last executing test programs: 2m59.027669934s ago: executing program 32 (id=2900): madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) r2 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) close_range$auto(0xffffffffffffffff, r2, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/clear_refs\x00', 0x588202, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r3, 0x0, 0xffffff4b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r5, 0xa, 0x1) fcntl$auto(r5, 0x10, 0x2) r6 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r4) write$auto_proc_mem_operations_base(r6, &(0x7f0000001680)="a7", 0xfffffc96) 2m19.1984315s ago: executing program 33 (id=3051): openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/i8042/serio1/power/wakeup_abort_count\x00', 0x60204, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x6) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x7fff) writev$auto(r0, &(0x7f0000000240)={0x0, 0x5}, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = prctl$auto_SECCOMP_MODE_STRICT(0x2, 0x1, 0x0, 0x8, 0x4) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r2, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_INDOOR={0x4}, @NL80211_ATTR_AUTH_DATA={0x15, 0x9c, "ab684d1baa911799c434f102ffcc0e5b49"}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x8216}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x55) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), r3) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_NEW(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="a4030000", @ANYRES16=r4, @ANYBLOB="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"], 0x3a4}, 0x1, 0x0, 0x0, 0x402305ddccd37dd3}, 0x4040000) socket(0x2, 0x2, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x4c8003, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x1f, 0x3, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) 2m8.11486864s ago: executing program 5 (id=3118): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x1, 0x7, 0x4000000000df, 0xeb1, 0x401, 0xfffffffffffff5ee) lgetxattr$auto(0xfffffffffffffffd, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x8) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb1\x00', 0x20401, 0x0) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket(0xa, 0x1, 0x100) r0 = socket(0x1e, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/oom_adj\x00', 0x458400, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video52\x00', 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x2901, 0x0) openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f00000032c0), 0x1000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) ioctl$auto(r1, 0xc1205531, r2) socket(0xa, 0x1, 0x84) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) unshare$auto(0x40000080) write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x2, 0x8, 0x0) 2m7.578016595s ago: executing program 5 (id=3159): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x382, 0x0) socket(0xa, 0x3, 0xff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1c1080, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.7/usb8/remove\x00', 0xa001, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40080) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)=@bpf_attr_1={0xffffffffffffffff, 0x9, @next_key=0xfffffffffffffff9, 0x9}, 0x1ff) read$auto(0xffffffffffffffff, 0x0, 0x20) lstat$auto(0x0, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) mkdir$auto(&(0x7f0000000240)='}[,&*}/file0\x00', 0xc005) socket(0xa, 0x1, 0x0) mmap$auto(0x0, 0x2, 0x4000000000e3, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3a) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000015c0)={'wg1\x00', 0x0}) bpf$auto(0x0, &(0x7f0000001500)=@bpf_attr_5={@target_ifindex=r4, r2, 0x4006, 0x1a3, 0xffffffffffffffff, @relative_fd=r1, 0x7}, 0x7fff) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0xa, 0x1fe) getsockopt$auto_SO_RCVTIMEO_NEW(r0, 0x3ff, 0x42, &(0x7f0000000100)='/dev/snd/controlC1\x00', &(0x7f0000000200)=0x9) connect$auto(0x3, &(0x7f00000000c0), 0x55) 2m6.233648101s ago: executing program 5 (id=3161): sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf2581"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram3/trace/enable\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) 1m51.6959621s ago: executing program 0 (id=3210): mmap$auto(0x0, 0x401008, 0xdc, 0x9b72, 0xffffffffffffffff, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) 1m51.592453015s ago: executing program 0 (id=3211): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x7, 0x0, 0x3, 0x10004) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r1, [], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) r2 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) socket(0xa, 0x801, 0x84) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x2, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) madvise$auto(0x0, 0x9, 0x15) unshare$auto(0x3) r4 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000180), 0x90101, 0x0) ioctl$auto(r4, 0x3b8e, r3) read$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000d40)=""/16, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1fb, 0x8000, 0x200000d, 0x1, 0x948e, 0x10000000003, 0x10015f4da0a, 0xd, 0x400, 0x64c1, 0x8000001f, 0x8, 0x6d3e, 0xc, 0xfffffffffffffff8, 0x2]}, 0x0) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r5, &(0x7f0000000100)="0a1b9a525c7b0f8262cd0a", 0xb) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r6, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa}) ioctl$auto_UI_DEV_CREATE(r6, 0x5501, 0x0) writev$auto(r6, &(0x7f0000000340)={0x0, 0x500000}, 0x9) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socket(0x1d, 0x2, 0x6) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 1m50.618481652s ago: executing program 34 (id=3161): sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf2581"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram3/trace/enable\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) 1m47.705298623s ago: executing program 0 (id=3219): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x58, 0x0) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/usb/usbmon/33u\x00', 0x20202, 0x0) pread64$auto(r0, 0x0, 0x4000000, 0x9) close_range$auto(0x2, 0xa, 0x0) 1m47.180098315s ago: executing program 0 (id=3221): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="1b0026bd7000fddbdf2503000000040008001400038010000c800c00038008000600", @ANYRES32=r0, @ANYBLOB="1200010089"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0xc800) open(0x0, 0x22240, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd7000fbdbdf250a00000808000300000000000800010000000000080002"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c51d50e", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fbdbdf250200000008000300800040000800030009"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m46.968299717s ago: executing program 0 (id=3222): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0xfffffffffffffffb, 0x400004, 0xc5, 0x9b72, 0xffffffffffffffff, 0x7ffc) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x0) sysfs$auto(0x2, 0xd, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x3ff, 0x0, 0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4, 0x4008) statmount$auto(0x0, 0x0, 0x7, 0x281) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x18000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x498240, 0x155) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, 0x0, 0x100000a3d9) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8001, 0x0) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$auto_HDIO_GETGEO(r3, 0x301, &(0x7f00000000c0)="4d84eefbf5aa9d87c9b46bc405d88fff7f000000000000190307000000269bf9510e0e9de99cc5ce64ddd54e") openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0200, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x201, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f000000c380)={0x2060, 0x62, 0x100000, 0x7fffffffefff, 0x2, 0x1, 0x8, 0x10000000bff, 0x2c, 0x2c}) socket(0x2, 0x3, 0x1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000100)=@in={0x2, 0x4e20, @broadcast}, 0x1d) socket$nl_generic(0x10, 0x3, 0x10) 1m45.595836234s ago: executing program 0 (id=3225): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) set_mempolicy_home_node$auto(0x600000, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x14, r2, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendfile$auto(r0, r0, 0x0, 0x12) 1m30.430149688s ago: executing program 35 (id=3225): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cpu.max\x00', 0x20b02, 0x0) set_mempolicy_home_node$auto(0x600000, 0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x14, r2, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendfile$auto(r0, r0, 0x0, 0x12) 1m27.101053432s ago: executing program 2 (id=3285): rseq$auto(&(0x7f0000000140)={0xe, 0x5, 0x2c2, 0x23, 0x8007d, 0xfffffffe, "26c788a7a5024a9859acd35804093ad080405e5667c1ebdf247e1520d2c4f723c82081928a325dde6dcc8b245461261f1e847bfe4289c4a3d8893fe91794c1a983b7dec4715155f202bcb0489c4e8c9a1391f75a1e4c289bd6c51ca54f1d"}, 0x8000, 0x2000, 0x6) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000400)={{0xc, 0x23, 0xa6, 0x83}, "66ac010005000000000068d190eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eaf240963110d61771552c03de65800", 0x2}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) ioctl$auto_UI_SET_MSCBIT(r0, 0x40045568, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/set_event\x00', 0x220442, 0x0) mmap$auto(0x6, 0x202000b, 0x9, 0x17, r1, 0x8000) close_range$auto(0x2, 0x8, 0x1f) mkdir$auto(0x0, 0x8001) lseek$auto(r1, 0x200006, 0x6) io_uring_setup$auto(0xfffff7fc, 0x0) mmap$auto(0x0, 0xc, 0x3, 0xeb1, r1, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000240)={0x123062000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0xfffffffffffffffc) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x3) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/netdevsim2/hop_limit\x00', 0x5014c0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004814}, 0x8800) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0) sendfile$auto(r3, r4, 0x0, 0x800048) close_range$auto(r4, 0x8, 0x0) mmap$auto(0x1000000000, 0x0, 0xe, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x181383, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x544282, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m26.071206361s ago: executing program 2 (id=3288): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/rose2/operstate\x00', 0x343602, 0x0) clone$auto(0x801fd, 0x3, 0x0, 0x0, 0x15) name_to_handle_at$auto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) r0 = socket(0x1a, 0x6, 0xffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/o2cb/logmask/DLMFS\x00', 0x20a42, 0x0) close_range$auto(r0, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x4823c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000840)=ANY=[@ANYBLOB="000000000000008000009ccec00d05f79a07c5e1e0fec10daba9f27f07bb42ac0610584b7b30c8ac654d9a32b94762dacd9ae3a9fe43c06231edfc135a141e35b0e822f85ed2e1e711fbdd65631f8da8eccedbebe4770fbf085487439cc34ca644d49faf3b15e94ba6b8d37ffe86296a439f06a56b8090", @ANYRES16=0x0, @ANYBLOB="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"], 0x400}, 0x1, 0x0, 0x0, 0x2}, 0x40088d0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/011/001\x00', 0xd8241, 0x0) mmap$auto(0x20000000000002, 0x10, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0x8000, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS2\x00', 0x60841, 0x0) close_range$auto(0x2, 0x8, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r4 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r4, 0x400, 0x1) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000000180)={0x3, 0xfffff81e, 0xe890, 0x1ff, 0x5}) socket(0x10, 0x2, 0xc) close_range$auto(r3, 0xffffffffffffffff, 0x5) socket(0x18, 0x3, 0x2) connect$auto(0x3, &(0x7f00000000c0)=@hci={0x1f, 0x2}, 0x55) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES8=r3, @ANYRESOCT=r1], 0x18}, 0x1, 0x0, 0x0, 0x6000c000}, 0x20004082) write$auto(0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0xfdef) 1m25.462360776s ago: executing program 2 (id=3289): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, 0x0, 0x21) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0xa) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_ACT(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000040)=ANY=[@ANYBLOB="ec7d5089b13b585821fe0c2109050d9624", @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf251a00000018000180140002006873723000"/38], 0x2c}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) shutdown$auto(r0, 0x2) 1m23.062084671s ago: executing program 2 (id=3296): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x4, 0x2020009, 0x659d, 0xeb1, 0xfffffffffffffffa, 0x80000000008040) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x14, r2, 0x1, 0x70bd31, 0x25dfdbfd}, 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 1m19.463807107s ago: executing program 2 (id=3305): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) madvise$auto(0x1ab3, 0x3, 0x5) socket(0xa, 0x3, 0x3b) connect$auto(0xffffffffffffffff, &(0x7f0000000000)=@generic={0xa, "000000562bac0500"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x73) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x400009, 0x4000000000000df, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) ioctl$auto(r1, 0x400c4d01, r1) ioctl$auto_NS_GET_PID_IN_PIDNS(0xffffffffffffffff, 0x8004b708, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) mknod$auto(&(0x7f0000000040)=':,\x00', 0xc6, 0x78ac) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000580)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9\xe8\xb2\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6E*\xc9\xdd.q\xdbAX\xf6\xfaD\xcdz\xbc~\xf30LE\xb5\x18Wf\xd3\x9b\\\x1c\xbb^\xfb9\xe5\x1b:\xa4\xdd\x81\x91\\\xbc\x1fUl\xfa)\xbf\x9dPV\xae\xa9\x9c)\x01|\xfe\xd0!Rx\a\xc4\xb1$\x8eE\xc2j\x83sLS\xa8H\xf6\xf2,R\x90:\x8fx\xab\x90\xfe$h\x80!\xe2\nY#\xee\x1b}O=\x8bn\xd7zZ\x18\xa7\x9e~\x94k\x8e\xdba\xf2\xc3G\x8egR3\x1d\x01J\x87\x14(}\f\xb1}%N|z,\xbe\x1fB\xd3\xeb\xec\x83X\x8f\x97\x95\xfd\xed\xe6wt\x1d\xb3\xa8\xfb)L~}\x9f\xbf\xd0\xc9\x9d\x82-C\xc3Ez@\x8c\xbf\xa2 \x88\\\r6M\x83', 0x4, 0x0) mount$auto(0x0, &(0x7f0000000200)=':,\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5\x00\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5>\x01\xd4\x14\x00\x00\x00', 0x7, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_METER_CMD_DEL(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 1m18.510026526s ago: executing program 6 (id=3308): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x8, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20000, 0x0) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r1, 0x80044dfe, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) write$auto(r2, 0x0, 0x45c) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r3 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto_IMDELTIMER(r3, 0x80044941, 0x0) adjtimex$auto(&(0x7f0000000200)={0x5f95, 0x0, 0x2, 0x2000000a, 0xff7d, 0xbc58, 0x4000005, 0x0, 0x5, 0x8, 0x80000000, {0x7ff, 0xf423f}, 0x2744, 0x200000001, 0xff, 0x7, 0x0, 0x3c8, 0x8, 0x8, 0xffffffffffffffff, 0x1560cc85, 0x9}) sendmmsg$auto(r3, &(0x7f0000000240)={{&(0x7f0000000480)="41a07cc3c11a3a1b3a80ada9917abde8538919ca952a3a221c47806572c6be036ba07006da5d11406271e2e1caaca43be101152129b8fe81c1e6e804a99fbaeabd38243df64f7a1fb8b0d16d860fbed6560b733e5dccd9e6393e5811dee4a771d24c1bc6010ede0f2a3c161c0dbe2bc3ef14efc0707aaadf33", 0xfffffff8, &(0x7f0000000180)={&(0x7f0000000080)="ad21c732274f944ea3775a7800abb012694bd5c65f778d24fc3ce53f42773b999ab3a6d090d02b844bebc5f85119df15f2dbb237f3e4af20d269ef6a3b9b6e4cecf7e3a4e99c80da9deabc575bd317eb97105a1a07ee84e7237c6502e2b562ffc1a1860fbe3f35b785667fd54bdea4ea23cd01925b3b377006b28a20a82a6201a2bc0711fd961e118ae37b042438b423993cf17eeff7c63bfa1326335e8e29", 0x5}, 0xffffffffffffffff, &(0x7f00000001c0)="c70a459e5c127f5cf92a6e6f17bb7d1b10c9249f5895e2095f39c3c71244c50bfa6c12abdeeb512e0d5a87acf5191e6aee3ab0598f48611e9b140f5479130cfb94a80e21f0b9afefcb4a44a04fedeea4deb48b54bf57ef0fbc8fdf974dbc82ed5588a549d1ce8376ad34bba537e8e907ff", 0x0, 0x7ff}, 0x78}, 0xfffffffa, 0x2) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) renameat2$auto(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(r3, &(0x7f0000000440)={{&(0x7f0000000280)="0efcb3efdcf282e7d6fc97b5ed091751a9fddd599a9ba5739dfc07d7a17e6df868a1b6d0689fbf07b74a70fb78d5a99f2fc1aa0130cc8ad90d23cad982ab4af9c58cbf257231b1556fc64cd23ca1a68373e8ac74d7dc73e42f892a46e0681f3a85e87f130573029ba037a94a3de569160e", 0x5, &(0x7f00000003c0)={&(0x7f0000000340)="dc716b1ac7b770d9d47be14c7a019793973c1d90bc16effd82eddfc86bdc64ad3a7f7ef3870d2dfc9735bc0e300aa184a514cc506796", 0x9}, 0xb, &(0x7f0000000400)="79433ea18dbffb92", 0x7, 0x3469}, 0x80}, 0xffff4535, 0x401) mlock$auto(0xfbe8, 0x4) syz_clone(0x8124400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r4) syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000000), r0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x700fdef) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) 1m17.615286286s ago: executing program 2 (id=3312): select$auto(0x7f, &(0x7f0000000100)={[0x5, 0x2, 0x1, 0x0, 0x9, 0x5630, 0x0, 0x4, 0x3, 0x1, 0x8000000000000000, 0x3, 0x3, 0xfeaa, 0xc6, 0x5]}, &(0x7f0000000180)={[0x9, 0x0, 0x8001, 0x5, 0x6, 0x0, 0x9, 0x3, 0x2, 0x410c, 0x1000, 0xff, 0x5e30ea63, 0x0, 0x2, 0x9]}, &(0x7f00000002c0)={[0x9, 0x7f, 0x6, 0xffffffffffffffff, 0xe8ee, 0x9, 0xb, 0x378, 0x7, 0x3, 0xffff, 0x4, 0x7, 0xd, 0xfc6, 0x7]}, &(0x7f0000000040)={0x4, 0x6f}) r0 = socket(0x10, 0x2, 0x0) socket(0x11, 0x3, 0x7fff) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x8800) syz_genetlink_get_family_id$auto_nbd(&(0x7f00000003c0), r0) shmctl$auto_IPC_STAT(0x9, 0x2, &(0x7f0000000580)={{0x40, 0xee01, 0xee01, 0x9, 0x0, 0x5, 0x5}, 0x3, 0xfffffffffffffffd, 0x0, 0x8024, @raw=0x5, @raw, 0x1000, 0x0, &(0x7f0000000400)="488327d526e1d2122477ca45fbba3cca423229740bd15edd29402119f8899ed1665356d99d9a35b75a23031a2ce1e94290e587b928e4d33403a3bdddf7c5ea27d3f315af8533bc37b678c37d8d1e3b9a1706da6e783d0a4cb306b914fee7f2ca7f729e3682b3696dd52991437ebc3ed0244a3ece49b470e6b048719c1224b48d2a3ba2d5b7e375f1a5a4d1f21be045534b713b9f28dee116fcfde74eef6b351283e44eac12c6f4", &(0x7f0000000500)="3ae0af783ca9304c3343b30b9345f7eb0feca341f72b2879e372602c055aa867b54691e835bf47e1d3502bea7376982ce836553181ea1471"}) shmctl$auto_SHM_UNLOCK(0x3, 0xc, &(0x7f0000000700)={{0x2, 0x0, 0x0, 0x7, 0xe, 0x0, 0x4}, 0xeae4, 0x0, 0xffffffff, 0x4, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x400, 0x0, 0x0, &(0x7f0000000680)="65e8f4a5e1304235865671567c3fd94d723f6584809d6b78a8589e7fcffcd086fa31f1f1398f32926188b4dcf0c4096a"}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x2, 0x8, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(0xffffffffffffffff, 0x400454a4, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/2/effective_affinity\x00', 0x5d5b04, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0x1002}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x4, 0x0) 1m16.808367527s ago: executing program 6 (id=3313): openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000000000)=@bpf_attr_7={@start_id=0x2, 0x1, 0x4}, 0x9) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x60081, 0x0) ioctl$auto_PPPIOCATTACH(r1, 0x4004743d, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x149e42, 0x0) mmap$auto(0xfffffffffffffffd, 0x810002, 0xffb, 0x8000000008011, r2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x8500, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) ioctl$auto(r4, 0x4008af12, r3) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x80101, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x8002, 0x0) socket(0x2, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) shutdown$auto(0x200000003, 0x2) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m16.224840473s ago: executing program 6 (id=3314): openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000000000)=@bpf_attr_7={@start_id=0x2, 0x1, 0x4}, 0x9) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x60081, 0x0) ioctl$auto_PPPIOCATTACH(r1, 0x4004743d, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x149e42, 0x0) mmap$auto(0xfffffffffffffffd, 0x810002, 0xffb, 0x8000000008011, r2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x8500, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) ioctl$auto(r4, 0x4008af12, r3) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x80101, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x8002, 0x0) socket(0x2, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, 0x800054) shutdown$auto(0x200000003, 0x2) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m15.518458873s ago: executing program 6 (id=3317): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) brk$auto(0x7) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/devices\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)=""/9, 0x9) 1m15.359407747s ago: executing program 6 (id=3318): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x10000, 0x4080000000db, 0xeb1, 0x2, 0x8000) open(0x0, 0x161342, 0x130) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x101, 0x103) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) read$auto_mon_fops_text_t_mon_text(r1, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2ab42, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES16, @ANYRES64=r2, @ANYRES16], 0xb4}}, 0x20000054) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfff) write$auto(r2, 0x0, 0x98c7) mmap$auto(0x4, 0x400008, 0xdf, 0x9b72, r0, 0x8000) madvise$auto(0x0, 0x4, 0x15) unshare$auto(0x40000080) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000400), 0x181040, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000001bc0)="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", 0x930) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 1m14.459993831s ago: executing program 6 (id=3321): statmount$auto(0x0, &(0x7f0000000880)={0x5, 0x2, 0x6, 0x7, 0x0, 0xfffffffffffffffa, 0x1ffde, 0x820c, 0x6, 0x2, 0x9, 0x6, 0x400001, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x2d7d01bf, 0x107, 0x2000, 0x7, 0x0, 0xb, 0x6ef, 0xb, 0x0, 0x0, 0xffffffe3, [0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x2, 0x8, 0x4, 0x0, 0x0, 0x10000000000, 0x3, 0x0, 0x80000001, 0x400000000000000, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xa5, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x35, 0x0, 0x2, 0x200, 0x0, 0x0, 0x1002], "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"}, 0x1fe, 0x533) r0 = timerfd_create$auto_CLOCK_TAI(0xb, 0x10) bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)=@iter_create={r0, 0x7ffffffd}, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/meminfo\x00', 0x40200, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000000100)={&(0x7f0000001300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250100000008000200", @ANYBLOB="080001002e535200090002"], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008000) unshare$auto(0x7) socket(0x27, 0x5, 0x80) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x81, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) epoll_ctl$auto_EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x69a}) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) socketpair$auto(0x9, 0x10, 0x5, &(0x7f0000000540)=0x80) socket(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xc56e, &(0x7f0000000580)={[0x4, 0xfff, 0x401, 0x58, 0x7, 0x7, 0x400000002, 0x5, 0x7, 0x5, 0x9, 0x4, 0x0, 0x10, 0x1, 0x6]}, 0x0, 0x0, &(0x7f0000000040)={0x8, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0) epoll_create$auto(0x8ca0d1a) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000300)='j\xc27\b\\\xa1\xe9v*\xb6]ax\x04\xa9O\xb7\x1f\xae\ri\x1e\xe2\x12\x93\xd5\xe1\x17k`\b\xe6H\xd5\xc3\x05o1\xac,\xe0\xfd\xcc*\xb0g\xa6\x93\xd9\xf64d\xf3\xeb\x0ff\xea^\xf9\xc3\xb8\xc0_\xde\x1dE\xae\x82#\x00\x96\xa6w\xf4\xf1\xdd\xd4\xb1\xcez+c\xe4\x98\x1cLWl\xb6$\x1f\xd1\xec\x1dc\x90t%\xd3\x16E\xe2@8\xcfgT\xcb\xdb\xd3', 0xb) 1m2.525857129s ago: executing program 36 (id=3312): select$auto(0x7f, &(0x7f0000000100)={[0x5, 0x2, 0x1, 0x0, 0x9, 0x5630, 0x0, 0x4, 0x3, 0x1, 0x8000000000000000, 0x3, 0x3, 0xfeaa, 0xc6, 0x5]}, &(0x7f0000000180)={[0x9, 0x0, 0x8001, 0x5, 0x6, 0x0, 0x9, 0x3, 0x2, 0x410c, 0x1000, 0xff, 0x5e30ea63, 0x0, 0x2, 0x9]}, &(0x7f00000002c0)={[0x9, 0x7f, 0x6, 0xffffffffffffffff, 0xe8ee, 0x9, 0xb, 0x378, 0x7, 0x3, 0xffff, 0x4, 0x7, 0xd, 0xfc6, 0x7]}, &(0x7f0000000040)={0x4, 0x6f}) r0 = socket(0x10, 0x2, 0x0) socket(0x11, 0x3, 0x7fff) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x8800) syz_genetlink_get_family_id$auto_nbd(&(0x7f00000003c0), r0) shmctl$auto_IPC_STAT(0x9, 0x2, &(0x7f0000000580)={{0x40, 0xee01, 0xee01, 0x9, 0x0, 0x5, 0x5}, 0x3, 0xfffffffffffffffd, 0x0, 0x8024, @raw=0x5, @raw, 0x1000, 0x0, &(0x7f0000000400)="488327d526e1d2122477ca45fbba3cca423229740bd15edd29402119f8899ed1665356d99d9a35b75a23031a2ce1e94290e587b928e4d33403a3bdddf7c5ea27d3f315af8533bc37b678c37d8d1e3b9a1706da6e783d0a4cb306b914fee7f2ca7f729e3682b3696dd52991437ebc3ed0244a3ece49b470e6b048719c1224b48d2a3ba2d5b7e375f1a5a4d1f21be045534b713b9f28dee116fcfde74eef6b351283e44eac12c6f4", &(0x7f0000000500)="3ae0af783ca9304c3343b30b9345f7eb0feca341f72b2879e372602c055aa867b54691e835bf47e1d3502bea7376982ce836553181ea1471"}) shmctl$auto_SHM_UNLOCK(0x3, 0xc, &(0x7f0000000700)={{0x2, 0x0, 0x0, 0x7, 0xe, 0x0, 0x4}, 0xeae4, 0x0, 0xffffffff, 0x4, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x400, 0x0, 0x0, &(0x7f0000000680)="65e8f4a5e1304235865671567c3fd94d723f6584809d6b78a8589e7fcffcd086fa31f1f1398f32926188b4dcf0c4096a"}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x2, 0x8, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(0xffffffffffffffff, 0x400454a4, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/2/effective_affinity\x00', 