last executing test programs: 2m41.220359506s ago: executing program 32 (id=1868): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/pci/drivers/goku_udc/remove_id\x00', 0x19b301, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r1) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f00000001c0)={0x288, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NFSD_A_SERVER_SOCK_ADDR={0xcc, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0xc8, 0x1, "98e3ce44018998b10ab303eb64fd742e50bf53089fbbe9bf5895887becd05b6abb494d04ee3f2d5a492d93c1371cb573b1d842ba07aa25b453abb8c9edfbec85920f462931e8b0b8394f5b323664033df1f887525a9c9bdf6393775af877f2e110f3e0c6b4701379c5174f977445c4bc1101529a8fb128d559bf202c4dbdb2027392c5c891e443984ee17fec0e8bf3bdc289e21d4331d2bf85251e62d382ab8ea3b1d7eb08cb3a33d277b96df9c477330af02a46dcb02b895205144ef27a199e608c8364"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0xf4, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}, @NFSD_A_SOCK_ADDR={0xe0, 0x1, "de95bc78f3bd2d554a3c40a52ed7c7676660fd1f348a2436a49339df4b8b826b76b9916d86c4a5b18b975cebfcf7e8ab9197d94a63276b28c11d07c0cee3b890f9bf77060c569f3042c248dee552eac0054c84d123e4c38a52b5534342c868c868b3de2c6e2409fe34e40ea789594d71d5a51eba9df346e0f8356e274397807b465cf19bd46959d23de21adf8ac0b3d33954fbb5e2904aed5fd6a4ecd662d65d003c9a8786faa0b64a3ebfba87fc271a14e64a450fc90e9146d5cb194639282a3161591863574919a55dd569c02d901e684f5441935b9a65b1a40868"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0xb0, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x1d, 0x1, "058c55d9a99f9dc8271ca8c7dfeb2d9edcb99babce496794e6"}, @NFSD_A_SOCK_ADDR={0x6e, 0x1, "7ff153c1f2df9f005f250d40943d95890112778385a46899b3e84ad9b647930ae64038e46b7d00998571a4d99abe4ab04cf7a778f13d0fb7ef2cbb023fa671937b89d5be1e9b0e4b4257e15aeeb1f74bb3a15250e1e8c0ef400540cc116752c21a581c22b7da032b9507"}, @NFSD_A_SOCK_TRANSPORT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, 'nfsd\x00'}]}]}, 0x288}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0x8000, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x9, 0x0, [{0x40000072, 0x4, 0xffffffffffffffff}, {0x8004, 0xdb4, 0xffff}]}) 2m34.798016708s ago: executing program 1 (id=1933): mmap$auto(0x0, 0x8, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) r0 = socket(0x28, 0x5, 0x1aa) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x109841, 0x0) ioctl$auto_SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000001c0), 0x480040, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x2201, 0x0) r2 = socket(0x23, 0x4, 0x3c) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x673a}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x1, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(r3, &(0x7f0000000200)='/\x01\x00\xf8x\xfd\b\x00\x00\x00\x00\x00\x00\x00o0\xe7\x00\xceJ\x9d\x03\x829\x92^\xbb-\x82hW@S\xb3\xbb\xd1/\xdd\xd5(E,\xdc\xbei`\x91\aR\x16\xc0\xa5\x0f\xdd\xd4\xf0\xbbi@\x06\xef;c\xc5\x92\xab?\xfd\xe9\x11n\xe1\xc3\x810\xc9\xb5\xddH8Q\x88\xca7\xec-\xa0\xe8l\xce?\xb2\x1b\xe0\xd7\x80\xcd5\xeb\xe0\xd6\xb5\x06\x840\x9e\x9f\vW\x82\xcf -\x98\xed\\\x83IO8\xd7^\xc1\xe8\xb0V2!\x13p\xb2\xada\xf9z\x1a\x10\x85\"\\\xa0', 0x100000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x6ab82, 0x0) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000340)='/dev/tty14\x00', 0x535082, 0x0) connect$auto(r0, &(0x7f00000000c0)=@phonet={0x23, 0x40, 0x57, 0x1}, 0x2e) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1001, 0x0, 0xb74, 0xfffffffffffffff9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r4, &(0x7f00000030c0)=""/4093, 0xffd) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/net/afs/addr_prefs\x00', 0x181200, 0x0) 2m33.676895091s ago: executing program 1 (id=1937): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x4) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) r1 = setfsuid$auto(0xee00) r2 = setfsuid$auto(0xee01) listen$auto(r0, 0x6) setresuid$auto(r1, r2, r1) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r3, 0x542f, 0x0) ioctl$auto_SNAPSHOT_FREE(r0, 0x3305, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) bpf$auto(0x0, 0x0, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) (async) write$auto(0xffffffffffffffff, 0x0, 0x4) (async) socket(0xa, 0x1, 0x84) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) (async) setfsuid$auto(0xee00) (async) setfsuid$auto(0xee01) (async) listen$auto(r0, 0x6) (async) setresuid$auto(r1, r2, r1) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) (async) ioctl$auto_TIOCGDEV2(r3, 0x542f, 0x0) (async) ioctl$auto_SNAPSHOT_FREE(r0, 0x3305, 0x0) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x85) (async) bpf$auto(0x0, 0x0, 0x6f4) (async) 2m33.266944401s ago: executing program 1 (id=1938): socket(0x2, 0x2, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram10\x00', 0x4880, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x400000000065f, 0x1ffde, 0x40007, 0x40000000007f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x1, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x2, 0x0, 0x5, 0x0, 0x10, [0x0, 0x0, 0x0, 0x40000000000, 0x1, 0x40, 0x0, 0x0, 0x400, 0x0, 0x0, 0x401, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x81, 0x9e, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x251, 0x3, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffff7cc, 0x0, 0x400000000000002, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8, 0xfffffffffffff96b]}, 0x1fe, 0x8) personality$auto(0xfffff032) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) mmap$auto(0xd6, 0x22020009, 0x3, 0xeb1, r0, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/oom_adj\x00', 0x4000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x8) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x428640, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) socket(0x1d, 0x1, 0x7fff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) r4 = socket(0x18, 0x5, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r5, 0x5403, 0x0) connect$auto(r4, 0x0, 0x3a) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r4, 0x0, 0x3800c050) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtdblock0\x00', 0x20200, 0x0) 2m32.507305626s ago: executing program 1 (id=1941): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x7, 0x4000000000000a, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socketpair$auto(0x1000001, 0x5, 0x20000006, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) write$auto(r2, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd8000fbdbdf250c000000080017000800000004000e00"], 0x20}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000", 0x4) socket(0xf, 0x1, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup.net/blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/4096, 0x1000) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) gettid() futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) sendfile$auto(r4, r5, 0x0, 0x1000200) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) open(0x0, 0x149443, 0x0) 2m31.450072473s ago: executing program 1 (id=1942): mmap$auto(0xffffffffffffffff, 0x410008, 0xdd, 0xffffffff, 0x2, 0x8000) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x801, 0x84) r2 = socket(0x2, 0x1, 0x0) socket(0xb, 0x800, 0xbe9) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x0) fcntl$auto(0x3, 0x800400, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x80001, 0x154) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/sunrpc/parameters/pool_mode\x00', 0x181302, 0x0) close_range$auto(r2, 0xffffffffffffffff, 0x4) socket(0xa, 0x1, 0x100) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r4, &(0x7f0000000040)=""/4096, 0xfffffe82) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0x1000005, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x11a001, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x40042, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram11/events_poll_msecs\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)='-7', 0x2) 2m29.081320355s ago: executing program 1 (id=1946): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r2 = inotify_init1$auto(0x0) fsetxattr$auto(r2, &(0x7f0000002ac0)='/$\x00', &(0x7f0000002b00), 0x4, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000004) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xb}]}, 0x24}}, 0x4000) userfaultfd$auto(0x1) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x8, 0x1}, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) lstat$auto(0x0, &(0x7f0000000180)={0xe, 0x0, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x5, 0x0, 0x7, 0x4, 0x3}) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_MEMINFO(r0, 0x4, 0x37, &(0x7f0000000140)='-%#\x00', &(0x7f0000000380)=0xc5) r8 = getpid() waitid$auto_P_PIDFD(0x3, r3, &(0x7f0000000240)={@siginfo_0_0={0x7fffffff, 0x5, 0x7, @_rt={r8, r6, @sival_ptr=&(0x7f0000000080)="f25dcbda876d98e535d93544c37f746fba15c0d9b41a83c59df876d32cb93763f4bb40efec271ca60e160abfad4d27012b928e2c7b587192da2a3b3195d3fb659e0bbfb2717044f4a85a4b8c51865769fc430eee890039b43ad9afa450dc905d9bfc838737602bbf8a53907d09a90c90a0b2939694513644a4b75570616ead066e7de3c7cdebdce52bcbdfa8b8487fca"}}}, 0x3, &(0x7f00000002c0)={{0x3ff, 0x8}, {0x3, 0x6}, 0x7ff, 0x200, 0xffffffffffffffff, 0x3, 0x2, 0xfffffffffffffff9, 0x812d, 0x9, 0x480000, 0xc53d, 0xffffffffffff0000, 0x9, 0x7f, 0x5}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x404000, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 2m28.783824556s ago: executing program 2 (id=1947): capset$auto(&(0x7f0000000000)={0xfffffff9, 0x0}, &(0x7f0000000040)={0x4, 0x4, 0x3}) r1 = userfaultfd$auto(0x3) bpf$auto_BPF_MAP_DELETE_ELEM(0x3, &(0x7f0000000080)=@task_fd_query={r0, r1, 0x97ce, 0x20000, 0x8, 0x7fffffff, 0xffffffffffffffff, 0xffffffffffff8f2b, 0x3}, 0x7) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r2, 0x3, 0x5) ioctl$auto_TIOCSWINSZ(r4, 0x5414, &(0x7f0000000140)="26d839575f871e8836e911ad4bd25bf3bc5ef27dff42c078d4cfcdbf2a75dd584203b9396f58d2037d") mremap$auto(0x75, 0x9, 0x4, 0x2, 0x100000001) r5 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f00000001c0), r3) sendmsg$auto_NCSI_CMD_PKG_INFO(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r5, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0x9}, @NCSI_ATTR_DATA={0x1a, 0x5, "a4789b04042db0fe52b477b5dd024ee12b87e2bbc42b"}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x8891) ptrace$auto(0x2, r0, 0x7fff, 0x5) sysfs$auto(0xd, 0x64, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000300), r1) sendmsg$auto_KSMBD_EVENT_LOGIN_REQUEST(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000001}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r7, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NCSI_CMD_PKG_INFO(r8, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r5, 0x12d, 0x70bd27, 0x25dfdbff, {}, [@NCSI_ATTR_IFINDEX={0x8}, @NCSI_ATTR_IFINDEX={0x8}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0x800}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_CHANNEL_ID={0x8, 0x4, 0x13ea}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x24008004) r9 = eventfd$auto(0x80000000) get_robust_list$auto(r2, &(0x7f0000000680)=&(0x7f0000000640)={{&(0x7f0000000540)={&(0x7f0000000500)}}, 0x200, &(0x7f0000000600)={&(0x7f00000005c0)={&(0x7f0000000580)}}}, &(0x7f00000006c0)=0x7) r10 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000740), r9) sendmsg$auto_GTP_CMD_NEWPDP(r8, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r10, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_FAMILY={0x5, 0xd, 0xfc}, @GTPA_FAMILY={0x5}, @GTPA_I_TEI={0x8, 0x8, 0x8}, @GTPA_TID={0xc, 0x3, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000880), 0x200, 0x0) getsockopt$auto_SO_BINDTODEVICE(r1, 0x1000, 0x19, &(0x7f00000008c0)='{&\x00', &(0x7f0000000900)=0x28) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000980), r1) sendmsg$auto_NL80211_CMD_SET_MPATH(r9, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x9c, r11, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_PMKID={0x1e, 0x55, "2612bddf5cdc7eaef1da8124d8a469b718e94bf7f933277399af"}, @NL80211_ATTR_PMKR0_NAME={0x62, 0x102, "5441c252e37cd1086c37f2bf26bac7210857c3638fb0e38e9a0bd26870a21b28e82528cf955224b2a635e702154b3e580df50438576ab5a62f3eac687dda6ac25346431185cef2fbe382437b2df16752b6c640b30a009e662f468b2fc962"}, @NL80211_ATTR_RADAR_BACKGROUND={0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x40008c0) read$auto_cpu_latency_qos_fops_qos(r4, &(0x7f0000000b00)=""/191, 0xbf) sysfs$auto(0x5, 0x6, 0x5) sendmsg$auto_NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000001300)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000012c0)={&(0x7f0000000c00)={0x6b0, r11, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_IE_RIC={0x694, 0xb2, "851d3ebf56620949b8aa15cbe942315ec2cba29d0c9eee8bfe944677963b75f389b19214eeb47a604710e16406cc56c11f51bcda4218de15f1931706116bbb6ac19a5072ff16c40eaf819b2d3a4b5d56e954b08f62869b7de775cd8c986642b0529f86aab00837588b8a294eec77abb3dfb1f5e4544843d55dfa410a290e5fb4cc58911b24e40e10d71db8135738889c84a45fc075f83569548d6aa406cd1c1f934d7308cd71ff902344cb4823e40366093f292e7093f31b2a682320cb007e7e4fe056bc0cac9053af6c472e732fbce10e72727bc84d5751522d9b10515aa3a7f6627129d0f19baca2d0ba3ff62a11b9203d22da3772c4992bcbb9c92dc4d38d2608a0d0df74371714180b4963437eaeffb0d7d511eb0a98b60840ab86c1b59f01a666420ceab192fadb82d48d6427f584f2dd9a7b118957c3d95f77af9727dd2eced8f7cc5f54547a61cfb078c8f8439830ee33f7dfc57a3988ea5e4dbfdb7320adb2cee761a1c190a5552a681615348ad3c35e4f19c04f41d781228213eb446355f37298afa798171f4c2587fb16cbebbf18b7d5ec0616689a8048c33ac622a7570ccf6290201d8e7c5d00f72a7fc3557b5089530bca0d85277c23b3d88a33a4b6a8a609da5546616e7aa9eebdfc6100925c83ae73fe461aef20512f1195eb2899a23bddedd66d1550089f170daacafbcae193f56cd3a8ccd45083761bef5083c381d015eb80205bb9f4c9c2c1ce22c64fc872341ad529a01f08b43df6c95b4f87f3f0b5636d609a25e070fd57ddcc83d3edc1c26efb5fb20da91a9b1db5d299c0e47d87bc3837c29d4e0046bb5e9e0321f453d3b4bfd2accf8c9288fcd47d60d7ef459600287d244e53d4a07f1e9d3fc24abf6cd5eda056d61dec65de099ee51de8b113c979075f223b88eed9d50a962030368b76c4982c2e255e914266d8663b3118ce9afbb59703c8bb942191b07658e66f56fe0e08935c09f56739dad162dc2600928b635597ae76699b5e8c6ae49a9bfcee4cb0b340a378a4b74e72c8ba91ae8167bc84d563d202788ab7ae19908759183412562afb80f50e6c342d3e186fd3af04f4fcf6ec981d73687981f98facf2f1640906ab897ed9c0ca413f1d021c0cd41fc46e8496e74e7ce4fad8d8cec202bc3e0cb4c08e353632caa1ffd42ef5fcbdb25e1a9d306d4c9f44acd7d510bb9a1cef4b5563037c677bc5194984a7a3f2d4c80accd4eab718f0d607abd42e38ac0031a198de8565fada95561e1f44a60557aa1e68e77bd9aaaa508cd38e91c3b863c39c203de1be9aea1f15b704d96e17fd95e0cb3ff9fbde9e268985fe08546e28f79314343e8261167b6f95b15d2826cdd0f7c09eade986720c7c6d65a5263a751952dba42c19d0f97d86a3f0c0d70d33ab95e5c7d28dc8ffa0ce195d87d348836d6dd3ec70e41bc6b351da56719c56bca95530e5a75980ec38ebf782ba68f927bacf01821e69bbd14cf3ac26af3753fbccba4f68190328c87ec6a33fb05fa0ba481d0b8873b6397d8d7ae6007171fee0aa147aca1096d44e3f756bfb9f1088f12a8507e67181f1c2bb34fd5b98918cb007706bb11df8462a3c933c0fd46f1626ee9d346df3f36c56e69f62fb5b222861649e01320466d5f7327322a2f23167c7c6a57e1bf424f446c8055f6c4e75403f1ffbd4e3db2fbfe0a57db3ba26cdc2ebb255b3770e868e679afb07e6d6f89905282010398392570295990cd474a8e893a3bd971675cad5eb50161b53838dd84d3e935a3bc767a1bed253913a10f10e98aa702d11f6f7eb594206a67f98b9eb171d68236bf0399fafe7440250ae570bacbab75dc441b14ee82613bd5a5ee0698bb21e24993095d35730d95d90c14a3341477c6d900b92a8df16f08f5ed05fe00777ccf36f5b762ec4353c947687cb8932f3003f764a06a541826cb3836b72bf8de6277cf47e8ff5593c3d2d8c078a82f0b90e1bf42ff6b8106b7cb13e2ce04435eb5c22ca55426f5051bf7731bd5ede676e185f90673b999f9932475097eeef1926e042af8941c438f29fdb6f28e992308b755fd76042ab85faef025a5e18a18af67e2a9e2f2777646f46cf351e83f9caa6c0ff969f7d6cec58b4b8507a790092b20ca512f02074267824a4ac163bf09bea5fd03bfa6152c1d489576aa828efa47875af270dd49612e3c805aed307e1e2ab329d61ed514f1a1e7cf65f79d525dca47a560baec7235b6594786281995583de8ec351b2018e51ddd3ca1e68ce7edfd72d443f1dd49248ad304d173119e24e754bb86353763ce1150f920513de88338824e6e7cfcbf3de2c7aef6eec65997a5de8a99a5e3a60414ce864ddc45a864faa097634f858bf36d70ebb62"}]}, 0x6b0}, 0x1, 0x0, 0x0, 0x1}, 0x20000001) r12 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001380), r4) sendmsg$auto_NL802154_CMD_SEND_BEACONS(r4, &(0x7f0000001600)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000015c0)={&(0x7f00000013c0)={0x1e8, r12, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x8100000}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xff53}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x1b3, 0x19, 0x0, 0x1, [@typed={0x4, 0xbd}, @typed={0x9, 0xce, 0x0, 0x0, @str='NCSI\x00'}, @typed={0x8, 0x40, 0x0, 0x0, @u32=0x1}, @typed={0xeb, 0x144, 0x0, 0x0, @binary="fbef5ae7941638c98ab954c060a46f0ddb0f76662950053f3a37092ed44e54afe6d01c3000b699b6a89df32624261760405c1f8b42ebe6e827981eb319f1ead54e4e55f14c988281da303191901baa782528f89ccecc189a82c7a037d626676c8bc17fd412594666400caf52f5395ead47b52cee3289bc5f2d76cc7d0c45c888995920aec6411b22464425d340bd9a7c02ff83a554a8bceb567388b6d864ca752bb70eaa2aed4af5416001eccf1d7b03ff8a36af5376c8375a3f96140fd1a7cbee9a72fb68a67adfb0dbfc1c58dc0747b9dbb5870686f696a3ee173f3ce741e3a195daf40b2023"}, @generic="77dd20cc5e9f38b3ca02520b9e6031ad996c7ccce408f41bd5404e81eb4baa2c98152dfe36e0f5d1f3e774c4ec0b1594eafbd9b604fe1bdf9eff2c4c0fcd1b119c540283eeb2ffdb3354faa4faed0e45a11c77da1681fb2fbd41f197efbc7918ae694c57e7a4d9cfda5bd334dbbe836f64e6c8e1f3a7d773fb1057b85759e9e507737e9ea5a4cd4a5e12aabab649916804cb64c0253d5f76566fa32ff969abaa87343674fef39a0cafeab6"]}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xffffffff}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4004011}, 0x821) sendmsg$auto_SEG6_CMD_SETHMAC(r4, &(0x7f0000001780)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001740)={&(0x7f0000001680)={0x84, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xb5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffff}, @SEG6_ATTR_SECRET={0x2e, 0x4, "085055b1f18c903792df7e2e03541d2d78122118a0140c8cbedbe84cfe29fc4a2fa9f1fbbc0297a075ee"}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000017c0), 0x200000, 0x0) 2m28.476098393s ago: executing program 2 (id=1948): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@qipcrtr={0x2a, 0x1}, 0x54) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) open$dir(&(0x7f00000001c0)='./file0\x00', 0x201, 0x14) r0 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000500), 0xffffffffffffffff) open(&(0x7f00000002c0)='./file0\x00', 0x200, 0x1c7) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002480), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_GET(r2, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000000340)=ANY=[@ANYBLOB="0e4f3d1435ef96c8c1298e60211586a551bb9eb264fa810006fbd8523a92f571f3ed07350008a9e29294b553a5623aad7f57c4a74902c57c8870dfdf430ad96283ab45f0b0007a6c526ce2ca4f29f82b1b3839d5787ef691b505a79afc90bbbd916dd584", @ANYRES16=r3, @ANYBLOB="2f032abd7000ffdbdf251200f000"], 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x8080) shmctl$auto_IPC_RMID(0xa, 0x0, &(0x7f0000000200)={{0x9, 0xffffffffffffffff, 0xee01, 0x4, 0x100, 0xb1fffffd}, 0x400, 0x400000006, 0x8, 0x0, @inferred, @raw=0x7, 0x2, 0x0, 0x0, 