T16291] nbd: must specify at least one socket [ 714.158898][T16305] vhci_hcd vhci_hcd.1: invalid port number 47 [ 714.178645][T16305] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 714.838291][T16287] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.864430][T16287] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.890251][T16287] bridge_slave_0: entered allmulticast mode [ 714.918086][T16287] bridge_slave_0: entered promiscuous mode [ 714.945711][T16287] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.972156][T16287] bridge0: port 2(bridge_slave_1) entered disabled state [ 715.009066][T16287] bridge_slave_1: entered allmulticast mode [ 715.033208][T16287] bridge_slave_1: entered promiscuous mode [ 715.138181][T16288] Bluetooth: hci8: command tx timeout [ 715.185220][T16287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.235641][T16287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.358710][T16287] team0: Port device team_slave_0 added [ 715.386458][T16287] team0: Port device team_slave_1 added [ 715.671413][T16287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 715.691098][T16287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 715.798545][T16287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.959644][T16287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.978140][T16287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.076942][T16287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 716.440413][T16287] hsr_slave_0: entered promiscuous mode [ 716.460493][T16287] hsr_slave_1: entered promiscuous mode [ 716.479968][T16287] debugfs: 'hsr0' already exists in 'hsr' [ 716.494315][T16287] Cannot create hsr debugfs directory [ 717.208478][T16288] Bluetooth: hci8: command tx timeout [ 717.420799][T16251] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 717.440170][T16251] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 717.458801][T16251] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 717.473022][T16251] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 717.494307][T16251] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 718.034268][T16287] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 718.105533][T16287] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 718.144910][T16287] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 718.206717][T16287] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 718.244906][T16287] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 718.302854][T16287] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 718.341978][T16287] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 718.373181][T16287] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 718.827696][T16287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.921455][T16287] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.982328][T16238] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.989605][T16238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 719.074267][T16238] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.081539][T16238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.285671][T16288] Bluetooth: hci8: command tx timeout [ 719.596535][T16288] Bluetooth: hci9: command tx timeout [ 720.867120][T16375] kexec: Could not allocate control_code_buffer [ 720.900309][T16337] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.940259][T16337] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.989468][T16337] bridge_slave_0: entered allmulticast mode [ 721.024143][T16337] bridge_slave_0: entered promiscuous mode [ 721.162099][T16337] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.204732][T16337] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.252273][T16337] bridge_slave_1: entered allmulticast mode [ 721.301481][T16337] bridge_slave_1: entered promiscuous mode [ 721.345908][T16288] Bluetooth: hci8: command tx timeout [ 721.355490][T16390] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 721.664662][T16288] Bluetooth: hci9: command tx timeout [ 721.755668][T16337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 721.820274][T16337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.044727][T16337] team0: Port device team_slave_0 added [ 722.101299][T16337] team0: Port device team_slave_1 added [ 722.284322][T16337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.318201][T16337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.444458][T16337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.596842][T16287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.625178][T16337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.661150][T16337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 722.796291][T16337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.072362][T16337] hsr_slave_0: entered promiscuous mode [ 723.115729][T16337] hsr_slave_1: entered promiscuous mode [ 723.157690][T16337] debugfs: 'hsr0' already exists in 'hsr' [ 723.192372][T16337] Cannot create hsr debugfs directory [ 723.733990][T16288] Bluetooth: hci9: command tx timeout [ 723.903492][T16287] veth0_vlan: entered promiscuous mode [ 723.986133][T16287] veth1_vlan: entered promiscuous mode [ 724.549747][T16287] veth0_macvtap: entered promiscuous mode [ 724.636867][T16287] veth1_macvtap: entered promiscuous mode [ 724.713722][T16337] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 724.752993][T16337] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 724.783125][T16337] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 724.821006][T16337] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 724.857301][T16337] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 724.935640][T16337] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 724.970861][T16337] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 725.062258][T16337] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 725.104159][T16287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 725.200271][T16287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 725.306348][T16241] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.342957][T16433] tipc: Started in network mode [ 725.360877][T16433] tipc: Node identity ee00, cluster identity 4711 [ 725.388948][T16433] tipc: Node number set to 60928 [ 725.438657][T16241] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.470144][T16241] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.521335][T16241] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.803406][T16288] Bluetooth: hci9: command tx timeout [ 725.929582][T16241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 725.974913][T16241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.089759][T16238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 726.129194][T16238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 726.182355][T16337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.309103][T16337] 8021q: adding VLAN 0 to HW filter on device team0 [ 726.388322][T16240] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.395605][T16240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 726.529860][T16240] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.537079][T16240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.271565][T16452] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 727.552880][T16452] pci 0000:00:01.3: PCI INT A: no GSI [ 727.782780][T16463] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 728.842349][T16337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.689543][T16337] veth0_vlan: entered promiscuous mode [ 730.783883][T16337] veth1_vlan: entered promiscuous mode [ 730.853699][T16505] sd 0:0:1:0: PR command failed: 1026 [ 730.885830][T16505] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 730.927570][T16505] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 730.947816][T16337] veth0_macvtap: entered promiscuous mode [ 731.000818][T16337] veth1_macvtap: entered promiscuous mode [ 731.110616][T16337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.217663][T16337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.346199][T16240] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.407630][T16240] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.494809][T16240] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.552043][T16240] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.107717][T16235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.164099][T16235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.317232][T16241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.363288][T16241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 