0x5d5b04, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0x1002}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x4, 0x0) 59.06319376s ago: executing program 37 (id=3321): statmount$auto(0x0, &(0x7f0000000880)={0x5, 0x2, 0x6, 0x7, 0x0, 0xfffffffffffffffa, 0x1ffde, 0x820c, 0x6, 0x2, 0x9, 0x6, 0x400001, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x2d7d01bf, 0x107, 0x2000, 0x7, 0x0, 0xb, 0x6ef, 0xb, 0x0, 0x0, 0xffffffe3, [0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x2, 0x8, 0x4, 0x0, 0x0, 0x10000000000, 0x3, 0x0, 0x80000001, 0x400000000000000, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xa5, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x35, 0x0, 0x2, 0x200, 0x0, 0x0, 0x1002], "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"}, 0x1fe, 0x533) r0 = timerfd_create$auto_CLOCK_TAI(0xb, 0x10) bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)=@iter_create={r0, 0x7ffffffd}, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/meminfo\x00', 0x40200, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000000100)={&(0x7f0000001300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250100000008000200", @ANYBLOB="080001002e535200090002"], 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x20008000) unshare$auto(0x7) socket(0x27, 0x5, 0x80) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x81, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) epoll_ctl$auto_EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x69a}) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) socketpair$auto(0x9, 0x10, 0x5, &(0x7f0000000540)=0x80) socket(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xc56e, &(0x7f0000000580)={[0x4, 0xfff, 0x401, 0x58, 0x7, 0x7, 0x400000002, 0x5, 0x7, 0x5, 0x9, 0x4, 0x0, 0x10, 0x1, 0x6]}, 0x0, 0x0, &(0x7f0000000040)={0x8, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0) epoll_create$auto(0x8ca0d1a) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000300)='j\xc27\b\\\xa1\xe9v*\xb6]ax\x04\xa9O\xb7\x1f\xae\ri\x1e\xe2\x12\x93\xd5\xe1\x17k`\b\xe6H\xd5\xc3\x05o1\xac,\xe0\xfd\xcc*\xb0g\xa6\x93\xd9\xf64d\xf3\xeb\x0ff\xea^\xf9\xc3\xb8\xc0_\xde\x1dE\xae\x82#\x00\x96\xa6w\xf4\xf1\xdd\xd4\xb1\xcez+c\xe4\x98\x1cLWl\xb6$\x1f\xd1\xec\x1dc\x90t%\xd3\x16E\xe2@8\xcfgT\xcb\xdb\xd3', 0xb) 52.819903812s ago: executing program 4 (id=3390): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6e642, 0x0) write$auto(r0, 0x0, 0x100000a3d9) 52.675894387s ago: executing program 4 (id=3391): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i915/parameters/mitigations\x00', 0x80302, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x18, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0x8000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r1) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r3, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) msgget$auto(0xc, 0x77d9) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000106, 0x400, 0x2}]}) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x5, 0x3, 0x0, 0x8001, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mmap$auto(0x0, 0x8, 0x3, 0x13, 0x3, 0x332e) fallocate$auto(0x3, 0x0, 0xe, 0x8ec5) r4 = socket(0x2, 0x80002, 0x73) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) pwrite64$auto(r0, &(0x7f0000000440)=',^\x00', 0x1, 0x2) 51.335418774s ago: executing program 4 (id=3393): r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x103501, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r0, 0x41015500, &(0x7f0000000080)={"44cb9bf73ee4f7d17375d0a20200fc097204973ce5c568f45cf3a37f00073e797cd85f52c60300259f0f496b584d7480859a383753a492b262cd2e665fea37decc05000000000000001eee4def75ba496344c1b5ba8cd74d91b58200000000000000000001000000000000004000", "780700e6cfac240fa640931102b4c630bc5601fb47fa67124586bd24165be85c89ed2955a83b4f3993c0f4f3a6e054fed14a933119c64d9d923ef32ce561acad10f499213cd61be3b68dcaf3e5f074ce961d6a33c481d540e5282df56757d500", 0x5}) ioctl$auto_USB_RAW_IOCTL_RUN(r0, 0x5501, 0xffe4) 51.154967032s ago: executing program 4 (id=3394): r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) ioctl$auto(r0, 0x4008af20, r0) 50.86655962s ago: executing program 4 (id=3396): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x10000, 0x4080000000db, 0xeb1, 0x2, 0x8000) open(0x0, 0x161342, 0x130) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x101, 0x103) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) 50.2864273s ago: executing program 4 (id=3397): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6e642, 0x0) write$auto(r0, 0x0, 0x100000a3d9) 38.525203771s ago: executing program 7 (id=3441): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x8, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20000, 0x0) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r1, 0x80044dfe, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) write$auto(r2, 0x0, 0x45c) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r3 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto_IMDELTIMER(r3, 0x80044941, 0x0) adjtimex$auto(&(0x7f0000000200)={0x5f95, 0x0, 0x2, 0x2000000a, 0xff7d, 0xbc58, 0x4000005, 0x0, 0x5, 0x8, 0x80000000, {0x7ff, 0xf423f}, 0x2744, 0x200000001, 0xff, 0x7, 0x0, 0x3c8, 0x8, 0x8, 0xffffffffffffffff, 0x1560cc85, 0x9}) sendmmsg$auto(r3, &(0x7f0000000240)={{&(0x7f0000000480)="41a07cc3c11a3a1b3a80ada9917abde8538919ca952a3a221c47806572c6be036ba07006da5d11406271e2e1caaca43be101152129b8fe81c1e6e804a99fbaeabd38243df64f7a1fb8b0d16d860fbed6560b733e5dccd9e6393e5811dee4a771d24c1bc6010ede0f2a3c161c0dbe2bc3ef14efc0707aaadf33", 0xfffffff8, &(0x7f0000000180)={&(0x7f0000000080)="ad21c732274f944ea3775a7800abb012694bd5c65f778d24fc3ce53f42773b999ab3a6d090d02b844bebc5f85119df15f2dbb237f3e4af20d269ef6a3b9b6e4cecf7e3a4e99c80da9deabc575bd317eb97105a1a07ee84e7237c6502e2b562ffc1a1860fbe3f35b785667fd54bdea4ea23cd01925b3b377006b28a20a82a6201a2bc0711fd961e118ae37b042438b423993cf17eeff7c63bfa1326335e8e29", 0x5}, 0xffffffffffffffff, &(0x7f00000001c0)="c70a459e5c127f5cf92a6e6f17bb7d1b10c9249f5895e2095f39c3c71244c50bfa6c12abdeeb512e0d5a87acf5191e6aee3ab0598f48611e9b140f5479130cfb94a80e21f0b9afefcb4a44a04fedeea4deb48b54bf57ef0fbc8fdf974dbc82ed5588a549d1ce8376ad34bba537e8e907ff", 0x0, 0x7ff}, 0x78}, 0xfffffffa, 0x2) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) renameat2$auto(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(r3, &(0x7f0000000440)={{&(0x7f0000000280)="0efcb3efdcf282e7d6fc97b5ed091751a9fddd599a9ba5739dfc07d7a17e6df868a1b6d0689fbf07b74a70fb78d5a99f2fc1aa0130cc8ad90d23cad982ab4af9c58cbf257231b1556fc64cd23ca1a68373e8ac74d7dc73e42f892a46e0681f3a85e87f130573029ba037a94a3de569160e", 0x5, &(0x7f00000003c0)={&(0x7f0000000340)="dc716b1ac7b770d9d47be14c7a019793973c1d90bc16effd82eddfc86bdc64ad3a7f7ef3870d2dfc9735bc0e300aa184a514cc506796", 0x9}, 0xb, &(0x7f0000000400)="79433ea18dbffb92", 0x7, 0x3469}, 0x80}, 0xffff4535, 0x401) mlock$auto(0xfbe8, 0x4) syz_clone(0x8124400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r4) syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000000), r0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x700fdef) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) 37.305180117s ago: executing program 7 (id=3445): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x121342, 0x0) socket(0x2, 0x3, 0xa) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket(0x6, 0x5, 0x9) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0xd0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/orangefs/perf_counters/ncache\x00', 0xa001, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_IEEE802154_ADD_IFACE(r0, 0x0, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x40000, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x12, 0x0, 0x0, &(0x7f0000000100)={[0x1fe, 0x6, 0x2, 0xffffffffffffffe7, 0x800000000000948b, 0x3, 0x15f4da0a, 0x3, 0x4000000000000003, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x8000000000000000, 0x6]}, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xd) setitimer$auto(0x2, 0x0, 0x0) setitimer$auto_ITIMER_PROF(0x2, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x6, 0x200009, 0x2, 0x40eb1, 0x602, 0x7) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) sendmsg$auto_IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={&(0x7f0000004fc0)={0x18, 0x0, 0x8574a35e83815fa9, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) 36.14213436s ago: executing program 7 (id=3450): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r0, r0, 0x0, 0x7ffff003) vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x5, 0x5]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x14000) clock_gettime$auto(0x0, 0x0) socket(0x2, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3dd) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) socket(0xa, 0x5, 0x84) setns(0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 35.277000319s ago: executing program 38 (id=3397): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x6e642, 0x0) write$auto(r0, 0x0, 0x100000a3d9) 34.153987609s ago: executing program 7 (id=3455): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x2a, 0x7fff, 0x3, 0xeb1, r0, 0x8000) close_range$auto(r0, r0, 0x0) fanotify_init$auto(0x65, 0x2) r1 = socket(0x1d, 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250400000008000c0001000200"], 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x40004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r4, 0x8, 0x1) fcntl$auto(r4, 0x10, 0x2) socket(0xa, 0x5, 0x0) setsockopt$auto(r1, 0x201ff, 0x7d, 0x0, 0xce) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x80) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x45cb) ioctl$auto(0x3, 0x8906, 0xd) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0xfff5}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) get_robust_list$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) mprotect$auto(0x1000, 0x401000, 0x4) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0x80001, 0x14, 0xffffffffffffffff, 0x0) read$auto(0x3, 0x0, 0x8080) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) 33.091572409s ago: executing program 7 (id=3456): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x10000, 0x4080000000db, 0xeb1, 0x2, 0x8000) open(0x0, 0x161342, 0x130) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x101, 0x103) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) read$auto_mon_fops_text_t_mon_text(r1, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2ab42, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES16, @ANYRES64=r2, @ANYRES16], 0xb4}}, 0x20000054) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfff) write$auto(r2, 0x0, 0x98c7) mmap$auto(0x4, 0x400008, 0xdf, 0x9b72, r0, 0x8000) madvise$auto(0x0, 0x4, 0x15) unshare$auto(0x40000080) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000400), 0x181040, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000001bc0)="51426572911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91dde6727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f6a5d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c622085783f6804edc3913fb9e98c55713fa0bf8101ad0f6f43407ce4be0001d1bb201bec283ade79ab23484c1076e703864629ac9a6031533dc956f705f89f0e0ef7d3109e46859d1f2ad1b8cb3cfcedf868a3be101e8b9acd75e39e6a27a541aa9fe86ad3119b7049c3fad2a901222eb948cabb4b5c3e5ba6ffc02a15bf7d550b00ab0f3dd3002924f7bd0701269ae293c4cb231b9127d1f6b38dd6fbb3429905384eed7eed9330a9c5e732bdd510169d9ca3e420ea2102be3770a0ab598c037b8f01e8910cf8b0942aafb156ac90724cf552df158a7f59c26e62f3fcf32d860c2259cb1b3118a773ff3cfbaf9c5b068dade5cd7778f1ea98700629b62534735fef3071c30afa6ea26f7e651ec140936c07d9e90f1c9faef3e05376b1e121af6a6691616c10e19fd4f16b1858b44d99e597908cda0e8fa8c21d8b700987d7723a4b5a4ff3c371f2d1cb9fb2f054abc58727239ba67a173f1431083fedc7c4304488c13c75e4995a58ac9de085377356ddc5338aeb44e7f3d06f82a5e0c846159c881a0395a3dbf32a9f2530a520721431a752b13b01a89bdf2b38387b72e8a533936623ec396f6ef94ddfcca047bf20a6fe450a03dedb36a57355e2519ff579b5c63095f48407ece8a7c6c4f5b2582616f0a6bba059810c0a28355fb08dceec9e290026452c3135f8ad93f9617f22e590122d43f6fdc1ea0f9ec12c551b5127108443bb081f7a89660034ea4f3c4305108428cc91918dbb28c2a117f09609e40903b13055e92a727afa767b1f97df335ee729686c0113e4cc18aa50f4ad82b1d403cc6c11ac3bf63415560417d7d488df01b69c925ca3fce60ca7ac767fd11df61caf62f3ab67dad043faf1cc334903e0f419c2e97553ecaad5814bf097192e76e9a16bc5c9be932718aba32cd7dbcc6bc634a463c6f709cc81963b39442e710c14c7e107b0aeb7b6a0e3f3757860d10dd741863277c43ce4dcec49f4558959b08f59182baf4f250aa045fee383ceaec280817bf222dfbeeca8c1ec8473176326c1ffd49ea072b5f3c73f36865b6052a1595c1bb76cfe37f976848fbcb408381ddeff9c318a2e6bbfe6c18ef16531fec3c47874a5391238c0d6b0e033db3fce94127cc9c98a4211e5d873f7b4810846d96be2d6cac532fce0ddee737e4d1ddb65b8b2449984a897e4090449ed4fb4006fb9d133e51396d4664a3f0c395c5b24781f8389979ccb565c6461b66db7134d15cff5ae8f935a5bcb23caace2edd2b37a726575e3cb0528de05edd9f03e30feb617767b6a557280a0a288b52af44a1607b6063867e5c9d8d56c44968fd509b5983fa06e6b1eefb2f8cee0c1cb49b8b569cf13b77adbc22ce972cd718167ac571ee41a446d13931f849d5636c729996b36ec84171fde260a4e01e9770cf687591a79833ae6473c51e12c0faab96ef093e6178d485526dbf775c94324c76bd4af2652e9036b1cc0d3df05c9232ee6eef7c4f46a6cf8ad160ad087aba6928bf156bf3ade1d135a965c4a2b283485737da67fe99227f2fbfb3baa74d75fe29122adfd82fcb9325b7ea826a52559654e76d494a374d9535facfcd4ab248e388c516bb8a0dc151b1557e418fd7c625c67ab1c50d6f05b97ba15c55631aeea44b21131aa93ead176f7bfd1418856e38782f004f272738827a64bb695f6b6a08cff8d1917be52a8851bd2bfd57d08bb0660e2ffc23792a419c2e9b006e3b0ad05044d99b97391fd2cceb86cf26acebe089a861340b04fd01e1baa70583032a30ea2e605217b80f7ee16d7e28be43d12bb2b67937dd26a8aeb84fef2f2d52f75232a400e7b279dcfc01953b0c46203477a50b5853e8f7b14b2ba31db742504bca6ed95b18846706c9fd85bf2a3a2642029b9ff2828bf0f7cbd96109a237961be8fe5c62f0fcc04c994f123f4a22f048403eac9308cfd2f2e4350c72e9ef83416ce973d3aa90d281a0275886dd3858b5869784ae58e257aa5af6d373dcc9cf520e364be748833adbb10daa6f6a334b51d27529d86ea5ce874562f9f93da45d244224b936fced3b658abbe7aa1f0d502fffce823f528ab47ea3540722f144733666229ae08cfc7e61247742ea4e3c180938ae7c7b81c1ee975c831f79672e044cefc49894c2ab73bba2580ac476cc0e56b6748b8edbb37a3f8dda7ffad4ec07abce7c4d10fc32e40d5a9db37f7b1e3a6eabedbefa9dd8eef189b92363d3391d384af26b7d47958d3d82845c9b668da5bcbd64058dc9e1c6d903ab5d2aa049d197116a11309a1abe9e5b3f9e7f1c623242b1d8089bc369d145a7070e8a9bdf543dbffe899ff9366009a3b0424a634681b530dad9ef23f136a10c7287068e57f3c2de45adf0a105c328e0035b97168f4c17aa4610b2e6e1a6ba0b71c06417b7a9497be4a009b19d7162adfd4d7b6490faf3782a920281333ad09b848ab5f4d15534b8c4e43dc9604b0630f8d349b2c80a98fde04693c31cbed7d460edfc0138dcc5d3974e682bbd555ac19625bf6e0607d8803391ec9c2dc41fc4e8bceae4f53507137324dd02914a067d52a577b812ddac4a34765c26a98839b3edb6290abff0c75991d6f8c1bd7540f38a7f25fec2f3539f894c938e1f3cf0ff1e6994d6a6ecc457a482f045ba712a85e8e31afd49c8e3480dc1c36d56ab2eceac6e5a847455d8ef4e3d45cd463c421bd1bce2ca57dd88f0e7ab3446cdfa8cb3914c240936f1738af7009e9131b240b59af55d7e38307b91fc8f00410cfdcfacaa341607a801afa63640091eb00b860700ea882878a8d9838f5597b970366be7d167ddebfe3c9253b5dbf7f30a67ee4d87dccb3c723c20200aa5fc036caf12811b19ce49c81ce328d7b24587353ecb99bafd327e33303cf447b36800d1bed8ee10df527d55c0d5f7506fb11cb133", 0x930) 30.704515338s ago: executing program 7 (id=3464): openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000000000)=@bpf_attr_7={@start_id=0x2, 0x1, 0x4}, 0x9) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x60081, 0x0) ioctl$auto_PPPIOCATTACH(r1, 0x4004743d, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x149e42, 0x0) mmap$auto(0xfffffffffffffffd, 0x810002, 0xffb, 0x8000000008011, r2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x8500, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) ioctl$auto(r4, 0x4008af12, r3) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x80101, 0x0) socket(0x2, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, 0x800054) shutdown$auto(0x200000003, 0x2) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 25.224512813s ago: executing program 1 (id=3483): statmount$auto(0x0, &(0x7f0000000880)={0x5, 0x2, 0x6, 0x7, 0x0, 0xfffffffffffffffa, 0x1ffde, 0x820c, 0x6, 0x2, 0x9, 0x6, 0x400001, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x2d7d01bf, 0x107, 0x2000, 0x7, 0x0, 0xb, 0x6ef, 0xb, 0x0, 0x0, 0xffffffe3, [0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x2, 0x8, 0x4, 0x0, 0x0, 0x10000000000, 0x3, 0x0, 0x80000001, 0x400000000000000, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xa5, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x35, 0x0, 0x2, 0x200, 0x0, 0x0, 0x1002], "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"}, 0x1fe, 0x533) r0 = timerfd_create$auto_CLOCK_TAI(0xb, 0x10) bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)=@iter_create={r0, 0x7ffffffd}, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/meminfo\x00', 0x40200, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x20008000) unshare$auto(0x7) socket(0x27, 0x5, 0x80) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x81, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) epoll_ctl$auto_EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000500)={0x2, 0x69a}) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) socketpair$auto(0x9, 0x10, 0x5, &(0x7f0000000540)=0x80) socket(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xc56e, &(0x7f0000000580)={[0x4, 0xfff, 0x401, 0x58, 0x7, 0x7, 0x400000002, 0x5, 0x7, 0x5, 0x9, 0x4, 0x0, 0x10, 0x1, 0x6]}, 0x0, 0x0, &(0x7f0000000040)={0x8, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x100, 0x0) epoll_create$auto(0x8ca0d1a) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000300)='j\xc27\b\\\xa1\xe9v*\xb6]ax\x04\xa9O\xb7\x1f\xae\ri\x1e\xe2\x12\x93\xd5\xe1\x17k`\b\xe6H\xd5\xc3\x05o1\xac,\xe0\xfd\xcc*\xb0g\xa6\x93\xd9\xf64d\xf3\xeb\x0ff\xea^\xf9\xc3\xb8\xc0_\xde\x1dE\xae\x82#\x00\x96\xa6w\xf4\xf1\xdd\xd4\xb1\xcez+c\xe4\x98\x1cLWl\xb6$\x1f\xd1\xec\x1dc\x90t%\xd3\x16E\xe2@8\xcfgT\xcb\xdb\xd3', 0xb) 23.372080639s ago: executing program 1 (id=3488): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x8, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20000, 0x0) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r1, 0x80044dfe, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) write$auto(r2, 0x0, 0x45c) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r3 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto_IMDELTIMER(r3, 0x80044941, 0x0) adjtimex$auto(&(0x7f0000000200)={0x5f95, 0x0, 0x2, 0x2000000a, 0xff7d, 0xbc58, 0x4000005, 0x0, 0x5, 0x8, 0x80000000, {0x7ff, 0xf423f}, 0x2744, 0x200000001, 0xff, 0x7, 0x0, 0x3c8, 0x8, 0x8, 0xffffffffffffffff, 0x1560cc85, 0x9}) sendmmsg$auto(r3, &(0x7f0000000240)={{&(0x7f0000000480)="41a07cc3c11a3a1b3a80ada9917abde8538919ca952a3a221c47806572c6be036ba07006da5d11406271e2e1caaca43be101152129b8fe81c1e6e804a99fbaeabd38243df64f7a1fb8b0d16d860fbed6560b733e5dccd9e6393e5811dee4a771d24c1bc6010ede0f2a3c161c0dbe2bc3ef14efc0707aaadf33", 0xfffffff8, &(0x7f0000000180)={&(0x7f0000000080)="ad21c732274f944ea3775a7800abb012694bd5c65f778d24fc3ce53f42773b999ab3a6d090d02b844bebc5f85119df15f2dbb237f3e4af20d269ef6a3b9b6e4cecf7e3a4e99c80da9deabc575bd317eb97105a1a07ee84e7237c6502e2b562ffc1a1860fbe3f35b785667fd54bdea4ea23cd01925b3b377006b28a20a82a6201a2bc0711fd961e118ae37b042438b423993cf17eeff7c63bfa1326335e8e29", 0x5}, 0xffffffffffffffff, &(0x7f00000001c0)="c70a459e5c127f5cf92a6e6f17bb7d1b10c9249f5895e2095f39c3c71244c50bfa6c12abdeeb512e0d5a87acf5191e6aee3ab0598f48611e9b140f5479130cfb94a80e21f0b9afefcb4a44a04fedeea4deb48b54bf57ef0fbc8fdf974dbc82ed5588a549d1ce8376ad34bba537e8e907ff", 0x0, 0x7ff}, 0x78}, 0xfffffffa, 0x2) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) renameat2$auto(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(r3, &(0x7f0000000440)={{&(0x7f0000000280)="0efcb3efdcf282e7d6fc97b5ed091751a9fddd599a9ba5739dfc07d7a17e6df868a1b6d0689fbf07b74a70fb78d5a99f2fc1aa0130cc8ad90d23cad982ab4af9c58cbf257231b1556fc64cd23ca1a68373e8ac74d7dc73e42f892a46e0681f3a85e87f130573029ba037a94a3de569160e", 0x5, &(0x7f00000003c0)={&(0x7f0000000340)="dc716b1ac7b770d9d47be14c7a019793973c1d90bc16effd82eddfc86bdc64ad3a7f7ef3870d2dfc9735bc0e300aa184a514cc506796", 0x9}, 0xb, &(0x7f0000000400)="79433ea18dbffb92", 0x7, 0x3469}, 0x80}, 0xffff4535, 0x401) mlock$auto(0xfbe8, 0x4) syz_clone(0x8124400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r4) syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000000), r0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x700fdef) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) 22.847092768s ago: executing program 9 (id=3490): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r0, r0, 0x0, 0x7ffff003) vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) socket(0x2, 0x1, 0x0) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xfff, 0x1, 0x948b, 0x3, 0x95f4da2d, 0xc, 0x6, 0x62, 0x7, 0x7, 0x6d3f, 0xa, 0x5, 0x5]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x60a41, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) clock_gettime$auto(0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) socket(0x2, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3dd) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) socket(0xa, 0x5, 0x84) setns(0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 22.39161527s ago: executing program 1 (id=3492): pwrite64$auto(0xffffffffffffffff, &(0x7f0000000280)='\vX\xb5o\x91p\xe6\x1eRN8\x99\x00\b\xaa\x1c\x00\x00\x00\x00c\x14\x03\xf1`\x9f5\xf9\xa4\xf8\x15\xdd\xac\x00\x00\x00\x00\x00\x00\"\x01\x0e\xa4\xdf\xdav\x1cC\xff\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\x9d*\xd1\x14^\xbe\xa2\x00\x00\x00\x01\x00\x00\x00\x00\x00\xe8\xff\x00'/97, 0x223ebe0f, 0x6c4) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty37\x00', 0x40840, 0x0) r1 = socket(0x1e, 0x1, 0x0) bind$auto(r1, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x0, 0x2}}, 0x66) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x10400, 0x0) close_range$auto(r3, 0xfffffffffffff000, 0x6) close_range$auto(0x0, r2, 0x6) r4 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x5, 0x4, 0x2bbbc995, 0x20000019, r1, 0x100000000002a) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCSCLOCKID(r6, 0x400445a0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nbd15/queue/io_poll\x00', 0x400040, 0x0) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000640)="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", 0x8) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4e8500, 0x0) mmap$auto(0x0, 0x4, 0x7, 0x40eb1, 0xffffffffffffffff, 0x3000001ffffd) ioctl$auto_MEMGETREGIONCOUNT(r5, 0x80044d07, 0x0) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) ioctl$auto(r0, 0x5608, 0x7) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000880)='/sys/devices/virtual/block/nbd15/removable\x00', 0x0, 0x0) read$auto(r7, &(0x7f00000008c0)='/dev/rfkill\x00', 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 21.813939085s ago: executing program 9 (id=3494): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) brk$auto(0x7) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/devices\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)=""/9, 0x9) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000040)={0x7ff, 0x7, 0x9, 0x8, 0x6, 0x0}) prctl$auto(0x1000000003b, 0x1, r1, 0x2, 0x103) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x2, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x4) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) migrate_pages$auto(0x0, 0x74, &(0x7f0000000780)=0x8000000000000001, &(0x7f00000007c0)=0x1) setsockopt$auto(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x22) writev$auto(r3, &(0x7f0000000240)={0x0, 0x7}, 0x3) r4 = bpf$auto_BPF_ENABLE_STATS(0x20, 0x0, 0xffff0001) shutdown$auto(r4, 0x4e3c49d1) lseek$auto(r4, 0x6, 0x800) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') 21.546869752s ago: executing program 1 (id=3496): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0xfffffffffffffffb, 0x400004, 0xc5, 0x9b72, 0xffffffffffffffff, 0x7ffc) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x0) r1 = socket(0x2, 0x1, 0x0) setsockopt$auto_SO_BUSY_POLL(r1, 0x6, 0x2e, &(0x7f0000000000)='!]