0x0}) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sendmsg$auto_NCSI_CMD_PKG_INFO(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="afe93ac0200000000000d38f5a6b3fdc06a7922fcb65f895f9b8d128f48ec35ca001129263f0daeeca21c2cf324f99b750ece605337f04dac3a17a8dbade402a538c39947af0aa8901e8c6d0e3e91ededdc2", @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf25010000000800040001010000040006000800028004001880080008007f000000cf0002800800e500", @ANYRES32=r1, @ANYBLOB="aed195661f2deeca73add4204b929e1dd5423a1b5984cb7477b7182ade76b6f1669c142b730adc6444c0c23e5302ffbd05cb3f1a9664c7f45e0032f5eb8a4eb317916f083b83bbc33247316d36e7392658ae379603e2e278e561e139c80cfb55c3cb5c42a760e2fb678cbfc86d78e66b12bab3d560d6ccbc14fde6f14939e827f270499fcd26ee8f52ba21bc3ad89d745ffcfa7fc6553058308a71f854489801676a5a305a516fb9db526932edf74df22e96d66a5aa7250400a60008007d00", @ANYRES32=r0, @ANYBLOB="00c306050089d213a7c74fff209ecc7424b19881ec00a05da4975ad09030320a8d938d8baf1357fad1d9dacdbde2bf17b110ea65cc168ec4df327ea11b843eb4f3da1dea463ac3b3771a4e8d02ca8240d8e0021272bee0b2e6a4f33e5bbd3fdb50cb67dd936c09c79c6fe0eab2e23d88dfd0838a46783b234f34c2c54d2c0ef5688ad8b3e6ffd71afeb58fc173a8bd3d2696f23048adf292ff1decc3b10f87d5d3d589ff902f4ad7eb7c627e12697703432bcb13b922eca4b985c23503149fd9fbb97d3b890a8be0526022a861bd6071490f4887379fc712fbbffdb7e233b11f5d2b314ecde8f095cf71b35a0841ede4b2ff131076e9b9e208ac68b51f61597a046817b3519d8bbd0a39973000b4b7045954aefa8b21a692acd31454a3c6c119f0c61a35c6b6681873ee1d811f4c17e59c77a11b245f6bcbc364787d9060c990eba8b6c30656072154846e9e9ed1ef5f48a35568ceb97f79f104b3aea4cd12d2511ae11b72216f51255df5d4fd440db2a8bdcd814232fb58a142929cbc21292267bb7b9822b6b132dafd06572c6c59fcc0dc37acd431917538d4f7c9ddcd2c88b29d4e0a5b2724a88466ba01ee251a633a17964b3ee3314995f147a199a8cd3ef7a12bfd08a5ad3a58d116323e3f975b9c2e00afa9bff1c507ab0f5a3f65a043e92e712ac1ffacc268bf8b59fa8a94931ac5b7f0163b60d700e12b67306818baa0c6fcfa02c022a10afb1cb154ec8747095623386f8c7628326a3592b0c70ae75d89df1ff2df6a3f93133d6f85fe1730d3cb198368b3aeb50aa184f3eb79f33d581ebc12676906a65e37768596c8beb0a5721b78eb98897c5991e38f7f0428c92c90b394f1a0cd27414103d44d70413783e99bcd1c137e13e97f2e85042f4e9a4536497c95992ccc317c10507f7c39db32522148afb07a9065589f21dc6a214dd7ddc67ee697e509908761f994600d0568b4afc0c93bd90a4c77a516be2e006a2fa1f52ab847abceb975dcfa84d731ad0e7a2c727543c8fc6f1a96645e4d3500e574e2e6af80daf07a966d8202fda3c6dadb5fbad8b392abe055823d69815f6769a3c4482061134c5363603dd0a76b5be56bdab61cee64dc27cc3120c6f4c683008792ac43fb6cc98954129750113853f7a51116bebaf166ff90cb20a3371d755c041ae76b59497e26befc8c35d95ea63c6c2e33fb204b0f52c6ec96e7ef42c219bc256d15765594b5f0c2e3433609811eda8a3eb6983379fb5696a79b0f8a32fe9d1f6184842bf20106014dd21b14ea12e7516ddc0065ef31aaf9a1b1480c2483e916279eb7d2cf14d3f73ef2cbc969f02c4695376611d70d443605c7a7325f1f4ad022e1388cff68424ba25acce1a927fd22375cb3a04d114c12991badfa98698a134e282676a2fa7572c2d1b749f5dd1d21b71841f613c472604a502f85556428e6bae1fc5b16119b56716283e59a7f00ef032b51aaa83d9b04fae69ee662fd1169e25cca29bcae3efe6f605e5062b201373b6c35c0737498ae52fdf055218168d0d2166a7d59258aeac5aa37cb373a14f53123cb30495f52252cf44e94fe6c396630f31ec2550b6f7841826f374c193cf595f98c9e87feeb8372ab4e1e660bfdf97d1d20d7c68d38c51ca5b3405dfd182188153339369385faedc7c6586d08cff9b8d6e3a6c327a72f906a6ff8b2979f6101c028332b60f86277421a95f5f9a4c13735048e52181119837608dfb649ba18ec35604b757f96c84fd1a86626df7079b8d18980d2c9229c911554892ceb8bd2c3ffa3b7dbfb9a964f2df20420d2a49b074efe4a879a266cf5ab5d34ee0914e8aff5bb06a88eb6b1159f63ed153b742aa74ad720641e1a9689d2174cf5dd2983df2624c799d744a25dbc955f35d794e8e6bc47253b09e11bb14fa0b72ffde122a886a8165daea8c753460a9f35dbfe5c1592371884acc08ff6d460a9796a46f0831f57fbe9223c8f3e3549f237d3ace93890665528dc1183d384e3a1150c1c13b8370f87d75758596953c2289c6218ff8ce15eb15ff48f122fc6256c95da3702f5d921f3f98a133d1680ac32126ebc0d777715bce91c23dca6ae4b9cb3cf84e277d0697e89a8aeb9b493013bde54691c9c7060524c7c80e49a6be693790d31dd55b83778b17cc3c34dda22790c1501b3707ad172ccaff3d8891af65bf54d1939d36d5fd558cbd02b339cddbd5439d936cae782ba6febda580be1800c15125eac875beb2432b031b3b136ccb0b57ff078ab069dc7c20e4a077414068a3c53f84b0128b35beaad6a2c6be0d5f51b58e49b04a4e2bf27f9051929d72ca41e35ca0188673cdf5520b1bb7694bac2a68ad4294d4d4913aa2821acef9d85aba4390be7556d51d9c9c08a6380c4d905237edcef2a23b468ac61421e04a01ef962b15849225812a810b119bc067e5b24d8cf4067f500"], 0x7c4}, 0x1, 0x0, 0x0, 0x4800}, 0x811) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x7, 0xd, 0x1, 0x948d, 0x1ff, 0x15f4da07, 0x3, 0x8003, 0x65, 0x8000001f, 0x1000, 0x100000000006d3e, 0x9, 0x1, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x4303, 0x1, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) syz_clone(0x280, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socketcall$auto(0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='/sys/devices/virtual/dmi/id/modalias\x00', 0x40280, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) 2m26.969085096s ago: executing program 2 (id=1952): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/pcrypt/pencrypt/serial_cpumask\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000040)=',\x00^\xa2\x02\x00\x05\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xee\x0f_o\xc0\xee?\xce\xa3\x04\x95Hq\xf4\x00\x00\x00\x00\x00\x00\a6\xe0\xb1d)X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2\xec\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a', 0x80000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x29, 0x4, 0x9) setsockopt$auto(r1, 0x116, 0xed75, 0x0, 0xffff0000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x1) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0x2, 0x3, 0x106) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20005, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0xfffffffffffffffe, 0x0) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) connect$auto(0x3, 0x0, 0x54) copy_file_range$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r2, 0x0, 0x24) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x3, 0xb, 0x14, 0x4008df3, 0x1) mbind$auto(0x4, 0x3b, 0x0, &(0x7f0000000040)=0x1, 0x1, 0x6) io_uring_setup$auto(0x4, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x101000, 0x0) 2m25.95594075s ago: executing program 2 (id=1956): socket(0x2, 0x5, 0x0) (async) r0 = socket(0x2, 0x5, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x7fff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000440)="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", 0xfffffff7, &(0x7f0000000080)={0x0, 0x19ffc}, 0x7, 0x0, 0x2, 0x2}, 0x1002}, 0x739618ce, 0x10001) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000440)="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", 0xfffffff7, &(0x7f0000000080)={0x0, 0x19ffc}, 0x7, 0x0, 0x2, 0x2}, 0x1002}, 0x739618ce, 0x10001) r1 = socket(0x22, 0x5, 0x0) bpf$auto(0x0, &(0x7f0000000280)=@link_update={r1, @new_map_fd=r1, 0x8, @old_prog_fd=r0}, 0x6f6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x2c82, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x15, 0x5, 0x0) (async) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x0) (async) pipe2$auto(0x0, 0x0) io_uring_setup$auto(0x7e1b, 0x0) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim0/psample/enable\x00', 0x101882, 0x0) (async) r2 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim0/psample/enable\x00', 0x101882, 0x0) write$auto_nsim_psample_enable_fops_psample(r2, &(0x7f0000000000)='D', 0x1) socket(0x11, 0x2, 0x14) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto(0x3, 0x80047456, 0x38) close_range$auto(0x2, 0xa, 0x0) 2m25.519601915s ago: executing program 2 (id=1957): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x1, 0x8, 0x0, 0x89) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x14, r1, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x20000040) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01H\x01\x00\x00\x0fo\x84\xfc\x89\v\xea\b\x00\x00\x00\x00\x00\x00\x00\x01\x88\v\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dG\x9f`\xb8Q\xf0BFWI\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00\\0 \xa2\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\b\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xeeI\x00'/232, 0xfdea, 0x23) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/lo/mtu\x00', 0x2062, 0x0) read$auto(0xffffffffffffffff, &(0x7f0000003040)='veth1_to_team\x00', 0x9) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x4) ioctl$auto_FIDEDUPERANGE(r2, 0xc0189436, 0x8000) chdir$auto(&(0x7f0000000040)='./file0\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/est_cpulist\x00', 0x2, 0x0) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x18, 0x0, 0x0) write$auto(r4, 0x0, 0x9) mprotect$auto(0x200000000000, 0x806121, 0x8) sysfs$auto(0x2, 0x11, 0x0) fsopen$auto(0x0, 0x1) r5 = fsopen$auto(0x0, 0x1) fsconfig$auto(r5, 0x8, 0x0, 0x0, 0x0) unshare$auto(0xfffffffffffffff9) symlink$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='./file0\x00') openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop14\x00', 0x2000, 0x0) gettid() 2m24.209550352s ago: executing program 2 (id=1960): mmap$auto(0x0, 0x400008, 0xdf, 0x20000009b72, 0x2, 0x8000) r0 = clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) socket(0xa, 0x5, 0x0) mprotect$auto(0x0, 0x806121, 0x8) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80000) r2 = epoll_create$auto(0x2) epoll_pwait2$auto(r2, 0x0, 0x8, &(0x7f0000002780)={0x10000000000, 0x5}, 0x0, 0x8) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/gid_map\x00', 0x60a800, 0x0) r3 = socket(0x5, 0xa, 0xfffffff6) fcntl$auto(r3, 0xb8d4, r0) r4 = epoll_create$auto(0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r5, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x14, r6, 0x1, 0x870bd2b, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000053c0)={0x1470, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x10e4, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0xd9, 0x1, "2ad5e4e5885bc74a0f15ef53ca9353f1c826f9d564fd574d6d83f7a525875f33dd8b6e7b0e19d77e9edb3ce74a15fc10a75c2ba626f40bfa1577db502a13aff8efd0c747d628acc2f0378bbea5fa732b1de1e711fe14259ada333338e66825ac5bd9ef9fb00d1f167f2f8ebc5f052fb371b90574d5fe64950dcec278f97b95158f97c14ea79cffa3ef95cf94777731dfa2c521050de4e6078663277d0fa1778f90e931ac702bb07f3540d41e02558575a625b777708838af2987a30ef1f30e9f6e61252e076c203cc9f30f008a083e94d4c0142bee"}, @NFSD_A_SOCK_ADDR={0x1004, 0x1, "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"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x16b, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x45, 0x1, "48a66c3c4459f35fc2b47d7fd91c3033d3391755356fc62d200e3d5e71c5c63991264e7647777a7223fce44852fcacc30423bdb5845d542222297294100f533ae1"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x13, 0x2, '/proc/self/mem\x00'}, @NFSD_A_SOCK_ADDR={0x2f, 0x1, "9b91e317b5efef9ca0de97522f448f223343071c860a741b9bec0e6b606726979f4b0c7f734ed1a9e80504"}, @NFSD_A_SOCK_ADDR={0x92, 0x1, "17f626f8ef7e95ddda512c9a4a889104260a17b3009c877bd6c584f57a931dfeb64adada71c67cf5d069d0163cc8e7befb46e5e3c51f7a965594611047d6497fe3a128494befb615f04657f06d9cfd1a1742e1e5027342db4ffbcaf9345d2edb6b372fe9e7487fd5463369b6b458d69a20173b3a1d09f1c341d7d312137c424ac536bcaf0a1dccffa099db455a51"}, @NFSD_A_SOCK_ADDR={0x0, 0x1, "86d4184086baefea2372726c04d6e0d2abba4d68e949f9f5294d74849e344ceba659ed106a13d4033411ee579e4fef2fdfda160e1d8c3e25330fb8d7fcc9c1adbc240481da2961719a5eefa51508dc12b2f21292c5ad749efc64a036de653ed06ca54a48df6a01188b3623a0bfe6a95022b03a8795029b6c1ce20083030d5de8339e2226ee3962181126b9df3161ff28fafa3a7cdd4e3dcec4860b60b8f3a0faea9872148e962adf73dc4de4c330f13b152e12bd83459c9bb8817ab540d4746198e2f1b939c5bf4cc2d63134099a75a35a3aad3f500355b41fa7b3cf1144c080553e193a057d6e87587c"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0x134, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x0, 0x2, '*){\xb0{\\@)$&}}-$)\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0xd, 0x2, '\'[-]!$%(\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x7, 0x2, '@*\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0xf, 0x2, 'ovs_packet\x00'}, @NFSD_A_SOCK_ADDR={0x68, 0x1, "6de803b575dfc9e77ea35bc9651b58a7c339e2252f2a742db5bdff3ebb002c81125db03d3a5a6163b83eea59fd9c0c0567657628ced139884db3aa3d0334a091e222f185c13633a2c41d03804b4a83f3fc9c84fe4c20b565f257f68933ca478a22000000"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x104, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, '\x15\xd7\nu\x00'}, @NFSD_A_SOCK_ADDR={0x7a, 0x1, "86c2c0e3b44da4c29826af38643cc081bb6e4aa8c84113005aa64b3151e9177d67deb2246cf3d26fd9c63442cd84810370b30feae50222817bfac66a0f7f312f464396d4dbc4ad8885990cd5e14f5200730b1fd37b3160bf93e6fa6e6c432ec1bd4dd96a260445442c917009d71c9b93ec333cc4c3d4"}, @NFSD_A_SOCK_ADDR={0x76, 0x1, "4a30c00c242da62b11fc83dd4289d2de92f2d42a88e2980b1515f29e9e6e20f4a496cd37b63a1c96b122b1db496e824e7d13a6cdc23c74b5d6f63efa7e6140f47896826d9dd83d90c6ce07152c4b92a2fd8a1bdbaa1045e2d889d2f31a4acef31ed1296b14bdbc1b772d34694a6e2e5b7408"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x10, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0xa, 0x2, '(&!]{\x00'}]}]}, 0x1470}, 0x1, 0x0, 0x0, 0x821}, 0x20) syz_clone3(&(0x7f0000000200)={0x40004200, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$auto_SG_GET_COMMAND_Q(r4, 0x2270, &(0x7f0000000240)="ff1c77e3e0c75de3e4b5b406551a5767a5356c9bd9de5c773f2e75e6819101f051269dc09510f21d26b8a47ea44ff3011466be44ee87e992ae7b381f46f7e8880f1e4e52a3aa37892fbbcee374327f019f5d1866ce7ce150a42b0a07517071aa68e5997c2bc1062a9b033ba7bfba2572aaa306a2725c16886e383a0973673e3ea024667ff4d2d10e01fd145039fbc221dcd97c590000000000000000005b0d5646bec3cc3e72e128b447ddfe9f9109d94bbbeeb889959201af3ee76e59ecacbc6cd4db93f60abb9223cbd86cb4ea79e84ec9c9bc05390d61c270dd5ea2a3334fd5db6942929d02c50bc254ecb9989258c9e074a6917a36f0") ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x48e, 0x0, 0x9}]}) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/vxcan1/forwarding\x00', 0x82002, 0x0) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0026bd7400fddbdf251b000000040008000c0003800800198004000180120001008987714800000000000000000000000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) madvise$auto(0x800, 0x4, 0x80000001) sendfile$auto(r7, r8, 0x0, 0x1) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) socketpair$auto(0x1e, 0x5, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) 2m13.774730777s ago: executing program 33 (id=1946): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r2 = inotify_init1$auto(0x0) fsetxattr$auto(r2, &(0x7f0000002ac0)='/$\x00', &(0x7f0000002b00), 0x4, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000004) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xb}]}, 0x24}}, 0x4000) userfaultfd$auto(0x1) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x8, 0x1}, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) lstat$auto(0x0, &(0x7f0000000180)={0xe, 0x0, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x5, 0x0, 0x7, 0x4, 0x3}) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_MEMINFO(r0, 0x4, 0x37, &(0x7f0000000140)='-%#\x00', &(0x7f0000000380)=0xc5) r8 = getpid() waitid$auto_P_PIDFD(0x3, r3, &(0x7f0000000240)={@siginfo_0_0={0x7fffffff, 0x5, 0x7, @_rt={r8, r6, @sival_ptr=&(0x7f0000000080)="f25dcbda876d98e535d93544c37f746fba15c0d9b41a83c59df876d32cb93763f4bb40efec271ca60e160abfad4d27012b928e2c7b587192da2a3b3195d3fb659e0bbfb2717044f4a85a4b8c51865769fc430eee890039b43ad9afa450dc905d9bfc838737602bbf8a53907d09a90c90a0b2939694513644a4b75570616ead066e7de3c7cdebdce52bcbdfa8b8487fca"}}}, 0x3, &(0x7f00000002c0)={{0x3ff, 0x8}, {0x3, 0x6}, 0x7ff, 0x200, 0xffffffffffffffff, 0x3, 0x2, 0xfffffffffffffff9, 0x812d, 0x9, 0x480000, 0xc53d, 0xffffffffffff0000, 0x9, 0x7f, 0x5}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x404000, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 2m9.173240745s ago: executing program 34 (id=1960): mmap$auto(0x0, 0x400008, 0xdf, 0x20000009b72, 0x2, 0x8000) r0 = clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) socket(0xa, 0x5, 0x0) mprotect$auto(0x0, 0x806121, 0x8) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r1, &(0x7f0000001680)="a7", 0x80000) r2 = epoll_create$auto(0x2) epoll_pwait2$auto(r2, 0x0, 0x8, &(0x7f0000002780)={0x10000000000, 0x5}, 0x0, 0x8) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/gid_map\x00', 0x60a800, 0x0) r3 = socket(0x5, 0xa, 0xfffffff6) fcntl$auto(r3, 0xb8d4, r0) r4 = epoll_create$auto(0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r5, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x14, r6, 0x1, 0x870bd2b, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000053c0)={0x1470, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x10e4, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0xd9, 0x1, "2ad5e4e5885bc74a0f15ef53ca9353f1c826f9d564fd574d6d83f7a525875f33dd8b6e7b0e19d77e9edb3ce74a15fc10a75c2ba626f40bfa1577db502a13aff8efd0c747d628acc2f0378bbea5fa732b1de1e711fe14259ada333338e66825ac5bd9ef9fb00d1f167f2f8ebc5f052fb371b90574d5fe64950dcec278f97b95158f97c14ea79cffa3ef95cf94777731dfa2c521050de4e6078663277d0fa1778f90e931ac702bb07f3540d41e02558575a625b777708838af2987a30ef1f30e9f6e61252e076c203cc9f30f008a083e94d4c0142bee"}, @NFSD_A_SOCK_ADDR={0x1004, 0x1, "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"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x16b, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x45, 0x1, "48a66c3c4459f35fc2b47d7fd91c3033d3391755356fc62d200e3d5e71c5c63991264e7647777a7223fce44852fcacc30423bdb5845d542222297294100f533ae1"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x13, 0x2, '/proc/self/mem\x00'}, @NFSD_A_SOCK_ADDR={0x2f, 0x1, "9b91e317b5efef9ca0de97522f448f223343071c860a741b9bec0e6b606726979f4b0c7f734ed1a9e80504"}, @NFSD_A_SOCK_ADDR={0x92, 0x1, "17f626f8ef7e95ddda512c9a4a889104260a17b3009c877bd6c584f57a931dfeb64adada71c67cf5d069d0163cc8e7befb46e5e3c51f7a965594611047d6497fe3a128494befb615f04657f06d9cfd1a1742e1e5027342db4ffbcaf9345d2edb6b372fe9e7487fd5463369b6b458d69a20173b3a1d09f1c341d7d312137c424ac536bcaf0a1dccffa099db455a51"}, @NFSD_A_SOCK_ADDR={0x0, 0x1, "86d4184086baefea2372726c04d6e0d2abba4d68e949f9f5294d74849e344ceba659ed106a13d4033411ee579e4fef2fdfda160e1d8c3e25330fb8d7fcc9c1adbc240481da2961719a5eefa51508dc12b2f21292c5ad749efc64a036de653ed06ca54a48df6a01188b3623a0bfe6a95022b03a8795029b6c1ce20083030d5de8339e2226ee3962181126b9df3161ff28fafa3a7cdd4e3dcec4860b60b8f3a0faea9872148e962adf73dc4de4c330f13b152e12bd83459c9bb8817ab540d4746198e2f1b939c5bf4cc2d63134099a75a35a3aad3f500355b41fa7b3cf1144c080553e193a057d6e87587c"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0x134, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x0, 0x2, '*){\xb0{\\@)$&}}-$)\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0xd, 0x2, '\'[-]!$%(\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x7, 0x2, '@*\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0xf, 0x2, 'ovs_packet\x00'}, @NFSD_A_SOCK_ADDR={0x68, 0x1, "6de803b575dfc9e77ea35bc9651b58a7c339e2252f2a742db5bdff3ebb002c81125db03d3a5a6163b83eea59fd9c0c0567657628ced139884db3aa3d0334a091e222f185c13633a2c41d03804b4a83f3fc9c84fe4c20b565f257f68933ca478a22000000"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x104, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, '\x15\xd7\nu\x00'}, @NFSD_A_SOCK_ADDR={0x7a, 0x1, "86c2c0e3b44da4c29826af38643cc081bb6e4aa8c84113005aa64b3151e9177d67deb2246cf3d26fd9c63442cd84810370b30feae50222817bfac66a0f7f312f464396d4dbc4ad8885990cd5e14f5200730b1fd37b3160bf93e6fa6e6c432ec1bd4dd96a260445442c917009d71c9b93ec333cc4c3d4"}, @NFSD_A_SOCK_ADDR={0x76, 0x1, "4a30c00c242da62b11fc83dd4289d2de92f2d42a88e2980b1515f29e9e6e20f4a496cd37b63a1c96b122b1db496e824e7d13a6cdc23c74b5d6f63efa7e6140f47896826d9dd83d90c6ce07152c4b92a2fd8a1bdbaa1045e2d889d2f31a4acef31ed1296b14bdbc1b772d34694a6e2e5b7408"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x10, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0xa, 0x2, '(&!]