last executing test programs: 5m19.608709032s ago: executing program 32 (id=218): r0 = socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) syz_genetlink_get_family_id$auto_nfc(0x0, r0) r1 = prctl$auto(0x4e, 0x1, 0x0, 0x0, 0x0) futex$auto(0x0, 0x88, 0x7, 0x0, 0x0, 0x4) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000002c0), r1) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r3, 0x607, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}, @HWSIM_ATTR_RADIO_NAME={0x13, 0x11, '/dev/mtdblock0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000880}, 0x40) close_range$auto(0x2, 0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x7) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0xa) fanotify_init$auto(0x6, 0x1) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) r4 = socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f00000000c0), 0x55) setsockopt$auto_SO_OOBINLINE(r4, 0xffffffff, 0xa, 0x0, 0x2) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r5 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/projid_map\x00', 0x80, 0x0) fgetxattr$auto(r5, &(0x7f0000000180)='/dev/mtdblock0\x00', &(0x7f00000001c0)="314f87326f400fa01cdeeb4695e78d065cc1d8a23df775b3b840eb00d46e0f69f7a7aa80ff65b8c38db16e50e99a7694f3bc8ecaee0fb6407a1b167ec22e117593f76274c7264f2d77cb441fc2f3f153ea10c46010e35721efe074b37fe6a86706bb10763889541760d35953fbd3e6d816d23d3dbe857e1b100cfd7141df05d08a27a3da6be38176d8ebf83d6797a627b2ad8b4d3f650f1df8d0fe40c07129639cf88e8a7dc85380eaf193f795be", 0x7fffffff) preadv2$auto(r2, &(0x7f0000000080)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x0, 0x2f) 3m47.633164305s ago: executing program 33 (id=492): r0 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/projid_map\x00', 0x2000, 0x0) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) mmap$auto(0x0, 0xe983, 0x10001, 0xeb1, 0x401, 0x7ffc) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r1, 0x8000) socket(0x29, 0x2, 0x0) get_mempolicy$auto(&(0x7f00000004c0)=0x8, 0x0, 0x1, 0x81, 0x10000003) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000) socket(0x2, 0x3, 0xa) socket(0x28, 0x5, 0x0) mmap$auto(0x4, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8f) move_pages$auto(0x1, 0xfffffffffffffff1, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(r3, 0x8, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) poll$auto(&(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5}, 0x10, 0x49) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10010}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4081}, 0xc000) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=0x0) socket(0x1a, 0x2, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2002) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48442, 0x0) read$auto(r4, 0x0, 0x1f40) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) prctl$auto_PR_SET_MM_START_BRK(0x10, 0x6, 0x0, 0x40000000000081, 0x6) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) 2m37.690337624s ago: executing program 0 (id=749): sendmsg$auto_NL80211_CMD_ADD_LINK(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000040)={0x734, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'vxcan1\x00'}, @NL80211_ATTR_IE_RIC={0x6c1, 0xb2, "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"}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x2c, 0xbe, "73fdf354f0b86b0e691257667268c03d18839faaca88fe5a8f4b42a51cf5da1034e8745368095c5f"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x9}, @NL80211_ATTR_MLO_LINK_ID={0x5, 0x139, 0xc9}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xb}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x734}, 0x1, 0x0, 0x0, 0x88d0}, 0x840) r0 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000840), 0xffffffffffffffff) r1 = openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000880), 0x82841, 0x0) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f00000008c0)={0x6, 0x4, 0x80000001, 0x7, 0x0, 0xffffffffffffffff}) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f0000000900)={"9d372b116488f88c5424fbc15086a5f9f078b083f811f388912eba7dd42ca1b8", 0x0, 0x784, 0x8, 0xee, 0x1, 0x0}) r4 = timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x0) sendmsg$auto_IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f0000001d80)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000000980)={0x139c, r0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x136c, 0x3, 0x0, 0x1, [@nested={0xc, 0x6a, 0x0, 0x1, [@typed={0x8, 0x9c, 0x0, 0x0, @fd=r1}]}, @typed={0x8, 0x12, 0x0, 0x0, @fd}, @nested={0x2cb, 0xb6, 0x0, 0x1, [@generic="bf33e4cf82289cc9a4b867464896c261e6ff44abedd6fc10c8faf4378454d96555a2ce18c59d6a759d26351810768a04be39b7e3f7322f78ded3102709fcf1e95922e80e09a643cdccc076270118d8e0401077dbd31ac40b7e808fdcababa20cf45666198938f16916190533479d2e027c08cb3b23d64d1b72cc58bf185ad6c3c04b9ea0899f011d32ed173e32e017864b5843d13e86ea36d24756779348548d4a166b3b31ea9c72a0dd777e03699815b7", @nested={0x4, 0xb2}, @nested={0x4, 0xaa}, @typed={0x8, 0xb2, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x145, 0x0, 0x0, @u32=0x3991}, @generic="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", @generic="714fed1dd015b34b65b4e5242e5578d55f0255d4aca6f314c7ad6af05b10b724baadffde6007b5e787dc45d2979e0194c272c88320246cb8f935fe1a602e3fe3e90cf160a382ca534f79ec6fd3830009a7c6f475fa078db8879aec1d9103c66ffaa7cf3b70a459a6f7b922a87540590411ea5c1779c8fab82ce7d568732628e2a4804aa3cd3e32087480225ea7544928fc3690007653c6d00a3c938e14b2cdd07b9c188109467fa92af366a0f3a7d0ee86df892c58a9d3cbf0b925d9d896cc5d56519d6289d858179a101e9d2447c5660b3a0a9f9157e334c76c59c5020dec21ae50da00e4e1d53e2c7ede1226f71e1491967279235b2668b4", @typed={0x8, 0x1a, 0x0, 0x0, @pid=r2}]}, @typed={0x14, 0x13f, 0x0, 0x0, @ipv6=@remote}, @generic="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", @nested={0x43, 0x5c, 0x0, 0x1, [@nested={0x4, 0x141}, @nested={0x4, 0x11a}, @nested={0x4, 0x18}, @typed={0x8, 0x68, 0x0, 0x0, @pid=r3}, @generic="9e7ca0a228c6ef8307d5b8d9837bc55e4d2cad0e480ad4eff7453c07d97068", @nested={0x4, 0x4b}, @typed={0x8, 0x6, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x25}}]}, @typed={0x25, 0x10c, 0x0, 0x0, @binary="ea9eb950729e60311d9cb7efcb4ac3d84c5d908735da7b31eeaeaffb368d22fc6e"}, @typed={0x8, 0xfc, 0x0, 0x0, @fd=r4}]}, @IPVS_CMD_ATTR_DAEMON={0x1a, 0x3, 0x0, 0x1, [@generic="67b55c59936166a4aeacd3276c5573dfd1aac3ba85a9"]}]}, 0x139c}, 0x1, 0x0, 0x0, 0x4040054}, 0x8000) r5 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000001dc0)='/dev/dri/card1\x00', 0x141000, 0x0) mmap$auto(0x6, 0x0, 0x1, 0x9e, r5, 0xfffffffffffffff8) acct$auto(&(0x7f0000001e00)='-\\\'[\\-]-#^+)!*--+@)+&}{\'\x00') setitimer$auto(0x2, &(0x7f0000001e40)={{0xa13, 0xfff}, {0x40, 0xf}}, &(0x7f0000001e80)={{0xd8, 0x86}, {0x7, 0x4}}) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000001ec0)={{0x7fffffff, 0x323b}, {0x6, 0x100}}, &(0x7f0000001f00)={{0x3, 0x4}, {0x111, 0x10001}}) bpf$auto(0x2, &(0x7f0000001f40)=@link_create={@map_fd=r5, @target_fd=r1, 0x8, 0x7, @netkit={@relative_id=0x9, 0x1}}, 0x8) pread64$auto(r4, &(0x7f0000002000)='[\x00', 0x7, 0x0) r8 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000002040), 0x8101, 0x0) sendfile$auto(r6, r8, &(0x7f0000002080)=0x7fffffff, 0x80000001) fsconfig$auto_SHMEM_HUGE_FORCE(r5, 0xf, &(0x7f00000020c0)='/dev/hpet\x00', &(0x7f0000002100)="3d2c813e95d7a52b51b6d3677ef84f7e720300", 0xfffffffffffffffe) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002180), r4) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r7, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x68, r9, 0x4, 0x100, 0x25dfdbfe, {}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0xde57}, @NL80211_ATTR_NAN_FUNC={0x42, 0xf0, 0x0, 0x1, [@generic="b7aa28d7b578121ce8211d3705659c08710a9ea8e3e81c9808a0133d717290fd335f882563fcc5f3f3ad174aa67e17228f8aa3b69aa29eefaf1001a854ac"]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x40055}, 0x2004c000) ioctl$auto_TUNGETIFF2(r7, 0x800454d2, &(0x7f00000022c0)=0x7) r10 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000002300)='/dev/nbd14\x00', 0x4a000, 0x0) socketcall$auto_SYS_SOCKETPAIR(0x8, &(0x7f0000002340)=0x58) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000002380)={{0x7ff, 0x5}, {0x7, 0x7}}, &(0x7f00000023c0)={{0x2}, {0x100000000, 0xfffffffffffffff8}}) setxattrat$auto(r4, &(0x7f0000002400)='./file0\x00', 0x8, &(0x7f0000002440)='/dev/hpet\x00', &(0x7f0000002480)={0x100000001, 0x7, 0x3}, 0x4) r11 = gettid() prctl$auto_PR_SET_MM_END_CODE(0xa81f, 0x2, r11, 0xfffffffffffff85c, 0xc284) fchmod$auto(r6, 0x9) ioctl$auto_IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f00000024c0)={0xd, 0xb405, 0xa0000}) sendmsg$auto(r5, &(0x7f0000002680)={&(0x7f0000002500)="337898c54cb68c5c9a5d7f30d2e493661cbb7802ebf2d6f2eb57590f213c14ba426318220c522865d699ca22b105515b76f7d390fe26c821af4e1fe451fc393edfa2b0b2fe99", 0x3, &(0x7f00000025c0)={&(0x7f0000002580), 0x3}, 0x7, &(0x7f0000002600)="60b4756ecacb97947db0ce5c5989a6919f4b0ae720f85d9dfc9640d912a3d04204a3735776b1a3be4564093643c92161e47f4352b1847e8111c3de770b0791fdb982fbce5b4616b5155002330d16d5f7d226aa9a8087fd19d83d0711d04a361a4f8072d0de6b460b288b41fc", 0x9, 0x9}, 0xe8b) ioctl$auto_VHOST_SET_VRING_KICK2(0xffffffffffffffff, 0x4008af20, &(0x7f0000002700)={0x3, r10}) 2m37.620747096s ago: executing program 0 (id=750): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x401, 0x8000) semctl$auto(0x3, 0x2, 0x13, 0x9) r0 = socket(0xf, 0x800, 0x1) setsockopt$auto(r0, 0x29, 0x20, 0x0, 0x20) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) setreuid$auto(0x0, 0x7) mincore$auto(0x1000, 0x8001, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) semctl$auto(0x3, 0x2, 0x13, 0x9) (async) socket(0xf, 0x800, 0x1) (async) setsockopt$auto(r0, 0x29, 0x20, 0x0, 0x20) (async) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) (async) setreuid$auto(0x0, 0x7) (async) mincore$auto(0x1000, 0x8001, 0x0) (async) 2m37.519880177s ago: executing program 0 (id=751): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/set_event\x00', 0x60100, 0x0) fadvise64$auto_POSIX_FADV_NOREUSE(r0, 0x7fffffff, 0x134e52e100000, 0x5) write$auto(r0, &(0x7f0000000040)='\x00', 0x1d) mincore$auto(0x6, 0x9, &(0x7f0000000080)='-') remap_file_pages$auto(0x3, 0x3, 0x7fff, 0x81, 0x9) prctl$auto_PR_GET_TIMING(0xd, 0x8, 0xdad2, 0x2, 0x1) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$auto_VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000100)=r0) ioctl$auto_VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000140)=r2) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000001c0), 0xffffffffffffffff) msgctl$auto_IPC_RMID(0x6, 0x0, &(0x7f0000000280)={{0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x9, 0x0, 0x8}, &(0x7f0000000200), &(0x7f0000000240)=0x2, 0xffffffffffffffff, 0xfffffffffffffff8, 0x7f, 0x34a2, 0x383, 0xfff, 0x0, 0x8, @raw=0x3, @raw=0xc}) shmctl$auto_IPC_STAT(0x2, 0x2, &(0x7f00000003c0)={{0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0x8}, 0x7, 0xf, 0x7f, 0x5, @raw=0x3, @raw=0x7fffffff, 0xffff, 0x0, &(0x7f0000000300)="8ea206d34c29f531e8e12c28672ed23fe4885e1905b6b7178f4a55ca1bc245a583598c8edf0190817e0be9f3619e8cfca6bc4859272aca0012a88988e1a032fbe3c91d4e9f70b6df409cfd464cb8bbf2f686c42d05f4a34629f4d926f3f89fcf11ff46f84c16d2d4aec0b04da066418fe5", &(0x7f0000000380)="39747cd05ed6b0a0bf98356d493b7df52b9dd31d8a610b87a4784f4996f4151fd6f7a6f59e2ec955b9299ab094cd9af07538cab5ada8852327"}) sendmsg$auto_IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000880)={&(0x7f0000000440)={0x408, r4, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x11e, 0x3, 0x0, 0x1, [@typed={0x4, 0xed, 0x0, 0x0, @binary}, @generic="1ec6ce7590e5c576dfd918c493093a28edfb291d598ae25dbf7045bd7bfc8c6bb427f1db5eabdee440c646974386", @nested={0x10, 0xe3, 0x0, 0x1, [@nested={0x4, 0xad}, @nested={0x4, 0x7d}, @nested={0x4, 0xb8}]}, @generic="3ca6ec55bdb6d2de040f3bda6444e9fa211f725671328dd327e0374dfe4654da094760c5715c35ca8955cf0a8a71f3a0804461e2feac1128b57f5624a8d7bd7f83c5dd47ccdfaf3c3de8ab70ba7215274b9702c62bc7cebeee8c5b113c71fce88aac21eb747e6b75654550e5618161fc1bbeca8c6b7ac9adc5d35027bda0cd8943a7d679e24656f7408e2ef74128274403f869beea1e3a93f183d8649612d172ee2e98b90df1ed5bdd8372019710d07334629dd7b91a7e7529544e93b9d573f3a4fa8aa4329a0442e6bcf7f14c2fb99b3b8b8643011c9b65"]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_SERVICE={0x2cb, 0x1, 0x0, 0x1, [@generic="ac76e608c0d307c3d1fde8115dd1fe47a721be9762e5fb82f618f8ea7c6ce52ba7b2db5d3dbc61a61c4fa05f778c59c918026e6206562f38e88f713f61044354c4f7fafab96b569b53e21ae67042fa0576f426b663d83433db44b05bbfa352fe5a41e8cba7504f29abce6cafb196e2656eb24ad6671228591baeb78ecf399bf5cb14889335ebf201605fbea8bad30dd41002f525b461a1ca53f7ed12e048c01a2a7cea0605ac32256904ae2dd101634ea32ff0be3433be33dd49c38a554b790fb76c0c374398fcc87169c74f12d3a25561ab688a811c10c5662c4daa25b8e905cca4db0fb2b16a", @nested={0xc, 0xad, 0x0, 0x1, [@nested={0x4, 0xac}, @nested={0x4, 0xc4}]}, @nested={0x8d, 0xdd, 0x0, 0x1, [@nested={0x4, 0x10f}, @typed={0x4, 0x27}, @generic="8997f8ad4c3d5ccd1f0faf46f4c7bb9f9a01e8d9b44fcc6603b8b1d8dea2fa310b3d2ded5421fee2c8a7616601376ba60a52e299dcfd2da8cbf43c3cf9a3e3f73c7f68853f8eb6a51d3fd2f633d188319ab08ce14461f71ad342c95adc6d3e3353c6d1bcf3724328dddf9a74e8c535a603", @typed={0x8, 0x46, 0x0, 0x0, @uid=r5}, @typed={0x5, 0xd4, 0x0, 0x0, @str='\x00'}]}, @nested={0x33, 0x10c, 0x0, 0x1, [@generic="46bd94e7732534f8cd991449b2e5387e3ebe85a08e1fafa8edeb11699127b4137a9eba", @typed={0x8, 0x54, 0x0, 0x0, @str='\'{[\x00'}, @typed={0x4, 0xa2}]}, @typed={0x8, 0x126, 0x0, 0x0, @uid=r6}, @nested={0x18, 0x5c, 0x0, 0x1, [@nested={0x4, 0x11c}, @nested={0x4, 0x7f}, @typed={0x4, 0xce}, @typed={0x8, 0x14, 0x0, 0x0, @u32=0xb}]}, @nested={0xe4, 0xb1, 0x0, 0x1, [@typed={0x4, 0xf3}, @typed={0x8, 0x3c, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0xc, 0xac, 0x0, 0x0, @u64=0x5}, @generic="da88f72903ed67759c9e603187648bb3b45ba69e8ef000212d481fa80a3276cea695861a2ea8413641da33e3a9c639d8219e8a62094e725068327ee8efc2ea3267eb4e275b3d91a45aded6a98ae3ee7190d981a98cc552ac976857354f62c9d088ccc92492e6c703361389396c9792d9321e9baaa3381548d562c137c7ea40da16c5795e0a934d87987f8749951bab581f5bbb20821fea9118454df307311b68d187ad146e6843c3c222a34b3ace10cc7dd73df26e5bfa71a11f57f802edbc3105270530f7838ee9"]}, @typed={0xc, 0x94, 0x0, 0x0, @u64=0x5}]}]}, 0x408}, 0x1, 0x0, 0x0, 0x400c010}, 0x2) mbind$auto(0x7ed1, 0x3, 0x7fffffff, &(0x7f0000000900)=0x7, 0x5, 0x1ff) r7 = socketpair$auto(0xffffffff, 0xd6, 0x3, &(0x7f0000000940)=0x80000001) ioctl$auto_BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000980)={@raw=0x9, 0xffffffff, 0x1000, @unused, @devid=0xfffffffffffffffd}) connect$auto(r7, &(0x7f0000001980)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e23, 0x1}}, 0x7fff) prctl$auto_PR_GET_TIMING(0xd, 0x7, 0x9, 0x200, 0x8) r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001a00), r2) sendmsg$auto_NL802154_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x1c, r8, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SUPPORTED_CHANNEL={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x480}, 0x20048080) ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001e80)={{r0, &(0x7f0000001b00)="b4a520cfbc379e8543ad39b854acdb6b2b073ba6208e6ce8aafdb86c1d7b500a91a48ff614e29bcce91bee0c75003557408db5315a7a9b0d27acdaec5f6c16a2642cb923a125cadba91ab5886b1c8f088e98bd912a0922060d678eecd693bfe95c680f061ce7b93f278babb6bb651866f64cc2f60a739c54a89140f7d5f6542fe67542a8d19d8f0f42007c1d501ae0a2b9ce", 0x80000001, &(0x7f0000001bc0)="22ddf0c8eef5e6787314de19f8b7f924400a7767ad68f0c6651ef3866d7878", 0x1ff, &(0x7f0000001c00)="2019199ce99ca5a7b871126a1dd50754d8cf86700232bcab4414c667186e91453b991b1d298a1e32483159de3e4a97a7a9b8f83577d5c027c27b46e99e66af68cba05fa4a733c66081552e08040356c577c8bf255ab648d43fe94b306954c6df94a02f66b453ae9b0aba7d61acd6e92ff156c9a8a11f4def994a093ed27c050f6f61b1495539d648511cc60884d132b0ea38e300725afe8d27b845fd3dbad6232abb33c30d8cf320f1c9948bf9c529c5b69b57872ca4c0afb7f33abfee9fba63b59dc672e2991db6470c912ad0bd45ac4dc496737eb049f55b8d3a83481ac0ed97c993dd391cc825aff45ed7935f9bd1d8c8c851", &(0x7f0000001d00)=0x9}, 0x24, &(0x7f0000001e40)={0x6, 0x10, &(0x7f0000001d40)="c1dbb7e8", &(0x7f0000001d80)="7ac72f93b84aa27bd0391280fdc3fb278136067241d07117f3b20cfc9972a3608674497f1de98c14379d58804bce5ca0252c7200f8aa0eaa7c7ffd8f15d0f7221631508dceb45dbc3af61aee83fd8a16cb4082fe9013b4332930081665961e62658adfbf72ca0e37e00e32ae20f5b236974133b5c71ba5ab2b18a45b3445f81892dd7d", 0x9, 0x7}}) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r0, 0xa, &(0x7f0000001f00)="b12944f67d43b9271c6d0b455f3d6d1a9f1c9d5420da983624714792cd25b82992007b55ecbd3039d39a8e740915b322348efc76684d738f711d9965d260771d4311e1d75218a0eb9aeaa0abb5fb43b34834fc6ea1eebf8208787bf47dd25f81d742d3e9365da26b50750359e1083e6781f9790383888679fec57a444de3d32a45349e86cee1967011faf955284f3198600cd9", 0x7f) mincore$auto(0xfffffff000000000, 0xa, &(0x7f0000001fc0)='\\^:*:([{\x00') io_uring_setup$auto(0x7, &(0x7f0000002000)={0x6, 0x8, 0x80000001, 0x3, 0x4, 0x5544, r0, [0x3ff, 0x3, 0x7], {0x1e, 0x1, 0x3, 0x7, 0x38000, 0x9, 0x7, 0x30}, {0xed24, 0x0, 0x6, 0x8000, 0xffe000, 0x200, 0x9, 0xa6}}) r9 = signalfd4$auto(r2, &(0x7f0000002080)={0xc39f}, 0x7ff, 0x3c) writev$auto(r9, &(0x7f0000002180)={&(0x7f00000020c0)="0f6f9fdb1e56725ff48c1d977573a92ec31f051cae092cc0a7ab0348d9c87be5de9694f2fbe1d760bc7a938d9a0cc7e302d1f6ecb56f7d2bedfd5c0798b3e7a8ee4f9153a05cefb4a4c247b7b830efc350fb2d97846f6e7faeb60fb654e13abc3504da127de0e0e9dbf801abc3ba50567f5862a03fb881c20f6a9641f3b600d19ce50cb3ecf240217602736754421272a28a85e855612e2d0f068a213cd585664fdc181a28f2afd4a9b4ed3a29dad8", 0x8}, 0x1f4f) rt_sigtimedwait$auto(&(0x7f00000021c0)={0x8}, &(0x7f0000002200)={@_si_pad}, &(0x7f0000002280)={0x5, 0x3}, 0x8) epoll_create$auto(0xde) read$auto(r0, &(0x7f00000022c0)='-$#\'\x00', 0x6) alarm$auto(0x4) 2m36.662944026s ago: executing program 0 (id=752): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000004440)) ioctl$auto_VHOST_SET_LOG_FD2(r0, 0x4004af07, &(0x7f00000001c0)=r0) r3 = open_by_handle_at$auto(r0, &(0x7f00000002c0)={0x1a, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b"}, 0x7d) setsockopt$auto(r3, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x3, 0x8, 0x9, 0x9b72, r3, 0x8000) geteuid() sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040840}, 0x200000c0) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x1ff000, 0x100008, 0x843, 0x3, 0xfffff000) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0x1002}, 0x1, &(0x7f0000000280)={0x0, 0x401}, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001b00)=ANY=[@ANYBLOB="20010000", @ANYRES16=r4, @ANYBLOB="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"], 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0x140) sendmsg$auto_NL80211_CMD_GET_KEY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x21}, 0x51) 2m35.67940088s ago: executing program 0 (id=753): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000db, 0x12, 0x400, 0x18002) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x2, 0x0) ioctl$auto(0x3, 0x5411, 0x38) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r1, &(0x7f0000002300)='MAC802154_HWSIM\x00', 0xfdef) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/usb/drivers/r8712u/bind\x00', 0x129102, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), r2) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000096fe4046e32af8aea9a848c3b606ef7256dfd37d13f26096451224371db2", @ANYRES16=r3, @ANYBLOB="010029bd700000dcdf2503000000040008001c000180180012801400090034122526a73b964dcd9a874bc034f141"], 0x34}}, 0x810) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/binderfs/binder0\x00', 0x102, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x15, 0x5, 0x10001) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) read$auto_state_fops_(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) 2m35.373892643s ago: executing program 0 (id=754): sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x4b, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x7ec}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x20000008000) socket(0x21, 0x2, 0x2) r0 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000006700), 0x181c00, 0x0) ioctl$auto_RNDADDTOENTCNT2(r0, 0x40045201, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r1, &(0x7f0000000580)="7fd0a917413f68eb6b28d5eea7d1553f6595c094f1f855eb8d8776e6bd8f81c440da3fe3433f8243402fc2752caac5da7a03bbb5adf685740635a6bc231c6cf093b7cf0e4dd07f10b2dc12791aa3ebded3cfe2e4befc0e02d2e064b1db3adc8b2ec1c0378efff268086d6cb998b8dedfb7f20d06b7b091e974de1c1a4ce3d378d91b7639d914ba86b1f18337bb06e3619af99e68dfac380ab153fc75a2159d8efbbf7436752c964490346cf1558249979fc61ee71509560d14bdd0922e50904f3a4b2ae1bfc4f6bb9e08f16afd6baa53cf87077be5bcca2829dd4133da071a6fd072ed5568670a5d171e3deee5576bf571a016c162ca369182f202dbe49839df8d4c438dacdd6cdd67c21e2ed9be20baeff5e5019313d5e6e5a0e93eab61be5dec2c7e144cf9d73fd945c25ff11d5d5aa26bf8ab2e06098b8aeb05c1f29c1a30d268d82768b3350c3efcdac39334de0f6406a1aed635e0c55412ff73b0222d67be6bdd185478d502b492c41696ce6f88609795409aa0841dbc7cb222f0cb239b19d9499fdc45988f0290af0666c37b93f047d45b17cbe7c9332c63ad46c6aa871e4b351efa4fbfb88cfa0281f465d1a970939c2d6c45c50ade06f0bb98ed66623b887de325c0f42ab530b649ea29757af9464c18dea186a0bbc62ce209a3be8e86e8f710323cb899d806caf575cb73a419c0804afd4c8a329a2afaebb87291e9fdfd2ca0edebfc4fb7b1e281fa3e6ac387aebfc92107f4251aa8c96a4c6d7599933c2c489a7696e8e42d88b572fa46bead2c96f619030ab70026f14f91bbf0a4c1b3ed74c564d6ae3eefeef94d37e19701513ff7713a52ebfd8f251dc303455de00d1ee3ed3e204bed2901a644056193fc7e00ce10aa6463892a7881a51893af629f7bd8801ce4c44c7ff2decdb6a69d9ed48ff79661ba9ec4a84dd222d3b40e4abf56222b97db9aa646a67e5031a57d570030f41b09529298f1acddbcd1f0ff6a30cb2a2d5eaecd774bbf897477cc1e55488f3493b6aa6908d24b032cbda24f956f7f262d992838923efde7e8ed0558872451d7bd6a4769ecd47c6d0a125a6e638df6f67793901a67071c506d010930b01ce541aa43f9110d874311d18a8ea50fb1907e8d17c3932e0c12c7d6f7c145209ab81105649fc0c5266063bd8c6a16319a82ff5d236122d53e15d6a7fcb16245d7754f3ffbf659a141cbd29286176fe445deebd5dd18baae1bbdfedbe4bd3453c50fb2f6c22505ecd768ad0703624ebf7b924dc7e8e93ea94c8a6a9f0372351b5a4aaadf89a86faf5241e47be7e6790676fbf8abcc6ef89b9f6ce10600e21815ec6d2c580b5c30ada6b956a07d9964e93419856df00b06245d0743ac2b595097007165cbb17c6a492a6eb0559712e5f89ee86b7a2c46acf9b8d8b2c7a85092966aca97f114635c64f6eb44ad927423a3bc434b267c23d364ee5671d3dcbcca02ffbb633b3c9e6f", 0xfdef) 2m27.113309704s ago: executing program 34 (id=732): semctl$auto_GETZCNT(0x5, 0x0, 0xf, 0x5) (async) semctl$auto_GETZCNT(0x5, 0x0, 0xf, 0x5) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) mmap$auto(0x0, 0x5, 0xec, 0x4012, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x5, 0xec, 0x4012, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x1000, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x1000, 0xdf, 0x9b72, 0x2, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x8440, 0x0) ioctl$auto_TUNDETACHFILTER(r0, 0x401054d6, &(0x7f0000000080)={0x0, &(0x7f0000000000)={0x4, 0x2, 0x39, @inferred=r2}}) write$auto(r2, 0x0, 0x3f00) ptrace$auto(0x10, r1, 0x4, 0x7ff) ptrace$auto(0x5, r1, 0x7, 0x4f) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) ioctl$auto(0x3, 0x5411, 0x10000000000402) (async) ioctl$auto(0x3, 0x5411, 0x10000000000402) bind$auto(r0, &(0x7f0000000140)=@can, 0xffff) close_range$auto(0x2, r0, 0x0) (async) close_range$auto(0x2, r0, 0x0) unshare$auto(0x40000080) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) ptrace$auto(0xf106, 0x0, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare$auto(0x1) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) (async) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) 2m24.586211169s ago: executing program 35 (id=742): r0 = open(&(0x7f0000000140)='./file0\x00', 0x161342, 0x100) write$auto(r0, &(0x7f0000000000)='}\x00', 0x5) unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) r3 = openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/sessionid\x00', 0x101000, 0x0) getsockopt$auto_SO_PREFER_BUSY_POLL(r3, 0xca0, 0x45, &(0x7f00000001c0)='/dev/raw-gadget\x00', &(0x7f0000000200)=0x9) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000240)=ANY=[@ANYBLOB="eba16ea3", @ANYRES8=r2, @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000d0) r4 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000e00)='/sys/kernel/debug/kvm/halt_attempted_poll\x00', 0xc42, 0x0) flistxattr$auto(r4, 0x0, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x378c02, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x8000000000000, 0x12a009, 0xa, 0x200000eb1, r5, 0x20000018000) fsopen$auto(0x0, 0x1) socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x7) mmap$auto(0x0, 0x7ffffffff000, 0x8004, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x7fffffff, 0x7f, 0x2eb1, 0x401, 0x2000000000008000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x620c0, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r7 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x40040, 0x0) readv$auto(r7, &(0x7f0000000140)={0x0, 0x7}, 0x1000000000000008) prctl$auto(0x3e, 0x1, 0x0, 0x7, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x8, &(0x7f00000000c0)=@query={@target_ifindex, 0x4, 0x20, 0x2, 0x3, @prog_cnt=0xfffff86c, 0x0, 0xd8, 0x0, 0x56a, 0x1}, 0x8f) 2m23.010679098s ago: executing program 36 (id=746): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0xcba, 0x21dab, 0xfffffffffffffff7, 0x401, 0x8000) (async) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0xc, 0x0, 0x100000000) (async) setsockopt$auto(0xffffffffffffffff, 0x2b, 0x43b696d3, 0x0, 0x56b) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd1\x00', 0x40, 0x0) mmap$auto(0xffffffff, 0x3, 0x5, 0xeb1, 0x405, 0x8000) (async) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) write$auto(0x3, 0x0, 0xffd8) (async) unshare$auto(0x40000080) (async) rseq$auto(&(0x7f0000000300)={0x12, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async) socket(0x10, 0x2, 0x0) (async) process_mrelease$auto(0xffffffffffffffff, 0xa) socket(0x1a, 0x1, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) socket(0x2, 0x80802, 0x0) (async) socket(0x2b, 0x1, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statx$auto(r2, 0x0, 0x6d7, 0x80000008, 0x0) mlock$auto(0x112, 0x80006) (async) mlockall$auto(0x800000000000005) (async) madvise$auto(0x0, 0x200007, 0x19) (async) mincore$auto(0x1000, 0x8001, 0x0) 2m19.729773926s ago: executing program 37 (id=754): sendmsg$auto_NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x4b, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x7ec}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x20000008000) socket(0x21, 0x2, 0x2) r0 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000006700), 0x181c00, 0x0) ioctl$auto_RNDADDTOENTCNT2(r0, 0x40045201, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r1, &(0x7f0000000580)="7fd0a917413f68eb6b28d5eea7d1553f6595c094f1f855eb8d8776e6bd8f81c440da3fe3433f8243402fc2752caac5da7a03bbb5adf685740635a6bc231c6cf093b7cf0e4dd07f10b2dc12791aa3ebded3cfe2e4befc0e02d2e064b1db3adc8b2ec1c0378efff268086d6cb998b8dedfb7f20d06b7b091e974de1c1a4ce3d378d91b7639d914ba86b1f18337bb06e3619af99e68dfac380ab153fc75a2159d8efbbf7436752c964490346cf1558249979fc61ee71509560d14bdd0922e50904f3a4b2ae1bfc4f6bb9e08f16afd6baa53cf87077be5bcca2829dd4133da071a6fd072ed5568670a5d171e3deee5576bf571a016c162ca369182f202dbe49839df8d4c438dacdd6cdd67c21e2ed9be20baeff5e5019313d5e6e5a0e93eab61be5dec2c7e144cf9d73fd945c25ff11d5d5aa26bf8ab2e06098b8aeb05c1f29c1a30d268d82768b3350c3efcdac39334de0f6406a1aed635e0c55412ff73b0222d67be6bdd185478d502b492c41696ce6f88609795409aa0841dbc7cb222f0cb239b19d9499fdc45988f0290af0666c37b93f047d45b17cbe7c9332c63ad46c6aa871e4b351efa4fbfb88cfa0281f465d1a970939c2d6c45c50ade06f0bb98ed66623b887de325c0f42ab530b649ea29757af9464c18dea186a0bbc62ce209a3be8e86e8f710323cb899d806caf575cb73a419c0804afd4c8a329a2afaebb87291e9fdfd2ca0edebfc4fb7b1e281fa3e6ac387aebfc92107f4251aa8c96a4c6d7599933c2c489a7696e8e42d88b572fa46bead2c96f619030ab70026f14f91bbf0a4c1b3ed74c564d6ae3eefeef94d37e19701513ff7713a52ebfd8f251dc303455de00d1ee3ed3e204bed2901a644056193fc7e00ce10aa6463892a7881a51893af629f7bd8801ce4c44c7ff2decdb6a69d9ed48ff79661ba9ec4a84dd222d3b40e4abf56222b97db9aa646a67e5031a57d570030f41b09529298f1acddbcd1f0ff6a30cb2a2d5eaecd774bbf897477cc1e55488f3493b6aa6908d24b032cbda24f956f7f262d992838923efde7e8ed0558872451d7bd6a4769ecd47c6d0a125a6e638df6f67793901a67071c506d010930b01ce541aa43f9110d874311d18a8ea50fb1907e8d17c3932e0c12c7d6f7c145209ab81105649fc0c5266063bd8c6a16319a82ff5d236122d53e15d6a7fcb16245d7754f3ffbf659a141cbd29286176fe445deebd5dd18baae1bbdfedbe4bd3453c50fb2f6c22505ecd768ad0703624ebf7b924dc7e8e93ea94c8a6a9f0372351b5a4aaadf89a86faf5241e47be7e6790676fbf8abcc6ef89b9f6ce10600e21815ec6d2c580b5c30ada6b956a07d9964e93419856df00b06245d0743ac2b595097007165cbb17c6a492a6eb0559712e5f89ee86b7a2c46acf9b8d8b2c7a85092966aca97f114635c64f6eb44ad927423a3bc434b267c23d364ee5671d3dcbcca02ffbb633b3c9e6f", 0xfdef) 2m18.462624521s ago: executing program 7 (id=774): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) socket(0x10, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1eb343, 0x100) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80000700"}, 0x1c) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm1p/sub5/hw_params\x00', 0x81000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0xfffffe36) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0x9, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2}, 0x2) ioctl$auto_USBDEVFS_IOCTL32(0xffffffffffffffff, 0xc00c5512, &(0x7f00000001c0)={0x80000000, 0x4, 0x8}) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r3, 0x127f, 0x0) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={"2252f65ca1b92f72a92538725b0694521629e8c3e6ba91c62e2e9d42cf4aef15", 0x4, 0x3, 0x8004, 0x6, 0xff}) ioctl$auto_EVIOCGEFFECTS(r0, 0x80044584, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) fadvise64$auto(r5, 0x0, 0xffffffff80000001, 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vhci_hcd.0/usb9/9-0:1.0/usb9-port1/power/autosuspend_delay_ms\x00', 0x102, 