\x00', 0x400000) sysfs$auto(0x2, 0xd, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x3ff, 0x0, 0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4, 0x4008) statmount$auto(0x0, 0x0, 0x7, 0x281) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x18000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x498240, 0x155) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, 0x0, 0x100000a3d9) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8001, 0x0) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$auto_HDIO_GETGEO(r4, 0x301, &(0x7f00000000c0)="4d84eefbf5aa9d87c9b46bc405d88fff7f000000000000190307000000269bf9510e0e9de99cc5ce64ddd54e") openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0200, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) ioctl$auto_PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f000000c380)={0x2060, 0x62, 0x100000, 0x7fffffffefff, 0x2, 0x1, 0x8, 0x10000000bff, 0x2c, 0x2c}) socket(0x2, 0x3, 0x1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000100)=@in={0x2, 0x4e20, @broadcast}, 0x1d) 21.062551994s ago: executing program 9 (id=3498): migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp1\x00', 0x80c42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)={0x28, r4, 0x1, 0x70bd37, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xb8, r3, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x4}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x8c, 0x19, 0x0, 0x1, [@nested={0x85, 0xc1, 0x0, 0x1, [@nested={0x4, 0xf1}, @nested={0x4, 0x144}, @generic="40feec4ce92d923f1dab813354f3f4201c59d3f304364823307f5c2226abb3894c1bbad1c1d9142cdf580be8e6648f29a2fec28be535fba37a995e3df9406ffedc47346811411df151b14789dd00ce7e0426b9772e77549b79e1d93caf1a7584cc11bd1ad94f4e7dc8e912f9c08987ed2c042aa0cdef03706a"]}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8044) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001fc, 0x7, 0xd3e, 0x1, 0x9687, 0xf6, 0x95f4da0a, 0x6, 0x3, 0x62, 0x5, 0x5, 0x6d3f, 0x7, 0x6, 0x6]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x3, 0x3, 0x3, 0x3, 0x8000000000000000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) 19.849689634s ago: executing program 9 (id=3501): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_GET_TXSC(r0, &(0x7f00000000c0)={0x0, 0xf0, &(0x7f0000000000)={&(0x7f0000000740)={0x14, r1, 0x186f202170196f7b, 0x703d26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40080c4) 19.739202815s ago: executing program 9 (id=3502): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x10000, 0x4080000000db, 0xeb1, 0x2, 0x8000) open(0x0, 0x161342, 0x130) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x101, 0x103) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) read$auto_mon_fops_text_t_mon_text(r1, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2ab42, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES16, @ANYRES64=r2, @ANYRES16], 0xb4}}, 0x20000054) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfff) write$auto(r2, 0x0, 0x98c7) mmap$auto(0x4, 0x400008, 0xdf, 0x9b72, r0, 0x8000) madvise$auto(0x0, 0x4, 0x15) unshare$auto(0x40000080) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000400), 0x181040, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 19.283236143s ago: executing program 1 (id=3503): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x10000, 0x4080000000db, 0xeb1, 0x2, 0x8000) open(0x0, 0x161342, 0x130) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x101, 0x103) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) read$auto_mon_fops_text_t_mon_text(r1, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2ab42, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES16, @ANYRES64=r2, @ANYRES16], 0xb4}}, 0x20000054) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfff) write$auto(r2, 0x0, 0x98c7) mmap$auto(0x4, 0x400008, 0xdf, 0x9b72, r0, 0x8000) madvise$auto(0x0, 0x4, 0x15) unshare$auto(0x40000080) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000400), 0x181040, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 18.773576237s ago: executing program 9 (id=3504): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027bd7000fddbdf256000000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000810}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x98c, r3, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_MLO_TTLM_DLINK={0x21, 0x148, "8fe0693f4f5dc6e39e20f9d1716aadf4ed26ee8bfc3e9787ffda39f75f"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9895}, @NL80211_ATTR_PMKID={0xe7, 0x55, "3b1904eacb277e4d40b1fa9ca6238c99db26ccf58c1ec54f558115fc4fa8277150abff1ae900cb9947fedd01904c46fa03d1781e9b4efc63b4ddb439070e0337d41a85f2df066477e850308301db325541b82feb1779336f65ffed771650feefcb89f541bb71e97a3586e2fd785ebf7d4b6f2f9c196f5f4f7f67b529688d8c4ae15e55122ec5790f0334fecde4e51398a4f49f8cdf97d9d0ae03cb73a057c58a30d075181745e89b39302731caaadad50462ffad049bacece7c3dd084ca3e3f67d04c097f8b79196aa0c46b8517ab7c179ae941778d562c2d835bcdcb759cfecf1e9ab"}, @NL80211_ATTR_IE={0x377, 0x2a, "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"}, @NL80211_ATTR_IE_RIC={0x4da, 0xb2, "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"}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xfffffc01}]}, 0x98c}, 0x1, 0x0, 0x0, 0x801}, 0x1) r5 = set_tid_address$auto(0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) uname$auto(0x0) setsockopt$auto(0x3, 0x10000000084, 0x84, 0x0, 0x90) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) ioctl$auto_BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={@inferred=r2, 0xcf27, 0x7, @unused, @name="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"}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nfs/parameters/callback_tcpport\x00', 0x183042, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r7, 0x0, 0x5, 0x20000000) r8 = epoll_create$auto(0x8800001) epoll_ctl$auto(r8, 0x1, r6, 0x0) connect$auto(0x3, 0x0, 0x52) shutdown$auto(0x200000003, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) kcmp$auto(r0, r5, 0x8, 0xffffffffffffffff, 0xffffffffffffffff) 18.32877334s ago: executing program 1 (id=3506): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), 0xffffffffffffffff) r2 = openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000002bc0), 0x8000, 0x0) readv$auto(r2, &(0x7f0000002c80)={&(0x7f0000002c00), 0x1}, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) socket(0x9, 0x2, 0x1) setsockopt$auto(0x3, 0xa0be, 0xd1, 0xfffffffffffffffc, 0xfd6e) sendmsg$auto_NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fddbdf256000000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) sendmsg$auto_NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="00000000d11217c72c9bbe63ed541526b8f36cc6cca05ecfeb07d37e10cdaf08d34009174d8344684d7b3400"/65, @ANYRES16=r1, @ANYBLOB="000125bd7000fbdbdf25680000000000480135685e992d4cce27a108176ebe3b8817ebb582d9041a5ab4349d22da5acf73da4d22a953b1f698b4bb788c3caaab33a9b95b94b32a7c9213c86f9f26d3f7794061bbcfd8b6c1d0abe433948d098c82586bcd295f65abc07d3cf1690b98648366f6e22c9d7fb8522c85bc56c78782a7d5655a163877c19728d29fac845f88ce7abbce5870c53fc18a30dfa65670ce380117c9041c3bccc0066bfff17e911893269333ace73dfdbcd952f0263be61d579d3c93211cc4890976207a0000dbbdaa6dae471f0008004a00050000000800a00095980000e70055003b1904eacb277e4d40b1fa9ca6238c99db26ccf58c1ec54f558115fc4fa8277150abff1ae900cb9947fedd01904c46fa03d1781e9b4efc63b4ddb439070e0337d41a85f2df066477e850308301db325541b82feb1779336f65ffed771650feefcb89f541bb71e97a3586e2fd785ebf7d4b6f2f9c196f5f4f7f67b529688d8c4ae15e55122ec5790f0334fecde4e51398a4f49f8cdf97d9d0ae03cb73a057c58a30d075181745e89b39302731caaadad50462ffad049bacece7c3dd084ca3e3f67d04c097f8b79196aa0c46b8517ab7c179ae941778d562c2d835bcdcb759cfecf1e9ab0077032a00e53bfd562545b89dcd96822818a1b3e1eb0e042c439ff78ac83e4a190ffb33c2ba39d0ea4935e0760732c0ea796fab71befcf0074559b093286c76d059096d531291ab0db8c2671dedd0d26dc4d2737a7bc81579a3c9ba8947adb1e716d099c79b183011d2e8148f684b38ec8481eca71dd3507d4b6b3e4dacb8a6502039065dcbfb5c93df63df2b95b97016dac4fb438f316157136dfa9551a9b7073cff15180b45c53cca18f8ee03b048f360773e50002ae7fee45cd6d838621ca5fa0b227014c397836cc120938805208d4d3117479fff06fe55ac01e4b6f6d4128abc2294dfa354532a08cde24cd8d1b433848df8b97ad944d9f43451de06c2bccec34d242e9284df25d69c97535c7d880d1db71c78482d55e4c1ddbd929cc5b5c5390bada4dcaa1437caa56a3bea78b577d6f34869aaf27375d8f825d8e5558ef597fe8bdbfd4c4dcd28f7d08df9dee17e4df694429e8deaa440c14256e530fcc93696d23ff6d6518b0aced9dba0e509abc6208d9a6bf7a5f50d02187a3473b63ac532e643c3f7dc1626910b4238d76ca075bb1c591ba383052f0ede457fb93bb021c2d845207da751173f73b3edf8b36bf1ddc9511254c8749f327ee1e3b7ac6a49c86fd302051953251505c44fdc50145f0a0fe82b149672374a16d543760a0882b8f945185dc67ca01b3080d06634620a24d8bd4730e09d0b6623f57a9d4ac436b98bc59d5fecdc7ee8d4debd9e9c8d7cc61998cfe94a6956a612b06ba16524474dde4e43f3082ae923dd6a973872a2acfce8b6f1808d0bb4ce650133a2094c22e23901bb25aa34ef878c3d51bbb851cdccbb6893571b39bf12a2514dd0147dd9dedbcf3ff4b32f5cdd8fd8d90d499d7c1882e0432319f08294971725baf505df89dbc66b5541dbd6840a4a3b1eec26e537f0e334ca3c36c6baba77b90930750dc9cdad05285b466c4cfcaf18ec7e0e249c3ea15b9a21710ba1862065d40e8405b878e2822426b1882f9bc919cf3b2e56f0e543247f50859273c1be6ba0fc891abdd60b44bef3f95262e0cf455a51ce03c6482aa66f703476366dd938d7a33477222f1e8384fbf996fa6ad33e6dfec20287bab6ac9c4348b2572037fa6298a7afeddbdd3053560b8ae92f17d0f8ee973b8feddd544148b52ccddad43faac32fc541db8b0a44aa95d9971b3dd2e7d58dd91a9cb3daffff9e69416593ff0d8a7b9ff2fb4eed727df1d65666ffced6de3234f65623fd9400adfe3700ed00000008009f0000fcffff"], 0x96c}, 0x1, 0x0, 0x0, 0x4000801}, 0x1) set_tid_address$auto(0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x20004000000000e1, 0xeb1, 0xffffffffffffffff, 0x8000) uname$auto(0x0) setsockopt$auto(0xffffffffffffffff, 0x4, 0x0, 0x0, 0x90) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x15, 0x5, 0x0) ioctl$auto_BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000c00)={@inferred=r4, 0xcf2a, 0x7, @unused, @name="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"}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nfs/parameters/callback_tcpport\x00', 0x183042, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, r5, 0x6) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) read$auto_bdi_debug_stats_fops_(0xffffffffffffffff, &(0x7f0000000140)=""/57, 0xfffffd4f) close_range$auto(0x2, 0x8, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket(0x26, 0x1, 0x5) r7 = epoll_create$auto(0x8800001) epoll_ctl$auto(r7, 0x1, r6, 0x0) connect$auto(0x3, 0x0, 0x52) shutdown$auto(0x200000003, 0xa) 15.74066225s ago: executing program 39 (id=3464): openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000000000)=@bpf_attr_7={@start_id=0x2, 0x1, 0x4}, 0x9) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x60081, 0x0) ioctl$auto_PPPIOCATTACH(r1, 0x4004743d, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x149e42, 0x0) mmap$auto(0xfffffffffffffffd, 0x810002, 0xffb, 0x8000000008011, r2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x8500, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) ioctl$auto(r4, 0x4008af12, r3) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x80101, 0x0) socket(0x2, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}, 0x800054) shutdown$auto(0x200000003, 0x2) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6.128541922s ago: executing program 3 (id=3544): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x43403d05, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) r1 = socket(0xb, 0x2, 0xe974) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) io_uring_setup$auto(0x86, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) madvise$auto(0xffffffffffffffcb, 0x3, 0xf) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0x4008ae8a, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000810) ioctl$auto_BTRFS_IOC_FORGET_DEV(0xffffffffffffffff, 0x50009405, &(0x7f00000010c0)={@inferred=r1, "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"}) setsockopt$auto_SO_PASSCRED(r0, 0x5, 0x10, &(0x7f0000000100)='MAC80211_HWSIM\x00', 0x6) 5.928088943s ago: executing program 3 (id=3545): rseq$auto(&(0x7f0000000140)={0xe, 0x5, 0x2c2, 0x23, 0x8007d, 0xfffffffe, "26c788a7a5024a9859acd35804093ad080405e5667c1ebdf247e1520d2c4f723c82081928a325dde6dcc8b245461261f1e847bfe4289c4a3d8893fe91794c1a983b7dec4715155f202bcb0489c4e8c9a1391f75a1e4c289bd6c51ca54f1d"}, 0x8000, 0x2000, 0x6) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000400)={{0xc, 0x23, 0xa6, 0x83}, "66ac010005000000000068d190eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eaf240963110d61771552c03de65800", 0x2}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) ioctl$auto_UI_SET_MSCBIT(r0, 0x40045568, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/set_event\x00', 0x220442, 0x0) mmap$auto(0x6, 0x202000b, 0x9, 0x17, r1, 0x8000) close_range$auto(0x2, 0x8, 0x1f) mkdir$auto(0x0, 0x8001) lseek$auto(r1, 0x200006, 0x6) io_uring_setup$auto(0xfffff7fc, 0x0) mmap$auto(0x0, 0xc, 0x3, 0xeb1, r1, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000240)={0x123062000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) mremap$auto(0x110c230000, 0x0, 0x101, 0x3, 0xfffffffffffffffc) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x3) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004814}, 0x8800) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0) sendfile$auto(r3, r4, 0x0, 0x800048) close_range$auto(r4, 0x8, 0x0) mmap$auto(0x1000000000, 0x0, 0xe, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x181383, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x544282, 0x0) close_range$auto(0x2, 0x8, 0x0) pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x1, &(0x7f0000000040)={@_si_pad}, 0xa) 5.417658504s ago: executing program 3 (id=3549): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) ioctl$auto(r0, 0x400454ca, 0x38) r2 = io_uring_setup$auto(0xe, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x7ffffffff000}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, r2, 0xbffffffc) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0x4018aebd, r3) close_range$auto(0x2, 0xa, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x40, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000200)='5', 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r7) ioctl$auto_KVM_GET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000081, 0x402}]}) mmap$auto(0x80000000000000, 0x20009, 0x4000000000df, 0xef1, 0xffffffffffffffff, 0x8000) 5.21143494s ago: executing program 3 (id=3551): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/device_info\x00', 0x8002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@task_fd_query={0x0, 0xffffffffffffffff, 0xb0, 0x8bd, 0x8, 0x2, 0xffffffffffffffff, 0x6, 0x6}, 0xa3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) io_setup$auto(0x1, 0x0) r2 = socket(0x2c, 0x3, 0x0) getsockopt$auto(r2, 0x11b, 0x8, 0x0, 0x0) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xa, @new_map_fd=0x2, 0x7, @old_map_fd=r1}, 0xa3) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000240)="22edd92f26639ec07e6e5d09f20c7c160a4dc5023a92446435820bd54b8004043262db0a8686bd579dcf16f50e9bfa20abfa3a", 0x33) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec2\x00', 0x20081, 0x0) ioctl$auto_CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000080)={0x40000000001, 0x1, 0x7, 0x8, 0x2, 0xcb, "8a9750a07c00", 0x6, 0x6, 0x6, 0x9, 0x8, 0x5, 0x81}) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r4 = socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r4, 0x84, 0x82, 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040894) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x06\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') 4.672719155s ago: executing program 8 (id=3552): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) ioctl$auto(r0, 0x400454ca, 0x38) r2 = io_uring_setup$auto(0xe, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x7ffffffff000}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, r2, 0xbffffffc) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xc048aec8, 0xffffffffffffffff) close_range$auto(0x2, 0xa, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x103680, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000200)='5', 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) ioctl$auto_KVM_GET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000081, 0x402}]}) mmap$auto(0x80000000000000, 0x20009, 0x4000000000df, 0xef1, 0xffffffffffffffff, 0x8000) 4.405958285s ago: executing program 8 (id=3553): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x200008000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/rotate\x00', 0xb02, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1a, 0x6, 0xffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/o2cb/logmask/DLMFS\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x88000, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000100)={0x2, 0x179, [{0xc0000103, 0x5, 0x80000000}]}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/011/001\x00', 0xd8241, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0x2003f0, 0x18) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS2\x00', 0x161a41, 0x0) close_range$auto(0x2, 0x8, 0x0) 4.282758022s ago: executing program 3 (id=3554): r0 = socket(0x2, 0x3, 0x9) r1 = openat$auto_ptdump_curknl_fops_(0xffffffffffffff9c, &(0x7f0000000b00), 0x100, 0x0) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x25c, 0x8000000000df, 0x9b72, 0xffffffffffffffff, 0x808000) io_uring_setup$auto(0x401, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r2, 0x84, 0x81, 0x0, 0x0) read$auto_ptdump_curknl_fops_(r1, &(0x7f0000000080)=""/104, 0x68) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)) sendmsg$auto_NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000080) 4.077592385s ago: executing program 8 (id=3555): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket(0x2, 0x3, 0xa) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket(0x6, 0x5, 0x9) read$auto(0xffffffffffffffff, 0x0, 0xd) setitimer$auto(0x2, 0x0, 0x0) setitimer$auto_ITIMER_PROF(0x2, 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x6, 0x200009, 0x2, 0x40eb1, 0x602, 0x7) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40100, 0x0) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={&(0x7f0000004fc0)={0x18, r1, 0x8574a35e83815fa9, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd5, 0x948b, 0x3f, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x3, 0xfffffffffefffffe]}, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/dev/vmci\x00', 0xffffffff) close_range$auto(0x2, 0xa, 0x0) 3.616242622s ago: executing program 8 (id=3556): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram3/trace/enable\x00', 0x2062, 0x0) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r0, &(0x7f0000000440)='0f\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) 3.58728847s ago: executing program 40 (id=3504): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010027bd7000fddbdf256000000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000810}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x98c, r3, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_MLO_TTLM_DLINK={0x21, 0x148, "8fe0693f4f5dc6e39e20f9d1716aadf4ed26ee8bfc3e9787ffda39f75f"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9895}, @NL80211_ATTR_PMKID={0xe7, 0x55, "3b1904eacb277e4d40b1fa9ca6238c99db26ccf58c1ec54f558115fc4fa8277150abff1ae900cb9947fedd01904c46fa03d1781e9b4efc63b4ddb439070e0337d41a85f2df066477e850308301db325541b82feb1779336f65ffed771650feefcb89f541bb71e97a3586e2fd785ebf7d4b6f2f9c196f5f4f7f67b529688d8c4ae15e55122ec5790f0334fecde4e51398a4f49f8cdf97d9d0ae03cb73a057c58a30d075181745e89b39302731caaadad50462ffad049bacece7c3dd084ca3e3f67d04c097f8b79196aa0c46b8517ab7c179ae941778d562c2d835bcdcb759cfecf1e9ab"}, @NL80211_ATTR_IE={0x377, 0x2a, "e53bfd562545b89dcd96822818a1b3e1eb0e042c439ff78ac83e4a190ffb33c2ba39d0ea4935e0760732c0ea796fab71befcf0074559b093286c76d059096d531291ab0db8c2671dedd0d26dc4d2737a7bc81579a3c9ba8947adb1e716d099c79b183011d2e8148f684b38ec8481eca71dd3507d4b6b3e4dacb8a6502039065dcbfb5c93df63df2b95b97016dac4fb438f316157136dfa9551a9b7073cff15180b45c53cca18f8ee03b048f360773e50002ae7fee45cd6d838621ca5fa0b227014c397836cc120938805208d4d3117479fff06fe55ac01e4b6f6d4128abc2294dfa354532a08cde24cd8d1b433848df8b97ad944d9f43451de06c2bccec34d242e9284df25d69c97535c7d880d1db71c78482d55e4c1ddbd929cc5b5c5390bada4dcaa1437caa56a3bea78b577d6f34869aaf27375d8f825d8e5558ef597fe8bdbfd4c4dcd28f7d08df9dee17e4df694429e8deaa440c14256e530fcc93696d23ff6d6518b0aced9dba0e509abc6208d9a6bf7a5f50d02187a3473b63ac532e643c3f7dc1626910b4238d76ca075bb1c591ba383052f0ede457fb93bb021c2d845207da751173f73b3edf8b36bf1ddc9511254c8749f327ee1e3b7ac6a49c86fd302051953251505c44fdc50145f0a0fe82b149672374a16d543760a0882b8f945185dc67ca01b3080d06634620a24d8bd4730e09d0b6623f57a9d4ac436b98bc59d5fecdc7ee8d4debd9e9c8d7cc61998cfe94a6956a612b06ba16524474dde4e43f3082ae923dd6a973872a2acfce8b6f1808d0bb4ce650133a2094c22e23901bb25aa34ef878c3d51bbb851cdccbb6893571b39bf12a2514dd0147dd9dedbcf3ff4b32f5cdd8fd8d90d499d7c1882e0432319f08294971725baf505df89dbc66b5541dbd6840a4a3b1eec26e537f0e334ca3c36c6baba77b90930750dc9cdad05285b466c4cfcaf18ec7e0e249c3ea15b9a21710ba1862065d40e8405b878e2822426b1882f9bc919cf3b2e56f0e543247f50859273c1be6ba0fc891abdd60b44bef3f95262e0cf455a51ce03c6482aa66f703476366dd938d7a33477222f1e8384fbf996fa6ad33e6dfec20287bab6ac9c4348b2572037fa6298a7afeddbdd3053560b8ae92f17d0f8ee973b8feddd544148b52ccddad43faac32fc541db8b0a44aa95d9971b3dd2e7d58dd91a9cb3daffff9e69416593ff0d8a7b9ff2fb4eed727df1d65666ffced6de3234f65623fd94"}, @NL80211_ATTR_IE_RIC={0x4da, 0xb2, "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"}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xfffffc01}]}, 0x98c}, 0x1, 0x0, 0x0, 0x801}, 0x1) r5 = set_tid_address$auto(0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) uname$auto(0x0) setsockopt$auto(0x3, 0x10000000084, 0x84, 0x0, 0x90) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) ioctl$auto_BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={@inferred=r2, 0xcf27, 0x7, @unused, @name="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"}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nfs/parameters/callback_tcpport\x00', 0x183042, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r7, 0x0, 0x5, 0x20000000) r8 = epoll_create$auto(0x8800001) epoll_ctl$auto(r8, 0x1, r6, 0x0) connect$auto(0x3, 0x0, 0x52) shutdown$auto(0x200000003, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) kcmp$auto(r0, r5, 0x8, 0xffffffffffffffff, 0xffffffffffffffff) 3.489936403s ago: executing program 8 (id=3558): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x11, 0x3, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x10000, 0x4080000000db, 0xeb1, 0x2, 0x8000) open(0x0, 0x161342, 0x130) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x101, 0x103) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) read$auto_mon_fops_text_t_mon_text(r1, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2ab42, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES16, @ANYRES64=r2, @ANYRES16], 0xb4}}, 0x20000054) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfff) write$auto(r2, 0x0, 0x98c7) mmap$auto(0x4, 0x400008, 0xdf, 0x9b72, r0, 0x8000) madvise$auto(0x0, 0x4, 0x15) unshare$auto(0x40000080) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000400), 0x181040, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000001bc0)="51426572911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91dde6727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f6a5d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c622085783f6804edc3913fb9e98c55713fa0bf8101ad0f6f43407ce4be0001d1bb201bec283ade79ab23484c1076e703864629ac9a6031533dc956f705f89f0e0ef7d3109e46859d1f2ad1b8cb3cfcedf868a3be101e8b9acd75e39e6a27a541aa9fe86ad3119b7049c3fad2a901222eb948cabb4b5c3e5ba6ffc02a15bf7d550b00ab0f3dd3002924f7bd0701269ae293c4cb231b9127d1f6b38dd6fbb3429905384eed7eed9330a9c5e732bdd510169d9ca3e420ea2102be3770a0ab598c037b8f01e8910cf8b0942aafb156ac90724cf552df158a7f59c26e62f3fcf32d860c2259cb1b3118a773ff3cfbaf9c5b068dade5cd7778f1ea98700629b62534735fef3071c30afa6ea26f7e651ec140936c07d9e90f1c9faef3e05376b1e121af6a6691616c10e19fd4f16b1858b44d99e597908cda0e8fa8c21d8b700987d7723a4b5a4ff3c371f2d1cb9fb2f054abc58727239ba67a173f1431083fedc7c4304488c13c75e4995a58ac9de085377356ddc5338aeb44e7f3d06f82a5e0c846159c881a0395a3dbf32a9f2530a520721431a752b13b01a89bdf2b38387b72e8a533936623ec396f6ef94ddfcca047bf20a6fe450a03dedb36a57355e2519ff579b5c63095f48407ece8a7c6c4f5b2582616f0a6bba059810c0a28355fb08dceec9e290026452c3135f8ad93f9617f22e590122d43f6fdc1ea0f9ec12c551b5127108443bb081f7a89660034ea4f3c4305108428cc91918dbb28c2a117f09609e40903b13055e92a727afa767b1f97df335ee729686c0113e4cc18aa50f4ad82b1d403cc6c11ac3bf63415560417d7d488df01b69c925ca3fce60ca7ac767fd11df61caf62f3ab67dad043faf1cc334903e0f419c2e97553ecaad5814bf097192e76e9a16bc5c9be932718aba32cd7dbcc6bc634a463c6f709cc81963b39442e710c14c7e107b0aeb7b6a0e3f3757860d10dd741863277c43ce4dcec49f4558959b08f59182baf4f250aa045fee383ceaec280817bf222dfbeeca8c1ec8473176326c1ffd49ea072b5f3c73f36865b6052a1595c1bb76cfe37f976848fbcb408381ddeff9c318a2e6bbfe6c18ef16531fec3c47874a5391238c0d6b0e033db3fce94127cc9c98a4211e5d873f7b4810846d96be2d6cac532fce0ddee737e4d1ddb65b8b2449984a897e4090449ed4fb4006fb9d133e51396d4664a3f0c395c5b24781f8389979ccb565c6461b66db7134d15cff5ae8f935a5bcb23caace2edd2b37a726575e3cb0528de05edd9f03e30feb617767b6a557280a0a288b52af44a1607b6063867e5c9d8d56c44968fd509b5983fa06e6b1eefb2f8cee0c1cb49b8b569cf13b77adbc22ce972cd718167ac571ee41a446d13931f849d5636c729996b36ec84171fde260a4e01e9770cf687591a79833ae6473c51e12c0faab96ef093e6178d485526dbf775c94324c76bd4af2652e9036b1cc0d3df05c9232ee6eef7c4f46a6cf8ad160ad087aba6928bf156bf3ade1d135a965c4a2b283485737da67fe99227f2fbfb3baa74d75fe29122adfd82fcb9325b7ea826a52559654e76d494a374d9535facfcd4ab248e388c516bb8a0dc151b1557e418fd7c625c67ab1c50d6f05b97ba15c55631aeea44b21131aa93ead176f7bfd1418856e38782f004f272738827a64bb695f6b6a08cff8d1917be52a8851bd2bfd57d08bb0660e2ffc23792a419c2e9b006e3b0ad05044d99b97391fd2cceb86cf26acebe089a861340b04fd01e1baa70583032a30ea2e605217b80f7ee16d7e28be43d12bb2b67937dd26a8aeb84fef2f2d52f75232a400e7b279dcfc01953b0c46203477a50b5853e8f7b14b2ba31db742504bca6ed95b18846706c9fd85bf2a3a2642029b9ff2828bf0f7cbd96109a237961be8fe5c62f0fcc04c994f123f4a22f048403eac9308cfd2f2e4350c72e9ef83416ce973d3aa90d281a0275886dd3858b5869784ae58e257aa5af6d373dcc9cf520e364be748833adbb10daa6f6a334b51d27529d86ea5ce874562f9f93da45d244224b936fced3b658abbe7aa1f0d502fffce823f528ab47ea3540722f144733666229ae08cfc7e61247742ea4e3c180938ae7c7b81c1ee975c831f79672e044cefc49894c2ab73bba2580ac476cc0e56b6748b8edbb37a3f8dda7ffad4ec07abce7c4d10fc32e40d5a9db37f7b1e3a6eabedbefa9dd8eef189b92363d3391d384af26b7d47958d3d82845c9b668da5bcbd64058dc9e1c6d903ab5d2aa049d197116a11309a1abe9e5b3f9e7f1c623242b1d8089bc369d145a7070e8a9bdf543dbffe899ff9366009a3b0424a634681b530dad9ef23f136a10c7287068e57f3c2de45adf0a105c328e0035b97168f4c17aa4610b2e6e1a6ba0b71c06417b7a9497be4a009b19d7162adfd4d7b6490faf3782a920281333ad09b848ab5f4d15534b8c4e43dc9604b0630f8d349b2c80a98fde04693c31cbed7d460edfc0138dcc5d3974e682bbd555ac19625bf6e0607d8803391ec9c2dc41fc4e8bceae4f53507137324dd02914a067d52a577b812ddac4a34765c26a98839b3edb6290abff0c75991d6f8c1bd7540f38a7f25fec2f3539f894c938e1f3cf0ff1e6994d6a6ecc457a482f045ba712a85e8e31afd49c8e3480dc1c36d56ab2eceac6e5a847455d8ef4e3d45cd463c421bd1bce2ca57dd88f0e7ab3446cdfa8cb3914c240936f1738af7009e9131b240b59af55d7e38307b91fc8f00410cfdcfacaa341607a801afa63640091eb00b860700ea882878a8d9838f5597b970366be7d167ddebfe3c9253b5dbf7f30a67ee4d87dccb3c723c20200aa5fc036caf12811b19ce49c81ce328d7b24587353ecb99bafd327e33303cf447b36800d1bed8ee10df527d55c0d5f7506fb11cb133", 