{\x00'}]}]}, 0x1470}, 0x1, 0x0, 0x0, 0x821}, 0x20) syz_clone3(&(0x7f0000000200)={0x40004200, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$auto_SG_GET_COMMAND_Q(r4, 0x2270, &(0x7f0000000240)="ff1c77e3e0c75de3e4b5b406551a5767a5356c9bd9de5c773f2e75e6819101f051269dc09510f21d26b8a47ea44ff3011466be44ee87e992ae7b381f46f7e8880f1e4e52a3aa37892fbbcee374327f019f5d1866ce7ce150a42b0a07517071aa68e5997c2bc1062a9b033ba7bfba2572aaa306a2725c16886e383a0973673e3ea024667ff4d2d10e01fd145039fbc221dcd97c590000000000000000005b0d5646bec3cc3e72e128b447ddfe9f9109d94bbbeeb889959201af3ee76e59ecacbc6cd4db93f60abb9223cbd86cb4ea79e84ec9c9bc05390d61c270dd5ea2a3334fd5db6942929d02c50bc254ecb9989258c9e074a6917a36f0") ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x48e, 0x0, 0x9}]}) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/vxcan1/forwarding\x00', 0x82002, 0x0) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="1b0026bd7400fddbdf251b000000040008000c0003800800198004000180120001008987714800000000000000000000000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) madvise$auto(0x800, 0x4, 0x80000001) sendfile$auto(r7, r8, 0x0, 0x1) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) socketpair$auto(0x1e, 0x5, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) 2m0.402208952s ago: executing program 4 (id=2021): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x2, 0x0) r0 = fsopen$auto(0x0, 0xfffffffe) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x3, 0x1, 0x0, 0x7, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) ioprio_get$auto(0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) (async) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0xa, 0x1, 0x84) (async) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) socket(0xf, 0x6, 0x7ffc) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) bind$auto(0x3, 0x0, 0x6a) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) fsmount$auto(0x4, 0x0, 0x200003) open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) rseq$auto(&(0x7f0000000100)={0xe, 0xfff, 0xfb82, 0xfffffffc, 0xffffffff, 0x200, "ab2517ce9a60204a46f94cd3281dd7594ecec2c57e09257df966a95337de3944d302f6a68ea4f3b0d6578f437ff9a1dbd6d0028e916a85f7ccdf5f34598aee66"}, 0x8000, 0x0, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6ef2, 0x21000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, 0x0, 0x0) (async) read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, 0x0, 0x0) keyctl$auto(0xe, 0xffffffffffffffff, 0xfffffffe, 0x0, 0x5) 1m58.120354254s ago: executing program 4 (id=2028): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) set_mempolicy$auto(0x6, 0x0, 0x21) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0x5, 0x8, 0x5}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfff, 0x0, 0x7, 0x9, 0x4, 0x9, 0xf}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250af4"], 0x1c}}, 0x20008810) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r2, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) 1m57.355005871s ago: executing program 5 (id=2029): r0 = prctl$auto(0x5, 0x80000000, 0x0, 0x78, 0x8) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) umount2$auto(&(0x7f0000000180)='/proc/bus/pci/00/01.3\x00', 0x1) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) shmdt$auto(&(0x7f0000000000)='(\x00') close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyed\x00', 0x201, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) getsockopt$auto_SO_REUSEADDR(r0, 0x8000, 0x2, &(0x7f0000000040)='^\x92[\x00', &(0x7f00000000c0)=0x6) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) pread64$auto(r2, 0x0, 0x9, 0x2) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/failslab/probability\x00', 0x22042, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000100)='!}*[\\@:[\xd5\xe5\xc5/\xa5', 0xc) write$auto(0x3, 0x0, 0x100082) getrlimit$auto(0x8, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000d311b54460adbaf4d296d7d4b8d9002c18beef2e8a0d383bcbbe257fc09792771ee97a92a1b0fd34", @ANYRES16=r4, @ANYBLOB="010026bd7000f7dbdf2503000000180001801400020073797a5f74756e00000000000000000005000300000000000500020001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840) ioctl$auto_BLKZEROOUT(r3, 0x127f, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) madvise$auto(0x0, 0x7ffffffffffffeff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm$auto(0x7, 0x71, 0x863) iopl$auto(0x3) ioperm$auto(0x5, 0x3432, 0x0) socket(0x2, 0x2, 0x0) shmdt$auto(&(0x7f00000001c0)='(\x00') 1m56.347331054s ago: executing program 4 (id=2031): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/eql/ifalias\x00', 0xb02, 0x0) write$auto(r0, &(0x7f0000000040)='/sys/devices/virtual/bdi/43:0/strict_limit\x00', 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x15, 0x5, 0x0) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f00000001c0)="ff9ec6df", 0x7fc, 0x0, 0x0, 0x0, 0x101, 0x4}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r3, 0x0, 0x1f40) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8802, 0x0) writev$auto(r4, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) ioctl$auto_RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) ioctl$auto_OTPSELECT(0xffffffffffffffff, 0x80044d0d, 0x0) acct$auto(&(0x7f0000000100)='/dev/v4l-subdev2\x00') ioctl$auto_SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000004440)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r5 = open(0x0, 0x0, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) execveat$auto(r5, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) socket(0x22, 0x3, 0xa) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) 1m55.184578859s ago: executing program 4 (id=2032): syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000000), 0xffffffffffffffff) madvise$auto(0x4, 0xfff, 0xe8000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r0, 0x0, 0x18004) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x90, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_STATS={0x5c, 0x1e, 0x0, 0x1, [@nested={0x46, 0x102, 0x0, 0x1, [@nested={0x4, 0xcc}, @generic="3d02ddec5dfb94630c1177a058f56496edbfe4295ced73c5ca3cee009bb4c65ae4a2e1417afabfd8e499a43bc557ec71836622e5d8745e7411a394ada2b5"]}, @typed={0x8, 0x4f, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0xe9, 0x0, 0x0, @u32=0x6}]}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x10000}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1ff}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x3}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x90}}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000440), r0) sendmsg$auto_NL80211_CMD_ASSOC_MLO_RECONF(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r3, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x3}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x2}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x800) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000540), 0xa082, 0x0) ioctl$auto_UI_SET_PHYS(r4, 0x4008556c, &(0x7f00000005c0)=&(0x7f0000000580)='%[\x00') r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000640), r2) sendmsg$auto_OVS_VPORT_CMD_GET(r2, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x10c, r5, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_NAME={0x9, 0x3, 'l2tp\x00'}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x5}, @OVS_VPORT_ATTR_OPTIONS={0x40, 0x4, 0x0, 0x1, [@typed={0x4, 0x116}, @typed={0x4, 0xe8}, @nested={0x32, 0x12d, 0x0, 0x1, [@generic="e9f088331ab990aae588dcaef1708a540d3772a06ab2336e382d9a17d057697c4a93", @typed={0x8, 0x78, 0x0, 0x0, @uid=0xee01}, @typed={0x4, 0x7b}]}]}, @OVS_VPORT_ATTR_NAME={0x10, 0x3, '/dev/uinput\x00'}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x8, 0xa, 0x200020000000000, 0x9, 0xe, 0x3, 0x9, 0x7}}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x2, 0x7, 0x3, 0x9, 0x8, 0x3, 0x100, 0x4}}, @OVS_VPORT_ATTR_NAME={0xc, 0x3, 'nl80211\x00'}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) setsockopt$auto_SO_DEBUG(r4, 0x3, 0x1, &(0x7f00000008c0)='.{\x00', 0xfffffffe) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x68, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_COLOR_CHANGE_ELEMS={0xc, 0x131, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfffffffd}]}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_MLD_ADDR={0x1c, 0x13a, "7dfc6b607a348d522a17474e976a6c764a7b19d358f62301"}, @NL80211_ATTR_KEY_DATA={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ipvlan0\x00'}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x5}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x68}}, 0x0) arch_prctl$auto_ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x101) r6 = openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000a80), 0x10000, 0x0) setsockopt$auto_SO_TXREHASH(r6, 0x3, 0x4a, &(0x7f0000000ac0)='\x00', 0x9) syz_clone(0x1018480, &(0x7f0000000b00)="3b2e94d3ae0083f328c73134e34341beb2eeab745cadfd1de1141335501f4f578347c71753a16ce6074ed05ac3e9784ef0f1b239f7a9e1ec7eb24b2623a82865b0e39b88a5878e4fa99612ee97db88d96c9006f895cc5a92d7b30056", 0x5c, &(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80)="c129a4c93f3c24d2f1aca9c3c2b83170633f09375b6de1d87756c4c40b1486653b6e52661ae420adf2afdf08d0fc1e2539") r7 = seccomp$auto(0x3, 0x3, &(0x7f0000000cc0)="ff954bcc250bd74b8dcb440a22df42043ffb5f82504194bf6c4572fb23af703128309a9fa5986e7893604719626e35339296e63c8a25b31a7672c03360866ea33d34b456ac449edbc1cd49a883ff2f58e9625029718f75a451b5320e98f4ebcee64b1b61505ae19b9208da24dee47142067a167d72771bc5b669c50c0bec7741fbde386284cd85bd4bbe1ff572093b3ae77458cda8f83a1c4cf52fd80801aac20ffb63f99aecb1ba3c62e397fd76a2cbfffe215628f8") sendmsg$auto_NL80211_CMD_SET_WOWLAN(r7, &(0x7f0000000f40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x138, r3, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_MLO_TTLM_ULINK={0xfd, 0x149, "947c0c62bf4d4ba8039e3701e3b44f55f5f26f546f89b1a4d869a94ba43565c8d7cd6915c175b6171a129eed207956bc52386829bf93eb749febdc5afbc86a4dab013c04b20b26933974cddc21c5d5318e02674b31e334aa63c76545e6c07e4e7b4cab5603751e385d4fb2916153ca25b2eff71e68f7da83761f01b5f2955796c375ac781c87e7e4dc812042c5433cd993e7b92c824d449454dd8f1f9d0cc220b2d8a401a095e5580748f47405bd16a539bea2244224886ac6d3a5cac1c561636408c69ae23f118fefd2756019001b591bb482551981cf86ed24ffa857dc070c63bc55e1d7f695b0d8ad66d84a250efa39dbb2d634fc04661e"}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xa8}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x98a7}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}]}, 0x138}, 0x1, 0x0, 0x0, 0x4c080}, 0x10) ioctl$auto_UI_SET_PHYS(r4, 0x4008556c, &(0x7f0000000fc0)=&(0x7f0000000f80)='ovs_vport\x00') sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r2, 0x0, 0x4010) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000014c0)={&(0x7f00000013c0)={0xe8, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0xd0, 0x9d, "87f7661b3f3d23f06598687c39aa1c171fcbc5d914e14e66f4c2a449bd8c2a6dce4552663e4900bed596a8196e03f9fde24a4ab4ef9cac4b1d76f849a5e0aa3c6f352ec090f5484f3e3308f49273572c2908fb2754cd65c42c16fdbbf18484c1a1febcdc25a10b5b8faa2e2fa3a05c3044645d755bac86e3ca4adb8bb0a85c34fa7f7b8837a6f148811200774746eab353054f282ef62f6b1ce119ae4168dfb53fb34919d5f35e61d39d134479b5d06d146bd1d82e88710d04955f51c46a9e03a24c70f6e9398836abf9a428"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x4000011) r8 = syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000001580), r0) sendmsg$auto_NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x12}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x64, r8, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x6}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x7}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x4}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0xc3}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x7}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x7}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x8}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x6}, @NLBL_CALIPSO_A_MTYPE={0x8, 0x2, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000}, 0x4000800) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000016c0), r2) sendmsg$auto_SMC_NETLINK_ENABLE_HS_LIMITATION(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001800)={0x58, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, "cd5a8691055119a1543ad9a913387b4c21de43e64ece52d529cebbe4dad207706c178a941c91507262b361f3d6816f62278288bd3404de45416fbb5533b4aa95ec7a0c"}, 0x58}, 0x1, 0x0, 0x0, 0x20000004}, 0x40041) 1m54.839269447s ago: executing program 4 (id=2034): openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) ioctl$auto(r0, 0x800064bd, r0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x155) (async) socket(0x2, 0x80802, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) connect$auto(0x3, 0x0, 0x55) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, 0x0, 0x8001, 0x9}, 0x8}, 0x1, 0x9) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) 1m54.154252473s ago: executing program 4 (id=2035): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, 0x0, 0x4) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7) mmap$auto(0x7fffffff, 0x7, 0x6, 0x37e, r1, 0xc) getpid() futex$auto(0x0, 0x6, 0x80000001, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000) 1m51.832536423s ago: executing program 5 (id=2038): openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) (async) mmap$auto(0x1, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) (async) mq_open$auto(0x0, 0xde8, 0xf, 0x0) mq_unlink$auto(0x0) (async) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) r1 = socket(0x2, 0x5, 0x0) getsockopt$auto(r1, 0x84, 0x85, 0x0, &(0x7f00000000c0)=0x1000c) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/xfrm_stat\x00', 0x5d3f81, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) getpid() (async) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x2100, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r2) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, 0x0, 0x40800) (async) unshare$auto(0x40000080) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) 1m51.566096885s ago: executing program 5 (id=2040): r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x800, 0x0) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), r0) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000300)='/dev/mtd0\x00', 0xa0000, 0x0) ioctl$auto_BLKRRPART2(r2, 0x125f, 0x0) io_uring_register$auto(r2, 0x7f, &(0x7f00000001c0)="de0717f662da1a8371184c17aeb8e824c1e2876a5e27f2a78ce82f93debd6672ae5491f29b3e1f424702798272054f74e804e55b280c149539471814a379761ecf1c1620538660f55de91d0b5ae56508fc5ad6c219ba3692292086ce481d24f7fee830aef699200b18ce2f0b77f3be3b36b6e14e189a1ce2c59013dfcb575b2260ab744b0dd1088fa337ae16e9c14ad393132fdc212ef776499fbf95da65bfbf10935cc7fdad9ff3fdced095995f2e3c32", 0x9) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r3, 0x0, 0x1f3c) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/snd_hda_intel/parameters/power_save\x00', 0x80002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) read$auto(0x3, 0x0, 0x10) getsockopt$auto_SO_PASSCRED(r4, 0xf, 0x10, &(0x7f0000000280)=']/)\':]^\x00', &(0x7f00000002c0)=0x7fff) write$auto(0x3, 0x0, 0xffd8) write$auto(0x3, 0x0, 0xfffffdef) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000004840), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000004940)={0x0, 0x0, &(0x7f0000004900)={&(0x7f00000048c0)={0x28, r8, 0x13, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x8081}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vlan1\x00', 0x0}) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(r5, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="c8030000", @ANYRES16=r8, @ANYBLOB="000226bd7000fbdbdf250e00000008000300", @ANYRES32=r9, @ANYBLOB="0500130001000000050011000b00000008d67afebd57132a75be000e00010000008a032880a2001300eb3f29e1d35ff1026221f271fd1b4083fafae68b090d3a2cb5447fec323b8b41ecb84707b68fec6dbac462643fe878fd98d5d03822fdf7cfe4ed7bba5da6d7e9339fc301524e6bbc996ede8eb51d249a276461cd902bb070ef89fb4cee80c93eb63da7280421a8849391972aff636054f20712b715dd92a1060ee3499afe4a381d4c0e1943d67eb32bfb7e8e3dd8809f585a61d089eb8bf703000008002b000000000000", @ANYRES32=r2, @ANYBLOB="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"], 0x3c8}, 0x1, 0x0, 0x0, 0x4}, 0x48000) ioctl$auto(r6, 0x4b66, 0x1) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99+\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t3\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\xfb\xba\xb2.$\'\x1e\x82\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/250, 0xfdf3, 0x6) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbf9, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1m51.065520058s ago: executing program 5 (id=2042): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8800, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00002abd7000fbdbdf25040000002d0011002f50136a450cf972f5a3d28479f92a9b221ca47c2d19fda4f47902c296fa844c12cd83f712d3c41e5d0000002c001a800800010087030000200004801c000180050007000900000004000a00040004000400020004000400"], 0x70}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x228}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) unshare$auto(0x40000080) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r2, 0x0, 0x0, 0x9) read$auto_mon_fops_text_t_mon_text(r2, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x0, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6e) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x1dfbdb30) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/current_tracer\x00', 0x41, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x144000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 1m49.27237015s ago: executing program 5 (id=2044): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000580)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9\xe8\xb2\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6E*\xc9\xdd.q\xdbAX\xf6\xfaD\xcdz\xbc~\xf30LE\xb5\x18Wf\xd3\x9b\\\x1c\xbb^\xfb9\xe5\x1b:\xa4\xdd\x81\x91\\\xbc\x1fUl\xfa)\xbf\x9dPV\xae\xa9\x9c)\x01|\xfe\xd0!Rx\a\xc4\xb1$\x8eE\xc2j\x83sLS\xa8H\xf6\xf2,R\x90:\x8fx\xab\x90\xfe$h\x80!