0x0) sendfile$auto(r6, r6, 0x0, 0x7) 2m17.394708789s ago: executing program 7 (id=777): r0 = prctl$auto_PR_SET_MM_ARG_START(0x1000, 0x8, 0x0, 0x2, 0x8) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xffffffffffffff5a, r2, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4048099}, 0x800) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NFSD_A_SERVER_GRACETIME={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x8005) (async) r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002180)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) (async) r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000005c0)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@HWSIM_ATTR_REG_HINT_ALPHA2={0x6, 0xb, ',)'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000060}, 0x0) ioctl$auto_XFS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000080)="a159711fe615c76eaffa79b46bc062af11ca755d3f03c083aa1c3879a311d1fbe4211cd1cb54eeb895a024b661c57e4f27e0e9aa9baf7d4c88ee5deea0df9c88327311fd45a607c6fa4350ab304cacbe617db0cb18a2942fb06e24f93cc28640b846d14ac55b6018e416a67e9d287a132fdc3b7fc0f95e6148f6104bbc2b34cb114567146f3b578b7583d2d8d7f371e3311c2247026fb5639e87a3388fb12c6061310e16184d5ddec35f96d8efe398e8a2cc0afdeccb94805378bb61c355c46557ca3eb44cc4148595f5c3d3d8096f8594f79119511fccaae16b3850d24bf5dec308f0350720da57998495cd5ba688f70881f5a4db1cf07f11abbebee65582") (async) sendmsg$auto_HWSIM_CMD_FRAME(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)={0x138, r5, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@HWSIM_ATTR_CHANNELS={0x8}, @HWSIM_ATTR_ADDR_RECEIVER={0xd1, 0x1, "84b56093ca5714bb39689dda0c2f3f26db5d40a77ba03183cf19239631e5f965324b20ddaed7d37d1b689e58ffeea609debb95f36c29ac47a9225934164660d9097dd928a5dc4344b07bf96d5d042b88baba96e4c167b2ffff79d7296556fb38b4c0ff7d3b7e6e3e389a59b18825d13e2d6647e85bb4857747349c254e74a7d846363b22cc7ef6d3b56ee29492f9a6260500009ef5b1443e5eeffbce45c6d66ef85291a6c363801a293905ab485fd61e5a68f29d3330a66612fef80adf473b0813c4fcd84bad66b39d092a295f"}, @HWSIM_ATTR_FREQ={0x8}, @HWSIM_ATTR_RADIO_NAME={0x24, 0x11, '/proc/sys/kernel/random/boot_id\x00'}, @HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x5}, @HWSIM_ATTR_SIGNAL={0x8, 0x6, 0x30a549bc}, @HWSIM_ATTR_ADDR_TRANSMITTER={0x4}, @HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0xc0}]}, 0x138}, 0x1, 0x0, 0x0, 0x2}, 0x4048881) (async) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000001c0), r6) (async) shmctl$auto_IPC_RMID(0x9, 0x0, &(0x7f0000000400)={{0x8, 0xee00, 0xee01, 0x0, 0x8, 0x800, 0x52b}, 0x6, 0x2, 0x2, 0x15b, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x2063, 0x0, &(0x7f0000000200)="7782729264f2373a76207b53f4db8cf7e00164f1117bf6e395bf3aa6f1a067773029aee93d69fc5fa813d218b461dbeaec8d7c8a5187426a80d9b13176db0a5f55dda01c00eaa9f1313c1974bfb1d83ae304e69905b85ef7bef99fb65be5ef4cc20360698a89e70d5dc6dae867f1e6ac02136ee818ad8904b0a4729c7913103867f50107951f504e10a8ee4fba0f9a18b434bd959d1caa5e9ec882cddb61dd0ed9d49267f5c0478406d7226131c9fac23b15d24f6334b12b7a", &(0x7f00000002c0)="9e0b2203a0b7b039dc8b9d03805971a123edbfe9"}) (async) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r8, 0xb701, 0x0) (async) r9 = getpid() process_vm_readv$auto(r9, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) (async) r10 = waitid$auto_P_ALL(0x0, 0x101, &(0x7f0000000480)={@siginfo_0_0={0x4, 0x3, 0x101, @_timer={r9, 0x3, @sival_ptr=&(0x7f0000000740)="70b81276e2b8caf16ef66cdb2e9159779d4761e57403f253292d9d45aa25db101a58af015c4fe851e2961abafcefaf2eb1aa6ad16a4cd722f1466c57", 0x7}}}, 0x87, &(0x7f0000000500)={{0xa, 0xf}, {0x1, 0xffffffffffffffff}, 0x1, 0x1, 0x0, 0xd, 0x2, 0x6, 0x6, 0x101, 0x0, 0x3, 0x1c00000000, 0x6, 0x81, 0x6}) sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="55de48d9376d4c05ae997f5cd3317be22b23e91088a7608ead651bb700c2a68da27c01954b7198c6336a0a5f4a934917f6113ef49a46f5ddddf187d92bb6297d6bc23eae23d0628f4ff4a5e2a7559195111ff5b3f2eecbbfece6c5a97b75f3e972059da695871a5952a07f1bf91aa075e651d57dc389abe1d1ebfd9f427272076e4c865e64da9b0dd614da1d022e7b4bae730a3dea4e71e5fcf7e496f861b74c539336f5c4d6f0e1c74277c5e9936b1041960d67", @ANYRES64=r5, @ANYRESOCT=r3, @ANYRES32=r7, @ANYBLOB="04000080000028cedb7033a905a53ca51e6e3574caad3ff888a46f02f56d89f95632687e2322bac231cb96acb3a5ab5d6932b071b1ecdbb8288682be79ad4c273a643ff6c880b4dfcf38730000005601018040000e80003d52e16b737347a83a4b93589bbb71e9a7bfbe6f5bb5c5fb90e584fc2be5e1f8664f8b32796dc60049428b08002300fc0000000400888004004f80040072000c0005800800ad00", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32, @ANYBLOB="4ddae5ff84d8da9c7d41b10c63db2ef6a924646bf264ecefb8f42dcdb83cfdba77044ee9a491cbf50e1206faa0239545676ce776cc4fa4ae74b83cec65"], 0x3f0}, 0x1, 0x0, 0x0, 0x40}, 0x8090) (async) ioctl$auto_FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000000)={0x9, 0x9, 0x0, 0x4000, 0x77ba, 0x46f1, 0x0, 0x6}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) 2m17.104168115s ago: executing program 7 (id=778): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) socket(0x2, 0x2, 0x0) (async) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) socket(0x2c, 0x1, 0x3) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0xfffffffffffffff7, 0x5, 0x19, r2, 0x7) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) sendfile$auto(r1, r0, &(0x7f0000000000)=0xfff, 0xff) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x11, 0x2, 0x2) (async) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy16/wep_iv\x00', 0x2, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x4f, 0x5) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) 2m16.124665373s ago: executing program 7 (id=779): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket(0x2a, 0x2, 0xb) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) pipe$auto(0x0) fcntl$auto(r1, 0x5, 0x6) r2 = socket(0x2, 0x4, 0x0) setsockopt$auto(r2, 0x0, 0x10, 0x0, 0x17) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x21, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = open(0x0, 0x22240, 0x55) r4 = socket(0xa, 0x2, 0x0) connect$auto(r4, &(0x7f0000000040)=@in={0x2, 0x4e24, @loopback}, 0x5b) statx$auto(r3, 0x0, 0x2001003, 0xdbe1, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400a3ff", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fbdbdf250400000008000400ffffffff08000500ac141438"], 0x24}, 0x1, 0x0, 0x0, 0xd4b9cdac6dab18b4}, 0x80800) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0\x00') readlinkat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\\\x00', 0x80) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe981, 0xdf, 0xeb1, 0x401, 0x8000) nanosleep$auto(0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) 2m15.800351013s ago: executing program 7 (id=780): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) socket(0xa, 0x3, 0x3a) socket(0x10, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x1fe, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf250001000008000b0002007f"], 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x8c1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1700", @ANYBLOB="7f"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xd1, 0x0, 0x4) 2m15.510562369s ago: executing program 7 (id=781): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) (async) r1 = ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000080)=0x3) (async) r2 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter$auto(r3, 0x9, 0x820e, 0x29, 0x0, 0x18) r4 = socket(0x15, 0x5, 0x0) getsockopt$auto(r4, 0x114, 0x2715, 0xfffffffffffffffc, 0x0) (async) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)=@bpf_attr_3={0x1, 0xfffffff7, 0x7, 0x7ff, 0x6, 0xff, 0x9, 0x24fa, 0x2, "7be1f934610e14e090c35e43c624c785", r0, 0xfffffff0, r1, 0x8001, 0x1, 0x9, 0x20, 0x10, 0x2, 0xf, @attach_btf_obj_fd=r2, 0x3ff, 0x6, 0x7, 0x1, 0x1, r3, r4}, 0x6) (async) unshare$auto(0x40000080) (async) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x20008000) ioprio_set$auto(0x2, 0x800000000, 0x8) (async) socket(0xa, 0x5, 0x0) (async) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/numa_node\x00', 0x1a3b02, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) (async) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) (async) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/input/event1\x00', 0x58840, 0x0) ioctl$auto_EVIOCREVOKE(r5, 0x40044591, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x4, 0x1000002, 0x9, 0x3, 0x2, 0x4, 0x7fffffff, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0xa, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x1, 0x0, 0x2]}, 0x1fe, 0x200d) (async) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) write$auto(r6, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x20000008000) socket(0x21, 0x2, 0x2) (async) write$auto(0x3, 0x0, 0xffd8) (async) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0xfff5}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) 2m15.129267536s ago: executing program 8 (id=761): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000004440)) ioctl$auto_VHOST_SET_LOG_FD2(r0, 0x4004af07, &(0x7f00000001c0)=r0) r3 = open_by_handle_at$auto(r0, &(0x7f00000002c0)={0x1a, 0x136a, "8f42b1077e737d4629d7867bca48102625b1c2c21fa15504a19b"}, 0x7d) setsockopt$auto(r3, 0x1, 0x1021, 0x0, 0xd) mmap$auto(0x3, 0x8, 0x9, 0x9b72, r3, 0x8000) geteuid() sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4040840}, 0x200000c0) mmap$auto(0x100000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x1ff000, 0x100008, 0x843, 0x3, 0xfffff000) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0x1002}, 0x1, &(0x7f0000000280)={0x0, 0x401}, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001b00)=ANY=[@ANYBLOB="20010000", @ANYRES16=r4, @ANYBLOB="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"], 0x120}, 0x1, 0x68, 0x0, 0x24000000}, 0x140) sendmsg$auto_NL80211_CMD_GET_KEY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x21}, 0x51) 2m14.022871742s ago: executing program 8 (id=783): socket(0xa, 0x3, 0x3b) shmctl$auto_IPC_RMID(0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e10600"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x88c5) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0xfffffffffffffffc, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/exception_policy\x00', 0xc0201, 0x0) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0xc) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f00000000c0)="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", 0x119) r1 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mmap$auto(0x5, 0x20009, 0x10000202, 0x4000000eb5, r1, 0xd535) close_range$auto(0x2, 0x8, 0x0) futex$auto(0x0, 0x0, 0x2968, 0x0, 0x0, 0xb) futex$auto(&(0x7f0000000080)=0x3, 0x2, 0x8, 0x0, &(0x7f0000000100)=0x4, 0x440a48d3) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001c80), 0x1, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000001cc0)={{0x800, 0x10000, 0x5, 0x591, 0x7}, 0x6, 0x2, 0x6, "58e5218f9678796f35bf2803b1e21a54bddb4e340bb83340b899e51485a51568"}) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80002, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x4000, 0x0) write$auto(0xca, &(0x7f00000001c0)='\x04\x13\xac\x04\x00\x00\x00\x00\x00\x00\x00\x01\n\xdc\x10\x00\x00\xef\xab\xe1ME:\xab \x87|\xe0Z\x1b\x9eZ\xa8\xff\x92+\xc9\x9fs\xbf\xd8\f\x00\x00\x00\xa5V\b\xf1Ne\xc6l\xd0\xdd7\x96gf\xb2\xa0\xf2cN\x8b\x95\xeb\xf3(\x9eM-\xdc\x84N\xc3\tts%\xe9\xbf<\xf1\xdav\xe0n\x04\xb33\x97\xd5\xb4\x02\x94B\xbb\x995\x1e\xf7@\xd8\xca\x8d\a0 \xfa\x87V\xeb1\xe4M%\xdd\xfd\xf6\x8d\xb4\xc7\x9b\x9d\xf5\xd9^\xcdL@\x0f\xd4\x15F,\xc1\xd1i\xa4f/{\xfa\xd5\n\xe1\x95l[\x91\xbfX\xea2\x1b\x8a\x85\t\x00\x05m\x1e\x9b\xca\xfb\x81\x9d{\x19S\xff\xe4\xd2k\x1b/wJ&\x03+{\x84R\xa8\x92\xad\xec\x1b\xb1\xe9\xa7XUo\x93\xd5\xfb\x94\xc4\xdf\x8e\xdd\x97\xfc\x00\x13\xd6\x80g\x7fR;\x88\xf7bm\x8f\xb5\x89\x1a\xb63\x98\xaa\xcc\xbf\x94\xbf#u\xb9', 0x2b) chown$auto(&(0x7f00000000c0)='./file0\x00', 0xee01, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) 2m13.374808512s ago: executing program 8 (id=784): unshare$auto(0x40000080) mknod$auto(0x0, 0xcb, 0xfffffffa) execve$auto(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7040f9dbdf25090000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20044000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0x4, 0x300000000000) r2 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r2, 0x65, 0x6, 0xffffffffffffffff, 0x0) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2m12.764983569s ago: executing program 8 (id=785): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x539e, 0x6, 0x6, 0x12, r0, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/msr/perf_event_mux_interval_ms\x00', 0x982, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) write$auto(r2, &(0x7f0000000100)='/dev/audio1\x00', 0x100000a3d7) r3 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0xffdf, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x82043, 0x0) close_range$auto(0x2, 0x8, 0x0) epoll_ctl$auto_EPOLL_CTL_DEL(r3, 0x2, r4, &(0x7f00000001c0)={0xe586, 0x180000000000000}) epoll_create$auto(0x3e) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) symlink$auto(0x0, 0x0) rseq$auto(&(0x7f0000000040)={0xe, 0x3d94, 0x8, 0x6, 0x2, 0x2}, 0x8000, 0x0, 0x3) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x0, 0x0, 0xfffffffffffffffb) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mmap$auto(0x2ffc, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xff) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x8340, 0x0) 2m11.699552973s ago: executing program 8 (id=790): openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x2a801, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) socket(0x2, 0x1, 0x106) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = prctl$auto_PR_SET_MM_START_BRK(0x4, 0x6, 0xffffffffffffffff, 0x9, 0x73c0992a) epoll_pwait2$auto(r0, &(0x7f00000000c0)={0x8, 0x40}, 0x3, &(0x7f0000000100)={0x4, 0xfffffffffffffff9}, &(0x7f0000000140)={0x401}, 0x8) select$auto(0x9, 0x0, 0x0, &(0x7f0000000440)={[0x1ff, 0x6, 0xd, 0x8000000000001, 0x948b, 0x3, 0x15f4da07, 0x3, 0x7, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) write$auto(0x3, 0x0, 0xfffffdef) 2m11.598157435s ago: executing program 8 (id=791): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/set_event\x00', 0x202402, 0x0) write$auto_ftrace_set_event_fops_trace_events(r0, &(0x7f00000000c0)="ca1187d4bbe682f99b2ac2bea4cbb560963e3672011d58b43554a2b1ba1bf97057e9ee172892cf50612a556b90da82", 0x2f) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x0, 0x8004, 0x0, &(0x7f0000000040)=0x4) socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0) socket(0xa, 0x3, 0xff) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) close_range$auto(0x2, 0x8, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x400053, 0x9) 2m0.123294746s ago: executing program 38 (id=781): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) (async) r1 = ioctl$auto_SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000080)=0x3) (async) r2 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_enter$auto(r3, 0x9, 0x820e, 0x29, 0x0, 0x18) r4 = socket(0x15, 0x5, 0x0) getsockopt$auto(r4, 0x114, 0x2715, 0xfffffffffffffffc, 0x0) (async) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)=@bpf_attr_3={0x1, 0xfffffff7, 0x7, 0x7ff, 0x6, 0xff, 0x9, 0x24fa, 0x2, "7be1f934610e14e090c35e43c624c785", r0, 0xfffffff0, r1, 0x8001, 0x1, 0x9, 0x20, 0x10, 0x2, 0xf, @attach_btf_obj_fd=r2, 0x3ff, 0x6, 0x7, 0x1, 0x1, r3, r4}, 0x6) (async) unshare$auto(0x40000080) (async) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x20008000) ioprio_set$auto(0x2, 0x800000000, 0x8) (async) socket(0xa, 0x5, 0x0) (async) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/numa_node\x00', 0x1a3b02, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) (async) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) (async) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/input/event1\x00', 0x58840, 0x0) ioctl$auto_EVIOCREVOKE(r5, 0x40044591, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x7, 0x4, 0x1000002, 0x9, 0x3, 0x2, 0x4, 0x7fffffff, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0xa, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x1, 0x0, 0x2]}, 0x1fe, 0x200d) (async) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) write$auto(r6, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x20000008000) socket(0x21, 0x2, 0x2) (async) write$auto(0x3, 0x0, 0xffd8) (async) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0xfff5}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) 1m55.990555249s ago: executing program 39 (id=791): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/set_event\x00', 0x202402, 0x0) write$auto_ftrace_set_event_fops_trace_events(r0, &(0x7f00000000c0)="ca1187d4bbe682f99b2ac2bea4cbb560963e3672011d58b43554a2b1ba1bf97057e9ee172892cf50612a556b90da82", 0x2f) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x0, 0x8004, 0x0, &(0x7f0000000040)=0x4) socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0) socket(0xa, 0x3, 0xff) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) close_range$auto(0x2, 0x8, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x400053, 0x9) 1m23.744095029s ago: executing program 6 (id=920): r0 = socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, r0, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) sendmmsg$auto(0x3, 0x0, 0x40, 0x100) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r1, 0x40045568, 0x5) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/set_event\x00', 0x20002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000180), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x24018890) mmap$auto(0xfffffffffffffffe, 0x400003, 0x2040000, 0x9b71, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) socketpair$auto(0x1, 0xd, 0x9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), r4) r5 = open(&(0x7f0000000800)='./file0\x00', 0xa2240, 0x154) fcntl$auto(r5, 0x400, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) open(&(0x7f0000000080)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) close_range$auto(0x2, 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x14f682, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xa0}, 0x4) openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bdi/1:14/stats\x00', 0x400, 0x0) 1m23.372463097s ago: executing program 6 (id=923): mmap$auto(0x0, 0x9441, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe9a3, 0x3, 0x8000eb1, r0, 0x6) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x1, 0x0) getpid() socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) fanotify_mark$auto(0xffffffffffffffff, 0x0, 0xfffffffffff8fbff, 0xffffffffffffffff, 0x0) socket(0x1d, 0x2, 0x6) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r3 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x10000000000002a, 0x0) r4 = socket(0x29, 0x1, 0x20000084) getsockopt$auto(r4, 0x0, 0x484, 0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) sendfile$auto(r5, r5, 0x0, 0x7) write$auto_console_fops_tty_io(r3, &(0x7f0000001240)='4', 0x1) msgsnd$auto(0x0, &(0x7f0000000080)={0x2, 0x1}, 0x200000004, 0xd) 1m21.69535229s ago: executing program 6 (id=926): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_virtual_ncidev_fops_virtual_ncidev(r0, 0x7, &(0x7f00000001c0)="25c6349deace79f8977e58fad8ff1954dd1820bbe1ecc9e3badfa9588c518f31d8dd2405db44ab66115ea1b814f5e7335c74945d20f7b2f1bab12e5e1e265d75f3fb2e32c54d53a7e749") mmap$auto(0x0, 0x20009, 0xdd, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x2) r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r1, &(0x7f0000008d40)='($}-)#@\x00', 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000001280)='/dev/mixer\x00', 0x80002, 0x0) ioctl$auto_SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f00000012c0)) 1m20.83225735s ago: executing program 6 (id=928): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) lsm_get_self_attr$auto(0x387c, 0x0, 0x0, 0x0) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) setsockopt$auto_SO_BUSY_POLL_BUDGET(0xffffffffffffffff, 0x3, 0x46, &(0x7f0000000200)='})*($$\x00', 0x9) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r1, 0x401870c8, r0) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3079000008bf9fd9f3e2ac870b2b19fd9073798b170b5ba29323d43f61dc5dd534fce4da02b81454799d00fc2da746c62f1df7bb30bfdbbfdf71c638aa9de7c4814a83c5140e0e130c527945331b30ab68aa67c5e9f399b5c1f99a471fbcf35528dc0743dd77bd4abaac803b812b1ad22b403a138964b02edc3163d36ec8a5ecce1d287c6264b2380812bfd4f56bd4044963023d2abae9a991000000", @ANYRES16=0x0, @ANYBLOB="000028bd7000fcdbdf256d00000007000a00107c4c000400d1000600b400030000000500020000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) setsockopt$auto(r2, 0x1, 0x9, 0x0, 0xeb66) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x1ad240, 0x1b1) socket(0xa, 0x3, 0x3b) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(r0, &(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x2}, 0x55) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) 1m17.446689608s ago: executing program 6 (id=933): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001080)='/proc/thread-self/net/rxrpc/locals\x00', 0x40080, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/modalias\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001c00)=""/4111, 0x100f) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r2, 0x0, 0x4) sysfs$auto(0x2, 0x16, 0x0) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000001040), 0x880, 0x0) close_range$auto(0xffffffffffffffff, r3, 0x80000001) rseq$auto(&(0x7f0000000840)={0xa, 0x9, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) 1m14.593055294s ago: executing program 6 (id=942): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0x0) prctl$auto(0x3ff0, 0x2, 0x0, 0x2, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) getsockopt$auto(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x3b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kexec_load$auto(0x1, 0x0, 0x0, 0x1003dffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8522, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x8008000) socket(0x2, 0x80002, 0x73) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sysfs$auto(0x2, 0x23, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0) keyctl$auto(0x8, 0x0, 0x0, 0x0, 0x4) mmap$auto(0x0, 0x400005, 0xdb, 0x16, 0x2, 0x7ffc) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) read$auto_check_wx_fops_(r3, &(0x7f0000000080)=""/228, 0xe4) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000123bd7000fcdbdf2566ffff1683d85b44bf3b9d00a5113b1a282e2e18e44b1b7b00102f1cb1dffa69d4392800"], 0x34}, 0x1, 0x0, 0x0, 0x48845}, 0x880) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r4, &(0x7f0000000580)="7fd0a917413f68eb6b28d5eea7d1553f6595c094f1f855eb8d8776e6bd8f81c440da3fe3433f8243402fc2752caac5da7a03bbb5adf685740635a6bc231c6cf093b7cf0e4dd07f10b2dc12791aa3ebded3cfe2e4befc0e02d2e064b1db3adc8b2ec1c0378efff268086d6cb998b8dedfb7f20d06b7b091e974de1c1a4ce3d378d91b7639d914ba86b1f18337bb06e3619af99e68dfac380ab153fc75a2159d8efbbf7436752c964490346cf1558249979fc61ee71509560d14bdd0922e50904f3a4b2ae1bfc4f6bb9e08f16afd6baa53cf87077be5bcca2829dd4133da071a6fd072ed5568670a5d171e3deee5576bf571a016c162ca369182f202dbe49839df8d4c438dacdd6cdd67c21e2ed9be20baeff5e5019313d5e6e5a0e93eab61be5dec2c7e144cf9d73fd945c25ff11d5d5aa26bf8ab2e06098b8aeb05c1f29c1a30d268d82768b3350c3efcdac39334de0f6406a1aed635e0c55412ff73b0222d67be6bdd185478d502b492c41696ce6f88609795409aa0841dbc7cb222f0cb239b19d9499fdc45988f0290af0666c37b93f047d45b17cbe7c9332c63ad46c6aa871e4b351efa4fbfb88cfa0281f465d1a970939c2d6c45c50ade06f0bb98ed66623b887de325c0f42ab530b649ea29757af9464c18dea186a0bbc62ce209a3be8e86e8f710323cb899d806caf575cb73a419c0804afd4c8a329a2afaebb87291e9fdfd2ca0edebfc4fb7b1e281fa3e6ac387aebfc92107f4251aa8c96a4c6d7599933c2c489a7696e8e42d88b572fa46bead2c96f619030ab70026f14f91bbf0a4c1b3ed74c564d6ae3eefeef94d37e19701513ff7713a52ebfd8f251dc303455de00d1ee3ed3e204bed2901a644056193fc7e00ce10aa6463892a7881a51893af629f7bd8801ce4c44c7ff2decdb6a69d9ed48ff79661ba9ec4a84dd222d3b40e4abf56222b97db9aa646a67e5031a57d570030f41b09529298f1acddbcd1f0ff6a30cb2a2d5eaecd774bbf897477cc1e55488f3493b6aa6908d24b032cbda24f956f7f262d992838923efde7e8ed0558872451d7bd6a4769ecd47c6d0a125a6e638df6f67793901a67071c506d010930b01ce541aa43f9110d874311d18a8ea50fb1907e8d17c3932e0c12c7d6f7c145209ab81105649fc0c5266063bd8c6a16319a82ff5d236122d53e15d6a7fcb16245d7754f3ffbf659a141cbd29286176fe445deebd5dd18baae1bbdfedbe4bd3453c50fb2f6c22505ecd768ad0703624ebf7b924dc7e8e93ea94c8a6a9f0372351b5a4aaadf89a86faf5241e47be7e6790676fbf8abcc6ef89b9f6ce10600e21815ec6d2c580b5c30ada6b956a07d9964e93419856df00b06245d0743ac2b595097007165cbb17c6a492a6eb0559712e5f89ee86b7a2c46acf9b8d8b2c7a85092966aca97f114635c64f6eb44ad927423a3bc434b267c23d364ee5671d3dcbcca02ffbb633b3c9e6f", 0xfdef) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x1, 0x2020009, 0x3c, 0xf9, 0xfffffffffffffffa, 0x407ffe) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x40000080) 59.47568213s ago: executing program 40 (id=942): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0x0) prctl$auto(0x3ff0, 0x2, 0x0, 0x2, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) getsockopt$auto(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x3b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kexec_load$auto(0x1, 0x0, 0x0, 0x1003dffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8522, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x8008000) socket(0x2, 0x80002, 0x73) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sysfs$auto(0x2, 0x23, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0) keyctl$auto(0x8, 0x0, 0x0, 0x0, 0x4) mmap$auto(0x0, 0x400005, 0xdb, 0x16, 0x2, 0x7ffc) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) read$auto_check_wx_fops_(r3, &(0x7f0000000080)=""/228, 0xe4) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000123bd7000fcdbdf2566ffff1683d85b44bf3b9d00a5113b1a282e2e18e44b1b7b00102f1cb1dffa69d4392800"], 0x34}, 0x1, 0x0, 0x0, 0x48845}, 0x880) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) write$auto_tty_fops_tty_io(r4, &(0x7f0000000580)="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", 0xfdef) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x1, 0x2020009, 0x3c, 0xf9, 0xfffffffffffffffa, 0x407ffe) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x40000080) 53.795478406s ago: executing program 3 (id=974): openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs1\x00', 0x48080, 0x0) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x2, 0x5, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, r0, 0x1, 0x70bd29, 0x25dfdbfb, {0x2, 0x0, 0x14}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x80005}]}, 0x24}, 0x1, 0x1400, 0x0, 0x80}, 0x20000084) bind$auto(r1, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x0, 0x3}}}, 0xb) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x110) getdents64$auto(r3, 0x0, 0x400) ioctl$auto_PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000080)={0x3, 0x8, 0x4, 0x0, 0x2, 0x6, 0x7c4, 0x8, 0xff, 0x100, 0x9, 0x1}) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fb3d89cb80"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0x800}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0xa788}, 0x7, 0x8) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0x8) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) 53.391295174s ago: executing program 3 (id=975): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf25040000000a0016070000000400000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r1, r3, 0xfffe) socket(0x11, 0x80003, 0x300) r4 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r4, &(0x7f0000000000)={0x8, 0x2, 'u\x00\x00\x00\x00\x00\x00\x00'}, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) mmap$auto(0x0, 0x4, 0x3, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0xfffffffe, 0xc0000000004, 0x0, 0x1, 0x4) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x5, 0x200000000000948b, 0x3, 0x15f4da09, 0x1, 0x3, 0x62, 0x80000001, 0x5, 0x6d3c, 0x9, 0x2, 0xffffffffffffffff]}, 0x0) sendmsg$auto_SMC_NETLINK_DUMP_HS_LIMITATION(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000001200)={0xe14, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, "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"}, 0xe14}, 0x1, 0x0, 0x0, 0x20004090}, 0x40051) mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x1, 0x84) process_vm_readv$auto(0x0, &(0x7f00000000c0)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) clone3$auto(0x0, 0xa) read$auto(0xffffffffffffffff, 0x0, 0x10) 51.296046652s ago: executing program 3 (id=979): r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x81, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2, 0xa, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x4, 0x7ffff, 0x4, 0x1ffffffffffd, 0xff, 0xfffffffffffffffe, 0x7, 0xfffe, 0x7f, 0x2a6, 0x4, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x2, 0x0, 0x0, 0x0, 0x0, [0xe, 0x0, 0x0, 0x6, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x9, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x10, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x100000000002]}, 0x1fe, 0xd) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) close_range$auto(0x0, r3, 0x8001) fanotify_init$auto(0x8, 0x3) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) fsconfig$auto_HIDEPID_INVISIBLE(r2, 0x401, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x9, 0x0) io_setup$auto(0x401, 0x0) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffffffffffd03, &(0x7f0000000400)="e1ae22e7f4055dd0c868813c1a3e60666ccd664738668b86833e85e7451bd06534a93af60c074b64f5cee7ca7c0cbcbc525d5aa68df8de88e060483513c2f47ee68dfe57a37d53c5222d08d56ab6c5285678702c0831c4afc70dfa8a65689104e1cbe1d5e321da554c234573e02f9901d9889f3ae8e211beef4ecc10785b2bcec5d82ebee1981d9209f84493dcf72e2685b5d202193c2396b64c94b62efb595002bb325016ac6783428da1632f9d745d16940e66fe367bcc16f3212bf1a28ae8203f25a26a9c5ed44d182a00"/216) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TCSBRKP2(r5, 