last executing test programs: 2m24.417360415s ago: executing program 32 (id=1200): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) semctl$auto(0x1ff, 0x2, 0x13, 0x4) clone3$auto(&(0x7f0000000000)={0x200, 0x5, 0x7, 0x2, 0x0, 0x1ff, 0x8, 0xb, 0x6, 0x2, 0xeb6}, 0x1fe) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) semctl$auto(0x1ff, 0x2, 0x13, 0x4) (async) clone3$auto(&(0x7f0000000000)={0x200, 0x5, 0x7, 0x2, 0x0, 0x1ff, 0x8, 0xb, 0x6, 0x2, 0xeb6}, 0x1fe) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000) (async) 2m18.064690026s ago: executing program 4 (id=1263): syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe$auto(&(0x7f0000001480)=0xffffffffffffffff) r1 = socket(0x2c, 0x80003, 0x0) setsockopt$auto(r1, 0x11b, 0x9, 0xffffffffffffffff, 0x18) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x3) vmsplice$auto(r0, &(0x7f0000000000)={0x0, 0x7}, 0x5, 0x1) socket(0x28, 0x800, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x10, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x2, 0xa) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto(r2, 0x5407, 0x38) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1b0029bd7000fddbdf2503000000040008001800038004000000000000000c000100000000000000000012000100898771f1c19f17790485908288470000040002"], 0x48}, 0x1, 0x0, 0x0, 0x4044}, 0xc800) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) 2m17.257010382s ago: executing program 4 (id=1264): madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ram3\x00', 0xe0440, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x9, 0x2, 0x4, 0xb1, r2, 0x7ff) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) io_setup$auto(0x1, 0x0) syz_clone(0x4040400, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, 0x0, 0x1) prctl$auto(0x35, 0x0, 0x2, 0x0, 0x0) socket(0x5, 0xa, 0x2000) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pipe2$auto(&(0x7f00000000c0), 0xfffffbff) writev$auto(0xca, &(0x7f0000000080)={&(0x7f00000000c0), 0x2}, 0x2000000000000003) r3 = socket(0x200000000000011, 0x2, 0x0) setsockopt$auto(r3, 0x107, 0x17, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0xfdef) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptydc\x00', 0x80502, 0x0) 2m16.101827849s ago: executing program 4 (id=1267): r0 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000040), 0x19, 0x0, 0x0, &(0x7f0000000040), 0x2, 0x80008003}, 0x8}, 0x5, 0x1c) pwrite64$auto(r0, &(0x7f0000000340)='\xfc\xff\xff\xff\xff\xff\xff\xffRN8\x99\x88\xf5s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd1\xd3\x1d\xf8\xbeb~,\xb5\xe7\f\x0251\x198R\r\n\xe6Z\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\xae\x18\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\xc6\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x06C\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\xdac$w\x883\xac\xcd\x96\xc2\x93\x0e\x12/v0\x90\x915?Fab\a\xcd*\x1f\xc8\xb0\xbc\xba\xa1\xc6\xc2{)-\xb0r\x93L\xb9R_\x10\x8b9\x1f5]\x06\xdb2\xf2\x93\xdd', 0x0, 0x9) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex, 0x7f, 0x99, 0x9, 0x1, @relative_fd, 0xd}, 0x96) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,v\xf58\x83\xcf\xc5D\xcc', 0x100000a3d9) recvmmsg$auto(r3, &(0x7f0000000240)={{&(0x7f00000000c0)="be9c33df5c8c353735ae9f0e59896ce734a2947de470705514969d5d39224c22b3e740f3eb49f4caac69d2876cd1c27ee4a8a6f1800b38e925041b8cb1a698e738fa874547d44e0a4a5cb5a7cfae9a5940c7d0294ba5e07d0a0e1fc49e31effbba8d3c76977c377b68625c5c083983cea584", 0x7, &(0x7f0000000200)={&(0x7f00000001c0)="76afa3c1fd10f38db0dd5c8d0e58ae3a6495bcaad4f3c263d15f2b932ecf25bf0b87101b7f7a715a9184db333d581b8caaba407596", 0x2}, 0x6, 0x0, 0x8, 0x3}, 0x9}, 0x7, 0x8, 0x0) mmap$auto(0xfffffffffffffffc, 0x20009, 0x4000000000df, 0x1a, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000140)=@ax25={0x3, @bcast}, 0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x200000008000) close_range$auto(r0, r1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xffff7fff, 0x4, 0x80000001, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyzd\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) madvise$auto(0xf804, 0x5, 0x6) ioctl$auto_TIOCSTI2(r4, 0x5412, 0x0) connect$auto(0x3, 0x0, 0x81) mmap$auto(0x0, 0x8020010, 0x7, 0x10, r2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/fs/netfs/cookies\x00', 0x8a202, 0x0) pread64$auto(r5, 0x0, 0x100000001, 0x100) unshare$auto(0x40000080) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000440)='/proc/thread-self/oom_adj\x00', 0x4c01a2, 0x0) 2m15.121113953s ago: executing program 4 (id=1268): socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) msgsnd$auto(0xfffffffc, 0x0, 0x1, 0x963) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) close_range$auto(0x2, 0x8, 0x0) socket(0x0, 0x800, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)={0x22, 0x0, [{0xc1, 0x1, 0x2}]}) io_uring_setup$auto(0xd364, &(0x7f0000000000)={0x400, 0xffff, 0x7f, 0x7, 0x6, 0x5, r0, [0x0, 0x4], {0x2, 0x4, 0x6, 0x2, 0x40, 0x4, 0x7, 0x7, 0x7ffffffd}, {0x7, 0x1ff, 0x80000001, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) ioctl$auto_CEC_DQEVENT(0xffffffffffffffff, 0xc0506107, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(0xc8, 0x0, 0x40f6) listmount$auto(&(0x7f0000000000)={0x1f, @raw=0x1c0, 0x80000024, 0x2c7, 0x2}, 0x0, 0xf4240, 0x0) unshare$auto(0x40000080) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) ioctl$auto(0xffffffffffffffff, 0x6f2d, 0xffffffffffffffff) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/free_buffer\x00', 0x4c000, 0xebff) 2m14.345385588s ago: executing program 4 (id=1271): msgctl$auto_IPC_SET(0x2, 0x1, &(0x7f0000000100)={{0xa, 0x0, 0xffffffffffffffff, 0x9, 0x6, 0x1ab8, 0x8}, &(0x7f0000000000)=0x40, &(0x7f0000000080)=0x2, 0xfffffffffffffffe, 0x4, 0x100, 0x40e, 0x1, 0x462a, 0x401, 0x200, @raw=0x9, @raw=0x3}) setresuid$auto(r0, r0, r0) socket(0x1d, 0x2, 0x2) close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x2c) 2m14.200802634s ago: executing program 4 (id=1272): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) io_uring_setup$auto(0x23, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto_SO_BROADCAST(r0, 0x6, 0x6, &(0x7f0000000000)='\x00', &(0x7f0000000080)=0x9) memfd_create$auto(0x0, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000180)='\x05\x00\x00\x00', 0x80000005) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd7c, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\b\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf2502000000040001800c00018008000500", @ANYRES32=r1, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/nbd9/trace/end_lba\x00', 0x2062, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 2m14.110366177s ago: executing program 33 (id=1240): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8005) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mremap$auto(0x0, 0x400000000001, 0x843, 0x3, 0xfffff000) umount2$auto(&(0x7f0000000080)='.\x00', 0x3) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x5c, r1, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x10}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x211e78dc}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008004) 2m11.851854171s ago: executing program 34 (id=1275): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x5, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x7, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0x2, 0x5, 0x3, 0x40, 0x7, 0x20, 0x309, 0x6, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0xffff306b, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x800000000002, 0x9, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2961]}, 0x1fb, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x6, 0x5, 0x717e, 0x204, 0x7, 0x3, 0xd, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0xfffffffffffffffe, 0x10003, 0x10002, 0x7f, 0x2a2, 0x2, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x100dc3, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x1fe, 0xd) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffffffffffd07, &(0x7f00000001c0)) read$auto(r2, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) sendmsg$auto_SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0040f5e617785da1e1420f5bbccd593546197892f648cc206d5c8a8e3cc20d8184fc1268d9b496b81f5e9f5efae376ce730bbd5733345c84c551f38f0227e6ef543158573250f90b4e79c8ebb4da74a33154d57d6ac970100b46c3cf827ed7260117cf7a4a57cbdc317143d7f2f67ee949fe69ffda5df2f3d5d17395d47a1ee84af9207abfae9221469bd492736fcfe2a547267642d4250034d12ed39adda32176db1ae42544c5c7a88d8c5c6cfb8ec05cd31837986d77c21213501506dbf6acf7bb67d1d49edf4e62577641e0fe1b32c52341"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x40d0) socket(0x2, 0xa, 0xe57a) getpeername$auto(0x3, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop15/queue/minimum_io_size\x00', 0x40480, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8ce) ioctl$auto_MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x7, 0x80000101, 0x4, "aab8e8dfffff7f000000000000000000205e782d000000000000000000021000", @raw=0x2}, 0x6, 0x8, 0x6, @raw=0x9, @enumerated={0x1, 0xffff, "3a451db75512bd3527fc812ba5063f658f3a83495f2f7e8b4b84d579e75c002e35796b745e9f1f32cbfbdc296577c42c2257f3cdba1288075707bcc50e018166", 0x10000000009e, 0x3}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000180), 0xffffffffffffffff) shmctl$auto_IPC_RMID(0x200200b8, 0x0, &(0x7f00000007c0)={{0x2, 0xee01, 0x0, 0x5, 0x6, 0x1, 0x5}, 0x502, 0x5, 0x0, 0x467, @raw=0x9, @raw=0xf, 0x7, 0x0, &(0x7f0000000380)="cf796bac33e50ef646b5c94256be85e94833a0bcf2346a0b01999bc9177cdf8f39cf604d4a1f40f05c9a28c2872717452b8ddd190807df4882205c2295206215ebaa946bd9636c71b3e51b35afb2d3a705265d2820d8b8adee2448eb9bb546e2cd5a2b0c8873e51a07a022a3477c1a66cfb1bd10d140e052a3115757ca537e5ef7ffffcb0cb4d0ecd4a895d993973b81501b4fe39b7605583ffb042d4efbc257e036c3242b2fd63d5345aa8a6e880f941fe5b0a7366d60ef5cf6b9ec7268d034035aacf10e", &(0x7f0000000600)="da6ef5fd9c3b334e61bf88b0ce4475425e4c78c1532a57ca2d737bad4df767de6c84f3a5adbd94e6bd20015d54d39d0019a9522e86313eb4c2273952e06dd291460abd4100d76b652108aeb9efd5817d5adb424af07a9e8d81d19f926a506a19edc2a93bbf45fb1ce24d1693a4cb4711ffcddb94e101deca6e964e2e3a575c42c47cceab038d0ad709e0eb3c42b922841d942da7d4f64b903c82b56122e0750865b8f4c0b251ca40ce625e2ea94ed4932ef145bdd0028e58433fc46a48ddf37cf30d22d693651b3a1427b5e4a75d2c3f1403e30f82596edb81c57f11390b0fe79bee3ce85ca8875f71c2a267c2b440dc99d0a6ff"}) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) 2m11.07751742s ago: executing program 0 (id=1277): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) write$auto(r3, 0x0, 0x30fe) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000002e40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r2, 0x0, 0x4) readv$auto(r1, &(0x7f0000000680)={0x0, 0x40200}, 0x3) migrate_pages$auto(0x0, 0x99, 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000140)="3318cb3319931a44e65544d1088ccb0c05e782e43eaa4777c1a19fdb0000000000004b0b1cef1fe8073e55ddc691f22d52da9ef45dad05d0e51997a4aaf87ca04bc8cd6c4d04a3f02669b73af6f0d414770ae5e35df11afe6c1129057f30dfc9933881d1d35871d74b59ebd0f40000000000000003404905a341d5cc360cbb575880c9a73b2795c3d9f86f39a0bb690eadcc2fba068b0d0d69907c50") r4 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000080), 0x2140, 0x0) pread64$auto(r4, &(0x7f0000000140)=']}\x00', 0x101, 0x8) ioctl$auto_SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1e, 0x0) r7 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_ADVISE(r7, 0x2, &(0x7f0000000040)=',%!/-%,\x00', &(0x7f0000000080), 0x3) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24040000", @ANYRES16=r6, @ANYBLOB="01002dbd70007ddbdf250c000000040003800c00018008000100", @ANYRES32=r8, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(0x3, 0x0, 0xffd8) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/inhibited\x00', 0x20b42, 0x0) write$auto(r9, &(0x7f0000000340)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,D\xbf&\x9eb|\n\xee\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbb\xbb\xf9\xcd\xc0\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x1d\x88mr\xfd\xf1\x1b;\xabt\xd1a}\x10\xab\xeb_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\x15/\xf9\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\aA\xe9(\x00\x00\x00\x00\x00N\xb5J\xc8A\xc7m\xbf\x19\xae\x9d\xcaR\x0f\xa8\xdf\xe4M\xe1>k\x93\x01\xe5\xba(\x96K\xc1=d3\xe00u\"`]\xb3\x11a\x1cSn\xe7\x87\x84\x93\xe4\x90]\x86\x10\xe5\xacK\x99\xc1$\x91\x05\x00\x00\x00O\x01xc\xa8\x9a\x1bK\x00\x00\xf6\xa2\x8a\x7f4\f[BLH$6\xfb,\xd8\xd3\xd0\xa1v\x14\xcd\x1a\xbdx\xaed\x9d\\\xd0\xff\xd2Y\xc4\x9fT\xb2\xd5\r\xf1#\xd5\xf2\x9cU\xd1:+\xb63\xae\xc1\xf7\xe1\xd4\x879?\xdd\xd6\xd4\xa3\xc7\xd8 S\xfc:\xe1{\x16\\h\x9d\xbc#KEC\x1a\xf9KH`*\xb2\xff\xe9I\xd1\x82e:_\x9b\xf1\xc1\x8e\xf0\xc46\x98\xd6u\x90\x18\x8f\xe8\xc3%\x8e9\xab\x7f\x0e\n\xb2\xa4\xef\x90\xb16\x04\xbc\xc9\xdc\xad,\xcc\xad}DY\x1d\x1fv\x90\x97u\xa1\xfb\x13\xa93\xb6XJ\x84\xe3\xc1)\x98\xae5q\xa5L\x87\x1aq\x1d0\xf1\xcb\xe5\xf4F\xc2\xea!*\xf9\xb3,w\"\xf2\xd0\xd1Vj\xd0\x06\xcc\xbc\xee0\x98.\xd9dC\x8e9\xfdM\\\xc5&\\\x9b\x81\x88t\xa4\x9f\xd1P\xd2e\x9c\xf9\xd2\xaf', 0xb) ioctl$auto_SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) 2m10.636914992s ago: executing program 0 (id=1278): mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/ip_mr_cache\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000140)=""/41, 0x29) mknodat$auto(r0, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8) renameat2$auto(r0, &(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000240)='./file1\x00', 0x5) mmap$auto(0x0, 0x2020009, 0x7, 0xeb2, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x3) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/pagemap\x00', 0x82a40, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) socket(0xa, 0x2, 0x88) socket(0xb, 0x2, 0x10000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0x3, 0x0, 0x1) socket(0xa, 0x801, 0x84) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0xfffffffc, &(0x7f0000000000)=@link_update={r3, @new_prog_fd=r3, 0x1, @old_prog_fd=r3}, 0x7) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x18, &(0x7f0000000000), 0x1) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000000)={0x60, 0xe0, 0x100000000100000, 0x100000, 0x100000000000006, 0xfffffffffffffffe, 0x0, 0x0, 0x87, 0x2c, 0x4, 0x3}) 2m10.429586333s ago: executing program 0 (id=1279): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8000008, 0x3, 0x0, 0x0, 0x4) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) mmap$auto(0x0, 0x8000009, 0x800007, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) pread64$auto(0xffffffffffffffff, 0x0, 0x40000000f42c, 0x585) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) prctl$auto(0x1000000003b, 0x2, 0x4, 0x5, 0x7) madvise$auto(0xffffffffffffffff, 0xffffffffffff0001, 0x80007cd) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) msync$auto(0x0, 0x2000000005, 0x6) msync$auto(0x6, 0x7, 0xfff) recvmmsg$auto(r2, 0x0, 0x7, 0xb, 0x0) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)=ANY=[@ANYBLOB="88120000", @ANYRES16=0x0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES8=r1], 0x1288}, 0x1, 0x0, 0x0, 0x200400f0}, 0x20000800) syz_genetlink_get_family_id$auto_macsec(0x0, r0) sendfile$auto(r0, r0, &(0x7f0000000340)=0x7, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/admmidi2\x00', 0x22400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x4) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x5e, 0x80000001, 0x9, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/pcm\x00', 0x88002, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) 2m10.013393692s ago: executing program 0 (id=1280): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) (async) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x804, 0x0) (rerun: 32) ioctl$auto_RTC_ALM_SET(r1, 0x40247007, &(0x7f00000000c0)={0x5, 0x9, 0x4, 0xb, 0xb0ee, 0x2, 0x7, 0x2, 0xfff}) (async, rerun: 64) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) (async, rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (rerun: 32) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r2, 0x540a, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) madvise$auto(0x0, 0x2003f0, 0x15) (async) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x800) (async, rerun: 32) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) (rerun: 32) read$auto(r4, 0x0, 0xb4d3) (async) write$auto(0x3, 0x0, 0xffd8) 2m7.705334318s ago: executing program 0 (id=1281): mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x5, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) getdents$auto(r0, 0x0, 0x62d4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) 2m6.503521933s ago: executing program 0 (id=1283): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x121040, 0x0) pread64$auto(r0, 0x0, 0x100006, 0xc982) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/net/bond0/bonding/arp_missed_max\x00', 0xc2900, 0x0) read$auto(r1, &(0x7f0000000040)='\xfd-:]:\x00', 0x1) sendmsg$auto_NL802154_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44010414cc5f287fc7fb4ff4570000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x40048d1}, 0x4000004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r3 = openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) pread64$auto(r3, &(0x7f0000000040)='\x8d]\x00', 0x80000000, 0x5) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(r2, 0xfffffffffffff000, 0xb) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) socket(0xa, 0x3, 0x3a) semctl$auto(0x80001ff, 0x804, 0x13, 0x4) setsockopt$auto(0x400000000000003, 0x29, 0xd2, 0x0, 0x567) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) socket(0x10, 0x2, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x7) 1m59.204952895s ago: executing program 35 (id=1272): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) io_uring_setup$auto(0x23, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto_SO_BROADCAST(r0, 0x6, 0x6, &(0x7f0000000000)='\x00', &(0x7f0000000080)=0x9) memfd_create$auto(0x0, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000180)='\x05\x00\x00\x00', 0x80000005) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd7c, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\b\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fddbdf2502000000040001800c00018008000500", @ANYRES32=r1, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/nbd9/trace/end_lba\x00', 0x2062, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 1m51.307111491s ago: executing program 36 (id=1283): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x121040, 0x0) pread64$auto(r0, 0x0, 0x100006, 0xc982) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/net/bond0/bonding/arp_missed_max\x00', 0xc2900, 0x0) read$auto(r1, &(0x7f0000000040)='\xfd-:]:\x00', 0x1) sendmsg$auto_NL802154_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44010414cc5f287fc7fb4ff4570000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x40048d1}, 0x4000004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r3 = openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) pread64$auto(r3, &(0x7f0000000040)='\x8d]\x00', 0x80000000, 0x5) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(r2, 0xfffffffffffff000, 0xb) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) socket(0xa, 0x3, 0x3a) semctl$auto(0x80001ff, 0x804, 0x13, 0x4) setsockopt$auto(0x400000000000003, 0x29, 0xd2, 0x0, 0x567) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) socket(0x10, 0x2, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x7) 1m50.85459902s ago: executing program 6 (id=1322): mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xffffffffffffffff, 0x890c, 0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = waitid$auto_P_ALL(0x0, 0xa, &(0x7f00000000c0)={@siginfo_0_0={0xc, 0x5, 0x2, @_rt={0x0, 0xee01, @sival_ptr=&(0x7f0000000000)="e67f5691aff526ce5fdc3495be4dfa3eaec1817c1ae4b8c5126d4f7e2fbcef94d1071c8fd2c5cdd9d946cd31f6df787c8fdadd2482ad65483180da413773eb05779967ed9d9dc8b268d16a089431e61edd802c73675380e199809dd74ec7acda69992d88eb2484408b923e4e1c9089028212cb58d021ce0c63c94c1125ce4b42f57f8c140cd88136e931d9cdc8570be8c354ab019b175cc95e2d6079671e6eb75eadbc05e3d9a6cf56125c1340ac92"}}}, 0x4, &(0x7f0000000140)={{0x3, 0x610}, {0x3, 0x7fff}, 0x2, 0x8, 0x100000000, 0x6, 0x1, 0x401, 0x5, 0x3, 0x7, 0x4, 0x0, 0x8000000000000000, 0x8, 0x1}) r1 = prctl$auto(0x1000000003b, 0x4, r0, 0x5, 0xfffffffffffffffb) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_register$auto_IORING_REGISTER_RESIZE_RINGS(r1, 0x21, &(0x7f0000000200)="41e96a07637db01b7324d05dd4eca1e7671d16acdf6709c9e712aa0276b4695825519d0c31d0a5612951a06a61629e07", 0x329b3a5) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/misc/hw_random/rng_available\x00', 0x22000, 0x0) r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x40903, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r3, 0x8000) ioctl$auto(r3, 0x80004508, r4) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000002100)=""/4110, 0x100e) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mq_open$auto(&(0x7f0000000e00)='nl80211\x00', 0xf0, 0xfbff, &(0x7f0000000e40)={0xc0, 0x1ff, 0xfffffffffffffff7}) ioctl$auto_XFS_IOC_INUMBERS(r1, 0x80405880, &(0x7f0000000240)={{0xba, 0x9, 0x8001, 0x3, 0x800, [0x4, 0xfffffffffffff800, 0x5, 0x8e, 0x3]}, [{0x4, 0x7, 0x3, 0x6}, {0x774, 0x2, 0x1, 0x9}, {0x3, 0x100000, 0xd9, 0x6}, {0x9, 0x8, 0xfd, 0x5}, {0xfffffffffffffffc, 0x9, 0x1}, {0xfffffffffffffa17, 0x2, 0xb, 0xc}, {0x400, 0x4, 0x6, 0x1f}, {0xc17, 0x1, 0x3d, 0xf}]}) unshare$auto(0x40000080) msync$auto(0x10000, 0xfffffffffffffffe, 0x0) 1m49.943569469s ago: executing program 6 (id=1325): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/sessionid\x00', 0x40000, 0x0) socket(0xa, 0x2, 0x88) io_uring_setup$auto(0x6, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000036c0)='/proc/sys/net/ipv6/conf/xfrm0/stable_secret\x00', 0x2000, 0x0) mq_open$auto(0x0, 0x64, 0x4, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f00000001c0), 0x121000, 0x0) io_uring_setup$auto(0x59, 0x0) open(0x0, 0x22240, 0x154) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b72, r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/veth0_virt_wifi/router_solicitation_interval\x00', 0x100, 0x0) writev$auto(r1, &(0x7f0000000080)={0x0, 0x2}, 0x4) 1m49.607556486s ago: executing program 6 (id=1326): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x7, @local}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(r0, 0x0, 0x400fffd, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x5, &(0x7f00000001c0)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 1m47.988268787s ago: executing program 6 (id=1329): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto_TCSBRK2(r0, 0x5409, &(0x7f0000000040)) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/tdls_wider_bw\x00', 0x8822, 0x0) socket(0x9, 0x4, 0xff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x10, 0x2, 0x0) ioctl$auto(r3, 0x8946, 0x24) prctl$auto(0x23, 0x7, 0x0, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/vrf/strict_mode\x00', 0x80202, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x4d}) mmap$auto(0x0, 0xe983, 0x2, 0xeb1, 0x401, 0x2) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000340), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0xc004743e, 0x0) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r5], 0x1ac}}, 0x40000) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xff, 0x0, @raw=0xfffff030}}) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) flistxattr$auto(r2, &(0x7f0000000380)='\\#$\'\'$O+&$[+#%]:,\x8b\x00', 0x8) readv$auto(0x3, &(0x7f0000000280)={0x0, 0xf7}, 0x87) sendfile$auto(r2, 0x3, 0x0, 0x100000000000009) r6 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x1c0a42, 0x0) ioctl$auto(r6, 0x40084d02, r6) write$auto(r1, 0x0, 0x5) 1m47.295716492s ago: executing program 6 (id=1332): r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x800) bpf$auto(0x6, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0x10004, 0x0, 0x1000, 0x106, 0x0, 0x0, 0xfff, 0x10000, 0x9, 0x0, 0x4, 0x7, 0x2, 0xfffeffff}, 0x1) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/ksm/stable_node_chains_prune_millisecs\x00', 0x400, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0xfffffe4f, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000d20da4e9f5339e5dc951d9233d0807e1", @ANYBLOB="e3e85a3a969eb9805d8ff25fae6a5a36a07992046230d4305d40a4bddead9512423d3bafa1277cd9a4a7330a45a5bee726fce644e521d121035af878611464be4233ffeaad6a8e72632e448d74a02908a5051556688af39e1c1fcbc29325d2f3f182a8b21dcebaa6ce87338323ee09e4d85317aa71695867e2f37c1f10a20c9a3bb4f464ab5918a486ccad095f8c"], 0x1ac}}, 0x40000) mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x7fff, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0xfbe8, 0x4) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) munlock$auto(0xffff, 0x1) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd96502"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x4, 0x1) setsockopt$auto(0x7, 0x111, 0x100006, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x7) shutdown$auto(0x200000003, 0x2) uname$auto(0x0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) 1m46.786713495s ago: executing program 6 (id=1335): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x14, r1, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r2 = pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto_SO_CNX_ADVICE(r2, 0x231, 0x35, &(0x7f0000000040)='\x00', 0x80000000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/v4l-subdev5\x00', 0x280, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) ioctl$auto(0x3, 0x80885659, 0x38) r3 = io_uring_setup$auto(0x2, 0x0) socket(0x10, 0x2, 0x4) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) 1m39.350609288s ago: executing program 5 (id=1360): mmap$auto(0x0, 0x1, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) write$auto_sg_fops_sg(r0, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e) mmap$auto(0xfffffffffffffffd, 0x400008, 0xdf, 0x7fff, 0x2, 0x9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/ptp/ptp0/n_vclocks\x00', 0x8502, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/neigh/veth0/gc_stale_time\x00', 0x80400, 0x0) read$auto(r2, 0x0, 0x1ff) write$auto(r1, 0x0, 0x2) symlink$auto(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file0\x00') creat$auto(&(0x7f0000000680)='./file1\x00', 0x103) mmap$auto(0x0, 0xe983, 0xa3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0\x00', 0x217923, 0x0) ioctl$auto_BLKPG2(r3, 0x1269, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x8000, 0x0) read$auto(r0, 0x0, 0x4000001c) close_range$auto(0x0, r4, 0x4000000000002) socket(0x3, 0x800, 0xfffff7fe) socketpair$auto(0x1a, 0x9, 0x8000000000000000, 0x0) r5 = socket(0x11, 0xa, 0x9) bind$auto(r5, &(0x7f0000000140), 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x20007, 0x7, 0x100000011, 0xffffffffffffffff, 0x100) mmap$auto(0x0, 0x2000d, 0x1, 0xeb1, 0x404, 0x10008000) r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r6, &(0x7f0000001bc0)="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", 0xd4f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x400000000008) 1m38.381451573s ago: executing program 5 (id=1364): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) vmsplice$auto(0x2, &(0x7f00000000c0)={0x0, 0x7ff}, 0x8000000000000001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) landlock_create_ruleset$auto(0x0, 0x9, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyzb\x00', 0x800, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x40076f3f, 0x38) 1m37.446609431s ago: executing program 5 (id=1367): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000002b40)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2], 0x54}, 0x1, 0x0, 0x0, 0x4008040}, 0x40008c0) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) rseq$auto(&(0x7f00000001c0)={0xe, 0x20401, 0x5fc, 0x10000006, 0xffffffff, 0x6}, 0x8000, 0x0, 0x6) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x17) setgroups$auto(0xe32, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$auto(r3, 0x2, 0x0, 0x0, 0x0) pidfd_open$auto(0x0, 0xfffffffe) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) setreuid$auto(0x0, 0x7) fcntl$auto(0x2, 0x40c, 0x7f) mmap$auto(0x1, 0x4020008, 0xdb, 0x2000000000eb1, r0, 0x8000) socket(0x2, 0x2, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) 1m36.557666202s ago: executing program 5 (id=1370): socket(0x1d, 0x2, 0x2) socket(0x2, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) socket(0xb, 0x1, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8000, 0x0) select$auto(0x12, 0x0, 0x0, &(0x7f0000000240)={[0x1ff, 0x3, 0xd, 0x1d, 0x400000000000948f, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x7f, 0x3, 0x1, 0x9, 0x1, 0x400000]}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0xd196, 0x8000000000000000, 0x0) iopl$auto(0x1) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x2c) 1m36.053235304s ago: executing program 5 (id=1371): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x8) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x3e00, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x5, 0x2, 0x3, 0x9b74, 0xffffffffffffffff, 0x20000028028) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) mmap$auto(0x0, 0x100, 0x4000000000df, 0x80000000eb1, 0x401, 0x5) close_range$auto(0x2, 0x8, 0x0) 1m35.591059931s ago: executing program 5 (id=1374): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x2, 0x3, 0xe1, 0x10000000000015, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x5452, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), r1) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000a00)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 1m31.759882344s ago: executing program 37 (id=1335): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_RPC_STATUS_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x14, r1, 0x309, 0x70bd27, 0x25dedbfc}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r2 = pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto_SO_CNX_ADVICE(r2, 0x231, 0x35, &(0x7f0000000040)='\x00', 0x80000000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/v4l-subdev5\x00', 0x280, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) ioctl$auto(0x3, 0x80885659, 0x38) r3 = io_uring_setup$auto(0x2, 0x0) socket(0x10, 0x2, 0x4) socketpair$auto(0x8, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) 1m25.178769804s ago: executing program 7 (id=1415): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x236441, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x5, 0x3, 0x3, 0x8000000000e31, r0, 0x400000000007eff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D2\x00', 0x200, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, 0x0) 1m24.705726904s ago: executing program 7 (id=1418): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) mmap$auto(0xfffffffffffff25c, 0x3, 0x121, 0x16, r0, 0x8) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000100)={{@raw=0x2, 0x85, 0x20e, 0x1, "669cbbd9e9756f22fdffa188e0f106000000000000000b2f4ab8633824f2d2252ca5f200", @raw=0x6}, 0x0, @integer=@value_ptr=&(0x7f0000000040)=0x2, "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000640), 0x48cac3, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv6/conf/xfrm0/use_tempaddr\x00', 0x28802, 0x0) read$auto(0x3, 0x0, 0x80) r2 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim0/ports/3/pp_hold\x00', 0xc0b02, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv6/neigh/veth0_to_bridge/anycast_delay\x00', 0x202, 0x0) sendfile$auto(r4, r3, 0x0, 0x48) write$auto(r2, 0x0, 0xc70) pread64$auto(r1, 0x0, 0x7ff, 0x400) r5 = socket(0x1a, 0x1, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000680)='/dev/bus/usb/010/001\x00', 0xa0000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r7 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r7, 0x92106402, r7) mmap$auto(0xfffffffffffffffd, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, 0x0, 0x41) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x8800) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) 1m23.691342679s ago: executing program 7 (id=1426): r0 = bpf$auto(0x8, &(0x7f00000001c0)=@bpf_attr_4={0x9f2, 0x4, 0x80000001, 0xffffffffffffffff}, 0x400006f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0xffffffffffffffff, 0xffffffffffff0006, 0x18) mmap$auto(0x4000000000000000, 0x400008, 0x7fffffffffffffff, 0x9b72, r0, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0xffffffffffff7fff, 0x2020009, 0x7, 0xeb1, r0, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x109b02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto(0x3, 0x400c4d05, r1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/lowpan0/mtu\x00', 0x183841, 0x0) recvmsg$auto(0xffffffffffffffff, 0x0, 0xe) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000120, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x1000000007, 0x100000001, 0x1, 0x6, 0x1ff, 0x6, 0x5c, 0xadae, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) mmap$auto(0x0, 0x3, 0xb, 0x3132, 0x4008df3, 0x0) r4 = socket(0x2, 0x3, 0x1) setsockopt$auto(r4, 0xff, 0x1, 0x0, 0x1000003) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) ioctl$auto_SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000080)="ff03") getsockopt$auto_SO_SNDLOWAT(r5, 0x7, 0x13, &(0x7f0000000380)='/dev/sequencer2\x00', &(0x7f00000003c0)=0xfffffff9) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001640), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r7, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001800)={0xa0, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_IE={0x8c, 0x2a, "3684a660bdccd1367bc48d95c45654a7d4ef122b5aaf580986f36c8305d02a0134617098711133f1352d29a8989d6853d2b62e6876842b9141c1f1baed01823c40a15b3a9b06aaa8c7fe2bcb43f0e02ab341b1480fd251e4695746cad00d4417d34c9d41ed33d62e634ac67f4a04ac804817cea529436086a5355b67030a24cc223223926569c0ee"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) 1m22.522286778s ago: executing program 7 (id=1427): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, 0x0) 1m22.387381659s ago: executing program 7 (id=1428): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) (async) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000580)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9\xe8\xb2\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6E*\xc9\xdd.q\xdbAX\xf6\xfaD\xcdz\xbc~\xf30LE\xb5\x18Wf\xd3\x9b\\\x1c\xbb^\xfb9\xe5\x1b:\xa4\xdd\x81\x91\\\xbc\x1fUl\xfa)\xbf\x9dPV\xae\xa9\x9c)\x01|\xfe\xd0!Rx\a\xc4\xb1$\x8eE\xc2j\x83sLS\xa8H\xf6\xf2,R\x90:\x8fx\xab\x90\xfe$h\x80!\xe2\nY#\xee\x1b}O=\x8bn\xd7zZ\x18\xa7\x9e~\x94k\x8e\xdba\xf2\xc3G\x8egR3\x1d\x01J\x87\x14(}\f\xb1}%N|z,\xbe\x1fB\xd3\xeb\xec\x83X\x8f\x97\x95\xfd\xed\xe6wt\x1d\xb3\xa8\xfb)L~}\x9f\xbf\xd0\xc9\x9d\x82-C\xc3Ez@\x8c\xbf\xa2 \x88\\\r6M\x83', 0x4, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 1m21.387496682s ago: executing program 7 (id=1432): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0xffffffffffffff80, 0x20000a00004, 0x400002, 0x16, 0x602, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0) socket(0x2b, 0x800, 0x76) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/122, 0x7a) write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) fsetxattr$auto(0x1, 0x0, 0x0, 0x0, 0x2) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x121040, 0x0) pread64$auto(r3, 0x0, 0x87ff, 0x5) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = setfsuid$auto(0xee00) setresuid$auto(0x0, r4, 0x0) r5 = open(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0xa0400, 0x8) open_by_handle_at$auto(r5, &(0x7f0000000040)={0x1, 0x2, "02"}, 0x3ffff) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/net/dev_mcast\x00', 0x404080, 0x0) write$auto(r6, 0x0, 0x7ef) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8000, 0x0) 1m20.690077204s ago: executing program 9 (id=1434): mmap$auto(0x0, 0x8, 0x7, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/ip_forward_update_priority\x00', 0x202, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, &(0x7f0000000180)="c3c8067c040000db384a40132c84713dad0e763f5999313d5648fa00f57c6958cc73137be015092514324ea4d5650b307d92fb4357a7909868669bb8f2f2d94cf88630382e4967fb2aca57281205745c29bcff51877faabb0b493af4509d27d504000000b0b88a2bcae9598aa9840ad00362cb002dd5caf216099de59e8e4c2c48c7fad5c1f5ca0f7168df95673f", 0x3f) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x400008, 0x400000000000df, 0x9b72, 0x2, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) write$auto(0x3, 0x0, 0xfdef) 1m20.444672266s ago: executing program 38 (id=1374): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x2, 0x3, 0xe1, 0x10000000000015, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x5452, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), r1) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000a00)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 1m20.432278813s ago: executing program 9 (id=1437): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = socket(0x2, 0xa, 0x8) (async) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @local}, 0x54) (async) mmap$auto(0x1, 0x802820005, 0x8091, 0x1f, 0xffffffffffffffff, 0x8) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x8340, 0x0) pread64$auto(r3, 0x0, 0xa90600000000, 0xfffd) (async) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) io_setup$auto(0x80000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) getsockopt$auto(0x3, 0x200000000001, 0x19, 0x0, 0x0) (async) r4 = openat$auto_urandom_fops_random(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$auto_RNDADDENTROPY2(r4, 0x40085203, 0x0) (async) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) (async) shutdown$auto(r1, 0x1fc1) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) (async) socket(0x80000000000000a, 0x2, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x10140, 0x0) (async) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0) (async) write$auto(r5, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) lseek$auto(0x3, 0xd, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x4, 0x0, 0x8, 0x1}, 0x1}, 0x3, 0x20000000) 1m19.689450026s ago: executing program 9 (id=1439): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="0600", @ANYRES16=0x0, @ANYBLOB="010025bd"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), r0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='B'], 0x1ac}}, 0x40000) landlock_create_ruleset$auto(0x0, 0x9, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setresuid$auto(0x2, 0x7, 0x8080) faccessat2$auto(0x1, &(0x7f0000000000)='\x00', 0x2, 0x1000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x4000, &(0x7f0000000100)={&(0x7f0000000080), 0x96bc}, 0x2, &(0x7f0000000380), 0x7, 0x4}, 0x9}, 0x7, 0x4008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x7, 0x2, 0x13, 0x1) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x560a, 0x7) 1m19.51593933s ago: executing program 9 (id=1441): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) socket(0xa, 0x3, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x5c, r1, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x10}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x211e78dc}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008004) r2 = epoll_create$auto(0x2) epoll_pwait2$auto(r2, 0x0, 0x9, 0x0, 0x0, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r3, 0x0) epoll_ctl$auto_EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)={0x7cc4, 0x7f}) socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f0000000440)={[0x1ff, 0x7, 0xd, 0x8000000000001, 0x948b, 0x3, 0x15f4da07, 0x3, 0x7, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) 1m18.589370178s ago: executing program 9 (id=1442): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x2, 0x20000009, 0x7, 0xeb2, 0x404, 0x10008000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="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", 0xd4f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8003) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = prctl$auto(0x1000000003b, 0x3, 0x4, 0x5, 0x7) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000840)={{@raw=0x8, 0x7, 0xba28, 0x0, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2f008b48a8a57689adcc1ca6d2cbfa93b50590c9"}, 0x0, @bytes=@data="5d29f0ff6c66da3c8d62e8f6a2d4d6190eb2a0bbb3c176faaad23caeb55f27ef7a2e9b9f7e49b11925d33aea2094c0dcc3dadfdd6832a3f720c28eab70a927730ed2d2b21950da0c88c6324fcdf01c7de6422a24593aa05b868299926883690ae0d17f54a2670e87978f049c39c7252db666a3d5253948f6f27676017827eee8cfff1cfe902ab7ebdce6c091aa2ecbae3bc1a43296c74d0df6c7ad02109c6b24af67cfe5e8d583895c31668c6b5bf138574b71bcf68cc021e9c742cb020689061fa2579fd1659f0d75d6ca04e4bda7108da59fa513b0976ede7ebc87f5f9c66574f93e9629171c487085f23fc7cf3991ce264714903f5c83c2a199717f8dd62404add28aea76c977fee9481cd70f03d445d5d21a41b390fc1543d947f62347fef920a304a9227fd71201da2572539effbb2b9f8ba6adb28c586bac6eaafdb522ffd990a70761bd67428afc7488bdd303ff354fde37412c549af73a8a2b8ef44ae2ba59cbf8c016f1c5f043879aff54749fb99713f0459a1b16333e337c4347601a3070a1f885bd42472340feca71030e014ebe88096e3c6379fff202017e06cff06babb272374799da26a46ad623953231bcd75c3e10f0fc0e0326539a41e6ea0aa148c4951661677726f637574aaf2f7da85023bb77386a08088bd094ad7f8982d03131e9a8aeb7962e95be195c3777b6f220efa6b76e5a432703d83548a8d3", "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0x28000) madvise$auto(0x0, 0x2003f0, 0x15) syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r2) r4 = open(&(0x7f0000000000)='./cgroup\x00', 0x80000, 0x61) fchdir$auto(r4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') close_range$auto(0x2, 0x8, 0x0) 1m17.785081951s ago: executing program 9 (id=1444): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull\x00', 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x40, 0x40000e2, 0xeb1, 0x401, 0x8000) getsockopt$auto(r1, 0x84, 0x73, 0x0, &(0x7f0000000100)=0x99) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x80201, 0x0) mmap$auto(0x20, 0xe984, 0x400000000000df, 0x40000000000eb0, 0x401, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) fallocate$auto(0x8000000000000003, 0x2, 0x6, 0xcbd5d) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0xf, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000000), 0x5a9, &(0x7f0000000100)={0x0, 0x200007}, 0x1, 0x0, 0x6, 0x1}, 0x5}, 0x2000004, 0x100) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x0, 0x0) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000280)={0x8000000000000000, @raw=0x3, @inferred, 0x1, 0xfffffffffffffff7, '\x00', {0x2, 0x76e6, 0x1000, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x9, 0x8, {0x1, 0x2}, {0x10000, 0x4}, {0x1, 0x8}, 0x3, 0x101, 0x200, 0x200, 0x0, 0x401, 0xfff, 0xfc00, 0x0, 0x2, '\x00', 0x0, 0x3840, 0xe5, 0x1}}) setgroups$auto(0x10000, &(0x7f0000000040)=0x7fff) r5 = dup$auto(r4) ioctl$auto_ECCGETLAYOUT(r5, 0x81484d11, &(0x7f0000000340)={0x101, [0x101, 0x1, 0x80000000, 0x3, 0xa, 0x5, 0x1, 0x5, 0x808f, 0xe, 0x5, 0x7, 0x2, 0xf, 0x57, 0x8dbc, 0x8, 0x7, 0xd1, 0x72944006, 0x1, 0xfe54, 0x0, 0xfffff645, 0x9, 0x6, 0x9, 0x80, 0x80000000, 0x8dc, 0x4, 0x8, 0xfffff0bf, 0xa, 0x575e6e2c, 0x101, 0xff, 0x2, 0xffff0000, 0x3, 0x71c7, 0x1, 0x8, 0x90, 0xfffffffb, 0x7, 0x3, 0x5, 0x200, 0x100, 0x71d1, 0xffff, 0x9, 0x8, 0x8, 0x3, 0x2, 0x81, 0xe, 0x17, 0xe0b, 0x1, 0x0, 0x57a1], 0x6, [{0xff, 0x6e14}, {0x9, 0x8}, {0x4d1, 0xb9bc}, {0xe, 0x8}, {0x4, 0x24}, {0x1, 0x8}, {0x1, 0x1ff}, {0x1, 0x40}]}) ioctl$auto_SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, 0x0) 1m6.373568317s ago: executing program 39 (id=1432): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0xffffffffffffff80, 0x20000a00004, 0x400002, 0x16, 0x602, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0) socket(0x2b, 0x800, 0x76) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/122, 0x7a) write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) fsetxattr$auto(0x1, 0x0, 0x0, 0x0, 0x2) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x121040, 0x0) pread64$auto(r3, 0x0, 0x87ff, 0x5) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = setfsuid$auto(0xee00) setresuid$auto(0x0, r4, 0x0) r5 = open(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0xa0400, 0x8) open_by_handle_at$auto(r5, &(0x7f0000000040)={0x1, 0x2, "02"}, 0x3ffff) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/net/dev_mcast\x00', 0x404080, 0x0) write$auto(r6, 0x0, 0x7ef) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8000, 0x0) 1m2.728161044s ago: executing program 40 (id=1444): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull\x00', 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x40, 0x40000e2, 0xeb1, 0x401, 0x8000) getsockopt$auto(r1, 0x84, 0x73, 0x0, &(0x7f0000000100)=0x99) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x80201, 0x0) mmap$auto(0x20, 0xe984, 0x400000000000df, 0x40000000000eb0, 0x401, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) fallocate$auto(0x8000000000000003, 0x2, 0x6, 0xcbd5d) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0xf, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000000), 0x5a9, &(0x7f0000000100)={0x0, 0x200007}, 0x1, 0x0, 0x6, 0x1}, 0x5}, 0x2000004, 0x100) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x0, 0x0) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000280)={0x8000000000000000, @raw=0x3, @inferred, 0x1, 0xfffffffffffffff7, '\x00', {0x2, 0x76e6, 0x1000, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x9, 0x8, {0x1, 0x2}, {0x10000, 0x4}, {0x1, 0x8}, 0x3, 0x101, 0x200, 0x200, 0x0, 0x401, 0xfff, 0xfc00, 0x0, 0x2, '\x00', 0x0, 0x3840, 0xe5, 0x1}}) setgroups$auto(0x10000, &(0x7f0000000040)=0x7fff) r5 = dup$auto(r4) ioctl$auto_ECCGETLAYOUT(r5, 0x81484d11, &(0x7f0000000340)={0x101, [0x101, 0x1, 0x80000000, 0x3, 0xa, 0x5, 0x1, 0x5, 0x808f, 0xe, 0x5, 0x7, 0x2, 0xf, 0x57, 0x8dbc, 0x8, 0x7, 0xd1, 0x72944006, 0x1, 0xfe54, 0x0, 0xfffff645, 0x9, 0x6, 0x9, 0x80, 0x80000000, 0x8dc, 0x4, 0x8, 0xfffff0bf, 0xa, 0x575e6e2c, 0x101, 0xff, 0x2, 0xffff0000, 0x3, 0x71c7, 0x1, 0x8, 0x90, 0xfffffffb, 0x7, 0x3, 0x5, 0x200, 0x100, 0x71d1, 0xffff, 0x9, 0x8, 0x8, 0x3, 0x2, 0x81, 0xe, 0x17, 0xe0b, 0x1, 0x0, 0x57a1], 0x6, [{0xff, 0x6e14}, {0x9, 0x8}, {0x4d1, 0xb9bc}, {0xe, 0x8}, {0x4, 0x24}, {0x1, 0x8}, {0x1, 0x1ff}, {0x1, 0x40}]}) ioctl$auto_SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, 0x0) 22.129439681s ago: executing program 1 (id=1627): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x80502, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) read$auto(0x3, 0x0, 0x1f40) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x6) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x101, 0x8000, 0x3fa, 0x200000401, 0x1000008000) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x23, 0x5, 0x2009, 0x0, 0x0) r0 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_count\x00', 0x141500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/144, 0x90) read$auto_proc_sessionid_operations_base(r0, &(0x7f00000000c0)=""/4073, 0xfe9) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r3, r3, 0x0, 0x2) ioctl$auto_SNAPSHOT_FREE(r2, 0x3305, 0x0) write$auto_full_fops_mem(r2, 0x0, 0x0) 21.038670287s ago: executing program 1 (id=1630): mmap$auto(0x0, 0x8, 0x7, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) mmap$auto(0x0, 0x400008, 0x400000000000df, 0x9b72, 0x2, 0x8000) capset$auto(0x0, 0x0) write$auto(0x3, 0x0, 0xfdef) 20.856765244s ago: executing program 1 (id=1632): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r2, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) ioctl$auto(r1, 0x400454ca, 0x38) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000080)="2d296699eb5df9d24db978ee2ae789f693d6325d33d31c0a16", 0x19) mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, r0, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_BLKTRACETEARDOWN(r3, 0x1276, 0x0) mmap$auto(0x8000000000002001, 0x20009, 0xdf, 0x15, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket(0xa, 0x3, 0x3c) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x880, 0x0) ioctl$auto(r6, 0x5609, r5) open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee) ioctl$auto_NS_GET_PID_FROM_PIDNS(0xffffffffffffffff, 0x8004b706, &(0x7f0000000180)=0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0080fbdbdf"], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x400c0) 18.86889761s ago: executing program 1 (id=1639): r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r1, r1, 0x0, 0x2) read$auto(r1, &(0x7f0000000040)='[*\x00', 0x9) ioctl$auto_SNAPSHOT_FREE(r0, 0x3305, 0x0) write$auto_full_fops_mem(r0, 0x0, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a802, 0x0) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/bluetooth/hci1/force_devcoredump\x00', 0x80, 0x0) ioctl$auto(r1, 0x7fffffff, r2) 18.514176421s ago: executing program 1 (id=1642): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0x2, 0x1, 0x84) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$auto(0xfffffffd, 0x5, 0x9, 0x0) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000200), r0) sendmsg$auto_IPVS_CMD_DEL_DEST(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000006bb8c962c83843564967ba8e390bfdc9b58d914c5840c253f2", @ANYRES16=r1, @ANYBLOB="000427bd7000fedbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x40480c0) unshare$auto(0x40000080) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/pagemap\x00', 0x3a900, 0x0) setsockopt$auto(0xffffffffffffffff, 0x7fffffff, 0x7b, 0x0, 0x800) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$auto_SO_TXREHASH(r2, 0x1, 0x4a, 0x0, 0x1ff) socket(0x2a, 0x2, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x3498c2, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) syz_genetlink_get_family_id$auto_macsec(0x0, r3) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setrlimit$auto(0xb, 0x0) unshare$auto(0x2a) socket(0x2, 0x1, 0x10000100) mmap$auto(0x40, 0x1, 0x6ae, 0x15, 0xffffffffffffffff, 0x7ffb) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x42, 0x8, 0x0, 0xfffffffffffffffd, 0x5) 17.941318188s ago: executing program 1 (id=1644): r0 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2, 0x3, 0x20eb3, r0, 0x0) r1 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x5, 0x3, 0x0, 0x0, 0x1) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_set_self_attr$auto(0x9, 0x0, 0x80, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) socket(0x1e, 0x1, 0x0) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(r1, 0x4010e501, &(0x7f0000000180)={r0, 0x100}) r3 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4}, 0x6a) socket(0x2c, 0x3, 0x9) r5 = socket(0x15, 0x5, 0x0) getsockopt$auto(r5, 0x114, 0x2713, 0xfffffffffffffffc, 0x0) write$auto(0x1, 0x0, 0x80000000) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/options/blk_cgname\x00', 0x68c002, 0x0) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0x10) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r6, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) setns(r0, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) 11.388281571s ago: executing program 8 (id=1661): close_range$auto(0x0, 0xfffffffffffff000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe2$auto(0x0, 0x80) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040)='~', 0x8000, 0x1}, 0x8}, 0x1, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) r0 = socket(0x1d, 0x2, 0x2) sendmsg$auto_TIPC_NL_KEY_SET(r0, &(0x7f0000001180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001140)={&(0x7f0000001340)={0x10cc, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x10b8, 0x6, 0x0, 0x1, [@generic="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", @nested={0xc, 0x9b, 0x0, 0x1, [@nested={0x4, 0x50}, @nested={0x4, 0x112}]}, @generic="f1daa650b17fd0425a977372880760d4f5d33dd838d45545dd3fc0b95c295db595e99db79051cee17d661e28e20c11cc407010899f13c48463a5caf0b37d2147dd5d09f086b7953092001eeb12bbce0ca5e46641f33b90cebec8587ac17954a957303929b1debea6916ae87b", @typed={0x34, 0x145, 0x0, 0x0, @binary="c2e701a69f03fb086d5fec05e9c890db398a5c8aa40cbe4f13db7bb664b7cbdb659c2d1e4d827c34c5011a7e3071b852"}, @typed={0x6, 0x1e, 0x0, 0x0, @str='+\x00'}]}]}, 0x10cc}, 0x1, 0x0, 0x0, 0x8000}, 0x40840) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r1 = open(0x0, 0x261c2, 0x84) r2 = userfaultfd$auto(0x1) statx$auto(r2, 0x0, 0x1000, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x2, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_5={@target_ifindex=r6, r5, 0x8, 0x1, 0xffffffffffffffff, @relative_fd=r3, 0xe600}, 0xf) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x2}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r7 = mq_open$auto(&(0x7f00000011c0)='@[},]\x00', 0x7f, 0x8, &(0x7f0000001200)={0x80000000, 0x99b, 0xef3, 0x7fffffff}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_FLUSH(r8, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000026c0)={0x14, r9, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}}, 0x4000000) sendmsg$auto_IPVS_CMD_NEW_DEST(r7, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, r9, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) socket(0xa, 0x5, 0x0) 11.086571684s ago: executing program 8 (id=1663): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) write$auto(r2, 0x0, 0x30fe) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000002e40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r1, 0x0, 0x4) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000140)="3318cb3319931a44e65544d1088ccb0c05e782e43eaa4777c1a19fdb0000000000004b0b1cef1fe8073e55ddc691f22d52da9ef45dad05d0e51997a4aaf87ca04bc8cd6c4d04a3f02669b73af6f0d414770ae5e35df11afe6c1129057f30dfc9933881d1d35871d74b59ebd0f40000000000000003404905a341d5cc360cbb575880c9a73b2795c3d9f86f39a0bb690eadcc2fba068b0d0d69907c50") r3 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000080), 0x2140, 0x0) pread64$auto(r3, &(0x7f0000000140)=']}\x00', 0x101, 0x8) ioctl$auto_SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1e, 0x0) r6 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_ADVISE(r6, 0x2, &(0x7f0000000040)=',%!