\xe2\nY#\xee\x1b}O=\x8bn\xd7zZ\x18\xa7\x9e~\x94k\x8e\xdba\xf2\xc3G\x8egR3\x1d\x01J\x87\x14(}\f\xb1}%N|z,\xbe\x1fB\xd3\xeb\xec\x83X\x8f\x97\x95\xfd\xed\xe6wt\x1d\xb3\xa8\xfb)L~}\x9f\xbf\xd0\xc9\x9d\x82-C\xc3Ez@\x8c\xbf\xa2 \x88\\\r6M\x83', 0x4, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/4096, 0x1000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x80a, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2d, 0x3, 0xffff, 0x15f4da0e, 0x6, 0x9, 0xfffffffffffffffd, 0x8, 0x4, 0xfca, 0x9, 0xfffffffffffffffe, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) write$auto_force_suspend_fops_hci_vhci(0xffffffffffffffff, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b45, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000015c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010054bd7000fddbdf902d"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x810) mmap$auto(0x0, 0xfffffffffffffff7, 0x5, 0x19, r1, 0x7) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) 1m45.145010534s ago: executing program 5 (id=2051): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000100)='\b\x80eaudio1\x00', 0x100000a3d9) r2 = openat$auto_deferred_devs_fops_(0xffffffffffffff9c, 0x0, 0xe00, 0x0) read$auto(r2, 0x0, 0x4) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cmdline\x00', 0x481, 0x0) mmap$auto(0x0, 0x2, 0xdc, 0xeb1, 0x0, 0x8002) close_range$auto(0x2, 0x8, 0x0) setresuid$auto(0x0, 0x0, 0x0) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf254b0000001c00e70020351644513a7bd458eecf3c840963a2350f2330419c3c40a4009d008182b2cd99554eee70979c47af537a163f65a1a5cb0dc88f31513db86fd3a37f30698be457c216b4fda8d1986eeb32c4a53d14b7071a97be6bf915335d252f3574037f42a59949294dcb3117f7ae7159f7b33e69dc43f14e7a478ad496538bad7d729784d9f4a723dcfa63ac419991a0ae", @ANYBLOB], 0x59c}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000000) waitid$auto_P_ALL(0x0, 0x468e, 0x0, 0x20003, &(0x7f0000000340)={{0x8, 0x20000000000005}, {0xa, 0xffe}, 0xfffffffffffff801, 0x1af, 0xfffffffffffffffa, 0x2, 0x7, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x7, 0x200006, 0x2, 0x8}) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x8, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x250400, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x866d, 0x7fff, 0x9) madvise$auto(0x0, 0x20499d, 0x9) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x5) timer_create$auto(0x7, 0x0, &(0x7f0000000140)=0x6) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000)=""/18, 0x12) mq_open$auto(&(0x7f0000000680)='netdev\x00', 0x7f, 0x5, &(0x7f00000006c0)={0x400000fffffffc, 0x8, 0x401, 0xffffffffffff8000}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) 1m38.167886837s ago: executing program 35 (id=2035): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, 0x0, 0x4) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7) mmap$auto(0x7fffffff, 0x7, 0x6, 0x37e, r1, 0xc) getpid() futex$auto(0x0, 0x6, 0x80000001, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000) 1m29.994695659s ago: executing program 36 (id=2051): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000100)='\b\x80eaudio1\x00', 0x100000a3d9) r2 = openat$auto_deferred_devs_fops_(0xffffffffffffff9c, 0x0, 0xe00, 0x0) read$auto(r2, 0x0, 0x4) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cmdline\x00', 0x481, 0x0) mmap$auto(0x0, 0x2, 0xdc, 0xeb1, 0x0, 0x8002) close_range$auto(0x2, 0x8, 0x0) setresuid$auto(0x0, 0x0, 0x0) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf254b0000001c00e70020351644513a7bd458eecf3c840963a2350f2330419c3c40a4009d008182b2cd99554eee70979c47af537a163f65a1a5cb0dc88f31513db86fd3a37f30698be457c216b4fda8d1986eeb32c4a53d14b7071a97be6bf915335d252f3574037f42a59949294dcb3117f7ae7159f7b33e69dc43f14e7a478ad496538bad7d729784d9f4a723dcfa63ac419991a0ae", @ANYBLOB], 0x59c}, 0x1, 0x0, 0x0, 0x20040084}, 0x20000000) waitid$auto_P_ALL(0x0, 0x468e, 0x0, 0x20003, &(0x7f0000000340)={{0x8, 0x20000000000005}, {0xa, 0xffe}, 0xfffffffffffff801, 0x1af, 0xfffffffffffffffa, 0x2, 0x7, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x7, 0x200006, 0x2, 0x8}) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x8, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram11\x00', 0x14be02, 0x0) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x250400, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x866d, 0x7fff, 0x9) madvise$auto(0x0, 0x20499d, 0x9) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x5) timer_create$auto(0x7, 0x0, &(0x7f0000000140)=0x6) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/power/wakeup_abort_count\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000)=""/18, 0x12) mq_open$auto(&(0x7f0000000680)='netdev\x00', 0x7f, 0x5, &(0x7f00000006c0)={0x400000fffffffc, 0x8, 0x401, 0xffffffffffff8000}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) 1m18.166421843s ago: executing program 7 (id=2110): mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@query={@target_ifindex, 0x200, 0x7, 0x0, 0x3ff, @prog_cnt=0x5, 0x0, 0x9, 0x7, 0xffffffffffffffff, 0x4}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) select$auto(0xf, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0x7, 0x2a, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x7, 0x40, 0x3, 0x1, 0x5, 0x8d, 0xffffffdffffffffe]}, 0x0) r2 = socket(0xa, 0x2, 0x0) sendto$auto(r2, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) socket(0x2, 0x80802, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m17.818454673s ago: executing program 7 (id=2112): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/pcrypt/pencrypt/serial_cpumask\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000040)=',\x00^\xa2\x02\x00\x05\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xee\x0f_o\xc0\xee?\xce\xa3\x04\x95Hq\xf4\x00\x00\x00\x00\x00\x00\a6\xe0\xb1d)X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2\xec\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a', 0x80000000000) socket(0x1d, 0x3, 0x1) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/ip_vs_app\x00', 0x101000, 0x0) pread64$auto(r1, 0x0, 0x8, 0xffff) syz_open_procfs$namespace(0x0, 0x0) ioctl$auto_SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000300)="2089c63ee8c10fea5501ed7522c01b6750a3665561c0ba7ca2154fdd8060f4d5bca4f94ed4a616e96c91f363d9de2bc9ce915eae82028871ba474af4ac61320e4048c8d991319c704bc0cab49d9d60dc54d67ead86437a6400015ad7b2f3ffca990e0c998ee0c78d5e5ddac37737fa98372b55882a2ff152b4091d2fc2610bd8718b3dd538311a8b9d195f083025825028a140ed5bbdfa8a4cb55416a5ece2c84008340a7d2a4476555cb85c03") close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) write$auto(0xca, &(0x7f0000000180)='\x04>2\v\x04\x00\tO\xfdf\xb4\xad\x95\x03\xd66\xca\x96\x18a\x80\xea\xf4\xffo', 0x7e) madvise$auto(0x0, 0x80000001, 0x8) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0xd, 0x2) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x484c80, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r0, 0x802064b8, 0xffffffffffffffff) mmap$auto(0x0, 0x200006, 0x5, 0x40eb1, 0xffffffffffffffff, 0x2e2) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) timer_settime$auto(0x7, 0x2, 0x0, &(0x7f0000000200)={{0x8}, {0x1000000000005, 0x3}}) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) close_range$auto(0x2, 0xa, 0x0) socket(0x29, 0x2, 0x0) socket(0x21, 0x2, 0x2) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto(0x3, 0x0, 0x100085) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(r2, 0x8, 0x0) 1m15.798755911s ago: executing program 7 (id=2115): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/sound/ctl-led/speaker/card2/reset\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000380)='1\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\'\xf1y\xb3\"\xeb\a\xdd\xf4\xe4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xd6\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\x01L/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xz\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r1, 0x40045565, 0x1f) socket(0x2, 0x1, 0x106) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x4) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=0x0, 0x800c000, 0x40000000, 0x800c000}, 0x4) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/crash_hotplug\x00', 0x8a080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001100)=""/4105, 0x1009) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="4800000081a83ad9a6eaa9ff5846e043cbc3394f989b3bd846b10681934d8c458712eca7c3d2662a730ae23cdac2972249a60b826f785e9a6c18974803a0b1624e71391de612d05c9c5fc24f389a228d", @ANYRES16=0x0, @ANYBLOB="000426bd7000ffdbdf2507000000080032000b00000008001700090000000a001d00aaaaaaaaaa430000"], 0x30}, 0x1, 0x0, 0x0, 0x4004800}, 0x20010000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r4) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000f8dbdf2501000000", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000380), r2) r8 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(0x3, 0x400454da, r8) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="40000000166025d1b300"/23, @ANYRES16=r7, @ANYBLOB="00022abd7000fddbdf2501000000250001002f7379732f6b65726e656c2f64656275672f7573622f7573626d6f6e2f333675000000000800050009000000060001005c000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20008800}, 0x1000c000) r9 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xbf8, 0x0, 0x1, 0x10, r9, 0xff) mount$auto(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfs\x00\x00X\xca\xd8\xce\xc1\xfc\x9f\x9f?o;\xf7\xdf\x9f\x11\xc5\xea\xd9', 0x8, 0x0) sendmsg$auto_OVS_DP_CMD_DEL(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) adjtimex$auto(&(0x7f0000000000)={0x16, 0x0, 0x7, 0x4, 0x7dffffff, 0x4, 0x100, 0x0, 0x5, 0xffffffffffff8000, 0x4, {0x3, 0xa}, 0x80000001, 0x9, 0x9, 0x4, 0x0, 0x6, 0x6, 0x81, 0x20, 0xffffffffffff8472, 0x1000}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) r10 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ubifs/chk_fs\x00', 0x40aa2, 0x0) write$auto_dfs_global_fops_debug(r10, &(0x7f0000000d80)='0', 0x1) close_range$auto(0x2, 0x8, 0x0) 1m12.507964162s ago: executing program 7 (id=2122): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000040)={0x0, 0x1b, &(0x7f0000004540)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000000", @ANYRES32, @ANYBLOB="0059366b2cbd7000ffdbdf2501000e00081a1b93214e7b000900", @ANYRES32=r1, @ANYBLOB="0a0001002b217b7b8c0000001d0001000756bb34c7705ce6ae4f81616f00000000000000000000000200000008000200", @ANYRES32=0x0, @ANYBLOB="08000700020000000c00010069703667726530000900010023401b2a000000000800050002000000060001002d0000000800070002000000"], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x2004045) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) socket(0x2, 0x2, 0x0) recvmmsg$auto(0xffffffffffffffff, 0x0, 0x6, 0x700, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(0xffffffffffffffff, 0x541c, r3) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'erspan0\x00'}) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(0x0, 0x86, 0x8, &(0x7f0000000280)={0x40000000000800, 0x9}, 0x0, 0x7) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0006, 0x17) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) select$auto(0xa4d, 0x0, 0x0, &(0x7f00000002c0)={[0x8, 0x8, 0x208, 0x1, 0x0, 0x4000000008, 0x15f6da12, 0x3, 0x800080000010d08, 0x10000000000000b, 0xfffffffffffffffc, 0x3, 0x6d3f, 0x6, 0x4, 0x5]}, 0x0) 1m9.2393598s ago: executing program 7 (id=2128): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy0/net/wpan0/tx_queue_len\x00', 0x80302, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) socket(0xa, 0x5, 0x0) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r2 = epoll_create$auto(0x3e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r3, r3, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='}[,&*}/file0\x00', &(0x7f0000000080)={0x220000, 0x0, 0x11}, 0x18) fstatfs$auto(0x3, 0x0) bind$auto(r4, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x2, 0x6, 0x48, 0x4909b6f8, 0x5, 0x7, 0x200003, 0x2, 0xd27, 0x3, 0x8, 0x10001, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x800002, 0x1, 0x7, 0x200, 0xfffffffd, 0x84, 0x0, 0x6, 0x938, 0x0, 0x7, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x5, 0x20000000000, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffdf26, 0x0, 0x0, 0x2, 0x0, 0x4ab1, 0xec4e, 0x0, 0x0, 0x0, 0x400000000000, 0x7, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x1fe, 0xd) ioctl$auto(0xffffffffffffffff, 0xc0585611, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) madvise$auto(0x0, 0x2003f0, 0x15) 1m8.530354216s ago: executing program 7 (id=2129): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r1 = socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) poll$auto(&(0x7f0000000040)={r1, 0x7, 0x8}, 0x80, 0x400400) setsockopt$auto(r2, 0x113, 0x1, 0x0, 0x81) close_range$auto(0x2, 0x8, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) fsconfig$auto_FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000300)='\v\'\bn\x91px;J\x98\xb3\xe1\xbba\xb1\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x1e7\xbb\xedO#\x14mC\x97\x06\xd9bZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\xc6\xc0\x8b\xc0CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xed<\x86[c4%\xa3\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6\b\xe5\xaaJ+\x02\x9b#\xa9\x9b\x17\x82\xd7\xee\xd1\xbf2\x03\x00\x00\x00\x00\x00\x00\x00B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\x00\x00\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\xb2\x1d\xb3\xef#\xcb}b\x90\xafR\xf5\x8cg\x95A\x89\x8d\x9a\xfcV\x9bm\xd4\x82\x1c\x8e\x1f\xdc\xe5Y\x7f\xe8\xe1g%\xb8\xf9b!\xc8\xa0\xf7\x06\xbb\xdf\x1d\xfb\x00\x979\x8e\xd0AP\xbf\x1fM\x1fd~\xeeS^8v\x80\x1b\xb1I\xb1\xa4\x89\xc7\x9d\xf2P\x04\x99N{\x9a\xfa\xf3\xcb\xc3Bx\xb5\xb8*\xa0-\xda\x84\xc5S\xe2\xc6\x92/\xed\xc2\xceK\xad\x00\x00*)Hh\x8d\x06cQ\xf1\x9d\xad\r', &(0x7f0000000280), 0x5) read$auto_urandom_fops_random(r3, &(0x7f00000001c0)=""/93, 0x5d) r4 = fcntl$auto(0xffffffffffffffff, 0x7, 0x0) sendfile$auto(r3, r4, &(0x7f0000000080)=0x800, 0x9) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) r6 = openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_thresh\x00', 0x402, 0x0) ioctl$auto_FS_IOC_GETFLAGS(r6, 0x80086601, 0x5) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x40000080) getsockopt$auto(r5, 0x1, 0x2, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio1/resetafter\x00', 0xa2382, 0x0) sendfile$auto(r7, r7, 0x0, 0x1) 52.969752133s ago: executing program 37 (id=2129): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r1 = socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) poll$auto(&(0x7f0000000040)={r1, 0x7, 0x8}, 0x80, 0x400400) setsockopt$auto(r2, 0x113, 0x1, 0x0, 0x81) close_range$auto(0x2, 0x8, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) fsconfig$auto_FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000300)='\v\'\bn\x91px;J\x98\xb3\xe1\xbba\xb1\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x1e7\xbb\xedO#\x14mC\x97\x06\xd9bZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\xc6\xc0\x8b\xc0CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xed<\x86[c4%\xa3\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6\b\xe5\xaaJ+\x02\x9b#\xa9\x9b\x17\x82\xd7\xee\xd1\xbf2\x03\x00\x00\x00\x00\x00\x00\x00B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\x00\x00\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\xb2\x1d\xb3\xef#\xcb}b\x90\xafR\xf5\x8cg\x95A\x89\x8d\x9a\xfcV\x9bm\xd4\x82\x1c\x8e\x1f\xdc\xe5Y\x7f\xe8\xe1g%\xb8\xf9b!\xc8\xa0\xf7\x06\xbb\xdf\x1d\xfb\x00\x979\x8e\xd0AP\xbf\x1fM\x1fd~\xeeS^8v\x80\x1b\xb1I\xb1\xa4\x89\xc7\x9d\xf2P\x04\x99N{\x9a\xfa\xf3\xcb\xc3Bx\xb5\xb8*\xa0-\xda\x84\xc5S\xe2\xc6\x92/\xed\xc2\xceK\xad\x00\x00*)Hh\x8d\x06cQ\xf1\x9d\xad\r', &(0x7f0000000280), 0x5) read$auto_urandom_fops_random(r3, &(0x7f00000001c0)=""/93, 0x5d) r4 = fcntl$auto(0xffffffffffffffff, 0x7, 0x0) sendfile$auto(r3, r4, &(0x7f0000000080)=0x800, 0x9) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) r6 = openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/tracing_thresh\x00', 0x402, 0x0) ioctl$auto_FS_IOC_GETFLAGS(r6, 0x80086601, 0x5) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x40000080) getsockopt$auto(r5, 0x1, 0x2, &(0x7f0000000040)='/dev/cec27\x00', 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio1/resetafter\x00', 0xa2382, 0x0) sendfile$auto(r7, r7, 0x0, 0x1) 45.341345382s ago: executing program 8 (id=2186): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) capset$auto(0x0, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/cpu0/cache/index3/physical_line_partition\x00', 0x2000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002bc0)=""/82, 0x52) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = socket(0xa, 0x2, 0x73) (async) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x20b42, 0x0) (async) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000a00)='/proc/modules\x00', 0x80, 0x0) (async) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, 0x0) (async) write$auto(0x3, 0x0, 0xffd8) (async) r3 = ioctl$auto_NS_GET_PID_IN_PIDNS(0xffffffffffffffff, 0x8004b708, &(0x7f0000000040)=0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r4) (async) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000900), r1) sendmsg$auto_NBD_CMD_STATUS(r4, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x38, r6, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x8881) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)={0x44, r5, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2a, 0x1, 0x0, 0x1, [@generic="9565f2a7adc544f75f5f7016730e30de77a7b37d935c41336d81e25edb74", @nested={0x8, 0x49, 0x0, 0x1, [@typed={0x4, 0x6}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) (async) shmctl$auto_IPC_SET(0x10, 0x1, &(0x7f0000000180)={{0x5, 0xffffffffffffffff, 0xee01, 0xda6, 0x400, 0x2, 0x9}, 0x6, 0x2, 0x5, 0xc, @raw=0x7fffffff, @inferred, 0xf952, 0x0, &(0x7f0000000100)="33df161e93a2b1b8c65bcb1f28aa22db2bafb7dc013e4d20920cf43dad72172d9b36c3ba26e3fdacdd53e59497a57acd884626413f185edb276bf043e85a09492bb76c1133d385061c8295fd8cccabfcf1ae46879da825457d98592375e0ea791502f37f0d36072037f120eaf266cb03dfe79ab19255", &(0x7f0000000080)="beec8facd290f23e569c739bd02e01bf5e802dad614b8c03fb0b3ac78295707cc687f62d8458"}) (async) r8 = clone3$auto(&(0x7f0000000200)={0x7dc, 0x80, 0x6, 0x3, 0xa110, 0x2, 0x100000001, 0x8, 0x5, 0x7fffffff, 0xe}, 0x6) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r3, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4008400}, 0xc, &(0x7f0000000780)={&(0x7f0000000280)={0x4c8, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1a1, 0x1, 0x0, 0x1, [@generic="f2ef78cdbb26c2201c4f9024ff936ed26919224bb39b42632f8ed219b3a95a3f4b59a827e33b6c1a3e85bc4f748f1c1714dcf5c9d559974963f25c3c3fe8b129c3", @generic="c4878d2a5c38c86e14c9cd2a8cd2b638e8a450f26abecf8b6b7dc4fa1eb8baf2baff2c22b8f01f367418ed637085e4e9c600db82a59d401a461ce2a5d33d932804643eecaec428b95795e07caf388890fd6f426e8d3333cfe436d90af13747ad902473a0dd631e730386cd8931854034be413b5a72a5ca01a2450feca98966cebb4999905c3e80a0d9ef02a3ba52b83c11331fd0242040acf922f10c62bd38", @generic="a7706e3ac48035d973c2de2467238f9867bc02e5b6a91bdf", @generic="92dcfc6d94c8cb6071fad5a0e4f96a6bff5efccfd3e9da58cc5a41606ff57e8b2d608848bfd9b21271dba29f3944ef91d7b4831f027c4494e8462800d75381769e09db53dc4d32ce324eb719ff3d76961c8ef83864e925e9dab400a6c7f012eb462b37513a3b16347fc5204e1f272f6e4a1b5199892846b1ee60ff6e82f8baac7e5d9bed9b04787239502b77e773220812af30daacbf8e82209a5564a2e90fb1387e2e59e6"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1bc, 0x1, 0x0, 0x1, [@generic="d279ebd5f487f7141629a6822f47e73a1238af2305d71b05be4d6f7ce3a0b1b2f65f3f4d62b1830596cb51d6bb88af7a988e6436c67c42645b71e5c3450dcb9dda85e921b59082e04a8e75d0701dd6c8e9c2094248f4b4e3838fc2e8e1874bfaed12938a92052fb57380c538f19eb0372745a5a8f460b23272a3fcb31f6e9a3d4f123d087a33c7a68d001a9bb08352d187b8e9a5253e2cf6f5233a20ec273a4b05e23e0bce19a161ce686a580f8d72824130660fea", @generic="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", @nested={0x8, 0xea, 0x0, 0x1, [@nested={0x4, 0x13}]}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x31, 0x1, 0x0, 0x1, [@generic="878c97d99fad46b0dc7fa839b20e99f04b3d9991010a4a384f12973eabe20c10aaa07d9a0f", @typed={0x8, 0x143, 0x0, 0x0, @uid=r7}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x34, 0x1, 0x0, 0x1, [@typed={0x8, 0x8e, 0x0, 0x0, @u32=0x9}, @nested={0x28, 0xba, 0x0, 0x1, [@generic="6a71c84eec72573e7a6413070bc6853a", @nested={0x4, 0x60}, @typed={0x8, 0x7c, 0x0, 0x0, @pid=r8}, @typed={0x4, 