0x5425, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 48.629535591s ago: executing program 9 (id=986): mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x102880, 0x1fd) connect$auto(r0, &(0x7f0000000080)=@rc={0x1f, @any, 0x9}, 0x54) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x802, 0x1) setsockopt$auto_SO_WIFI_STATUS(r0, 0x0, 0x29, &(0x7f0000000080)='\xef', 0x8000) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0x5, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/acpi/parameters/acpica_version\x00', 0x400, 0x0) pivot_root$auto(0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000200)=""/292, 0x124) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000f80)='/sys/bus/usb/drivers/uss720/unbind\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r3 = socket(0x1d, 0x2, 0x7) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5}, 0x6a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000000c0)=@can={0x1d, r6, 0xefff}, 0x18) write$auto(0x3, 0x0, 0xfffffdef) 48.242999651s ago: executing program 3 (id=987): madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x100001000000032, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) dup$auto(r0) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r2 = clone$auto(0x6db, 0x9, 0x0, 0x0, 0x6) migrate_pages$auto(r2, 0x4, 0x0, &(0x7f0000000180)=0x2) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x101, 0xffffffffffffffff, 0x3, 0x62, 0x5, 0x7, 0x6d3f, 0x8, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0xa73, 0xd, 0x801, 0x958b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x6, 0x2, 0x10000]}, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x3, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x6) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0x3, 0x6, 0x4, 0x9b4, 0x9, "0800aafc241cd010c7543bfbca2ce1", "0200", '\x00\x00 \x00', "2ff43123", ['\x00', "f8ff0b00fbf2ffff0000b401", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]}) sysfs$auto(0x2, 0x23, 0x0) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r4, 0x0, 0x4) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) 48.12796387s ago: executing program 9 (id=988): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x1c, 0x5, 0x7fc, 0x7fb, &(0x7f00000002c0)}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40146f2c, 0x0) mprotect$auto(0x0, 0x806121, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000002c0)) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x11, 0xac, "91bb77490fa031da088b012189"}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 46.858308244s ago: executing program 9 (id=991): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f0000000180)={"662e4ba46c8e14e086b8fb01d0f85cdc0d8f9a57d2d3b7c97eeac964495d0657", 0x1b4b, 0x8, 0x1, 0x79, 0xffffffff7fffffff, 0x0}) r3 = prctl$auto(0x3e, 0x1, r2, 0x1, 0x4) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) r4 = openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/0:0:0:0\x00', 0x4200, 0x0) mmap$auto(0x100000001, 0x6, 0x4, 0x51, r4, 0x8008) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), r5) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r6, @ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x804}, 0x0) r7 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x8002, 0x0) ioctl$auto_SNDCTL_TMR_TIMEBASE(r7, 0xc0045401, &(0x7f00000000c0)="58f9fb") recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x7fffffff, 0x3) r8 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r8, 0x1, 0x0) ioctl$auto_XFS_IOC_FSBULKSTAT_SINGLE(r3, 0xc0205866, &(0x7f00000004c0)={&(0x7f0000000300)=0x5, 0x0, &(0x7f0000000380)="46addad01676299661f6b0c3319f0a4e8ce2ca24dc0c960eedeba64a5a2776663229ddd73ab84bd4d8bc9600e35955bb832f8f6417638818058f0dc24ad832542ef7efbf47fc1ca8c9db673d2867fdcc0a9acbc686253eb81b48c8abd96c33358db3231b2bff155c4602b347c9951ed25134ad951009141d45a49c63efaa69ec91127d2282993f35650eed6327d02ba1b0dcc0dae3945606c109de43e521c0be58cf76f6ab3da0e0d3a417ea0945ee823f566410535ac33dd10592563389345887aea58f7b0b2635bdb979f2ec7d8e70cef6c3d1760cffc11d409344", &(0x7f0000000480)}) set_mempolicy$auto(0x3, &(0x7f0000000040)=0x9, 0xc72) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x76, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x2, 0xb, 0xe5, 0x3, r0}, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 45.128008812s ago: executing program 9 (id=992): read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/173, 0xad) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = prctl$auto_PR_SET_MM_START_STACK(0x80, 0x5, 0xffffffffffffffff, 0x4, 0x8) write$auto(r0, &(0x7f0000000440)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xefI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x7ff) mmap$auto(0xc, 0x20009, 0x5, 0x14, 0xffffffffffffffff, 0x0) msync$auto(0x6, 0x2d, 0x400000004) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x20, 0x0, 0x568) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = wait4$auto(0xffffffffffffffff, &(0x7f0000000040)=0x8000, 0xf, &(0x7f0000000280)={{0xfffffffffffffff8}, {0x81, 0x8}, 0x7, 0x5, 0x9, 0xf20, 0x9, 0x4, 0x2, 0x80000001, 0xffffffff, 0x5, 0x389, 0xb, 0x8, 0x6}) setpgid$auto(r1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) 44.922303662s ago: executing program 3 (id=994): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) pidfd_open$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x4, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCSWINSZ2(0xffffffffffffffff, 0x5414, &(0x7f0000000080)="a2") mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, 0xffffffffffffffff, 0x0) readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x3, 0x5, 0x7, 0x0) socket(0x2, 0x5, 0x0) getsockopt$auto(0x6, 0x84, 0x85, 0x0, &(0x7f00000000c0)=0x10000) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) write$auto(0x3, 0x0, 0xfdef) read$auto(0x3, 0x0, 0xf3c) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000007ffd) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) 44.623307886s ago: executing program 9 (id=997): r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x81, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2, 0xa, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x4, 0x7ffff, 0x4, 0x1ffffffffffd, 0xff, 0xfffffffffffffffe, 0x7, 0xfffe, 0x7f, 0x2a6, 0x4, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x2, 0x0, 0x0, 0x0, 0x0, [0xe, 0x0, 0x0, 0x6, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x9, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x10, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x100000000002]}, 0x1fe, 0xd) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) close_range$auto(0x0, r3, 0x8001) fanotify_init$auto(0x8, 0x3) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) fsconfig$auto_HIDEPID_INVISIBLE(r2, 0x401, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x9, 0x0) io_setup$auto(0x401, 0x0) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffffffffffd03, &(0x7f0000000400)="e1ae22e7f4055dd0c868813c1a3e60666ccd664738668b86833e85e7451bd06534a93af60c074b64f5cee7ca7c0cbcbc525d5aa68df8de88e060483513c2f47ee68dfe57a37d53c5222d08d56ab6c5285678702c0831c4afc70dfa8a65689104e1cbe1d5e321da554c234573e02f9901d9889f3ae8e211beef4ecc10785b2bcec5d82ebee1981d9209f84493dcf72e2685b5d202193c2396b64c94b62efb595002bb325016ac6783428da1632f9d745d16940e66fe367bcc16f3212bf1a28ae8203f25a26a9c5ed44d182a00"/216) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TCSBRKP2(r5, 0x5425, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 44.204084078s ago: executing program 9 (id=998): r0 = socket(0x10, 0x2, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mtrr\x00', 0xa2102, 0x0) write$auto(r1, 0x0, 0x7ef) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="0600", @ANYRES16=0x0, @ANYBLOB="010025bd"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='B'], 0x1ac}}, 0x40000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0xc0100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000e80)=""/199, 0xc7) r3 = socket(0x2, 0x3, 0xa) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) epoll_ctl$auto_EPOLL_CTL_DEL(r3, 0x2, r4, &(0x7f00000001c0)={0xe586, 0x180000000000000}) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC0\x00', 0x40001, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000300)={{@raw=0x6, 0x0, 0x8001, 0x2, "da14cf93e7670976d4df4660872c34e34ab92824711bacf3578dcec408cf5180d03a4d126edb3169db6d48ac"}, 0x1, @iec958={"28f6a86309b1e098a7dfa272f95c4c28615313f81f02a4eb", "77a2e9b1b0224a8ef0ac25ff0db0b6ec20c55cccbf4e9b253241777363b62fbe19f64f49f5ed0205399a691cb53e4086d6ec9dcbc5173fee439c2db7f3d5f2d4dd2a267a11e3c0cc771cdddef6bdb02a85cf5ea2ecc26fa3fe291d1e45404619547117c0d45a0de14bc3b9c22d705152efa9d2cfb220c6210dd7606723fb4d6d8ea3e197b19203c65d90e3c761870cbd392bea", 0x0, "e8134be5"}, "a8949c7d9c57acd66da4c5f111166031ad47ebfed172b36a28d7b0204e3a90e9a6c41064df45da18212d9c4e61a29b8146bd0c0284d89751eb5c58cb32c2abf739599063c9a0820f08f1c1b3645f00006dcd033a712822785eeb6a2c41b6d7c00f5e965c1d0000000000000000000000000400"}) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC0D0c\x00', 0xa02, 0x0) ioctl$auto_EVIOCGRAB(r4, 0x40044590, &(0x7f0000000340)=0x6) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0x4}, 0x9}, 0x7, 0x4008) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1a000, 0x0) pipe$auto(&(0x7f0000000400)=r4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x22, 0x3, 0x8000000000000000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_CONNECT(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="c35c37222f8d17e8e6482e09f976085f81573d52c18f33090000002b3e8605e62054d2", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fbdbdf2501000000040007800c0002000400000000000004"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getpid() unshare$auto(0x40000080) init_module$auto(&(0x7f00000002c0)="58c84e09d743745c24bcc3", 0x1, &(0x7f0000000300)='\xe7&]\xf7,^%\x00') setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_UNSPEC={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x80) getsockopt$auto(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000000)=0x7ffe) 43.92627096s ago: executing program 3 (id=999): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x7}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x40}, @NETDEV_A_PAGE_POOL_ID={0x2, 0x20, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc}, @NETDEV_A_PAGE_POOL_ID={0x0, 0x1, 0xfd}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.5/usb19/19-0:1.0/usb19-port7/location\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001100)=""/4105, 0x1009) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x20a301, 0x0) r3 = ioctl$auto_NS_GET_MNTNS_ID(0xffffffffffffffff, 0x8008b705, &(0x7f0000000200)=0x6) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0xfffffffffffff3f0, &(0x7f00000003c0)="b5e8ae3241f47aa8e8e3b4f8675786ccca5547373c1711f0956b0f7222958097946f7452dd539d864223b1b3167221c7a7ff5db865abbe8367db846c84aa518e9e21fa3272910fc14ac746f67d8de987fbf708edb7dc497afe2425276e7cceca6bcdcdbea23084d00c3693743fa19a3f31b573e893407ace71f75eb5297311b9a20bfe0f895bf6bf5fbffa52083a7246d6273225a0169c9a22cfbebe387888bafe147202fb470b4dbbf1aa73d40dd83e7e91271a936bc9f5542094c10073006546b28bf5994e878b6967e6e6b33897c0768750b290592760d4565b492e114d64542c12aa5e67c21037fe3fedf1d8722f6db7bcab2eedd48dffc418a22438") openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x10400, 0x0) epoll_ctl$auto_EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000004c0)={0x7, 0x6}) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x80000000064, 0x5, 0x4000000000dc, 0xeb1, 0xffffffffffffffff, 0x1) unshare$auto(0x40000080) setuid$auto(0xee01) fsmount$auto(0xffffffffffffffff, 0x9, 0x7) 28.970933555s ago: executing program 41 (id=998): r0 = socket(0x10, 0x2, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mtrr\x00', 0xa2102, 0x0) write$auto(r1, 0x0, 0x7ef) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="0600", @ANYRES16=0x0, @ANYBLOB="010025bd"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='B'], 0x1ac}}, 0x40000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0xc0100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000e80)=""/199, 0xc7) r3 = socket(0x2, 0x3, 0xa) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) epoll_ctl$auto_EPOLL_CTL_DEL(r3, 0x2, r4, &(0x7f00000001c0)={0xe586, 0x180000000000000}) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC0\x00', 0x40001, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000300)={{@raw=0x6, 0x0, 0x8001, 0x2, "da14cf93e7670976d4df4660872c34e34ab92824711bacf3578dcec408cf5180d03a4d126edb3169db6d48ac"}, 0x1, @iec958={"28f6a86309b1e098a7dfa272f95c4c28615313f81f02a4eb", "77a2e9b1b0224a8ef0ac25ff0db0b6ec20c55cccbf4e9b253241777363b62fbe19f64f49f5ed0205399a691cb53e4086d6ec9dcbc5173fee439c2db7f3d5f2d4dd2a267a11e3c0cc771cdddef6bdb02a85cf5ea2ecc26fa3fe291d1e45404619547117c0d45a0de14bc3b9c22d705152efa9d2cfb220c6210dd7606723fb4d6d8ea3e197b19203c65d90e3c761870cbd392bea", 0x0, "e8134be5"}, "a8949c7d9c57acd66da4c5f111166031ad47ebfed172b36a28d7b0204e3a90e9a6c41064df45da18212d9c4e61a29b8146bd0c0284d89751eb5c58cb32c2abf739599063c9a0820f08f1c1b3645f00006dcd033a712822785eeb6a2c41b6d7c00f5e965c1d0000000000000000000000000400"}) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC0D0c\x00', 0xa02, 0x0) ioctl$auto_EVIOCGRAB(r4, 0x40044590, &(0x7f0000000340)=0x6) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0x4}, 0x9}, 0x7, 0x4008) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x1a000, 0x0) pipe$auto(&(0x7f0000000400)=r4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x22, 0x3, 0x8000000000000000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_CONNECT(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="c35c37222f8d17e8e6482e09f976085f81573d52c18f33090000002b3e8605e62054d2", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fbdbdf2501000000040007800c0002000400000000000004"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getpid() unshare$auto(0x40000080) init_module$auto(&(0x7f00000002c0)="58c84e09d743745c24bcc3", 0x1, &(0x7f0000000300)='\xe7&]\xf7,^%\x00') setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_UNSPEC={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x80) getsockopt$auto(0xffffffffffffffff, 0x84, 0x7c, 0x0, &(0x7f0000000000)=0x7ffe) 28.746964843s ago: executing program 42 (id=999): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x7}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x40}, @NETDEV_A_PAGE_POOL_ID={0x2, 0x20, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc}, @NETDEV_A_PAGE_POOL_ID={0x0, 0x1, 0xfd}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.5/usb19/19-0:1.0/usb19-port7/location\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001100)=""/4105, 0x1009) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x20a301, 0x0) r3 = ioctl$auto_NS_GET_MNTNS_ID(0xffffffffffffffff, 0x8008b705, &(0x7f0000000200)=0x6) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0xfffffffffffff3f0, &(0x7f00000003c0)="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") openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x10400, 0x0) epoll_ctl$auto_EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f00000004c0)={0x7, 0x6}) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x80000000064, 0x5, 0x4000000000dc, 0xeb1, 0xffffffffffffffff, 0x1) unshare$auto(0x40000080) setuid$auto(0xee01) fsmount$auto(0xffffffffffffffff, 0x9, 0x7) 12.759439002s ago: executing program 1 (id=1068): r0 = socket(0x2b, 0x1, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0, @ANYBLOB="010025bd7000fcdbdf250400000004001000a700160046dda4069dfd5d5ecbefc69c7f3d9d2333c5fbcb6749c88d6bc42f58180f9823ce3c688efd0e15954696536dbc91f301a2bac1cff5944109088b5258a3c3f313fa338ac1a0700a", @ANYRES16=r0, @ANYRES64=r0], 0xc0}, 0x1, 0x0, 0x0, 0x20000904}, 0x48000) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x8, 0x0, 0xffffffffffffffff) shutdown$auto(r0, 0x804) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/peer_notif_delay\x00', 0x20502, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0xc2) rename$auto(0x0, 0x0) write$auto(r3, 0x0, 0x4) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x400007ffff000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsopen$auto(0x0, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) ioctl$auto_FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x1ff) mmap$auto(0x0, 0x4, 0x7f, 0x13, 0xffffffffffffffff, 0x3000001ffffd) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='(@\x00 ', @ANYRES16=r6, @ANYBLOB="3b3d2cbd7000fbdbdf250200000008000300", @ANYRES32=r7, @ANYBLOB="0a000900aaaaaaaaaa110000"], 0x28}, 0x1, 0x100000001000000, 0x0, 0x2019}, 0x8080) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r8, 0x545c, 0x0) mmap$auto(0xc7, 0x2000, 0x2, 0x11, r0, 0xd700) 11.00452438s ago: executing program 1 (id=1070): r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x81, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2, 0xa, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x4, 0x7ffff, 0x4, 0x1ffffffffffd, 0xff, 0xfffffffffffffffe, 0x7, 0xfffe, 0x7f, 0x2a6, 0x4, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x2, 0x0, 0x0, 0x0, 0x0, [0xe, 0x0, 0x0, 0x6, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x9, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x10, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x100000000002]}, 0x1fe, 0xd) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) close_range$auto(0x0, r3, 0x8001) fanotify_init$auto(0x8, 0x3) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) fsconfig$auto_HIDEPID_INVISIBLE(r2, 0x401, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x9, 0x0) io_setup$auto(0x401, 0x0) 7.770646445s ago: executing program 4 (id=1076): r0 = socket(0x2b, 0x1, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0, @ANYBLOB="010025bd7000fcdbdf250400000004001000a700160046dda4069dfd5d5ecbefc69c7f3d9d2333c5fbcb6749c88d6bc42f58180f9823ce3c688efd0e15954696536dbc91f301a2bac1cff5944109088b5258a3c3f313fa338ac1a0700a", @ANYRES16=r0, @ANYRES64=r0], 0xc0}, 0x1, 0x0, 0x0, 0x20000904}, 0x48000) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x8, 0x0, 0xffffffffffffffff) shutdown$auto(r0, 0x804) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/peer_notif_delay\x00', 0x20502, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0xc2) rename$auto(0x0, 0x0) write$auto(r3, 0x0, 0x4) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x400007ffff000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsopen$auto(0x0, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) ioctl$auto_FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x1ff) mmap$auto(0x0, 0x4, 0x7f, 0x13, 0xffffffffffffffff, 0x3000001ffffd) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='(@\x00 ', @ANYRES16=r6, @ANYBLOB="3b3d2cbd7000fbdbdf250200000008000300", @ANYRES32=r7, @ANYBLOB="0a000900aaaaaaaaaa110000"], 0x28}, 0x1, 0x100000001000000, 0x0, 0x2019}, 0x8080) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r8, 0x545c, 0x0) ioctl$auto_TIOCVHANGUP2(r8, 0x5437, 0x0) 7.369502262s ago: executing program 1 (id=1088): r0 = socket(0x2b, 0x1, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0, @ANYBLOB="010025bd7000fcdbdf250400000004001000a700160046dda4069dfd5d5ecbefc69c7f3d9d2333c5fbcb6749c88d6bc42f58180f9823ce3c688efd0e15954696536dbc91f301a2bac1cff5944109088b5258a3c3f313fa338ac1a0700a", @ANYRES16=r0, @ANYRES64=r0], 0xc0}, 0x1, 0x0, 0x0, 0x20000904}, 0x48000) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x8, 0x0, 0xffffffffffffffff) shutdown$auto(r0, 0x804) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/peer_notif_delay\x00', 0x20502, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0xc2) rename$auto(0x0, 0x0) write$auto(r3, 0x0, 0x4) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x400007ffff000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsopen$auto(0x0, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) ioctl$auto_FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x1ff) mmap$auto(0x0, 0x4, 0x7f, 0x13, 0xffffffffffffffff, 0x3000001ffffd) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='(@\x00 ', @ANYRES16=r6, @ANYBLOB="3b3d2cbd7000fbdbdf250200000008000300", @ANYRES32=r7, @ANYBLOB="0a000900aaaaaaaaaa110000"], 0x28}, 0x1, 0x100000001000000, 0x0, 0x2019}, 0x8080) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r8, 0x545c, 0x0) mmap$auto(0xc7, 0x2000, 0x2, 0x11, r0, 0xd700) 7.079316925s ago: executing program 2 (id=1079): openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x33}) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x40}, 0x8) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) listen$auto(0x3, 0x81) ioctl$auto_USBDEVFS_FORBID_SUSPEND(r1, 0x5521, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) ioctl$auto(r2, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r3, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) 6.20337656s ago: executing program 4 (id=1080): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x27, 0xa, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) write$auto(0xffffffffffffffff, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92\x90|l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00'/507, 0x1098c7) ioctl$auto_RTC_PIE_ON(0xffffffffffffffff, 0x7005, 0x0) mmap$auto(0x0, 0x4994, 0xdf, 0x9b72, 0x2, 0x8000) 6.075770568s ago: executing program 5 (id=1081): r0 = socket(0x2b, 0x1, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0, @ANYBLOB="010025bd7000fcdbdf250400000004001000a700160046dda4069dfd5d5ecbefc69c7f3d9d2333c5fbcb6749c88d6bc42f58180f9823ce3c688efd0e15954696536dbc91f301a2bac1cff5944109088b5258a3c3f313fa338ac1a0700a", @ANYRES16=r0, @ANYRES64=r0], 0xc0}, 0x1, 0x0, 0x0, 0x20000904}, 0x48000) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x8, 0x0, 0xffffffffffffffff) shutdown$auto(r0, 0x804) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/peer_notif_delay\x00', 0x20502, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0xc2) rename$auto(0x0, 0x0) write$auto(r3, 0x0, 0x4) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x400007ffff000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsopen$auto(0x0, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) ioctl$auto_FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x1ff) mmap$auto(0x0, 0x4, 0x7f, 0x13, 0xffffffffffffffff, 0x3000001ffffd) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='(@\x00 ', @ANYRES16=r6, @ANYBLOB="3b3d2cbd7000fbdbdf250200000008000300", @ANYRES32=r7, @ANYBLOB="0a000900aaaaaaaaaa110000"], 0x28}, 0x1, 0x100000001000000, 0x0, 0x2019}, 0x8080) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x545c, 0x0) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) mmap$auto(0xc7, 0x2000, 0x2, 0x11, r0, 0xd700) 5.325975108s ago: executing program 1 (id=1083): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_virtual_ncidev_fops_virtual_ncidev(r0, 0x7, &(0x7f00000001c0)="25c6349deace79f8977e58fad8ff1954dd1820bbe1ecc9e3badfa9588c518f31d8dd2405db44ab66115ea1b814f5e7335c74945d20f7b2f1bab12e5e1e265d75f3fb2e32c54d53a7e749") mmap$auto(0x0, 0x20009, 0xdd, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x2) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r2, &(0x7f0000008d40)='($}-)#@\x00', 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000001280)='/dev/mixer\x00', 0x80002, 0x0) ioctl$auto_SOUND_MIXER_READ_RECSRC(r3, 0x80044dff, &(0x7f00000012c0)) sendmmsg$auto(r1, &(0x7f00000002c0)={{0x0, 0x100, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xd950}, 0x810}, 0x4, 0x4028) r4 = socket(0xf, 0xa, 0xf) setsockopt$auto(r4, 0x1, 0xc, 0x0, 0x7fffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r5) sendmsg$auto_CTRL_CMD_GETFAMILY(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c1a000000", @ANYRES16=r6, @ANYBLOB="01002dbd7000ffdbdf25030000000600010034000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r7, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') 5.32569721s ago: executing program 2 (id=1084): r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x81, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2, 0xa, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x4, 0x7ffff, 0x4, 0x1ffffffffffd, 0xff, 0xfffffffffffffffe, 0x7, 0xfffe, 0x7f, 0x2a6, 0x4, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x2, 0x0, 0x0, 0x0, 0x0, [0xe, 0x0, 0x0, 0x6, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x9, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x10, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x100000000002]}, 0x1fe, 0xd) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) close_range$auto(0x0, r3, 0x8001) fanotify_init$auto(0x8, 0x3) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) fsconfig$auto_HIDEPID_INVISIBLE(r2, 0x401, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x9, 0x0) io_setup$auto(0x401, 0x0) 5.041394322s ago: executing program 5 (id=1085): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_virtual_ncidev_fops_virtual_ncidev(r0, 0x7, &(0x7f00000001c0)="25c6349deace79f8977e58fad8ff1954dd1820bbe1ecc9e3badfa9588c518f31d8dd2405db44ab66115ea1b814f5e7335c74945d20f7b2f1bab12e5e1e265d75f3fb2e32c54d53a7e749") mmap$auto(0x0, 0x20009, 0xdd, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x2) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r2, &(0x7f0000008d40)='($}-)#@\x00', 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000001280)='/dev/mixer\x00', 0x80002, 0x0) ioctl$auto_SOUND_MIXER_READ_RECSRC(r3, 0x80044dff, &(0x7f00000012c0)) sendmmsg$auto(r1, &(0x7f00000002c0)={{0x0, 0x100, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xd950}, 0x810}, 0x4, 0x4028) r4 = socket(0xf, 0xa, 0xf) setsockopt$auto(r4, 0x1, 0xc, 0x0, 0x7fffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r5) sendmsg$auto_CTRL_CMD_GETFAMILY(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c1a000000", @ANYRES16=r6, @ANYBLOB="01002dbd7000ffdbdf25030000000600010034000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r7, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') 4.854498144s ago: executing program 4 (id=1087): mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0xe97f, 0xdf, 0xeb1, 0x402, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r1, r1, 0x0, 0x7) gettid() getpid() madvise$auto(0x0, 0x2003ec, 0x14) 4.196329977s ago: executing program 2 (id=1089): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r3}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}, @OVS_DP_ATTR_NAME={0x11, 0x1, 'ovs_\x12\xff\xfe\x00\x00\x00\x00\x00\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0xd4, r0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@MACSEC_ATTR_OFFLOAD={0xb7, 0x9, 0x0, 0x1, [@typed={0x4, 0xa}, @generic="1b3c55a083dff433a7a7966071d3e2ddf14eed3fd4e3120a8515844da2958892c3ed617c91a2f07426f72893fc4cccb1c4e0fd2d013c1710cec09a18e3567d69f42ccf1084a1dd75b7c4399bf3c3c72cdbf6fd57b145685e8787c6dbd0b3967e3b8f2a5172f68d8b3a5b51cc072d51b79c9732ad7cfd8417e09fa366f2ad795b427af04802030ba3c12369f0cd31bc76183051b788abd61f6da4b945089eba805bdf57b523eeeec93dc07d61b570b9"]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r3}]}, 0xd4}}, 0x4010) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket(0x10, 0x2, 0x0) memfd_create$auto(0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f682, 0x0) socket(0x10, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x7fffffff) open(&(0x7f0000000000)='./file0\x00', 0x1eb343, 0x100) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/dev/audio1\x00', 0x100000a3d9) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r5 = socket(0xa, 0x5, 0x84) sendto$auto(r5, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0x0, 0x0) 3.886051442s ago: executing program 5 (id=1090): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_virtual_ncidev_fops_virtual_ncidev(r0, 0x7, &(0x7f00000001c0)="25c6349deace79f8977e58fad8ff1954dd1820bbe1ecc9e3badfa9588c518f31d8dd2405db44ab66115ea1b814f5e7335c74945d20f7b2f1bab12e5e1e265d75f3fb2e32c54d53a7e749") mmap$auto(0x0, 0x20009, 0xdd, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x2) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r2, &(0x7f0000008d40)='($}-)#@\x00', 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000001280)='/dev/mixer\x00', 0x80002, 0x0) ioctl$auto_SOUND_MIXER_READ_RECSRC(r3, 0x80044dff, &(0x7f00000012c0)) sendmmsg$auto(r1, &(0x7f00000002c0)={{0x0, 0x100, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xd950}, 0x810}, 0x4, 0x4028) r4 = socket(0xf, 0xa, 0xf) setsockopt$auto(r4, 0x1, 0xc, 0x0, 0x7fffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r5) sendmsg$auto_CTRL_CMD_GETFAMILY(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c1a000000", @ANYRES16=r6, @ANYBLOB="01002dbd7000ffdbdf25030000000600010034000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r7, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') 3.501302292s ago: executing program 1 (id=1091): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/path_max\x00', 0x0, 0x0) mmap$auto(0x0, 0xfe, 0x4, 0x47fffffff, 0x200000401, 0x8000) close_range$auto(r0, r0, 0x4) io_uring_setup$auto(0x3, 0x0) socket(0xa, 0x801, 0x106) r1 = socket(0x11, 0x3, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) r3 = socket(0x10, 0x2, 0x4) mmap$auto(0x6, 0x9, 0x6, 0x32d4, 0x10000, 0x80000001) open(0x0, 0x64842, 0x0) epoll_ctl$auto(0x5, 0x3, 0xffffffffffffffff, 0x0) ioctl$auto(0xc8, 0xffffffff800454dd, 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r1, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef) 2.955267496s ago: executing program 2 (id=1092): r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x81, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2, 0xa, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x4, 0x7ffff, 0x4, 0x1ffffffffffd, 0xff, 0xfffffffffffffffe, 0x7, 0xfffe, 0x7f, 0x2a6, 0x4, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x2, 0x0, 0x0, 0x0, 0x0, [0xe, 0x0, 0x0, 0x6, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x9, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x10, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x100000000002]}, 