/-%,\x00', &(0x7f0000000080), 0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24040000", @ANYRES16=r5, @ANYBLOB="01002dbd70007ddbdf250c000000040003800c00018008000100", @ANYRES32=r7, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x24004840}, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) write$auto(0x3, 0x0, 0xffd8) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/inhibited\x00', 0x20b42, 0x0) write$auto(r8, &(0x7f0000000340)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,D\xbf&\x9eb|\n\xee\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbb\xbb\xf9\xcd\xc0\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x1d\x88mr\xfd\xf1\x1b;\xabt\xd1a}\x10\xab\xeb_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\x15/\xf9\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\aA\xe9(\x00\x00\x00\x00\x00N\xb5J\xc8A\xc7m\xbf\x19\xae\x9d\xcaR\x0f\xa8\xdf\xe4M\xe1>k\x93\x01\xe5\xba(\x96K\xc1=d3\xe00u\"`]\xb3\x11a\x1cSn\xe7\x87\x84\x93\xe4\x90]\x86\x10\xe5\xacK\x99\xc1$\x91\x05\x00\x00\x00O\x01xc\xa8\x9a\x1bK\x00\x00\xf6\xa2\x8a\x7f4\f[BLH$6\xfb,\xd8\xd3\xd0\xa1v\x14\xcd\x1a\xbdx\xaed\x9d\\\xd0\xff\xd2Y\xc4\x9fT\xb2\xd5\r\xf1#\xd5\xf2\x9cU\xd1:+\xb63\xae\xc1\xf7\xe1\xd4\x879?\xdd\xd6\xd4\xa3\xc7\xd8 S\xfc:\xe1{\x16\\h\x9d\xbc#KEC\x1a\xf9KH`*\xb2\xff\xe9I\xd1\x82e:_\x9b\xf1\xc1\x8e\xf0\xc46\x98\xd6u\x90\x18\x8f\xe8\xc3%\x8e9\xab\x7f\x0e\n\xb2\xa4\xef\x90\xb16\x04\xbc\xc9\xdc\xad,\xcc\xad}DY\x1d\x1fv\x90\x97u\xa1\xfb\x13\xa93\xb6XJ\x84\xe3\xc1)\x98\xae5q\xa5L\x87\x1aq\x1d0\xf1\xcb\xe5\xf4F\xc2\xea!*\xf9\xb3,w\"\xf2\xd0\xd1Vj\xd0\x06\xcc\xbc\xee0\x98.\xd9dC\x8e9\xfdM\\\xc5&\\\x9b\x81\x88t\xa4\x9f\xd1P\xd2e\x9c\xf9\xd2\xaf', 0xb) ioctl$auto_SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0) 10.28492299s ago: executing program 8 (id=1665): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r2, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) ioctl$auto(r1, 0x400454ca, 0x38) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000080)="2d296699eb5df9d24db978ee2ae789f693d6325d33d31c0a16", 0x19) mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, r0, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_BLKTRACETEARDOWN(r3, 0x1276, 0x0) mmap$auto(0x8000000000002001, 0x20009, 0xdf, 0x15, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket(0xa, 0x3, 0x3c) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x880, 0x0) ioctl$auto(r6, 0x5609, r5) open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee) ioctl$auto_NS_GET_PID_FROM_PIDNS(0xffffffffffffffff, 0x8004b706, &(0x7f0000000180)=0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0080fbdbdf"], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x400c0) 8.4243431s ago: executing program 8 (id=1667): r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x26bbc2, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/radio24\x00', 0x2, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/btrfs/features/acl\x00', 0xac00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000003c0)=""/134, 0x86) sendfile$auto(r1, r1, 0x0, 0x2) ioctl$auto_SNAPSHOT_FREE(r0, 0x3305, 0x0) mmap$auto(0x6, 0xb55, 0x7, 0x19, r1, 0xfffffffffffff199) write$auto_full_fops_mem(r0, 0x0, 0x0) 7.766971634s ago: executing program 8 (id=1668): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x1c1282, 0x0) sync_file_range$auto(r0, 0x4, 0x9, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, r2, 0x305, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008}, 0x0) r5 = openat$auto_vrr_range_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/Writeback-1/vrr_range\x00', 0x80000, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x400000000000018, r5, 0xfffffffffffffffe) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/mm/swap/vma_ra_enabled\x00', 0xb02, 0x0) write$auto(r6, &(0x7f0000000040)='/dev/pts/ptmx\x00', 0x1) clock_gettime$auto(0x10, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x40a03, 0x0) socket(0xa, 0x2, 0x0) setsockopt$auto(0x3, 0x0, 0x20, 0x0, 0x28) 7.036148058s ago: executing program 8 (id=1670): r0 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000a40), 0x100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003040), r1) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf2512000000080009000100000018000180140002006261746164765f736c6176655f31000008000700060000000800080006000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'dvmrp0\x00', 0x0}) shmctl$auto_SHM_LOCK(0x5, 0xb, &(0x7f0000000200)={{0x2da, 0xee01, 0xee00, 0x8001, 0x7, 0x4, 0x1}, 0x400, 0x2d, 0x8, 0x8, @raw=0x4f, @raw=0x6, 0xfff8, 0x0, &(0x7f0000000180)="ce7baed5f71d5c9f61877baaf4e799274a02647d665e1b77ee177718361319d18cd0beb6df6999ee5f69130df78ec273905738a237a4b242844614332facaf02e8b21b57f302eba90a4d528912598034a6c3950e1493292d3d74a40b378884dff25aa18065853c137213d95300b30491a5e24d1191a5c080bcbb9484e9", &(0x7f0000000300)="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"}) mmap$auto(0x3, 0x1, 0x0, 0x18, 0xffffffffffffffff, 0x7) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram8\x00', 0x81, 0x0) mmap$auto(0x9, 0x100000e983, 0x5e, 0xeb9, r7, 0x2) r8 = socketpair$auto(0x40, 0x5, 0x62, 0x0) r9 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r8) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00+}M', @ANYRES16=r9, @ANYBLOB="00022dbd7000fedbdf2505000000380019002db690516cb652b8120b509e63dd0a0b4813d4946d144fcc611a824d011748602f4eea625e38aace9c89df7d6f8e01803715c5b1"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x24000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pipe$auto(0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) unshare$auto(0x40000080) r10 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20018000}, 0x40) write$auto(r10, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'bond_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="5cfe690000aa", @ANYRES16=r2, @ANYBLOB="20002abd7000fedbdf250e0000007c00018008000100", @ANYRES32=r3, @ANYBLOB="0800030003000000140002007465616d5f736c6176655f30000000001400020070696d367265673000000000000000001400020076657468305f746f5f6272696467650008000300c40c000008000300fe070000080003000100000014000200627269646765300000000000000000004c000180080003000200000014000200726f736530000000000000000000000008000100", @ANYRES32=r4, @ANYBLOB="08000300070000001400020064756d6d79300000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="3400018008000300010000001400020070696d367265673100000000000000001400020062726964676530000000000000000000200001801400020070696d367265670000000000000000000800030002000000200002800800dd00", @ANYRES32=r6, @ANYBLOB="14004000000000000000000000000000000000010c00018008000100", @ANYRES32=r11, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x80}, 0x4000048) pread64$auto(r0, 0x0, 0x3, 0x10000) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/arch_status\x00', 0x2c2, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) close_range$auto(r0, 0x8, 0x400) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) 3.241411724s ago: executing program 2 (id=1677): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone3(&(0x7f0000000400)={0x1045100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r0, 0x0, 0x39b8) unshare$auto(0x40000080) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x4a142, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) fadvise64$auto_POSIX_FADV_SEQUENTIAL(0xffffffffffffffff, 0xca, 0x7, 0x2) mmap$auto(0x74a626ac, 0x69d, 0x1, 0x80000011, r1, 0x8) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = fcntl$getown(r1, 0x9) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40102, 0x0) rt_sigqueueinfo$auto_SIGCONT(r3, 0x12, &(0x7f0000000000)={@_si_pad}) pread64$auto(r2, 0x0, 0x40000000f42c, 0x585) 3.222350121s ago: executing program 3 (id=1678): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/vrf/strict_mode\x00', 0x80202, 0x0) sendfile$auto(r1, 0x3, 0x0, 0x400000000008) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) sendmsg$auto_WG_CMD_SET_DEVICE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c3a0ffe", @ANYRES16=r3, @ANYBLOB="d94929bd7000fbdbdf2501000000100008800c00fc8008002200", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20000811}, 0x4000010) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="b0010000", @ANYRES16=0x0, @ANYBLOB="10002bbd7000fedbdf252e000000480001801400020069703667726574617030000000000000140002006d616376746170300000000000000000080003000400000014000200776730000000000000000000000000002000018008000100", @ANYRES32=0x0, @ANYBLOB="140003a2b6c8e74bdcc05cda02006970766c616e300000000060f227fd789ff28dd400ff0000002800ee7f0800035d039610c14c2846b5965b39aed10b092d830b05d9ce27c42d834fa265781aa4ad7e4d2ade0c69446637dfe15d4934f65526e8215fca2366b11cddd54194225828f48b1ef4e7ccb0c8e67af692aafc", @ANYRES32=0x0, @ANYBLOB="1400020077673000000000000000000000000000180001801400020067656e6576653000000000000000000054000180140002006c6f0000000000000000000000000000080003000300000008000300ff7fffff08000100", @ANYRES32=0x0, @ANYBLOB="140002007369743000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300080000003c00018008000100", @ANYRES32=0x0, @ANYBLOB="1400020064766d7270300000000000000000000014000200776c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="440001801400020067656e6576653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007866726d30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="200001800800030002000000140002006970365f767469300000000000000000"], 0x1b0}, 0x1, 0x0, 0x0, 0x8000}, 0x8801) close_range$auto(r0, r1, 0x101) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x8, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x29, 0x2, 0x0) socket(0x10, 0x3, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xaa102, 0x0) ioperm$auto(0x7, 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) getsockopt$auto(0xffffffffffffffff, 0x29, 0xce, 0x0, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0xff, 0x0, 0x6c34f688) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) write$auto(0x3, 0x0, 0xfdef) madvise$auto(0x0, 0x2003f0, 0x18) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r6, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) 2.043208874s ago: executing program 3 (id=1679): r0 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x20082, 0x0) mmap$auto(0x0, 0x2030007, 0x3, 0xeb1, r0, 0x8003) (async) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) getitimer$auto(0xfffffffd, 0x0) (async) io_uring_setup$auto(0x20, 0x0) openat$auto_suspend_stats_fops_(0xffffffffffffff9c, 0x0, 0x440, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x4, 0xe, 0x80000000000eb1, r0, 0x8000000000002) (async) sysfs$auto(0x2, 0x4, 0x0) (async) getsockopt$auto(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKRESETZONE(r1, 0x40101283, &(0x7f0000000040)={0x6000000, 0x2}) (async) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x1000803}, 0xb, 0x10, 0x0) (async) ioctl$auto(r2, 0x8931, 0x24) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b49, 0x9) (async) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) close_range$auto(0x2, 0x8, 0x0) (async) shmget$auto(0x4, 0x6, 0xffff) (async) mount$auto(0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x2, 0x0) 1.974206171s ago: executing program 2 (id=1680): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xd8, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, "c63d9865e4ee33c582314f86116d291a288cc43d9b762fb078e9b0945c103b165daee62c6c221b3f0e3e4918737b648462a3fa38d94b2994b9fc2b35ea765de19b038450d2d5d24b08990459c6fe514ce57880ebdda2340e7374257cae9d5aaf9795d99afc775417d1e10d48c658935cb8ee7e672696188b6fed0e951db60e9914621238d47f1c67c3118dc8308a7a09ab9ba21a6cf5e84205b745b01e2827b7ef9697a4eacf5cf5e54b3be9f341a75ac2280025728a5fe2cd3cd5ddffdf3e43deae"}, 0xd8}, 0x1, 0x0, 0x0, 0x200040c0}, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) socket(0x10, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) r3 = socket(0x10, 0x2, 0xc) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYBLOB="10002cbd7000fadbdf250a00000a00000200252f00e2a85c41e75a02715b2d0000005cdcdf28fffe65c31770799fdab838aaf6712a82e628c9e6429a4a38320b2d692863927bd744b4f7b409b29862d3257675d4fd09d74a831929b1005bdd28ef3fc5ae2884ef6a78fedbebbc656141771e57124268c37932c90ec99923926a97bb444f6903a41102463c79baf78c35827f46efb37be97277d81130bd43e31c60347610f3e65f3d60d3d1e231c0cc23ad56ff23565d95cfafc7a92a64da18c0c01c0600010006000000"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r1, &(0x7f00000006c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbbw\x8dSN\xb2#\xde\xf6\xfe\n_\x86\xccI{0 \xdb8Mh\x16 `\xc7\xe3\xf1\x9f-\xdd\x9a\xd2f\xca\xb3\x99\x81\xb0\xebt\xbc\xde\x0eH\x8db', 0x52) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptycd\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x2000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r5, 0x0, 0x1f40) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) eventfd$auto(0x3) socketpair$auto(0x9, 0x2, 0xb, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) 1.267143209s ago: executing program 3 (id=1681): socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x2c) r2 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/ns/cgroup\x00', 0x8080, 0x0) ioctl$auto_NS_GET_OWNER_UID(r2, 0xb704, 0x0) mmap$auto(0xfff, 0x4, 0xd8, 0x19, r0, 0x1) 1.265530092s ago: executing program 3 (id=1682): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, 0x0) 1.216472742s ago: executing program 3 (id=1683): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x100) mmap$auto(0x0, 0x9, 0xffb, 0x12, 0x3, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/neigh/veth0_macvtap/ucast_solicit\x00', 0x8a042, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC1D1c\x00', 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) open(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0xa0400, 0x8) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x8, 0x8fd6, 0x8, 0x3, 0x15f4da09, 0x3, 0x3, 0x62, 0x5, 0x3, 0x1, 0x9, 0x4, 0xfffffffffffffffe]}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_NEW_KEY(r1, &(0x7f00000048c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x890) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0xe8202, 0x0) sendfile$auto(r3, r3, 0x0, 0xcd) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab/kmalloc-64/objects\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000008c0)=""/61, 0x3d) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/add_random\x00', 0x1a1842, 0x0) write$auto(r5, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4) mmap$auto(0x4, 0x20000400008, 0xdf, 0x9b73, 0x2, 0x6) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd10\x00', 0x1206c2, 0x0) write$auto(r7, &(0x7f0000000000)='//\xf2\x00', 0x80000000) ioctl$auto_BLKRRPART(r6, 0x125f, 0x0) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffa, 0xe983, 0xdf, 0xeb1, r2, 0x8000) 961.90395ms ago: executing program 2 (id=1684): socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10000000000002e, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x40100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) getsockopt$auto(r0, 0x6, 0x6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) nanosleep$auto(&(0x7f0000000180)={0x0, 0x44d4}, 0x0) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x2c) 816.399166ms ago: executing program 2 (id=1685): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/abs\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001180)=""/187, 0xbb) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x4, 0x401, 0xffffffffffffffff, @relative_id=0x13, 0xe600}, 0xf) r4 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) bpf$auto(0x2, &(0x7f00000000c0)=@raw_tracepoint={0x5, r4, 0x0, 0x3}, 0x91) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r6, 0xc004743e, 0x0) ioctl$auto_PPPIOCSCOMPRESS(r6, 0x4010744d, &(0x7f00000001c0)={&(0x7f00000000c0)='\x12\x04\x8f~\xa7 \xcf\x1fg7\n\xd8\xbd\xd3&\xa7\xa6_\xaa\xe2;\xb5\x82\x9dA\x8f|\xf3\xd7\xc6X\xdf\xdaC\x9aoqM2\x10\xb1\xd1\xbd\xca0\x9f\xe7\x00\x00\x00\x00\x00\x00\x00\x00T\r\xbfZO\x7f\xbd\x91\xf2\xbd\xc6.\xa2*\xdb\xd7\f\xebM\xba\x15P\as\x82\x17\xa3\xf5\xf6\xcd\x19P&\x88*\xf9\xdd\xc3t[`\xf3h\xc0\"\xd2\xa5\x81\xd6l\xc2k|\rX]XP\xfe\xc9\xe3\xea\xa4P\x95!3\xce\x9f\x9f<\x1eI\xfd\x80\x1c\xf9~\x06\x1b{K\x04\x85\xfa\x14\xbf\t\xc0\xced?j\xb2\xf1~T\xb2i\n\x15\x0e\xf7G9\'}^B=\xfc\x11\xfa\x0f\x0fd4^`\xc2\xb0\xaf\\\x1duPu\x02\xce:`c\xb0\xd0\xde\x13\xb4\xe0\xfcn\x98%\x1d\xff(\xa3\x10d\x89', 0x8, 0x80}) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) r7 = io_uring_setup$auto(0x1ff, 0x0) io_uring_register$auto(r7, 0x17, &(0x7f0000000140), 0xac3) ioctl$auto_NS_GET_TGID_IN_PIDNS(r7, 0x8004b709, &(0x7f0000000080)=0x8000) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff028}}) ioctl$auto_BTRFS_IOC_RM_DEV_V2(r7, 0x5000943a, &(0x7f0000000440)={@raw=0x5, 0x0, 0x248, @btrfs_ioctl_vol_args_v2_3_0={0x4, &(0x7f0000000200)={0x413a, 0x2, 0x8, 0x9, {0x100000000, 0x6, 0x0, 0x3, 0x2}, [0x2]}}, @name="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"}) 606.424635ms ago: executing program 2 (id=1686): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1e, 0x5, 0x0) sendto$auto(0x3, 0x0, 0x79, 0x2, &(0x7f0000000440)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0xfffffffd}}}, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000040)=@test={r0, 0x9, 0x7, 0xffffffff, 0x2, 0x4, 0x9987, 0x7, 0x8002, 0xfffffffc, 0x5, 0x5, 0x80, 0x2d, 0x80000000}, 0xfffffffe) ioctl$auto_TIOCGPTPEER2(r1, 0x5441, 0x0) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) pipe$auto(0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x12d981, 0x0) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder0\x00', 0x0, 0x0) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0xb) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) r3 = socket(0x10, 0x2, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r4, 0xb701, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xb8, 0x100000000, 0x5, 0x1b, 0x93c, 0x1ffdc, 0x7, 0x2000000000000006, 0x2, 0x9, 0x5, 0x2, 0x8001, 0xae, 0x9, 0x922, 0x7, 0x5, 0x5, 0x3, 0xfffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x8000000000000000, 0x0, 0x10]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000001f00)='/sys/kernel/debug/block/nbd11/hctx0/dispatch\x00', 0x80000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r5, &(0x7f0000000380)=""/206, 0xce) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5a}, 0x80000800}, 0x7, 0x4008) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 202.221126ms ago: executing program 2 (id=1687): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x189881, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/adsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_GETFMTS(r0, 0x8004500b, &(0x7f00000002c0)="bfe41123e42b44ccb3d11c558c7b") (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0xffefffffffffff7d, 0xa, 0x1, 0x2000000000017, 0x602, 0x300000000000) (async) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0) (async) socket(0x25, 0x5, 0x1075) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/122, 0x7a) write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x7fffffff) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0) (async) prctl$auto(0x838, 0x1, 0x0, 0x1, 0x0) fsetxattr$auto(0x1, 0x0, 0x0, 0x0, 0x2) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) syz_clone(0x18002111, 0x0, 0xffffffffffffffce, 0x0, 0x0, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x121040, 0x0) (async) pread64$auto(r1, 0x0, 0x9, 0x8) (async) write$auto(0xca, &(0x7f00000001c0)='\x04>\x01\r\xfb\xff\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2da) (async) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000080)={{0x7, 0x3076000000000000}, {0x10, 0x401}}, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00'}) 0s ago: executing program 3 (id=1688): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/018/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x14, 0x10, 0x8, 0x7fb, &(0x7f00000002c0)}) r1 = socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x0, 0x53, 0x0, &(0x7f0000000040)=0x2c) r3 = socket$nl_generic(0x10, 0x3, 0x10) poll$auto(&(0x7f0000003640)={r3, 0x7, 0x6}, 0x6, 0x100000) r5 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) getsockopt$auto(r5, 0x84, 0x1c, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), r6) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r6, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)={0x28, r7, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r3) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/options/blk_cgname\x00', 0x80002, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000000000)={0x54, r8, 0x301, 0x70bd2b, 0x25dfdbfd, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x950}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0xfffffffb}, @NETDEV_A_QUEUE_IFINDEX={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x4}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x106}]}, 0x54}, 0x1, 0x0, 0x0, 0x2004c005}, 0xc4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r8, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x3}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r9}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x7}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x600}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x10) kernel console output (not intermixed with test programs): IOS Google 10/02/2025 [ 294.278516][ T9719] Call Trace: [ 294.278520][ T9719] [ 294.278526][ T9719] dump_stack_lvl+0x16c/0x1f0 [ 294.278559][ T9719] should_fail_ex+0x512/0x640 [ 294.278584][ T9719] should_fail_alloc_page+0xe7/0x130 [ 294.278601][ T9719] prepare_alloc_pages+0x3c2/0x610 [ 294.278617][ T9719] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 294.278638][ T9719] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 294.278663][ T9719] ? __lock_acquire+0x622/0x1c90 [ 294.278678][ T9719] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 294.278707][ T9719] ? __lock_acquire+0x622/0x1c90 [ 294.278724][ T9719] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 294.278744][ T9719] ? policy_nodemask+0xea/0x4e0 [ 294.278759][ T9719] alloc_pages_mpol+0x1fb/0x550 [ 294.278773][ T9719] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 294.278789][ T9719] ? blk_cgroup_congested+0x140/0x270 [ 294.278810][ T9719] alloc_pages_noprof+0x131/0x390 [ 294.278824][ T9719] pte_alloc_one+0x1e/0x350 [ 294.278845][ T9719] do_huge_pmd_anonymous_page+0x2bb/0x1f50 [ 294.278865][ T9719] ? find_held_lock+0x2b/0x80 [ 294.278884][ T9719] __handle_mm_fault+0x1cff/0x2aa0 [ 294.278907][ T9719] ? __pfx___handle_mm_fault+0x10/0x10 [ 294.278926][ T9719] ? __lock_acquire+0xb8a/0x1c90 [ 294.278951][ T9719] handle_mm_fault+0x589/0xd10 [ 294.278971][ T9719] __get_user_pages+0x54e/0x3530 [ 294.278993][ T9719] ? __pfx___get_user_pages+0x10/0x10 [ 294.279013][ T9719] populate_vma_page_range+0x267/0x3f0 [ 294.279029][ T9719] ? __pfx_populate_vma_page_range+0x10/0x10 [ 294.279043][ T9719] ? __pfx_find_vma_intersection+0x10/0x10 [ 294.279066][ T9719] ? do_mmap+0x69c/0x1210 [ 294.279080][ T9719] __mm_populate+0x1d8/0x380 [ 294.279096][ T9719] ? __pfx___mm_populate+0x10/0x10 [ 294.279112][ T9719] ? up_write+0x1b2/0x520 [ 294.279129][ T9719] vm_mmap_pgoff+0x37f/0x470 [ 294.279153][ T9719] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 294.279179][ T9719] ? __x64_sys_futex+0x1e0/0x4c0 [ 294.279192][ T9719] ? __x64_sys_futex+0x1e9/0x4c0 [ 294.279208][ T9719] ksys_mmap_pgoff+0x7d/0x5c0 [ 294.279228][ T9719] ? xfd_validate_state+0x61/0x180 [ 294.279246][ T9719] __x64_sys_mmap+0x125/0x190 [ 294.279264][ T9719] do_syscall_64+0xcd/0xfa0 [ 294.279285][ T9719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.279299][ T9719] RIP: 0033:0x7f197b38eec9 [ 294.279312][ T9719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.279326][ T9719] RSP: 002b:00007f197c16d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 294.279340][ T9719] RAX: ffffffffffffffda RBX: 00007f197b5e6090 RCX: 00007f197b38eec9 [ 294.279350][ T9719] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 294.279359][ T9719] RBP: 00007f197b411f91 R08: 0000000000000002 R09: 0000000000008000 [ 294.279368][ T9719] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 294.279376][ T9719] R13: 00007f197b5e6128 R14: 00007f197b5e6090 R15: 00007ffdbc4504a8 [ 294.279396][ T9719] [ 295.065626][ T9715] ptp ptp0: only physical clock in use now [ 296.505253][ T9761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.817'. [ 296.810272][ T9771] ima: policy update failed [ 296.836319][ T30] audit: type=1802 audit(42006.266:9): pid=9771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.821" res=0 errno=0 [ 296.866158][ T9771] netlink: 25 bytes leftover after parsing attributes in process `syz.0.821'. [ 298.620316][ T9806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.831'. [ 299.400153][ T9821] ima: policy update failed [ 299.429811][ T30] audit: type=1802 audit(42008.855:10): pid=9821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.834" res=0 errno=0 [ 299.462327][ T9821] netlink: 25 bytes leftover after parsing attributes in process `syz.1.834'. [ 299.573821][ T9828] netlink: 342 bytes leftover after parsing attributes in process `syz.0.836'. [ 300.172917][ T9842] EXT4-fs error (device sda1): ext4_discard_preallocations:5681: comm syz.2.841: Error -117 reading block bitmap for 5 [ 300.217731][ T5830] Bluetooth: hci0: unexpected event 0x3e length: 728 > 260 [ 300.217754][ T5830] Bluetooth: hci0: unexpected subevent 0x0c length: 727 > 5 [ 301.998153][ T9877] ima: policy update failed [ 302.028535][ T30] audit: type=1802 audit(42011.443:11): pid=9877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.847" res=0 errno=0 [ 302.056783][ T9877] netlink: 25 bytes leftover after parsing attributes in process `syz.3.847'. [ 302.320089][ T9889] netlink: 302 bytes leftover after parsing attributes in process `syz.3.851'. [ 302.548993][ T9897] program syz.3.853 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 302.789377][ T9906] random: crng reseeded on system resumption [ 303.377876][ T5830] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 303.952752][ T9929] device-mapper: ioctl: Unable to rename non-existent device,  to „ [ 305.468409][ T9966] netlink: 'syz.2.868': attribute type 2 has an invalid length. [ 306.468183][ T9992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.872'. [ 308.430868][T10022] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 308.516497][ T9999] bond0: option fail_over_mac: invalid value () [ 308.522843][T10022] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 309.556707][T10044] bond0: option fail_over_mac: invalid value () [ 310.369480][T10055] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 312.115827][T10081] netlink: 28 bytes leftover after parsing attributes in process `syz.0.891'. [ 313.577758][ T30] audit: type=1400 audit(42022.998:12): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=10091 comm="syz.3.894" [ 313.786456][ T5826] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 313.961214][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 313.961235][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 313.961243][ T5826] Call Trace: [ 313.961248][ T5826] [ 313.961253][ T5826] dump_stack_lvl+0x16c/0x1f0 [ 313.961287][ T5826] dump_header+0x101/0x930 [ 313.961309][ T5826] oom_kill_process+0x272/0xa40 [ 313.961329][ T5826] out_of_memory+0x350/0x1700 [ 313.961351][ T5826] ? __pfx_out_of_memory+0x10/0x10 [ 313.961374][ T5826] mem_cgroup_out_of_memory+0x118/0x130 [ 313.961391][ T5826] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 313.961411][ T5826] ? do_raw_spin_unlock+0x172/0x230 [ 313.961432][ T5826] try_charge_memcg+0x695/0xd30 [ 313.961456][ T5826] ? __pfx_try_charge_memcg+0x10/0x10 [ 313.961481][ T5826] ? find_held_lock+0x2b/0x80 [ 313.961503][ T5826] charge_memcg+0x8a/0x230 [ 313.961523][ T5826] mem_cgroup_swapin_charge_folio+0xbb/0x440 [ 313.961540][ T5826] __read_swap_cache_async+0x397/0x500 [ 313.961561][ T5826] ? __pfx___read_swap_cache_async+0x10/0x10 [ 313.961587][ T5826] swap_cluster_readahead+0x432/0x770 [ 313.961610][ T5826] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 313.961627][ T5826] ? __lock_acquire+0xb8a/0x1c90 [ 313.961641][ T5826] ? css_rstat_updated+0x1c2/0x510 [ 313.961662][ T5826] ? __pfx_css_rstat_updated+0x10/0x10 [ 313.961687][ T5826] ? __lock_acquire+0x622/0x1c90 [ 313.961699][ T5826] ? get_vma_policy+0x242/0x3c0 [ 313.961715][ T5826] swapin_readahead+0x13a/0xd60 [ 313.961739][ T5826] ? __pfx_swapin_readahead+0x10/0x10 [ 313.961756][ T5826] ? swap_cache_get_folio+0x267/0x8e0 [ 313.961772][ T5826] ? swap_cache_get_folio+0x267/0x8e0 [ 313.961787][ T5826] ? swap_cache_get_folio+0x267/0x8e0 [ 313.961805][ T5826] ? swap_cache_get_folio+0x267/0x8e0 [ 313.961822][ T5826] ? swap_cache_get_folio+0x1f/0x8e0 [ 313.961837][ T5826] ? swap_cache_get_folio+0x293/0x8e0 [ 313.961855][ T5826] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 313.961871][ T5826] ? __pfx_get_swap_device+0x10/0x10 [ 313.961892][ T5826] ? do_swap_page+0x125/0x6340 [ 313.961908][ T5826] do_swap_page+0x86c/0x6340 [ 313.961930][ T5826] ? __pfx_do_swap_page+0x10/0x10 [ 313.961945][ T5826] ? __pfx_default_wake_function+0x10/0x10 [ 313.961965][ T5826] ? __lock_acquire+0x622/0x1c90 [ 313.961980][ T5826] ? rcu_is_watching+0x12/0xc0 [ 313.961998][ T5826] ? ___pte_offset_map+0x2ad/0x4f0 [ 313.962023][ T5826] __handle_mm_fault+0x17d1/0x2aa0 [ 313.962044][ T5826] ? __pfx___handle_mm_fault+0x10/0x10 [ 313.962063][ T5826] ? lock_vma_under_rcu+0x176/0x530 [ 313.962085][ T5826] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 313.962100][ T5826] ? get_timespec64+0x136/0x1b0 [ 313.962116][ T5826] handle_mm_fault+0x589/0xd10 [ 313.962133][ T5826] ? __pkru_allows_pkey+0x11/0xb0 [ 313.962151][ T5826] do_user_addr_fault+0x60c/0x1370 [ 313.962170][ T5826] ? rcu_is_watching+0x12/0xc0 [ 313.962190][ T5826] exc_page_fault+0x64/0xc0 [ 313.962210][ T5826] asm_exc_page_fault+0x26/0x30 [ 313.962223][ T5826] RIP: 0033:0x7fbdbe5c1788 [ 313.962235][ T5826] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 313.962248][ T5826] RSP: 002b:00007ffc7db81980 EFLAGS: 00010293 [ 313.962260][ T5826] RAX: 0000000000000000 RBX: 000000000000029c RCX: 00007fbdbe5c1785 [ 313.962268][ T5826] RDX: 00007ffc7db819c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 313.962277][ T5826] RBP: 00007ffc7db81a2c R08: 0000000000000000 R09: 0000000000000000 [ 313.962290][ T5826] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 313.962298][ T5826] R13: 00000000000927c0 R14: 000000000004c90a R15: 00007ffc7db81a80 [ 313.962317][ T5826] [ 313.962322][ T5826] memory: usage 3072kB, limit 3072kB, failcnt 97556 [ 315.132864][ T5826] memory+swap: usage 996kB, limit 9007199254740988kB, failcnt 0 [ 315.184862][ T5826] kmem: usage 612kB, limit 9007199254740988kB, failcnt 0 [ 315.218621][ T5826] Memory cgroup stats for /syz3: [ 315.218725][ T5826] cache 0 [ 315.247310][ T7472] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:23: bg 1: bad block bitmap checksum [ 315.273493][ T5826] rss 0 [ 315.291430][ T5826] rss_huge 0 [ 315.304934][ T5826] shmem 0 [ 315.307865][ T5826] mapped_file 0 [ 315.313391][ T7472] EXT4-fs: 2 callbacks suppressed [ 315.313402][ T7472] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1186 with max blocks 2 with error 74 [ 315.346282][ T5826] dirty 0 [ 315.360880][ T5826] writeback 0 [ 315.372301][ T5826] workingset_refault_anon 9270 [ 315.396405][ T5826] workingset_refault_file 17892 [ 315.411605][ T7472] EXT4-fs (sda1): This should not happen!! Data will be lost [ 315.411605][ T7472] [ 315.428866][ T5826] swap 176128 [ 315.439582][ T5826] swapcached 147456 [ 315.452979][ T5826] pgpgin 227050 [ 315.489215][ T5826] pgpgout 230718 [ 315.492771][ T5826] pgfault 188755 [ 315.511688][ T5826] pgmajfault 4812 [ 315.526828][ T5826] inactive_anon 0 [ 315.550027][ T5826] active_anon 147456 [ 315.571175][ T5826] inactive_file 0 [ 315.574813][ T5826] active_file 0 [ 315.599675][ T5826] unevictable 0 [ 315.616013][ T5826] hierarchical_memory_limit 3145728 [ 315.638718][ T5826] hierarchical_memsw_limit 9223372036854771712 [ 315.665113][ T5826] total_cache 0 [ 315.668571][ T5826] total_rss 0 [ 315.692289][ T5826] total_rss_huge 0 [ 315.709860][ T5826] total_shmem 0 [ 315.713314][ T5826] total_mapped_file 0 [ 315.734133][ T5826] total_dirty 0 [ 315.758189][ T5826] total_writeback 0 [ 315.772601][ T5826] total_workingset_refault_anon 9270 [ 315.788327][T10117] Process accounting paused [ 315.809948][ T5826] total_workingset_refault_file 17892 [ 315.815322][ T5826] total_swap 176128 [ 315.848932][ T5826] total_swapcached 147456 [ 315.853269][ T5826] total_pgpgin 227050 [ 315.857222][ T5826] total_pgpgout 230718 [ 315.899235][ T5826] total_pgfault 188755 [ 315.924401][ T5826] total_pgmajfault 4812 [ 315.940471][ T5826] total_inactive_anon 0 [ 315.978982][ T5826] total_active_anon 147456 [ 316.003213][ T5826] total_inactive_file 0 [ 316.043327][ T5826] total_active_file 0 [ 316.078927][ T5826] total_unevictable 0 [ 316.095108][ T5826] anon_cost 0 [ 316.098397][ T5826] file_cost 0 [ 316.126899][ T5826] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.894,pid=10091,uid=0 [ 316.179299][ T5826] Memory cgroup out of memory: OOM victim 10091 (syz.3.894) is already exiting. Skip killing the task [ 316.973412][T10152] can0: slcan on pty66. [ 317.070692][T10152] can0 (unregistered): slcan off pty66. [ 317.122921][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.129306][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.630567][T10171] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.0.912: bg 2: bad block bitmap checksum [ 317.770820][T10171] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1191 with max blocks 2 with error 74 [ 317.938298][T10171] EXT4-fs (sda1): This should not happen!! Data will be lost [ 317.938298][T10171] [ 320.053161][T10206] random: crng reseeded on system resumption [ 320.457729][T10226] program syz.3.918 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 321.408880][ T30] audit: type=1800 audit(42030.824:13): pid=10252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.923" name="bus" dev="tmpfs" ino=1300 res=0 errno=0 [ 323.613662][T10284] program syz.0.929 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 323.892308][T10286] netlink: 342 bytes leftover after parsing attributes in process `syz.2.931'. [ 325.238087][T10305] netlink: 284 bytes leftover after parsing attributes in process `syz.0.945'. [ 325.609980][T10318] FAULT_INJECTION: forcing a failure. [ 325.609980][T10318] name fail_futex, interval 1, probability 0, space 0, times 0 [ 325.652879][T10318] CPU: 0 UID: 0 PID: 10318 Comm: syz.0.939 Not tainted syzkaller #0 PREEMPT(full) [ 325.652900][T10318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 325.652908][T10318] Call Trace: [ 325.652913][T10318] [ 325.652919][T10318] dump_stack_lvl+0x16c/0x1f0 [ 325.652943][T10318] should_fail_ex+0x512/0x640 [ 325.652967][T10318] get_futex_key+0x1d0/0x1560 [ 325.652992][T10318] ? __pfx_get_futex_key+0x10/0x10 [ 325.653014][T10318] ? __mutex_trylock_common+0xe9/0x250 [ 325.653034][T10318] futex_wake+0xea/0x530 [ 325.653051][T10318] ? __pfx_futex_wake+0x10/0x10 [ 325.653066][T10318] ? __lock_acquire+0xb8a/0x1c90 [ 325.653094][T10318] do_futex+0x1e3/0x350 [ 325.653109][T10318] ? __pfx_do_futex+0x10/0x10 [ 325.653121][T10318] ? __might_fault+0xe3/0x190 [ 325.653144][T10318] mm_release+0x24e/0x300 [ 325.653164][T10318] do_exit+0x68e/0x2bf0 [ 325.653182][T10318] ? __pfx_do_exit+0x10/0x10 [ 325.653196][T10318] ? do_raw_spin_lock+0x12c/0x2b0 [ 325.653212][T10318] ? find_held_lock+0x2b/0x80 [ 325.653232][T10318] do_group_exit+0xd3/0x2a0 [ 325.653247][T10318] get_signal+0x2671/0x26d0 [ 325.653271][T10318] ? poll_select_finish+0x376/0x6b0 [ 325.653290][T10318] ? __pfx_get_signal+0x10/0x10 [ 325.653315][T10318] arch_do_signal_or_restart+0x8f/0x790 [ 325.653337][T10318] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 325.653363][T10318] ? __pfx_ksys_write+0x10/0x10 [ 325.653385][T10318] exit_to_user_mode_loop+0x85/0x130 [ 325.653402][T10318] do_syscall_64+0x426/0xfa0 [ 325.653424][T10318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.653437][T10318] RIP: 0033:0x7f606338eec9 [ 325.653449][T10318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.653462][T10318] RSP: 002b:00007f60641cd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 325.653475][T10318] RAX: fffffffffffffdfe RBX: 00007f60635e6180 RCX: 00007f606338eec9 [ 325.653484][T10318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 325.653492][T10318] RBP: 00007f60641cd090 R08: 0000000000000000 R09: 0000000000000000 [ 325.653500][T10318] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 325.653509][T10318] R13: 00007f60635e6218 R14: 00007f60635e6180 R15: 00007ffd1f668cf8 [ 325.653527][T10318] [ 325.879401][ C0] vkms_vblank_simulate: vblank timer overrun [ 328.597875][T10367] random: crng reseeded on system resumption [ 329.651556][T10382] random: crng reseeded on system resumption [ 330.527396][T10403] netlink: 342 bytes leftover after parsing attributes in process `syz.1.957'. [ 330.753317][T10408] debugfs: '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211' [ 331.969205][T10432] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.2.964: bg 3: bad block bitmap checksum [ 332.034153][T10432] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 1178 with max blocks 1 with error 74 [ 332.092457][T10436] random: crng reseeded on system resumption [ 332.133123][T10432] EXT4-fs (sda1): This should not happen!! Data will be lost [ 332.133123][T10432] [ 334.481454][T10473] futex_wake_op: syz.3.968 tries to shift op by -2048; fix this program [ 334.708515][T10473] futex_wake_op: syz.3.968 tries to shift op by -2048; fix this program [ 334.990344][ T6957] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1347 with max blocks 28 with error 117 [ 335.075160][ T6957] EXT4-fs (sda1): This should not happen!! Data will be lost [ 335.075160][ T6957] [ 335.168194][ T6957] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1395 with max blocks 10 with error 117 [ 335.235565][ T6957] EXT4-fs (sda1): This should not happen!! Data will be lost [ 335.235565][ T6957] getty: ttyS0: read error: Resource temporarily unavailable [ 336.627734][ T5830] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 337.360635][T10523] random: crng reseeded on system resumption [ 337.600861][T10530] Process accounting resumed [ 338.221176][T10532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.984'. [ 338.254652][T10532] netlink: 'syz.1.984': attribute type 2 has an invalid length. [ 338.602260][T10538] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(10) [ 338.650489][ T5839] Bluetooth: hci2: command 0x0419 tx timeout [ 340.230717][ T5839] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 341.440735][T10568] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 342.135274][T10594] futex_wake_op: syz.2.999 tries to shift op by -2048; fix this program [ 342.170268][T10594] futex_wake_op: syz.2.999 tries to shift op by -2048; fix this program [ 342.252065][ T5830] Bluetooth: hci3: command 0x0419 tx timeout [ 342.851456][ T5830] Bluetooth: hci1: unexpected event 0x3e length: 722 > 260 [ 342.851481][ T5830] Bluetooth: hci1: unexpected subevent 0x0e length: 721 > 15 [ 342.866423][ T5830] Bluetooth: hci1: Unable to find connection for dst 00:00:a2:f2:94:be sid 0x4c [ 345.623127][T10660] bond0: invalid ARP target specified [ 345.640547][T10664] input: jJǸ-¶š9ã%vø“û¨lÐQ  J8fi‘ as /devices/virtual/input/input19 [ 346.258310][T10679] openvswitch: netlink: Either Ethernet header or EtherType is required. syzkaller syzkaller login: [ 347.450377][ T5830] Bluetooth: hci2: unexpected event 0x30 length: 47 > 3 [ 347.685254][T10714] netlink: 'syz.0.1021': attribute type 23 has an invalid length. [ 349.101097][T10749] netlink: 'syz.1.1026': attribute type 7 has an invalid length. [ 349.155220][T10749] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1026'. [ 350.309207][T10778] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1044'. [ 351.516040][ T5839] Bluetooth: hci2: command 0x0419 tx timeout [ 351.755720][T10806] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1042'. [ 353.059470][T10824] sp0: Synchronizing with TNC è[ 353.285056][ T5830] Bluetooth: hci1: unexpected event 0x30 length: 47 > 3 [ 353.405062][T10843] openvswitch: netlink: Missing valid actions attribute. [ 354.214974][T10851] snd_aloop snd_aloop.0: control 7:257:7:ª¸è:2 is already present syzkaller syzkaller login: [ 354.451476][T10851] FAULT_INJECTION: forcing a failure. [ 354.451476][T10851] name failslab, interval 1, probability 0, space 0, times 0 [ 354.495294][T10857] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1368 with max blocks 37 with error 117 [ 354.576159][T10857] EXT4-fs (sda1): This should not happen!! Data will be lost [ 354.576159][T10857] [ 354.626554][T10851] CPU: 0 UID: 0 PID: 10851 Comm: syz.1.1056 Not tainted syzkaller #0 PREEMPT(full) [ 354.626576][T10851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 354.626585][T10851] Call Trace: [ 354.626590][T10851] [ 354.626596][T10851] dump_stack_lvl+0x16c/0x1f0 [ 354.626621][T10851] should_fail_ex+0x512/0x640 [ 354.626643][T10851] ? __kmalloc_cache_noprof+0x5f/0x780 [ 354.626663][T10851] should_failslab+0xc2/0x120 [ 354.626677][T10851] __kmalloc_cache_noprof+0x72/0x780 [ 354.626695][T10851] ? rfkill_fop_open+0x1b6/0x750 [ 354.626714][T10851] ? __pfx_rfkill_fop_open+0x10/0x10 [ 354.626730][T10851] ? rfkill_fop_open+0x1b6/0x750 [ 354.626745][T10851] rfkill_fop_open+0x1b6/0x750 [ 354.626765][T10851] ? __pfx_rfkill_fop_open+0x10/0x10 [ 354.626792][T10851] misc_open+0x26d/0x450 [ 354.626817][T10851] ? __pfx_misc_open+0x10/0x10 [ 354.626837][T10851] chrdev_open+0x234/0x6a0 [ 354.626859][T10851] ? __pfx_apparmor_file_open+0x10/0x10 [ 354.626874][T10851] ? __pfx_chrdev_open+0x10/0x10 [ 354.626896][T10851] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 354.626919][T10851] do_dentry_open+0x982/0x1530 [ 354.626939][T10851] ? __pfx_chrdev_open+0x10/0x10 [ 354.626962][T10851] vfs_open+0x82/0x3f0 [ 354.626979][T10851] path_openat+0x1de4/0x2cb0 [ 354.627005][T10851] ? __pfx_path_openat+0x10/0x10 [ 354.627025][T10851] ? __lock_acquire+0xb8a/0x1c90 [ 354.627041][T10851] do_filp_open+0x20b/0x470 [ 354.627061][T10851] ? __pfx_do_filp_open+0x10/0x10 [ 354.627095][T10851] ? alloc_fd+0x471/0x7d0 [ 354.627118][T10851] do_sys_openat2+0x11b/0x1d0 [ 354.627133][T10851] ? __pfx_do_sys_openat2+0x10/0x10 [ 354.627156][T10851] __x64_sys_openat+0x174/0x210 [ 354.627171][T10851] ? __pfx___x64_sys_openat+0x10/0x10 [ 354.627195][T10851] do_syscall_64+0xcd/0xfa0 [ 354.627216][T10851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.627230][T10851] RIP: 0033:0x7f197b38eec9 [ 354.627243][T10851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.627261][T10851] RSP: 002b:00007f197c18e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 354.627276][T10851] RAX: ffffffffffffffda RBX: 00007f197b5e5fa0 RCX: 00007f197b38eec9 [ 354.627286][T10851] RDX: 0000000000183440 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 354.627295][T10851] RBP: 00007f197b411f91 R08: 0000000000000000 R09: 0000000000000000 [ 354.627304][T10851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.627313][T10851] R13: 00007f197b5e6038 R14: 00007f197b5e5fa0 R15: 00007ffdbc4504a8 [ 354.627333][T10851] [ 357.225463][ T5830] Bluetooth: hci3: unexpected event 0x30 length: 47 > 3 [ 357.352606][T10911] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1341 with max blocks 30 with error 117 [ 357.573867][T10911] EXT4-fs (sda1): This should not happen!! Data will be lost [ 357.573867][T10911] [ 359.405677][ T5830] Bluetooth: hci1: command 0x0419 tx timeout [ 361.313607][ T5830] Bluetooth: hci3: command 0x0419 tx timeout [ 364.742688][T11047] random: crng reseeded on system resumption [ 364.828410][T11047] nvme_fcloop: unknown parameter or missing value '0' [ 364.906178][T11048] hub 1-0:1.0: USB hub found [ 364.945443][T11048] hub 1-0:1.0: 1 port detected [ 364.986244][T11047] Restarting kernel threads ... [ 365.013511][T11047] Done restarting kernel threads. [ 365.518536][ T6957] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1359 with max blocks 16 with error 117 [ 365.605256][ T6957] EXT4-fs (sda1): This should not happen!! Data will be lost [ 365.605256][ T6957] [ 365.660810][ T6957] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 903 with max blocks 8 with error 117 [ 365.754005][ T6957] EXT4-fs (sda1): This should not happen!! Data will be lost [ 365.754005][ T6957] [ 365.825153][ T6957] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1395 with max blocks 10 with error 117 [ 365.853092][T11071] binder: BINDER_SET_CONTEXT_MGR already set [ 365.892748][T11071] binder: 11069:11071 ioctl 4018620d 9 returned -16 [ 365.916029][ T6957] EXT4-fs (sda1): This should not happen!! Data will be lost [ 365.916029][ T6957] [ 368.805906][T11135] FAULT_INJECTION: forcing a failure. [ 368.805906][T11135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.853529][T11135] CPU: 0 UID: 0 PID: 11135 Comm: syz.1.1108 Not tainted syzkaller #0 PREEMPT(full) [ 368.853551][T11135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 368.853560][T11135] Call Trace: [ 368.853566][T11135] [ 368.853571][T11135] dump_stack_lvl+0x16c/0x1f0 [ 368.853596][T11135] should_fail_ex+0x512/0x640 [ 368.853621][T11135] _copy_from_user+0x2e/0xd0 [ 368.853636][T11135] get_user_ifreq+0x77/0x1c0 [ 368.853650][T11135] sock_do_ioctl+0x16b/0x280 [ 368.853664][T11135] ? __pfx_sock_do_ioctl+0x10/0x10 [ 368.853682][T11135] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 368.853704][T11135] sock_ioctl+0x227/0x6b0 [ 368.853720][T11135] ? __pfx_sock_ioctl+0x10/0x10 [ 368.853734][T11135] ? hook_file_ioctl_common+0x145/0x410 [ 368.853756][T11135] ? __fget_files+0x20e/0x3c0 [ 368.853776][T11135] ? __pfx_sock_ioctl+0x10/0x10 [ 368.853792][T11135] __x64_sys_ioctl+0x18e/0x210 [ 368.853809][T11135] do_syscall_64+0xcd/0xfa0 [ 368.853830][T11135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.853845][T11135] RIP: 0033:0x7f197b38eec9 [ 368.853857][T11135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.853871][T11135] RSP: 002b:00007f197c18e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.853885][T11135] RAX: ffffffffffffffda RBX: 00007f197b5e5fa0 RCX: 00007f197b38eec9 [ 368.853898][T11135] RDX: 0000200000000080 RSI: 0000000000008933 RDI: 0000000000000016 [ 368.853906][T11135] RBP: 00007f197b411f91 R08: 0000000000000000 R09: 0000000000000000 [ 368.853915][T11135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.853923][T11135] R13: 00007f197b5e6038 R14: 00007f197b5e5fa0 R15: 00007ffdbc4504a8 [ 368.853942][T11135] [ 370.935625][T11169] netlink: 302 bytes leftover after