0x32}, @nested={0x4, 0x75}]}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xea, 0x1, 0x0, 0x1, [@generic="38ce64a2ccbb1204bdef21101fa195ff61d0e61e2d7b6dd74f5702ca6e4670e9891a088f566f0037f0a9373f969292c27b49f13b29bb90ef256f0ff00bd0e1e5246c46c8a30bcd9629e83f667260c09fa0a4d25e25535a3aee3676224340", @typed={0x88, 0x5a, 0x0, 0x0, @binary="873a59b864fe7eb1cbc2f898bbbd3a7ad2f5535367dc36f1fd5f278b1f9dee57e3bc40bdd51e2bc15ccd404b8fb2146446ee3bfb37bfd10fc76be35c6837fedf904fa15c42d7cabc8b9079995c45aae892092a4eff6c3b3a8db0b44dfe8991ccf0b7518b532fad449c30cc99ed537c58b5b48ded9490993bb4c6477fd4f68ff5643a1853"}]}]}, 0x4c8}, 0x1, 0x0, 0x0, 0x404c040}, 0x8e505812916b77f4) 44.746888803s ago: executing program 8 (id=2189): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x10, 0x2, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYRES16=0x0, @ANYBLOB=' \x00\x00\x00', @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x4) (async) mincore$auto(0xffffffffffffffff, 0x1000, &(0x7f0000000140)='-/[\xae%^\x00') r2 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000760031d28715d52212d7e65264592cc71b25407cf9fb23fce451ea087d6661569f3ee9e76ece116feabbfd66c0362765ca9d59668c3d0e96ccbcfc63fa4334a2de0081ff74508b67d9984514a157f2d399400615fae0d822c0c1962be228", @ANYRES16=r2], 0x1ac}, 0x1, 0x0, 0x0, 0xe3fea0071022ab25}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) (async) ioctl$auto_FS_IOC_UNRESVSP(0xffffffffffffffff, 0x40305829, 0x6) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) (async) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) setsockopt$auto_SO_SNDBUFFORCE(r3, 0x9, 0x20, &(0x7f0000000000)='\\-/\x00', 0x100) (async) ioctl$auto(r4, 0x4b6a, 0xffffffffffffffff) write$auto_console_fops_tty_io(r3, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x40401, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$auto(0x3, 0x4010ae67, 0x38) (async) socket(0x10, 0x2, 0xf) (async) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) (async) r6 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) write$auto_cachefiles_daemon_fops_internal(r6, &(0x7f00000000c0)='a', 0x1) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 44.156052481s ago: executing program 8 (id=2191): mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, 0x0, 0x480200, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) socketpair$auto(0xb, 0xd, 0xfffffffd, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) madvise$auto(0x4000000, 0xffffffffffff0085, 0x1004) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x141180, 0x0) pread64$auto(r3, 0x0, 0x1000f42d, 0x100) sysfs$auto(0x2, 0x23, 0x0) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r4, 0x0, 0x4) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xe4) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001f00), 0xffffffffffffffff) 42.46953588s ago: executing program 8 (id=2195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) r3 = syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r3, 0x4, 0x8000040006) ptrace$auto(0xf, r3, 0xfffffffffffffffe, 0x8000000000000000) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000340)={0x2b, 0x1, 0xe86, 0x6, 0x3, 0xffffffffffffffff}) sendmsg$auto_NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000900)={&(0x7f0000000380)={0x55c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY={0x96, 0x50, 0x0, 0x1, [@typed={0x8, 0x43, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x2c, 0x0, 0x0, @pid=r4}, @generic="23591265aad6b17d726f71c434a4a5849a4d379bd5bf8735925241e275af62e578ceb7b773f127a686d15620a8f7dc35688f51b5a0e0da4b9c9af72aaca23dba97a67b2b71bd4f89b8db8420ad1939b96fc13eb84346ce6a8cca5b5bbd7a496bdb57796d43671b6b75ebc66fe842314193e594508af7ef51444b101d590a7796d384"]}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "63fb6b7c9b8fa73a396682ad"}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PMKR0_NAME={0xdf, 0x102, "47636a7f0542386379b7cbd7e1825b975016b7279ce6e333a5a774f04bd9e1c2efd83adda8fdc901ecf7e189888ddec5b9b7eda94254e993323a043f74d46b33083ec0c384533ab2875c76f8973acfaba6fc5fb7dc77545ac956e3712bc1331d4de126b98bff1aff0f3465fef10ac2eccd5568b51244a995ee98ed4a8d07b0e21a0acd8748ab59d26317125053316dc7c34b99b0dcf6f44d0c306f0da100a471844dc6e368be5b183884f595e318a82aec2ff9830256371b1a78b253fc52b9ceeb85313769f3da99b2aebe693831b465df1cfde235808718954161"}, @NL80211_ATTR_EHT_CAPABILITY={0x7d, 0x136, "ee353febbaaa5249d1c6a3a8628183775bc71ac8a5cf6352be76bb886273e9fdc31e98fdbc9b3deae076bb3eae6aa26da49b80f8e43c193bf902aa1559ed041c6f84ee919451f9ef06d6f19fc8dd45f99625682d0f65d65ac277c30c4fbe62a287abae92fdb87dbb250f8cb9a87591236a509503fa45724140"}, @NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_IE_PROBE_RESP={0x335, 0x7f, "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"}]}, 0x55c}, 0x1, 0x0, 0x0, 0x880}, 0x20004800) pwritev$auto(r1, &(0x7f0000000100)={&(0x7f0000000000), 0x2}, 0x3, 0x11, 0x3) r5 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, r5, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_NAME={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4) close_range$auto(0x2, 0xa, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) connect$auto(0xffffffffffffffff, 0x0, 0x32) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) exit$auto(0x6) msgsnd$auto(0x9, 0x0, 0xfffffffffffffffd, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) mincore$auto(0x1000, 0x8003, 0x0) setsockopt$auto(0x3, 0x0, 0x20, 0x0, 0x28) io_submit$auto(0x0, 0x400000000000007f, &(0x7f0000000040)=&(0x7f0000000000)={0x6fffffffffffff, 0xb, 0x81, 0x3, 0x2, 0xffffffffffffffff, 0xfffffffffffffbfe, 0x2, 0x8, 0x0, 0x6}) writev$auto(0xc8, &(0x7f00000028c0)={&(0x7f0000000000), 0x200}, 0x9) ioctl$auto_PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000280)={0x98, 0x1, 0x7, 0xfffffffffffffff0, 0x0, 0x4, 0x3, 0xcb0, 0x7ff, 0x65ad008, 0x6, 0x800}) 40.223772519s ago: executing program 8 (id=2198): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = socket(0x29, 0xa, 0x3) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r2 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000280), 0x8002, 0x0) write$auto_ctl_device_fops_user(r2, &(0x7f0000000300)="0afcdf8eb0d50f1dbabf32062d9b3656d7691f92d3a6925d82b8fff1c24df86c272395d09d23aeaad0db6d154e2e41a384b81c367840632b70a433ed3debb564a91d165ebd91e9fa7b564fe5044878a78648bd53b59992bb6177b85bc34f7ffa2bcf61d2f52b1e4f", 0x68) fcntl$auto_F_SETLEASE(r1, 0x400, 0xffffffffffffffff) r3 = io_uring_setup$auto(0xd85, 0x0) setsockopt$auto(r0, 0x10000000084, 0x7f, 0x0, 0xad4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb4, 0x405, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/erspan0/gro_flush_timeout\x00', 0x100b42, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.7/usb8/bConfigurationValue\x00', 0x8a842, 0x0) sendfile$auto(r5, r5, 0x0, 0x2) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) sendfile$auto(r4, r4, 0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r6, 0x0, 0x20) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x1adb01, 0x0) write$auto(r7, 0x0, 0x9) r8 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000140), 0x165100, 0x0) ioctl$auto_PPPIOCSMRU(r8, 0xc004743e, 0x0) write$auto(r8, 0x0, 0x0) socket(0x0, 0x0, 0xfffffffe) setreuid$auto(0x0, 0x0) tkill$auto(0x80000000000001, 0x7) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_STOP_BEACONS(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="e7babc7b0f0033f22f878dbf083d0f3b3cb64a19b3851f3dd6d311e4c8cc7f2e353e1474c74842098edaec", @ANYRES16=r8, @ANYBLOB="000328bd7000fddbdf25270000000c0006000800000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000004) connect$auto(r3, &(0x7f00000018c0)=@xdp={0x2c, 0xa, 0x0, 0x3c}, 0x1) ioctl$auto(0xc8, 0x400454ce, 0x5c8d) 39.218907825s ago: executing program 8 (id=2200): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) mmap$auto(0x0, 0x8004000d, 0xdf, 0x17, r0, 0x1) r1 = io_uring_setup$auto(0x1, 0x0) io_uring_register$auto(r1, 0x2, &(0x7f0000000180), 0x1000) read$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x20) 38.490460147s ago: executing program 38 (id=2200): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) mmap$auto(0x0, 0x8004000d, 0xdf, 0x17, r0, 0x1) r1 = io_uring_setup$auto(0x1, 0x0) io_uring_register$auto(r1, 0x2, &(0x7f0000000180), 0x1000) read$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x20) 31.267936458s ago: executing program 9 (id=2224): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, 0x0, 0x41180, 0x0) socket(0x1f, 0x5, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x141401, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/driver/rtc\x00', 0x88000, 0x0) pread64$auto(r0, 0x0, 0x1f, 0x6) clock_adjtime$auto(0xfffffffffffffffb, 0x0) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, 0x0, 0x101002, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) landlock_restrict_self$auto(r1, 0x0) mmap$auto(0x7, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x8000) io_uring_register$auto_IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0xfffffffe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mseal$auto(0x0, 0x7dda, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x80802, 0x0) 28.754662557s ago: executing program 9 (id=2228): openat$auto_dfs_sched_itmt_fops_itmt(0xffffffffffffff9c, &(0x7f0000001440)='/sys/kernel/debug/netdevsim/netdevsim0/udp_ports_ipv4_only\x00', 0x1, 0x0) (async) writev$auto(0x3, &(0x7f0000004100)={0x0, 0xb}, 0x3ff) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) getpid() (async) bpf$auto(0x0, &(0x7f0000000100)=@test={r0, 0xc1, 0xda5a, 0x2, 0x7, 0x80000000, 0x6, 0x7fff, 0x3ff, 0xaa, 0x100, 0x200000003, 0x2, 0x0, 0x1}, 0x6f4) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x15, 0x5, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x0) (async) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x60400, 0x0) ioctl$auto_BLKFINISHZONE(0xffffffffffffffff, 0x40101288, &(0x7f0000000280)={0x2, 0xf}) (async) read$auto(r1, 0x0, 0x0) r2 = open(&(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xa6) r3 = open_by_handle_at$auto(r2, &(0x7f0000000040)={0x8, 0x2, '\a\x00\x00\x00\x00\x00\x00\x00'}, 0x2) write$auto(r3, 0x0, 0x1) (async) io_uring_register$auto_IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f0000000140)="8506e23764434357f8ddc088c043178064f3016295bac88d9264c108282f55955236174d8f051535e208cfcf50a1d779239bf384451307c0d1adc19fcc7683abac05caed2e8f7a3a7fcda3e78bbacd6a84e758cc676476160aff59434a8063aabc042359f05fbc5f89d70612a6d1044789d88de3c223a01de7b6c5005850669957584e24388a077ac82acb3b0a2d49ecc6176be6ff11cc6b", 0xa) read$auto_proc_sessionid_operations_base(r3, &(0x7f0000000000)=""/124, 0x7c) socket(0x21, 0x6, 0xd08) (async) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000) (async) r4 = socket(0x2a, 0x2, 0x1) connect$auto(r4, 0x0, 0x55) r5 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) read$auto(r5, 0x0, 0x1f40) ioctl$auto_TUNGETFILTER(r3, 0x801054db, &(0x7f0000000200)={0x9, &(0x7f0000000080)={0xfff, 0x8, 0x8, @inferred=0xffffffffffffffff}}) writev$auto(r6, &(0x7f0000000100)={0x0, 0x2}, 0x5) 28.242032667s ago: executing program 9 (id=2229): mmap$auto(0x9dd7, 0xd3, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) write$auto(0x1, 0x0, 0x80000000) (async, rerun: 64) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) (rerun: 64) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000c80)="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", 0x159) (async) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r1, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) (async) preadv$auto(0x40000000000003, 0x0, 0x6, 0x8, 0x5) (async) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (rerun: 64) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/stat/synproxy\x00', 0x101000, 0x0) pread64$auto(r2, 0x0, 0x8, 0x8000) (async) r3 = ioctl$auto_TUNGETVNETLE2(0xffffffffffffffff, 0x800454dd, &(0x7f00000002c0)=0x6) write$auto_dynamic_events_ops_trace_dynevent(r3, 0x0, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001300)='/dev/admmidi2\x00', 0x145840, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x60042, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x40) msgget$auto(0xc, 0x77d9) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D1\x00', 0x543000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r4, &(0x7f00000002c0)='/dev/audio1\x00\x1b[\xdc\\7:\xff\xc0% n%R|\xcc\t.mp\x99\x92\x84w\x91\xc4;|\x06\xb3\x03\xe1[\xd3\xef\xcb\x11\xcbL\x85m\x0f\xca\xd6a\nJ\x02\x01\x00\x00\x00\x85\x97\xea\x9b\x0e\xcfGs\xa7I\xd2\aN|\x82\xc1\xd7!\b\x01M', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, 0x0, 0x0) (async) statmount$auto(&(0x7f0000000000)={0x1f, @raw, 0x80000007, 0x1ff, 0x6}, 0x0, 0x2, 0x0) (async, rerun: 64) getrlimit$auto(0x8, 0x0) (async, rerun: 64) sendmsg$auto_NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x40000) (async) sendmsg$auto_NL80211_CMD_VENDOR(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40000) 27.733697434s ago: executing program 9 (id=2230): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x8000, 0x800000000002) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) bpf$auto_BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)=@test={r0, 0x1, 0xfffffff9, 0x4, 0x81, 0x4, 0x4, 0x0, 0xfffff001, 0x2, 0x1, 0x1, 0x6, 0x800, 0x3}, 0x5) sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f00000005c0)={0x0, 0x3a, &(0x7f0000000580)={&(0x7f0000000100)={0x24, r3, 0x100, 0x70bd2c, 0x25dfdbfa, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0xffffffffffffff17, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044050}, 0x140000e4) 27.31818728s ago: executing program 9 (id=2231): syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000000), 0xffffffffffffffff) madvise$auto(0x4, 0xfff, 0xe8000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xc8, 0x400454de, 0x6f) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/pagemap\x00', 0x181002, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x100000001, 0xfffffffffffffffe, 0x1, 0x8, 0xc00, 0x2c, 0x2c, 0x8, 0x1}) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r0, 0x0, 0x18004) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x90, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_MTU={0x5, 0x1c, 0x3}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x10000}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1ff}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x83}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x90}, 0x1, 0x0, 0x0, 0x48800}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000440), r0) sendmsg$auto_NL80211_CMD_ASSOC_MLO_RECONF(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r4, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x3}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x2}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x10001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x800) r5 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000540), 0xa082, 0x0) ioctl$auto_UI_SET_PHYS(r5, 0x4008556c, &(0x7f00000005c0)=&(0x7f0000000580)='%[\x00') r6 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000640), r3) sendmsg$auto_OVS_VPORT_CMD_GET(r3, &(0x7f0000000880)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000680)={0x10c, r6, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@OVS_VPORT_ATTR_NAME={0x9, 0x3, 'l2tp\x00'}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x5}, @OVS_VPORT_ATTR_OPTIONS={0x40, 0x4, 0x0, 0x1, [@typed={0x4, 0x116}, @typed={0x4, 0xe8}, @nested={0x32, 0x12d, 0x0, 0x1, [@generic="e9f088331ab990aae588dcaef1708a540d3772a06ab2336e382d9a17d057697c4a93", @typed={0x8, 0x78, 0x0, 0x0, @uid=0xee01}, @typed={0x4, 0x7b}]}]}, @OVS_VPORT_ATTR_NAME={0x10, 0x3, '/dev/uinput\x00'}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x8, 0xa, 0x200020000000000, 0x9, 0xe, 0x3, 0x9, 0x7}}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x2, 0x7, 0x3, 0x9, 0x8, 0x3, 0x100, 0x4}}, @OVS_VPORT_ATTR_NAME={0xc, 0x3, 'nl80211\x00'}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) setsockopt$auto_SO_DEBUG(r5, 0x3, 0x1, &(0x7f00000008c0)='.{\x00', 0xfffffffe) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x68, r4, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_COLOR_CHANGE_ELEMS={0xc, 0x131, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfffffffd}]}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_MLD_ADDR={0x1c, 0x13a, "7dfc6b607a348d522a17474e976a6c764a7b19d358f62301"}, @NL80211_ATTR_KEY_DATA={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ipvlan0\x00'}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x5}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x68}}, 0x0) arch_prctl$auto_ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x101) r7 = openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000a80), 0x10000, 0x0) setsockopt$auto_SO_TXREHASH(r7, 0x3, 0x4a, &(0x7f0000000ac0)='\x00', 0x9) syz_clone(0x1018480, &(0x7f0000000b00)="3b2e94d3ae0083f328c73134e34341beb2eeab745cadfd1de1141335501f4f578347c71753a16ce6074ed05ac3e9784ef0f1b239f7a9e1ec7eb24b2623a82865b0e39b88a5878e4fa99612ee97db88d96c9006f895cc5a92d7b30056", 0x5c, &(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80)="c129a4c93f3c24d2f1aca9c3c2b83170633f09375b6de1d87756c4c40b1486653b6e52661ae420adf2afdf08d0fc1e2539") r8 = seccomp$auto(0x3, 0x3, &(0x7f0000000cc0)="ff954bcc250bd74b8dcb440a22df42043ffb5f82504194bf6c4572fb23af703128309a9fa5986e7893604719626e35339296e63c8a25b31a7672c03360866ea33d34b456ac449edbc1cd49a883ff2f58e9625029718f75a451b5320e98f4ebcee64b1b61505ae19b9208da24dee47142067a167d72771bc5b669c50c0bec7741fbde386284cd85bd4bbe1ff572093b3ae77458cda8f83a1c4cf52fd80801aac20ffb63f99aecb1ba3c62e397fd76a2cbfffe215628f8") sendmsg$auto_NL80211_CMD_SET_WOWLAN(r8, &(0x7f0000000f40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x138, r4, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_MLO_TTLM_ULINK={0xfd, 0x149, "947c0c62bf4d4ba8039e3701e3b44f55f5f26f546f89b1a4d869a94ba43565c8d7cd6915c175b6171a129eed207956bc52386829bf93eb749febdc5afbc86a4dab013c04b20b26933974cddc21c5d5318e02674b31e334aa63c76545e6c07e4e7b4cab5603751e385d4fb2916153ca25b2eff71e68f7da83761f01b5f2955796c375ac781c87e7e4dc812042c5433cd993e7b92c824d449454dd8f1f9d0cc220b2d8a401a095e5580748f47405bd16a539bea2244224886ac6d3a5cac1c561636408c69ae23f118fefd2756019001b591bb482551981cf86ed24ffa857dc070c63bc55e1d7f695b0d8ad66d84a250efa39dbb2d634fc04661e"}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xa8}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x98a7}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}]}, 0x138}, 0x1, 0x0, 0x0, 0x4c080}, 0x10) ioctl$auto_UI_SET_PHYS(r5, 0x4008556c, &(0x7f0000000fc0)=&(0x7f0000000f80)='ovs_vport\x00') sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r3, 0x0, 0x4010) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000014c0)={&(0x7f00000013c0)={0xe8, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_VHT_CAPABILITY={0xd0, 0x9d, "87f7661b3f3d23f06598687c39aa1c171fcbc5d914e14e66f4c2a449bd8c2a6dce4552663e4900bed596a8196e03f9fde24a4ab4ef9cac4b1d76f849a5e0aa3c6f352ec090f5484f3e3308f49273572c2908fb2754cd65c42c16fdbbf18484c1a1febcdc25a10b5b8faa2e2fa3a05c3044645d755bac86e3ca4adb8bb0a85c34fa7f7b8837a6f148811200774746eab353054f282ef62f6b1ce119ae4168dfb53fb34919d5f35e61d39d134479b5d06d146bd1d82e88710d04955f51c46a9e03a24c70f6e9398836abf9a428"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x4000011) syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f0000001580), r0) 