0x1fe, 0xd) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) close_range$auto(0x0, r3, 0x8001) fanotify_init$auto(0x8, 0x3) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) fsconfig$auto_HIDEPID_INVISIBLE(r2, 0x401, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x9, 0x0) io_setup$auto(0x401, 0x0) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffffffffffd03, &(0x7f0000000400)="e1ae22e7f4055dd0c868813c1a3e60666ccd664738668b86833e85e7451bd06534a93af60c074b64f5cee7ca7c0cbcbc525d5aa68df8de88e060483513c2f47ee68dfe57a37d53c5222d08d56ab6c5285678702c0831c4afc70dfa8a65689104e1cbe1d5e321da554c234573e02f9901d9889f3ae8e211beef4ecc10785b2bcec5d82ebee1981d9209f84493dcf72e2685b5d202193c2396b64c94b62efb595002bb325016ac6783428da1632f9d745d16940e66fe367bcc16f3212bf1a28ae8203f25a26a9c5ed44d182a00"/216) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TCSBRKP2(r5, 0x5425, 0x0) 2.819929106s ago: executing program 4 (id=1093): r0 = socket(0x2b, 0x1, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0, @ANYBLOB="010025bd7000fcdbdf250400000004001000a700160046dda4069dfd5d5ecbefc69c7f3d9d2333c5fbcb6749c88d6bc42f58180f9823ce3c688efd0e15954696536dbc91f301a2bac1cff5944109088b5258a3c3f313fa338ac1a0700a", @ANYRES16=r0, @ANYRES64=r0], 0xc0}, 0x1, 0x0, 0x0, 0x20000904}, 0x48000) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x8, 0x0, 0xffffffffffffffff) shutdown$auto(r0, 0x804) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/peer_notif_delay\x00', 0x20502, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0xc2) rename$auto(0x0, 0x0) write$auto(r3, 0x0, 0x4) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x400007ffff000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsopen$auto(0x0, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) ioctl$auto_FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x1ff) mmap$auto(0x0, 0x4, 0x7f, 0x13, 0xffffffffffffffff, 0x3000001ffffd) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='(@\x00 ', @ANYRES16=r6, @ANYBLOB="3b3d2cbd7000fbdbdf250200000008000300", @ANYRES32=r7, @ANYBLOB="0a000900aaaaaaaaaa110000"], 0x28}, 0x1, 0x100000001000000, 0x0, 0x2019}, 0x8080) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r8, 0x545c, 0x0) ioctl$auto_TIOCVHANGUP2(r8, 0x5437, 0x0) 2.695446207s ago: executing program 5 (id=1094): openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) ioctl$auto_KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x33}) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x40}, 0x8) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) listen$auto(0x3, 0x81) ioctl$auto_USBDEVFS_FORBID_SUSPEND(r1, 0x5521, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) ioctl$auto(r2, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) write$auto(0x3, 0x0, 0xffd8) 1.765705709s ago: executing program 2 (id=1095): mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0xe97f, 0xdf, 0xeb1, 0x402, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) sendfile$auto(r1, r1, 0x0, 0x7) gettid() getpid() madvise$auto(0x0, 0x2003ec, 0x14) 1.630581473s ago: executing program 4 (id=1096): r0 = socket(0x2b, 0x1, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRES64=r0, @ANYBLOB="010025bd7000fcdbdf250400000004001000a700160046dda4069dfd5d5ecbefc69c7f3d9d2333c5fbcb6749c88d6bc42f58180f9823ce3c688efd0e15954696536dbc91f301a2bac1cff5944109088b5258a3c3f313fa338ac1a0700a", @ANYRES16=r0, @ANYRES64=r0], 0xc0}, 0x1, 0x0, 0x0, 0x20000904}, 0x48000) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x8, 0x0, 0xffffffffffffffff) shutdown$auto(r0, 0x804) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/peer_notif_delay\x00', 0x20502, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0xc2) rename$auto(0x0, 0x0) write$auto(r3, 0x0, 0x4) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x400007ffff000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fsopen$auto(0x0, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) ioctl$auto_FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x1ff) mmap$auto(0x0, 0x4, 0x7f, 0x13, 0xffffffffffffffff, 0x3000001ffffd) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='(@\x00 ', @ANYRES16=r6, @ANYBLOB="3b3d2cbd7000fbdbdf250200000008000300", @ANYRES32=r7, @ANYBLOB="0a000900aaaaaaaaaa110000"], 0x28}, 0x1, 0x100000001000000, 0x0, 0x2019}, 0x8080) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x545c, 0x0) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) mmap$auto(0xc7, 0x2000, 0x2, 0x11, r0, 0xd700) 1.174638797s ago: executing program 5 (id=1097): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_virtual_ncidev_fops_virtual_ncidev(r0, 0x7, &(0x7f00000001c0)="25c6349deace79f8977e58fad8ff1954dd1820bbe1ecc9e3badfa9588c518f31d8dd2405db44ab66115ea1b814f5e7335c74945d20f7b2f1bab12e5e1e265d75f3fb2e32c54d53a7e749") mmap$auto(0x0, 0x20009, 0xdd, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x2) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r2, &(0x7f0000008d40)='($}-)#@\x00', 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000001280)='/dev/mixer\x00', 0x80002, 0x0) ioctl$auto_SOUND_MIXER_READ_RECSRC(r3, 0x80044dff, &(0x7f00000012c0)) sendmmsg$auto(r1, &(0x7f00000002c0)={{0x0, 0x100, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xd950}, 0x810}, 0x4, 0x4028) r4 = socket(0xf, 0xa, 0xf) setsockopt$auto(r4, 0x1, 0xc, 0x0, 0x7fffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS0\x00', 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r5) sendmsg$auto_CTRL_CMD_GETFAMILY(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c1a000000", @ANYRES16=r6, @ANYBLOB="01002dbd7000ffdbdf25030000000600010034000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r7, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') 1.076840288s ago: executing program 1 (id=1098): openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000054c0)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x20a01, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) pwrite64$auto(0xc8, 0x0, 0x5e, 0x39) eventfd2$auto(0x6, 0x4) select$auto(0xd, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) utimes$auto(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x9b, 0x7}) getrandom$auto(0x0, 0x2, 0x3) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) madvise$auto(0x110c230000, 0x1, 0x9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) lseek$auto(0x3, 0x8, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x17) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000180)="bb430e061026c0176d87ac52e95349958ecf96d6f372dcc281dbcfe2412b646d34b4f92c111de80cffe58c251821d58b9758df67fe7fcf42e2643c95df17b823680cb1ec7b94937c760183e77495b7cad72725e6eda46af644da62e0d89da0ab50b87879a633631e182bb6daf9a651091887b5b68d1f435d726d3cf15cf8b29acdd527c2b52bcd178ba1dc4eff1ac6f7583d82fc2f8ed52a", 0x50}, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, &(0x7f00000020c0)=""/4093, 0xffd) sendmsg$auto_NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8050) msync$auto(0x110c230000, 0x200001, 0x6) 463.101754ms ago: executing program 4 (id=1099): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/path_max\x00', 0x0, 0x0) mmap$auto(0x0, 0xfe, 0x4, 0x47fffffff, 0x200000401, 0x8000) close_range$auto(r0, r0, 0x4) io_uring_setup$auto(0x3, 0x0) socket(0xa, 0x801, 0x106) r1 = socket(0x11, 0x3, 0x9) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) r3 = socket(0x10, 0x2, 0x4) mmap$auto(0x6, 0x9, 0x6, 0x32d4, 0x10000, 0x80000001) open(0x0, 0x64842, 0x0) epoll_ctl$auto(0x5, 0x3, 0xffffffffffffffff, 0x0) ioctl$auto(0xc8, 0xffffffff800454dd, 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7b, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r1, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef) 460.888096ms ago: executing program 2 (id=1107): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x0, 0x0) ioctl$auto(0x3, 0x40084504, 0x10000000000402) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40146f2c, 0x0) mprotect$auto(0x0, 0x806121, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x8, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 0s ago: executing program 5 (id=1100): r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x81, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2, 0xa, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x0, 0x7, 0x200000000000003, 0xd, 0x4, 0x7ffff, 0x4, 0x1ffffffffffd, 0xff, 0xfffffffffffffffe, 0x7, 0xfffe, 0x7f, 0x2a6, 0x4, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x2, 0x0, 0x0, 0x0, 0x0, [0xe, 0x0, 0x0, 0x6, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x9, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x10, 0xffffffffffffffff, 0x0, 0x400, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff, 0x100000000002]}, 0x1fe, 0xd) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) close_range$auto(0x0, r3, 0x8001) fanotify_init$auto(0x8, 0x3) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) fsconfig$auto_HIDEPID_INVISIBLE(r2, 0x401, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x9, 0x0) io_setup$auto(0x401, 0x0) kernel console output (not intermixed with test programs): '. [ 324.316850][ T9633] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.324049][ T9633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.339197][ T9633] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.346354][ T9633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.792695][T10076] netlink: 4 bytes leftover after parsing attributes in process `syz.7.769'. [ 324.967832][T10022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.005275][ T9712] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 325.021698][ T9712] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 325.041742][ T9712] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 325.062261][ T9712] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 325.078598][ T9712] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 325.540241][ T9712] Bluetooth: hci2: command tx timeout [ 325.792792][T10022] veth0_vlan: entered promiscuous mode [ 325.860319][ T9712] Bluetooth: hci6: command tx timeout [ 325.969428][T10022] veth1_vlan: entered promiscuous mode [ 326.020557][ T9712] Bluetooth: hci5: command tx timeout [ 326.325895][T10022] veth0_macvtap: entered promiscuous mode [ 326.390715][T10083] chnl_net:caif_netlink_parms(): no params data found [ 326.439250][T10022] veth1_macvtap: entered promiscuous mode [ 326.733018][T10022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.882385][T10083] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.889759][T10083] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.897057][T10083] bridge_slave_0: entered allmulticast mode [ 326.923540][T10083] bridge_slave_0: entered promiscuous mode [ 326.971600][T10022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.995911][T10083] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.003376][T10083] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.041047][T10083] bridge_slave_1: entered allmulticast mode [ 327.063116][T10083] bridge_slave_1: entered promiscuous mode [ 327.155095][ T9712] Bluetooth: hci7: command tx timeout [ 327.202059][ T9554] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.211283][ T9554] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.232475][T10083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.362090][T10083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.410123][ T9554] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.715794][ T9554] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.942119][ T9712] Bluetooth: hci6: command tx timeout [ 327.970998][T10083] team0: Port device team_slave_0 added [ 328.025739][T10083] team0: Port device team_slave_1 added [ 328.100346][ T9712] Bluetooth: hci5: command tx timeout [ 328.181730][T10083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.188784][T10083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.255826][T10083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.328645][T10083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.335830][T10083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.377674][T10083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.472492][T10075] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.485863][T10075] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.730536][T10083] hsr_slave_0: entered promiscuous mode [ 328.748646][T10083] hsr_slave_1: entered promiscuous mode [ 328.767840][T10083] debugfs: 'hsr0' already exists in 'hsr' [ 328.778549][T10083] Cannot create hsr debugfs directory [ 328.785798][ T9554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.797818][ T9554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.194850][T10157] netlink: 268 bytes leftover after parsing attributes in process `syz.8.761'. [ 329.220251][ T9712] Bluetooth: hci7: command tx timeout [ 329.467866][T10083] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 329.482659][T10083] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 329.496891][T10083] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 329.510669][T10083] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 329.684840][T10083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.728649][T10083] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.749969][ T9494] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.757109][ T9494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.779028][ T9494] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.786173][ T9494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.021496][ T9712] Bluetooth: hci6: command tx timeout [ 330.211012][T10083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.968051][T10083] veth0_vlan: entered promiscuous mode [ 331.020563][ T9712] Bluetooth: hci6: unexpected subevent 0x01 length: 123 > 18 [ 331.038436][T10083] veth1_vlan: entered promiscuous mode [ 331.193635][T10083] veth0_macvtap: entered promiscuous mode [ 331.216853][T10083] veth1_macvtap: entered promiscuous mode [ 331.282203][T10083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.302393][ T9712] Bluetooth: hci7: command tx timeout [ 331.306354][T10083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.352874][ T9494] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.391999][ T9494] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.435596][ T9494] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.457568][ T9494] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.566692][ T9492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.583185][ T9492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.685457][T10196] db_root: not a directory: /dev/audio1 [ 331.706325][ T30] audit: type=1800 audit(4294967328.830:11): pid=10196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.785" name="dbroot" dev="configfs" ino=30569 res=0 errno=0 [ 331.738454][ T9494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.787076][ T9494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.613331][T10221] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 333.287008][T10232] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 333.381546][ T9712] Bluetooth: hci7: command tx timeout [ 334.343231][T10243] bond0: option all_slaves_active: invalid value () [ 334.963904][T10247] hub 8-0:1.0: USB hub found [ 334.969060][T10247] hub 8-0:1.0: 1 port detected [ 335.275333][T10257] db_root: not a directory: /dev/audio1 [ 335.380367][ T30] audit: type=1800 audit(4294967332.420:12): pid=10257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.801" name="dbroot" dev="configfs" ino=32505 res=0 errno=0 [ 335.406773][T10252] random: crng reseeded on system resumption [ 336.219012][T10271] ptrace attach of "./syz-executor exec"[10083] was attempted by ""[10271] [ 336.286618][T10271] FAULT_INJECTION: forcing a failure. [ 336.286618][T10271] name failslab, interval 1, probability 0, space 0, times 0 [ 336.300802][T10271] CPU: 0 UID: 0 PID: 10271 Comm: syz.9.805 Not tainted syzkaller #0 PREEMPT(full) [ 336.300836][T10271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 336.300852][T10271] Call Trace: [ 336.300860][T10271] [ 336.300870][T10271] dump_stack_lvl+0x16c/0x1f0 [ 336.300905][T10271] should_fail_ex+0x512/0x640 [ 336.300935][T10271] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 336.300965][T10271] should_failslab+0xc2/0x120 [ 336.301000][T10271] kmem_cache_alloc_noprof+0x75/0x6e0 [ 336.301024][T10271] ? alloc_empty_file+0x55/0x1e0 [ 336.301065][T10271] ? alloc_empty_file+0x55/0x1e0 [ 336.301096][T10271] ? _raw_spin_unlock+0x28/0x50 [ 336.301118][T10271] alloc_empty_file+0x55/0x1e0 [ 336.301154][T10271] alloc_file_pseudo+0x13a/0x230 [ 336.301197][T10271] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 336.301239][T10271] ? do_raw_spin_unlock+0x172/0x230 [ 336.301285][T10271] __anon_inode_getfile+0xe8/0x280 [ 336.301321][T10271] anon_inode_getfile_fmode+0x37/0xa0 [ 336.301354][T10271] __do_sys_fanotify_init+0x9da/0xc80 [ 336.301395][T10271] do_syscall_64+0xcd/0xfa0 [ 336.301423][T10271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.301446][T10271] RIP: 0033:0x7fc40ad8eec9 [ 336.301465][T10271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.301489][T10271] RSP: 002b:00007fc40bbf4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 336.301512][T10271] RAX: ffffffffffffffda RBX: 00007fc40afe5fa0 RCX: 00007fc40ad8eec9 [ 336.301527][T10271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000ba [ 336.301542][T10271] RBP: 00007fc40ae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 336.301558][T10271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 336.301573][T10271] R13: 00007fc40afe6038 R14: 00007fc40afe5fa0 R15: 00007ffe843bcfe8 [ 336.301609][T10271] [ 337.591791][T10289] FAULT_INJECTION: forcing a failure. [ 337.591791][T10289] name failslab, interval 1, probability 0, space 0, times 0 [ 337.609322][T10289] CPU: 0 UID: 0 PID: 10289 Comm: syz.9.810 Not tainted syzkaller #0 PREEMPT(full) [ 337.609344][T10289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 337.609352][T10289] Call Trace: [ 337.609358][T10289] [ 337.609363][T10289] dump_stack_lvl+0x16c/0x1f0 [ 337.609384][T10289] should_fail_ex+0x512/0x640 [ 337.609401][T10289] ? fs_reclaim_acquire+0xae/0x150 [ 337.609422][T10289] should_failslab+0xc2/0x120 [ 337.609441][T10289] __kmalloc_noprof+0xdd/0x880 [ 337.609462][T10289] ? tomoyo_encode2+0x100/0x3e0 [ 337.609480][T10289] ? tomoyo_encode2+0x100/0x3e0 [ 337.609492][T10289] tomoyo_encode2+0x100/0x3e0 [ 337.609508][T10289] tomoyo_encode+0x29/0x50 [ 337.609521][T10289] tomoyo_realpath_from_path+0x18f/0x6e0 [ 337.609541][T10289] tomoyo_mkdev_perm+0x22b/0x570 [ 337.609560][T10289] ? tomoyo_mkdev_perm+0x217/0x570 [ 337.609581][T10289] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 337.609602][T10289] ? do_raw_spin_lock+0x12c/0x2b0 [ 337.609628][T10289] ? do_raw_spin_unlock+0x172/0x230 [ 337.609660][T10289] ? __pfx_current_check_access_path+0x10/0x10 [ 337.609683][T10289] ? simple_lookup+0x105/0x1d0 [ 337.609711][T10289] tomoyo_path_mknod+0x12a/0x190 [ 337.609741][T10289] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 337.609771][T10289] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 337.609818][T10289] security_path_mknod+0x161/0x310 [ 337.609857][T10289] do_mknodat+0x239/0x5d0 [ 337.609888][T10289] ? __pfx_do_mknodat+0x10/0x10 [ 337.609911][T10289] ? getname_flags.part.0+0x1c5/0x550 [ 337.609950][T10289] __x64_sys_mknod+0x87/0xb0 [ 337.609976][T10289] do_syscall_64+0xcd/0xfa0 [ 337.610008][T10289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.610031][T10289] RIP: 0033:0x7fc40ad8eec9 [ 337.610051][T10289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.610074][T10289] RSP: 002b:00007fc40bbf4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 337.610097][T10289] RAX: ffffffffffffffda RBX: 00007fc40afe5fa0 RCX: 00007fc40ad8eec9 [ 337.610113][T10289] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 337.610127][T10289] RBP: 00007fc40ae11f91 R08: 0000000000000000 R09: 0000000000000000 [ 337.610147][T10289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.610161][T10289] R13: 00007fc40afe6038 R14: 00007fc40afe5fa0 R15: 00007ffe843bcfe8 [ 337.610193][T10289] [ 337.610415][T10289] ERROR: Out of memory at tomoyo_realpath_from_path. [ 338.667487][T10290] kexec: Could not allocate control_code_buffer [ 340.252942][T10313] netlink: 28 bytes leftover after parsing attributes in process `syz.9.816'. [ 340.262075][T10313] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.274170][T10313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.296246][T10313] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.304728][T10313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.016225][T10341] netlink: 268 bytes leftover after parsing attributes in process `syz.9.818'. [ 341.260649][T10348] FAULT_INJECTION: forcing a failure. [ 341.260649][T10348] name failslab, interval 1, probability 0, space 0, times 0 [ 341.278530][T10348] CPU: 0 UID: 0 PID: 10348 Comm: syz.6.821 Not tainted syzkaller #0 PREEMPT(full) [ 341.278565][T10348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 341.278592][T10348] Call Trace: [ 341.278600][T10348] [ 341.278609][T10348] dump_stack_lvl+0x16c/0x1f0 [ 341.278642][T10348] should_fail_ex+0x512/0x640 [ 341.278671][T10348] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 341.278700][T10348] should_failslab+0xc2/0x120 [ 341.278735][T10348] kmem_cache_alloc_noprof+0x75/0x6e0 [ 341.278762][T10348] ? __kernfs_new_node+0xd2/0x8e0 [ 341.278801][T10348] ? __kernfs_new_node+0xd2/0x8e0 [ 341.278830][T10348] __kernfs_new_node+0xd2/0x8e0 [ 341.278865][T10348] ? __pfx___kernfs_new_node+0x10/0x10 [ 341.278906][T10348] ? find_held_lock+0x2b/0x80 [ 341.278934][T10348] ? kernfs_root+0xee/0x2a0 [ 341.278973][T10348] kernfs_new_node+0x13c/0x1e0 [ 341.279015][T10348] kernfs_create_link+0xcc/0x240 [ 341.279046][T10348] sysfs_do_create_link_sd+0x90/0x140 [ 341.279081][T10348] sysfs_create_link+0x61/0xc0 [ 341.279111][T10348] bus_add_device+0x169/0x480 [ 341.279154][T10348] device_add+0x986/0x1aa0 [ 341.279188][T10348] ? __pfx_device_add+0x10/0x10 [ 341.279219][T10348] ? mark_held_locks+0x49/0x80 [ 341.279259][T10348] usb_set_configuration+0x1187/0x1e20 [ 341.279316][T10348] bConfigurationValue_store+0x100/0x180 [ 341.279350][T10348] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 341.279382][T10348] ? find_held_lock+0x2b/0x80 [ 341.279408][T10348] ? sysfs_file_kobj+0xe4/0x290 [ 341.279435][T10348] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 341.279467][T10348] dev_attr_store+0x58/0x80 [ 341.279494][T10348] ? __pfx_dev_attr_store+0x10/0x10 [ 341.279520][T10348] sysfs_kf_write+0xf2/0x150 [ 341.279548][T10348] kernfs_fop_write_iter+0x3af/0x570 [ 341.279594][T10348] ? __pfx_sysfs_kf_write+0x10/0x10 [ 341.279626][T10348] iter_file_splice_write+0xa21/0x12e0 [ 341.279675][T10348] ? __pfx_iter_file_splice_write+0x10/0x10 [ 341.279704][T10348] ? __pfx_copy_splice_read+0x10/0x10 [ 341.279761][T10348] ? __pfx_iter_file_splice_write+0x10/0x10 [ 341.279791][T10348] direct_splice_actor+0x18f/0x6c0 [ 341.279821][T10348] splice_direct_to_actor+0x342/0xa30 [ 341.279862][T10348] ? __pfx_direct_splice_actor+0x10/0x10 [ 341.279895][T10348] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 341.279946][T10348] do_splice_direct+0x174/0x240 [ 341.279986][T10348] ? __pfx_do_splice_direct+0x10/0x10 [ 341.280026][T10348] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 341.280072][T10348] ? rw_verify_area+0xcf/0x6c0 [ 341.280113][T10348] do_sendfile+0xb06/0xe50 [ 341.280146][T10348] ? __pfx_do_sendfile+0x10/0x10 [ 341.280178][T10348] ? __x64_sys_futex+0x1e0/0x4c0 [ 341.280209][T10348] ? __x64_sys_futex+0x1e9/0x4c0 [ 341.280248][T10348] __x64_sys_sendfile64+0x1d8/0x220 [ 341.280281][T10348] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 341.280327][T10348] do_syscall_64+0xcd/0xfa0 [ 341.280358][T10348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.280384][T10348] RIP: 0033:0x7f4b8a98eec9 [ 341.280406][T10348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.280430][T10348] RSP: 002b:00007f4b8b792038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 341.280455][T10348] RAX: ffffffffffffffda RBX: 00007f4b8abe5fa0 RCX: 00007f4b8a98eec9 [ 341.280473][T10348] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 341.280488][T10348] RBP: 00007f4b8aa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 341.280505][T10348] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 341.280521][T10348] R13: 00007f4b8abe6038 R14: 00007f4b8abe5fa0 R15: 00007ffeb2517588 [ 341.280560][T10348] [ 341.654261][T10348] usb usb1: device_add(1-0:1.0) --> -12 [ 341.953925][T10367] FAULT_INJECTION: forcing a failure. [ 341.953925][T10367] name failslab, interval 1, probability 0, space 0, times 0 [ 341.967799][T10367] CPU: 1 UID: 0 PID: 10367 Comm: syz.6.824 Not tainted syzkaller #0 PREEMPT(full) [ 341.967834][T10367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 341.967849][T10367] Call Trace: [ 341.967857][T10367] [ 341.967867][T10367] dump_stack_lvl+0x16c/0x1f0 [ 341.967901][T10367] should_fail_ex+0x512/0x640 [ 341.967932][T10367] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 341.967961][T10367] should_failslab+0xc2/0x120 [ 341.967994][T10367] kmem_cache_alloc_noprof+0x75/0x6e0 [ 341.968019][T10367] ? getname_flags.part.0+0x4c/0x550 [ 341.968061][T10367] ? getname_flags.part.0+0x4c/0x550 [ 341.968095][T10367] getname_flags.part.0+0x4c/0x550 [ 341.968133][T10367] getname_flags+0x93/0xf0 [ 341.968158][T10367] do_sys_openat2+0xb8/0x1d0 [ 341.968194][T10367] ? __pfx_do_sys_openat2+0x10/0x10 [ 341.968239][T10367] __x64_sys_open+0x153/0x1e0 [ 341.968273][T10367] ? __pfx___x64_sys_open+0x10/0x10 [ 341.968317][T10367] ? rcu_is_watching+0x12/0xc0 [ 341.968347][T10367] do_syscall_64+0xcd/0xfa0 [ 341.968378][T10367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.968403][T10367] RIP: 0033:0x7f4b8a98eec9 [ 341.968424][T10367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.968447][T10367] RSP: 002b:00007f4b8b792038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 341.968472][T10367] RAX: ffffffffffffffda RBX: 00007f4b8abe5fa0 RCX: 00007f4b8a98eec9 [ 341.968489][T10367] RDX: 0000000000000000 RSI: 0000000000149443 RDI: 0000200000000040 [ 341.968505][T10367] RBP: 00007f4b8aa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 341.968520][T10367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.968535][T10367] R13: 00007f4b8abe6038 R14: 00007f4b8abe5fa0 R15: 00007ffeb2517588 [ 341.968571][T10367] [ 343.128751][T10379] random: crng reseeded on system resumption [ 343.760561][T10386] random: crng reseeded on system resumption [ 344.277554][T10389] netlink: 25 bytes leftover after parsing attributes in process `syz.6.830'. [ 344.303089][T10389] ima: policy update failed [ 344.317126][ T30] audit: type=1802 audit(4294967341.450:13): pid=10389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.830" res=0 errno=0 [ 345.188617][ T9495] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 345.199547][ T9495] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 345.218303][ T9495] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 345.229133][ T9495] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 345.265311][ T9495] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 345.701327][T10398] chnl_net:caif_netlink_parms(): no params data found [ 345.905598][T10398] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.974267][T10398] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.990254][T10398] bridge_slave_0: entered allmulticast mode [ 346.008164][T10398] bridge_slave_0: entered promiscuous mode [ 346.020694][T10398] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.068792][T10398] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.088954][T10398] bridge_slave_1: entered allmulticast mode [ 346.115973][T10398] bridge_slave_1: entered promiscuous mode [ 346.229771][T10398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.244100][T10398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.574701][T10398] team0: Port device team_slave_0 added [ 346.594784][T10398] team0: Port device team_slave_1 added [ 346.647431][T10398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.654825][T10416] netlink: 4 bytes leftover after parsing attributes in process `syz.6.836'. [ 346.663673][T10398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.663710][T10398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.666650][T10398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.720230][T10398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.753442][T10398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.839529][T10416] netlink: 354 bytes leftover after parsing attributes in process `syz.6.836'. [ 346.963314][T10398] hsr_slave_0: entered promiscuous mode [ 346.993962][T10398] hsr_slave_1: entered promiscuous mode [ 347.010823][T10398] debugfs: 'hsr0' already exists in 'hsr' [ 347.016590][T10398] Cannot create hsr debugfs directory [ 347.306757][ T9495] Bluetooth: hci8: command tx timeout [ 347.447663][T10430] netlink: 138 bytes leftover after parsing attributes in process `syz.9.839'. [ 348.791845][T10398] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 348.891973][T10398] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 348.929271][T10398] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 348.956600][ T9712] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 348.972051][ T9712] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 348.986471][ T9712] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 348.999510][ T9712] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 349.007451][ T9712] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 349.075171][T10398] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 349.382773][ T9712] Bluetooth: hci8: command tx timeout [ 