734.438535][T16540] FAULT_INJECTION: forcing a failure. [ 734.438535][T16540] name failslab, interval 1, probability 0, space 0, times 0 [ 734.602938][T16540] CPU: 0 UID: 0 PID: 16540 Comm: syz.9.2041 Tainted: G U L syzkaller #0 PREEMPT(full) [ 734.602981][T16540] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 734.602991][T16540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 734.603006][T16540] Call Trace: [ 734.603014][T16540] [ 734.603023][T16540] dump_stack_lvl+0x100/0x190 [ 734.603072][T16540] should_fail_ex.cold+0x5/0xa [ 734.603104][T16540] ? lsm_blob_alloc+0x68/0x90 [ 734.603129][T16540] should_failslab+0xc2/0x120 [ 734.603163][T16540] __kmalloc_noprof+0xe0/0x850 [ 734.603187][T16540] ? trace_kmem_cache_alloc+0xd5/0x100 [ 734.603225][T16540] lsm_blob_alloc+0x68/0x90 [ 734.603251][T16540] security_prepare_creds+0x2d/0x290 [ 734.603278][T16540] prepare_creds+0x5d6/0x950 [ 734.603307][T16540] join_session_keyring+0x17/0x350 [ 734.603409][T16540] lookup_user_key+0xbf9/0x1300 [ 734.603448][T16540] ? __pfx_lookup_user_key+0x10/0x10 [ 734.603491][T16540] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 734.603542][T16540] __do_sys_add_key+0x2a6/0x460 [ 734.603572][T16540] ? __pfx___do_sys_add_key+0x10/0x10 [ 734.603599][T16540] ? ksys_write+0x1ac/0x250 [ 734.603634][T16540] ? rcu_is_watching+0x12/0xc0 [ 734.603668][T16540] do_syscall_64+0x115/0x840 [ 734.603692][T16540] ? clear_bhb_loop+0x40/0x90 [ 734.603722][T16540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.603748][T16540] RIP: 0033:0x7f1d0519ce59 [ 734.603768][T16540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.603793][T16540] RSP: 002b:00007f1d060ab028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 734.603816][T16540] RAX: ffffffffffffffda RBX: 00007f1d05416090 RCX: 00007f1d0519ce59 [ 734.603833][T16540] RDX: 00002000000004c0 RSI: 0000000000000000 RDI: 0000200000000440 [ 734.603849][T16540] RBP: 00007f1d05232d6f R08: fffffffffffffffd R09: 0000000000000000 [ 734.603865][T16540] R10: 00000000000000ff R11: 0000000000000246 R12: 0000000000000000 [ 734.603888][T16540] R13: 00007f1d05416128 R14: 00007f1d05416090 R15: 00007ffcea63b438 [ 734.603919][T16540] [ 739.171597][T16604] FAULT_INJECTION: forcing a failure. [ 739.171597][T16604] name failslab, interval 1, probability 0, space 0, times 0 [ 739.267194][T16604] CPU: 0 UID: 0 PID: 16604 Comm: syz.8.2053 Tainted: G U L syzkaller #0 PREEMPT(full) [ 739.267236][T16604] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 739.267246][T16604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 739.267261][T16604] Call Trace: [ 739.267269][T16604] [ 739.267279][T16604] dump_stack_lvl+0x100/0x190 [ 739.267327][T16604] should_fail_ex.cold+0x5/0xa [ 739.267360][T16604] should_failslab+0xc2/0x120 [ 739.267393][T16604] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 739.267418][T16604] ? ptlock_alloc+0x1f/0x70 [ 739.267457][T16604] ? do_raw_spin_lock+0x128/0x260 [ 739.267489][T16604] ptlock_alloc+0x1f/0x70 [ 739.267528][T16604] pte_alloc_one+0x82/0x3d0 [ 739.267562][T16604] do_fault+0x86c/0x1750 [ 739.267596][T16604] ? __pmd_alloc+0x3fb/0x950 [ 739.267639][T16604] __handle_mm_fault+0x187d/0x2a00 [ 739.267685][T16604] ? mt_find+0x45e/0x8e0 [ 739.267713][T16604] ? __pfx___handle_mm_fault+0x10/0x10 [ 739.267752][T16604] ? __pfx_mt_find+0x10/0x10 [ 739.267794][T16604] ? find_vma+0xbf/0x140 [ 739.267823][T16604] ? __pfx_find_vma+0x10/0x10 [ 739.267855][T16604] handle_mm_fault+0x37b/0xa30 [ 739.267904][T16604] do_user_addr_fault+0x74c/0x12f0 [ 739.267937][T16604] ? trace_page_fault_kernel+0x7a/0x200 [ 739.267968][T16604] exc_page_fault+0x6f/0xd0 [ 739.268010][T16604] asm_exc_page_fault+0x26/0x30 [ 739.268034][T16604] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 739.268068][T16604] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 739.268092][T16604] RSP: 0018:ffffc90003d9fa98 EFLAGS: 00050212 [ 739.268112][T16604] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000024 [ 739.268127][T16604] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90003d9fb28 [ 739.268143][T16604] RBP: 0000000000000024 R08: 0000000000000001 R09: fffff520007b3f69 [ 