parsing attributes in process `syz.2.1117'. [ 370.979056][T11169] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1117'. [ 370.999098][T11169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.019662][T11169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.042989][T11169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.061184][T11169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 371.834098][ T6960] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 1346 with max blocks 5 with error 117 [ 371.913262][ T6960] EXT4-fs (sda1): This should not happen!! Data will be lost [ 371.913262][ T6960] [ 371.962047][ T6960] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1401 with max blocks 4 with error 117 [ 372.023548][ T6960] EXT4-fs (sda1): This should not happen!! Data will be lost [ 372.023548][ T6960] [ 372.086085][ T6960] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 1343 with max blocks 3 with error 117 [ 372.137491][ T6960] EXT4-fs (sda1): This should not happen!! Data will be lost [ 372.137491][ T6960] [ 372.307577][ T6960] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1377 with max blocks 18 with error 117 [ 372.377898][ T6960] EXT4-fs (sda1): This should not happen!! Data will be lost [ 372.377898][ T6960] [ 372.440063][ T6960] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 1321 with max blocks 22 with error 117 [ 372.518387][ T6960] EXT4-fs (sda1): This should not happen!! Data will be lost [ 372.518387][ T6960] [ 374.883008][T11242] random: crng reseeded on system resumption [ 374.969791][T11242] nvme_fcloop: unknown parameter or missing value '0' [ 375.034594][T11242] hub 1-0:1.0: USB hub found [ 375.058948][T11242] hub 1-0:1.0: 1 port detected [ 375.096077][T11247] Restarting kernel threads ... [ 375.136114][T11247] Done restarting kernel threads. [ 375.741953][T11258] netlink: 302 bytes leftover after parsing attributes in process `syz.1.1139'. [ 375.817413][T11258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1139'. [ 375.851220][T11258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.891692][T11258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.934110][T11258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.970066][T11258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.539993][T11285] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 377.928374][T11296] FAULT_INJECTION: forcing a failure. [ 377.928374][T11296] name failslab, interval 1, probability 0, space 0, times 0 [ 377.987158][T11296] CPU: 0 UID: 0 PID: 11296 Comm: syz.1.1151 Not tainted syzkaller #0 PREEMPT(full) [ 377.987181][T11296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 377.987189][T11296] Call Trace: [ 377.987194][T11296] [ 377.987201][T11296] dump_stack_lvl+0x16c/0x1f0 [ 377.987226][T11296] should_fail_ex+0x512/0x640 [ 377.987254][T11296] ? __kmalloc_noprof+0xca/0x880 [ 377.987274][T11296] should_failslab+0xc2/0x120 [ 377.987288][T11296] __kmalloc_noprof+0xdd/0x880 [ 377.987305][T11296] ? process_preds+0x48b/0x1c50 [ 377.987323][T11296] ? process_preds+0x48b/0x1c50 [ 377.987336][T11296] process_preds+0x48b/0x1c50 [ 377.987354][T11296] ? create_filter_start.constprop.0+0x56/0x300 [ 377.987372][T11296] create_filter+0x140/0x210 [ 377.987387][T11296] ? __pfx_create_filter+0x10/0x10 [ 377.987403][T11296] ? __pfx___mutex_lock+0x10/0x10 [ 377.987423][T11296] ? find_held_lock+0x2b/0x80 [ 377.987444][T11296] apply_event_filter+0x220/0x500 [ 377.987460][T11296] ? __pfx_apply_event_filter+0x10/0x10 [ 377.987481][T11296] event_filter_write+0x16d/0x290 [ 377.987501][T11296] ? __pfx_event_filter_write+0x10/0x10 [ 377.987518][T11296] vfs_write+0x2a0/0x11d0 [ 377.987540][T11296] ? __pfx___mutex_lock+0x10/0x10 [ 377.987560][T11296] ? __pfx_vfs_write+0x10/0x10 [ 377.987585][T11296] ? __fget_files+0x20e/0x3c0 [ 377.987609][T11296] ksys_write+0x12a/0x250 [ 377.987627][T11296] ? __pfx_ksys_write+0x10/0x10 [ 377.987652][T11296] do_syscall_64+0xcd/0xfa0 [ 377.987673][T11296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.987687][T11296] RIP: 0033:0x7f197b38eec9 [ 377.987699][T11296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.987713][T11296] RSP: 002b:00007f197c18e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 377.987727][T11296] RAX: ffffffffffffffda RBX: 00007f197b5e5fa0 RCX: 00007f197b38eec9 [ 377.987737][T11296] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 377.987745][T11296] RBP: 00007f197b411f91 R08: 0000000000000000 R09: 0000000000000000 [ 377.987754][T11296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.987762][T11296] R13: 00007f197b5e6038 R14: 00007f197b5e5fa0 R15: 00007ffdbc4504a8 [ 377.987782][T11296] [ 378.539229][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.546347][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.703067][T11343] device-mapper: ioctl: Invalid ioctl structure: uuid ±, name , dev 5 [ 381.984105][ T7492] EXT4-fs: 6 callbacks suppressed [ 381.984118][ T7492] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1393 with max blocks 12 with error 117 [ 382.095884][ T7492] EXT4-fs (sda1): This should not happen!! Data will be lost [ 382.095884][ T7492] [ 382.887601][T11389] random: crng reseeded on system resumption [ 382.969581][T11389] Restarting kernel threads ... [ 382.989806][T11389] Done restarting kernel threads. [ 385.143994][T11429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1182'. [ 386.094382][T11443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1186'. [ 388.666480][T11490] netlink: 346 bytes leftover after parsing attributes in process `syz.2.1197'. [ 388.865070][T11494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1198'. [ 392.316355][T11558] random: crng reseeded on system resumption [ 392.392463][T11558] nvme_fcloop: unknown parameter or missing value '0' [ 392.467332][T11558] hub 1-0:1.0: USB hub found [ 392.485784][T11558] hub 1-0:1.0: 1 port detected [ 392.529857][T11561] Restarting kernel threads ... [ 392.552133][T11561] Done restarting kernel threads. [ 393.288617][T11579] random: crng reseeded on system resumption [ 393.348583][T11579] nvme_fcloop: unknown parameter or missing value '0' [ 393.491724][T11579] hub 1-0:1.0: USB hub found [ 393.520409][T11579] hub 1-0:1.0: 1 port detected [ 393.547398][T11581] Restarting kernel threads ... [ 393.568962][T11581] Done restarting kernel threads. [ 393.770633][T11585] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 397.459550][T11638] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1228'. [ 399.612780][T11677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1237'. [ 400.434113][T11691] random: crng reseeded on system resumption [ 400.485988][T11691] nvme_fcloop: unknown parameter or missing value '0' [ 400.515226][T11691] Restarting kernel threads ... [ 400.535885][T11691] Done restarting kernel threads. [ 404.998025][T11731] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 405.042789][T11731] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 405.094866][T11731] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 405.511969][T11751] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 902 with max blocks 9 with error 117 [ 405.692908][T11751] EXT4-fs (sda1): This should not happen!! Data will be lost [ 405.692908][T11751] [ 405.743065][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 405.752446][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 405.762815][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 405.770596][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 405.780195][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 406.108503][T11757] chnl_net:caif_netlink_parms(): no params data found [ 406.349331][T11757] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.359882][T11765] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1253'. [ 406.378438][T11757] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.393739][T11757] bridge_slave_0: entered allmulticast mode [ 406.426721][T11757] bridge_slave_0: entered promiscuous mode [ 406.462168][T11757] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.488362][T11757] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.518009][T11757] bridge_slave_1: entered allmulticast mode [ 406.550319][T11757] bridge_slave_1: entered promiscuous mode [ 406.639031][T11757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.673892][T11757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.798931][T11757] team0: Port device team_slave_0 added [ 406.816114][T11757] team0: Port device team_slave_1 added [ 406.922820][T11757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.936160][T11757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.017914][T11757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.071015][T11757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.092364][T11773] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 407.106929][T11757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.159008][T11773] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 407.196009][T11757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.221696][T11773] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 407.322697][T11773] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 407.339569][T11757] hsr_slave_0: entered promiscuous mode [ 407.364825][T11757] hsr_slave_1: entered promiscuous mode [ 407.384065][T11757] debugfs: 'hsr0' already exists in 'hsr' [ 407.396272][T11773] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 407.412316][T11757] Cannot create hsr debugfs directory [ 407.491481][T11773] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 407.638555][T11773] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 408.015391][T11757] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 408.041697][T11757] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 408.068894][T11757] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 408.132328][T11757] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 408.342924][T11757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.396225][T11757] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.431146][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.438238][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.496887][ T1042] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.504016][ T1042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.575411][T11757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 408.963242][T11757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.088209][ T5839] Bluetooth: hci2: command 0x0419 tx timeout [ 409.094268][ T30] audit: type=1800 audit(44166.770:14): pid=11804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1258" name="dbroot" dev="configfs" ino=42928 res=0 errno=0 [ 409.123962][T11804] db_root: not a directory: /dev/audio1 [ 409.170196][ T5839] Bluetooth: hci3: command 0x0419 tx timeout [ 409.246502][ T5839] Bluetooth: hci1: command 0x0419 tx timeout [ 409.326569][ T5839] Bluetooth: hci0: command 0x0419 tx timeout [ 409.404412][ T5839] Bluetooth: hci4: command 0x041b tx timeout [ 409.546389][T11757] veth0_vlan: entered promiscuous mode [ 409.588816][T11757] veth1_vlan: entered promiscuous mode [ 409.667571][T11757] veth0_macvtap: entered promiscuous mode [ 409.699073][T11757] veth1_macvtap: entered promiscuous mode [ 409.753314][T11757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.788906][T11757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.839618][ T6957] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.867341][ T6957] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.897459][ T6957] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.934378][ T6957] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.078502][ T6960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.110430][ T6960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.152196][ T7472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.175805][ T7472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.474412][ T5839] Bluetooth: hci4: command 0x041b tx timeout [ 412.440527][ T7479] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 929 with max blocks 3 with error 117 [ 412.496349][ T7479] EXT4-fs (sda1): This should not happen!! Data will be lost [ 412.496349][ T7479] [ 412.607400][ T7479] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1369 with max blocks 6 with error 117 [ 412.672165][ T7479] EXT4-fs (sda1): This should not happen!! Data will be lost [ 412.672165][ T7479] [ 413.544949][ T5839] Bluetooth: hci4: command 0x041b tx timeout [ 415.113501][T11878] __vm_enough_memory: pid: 11878, comm: syz.4.1272, bytes: 4398046511104 not enough memory for the allocation [ 415.614974][ T5839] Bluetooth: hci4: command 0x041b tx timeout [ 415.710538][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 415.719728][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 415.728073][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 415.735925][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 415.743340][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 415.904682][T11884] binder: 11883:11884 ioctl c018620c 0 returned -1 [ 415.965815][T11884] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1274'. [ 416.177458][T11450] syz.3.1187 (11450) used greatest stack depth: 18312 bytes left [ 416.640656][ T7472] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.802613][ T7472] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.839893][T11881] chnl_net:caif_netlink_parms(): no params data found [ 416.894223][ T7472] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.950871][ T7472] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.058520][T11881] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.075797][T11881] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.096054][T11881] bridge_slave_0: entered allmulticast mode [ 417.109778][T11881] bridge_slave_0: entered promiscuous mode [ 417.150592][T11881] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.167858][T11881] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.186450][T11881] bridge_slave_1: entered allmulticast mode [ 417.197554][T11881] bridge_slave_1: entered promiscuous mode [ 417.303790][T11881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.372826][T11881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.694830][ T5830] Bluetooth: hci4: command 0x041b tx timeout [ 417.707692][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 417.716938][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 417.726341][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 417.734224][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 417.745043][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 417.766658][ T5830] Bluetooth: hci5: command tx timeout [ 418.139312][T11881] team0: Port device team_slave_0 added [ 418.173803][T11881] team0: Port device team_slave_1 added [ 418.179954][ T7472] bridge_slave_1: left allmulticast mode [ 418.186118][ T7472] bridge_slave_1: left promiscuous mode [ 418.201424][ T7472] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.214370][ T7472] bridge_slave_0: left allmulticast mode [ 418.220013][ T7472] bridge_slave_0: left promiscuous mode [ 418.226094][ T7472] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.080569][ T7472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.111783][ T7472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.141908][ T7472] bond0 (unregistering): Released all slaves [ 419.340933][T11881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.363454][T11881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.418875][T11881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.443271][T11881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.460483][T11881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.502047][T11881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 419.641076][T11881] hsr_slave_0: entered promiscuous mode [ 419.655614][T11881] hsr_slave_1: entered promiscuous mode [ 419.667097][T11881] debugfs: 'hsr0' already exists in 'hsr' [ 419.672825][T11881] Cannot create hsr debugfs directory [ 419.737329][ T7472] hsr_slave_0: left promiscuous mode [ 419.745013][ T7472] hsr_slave_1: left promiscuous mode [ 419.758892][ T5830] Bluetooth: hci3: command tx timeout [ 419.765811][ T5839] Bluetooth: hci4: command 0x041b tx timeout [ 419.778113][ T7472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.797944][ T7472] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.811000][ T7472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.822212][ T7472] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.836976][ T5839] Bluetooth: hci5: command tx timeout [ 419.876722][ T7472] veth1_macvtap: left promiscuous mode [ 419.894453][ T7472] veth0_macvtap: left promiscuous mode [ 419.910215][ T7472] veth1_vlan: left promiscuous mode [ 419.922639][ T7472] veth0_vlan: left promiscuous mode [ 420.536662][ T7472] team0 (unregistering): Port device team_slave_1 removed [ 420.579282][ T7472] team0 (unregistering): Port device team_slave_0 removed [ 421.401487][T11896] chnl_net:caif_netlink_parms(): no params data found [ 421.825625][ T5839] Bluetooth: hci3: command tx timeout [ 421.906076][ T5839] Bluetooth: hci5: command tx timeout [ 422.262073][T11881] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 422.300431][T11896] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.323581][T11896] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.330804][T11896] bridge_slave_0: entered allmulticast mode [ 422.346936][T11896] bridge_slave_0: entered promiscuous mode [ 422.365031][T11896] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.390262][T11896] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.403301][T11896] bridge_slave_1: entered allmulticast mode [ 422.421378][T11896] bridge_slave_1: entered promiscuous mode [ 422.433411][T11881] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 422.454400][T11881] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 422.557154][T11881] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 422.580266][T11896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.616084][T11896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.684142][T11896] team0: Port device team_slave_0 added [ 422.701766][T11896] team0: Port device team_slave_1 added [ 422.764154][T11896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.792489][T11896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.847593][T11896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.891933][T11896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.899079][T11896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.981005][T11896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.087183][T11896] hsr_slave_0: entered promiscuous mode [ 423.103986][T11896] hsr_slave_1: entered promiscuous mode [ 423.116728][T11896] debugfs: 'hsr0' already exists in 'hsr' [ 423.141046][T11896] Cannot create hsr debugfs directory [ 423.274478][T11881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.434664][T11881] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.475331][ T7472] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.482477][ T7472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.541258][ T6957] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.548400][ T6957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.585626][T11881] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 423.602618][T11881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 423.616736][T11896] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 423.636546][T11896] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 423.678639][T11896] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 423.711186][T11896] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 423.864688][T11896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.888312][T11881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.897525][ T5839] Bluetooth: hci3: command tx timeout [ 423.924750][T11896] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.950555][ T7472] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.957711][ T7472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.976670][ T5839] Bluetooth: hci5: command tx timeout [ 424.007967][ T7472] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.015653][ T7472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.356789][T11881] veth0_vlan: entered promiscuous mode [ 424.381490][T11881] veth1_vlan: entered promiscuous mode [ 424.396183][T11896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.447051][T11881] veth0_macvtap: entered promiscuous mode [ 424.468369][T11881] veth1_macvtap: entered promiscuous mode [ 424.510586][T11881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.539148][T11881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.574244][ T7492] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.594097][ T7492] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.634929][ T7492] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.666342][ T7492] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.738798][ T7492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.764051][ T7492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.824545][ T8157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 424.846385][ T8157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.866996][T11896] veth0_vlan: entered promiscuous mode [ 424.898356][T11896] veth1_vlan: entered promiscuous mode [ 424.978270][T11896] veth0_macvtap: entered promiscuous mode [ 424.997903][T11896] veth1_macvtap: entered promiscuous mode [ 425.041722][T11896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.059676][T11896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 425.073567][ T7472] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.101653][ T7472] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.141186][ T7472] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.191680][ T7472] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.274588][ T7479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.303151][ T7479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.365703][ T7472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.390692][ T7472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.970783][ T5839] Bluetooth: hci3: command tx timeout [ 426.715548][T12076] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1287'. [ 426.726442][T12076] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1287'. [ 429.658786][T12118] random: crng reseeded on system resumption [ 429.694926][T12118] nvme_fcloop: unknown parameter or missing value '0' [ 429.729732][T12118] hub 1-0:1.0: USB hub found [ 429.747377][T12118] hub 1-0:1.0: 1 port detected [ 429.769441][T12119] Restarting kernel threads ... [ 429.790418][T12119] Done restarting kernel threads. [ 429.951900][T12122] random: crng reseeded on system resumption [ 430.016123][T12122] nvme_fcloop: unknown parameter or missing value '0' [ 430.064408][T12122] hub 1-0:1.0: USB hub found [ 430.095708][T12122] hub 1-0:1.0: 1 port detected [ 430.119255][T12123] Restarting kernel threads ... [ 430.146608][T12123] Done restarting kernel threads. [ 430.331427][T12125] binder: 12124:12125 ioctl c018620c 0 returned -1 [ 430.379191][T12125] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1297'. [ 430.632285][ T5830] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 430.644846][ T5830] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 430.653146][ T5830] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 430.661021][ T5830] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 430.674711][ T5830] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 431.147253][T12128] chnl_net:caif_netlink_parms(): no params data found [ 431.459276][T12128] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.478706][T12128] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.508976][T12128] bridge_slave_0: entered allmulticast mode [ 431.538366][T12128] bridge_slave_0: entered promiscuous mode [ 431.582457][T12128] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.589565][T12128] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.599140][T12128] bridge_slave_1: entered allmulticast mode [ 431.641286][T12128] bridge_slave_1: entered promiscuous mode [ 431.743927][T12128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.770733][T12128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.840018][T12128] team0: Port device team_slave_0 added [ 431.856893][T12128] team0: Port device team_slave_1 added [ 431.918972][T12128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.925925][T12128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.997749][T12128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.035188][T12128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.042674][T12128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.072050][T12128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.152258][T12128] hsr_slave_0: entered promiscuous mode [ 432.159962][T12128] hsr_slave_1: entered promiscuous mode [ 