349.845044][T10398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.918106][T10457] chnl_net:caif_netlink_parms(): no params data found [ 350.026292][T10398] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.068245][ T9528] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.075454][ T9528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.313910][T10457] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.327996][T10457] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.353302][T10457] bridge_slave_0: entered allmulticast mode [ 350.367208][T10457] bridge_slave_0: entered promiscuous mode [ 350.410308][T10457] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.445481][T10457] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.465025][T10457] bridge_slave_1: entered allmulticast mode [ 350.504141][T10457] bridge_slave_1: entered promiscuous mode [ 350.620325][ T9528] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.627444][ T9528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.822741][T10457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.845736][T10457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.992059][T10457] team0: Port device team_slave_0 added [ 351.053249][T10457] team0: Port device team_slave_1 added [ 351.069171][ T9712] Bluetooth: hci9: command tx timeout [ 351.246371][T10457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.257185][T10457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.309638][T10457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.333476][T10507] tipc: Started in network mode [ 351.376177][T10507] tipc: Node identity fe820562, cluster identity 4711 [ 351.386108][T10507] tipc: Node number set to 4269933922 [ 351.437436][T10457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.459961][ T9712] Bluetooth: hci8: command tx timeout [ 351.467895][T10457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.583351][T10457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.671465][T10519] netlink: del zone limit has 4 unknown bytes [ 352.007682][T10457] hsr_slave_0: entered promiscuous mode [ 352.039622][T10457] hsr_slave_1: entered promiscuous mode [ 352.058362][T10457] debugfs: 'hsr0' already exists in 'hsr' [ 352.089831][T10457] Cannot create hsr debugfs directory [ 352.365024][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz.9.850'. [ 352.665806][T10398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.176660][ T9712] Bluetooth: hci9: command tx timeout [ 353.302982][T10398] veth0_vlan: entered promiscuous mode [ 353.540323][ T9712] Bluetooth: hci8: command tx timeout [ 353.572151][T10398] veth1_vlan: entered promiscuous mode [ 353.746825][T10398] veth0_macvtap: entered promiscuous mode [ 353.877166][T10398] veth1_macvtap: entered promiscuous mode [ 354.018797][T10398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.072156][T10398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.121069][ T9494] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.140470][ T9494] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.335673][ T9494] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.355848][ T9494] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.750859][ T9488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.759631][ T9488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.215455][ T9494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.218763][T10457] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 355.224418][ T9712] Bluetooth: hci9: command tx timeout [ 355.250174][ T9494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.420262][T10457] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 355.492666][T10457] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 355.558761][T10457] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 355.939448][T10457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.049644][T10457] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.104249][ T9554] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.111427][ T9554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.218289][ T9554] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.225468][ T9554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.076890][T10623] netlink: 12 bytes leftover after parsing attributes in process `syz.9.856'. [ 357.194523][T10457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.300665][ T9712] Bluetooth: hci9: command tx timeout [ 357.601992][T10457] veth0_vlan: entered promiscuous mode [ 357.806922][T10457] veth1_vlan: entered promiscuous mode [ 357.984314][T10457] veth0_macvtap: entered promiscuous mode [ 358.085719][T10457] veth1_macvtap: entered promiscuous mode [ 358.181787][T10457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.209407][T10457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.311565][ T9528] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.348159][ T9528] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.362374][ T9528] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.442419][ T9528] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.728133][ T9528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.746449][ T9528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.876715][ T9494] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u10:2: bg 3: bad block bitmap checksum [ 358.894325][T10203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.920454][T10648] netlink: 268 bytes leftover after parsing attributes in process `syz.3.860'. [ 359.021294][ T9494] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1368 with max blocks 9 with error 74 [ 359.038521][T10203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.084332][ T9494] EXT4-fs (sda1): This should not happen!! Data will be lost [ 359.084332][ T9494] [ 359.577969][ T9712] Bluetooth: hci7: unexpected event 0x14 length: 16 > 6 [ 359.696117][ T9712] Bluetooth: hci7: unexpected event 0x14 length: 16 > 6 [ 360.128908][T10690] netlink: 186 bytes leftover after parsing attributes in process `syz.1.841'. [ 362.423653][T10741] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input14 [ 363.954959][T10763] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 364.988183][T10796] netlink: 268 bytes leftover after parsing attributes in process `syz.1.879'. [ 365.059120][T10789] bond0: option peer_notif_delay: invalid value () [ 365.081403][T10789] bond0: option peer_notif_delay: allowed values 0 - 300000 [ 365.128627][T10795] vivid-003: ================= START STATUS ================= [ 365.137520][T10795] vivid-003: Radio HW Seek Mode: Bounded [ 365.147714][T10795] vivid-003: Radio Programmable HW Seek: false [ 365.173714][T10795] vivid-003: RDS Rx I/O Mode: Block I/O [ 365.179468][T10795] vivid-003: Generate RBDS Instead of RDS: false [ 365.186451][T10795] vivid-003: RDS Reception: true [ 365.192748][T10795] vivid-003: RDS Program Type: 0 inactive [ 365.276615][T10795] vivid-003: RDS PS Name: inactive [ 365.317059][T10795] vivid-003: RDS Radio Text: inactive [ 365.340760][T10795] vivid-003: RDS Traffic Announcement: false inactive [ 365.368811][T10795] vivid-003: RDS Traffic Program: false inactive [ 365.387400][T10795] vivid-003: RDS Music: false inactive [ 365.430230][T10795] vivid-003: ================== END STATUS ================== [ 365.803023][T10810] debugfs: '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211' [ 367.503470][T10848] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input15 [ 368.455674][T10865] netlink: 268 bytes leftover after parsing attributes in process `syz.3.891'. [ 370.990846][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.896'. [ 371.982257][T10913] bond0: option all_slaves_active: invalid value () [ 372.731557][T10893] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 373.446796][T10940] netlink: 25 bytes leftover after parsing attributes in process `syz.3.899'. [ 373.547760][T10940] ima: policy update failed [ 373.611044][ T30] audit: type=1802 audit(4294967370.760:14): pid=10940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.899" res=0 errno=0 [ 373.774940][T10949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.901'. [ 377.289041][T11017] Console: switching to colour VGA+ 80x25 [ 377.314236][ T9494] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1363 with max blocks 16 with error 117 [ 377.314351][ T9494] EXT4-fs (sda1): This should not happen!! Data will be lost [ 377.314351][ T9494] [ 377.629590][T11016] netlink: 28 bytes leftover after parsing attributes in process `syz.6.908'. [ 377.699256][T11016] ipvlan0: entered promiscuous mode [ 377.699287][T11016] ipvlan0: entered allmulticast mode [ 377.699312][T11016] veth0_vlan: entered allmulticast mode [ 377.704161][T11028] Console: switching to colour frame buffer device 4x6 [ 378.750716][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.757168][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.672181][T11057] debugfs: '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211' [ 380.242102][T11074] netlink: 346 bytes leftover after parsing attributes in process `syz.3.919'. [ 380.285291][T11074] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(384.8192.60), cmd(3) [ 381.042385][T11062] syz.1.918 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 381.120819][T11062] CPU: 1 UID: 0 PID: 11062 Comm: syz.1.918 Not tainted syzkaller #0 PREEMPT(full) [ 381.120852][T11062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 381.120866][T11062] Call Trace: [ 381.120875][T11062] [ 381.120884][T11062] dump_stack_lvl+0x16c/0x1f0 [ 381.120918][T11062] dump_header+0x101/0x930 [ 381.120960][T11062] oom_kill_process+0x272/0xa40 [ 381.121001][T11062] out_of_memory+0x350/0x1700 [ 381.121032][T11062] ? __pfx_out_of_memory+0x10/0x10 [ 381.121066][T11062] mem_cgroup_out_of_memory+0x118/0x130 [ 381.121102][T11062] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 381.121147][T11062] ? do_raw_spin_unlock+0x172/0x230 [ 381.121198][T11062] try_charge_memcg+0x687/0xd40 [ 381.121234][T11062] ? __pfx_try_charge_memcg+0x10/0x10 [ 381.121262][T11062] ? find_held_lock+0x2b/0x80 [ 381.121287][T11062] ? rcu_read_unlock+0x17/0x60 [ 381.121327][T11062] obj_cgroup_charge_account+0x292/0x500 [ 381.121363][T11062] __memcg_slab_post_alloc_hook+0x2ea/0x940 [ 381.121401][T11062] ? kasan_unpoison+0x27/0x60 [ 381.121431][T11062] __kmalloc_noprof+0x67e/0x880 [ 381.121467][T11062] ? __register_sysctl_table+0xb3/0x1900 [ 381.121508][T11062] ? __register_sysctl_table+0xb3/0x1900 [ 381.121540][T11062] __register_sysctl_table+0xb3/0x1900 [ 381.121574][T11062] ? is_module_address+0x5f/0xf0 [ 381.121613][T11062] ? __pfx___register_sysctl_table+0x10/0x10 [ 381.121645][T11062] ? is_module_address+0x69/0xf0 [ 381.121676][T11062] ? register_net_sysctl_sz+0x228/0x3e0 [ 381.121720][T11062] __devinet_sysctl_register+0x1b9/0x360 [ 381.121759][T11062] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 381.121785][T11062] ? inetdev_init+0x245/0x5a0 [ 381.121816][T11062] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 381.121853][T11062] ? copy_net_ns+0x2f8/0x690 [ 381.121879][T11062] ? create_new_namespaces+0x3ea/0xa90 [ 381.121903][T11062] ? unshare_nsproxy_namespaces+0xc0/0x1f0 [ 381.121928][T11062] ? ksys_unshare+0x45b/0xa40 [ 381.121955][T11062] ? __x64_sys_unshare+0x31/0x40 [ 381.121983][T11062] ? do_syscall_64+0xcd/0xfa0 [ 381.122007][T11062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.122037][T11062] devinet_sysctl_register+0x17b/0x200 [ 381.122075][T11062] inetdev_init+0x2b8/0x5a0 [ 381.122111][T11062] inetdev_event+0xc5f/0x18a0 [ 381.122147][T11062] ? ib_netdevice_event+0xfc/0x330 [ 381.122182][T11062] ? __pfx_inetdev_event+0x10/0x10 [ 381.122216][T11062] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 381.122259][T11062] notifier_call_chain+0xbc/0x410 [ 381.122288][T11062] ? __pfx_inetdev_event+0x10/0x10 [ 381.122329][T11062] call_netdevice_notifiers_info+0xbe/0x140 [ 381.122364][T11062] register_netdevice+0x182e/0x2270 [ 381.122399][T11062] ? __pfx_register_netdevice+0x10/0x10 [ 381.122431][T11062] ? net_generic+0xea/0x2a0 [ 381.122460][T11062] register_netdev+0x34/0x50 [ 381.122487][T11062] ip6_tnl_init_net+0x2c7/0x4d0 [ 381.122514][T11062] ? __pfx_ip6_tnl_init_net+0x10/0x10 [ 381.122539][T11062] ops_init+0x1df/0x5f0 [ 381.122569][T11062] setup_net+0x100/0x390 [ 381.122597][T11062] ? __pfx_setup_net+0x10/0x10 [ 381.122623][T11062] ? debug_mutex_init+0x37/0x70 [ 381.122649][T11062] copy_net_ns+0x2f8/0x690 [ 381.122680][T11062] create_new_namespaces+0x3ea/0xa90 [ 381.122714][T11062] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 381.122746][T11062] ksys_unshare+0x45b/0xa40 [ 381.122777][T11062] ? __pfx_ksys_unshare+0x10/0x10 [ 381.122810][T11062] ? xfd_validate_state+0x61/0x180 [ 381.122855][T11062] __x64_sys_unshare+0x31/0x40 [ 381.122885][T11062] do_syscall_64+0xcd/0xfa0 [ 381.122914][T11062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.122938][T11062] RIP: 0033:0x7f397dd8eec9 [ 381.122960][T11062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.122983][T11062] RSP: 002b:00007f397eccd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 381.123007][T11062] RAX: ffffffffffffffda RBX: 00007f397dfe6090 RCX: 00007f397dd8eec9 [ 381.123024][T11062] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 381.123039][T11062] RBP: 00007f397de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 381.123054][T11062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.123068][T11062] R13: 00007f397dfe6128 R14: 00007f397dfe6090 R15: 00007ffdf633c5c8 [ 381.123107][T11062] [ 381.577431][T11062] memory: usage 3072kB, limit 3072kB, failcnt 105340 [ 381.584696][T11062] memory+swap: usage 5844kB, limit 9007199254740988kB, failcnt 0 [ 381.621561][T11062] kmem: usage 3052kB, limit 9007199254740988kB, failcnt 0 [ 381.628899][T11062] Memory cgroup stats for /syz1: [ 381.630046][T11062] cache 0 [ 381.638026][T11062] rss 4096 [ 381.641230][T11062] rss_huge 0 [ 381.644554][T11062] shmem 0 [ 381.647581][T11062] mapped_file 0 [ 381.651150][T11062] dirty 0 [ 381.654220][T11062] writeback 0 [ 381.657577][T11062] workingset_refault_anon 6696 [ 381.662404][T11062] workingset_refault_file 30274 [ 381.667331][T11062] swap 2924544 [ 381.670867][T11062] swapcached 16384 [ 381.674712][T11062] pgpgin 175749 [ 381.678254][T11062] pgpgout 183409 [ 381.681850][T11062] pgfault 118384 [ 381.685488][T11062] pgmajfault 3493 [ 381.689201][T11062] inactive_anon 16384 [ 381.693304][T11062] active_anon 4096 [ 381.697037][T11062] inactive_file 0 [ 381.701637][T11062] active_file 0 [ 381.705111][T11062] unevictable 0 [ 381.708573][T11062] hierarchical_memory_limit 3145728 [ 381.713551][T11097] FAULT_INJECTION: forcing a failure. [ 381.713551][T11097] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 381.713853][T11062] hierarchical_memsw_limit 9223372036854771712 [ 381.733266][T11062] total_cache 0 [ 381.736745][T11062] total_rss 4096 [ 381.740332][T11062] total_rss_huge 0 [ 381.744059][T11062] total_shmem 0 [ 381.747536][T11062] total_mapped_file 0 [ 381.751577][T11062] total_dirty 0 [ 381.755037][T11062] total_writeback 0 [ 381.758848][T11062] total_workingset_refault_anon 6696 [ 381.764182][T11062] total_workingset_refault_file 30274 [ 381.769578][T11062] total_swap 2924544 [ 381.773484][T11062] total_swapcached 16384 [ 381.777709][T11062] total_pgpgin 175749 [ 381.781872][T11062] total_pgpgout 183409 [ 381.785959][T11062] total_pgfault 118384 [ 381.790069][T11062] total_pgmajfault 3493 [ 381.794224][T11062] total_inactive_anon 16384 [ 381.798995][T11062] total_active_anon 4096 [ 381.803996][T11062] total_inactive_file 0 [ 381.808167][T11062] total_active_file 0 [ 381.812166][T11062] total_unevictable 0 [ 381.816140][T11062] anon_cost 0 [ 381.819434][T11062] file_cost 0 [ 381.822865][T11062] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.918,pid=11056,uid=0 [ 381.839078][T11062] Memory cgroup out of memory: Killed process 11056 (syz.1.918) total-vm:108360kB, anon-rss:1140kB, file-rss:22588kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 381.884103][T11097] CPU: 1 UID: 0 PID: 11097 Comm: syz.6.923 Not tainted syzkaller #0 PREEMPT(full) [ 381.884134][T11097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 381.884143][T11097] Call Trace: [ 381.884148][T11097] [ 381.884153][T11097] dump_stack_lvl+0x16c/0x1f0 [ 381.884174][T11097] should_fail_ex+0x512/0x640 [ 381.884196][T11097] should_fail_alloc_page+0xe7/0x130 [ 381.884216][T11097] prepare_alloc_pages+0x3c2/0x610 [ 381.884234][T11097] ? arch_stack_walk+0xa6/0x100 [ 381.884251][T11097] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 381.884270][T11097] ? stack_trace_save+0x8e/0xc0 [ 381.884286][T11097] ? __pfx_stack_trace_save+0x10/0x10 [ 381.884303][T11097] ? stack_depot_save_flags+0x29/0x9c0 [ 381.884321][T11097] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 381.884337][T11097] ? kasan_save_stack+0x42/0x60 [ 381.884352][T11097] ? kasan_save_stack+0x33/0x60 [ 381.884365][T11097] ? kasan_save_track+0x14/0x30 [ 381.884379][T11097] ? __kasan_slab_alloc+0x89/0x90 [ 381.884394][T11097] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 381.884407][T11097] ? security_inode_alloc+0x3b/0x2b0 [ 381.884425][T11097] ? inode_init_always_gfp+0xce4/0x1030 [ 381.884440][T11097] ? do_syscall_64+0xcd/0xfa0 [ 381.884454][T11097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.884473][T11097] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 381.884496][T11097] ? policy_nodemask+0xea/0x4e0 [ 381.884516][T11097] alloc_pages_mpol+0x1fb/0x550 [ 381.884534][T11097] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 381.884557][T11097] ___kmalloc_large_node+0xed/0x160 [ 381.884578][T11097] __kmalloc_large_node_noprof+0x1c/0x70 [ 381.884598][T11097] __kmalloc_noprof.cold+0xc/0x62 [ 381.884619][T11097] ? sk_prot_alloc+0x1a8/0x2a0 [ 381.884641][T11097] ? sk_prot_alloc+0x1a8/0x2a0 [ 381.884658][T11097] sk_prot_alloc+0x1a8/0x2a0 [ 381.884684][T11097] sk_alloc+0x36/0xc20 [ 381.884699][T11097] can_create+0x1e5/0x630 [ 381.884718][T11097] __sock_create+0x335/0x8d0 [ 381.884741][T11097] __sys_socket+0x14d/0x260 [ 381.884761][T11097] ? __pfx___sys_socket+0x10/0x10 [ 381.884781][T11097] ? xfd_validate_state+0x61/0x180 [ 381.884809][T11097] ? __pfx_ksys_write+0x10/0x10 [ 381.884828][T11097] __x64_sys_socket+0x72/0xb0 [ 381.884849][T11097] ? lockdep_hardirqs_on+0x7c/0x110 [ 381.884865][T11097] do_syscall_64+0xcd/0xfa0 [ 381.884882][T11097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.884896][T11097] RIP: 0033:0x7f4b8a98eec9 [ 381.884908][T11097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.884921][T11097] RSP: 002b:00007f4b8b771038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 381.884935][T11097] RAX: ffffffffffffffda RBX: 00007f4b8abe6090 RCX: 00007f4b8a98eec9 [ 381.884945][T11097] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 381.884954][T11097] RBP: 00007f4b8aa11f91 R08: 0000000000000000 R09: 0000000000000000 [ 381.884963][T11097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.884971][T11097] R13: 00007f4b8abe6128 R14: 00007f4b8abe6090 R15: 00007ffeb2517588 [ 381.884990][T11097] [ 383.737337][T11132] sd 0:0:1:0: PR command failed: 1026 [ 383.760475][T11132] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 383.852326][T11132] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 385.522488][T10457] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 385.569889][T10457] CPU: 1 UID: 0 PID: 10457 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 385.569954][T10457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 385.569986][T10457] Call Trace: [ 385.570003][T10457] [ 385.570013][T10457] dump_stack_lvl+0x16c/0x1f0 [ 385.570045][T10457] dump_header+0x101/0x930 [ 385.570088][T10457] oom_kill_process+0x272/0xa40 [ 385.570131][T10457] out_of_memory+0x350/0x1700 [ 385.570163][T10457] ? __pfx_out_of_memory+0x10/0x10 [ 385.570198][T10457] mem_cgroup_out_of_memory+0x118/0x130 [ 385.570234][T10457] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 385.570276][T10457] ? do_raw_spin_unlock+0x172/0x230 [ 385.570316][T10457] try_charge_memcg+0x687/0xd40 [ 385.570353][T10457] ? __pfx_try_charge_memcg+0x10/0x10 [ 385.570390][T10457] ? find_held_lock+0x2b/0x80 [ 385.570421][T10457] charge_memcg+0x8a/0x230 [ 385.570451][T10457] mem_cgroup_swapin_charge_folio+0xbb/0x440 [ 385.570488][T10457] __read_swap_cache_async+0x397/0x500 [ 385.570519][T10457] ? __pfx___read_swap_cache_async+0x10/0x10 [ 385.570544][T10457] ? mlock_drain_local+0x22d/0x4f0 [ 385.570579][T10457] swap_cluster_readahead+0x528/0x770 [ 385.570613][T10457] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 385.570660][T10457] ? __lock_acquire+0x62e/0x1ce0 [ 385.570690][T10457] ? get_vma_policy+0x242/0x3c0 [ 385.570725][T10457] swapin_readahead+0x13a/0xd60 [ 385.570762][T10457] ? __pfx_swapin_readahead+0x10/0x10 [ 385.570790][T10457] ? swap_cache_get_folio+0x267/0x8e0 [ 385.570825][T10457] ? swap_cache_get_folio+0x267/0x8e0 [ 385.570858][T10457] ? swap_cache_get_folio+0x267/0x8e0 [ 385.570897][T10457] ? swap_cache_get_folio+0x267/0x8e0 [ 385.570933][T10457] ? swap_cache_get_folio+0x1f/0x8e0 [ 385.570966][T10457] ? swap_cache_get_folio+0x293/0x8e0 [ 385.571004][T10457] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 385.571038][T10457] ? __pfx_get_swap_device+0x10/0x10 [ 385.571069][T10457] ? do_swap_page+0x125/0x6380 [ 385.571104][T10457] do_swap_page+0x86c/0x6380 [ 385.571151][T10457] ? __pfx_do_swap_page+0x10/0x10 [ 385.571186][T10457] ? __pfx_default_wake_function+0x10/0x10 [ 385.571213][T10457] ? __lock_acquire+0x62e/0x1ce0 [ 385.571248][T10457] ? rcu_is_watching+0x12/0xc0 [ 385.571274][T10457] ? ___pte_offset_map+0x2ad/0x4f0 [ 385.571310][T10457] __handle_mm_fault+0x17d1/0x2aa0 [ 385.571356][T10457] ? __pfx___handle_mm_fault+0x10/0x10 [ 385.571396][T10457] ? lock_vma_under_rcu+0x176/0x530 [ 385.571447][T10457] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 385.571480][T10457] ? get_timespec64+0x136/0x1b0 [ 385.571517][T10457] handle_mm_fault+0x589/0xd10 [ 385.571552][T10457] ? __pkru_allows_pkey+0x11/0xb0 [ 385.571590][T10457] do_user_addr_fault+0x60c/0x1370 [ 385.571617][T10457] ? rcu_is_watching+0x12/0xc0 [ 385.571647][T10457] exc_page_fault+0x64/0xc0 [ 385.571678][T10457] asm_exc_page_fault+0x26/0x30 [ 385.571701][T10457] RIP: 0033:0x7f397ddc1788 [ 385.571721][T10457] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 385.571744][T10457] RSP: 002b:00007ffdf633c8e0 EFLAGS: 00010293 [ 385.571765][T10457] RAX: 0000000000000000 RBX: 000000000000003b RCX: 00007f397ddc1785 [ 385.571786][T10457] RDX: 00007ffdf633c920 RSI: 0000000000000000 RDI: 0000000000000000 [ 385.571800][T10457] RBP: 00007ffdf633c98c R08: 0000000000000000 R09: 0000000000000000 [ 385.571815][T10457] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 385.571830][T10457] R13: 00000000000927c0 R14: 000000000005da8c R15: 00007ffdf633c9e0 [ 385.571867][T10457] [ 385.571876][T10457] memory: usage 3072kB, limit 3072kB, failcnt 106742 [ 385.938552][T10457] memory+swap: usage 7352kB, limit 9007199254740988kB, failcnt 0 [ 385.961630][T10457] kmem: usage 3056kB, limit 9007199254740988kB, failcnt 0 [ 385.968790][T10457] Memory cgroup stats for /syz1: [ 385.968954][T10457] cache 0 [ 385.989806][T10457] rss 0 [ 385.992696][T10457] rss_huge 0 [ 385.995899][T10457] shmem 0 [ 385.998838][T10457] mapped_file 0 [ 386.010256][T10457] dirty 0 [ 386.013220][T10457] writeback 0 [ 386.023425][T10457] workingset_refault_anon 6849 [ 386.034057][T10457] workingset_refault_file 30274 [ 386.044192][T10457] swap 4382720 [ 386.047590][T10457] swapcached 16384 [ 386.059743][T10457] pgpgin 176970 [ 386.063318][T10457] pgpgout 184631 [ 386.069752][T10457] pgfault 119722 [ 386.073322][T10457] pgmajfault 3606 [ 386.088254][T10457] inactive_anon 0 [ 386.107191][T10457] active_anon 16384 [ 386.122856][T10457] inactive_file 0 [ 386.132016][T10457] active_file 0 [ 386.135542][T10457] unevictable 0 [ 386.139121][T10457] hierarchical_memory_limit 3145728 [ 386.144551][T10457] hierarchical_memsw_limit 9223372036854771712 [ 386.152884][T10457] total_cache 0 [ 386.162955][T10457] total_rss 0 [ 386.174116][T10457] total_rss_huge 0 [ 386.183624][T10457] total_shmem 0 [ 386.187226][T10457] total_mapped_file 0 [ 386.191377][T10457] total_dirty 0 [ 386.196071][T10457] total_writeback 0 [ 386.215441][T10457] total_workingset_refault_anon 6849 [ 386.228541][T10457] total_workingset_refault_file 30274 [ 386.248379][T10457] total_swap 4382720 [ 386.256091][T10457] total_swapcached 16384 [ 386.268205][T10457] total_pgpgin 176970 [ 386.282307][T10457] total_pgpgout 184631 [ 386.304436][T10457] total_pgfault 119722 [ 386.322722][T10457] total_pgmajfault 3606 [ 386.327041][T10457] total_inactive_anon 0 [ 386.332577][T10457] total_active_anon 16384 [ 386.337167][T10457] total_inactive_file 0 [ 386.349768][T10457] total_active_file 0 [ 386.353776][T10457] total_unevictable 0 [ 386.367984][T10457] anon_cost 0 [ 386.378106][T10457] file_cost 0 [ 386.388231][T10457] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.927,pid=11116,uid=0 [ 386.443251][T10457] Memory cgroup out of memory: Killed process 11116 (syz.1.927) total-vm:108360kB, anon-rss:1268kB, file-rss:22752kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 387.912114][T11206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.935'. [ 387.928207][T11206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.935'. [ 387.972359][T11209] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 389.336362][T11226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.938'. [ 389.545790][T11232] ima: policy update failed [ 389.559338][ T30] audit: type=1802 audit(4294967386.700:15): pid=11232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.9.940" res=0 errno=0 [ 390.020497][T11244] netlink: del zone limit has 4 unknown bytes [ 391.465225][T11224] syz.3.938 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 391.551133][T11224] CPU: 1 UID: 0 PID: 11224 Comm: syz.3.938 Not tainted syzkaller #0 PREEMPT(full) [ 391.551172][T11224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 391.551187][T11224] Call Trace: [ 391.551194][T11224] [ 391.551204][T11224] dump_stack_lvl+0x16c/0x1f0 [ 391.551237][T11224] dump_header+0x101/0x930 [ 391.551280][T11224] oom_kill_process+0x272/0xa40 [ 391.551323][T11224] out_of_memory+0x350/0x1700 [ 391.551356][T11224] ? __pfx_out_of_memory+0x10/0x10 [ 391.551391][T11224] mem_cgroup_out_of_memory+0x118/0x130 [ 391.551430][T11224] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 391.551475][T11224] ? do_raw_spin_unlock+0x172/0x230 [ 391.551518][T11224] try_charge_memcg+0x687/0xd40 [ 391.551553][T11224] ? __pfx_try_charge_memcg+0x10/0x10 [ 391.551589][T11224] ? find_held_lock+0x2b/0x80 [ 391.551620][T11224] charge_memcg+0x8a/0x230 [ 391.551648][T11224] mem_cgroup_swapin_charge_folio+0xbb/0x440 [ 391.551684][T11224] __read_swap_cache_async+0x397/0x500 [ 391.551713][T11224] ? __pfx___read_swap_cache_async+0x10/0x10 [ 391.551742][T11224] ? inode_to_bdi+0x9e/0x160 [ 391.551769][T11224] ? vma_wants_writenotify+0x10b/0x390 [ 391.551799][T11224] swap_cluster_readahead+0x528/0x770 [ 391.551832][T11224] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 391.551878][T11224] ? __lock_acquire+0x62e/0x1ce0 [ 391.551908][T11224] ? get_vma_policy+0x242/0x3c0 [ 391.551942][T11224] swapin_readahead+0x13a/0xd60 [ 391.551978][T11224] ? __pfx_swapin_readahead+0x10/0x10 [ 391.552000][T11224] ? swap_cache_get_folio+0x267/0x8e0 [ 391.552034][T11224] ? swap_cache_get_folio+0x267/0x8e0 [ 391.552066][T11224] ? swap_cache_get_folio+0x267/0x8e0 [ 391.552114][T11224] ? swap_cache_get_folio+0x267/0x8e0 [ 391.552148][T11224] ? swap_cache_get_folio+0x1f/0x8e0 [ 391.552185][T11224] ? swap_cache_get_folio+0x293/0x8e0 [ 391.552223][T11224] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 391.552257][T11224] ? __pfx_get_swap_device+0x10/0x10 [ 391.552287][T11224] ? do_swap_page+0x125/0x6380 [ 391.552315][T11224] ? finish_task_switch.isra.0+0x221/0xc10 [ 391.552345][T11224] do_swap_page+0x86c/0x6380 [ 391.552392][T11224] ? __pfx_do_swap_page+0x10/0x10 [ 391.552425][T11224] ? __pfx_default_wake_function+0x10/0x10 [ 391.552451][T11224] ? __lock_acquire+0x62e/0x1ce0 [ 391.552485][T11224] ? rcu_is_watching+0x12/0xc0 [ 391.552510][T11224] ? ___pte_offset_map+0x2ad/0x4f0 [ 391.552545][T11224] __handle_mm_fault+0x17d1/0x2aa0 [ 391.552588][T11224] ? __pfx___handle_mm_fault+0x10/0x10 [ 391.552625][T11224] ? lock_vma_under_rcu+0x176/0x530 [ 391.552669][T11224] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 391.552712][T11224] handle_mm_fault+0x589/0xd10 [ 391.552747][T11224] ? __pkru_allows_pkey+0x11/0xb0 [ 391.552785][T11224] do_user_addr_fault+0x60c/0x1370 [ 391.552812][T11224] ? rcu_is_watching+0x12/0xc0 [ 391.552840][T11224] exc_page_fault+0x64/0xc0 [ 391.552867][T11224] asm_exc_page_fault+0x26/0x30 [ 391.552889][T11224] RIP: 0033:0x7fe8d3d8ef0b [ 391.552909][T11224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 48 3d 00 f0 ff ff 77 25 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 00 16 00 00 00 48 c7 c0 [ 391.552932][T11224] RSP: 002b:00007ffcff7aa468 EFLAGS: 00010207 [ 391.552953][T11224] RAX: 00007fe8d1bf6000 RBX: 00007fe8d3fe6308 RCX: 00007fe8d3d8ef03 [ 391.552969][T11224] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007fe8d1bf6000 [ 391.552984][T11224] RBP: 00007fe8d3fe6270 R08: 00000000000000db R09: 0000000000000000 [ 391.553000][T11224] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000003 [ 391.553014][T11224] R13: 00007fe8d3fe6270 R14: 0000000000001171 R15: 0000000000000004 [ 391.553050][T11224] [ 391.958499][T11224] memory: usage 3072kB, limit 3072kB, failcnt 5561 [ 391.965055][T11224] memory+swap: usage 3276kB, limit 9007199254740988kB, failcnt 0 [ 391.972790][T11224] kmem: usage 2056kB, limit 9007199254740988kB, failcnt 0 [ 391.979898][T11224] Memory cgroup stats for /syz3: [ 391.979991][T11224] cache 1032192 [ 391.988384][T11224] rss 0 [ 391.991172][T11224] rss_huge 0 [ 391.994388][T11224] shmem 