0x930) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 3.369435007s ago: executing program 41 (id=3506): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), 0xffffffffffffffff) r2 = openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000002bc0), 0x8000, 0x0) readv$auto(r2, &(0x7f0000002c80)={&(0x7f0000002c00), 0x1}, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) socket(0x9, 0x2, 0x1) setsockopt$auto(0x3, 0xa0be, 0xd1, 0xfffffffffffffffc, 0xfd6e) sendmsg$auto_NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fddbdf256000000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) sendmsg$auto_NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="00000000d11217c72c9bbe63ed541526b8f36cc6cca05ecfeb07d37e10cdaf08d34009174d8344684d7b3400"/65, @ANYRES16=r1, @ANYBLOB="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"], 0x96c}, 0x1, 0x0, 0x0, 0x4000801}, 0x1) set_tid_address$auto(0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x20004000000000e1, 0xeb1, 0xffffffffffffffff, 0x8000) uname$auto(0x0) setsockopt$auto(0xffffffffffffffff, 0x4, 0x0, 0x0, 0x90) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x15, 0x5, 0x0) ioctl$auto_BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000c00)={@inferred=r4, 0xcf2a, 0x7, @unused, @name="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"}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/nfs/parameters/callback_tcpport\x00', 0x183042, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, r5, 0x6) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) read$auto_bdi_debug_stats_fops_(0xffffffffffffffff, &(0x7f0000000140)=""/57, 0xfffffd4f) close_range$auto(0x2, 0x8, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket(0x26, 0x1, 0x5) r7 = epoll_create$auto(0x8800001) epoll_ctl$auto(r7, 0x1, r6, 0x0) connect$auto(0x3, 0x0, 0x52) shutdown$auto(0x200000003, 0xa) 2.476341187s ago: executing program 8 (id=3560): openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, 0x0, 0x80301, 0x0) setsockopt$auto(0x3, 0x29, 0x46, 0x0, 0x808) io_getevents$auto(0x1, 0x401, 0xfffffffffffffffe, 0x0, &(0x7f00000000c0)={0x200000000000001, 0x6}) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x8000000000002, 0x0, 0x10000000, 0x3) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2?', 0x80000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmdt$auto(0x0) socket(0x7, 0x3, 0x2) read$auto(0xffffffffffffffff, 0x0, 0x20) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) r1 = socket(0xa, 0x5, 0x0) chdir$auto(&(0x7f0000000340)='./file1\x00') r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x40001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), 0xffffffffffffffff) waitid$auto_P_PID(0x1, 0x0, 0x0, 0xf, &(0x7f0000000440)={{0x7, 0x24}, {0x929a, 0x1ff}, 0x9, 0x3, 0x4032, 0xfffffffffffffff4, 0x4df, 0x0, 0x8, 0x8fb000, 0x0, 0x100, 0x4, 0x3, 0xd, 0x1}) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xcc0}, 0x1, 0x0, 0x0, 0x10}, 0x8010) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000040)=0x5) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x20002, 0x0) io_uring_setup$auto(0x3ff, &(0x7f0000000180)={0x38e, 0x4, 0x8, 0x8, 0x0, 0x8, r4, [0x0, 0x8, 0x8000], {0x2, 0x207, 0x8, 0x7d4a5b8c, 0x0, 0x4, 0x2b, 0x7, 0x2}, {0x80, 0x9, 0x4e4, 0x7fffffff, 0x5, 0xac64, 0xffff6764, 0x9, 0x5}}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0xd, 0x7d48, 0x948b, 0x4, 0x15f4da0c, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x5, 0x2, 0x1]}, 0x0) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) 0s ago: executing program 3 (id=3561): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) r1 = fcntl$auto(r0, 0x402, 0x8000007fffffdf) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) sendmsg$auto_NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="aa5fb57b0ed4e566faf684617cfb346610b87446547e5e853be639d0d143b5ec99aea5d8183f6248bb64576655a3cadf9a6478cffa4936c10272ef861b2e08334a0e44b5c41e592e45d50ae361ec4a0acfffe1d11696c8244bc13d1c3960f3d5061cd7c7d681c182735c7522fa30a0", @ANYRES16=r2, @ANYBLOB="00032abd7000ffdbdf258300000008006a009fe9000006001401050000000500d200070000000c00328005000100090000001f001a00b5463379b8cfc0f3f57f283475adbea3d2f640b7ac697d717ebe910005008a009c00000008000900000000003e0028011a4b111050b6c9f67f8ca5c5f91ccec1904e4f1553758544a6355ad880e64a015a3f406c3133205b96554724e67858b8dfbd3175660e11596d3b0000"], 0xa8}}, 0x40000c1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r3) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="130036017040dddbdf2502000000f9ff0200075ca8c09790d55ae1de43ecdd3d94508c55bb3e182f2a7ae7839ba1b4bff126ef671f273fcd50bd8634514747002dccee62eae1423e32946991febf2de1f98d10f8a50a762b7e403802286309894837a3a0d9fbcef5620f7aab5072a8f84276e103ed4b46767847568a27679a3a65b07b983bafa1b1b3672c83bf8f2f5d3976362dc0bd7506fe0000000000000000", @ANYRES32=r4, @ANYBLOB="08000a0101000000"], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) sendmsg$auto_NL80211_CMD_STOP_NAN(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r6, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x8001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x803) kernel console output (not intermixed with test programs): 1024][T19848] ? security_capable+0x7e/0x260 [ 787.611046][T19848] copy_namespaces+0x468/0x570 [ 787.611064][T19848] copy_process+0x2a70/0x7430 [ 787.611092][T19848] ? __pfx_copy_process+0x10/0x10 [ 787.611114][T19848] ? futex_private_hash_put+0x160/0x1b0 [ 787.611132][T19848] kernel_clone+0xfc/0x910 [ 787.611152][T19848] ? __pfx_kernel_clone+0x10/0x10 [ 787.611180][T19848] __do_sys_clone+0xce/0x120 [ 787.611199][T19848] ? __pfx___do_sys_clone+0x10/0x10 [ 787.611226][T19848] ? xfd_validate_state+0x61/0x180 [ 787.611245][T19848] do_syscall_64+0xcd/0xf80 [ 787.611265][T19848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.611280][T19848] RIP: 0033:0x7f45cc98f7c9 [ 787.611292][T19848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 787.611306][T19848] RSP: 002b:00007f45cd8b2fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 787.611322][T19848] RAX: ffffffffffffffda RBX: 00007f45ccbe6090 RCX: 00007f45cc98f7c9 [ 787.611336][T19848] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 787.611346][T19848] RBP: 00007f45cca13f91 R08: 0000000000000000 R09: 0000000000000000 [ 787.611354][T19848] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 787.611362][T19848] R13: 00007f45ccbe6128 R14: 00007f45ccbe6090 R15: 00007ffe9d60c148 [ 787.611381][T19848] [ 787.612479][ T3737] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.888724][T19853] CPU: 1 UID: 0 PID: 19853 Comm: syz.0.3150 Tainted: G L syzkaller #0 PREEMPT(full) [ 787.888750][T19853] Tainted: [L]=SOFTLOCKUP [ 787.888756][T19853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 787.888765][T19853] Call Trace: [ 787.888770][T19853] [ 787.888777][T19853] dump_stack_lvl+0x16c/0x1f0 [ 787.888802][T19853] should_fail_ex+0x512/0x640 [ 787.888818][T19853] ? __kmalloc_cache_noprof+0x5f/0x800 [ 787.888836][T19853] should_failslab+0xc2/0x120 [ 787.888856][T19853] __kmalloc_cache_noprof+0x80/0x800 [ 787.888871][T19853] ? __pfx_apparmor_file_open+0x10/0x10 [ 787.888884][T19853] ? single_open+0x4d/0x1f0 [ 787.888902][T19853] ? __pfx_timens_offsets_show+0x10/0x10 [ 787.888921][T19853] ? single_open+0x4d/0x1f0 [ 787.888934][T19853] single_open+0x4d/0x1f0 [ 787.888950][T19853] do_dentry_open+0x748/0x1590 [ 787.888968][T19853] ? __pfx_timens_offsets_open+0x10/0x10 [ 787.888990][T19853] vfs_open+0x82/0x3f0 [ 787.889007][T19853] path_openat+0x2078/0x3140 [ 787.889031][T19853] ? __pfx_path_openat+0x10/0x10 [ 787.889056][T19853] do_filp_open+0x20b/0x470 [ 787.889075][T19853] ? __pfx_do_filp_open+0x10/0x10 [ 787.889100][T19853] ? __pfx_kfree_link+0x10/0x10 [ 787.889120][T19853] ? alloc_fd+0x471/0x7d0 [ 787.889144][T19853] do_sys_openat2+0x121/0x290 [ 787.889158][T19853] ? __pfx_do_sys_openat2+0x10/0x10 [ 787.889180][T19853] __x64_sys_openat+0x174/0x210 [ 787.889195][T19853] ? __pfx___x64_sys_openat+0x10/0x10 [ 787.889217][T19853] do_syscall_64+0xcd/0xf80 [ 787.889237][T19853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.889252][T19853] RIP: 0033:0x7fa3c2f8f7c9 [ 787.889264][T19853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 787.889278][T19853] RSP: 002b:00007fa3c3e52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 787.889292][T19853] RAX: ffffffffffffffda RBX: 00007fa3c31e5fa0 RCX: 00007fa3c2f8f7c9 [ 787.889302][T19853] RDX: 0000000000080c02 RSI: 0000200000002440 RDI: ffffffffffffff9c [ 787.889310][T19853] RBP: 00007fa3c3013f91 R08: 0000000000000000 R09: 0000000000000000 [ 787.889319][T19853] R10: 0000000000003f00 R11: 0000000000000246 R12: 0000000000000000 [ 787.889327][T19853] R13: 00007fa3c31e6038 R14: 00007fa3c31e5fa0 R15: 00007fffc85c0368 [ 787.889345][T19853] [ 788.601896][ T52] Bluetooth: hci5: command tx timeout [ 789.299918][ T3737] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.425803][ T3737] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.774134][ T3737] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.849736][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.948633][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.350122][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.497331][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.874578][T19891] input: f as /devices/virtual/input/input66 [ 792.796776][T19897] FAULT_INJECTION: forcing a failure. [ 792.796776][T19897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.838053][T19897] CPU: 1 UID: 0 PID: 19897 Comm: syz.2.3162 Tainted: G L syzkaller #0 PREEMPT(full) [ 792.838079][T19897] Tainted: [L]=SOFTLOCKUP [ 792.838084][T19897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 792.838093][T19897] Call Trace: [ 792.838099][T19897] [ 792.838104][T19897] dump_stack_lvl+0x16c/0x1f0 [ 792.838130][T19897] should_fail_ex+0x512/0x640 [ 792.838148][T19897] _copy_to_user+0x32/0xd0 [ 792.838165][T19897] simple_read_from_buffer+0xcb/0x170 [ 792.838186][T19897] proc_fail_nth_read+0x197/0x240 [ 792.838209][T19897] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 792.838232][T19897] ? rw_verify_area+0xcf/0x6c0 [ 792.838249][T19897] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 792.838270][T19897] vfs_read+0x1e4/0xcf0 [ 792.838290][T19897] ? __pfx___mutex_lock+0x10/0x10 [ 792.838313][T19897] ? __pfx_vfs_read+0x10/0x10 [ 792.838336][T19897] ? __fget_files+0x20e/0x3c0 [ 792.838360][T19897] ksys_read+0x12a/0x250 [ 792.838378][T19897] ? __pfx_ksys_read+0x10/0x10 [ 792.838402][T19897] do_syscall_64+0xcd/0xf80 [ 792.838423][T19897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.838438][T19897] RIP: 0033:0x7fda9818e1dc [ 792.838450][T19897] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 792.838463][T19897] RSP: 002b:00007fda98f50030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 792.838477][T19897] RAX: ffffffffffffffda RBX: 00007fda983e5fa0 RCX: 00007fda9818e1dc [ 792.838486][T19897] RDX: 000000000000000f RSI: 00007fda98f500a0 RDI: 0000000000000004 [ 792.838495][T19897] RBP: 00007fda98f50090 R08: 0000000000000000 R09: 0000000000000000 [ 792.838503][T19897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.838512][T19897] R13: 00007fda983e6038 R14: 00007fda983e5fa0 R15: 00007fff1189eeb8 [ 792.838531][T19897] [ 793.825544][T19900] FAULT_INJECTION: forcing a failure. [ 793.825544][T19900] name failslab, interval 1, probability 0, space 0, times 0 [ 793.888428][T19900] CPU: 1 UID: 0 PID: 19900 Comm: syz.2.3163 Tainted: G L syzkaller #0 PREEMPT(full) [ 793.888453][T19900] Tainted: [L]=SOFTLOCKUP [ 793.888458][T19900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 793.888468][T19900] Call Trace: [ 793.888473][T19900] [ 793.888479][T19900] dump_stack_lvl+0x16c/0x1f0 [ 793.888503][T19900] should_fail_ex+0x512/0x640 [ 793.888519][T19900] ? kmem_cache_alloc_noprof+0x62/0x770 [ 793.888538][T19900] should_failslab+0xc2/0x120 [ 793.888559][T19900] kmem_cache_alloc_noprof+0x83/0x770 [ 793.888574][T19900] ? __proc_create+0x2c8/0x8d0 [ 793.888596][T19900] ? __proc_create+0x2c8/0x8d0 [ 793.888611][T19900] __proc_create+0x2c8/0x8d0 [ 793.888628][T19900] ? __pfx___proc_create+0x10/0x10 [ 793.888647][T19900] ? _raw_write_unlock+0x28/0x50 [ 793.888665][T19900] ? proc_register+0x559/0x8b0 [ 793.888684][T19900] proc_create_reg+0x7d/0x180 [ 793.888702][T19900] proc_create_net_data+0x8e/0x1c0 [ 793.888720][T19900] ? __pfx_proc_create_net_data+0x10/0x10 [ 793.888742][T19900] ? __pfx_vlan_init_net+0x10/0x10 [ 793.888761][T19900] vlan_proc_init+0xe3/0x180 [ 793.888778][T19900] ops_init+0x1e2/0x5f0 [ 793.888798][T19900] setup_net+0x11d/0x3a0 [ 793.888815][T19900] ? __pfx_setup_net+0x10/0x10 [ 793.888830][T19900] ? lockdep_init_map_type+0x5c/0x270 [ 793.888845][T19900] ? mutex_init_lockep+0x110/0x150 [ 793.888863][T19900] copy_net_ns+0x351/0x7c0 [ 793.888883][T19900] create_new_namespaces+0x3ea/0xab0 [ 793.888905][T19900] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 793.888924][T19900] ksys_unshare+0x45b/0xa40 [ 793.888945][T19900] ? __pfx_ksys_unshare+0x10/0x10 [ 793.888976][T19900] ? xfd_validate_state+0x61/0x180 [ 793.888995][T19900] __x64_sys_unshare+0x31/0x40 [ 793.889008][T19900] do_syscall_64+0xcd/0xf80 [ 793.889029][T19900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 793.889043][T19900] RIP: 0033:0x7fda9818f7c9 [ 793.889056][T19900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 793.889069][T19900] RSP: 002b:00007fda98f50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 793.889083][T19900] RAX: ffffffffffffffda RBX: 00007fda983e5fa0 RCX: 00007fda9818f7c9 [ 793.889092][T19900] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 793.889100][T19900] RBP: 00007fda98213f91 R08: 0000000000000000 R09: 0000000000000000 [ 793.889108][T19900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 793.889117][T19900] R13: 00007fda983e6038 R14: 00007fda983e5fa0 R15: 00007fff1189eeb8 [ 793.889137][T19900] [ 793.889144][T19900] 8021q: can't create entry in proc filesystem! [ 794.884612][T19908] netlink: set zone limit has 8 unknown bytes [ 795.374943][T19922] ubi: mtd0 is already attached to ubi1 [ 795.601945][T19926] FAULT_INJECTION: forcing a failure. [ 795.601945][T19926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.676707][T19926] CPU: 1 UID: 0 PID: 19926 Comm: syz.4.3171 Tainted: G L syzkaller #0 PREEMPT(full) [ 795.676731][T19926] Tainted: [L]=SOFTLOCKUP [ 795.676736][T19926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 795.676744][T19926] Call Trace: [ 795.676750][T19926] [ 795.676756][T19926] dump_stack_lvl+0x16c/0x1f0 [ 795.676782][T19926] should_fail_ex+0x512/0x640 [ 795.676801][T19926] _copy_to_user+0x32/0xd0 [ 795.676830][T19926] simple_read_from_buffer+0xcb/0x170 [ 795.676851][T19926] proc_fail_nth_read+0x197/0x240 [ 795.676874][T19926] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 795.676897][T19926] ? rw_verify_area+0xcf/0x6c0 [ 795.676914][T19926] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 795.676935][T19926] vfs_read+0x1e4/0xcf0 [ 795.676955][T19926] ? __pfx___mutex_lock+0x10/0x10 [ 795.676977][T19926] ? __pfx_vfs_read+0x10/0x10 [ 795.677001][T19926] ? __fget_files+0x20e/0x3c0 [ 795.677025][T19926] ksys_read+0x12a/0x250 [ 795.677043][T19926] ? __pfx_ksys_read+0x10/0x10 [ 795.677062][T19926] ? fput+0x70/0xf0 [ 795.677077][T19926] do_syscall_64+0xcd/0xf80 [ 795.677099][T19926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.677113][T19926] RIP: 0033:0x7f45cc98e1dc [ 795.677125][T19926] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 795.677139][T19926] RSP: 002b:00007f45cd8d4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 795.677153][T19926] RAX: ffffffffffffffda RBX: 00007f45ccbe5fa0 RCX: 00007f45cc98e1dc [ 795.677162][T19926] RDX: 000000000000000f RSI: 00007f45cd8d40a0 RDI: 0000000000000005 [ 795.677171][T19926] RBP: 00007f45cd8d4090 R08: 0000000000000000 R09: 0000000000000000 [ 795.677180][T19926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.677188][T19926] R13: 00007f45ccbe6038 R14: 00007f45ccbe5fa0 R15: 00007ffe9d60c148 [ 795.677207][T19926] [ 797.571917][T19944] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.074221][T19949] netlink: set zone limit has 8 unknown bytes [ 798.378527][T19954] netlink: 206 bytes leftover after parsing attributes in process `syz.2.3177'. [ 798.624197][T19959] netlink: set zone limit has 8 unknown bytes [ 798.653314][T19961] FAULT_INJECTION: forcing a failure. [ 798.653314][T19961] name failslab, interval 1, probability 0, space 0, times 0 [ 798.683185][T19961] CPU: 1 UID: 0 PID: 19961 Comm: syz.2.3179 Tainted: G L syzkaller #0 PREEMPT(full) [ 798.683209][T19961] Tainted: [L]=SOFTLOCKUP [ 798.683214][T19961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 798.683223][T19961] Call Trace: [ 798.683229][T19961] [ 798.683234][T19961] dump_stack_lvl+0x16c/0x1f0 [ 798.683259][T19961] should_fail_ex+0x512/0x640 [ 798.683275][T19961] ? __kmalloc_cache_noprof+0x5f/0x800 [ 798.683293][T19961] should_failslab+0xc2/0x120 [ 798.683313][T19961] __kmalloc_cache_noprof+0x80/0x800 [ 798.683329][T19961] ? __x64_sys_statmount+0x2d5/0x6c0 [ 798.683347][T19961] ? __x64_sys_statmount+0x2d5/0x6c0 [ 798.683360][T19961] __x64_sys_statmount+0x2d5/0x6c0 [ 798.683377][T19961] ? fput+0x70/0xf0 [ 798.683390][T19961] ? __pfx___x64_sys_statmount+0x10/0x10 [ 798.683404][T19961] ? ksys_write+0x1ac/0x250 [ 798.683428][T19961] do_syscall_64+0xcd/0xf80 [ 798.683456][T19961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.683471][T19961] RIP: 0033:0x7fda9818f7c9 [ 798.683483][T19961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 798.683497][T19961] RSP: 002b:00007fda963f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c9 [ 798.683517][T19961] RAX: ffffffffffffffda RBX: 00007fda983e6090 RCX: 00007fda9818f7c9 [ 798.683526][T19961] RDX: 00007ffffffff000 RSI: 0000000000000000 RDI: 0000200000000040 [ 798.683535][T19961] RBP: 00007fda963f6090 R08: 0000000000000000 R09: 0000000000000000 [ 798.683543][T19961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.683551][T19961] R13: 00007fda983e6128 R14: 00007fda983e6090 R15: 00007fff1189eeb8 [ 798.683569][T19961] [ 799.094643][T19969] netlink: 'syz.0.3180': attribute type 2 has an invalid length. [ 799.149299][T19969] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3180'. [ 799.227664][ T30] audit: type=1800 audit(1766156756.375:95): pid=19969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3180" name="dbroot" dev="configfs" ino=90943 res=0 errno=0 [ 800.156440][T19989] netlink: set zone limit has 8 unknown bytes [ 800.324071][T19994] input: f as /devices/virtual/input/input67 [ 800.513464][T19999] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3188'. [ 800.574078][T19999] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3188'. [ 800.664159][T19999] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3188'. [ 800.888506][T19999] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3188'. [ 801.005675][T19999] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3188'. [ 801.211210][T20008] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 801.241987][T20008] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 801.552929][T20015] netlink: 'syz.4.3192': attribute type 2 has an invalid length. [ 801.589849][T20015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3192'. [ 801.677784][ T30] audit: type=1800 audit(1766156758.825:96): pid=20015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3192" name="dbroot" dev="configfs" ino=91137 res=0 errno=0 [ 801.993245][T20021] netlink: 'syz.0.3193': attribute type 2 has an invalid length. [ 802.023610][T20021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3193'. [ 802.129764][ T30] audit: type=1800 audit(1766156759.275:97): pid=20023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3193" name="dbroot" dev="configfs" ino=91215 res=0 errno=0 [ 802.634929][T20029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3195'. [ 802.743758][T20031] ubi: mtd0 is already attached to ubi1 [ 804.097918][T20062] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 804.837165][T20068] input: f as /devices/virtual/input/input68 [ 805.083952][T20075] FAULT_INJECTION: forcing a failure. [ 805.083952][T20075] name failslab, interval 1, probability 0, space 0, times 0 [ 805.176660][T20075] CPU: 1 UID: 0 PID: 20075 Comm: syz.0.3202 Tainted: G L syzkaller #0 PREEMPT(full) [ 805.176686][T20075] Tainted: [L]=SOFTLOCKUP [ 805.176708][T20075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 805.176718][T20075] Call Trace: [ 805.176723][T20075] [ 805.176729][T20075] dump_stack_lvl+0x16c/0x1f0 [ 805.176755][T20075] should_fail_ex+0x512/0x640 [ 805.176770][T20075] ? __kmalloc_noprof+0xca/0x910 [ 805.176787][T20075] should_failslab+0xc2/0x120 [ 805.176807][T20075] __kmalloc_noprof+0xeb/0x910 [ 805.176821][T20075] ? lockdep_init_map_type+0x5c/0x270 [ 805.176835][T20075] ? ops_init+0x77/0x5f0 [ 805.176861][T20075] ? ops_init+0x77/0x5f0 [ 805.176877][T20075] ops_init+0x77/0x5f0 [ 805.176897][T20075] setup_net+0x11d/0x3a0 [ 805.176915][T20075] ? __pfx_setup_net+0x10/0x10 [ 805.176931][T20075] ? lockdep_init_map_type+0x5c/0x270 [ 805.176945][T20075] ? mutex_init_lockep+0x110/0x150 [ 805.176962][T20075] copy_net_ns+0x351/0x7c0 [ 805.176982][T20075] create_new_namespaces+0x3ea/0xab0 [ 805.177004][T20075] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 805.177023][T20075] ksys_unshare+0x45b/0xa40 [ 805.177044][T20075] ? __pfx_ksys_unshare+0x10/0x10 [ 805.177064][T20075] ? xfd_validate_state+0x61/0x180 [ 805.177082][T20075] __x64_sys_unshare+0x31/0x40 [ 805.177094][T20075] do_syscall_64+0xcd/0xf80 [ 805.177115][T20075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.177129][T20075] RIP: 0033:0x7fa3c2f8f7c9 [ 805.177141][T20075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 805.177153][T20075] RSP: 002b:00007fa3c3e52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 805.177167][T20075] RAX: ffffffffffffffda RBX: 00007fa3c31e5fa0 RCX: 00007fa3c2f8f7c9 [ 805.177176][T20075] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 805.177184][T20075] RBP: 00007fa3c3013f91 R08: 0000000000000000 R09: 0000000000000000 [ 805.177192][T20075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 805.177201][T20075] R13: 00007fa3c31e6038 R14: 00007fa3c31e5fa0 R15: 00007fffc85c0368 [ 805.177220][T20075] [ 806.088821][T20089] __nla_validate_parse: 1 callbacks suppressed [ 806.088837][T20089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3205'. [ 806.116418][T20089] netlink: 354 bytes leftover after parsing attributes in process `syz.4.3205'. [ 807.657782][T20120] input: jJǸ-9%vJ86 as /devices/virtual/input/input69 [ 808.550006][T20127] netlink: 'syz.4.3212': attribute type 2 has an invalid length. [ 808.609699][T20127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3212'. [ 808.655214][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.669392][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.762159][ T30] audit: type=1800 audit(1766156765.905:98): pid=20131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3212" name="dbroot" dev="configfs" ino=91803 res=0 errno=0 [ 808.818795][T20135] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 808.821305][T20135] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 808.821956][T20135] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 808.822539][T20135] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 808.822919][T20135] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 809.561275][T20132] chnl_net:caif_netlink_parms(): no params data found [ 809.872491][T20132] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.896444][T20132] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.911810][T20132] bridge_slave_0: entered allmulticast mode [ 809.941840][T20132] bridge_slave_0: entered promiscuous mode [ 809.960688][T20132] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.980591][T20132] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.996825][T20132] bridge_slave_1: entered allmulticast mode [ 810.012508][T20132] bridge_slave_1: entered promiscuous mode [ 810.070261][T20132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.101255][T20132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.166098][T20132] team0: Port device team_slave_0 added [ 810.184410][T20132] team0: Port device team_slave_1 added [ 810.230709][T20132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 810.246137][T20132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.306057][T20132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 810.357495][T20132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 810.377591][T20132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.481186][T20132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 810.495920][T20154] FAULT_INJECTION: forcing a failure. [ 810.495920][T20154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.568464][ T52] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 810.615407][T20154] CPU: 1 UID: 0 PID: 20154 Comm: syz.2.3218 Tainted: G L syzkaller #0 PREEMPT(full) [ 810.615431][T20154] Tainted: [L]=SOFTLOCKUP [ 810.615436][T20154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 810.615445][T20154] Call Trace: [ 810.615450][T20154] [ 810.615456][T20154] dump_stack_lvl+0x16c/0x1f0 [ 810.615481][T20154] should_fail_ex+0x512/0x640 [ 810.615499][T20154] _copy_from_user+0x2e/0xd0 [ 810.615516][T20154] do_pages_stat+0x240/0x7b0 [ 810.615538][T20154] ? __lock_acquire+0x436/0x2890 [ 810.615555][T20154] ? __pfx_do_pages_stat+0x10/0x10 [ 810.615579][T20154] ? find_held_lock+0x2b/0x80 [ 810.615607][T20154] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 