432.165962][T12128] debugfs: 'hsr0' already exists in 'hsr' [ 432.172626][T12128] Cannot create hsr debugfs directory [ 432.435988][T12156] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1309'. [ 432.468923][T12156] : renamed from gre0 (while UP) [ 432.492006][T12128] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 432.503005][T12156] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1309'. [ 432.536511][T12128] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 432.561848][T12128] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 432.597049][T12128] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 432.734646][ T5830] Bluetooth: hci6: command tx timeout [ 432.843401][T12128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.930264][T12128] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.979096][ T7479] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.986235][ T7479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.024371][ T7479] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.031503][ T7479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.466010][T12128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.649014][T12185] FAULT_INJECTION: forcing a failure. [ 433.649014][T12185] name failslab, interval 1, probability 0, space 0, times 0 [ 433.699872][T12185] CPU: 0 UID: 0 PID: 12185 Comm: syz.6.1305 Not tainted syzkaller #0 PREEMPT(full) [ 433.699896][T12185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 433.699905][T12185] Call Trace: [ 433.699910][T12185] [ 433.699916][T12185] dump_stack_lvl+0x16c/0x1f0 [ 433.699941][T12185] should_fail_ex+0x512/0x640 [ 433.699963][T12185] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 433.699985][T12185] should_failslab+0xc2/0x120 [ 433.699999][T12185] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 433.700018][T12185] ? __d_alloc+0x32/0xae0 [ 433.700042][T12185] ? __d_alloc+0x32/0xae0 [ 433.700069][T12185] __d_alloc+0x32/0xae0 [ 433.700092][T12185] d_alloc_pseudo+0x1c/0xc0 [ 433.700108][T12185] alloc_file_pseudo+0xcf/0x230 [ 433.700125][T12185] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 433.700141][T12185] ? alloc_fd+0x471/0x7d0 [ 433.700161][T12185] sock_alloc_file+0x50/0x210 [ 433.700184][T12185] __sys_socket+0x1c0/0x260 [ 433.700201][T12185] ? __pfx___sys_socket+0x10/0x10 [ 433.700217][T12185] ? xfd_validate_state+0x61/0x180 [ 433.700231][T12185] ? __pfx_ksys_write+0x10/0x10 [ 433.700253][T12185] __x64_sys_socket+0x72/0xb0 [ 433.700269][T12185] ? lockdep_hardirqs_on+0x7c/0x110 [ 433.700289][T12185] do_syscall_64+0xcd/0xfa0 [ 433.700309][T12185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.700323][T12185] RIP: 0033:0x7f1d4098eec9 [ 433.700335][T12185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.700348][T12185] RSP: 002b:00007f1d4179e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 433.700362][T12185] RAX: ffffffffffffffda RBX: 00007f1d40be5fa0 RCX: 00007f1d4098eec9 [ 433.700372][T12185] RDX: 0000000000000300 RSI: 0000000000080003 RDI: 0000000000000011 [ 433.700380][T12185] RBP: 00007f1d40a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 433.700389][T12185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.700397][T12185] R13: 00007f1d40be6038 R14: 00007f1d40be5fa0 R15: 00007fff2a8938a8 [ 433.700417][T12185] [ 434.323175][T12128] veth0_vlan: entered promiscuous mode [ 434.359798][T12128] veth1_vlan: entered promiscuous mode [ 434.425587][T12128] veth0_macvtap: entered promiscuous mode [ 434.484641][T12128] veth1_macvtap: entered promiscuous mode [ 434.563660][T12128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.634697][T12128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.696823][ T8157] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.706958][ T8157] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.805023][ T5830] Bluetooth: hci6: command tx timeout [ 434.829430][ T8157] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.864512][ T8157] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.134440][ T7472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.142263][ T7472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.287044][ T8157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.325956][ T8157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.821675][T12232] random: crng reseeded on system resumption [ 435.911212][T12232] nvme_fcloop: unknown parameter or missing value '0' [ 435.975790][T12232] hub 1-0:1.0: USB hub found [ 436.013364][T12232] hub 1-0:1.0: 1 port detected [ 436.048507][T12236] Restarting kernel threads ... [ 436.092035][T12236] Done restarting kernel threads. [ 436.349428][T12241] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1312'. [ 436.407273][T12241] : renamed from bond_slave_1 (while UP) [ 436.460336][T12243] openvswitch: netlink: IP tunnel dst address not specified [ 436.875223][ T5830] Bluetooth: hci6: command tx timeout [ 436.951522][T12263] cougar: G6 mapped to space [ 437.184301][T12263] cougar: G6 mapped to space [ 438.534927][T12294] netlink: 342 bytes leftover after parsing attributes in process `syz.7.1323'. [ 438.590899][T12294] netlink: 342 bytes leftover after parsing attributes in process `syz.7.1323'. [ 438.684265][T12294] netlink: 342 bytes leftover after parsing attributes in process `syz.7.1323'. [ 438.762057][T12300] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 438.855391][T12294] netlink: 342 bytes leftover after parsing attributes in process `syz.7.1323'. [ 438.951389][ T5830] Bluetooth: hci6: command tx timeout [ 439.003535][ T5830] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 439.015991][ T5830] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 439.026658][ T5830] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 439.036574][ T5830] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 439.054710][ T5830] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 439.596916][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.603993][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.935173][T12306] chnl_net:caif_netlink_parms(): no params data found [ 441.095096][ T5830] Bluetooth: hci7: command tx timeout [ 441.393673][T12365] binder: 12364:12365 ioctl c018620c 0 returned -1 [ 441.502575][T12365] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1330'. [ 441.551475][T12306] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.582293][T12306] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.608475][T12306] bridge_slave_0: entered allmulticast mode [ 441.647879][T12306] bridge_slave_0: entered promiscuous mode [ 441.688132][T12306] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.695871][T12306] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.703637][T12306] bridge_slave_1: entered allmulticast mode [ 441.710787][T12306] bridge_slave_1: entered promiscuous mode [ 441.879765][T12306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.949128][T12306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.161870][T12306] team0: Port device team_slave_0 added [ 442.215013][T12306] team0: Port device team_slave_1 added [ 442.436748][T12306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.467850][T12306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.575380][T12306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.651071][T12306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.676395][T12306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.751789][T12306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.887646][T12306] hsr_slave_0: entered promiscuous mode [ 442.896344][T12306] hsr_slave_1: entered promiscuous mode [ 442.902964][T12306] debugfs: 'hsr0' already exists in 'hsr' [ 442.915165][T12306] Cannot create hsr debugfs directory [ 443.166309][ T5830] Bluetooth: hci7: command tx timeout [ 443.315949][T12306] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 443.345898][T12306] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 443.373421][T12306] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 443.437726][T12306] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 443.488267][T12409] FAULT_INJECTION: forcing a failure. [ 443.488267][T12409] name failslab, interval 1, probability 0, space 0, times 0 [ 443.610523][T12409] CPU: 0 UID: 0 PID: 12409 Comm: syz.7.1338 Not tainted syzkaller #0 PREEMPT(full) [ 443.610543][T12409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 443.610552][T12409] Call Trace: [ 443.610556][T12409] [ 443.610562][T12409] dump_stack_lvl+0x16c/0x1f0 [ 443.610586][T12409] should_fail_ex+0x512/0x640 [ 443.610607][T12409] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 443.610628][T12409] should_failslab+0xc2/0x120 [ 443.610642][T12409] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 443.610659][T12409] ? lockdep_init_map_type+0x5c/0x280 [ 443.610675][T12409] ? __d_alloc+0x32/0xae0 [ 443.610697][T12409] ? __d_alloc+0x32/0xae0 [ 443.610718][T12409] __d_alloc+0x32/0xae0 [ 443.610736][T12409] ? file_init_path+0x4fe/0x760 [ 443.610751][T12409] d_alloc_pseudo+0x1c/0xc0 [ 443.610766][T12409] alloc_file_pseudo+0xcf/0x230 [ 443.610781][T12409] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 443.610796][T12409] ? __pfx_unix_socketpair+0x10/0x10 [ 443.610817][T12409] sock_alloc_file+0x50/0x210 [ 443.610839][T12409] __sys_socketpair+0x34e/0x5a0 [ 443.610857][T12409] ? __pfx___sys_socketpair+0x10/0x10 [ 443.610876][T12409] ? xfd_validate_state+0x61/0x180 [ 443.610890][T12409] ? __pfx_do_writev+0x10/0x10 [ 443.610911][T12409] __x64_sys_socketpair+0x96/0x100 [ 443.610927][T12409] ? lockdep_hardirqs_on+0x7c/0x110 [ 443.610946][T12409] do_syscall_64+0xcd/0xfa0 [ 443.610967][T12409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.610986][T12409] RIP: 0033:0x7fb78438eec9 [ 443.610997][T12409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.611011][T12409] RSP: 002b:00007fb785257038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 443.611025][T12409] RAX: ffffffffffffffda RBX: 00007fb7845e6180 RCX: 00007fb78438eec9 [ 443.611034][T12409] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 443.611042][T12409] RBP: 00007fb784411f91 R08: 0000000000000000 R09: 0000000000000000 [ 443.611050][T12409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.611058][T12409] R13: 00007fb7845e6218 R14: 00007fb7845e6180 R15: 00007ffc671b8e38 [ 443.611077][T12409] [ 443.886331][T12419] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1339'. [ 444.233773][T12306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.278769][T12306] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.316113][ T8157] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.323267][ T8157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.357198][ T8157] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.364363][ T8157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.475270][T12425] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 444.492662][T12306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 444.538493][T12427] binder: 12426:12427 ioctl c018620c 0 returned -1 [ 444.591959][T12427] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1341'. [ 444.755761][T12432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1343'. [ 444.982839][T12306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.238206][ T5830] Bluetooth: hci7: command tx timeout [ 445.526714][T12449] usb usb15: usbfs: process 12449 (syz.7.1345) did not claim interface 0 before use [ 445.701477][T12306] veth0_vlan: entered promiscuous mode [ 445.867161][T12306] veth1_vlan: entered promiscuous mode [ 446.101259][T12306] veth0_macvtap: entered promiscuous mode [ 446.150320][T12306] veth1_macvtap: entered promiscuous mode [ 446.246968][T12306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.418548][T12306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.500524][ T6957] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.532998][ T6957] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.570201][ T6957] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.635219][ T6957] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.896462][ T6957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.935379][ T6957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.015630][ T6957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.056654][ T6957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.196641][T12474] netlink: 252 bytes leftover after parsing attributes in process `syz.5.1351'. [ 447.305890][ T5830] Bluetooth: hci7: command tx timeout [ 447.311425][T12477] netlink: 252 bytes leftover after parsing attributes in process `syz.5.1351'. [ 447.668075][ T30] audit: type=1804 audit(44205.542:15): pid=12484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1352" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 448.214091][ T6957] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1391 with max blocks 14 with error 117 [ 448.269114][ T6957] EXT4-fs (sda1): This should not happen!! Data will be lost [ 448.269114][ T6957] [ 448.520385][T12492] FAULT_INJECTION: forcing a failure. [ 448.520385][T12492] name failslab, interval 1, probability 0, space 0, times 0 [ 448.562495][T12492] CPU: 0 UID: 0 PID: 12492 Comm: syz.7.1354 Not tainted syzkaller #0 PREEMPT(full) [ 448.562518][T12492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 448.562527][T12492] Call Trace: [ 448.562532][T12492] [ 448.562538][T12492] dump_stack_lvl+0x16c/0x1f0 [ 448.562563][T12492] should_fail_ex+0x512/0x640 [ 448.562585][T12492] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 448.562606][T12492] should_failslab+0xc2/0x120 [ 448.562620][T12492] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 448.562638][T12492] ? rcu_is_watching+0x12/0xc0 [ 448.562658][T12492] ? __d_alloc+0x32/0xae0 [ 448.562680][T12492] ? __d_alloc+0x32/0xae0 [ 448.562698][T12492] __d_alloc+0x32/0xae0 [ 448.562719][T12492] d_alloc_pseudo+0x1c/0xc0 [ 448.562734][T12492] alloc_file_pseudo+0xcf/0x230 [ 448.562750][T12492] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 448.562764][T12492] ? security_inode_init_security_anon+0x79/0x240 [ 448.562785][T12492] secretmem_file_create.constprop.0+0x89/0x290 [ 448.562808][T12492] __x64_sys_memfd_secret+0xc1/0x150 [ 448.562828][T12492] do_syscall_64+0xcd/0xfa0 [ 448.562849][T12492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.562862][T12492] RIP: 0033:0x7fb78438eec9 [ 448.562875][T12492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.562888][T12492] RSP: 002b:00007fb785299038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 448.562902][T12492] RAX: ffffffffffffffda RBX: 00007fb7845e5fa0 RCX: 00007fb78438eec9 [ 448.562912][T12492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 448.562920][T12492] RBP: 00007fb784411f91 R08: 0000000000000000 R09: 0000000000000000 [ 448.562928][T12492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 448.562936][T12492] R13: 00007fb7845e6038 R14: 00007fb7845e5fa0 R15: 00007ffc671b8e38 [ 448.562956][T12492] [ 449.360255][T12507] ima: policy update failed [ 449.372241][ T30] audit: type=1802 audit(44207.250:16): pid=12507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.1358" res=0 errno=0 [ 449.946716][T12518] ptp ptp0: max value is 20 [ 450.452199][ T30] audit: type=1800 audit(44208.345:17): pid=12531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1362" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 452.040221][T12558] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 452.415811][T12562] netlink: 268 bytes leftover after parsing attributes in process `syz.8.1369'. [ 454.705521][T12592] binder: 12591:12592 ioctl c018620c 0 returned -1 [ 456.090084][T12612] program syz.8.1382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 456.115215][T12612] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 456.190799][T12614] random: crng reseeded on system resumption [ 456.234438][T12614] hub 1-0:1.0: USB hub found [ 456.255054][T12614] hub 1-0:1.0: 1 port detected [ 456.285692][T12615] Restarting kernel threads ... [ 456.325281][T12615] Done restarting kernel threads. [ 457.329383][T12628] netlink: 5 bytes leftover after parsing attributes in process `syz.8.1388'. [ 458.095675][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 458.104893][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 458.113039][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 458.120738][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 458.128606][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 458.679475][T12644] chnl_net:caif_netlink_parms(): no params data found [ 459.262594][T12644] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.310055][T12644] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.369746][T12644] bridge_slave_0: entered allmulticast mode [ 459.378553][T12644] bridge_slave_0: entered promiscuous mode [ 459.452704][T12644] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.475979][T12644] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.504205][T12644] bridge_slave_1: entered allmulticast mode [ 459.535323][T12644] bridge_slave_1: entered promiscuous mode [ 459.651714][T12644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.702844][T12644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.852586][T12644] team0: Port device team_slave_0 added [ 459.909879][T12644] team0: Port device team_slave_1 added [ 460.028600][T12644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.053734][T12644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.145177][T12644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.196725][T12644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.205190][ T5839] Bluetooth: hci3: command tx timeout [ 460.224172][T12644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.318031][T12644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.542336][T12682] binder: 12681:12682 ioctl c018620c 0 returned -1 [ 460.577910][T12682] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1401'. [ 460.610742][T12644] hsr_slave_0: entered promiscuous mode [ 460.624231][T12644] hsr_slave_1: entered promiscuous mode [ 460.644733][T12644] debugfs: 'hsr0' already exists in 'hsr' [ 460.656296][T12644] Cannot create hsr debugfs directory [ 461.293549][T12644] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 461.318539][T12644] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 461.350794][T12644] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 461.394875][T12644] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 461.649320][T12644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.711048][T12644] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.754036][ T8158] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.761171][ T8158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.770896][T12705] binder: 12704:12705 ioctl c018620c 0 returned -1 [ 461.822851][ T8158] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.829998][ T8158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.855302][T12705] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1406'. [ 462.279109][ T5839] Bluetooth: hci3: command tx timeout [ 462.480075][T12644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.096931][T12644] veth0_vlan: entered promiscuous mode [ 463.126581][T12644] veth1_vlan: entered promiscuous mode [ 463.200388][T12644] veth0_macvtap: entered promiscuous mode [ 463.225395][T12644] veth1_macvtap: entered promiscuous mode [ 463.272505][T12644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.313890][T12644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.372367][ T7479] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.418158][ T7479] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.467084][ T7479] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.521280][ T7479] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.680121][ T8143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.728817][ T8143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.831728][ T8157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.861899][ T8157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.242256][T12748] binder: 12747:12748 ioctl c018620c 0 returned -1 [ 464.298426][T12748] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1416'. [ 464.345945][ T5839] Bluetooth: hci3: command tx timeout [ 464.845556][T12768] netlink: 252 bytes leftover after parsing attributes in process `syz.8.1421'. [ 464.876049][T12768] netlink: 252 bytes leftover after parsing attributes in process `syz.8.1421'. [ 464.938237][ T30] audit: type=1806 audit(44222.893:18): xattr=01 res=-22 [ 466.419859][ T5839] Bluetooth: hci3: command tx timeout [ 469.482110][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 469.491376][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 469.502854][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 469.510492][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 469.518988][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 470.014798][T12838] chnl_net:caif_netlink_parms(): no params data found [ 470.167149][ T30] audit: type=1804 audit(44228.148:19): pid=12852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.1440" name="/newroot/34/file0" dev="tmpfs" ino=192 res=1 errno=0 [ 470.234352][T12838] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.250830][T12838] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.266301][T12838] bridge_slave_0: entered allmulticast mode [ 470.282821][T12838] bridge_slave_0: entered promiscuous mode [ 470.298336][T12838] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.315223][T12838] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.333662][T12838] bridge_slave_1: entered allmulticast mode [ 470.350851][T12838] bridge_slave_1: entered promiscuous mode [ 470.406367][T12838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.434050][T12838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.596524][T12838] team0: Port device team_slave_0 added [ 470.633537][T12838] team0: Port device team_slave_1 added [ 470.762677][T12838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.788422][T12838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.814819][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.913384][T12838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.957480][T12838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.977789][T12838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.049999][T12838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.208347][T12838] hsr_slave_0: entered promiscuous mode [ 471.230942][T12838] hsr_slave_1: entered promiscuous mode [ 471.252275][T12838] debugfs: 'hsr0' already exists in 'hsr' [ 471.272189][T12838] Cannot create hsr debugfs directory [ 471.593230][ T5830] Bluetooth: hci5: command tx timeout [ 471.656956][T12838] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.764169][T12838] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.885023][T12838] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.021337][T12838] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.225334][T12838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 472.239039][T12870] netlink: 186 bytes leftover after parsing attributes in process `syz.8.1445'. [ 472.259036][T12838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 472.279699][T12838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 472.299950][T12838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 472.428204][T12838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.471684][T12838] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.496415][ T6957] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.503553][ T6957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.539571][ T6957] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.546660][ T6957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.809219][T12838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.851526][T12838] veth0_vlan: entered promiscuous mode [ 472.867605][T12838] veth1_vlan: entered promiscuous mode [ 472.905945][T12838] veth0_macvtap: entered promiscuous mode [ 472.915182][T12838] veth1_macvtap: entered promiscuous mode [ 472.934598][T12838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.956629][T12838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.972633][ T8158] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.988433][ T8158] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.024669][ T8158] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.054120][ T8158] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.175977][ T8143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.207004][ T8143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.272152][ T8157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.288011][ T8157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.296714][T12885] sg_write: data in/out 2359516/158 bytes for SCSI command 0x0-- guessing data in; [ 473.296714][T12885] program syz.8.1447 not setting count and/or reply_len properly [ 473.663658][ T5830] Bluetooth: hci5: command tx timeout [ 474.031844][T12903] blktrace: Concurrent blktraces are not