1032192 [ 391.997848][T11224] mapped_file 0 [ 392.001318][T11224] dirty 0 [ 392.004275][T11224] writeback 0 [ 392.007550][T11224] workingset_refault_anon 523 [ 392.012246][T11224] workingset_refault_file 1967 [ 392.016994][T11224] swap 208896 [ 392.064323][T11224] swapcached 8192 [ 392.089919][T11224] pgpgin 59253 [ 392.131447][T11246] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 392.139164][T11224] pgpgout 65131 [ 392.142974][T11224] pgfault 48406 [ 392.146841][T11224] pgmajfault 452 [ 392.150584][T11224] inactive_anon 356352 [ 392.154632][T11224] active_anon 684032 [ 392.158502][T11224] inactive_file 0 [ 392.162154][T11224] active_file 0 [ 392.165590][T11224] unevictable 0 [ 392.169022][T11224] hierarchical_memory_limit 3145728 [ 392.174245][T11224] hierarchical_memsw_limit 9223372036854771712 [ 392.182480][T11224] total_cache 1032192 [ 392.186572][T11224] total_rss 0 [ 392.189912][T11224] total_rss_huge 0 [ 392.193630][T11224] total_shmem 1032192 [ 392.197586][T11224] total_mapped_file 0 [ 392.201566][T11224] total_dirty 0 [ 392.204998][T11224] total_writeback 0 [ 392.208776][T11224] total_workingset_refault_anon 523 [ 392.213999][T11224] total_workingset_refault_file 1967 [ 392.219265][T11224] total_swap 208896 [ 392.223151][T11224] total_swapcached 8192 [ 392.227292][T11224] total_pgpgin 59253 [ 392.231206][T11224] total_pgpgout 65131 [ 392.235167][T11224] total_pgfault 48406 [ 392.239132][T11224] total_pgmajfault 452 [ 392.243227][T11224] total_inactive_anon 356352 [ 392.248557][T11224] total_active_anon 684032 [ 392.253096][T11224] total_inactive_file 0 [ 392.257237][T11224] total_active_file 0 [ 392.261909][T11224] total_unevictable 0 [ 392.265876][T11224] anon_cost 0 [ 392.269135][T11224] file_cost 0 [ 392.272455][T11224] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.938,pid=11224,uid=0 [ 392.297628][T11224] Memory cgroup out of memory: Killed process 11224 (syz.3.938) total-vm:174032kB, anon-rss:1268kB, file-rss:26796kB, shmem-rss:128kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 392.826127][T11272] Console: switching to colour VGA+ 80x25 [ 392.840705][T11275] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 393.037052][T11277] Console: switching to colour frame buffer device 4x6 [ 393.854234][T10457] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 393.935428][T10457] CPU: 0 UID: 0 PID: 10457 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 393.935462][T10457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 393.935476][T10457] Call Trace: [ 393.935484][T10457] [ 393.935494][T10457] dump_stack_lvl+0x16c/0x1f0 [ 393.935526][T10457] dump_header+0x101/0x930 [ 393.935569][T10457] oom_kill_process+0x272/0xa40 [ 393.935612][T10457] out_of_memory+0x350/0x1700 [ 393.935644][T10457] ? __pfx_out_of_memory+0x10/0x10 [ 393.935679][T10457] mem_cgroup_out_of_memory+0x118/0x130 [ 393.935715][T10457] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 393.935759][T10457] ? do_raw_spin_unlock+0x172/0x230 [ 393.935802][T10457] try_charge_memcg+0x687/0xd40 [ 393.935839][T10457] ? __pfx_try_charge_memcg+0x10/0x10 [ 393.935876][T10457] ? find_held_lock+0x2b/0x80 [ 393.935907][T10457] charge_memcg+0x8a/0x230 [ 393.935937][T10457] mem_cgroup_swapin_charge_folio+0xbb/0x440 [ 393.935974][T10457] __read_swap_cache_async+0x397/0x500 [ 393.936011][T10457] ? __pfx___read_swap_cache_async+0x10/0x10 [ 393.936038][T10457] ? __schedule+0x11a3/0x5de0 [ 393.936072][T10457] swap_cluster_readahead+0x528/0x770 [ 393.936107][T10457] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 393.936153][T10457] ? __lock_acquire+0x62e/0x1ce0 [ 393.936184][T10457] ? get_vma_policy+0x242/0x3c0 [ 393.936220][T10457] swapin_readahead+0x13a/0xd60 [ 393.936256][T10457] ? __pfx_swapin_readahead+0x10/0x10 [ 393.936278][T10457] ? swap_cache_get_folio+0x267/0x8e0 [ 393.936312][T10457] ? swap_cache_get_folio+0x267/0x8e0 [ 393.936346][T10457] ? swap_cache_get_folio+0x267/0x8e0 [ 393.936384][T10457] ? swap_cache_get_folio+0x267/0x8e0 [ 393.936420][T10457] ? swap_cache_get_folio+0x1f/0x8e0 [ 393.936454][T10457] ? swap_cache_get_folio+0x293/0x8e0 [ 393.936492][T10457] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 393.936527][T10457] ? __pfx_get_swap_device+0x10/0x10 [ 393.936558][T10457] ? do_swap_page+0x125/0x6380 [ 393.936594][T10457] do_swap_page+0x86c/0x6380 [ 393.936642][T10457] ? __pfx_do_swap_page+0x10/0x10 [ 393.936676][T10457] ? __pfx_default_wake_function+0x10/0x10 [ 393.936702][T10457] ? __lock_acquire+0x62e/0x1ce0 [ 393.936738][T10457] ? rcu_is_watching+0x12/0xc0 [ 393.936764][T10457] ? ___pte_offset_map+0x2ad/0x4f0 [ 393.936799][T10457] __handle_mm_fault+0x17d1/0x2aa0 [ 393.936845][T10457] ? __pfx___handle_mm_fault+0x10/0x10 [ 393.936886][T10457] ? lock_vma_under_rcu+0x176/0x530 [ 393.936933][T10457] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 393.936978][T10457] handle_mm_fault+0x589/0xd10 [ 393.937020][T10457] ? __pkru_allows_pkey+0x11/0xb0 [ 393.937060][T10457] do_user_addr_fault+0x60c/0x1370 [ 393.937087][T10457] ? rcu_is_watching+0x12/0xc0 [ 393.937117][T10457] exc_page_fault+0x64/0xc0 [ 393.937143][T10457] asm_exc_page_fault+0x26/0x30 [ 393.937167][T10457] RIP: 0033:0x7f397ddb6ce5 [ 393.937187][T10457] Code: 00 00 f0 83 88 08 03 00 00 10 64 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b 66 2e 0f 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 8b 90 [ 393.937209][T10457] RSP: 002b:00007ffdf633c8d8 EFLAGS: 00010297 [ 393.937229][T10457] RAX: 0000000000000002 RBX: 0000000000000046 RCX: 0000000000000000 [ 393.937243][T10457] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055557ba12808 [ 393.937258][T10457] RBP: 00007ffdf633c98c R08: 0000000000000000 R09: 0000000000000000 [ 393.937272][T10457] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 393.937286][T10457] R13: 00000000000927c0 R14: 000000000005fff8 R15: 00007ffdf633c9e0 [ 393.937322][T10457] [ 394.329847][T10457] memory: usage 3072kB, limit 3072kB, failcnt 109175 [ 394.336600][T10457] memory+swap: usage 3276kB, limit 9007199254740988kB, failcnt 0 [ 394.692559][T10457] kmem: usage 3048kB, limit 9007199254740988kB, failcnt 0 [ 394.789953][T10457] Memory cgroup stats for /syz1: [ 394.790052][T10457] cache 0 [ 394.797924][T10457] rss 0 [ 394.869748][T10457] rss_huge 0 [ 394.894202][T10457] shmem 0 [ 394.897166][T10457] mapped_file 0 [ 394.965868][T10457] dirty 0 [ 394.968829][T10457] writeback 0 [ 395.045982][T10457] workingset_refault_anon 7242 [ 395.053771][T10457] workingset_refault_file 30274 [ 395.058652][T10457] swap 208896 [ 395.069869][T10457] swapcached 24576 [ 395.073680][T10457] pgpgin 179677 [ 395.077135][T10457] pgpgout 187336 [ 395.081076][T10457] pgfault 124109 [ 395.087103][T10457] pgmajfault 3938 [ 395.106992][T10457] inactive_anon 20480 [ 395.142358][T10457] active_anon 4096 [ 395.146117][T10457] inactive_file 0 [ 395.150097][T10457] active_file 0 [ 395.153604][T10457] unevictable 0 [ 395.157062][T10457] hierarchical_memory_limit 3145728 [ 395.162333][T10457] hierarchical_memsw_limit 9223372036854771712 [ 395.170517][T10457] total_cache 0 [ 395.174011][T10457] total_rss 0 [ 395.177434][T10457] total_rss_huge 0 [ 395.219794][T10457] total_shmem 0 [ 395.239290][T10457] total_mapped_file 0 [ 395.243426][T10457] total_dirty 0 [ 395.246911][T10457] total_writeback 0 [ 395.250968][T10457] total_workingset_refault_anon 7242 [ 395.256350][T10457] total_workingset_refault_file 30274 [ 395.261841][T10457] total_swap 208896 [ 395.265659][T10457] total_swapcached 24576 [ 395.270704][T10457] total_pgpgin 179677 [ 395.275178][T10457] total_pgpgout 187336 [ 395.279361][T10457] total_pgfault 124109 [ 395.283941][T10457] total_pgmajfault 3938 [ 395.288277][T10457] total_inactive_anon 20480 [ 395.293279][T10457] total_active_anon 4096 [ 395.297516][T10457] total_inactive_file 0 [ 395.301867][T10457] total_active_file 0 [ 395.305836][T10457] total_unevictable 0 [ 395.309976][T10457] anon_cost 0 [ 395.313366][T10457] file_cost 0 [ 395.316651][T10457] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.944,pid=11274,uid=0 [ 395.333220][T10457] Memory cgroup out of memory: Killed process 11274 (syz.1.944) total-vm:104260kB, anon-rss:1268kB, file-rss:23008kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 395.752614][T11295] netlink: 268 bytes leftover after parsing attributes in process `syz.9.947'. [ 395.825644][T11297] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 397.856804][T11301] ima: policy update failed [ 397.875032][ T30] audit: type=1802 audit(4294967395.020:16): pid=11301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.950" res=0 errno=0 [ 400.569864][T11332] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(2) [ 401.708178][ T9528] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1374 with max blocks 5 with error 117 [ 401.760664][ T9528] EXT4-fs (sda1): This should not happen!! Data will be lost [ 401.760664][ T9528] [ 401.807142][ T9528] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1373 with max blocks 1 with error 117 [ 401.850220][ T9528] EXT4-fs (sda1): This should not happen!! Data will be lost [ 401.850220][ T9528] [ 401.961159][T11366] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 402.084379][T10075] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1373 with max blocks 1 with error 117 [ 402.098667][T10075] EXT4-fs (sda1): This should not happen!! Data will be lost [ 402.098667][T10075] [ 402.296040][T10203] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1373 with max blocks 1 with error 117 [ 402.355283][T10203] EXT4-fs (sda1): This should not happen!! Data will be lost [ 402.355283][T10203] [ 402.480741][ T9528] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1373 with max blocks 1 with error 117 [ 402.540078][ T9528] EXT4-fs (sda1): This should not happen!! Data will be lost [ 402.540078][ T9528] [ 403.519927][T11378] random: crng reseeded on system resumption [ 403.713705][T11376] syz.1.961 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=2, oom_score_adj=1000 [ 403.730021][T11376] CPU: 0 UID: 0 PID: 11376 Comm: syz.1.961 Not tainted syzkaller #0 PREEMPT(full) [ 403.730052][T11376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 403.730067][T11376] Call Trace: [ 403.730076][T11376] [ 403.730086][T11376] dump_stack_lvl+0x16c/0x1f0 [ 403.730119][T11376] dump_header+0x101/0x930 [ 403.730162][T11376] oom_kill_process+0x272/0xa40 [ 403.730206][T11376] out_of_memory+0x350/0x1700 [ 403.730240][T11376] ? __pfx_out_of_memory+0x10/0x10 [ 403.730276][T11376] mem_cgroup_out_of_memory+0x118/0x130 [ 403.730311][T11376] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 403.730357][T11376] ? do_raw_spin_unlock+0x172/0x230 [ 403.730401][T11376] try_charge_memcg+0x687/0xd40 [ 403.730438][T11376] ? __pfx_try_charge_memcg+0x10/0x10 [ 403.730466][T11376] ? find_held_lock+0x2b/0x80 [ 403.730492][T11376] ? rcu_read_unlock+0x17/0x60 [ 403.730532][T11376] obj_cgroup_charge_account+0x292/0x500 [ 403.730575][T11376] __memcg_slab_post_alloc_hook+0x2ea/0x940 [ 403.730613][T11376] ? kasan_unpoison+0x27/0x60 [ 403.730643][T11376] __kmalloc_noprof+0x67e/0x880 [ 403.730679][T11376] ? __register_sysctl_table+0xb3/0x1900 [ 403.730721][T11376] ? __register_sysctl_table+0xb3/0x1900 [ 403.730753][T11376] __register_sysctl_table+0xb3/0x1900 [ 403.730787][T11376] ? is_module_address+0x5f/0xf0 [ 403.730826][T11376] ? __pfx___register_sysctl_table+0x10/0x10 [ 403.730859][T11376] ? is_module_address+0x69/0xf0 [ 403.730890][T11376] ? register_net_sysctl_sz+0x228/0x3e0 [ 403.730932][T11376] __addrconf_sysctl_register+0x1a2/0x360 [ 403.730968][T11376] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 403.731003][T11376] ? lockdep_init_map_type+0x5c/0x280 [ 403.731039][T11376] ? mld_in_v1_mode+0x2b2/0x3a0 [ 403.731078][T11376] addrconf_sysctl_register+0x15f/0x1f0 [ 403.731111][T11376] ipv6_add_dev+0xb31/0x15f0 [ 403.731146][T11376] addrconf_notify+0x53e/0x19e0 [ 403.731179][T11376] ? ip6mr_device_event+0x1bc/0x230 [ 403.731222][T11376] notifier_call_chain+0xbc/0x410 [ 403.731265][T11376] ? __pfx_addrconf_notify+0x10/0x10 [ 403.731306][T11376] call_netdevice_notifiers_info+0xbe/0x140 [ 403.731341][T11376] register_netdevice+0x182e/0x2270 [ 403.731379][T11376] ? __pfx_register_netdevice+0x10/0x10 [ 403.731426][T11376] register_netdev+0x34/0x50 [ 403.731455][T11376] sit_init_net+0x286/0x630 [ 403.731491][T11376] ? __pfx_sit_init_net+0x10/0x10 [ 403.731527][T11376] ops_init+0x1df/0x5f0 [ 403.731568][T11376] setup_net+0x100/0x390 [ 403.731598][T11376] ? __pfx_setup_net+0x10/0x10 [ 403.731627][T11376] ? debug_mutex_init+0x37/0x70 [ 403.731658][T11376] copy_net_ns+0x2f8/0x690 [ 403.731697][T11376] create_new_namespaces+0x3ea/0xa90 [ 403.731734][T11376] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 403.731766][T11376] ksys_unshare+0x45b/0xa40 [ 403.731799][T11376] ? __pfx_ksys_unshare+0x10/0x10 [ 403.731832][T11376] ? xfd_validate_state+0x61/0x180 [ 403.731879][T11376] __x64_sys_unshare+0x31/0x40 [ 403.731910][T11376] do_syscall_64+0xcd/0xfa0 [ 403.731941][T11376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.731966][T11376] RIP: 0033:0x7f397dd8eec9 [ 403.731987][T11376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.732010][T11376] RSP: 002b:00007f397ecee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 403.732034][T11376] RAX: ffffffffffffffda RBX: 00007f397dfe5fa0 RCX: 00007f397dd8eec9 [ 403.732051][T11376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 403.732066][T11376] RBP: 00007f397de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 403.732080][T11376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.732095][T11376] R13: 00007f397dfe6038 R14: 00007f397dfe5fa0 R15: 00007ffdf633c5c8 [ 403.732133][T11376] [ 403.732225][T11376] memory: usage 3064kB, limit 3072kB, failcnt 113827 [ 404.160140][T11376] memory+swap: usage 3236kB, limit 9007199254740988kB, failcnt 0 [ 404.190987][T11376] kmem: usage 3032kB, limit 9007199254740988kB, failcnt 0 [ 404.198156][T11376] Memory cgroup stats for /syz1: [ 404.198338][T11376] cache 0 [ 404.207480][T11376] rss 4096 [ 404.214789][T11376] rss_huge 0 [ 404.218010][T11376] shmem 0 [ 404.240592][T11376] mapped_file 0 [ 404.244098][T11376] dirty 0 [ 404.247210][T11376] writeback 0 [ 404.266667][T11376] workingset_refault_anon 7970 [ 404.271861][T11376] workingset_refault_file 30469 [ 404.281871][T11376] swap 167936 [ 404.285197][T11376] swapcached 40960 [ 404.288919][T11376] pgpgin 184864 [ 404.292956][T11376] pgpgout 192519 [ 404.296526][T11376] pgfault 130680 [ 404.300568][T11376] pgmajfault 4474 [ 404.304311][T11376] inactive_anon 36864 [ 404.308298][T11376] active_anon 0 [ 404.312447][T11376] inactive_file 0 [ 404.316189][T11376] active_file 0 [ 404.320136][T11376] unevictable 0 [ 404.332331][T11376] hierarchical_memory_limit 3145728 [ 404.337556][T11376] hierarchical_memsw_limit 9223372036854771712 [ 404.349285][T11376] total_cache 0 [ 404.353125][T11376] total_rss 4096 [ 404.356689][T11376] total_rss_huge 0 [ 404.368606][T11376] total_shmem 0 [ 404.375872][T11376] total_mapped_file 0 [ 404.380418][T11376] total_dirty 0 [ 404.383891][T11376] total_writeback 0 [ 404.387705][T11376] total_workingset_refault_anon 7970 [ 404.393573][T11376] total_workingset_refault_file 30469 [ 404.398955][T11376] total_swap 167936 [ 404.403386][T11376] total_swapcached 40960 [ 404.407725][T11376] total_pgpgin 184864 [ 404.412180][T11376] total_pgpgout 192519 [ 404.416279][T11376] total_pgfault 130680 [ 404.420949][T11376] total_pgmajfault 4474 [ 404.434669][T11376] total_inactive_anon 36864 [ 404.439306][T11376] total_active_anon 0 [ 404.443772][T11376] total_inactive_file 0 [ 404.449207][T11376] total_active_file 0 [ 404.453724][T11376] total_unevictable 0 [ 404.457894][T11376] anon_cost 0 [ 404.461717][T11376] file_cost 0 [ 404.465023][T11376] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.961,pid=11375,uid=0 [ 404.493584][T11376] Memory cgroup out of memory: Killed process 11375 (syz.1.961) total-vm:137100kB, anon-rss:1272kB, file-rss:22884kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 405.333420][ T9495] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 405.345243][ T9495] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 405.361624][ T9495] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 405.380058][ T9495] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 405.390714][ T9495] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 406.177247][T11393] chnl_net:caif_netlink_parms(): no params data found [ 406.468093][T11393] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.481531][T11393] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.489413][T11393] bridge_slave_0: entered allmulticast mode [ 406.504298][T11393] bridge_slave_0: entered promiscuous mode [ 406.521590][T11393] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.538895][T11393] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.546357][T11393] bridge_slave_1: entered allmulticast mode [ 406.555566][T11393] bridge_slave_1: entered promiscuous mode [ 406.602912][T11393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.637659][T11393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.704631][T11405] netlink: 'syz.9.966': attribute type 3 has an invalid length. [ 406.741960][T11393] team0: Port device team_slave_0 added [ 406.852765][T11393] team0: Port device team_slave_1 added [ 406.872710][T11406] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 406.928017][T11393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.963231][T11393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.993964][T11414] ptrace attach of "./syz-executor exec"[10083] was attempted by ""[11414] [ 407.002990][T11393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.198642][T11393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.241328][T11393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.345149][T11393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.459797][ T9712] Bluetooth: hci10: command tx timeout [ 407.485228][T11393] hsr_slave_0: entered promiscuous mode [ 407.492681][T11393] hsr_slave_1: entered promiscuous mode [ 407.510103][T11393] debugfs: 'hsr0' already exists in 'hsr' [ 407.515955][T11393] Cannot create hsr debugfs directory [ 407.770932][T11384] ima: policy update failed [ 407.778506][ T30] audit: type=1802 audit(4294967404.920:17): pid=11384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.963" res=0 errno=0 [ 407.924675][T11393] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.096805][T11393] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.288122][T11393] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.472738][T11393] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.266111][T11434] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 409.367538][T11393] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 409.393420][T11393] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 409.423381][T11393] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 409.453481][T11393] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 409.539909][ T9712] Bluetooth: hci10: command tx timeout [ 409.944703][T11393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.057209][T11393] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.072750][ T9488] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.079899][ T9488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.163989][ T9528] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.171192][ T9528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.689058][T11453] netlink: 342 bytes leftover after parsing attributes in process `syz.3.974'. [ 411.429240][T11460] syz.3.975 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=2, oom_score_adj=1000 [ 411.454084][T11460] CPU: 1 UID: 0 PID: 11460 Comm: syz.3.975 Not tainted syzkaller #0 PREEMPT(full) [ 411.454119][T11460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 411.454134][T11460] Call Trace: [ 411.454142][T11460] [ 411.454151][T11460] dump_stack_lvl+0x16c/0x1f0 [ 411.454184][T11460] dump_header+0x101/0x930 [ 411.454227][T11460] oom_kill_process+0x272/0xa40 [ 411.454271][T11460] out_of_memory+0x350/0x1700 [ 411.454304][T11460] ? __pfx_out_of_memory+0x10/0x10 [ 411.454339][T11460] mem_cgroup_out_of_memory+0x118/0x130 [ 411.454375][T11460] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 411.454420][T11460] ? do_raw_spin_unlock+0x172/0x230 [ 411.454464][T11460] try_charge_memcg+0x687/0xd40 [ 411.454501][T11460] ? __pfx_try_charge_memcg+0x10/0x10 [ 411.454529][T11460] ? find_held_lock+0x2b/0x80 [ 411.454555][T11460] ? rcu_read_unlock+0x17/0x60 [ 411.454597][T11460] obj_cgroup_charge_account+0x292/0x500 [ 411.454635][T11460] __memcg_slab_post_alloc_hook+0x2ea/0x940 [ 411.454672][T11460] ? kasan_unpoison+0x27/0x60 [ 411.454702][T11460] __kmalloc_cache_noprof+0x593/0x780 [ 411.454739][T11460] ? ipv6_add_dev+0x6af/0x15f0 [ 411.454772][T11460] ? ipv6_add_dev+0x6af/0x15f0 [ 411.454797][T11460] ipv6_add_dev+0x6af/0x15f0 [ 411.454831][T11460] addrconf_notify+0x53e/0x19e0 [ 411.454865][T11460] ? ip6mr_device_event+0x1bc/0x230 [ 411.454908][T11460] notifier_call_chain+0xbc/0x410 [ 411.454938][T11460] ? __pfx_addrconf_notify+0x10/0x10 [ 411.454980][T11460] call_netdevice_notifiers_info+0xbe/0x140 [ 411.455024][T11460] register_netdevice+0x182e/0x2270 [ 411.455061][T11460] ? __pfx_register_netdevice+0x10/0x10 [ 411.455091][T11460] ? alloc_netdev_mqs+0xe17/0x1550 [ 411.455125][T11460] register_netdev+0x34/0x50 [ 411.455154][T11460] ip6gre_init_net+0x2bd/0x440 [ 411.455190][T11460] ? __pfx_ip6gre_init_net+0x10/0x10 [ 411.455222][T11460] ops_init+0x1df/0x5f0 [ 411.455255][T11460] setup_net+0x100/0x390 [ 411.455284][T11460] ? __pfx_setup_net+0x10/0x10 [ 411.455314][T11460] ? debug_mutex_init+0x37/0x70 [ 411.455343][T11460] copy_net_ns+0x2f8/0x690 [ 411.455379][T11460] create_new_namespaces+0x3ea/0xa90 [ 411.455416][T11460] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 411.455447][T11460] ksys_unshare+0x45b/0xa40 [ 411.455479][T11460] ? __pfx_ksys_unshare+0x10/0x10 [ 411.455514][T11460] ? do_user_addr_fault+0x843/0x1370 [ 411.455547][T11460] __x64_sys_unshare+0x31/0x40 [ 411.455576][T11460] do_syscall_64+0xcd/0xfa0 [ 411.455606][T11460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.455631][T11460] RIP: 0033:0x7fe8d3d8eec9 [ 411.455651][T11460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.455674][T11460] RSP: 002b:00007fe8d4b8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 411.455698][T11460] RAX: ffffffffffffffda RBX: 00007fe8d3fe5fa0 RCX: 00007fe8d3d8eec9 [ 411.455715][T11460] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 411.455730][T11460] RBP: 00007fe8d3e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 411.455744][T11460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.455758][T11460] R13: 00007fe8d3fe6038 R14: 00007fe8d3fe5fa0 R15: 00007ffcff7aa3a8 [ 411.455795][T11460] [ 411.455804][T11460] memory: usage 3072kB, limit 3072kB, failcnt 16318 [ 411.619922][ T9712] Bluetooth: hci10: command tx timeout [ 411.811689][T11467] netlink: 268 bytes leftover after parsing attributes in process `syz.9.976'. [ 411.860804][T11460] memory+swap: usage 3256kB, limit 9007199254740988kB, failcnt 0 [ 411.894142][T11460] kmem: usage 3060kB, limit 9007199254740988kB, failcnt 0 [ 411.905948][T11460] Memory cgroup stats for /syz3: [ 411.906052][T11460] cache 0 [ 411.922247][T11460] rss 0 [ 411.925139][T11460] rss_huge 0 [ 411.928332][T11460] shmem 0 [ 411.931364][T11460] mapped_file 0 [ 411.934830][T11460] dirty 0 [ 411.937773][T11460] writeback 0 [ 411.941290][T11460] workingset_refault_anon 1338 [ 411.946111][T11460] workingset_refault_file 6972 [ 411.950982][T11460] swap 188416 [ 411.954276][T11460] swapcached 12288 [ 411.958005][T11460] pgpgin 74993 [ 411.961490][T11460] pgpgout 81122 [ 411.964981][T11460] pgfault 61567 [ 411.968518][T11460] pgmajfault 1123 [ 411.972318][T11460] inactive_anon 12288 [ 411.976303][T11460] active_anon 0 [ 411.991518][T11460] inactive_file 0 [ 411.995194][T11460] active_file 0 [ 411.998666][T11460] unevictable 0 [ 412.008109][T11460] hierarchical_memory_limit 3145728 [ 412.016327][T11460] hierarchical_memsw_limit 9223372036854771712 [ 412.036793][T11460] total_cache 0 [ 412.040604][T11460] total_rss 0 [ 412.043914][T11460] total_rss_huge 0 [ 412.047752][T11460] total_shmem 0 [ 412.052267][T11460] total_mapped_file 0 [ 412.052281][T11460] total_dirty 0 [ 412.052291][T11460] total_writeback 0 [ 412.057384][T11460] total_workingset_refault_anon 1338 [ 412.057394][T11460] total_workingset_refault_file 6972 [ 412.057401][T11460] total_swap 188416 [ 412.057406][T11460] total_swapcached 12288 [ 412.057412][T11460] total_pgpgin 74993 [ 412.057418][T11460] total_pgpgout 81122 [ 412.057423][T11460] total_pgfault 61567 [ 412.057429][T11460] total_pgmajfault 1123 [ 412.057434][T11460] total_inactive_anon 12288 [ 412.057440][T11460] total_active_anon 0 [ 412.057446][T11460] total_inactive_file 0 [ 412.057452][T11460] total_active_file 0 [ 412.057457][T11460] total_unevictable 0 [ 412.057463][T11460] anon_cost 0 [ 412.057468][T11460] file_cost 0 [ 412.057474][T11460] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.975,pid=11458,uid=0 [ 412.058615][T11460] Memory cgroup out of memory: Killed process 11458 (syz.3.975) total-vm:104128kB, anon-rss:1244kB, file-rss:21924kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 412.279359][T11472] ptrace attach of "./syz-executor exec"[10457] was attempted by ""[11472] [ 412.353379][T11467] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 412.420354][T11467] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 412.446430][T11467] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 412.558531][T11393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.733374][T11393] veth0_vlan: entered promiscuous mode [ 412.747533][T11393] veth1_vlan: entered promiscuous mode [ 412.832732][T11393] veth0_macvtap: entered promiscuous mode [ 412.846275][T11393] veth1_macvtap: entered promiscuous mode [ 412.881921][T11393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.895694][T11393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.934278][T11475] ima: policy update failed [ 412.960463][ T30] audit: type=1802 audit(4294967410.080:18): pid=11475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.9.978" res=0 errno=0 [ 412.982007][T10203] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.017234][T10203] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.035668][T10203] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.044997][T10203] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.331839][T10203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.372755][T10203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.644415][ T9528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.671755][ T9528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.860720][ T9712] Bluetooth: hci10: command tx timeout [ 414.290466][T11498] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input19 [ 414.463610][T11486] syz.3.979 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 414.475561][T11486] CPU: 1 UID: 0 PID: 11486 Comm: syz.3.979 Not tainted syzkaller #0 PREEMPT(full) [ 414.475591][T11486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 414.475601][T11486] Call Trace: [ 414.475607][T11486] [ 414.475612][T11486] dump_stack_lvl+0x16c/0x1f0 [ 414.475633][T11486] dump_header+0x101/0x930 [ 414.475658][T11486] oom_kill_process+0x272/0xa40 [ 414.475682][T11486] out_of_memory+0x350/0x1700 [ 414.475700][T11486] ? __pfx_out_of_memory+0x10/0x10 [ 414.475719][T11486] mem_cgroup_out_of_memory+0x118/0x130 [ 414.475740][T11486] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 414.475765][T11486] ? do_raw_spin_unlock+0x172/0x230 [ 414.475790][T11486] try_charge_memcg+0x687/0xd40 [ 414.475810][T11486] ? __pfx_try_charge_memcg+0x10/0x10 [ 414.475827][T11486] ? __print_lock_name+0x81/0xe0 [ 414.475842][T11486] ? rcu_read_unlock+0x17/0x60 [ 414.475864][T11486] charge_memcg+0x8a/0x230 [ 414.475881][T11486] __mem_cgroup_charge+0x2b/0x1e0 [ 414.475900][T11486] do_pte_missing+0x222a/0x3ba0 [ 414.475921][T11486] ? find_held_lock+0x2b/0x80 [ 414.475940][T11486] __handle_mm_fault+0x1556/0x2aa0 [ 414.475966][T11486] ? __pfx___handle_mm_fault+0x10/0x10 [ 414.475987][T11486] ? __pte_offset_map_lock+0x174/0x310 [ 414.476004][T11486] ? find_held_lock+0x2b/0x80 [ 414.476024][T11486] ? follow_page_pte+0x5cf/0x1390 [ 414.476045][T11486] handle_mm_fault+0x589/0xd10 [ 414.476070][T11486] __get_user_pages+0x54e/0x3530 [ 414.476096][T11486] ? __pfx___get_user_pages+0x10/0x10 [ 414.476119][T11486] populate_vma_page_range+0x267/0x3f0 [ 414.476139][T11486] ? __pfx_populate_vma_page_range+0x10/0x10 [ 414.476157][T11486] ? __pfx_find_vma_intersection+0x10/0x10 [ 414.476179][T11486] __mm_populate+0x1d8/0x380 [ 414.476199][T11486] ? __pfx___mm_populate+0x10/0x10 [ 414.476228][T11486] ? up_write+0x209/0x520 [ 414.476250][T11486] vm_mmap_pgoff+0x37f/0x470 [ 414.476270][T11486] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 414.476291][T11486] ? __x64_sys_futex+0x1e0/0x4c0 [ 414.476309][T11486] ? __x64_sys_futex+0x1e9/0x4c0 [ 414.476329][T11486] ksys_mmap_pgoff+0x7d/0x5c0 [ 414.476345][T11486] ? xfd_validate_state+0x61/0x180 [ 414.476368][T11486] __x64_sys_mmap+0x125/0x190 [ 414.476391][T11486] do_syscall_64+0xcd/0xfa0 [ 414.476408][T11486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.476422][T11486] RIP: 0033:0x7fe8d3d8eec9 [ 414.476434][T11486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.476447][T11486] RSP: 002b:00007fe8d4b49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 414.476461][T11486] RAX: ffffffffffffffda RBX: 00007fe8d3fe6180 RCX: 00007fe8d3d8eec9 [ 414.476470][T11486] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 414.476478][T11486] RBP: 00007fe8d3e11f91 R08: 0000000000000002 R09: 0000000000008000 [ 414.476486][T11486] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 