24.43923331s ago: executing program 9 (id=2234): unshare$auto(0x40000080) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fchdir$auto(r0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x400, 0x8000) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22241, 0x154) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) execveat$auto(r1, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1, 0x0) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x6, 0x0, 0x84) exit$auto(0x7) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) 12.849415128s ago: executing program 3 (id=2253): r0 = prctl$auto_SECCOMP_MODE_FILTER(0x0, 0x2, 0x0, 0xa787, 0x2) (async) r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$auto(0x1, 0x9, 0x4) (async) r3 = ioctl$auto_TUNSETOFFLOAD2(0xffffffffffffffff, 0x400454d0, &(0x7f0000000080)=0x4b8) (async) r4 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd7/sched/queued\x00', 0x80, 0x0) (async) r5 = openat$auto_ubifs_dir_operations_ubifs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/bluetooth/hci1/power\x00', 0x800, 0x0) r6 = openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x21c0, 0x0) sendmsg$auto_CGROUPSTATS_CMD_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r2}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r3}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r4}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r5}, @CGROUPSTATS_CMD_ATTR_FD={0x8}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40017}, 0x4000001) (async) setsockopt$auto_SO_WIFI_STATUS(r3, 0xb3, 0x29, &(0x7f0000000280)='/sys/kernel/debug/block/nbd7/sched/queued\x00', 0xac06) (async) r7 = socket(0xf, 0x3, 0x8) (async) r8 = open_tree$auto(r2, &(0x7f00000002c0)='./file0\x00', 0x9) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r8, 0x9, &(0x7f0000000300)='\x00', &(0x7f0000000340)="21a7aab86ce9de74731aea373b267e187976aa732e66a68a9c4ae3a8ce0c50ff140d82e688eb47876a6b5690704e4403c28dca4a0d253adae904d07e49f08663ef4df860cabbc0ca8e8c7b1460c57932cb7d46fa7217632e859286c71ae60eabe4480075e6776311b8e9230be8eb76a814fb0f3a1b1942ee6cc43ee3ae820c42c6baf5f38bf42d2eae57e3b47c3afb09c68ba5187773b05506c9f5c36386aadb4b1c5aecb5e705e579c1d35da5bbc8159a5c9208e6283bfe616250f92c77ff5cccc0f4618bcd646990aa4572857d02db787373cdf3c2a575963b54a1f5e82e979789172e2307b4a28c452cf4ce7cd2afecf46168cf03d34f00baf7742faf98e93610d9278d3d333326dc33f325f8c84f86a5920fadc3aeac45afd20d4db134c2418d4a989e4216ac535893c78963837197fe2cdf72dbd7837b095320674936dcd2bc2ea051ae7786dbd75f079e93731ab463fc25059c921a19481ccdcb8f8563598b78f2f1c88c1eab7163948abb51cd6b66dab92dcd803d890ad31f8ac20aa48f25eb56bcb90a110cff1e7d1b07739cb96bbf7f7776ac2cb736c1e169c03955d2430d1802793e1b3a07294278733a8383401e65e8ac6e583a5812d1b19aef1e574db94e2fc48b8fe4093c4b16e39ce4c76c3781dbbab6355aedbb3bf1dbdfa67ebea93916f371dfc94c9050049487e8f1f5cdf88b6531e341a11a2b66e2f9f7dd1dd6b6b66259db2ad9e61637f00bc231f6ad6e20171bf8b1ad85670e7a0c9e536626090a55879325f0e67a700ea131d1e313f0b43548edfd0192b284e8b560f146e9fe312813f4791a77ec7c427c5342b11e56947d86909d92f3246bc1f994c25e1c690fe3110535038057f44aa7ffda04fea759985229688e1931a1dbbb66dbee4c62a57454eaa8df9b446ecfc5cc315a6ff87bf794f415dc7e686da16a62eab2cb893b37413ab9324b22a7e3f304d3183e7f2f66a7c4adc0cf4328861e1ecb83b604dd4cbd26415d63fbbd284303196687d56871b2f85323eceace2326629fbc60c37508e9658c3ea23875ede5a53123d620acc64878a9bf0ff4d6af6fd2044ce283df904baba415ffc0e62ef894546f25bddff260bb3e7bd2128e364cd7832558393c8580aba2f7200be410558412c6331acbb0cb1ecf7a92db629fa639bae91136f869d8d5332af6602f5797a25553aeb901047813af708ea69c142cb3641cd9ac93c8b0ac6dd085191d34117f3a546ec92cbd9056b50711cd09290ce88d259c9de96f44a581fc56a395244d536407cdbf3e7df8d0f3fcff038da4ac988960fbc1a7f37d6fcc74e41dfbe1bc1fc5e7d7d126cd525a83d50016b12d474d904b0b2f48bc84533611555aff79548a85a53de4d15d894631157deebdc7ccd32804bd448e7282bef871a108f141c0e0ce5f3cd73a2135a19c4e200cf9ae43b7e83f3cd99aebe18380d20187671132f31322b2cb2f4ee98504b7e7b05ad54c4fe10dbe55816a8145c47ac7e9f62a1b1344bba633f4f3bada995e3212e6c4b7d343bb00490d3d90956a60cb9670ea87982e88e19d9b2a4c1a774e555c43294e74bf2b09651c5be0a2ed9587c596a7d75daa128af9c3aec0625af337949329d364e5615d791fb451b6479b8282dcab5adecca01651d2315d42a714afdb8c4b853f994e06ffe8517172ea6ae97c450af8ee49a7b68f3e2d841a02bf9950dff5767e7ee250e6b537d3875e032df561582c21518ff264c89ae5ede15042f636badf2f78d208e35926473226cc5aebbe8394fd2e98fc393b2366989b76d90faa5ca3aa929ae9770f7b5beed4e771c7efecb316cf26bf6b4041b08f434f16290e8630fe76ca268f17ed742be367b2a4d99ed965b569e226c73463d469b164950c1c8dbbd0a47e1c3cdd5847193b96a7ffcc69e9f61adbad0f55b539547954a245dfbd8be5110bc12ee7d6f12f760e3c8b3bbda3e4e5e8e8577d161e1ec0a815fce37f5a83024cc77f435a62597afe1ca5e9aee52b197b2929ebd22031d977e52182e415c7ddd60fbaab06906c9e74de3223eddb9247080704606521e37911869171be5d0a22534957efdaf1ea88d8b684f075b0d3ecab7da4468e888f70d1361e6d41ba46ee2cdbd40c4067ea38f3d81b830d44374691476052f73b2e25cfe8906a1b1d5e295aa42cb893320d7f94d5f1667c6991696b0f4561d6dfc4d4fd22f5373a4361da560728c594e6a099a915a36311b5a3b4aef8eca034a6416056706ba571026973ad719849f35b460bb956d6cdfc5b1b0d7cb83d727ef49539478f564283522832f47598f0d8350b5601bcb378d2d1ae97dc3b0f176ddaa916276912d78b9eb0a23a6a53d8c2db99e5a99e3f17f7c4162a3640ba391ef3c08b8de5e05dbdf2a02b628867b9803d81fc6fe7d0a91b139ea97a723907c57edec2fbb8078198ad069cac2462e40353b76b3ea82d68cf6870951c16f8175235e4221d6ce057555a113166cb32f5fcd52412f2ade1794c0d5a5d3fff0d314ee77b99137f23a1c2a6923d457999d2c4e2a617a115f2885965c514b899d1b0d396f1a6cf73ca67e4fa4be250214718e835e3f1ca5f7b21588bd2543f1ea10db27637e390dfcf83938a87ac98071f33d25a739b4b14f3ffa39f9b66ace995fee28fd21f1a64b379778ef504848b34996053dc0600377c09585279e89e34b7497f1c8522801043e476499bd426f328844250425cbb0007eb3c410893c8019fb6ac2c8cfe7ab6bacdd3c7699446731e1281372f57338cb14a46b30c7cd871de1df2d5b7d69fb5c78d340025a96aa8590ff9f5f4ecff86f4c5247d92ef8404a1790321135f803a8badc3536bbc5c9b5a527aabb0e33fc2558e3c80748d5b8fb604162eae9bf81330c68f13eb306cfaaa14c2bb86f07745a3117c54ee9b4549d9fef3a85bb79d3387b1e66388185d1088aca1be1eca5c54643f18b8e7f760f467d5a178a5b427e9ccbddb9f7aff30132be1759cae2bbbac62ddc7cad018f3f859166f017f4383db7f0f1d01c8f50ad8a22931ef0e66f50bca2fe309f86114caec0b782527da29f56eb64dba2dcfefc6f94b3020b52e38237355991afe4acc12945c2b84b199cc27a678eea6b4b605614b9212f23746555083b728eed4e54d84e59c07177077e68ace349c6fe600f17162b652fe2bb892532d9a5fe29701e57ac0c7eaa20c1b56115e7f64d51fcd5ad8dc64549d07bcfdc0528272d97da2fc17d578463b373dc820201281ddabd615c2493742972b1e83c8bc4bd92dbc65a3a5017092a07e81a87fc63cbf83f09bbfa72edd52aa139a60cb9c561a57f9a52f5627dae186e03b373cacb99a29e94dc392ea64abc68a9861096219ca36fcb9fe3d457ac9f036c2abdf4e25835a0816928ccb1ef8151821587664d874e216818edc8975bf2395dedabf72af2a2fec48825be3d5415b16f239a417c742200e6dee91d4acc26703450e07a606df21c69652ec4667b69e1ffcaebf274a18890d60a09b5f2e21e41252aa09cafb461ef25970821d46efe41d71af6394278715578535a9bae2d3d821abc8d637a3e4fbb7bdf50dff03172cfec71c5dfd9bc06c69e8cff98f8990e19b8173b88d254adb6ec4151a2a56b075926bc97a6a67c68d598448f3df3b0cf96dcad44a56f14bfed7270efdb5fb65878d7d089d44ebb95273759f602131fe650a94d4eb7960a9851356408aa8a286916920fe8dcbe8390eb744dd7a9700925a6283ab92cff22cb56768b4a95207364fe1ad084ef1ca7a72f64d606c8bbec754cdb654df274b3cfdfb749117882b33ddedf2333eff8a6711264c3cea31854de7103ddb0661f366bc1f3f811a7249497192bff271e56ed1b03aba8fac02b66836e1a3d82dcf444ce17e183942c4911d304a075d7539ae043e8007245d8e966b17be47671d19e1e2b5e5474c2ff5ea02880659cf3c2bd1bde24684d08a6a2a87c9c5cbeec3d6eb4174236e491a8ca17bc828f1d2f76fb6141fc1bc48fab7326d20ed79f598ae06d6ad8e4bf5aaaa323a38b1001d01e5b5d4e200bca1cec49f9d71a2e38f661ca8c0d91fcd4d7bc476cf05220854276eeb3a2727106d1603eeddbdce32401e9f4cc6e5e5cc0626b1d998be78e54b68dda91fe81b0a0eb619e4a7b4d18a2dcf8bb04e6a0db5f58f49dd69daee2d82f13641a235a22bcab9f169b11418242edff79ab4505feade264fdc4bd87f71473e1f2c2963761e7cc6943c3a7f343d9f409668c9d9c7cc475acbfbcb815739193c05442662620df4c2b883b4b30f25c7d02463ddf08703630732cff18109f7ec7fe55b02f022d4d821dbb75106ce156176420af28479987017f120c9a7c6738b150dee754fd5c309a948ae858e1ad3fa9df2b6d50778323e6641a7168b929cdc89c0361c2e33c3f4b08c7e0a5be37ad755a5c9b18ba0f6caa1d1dccb9c38bf418d01dd1529c2eec6dd0455576a8795c0e24db9c7a8eb3d2b976db364702898acab8566da1f6a2dc0e662bed206884c30a25a28a7f70f2907c4b17e6b3532d92771ba4402c1e0ac1516c14843746ec319fb51dfc7b58be3b5725c78fb1b3516b2fac831a86c953c647527e236ad5b2b0416304ce290cc2ac8cecdca8c1b2d3c8c900b11dabf262738d319924f9937ac194188414122d6f4247dedeb61a2a54363c65b8c75043dc4ee948c80b601bfe5fe4e724b172230a4ee4b6a2528e4c5c18746e414bb2c3f094573cd5957aa4a9ea05a595acff3670e05ce3b66ded0957848334bf7f4550e9d8fccfcacbfd4d3f9b9f56ba2ec017580f3e99a8f0611b4b3b6022663acf710718034cc58a5916827821779435238980c09527e801d805b598c309861d888653438e3c9dbd352e91e305bb25b14686a5fd76b199cf68406a64e15582e0ba8b3b1f8cb644ff00e18c140441a7b1e228e2e28da8c904e657cc3eb88e78b06efc6f8fab8613935c94e763551468e178e389b63154fc0a0af92a793e1bf4f34fd9adae0e1b3747f5ea55a0c1741597be8751cb782b0836d3ec6ba9d4f822a76e44da0ad15e69e007ac6d4225b6010ddd4ee1beb3d71d859357306231d7a9caf8d40ac6a8387a5a45c2265011eafaeed82f88664106e99dbafe463dba59e80bc32005bd0bd51ef1aeef55d496d9628e87c5971a5c29cee2dc9ccbf789e516d930fd54ea1cea0ec95d5271529f90d18e8268f8089715595ff6b04f33d9005ee9228fba2b55200040f385355f77fe66d6951baa49a798adf6765eec6a7f092ce8a472c5e1064e923f8dafedefbf4df09baac9e7d53c9a730ec29ce594f41222fa4e010550b2d30e4fad5fb3da53841ae34f22cf18f676bc6a95e61fa21bab820ae81bbf982c5d321c628fcc349ee0a67474427a29f91601faab138ccccc65c431b5c948b3278caf4f8dc01e0b5ee2f49e002c80313098de2ba369078ceeb8d097c72115291121fa785b561771d53695d2d7bb8087b374d14c0d199aef50c2f896e14aa31597ea3be32135bfea563e7e0a2932624d8bea9b391c0315923a5fa0c2c25404706314353f0edaecb0debea698fc3b3c4990cf4c9d15a96ae5c0e0dc945272fd5f357cbac404a0aa54d97ead5e2fa360070f1b9dfd4a4b19c894276dbc377ee497196254ab43a5fa8bc12937ecf00c81f48aaf3f035ac8db5e121578b00ca1e1eb11f224dc154505070c88574683dec1aa889ad4d65562f886d3e9a1a36992664d459433f18937c9256d316cd8918e193659b62caa6cdcf4ad8a11c160ffaf61f6d03e1502dc2737811e6427a66aa", 0x4) r9 = timerfd_create$auto_CLOCK_TAI(0xb, 0x409) (async, rerun: 32) r10 = waitid$auto_P_PID(0x1, 0x0, &(0x7f0000001380)={@_si_pad}, 0x1, &(0x7f0000001400)={{0xa, 0x6}, {0x5, 0x9}, 0x9, 0x3, 0xe, 0x4, 0x1, 0x1, 0x3, 0x7, 0x7fffffff, 0x5, 0x80000001, 0x510, 0x8, 0xffff}) (rerun: 32) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r9, &(0x7f0000001b80)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001b40)={&(0x7f00000014c0)={0x670, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x4df, 0x9, 0x0, 0x1, [@nested={0x101, 0x137, 0x0, 0x1, [@generic="cdf94e278e5ec4f034d43abf5daa2d589454b484b6d7e11b412b84770a9c8864f3d2e9888799f7d0701d4721b19826f3bf98cc0bbcfb4b3ead94e562f1a65b25aee54bec17a607e25507bec1e0d3ceca02fa0a206b5e571ce8930c0d84531481fad7470d7f268da54e69eee99788c65cc2b6afee3a3fb1904ba89006b421b8c6478de076b6179d63dfa26da98dbd86b9ac270754ab036bf03dc0de5f38aaa506592482e8a1a015b677f1f74fbe5aa4a5abca3fb8aad7c3ad7849e81533cd7afc1cc2ba3316e75a77ff96e995a303ef54b14525a94aae2965988a2a273ced220d03cd808336272653af903a3b0399e853dba6e36344eae3826a", @nested={0x4, 0x54}]}, @nested={0x18e, 0xc, 0x0, 0x1, [@generic="82e87d716e608cf348dec8a117e0bdd1633f418e3249f26dd33ea31e8f52eadc112553e6b515afd9ec549435726ac0a2b5a4fc942b10f5700712882024bab723534932cdba3a2d072ec568747193ff23269f042c98849863eec54f607540c24c08c331760fe94169e775e2b268e35d0b1ec5bdb88067e1653eff5cb3f56cc26b9524ca4b9911d3644f93268962623755356a7e2f6f7b5a3aae5703aaede404ae1536156771a1ddd5c09ceb40f407325b8cec9643aba1e1cc29680b62f421ca4c8d8b3fa87e244691a82097e309591fdc1f83c0c381474fca6d", @typed={0x4, 0x8a}, @generic="66b79eb448007953e5daa2d8f70c9b7c19f12344deae9ce02b92c2d422e198586e8dea421f62b4aa155a4faebd228b4d1f8c839c78b9e626e85767d5b4116376a7afdf35eec9f1417d6a48c31b0161a8d8976568ec0aa7060e4057231115991c1d87b1717ad79091aa6f0242ee2212a1ca2854d8aa56db0db3c5c4e766cfece9d9349435914bcb6ddf5a5eb009277bd95ba3f5d82982b903be15754aa0f1030e1a1aa8b6813c71537b", @nested={0x4, 0xa4}]}, @generic="63ee46bbdc57be6edfdbf523b63cf416ef46c4a933740651c9e90a7b27d6f53bec895c301d2d1bba68582d04425745e103e9ff51ae5469c20646e4732fc42f728410a8cd1c170b5bdbc3224142376676b8fade64eaf6ab4e1182dd6cf3d73c015d248bed2ad9157835b4dd77f595f7572b29ac6ac6e587ac20d310ec6a11dd10ade479d6f90fae5b235a03", @generic="0d7998e8a111b7aa4cc98355c29932b3d5c4e75f730e6957e0530a8fd28a678caf0d7da430a2100f871af70a99efec46f01e9eb7e00a903af35f9b8b931a398925002199038b855f3ed3b545ba887700e01db846b3453f99e699fe599ad4beadc9f92e1c88d3c115bdc53d6df1e94ff7ac808396a18b86e58d57518ad164826e6120ef52b4961c519781bae79e279ac5253680d7bca65c9c57645ce8aec833a73dd6a02b89b8e31299dd25fe7df84fdb691945527c25da11b6a0173cb062a39e3f8aad3368ac7709fc0f0af0fa38a9b4d8434b7897c9a4defddda99e6f74af9e", @nested={0xd9, 0xb1, 0x0, 0x1, [@generic="c33f1c1f73ba3ee9d349444dcf3ea6893f56d0b0ec582dda1ac8e73d4e904dfa7cfb9a706f211560ad133e1761110467379dc2128698af66c0577faae671d2764e6e812748b741cf51c6123a687e15053929fca4965b4b6e4d750296dd5a80e337044c0060717d67f64d15eefb07edb3eb33837ab97d4b657c61b4a7e7717dff6645a57bc5bc0a50522e9e6ddd334476afe8c97ae0a11b83c584c49d28afb5ab29352740902227e4d7b88482052bcc16ef78e9f308a57f9431e0e42235f8fb593412308136", @nested={0x4, 0x1f}, @typed={0x4, 0x32}, @typed={0x8, 0x12b, 0x0, 0x0, @u32=0x1}]}]}, @TIPC_NLA_LINK={0x179, 0x4, 0x0, 0x1, [@nested={0x14, 0x6d, 0x0, 0x1, [@nested={0x4, 0xfc}, @typed={0x8, 0xd2, 0x0, 0x0, @pid=r10}, @nested={0x4, 0x89}]}, @generic="39ae81f53eadf5f82a4e109fd40f6bff3fd263d014fe90874a413f436eb1669043c0e8623ee3c1d9e011d078f0ead4255ec64877207d08cff654f409d0dd4a30946fd5bf8d8f78b86a2077c5cfb01624da6796f3ead5ac8a8fa5a4dc14f5a14b1af52c8a0b969bb731c38a28ae769ad44b9f46b67e67950f8cb0757c4c3e887b7a9032e39bbd5c480062b5ea175cdc7e9a10a30eff094f58a9819ed05625d3690b10a6305fedfb58b45d0a5567f2aa1a3152a708b6dd32a059c1f6b9542f126e567c6087fea253a0236ac66fe5d7d15c89b6", @generic="5c36699ede3fe6d580", @generic="23f8cf60bda39233fad682c8234e233ab779471e66d13f2cc2e13897ecd0ffe325035834b17d5ab1cb7c5218f5e86ca28b749330a72c0afe64780d436b6ab66e8d476667f259116b82458b44cf22e4f83a0efd5139eaae8ccc4554f2a967208bda27fc1e07ef86ce5d9a9984959a5480e79d732d6bc2bd2e1a094040b05231a7a0eb", @typed={0x4, 0x145}]}]}, 0x670}, 0x1, 0x0, 0x0, 0x20048000}, 0x8080) (async) r11 = clone$auto(0xda, 0x8, &(0x7f0000001bc0)=0x4, &(0x7f0000001c00)=0x4, 0x101) (async) sendmsg$auto_NBD_CMD_RECONFIGURE(r7, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004004}, 0xfa7a8753f9bcd5f1) (async) fcntl$auto_F_SETPIPE_SZ(r0, 0x407, 0x0) r12 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001d80), r3) sendmsg$auto_NL80211_CMD_SET_REG(r2, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0xcc2b4210b16d197a}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x1c, r12, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) (async) mmap$auto(0x10, 0xd4f, 0x7fff, 0x16, r2, 0x7) (async) getdents64$auto(r0, &(0x7f0000001e80)={0x2, 0x9, 0xfffc, 0x41, "de8e1409f75e69dabcd70fcffd291ab2cd6a6c0e8a0a82ce4c969bcfdd1f3165d90912ebf8f2dadb7199aadc8a27ca8c7584084964d0c8a8b27c198e0049a4bfc9c69f2880dab6a91997fdf4dde7eb4f1feb54943569cac9021c6caea62007feb83b7adb828054af8170"}, 0x6) (async) syz_clone3(&(0x7f00000021c0)={0x10000, &(0x7f0000001f00), &(0x7f0000001f40), &(0x7f0000001f80), {0xa}, &(0x7f0000001fc0)=""/194, 0xc2, &(0x7f00000020c0)=""/169, &(0x7f0000002180)=[r11, r11, r10, r11], 0x4, {r2}}, 0x58) r13 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000002280), r9) sendmsg$auto_BATADV_CMD_TP_METER(r3, &(0x7f0000002380)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x44, r13, 0x7a0, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MCAST_FLAGS={0x8, 0x26, 0x3}, @BATADV_ATTR_LAST_SEEN_MSECS={0x8, 0x17, 0x80}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_ASSOCIATE(r14, &(0x7f00000024c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x11b01002}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x58, r12, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4}, @NL80211_ATTR_HT_CAPABILITY={0x2a, 0x1f, "30a85dae3ac6419083909c9f460dce0d2215dfc7556f8fb6aae1f9c8ef5c9ed37ff429a77821"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x40}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000002540)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002580)={'veth1_to_batadv\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r8, &(0x7f00000028c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002880)={&(0x7f00000025c0)={0x294, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@MACSEC_ATTR_RXSC_CONFIG={0x270, 0x2, 0x0, 0x1, [@generic="678e32189e038e0418ae08536506e7afb75202a3e9b2c860f37b32bfb22891523826ff05d05ea7b1da0f4f321ba408e9c7fbad1ec0e2e78046c1732688c9d62313b63a33a037a5330f755e01384ac53c16aefd9bd6ffcf834874e028a453fb54c409b713bb292f64b5b0480851ed20d7fd4b0993178ba969411137f1e22ce23ca64422e4c633571af6d00a87bdbdf9969056a9de27f961ab84df2e8f75c201394cc75ae8f224d866493c987d7524ea39886e40a69733f3018109f8d5e45a9ac152713a1dea38f0c22999e17704c37c59e12dce01c208a5b17479372563fc4e2c", @generic="01db110587ac8954a13dbae03c0be46906741c9b5115cb09487fa11b3e6401276092ef3025ec0279f270de1011ca68cf4ab80531259c2e532ed1e27e566daadfd769fa191c68a08fdb581a7a45d32e7628236c92c799eb62a432f01a78234fdd10915c681780aa4ae414c5bb670cafd109661b36014ece0d7a456e647e135ba7d3e9564157155e458663112e57c14692628222661ac9abb3a6bc096e79d3fba00cec83c8747dfd", @typed={0x8, 0x10a, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x14, 0x10, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="95f60f944e9124dd89e5d321329235f977c60289614b845ebc420b21220c02fb4be84f89b09b8a63e68d9c542fa52be2b8560e27f3b10260af3f78b5e68deacb89c2760efe26e44e01f8e357e89bd904fb4107daf310c5f88ded088897c19119f469ebbcbf39a5f5efebfd0ff9fe693dad23630b86b661fc47028452c652f815d629aed2fed7e4d7645748c65d166c479cef76ba150bc8c45e1dd65e1ed1cea23b276b2296fcf9b78068f5efd3a522f53ec86f0cf5204eaf572172812d1d1cd016fe9185b1b634d248"]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r15}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r16}]}, 0x294}, 0x1, 0x0, 0x0, 0x10040000}, 0x40) 12.505979559s ago: executing program 3 (id=2254): r0 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) lseek$auto(r0, 0x0, 0x1) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/mpls/platform_labels\x00', 0x101202, 0x0) mmap$auto(0x0, 0x1000400008, 0xdf, 0x9b72, 0x2, 0x800008000) ioctl$auto_VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000340)={0x80000001, 0x7fffffff}) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/arp\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x6, 0x809) bpf$auto(0x5, &(0x7f0000000000)=@info={0xffffffffffffffff, 0x4, 0x3}, 0x171) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_4={0x1e, 0x4, 0x1, 0x8}, 0x6f4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), r4) sendmsg$auto_SEG6_CMD_SETHMAC(r4, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="a9c0f50f79cd0000ffffbd7000fcdbdf2501000000050006000b07000000000000000000000530f5aafde977f5855983503bb21542c56149d2700f5a03084b5138dbaeb091eacec25829ad99a1069d44c1a962252f0e3a80987e949050f8c69602a730475a8e32c9b82b5d4ff1f39114e54b4b828d2fd091"], 0x2c}, 0x1, 0x0, 0x0, 0x4000015}, 0xc810) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) statmount$auto(0x0, 0x0, 0x1fe, 0xd) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/tcp6\x00', 0x20100, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nullb0/mq/0/nr_tags\x00', 