739.268158][T16604] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 739.268173][T16604] R13: ffffc90003d9fb28 R14: 0000000000000000 R15: 000000000000b6bd [ 739.268203][T16604] _copy_from_user+0x98/0xd0 [ 739.268247][T16604] sg_write+0x2af/0xdb0 [ 739.268356][T16604] ? __pfx_sg_write+0x10/0x10 [ 739.268407][T16604] ? apparmor_file_permission+0x13f/0x1c0 [ 739.268484][T16604] ? bpf_lsm_file_permission+0x9/0x10 [ 739.268510][T16604] ? security_file_permission+0x76/0x210 [ 739.268552][T16604] ? rw_verify_area+0xce/0x6d0 [ 739.268583][T16604] vfs_write+0x2aa/0x1070 [ 739.268614][T16604] ? __pfx_sg_write+0x10/0x10 [ 739.268645][T16604] ? __pfx_vfs_write+0x10/0x10 [ 739.268675][T16604] ? find_held_lock+0x2b/0x80 [ 739.268707][T16604] ? __fget_files+0x215/0x3d0 [ 739.268738][T16604] ? __fget_files+0x215/0x3d0 [ 739.268774][T16604] ? __fget_files+0x21f/0x3d0 [ 739.268812][T16604] ksys_write+0x12a/0x250 [ 739.268843][T16604] ? __pfx_ksys_write+0x10/0x10 [ 739.268877][T16604] ? rcu_is_watching+0x12/0xc0 [ 739.268911][T16604] do_syscall_64+0x115/0x840 [ 739.268934][T16604] ? clear_bhb_loop+0x40/0x90 [ 739.268964][T16604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.268990][T16604] RIP: 0033:0x7f9d3499ce59 [ 739.269010][T16604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.269034][T16604] RSP: 002b:00007f9d358bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 739.269056][T16604] RAX: ffffffffffffffda RBX: 00007f9d34c15fa0 RCX: 00007f9d3499ce59 [ 739.269073][T16604] RDX: 000000000000b6bd RSI: 0000000000000000 RDI: 0000000000000003 [ 739.269088][T16604] RBP: 00007f9d34a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 739.269103][T16604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 739.269118][T16604] R13: 00007f9d34c16038 R14: 00007f9d34c15fa0 R15: 00007ffdc02b64a8 [ 739.269149][T16604] [ 740.234560][T16599] nvme_fabrics: missing parameter 'transport=%s' [ 740.278218][T16599] nvme_fabrics: missing parameter 'nqn=%s' [ 740.771043][T16611] pim6reg: entered allmulticast mode [ 741.221161][T16616] blktrace: Concurrent blktraces are not allowed on loop2 [ 742.351913][T16631] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 743.682820][T16646] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2060'. [ 744.176566][T16651] netlink: 342 bytes leftover after parsing attributes in process `syz.9.2062'. [ 744.311084][T16637] kexec: Could not allocate control_code_buffer [ 745.232639][T16664] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 745.391942][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 745.407148][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.340373][T16697] random: crng reseeded on system resumption [ 747.683411][T16697] hub 1-0:1.0: USB hub found [ 747.720354][T16697] hub 1-0:1.0: 1 port detected [ 749.947745][T16733] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2076'. [ 750.069404][T16726] can: request_module (can-proto-0) failed. [ 750.696000][T16729] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 750.734538][T16729] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 750.759488][T16729] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 750.803110][T16729] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 750.838471][T16729] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 750.871076][T16729] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 750.899536][T16729] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 750.917062][T16729] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 750.943178][T16729] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 750.990041][T16729] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 751.014354][T16729] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 751.089846][T16729] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 751.136434][T16729] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 751.159846][T16729] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 751.199017][T16729] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 752.228789][T16288] Bluetooth: hci0: command 0x0c1a tx timeout [ 752.785852][T16288] Bluetooth: hci2: command 0x0c1a tx timeout [ 752.792174][T16251] Bluetooth: hci1: command 0x0c1a tx timeout [ 752.865437][T16251] Bluetooth: hci6: command 0x0c1a tx timeout [ 