414.476495][T11486] R13: 00007fe8d3fe6218 R14: 00007fe8d3fe6180 R15: 00007ffcff7aa3a8 [ 414.476514][T11486] [ 414.476520][T11486] memory: usage 3072kB, limit 3072kB, failcnt 17305 [ 414.929634][T11486] memory+swap: usage 5244kB, limit 9007199254740988kB, failcnt 0 [ 415.001250][T11501] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 415.151112][T11486] kmem: usage 2772kB, limit 9007199254740988kB, failcnt 0 [ 415.158239][T11486] Memory cgroup stats for /syz3: [ 415.158397][T11486] cache 94208 [ 415.246194][T11486] rss 0 [ 415.248986][T11486] rss_huge 0 [ 415.276252][T11486] shmem 0 [ 415.279219][T11486] mapped_file 8192 [ 415.303242][T11486] dirty 0 [ 415.315605][T11486] writeback 0 [ 415.318900][T11486] workingset_refault_anon 1396 [ 415.324195][T11486] workingset_refault_file 7178 [ 415.329779][T11486] swap 2224128 [ 415.340302][T11486] swapcached 4096 [ 415.344046][T11486] pgpgin 75791 [ 415.347409][T11486] pgpgout 81899 [ 415.351895][T11486] pgfault 62786 [ 415.355500][T11486] pgmajfault 1176 [ 415.359132][T11486] inactive_anon 4096 [ 415.363828][T11486] active_anon 0 [ 415.367437][T11486] inactive_file 86016 [ 415.372188][T11486] active_file 8192 [ 415.383830][T11486] unevictable 0 [ 415.387296][T11486] hierarchical_memory_limit 3145728 [ 415.408855][T11486] hierarchical_memsw_limit 9223372036854771712 [ 415.445884][T11486] total_cache 94208 [ 415.456003][T11486] total_rss 0 [ 415.466798][T11486] total_rss_huge 0 [ 415.471254][T11486] total_shmem 0 [ 415.476228][T11486] total_mapped_file 8192 [ 415.488347][T11486] total_dirty 0 [ 415.493088][T11486] total_writeback 0 [ 415.498091][T11486] total_workingset_refault_anon 1396 [ 415.507260][T11486] total_workingset_refault_file 7178 [ 415.529750][T11486] total_swap 2224128 [ 415.543482][T11486] total_swapcached 4096 [ 415.555222][T11486] total_pgpgin 75791 [ 415.566505][T11486] total_pgpgout 81899 [ 415.589985][T11486] total_pgfault 62786 [ 415.600416][T11486] total_pgmajfault 1176 [ 415.608802][T11486] total_inactive_anon 4096 [ 415.620283][T11486] total_active_anon 0 [ 415.629199][T11486] total_inactive_file 86016 [ 415.647243][T11486] total_active_file 8192 [ 415.659123][T11486] total_unevictable 0 [ 415.671691][T11486] anon_cost 0 [ 415.675090][T11486] file_cost 0 [ 415.698208][T11486] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.979,pid=11488,uid=0 [ 415.751615][T11486] Memory cgroup out of memory: Killed process 11488 (syz.3.979) total-vm:108360kB, anon-rss:1244kB, file-rss:22328kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 415.950058][T11510] zswap: compressor not available [ 416.199276][T11526] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 417.972248][T11545] program syz.9.991 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 418.107693][T11534] syz.1.989 invoked oom-killer: gfp_mask=0x100dc0(GFP_USER|__GFP_ZERO), order=0, oom_score_adj=1000 [ 418.156571][T11534] CPU: 0 UID: 0 PID: 11534 Comm: syz.1.989 Not tainted syzkaller #0 PREEMPT(full) [ 418.156613][T11534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 418.156628][T11534] Call Trace: [ 418.156637][T11534] [ 418.156647][T11534] dump_stack_lvl+0x16c/0x1f0 [ 418.156681][T11534] dump_header+0x101/0x930 [ 418.156723][T11534] oom_kill_process+0x272/0xa40 [ 418.156765][T11534] out_of_memory+0x350/0x1700 [ 418.156799][T11534] ? __pfx_out_of_memory+0x10/0x10 [ 418.156834][T11534] mem_cgroup_out_of_memory+0x118/0x130 [ 418.156871][T11534] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 418.156916][T11534] ? do_raw_spin_unlock+0x172/0x230 [ 418.156960][T11534] try_charge_memcg+0x687/0xd40 [ 418.156998][T11534] ? __pfx_try_charge_memcg+0x10/0x10 [ 418.157028][T11534] ? __print_lock_name+0x81/0xe0 [ 418.157055][T11534] ? rcu_read_unlock+0x17/0x60 [ 418.157096][T11534] charge_memcg+0x8a/0x230 [ 418.157125][T11534] __mem_cgroup_charge+0x2b/0x1e0 [ 418.157161][T11534] filemap_add_folio+0xe6/0x610 [ 418.157189][T11534] ? __pfx_filemap_add_folio+0x10/0x10 [ 418.157226][T11534] __filemap_get_folio+0x510/0xc30 [ 418.157261][T11534] ioctx_alloc+0x761/0x2120 [ 418.157310][T11534] ? __pfx_ioctx_alloc+0x10/0x10 [ 418.157333][T11534] ? __might_fault+0x13b/0x190 [ 418.157368][T11534] __x64_sys_io_setup+0xc9/0x210 [ 418.157399][T11534] do_syscall_64+0xcd/0xfa0 [ 418.157429][T11534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.157454][T11534] RIP: 0033:0x7f397dd8eec9 [ 418.157474][T11534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.157498][T11534] RSP: 002b:00007f397eccd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 418.157522][T11534] RAX: ffffffffffffffda RBX: 00007f397dfe6090 RCX: 00007f397dd8eec9 [ 418.157539][T11534] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000007ffe [ 418.157555][T11534] RBP: 00007f397de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 418.157570][T11534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.157590][T11534] R13: 00007f397dfe6128 R14: 00007f397dfe6090 R15: 00007ffdf633c5c8 [ 418.157629][T11534] [ 418.387975][T11534] memory: usage 3072kB, limit 3072kB, failcnt 119029 [ 418.430790][T11534] memory+swap: usage 3272kB, limit 9007199254740988kB, failcnt 0 [ 418.448438][T11534] kmem: usage 2616kB, limit 9007199254740988kB, failcnt 0 [ 418.502162][T11534] Memory cgroup stats for /syz1: [ 418.502415][T11534] cache 450560 [ 418.519725][T11534] rss 0 [ 418.522591][T11534] rss_huge 0 [ 418.525989][T11534] shmem 0 [ 418.528946][T11534] mapped_file 0 [ 418.532673][T11534] dirty 0 [ 418.535619][T11534] writeback 0 [ 418.539058][T11534] workingset_refault_anon 9729 [ 418.543959][T11534] workingset_refault_file 30591 [ 418.548823][T11534] swap 204800 [ 418.552374][T11534] swapcached 16384 [ 418.556096][T11534] pgpgin 190510 [ 418.559559][T11534] pgpgout 198061 [ 418.564882][T11534] pgfault 138474 [ 418.568444][T11534] pgmajfault 5225 [ 418.572118][T11534] inactive_anon 16384 [ 418.577231][T11534] active_anon 0 [ 418.584296][T11534] inactive_file 450560 [ 418.588637][T11534] active_file 0 [ 418.592962][T11534] unevictable 0 [ 418.596438][T11534] hierarchical_memory_limit 3145728 [ 418.609204][T11534] hierarchical_memsw_limit 9223372036854771712 [ 418.651486][T11534] total_cache 450560 [ 418.655396][T11534] total_rss 0 [ 418.673512][T11534] total_rss_huge 0 [ 418.678834][T11534] total_shmem 0 [ 418.696916][T11534] total_mapped_file 0 [ 418.725717][T11534] total_dirty 0 [ 418.735845][T11534] total_writeback 0 [ 418.747516][T11534] total_workingset_refault_anon 9729 [ 418.766091][T11534] total_workingset_refault_file 30591 [ 418.782195][T11534] total_swap 204800 [ 418.794996][T11534] total_swapcached 16384 [ 418.833786][T11534] total_pgpgin 190510 [ 418.837788][T11534] total_pgpgout 198061 [ 418.859862][T11534] total_pgfault 138474 [ 418.876487][T11534] total_pgmajfault 5225 [ 418.889837][T11534] total_inactive_anon 16384 [ 418.897116][T11534] total_active_anon 0 [ 418.908002][T11534] total_inactive_file 450560 [ 418.919800][T11534] total_active_file 0 [ 418.923797][T11534] total_unevictable 0 [ 418.927844][T11534] anon_cost 0 [ 418.939862][T11534] file_cost 0 [ 418.943255][T11534] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.989,pid=11532,uid=0 [ 418.962484][T11534] Memory cgroup out of memory: Killed process 11532 (syz.1.989) total-vm:108568kB, anon-rss:1192kB, file-rss:26600kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 419.815199][T11568] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3877809889.3495757300.1015113928), cmd(3) [ 420.827385][T11576] syz.3.999 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 420.942121][T11576] CPU: 1 UID: 0 PID: 11576 Comm: syz.3.999 Not tainted syzkaller #0 PREEMPT(full) [ 420.942153][T11576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 420.942162][T11576] Call Trace: [ 420.942167][T11576] [ 420.942175][T11576] dump_stack_lvl+0x16c/0x1f0 [ 420.942195][T11576] dump_header+0x101/0x930 [ 420.942222][T11576] oom_kill_process+0x272/0xa40 [ 420.942246][T11576] out_of_memory+0x350/0x1700 [ 420.942264][T11576] ? __pfx_out_of_memory+0x10/0x10 [ 420.942283][T11576] mem_cgroup_out_of_memory+0x118/0x130 [ 420.942304][T11576] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 420.942335][T11576] ? do_raw_spin_unlock+0x172/0x230 [ 420.942361][T11576] try_charge_memcg+0x687/0xd40 [ 420.942385][T11576] ? __pfx_try_charge_memcg+0x10/0x10 [ 420.942402][T11576] ? find_held_lock+0x2b/0x80 [ 420.942416][T11576] ? rcu_read_unlock+0x17/0x60 [ 420.942439][T11576] obj_cgroup_charge_account+0x292/0x500 [ 420.942460][T11576] __memcg_slab_post_alloc_hook+0x2ea/0x940 [ 420.942481][T11576] ? kasan_unpoison+0x27/0x60 [ 420.942498][T11576] __kmalloc_node_track_caller_noprof+0x698/0x8a0 [ 420.942515][T11576] ? __pfx___register_sysctl_table+0x10/0x10 [ 420.942535][T11576] ? __devinet_sysctl_register+0xbc/0x360 [ 420.942560][T11576] ? kmemdup_noprof+0x29/0x60 [ 420.942573][T11576] kmemdup_noprof+0x29/0x60 [ 420.942587][T11576] __devinet_sysctl_register+0xbc/0x360 [ 420.942608][T11576] ? __pfx_neigh_sysctl_register+0x10/0x10 [ 420.942624][T11576] ? inetdev_init+0x245/0x5a0 [ 420.942642][T11576] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 420.942663][T11576] ? copy_net_ns+0x2f8/0x690 [ 420.942680][T11576] ? create_new_namespaces+0x3ea/0xa90 [ 420.942694][T11576] ? unshare_nsproxy_namespaces+0xc0/0x1f0 [ 420.942709][T11576] ? ksys_unshare+0x45b/0xa40 [ 420.942725][T11576] ? __x64_sys_unshare+0x31/0x40 [ 420.942741][T11576] ? do_syscall_64+0xcd/0xfa0 [ 420.942755][T11576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.942771][T11576] devinet_sysctl_register+0x17b/0x200 [ 420.942793][T11576] inetdev_init+0x2b8/0x5a0 [ 420.942813][T11576] inetdev_event+0xc5f/0x18a0 [ 420.942834][T11576] ? ib_netdevice_event+0xfc/0x330 [ 420.942851][T11576] ? __pfx_inetdev_event+0x10/0x10 [ 420.942871][T11576] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 420.942897][T11576] notifier_call_chain+0xbc/0x410 [ 420.942914][T11576] ? __pfx_inetdev_event+0x10/0x10 [ 420.942937][T11576] call_netdevice_notifiers_info+0xbe/0x140 [ 420.942958][T11576] register_netdevice+0x182e/0x2270 [ 420.942981][T11576] ? __pfx_register_netdevice+0x10/0x10 [ 420.942999][T11576] ? alloc_netdev_mqs+0xe17/0x1550 [ 420.943018][T11576] register_netdev+0x34/0x50 [ 420.943034][T11576] ip6gre_init_net+0x2bd/0x440 [ 420.943055][T11576] ? __pfx_ip6gre_init_net+0x10/0x10 [ 420.943073][T11576] ops_init+0x1df/0x5f0 [ 420.943091][T11576] setup_net+0x100/0x390 [ 420.943108][T11576] ? __pfx_setup_net+0x10/0x10 [ 420.943125][T11576] ? debug_mutex_init+0x37/0x70 [ 420.943141][T11576] copy_net_ns+0x2f8/0x690 [ 420.943161][T11576] create_new_namespaces+0x3ea/0xa90 [ 420.943181][T11576] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 420.943199][T11576] ksys_unshare+0x45b/0xa40 [ 420.943217][T11576] ? __pfx_ksys_unshare+0x10/0x10 [ 420.943236][T11576] ? xfd_validate_state+0x61/0x180 [ 420.943261][T11576] __x64_sys_unshare+0x31/0x40 [ 420.943279][T11576] do_syscall_64+0xcd/0xfa0 [ 420.943295][T11576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.943309][T11576] RIP: 0033:0x7fe8d3d8eec9 [ 420.943321][T11576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.943339][T11576] RSP: 002b:00007fe8d4b8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 420.943353][T11576] RAX: ffffffffffffffda RBX: 00007fe8d3fe5fa0 RCX: 00007fe8d3d8eec9 [ 420.943362][T11576] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 420.943370][T11576] RBP: 00007fe8d3e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 420.943378][T11576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.943386][T11576] R13: 00007fe8d3fe6038 R14: 00007fe8d3fe5fa0 R15: 00007ffcff7aa3a8 [ 420.943406][T11576] [ 421.652876][T11576] memory: usage 3072kB, limit 3072kB, failcnt 18789 [ 421.659537][T11576] memory+swap: usage 3260kB, limit 9007199254740988kB, failcnt 0 [ 421.680977][ T32] oom_reaper: reaped process 11532 (syz.1.989), now anon-rss:16kB, file-rss:0kB, shmem-rss:0kB [ 421.776522][T11576] kmem: usage 3056kB, limit 9007199254740988kB, failcnt 0 [ 421.789843][T11576] Memory cgroup stats for /syz3: [ 421.790439][T11576] cache 0 [ 421.798465][T11576] rss 0 [ 421.809460][T11576] rss_huge 0 [ 421.819964][T11576] shmem 0 [ 421.824841][T11576] mapped_file 0 [ 421.840909][T11576] dirty 0 [ 421.853587][T11576] writeback 0 [ 421.861696][T11576] workingset_refault_anon 1530 [ 421.895946][T11576] workingset_refault_file 7475 [ 421.909787][T11576] swap 192512 [ 421.919237][T11576] swapcached 12288 [ 421.924719][T11576] pgpgin 77405 [ 421.930034][T11576] pgpgout 83534 [ 421.933514][T11576] pgfault 64536 [ 421.949785][T11576] pgmajfault 1289 [ 421.955409][T11576] inactive_anon 12288 [ 421.959473][T11576] active_anon 0 [ 421.963501][T11576] inactive_file 0 [ 421.967126][T11576] active_file 0 [ 421.973226][T11576] unevictable 0 [ 421.976681][T11576] hierarchical_memory_limit 3145728 [ 421.986633][T11576] hierarchical_memsw_limit 9223372036854771712 [ 421.993285][T11576] total_cache 0 [ 422.002055][T11576] total_rss 0 [ 422.005334][T11576] total_rss_huge 0 [ 422.010922][T11576] total_shmem 0 [ 422.014378][T11576] total_mapped_file 0 [ 422.018336][T11576] total_dirty 0 [ 422.022656][T11576] total_writeback 0 [ 422.026453][T11576] total_workingset_refault_anon 1530 [ 422.032201][T11576] total_workingset_refault_file 7475 [ 422.045665][T11576] total_swap 192512 [ 422.049483][T11576] total_swapcached 12288 [ 422.054198][T11576] total_pgpgin 77405 [ 422.061584][T11576] total_pgpgout 83534 [ 422.070020][T11576] total_pgfault 64536 [ 422.075783][T11576] total_pgmajfault 1289 [ 422.102869][T11576] total_inactive_anon 12288 [ 422.107388][T11576] total_active_anon 0 [ 422.119965][T11576] total_inactive_file 0 [ 422.124181][T11576] total_active_file 0 [ 422.128170][T11576] total_unevictable 0 [ 422.145501][T11576] anon_cost 0 [ 422.151595][T11576] file_cost 0 [ 422.154915][T11576] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.999,pid=11575,uid=0 [ 422.192809][T11576] Memory cgroup out of memory: Killed process 11575 (syz.3.999) total-vm:104128kB, anon-rss:1244kB, file-rss:22848kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 422.468385][T11584] ima: policy update failed [ 422.483317][ T30] audit: type=1802 audit(4294967419.630:19): pid=11584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1001" res=0 errno=0 [ 424.275580][ T32] oom_reaper: reaped process 11575 (syz.3.999), now anon-rss:8kB, file-rss:21652kB, shmem-rss:0kB [ 425.708149][T10203] EXT4-fs: 2 callbacks suppressed [ 425.708166][T10203] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1376 with max blocks 3 with error 117 [ 425.708409][T11616] ptrace attach of "./syz-executor exec"[11393] was attempted by "./syz-executor exec"[11616] [ 425.717178][T10203] EXT4-fs (sda1): This should not happen!! Data will be lost [ 425.717178][T10203] [ 426.666882][T10604] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1373 with max blocks 3 with error 117 [ 426.680133][T10604] EXT4-fs (sda1): This should not happen!! Data will be lost [ 426.680133][T10604] [ 426.775409][T10604] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1373 with max blocks 1 with error 117 [ 426.790993][T11625] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 426.819850][T10604] EXT4-fs (sda1): This should not happen!! Data will be lost [ 426.819850][T10604] [ 427.121997][T10203] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1372 with max blocks 1 with error 117 [ 427.151077][T10203] EXT4-fs (sda1): This should not happen!! Data will be lost [ 427.151077][T10203] [ 428.242728][T10203] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1373 with max blocks 1 with error 117 [ 428.332736][T10203] EXT4-fs (sda1): This should not happen!! Data will be lost [ 428.332736][T10203] [ 428.908069][T11638] ima: policy update failed [ 428.917108][ T30] audit: type=1802 audit(4294967426.060:20): pid=11638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1013" res=0 errno=0 [ 430.105028][T11656] ima: policy update failed [ 430.140270][ T30] audit: type=1802 audit(4294967427.280:21): pid=11656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1016" res=0 errno=0 [ 430.201302][T11659] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 430.289795][T11660] ptrace attach of "./syz-executor exec"[11393] was attempted by ""[11660] [ 431.197631][T11662] ima: policy update failed [ 431.212765][ T30] audit: type=1802 audit(4294967428.360:22): pid=11662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1018" res=0 errno=0 [ 433.581535][T11691] ptrace attach of "./syz-executor exec"[11393] was attempted by "./syz-executor exec"[11691] [ 434.235395][T11688] syz.1.1025 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=2, oom_score_adj=1000 [ 434.252161][T11688] CPU: 1 UID: 0 PID: 11688 Comm: syz.1.1025 Not tainted syzkaller #0 PREEMPT(full) [ 434.252193][T11688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 434.252205][T11688] Call Trace: [ 434.252212][T11688] [ 434.252221][T11688] dump_stack_lvl+0x16c/0x1f0 [ 434.252251][T11688] dump_header+0x101/0x930 [ 434.252291][T11688] oom_kill_process+0x272/0xa40 [ 434.252328][T11688] out_of_memory+0x350/0x1700 [ 434.252356][T11688] ? __pfx_out_of_memory+0x10/0x10 [ 434.252384][T11688] mem_cgroup_out_of_memory+0x118/0x130 [ 434.252416][T11688] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 434.252453][T11688] ? do_raw_spin_unlock+0x172/0x230 [ 434.252490][T11688] try_charge_memcg+0x687/0xd40 [ 434.252521][T11688] ? __pfx_try_charge_memcg+0x10/0x10 [ 434.252544][T11688] ? find_held_lock+0x2b/0x80 [ 434.252566][T11688] ? rcu_read_unlock+0x17/0x60 [ 434.252600][T11688] obj_cgroup_charge_account+0x292/0x500 [ 434.252630][T11688] __memcg_slab_post_alloc_hook+0x2ea/0x940 [ 434.252661][T11688] ? kasan_unpoison+0x27/0x60 [ 434.252686][T11688] __kmalloc_noprof+0x67e/0x880 [ 434.252717][T11688] ? __register_sysctl_table+0xb3/0x1900 [ 434.252751][T11688] ? __register_sysctl_table+0xb3/0x1900 [ 434.252779][T11688] __register_sysctl_table+0xb3/0x1900 [ 434.252807][T11688] ? is_module_address+0x5f/0xf0 [ 434.252841][T11688] ? __pfx___register_sysctl_table+0x10/0x10 [ 434.252868][T11688] ? is_module_address+0x69/0xf0 [ 434.252894][T11688] ? register_net_sysctl_sz+0x228/0x3e0 [ 434.252929][T11688] __addrconf_sysctl_register+0x1a2/0x360 [ 434.252958][T11688] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 434.252987][T11688] ? lockdep_init_map_type+0x5c/0x280 [ 434.253013][T11688] ? mld_in_v1_mode+0x2b2/0x3a0 [ 434.253046][T11688] addrconf_sysctl_register+0x15f/0x1f0 [ 434.253072][T11688] ipv6_add_dev+0xb31/0x15f0 [ 434.253100][T11688] addrconf_notify+0x53e/0x19e0 [ 434.253128][T11688] ? ip6mr_device_event+0x1bc/0x230 [ 434.253171][T11688] notifier_call_chain+0xbc/0x410 [ 434.253196][T11688] ? __pfx_addrconf_notify+0x10/0x10 [ 434.253231][T11688] call_netdevice_notifiers_info+0xbe/0x140 [ 434.253263][T11688] register_netdevice+0x182e/0x2270 [ 434.253295][T11688] ? __pfx_register_netdevice+0x10/0x10 [ 434.253330][T11688] register_netdev+0x34/0x50 [ 434.253354][T11688] sit_init_net+0x286/0x630 [ 434.253386][T11688] ? __pfx_sit_init_net+0x10/0x10 [ 434.253415][T11688] ops_init+0x1df/0x5f0 [ 434.253443][T11688] setup_net+0x100/0x390 [ 434.253467][T11688] ? __pfx_setup_net+0x10/0x10 [ 434.253492][T11688] ? debug_mutex_init+0x37/0x70 [ 434.253517][T11688] copy_net_ns+0x2f8/0x690 [ 434.253546][T11688] create_new_namespaces+0x3ea/0xa90 [ 434.253577][T11688] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 434.253603][T11688] ksys_unshare+0x45b/0xa40 [ 434.253630][T11688] ? __pfx_ksys_unshare+0x10/0x10 [ 434.253657][T11688] ? xfd_validate_state+0x61/0x180 [ 434.253694][T11688] __x64_sys_unshare+0x31/0x40 [ 434.253719][T11688] do_syscall_64+0xcd/0xfa0 [ 434.253744][T11688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.253765][T11688] RIP: 0033:0x7f397dd8eec9 [ 434.253783][T11688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.253802][T11688] RSP: 002b:00007f397ecee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 434.253822][T11688] RAX: ffffffffffffffda RBX: 00007f397dfe5fa0 RCX: 00007f397dd8eec9 [ 434.253836][T11688] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 434.253848][T11688] RBP: 00007f397de11f91 R08: 0000000000000000 R09: 0000000000000000 [ 434.253861][T11688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.253873][T11688] R13: 00007f397dfe6038 R14: 00007f397dfe5fa0 R15: 00007ffdf633c5c8 [ 434.253904][T11688] [ 434.253918][T11688] memory: usage 3068kB, limit 3072kB, failcnt 126656 [ 434.631671][T11688] memory+swap: usage 3248kB, limit 9007199254740988kB, failcnt 0 [ 434.644881][T11688] kmem: usage 3048kB, limit 9007199254740988kB, failcnt 0 [ 434.653057][T11688] Memory cgroup stats for /syz1: [ 434.653222][T11688] cache 0 [ 434.661516][T11688] rss 8192 [ 434.665513][T11688] rss_huge 0 [ 434.668744][T11688] shmem 0 [ 434.672761][T11688] mapped_file 0 [ 434.676248][T11688] dirty 0 [ 434.679189][T11688] writeback 0 [ 434.685912][T11688] workingset_refault_anon 11699 [ 434.691176][T11688] workingset_refault_file 32681 [ 434.696037][T11688] swap 180224 [ 434.704426][T11688] swapcached 24576 [ 434.708178][T11688] pgpgin 198553 [ 434.712031][T11688] pgpgout 206212 [ 434.715597][T11688] pgfault 148642 [ 434.719175][T11688] pgmajfault 6273 [ 434.723210][T11688] inactive_anon 24576 [ 434.727202][T11688] active_anon 0 [ 434.730826][T11688] inactive_file 0 [ 434.743121][T11688] active_file 0 [ 434.746665][T11688] unevictable 0 [ 434.751916][T11688] hierarchical_memory_limit 3145728 [ 434.757408][T11688] hierarchical_memsw_limit 9223372036854771712 [ 434.764093][T11688] total_cache 0 [ 434.767583][T11688] total_rss 8192 [ 434.773011][T11688] total_rss_huge 0 [ 434.777454][T11688] total_shmem 0 [ 434.781299][T11688] total_mapped_file 0 [ 434.786009][T11688] total_dirty 0 [ 434.789503][T11688] total_writeback 0 [ 434.794943][T11688] total_workingset_refault_anon 11699 [ 434.800606][T11688] total_workingset_refault_file 32681 [ 434.806008][T11688] total_swap 180224 [ 434.813739][T11688] total_swapcached 24576 [ 434.817978][T11688] total_pgpgin 198553 [ 434.822934][T11688] total_pgpgout 206212 [ 434.827237][T11688] total_pgfault 148642 [ 434.831772][T11688] total_pgmajfault 6273 [ 434.836345][T11688] total_inactive_anon 24576 [ 434.847762][T11688] total_active_anon 0 [ 434.852080][T11688] total_inactive_file 0 [ 434.856306][T11688] total_active_file 0 [ 434.863149][T11688] total_unevictable 0 [ 434.867367][T11688] anon_cost 0 [ 434.871775][T11688] file_cost 0 [ 434.875060][T11688] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1025,pid=11687,uid=0 [ 434.891457][T11688] Memory cgroup out of memory: Killed process 11687 (syz.1.1025) total-vm:135052kB, anon-rss:1140kB, file-rss:22924kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 435.529476][T11698] ima: policy update failed [ 435.536309][T11703] ptrace attach of "./syz-executor exec"[10457] was attempted by ""[11703] [ 435.554700][ T30] audit: type=1802 audit(4294967432.700:23): pid=11698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1028" res=0 errno=0 [ 436.148277][ T9495] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 436.158830][ T9495] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 436.172812][ T9495] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 436.183166][ T9495] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 436.191625][ T9495] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 436.372243][ T9712] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 436.389719][ T9712] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 436.398876][ T9712] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 436.411951][ T9712] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 436.420237][ T9712] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 436.531187][T11708] chnl_net:caif_netlink_parms(): no params data found [ 436.837339][T11708] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.860450][T11708] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.867820][T11708] bridge_slave_0: entered allmulticast mode [ 436.889466][T11708] bridge_slave_0: entered promiscuous mode [ 436.913457][T11708] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.920986][T11708] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.928307][T11708] bridge_slave_1: entered allmulticast mode [ 436.936735][T11708] bridge_slave_1: entered promiscuous mode [ 437.043329][T11708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.085725][T11708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.184800][T11708] team0: Port device team_slave_0 added [ 437.225261][T11708] team0: Port device team_slave_1 added [ 437.326015][T11708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.333397][T11708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.360447][T11708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.373786][T11708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.381298][T11708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.408460][T11708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.421233][T11712] chnl_net:caif_netlink_parms(): no params data found [ 437.530170][T11708] hsr_slave_0: entered promiscuous mode [ 437.536707][T11708] hsr_slave_1: entered promiscuous mode [ 437.551213][T11708] debugfs: 'hsr0' already exists in 'hsr' [ 437.556953][T11708] Cannot create hsr debugfs directory [ 437.598501][T11712] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.606001][T11712] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.614386][T11712] bridge_slave_0: entered allmulticast mode [ 437.622205][T11712] bridge_slave_0: entered promiscuous mode [ 437.637304][T11712] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.644506][T11712] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.651897][T11712] bridge_slave_1: entered allmulticast mode [ 437.659016][T11712] bridge_slave_1: entered promiscuous mode [ 437.726310][T11712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.746685][T11712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.797320][T11712] team0: Port device team_slave_0 added [ 437.822794][T11712] team0: Port device team_slave_1 added [ 437.879000][T11712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.886078][T11712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.914972][T11712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.954292][T11708] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.977223][T11712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.984502][T11712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.010820][T11712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.045236][T11708] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.086305][T11712] hsr_slave_0: entered promiscuous mode [ 438.094577][T11712] hsr_slave_1: entered promiscuous mode [ 438.101766][T11712] debugfs: 'hsr0' already exists in 'hsr' [ 438.107840][T11712] Cannot create hsr debugfs directory [ 438.132715][T11708] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.205408][T11708] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.260655][ T9712] Bluetooth: hci11: command tx timeout [ 438.332864][T11712] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.410130][T11712] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.465959][T11712] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.500368][ T9712] Bluetooth: hci12: command tx timeout [ 438.544174][T11712] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.682830][T11708] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 438.701068][T11708] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 438.711838][T11708] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 438.741514][T11708] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 438.792694][T11712] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 438.803023][T11712] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 438.815817][T11712] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 438.826177][T11712] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 438.957925][T11708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.993095][T11708] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.005016][T11712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.018611][ T9528] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.025787][ T9528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.041203][T10075] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.048352][T10075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.089137][T11712] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.106289][ T9528] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.113421][ T9528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.135527][ T9528] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.142743][ T9528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.469354][T11708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.532804][T11712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.869552][T11708] veth0_vlan: entered promiscuous mode [ 439.888318][T11708] veth1_vlan: entered promiscuous mode [ 439.937945][T11708] veth0_macvtap: entered promiscuous mode [ 439.953743][T11708] veth1_macvtap: entered promiscuous mode [ 439.992899][T11708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.007041][T11708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.038054][ T9528] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.058851][ T9528] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.078825][ T9528] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.095435][T11712] veth0_vlan: entered promiscuous mode [ 440.109485][ T9528] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.171977][T11712] veth1_vlan: entered promiscuous mode [ 440.187694][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.196150][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.215441][ T9488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.230066][ T9488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.283633][ T9492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.293645][ T9492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.301678][T11712] veth0_macvtap: entered promiscuous mode [ 440.322133][T11712] veth1_macvtap: entered promiscuous mode [ 440.341755][T11764] Bluetooth: hci11: command tx timeout [ 440.364375][T11712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.424131][T11712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.454263][ T9528] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.484816][ T9528] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.502647][ T9528] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.526374][ T9528] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 440.584699][T11764] Bluetooth: hci12: command tx timeout [ 440.735202][T10604] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.786014][T10604] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 440.857615][ T9488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 440.869225][ T9488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.203175][T11777] ptrace attach of "./syz-executor exec"[11393] was attempted by ""[11777] [ 442.263869][T11764] Bluetooth: hci2: command 0x0406 tx timeout [ 442.272431][ T9489] Bluetooth: hci5: command 0x0406 tx timeout [ 442.327137][T11794] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1035'. [ 442.404587][T11798] ovs_ÿþ: entered promiscuous mode [ 442.420156][ T9495] Bluetooth: hci11: command tx timeout [ 442.583754][T11794] ima: policy update failed [ 442.659966][ T9495] Bluetooth: hci12: command tx timeout [ 442.696524][ T30] audit: type=1802 audit(4294967439.730:24): pid=11794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1035" res=0 errno=0 [ 443.405155][T11812] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 443.583746][T11814] ptrace attach of "./syz-executor exec"[11712] was attempted by ""[11814] [ 444.501184][ T9495] Bluetooth: hci11: command tx timeout [ 444.741219][ T9495] Bluetooth: hci12: command tx timeout [ 445.364268][T11835] ptrace attach of "./syz-executor exec"[11393] was attempted by ""[11835] [ 445.724783][T11839] ima: policy update failed [ 445.738063][T11848] netlink: 268 bytes leftover after parsing attributes in process `syz.2.1046'. [ 445.765053][ T30] audit: type=1802 audit(4294967442.890:25): pid=11839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1044" res=0 errno=0 [ 446.017921][T11851] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 447.056747][T11861] ima: policy update failed [ 447.124343][ T30] audit: type=1802 audit(4294967444.270:26): pid=11861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1048" res=0 errno=0 [ 447.347019][T11862] zswap: compressor not available [ 447.459972][ T9495] Bluetooth: hci7: command 0x0406 tx timeout [ 447.471648][ T9495] Bluetooth: hci6: command 0x0406 tx timeout [ 447.602954][T11873] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 447.730646][T11876] ptrace attach of "./syz-executor exec"[10457] was attempted by ""[11876] [ 448.065565][T11880] openvswitch: ovs_ÿþ: Dropping previously announced user features [ 449.101580][T11890] ovs_ÿþ: entered promiscuous mode [ 450.147958][T11899] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 450.600398][T11907] netlink: 25 bytes leftover after parsing attributes in process `syz.5.1063'. [ 450.621708][T11893] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 450.769395][T11898] ima: policy update failed [ 450.858970][ T30] audit: type=1802 audit(4294967448.000:27): pid=11898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1063" res=0 errno=0 [ 452.663535][T11916] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 453.779093][T11948] zswap: compressor not available [ 454.227466][T11959] ovs_ÿþ: entered promiscuous mode [ 454.312328][T11961] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1082'. [ 455.860776][T11971] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3877809889.3495757300.1015113928), cmd(3) [ 455.946591][T11965] ima: policy update failed [ 456.110204][ T30] audit: type=1802 audit(4294967453.230:28): pid=11965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1074" res=0 errno=0 [ 456.276822][T11950] syz.1.1070 (11950) used greatest stack depth: 17912 bytes left [ 456.685387][T11979] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 456.986919][T11985] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 458.247975][T11982] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 458.313133][T12003] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 461.377896][T12036] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 461.845754][T12043] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(3877809889.3495757300.1015113928), cmd(3) [ 462.786150][T12058] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 462.881786][T12033] ima: policy update failed [ 462.939493][ T30] audit: type=1802 audit(4294967460.080:29): pid=12033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1091" res=0 errno=0 [ 464.500500][ T31] INFO: task kworker/u8:16:7230 blocked for more than 143 seconds. [ 464.518665][ T31] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 464.553433][T12070] ima: policy update failed [ 464.554140][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 464.578069][ T30] audit: type=1802 audit(4294967461.720:30): pid=12070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1099" res=0 errno=0 [ 464.614568][ T31] task:kworker/u8:16 state:D stack:22800 pid:7230 tgid:7230 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 464.684773][ T31] Workqueue: netns cleanup_net [ 464.716981][ T31] Call Trace: [ 464.748894][ T31] [ 464.769755][ T31] __schedule+0x1190/0x5de0 [ 464.774301][ T31] ? __pfx___schedule+0x10/0x10 [ 464.779231][ T31] ? find_held_lock+0x2b/0x80 [ 464.784741][ T31] ? schedule+0x2d7/0x3a0 [ 464.803637][ T31] schedule+0xe7/0x3a0 [ 464.807757][ T31] schedule_timeout+0x257/0x290 [ 464.862768][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 464.892765][ T31] ? mark_held_locks+0x49/0x80 [ 464.938166][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.989941][ T31] __wait_for_common+0x2f9/0x4e0 [ 464.994968][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 465.049772][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 465.055895][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 465.068520][T12067] zswap: compressor not available [ 465.109702][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 465.115586][ T31] __flush_workqueue+0x3e2/0x1230 [ 465.141371][ T31] ? __pfx___might_resched+0x10/0x10 [ 465.146726][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 465.168153][ T31] rxrpc_destroy_all_locals+0x40/0x180 [ 465.185143][ T31] rxrpc_exit_net+0x8b/0xc0 [ 465.194367][ T31] ? __pfx_rxrpc_exit_net+0x10/0x10 [ 465.219740][ T31] ops_undo_list+0x2ee/0xab0 [ 465.224404][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 465.229554][ T31] ? cleanup_net+0x347/0x8b0 [ 465.240225][ T31] ? idr_destroy+0x62/0x2e0 [ 465.244825][ T31] cleanup_net+0x41b/0x8b0 [ 465.249280][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 465.278558][ T31] ? rcu_is_watching+0x12/0xc0 [ 465.283527][ T31] process_one_work+0x9cf/0x1b70 [ 465.299809][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 465.304775][ T31] ? __pfx_process_one_work+0x10/0x10 [ 465.321809][ T31] ? assign_work+0x1a0/0x250 [ 465.326464][ T31] worker_thread+0x6c8/0xf10 [ 465.331175][ T31] ? __pfx_worker_thread+0x10/0x10 [ 465.342018][ T31] kthread+0x3c2/0x780 [ 465.346127][ T31] ? __pfx_kthread+0x10/0x10 [ 465.351640][ T31] ? rcu_is_watching+0x12/0xc0 [ 465.362676][ T31] ? __pfx_kthread+0x10/0x10 [ 465.367298][ T31] ret_from_fork+0x675/0x7d0 [ 465.372832][ T31] ? __pfx_kthread+0x10/0x10 [ 465.377441][ T31] ret_from_fork_asm+0x1a/0x30 [ 465.391895][ T31] [ 465.394972][ T31] INFO: task syz.2.732:9806 blocked for more than 144 seconds. [ 465.402677][ T31] Not tainted syzkaller #0 [ 465.407627][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 465.416675][ T31] task:syz.2.732 state:D stack:26376 pid:9806 tgid:9805 ppid:5828 task_flags:0x400140 flags:0x00080003 [ 465.433815][ T31] Call Trace: [ 465.437125][ T31] [ 465.440141][ T31] __schedule+0x1190/0x5de0 [ 465.444703][ T31] ? __pfx___schedule+0x10/0x10 [ 465.449548][ T31] ? find_held_lock+0x2b/0x80 [ 465.460519][ T31] ? schedule+0x2d7/0x3a0 [ 465.465566][ T31] schedule+0xe7/0x3a0 [ 465.469772][ T31] schedule_timeout+0x257/0x290 [ 465.474673][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 465.480360][ T31] ? mark_held_locks+0x49/0x80 [ 465.485149][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 465.490424][ T31] __wait_for_common+0x2f9/0x4e0 [ 465.495378][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 465.500853][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 465.506327][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 465.511596][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 465.517424][ T31] __flush_workqueue+0x3e2/0x1230 [ 465.522594][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 465.528090][ T31] ? rxrpc_discard_prealloc+0xb6/0x9c0 [ 465.533673][ T31] ? rxrpc_release_calls_on_socket+0x237/0x4e0 [ 465.541453][ T31] rxrpc_release+0x2a7/0x6a0 [ 465.546563][ T31] sock_release+0x91/0x1d0 [ 465.551232][ T31] afs_open_socket+0x334/0x400 [ 465.556037][ T31] ? __pfx_afs_open_socket+0x10/0x10 [ 465.561472][ T31] ? proc_create_net_single_write+0x149/0x1b0 [ 465.568186][ T31] ? __pfx_proc_create_net_single_write+0x10/0x10 [ 465.574688][ T31] afs_net_init+0x825/0xb00 [ 465.579220][ T31] ? __pfx_afs_net_init+0x10/0x10 [ 465.584348][ T31] ops_init+0x1df/0x5f0 [ 465.588517][ T31] setup_net+0x100/0x390 [ 465.592796][ T31] ? __pfx_setup_net+0x10/0x10 [ 465.597575][ T31] ? debug_mutex_init+0x37/0x70 [ 465.602527][ T31] copy_net_ns+0x2f8/0x690 [ 465.606963][ T31] create_new_namespaces+0x3ea/0xa90 [ 465.612350][ T31] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 465.618034][ T31] ksys_unshare+0x45b/0xa40 [ 465.622856][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 465.628781][ T31] ? xfd_validate_state+0x61/0x180 [ 465.633984][ T31] __x64_sys_unshare+0x31/0x40 [ 465.638771][ T31] do_syscall_64+0xcd/0xfa0 [ 465.643370][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.649274][ T31] RIP: 0033:0x7fee8a78eec9 [ 465.653764][ T31] RSP: 002b:00007fee8b58e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 465.662305][ T31] RAX: ffffffffffffffda RBX: 00007fee8a9e5fa0 RCX: 00007fee8a78eec9 [ 465.671348][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 465.679345][ T31] RBP: 00007fee8a811f91 R08: 0000000000000000 R09: 0000000000000000 [ 465.687447][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.695454][ T31] R13: 00007fee8a9e6038 R14: 00007fee8a9e5fa0 R15: 00007ffef797e7d8 [ 465.703858][ T31] [ 465.707168][ T31] INFO: task syz.4.742:9876 blocked for more than 144 seconds. [ 465.762541][ T31] Not tainted syzkaller #0 [ 465.767527][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 465.791237][ T31] task:syz.4.742 state:D stack:26696 pid:9876 tgid:9876 ppid:6999 task_flags:0x400040 flags:0x00080002 [ 465.819770][ T31] Call Trace: [ 465.823093][ T31] [ 465.826045][ T31] __schedule+0x1190/0x5de0 [ 465.869729][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 465.875373][ T31] ? __pfx___schedule+0x10/0x10 [ 465.929715][ T31] ? find_held_lock+0x2b/0x80 [ 465.934455][ T31] ? schedule+0x2d7/0x3a0 [ 465.938814][ T31] schedule+0xe7/0x3a0 [ 465.989703][ T31] schedule_timeout+0x257/0x290 [ 465.994622][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 466.030053][ T31] ? mark_held_locks+0x49/0x80 [ 466.034882][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 466.069761][ T31] __wait_for_common+0x2f9/0x4e0 [ 466.074764][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 466.119814][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 466.125336][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 466.150114][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 466.169875][ T31] __flush_workqueue+0x3e2/0x1230 [ 466.174986][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 466.209795][ T31] ? find_held_lock+0x2b/0x80 [ 466.214549][ T31] ? rxrpc_discard_prealloc+0xb6/0x9c0 [ 466.259938][ T31] ? rxrpc_release_calls_on_socket+0x237/0x4e0 [ 466.266185][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 466.309804][ T31] rxrpc_release+0x2a7/0x6a0 [ 466.314544][ T31] __sock_release+0xb3/0x270 [ 466.319160][ T31] ? __pfx_sock_close+0x10/0x10 [ 466.369710][ T31] sock_close+0x1c/0x30 [ 466.379183][ T31] __fput+0x3ff/0xb70 [ 466.396772][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 466.422647][ T31] task_work_run+0x150/0x240 [ 466.427305][ T31] ? __pfx_task_work_run+0x10/0x10 [ 466.480424][ T31] ? __pfx___do_sys_close_range+0x10/0x10 [ 466.499181][ T31] exit_to_user_mode_loop+0xec/0x130 [ 466.505040][ T31] do_syscall_64+0x426/0xfa0 [ 466.510242][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.539716][ T31] RIP: 0033:0x7f401f78eec9 [ 466.544167][ T31] RSP: 002b:00007ffec18683a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 466.553696][ T31] RAX: 0000000000000000 RBX: 00007f401f9e7da0 RCX: 00007f401f78eec9 [ 466.574940][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 466.588656][ T31] RBP: 00007f401f9e7da0 R08: 0000000000042fbc R09: 0000001ec186869f [ 466.599793][ T31] R10: 00007f401f9e7cb0 R11: 0000000000000246 R12: 000000000004a900 [ 466.609748][ T31] R13: 00007f401f9e6180 R14: ffffffffffffffff R15: 00007ffec18684c0 [ 466.617735][ T31] [ 466.649728][ T31] INFO: task syz.5.746:9902 blocked for more than 145 seconds. [ 466.657323][ T31] Not tainted syzkaller #0 [ 466.664761][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 466.689394][ T31] task:syz.5.746 state:D stack:27048 pid:9902 tgid:9901 ppid:8554 task_flags:0x400140 flags:0x00480003 [ 466.710008][ T31] Call Trace: [ 466.713332][ T31] [ 466.716279][ T31] __schedule+0x1190/0x5de0 [ 466.730152][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 466.735152][ T31] ? __pfx___schedule+0x10/0x10 [ 466.750058][ T31] ? find_held_lock+0x2b/0x80 [ 466.754784][ T31] ? schedule+0x2d7/0x3a0 [ 466.759134][ T31] schedule+0xe7/0x3a0 [ 466.764840][ T31] schedule_timeout+0x257/0x290 [ 466.789994][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 466.796058][ T31] ? mark_held_locks+0x49/0x80 [ 466.800927][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 466.806148][ T31] __wait_for_common+0x2f9/0x4e0 [ 466.819697][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 466.825122][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 466.830771][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 466.836096][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 466.842541][ T31] __flush_workqueue+0x3e2/0x1230 [ 466.847622][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 466.853393][ T31] ? rxrpc_discard_prealloc+0xb6/0x9c0 [ 466.858850][ T31] ? rxrpc_release_calls_on_socket+0x237/0x4e0 [ 466.870271][ T31] rxrpc_release+0x2a7/0x6a0 [ 466.874897][ T31] sock_release+0x91/0x1d0 [ 466.879342][ T31] afs_open_socket+0x334/0x400 [ 466.885213][ T31] ? __pfx_afs_open_socket+0x10/0x10 [ 466.899868][ T31] ? proc_create_net_single_write+0x149/0x1b0 [ 466.908511][ T31] ? __pfx_proc_create_net_single_write+0x10/0x10 [ 466.915832][ T31] afs_net_init+0x825/0xb00 [ 466.920611][ T31] ? __pfx_afs_net_init+0x10/0x10 [ 466.925636][ T31] ops_init+0x1df/0x5f0 [ 466.930201][ T31] setup_net+0x100/0x390 [ 466.939957][ T31] ? __pfx_setup_net+0x10/0x10 [ 466.944759][ T31] ? debug_mutex_init+0x37/0x70 [ 466.950119][ T31] copy_net_ns+0x2f8/0x690 [ 466.959952][ T31] create_new_namespaces+0x3ea/0xa90 [ 466.965278][ T31] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 466.971305][ T31] ksys_unshare+0x45b/0xa40 [ 466.975898][ T31] ? native_tss_update_io_bitmap+0x3e1/0x770 [ 466.983704][ T31] ? __pfx_ksys_unshare+0x10/0x10 [ 466.989940][ T31] ? xfd_validate_state+0x61/0x180 [ 466.995105][ T31] __x64_sys_unshare+0x31/0x40 [ 467.001782][ T31] do_syscall_64+0xcd/0xfa0 [ 467.006324][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.012529][ T31] RIP: 0033:0x7f76ee58eec9 [ 467.016938][ T31] RSP: 002b:00007f76ef368038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 467.025943][ T31] RAX: ffffffffffffffda RBX: 00007f76ee7e5fa0 RCX: 00007f76ee58eec9 [ 467.034342][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 467.042788][ T31] RBP: 00007f76ee611f91 R08: 0000000000000000 R09: 0000000000000000 [ 467.060262][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.068602][ T31] R13: 00007f76ee7e6038 R14: 00007f76ee7e5fa0 R15: 00007fffd04f6b48 [ 467.077040][ T31] [ 467.083324][ T31] INFO: task syz.0.754:9940 blocked for more than 145 seconds. [ 467.092876][ T31] Not tainted syzkaller #0 [ 467.097831][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 467.115611][ T31] task:syz.0.754 state:D stack:28536 pid:9940 tgid:9940 ppid:5824 task_flags:0x400040 flags:0x00080002 [ 467.128546][ T31] Call Trace: [ 467.131893][ T31] [ 467.134843][ T31] __schedule+0x1190/0x5de0 [ 467.139335][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 467.144492][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 467.149482][ T31] ? __pfx___schedule+0x10/0x10 [ 467.154393][ T31] ? find_held_lock+0x2b/0x80 [ 467.159079][ T31] ? schedule+0x2d7/0x3a0 [ 467.163496][ T31] schedule+0xe7/0x3a0 [ 467.167575][ T31] schedule_timeout+0x257/0x290 [ 467.172465][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 467.177865][ T31] ? mark_held_locks+0x49/0x80 [ 467.182713][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 467.187924][ T31] __wait_for_common+0x2f9/0x4e0 [ 467.192929][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 467.198329][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 467.208822][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 467.214137][ T31] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 467.220684][ T31] __flush_workqueue+0x3e2/0x1230 [ 467.225822][ T31] ? __pfx___flush_workqueue+0x10/0x10 [ 467.231337][ T31] ? find_held_lock+0x2b/0x80 [ 467.236037][ T31] ? rxrpc_discard_prealloc+0xb6/0x9c0 [ 467.241549][ T31] ? rxrpc_release_calls_on_socket+0x237/0x4e0 [ 467.247719][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 467.252959][ T31] rxrpc_release+0x2a7/0x6a0 [ 467.257563][ T31] __sock_release+0xb3/0x270 [ 467.262220][ T31] ? __pfx_sock_close+0x10/0x10 [ 467.267080][ T31] sock_close+0x1c/0x30 [ 467.271277][ T31] __fput+0x3ff/0xb70 [ 467.275277][ T31] task_work_run+0x150/0x240 [ 467.279943][ T31] ? __pfx_task_work_run+0x10/0x10 [ 467.285070][ T31] ? __pfx___do_sys_close_range+0x10/0x10 [ 467.290855][ T31] exit_to_user_mode_loop+0xec/0x130 [ 467.296160][ T31] do_syscall_64+0x426/0xfa0 [ 467.300803][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.307203][ T31] RIP: 0033:0x7f5dc418eec9 [ 467.311705][ T31] RSP: 002b:00007ffdece9f978 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 467.320191][ T31] RAX: 0000000000000000 RBX: 000000000004b61c RCX: 00007f5dc418eec9 [ 467.328187][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 467.336192][ T31] RBP: 00007f5dc43e7da0 R08: 0000000000000001 R09: 00000007ece9fc6f [ 467.344228][ T31] R10: 0000001b2fc20000 R11: 0000000000000246 R12: 00007f5dc43e5fac [ 467.352244][ T31] R13: 00007f5dc43e5fa0 R14: ffffffffffffffff R15: 00007ffdece9fa90 [ 467.360267][ T31] [ 467.363589][ T31] [ 467.363589][ T31] Showing all locks held in the system: [ 467.371404][ T31] 1 lock held by khungtaskd/31: [ 467.376351][ T31] #0: ffffffff8e3c4320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 467.386331][ T31] 2 locks held by getty/5589: [ 467.392159][ T31] #0: ffff88814d02b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 467.401986][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 467.412577][ T31] 3 locks held by kworker/u8:16/7230: [ 467.417955][ T31] #0: ffff88801ba9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 467.428363][ T31] #1: ffffc9000b27fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 467.438360][ T31] #2: ffffffff900e7c30 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 467.447737][ T31] 1 lock held by syz.2.732/9806: [ 467.452721][ T31] #0: ffffffff900e7c30 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 467.462233][ T31] 1 lock held by syz.4.742/9876: [ 467.467201][ T31] #0: ffff88805cb9aa48 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 467.477803][ T31] 1 lock held by syz.5.746/9902: [ 467.482798][ T31] #0: ffffffff900e7c30 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 467.492294][ T31] 1 lock held by syz.0.754/9940: [ 467.497227][ T31] #0: ffff88805454aa48 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 467.507821][ T31] 1 lock held by syz.7.781/10148: [ 467.513298][ T31] #0: ffff888062de2488 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 467.523927][ T31] 1 lock held by syz.8.791/10221: [ 467.528949][ T31] #0: ffff888054607508 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 467.539554][ T31] 1 lock held by syz.6.942/11255: [ 467.544819][ T31] #0: ffffffff900e7c30 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 467.554626][ T31] 1 lock held by syz.9.998/11578: [ 467.559990][ T31] #0: ffffffff900e7c30 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 467.569440][ T31] 1 lock held by syz.3.999/11576: [ 467.574531][ T31] #0: ffffffff900e7c30 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 467.583997][ T31] 3 locks held by syz-executor/11712: [ 467.589373][ T31] #0: ffff888056c88dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 467.599002][ T31] #1: ffff888056c880b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 467.608736][ T31] #2: ffffffff90370848 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 467.619460][ T31] 3 locks held by kworker/u11:4/11796: [ 467.625560][ T31] #0: ffff88807d802948 ((wq_completion)hci8){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 467.636213][ T31] #1: ffffc9002fdb7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 467.648560][ T31] #2: ffff88802986cdc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x175/0x430 [ 467.658615][ T31] 3 locks held by syz.1.1098/12065: [ 467.663910][ T31] #0: ffff88805a374dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 467.673553][ T31] #1: ffff88805a3740b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 467.683253][ T31] #2: ffffffff8e3cf8b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 467.693308][ T31] 3 locks held by syz.2.1107/12071: [ 467.698486][ T31] #0: ffff88809ae04dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 467.708154][ T31] #1: ffff88809ae040b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 467.718371][ T31] #2: ffffffff90370848 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 467.728485][ T31] 5 locks held by syz.5.1100/12075: [ 467.733722][ T31] #0: ffff8880a7f14dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 467.743322][ T31] #1: ffff8880a7f140b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 467.753038][ T31] #2: ffffffff90370848 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 467.763101][ T31] #3: ffff888099832b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 467.772575][ T31] #4: ffffffff8e3cf8b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 467.783101][ T31] [ 467.785442][ T31] ============================================= [ 467.785442][ T31] [ 467.797978][ T31] NMI backtrace for cpu 1 [ 467.797996][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 467.798021][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 467.798036][ T31] Call Trace: [ 467.798044][ T31] [ 467.798053][ T31] dump_stack_lvl+0x116/0x1f0 [ 467.798084][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 467.798123][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 467.798149][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 467.798181][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 467.798202][ T31] watchdog+0xf3f/0x1170 [ 467.798219][ T31] ? rcu_is_watching+0x12/0xc0 [ 467.798234][ T31] ? __pfx_watchdog+0x10/0x10 [ 467.798245][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 467.798263][ T31] ? __kthread_parkme+0x19e/0x250 [ 467.798281][ T31] ? __pfx_watchdog+0x10/0x10 [ 467.798294][ T31] kthread+0x3c2/0x780 [ 467.798313][ T31] ? __pfx_kthread+0x10/0x10 [ 467.798333][ T31] ? rcu_is_watching+0x12/0xc0 [ 467.798347][ T31] ? __pfx_kthread+0x10/0x10 [ 467.798367][ T31] ret_from_fork+0x675/0x7d0 [ 467.798386][ T31] ? __pfx_kthread+0x10/0x10 [ 467.798405][ T31] ret_from_fork_asm+0x1a/0x30 [ 467.798428][ T31] [ 467.798435][ T31] Sending NMI from CPU 1 to CPUs 0: [ 467.865363][T11764] Bluetooth: hci8: command 0x0406 tx timeout [ 467.869751][ C0] NMI backtrace for cpu 0 [ 467.869766][ C0] CPU: 0 UID: 0 PID: 11764 Comm: kworker/u11:3 Not tainted syzkaller #0 PREEMPT(full) [ 467.869794][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 467.869810][ C0] Workqueue: hci8 hci_cmd_timeout [ 467.869837][ C0] RIP: 0010:number+0x676/0xc70 [ 467.869874][ C0] Code: e8 af cb 5d f6 41 83 ed 01 31 ff 49 83 c4 01 44 89 ee e8 dd c6 5d f6 41 83 fd ff 75 a8 8b 04 24 c7 04 24 ff ff ff ff 48 01 c3 85 cb 5d f6 44 0f b6 6c 24 35 31 ff 44 89 ee e8 55 c6 5d f6 45 [ 467.869896][ C0] RSP: 0018:ffffc9002fd77198 EFLAGS: 00000286 [ 467.869914][ C0] RAX: 0000000000000000 RBX: ffffc9002fd774c1 RCX: ffffffff8b5e0865 [ 467.869930][ C0] RDX: ffff88802b213c80 RSI: 0000000000000000 RDI: 0000000000000005 [ 467.869944][ C0] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000000 [ 467.869958][ C0] R10: 00000000fffffffc R11: 0000000000026d58 R12: 0000000000000000 [ 467.869972][ C0] R13: 00000000fffffffc R14: ffffc9002fd774cc R15: 0000000000000001 [ 467.869988][ C0] FS: 0000000000000000(0000) GS:ffff8881249e7000(0000) knlGS:0000000000000000 [ 467.870009][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 467.870025][ C0] CR2: 00007f397ecac9a0 CR3: 000000007ecce000 CR4: 00000000003526f0 [ 467.870040][ C0] Call Trace: [ 467.870047][ C0] [ 467.870061][ C0] ? __pfx_number+0x10/0x10 [ 467.870089][ C0] ? __pfx_number+0x10/0x10 [ 467.870117][ C0] ? format_decode+0x1ad/0xd40 [ 467.870150][ C0] ? __pfx_format_decode+0x10/0x10 [ 467.870187][ C0] vsnprintf+0x5e6/0x1160 [ 467.870207][ C0] ? vsnprintf+0x318/0x1160 [ 467.870231][ C0] ? __pfx_vsnprintf+0x10/0x10 [ 467.870251][ C0] ? __pfx_vsnprintf+0x10/0x10 [ 467.870272][ C0] ? __asan_memcpy+0x3c/0x60 [ 467.870298][ C0] snprintf+0xc7/0x100 [ 467.870318][ C0] ? __pfx_snprintf+0x10/0x10 [ 467.870338][ C0] ? __pfx_sprintf+0x10/0x10 [ 467.870360][ C0] ? __asan_memcpy+0x3c/0x60 [ 467.870381][ C0] ? get_data+0x393/0x540 [ 467.870417][ C0] info_print_prefix+0x134/0x350 [ 467.870449][ C0] ? __pfx_info_print_prefix+0x10/0x10 [ 467.870482][ C0] ? __pfx__prb_read_valid+0x10/0x10 [ 467.870516][ C0] record_print_text+0x140/0x400 [ 467.870551][ C0] ? __pfx_record_print_text+0x10/0x10 [ 467.870586][ C0] ? __pfx_prb_read_valid+0x10/0x10 [ 467.870622][ C0] printk_get_next_message+0x2d1/0x6d0 [ 467.870648][ C0] ? __pfx_printk_get_next_message+0x10/0x10 [ 467.870681][ C0] ? lock_acquire+0x179/0x350 [ 467.870718][ C0] console_flush_all+0x6ea/0xc60 [ 467.870745][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 467.870773][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 467.870802][ C0] console_unlock+0xd8/0x210 [ 467.870823][ C0] ? __pfx_console_unlock+0x10/0x10 [ 467.870852][ C0] ? vprintk_emit+0x63b/0x680 [ 467.870878][ C0] vprintk_emit+0x3d7/0x680 [ 467.870901][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 467.870926][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 467.870959][ C0] _printk+0xc7/0x100 [ 467.870988][ C0] ? __pfx__printk+0x10/0x10 [ 467.871020][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 467.871066][ C0] bt_err+0xe4/0x120 [ 467.871100][ C0] ? __pfx_bt_err+0x10/0x10 [ 467.871142][ C0] ? process_one_work+0x13d6/0x1b70 [ 467.871179][ C0] hci_cmd_timeout+0xd1/0x260 [ 467.871202][ C0] process_one_work+0x9cf/0x1b70 [ 467.871244][ C0] ? __pfx_process_one_work+0x10/0x10 [ 467.871285][ C0] ? assign_work+0x1a0/0x250 [ 467.871319][ C0] worker_thread+0x6c8/0xf10 [ 467.871359][ C0] ? __kthread_parkme+0x19e/0x250 [ 467.871388][ C0] ? __pfx_worker_thread+0x10/0x10 [ 467.871428][ C0] kthread+0x3c2/0x780 [ 467.871460][ C0] ? __pfx_kthread+0x10/0x10 [ 467.871493][ C0] ? rcu_is_watching+0x12/0xc0 [ 467.871518][ C0] ? __pfx_kthread+0x10/0x10 [ 467.871551][ C0] ret_from_fork+0x675/0x7d0 [ 467.871583][ C0] ? __pfx_kthread+0x10/0x10 [ 467.871615][ C0] ret_from_fork_asm+0x1a/0x30 [ 467.871648][ C0] [ 468.361814][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 468.368701][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 468.377824][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 468.387871][ T31] Call Trace: [ 468.391138][ T31] [ 468.394052][ T31] dump_stack_lvl+0x3d/0x1f0 [ 468.398630][ T31] vpanic+0x640/0x6f0 [ 468.402603][ T31] panic+0xca/0xd0 [ 468.406313][ T31] ? __pfx_panic+0x10/0x10 [ 468.410716][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 468.416077][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 468.422224][ T31] ? watchdog+0xe48/0x1170 [ 468.426643][ T31] ? watchdog+0xe3b/0x1170 [ 468.431162][ T31] watchdog+0xe59/0x1170 [ 468.435418][ T31] ? rcu_is_watching+0x12/0xc0 [ 468.440176][ T31] ? __pfx_watchdog+0x10/0x10 [ 468.444848][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 468.450061][ T31] ? __kthread_parkme+0x19e/0x250 [ 468.455105][ T31] ? __pfx_watchdog+0x10/0x10 [ 468.459786][ T31] kthread+0x3c2/0x780 [ 468.463869][ T31] ? __pfx_kthread+0x10/0x10 [ 468.468449][ T31] ? rcu_is_watching+0x12/0xc0 [ 468.473214][ T31] ? __pfx_kthread+0x10/0x10 [ 468.477824][ T31] ret_from_fork+0x675/0x7d0 [ 468.482408][ T31] ? __pfx_kthread+0x10/0x10 [ 468.486997][ T31] ret_from_fork_asm+0x1a/0x30 [ 468.491773][ T31] [ 468.495085][ T31] Kernel Offset: disabled [ 468.499412][ T31] Rebooting in 86400 seconds..