allowed on loop2 [ 474.246158][T12906] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.8.1452: bg 7: bad block bitmap checksum [ 474.337867][T12906] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 474.445265][T12906] EXT4-fs (sda1): This should not happen!! Data will be lost [ 474.445265][T12906] [ 475.289196][T12914] random: crng reseeded on system resumption [ 475.371589][T12914] hub 1-0:1.0: USB hub found [ 475.382680][T12914] hub 1-0:1.0: 1 port detected [ 475.415206][T12914] Restarting kernel threads ... [ 475.430089][T12914] Done restarting kernel threads. [ 475.732326][ T5830] Bluetooth: hci5: command tx timeout [ 475.950429][T12923] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1457'. [ 475.960300][T12922] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1457'. [ 476.074773][T12923] bond0: (slave bond_slave_0): Releasing backup interface [ 476.196817][T12925] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 476.525706][T12930] random: crng reseeded on system resumption [ 477.014680][T12937] FAULT_INJECTION: forcing a failure. [ 477.014680][T12937] name failslab, interval 1, probability 0, space 0, times 0 [ 477.082036][T12937] CPU: 0 UID: 0 PID: 12937 Comm: syz.8.1460 Not tainted syzkaller #0 PREEMPT(full) [ 477.082059][T12937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 477.082068][T12937] Call Trace: [ 477.082074][T12937] [ 477.082080][T12937] dump_stack_lvl+0x16c/0x1f0 [ 477.082106][T12937] should_fail_ex+0x512/0x640 [ 477.082134][T12937] should_failslab+0xc2/0x120 [ 477.082150][T12937] __kmalloc_cache_noprof+0x72/0x780 [ 477.082168][T12937] ? preempt_schedule_thunk+0x16/0x30 [ 477.082186][T12937] ? once_disable_jump+0x46/0x200 [ 477.082210][T12937] ? once_disable_jump+0x46/0x200 [ 477.082248][T12937] once_disable_jump+0x46/0x200 [ 477.082270][T12937] inet6_ehashfn+0x420/0x4f0 [ 477.082301][T12937] ? __pfx_inet6_ehashfn+0x10/0x10 [ 477.082322][T12937] ? find_held_lock+0x2b/0x80 [ 477.082343][T12937] ? sk_setup_caps+0x30d/0xbc0 [ 477.082364][T12937] inet6_hash_connect+0xe2/0x180 [ 477.082388][T12937] tcp_v6_connect+0x133c/0x2180 [ 477.082402][T12937] ? aa_label_sk_perm+0x195/0x600 [ 477.082424][T12937] ? __pfx_tcp_v6_connect+0x10/0x10 [ 477.082437][T12937] ? find_held_lock+0x2b/0x80 [ 477.082466][T12937] ? __lock_acquire+0xb8a/0x1c90 [ 477.082482][T12937] ? __inet_stream_connect+0x915/0xf50 [ 477.082499][T12937] __inet_stream_connect+0x915/0xf50 [ 477.082522][T12937] ? __pfx___inet_stream_connect+0x10/0x10 [ 477.082539][T12937] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 477.082558][T12937] ? __pfx_inet_stream_connect+0x10/0x10 [ 477.082576][T12937] ? __local_bh_enable_ip+0xa4/0x120 [ 477.082599][T12937] ? __pfx_inet_stream_connect+0x10/0x10 [ 477.082615][T12937] inet_stream_connect+0x57/0xa0 [ 477.082634][T12937] __sys_connect_file+0x141/0x1a0 [ 477.082654][T12937] __sys_connect+0x13b/0x160 [ 477.082671][T12937] ? __pfx___sys_connect+0x10/0x10 [ 477.082695][T12937] ? xfd_validate_state+0x61/0x180 [ 477.082709][T12937] ? __sys_setsockopt+0x140/0x1a0 [ 477.082731][T12937] __x64_sys_connect+0x72/0xb0 [ 477.082747][T12937] ? lockdep_hardirqs_on+0x7c/0x110 [ 477.082767][T12937] do_syscall_64+0xcd/0xfa0 [ 477.082788][T12937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.082802][T12937] RIP: 0033:0x7f471a78eec9 [ 477.082815][T12937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.082828][T12937] RSP: 002b:00007f471b682038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 477.082843][T12937] RAX: ffffffffffffffda RBX: 00007f471a9e6270 RCX: 00007f471a78eec9 [ 477.082852][T12937] RDX: 000000000000001b RSI: 00002000000018c0 RDI: 0000000000000003 [ 477.082861][T12937] RBP: 00007f471a811f91 R08: 0000000000000000 R09: 0000000000000000 [ 477.082870][T12937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.082878][T12937] R13: 00007f471a9e6308 R14: 00007f471a9e6270 R15: 00007ffda7cbe3f8 [ 477.082899][T12937] [ 477.624540][T12939] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1462'. [ 477.633606][T12939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.640998][T12939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.652605][T12939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.660058][T12939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.808204][ T5830] Bluetooth: hci5: command tx timeout [ 478.065631][T12948] zswap: compressor not available [ 478.523428][ T7479] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 918 with max blocks 14 with error 117 [ 478.601681][ T7479] EXT4-fs (sda1): This should not happen!! Data will be lost [ 478.601681][ T7479] [ 478.804059][ T7479] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 478.852683][ T7479] EXT4-fs (sda1): This should not happen!! Data will be lost [ 478.852683][ T7479] [ 479.160285][T12967] bond0: option arp_validate: invalid value () [ 480.362538][T12979] binder: 12978:12979 ioctl c018620c 0 returned -1 [ 480.391715][T12979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1472'. [ 482.818307][T13033] binder: 13032:13033 ioctl c018620c 0 returned -1 [ 482.853143][T13029] can0: slcan on ttyS2. [ 482.877871][T13033] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1484'. [ 482.971191][T13028] can0 (unregistered): slcan off ttyS2. [ 483.485520][ T5839] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 483.495205][ T5839] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 483.505235][ T5839] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 483.516047][ T5839] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 483.523430][ T5839] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 483.539668][T13051] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1489'. [ 483.963004][T13052] chnl_net:caif_netlink_parms(): no params data found [ 484.268777][T13052] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.308851][T13052] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.337708][T13052] bridge_slave_0: entered allmulticast mode [ 484.372647][T13052] bridge_slave_0: entered promiscuous mode [ 484.390887][T13052] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.407089][T13052] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.425252][T13052] bridge_slave_1: entered allmulticast mode [ 484.434218][T13052] bridge_slave_1: entered promiscuous mode [ 484.468030][T13052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.492819][T13052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.527131][T13052] team0: Port device team_slave_0 added [ 484.556172][T13052] team0: Port device team_slave_1 added [ 484.726440][T13078] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 484.797638][T13052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.809348][T13052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.860278][T13052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.914548][T13052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.928040][T13052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 484.956740][T13052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.015880][T13052] hsr_slave_0: entered promiscuous mode [ 485.022750][T13052] hsr_slave_1: entered promiscuous mode [ 485.029710][T13052] debugfs: 'hsr0' already exists in 'hsr' [ 485.035871][T13052] Cannot create hsr debugfs directory [ 485.156323][T13052] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.222081][T13052] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.310377][T13052] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.589660][T13052] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.627956][ T5839] Bluetooth: hci8: command tx timeout [ 486.280221][T13052] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 486.357672][T13052] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 486.428948][T13052] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 486.463706][T13052] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 486.702081][T13052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.766402][T13052] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.789507][ T8157] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.796670][ T8157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.843265][ T8157] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.850403][ T8157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.954074][ T5830] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 486.966052][ T5830] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 486.988366][ T5830] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 486.999405][ T5830] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 487.006932][ T5830] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 487.396535][T13118] ima: policy update failed [ 487.418015][ T30] audit: type=1802 audit(44245.489:20): pid=13118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.1501" res=0 errno=0 [ 487.482853][T13052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.571003][T13105] chnl_net:caif_netlink_parms(): no params data found [ 487.598785][T13122] random: crng reseeded on system resumption [ 487.667916][T13122] hub 1-0:1.0: USB hub found [ 487.676460][ T5839] Bluetooth: hci8: command tx timeout [ 487.698597][T13122] hub 1-0:1.0: 1 port detected [ 487.732155][T13126] Restarting kernel threads ... [ 487.766628][T13126] Done restarting kernel threads. [ 487.774815][T13052] veth0_vlan: entered promiscuous mode [ 487.826776][T13052] veth1_vlan: entered promiscuous mode [ 487.920515][T13105] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.950918][T13105] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.974811][T13105] bridge_slave_0: entered allmulticast mode [ 487.990653][T13105] bridge_slave_0: entered promiscuous mode [ 488.026779][T13105] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.053925][T13105] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.078087][T13105] bridge_slave_1: entered allmulticast mode [ 488.097984][T13105] bridge_slave_1: entered promiscuous mode [ 488.215311][T13105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.259863][T13105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.348506][T13052] veth0_macvtap: entered promiscuous mode [ 488.375100][T13105] team0: Port device team_slave_0 added [ 488.397802][T13052] veth1_macvtap: entered promiscuous mode [ 488.421338][T13105] team0: Port device team_slave_1 added [ 488.567961][T13052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.603326][T13105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.624821][T13105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.680981][T13105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.697362][T13052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.708042][T13105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.717465][T13105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.759559][T13105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.815440][ T8143] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.841542][ T8143] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.850259][ T8143] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.026494][ T8143] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.037865][ T5839] Bluetooth: hci9: command tx timeout [ 489.146900][T13145] binder: 13144:13145 ioctl c018620c 0 returned -1 [ 489.168774][T13105] hsr_slave_0: entered promiscuous mode [ 489.213479][T13105] hsr_slave_1: entered promiscuous mode [ 489.223196][T13145] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1507'. [ 489.258132][T13105] debugfs: 'hsr0' already exists in 'hsr' [ 489.301645][T13105] Cannot create hsr debugfs directory [ 489.689151][ T7479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.713037][ T7479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.746719][ T5839] Bluetooth: hci8: command tx timeout [ 489.818660][ T8157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.872037][ T8157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.100047][ T5839] Bluetooth: hci9: command tx timeout [ 491.124985][T13105] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 491.210752][T13105] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 491.498426][T13105] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 491.773532][T13105] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 491.788323][T13183] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 491.818432][ T5839] Bluetooth: hci8: command tx timeout [ 491.929790][T13183] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 491.935864][T13183] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 492.482878][T13105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.671845][T13183] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 492.929475][T13105] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.103484][T13183] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 493.174652][ T5830] Bluetooth: hci9: command tx timeout [ 493.182064][ T8157] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.189220][ T8157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.221722][T13183] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 493.285213][ T6960] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.292399][ T6960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.335890][T13183] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 493.461747][T13183] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 493.481730][T13105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 493.509468][T13183] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 493.566782][T13183] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 493.617038][T13183] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 493.647412][T13183] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 493.682730][T13183] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 493.779754][T13183] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 493.785701][T13183] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 493.807321][ T5830] Bluetooth: hci2: command 0x0419 tx timeout [ 493.897665][T13183] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 493.924317][T13183] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 493.950968][T13183] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 493.971234][ T5830] Bluetooth: hci0: command 0x0419 tx timeout [ 493.977538][ T5839] Bluetooth: hci1: command 0x0419 tx timeout [ 494.021591][T13105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.038126][T13183] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 494.063353][T13183] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 494.098010][T13183] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 494.147574][T13183] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 494.187383][T13105] veth0_vlan: entered promiscuous mode [ 494.284207][T13105] veth1_vlan: entered promiscuous mode [ 494.458264][T13231] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 494.479632][T13105] veth0_macvtap: entered promiscuous mode [ 494.533590][T13105] veth1_macvtap: entered promiscuous mode [ 494.542195][T13231] EXT4-fs (sda1): This should not happen!! Data will be lost [ 494.542195][T13231] [ 494.640703][T13105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.684104][ T5830] Bluetooth: hci4: command 0x041b tx timeout [ 494.706062][T13105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.815227][ T8143] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.948354][T13247] binder: 13246:13247 ioctl c018620c 0 returned -1 [ 495.060895][T13247] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1520'. [ 495.075165][ T8143] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.161778][ T5830] Bluetooth: hci6: command 0x0c1a tx timeout [ 495.307379][ T8143] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.422120][ T8143] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.481211][ T5830] Bluetooth: hci7: command 0x0c1a tx timeout [ 495.651975][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 495.729543][ T6957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.779424][ T6957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.802451][ T5830] Bluetooth: hci5: command 0x0c1a tx timeout [ 495.962276][ T5830] Bluetooth: hci8: command 0x0c1a tx timeout [ 496.071496][ T8158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.117659][ T5830] Bluetooth: hci9: command 0x0c1a tx timeout [ 496.138210][ T8158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.230775][ T5830] Bluetooth: hci6: command 0x0c1a tx timeout [ 497.559267][ T5830] Bluetooth: hci7: command 0x0c1a tx timeout [ 497.708218][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 497.872199][ T5830] Bluetooth: hci5: command 0x0c1a tx timeout [ 498.027089][ T5830] Bluetooth: hci8: command 0x0c1a tx timeout [ 498.187784][ T5830] Bluetooth: hci9: command 0x0c1a tx timeout [ 499.302901][ T5830] Bluetooth: hci6: command 0x0c1a tx timeout [ 499.508454][T13338] netlink: 237 bytes leftover after parsing attributes in process `syz.3.1533'. [ 499.623412][ T5830] Bluetooth: hci7: command 0x0c1a tx timeout [ 499.777497][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 499.936739][ T5830] Bluetooth: hci5: command 0x0c1a tx timeout [ 500.023575][T13351] netlink: 'syz.2.1534': attribute type 4 has an invalid length. [ 500.102232][ T5830] Bluetooth: hci8: command 0x0c1a tx timeout [ 500.141200][T13356] binder: 13354:13356 ioctl c018620c 0 returned -1 [ 500.255147][ T5830] Bluetooth: hci9: command 0x0c1a tx timeout [ 500.747764][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.754261][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.804229][T13376] mkiss: ax0: crc mode is auto. [ 501.939530][T13413] random: crng reseeded on system resumption [ 502.050200][T13413] hub 1-0:1.0: USB hub found [ 502.087733][T13413] hub 1-0:1.0: 1 port detected [ 502.899817][T13437] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1548'. [ 502.935766][T13430] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 503.673203][T13450] random: crng reseeded on system resumption [ 503.875365][T13461] hub 1-0:1.0: USB hub found [ 504.001069][T13461] hub 1-0:1.0: 1 port detected [ 504.114919][T13450] Restarting kernel threads ... [ 504.312920][T13450] Done restarting kernel threads. [ 504.564871][ T5830] Bluetooth: hci9: unexpected subevent 0x01 length: 123 > 18 [ 504.825297][T13480] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1554'. [ 505.667037][T13513] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1559'. [ 505.860093][T13516] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1557'. [ 506.621897][ T5839] Bluetooth: hci9: command 0x0c1a tx timeout [ 507.088624][T13555] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 507.503493][T13555] EXT4-fs (sda1): This should not happen!! Data will be lost [ 507.503493][T13555] [ 508.892042][T13588] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 509.014454][ T8143] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1385 with max blocks 20 with error 117 [ 509.080898][ T8143] EXT4-fs (sda1): This should not happen!! Data will be lost [ 509.080898][ T8143] [ 509.112000][T13588] EXT4-fs (sda1): This should not happen!! Data will be lost [ 509.112000][T13588] [ 511.685103][T13637] random: crng reseeded on system resumption [ 511.787859][T13637] hub 1-0:1.0: USB hub found [ 511.812948][T13637] hub 1-0:1.0: 1 port detected [ 511.830046][T13642] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1580'. [ 513.424136][T13665] db_root: cannot open: Y [ 513.709564][T13673] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 513.779405][T13673] EXT4-fs (sda1): This should not happen!! Data will be lost [ 513.779405][T13673] [ 515.449539][T13703] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1589'. [ 515.622744][T13708] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1587'. [ 518.502844][T13740] zswap: compressor 000 not available [ 519.205193][T13761] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 519.422366][T13761] EXT4-fs (sda1): This should not happen!! Data will be lost [ 519.422366][T13761] [ 521.443406][T13788] random: crng reseeded on system resumption [ 521.546157][T13789] hub 1-0:1.0: USB hub found [ 521.631554][T13789] hub 1-0:1.0: 1 port detected [ 521.716231][T13788] Restarting kernel threads ... [ 521.795600][T13788] Done restarting kernel threads. [ 523.761216][T13815] binder: 13814:13815 ioctl c018620c 0 returned -22 [ 523.890626][T13815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1615'. [ 524.680866][T13832] netlink: 'syz.1.1619': attribute type 21 has an invalid length. [ 524.746655][T13832] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1619'. [ 527.755005][T13869] random: crng reseeded on system resumption [ 527.813621][T13869] hub 1-0:1.0: USB hub found [ 527.842219][T13869] hub 1-0:1.0: 1 port detected [ 527.862918][T13872] Restarting kernel threads ... [ 527.906692][T13872] Done restarting kernel threads. [ 528.079536][T13883] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 528.460709][ T5839] Bluetooth: hci9: unexpected subevent 0x01 length: 123 > 18 [ 528.468821][ T5839] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci9/hci9:0' [ 528.482067][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) [ 528.482088][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 528.482098][ T5839] Workqueue: hci9 hci_rx_work [ 528.482124][ T5839] Call Trace: [ 528.482129][ T5839] [ 528.482135][ T5839] dump_stack_lvl+0x16c/0x1f0 [ 528.482158][ T5839] sysfs_warn_dup+0x7f/0xa0 [ 528.482181][ T5839] sysfs_create_dir_ns+0x24b/0x2b0 [ 528.482201][ T5839] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 528.482221][ T5839] ? find_held_lock+0x2b/0x80 [ 528.482244][ T5839] ? do_raw_spin_unlock+0x172/0x230 [ 528.482262][ T5839] kobject_add_internal+0x2c4/0x9b0 [ 528.482279][ T5839] kobject_add+0x16e/0x240 [ 528.482292][ T5839] ? __pfx_kobject_add+0x10/0x10 [ 528.482306][ T5839] ? do_raw_spin_unlock+0x172/0x230 [ 528.482323][ T5839] ? kobject_put+0xab/0x5a0 [ 528.482349][ T5839] device_add+0x288/0x1aa0 [ 528.482363][ T5839] ? __pfx_dev_set_name+0x10/0x10 [ 528.482377][ T5839] ? __pfx_device_add+0x10/0x10 [ 528.482479][ T5839] ? mgmt_send_event_skb+0x2fb/0x460 [ 528.482570][ T5839] hci_conn_add_sysfs+0x17e/0x230 [ 528.482651][ T5839] le_conn_complete_evt+0x1260/0x2150 [ 528.482677][ T5839] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 528.482696][ T5839] ? bt_warn+0xe4/0x120 [ 528.482712][ T5839] ? __pfx_bt_warn+0x10/0x10 [ 528.482734][ T5839] hci_le_conn_complete_evt+0x23c/0x370 [ 528.482758][ T5839] hci_le_meta_evt+0x357/0x5e0 [ 528.482777][ T5839] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 528.482799][ T5839] hci_event_packet+0x685/0x11c0 [ 528.482818][ T5839] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 528.482838][ T5839] ? __pfx_hci_event_packet+0x10/0x10 [ 528.482859][ T5839] ? kcov_remote_start+0x3c9/0x6d0 [ 528.482876][ T5839] ? lockdep_hardirqs_on+0x7c/0x110 [ 528.482904][ T5839] hci_rx_work+0x2c5/0x16b0 [ 528.482926][ T5839] ? rcu_is_watching+0x12/0xc0 [ 528.482947][ T5839] process_one_work+0x9cf/0x1b70 [ 528.482972][ T5839] ? __pfx_process_one_work+0x10/0x10 [ 528.482994][ T5839] ? assign_work+0x1a0/0x250 [ 528.483012][ T5839] worker_thread+0x6c8/0xf10 [ 528.483037][ T5839] ? __pfx_worker_thread+0x10/0x10 [ 528.483053][ T5839] kthread+0x3c5/0x780 [ 528.483069][ T5839] ? __pfx_kthread+0x10/0x10 [ 528.483086][ T5839] ? rcu_is_watching+0x12/0xc0 [ 528.483104][ T5839] ? __pfx_kthread+0x10/0x10 [ 528.483120][ T5839] ret_from_fork+0x675/0x7d0 [ 528.483135][ T5839] ? __pfx_kthread+0x10/0x10 [ 528.483150][ T5839] ret_from_fork_asm+0x1a/0x30 [ 528.483175][ T5839] [ 528.483218][ T5839] kobject: kobject_add_internal failed for hci9:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 528.773225][ T5839] Bluetooth: hci9: failed to register connection device [ 529.024160][ T6960] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 4 with max blocks 5 with error 117 [ 529.092684][ T6960] EXT4-fs (sda1): This should not happen!! Data will be lost [ 529.092684][ T6960] [ 529.165900][ T6960] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1380 with max blocks 25 with error 117 [ 529.266646][ T6960] EXT4-fs (sda1): This should not happen!! Data will be lost [ 529.266646][ T6960] [ 529.436361][ T6960] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 529.497611][ T6960] EXT4-fs (sda1): This should not happen!! Data will be lost [ 529.497611][ T6960] [ 530.280122][T13914] snd_virmidi snd_virmidi.0: control 5:9:1:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 530.319011][T13916] random: crng reseeded on system resumption [ 530.393434][T13916] hub 1-0:1.0: USB hub found [ 530.428851][T13916] hub 1-0:1.0: 1 port detected [ 530.465393][T13919] Restarting kernel threads ... [ 530.483005][T13919] Done restarting kernel threads. [ 530.816678][ T5830] Bluetooth: hci9: command 0x0c1a tx timeout [ 531.234784][T13928] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 531.408186][T13928] EXT4-fs (sda1): This should not happen!! Data will be lost [ 531.408186][T13928] [ 532.092361][T13929] EXT4-fs error (device