752.871851][T16288] Bluetooth: hci5: command 0x0c1a tx timeout [ 752.878449][T16288] Bluetooth: hci4: command 0x0c1a tx timeout [ 752.945548][T16761] Bluetooth: hci7: command 0x0c1a tx timeout [ 753.026920][T16761] Bluetooth: hci8: command 0x0c1a tx timeout [ 753.183827][T16761] Bluetooth: hci9: command 0x0c1a tx timeout [ 755.014757][T16761] Bluetooth: hci7: command 0x0c1a tx timeout [ 755.094223][T16761] Bluetooth: hci8: command 0x0c1a tx timeout [ 755.253494][T16761] Bluetooth: hci9: command 0x0c1a tx timeout [ 755.479269][T16781] random: crng reseeded on system resumption [ 755.888327][T16781] hub 1-0:1.0: USB hub found [ 755.950000][T16781] hub 1-0:1.0: 1 port detected [ 757.084325][T16761] Bluetooth: hci7: command 0x0c1a tx timeout [ 757.163705][T16761] Bluetooth: hci8: command 0x0c1a tx timeout [ 757.322849][T16761] Bluetooth: hci9: command 0x0c1a tx timeout [ 757.440954][ T30] audit: type=1806 audit(2147483756.686:18): xattr="" res=-22 [ 758.441251][T16822] tipc: Started in network mode [ 758.544556][T16822] tipc: Node identity ee00, cluster identity 4711 [ 758.642656][T16822] tipc: Node number set to 60928 [ 759.393339][ T31] INFO: task syz.3.1809:15067 blocked for more than 143 seconds. [ 759.415108][ T31] Tainted: G U L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 759.461380][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 759.490596][T16844] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2095'. [ 759.529436][ T31] task:syz.3.1809 state:D stack:27192 pid:15067 tgid:15061 ppid:5644 task_flags:0x400040 flags:0x00080002 [ 759.557943][T16844] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.2095: iget: checksum invalid [ 759.601598][ T31] Call Trace: [ 759.614870][ T31] [ 759.635531][ T31] __schedule+0x1295/0x67a0 [ 759.669399][T16844] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 759.685478][ T31] ? __pfx___schedule+0x10/0x10 [ 759.703180][ T31] ? find_held_lock+0x2b/0x80 [ 759.733615][ T31] ? schedule+0x2bf/0x390 [ 759.756317][ T31] schedule+0xdd/0x390 [ 759.787817][ T31] schedule_preempt_disabled+0x13/0x30 [ 759.820929][ T31] __mutex_lock+0xced/0x1b10 [ 759.826652][T16844] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.2095: iget: checksum invalid [ 759.856908][ T31] ? nfsd_nl_listener_get_doit+0x13e/0x7b0 [ 759.891490][ T31] ? __kmalloc_node_track_caller_noprof+0x321/0x850 [ 759.923125][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 759.955136][ T31] ? kmalloc_reserve+0xf9/0x350 [ 759.960651][T16844] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 759.995373][ T31] ? skb_put+0x138/0x180 [ 760.008779][ T31] ? __nlmsg_put+0x152/0x1c0 [ 760.039307][ T31] ? nfsd_nl_listener_get_doit+0x13e/0x7b0 [ 760.058032][T16844] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.2095: iget: checksum invalid [ 760.076883][ T31] nfsd_nl_listener_get_doit+0x13e/0x7b0 [ 760.101127][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 760.139786][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 760.174784][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 760.188426][T16844] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 760.237516][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 760.289195][ T31] ? genl_get_cmd+0x3e7/0x760 [ 760.331685][ T31] ? __dev_queue_xmit+0xa10/0x4950 [ 760.378380][ T31] ? __radix_tree_lookup+0x217/0x2b0 [ 760.410747][ T31] genl_rcv_msg+0x560/0x800 [ 760.436655][T16844] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.8.2095: iget: checksum invalid [ 760.461571][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 760.487974][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 760.523202][ T31] netlink_rcv_skb+0x159/0x420 [ 760.551586][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 760.589074][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 760.600029][T16844] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 760.621566][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 760.637558][T16844] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 760.651873][ T31] genl_rcv+0x28/0x40 [ 760.691474][ T31] netlink_unicast+0x585/0x850 [ 760.718844][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 760.724322][T16844] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 760.760563][ T31] netlink_sendmsg+0x8b0/0xda0 [ 760.773858][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 760.801583][ T31] ? __import_iovec+0x1d2/0x640 [ 760.827424][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 760.852227][ T31] ____sys_sendmsg+0x9e1/0xb70 [ 760.886449][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 760.898635][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 760.923785][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 760.946495][ T31] ___sys_sendmsg+0x190/0x1e0 [ 760.966351][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 760.991359][ T31] __sys_sendmsg+0x170/0x220 [ 761.005999][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 761.022561][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 761.044702][ T31] ? rcu_is_watching+0x12/0xc0 [ 761.063642][ T31] do_syscall_64+0x115/0x840 [ 761.069626][ T31] ? clear_bhb_loop+0x40/0x90 [ 761.084552][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.103484][ T31] RIP: 0033:0x7f164539ce59 [ 761.113389][ T31] RSP: 002b:00007f1646203028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 761.137050][ T31] RAX: ffffffffffffffda RBX: 00007f1645616090 RCX: 00007f164539ce59 [ 761.155430][ T31] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 0000000000000004 [ 761.172677][ T31] RBP: 00007f1645432d6f R08: 0000000000000000 R09: 0000000000000000 [ 761.189677][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 761.212674][ T31] R13: 00007f1645616128 R14: 00007f1645616090 R15: 00007ffcda478438 [ 761.223923][ T31] [ 761.331663][ T31] [ 761.331663][ T31] Showing all locks held in the system: [ 761.378794][ T31] 1 lock held by khungtaskd/31: [ 761.421427][ T31] #0: ffffffff8e7e56a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 761.487469][ T31] 2 locks held by kworker/0:5/5733: [ 761.513936][ T31] 3 locks held by kworker/0:1/11380: [ 761.550071][ T31] #0: ffff88813fe57140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 761.608362][ T31] #1: ffffc90006257d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 761.655794][ T31] #2: ffffffff8e7f11e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 761.695801][ T31] 2 locks held by syz.3.1809/15062: [ 761.715447][ T31] #0: ffffffff906b97c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 761.745683][ T31] #1: ffffffff8ec65fa0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 761.783635][ T31] 2 locks held by syz.3.1809/15067: [ 761.804486][ T31] #0: ffffffff906b97c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 761.829355][ T31] #1: ffffffff8ec65fa0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x13e/0x7b0 [ 761.847673][ T31] 2 locks held by syz-executor/15232: [ 761.853757][ T31] #0: ffff888029b380d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 761.889126][ T31] #1: ffffffff8ec65fa0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 761.903280][ T31] 2 locks held by syz.1.1843/15249: [ 761.908581][ T31] #0: ffffffff906b97c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 761.917669][ T31] #1: ffffffff8ec65fa0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 761.928543][ T31] 3 locks held by kworker/0:6/15343: [ 761.934192][ T31] #0: ffff88801ba8ad40 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 761.949944][ T31] #1: ffffc90005157d08 ((work_completion)(&(&ssp->srcu_sup->work)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 761.963416][ T31] #2: ffffffff8e8735c8 (&ssp->srcu_sup->srcu_gp_mutex){+.+.}-{4:4}, at: process_srcu+0x77/0x20f0 [ 761.977817][ T31] 2 locks held by syz.0.1893/15612: [ 761.987979][ T31] #0: ffff88802e9100d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 761.998802][ T31] #1: ffffffff8ec65fa0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 762.012380][ T31] 2 locks held by syz-executor/15802: [ 762.017854][ T31] #0: ffff88807aec00d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 762.032810][ T31] #1: ffffffff8ec65fa0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 762.042831][ T31] 2 locks held by syz.2.1946/15899: [ 762.048090][ T31] #0: ffff8880283b60d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 762.059496][ T31] #1: ffffffff8ec65fa0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 762.073034][ T31] 2 locks held by syz-executor/16125: [ 762.078722][ T31] #0: ffff8880282c40d8 (&type->s_umount_key#52){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 762.093400][ T31] #1: ffffffff8ec65fa0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 762.104332][ T31] 2 locks held by kworker/u11:1/16238: [ 762.111475][ T31] #0: ffff88801eb9d140 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 762.124915][ T31] #1: ffffc90003c47d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 762.136835][ T31] 2 locks held by syz.9.2093/16838: [ 762.142487][ T31] #0: ffffffff905f23c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 762.152569][ T31] #1: ffffffff9060b120 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 762.162562][ T31] 3 locks held by syz.5.2094/16840: [ 762.168073][ T31] #0: ffff88802c1a4d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 762.181275][ T31] #1: ffff88801bb8c450 (sb_writers#17){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 762.190758][ T31] #2: ffffffff8e88bbc0 (event_mutex){+.+.}-{4:4}, at: event_pid_write.isra.0+0x11d/0x7d0 [ 762.205082][ T31] 1 lock held by syz.8.2095/16844: [ 762.212343][ T31] #0: ffff88806aedcea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 762.259670][ T31] [ 762.270602][ T31] ============================================= [ 762.270602][ T31] [ 762.333450][ T31] NMI backtrace for cpu 0 [ 762.333473][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 762.333509][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 762.333518][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 762.333532][ T31] Call Trace: [ 762.333539][ T31] [ 762.333549][ T31] dump_stack_lvl+0x100/0x190 [ 762.333596][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 762.333633][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 762.333658][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 762.333698][ T31] sys_info+0x141/0x190 [ 762.333724][ T31] watchdog+0xcb1/0x1030 [ 762.333764][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 762.333865][ T31] ? __pfx_watchdog+0x10/0x10 [ 762.333899][ T31] ? __kthread_parkme+0x18c/0x230 [ 762.333943][ T31] ? kthread+0x13a/0x450 [ 762.333961][ T31] ? __pfx_watchdog+0x10/0x10 [ 762.333993][ T31] kthread+0x370/0x450 [ 762.334012][ T31] ? __pfx_kthread+0x10/0x10 [ 762.334034][ T31] ret_from_fork+0x72b/0xd50 [ 762.334060][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 762.334091][ T31] ? __switch_to+0x800/0x1100 [ 762.334124][ T31] ? __switch_to_asm+0x39/0x70 [ 762.334162][ T31] ? __pfx_kthread+0x10/0x10 [ 762.334183][ T31] ret_from_fork_asm+0x1a/0x30 [ 762.334227][ T31] [ 762.757871][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 762.764801][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 762.775503][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 762.780700][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 762.790766][ T31] Call Trace: [ 762.794063][ T31] [ 762.797008][ T31] dump_stack_lvl+0x100/0x190 [ 762.801731][ T31] vpanic+0x552/0x970 [ 762.805753][ T31] ? __pfx_vpanic+0x10/0x10 [ 762.810278][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 762.816463][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 762.822735][ T31] panic+0xd1/0xe0 [ 762.826481][ T31] ? __pfx_panic+0x10/0x10 [ 762.830938][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 762.837117][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 762.843298][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 762.849478][ T31] ? watchdog.cold+0x1ec/0x234 [ 762.854290][ T31] ? watchdog+0xcc1/0x1030 [ 762.858740][ T31] watchdog.cold+0x1fd/0x234 [ 762.863362][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 762.869198][ T31] ? __pfx_watchdog+0x10/0x10 [ 762.873908][ T31] ? __kthread_parkme+0x18c/0x230 [ 762.878968][ T31] ? kthread+0x13a/0x450 [ 762.883225][ T31] ? __pfx_watchdog+0x10/0x10 [ 762.887944][ T31] kthread+0x370/0x450 [ 762.892031][ T31] ? __pfx_kthread+0x10/0x10 [ 762.896645][ T31] ret_from_fork+0x72b/0xd50 [ 762.901268][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 762.906406][ T31] ? __switch_to+0x800/0x1100 [ 762.911106][ T31] ? __switch_to_asm+0x39/0x70 [ 762.915978][ T31] ? __pfx_kthread+0x10/0x10 [ 762.920597][ T31] ret_from_fork_asm+0x1a/0x30 [ 762.925414][ T31] [ 762.928529][ T31] Kernel Offset: disabled [ 762.932880][ T31] Rebooting in 86400 seconds..