0x8180, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_fake_panic_fops_(0xffffffffffffff9c, 0x0, 0x501080, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) io_uring_register$auto_IORING_UNREGISTER_BUFFERS(r6, 0x1, &(0x7f0000000200)="a13b466b7764dfe742", 0x3) socketpair$auto(0x8, 0x77e, 0x11f, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x40000007, 0xd3e, 0x1, 0x948b, 0x4, 0x95f4da0a, 0x10001, 0x3, 0x62, 0xc0000001, 0x7, 0x6d3b, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) 10.725679428s ago: executing program 3 (id=2259): sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)={0x20, 0x0, 0x1, 0x70bd37, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000000000)={0x14, 0x0, 0x301, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2004c005}, 0xc4) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, 0x0, 0x41180, 0x0) socket(0x1f, 0x5, 0x0) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0x141401, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/driver/rtc\x00', 0x88000, 0x0) pread64$auto(r0, 0x0, 0x1f, 0x6) clock_adjtime$auto(0xfffffffffffffffb, 0x0) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, 0x0, 0x101002, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) landlock_restrict_self$auto(r1, 0x0) mmap$auto(0x7, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x8000) io_uring_register$auto_IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0xfffffffe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mseal$auto(0x0, 0x7dda, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x3, 0x9) socket(0x10, 0x2, 0x4) 10.591778015s ago: executing program 6 (id=2260): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async, rerun: 64) r0 = socket(0x2, 0x5, 0x0) (async, rerun: 64) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) (async) r1 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (rerun: 64) write$auto(r1, 0x0, 0xfffffdef) (async) fcntl$auto_F_ADD_SEALS(r1, 0x409, 0x0) madvise$auto(0x4, 0x7, 0x2) (async) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) r2 = socket(0x2, 0x1, 0x0) (async, rerun: 64) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x40012, 0x0, 0xd, 0x0, 0x1f, 0x101}, 0x28}, 0x7, 0x20020000) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async, rerun: 32) write$auto(0x3, 0x0, 0x100000000) (rerun: 32) socket(0x2, 0x1, 0x106) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32) r3 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) ioctl$auto_SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0xa901, 0x0) (async) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, 0x0, 0xa040, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0x74c) (async) r4 = getsid$auto(0xffffffffffffffff) prctl$auto_SECCOMP_MODE_STRICT(0x9, 0x1, r4, 0xa, 0x100000001) (async) shutdown$auto(0x200000003, 0x2) 9.431753379s ago: executing program 39 (id=2234): unshare$auto(0x40000080) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fchdir$auto(r0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x400, 0x8000) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22241, 0x154) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) execveat$auto(r1, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x1, 0x0) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x6, 0x0, 0x84) exit$auto(0x7) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) 9.106103782s ago: executing program 6 (id=2264): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) mount$auto(0x0, 0x0, &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) utimes$auto(0x0, 0x0) r0 = socket(0x18, 0x80000, 0x0) connect$auto(r0, 0x0, 0x1e) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/\xe4\xdd\x15\xfb\x8b\xe1\xe4\xaf$\xc6\xea\x1b\xf9:$]\x00Z>\x9ab\xd6\x112\xa0\xc4\v\xaf\x055\xd2B\xe0\xaan W\xe0\xa5\x7f\x1f\x8el\x11\xed\x99\x00\x00\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00\x03R@_\xe80Z\xff-\x10\x95\x1fS\x10\x135\x12q\xebX\xec]\x94\r\xc6v\xe9S1\x9b/\xce\xdf\xc3l\xf4\x9e\x9ba\xc7\x89\xf5\xb8\x14\xc9\x95\xca4\xf1\xd7\x9f+,}\xb1\xd4\"(\xd8\'\xdfkf\x97pM\x91>\x99\a\x7f\xe9\x90\xc2\x97\x01\xca\xddP\xf2q\xcf\xc0j>R\x0e0\x82HA};\x01\x7f\x96\xbf*u\xd1\xa5\xdebv\x1d\x8c\x04\t\xd2\xc8\xfc\xac\x89\x10\x15\x86A\xf3u;\xa1\x87R\x13\xd7D\by\xbe\x80\xa8r\x1fP\xe2\a9\b\xa3\xc3E$~r\x15M\"\x0f2F\xa7r4\x92\xdc\x12\xc5uM7\x9c*\xb4\x06\xc4Y\xd5\xd5\x10o\x81\xd5~\xa3\x0f\xf8\xc1\xa0\x9f\x9c\xef\xe6\xf2\xa4j\xe4O \b^.\f\xfe\x19\xcb\xf6\xb0v\xc2\xb0\xbb\xd2\xc0n\xca\xbe\x7f Z\xed\xff\x8d|]\x0e5\xb6\x06\x85\x89\xd6&\"\x8f1\xb5%\xce\x14Cx\xdd\xd9\xb1\x04d\xd1\x01Q\xf4\xd4\xf5\xc9\xf6\x10\x04\xd2\xf6\xcb\x12=\t\x8cj\xab\xa5/\x18%qK\xf3:\x06\x8a\xf4C\xbc\xa0=}&\x8b\xbf\x92\xac\xb8\xf7\xcaPs<\a\xba\f\x1eD\x0f\x14\fLC\x988\x81\xbb\xfc\xd7$\x1eb\xd2\xaeh\x14\xd2\xb3\xa3\n\xe0\x9f\x15\xac\x13l\xa2\'(\x8e\xbd\xbaQ,\xac\x84\f\x82\xd1N\xf4\xce\r\xbfVK\xd3v\x0e\x86I\x03v\x8a\x04W', 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x3, 0x2) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x100000000, 0x5, 0x63, 0x0, 0x0, 0x0, 0x7ff, 0x200, 0x2, 0xd, 0x9, 0x10009, 0x2, 0xd, 0x6, 0x200000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) semtimedop$auto(0xd9, 0x0, 0x38ef, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/khugepaged/defrag\x00', 0x2, 0x0) sendfile$auto(r1, 0x3, 0x0, 0xc01) r2 = socket(0x10, 0x2, 0x6) socket(0xf, 0x3, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYRESOCT=r2], 0x1ac}}, 0x20000852) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80502, 0x0) ioctl$auto_TIOCGPTPEER2(r3, 0x5441, 0xebffffff) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x0, 0x5, 0x0) sigaltstack$auto(0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop7\x00', 0x14f340, 0x0) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x501842, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) 7.510208929s ago: executing program 6 (id=2266): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), r0) statx$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0x4, &(0x7f0000000180)={0x6, 0x0, 0xd57, 0xff, 0xee01, 0xffffffffffffffff, 0x5, 0x2, 0x444c59c2, 0x80, 0x6000000000, 0x9, {0xffffffffffffff38, 0xc78}, {0x0, 0x9}, {0x0, 0xfffffffd}, {0x7fffffff, 0x4}, 0xfffffff9, 0xfffffff9, 0x8f, 0x7c2b, 0x4, 0x0, 0x0, 0x74a, 0x9, 0x9, 0x0, 0x40, [0x0, 0x10, 0xfffffffeffffffff, 0x3, 0x8, 0x9, 0x6, 0x1, 0x9]}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{@raw=0xb, 0x3, 0xcf, 0x8, "16a0d89bf208384515b5375a677609aa1bc737276563c3d5a2fca999d5797ab7a10a4d2bc341c4bd369ae535", @raw=0x1}, 0x1, @integer=@value=[0x6d, 0x7, 0x0, 0xbb, 0x4, 0x80000000, 0x1, 0x10001, 0x1, 0x400000000009, 0xc4, 0x9, 0x6, 0x4, 0x3, 0x6, 0x1, 0x3, 0x4, 0x401, 0x6, 0x0, 0xa0, 0x5, 0x2, 0x3, 0x5, 0xa, 0x8, 0x1, 0x8, 0x7f, 0xffffffffffffdb75, 0x100000000, 0x3, 0x7, 0x7fffffffffffffff, 0x1, 0xd, 0x1, 0x71, 0x0, 0x8, 0x2, 0x3, 0x3, 0x2d7, 0x1, 0x1, 0x6, 0x2, 0x800000001, 0x6, 0x7, 0x0, 0x6, 0x4, 0x3, 0x40a, 0xd, 0x3fd, 0x8, 0x7, 0xffff, 0x50ce0883, 0xbd9, 0x5, 0x2, 0xd8f, 0x80000000, 0x0, 0x7, 0x46e, 0xa5cf, 0x8, 0x7, 0xc16b, 0x6, 0x9, 0x6, 0x8000002, 0x6, 0x1, 0x3, 0x3, 0xfffffffffffff16a, 0x6, 0xffffffffffff0001, 0x100000000, 0x4, 0x8, 0x4, 0x2, 0x2000000003, 0xfffffffffffffffe, 0x20007cf9, 0x40, 0x2, 0x7, 0x100, 0x14b, 0x2, 0x45f3, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x1, 0x7, 0xcf4, 0x1, 0x3, 0x0, 0x4, 0x7, 0x6, 0x25e2, 0xc9a, 0xd09, 0x40, 0x2, 0xffffffffffffff00, 0x7, 0x9, 0xfffffffffffffff8, 0x40], "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x210001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x3], {0x9, 0x3, 0x6, 0x0, 0x4, 0x895, 0x3fdc, 0x6, 0x5}, {0x2, 0x1d11, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0xb}}) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fedbdf250900000008000c000100008008000300", @ANYRES32, @ANYBLOB="08002c000001000008001d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000828}, 0x8000) r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5a}, 0x80000800}, 0x7, 0x4008) r5 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000640), r3) sendmsg$auto_SMC_NETLINK_ADD_UEID(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)={0x234, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@SMC_NLA_EID_TABLE_UNSPEC={0x8b, 0x0, "5be2fdb89a4555bc0ab8fe1b8e4b4655d23babd081a509722b09545c7ad5b15ca3467eb11f74ec1e377cded66879fbe15c54ec9992338ae2d0a419c32c522f30bc4e4370bfae178ac65e63fbd8e692413b826bc301c4542c7efb16e35c150064a9e4e8259c24b140a3a8591f066a48f8c356516fe9edbf6a68cb19153f283eb8d53190f1ccefa0"}, @SMC_NLA_EID_TABLE_UNSPEC={0x88, 0x0, "3ba25d07da672c3db6dd6dc67b9dd4a3c92a962f87b97f400b4c824450e38852c453e6975cea992a5b1a2fb3227a00c406494e75e8649b8f837b83137118a6e2f97eaf7cd4e3755e13530057b7a79b2ae4aba37bdd15b1376f983a5ac5348b8bf7157c1e8a9213dab3daf1375e34e0e2b945d59fdcfd7ba143d5b25c4266a8800671545a"}, @SMC_NLA_EID_TABLE_UNSPEC={0xd0, 0x0, "9bfd36b23676e1676a1a0880ba1bbf8888c5fd90879a8e323b23d8b34d95a2b0ebdf481ca2325ebd345e239de065fff85e60d7b879a6bf635a03eaac2f88a4e4802265a6d7e376756740aa8520f5452af53cf7ad2ec33c0f9d8810f4a6a484a5b52f52ca2af73346ba26b789e5cb65bd17513d5d232b47839ecc214b304ce6c884f01617e11f92749e8c0c685107b0315772af3773d4ebcf7bf7a6e4aa0ce18533991cb44675cd5a0879ae1cd42619bc787182703edd015004f391846b93cacb900085d7d2e32a59c9ba94f2"}, @SMC_NLA_EID_TABLE_ENTRY={0x8, 0x1, '&\'])'}, @SMC_NLA_EID_TABLE_UNSPEC={0x34, 0x0, "6b647518189034624ef645950c5c4080c4ab9c204ad1cc33d0bc224de2377c3dff6e6b835062851211dca584465acbc6"}]}, 0x234}, 0x1, 0x0, 0x0, 0x5}, 0x8000) open(0x0, 0x22040, 0x75) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="720100", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3}, 0x3ef3}, 0x3, 0x0) write$auto(r4, &(0x7f00000008c0)='/dev/sg0\x00', 0x6) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) pivot_root$auto(0x0, 0x0) r7 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) unshare$auto(0x40000080) ioctl$auto_BTRFS_IOC_ENCODED_READ(r7, 0x80809440, &(0x7f0000000a80)={&(0x7f0000000a40)={&(0x7f0000000980)="39a9f7d74f8a452a16a7102342b1919b75d9321626c49a1fe6a05ddf69bfd20d336769431edf8cc1662a134677eb23b2a2fda8e7cd7a4d3a9155eab28f369e03b570cc748bcfbf6b08d5eba12160b165541836100b958e5f741fb774a402c2e73603c168e3b5297db01f81aafb365f717df16fa8723664f3680751f0d16470260120b7070de0e11e03c8af", 0x9}, 0x8, 0x0, 0x7fffffff, 0xc, 0xd, 0x545a, 0xf501, 0x6, "6f60bda9caef6e6f0ee0282caafc4ee2a4b6b7843d2b29fb3eb6904d851ac427edf730d522bbd0da1ccd275550a9b1a8b0bced18ed3e559085f1b2358a5e5d39"}) r8 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) ioctl$auto_SG_GET_SG_TABLESIZE(r8, 0x227f, &(0x7f00000001c0)) sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd700000dcdf250300000004000800100001800c00108008000900fe220badcf0e4263ba92654e9ba786d984f68d50cc1889a54944e0f4c10b4377e6ba7e4f06a9c51ceaa776e606d523e73c22970e238a2a2d21d986bedd4920bc6da6858218d9d85d2bcf636ecfed11082e866e62d23e21002fb6f82397ce440cae25f8e34e13c9326e6b3692ef5535483880249acd012f3da61690cc2d4496b3d64931149cb37de563235a0e18c0eaa75dba805b0325e25241f0402aec38824e48fb813c57275d21d6a5adec89166a74737bb53bb923c016cc3aa2bbf6d483d702acae0e5b972957824365e50a1ad31f85000000", @ANYRES32=r2, @ANYBLOB], 0x28}}, 0x810) 7.100882198s ago: executing program 0 (id=2267): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x40000c, 0xdf, 0x9b72, 0xffffffffffffffff, 0x7ffd) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) msgctl$auto_MSG_INFO(0x0, 0xc, &(0x7f0000000180)={{0xfffffffc, 0x0, 0x0, 0x5, 0x5f, 0xcf, 0x5}, &(0x7f0000000100)=0xd, 0x0, 0x7, 0x7, 0x6, 0x3, 0x14cd21ec, 0x3, 0x7, 0x4, @inferred=0xffffffffffffffff, @inferred=0x0}) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) mmap$auto(0x0, 0x1, 0xfd5, 0x12, r3, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000300)={{@inferred=r1, 0x1, 0x2, 0x12, "46e14eec2b99ddeb5bb9f18e13a9abbd2df79342840f5efb7a1950da0293dbdd8da898f77156a76ae819b733", @raw=0x7}, 0x1, @enumerated=@item=[0x80, 0x7cd, 0x9, 0x8, 0x86d, 0x9, 0x3, 0x200, 0xad6, 0x9, 0x5, 0x8, 0x9029, 0x4, 0xe, 0x3, 0xbbe, 0x7f, 0x6, 0x3f9e525, 0x4, 0x2, 0x1, 0x100, 0x9, 0x5, 0xdde, 0x3, 0x5, 0x800, 0x0, 0x0, 0x0, 0x91f0, 0x8, 0x5, 0x4, 0x1, 0x8000, 0xf5eb, 0x25f, 0x100, 0x1ff, 0x4, 0x3, 0x4, 0x3a, 0x69f45895, 0xff, 0xe, 0xf70, 0x370, 0xfffffffa, 0x4, 0x4, 0x1, 0x80000000, 0xfff, 0x4, 0x2, 0x100, 0x42f, 0x4, 0xfe2c, 0x8, 0x2, 0xe75, 0x2, 0x7e000000, 0xfffffffd, 0x1ff, 0xb022, 0x7, 0xfffffff7, 0x6, 0x48, 0x9, 0x0, 0x9, 0x0, 0x3ff, 0x0, 0x1, 0x7, 0x5, 0x8, 0x5, 0x14000000, 0x9, 0x6, 0xfffffb06, 0x8, 0x1, 0x9366d783, 0x1, 0xffffffff, 0xffffff86, 0x218, 0xa, 0x4a, 0x5, 0x631, 0x100, 0x9, 0x4d00, 0x40, 0xfffffffc, 0x9, 0x0, 0xff, 0x3ff, 0x9, 0x3ff, 0x8001, 0x7ff, 0x4, 0xa, 0x9, 0x7, 0x64f, 0x4, 0x80000001, 0x4, 0x7, 0xfffffff7, 0x4, 0x56e5cfb, 0x2], "21eb8885110fcca853c6a9493f2d426c1a85f414491b276fcfdb35bb2d53add1193ab1981cffb76ef76e0c22335eb6530f8c4d8e518628b17d1d8ecafcc2dfbabc414e778684bdcc252be76aff0243337bfa39e4552c5e86c7a94e8d169d199174a8bb88f62ade083d668a51c325dcf94aabbf21f85a5d3ada8b46b999ca44e3"}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r2, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fffe000) 6.500315872s ago: executing program 0 (id=2268): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) setresuid$auto(0x0, 0x0, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181500, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) fanotify_mark$auto(0xffffffffffffffff, 0x9, 0xb, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r1, 0x0, 0x400018) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 5.743385788s ago: executing program 3 (id=2269): migrate_pages$auto(0x0, 0x99, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x23, 0x0) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r0, 0x0, 0x4) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000680)={0x5, 0x9}) 4.879003397s ago: executing program 6 (id=2270): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x1, 0xeb1, 0x40000000000a5, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, 0x0, 0x80000000) r1 = socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0x9, 0xdf, 0x18, r1, 0x8000) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) clone$auto(0x10051c, 0x6, 0x0, 0xffffffffffffffff, 0x80000001) socket(0x2, 0x1, 0x0) mmap$auto(0x20002, 0x5, 0xfffffffffffffe01, 0x8011, 0x3, 0x8080) r3 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/numa_maps\x00', 0x22000, 0x0) read$auto_proc_sessionid_operations_base(r3, &(0x7f00000000c0)=""/4096, 0x1000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="13002cbd70c38a3d5f0e76bda70008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x24044080}, 0x20040894) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000001140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001100)={&(0x7f0000001180)=ANY=[@ANYBLOB="208a4cc385fee09b042f0000c292507554c00b00", @ANYRES16=0x0, @ANYBLOB="00032bbd7000fcdbdf251f0000000600fb000900000004008700"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x44001) getrlimit$auto(0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x61, 0x100001000000003, 0x9b72, 0x2, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x45, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.383054073s ago: executing program 3 (id=2271): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x3, 0x0) ustat$auto(0x801, 0x0) open(0x0, 0x22240, 0x155) r0 = socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, r0, 0x0) open(0x0, 0x26241, 0x20) socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6c) socket(0xa, 0x1, 0x108) listen$auto(0x3, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x288202, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket(0x15, 0x5, 0x0) arch_prctl$auto(0x3, 0x2e142f8f) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x8) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 4.374958117s ago: executing program 0 (id=2272): epoll_create$auto(0x2) (async) r0 = epoll_create$auto(0x2) epoll_pwait2$auto(r0, 0x0, 0x8, &(0x7f0000002780)={0x10000000000, 0x5}, 0x0, 0x8) (async) epoll_pwait2$auto(r0, 0x0, 0x8, &(0x7f0000002780)={0x10000000000, 0x5}, 0x0, 0x8) r1 = epoll_create$auto(0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000200)={0x40004200, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$auto_SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000240)="ff1c77e3e0c75de3e4b5b406551a5767a5356c9bd9de5c773f2e75e6819101f051269dc09510f21d26b8a47ea44ff3011466be44ee87e992ae7b381f46f7e8880f1e4e52a3aa37892fbbcee374327f019f5d1866ce7ce150a42b0a07517071aa68e5997c2bc1062a9b033ba7bfba2572aaa306a2725c16886e383a0973673e3ea024667ff4d2d10e01fd145039fbc221dcd97c590000000000000000005b0d5646bec3cc3e72e128b447ddfe9f9109d94bbbeeb889959201af3ee76e59ecacbc6cd4db93f60abb9223cbd86cb4ea79e84ec9c9bc05390d61c270dd5ea2a3334fd5db6942929d02c50bc254ecb9989258c9e074a6917a36f0") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x801, 0x106) connect$auto(r2, &(0x7f00000000c0)=@in={0x2, 0x4e20, @multicast2}, 0x6) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x8006) r3 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(r3, 0x0, 0x6, 0x700, 0x0) close_range$auto(0x0, 0x5, 0x0) (async) close_range$auto(0x0, 0x5, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/tty/ptyb1/dev\x00', 0x0, 0x0) fallocate$auto(0xffffffffffffffff, 0x5, 0x395, 0x5) (async) fallocate$auto(0xffffffffffffffff, 0x5, 0x395, 0x5) read$auto(r4, 0x0, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyu1\x00', 0x484840, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) (async) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) mmap$auto(0x0, 0x80002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r6 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) (async) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) r7 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r5, 0x541c, r7) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 3.333974687s ago: executing program 0 (id=2273): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x4f0, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_OFFLOAD={0x269, 0x9, 0x0, 0x1, [@generic="49676b779b2a77a76a060bcd388839c7617a6c0e91505ef4d22e19af93c01df84cf62f00fdf276ac90aa6a448119459bacf16021823ca082454feaf2980e3d4280983336206e0e2bcd304c93c4349168eb968d0f7bdb80a4ac8726e67ac74f5aa17c75abe2e53abed76b3df15090dd50617324cd40d35d04a56ea2cf92b49c748c7e870c12b8835b0c495387e462b728f45daaa02dd2ee3fd577a5796e864e6782b77adc00f13bf3c7d9aad4ecbe8c348b9ed0", @typed={0x16, 0x50, 0x0, 0x0, @str='/dev/input/event1\x00'}, @generic="a62f85abfccfb6b3610b017dbe9f76ac1ff1968b7e9f181348393c747a9fd06325fb950abba24db680a3c0823bc0c7cfd50a2c502a43861176e4e6718dc77fb2b7713b322767d55a85c18d7999a7982e84ae3023ea05e317f8f6742a24f851d6267668adcfab330438f4be7100d2d5a347548f2e5eee2ed1bb5f263d45cc51f008ae913029bbe7f7ee95d6369e3842262ce7ecba99656007d0a4b396d20624fca65a3e773ffdba6236a337b88ba86ea430b1fd2d09d6edb6e4849ceef933d721fffe5f8e51b9531e0cdfe12ae6cc3de9a63841aee0904c05cd9005c0a5c7e17e324798c2c401", @generic="d66561711abf9ea0da97e1ab7327e6f61b786c335d43254a5255802396c0308963a4a84c80ca1d66bcd13f74f54702835494b330e0ca6448d84216c7419810673a33efd44af8b6133ae64f33bf312909fa5a04f78cb135e45553f8ea12384db4b9777a2b791be159d44a0b3f8466e1a74d91adba10728326e55225e157128f7e1522acccc77bae19cd76133c2a3391fd2405f52f12a5bf12a602f92bf7789b3dc8a85afa713447c23a79cfedbde4e4a2a1df3ea2"]}, @MACSEC_ATTR_OFFLOAD={0x265, 0x9, 0x0, 0x1, [@nested={0xc, 0x8b, 0x0, 0x1, [@typed={0x6, 0xd6, 0x0, 