810.615626][T20154] ? lockdep_hardirqs_on+0x7c/0x110 [ 810.615646][T20154] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 810.615667][T20154] kernel_move_pages+0xfc8/0x12f0 [ 810.615685][T20154] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 810.615707][T20154] ? __pfx_kernel_move_pages+0x10/0x10 [ 810.615721][T20154] ? __fget_files+0x20e/0x3c0 [ 810.615739][T20154] ? lockdep_hardirqs_on+0x10/0x110 [ 810.615761][T20154] ? fput+0x70/0xf0 [ 810.615774][T20154] ? ksys_write+0x1ac/0x250 [ 810.615792][T20154] ? __pfx_ksys_write+0x10/0x10 [ 810.615813][T20154] __x64_sys_move_pages+0xe0/0x1c0 [ 810.615826][T20154] ? do_syscall_64+0x91/0xf80 [ 810.615845][T20154] ? lockdep_hardirqs_on+0x7c/0x110 [ 810.615864][T20154] do_syscall_64+0xcd/0xf80 [ 810.615885][T20154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.615899][T20154] RIP: 0033:0x7fda9818f7c9 [ 810.615911][T20154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.615925][T20154] RSP: 002b:00007fda98f50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 810.615938][T20154] RAX: ffffffffffffffda RBX: 00007fda983e5fa0 RCX: 00007fda9818f7c9 [ 810.615948][T20154] RDX: 0000000000000000 RSI: 0000000000001002 RDI: 0000000000000000 [ 810.615956][T20154] RBP: 00007fda98f50090 R08: 0000000000000000 R09: 0000000000000002 [ 810.615964][T20154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 810.615972][T20154] R13: 00007fda983e6038 R14: 00007fda983e5fa0 R15: 00007fff1189eeb8 [ 810.615990][T20154] [ 811.191394][ T52] Bluetooth: hci7: command tx timeout [ 811.691738][T20132] hsr_slave_0: entered promiscuous mode [ 811.734374][T20132] hsr_slave_1: entered promiscuous mode [ 811.776222][T20132] debugfs: 'hsr0' already exists in 'hsr' [ 811.794124][T20132] Cannot create hsr debugfs directory [ 811.812027][T20166] netlink: 'syz.0.3221': attribute type 1 has an invalid length. [ 811.846216][T20166] netlink: 306 bytes leftover after parsing attributes in process `syz.0.3221'. [ 812.713557][T20132] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 812.759595][T20132] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 812.928735][T20132] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 813.154122][T20132] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 813.207337][ T52] Bluetooth: hci7: command tx timeout [ 813.477758][T20132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.534252][T20132] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.567618][ T7828] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.574764][ T7828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.629890][ T7828] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.637033][ T7828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 814.157739][T20132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 814.703279][T20132] veth0_vlan: entered promiscuous mode [ 814.741516][T20132] veth1_vlan: entered promiscuous mode [ 814.835926][T20132] veth0_macvtap: entered promiscuous mode [ 814.869153][T20132] veth1_macvtap: entered promiscuous mode [ 814.876294][T20178] hub 1-0:1.0: USB hub found [ 814.928997][T20132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 814.983963][T20132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 815.008533][T20178] hub 1-0:1.0: 1 port detected [ 815.023915][T20157] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.064220][T20157] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.120935][T20157] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.204067][T20157] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.287452][ T52] Bluetooth: hci7: command tx timeout [ 815.352619][ T3425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.386107][ T3425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.458030][ T7828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 815.486631][ T7828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 815.980676][T20221] input: f as /devices/virtual/input/input70 [ 816.021955][T20221] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 817.367595][ T52] Bluetooth: hci7: command tx timeout [ 817.700464][T20240] FAULT_INJECTION: forcing a failure. [ 817.700464][T20240] name failslab, interval 1, probability 0, space 0, times 0 [ 817.776389][T20240] CPU: 1 UID: 0 PID: 20240 Comm: syz.6.3234 Tainted: G L syzkaller #0 PREEMPT(full) [ 817.776414][T20240] Tainted: [L]=SOFTLOCKUP [ 817.776420][T20240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 817.776428][T20240] Call Trace: [ 817.776435][T20240] [ 817.776442][T20240] dump_stack_lvl+0x16c/0x1f0 [ 817.776467][T20240] should_fail_ex+0x512/0x640 [ 817.776481][T20240] ? kmem_cache_alloc_noprof+0x62/0x770 [ 817.776501][T20240] should_failslab+0xc2/0x120 [ 817.776521][T20240] kmem_cache_alloc_noprof+0x83/0x770 [ 817.776538][T20240] ? vm_area_alloc+0x1f/0x160 [ 817.776555][T20240] ? vm_area_alloc+0x1f/0x160 [ 817.776568][T20240] vm_area_alloc+0x1f/0x160 [ 817.776581][T20240] __mmap_region+0x107a/0x2a00 [ 817.776599][T20240] ? __lock_acquire+0x436/0x2890 [ 817.776612][T20240] ? __pfx___mmap_region+0x10/0x10 [ 817.776641][T20240] ? lock_acquire+0x179/0x330 [ 817.776662][T20240] ? finish_task_switch.isra.0+0x207/0xbd0 [ 817.776717][T20240] ? rcu_is_watching+0x12/0xc0 [ 817.776741][T20240] mmap_region+0x1ab/0x3f0 [ 817.776757][T20240] ? __get_unmapped_area+0x267/0x3f0 [ 817.776777][T20240] do_mmap+0xa3e/0x1210 [ 817.776799][T20240] ? __pfx_do_mmap+0x10/0x10 [ 817.776817][T20240] ? __pfx_down_write_killable+0x10/0x10 [ 817.776831][T20240] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 817.776853][T20240] vm_mmap_pgoff+0x29e/0x470 [ 817.776874][T20240] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 817.776896][T20240] ? __x64_sys_futex+0x1e0/0x4c0 [ 817.776910][T20240] ? __x64_sys_futex+0x1e9/0x4c0 [ 817.776927][T20240] ksys_mmap_pgoff+0x7d/0x5c0 [ 817.776944][T20240] ? xfd_validate_state+0x61/0x180 [ 817.776956][T20240] ? __pfx_ksys_write+0x10/0x10 [ 817.776976][T20240] __x64_sys_mmap+0x125/0x190 [ 817.776991][T20240] do_syscall_64+0xcd/0xf80 [ 817.777012][T20240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.777026][T20240] RIP: 0033:0x7fe0e8d8f7c9 [ 817.777038][T20240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 817.777052][T20240] RSP: 002b:00007fe0e9d06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 817.777065][T20240] RAX: ffffffffffffffda RBX: 00007fe0e8fe5fa0 RCX: 00007fe0e8d8f7c9 [ 817.777075][T20240] RDX: 00000000000000df RSI: 0000000004020009 RDI: 0000000000000000 [ 817.777083][T20240] RBP: 00007fe0e8e13f91 R08: 0000000000000401 R09: 0000000000008000 [ 817.777091][T20240] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 817.777098][T20240] R13: 00007fe0e8fe6038 R14: 00007fe0e8fe5fa0 R15: 00007fffe3e46398 [ 817.777117][T20240] [ 818.675607][T20245] netlink: 'syz.4.3235': attribute type 2 has an invalid length. [ 818.696616][T20245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3235'. [ 819.087828][ T30] audit: type=1800 audit(1766156776.235:99): pid=20244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3235" name="dbroot" dev="configfs" ino=93177 res=0 errno=0 [ 819.712032][T20259] input: f as /devices/virtual/input/input71 [ 820.888560][T20280] bond0: option all_slaves_active: invalid value () [ 821.578617][T20294] netlink: set zone limit has 8 unknown bytes [ 823.931399][ T52] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 824.318783][T20344] bonding: no command found in bonding_masters - use +ifname or -ifname [ 825.528589][T20367] FAULT_INJECTION: forcing a failure. [ 825.528589][T20367] name failslab, interval 1, probability 0, space 0, times 0 [ 825.604067][T20367] CPU: 1 UID: 0 PID: 20367 Comm: syz.4.3259 Tainted: G L syzkaller #0 PREEMPT(full) [ 825.604093][T20367] Tainted: [L]=SOFTLOCKUP [ 825.604098][T20367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 825.604107][T20367] Call Trace: [ 825.604112][T20367] [ 825.604118][T20367] dump_stack_lvl+0x16c/0x1f0 [ 825.604143][T20367] should_fail_ex+0x512/0x640 [ 825.604159][T20367] ? fs_reclaim_acquire+0xae/0x150 [ 825.604182][T20367] should_failslab+0xc2/0x120 [ 825.604203][T20367] kmem_cache_alloc_noprof+0x83/0x770 [ 825.604219][T20367] ? __pfx_map_id_range_down+0x10/0x10 [ 825.604238][T20367] ? security_inode_alloc+0x3b/0x2b0 [ 825.604256][T20367] ? security_inode_alloc+0x3b/0x2b0 [ 825.604269][T20367] security_inode_alloc+0x3b/0x2b0 [ 825.604284][T20367] inode_init_always_gfp+0xced/0x1040 [ 825.604308][T20367] alloc_inode+0x86/0x240 [ 825.604323][T20367] alloc_anon_inode+0x28/0x3e0 [ 825.604345][T20367] ioctx_alloc+0x4d1/0x2230 [ 825.604357][T20367] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 825.604385][T20367] ? find_held_lock+0x2b/0x80 [ 825.604407][T20367] ? __pfx_ioctx_alloc+0x10/0x10 [ 825.604419][T20367] ? __might_fault+0x13b/0x190 [ 825.604440][T20367] __x64_sys_io_setup+0xc9/0x230 [ 825.604454][T20367] do_syscall_64+0xcd/0xf80 [ 825.604476][T20367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.604490][T20367] RIP: 0033:0x7f45cc98f7c9 [ 825.604503][T20367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 825.604516][T20367] RSP: 002b:00007f45cd8d4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 825.604530][T20367] RAX: ffffffffffffffda RBX: 00007f45ccbe5fa0 RCX: 00007f45cc98f7c9 [ 825.604539][T20367] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 00000000000000ff [ 825.604547][T20367] RBP: 00007f45cd8d4090 R08: 0000000000000000 R09: 0000000000000000 [ 825.604556][T20367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 825.604564][T20367] R13: 00007f45ccbe6038 R14: 00007f45ccbe5fa0 R15: 00007ffe9d60c148 [ 825.604583][T20367] [ 826.042376][T20382] netlink: 'syz.4.3261': attribute type 2 has an invalid length. [ 826.086969][T20382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3261'. [ 826.184766][ T30] audit: type=1800 audit(1766156783.325:100): pid=20383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3261" name="dbroot" dev="configfs" ino=93678 res=0 errno=0 [ 826.788038][T20388] netlink: 'syz.2.3262': attribute type 2 has an invalid length. [ 826.795804][T20388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3262'. [ 828.138834][T20407] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3268'. [ 828.158739][T20407] netlink: 354 bytes leftover after parsing attributes in process `syz.6.3268'. [ 829.102649][ T5154] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 829.112875][ T5154] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 829.120901][ T5154] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 829.147992][ T5154] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 829.156911][ T5154] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 829.816533][T20427] chnl_net:caif_netlink_parms(): no params data found [ 830.075204][T20427] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.104993][T20427] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.119554][T20445] FAULT_INJECTION: forcing a failure. [ 830.119554][T20445] name failslab, interval 1, probability 0, space 0, times 0 [ 830.137575][T20427] bridge_slave_0: entered allmulticast mode [ 830.159719][T20427] bridge_slave_0: entered promiscuous mode [ 830.174313][T20445] CPU: 1 UID: 0 PID: 20445 Comm: syz.4.3278 Tainted: G L syzkaller #0 PREEMPT(full) [ 830.174339][T20445] Tainted: [L]=SOFTLOCKUP [ 830.174345][T20445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 830.174354][T20445] Call Trace: [ 830.174360][T20445] [ 830.174367][T20445] dump_stack_lvl+0x16c/0x1f0 [ 830.174398][T20445] should_fail_ex+0x512/0x640 [ 830.174415][T20445] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 830.174435][T20445] should_failslab+0xc2/0x120 [ 830.174456][T20445] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 830.174473][T20445] ? __d_alloc+0x35/0xa80 [ 830.174490][T20445] ? __d_alloc+0x35/0xa80 [ 830.174500][T20445] __d_alloc+0x35/0xa80 [ 830.174514][T20445] d_alloc_parallel+0x111/0x1510 [ 830.174531][T20445] ? kasan_save_track+0x14/0x30 [ 830.174547][T20445] ? kasan_save_free_info+0x3b/0x60 [ 830.174561][T20445] ? kfree+0x2f8/0x6e0 [ 830.174573][T20445] ? link_path_walk+0x160a/0x1c70 [ 830.174588][T20445] ? path_openat+0x1bd/0x3140 [ 830.174605][T20445] ? do_sys_openat2+0x121/0x290 [ 830.174618][T20445] ? do_syscall_64+0xcd/0xf80 [ 830.174636][T20445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.174652][T20445] ? __pfx_d_alloc_parallel+0x10/0x10 [ 830.174669][T20445] ? lockdep_init_map_type+0x5c/0x270 [ 830.174685][T20445] ? lockdep_init_map_type+0x5c/0x270 [ 830.174701][T20445] __lookup_slow+0x193/0x460 [ 830.174716][T20445] ? __pfx___lookup_slow+0x10/0x10 [ 830.174746][T20445] lookup_slow+0x50/0x70 [ 830.174761][T20445] link_path_walk+0x12d8/0x1c70 [ 830.174785][T20445] path_openat+0x1bd/0x3140 [ 830.174802][T20445] ? do_syscall_64+0xcd/0xf80 [ 830.174818][T20445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.174837][T20445] ? __pfx_path_openat+0x10/0x10 [ 830.174862][T20445] do_filp_open+0x20b/0x470 [ 830.174881][T20445] ? __pfx_do_filp_open+0x10/0x10 [ 830.174906][T20445] ? __pfx_kfree_link+0x10/0x10 [ 830.174927][T20445] ? alloc_fd+0x471/0x7d0 [ 830.174950][T20445] do_sys_openat2+0x121/0x290 [ 830.174965][T20445] ? __pfx_do_sys_openat2+0x10/0x10 [ 830.174980][T20445] ? count_memcg_events+0x122/0x290 [ 830.175002][T20445] __x64_sys_openat+0x174/0x210 [ 830.175017][T20445] ? __pfx___x64_sys_openat+0x10/0x10 [ 830.175033][T20445] ? syscall_user_dispatch+0x78/0x140 [ 830.175054][T20445] do_syscall_64+0xcd/0xf80 [ 830.175074][T20445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.175087][T20445] RIP: 0033:0x7f45cc98e010 [ 830.175100][T20445] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 830.175113][T20445] RSP: 002b:00007f45cd8d3f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 830.175127][T20445] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f45cc98e010 [ 830.175135][T20445] RDX: 0000000000000002 RSI: 00007f45cd8d3fa0 RDI: 00000000ffffff9c [ 830.175144][T20445] RBP: 00007f45cd8d3fa0 R08: 0000000000000000 R09: 0000000000000000 [ 830.175152][T20445] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 830.175160][T20445] R13: 00007f45ccbe6038 R14: 00007f45ccbe5fa0 R15: 00007ffe9d60c148 [ 830.175180][T20445] [ 830.517171][T20427] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.524607][T20427] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.532082][T20427] bridge_slave_1: entered allmulticast mode [ 830.539387][T20427] bridge_slave_1: entered promiscuous mode [ 830.566346][T20427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.578291][T20427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 830.605295][T20427] team0: Port device team_slave_0 added [ 830.613010][T20427] team0: Port device team_slave_1 added [ 830.635145][T20427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 830.642189][T20427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.670828][T20427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.682850][T20427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 830.690028][T20427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.716158][T20427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 830.754661][T20427] hsr_slave_0: entered promiscuous mode [ 830.761016][T20427] hsr_slave_1: entered promiscuous mode [ 830.769921][T20427] debugfs: 'hsr0' already exists in 'hsr' [ 830.775681][T20427] Cannot create hsr debugfs directory [ 831.211536][ T5154] Bluetooth: hci6: command tx timeout [ 831.238828][T20458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3281'. [ 831.306811][T20458] netlink: 354 bytes leftover after parsing attributes in process `syz.4.3281'. [ 831.602002][T20427] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 831.658846][T20468] netlink: 338 bytes leftover after parsing attributes in process `syz.6.3284'. [ 831.718176][T20427] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 831.759939][T20470] netlink: 338 bytes leftover after parsing attributes in process `syz.6.3284'. [ 831.943650][T20427] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 831.951736][T20473] input: f as /devices/virtual/input/input72 [ 832.020757][T20427] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 832.461578][T20427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 832.559675][T20427] 8021q: adding VLAN 0 to HW filter on device team0 [ 832.635701][ T7825] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.642850][ T7825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.749711][ T7825] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.756860][ T7825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.292952][ T5154] Bluetooth: hci6: command tx timeout [ 833.707104][T20427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.600935][T20527] netlink: set zone limit has 8 unknown bytes [ 834.874514][T20528] Invalid ELF header magic: != ELF [ 835.368599][ T5154] Bluetooth: hci6: command tx timeout [ 835.567717][T20427] veth0_vlan: entered promiscuous mode [ 835.607939][T20427] veth1_vlan: entered promiscuous mode [ 835.729216][T20427] veth0_macvtap: entered promiscuous mode [ 835.766773][T20427] veth1_macvtap: entered promiscuous mode [ 835.820312][T20427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 835.856930][T20427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 835.866524][T20549] netlink: 330 bytes leftover after parsing attributes in process `syz.6.3295'. [ 835.902480][ T7820] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.925871][ T7820] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.964683][ T7820] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.004273][ T7820] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.420861][ T7820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.477285][ T7820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.679911][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 836.741700][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.449064][ T5154] Bluetooth: hci6: command tx timeout [ 838.698567][ T5154] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 838.718446][T20589] netlink: set zone limit has 8 unknown bytes [ 838.945389][T20597] netlink: zone id is out of range [ 839.027908][T20597] netlink: del zone limit has 4 unknown bytes [ 839.091587][T20593] netlink: set zone limit has 8 unknown bytes [ 840.729637][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 841.318606][T20634] FAULT_INJECTION: forcing a failure. [ 841.318606][T20634] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 841.386879][T20634] CPU: 1 UID: 0 PID: 20634 Comm: syz.7.3311 Tainted: G L syzkaller #0 PREEMPT(full) [ 841.386904][T20634] Tainted: [L]=SOFTLOCKUP [ 841.386910][T20634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 841.386919][T20634] Call Trace: [ 841.386924][T20634] [ 841.386931][T20634] dump_stack_lvl+0x16c/0x1f0 [ 841.386956][T20634] should_fail_ex+0x512/0x640 [ 841.386976][T20634] should_fail_alloc_page+0xe7/0x130 [ 841.386998][T20634] prepare_alloc_pages+0x401/0x670 [ 841.387020][T20634] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 841.387042][T20634] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 841.387060][T20634] ? find_held_lock+0x2b/0x80 [ 841.387078][T20634] ? finish_fault+0xb37/0x13e0 [ 841.387100][T20634] ? finish_fault+0x885/0x13e0 [ 841.387119][T20634] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 841.387141][T20634] ? folio_unlock+0x7d/0xd0 [ 841.387164][T20634] ? do_fault+0x6bc/0x1ad0 [ 841.387181][T20634] ? __pfx_filemap_map_pages+0x10/0x10 [ 841.387198][T20634] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 841.387219][T20634] ? policy_nodemask+0xea/0x4e0 [ 841.387239][T20634] alloc_pages_mpol+0x1fb/0x550 [ 841.387259][T20634] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 841.387283][T20634] folio_alloc_mpol_noprof+0x36/0x2f0 [ 841.387305][T20634] shmem_alloc_folio+0x135/0x160 [ 841.387329][T20634] shmem_alloc_and_add_folio+0x494/0xc20 [ 841.387349][T20634] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 841.387366][T20634] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 841.387387][T20634] shmem_get_folio_gfp+0x67f/0x1610 [ 841.387407][T20634] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 841.387425][T20634] ? fault_in_readable+0x132/0x1d0 [ 841.387444][T20634] shmem_write_begin+0x1a4/0x3b0 [ 841.387460][T20634] ? __pfx_shmem_write_begin+0x10/0x10 [ 841.387476][T20634] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 841.387499][T20634] generic_perform_write+0x3c4/0x900 [ 841.387518][T20634] ? __pfx_generic_perform_write+0x10/0x10 [ 841.387539][T20634] ? generic_update_time+0xcf/0xf0 [ 841.387552][T20634] ? mnt_put_write_access_file+0x45/0xf0 [ 841.387571][T20634] ? file_update_time_flags+0x35c/0x520 [ 841.387588][T20634] shmem_file_write_iter+0x10e/0x140 [ 841.387607][T20634] vfs_write+0x7d3/0x11d0 [ 841.387625][T20634] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 841.387644][T20634] ? __pfx_vfs_write+0x10/0x10 [ 841.387674][T20634] ksys_write+0x12a/0x250 [ 841.387691][T20634] ? __pfx_ksys_write+0x10/0x10 [ 841.387714][T20634] do_syscall_64+0xcd/0xf80 [ 841.387736][T20634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.387751][T20634] RIP: 0033:0x7f946738f7c9 [ 841.387766][T20634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 841.387779][T20634] RSP: 002b:00007f946814a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 841.387792][T20634] RAX: ffffffffffffffda RBX: 00007f94675e5fa0 RCX: 00007f946738f7c9 [ 841.387802][T20634] RDX: 000000100000a3d9 RSI: 0000000000000000 RDI: 0000000000000009 [ 841.387811][T20634] RBP: 00007f9467413f91 R08: 0000000000000000 R09: 0000000000000000 [ 841.387819][T20634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.387828][T20634] R13: 00007f94675e6038 R14: 00007f94675e5fa0 R15: 00007ffde52bca38 [ 841.387848][T20634] [ 842.587652][T20634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.609407][T20634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.797467][ T5154] Bluetooth: hci1: command 0x0c1a tx timeout [ 845.458777][T20685] netlink: 'syz.4.3326': attribute type 2 has an invalid length. [ 845.491848][T20685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3326'. [ 845.957043][T20691] Unable to find swap-space signature [ 847.031678][T20705] FAULT_INJECTION: forcing a failure. [ 847.031678][T20705] name failslab, interval 1, probability 0, space 0, times 0 [ 847.069082][T20705] CPU: 1 UID: 0 PID: 20705 Comm: syz.7.3331 Tainted: G L syzkaller #0 PREEMPT(full) [ 847.069108][T20705] Tainted: [L]=SOFTLOCKUP [ 847.069113][T20705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 847.069121][T20705] Call Trace: [ 847.069126][T20705] [ 847.069132][T20705] dump_stack_lvl+0x16c/0x1f0 [ 847.069158][T20705] should_fail_ex+0x512/0x640 [ 847.069173][T20705] ? kmem_cache_alloc_noprof+0x62/0x770 [ 847.069192][T20705] should_failslab+0xc2/0x120 [ 847.069213][T20705] kmem_cache_alloc_noprof+0x83/0x770 [ 847.069230][T20705] ? __pmd_alloc+0xbf/0x9c0 [ 847.069254][T20705] ? __pmd_alloc+0xbf/0x9c0 [ 847.069273][T20705] __pmd_alloc+0xbf/0x9c0 [ 847.069294][T20705] __handle_mm_fault+0xbeb/0x2bb0 [ 847.069314][T20705] ? __pfx___handle_mm_fault+0x10/0x10 [ 847.069339][T20705] ? find_vma+0xbf/0x140 [ 847.069356][T20705] ? __pfx_find_vma+0x10/0x10 [ 847.069376][T20705] handle_mm_fault+0x3fe/0xad0 [ 847.069394][T20705] do_user_addr_fault+0x7a6/0x1370 [ 847.069413][T20705] ? rcu_is_watching+0x12/0xc0 [ 847.069434][T20705] exc_page_fault+0x64/0xc0 [ 847.069455][T20705] asm_exc_page_fault+0x26/0x30 [ 847.069469][T20705] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 847.069485][T20705] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 81 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 847.069498][T20705] RSP: 0018:ffffc900042efc98 EFLAGS: 00050206 [ 847.069510][T20705] RAX: 0000000000000001 RBX: 0000000000000038 RCX: 0000000000000038 [ 847.069519][T20705] RDX: fffff5200085dfa6 RSI: 0000000000000038 RDI: ffffc900042efcf8 [ 847.069527][T20705] RBP: 0000000000000038 R08: 0000000000000001 R09: fffff5200085dfa5 [ 847.069536][T20705] R10: ffffc900042efd2f R11: ffff888057ca29b0 R12: 0000000000000000 [ 847.069544][T20705] R13: ffffc900042efcf8 R14: ffffc900042efcf8 R15: 0000000000000038 [ 847.069563][T20705] _copy_from_user+0x98/0xd0 [ 847.069579][T20705] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 847.069600][T20705] vlan_ioctl_handler+0xa4/0xa70 [ 847.069621][T20705] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 847.069647][T20705] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 847.069667][T20705] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 847.069687][T20705] sock_ioctl+0x4bb/0x6b0 [ 847.069702][T20705] ? __pfx_sock_ioctl+0x10/0x10 [ 847.069713][T20705] ? hook_file_ioctl_common+0x144/0x410 [ 847.069734][T20705] ? __fget_files+0x20e/0x3c0 [ 847.069755][T20705] ? __pfx_sock_ioctl+0x10/0x10 [ 847.069769][T20705] __x64_sys_ioctl+0x18e/0x210 [ 847.069787][T20705] do_syscall_64+0xcd/0xf80 [ 847.069808][T20705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.069821][T20705] RIP: 0033:0x7f946738f7c9 [ 847.069833][T20705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 847.069852][T20705] RSP: 002b:00007f946814a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 847.069867][T20705] RAX: ffffffffffffffda RBX: 00007f94675e5fa0 RCX: 00007f946738f7c9 [ 847.069876][T20705] RDX: 0000000000000038 RSI: 0000000000008983 RDI: 0000000000000003 [ 847.069884][T20705] RBP: 00007f946814a090 R08: 0000000000000000 R09: 0000000000000000 [ 847.069892][T20705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.069899][T20705] R13: 00007f94675e6038 R14: 00007f94675e5fa0 R15: 00007ffde52bca38 [ 847.069919][T20705] [ 847.576269][T20708] netlink: 'syz.4.3332': attribute type 1 has an invalid length. [ 848.075122][T20715] netlink: set zone limit has 8 unknown bytes [ 848.262567][T20721] netlink: 'syz.7.3335': attribute type 2 has an invalid length. [ 848.276398][T20721] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3335'. [ 848.385835][ T30] audit: type=1800 audit(1766158853.570:101): pid=20721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3335" name="dbroot" dev="configfs" ino=96067 res=0 errno=0 [ 848.634063][T20725] netlink: 'syz.4.3336': attribute type 2 has an invalid length. [ 848.680157][T20725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3336'. [ 848.871547][T20729] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 849.861764][ T30] audit: type=1804 audit(1766158855.048:102): pid=20745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.3340" name="/newroot/15/file0" dev="tmpfs" ino=95 res=1 errno=0 [ 850.047437][ T30] audit: type=1804 audit(1766158855.239:103): pid=20742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.3340" name="/newroot/15/file0" dev="tmpfs" ino=95 res=1 errno=0 [ 850.534024][T20750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3342'. [ 850.558323][T20750] netlink: 354 bytes leftover after parsing attributes in process `syz.4.3342'. [ 850.688588][T20752] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input74 [ 850.821753][T20760] netlink: 'syz.4.3344': attribute type 2 has an invalid length. [ 850.871272][T20760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3344'. [ 851.003021][ T30] audit: type=1800 audit(1766158856.194:104): pid=20760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3344" name="dbroot" dev="configfs" ino=96223 res=0 errno=0 [ 855.260908][T20816] FAULT_INJECTION: forcing a failure. [ 855.260908][T20816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 855.282271][T20816] CPU: 1 UID: 0 PID: 20816 Comm: syz.7.3356 Tainted: G L syzkaller #0 PREEMPT(full) [ 855.282309][T20816] Tainted: [L]=SOFTLOCKUP [ 855.282315][T20816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 855.282323][T20816] Call Trace: [ 855.282329][T20816] [ 855.282335][T20816] dump_stack_lvl+0x16c/0x1f0 [ 855.282360][T20816] should_fail_ex+0x512/0x640 [ 855.282379][T20816] _copy_to_user+0x32/0xd0 [ 855.282395][T20816] simple_read_from_buffer+0xcb/0x170 [ 855.282416][T20816] proc_fail_nth_read+0x197/0x240 [ 855.282440][T20816] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 855.282463][T20816] ? rw_verify_area+0xcf/0x6c0 [ 855.282480][T20816] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 855.282501][T20816] vfs_read+0x1e4/0xcf0 [ 855.282521][T20816] ? __pfx___mutex_lock+0x10/0x10 [ 855.282543][T20816] ? __pfx_vfs_read+0x10/0x10 [ 855.282566][T20816] ? __fget_files+0x20e/0x3c0 [ 855.282590][T20816] ksys_read+0x12a/0x250 [ 855.282608][T20816] ? __pfx_ksys_read+0x10/0x10 [ 855.282632][T20816] do_syscall_64+0xcd/0xf80 [ 855.282653][T20816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.282667][T20816] RIP: 0033:0x7f946738e1dc [ 855.282681][T20816] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 855.282694][T20816] RSP: 002b:00007f946814a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 855.282707][T20816] RAX: ffffffffffffffda RBX: 00007f94675e5fa0 RCX: 00007f946738e1dc [ 855.282717][T20816] RDX: 000000000000000f RSI: 00007f946814a0a0 RDI: 0000000000000003 [ 855.282725][T20816] RBP: 00007f946814a090 R08: 0000000000000000 R09: 0000000000000002 [ 855.282733][T20816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 855.282742][T20816] R13: 00007f94675e6038 R14: 00007f94675e5fa0 R15: 00007ffde52bca38 [ 855.282761][T20816] [ 855.533729][T20819] ubi: mtd0 is already attached to ubi1 [ 856.498966][T20836] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input75 [ 856.599549][T20838] input: f as /devices/virtual/input/input76 [ 856.841095][ T5154] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 856.856291][ T5154] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 856.864270][ T5154] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 856.871837][ T5154] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 856.892963][ T5154] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 857.742748][T20843] chnl_net:caif_netlink_parms(): no params data found [ 858.051885][T20843] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.067808][T20843] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.082593][T20843] bridge_slave_0: entered allmulticast mode [ 858.110520][T20843] bridge_slave_0: entered promiscuous mode [ 858.151575][T20843] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.177726][T20843] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.197539][T20843] bridge_slave_1: entered allmulticast mode [ 858.225769][T20843] bridge_slave_1: entered promiscuous mode [ 858.377982][T20843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.602833][T20843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.787535][T20843] team0: Port device team_slave_0 added [ 858.826952][T20843] team0: Port device team_slave_1 added [ 858.923058][T20843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.960007][ T5154] Bluetooth: hci8: command tx timeout [ 858.980068][T20843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.067796][T20882] ubi: mtd0 is already attached to ubi1 [ 859.081988][T20843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.142421][T20843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.149401][T20843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.247551][T20843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.284250][T20887] netlink: 'syz.7.3374': attribute type 2 has an invalid length. [ 859.312447][T20887] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3374'. [ 859.416033][ T30] audit: type=1800 audit(1766158864.658:105): pid=20887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3374" name="dbroot" dev="configfs" ino=97124 res=0 errno=0 [ 859.565186][T20843] hsr_slave_0: entered promiscuous mode [ 859.593356][T20843] hsr_slave_1: entered promiscuous mode [ 859.618420][T20843] debugfs: 'hsr0' already exists in 'hsr' [ 859.641885][T20843] Cannot create hsr debugfs directory [ 860.252611][ T52] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 860.268895][ T52] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 860.277145][ T52] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 860.286437][ T52] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 860.294096][ T52] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 860.315654][T20896] netlink: 'syz.4.3377': attribute type 2 has an invalid length. [ 860.323408][T20896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3377'. [ 860.421697][ T30] audit: type=1800 audit(1766158865.663:106): pid=20898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3377" name="dbroot" dev="configfs" ino=97255 res=0 errno=0 [ 860.624427][T20900] FAULT_INJECTION: forcing a failure. [ 860.624427][T20900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 860.681201][T20900] CPU: 1 UID: 0 PID: 20900 Comm: syz.7.3378 Tainted: G L syzkaller #0 PREEMPT(full) [ 860.681225][T20900] Tainted: [L]=SOFTLOCKUP [ 860.681231][T20900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 860.681240][T20900] Call Trace: [ 860.681248][T20900] [ 860.681254][T20900] dump_stack_lvl+0x16c/0x1f0 [ 860.681279][T20900] should_fail_ex+0x512/0x640 [ 860.681298][T20900] _copy_from_iter+0x2a4/0x16c0 [ 860.681320][T20900] ? __alloc_skb+0x220/0x410 [ 860.681334][T20900] ? __alloc_skb+0x35d/0x410 [ 860.681351][T20900] ? __pfx__copy_from_iter+0x10/0x10 [ 860.681366][T20900] ? netlink_autobind.isra.0+0x158/0x370 [ 860.681393][T20900] netlink_sendmsg+0x820/0xdd0 [ 860.681445][T20900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 860.681471][T20900] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 860.681496][T20900] ____sys_sendmsg+0xa5d/0xc30 [ 860.681518][T20900] ? copy_msghdr_from_user+0x10a/0x160 [ 860.681536][T20900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 860.681563][T20900] ? __pfx__kstrtoull+0x10/0x10 [ 860.681585][T20900] ___sys_sendmsg+0x134/0x1d0 [ 860.681608][T20900] ? __pfx____sys_sendmsg+0x10/0x10 [ 860.681634][T20900] ? find_held_lock+0x2b/0x80 [ 860.681665][T20900] __sys_sendmmsg+0x200/0x420 [ 860.681685][T20900] ? __pfx___sys_sendmmsg+0x10/0x10 [ 860.681708][T20900] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 860.681737][T20900] ? fput+0x70/0xf0 [ 860.681750][T20900] ? ksys_write+0x1ac/0x250 [ 860.681769][T20900] ? __pfx_ksys_write+0x10/0x10 [ 860.681794][T20900] __x64_sys_sendmmsg+0x9c/0x100 [ 860.681811][T20900] ? lockdep_hardirqs_on+0x7c/0x110 [ 860.681831][T20900] do_syscall_64+0xcd/0xf80 [ 860.681852][T20900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.681867][T20900] RIP: 0033:0x7f946738f7c9 [ 860.681879][T20900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 860.681893][T20900] RSP: 002b:00007f946814a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 860.681907][T20900] RAX: ffffffffffffffda RBX: 00007f94675e5fa0 RCX: 00007f946738f7c9 [ 860.681916][T20900] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 860.681925][T20900] RBP: 00007f946814a090 R08: 0000000000000000 R09: 0000000000000000 [ 860.681933][T20900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 860.681944][T20900] R13: 00007f94675e6038 R14: 00007f94675e5fa0 R15: 00007ffde52bca38 [ 860.681963][T20900] [ 861.060492][ T5154] Bluetooth: hci8: command tx timeout [ 861.355550][T20843] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 861.395367][T20843] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 861.432855][T20843] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 861.487539][T20843] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 861.696996][T20895] chnl_net:caif_netlink_parms(): no params data found [ 862.022826][T20895] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.039083][T20895] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.050290][T20895] bridge_slave_0: entered allmulticast mode [ 862.058036][T20895] bridge_slave_0: entered promiscuous mode [ 862.083545][T20895] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.098503][T20895] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.110942][T20895] bridge_slave_1: entered allmulticast mode [ 862.119347][T20895] bridge_slave_1: entered promiscuous mode [ 862.169486][T20843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 862.211736][T20895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.234217][T20895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.374982][ T5154] Bluetooth: hci9: command tx timeout [ 862.418039][T20843] 8021q: adding VLAN 0 to HW filter on device team0 [ 862.439214][T20895] team0: Port device team_slave_0 added [ 862.489094][T20451] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.496240][T20451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 862.580619][T20895] team0: Port device team_slave_1 added [ 862.664130][T20451] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.671250][T20451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.780345][T20895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 862.816806][T20895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.942111][T20895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.002043][T20895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.037213][T20895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.090915][ T5154] Bluetooth: hci8: command tx timeout [ 863.143828][T20895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 863.335416][T20895] hsr_slave_0: entered promiscuous mode [ 863.361029][T20895] hsr_slave_1: entered promiscuous mode [ 863.384367][T20895] debugfs: 'hsr0' already exists in 'hsr' [ 863.417415][T20895] Cannot create hsr debugfs directory [ 864.319681][T20895] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 864.366098][T20843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 864.393982][T20895] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 864.444313][ T5154] Bluetooth: hci9: command tx timeout [ 864.466158][T20895] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 864.551142][T20895] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 864.638634][T20957] random: crng reseeded on system resumption [ 864.679735][T20952] zswap: compressor not available [ 864.696288][T20962] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 864.696288][T20962] M' is too long [ 864.754075][T20962] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 864.754075][T20962] W ' is too long [ 864.930222][T20895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.021867][T20895] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.083074][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.090197][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 865.161465][ T5154] Bluetooth: hci8: command tx timeout [ 865.175406][ T3425] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.182605][ T3425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 865.345743][T20843] veth0_vlan: entered promiscuous mode [ 865.387908][T20843] veth1_vlan: entered promiscuous mode [ 865.754164][T20843] veth0_macvtap: entered promiscuous mode [ 865.870355][T20843] veth1_macvtap: entered promiscuous mode [ 865.943179][T20843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 865.998051][T20843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 866.012644][T20895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 866.140087][ T7818] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.204348][ T7818] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.298353][ T7818] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.377492][ T7818] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.513716][ T5154] Bluetooth: hci9: command tx timeout [ 866.633831][ T7827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.641687][ T7827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.710627][T20994] FAULT_INJECTION: forcing a failure. [ 866.710627][T20994] name failslab, interval 1, probability 0, space 0, times 0 [ 866.781056][T20994] CPU: 1 UID: 0 PID: 20994 Comm: syz.7.3392 Tainted: G L syzkaller #0 PREEMPT(full) [ 866.781082][T20994] Tainted: [L]=SOFTLOCKUP [ 866.781087][T20994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 866.781096][T20994] Call Trace: [ 866.781102][T20994] [ 866.781108][T20994] dump_stack_lvl+0x16c/0x1f0 [ 866.781132][T20994] should_fail_ex+0x512/0x640 [ 866.781147][T20994] ? fs_reclaim_acquire+0xae/0x150 [ 866.781169][T20994] should_failslab+0xc2/0x120 [ 866.781189][T20994] kmem_cache_alloc_noprof+0x83/0x770 [ 866.781212][T20994] ? __pfx_map_id_range_down+0x10/0x10 [ 866.781231][T20994] ? security_inode_alloc+0x3b/0x2b0 [ 866.781250][T20994] ? security_inode_alloc+0x3b/0x2b0 [ 866.781264][T20994] security_inode_alloc+0x3b/0x2b0 [ 866.781279][T20994] inode_init_always_gfp+0xced/0x1040 [ 866.781302][T20994] alloc_inode+0x86/0x240 [ 866.781317][T20994] new_inode+0x22/0x1c0 [ 866.781333][T20994] proc_pid_make_inode+0x22/0x160 [ 866.781349][T20994] proc_pident_instantiate+0x85/0x310 [ 866.781367][T20994] proc_pident_lookup+0x1f5/0x270 [ 866.781387][T20994] __lookup_slow+0x251/0x460 [ 866.781403][T20994] ? __pfx___lookup_slow+0x10/0x10 [ 866.781434][T20994] lookup_slow+0x50/0x70 [ 866.781448][T20994] link_path_walk+0x12d8/0x1c70 [ 866.781472][T20994] path_openat+0x1bd/0x3140 [ 866.781489][T20994] ? do_syscall_64+0xcd/0xf80 [ 866.781507][T20994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.781527][T20994] ? __pfx_path_openat+0x10/0x10 [ 866.781553][T20994] do_filp_open+0x20b/0x470 [ 866.781572][T20994] ? __pfx_do_filp_open+0x10/0x10 [ 866.781597][T20994] ? __pfx_kfree_link+0x10/0x10 [ 866.781618][T20994] ? alloc_fd+0x471/0x7d0 [ 866.781641][T20994] do_sys_openat2+0x121/0x290 [ 866.781660][T20994] ? __pfx_do_sys_openat2+0x10/0x10 [ 866.781675][T20994] ? count_memcg_events+0x122/0x290 [ 866.781698][T20994] __x64_sys_openat+0x174/0x210 [ 866.781714][T20994] ? __pfx___x64_sys_openat+0x10/0x10 [ 866.781731][T20994] ? syscall_user_dispatch+0x78/0x140 [ 866.781753][T20994] do_syscall_64+0xcd/0xf80 [ 866.781772][T20994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.781786][T20994] RIP: 0033:0x7f946738e010 [ 866.781799][T20994] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 866.781812][T20994] RSP: 002b:00007f9468149f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 866.781825][T20994] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f946738e010 [ 866.781834][T20994] RDX: 0000000000000002 RSI: 00007f9468149fa0 RDI: 00000000ffffff9c [ 866.781842][T20994] RBP: 00007f9468149fa0 R08: 0000000000000000 R09: 0000000000000000 [ 866.781851][T20994] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 866.781859][T20994] R13: 00007f94675e6038 R14: 00007f94675e5fa0 R15: 00007ffde52bca38 [ 866.781879][T20994] [ 867.203957][ T7828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.212022][ T7828] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.357330][T20895] veth0_vlan: entered promiscuous mode [ 867.369662][T20895] veth1_vlan: entered promiscuous mode [ 867.454765][T20895] veth0_macvtap: entered promiscuous mode [ 867.497707][T20895] veth1_macvtap: entered promiscuous mode [ 867.614315][T20895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 867.659913][T20895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 867.761609][ T3425] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.814653][ T3425] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.930073][ T3425] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 867.993391][ T3425] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.235567][ T7818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.285945][ T7818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.410019][ T3425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 868.473960][ T3425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 868.583750][ T5154] Bluetooth: hci9: command tx timeout [ 869.307418][T21029] zswap: compressor not available [ 869.444860][T21029] random: crng reseeded on system resumption [ 869.637236][T21039] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3400'. [ 869.685438][T21039] netlink: 354 bytes leftover after parsing attributes in process `syz.8.3400'. [ 869.942232][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.950792][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.080090][T21052] netlink: 'syz.8.3403': attribute type 1 has an invalid length. [ 870.244847][T21044] zswap: compressor not available [ 870.367689][T21044] random: crng reseeded on system resumption [ 870.392126][T21058] FAULT_INJECTION: forcing a failure. [ 870.392126][T21058] name failslab, interval 1, probability 0, space 0, times 0 [ 870.469561][T21058] CPU: 1 UID: 0 PID: 21058 Comm: syz.9.3404 Tainted: G L syzkaller #0 PREEMPT(full) [ 870.469588][T21058] Tainted: [L]=SOFTLOCKUP [ 870.469593][T21058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 870.469603][T21058] Call Trace: [ 870.469608][T21058] [ 870.469615][T21058] dump_stack_lvl+0x16c/0x1f0 [ 870.469640][T21058] should_fail_ex+0x512/0x640 [ 870.469655][T21058] ? fs_reclaim_acquire+0xae/0x150 [ 870.469678][T21058] should_failslab+0xc2/0x120 [ 870.469698][T21058] kmem_cache_alloc_noprof+0x83/0x770 [ 870.469714][T21058] ? __pfx_map_id_range_down+0x10/0x10 [ 870.469732][T21058] ? security_inode_alloc+0x3b/0x2b0 [ 870.469750][T21058] ? security_inode_alloc+0x3b/0x2b0 [ 870.469763][T21058] security_inode_alloc+0x3b/0x2b0 [ 870.469778][T21058] inode_init_always_gfp+0xced/0x1040 [ 870.469801][T21058] alloc_inode+0x86/0x240 [ 870.469815][T21058] new_inode+0x22/0x1c0 [ 870.469831][T21058] debugfs_create_symlink+0xd1/0x260 [ 870.469847][T21058] ref_tracker_dir_symlink+0x255/0x3c0 [ 870.469865][T21058] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 870.469882][T21058] ? __lock_acquire+0x436/0x2890 [ 870.469910][T21058] ? lockdep_hardirqs_on+0x7c/0x110 [ 870.469929][T21058] ? crng_make_state+0x48e/0x6c0 [ 870.469947][T21058] ? __pfx_net_ns_net_init+0x10/0x10 [ 870.469966][T21058] net_ns_net_init+0x7e/0x120 [ 870.469983][T21058] ops_init+0x1e2/0x5f0 [ 870.470002][T21058] setup_net+0x11d/0x3a0 [ 870.470019][T21058] ? __pfx_setup_net+0x10/0x10 [ 870.470034][T21058] ? lockdep_init_map_type+0x5c/0x270 [ 870.470047][T21058] ? mutex_init_lockep+0x110/0x150 [ 870.470064][T21058] copy_net_ns+0x351/0x7c0 [ 870.470084][T21058] create_new_namespaces+0x3ea/0xab0 [ 870.470106][T21058] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 870.470125][T21058] ksys_unshare+0x45b/0xa40 [ 870.470145][T21058] ? __pfx_ksys_unshare+0x10/0x10 [ 870.470165][T21058] ? xfd_validate_state+0x61/0x180 [ 870.470183][T21058] __x64_sys_unshare+0x31/0x40 [ 870.470195][T21058] do_syscall_64+0xcd/0xf80 [ 870.470216][T21058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.470230][T21058] RIP: 0033:0x7fb7e5f8f7c9 [ 870.470242][T21058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 870.470257][T21058] RSP: 002b:00007fb7e6ec0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 870.470271][T21058] RAX: ffffffffffffffda RBX: 00007fb7e61e5fa0 RCX: 00007fb7e5f8f7c9 [ 870.470280][T21058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 870.470288][T21058] RBP: 00007fb7e6013f91 R08: 0000000000000000 R09: 0000000000000000 [ 870.470296][T21058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 870.470305][T21058] R13: 00007fb7e61e6038 R14: 00007fb7e61e5fa0 R15: 00007ffd8ec906b8 [ 870.470347][T21058] [ 870.470377][T21058] debugfs: out of free dentries, can not create symlink 'netns-798-4026535201-refcnt' [ 871.013275][T21063] netlink: set zone limit has 8 unknown bytes [ 872.267023][T21089] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3411'. [ 872.302731][T21084] FAULT_INJECTION: forcing a failure. [ 872.302731][T21084] name failslab, interval 1, probability 0, space 0, times 0 [ 872.347028][T21084] CPU: 1 UID: 0 PID: 21084 Comm: syz.9.3409 Tainted: G L syzkaller #0 PREEMPT(full) [ 872.347056][T21084] Tainted: [L]=SOFTLOCKUP [ 872.347062][T21084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 872.347071][T21084] Call Trace: [ 872.347077][T21084] [ 872.347084][T21084] dump_stack_lvl+0x16c/0x1f0 [ 872.347109][T21084] should_fail_ex+0x512/0x640 [ 872.347124][T21084] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 872.347146][T21084] should_failslab+0xc2/0x120 [ 872.347167][T21084] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 872.347184][T21084] ? __d_alloc+0x35/0xa80 [ 872.347200][T21084] ? __d_alloc+0x35/0xa80 [ 872.347210][T21084] __d_alloc+0x35/0xa80 [ 872.347225][T21084] d_alloc_parallel+0x111/0x1510 [ 872.347246][T21084] ? find_held_lock+0x2b/0x80 [ 872.347271][T21084] ? __pfx_d_alloc_parallel+0x10/0x10 [ 872.347290][T21084] ? __d_lookup+0x266/0x4a0 [ 872.347311][T21084] lookup_open.isra.0+0x66c/0x1780 [ 872.347334][T21084] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 872.347362][T21084] ? mnt_get_write_access+0x1e9/0x2f0 [ 872.347382][T21084] path_openat+0x12bb/0x3140 [ 872.347408][T21084] ? __pfx_path_openat+0x10/0x10 [ 872.347434][T21084] do_filp_open+0x20b/0x470 [ 872.347453][T21084] ? __pfx_do_filp_open+0x10/0x10 [ 872.347478][T21084] ? __pfx_kfree_link+0x10/0x10 [ 872.347499][T21084] ? alloc_fd+0x471/0x7d0 [ 872.347522][T21084] do_sys_openat2+0x121/0x290 [ 872.347537][T21084] ? __pfx_do_sys_openat2+0x10/0x10 [ 872.347552][T21084] ? count_memcg_events+0x122/0x290 [ 872.347575][T21084] __x64_sys_openat+0x174/0x210 [ 872.347590][T21084] ? __pfx___x64_sys_openat+0x10/0x10 [ 872.347606][T21084] ? syscall_user_dispatch+0x78/0x140 [ 872.347627][T21084] do_syscall_64+0xcd/0xf80 [ 872.347648][T21084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.347662][T21084] RIP: 0033:0x7fb7e5f8e010 [ 872.347675][T21084] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 872.347689][T21084] RSP: 002b:00007fb7e6ebff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 872.347703][T21084] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb7e5f8e010 [ 872.347712][T21084] RDX: 0000000000000002 RSI: 00007fb7e6ebffa0 RDI: 00000000ffffff9c [ 872.347720][T21084] RBP: 00007fb7e6ebffa0 R08: 0000000000000000 R09: 0000000000000000 [ 872.347729][T21084] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 872.347737][T21084] R13: 00007fb7e61e6038 R14: 00007fb7e61e5fa0 R15: 00007ffd8ec906b8 [ 872.347757][T21084] [ 872.632942][T21090] Invalid ELF header magic: != ELF [ 872.727700][T21096] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3412'. [ 872.728077][T21096] netlink: 354 bytes leftover after parsing attributes in process `syz.9.3412'. [ 872.844570][T21099] input: f as /devices/virtual/input/input77 [ 872.856591][T21099] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 873.480338][T21106] Console: switching to colour VGA+ 80x25 [ 873.816740][T21086] FAULT_INJECTION: forcing a failure. [ 873.816740][T21086] name failslab, interval 1, probability 0, space 0, times 0 [ 873.840064][T21110] netlink: set zone limit has 8 unknown bytes [ 873.894243][T21086] CPU: 1 UID: 0 PID: 21086 Comm: syz.8.3410 Tainted: G L syzkaller #0 PREEMPT(full) [ 873.894269][T21086] Tainted: [L]=SOFTLOCKUP [ 873.894275][T21086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 873.894284][T21086] Call Trace: [ 873.894289][T21086] [ 873.894295][T21086] dump_stack_lvl+0x16c/0x1f0 [ 873.894321][T21086] should_fail_ex+0x512/0x640 [ 873.894336][T21086] ? __kmalloc_node_noprof+0xcd/0x930 [ 873.894357][T21086] should_failslab+0xc2/0x120 [ 873.894379][T21086] __kmalloc_node_noprof+0xee/0x930 [ 873.894398][T21086] ? alloc_slab_obj_exts+0x43/0xf0 [ 873.894412][T21086] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 873.894434][T21086] ? alloc_slab_obj_exts+0x43/0xf0 [ 873.894447][T21086] alloc_slab_obj_exts+0x43/0xf0 [ 873.894462][T21086] new_slab+0x353/0x430 [ 873.894477][T21086] ___slab_alloc+0xe18/0x1c90 [ 873.894492][T21086] ? proc_alloc_inode+0x25/0x200 [ 873.894512][T21086] ? proc_alloc_inode+0x25/0x200 [ 873.894527][T21086] ? __slab_alloc.constprop.0+0x63/0x110 [ 873.894540][T21086] __slab_alloc.constprop.0+0x63/0x110 [ 873.894557][T21086] kmem_cache_alloc_lru_noprof+0x451/0x770 [ 873.894575][T21086] ? proc_alloc_inode+0x25/0x200 [ 873.894592][T21086] ? __pfx_proc_alloc_inode+0x10/0x10 [ 873.894606][T21086] ? proc_alloc_inode+0x25/0x200 [ 873.894620][T21086] proc_alloc_inode+0x25/0x200 [ 873.894635][T21086] alloc_inode+0x64/0x240 [ 873.894650][T21086] new_inode+0x22/0x1c0 [ 873.894665][T21086] proc_pid_make_inode+0x22/0x160 [ 873.894686][T21086] proc_pident_instantiate+0x85/0x310 [ 873.894705][T21086] proc_pident_lookup+0x1f5/0x270 [ 873.894726][T21086] __lookup_slow+0x251/0x460 [ 873.894743][T21086] ? __pfx___lookup_slow+0x10/0x10 [ 873.894773][T21086] lookup_slow+0x50/0x70 [ 873.894787][T21086] link_path_walk+0x12d8/0x1c70 [ 873.894812][T21086] path_openat+0x1bd/0x3140 [ 873.894829][T21086] ? do_syscall_64+0xcd/0xf80 [ 873.894847][T21086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.894866][T21086] ? __pfx_path_openat+0x10/0x10 [ 873.894891][T21086] do_filp_open+0x20b/0x470 [ 873.894910][T21086] ? __pfx_do_filp_open+0x10/0x10 [ 873.894935][T21086] ? __pfx_kfree_link+0x10/0x10 [ 873.894956][T21086] ? alloc_fd+0x471/0x7d0 [ 873.894980][T21086] do_sys_openat2+0x121/0x290 [ 873.894995][T21086] ? __pfx_do_sys_openat2+0x10/0x10 [ 873.895010][T21086] ? count_memcg_events+0x122/0x290 [ 873.895033][T21086] __x64_sys_openat+0x174/0x210 [ 873.895047][T21086] ? __pfx___x64_sys_openat+0x10/0x10 [ 873.895063][T21086] ? syscall_user_dispatch+0x78/0x140 [ 873.895086][T21086] do_syscall_64+0xcd/0xf80 [ 873.895105][T21086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.895119][T21086] RIP: 0033:0x7f905a98e010 [ 873.895132][T21086] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 873.895145][T21086] RSP: 002b:00007f905b891f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 873.895159][T21086] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f905a98e010 [ 873.895169][T21086] RDX: 0000000000000002 RSI: 00007f905b891fa0 RDI: 00000000ffffff9c [ 873.895178][T21086] RBP: 00007f905b891fa0 R08: 0000000000000000 R09: 0000000000000000 [ 873.895195][T21086] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 873.895204][T21086] R13: 00007f905abe6038 R14: 00007f905abe5fa0 R15: 00007ffdee8c5d38 [ 873.895224][T21086] [ 874.661917][T21123] input: f as /devices/virtual/input/input78 [ 875.672619][ T30] audit: type=1800 audit(1766158880.992:107): pid=21138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3422" name="dbroot" dev="configfs" ino=99753 res=0 errno=0 [ 875.711817][T21142] input: f as /devices/virtual/input/input79 [ 877.449292][T21171] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 877.804538][T21175] netlink: 338 bytes leftover after parsing attributes in process `syz.7.3430'. [ 877.858120][T21175] netlink: 338 bytes leftover after parsing attributes in process `syz.7.3430'. [ 877.997503][T21179] netlink: 'syz.9.3431': attribute type 11 has an invalid length. [ 878.430965][T21189] FAULT_INJECTION: forcing a failure. [ 878.430965][T21189] name failslab, interval 1, probability 0, space 0, times 0 [ 878.443658][T21189] CPU: 1 UID: 0 PID: 21189 Comm: syz.9.3434 Tainted: G L syzkaller #0 PREEMPT(full) [ 878.443697][T21189] Tainted: [L]=SOFTLOCKUP [ 878.443702][T21189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 878.443711][T21189] Call Trace: [ 878.443717][T21189] [ 878.443723][T21189] dump_stack_lvl+0x16c/0x1f0 [ 878.443748][T21189] should_fail_ex+0x512/0x640 [ 878.443764][T21189] ? lockdep_hardirqs_on+0x7c/0x110 [ 878.443786][T21189] should_failslab+0xc2/0x120 [ 878.443805][T21189] kmem_cache_alloc_noprof+0x83/0x770 [ 878.443822][T21189] ? do_raw_spin_lock+0x12c/0x2b0 [ 878.443836][T21189] ? inet_bind_bucket_create+0x2d/0x280 [ 878.443857][T21189] ? inet_bind_bucket_create+0x2d/0x280 [ 878.443871][T21189] inet_bind_bucket_create+0x2d/0x280 [ 878.443888][T21189] inet_csk_get_port+0x117d/0x2890 [ 878.443917][T21189] ? trace_inet_sock_set_state+0x194/0x1f0 [ 878.443932][T21189] ? __pfx_inet_csk_get_port+0x10/0x10 [ 878.443965][T21189] inet_csk_listen_start+0x158/0x380 [ 878.443987][T21189] __inet_listen_sk+0x20f/0x520 [ 878.444004][T21189] ? __pfx___inet_listen_sk+0x10/0x10 [ 878.444020][T21189] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 878.444039][T21189] ? __local_bh_enable_ip+0xa4/0x120 [ 878.444060][T21189] inet_listen+0x93/0xd0 [ 878.444075][T21189] smc_listen+0x5ff/0xbb0 [ 878.444094][T21189] __sys_listen_socket+0x117/0x160 [ 878.444109][T21189] __sys_listen+0xa7/0x130 [ 878.444123][T21189] __x64_sys_listen+0x53/0x80 [ 878.444137][T21189] do_syscall_64+0xcd/0xf80 [ 878.444156][T21189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.444170][T21189] RIP: 0033:0x7fb7e5f8f7c9 [ 878.444183][T21189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.444196][T21189] RSP: 002b:00007fb7e6ec0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 878.444210][T21189] RAX: ffffffffffffffda RBX: 00007fb7e61e5fa0 RCX: 00007fb7e5f8f7c9 [ 878.444219][T21189] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000003 [ 878.444227][T21189] RBP: 00007fb7e6013f91 R08: 0000000000000000 R09: 0000000000000000 [ 878.444235][T21189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 878.444243][T21189] R13: 00007fb7e61e6038 R14: 00007fb7e61e5fa0 R15: 00007ffd8ec906b8 [ 878.444262][T21189] [ 878.847497][T21191] FAULT_INJECTION: forcing a failure. [ 878.847497][T21191] name failslab, interval 1, probability 0, space 0, times 0 [ 878.863387][T21191] CPU: 1 UID: 0 PID: 21191 Comm: syz.9.3436 Tainted: G L syzkaller #0 PREEMPT(full) [ 878.863410][T21191] Tainted: [L]=SOFTLOCKUP [ 878.863416][T21191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 878.863425][T21191] Call Trace: [ 878.863430][T21191] [ 878.863436][T21191] dump_stack_lvl+0x16c/0x1f0 [ 878.863462][T21191] should_fail_ex+0x512/0x640 [ 878.863477][T21191] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 878.863496][T21191] should_failslab+0xc2/0x120 [ 878.863516][T21191] kmem_cache_alloc_node_noprof+0x86/0x800 [ 878.863533][T21191] ? __alloc_skb+0x156/0x410 [ 878.863548][T21191] ? __pfx_tcp_current_mss+0x10/0x10 [ 878.863567][T21191] ? __alloc_skb+0x156/0x410 [ 878.863581][T21191] __alloc_skb+0x156/0x410 [ 878.863595][T21191] ? __pfx___alloc_skb+0x10/0x10 [ 878.863611][T21191] ? __lock_acquire+0x436/0x2890 [ 878.863627][T21191] tcp_stream_alloc_skb+0x34/0x670 [ 878.863643][T21191] tcp_sendmsg_locked+0x12de/0x42a0 [ 878.863663][T21191] ? __lock_acquire+0x436/0x2890 [ 878.863679][T21191] ? __lock_acquire+0x436/0x2890 [ 878.863692][T21191] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 878.863708][T21191] ? do_raw_spin_lock+0x12c/0x2b0 [ 878.863732][T21191] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 878.863751][T21191] ? __local_bh_enable_ip+0xa4/0x120 [ 878.863773][T21191] tcp_sendmsg+0x2e/0x50 [ 878.863787][T21191] ? __pfx_tcp_sendmsg+0x10/0x10 [ 878.863801][T21191] inet_sendmsg+0xb9/0x140 [ 878.863816][T21191] ____sys_sendmsg+0x973/0xc30 [ 878.863836][T21191] ? copy_msghdr_from_user+0x10a/0x160 [ 878.863853][T21191] ? __pfx_____sys_sendmsg+0x10/0x10 [ 878.863874][T21191] ? find_held_lock+0x2b/0x80 [ 878.863891][T21191] ? futex_unqueue+0x133/0x2c0 [ 878.863909][T21191] ___sys_sendmsg+0x134/0x1d0 [ 878.863927][T21191] ? __pfx____sys_sendmsg+0x10/0x10 [ 878.863943][T21191] ? __pfx___futex_wait+0x10/0x10 [ 878.863967][T21191] ? find_held_lock+0x2b/0x80 [ 878.863995][T21191] __sys_sendmmsg+0x200/0x420 [ 878.864013][T21191] ? __pfx___sys_sendmmsg+0x10/0x10 [ 878.864035][T21191] ? __pfx_do_futex+0x10/0x10 [ 878.864057][T21191] ? fput+0x70/0xf0 [ 878.864071][T21191] ? xfd_validate_state+0x61/0x180 [ 878.864083][T21191] ? __pfx_do_writev+0x10/0x10 [ 878.864103][T21191] __x64_sys_sendmmsg+0x9c/0x100 [ 878.864119][T21191] ? lockdep_hardirqs_on+0x7c/0x110 [ 878.864138][T21191] do_syscall_64+0xcd/0xf80 [ 878.864158][T21191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.864172][T21191] RIP: 0033:0x7fb7e5f8f7c9 [ 878.864185][T21191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.864198][T21191] RSP: 002b:00007fb7e6ec0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 878.864213][T21191] RAX: ffffffffffffffda RBX: 00007fb7e61e5fa0 RCX: 00007fb7e5f8f7c9 [ 878.864222][T21191] RDX: 0000000000000006 RSI: 0000200000000080 RDI: 0000000000000003 [ 878.864231][T21191] RBP: 00007fb7e6013f91 R08: 0000000000000000 R09: 0000000000000000 [ 878.864244][T21191] R10: 0000000000000240 R11: 0000000000000246 R12: 0000000000000000 [ 878.864252][T21191] R13: 00007fb7e61e6038 R14: 00007fb7e61e5fa0 R15: 00007ffd8ec906b8 [ 878.864271][T21191] [ 879.300782][T21197] netlink: set zone limit has 8 unknown bytes [ 880.588429][T21224] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3440'. [ 880.650561][T21225] netlink: 354 bytes leftover after parsing attributes in process `syz.9.3440'. [ 880.978021][T21229] netlink: 'syz.9.3442': attribute type 11 has an invalid length. [ 881.222627][T21234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 881.270788][T21236] FAULT_INJECTION: forcing a failure. [ 881.270788][T21236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 881.291793][T21234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 881.326721][T21236] CPU: 1 UID: 0 PID: 21236 Comm: syz.9.3444 Tainted: G L syzkaller #0 PREEMPT(full) [ 881.326746][T21236] Tainted: [L]=SOFTLOCKUP [ 881.326751][T21236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 881.326760][T21236] Call Trace: [ 881.326765][T21236] [ 881.326771][T21236] dump_stack_lvl+0x16c/0x1f0 [ 881.326798][T21236] should_fail_ex+0x512/0x640 [ 881.326817][T21236] _copy_to_user+0x32/0xd0 [ 881.326834][T21236] simple_read_from_buffer+0xcb/0x170 [ 881.326854][T21236] proc_fail_nth_read+0x197/0x240 [ 881.326878][T21236] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 881.326900][T21236] ? rw_verify_area+0xcf/0x6c0 [ 881.326917][T21236] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 881.326938][T21236] vfs_read+0x1e4/0xcf0 [ 881.326957][T21236] ? __pfx___mutex_lock+0x10/0x10 [ 881.326980][T21236] ? __pfx_vfs_read+0x10/0x10 [ 881.327003][T21236] ? __fget_files+0x20e/0x3c0 [ 881.327028][T21236] ksys_read+0x12a/0x250 [ 881.327046][T21236] ? __pfx_ksys_read+0x10/0x10 [ 881.327069][T21236] do_syscall_64+0xcd/0xf80 [ 881.327091][T21236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.327105][T21236] RIP: 0033:0x7fb7e5f8e1dc [ 881.327117][T21236] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 881.327131][T21236] RSP: 002b:00007fb7e6ec0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 881.327144][T21236] RAX: ffffffffffffffda RBX: 00007fb7e61e5fa0 RCX: 00007fb7e5f8e1dc [ 881.327154][T21236] RDX: 000000000000000f RSI: 00007fb7e6ec00a0 RDI: 0000000000000004 [ 881.327162][T21236] RBP: 00007fb7e6ec0090 R08: 0000000000000000 R09: 0000000000000000 [ 881.327170][T21236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 881.327178][T21236] R13: 00007fb7e61e6038 R14: 00007fb7e61e5fa0 R15: 00007ffd8ec906b8 [ 881.327197][T21236] [ 881.622914][T21238] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3447'. [ 882.664239][T21257] random: crng reseeded on system resumption [ 883.111670][T21254] zswap: compressor not available [ 884.239493][ T52] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 884.252375][ T52] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 884.260360][ T52] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 884.268677][ T52] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 884.279050][ T52] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 885.182786][T21282] chnl_net:caif_netlink_parms(): no params data found [ 885.759144][T21282] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.822332][T21282] bridge0: port 1(bridge_slave_0) entered disabled state [ 885.912060][T21282] bridge_slave_0: entered allmulticast mode [ 885.960032][T21282] bridge_slave_0: entered promiscuous mode [ 886.035789][T21282] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.092120][T21282] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.099375][T21282] bridge_slave_1: entered allmulticast mode [ 886.117209][T21304] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input81 [ 886.227750][T21282] bridge_slave_1: entered promiscuous mode [ 886.333202][ T52] Bluetooth: hci10: command tx timeout [ 886.505306][T21282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 886.593233][T21282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.750861][T21282] team0: Port device team_slave_0 added [ 886.795073][T21282] team0: Port device team_slave_1 added [ 886.968035][T21282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.036514][T21282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.226441][T21324] input: f as /devices/virtual/input/input82 [ 887.249042][T21282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.335463][T21282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.376430][T21282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.522701][T21282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.587751][T21329] netlink: 7 bytes leftover after parsing attributes in process `syz.9.3461'. [ 887.652259][T21330] netlink: 7 bytes leftover after parsing attributes in process `syz.9.3461'. [ 887.881656][T21282] hsr_slave_0: entered promiscuous mode [ 887.915983][T21282] hsr_slave_1: entered promiscuous mode [ 887.947011][T21282] debugfs: 'hsr0' already exists in 'hsr' [ 887.990963][T21282] Cannot create hsr debugfs directory [ 888.401275][ T52] Bluetooth: hci10: command tx timeout [ 888.500987][T21343] input: f as /devices/virtual/input/input84 [ 888.528163][T21282] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.675750][T21282] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.789980][T21282] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.874420][T21282] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.305108][T21282] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 889.335852][T21282] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 889.368395][T21282] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 889.405006][T21282] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 889.641705][T21282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.722023][T21282] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.755825][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.762964][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.815094][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.822296][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.109664][ T30] audit: type=1800 audit(1766165039.501:108): pid=21369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3470" name="dbroot" dev="configfs" ino=101144 res=0 errno=0 [ 890.337325][T21372] netlink: set zone limit has 8 unknown bytes [ 890.401825][T21282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.469586][ T52] Bluetooth: hci10: command tx timeout [ 890.564473][T21282] veth0_vlan: entered promiscuous mode [ 890.620872][T21282] veth1_vlan: entered promiscuous mode [ 890.777401][T21282] veth0_macvtap: entered promiscuous mode [ 890.823544][T21282] veth1_macvtap: entered promiscuous mode [ 890.893137][T21282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 891.050157][T21282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 891.119915][T20242] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.154754][T20242] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.187440][T20242] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.296071][T20242] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 891.408320][T21391] netlink: 342 bytes leftover after parsing attributes in process `syz.9.3474'. [ 891.484093][T21391] netlink: 342 bytes leftover after parsing attributes in process `syz.9.3474'. [ 891.517939][T21391] netlink: 342 bytes leftover after parsing attributes in process `syz.9.3474'. [ 891.571687][T21391] netlink: 342 bytes leftover after parsing attributes in process `syz.9.3474'. [ 891.616260][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.627743][T21391] netlink: 342 bytes leftover after parsing attributes in process `syz.9.3474'. [ 891.662117][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.726769][T21394] FAULT_INJECTION: forcing a failure. [ 891.726769][T21394] name failslab, interval 1, probability 0, space 0, times 0 [ 891.755173][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.768063][T21394] CPU: 1 UID: 0 PID: 21394 Comm: syz.8.3475 Tainted: G L syzkaller #0 PREEMPT(full) [ 891.768088][T21394] Tainted: [L]=SOFTLOCKUP [ 891.768093][T21394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 891.768102][T21394] Call Trace: [ 891.768107][T21394] [ 891.768114][T21394] dump_stack_lvl+0x16c/0x1f0 [ 891.768138][T21394] should_fail_ex+0x512/0x640 [ 891.768155][T21394] ? kmem_cache_alloc_noprof+0x62/0x770 [ 891.768173][T21394] should_failslab+0xc2/0x120 [ 891.768194][T21394] kmem_cache_alloc_noprof+0x83/0x770 [ 891.768210][T21394] ? __proc_create+0x2c8/0x8d0 [ 891.768230][T21394] ? __proc_create+0x2c8/0x8d0 [ 891.768267][T21394] __proc_create+0x2c8/0x8d0 [ 891.768285][T21394] ? __pfx___proc_create+0x10/0x10 [ 891.768306][T21394] ? _raw_write_unlock+0x28/0x50 [ 891.768325][T21394] ? proc_register+0x559/0x8b0 [ 891.768345][T21394] proc_create_reg+0x7d/0x180 [ 891.768364][T21394] proc_create_net_data+0x8e/0x1c0 [ 891.768382][T21394] ? __pfx_proc_create_net_data+0x10/0x10 [ 891.768404][T21394] ? __pfx_kcm_proc_init_net+0x10/0x10 [ 891.768421][T21394] kcm_proc_init_net+0xa3/0x120 [ 891.768439][T21394] ops_init+0x1e2/0x5f0 [ 891.768459][T21394] setup_net+0x11d/0x3a0 [ 891.768483][T21394] ? __pfx_setup_net+0x10/0x10 [ 891.768500][T21394] ? lockdep_init_map_type+0x5c/0x270 [ 891.768519][T21394] ? mutex_init_lockep+0x110/0x150 [ 891.768536][T21394] copy_net_ns+0x351/0x7c0 [ 891.768558][T21394] create_new_namespaces+0x3ea/0xab0 [ 891.768581][T21394] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 891.768600][T21394] ksys_unshare+0x45b/0xa40 [ 891.768621][T21394] ? __pfx_ksys_unshare+0x10/0x10 [ 891.768641][T21394] ? xfd_validate_state+0x61/0x180 [ 891.768659][T21394] __x64_sys_unshare+0x31/0x40 [ 891.768671][T21394] do_syscall_64+0xcd/0xf80 [ 891.768692][T21394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.768706][T21394] RIP: 0033:0x7f905a98f7c9 [ 891.768719][T21394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 891.768732][T21394] RSP: 002b:00007f905b892038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 891.768746][T21394] RAX: ffffffffffffffda RBX: 00007f905abe5fa0 RCX: 00007f905a98f7c9 [ 891.768756][T21394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 891.768764][T21394] RBP: 00007f905aa13f91 R08: 0000000000000000 R09: 0000000000000000 [ 891.768773][T21394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 891.768781][T21394] R13: 00007f905abe6038 R14: 00007f905abe5fa0 R15: 00007ffdee8c5d38 [ 891.768800][T21394] [ 891.769527][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.178386][T21400] random: crng reseeded on system resumption [ 892.540115][ T52] Bluetooth: hci10: command tx timeout [ 893.112028][T21424] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 893.938873][ T30] audit: type=1800 audit(1766169139.353:109): pid=21447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3483" name="dbroot" dev="configfs" ino=101872 res=0 errno=0 [ 895.160783][T21469] FAULT_INJECTION: forcing a failure. [ 895.160783][T21469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 895.234212][T21469] CPU: 1 UID: 0 PID: 21469 Comm: syz.8.3487 Tainted: G L syzkaller #0 PREEMPT(full) [ 895.234237][T21469] Tainted: [L]=SOFTLOCKUP [ 895.234242][T21469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 895.234251][T21469] Call Trace: [ 895.234256][T21469] [ 895.234262][T21469] dump_stack_lvl+0x16c/0x1f0 [ 895.234287][T21469] should_fail_ex+0x512/0x640 [ 895.234307][T21469] _copy_from_user+0x2e/0xd0 [ 895.234322][T21469] do_pages_stat+0x240/0x7b0 [ 895.234344][T21469] ? __lock_acquire+0x436/0x2890 [ 895.234362][T21469] ? __pfx_do_pages_stat+0x10/0x10 [ 895.234386][T21469] ? find_held_lock+0x2b/0x80 [ 895.234414][T21469] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 895.234433][T21469] ? lockdep_hardirqs_on+0x7c/0x110 [ 895.234453][T21469] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 895.234474][T21469] kernel_move_pages+0xfc8/0x12f0 [ 895.234493][T21469] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 895.234514][T21469] ? __pfx_kernel_move_pages+0x10/0x10 [ 895.234528][T21469] ? __fget_files+0x20e/0x3c0 [ 895.234551][T21469] ? fput+0x70/0xf0 [ 895.234564][T21469] ? ksys_write+0x1ac/0x250 [ 895.234582][T21469] ? __pfx_ksys_write+0x10/0x10 [ 895.234603][T21469] __x64_sys_move_pages+0xe0/0x1c0 [ 895.234617][T21469] ? do_syscall_64+0x91/0xf80 [ 895.234637][T21469] ? lockdep_hardirqs_on+0x7c/0x110 [ 895.234656][T21469] do_syscall_64+0xcd/0xf80 [ 895.234677][T21469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.234691][T21469] RIP: 0033:0x7f905a98f7c9 [ 895.234703][T21469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 895.234716][T21469] RSP: 002b:00007f905b892038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 895.234730][T21469] RAX: ffffffffffffffda RBX: 00007f905abe5fa0 RCX: 00007f905a98f7c9 [ 895.234739][T21469] RDX: 0000000000000000 RSI: 0000000000001002 RDI: 0000000000000000 [ 895.234747][T21469] RBP: 00007f905b892090 R08: 0000000000000000 R09: 0000000000000002 [ 895.234756][T21469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 895.234764][T21469] R13: 00007f905abe6038 R14: 00007f905abe5fa0 R15: 00007ffdee8c5d38 [ 895.234782][T21469] [ 896.270454][T21486] netlink: set zone limit has 8 unknown bytes [ 897.328125][T21508] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 897.328125][T21508] M' is too long [ 897.414588][T21508] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 897.414588][T21508] W ' is too long [ 898.818550][T21530] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 898.818550][T21530] M' is too long [ 898.843764][T21530] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 898.843764][T21530] W ' is too long [ 900.758958][T21548] ALSA: mixer_oss: invalid OSS volume '0' [ 900.766861][T21548] ALSA: mixer_oss: invalid OSS volume 'PHONET' [ 900.773270][T21548] ALSA: mixer_oss: invalid OSS volume 'L2TP/IPv6' [ 902.077495][T21562] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 902.136834][T21564] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3512'. [ 902.148257][T21564] veth1_macvtap: left promiscuous mode [ 902.290595][T21566] zswap: compressor not available [ 902.315600][T21566] random: crng reseeded on system resumption [ 902.574645][ T5154] Bluetooth: hci5: command 0x0406 tx timeout [ 902.823253][T21577] FAULT_INJECTION: forcing a failure. [ 902.823253][T21577] name failslab, interval 1, probability 0, space 0, times 0 [ 902.842666][T21577] CPU: 1 UID: 0 PID: 21577 Comm: syz.8.3515 Tainted: G L syzkaller #0 PREEMPT(full) [ 902.842690][T21577] Tainted: [L]=SOFTLOCKUP [ 902.842696][T21577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 902.842705][T21577] Call Trace: [ 902.842711][T21577] [ 902.842718][T21577] dump_stack_lvl+0x16c/0x1f0 [ 902.842743][T21577] should_fail_ex+0x512/0x640 [ 902.842758][T21577] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 902.842778][T21577] should_failslab+0xc2/0x120 [ 902.842799][T21577] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 902.842816][T21577] ? proc_alloc_inode+0x25/0x200 [ 902.842835][T21577] ? __pfx_proc_alloc_inode+0x10/0x10 [ 902.842849][T21577] ? proc_alloc_inode+0x25/0x200 [ 902.842862][T21577] proc_alloc_inode+0x25/0x200 [ 902.842877][T21577] alloc_inode+0x64/0x240 [ 902.842892][T21577] new_inode+0x22/0x1c0 [ 902.842909][T21577] proc_pid_make_inode+0x22/0x160 [ 902.842925][T21577] proc_pident_instantiate+0x85/0x310 [ 902.842943][T21577] proc_pident_lookup+0x1f5/0x270 [ 902.842962][T21577] __lookup_slow+0x251/0x460 [ 902.842978][T21577] ? __pfx___lookup_slow+0x10/0x10 [ 902.843014][T21577] lookup_slow+0x50/0x70 [ 902.843029][T21577] link_path_walk+0x12d8/0x1c70 [ 902.843053][T21577] path_openat+0x1bd/0x3140 [ 902.843071][T21577] ? do_syscall_64+0xcd/0xf80 [ 902.843089][T21577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.843109][T21577] ? __pfx_path_openat+0x10/0x10 [ 902.843134][T21577] do_filp_open+0x20b/0x470 [ 902.843153][T21577] ? __pfx_do_filp_open+0x10/0x10 [ 902.843177][T21577] ? __pfx_kfree_link+0x10/0x10 [ 902.843199][T21577] ? alloc_fd+0x471/0x7d0 [ 902.843222][T21577] do_sys_openat2+0x121/0x290 [ 902.843237][T21577] ? __pfx_do_sys_openat2+0x10/0x10 [ 902.843252][T21577] ? count_memcg_events+0x122/0x290 [ 902.843276][T21577] __x64_sys_openat+0x174/0x210 [ 902.843295][T21577] ? __pfx___x64_sys_openat+0x10/0x10 [ 902.843312][T21577] ? syscall_user_dispatch+0x78/0x140 [ 902.843336][T21577] do_syscall_64+0xcd/0xf80 [ 902.843356][T21577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.843370][T21577] RIP: 0033:0x7f905a98e010 [ 902.843382][T21577] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 902.843396][T21577] RSP: 002b:00007f905b891f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 902.843409][T21577] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f905a98e010 [ 902.843418][T21577] RDX: 0000000000000002 RSI: 00007f905b891fa0 RDI: 00000000ffffff9c [ 902.843427][T21577] RBP: 00007f905b891fa0 R08: 0000000000000000 R09: 0000000000000000 [ 902.843435][T21577] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 902.843443][T21577] R13: 00007f905abe6038 R14: 00007f905abe5fa0 R15: 00007ffdee8c5d38 [ 902.843463][T21577] [ 903.439764][ T30] audit: type=1800 audit(1766171196.787:110): pid=21586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3517" name="dbroot" dev="configfs" ino=102481 res=0 