sda1): ext4_discard_preallocations:5681: comm syz.2.1638: Error -117 reading block bitmap for 7 [ 532.897362][ T6957] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.125240][ T6957] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.385010][ T6957] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.668046][ T6957] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.284312][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 534.299330][ T6957] bridge_slave_1: left allmulticast mode [ 534.304976][ T6957] bridge_slave_1: left promiscuous mode [ 534.316953][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 534.332008][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 534.342574][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 534.350644][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 534.418356][ T6957] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.463484][ T6957] bridge_slave_0: left allmulticast mode [ 534.508532][ T6957] bridge_slave_0: left promiscuous mode [ 534.545908][ T6957] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.601307][T14010] ICMPv6: process `syz.8.1654' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 535.888014][T14007] netlink: 1176 bytes leftover after parsing attributes in process `syz.3.1653'. [ 536.252723][T14016] binder: 14015:14016 ioctl c018620c 0 returned -22 [ 536.292831][T14016] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1655'. [ 536.406892][T13996] Bluetooth: hci5: command tx timeout [ 536.613909][ T6957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.633978][ T6957] bond0 (unregistering): Released all slaves [ 536.887172][T14023] random: crng reseeded on system resumption [ 537.179768][T14032] random: crng reseeded on system resumption [ 537.310254][T14032] hub 1-0:1.0: USB hub found [ 537.361903][T14032] hub 1-0:1.0: 1 port detected [ 537.431822][T14038] Restarting kernel threads ... [ 537.538672][T14038] Done restarting kernel threads. [ 537.872422][ T6957] hsr_slave_0: left promiscuous mode [ 537.927171][ T6957] hsr_slave_1: left promiscuous mode [ 537.959535][ T6957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.019915][ T6957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.079420][ T6957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.123832][ T6957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.302432][ T6957] veth1_macvtap: left promiscuous mode [ 538.332677][ T6957] veth0_macvtap: left promiscuous mode [ 538.352818][ T6957] veth1_vlan: left promiscuous mode [ 538.378405][ T6957] veth0_vlan: left promiscuous mode [ 538.457765][T13996] Bluetooth: hci5: command tx timeout [ 539.433338][ T6957] team0 (unregistering): Port device team_slave_1 removed [ 539.533715][ T6957] team0 (unregistering): Port device team_slave_0 removed [ 540.525795][T13996] Bluetooth: hci5: command tx timeout [ 540.640104][T13973] chnl_net:caif_netlink_parms(): no params data found [ 540.886682][T14079] random: crng reseeded on system resumption [ 541.003792][T14079] Restarting kernel threads ... [ 541.087619][T14079] Done restarting kernel threads. [ 541.243411][T13973] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.293996][T13973] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.301208][T13973] bridge_slave_0: entered allmulticast mode [ 541.364799][T13973] bridge_slave_0: entered promiscuous mode [ 541.449463][T13973] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.489798][T13973] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.515565][T13973] bridge_slave_1: entered allmulticast mode [ 541.552832][T13973] bridge_slave_1: entered promiscuous mode [ 541.785254][T13973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.933132][T14103] random: crng reseeded on system resumption [ 542.053009][T14103] hub 1-0:1.0: USB hub found [ 542.100436][T14103] hub 1-0:1.0: 1 port detected [ 542.158559][T14104] Restarting kernel threads ... [ 542.187666][T14104] Done restarting kernel threads. [ 542.200992][T13973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.431501][T13973] team0: Port device team_slave_0 added [ 542.599622][T13996] Bluetooth: hci5: command tx timeout [ 542.625825][T13973] team0: Port device team_slave_1 added [ 542.815839][T13973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.846679][T13973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.019178][T13973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.355966][T13973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.431205][T13973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.651956][T13973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.912028][T14138] FAULT_INJECTION: forcing a failure. [ 543.912028][T14138] name failslab, interval 1, probability 0, space 0, times 0 [ 543.995011][T14138] CPU: 0 UID: 0 PID: 14138 Comm: syz.3.1674 Not tainted syzkaller #0 PREEMPT(full) [ 543.995033][T14138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 543.995042][T14138] Call Trace: [ 543.995048][T14138] [ 543.995054][T14138] dump_stack_lvl+0x16c/0x1f0 [ 543.995079][T14138] should_fail_ex+0x512/0x640 [ 543.995102][T14138] ? __kmalloc_noprof+0xca/0x880 [ 543.995121][T14138] should_failslab+0xc2/0x120 [ 543.995135][T14138] __kmalloc_noprof+0xdd/0x880 [ 543.995152][T14138] ? __register_sysctl_table+0xea2/0x1900 [ 543.995171][T14138] ? __register_sysctl_table+0xea2/0x1900 [ 543.995186][T14138] __register_sysctl_table+0xea2/0x1900 [ 543.995205][T14138] ? __pfx___register_sysctl_table+0x10/0x10 [ 543.995220][T14138] ? is_module_address+0x69/0xf0 [ 543.995235][T14138] ? register_net_sysctl_sz+0x228/0x3e0 [ 543.995251][T14138] ? __asan_memcpy+0x3c/0x60 [ 543.995270][T14138] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 543.995284][T14138] nf_lwtunnel_net_init+0x60/0xf0 [ 543.995299][T14138] ops_init+0x1e2/0x5f0 [ 543.995322][T14138] setup_net+0x100/0x390 [ 543.995343][T14138] ? __pfx_setup_net+0x10/0x10 [ 543.995364][T14138] ? debug_mutex_init+0x37/0x70 [ 543.995385][T14138] copy_net_ns+0x2f8/0x690 [ 543.995401][T14138] create_new_namespaces+0x3ea/0xa90 [ 543.995425][T14138] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 543.995447][T14138] ksys_unshare+0x45b/0xa40 [ 543.995461][T14138] ? __pfx_ksys_unshare+0x10/0x10 [ 543.995475][T14138] ? xfd_validate_state+0x61/0x180 [ 543.995495][T14138] __x64_sys_unshare+0x31/0x40 [ 543.995509][T14138] do_syscall_64+0xcd/0xfa0 [ 543.995529][T14138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.995543][T14138] RIP: 0033:0x7f7a7c98eec9 [ 543.995555][T14138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 543.995568][T14138] RSP: 002b:00007f7a7d886038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 543.995582][T14138] RAX: ffffffffffffffda RBX: 00007f7a7cbe6090 RCX: 00007f7a7c98eec9 [ 543.995592][T14138] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 543.995600][T14138] RBP: 00007f7a7ca11f91 R08: 0000000000000000 R09: 0000000000000000 [ 543.995608][T14138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.995616][T14138] R13: 00007f7a7cbe6128 R14: 00007f7a7cbe6090 R15: 00007ffe6d1ee958 [ 543.995635][T14138] [ 543.995642][T14138] sysctl could not get directory: /net/netfilter -12 [ 544.349481][T13973] hsr_slave_0: entered promiscuous mode [ 544.380709][T13973] hsr_slave_1: entered promiscuous mode [ 544.407305][T13973] debugfs: 'hsr0' already exists in 'hsr' [ 544.413043][T13973] Cannot create hsr debugfs directory [ 544.533302][T14145] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1675'. [ 544.875180][T14145] mac80211_hwsim hwsim40 wlan1: entered allmulticast mode [ 544.916304][T14144] bond0: invalid ARP target specified [ 546.133166][T13973] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 546.219656][T13973] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 546.426819][T13973] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 546.490373][T13973] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 547.142267][T13973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.263425][T14200] FAULT_INJECTION: forcing a failure. [ 547.263425][T14200] name failslab, interval 1, probability 0, space 0, times 0 [ 547.377615][T13973] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.387342][T14200] CPU: 0 UID: 0 PID: 14200 Comm: syz.3.1679 Not tainted syzkaller #0 PREEMPT(full) [ 547.387362][T14200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 547.387371][T14200] Call Trace: [ 547.387376][T14200] [ 547.387381][T14200] dump_stack_lvl+0x16c/0x1f0 [ 547.387406][T14200] should_fail_ex+0x512/0x640 [ 547.387428][T14200] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 547.387455][T14200] should_failslab+0xc2/0x120 [ 547.387469][T14200] kmem_cache_alloc_noprof+0x75/0x6e0 [ 547.387486][T14200] ? alloc_empty_file+0x55/0x1e0 [ 547.387504][T14200] ? alloc_empty_file+0x55/0x1e0 [ 547.387517][T14200] alloc_empty_file+0x55/0x1e0 [ 547.387531][T14200] alloc_file_pseudo+0x13a/0x230 [ 547.387546][T14200] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 547.387562][T14200] ? hugetlbfs_get_inode+0x31f/0x730 [ 547.387584][T14200] hugetlb_file_setup+0x4ce/0x620 [ 547.387606][T14200] newseg+0xa74/0xe60 [ 547.387627][T14200] ? __pfx_newseg+0x10/0x10 [ 547.387643][T14200] ? find_held_lock+0x2b/0x80 [ 547.387662][T14200] ? ipcget+0xa98/0xfa0 [ 547.387683][T14200] ipcget+0xaf3/0xfa0 [ 547.387706][T14200] ? handle_mm_fault+0x2ab/0xd10 [ 547.387722][T14200] ? __pfx_ipcget+0x10/0x10 [ 547.387740][T14200] ? __x64_sys_futex+0x1e0/0x4c0 [ 547.387754][T14200] ? __x64_sys_futex+0x1e9/0x4c0 [ 547.387770][T14200] __x64_sys_shmget+0x13b/0x1b0 [ 547.387788][T14200] ? __pfx___x64_sys_shmget+0x10/0x10 [ 547.387809][T14200] ? rcu_is_watching+0x12/0xc0 [ 547.387829][T14200] do_syscall_64+0xcd/0xfa0 [ 547.387850][T14200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.387864][T14200] RIP: 0033:0x7f7a7c98eec9 [ 547.387876][T14200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.387889][T14200] RSP: 002b:00007f7a7d823038 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 547.387903][T14200] RAX: ffffffffffffffda RBX: 00007f7a7cbe6360 RCX: 00007f7a7c98eec9 [ 547.387912][T14200] RDX: 000000000000ffff RSI: 0000000000000006 RDI: 0000000000000004 [ 547.387920][T14200] RBP: 00007f7a7ca11f91 R08: 0000000000000000 R09: 0000000000000000 [ 547.387928][T14200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.387936][T14200] R13: 00007f7a7cbe63f8 R14: 00007f7a7cbe6360 R15: 00007ffe6d1ee958 [ 547.387956][T14200] [ 547.963388][T13973] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 547.973808][T13973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 548.021087][T14208] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.028235][T14208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.051235][T14208] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.058384][T14208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.585708][T14234] binder: 14233:14234 ioctl c018620c 0 returned -22 [ 548.681287][T14234] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1686'. [ 548.771977][T13973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.010847][T13973] veth0_vlan: entered promiscuous mode [ 549.077301][T13973] veth1_vlan: entered promiscuous mode [ 549.125122][ T31] INFO: task syz.1.1200:11506 blocked for more than 143 seconds. [ 549.160739][ T31] Not tainted syzkaller #0 [ 549.165716][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 549.242933][T13973] veth0_macvtap: entered promiscuous mode [ 549.279930][ T31] task:syz.1.1200 state:D stack:28328 pid:11506 tgid:11499 ppid:5825 task_flags:0x400140 flags:0x00080002 [ 549.303853][T13973] veth1_macvtap: entered promiscuous mode [ 549.387035][ T31] Call Trace: [ 549.420873][T13973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.431967][ T31] [ 549.434912][ T31] __schedule+0x1190/0x5de0 [ 549.498880][ T31] ? check_path.constprop.0+0x24/0x50 [ 549.504293][ T31] ? __lock_acquire+0x622/0x1c90 [ 549.521347][T13973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.602442][ T31] ? __pfx___schedule+0x10/0x10 [ 549.607352][ T31] ? find_held_lock+0x2b/0x80 [ 549.682853][ T31] ? schedule+0x2d7/0x3a0 [ 549.687223][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 549.726918][ T31] schedule+0xe7/0x3a0 [ 549.754587][ T31] schedule_preempt_disabled+0x13/0x30 [ 549.784357][ T31] __mutex_lock+0x818/0x1060 [ 549.817484][ T31] ? __lock_acquire+0x622/0x1c90 [ 549.822444][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 549.871442][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 549.876527][ T31] ? net_generic+0xea/0x2a0 [ 549.918523][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 549.924305][ T31] nfsd_nl_threads_set_doit+0x687/0xbc0 [ 549.966616][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 549.972291][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 550.032609][ T31] ? rcu_is_watching+0x12/0xc0 [ 550.046229][ T31] ? bpf_lsm_capable+0x9/0x10 [ 550.050921][ T31] ? security_capable+0x7e/0x260 [ 550.090399][ T31] genl_rcv_msg+0x55c/0x800 [ 550.094935][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 550.134435][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 550.154586][ T31] netlink_rcv_skb+0x158/0x420 [ 550.165425][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 550.170462][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 550.217381][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 550.222725][ T31] genl_rcv+0x28/0x40 [ 550.243065][ T31] netlink_unicast+0x5aa/0x870 [ 550.255061][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 550.265443][ T31] ? __pfx___might_resched+0x10/0x10 [ 550.270777][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 550.293766][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.304575][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 550.310662][ T31] ____sys_sendmsg+0xa98/0xc70 [ 550.334418][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 550.340280][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 550.354500][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 550.374220][ T31] ___sys_sendmsg+0x134/0x1d0 [ 550.378918][ T31] ? futex_private_hash_put+0x176/0x300 [ 550.400225][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 550.410628][ T31] ? __lock_acquire+0x622/0x1c90 [ 550.427468][ T31] __sys_sendmsg+0x16d/0x220 [ 550.432083][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 550.449699][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 550.460413][ T31] do_syscall_64+0xcd/0xfa0 [ 550.476002][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.484806][ T31] RIP: 0033:0x7f197b38eec9 [ 550.489249][ T31] RSP: 002b:00007f197c14c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.519711][ T31] RAX: ffffffffffffffda RBX: 00007f197b5e6180 RCX: 00007f197b38eec9 [ 550.541943][ T31] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003 [ 550.561864][ T31] RBP: 00007f197b411f91 R08: 0000000000000000 R09: 0000000000000000 [ 550.583149][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.591162][ T31] R13: 00007f197b5e6218 R14: 00007f197b5e6180 R15: 00007ffdbc4504a8 [ 550.622085][ T31] [ 550.642935][ T31] INFO: task syz.2.1240:11688 blocked for more than 144 seconds. [ 550.650879][ T31] Not tainted syzkaller #0 [ 550.672744][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 550.681424][ T31] task:syz.2.1240 state:D stack:27672 pid:11688 tgid:11686 ppid:5827 task_flags:0x400140 flags:0x00080003 [ 550.722539][ T31] Call Trace: [ 550.725834][ T31] [ 550.728751][ T31] __schedule+0x1190/0x5de0 [ 550.742350][ T31] ? check_path.constprop.0+0x24/0x50 [ 550.768818][ T31] ? __lock_acquire+0x622/0x1c90 [ 550.774045][ T31] ? __pfx___schedule+0x10/0x10 [ 550.778913][ T31] ? find_held_lock+0x2b/0x80 [ 550.792405][ T31] ? schedule+0x2d7/0x3a0 [ 550.796759][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 550.822270][ T31] schedule+0xe7/0x3a0 [ 550.826370][ T31] schedule_preempt_disabled+0x13/0x30 [ 550.842577][ T31] __mutex_lock+0x818/0x1060 [ 550.847539][ T31] ? __lock_acquire+0x622/0x1c90 [ 550.861443][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 550.881567][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 550.886667][ T31] ? net_generic+0xea/0x2a0 [ 550.891161][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 550.927267][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 550.934077][ T31] nfsd_umount+0x48/0xe0 [ 550.938336][ T31] deactivate_locked_super+0xc1/0x1a0 [ 550.944404][ T31] deactivate_super+0xde/0x100 [ 550.949547][ T31] cleanup_mnt+0x225/0x450 [ 550.954995][ T31] task_work_run+0x150/0x240 [ 550.959588][ T31] ? __pfx_task_work_run+0x10/0x10 [ 550.964991][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 550.972282][ T31] exit_to_user_mode_loop+0xec/0x130 [ 550.977569][ T31] do_syscall_64+0x426/0xfa0 [ 550.987834][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.994017][ T31] RIP: 0033:0x7fa57cf8eec9 [ 550.998433][ T31] RSP: 002b:00007fa57ddf8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 551.010778][ T31] RAX: fffffffffffffffe RBX: 00007fa57d1e5fa0 RCX: 00007fa57cf8eec9 [ 551.018999][ T31] RDX: 0000200000000140 RSI: 00002000000000c0 RDI: 0000000000000000 [ 551.027388][ T31] RBP: 00007fa57d011f91 R08: 0000000000000000 R09: 0000000000000000 [ 551.040607][ T31] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 551.048785][ T31] R13: 00007fa57d1e6038 R14: 00007fa57d1e5fa0 R15: 00007ffdc42cf4d8 [ 551.057331][ T31] [ 551.299536][ T31] [ 551.299536][ T31] Showing all locks held in the system: [ 551.307269][ T31] 1 lock held by khungtaskd/31: [ 551.357167][ T31] #0: ffffffff8e3c42e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 551.399025][ T31] 1 lock held by dhcpcd/5493: [ 551.403718][ T31] #0: ffffffff900fea48 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_deladdr+0x1b4/0x320 [ 551.458795][ T31] 2 locks held by syz-executor/5824: [ 551.464196][ T31] #0: ffff8880277ea0e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 551.516116][ T31] #1: ffffffff8e7ecdc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 551.560576][ T31] 2 locks held by kworker/0:6/5899: [ 551.565895][ T31] #0: ffff88813ff19948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 551.618074][ T31] #1: ffffc9000434fd00 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 551.639718][ T31] 2 locks held by kworker/u8:39/7492: [ 551.645104][ T31] #0: ffff88801d386148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 551.707328][ T31] #1: ffffc900033c7d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 551.737588][ T31] 2 locks held by getty/10854: [ 551.742360][ T31] #0: ffff8880349180a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 551.767140][ T31] #1: ffffc900033dd2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 551.786817][ T31] 2 locks held by syz.1.1200/11500: [ 551.792021][ T31] #0: ffffffff901a2390 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 551.816673][ T31] #1: ffffffff8e7ecdc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 551.847156][ T31] 2 locks held by syz.1.1200/11506: [ 551.852367][ T31] #0: ffffffff901a2390 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 551.876654][ T31] #1: ffffffff8e7ecdc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 551.906560][ T31] 2 locks held by syz.2.1240/11688: [ 551.913572][ T31] #0: ffff88804cc3c0e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 551.955952][ T31] #1: ffffffff8e7ecdc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 551.965573][ T31] 2 locks held by syz.4.1272/11877: [ 551.986283][ T31] #0: ffff888073c480e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 552.015686][ T31] #1: ffffffff8e7ecdc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 552.052193][ T31] 2 locks held by syz-executor/12128: [ 552.069376][ T31] #0: ffff88808d0880e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 552.085492][ T31] #1: ffffffff8e7ecdc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 552.106233][ T31] 3 locks held by syz.6.1335/12394: [ 552.111462][ T31] #0: ffffffff901a2390 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.145464][ T31] #1: ffff88804eba56e0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0x150/0x990 [ 552.164879][ T31] #2: ffffffff8e7ecdc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xb6/0x1170 [ 552.185088][ T31] 2 locks held by syz.5.1374/12578: [ 552.190289][ T31] #0: ffffffff901a2390 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 552.215392][ T31] #1: ffffffff8e7ecdc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 552.244446][ T31] 2 locks held by syz-executor/12644: [ 552.249826][ T31] #0: ffff8880285d40e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 552.284272][ T31] #1: ffffffff8e7ecdc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 552.307398][ T31] 1 lock held by syz-executor/13052: [ 552.313112][ T31] #0: ffffffff900fea48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 552.331321][ T31] 4 locks held by syz-executor/13973: [ 552.343920][ T31] #0: ffff88807ed30dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 552.353508][ T31] #1: ffff88807ed300b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 552.393656][ T31] #2: ffffffff90371248 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 552.414506][ T31] #3: ffff88806027eb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 552.433250][ T31] 3 locks held by kworker/u10:0/13977: [ 552.443369][ T31] #0: ffff888030311948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 552.473302][ T31] #1: ffffc9000486fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 552.497532][ T31] #2: ffffffff900fea48 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x120/0x14e0 [ 552.523268][ T31] 5 locks held by kworker/u10:3/13991: [ 552.528840][ T31] #0: ffff88801ba9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 552.562772][ T31] #1: ffffc90004fbfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 552.579321][ T31] #2: ffffffff900e8630 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 552.612565][ T31] #3: ffffffff900fea48 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7e9/0xab0 [ 552.621652][ T31] #4: ffffffff8e3cf878 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 552.652389][ T31] 1 lock held by syz.8.1670/14110: [ 552.657825][ T31] #0: ffffffff900fea48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 552.681193][ T31] 1 lock held by syz.3.1688/14245: [ 552.686576][ T31] #0: ffffffff8e3cf878 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 552.725278][ T31] [ 552.727620][ T31] ============================================= [ 552.727620][ T31] [ 552.831414][ T31] NMI backtrace for cpu 0 [ 552.831430][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 552.831453][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 552.831464][ T31] Call Trace: [ 552.831471][ T31] [ 552.831481][ T31] dump_stack_lvl+0x116/0x1f0 [ 552.831525][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 552.831553][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 552.831593][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 552.831625][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 552.831661][ T31] watchdog+0xf3f/0x1170 [ 552.831702][ T31] ? rcu_is_watching+0x12/0xc0 [ 552.831741][ T31] ? __pfx_watchdog+0x10/0x10 [ 552.831773][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 552.831816][ T31] ? __kthread_parkme+0x19e/0x250 [ 552.831862][ T31] ? __pfx_watchdog+0x10/0x10 [ 552.831895][ T31] kthread+0x3c5/0x780 [ 552.831926][ T31] ? __pfx_kthread+0x10/0x10 [ 552.831959][ T31] ? rcu_is_watching+0x12/0xc0 [ 552.831996][ T31] ? __pfx_kthread+0x10/0x10 [ 552.832029][ T31] ret_from_fork+0x675/0x7d0 [ 552.832058][ T31] ? __pfx_kthread+0x10/0x10 [ 552.832089][ T31] ret_from_fork_asm+0x1a/0x30 [ 552.832140][ T31] [ 552.832155][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 552.959031][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 552.968118][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 552.978151][ T31] Call Trace: [ 552.981412][ T31] [ 552.984326][ T31] dump_stack_lvl+0x3d/0x1f0 [ 552.988907][ T31] vpanic+0x640/0x6f0 [ 552.992875][ T31] panic+0xca/0xd0 [ 552.996584][ T31] ? __pfx_panic+0x10/0x10 [ 553.000979][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 553.006683][ T31] ? irq_work_queue+0xce/0x100 [ 553.011433][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 553.017393][ T31] ? __wake_up_klogd.part.0+0x99/0xf0 [ 553.022746][ T31] ? watchdog+0xe48/0x1170 [ 553.027146][ T31] ? watchdog+0xe3b/0x1170 [ 553.031547][ T31] watchdog+0xe59/0x1170 [ 553.035930][ T31] ? rcu_is_watching+0x12/0xc0 [ 553.040681][ T31] ? __pfx_watchdog+0x10/0x10 [ 553.045339][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 553.050524][ T31] ? __kthread_parkme+0x19e/0x250 [ 553.055546][ T31] ? __pfx_watchdog+0x10/0x10 [ 553.060204][ T31] kthread+0x3c5/0x780 [ 553.064267][ T31] ? __pfx_kthread+0x10/0x10 [ 553.068929][ T31] ? rcu_is_watching+0x12/0xc0 [ 553.073678][ T31] ? __pfx_kthread+0x10/0x10 [ 553.078257][ T31] ret_from_fork+0x675/0x7d0 [ 553.082829][ T31] ? __pfx_kthread+0x10/0x10 [ 553.087408][ T31] ret_from_fork_asm+0x1a/0x30 [ 553.092161][ T31] [ 553.095215][ T31] Kernel Offset: disabled [ 553.099523][ T31] Rebooting in 86400 seconds..