errno=0 [ 903.531306][ T5154] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 903.561393][ T5154] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 903.575053][ T5154] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 903.588112][ T5154] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 903.595850][ T5154] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 903.812199][ T30] audit: type=1800 audit(1766171197.289:111): pid=21591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3518" name="dbroot" dev="configfs" ino=102567 res=0 errno=0 [ 904.082942][T21584] chnl_net:caif_netlink_parms(): no params data found [ 904.259767][T21584] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.286886][T21584] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.295286][T21584] bridge_slave_0: entered allmulticast mode [ 904.321033][T21584] bridge_slave_0: entered promiscuous mode [ 904.374920][T21600] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3519'. [ 904.396413][T21584] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.405265][T21584] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.412602][T21600] netlink: 354 bytes leftover after parsing attributes in process `syz.8.3519'. [ 904.422342][T21584] bridge_slave_1: entered allmulticast mode [ 904.460013][T21584] bridge_slave_1: entered promiscuous mode [ 904.588476][T21584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 904.634766][T21603] FAULT_INJECTION: forcing a failure. [ 904.634766][T21603] name failslab, interval 1, probability 0, space 0, times 0 [ 904.649892][T21584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.684946][T21603] CPU: 1 UID: 0 PID: 21603 Comm: syz.8.3520 Tainted: G L syzkaller #0 PREEMPT(full) [ 904.684972][T21603] Tainted: [L]=SOFTLOCKUP [ 904.684977][T21603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 904.684986][T21603] Call Trace: [ 904.684991][T21603] [ 904.684997][T21603] dump_stack_lvl+0x16c/0x1f0 [ 904.685023][T21603] should_fail_ex+0x512/0x640 [ 904.685039][T21603] ? kmem_cache_alloc_noprof+0x62/0x770 [ 904.685058][T21603] should_failslab+0xc2/0x120 [ 904.685079][T21603] kmem_cache_alloc_noprof+0x83/0x770 [ 904.685095][T21603] ? security_file_alloc+0x34/0x2b0 [ 904.685115][T21603] ? security_file_alloc+0x34/0x2b0 [ 904.685131][T21603] security_file_alloc+0x34/0x2b0 [ 904.685148][T21603] init_file+0x93/0x4c0 [ 904.685163][T21603] alloc_empty_file+0x73/0x1e0 [ 904.685178][T21603] alloc_file_pseudo+0x13a/0x230 [ 904.685193][T21603] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 904.685214][T21603] ioctx_alloc+0x5cf/0x2230 [ 904.685227][T21603] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 904.685255][T21603] ? find_held_lock+0x2b/0x80 [ 904.685273][T21603] ? __pfx_ioctx_alloc+0x10/0x10 [ 904.685284][T21603] ? __might_fault+0x13b/0x190 [ 904.685305][T21603] __x64_sys_io_setup+0xc9/0x230 [ 904.685320][T21603] do_syscall_64+0xcd/0xf80 [ 904.685341][T21603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.685355][T21603] RIP: 0033:0x7f905a98f7c9 [ 904.685368][T21603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 904.685382][T21603] RSP: 002b:00007f905b892038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 904.685395][T21603] RAX: ffffffffffffffda RBX: 00007f905abe5fa0 RCX: 00007f905a98f7c9 [ 904.685405][T21603] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 00000000000000ff [ 904.685413][T21603] RBP: 00007f905b892090 R08: 0000000000000000 R09: 0000000000000000 [ 904.685427][T21603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.685436][T21603] R13: 00007f905abe6038 R14: 00007f905abe5fa0 R15: 00007ffdee8c5d38 [ 904.685454][T21603] [ 904.930528][T21584] team0: Port device team_slave_0 added [ 904.938061][T21584] team0: Port device team_slave_1 added [ 904.961039][T21584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.968076][T21584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.998439][T21584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.010532][T21584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.017542][T21584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.043495][T21584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.083273][T21584] hsr_slave_0: entered promiscuous mode [ 905.089980][T21584] hsr_slave_1: entered promiscuous mode [ 905.096062][T21584] debugfs: 'hsr0' already exists in 'hsr' [ 905.101771][T21584] Cannot create hsr debugfs directory [ 905.301920][ T30] audit: type=1800 audit(1766171198.747:112): pid=21605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3521" name="features" dev="configfs" ino=102730 res=0 errno=0 [ 905.552168][T21584] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.670464][ T52] Bluetooth: hci11: command tx timeout [ 905.678883][T21584] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.770687][T21584] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.826562][T21584] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.160723][T21613] zswap: compressor not available [ 906.178726][T21584] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 906.204393][T21615] random: crng reseeded on system resumption [ 906.211394][T21584] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 906.229301][T21584] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 906.251588][T21584] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 906.418332][T21584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 906.451163][T21584] 8021q: adding VLAN 0 to HW filter on device team0 [ 906.480134][T21473] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.487284][T21473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 906.531811][T21473] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.539044][T21473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 906.626867][T21628] FAULT_INJECTION: forcing a failure. [ 906.626867][T21628] name failslab, interval 1, probability 0, space 0, times 0 [ 906.654556][T21628] CPU: 1 UID: 0 PID: 21628 Comm: syz.8.3524 Tainted: G L syzkaller #0 PREEMPT(full) [ 906.654581][T21628] Tainted: [L]=SOFTLOCKUP [ 906.654587][T21628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 906.654596][T21628] Call Trace: [ 906.654602][T21628] [ 906.654609][T21628] dump_stack_lvl+0x16c/0x1f0 [ 906.654634][T21628] should_fail_ex+0x512/0x640 [ 906.654649][T21628] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 906.654669][T21628] should_failslab+0xc2/0x120 [ 906.654690][T21628] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 906.654707][T21628] ? proc_alloc_inode+0x25/0x200 [ 906.654726][T21628] ? __pfx_proc_alloc_inode+0x10/0x10 [ 906.654740][T21628] ? proc_alloc_inode+0x25/0x200 [ 906.654754][T21628] proc_alloc_inode+0x25/0x200 [ 906.654769][T21628] alloc_inode+0x64/0x240 [ 906.654784][T21628] new_inode+0x22/0x1c0 [ 906.654800][T21628] proc_pid_make_inode+0x22/0x160 [ 906.654816][T21628] proc_pident_instantiate+0x85/0x310 [ 906.654834][T21628] proc_pident_lookup+0x1f5/0x270 [ 906.654853][T21628] __lookup_slow+0x251/0x460 [ 906.654869][T21628] ? __pfx___lookup_slow+0x10/0x10 [ 906.654899][T21628] lookup_slow+0x50/0x70 [ 906.654913][T21628] link_path_walk+0x12d8/0x1c70 [ 906.654937][T21628] path_openat+0x1bd/0x3140 [ 906.654954][T21628] ? do_syscall_64+0xcd/0xf80 [ 906.654972][T21628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.654999][T21628] ? __pfx_path_openat+0x10/0x10 [ 906.655026][T21628] do_filp_open+0x20b/0x470 [ 906.655047][T21628] ? __pfx_do_filp_open+0x10/0x10 [ 906.655073][T21628] ? __pfx_kfree_link+0x10/0x10 [ 906.655096][T21628] ? alloc_fd+0x471/0x7d0 [ 906.655119][T21628] do_sys_openat2+0x121/0x290 [ 906.655135][T21628] ? __pfx_do_sys_openat2+0x10/0x10 [ 906.655150][T21628] ? count_memcg_events+0x122/0x290 [ 906.655172][T21628] __x64_sys_openat+0x174/0x210 [ 906.655188][T21628] ? __pfx___x64_sys_openat+0x10/0x10 [ 906.655203][T21628] ? syscall_user_dispatch+0x78/0x140 [ 906.655226][T21628] do_syscall_64+0xcd/0xf80 [ 906.655245][T21628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.655259][T21628] RIP: 0033:0x7f905a98e010 [ 906.655272][T21628] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 906.655285][T21628] RSP: 002b:00007f905b891f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 906.655299][T21628] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f905a98e010 [ 906.655308][T21628] RDX: 0000000000000002 RSI: 00007f905b891fa0 RDI: 00000000ffffff9c [ 906.655317][T21628] RBP: 00007f905b891fa0 R08: 0000000000000000 R09: 0000000000000000 [ 906.655325][T21628] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 906.655333][T21628] R13: 00007f905abe6038 R14: 00007f905abe5fa0 R15: 00007ffdee8c5d38 [ 906.655353][T21628] [ 907.127670][ T30] audit: type=1800 audit(1766171200.617:113): pid=21633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3525" name="dbroot" dev="configfs" ino=103099 res=0 errno=0 [ 907.541162][T21640] ubi: mtd0 is already attached to ubi1 [ 907.564708][T21584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 907.661178][T21584] veth0_vlan: entered promiscuous mode [ 907.684578][T21584] veth1_vlan: entered promiscuous mode [ 907.739505][ T52] Bluetooth: hci11: command tx timeout [ 907.767797][T21584] veth0_macvtap: entered promiscuous mode [ 907.786824][T21584] veth1_macvtap: entered promiscuous mode [ 907.893333][T21644] input: f as /devices/virtual/input/input89 [ 907.904757][T21584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 907.966598][T21584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 908.024073][ T3544] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.058781][ T3544] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.099514][ T3544] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.123892][ T3544] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.278266][ T7819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.308759][ T7819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.400758][ T3544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.429038][ T3544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.809065][ T52] Bluetooth: hci11: command tx timeout [ 911.877680][ T52] Bluetooth: hci11: command tx timeout [ 912.000956][T21712] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3538'. [ 912.038427][T21712] netlink: 354 bytes leftover after parsing attributes in process `syz.8.3538'. [ 912.176439][T21714] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3539'. [ 912.200252][T21714] netlink: 354 bytes leftover after parsing attributes in process `syz.8.3539'. [ 913.019758][T21731] input: f as /devices/virtual/input/input90 [ 913.052668][T21731] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 913.183406][T21735] overlayfs: missing 'lowerdir' [ 913.481439][T21739] KVM: debugfs: duplicate directory 21739-3 [ 913.754776][T21750] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 913.754776][T21750] M' is too long [ 913.766510][ T30] audit: type=1800 audit(1766171207.291:114): pid=21751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3550" name="dbroot" dev="configfs" ino=104269 res=0 errno=0 [ 913.801985][T21750] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 913.801985][T21750] W ' is too long [ 914.621327][T21758] zswap: compressor not available [ 914.731015][T21758] random: crng reseeded on system resumption [ 915.628760][ T5154] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 915.640309][ T5154] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 915.651721][ T5154] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 915.659470][ T5154] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 915.667013][ T5154] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 916.063545][ T52] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 916.073843][ T52] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 916.088425][ T52] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 916.099484][ T52] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 916.107206][ T52] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 916.879594][T21783] chnl_net:caif_netlink_parms(): no params data found [ 916.924880][T21777] chnl_net:caif_netlink_parms(): no params data found [ 917.321848][T21783] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.338925][T21783] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.346392][T21783] bridge_slave_0: entered allmulticast mode [ 917.362733][T21783] bridge_slave_0: entered promiscuous mode [ 917.380245][T21777] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.387317][T21777] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.411186][T21777] bridge_slave_0: entered allmulticast mode [ 917.429472][T21777] bridge_slave_0: entered promiscuous mode [ 917.446096][T21783] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.455286][T21783] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.471220][T21783] bridge_slave_1: entered allmulticast mode [ 917.488537][T21783] bridge_slave_1: entered promiscuous mode [ 917.503740][T21777] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.528966][T21777] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.538689][T21777] bridge_slave_1: entered allmulticast mode [ 917.556355][T21777] bridge_slave_1: entered promiscuous mode [ 917.634918][T21783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.661816][T21777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.685941][T21783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.727938][T21777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.771194][ T52] Bluetooth: hci12: command tx timeout [ 917.851695][T21783] team0: Port device team_slave_0 added [ 917.867521][T21777] team0: Port device team_slave_0 added [ 917.883890][T21777] team0: Port device team_slave_1 added [ 917.897755][T21783] team0: Port device team_slave_1 added [ 917.983200][T21783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 918.003719][T21783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.075624][T21783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 918.095959][T21777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 918.102903][T21777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.175392][ T52] Bluetooth: hci13: command tx timeout [ 918.185203][T21777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 918.215184][T21783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 918.228996][T21783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.284810][T21783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.305698][T21777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 918.312636][T21777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.394260][T21777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 918.505150][T21783] hsr_slave_0: entered promiscuous mode [ 918.523184][T21783] hsr_slave_1: entered promiscuous mode [ 918.543211][T21783] debugfs: 'hsr0' already exists in 'hsr' [ 918.549210][T21783] Cannot create hsr debugfs directory [ 918.576916][T21777] hsr_slave_0: entered promiscuous mode [ 918.596481][T21777] hsr_slave_1: entered promiscuous mode [ 918.613966][T21777] debugfs: 'hsr0' already exists in 'hsr' [ 918.619707][T21777] Cannot create hsr debugfs directory [ 918.967844][ T31] INFO: task syz.3.3051:19417 blocked for more than 143 seconds. [ 918.980807][ T31] Tainted: G L syzkaller #0 [ 918.987323][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 919.004220][T21798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3561'. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 919.014109][ T31] task:syz.3.3051 state:D stack:27608 pid:19417 tgid:19416 ppid:16612 task_flags:0x400140 flags:0x00080002 [ 919.050777][ T31] Call Trace: [ 919.054139][ T31] [ 919.062693][ T31] ? __schedule+0x10b9/0x6150 [ 919.072927][ T31] __schedule+0x1139/0x6150 [ 919.083214][ T31] ? __lock_acquire+0x436/0x2890 [ 919.093609][ T31] ? __pfx___schedule+0x10/0x10 [ 919.104354][ T31] ? find_held_lock+0x2b/0x80 [ 919.171080][ T31] ? schedule+0x2d7/0x3a0 [ 919.175448][ T31] schedule+0xe7/0x3a0 [ 919.201410][ T31] schedule_preempt_disabled+0x13/0x30 [ 919.206902][ T31] __mutex_lock+0xc69/0x1ca0 [ 919.224471][ T31] ? expkey_flush+0x20/0x90 [ 919.229721][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 919.234756][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 919.247349][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 919.252888][ T31] ? _raw_spin_unlock+0x28/0x50 [ 919.257798][ T31] ? __pfx_cache_clean+0x10/0x10 [ 919.266175][ T31] ? __pfx___might_resched+0x10/0x10 [ 919.272871][ T31] ? __pfx_expkey_flush+0x10/0x10 [ 919.277903][ T31] ? expkey_flush+0x20/0x90 [ 919.283807][ T31] expkey_flush+0x20/0x90 [ 919.288147][ T31] write_flush.constprop.0+0x2af/0x3d0 [ 919.293960][ T31] ? __pfx_write_flush.constprop.0+0x10/0x10 [ 919.301367][ T31] ? iovec_from_user+0xbb/0x140 [ 919.306225][ T31] ? __pfx_write_flush_procfs+0x10/0x10 [ 919.312134][ T31] proc_reg_write+0x240/0x330 [ 919.316825][ T31] ? __pfx_proc_reg_write+0x10/0x10 [ 919.322516][ T31] vfs_writev+0x5df/0xde0 [ 919.326857][ T31] ? __pfx_vfs_writev+0x10/0x10 [ 919.332239][ T31] ? fdget_pos+0x2a2/0x370 [ 919.336658][ T31] ? putname+0xf5/0x1a0 [ 919.347368][ T31] ? __fget_files+0x20e/0x3c0 [ 919.352285][ T31] ? do_writev+0x132/0x340 [ 919.356696][ T31] do_writev+0x132/0x340 [ 919.362086][ T31] ? __pfx_do_writev+0x10/0x10 [ 919.366869][ T31] do_syscall_64+0xcd/0xf80 [ 919.374750][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.382031][ T31] RIP: 0033:0x7ff66018f7c9 [ 919.386447][ T31] RSP: 002b:00007ff661092038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 919.395701][ T31] RAX: ffffffffffffffda RBX: 00007ff6603e5fa0 RCX: 00007ff66018f7c9 [ 919.404005][ T31] RDX: 000000000000000a RSI: 0000200000000240 RDI: 0000000000000003 [ 919.413324][ T31] RBP: 00007ff660213f91 R08: 0000000000000000 R09: 0000000000000000 [ 919.421605][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 919.429777][ T31] R13: 00007ff6603e6038 R14: 00007ff6603e5fa0 R15: 00007ffc8aad62e8 [ 919.437774][ T31] [ 919.454357][T21783] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.466212][ T31] [ 919.466212][ T31] Showing all locks held in the system: [ 919.490645][ T31] 1 lock held by khungtaskd/31: [ 919.495522][ T31] #0: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 919.513102][ T31] 2 locks held by getty/5601: [ 919.519977][ T31] #0: ffff88814d3f20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 919.530136][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 919.540431][ T31] 2 locks held by syz-executor/16302: [ 919.551994][ T31] #0: ffff88804ec5c0e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 919.562484][ T31] #1: ffffffff8e801168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 919.572489][ T31] 2 locks held by syz.1.2900/18749: [ 919.577867][ T31] #0: ffffffff901eb550 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 919.586047][ T31] #1: ffffffff8e801168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1ae0 [ 919.604840][ T31] 2 locks held by syz-executor/19006: [ 919.610470][ T31] #0: ffff888056c2e0e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 919.644865][ T31] #1: ffffffff8e801168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 919.691879][ T31] 3 locks held by syz.3.3051/19417: [ 919.697561][ T31] #0: ffff888037cc3278 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 919.710755][ T31] #1: ffff8880339bc420 (sb_writers#3){.+.+}-{0:0}, at: do_writev+0x132/0x340 [ 919.720187][ T31] #2: ffffffff8e801168 (nfsd_mutex){+.+.}-{4:4}, at: expkey_flush+0x20/0x90 [ 919.729713][ T31] 2 locks held by syz-executor/19706: [ 919.735066][ T31] #0: ffff888059c8a0e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 919.753180][ T31] #1: ffffffff8e801168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 919.770455][ T31] 2 locks held by syz-executor/20132: [ 919.775827][ T31] #0: ffff88805bba00e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 919.786583][ T31] #1: ffffffff8e801168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 919.796357][ T31] 3 locks held by syz.0.3225/20188: [ 919.801535][ T31] #0: ffffffff901eb550 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 919.810148][ T31] #1: ffff888026f506f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990 [ 919.824436][ T31] #2: ffffffff8e801168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xb6/0x1170 [ 919.835330][ T31] 2 locks held by syz-executor/20427: [ 919.841210][ T52] Bluetooth: hci12: command tx timeout [ 919.860491][ T31] #0: ffff88805afae0e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 919.871162][ T31] #1: ffffffff8e801168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 919.881156][ T31] 2 locks held by syz-executor/20843: [ 919.886892][ T31] #0: ffff88801fb080e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 919.897354][ T31] #1: ffffffff8e801168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 919.907286][ T31] 2 locks held by syz-executor/20895: [ 919.912641][ T31] #0: ffff888066de60e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 919.930442][ T31] #1: ffffffff8e801168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 919.940237][ T31] 2 locks held by syz-executor/21282: [ 919.945930][ T31] #0: ffff888043c3c0e0 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 919.963108][ T31] #1: ffffffff8e801168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 919.974263][ T31] 2 locks held by syz-executor/21777: [ 919.979966][ T31] #0: ffffffff8f4dc948 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x113/0x2c0 [ 919.990172][ T31] #1: ffffffff90144ee8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x5f6/0x1f50 [ 920.000949][ T31] 8 locks held by syz-executor/21783: [ 920.006732][ T31] #0: ffff88803523a420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 920.015978][ T31] #1: ffff888045fff888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 920.026135][ T31] #2: ffff888028890b48 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 920.040534][ T31] #3: ffffffff8f6bac48 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 920.051248][ T31] #4: ffff8880318bc0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 920.069462][ T31] #5: ffff888030b4e250 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1d0 [ 920.081204][ T31] #6: ffffffff90144ee8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x108/0x830 [ 920.090551][ T31] #7: ffffffff8e3d4bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 920.100940][ T31] 2 locks held by syz.3.3561/21798: [ 920.106454][ T31] #0: ffffffff901eb550 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 920.114836][ T31] #1: ffffffff90144ee8 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0xb4/0xb10 [ 920.177041][ T31] [ 920.179388][ T31] ============================================= [ 920.179388][ T31] [ 920.210675][ T31] NMI backtrace for cpu 1 [ 920.210693][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 920.210713][ T31] Tainted: [L]=SOFTLOCKUP [ 920.210718][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 920.210726][ T31] Call Trace: [ 920.210732][ T31] [ 920.210737][ T31] dump_stack_lvl+0x116/0x1f0 [ 920.210763][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 920.210780][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 920.210795][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 920.210812][ T31] sys_info+0x133/0x180 [ 920.210824][ T31] watchdog+0xe66/0x1180 [ 920.210848][ T31] ? rcu_is_watching+0x12/0xc0 [ 920.210867][ T31] ? __pfx_watchdog+0x10/0x10 [ 920.210885][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 920.210906][ T31] ? __kthread_parkme+0x19e/0x250 [ 920.210926][ T31] ? __pfx_watchdog+0x10/0x10 [ 920.210945][ T31] kthread+0x3c5/0x780 [ 920.210959][ T31] ? __pfx_kthread+0x10/0x10 [ 920.210973][ T31] ? rcu_is_watching+0x12/0xc0 [ 920.210991][ T31] ? __pfx_kthread+0x10/0x10 [ 920.211004][ T31] ret_from_fork+0x983/0xb10 [ 920.211019][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 920.211034][ T31] ? __switch_to+0x7af/0x10d0 [ 920.211051][ T31] ? __pfx_kthread+0x10/0x10 [ 920.211064][ T31] ret_from_fork_asm+0x1a/0x30 [ 920.211093][ T31] [ 920.376383][ T5154] Bluetooth: hci13: command tx timeout [ 920.384604][T21783] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.647934][T21783] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.741770][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 920.748663][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 920.759327][ T31] Tainted: [L]=SOFTLOCKUP [ 920.763633][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 920.773702][ T31] Call Trace: [ 920.776980][ T31] [ 920.779897][ T31] dump_stack_lvl+0x3d/0x1f0 [ 920.784481][ T31] vpanic+0x640/0x6f0 [ 920.788452][ T31] panic+0xca/0xd0 [ 920.792192][ T31] ? __pfx_panic+0x10/0x10 [ 920.796598][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 920.802583][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 920.808732][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 920.814913][ T31] ? watchdog+0xe83/0x1180 [ 920.819340][ T31] ? watchdog+0xe76/0x1180 [ 920.823763][ T31] watchdog+0xe94/0x1180 [ 920.828040][ T31] ? rcu_is_watching+0x12/0xc0 [ 920.832816][ T31] ? __pfx_watchdog+0x10/0x10 [ 920.837782][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 920.842977][ T31] ? __kthread_parkme+0x19e/0x250 [ 920.847997][ T31] ? __pfx_watchdog+0x10/0x10 [ 920.852683][ T31] kthread+0x3c5/0x780 [ 920.856763][ T31] ? __pfx_kthread+0x10/0x10 [ 920.861357][ T31] ? rcu_is_watching+0x12/0xc0 [ 920.866122][ T31] ? __pfx_kthread+0x10/0x10 [ 920.870702][ T31] ret_from_fork+0x983/0xb10 [ 920.875379][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 920.880495][ T31] ? __switch_to+0x7af/0x10d0 [ 920.885171][ T31] ? __pfx_kthread+0x10/0x10 [ 920.889754][ T31] ret_from_fork_asm+0x1a/0x30 [ 920.894526][ T31] [ 920.897612][ T31] Kernel Offset: disabled [ 920.901923][ T31] Rebooting in 86400 seconds..