0x0, @str=')\x00'}]}, @generic="984d5707fc7f308e4f1bb513c28243af784351615c4e5f795e1dedacf7d10672fb74558096367c9b4db543bcfed7f41fe8ab7cc4b41178e2d71cfda4d85eb1021f9dc3b8c4467cec90019d16824ff8c322f32875ccfef02230599283a0c2c81b93fcdaaab9ab48f25ed10e9d5387aebabb40b01f5fcfbceb6ab14beaf20602c0f907acefb53e86f9d4f93c82e6640b27c61f53c6975044ba63fd60c211df7f46dbf638c8eca9ca", @nested={0x5d, 0x84, 0x0, 0x1, [@generic="c8ba8a9d4c9c2aa0aaafd831b589e0b334bea741b6f6e27ac93ff72c3cb109ee7f233936227923ebb9fd6da136c21869a5301a79e63a44581bcff73df9aa7e96dfb5c12b2653b8beecc448fc19c4f4c8703ea0f000be2fedb5"]}, @generic="23bd765ba00bbec253b36d6a5f3a40f73385feb2a0431994e48ca0d75c7b25254acc4ea272b2ea173d4e341ca30db368ebca048a45c02d55d68cbbd90d53a73c6035751f68239d14e2dd4a7c76113454ad29d7ef6d4239bbe270a9acdf01a73abf6beeb93f4f", @generic="4a72bbb8a567f6c4302e05294febc489e8ae3320eea30a2eaaba56181f87d53be52fbd874fdd2a3bf9913b2e1bc67ee31ff43c23f8bb1c805cfb3017960569b7d337125d0ad395fca95ee845533edb90fe0bf1e6b2eaae8ec29fcd672bc6cf1d37e13f74ffbda8f79e65b03e5b7dbf0309ac259da3bfb636ded58958be6b3d6ef5d8940c3afcab02628df2a202d18c62d884274c55f1ed7634cf03a57d4293b7a336970f625cdc0f7eb7e78fe8cef83c22a02b4f44dde1d6712714860de2ece6d753077544bcbc2b79ce303ae70d8544abdf23ad1e8ce25819b29030a6db0a977d2409311550276d"]}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x40014}, 0x48845) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) socketcall$auto(0x8000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x202, 0x0) sendfile$auto(r2, r2, 0x0, 0x200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x6) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0xc4d, 0xfe) connect$auto(0x3, &(0x7f00000000c0), 0x55) 3.216796074s ago: executing program 3 (id=2274): mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) r0 = socket(0x18, 0x5, 0xe) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) bpf$auto(0x0, 0x0, 0x6f4) mmap$auto(0x0, 0x20009, 0x8000e2, 0xffffffffffffffff, r0, 0x7ffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wg0\x00'}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x400201, 0x0) write$auto(0x3, 0x0, 0x7fffffff) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r3, 0x0, 0x4000040) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x13b, 0x1, 0x4, 0x5, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) inotify_add_watch$auto(0xffffffffffffffff, 0x0, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop6\x00', 0x1, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x4c07, 0x0) 2.511886511s ago: executing program 0 (id=2275): close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = prctl$auto(0xc1ae, 0x1, 0x0, 0x1, 0x0) openat$auto(r1, &(0x7f0000000340)='./cgroup\x00', 0x80000000, 0xa) r2 = socket(0x15, 0x4, 0x0) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r1) sendmsg$auto_NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="010000004019191645b35d6bd94b407f0a54ba1ad0a5b1eec0", @ANYRES16=r3, @ANYBLOB="200028bd7000f7dbdf251300000019002e8008000e00ffffffffe53de2374adcf21a1cd9cd0a700000001c002d8008000480040053800800b5001000000008003d00e000000208000100280c00000500110006000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) sendmsg$auto_NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c010000", @ANYRES16=r3, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x40000}, 0x40400) setsockopt$auto(r1, 0x9, 0x3, &(0x7f0000000240)='\x00', 0x10000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x29, 0x5, 0x0) r4 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r4, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r5 = socket(0x2, 0x1, 0x84) getsockopt$auto(r5, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x17d) sendfile$auto(r0, r0, 0x0, 0x2) socket(0x2, 0x1, 0x0) 2.16643177s ago: executing program 0 (id=2276): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) lseek$auto(0x3, 0x6, 0x1) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) bpf$auto(0x0, 0x0, 0xa3) sendfile$auto(r0, r1, 0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/038/001\x00', 0x40001, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.304672008s ago: executing program 6 (id=2277): lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0x1002, 0x8, 0x80000008000000a, 0x40000402, 0x9, 0x8, 0xffffffff80000000, 0x800000000000d, 0x6, 0x240000100103}) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mount$auto(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='efs\x00', 0x5, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r0 = socket(0x10, 0x2, 0x6) socket(0x11, 0x80003, 0x300) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/driver/usbserial\x00', 0x302, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x5, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x10000) 0s ago: executing program 6 (id=2278): mprotect$auto(0x1, 0x0, 0x1) mprotect$auto(0x4, 0x7ff, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r0) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000080), r0) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x401}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x48000) mmap$auto(0x7fffffff, 0xfffffffffffffffc, 0x3, 0x3ff, r0, 0x89) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyd6\x00', 0x4000, 0x0) r4 = prctl$auto_SECCOMP_MODE_FILTER(0xfffffe00, 0x2, 0xffffffffffffffff, 0x40, 0xd8) getsockopt$auto_SO_BINDTOIFINDEX(r4, 0x3, 0x3e, &(0x7f0000000200)='l2tp\x00', &(0x7f0000000240)=0x6) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000002c0), r4) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_ADDR_RECEIVER={0x4}, @HWSIM_ATTR_REG_STRICT_REG={0x4}, @HWSIM_ATTR_REG_HINT_ALPHA2={0x9, 0xb, 'l2tp\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x48841}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000003c0), r6) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000440), r6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'dummy0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'veth0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'veth1_to_bond\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'veth0_macvtap\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000100}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x120, r7, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb799}]}, @ETHTOOL_A_LINKMODES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x26}]}, @ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000}, 0x20048011) open(&(0x7f0000000780)='./file0\x00', 0x0, 0x10) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x65}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xbdc9}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x38f3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2400c844}, 0x4000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/sequencer2\x00', 0x2020c0, 0x0) bpf$auto_BPF_OBJ_PIN(0x6, &(0x7f0000000900)=@bpf_attr_1={r3, 0x5, @next_key=0x2, 0xaeb}, 0x40) ioctl$auto_PPPIOCSCOMPRESS(r4, 0x4010744d, &(0x7f0000000a00)={&(0x7f00000009c0)='\xa3%-]$.\x00', 0x153a, 0x3}) shmctl$auto_IPC_SET(0x1000, 0x1, &(0x7f0000000c80)={{0x190, 0xffffffffffffffff, 0x0, 0x200, 0x3, 0xc90d, 0xfff}, 0x0, 0x5, 0x6, 0xfff, @inferred, @raw=0xfffffffe, 0x7, 0x0, &(0x7f0000000a80)="5db803f7d57a279417d7675439a5407ea3172caba422e6d4143ce3a2c8197ab5546d4e9b4641de247408afeb00e7754243e8dca9741028a071963c7b11b7178212561d46a40046bf45027485db196ed4c800ea7c4372bb839f670535351844de73be635d8c7b8b20f5b12ecaa1b6a678d9afb9bd77b55615ec51d71ab4161c1511c9b40b0dab14f4e689bd3a65812e5d6bbf33ff417225c35e163d8853435b9041a1ceac1127f3cc0f96285955fbc4cf192ba411cb5b08712a7a7456dfe65cc6079720d744ef4068d7bd29746ff317", &(0x7f0000000b80)="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"}) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000001600)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000d00)={0x888, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0x7fc, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x6}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x7ee, 0x2, "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"}]}, @NL80211_ATTR_PMKR0_NAME={0x64, 0x102, "3f1bb1f0f8d8016e487c6d64a9d46cb0969ff20c7cf1c499d0447fd45cec1812711036fc65f4d783b187ac37debd6eac04b800cc3e5cbfab512273dcaeefeebbbac59f17e34c9364cfc37a7d9cb3677a9bff4cd9b96e51bd23432dc558eaf937"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x4}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@typed={0x8, 0x95, 0x0, 0x0, @uid=r14}]}]}, 0x888}, 0x1, 0x0, 0x0, 0x40}, 0x4000) setsockopt$auto(r6, 0x9, 0x4, &(0x7f0000001640)='\x00', 0x4) sendfile$auto(r13, r4, &(0x7f0000001680)=0x4, 0x8) kernel console output (not intermixed with test programs): 9][ T9] Process accounting resumed [ 526.661778][ T9] Process accounting resumed [ 526.679715][ T9] Process accounting resumed [ 526.692153][ T9] Process accounting resumed [ 526.709917][ T9] Process accounting resumed [ 526.712760][T13157] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 526.726566][ T9] Process accounting resumed [ 526.772284][ T9] Process accounting resumed [ 526.830509][T13165] usb usb36: usbfs: process 13165 (syz.2.1546) did not claim interface 0 before use [ 526.841776][ T9] Process accounting resumed [ 526.856379][ T9] Process accounting resumed [ 526.865623][ T9] Process accounting resumed [ 526.879726][ T9] Process accounting resumed [ 526.913107][ T9] Process accounting resumed [ 526.944059][ T9] Process accounting resumed [ 527.318073][T13151] Process accounting resumed [ 529.123789][T13202] Process accounting paused [ 529.527279][T13212] Process accounting paused [ 530.694920][T13240] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 530.759912][T13240] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 532.455404][T13278] FAULT_INJECTION: forcing a failure. [ 532.455404][T13278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.494258][T13278] CPU: 0 UID: 0 PID: 13278 Comm: syz.3.1574 Not tainted syzkaller #0 PREEMPT(full) [ 532.494301][T13278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 532.494316][T13278] Call Trace: [ 532.494325][T13278] [ 532.494336][T13278] dump_stack_lvl+0x16c/0x1f0 [ 532.494377][T13278] should_fail_ex+0x512/0x640 [ 532.494418][T13278] _copy_from_user+0x2e/0xd0 [ 532.494456][T13278] core_sys_select+0x2ce/0xae0 [ 532.494505][T13278] ? __pfx_core_sys_select+0x10/0x10 [ 532.494584][T13278] ? set_user_sigmask+0x21b/0x2b0 [ 532.494624][T13278] ? __pfx_set_user_sigmask+0x10/0x10 [ 532.494672][T13278] do_pselect.constprop.0+0x19f/0x1e0 [ 532.494714][T13278] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 532.494756][T13278] ? __fget_files+0x20e/0x3c0 [ 532.494798][T13278] ? __x64_sys_futex+0x1e0/0x4c0 [ 532.494840][T13278] __x64_sys_pselect6+0x182/0x240 [ 532.494880][T13278] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 532.494932][T13278] do_syscall_64+0xcd/0xf80 [ 532.494971][T13278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.495000][T13278] RIP: 0033:0x7f68ab58f7c9 [ 532.495034][T13278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.495063][T13278] RSP: 002b:00007f68ac4b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 532.495091][T13278] RAX: ffffffffffffffda RBX: 00007f68ab7e5fa0 RCX: 00007f68ab58f7c9 [ 532.495111][T13278] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000400 [ 532.495128][T13278] RBP: 00007f68ab613f91 R08: 0000000000000000 R09: 0000000000000000 [ 532.495146][T13278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.495164][T13278] R13: 00007f68ab7e6038 R14: 00007f68ab7e5fa0 R15: 00007ffc86374b68 [ 532.495204][T13278] [ 534.506500][T13313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1584'. [ 536.570812][T13337] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 538.275267][T13356] zswap: compressor not available [ 539.255142][T13381] random: crng reseeded on system resumption [ 539.279895][ T5849] Bluetooth: hci0: unexpected event 0x1c length: 725 > 5 [ 540.441974][T13393] random: crng reseeded on system resumption [ 542.939273][T13434] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1611'. [ 543.237667][T13426] Console: switching to colour VGA+ 80x25 [ 544.865856][T13462] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1616'. [ 552.563985][T13553] kexec: Could not allocate control_code_buffer [ 553.893281][T13585] netlink: 146 bytes leftover after parsing attributes in process `syz.1.1642'. [ 558.739302][T13652] netlink: 'syz.0.1657': attribute type 5 has an invalid length. [ 558.782867][T13652] netlink: 'syz.0.1657': attribute type 1 has an invalid length. [ 558.795277][T13652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1657'. [ 558.836067][T13653] netlink: 'syz.0.1657': attribute type 5 has an invalid length. [ 558.843999][T13653] netlink: 'syz.0.1657': attribute type 1 has an invalid length. [ 558.851766][T13653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1657'. [ 558.930761][T13636] Process accounting paused [ 559.288019][T13658] Process accounting resumed [ 559.925024][T13654] Process accounting resumed [ 560.080970][T13682] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1667'. [ 563.176263][T13733] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 563.270237][T13733] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 563.440784][T13740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1680'. [ 563.480921][T13740] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1680'. [ 563.557924][T13740] nbd: must specify at least one socket [ 564.219730][T13755] bond0: invalid ARP target specified [ 565.538691][T13768] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1685'. [ 565.596610][T13770] program syz.2.1686 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 565.800757][T13776] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 565.851626][T13772] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 565.932999][T13778] [U] [ 565.935864][T13778] [U] [ 565.938658][T13778] [U] [ 565.941440][T13778] [U] [ 565.944550][T13778] [U] [ 565.947244][T13778] [U] [ 565.949938][T13778] [U] [ 565.952615][T13778] [U] [ 565.973384][T13778] [U] [ 565.976107][T13778] [U] [ 565.978796][T13778] [U] [ 565.981483][T13778] [U] [ 566.033103][T13778] [U] [ 566.035948][T13778] [U] [ 566.038647][T13778] [U] [ 566.041350][T13778] [U] [ 566.095075][T13778] [U] [ 566.097799][T13778] [U] [ 566.100485][T13778] [U] [ 566.103171][T13778] [U] [ 566.215646][T13778] [U] [ 566.218356][T13778] [U] Äö˜òÞ+‰N¡¶ëöÞ‹ˆ]‡¾WVÓ†­1Œ‹ôè ,äÝ®Œ˜Ç [ 566.224624][T13778] [U] ©n·pAñ†:ȃ5(Á¹ÜCmb눖_%¹ÿô5­•¯’4xÊÀ1š [ 566.231212][T13778] [U] ü=Ù’Ô™[9¢±˜Ë¡˜PD:Õ7}•ˉ§À¦ß€‚XÙò£ü'ú¯0¿£kuRNXO¡hdk!£à8öDö„qbA zö2 [ 566.240754][T13778] [U] ²ôb™Xö–D [ 566.244399][T13778] [U] ß{kR %Ï«‰f‘LûF¨;Wqn3 ¤Bë‰Z+·yšiö0‚“ƒ ’7v [ 566.251086][T13778] [U] Ë%E œÜca{h‰iœ§o4³OsPœP¿$pޱçLÓÁ†7*,Nª/|²%b//&atzbâCœ@¡ò+µ„¤?‚JÔû@̵8s­[Á߸"%È›v_ë!s™?uCv¦.âm®’¹@×ù– âÇ!h•Õ‹Uû¼£iË’Oi0Cá¸2U ïVàö( [ 566.267840][T13778] [U] ë••ÃÜ}@Aÿa-ÓŸ…—#t&–ñ³cUªÇS].ƒ1²<—Æ÷½@ì_Ž&YõDIœI8d=çäÚ[Brä•­~¿NšçLøyÐ"$æ{~ x[Ó_  [ 566.278529][T13778] [U] MÉn:[ûçë–×K1*d93î÷T [ 566.283143][T13778] [U] e²<\[‘²„2¦Ö»=Þ¯‰Ô ‘ ùlÂ{¨ö¾6ž9ß×lgLÚP—IB¢ùü©Òºº/m)”m¤á ÕFÝ&+-ý£‹Œ¶±)V8èÿ¹U@h!¦_D 4 *‘|0÷:Wñà _0q/¸øué}%[ÙT“-Ùñ#9РntƒîÀ™…"ZÕâ£jAviÁ6î“¡—¢ÎAjéxÀ׊N'n‘Œ‡Éå2µ[Ò5Ú÷ [ 566.301475][T13778] [U] }Û‰€Áì°òSüt&ŽÆXáß»´àïs‚nîé*¿ƒÒf•S!ÌB8FèF¨U²o[…Í ŸÂýôÎ0Ò¨cÑs}F‘!âxé š2ѼψR–€Ç&“ŒNÙ†lÍW¬Ì>ôDô‚³Hh%Ú5—­!6úÑcémª’æG²¶§Ûh,èàŽ~›Q©4Ÿ jBÇ|+á$°vVÏBÔšªõ¸p}“ê2ªÎÉqMÊ2¤ª³‡ÅQÅ8/”³áûÓ·ÁKdÂ#í·íNJf&õ”ºÁ¢Yè?×ïûsõ¼#‹ìîÕùJÔq—$^ó±l‹ [ 566.325890][T13778] [U] }B;}xm*»ô5$M‹«ß{—2œ`]‚5•ÌIm$+TÕóÞg¬žÅE_˜’5XÙ|™}4Z¨¤˜a–[ŽîüÞsx¯Ui|Ó š.XûB×è2:ðj*\[ðw¥©VÎÑLvhQ"†<6ùOmþr}»ñpµ(e»Í3£eøeƒœ½®­óJŠ‹y#TdèöXä­+#6ê “·XY{ÁË [ 566.342912][T13778] [U] Ä2ú<õê½î?¨4ôH3^'Z‘Š“ó/ü !´áM(‰ÏŽJ×-Ð(† í"q [ 566.349950][T13778] [U] ]ß‘…dÐÿë3×~& [ 566.353936][T13778] [U] Ä÷=Ý )õ¼×B€ç¥a£~ã8lv8é–cúÊdááú“½´)„Â'ñ4“ô¬jV• [ 566.403083][T13778] [U] 9ž¹å8zåÐËáMûÍœßúeꚇ EtÖTU÷áŒË3G¾JN®Ä)Ñì%pýü¬ê³Èƒ²p§!ü<ÆâgÿÍ‘hµeöòôM“¨˜ßè°‚£`h ²‘‹žö}öA$[`Ý[xV9¿=,Ÿ´ìýn¨-•”:ÈŽ„07;ºÑ>Õæ¡£ks2é±óå§‹t‡«ßŒœ-rB޵@È:û‚`<_øC^Gsið256åË>㺎̟³³3ÿ»e#5 Š¡úáW(Àw#Gbo÷£dà [ 566.425042][T13778] [U] [ 566.427733][T13778] [U] [ 566.430427][T13778] [U] [ 566.480009][T13790] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 566.722928][T13778] [U] [ 566.846354][T13798] Unable to find swap-space signature [ 566.969105][T13799] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 567.005700][T13803] FAULT_INJECTION: forcing a failure. [ 567.005700][T13803] name fail_futex, interval 1, probability 0, space 0, times 0 [ 567.018787][T13803] CPU: 1 UID: 0 PID: 13803 Comm: syz.2.1694 Not tainted syzkaller #0 PREEMPT(full) [ 567.018812][T13803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 567.018822][T13803] Call Trace: [ 567.018828][T13803] [ 567.018834][T13803] dump_stack_lvl+0x16c/0x1f0 [ 567.018861][T13803] should_fail_ex+0x512/0x640 [ 567.018885][T13803] get_futex_key+0x293/0x15f0 [ 567.018907][T13803] ? __pfx_get_futex_key+0x10/0x10 [ 567.018928][T13803] ? __pfx___might_resched+0x10/0x10 [ 567.018959][T13803] futex_wake+0xea/0x530 [ 567.018986][T13803] ? __pfx_futex_wake+0x10/0x10 [ 567.019019][T13803] do_futex+0x1e3/0x350 [ 567.019040][T13803] ? __pfx_do_futex+0x10/0x10 [ 567.019060][T13803] ? __might_fault+0xe3/0x190 [ 567.019083][T13803] mm_release+0x24e/0x300 [ 567.019108][T13803] do_exit+0x69e/0x2bd0 [ 567.019130][T13803] ? __pfx_do_exit+0x10/0x10 [ 567.019146][T13803] ? do_raw_spin_lock+0x12c/0x2b0 [ 567.019169][T13803] ? find_held_lock+0x2b/0x80 [ 567.019198][T13803] do_group_exit+0xd3/0x2a0 [ 567.019217][T13803] get_signal+0x2671/0x26d0 [ 567.019250][T13803] ? __pfx_get_signal+0x10/0x10 [ 567.019277][T13803] ? do_futex+0x122/0x350 [ 567.019299][T13803] arch_do_signal_or_restart+0x8f/0x7a0 [ 567.019322][T13803] ? fput+0x70/0xf0 [ 567.019337][T13803] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 567.019367][T13803] ? __pfx___x64_sys_futex+0x10/0x10 [ 567.019392][T13803] exit_to_user_mode_loop+0x8c/0x540 [ 567.019419][T13803] do_syscall_64+0x4ee/0xf80 [ 567.019442][T13803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.019459][T13803] RIP: 0033:0x7f16ceb8f7c9 [ 567.019474][T13803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.019490][T13803] RSP: 002b:00007f16cf9410e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 567.019507][T13803] RAX: fffffffffffffe00 RBX: 00007f16cede5fa8 RCX: 00007f16ceb8f7c9 [ 567.019519][T13803] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f16cede5fa8 [ 567.019529][T13803] RBP: 00007f16cede5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 567.019539][T13803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.019549][T13803] R13: 00007f16cede6038 R14: 00007fff72748560 R15: 00007fff72748648 [ 567.019571][T13803] [ 567.564112][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.570469][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.227888][T13854] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 577.329843][T13986] FAULT_INJECTION: forcing a failure. [ 577.329843][T13986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.367185][T13986] CPU: 0 UID: 0 PID: 13986 Comm: syz.0.1732 Not tainted syzkaller #0 PREEMPT(full) [ 577.367224][T13986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 577.367241][T13986] Call Trace: [ 577.367250][T13986] [ 577.367261][T13986] dump_stack_lvl+0x16c/0x1f0 [ 577.367298][T13986] should_fail_ex+0x512/0x640 [ 577.367335][T13986] strncpy_from_user+0x3b/0x2e0 [ 577.367369][T13986] getname_flags.part.0+0x8f/0x550 [ 577.367404][T13986] getname_flags+0x93/0xf0 [ 577.367436][T13986] do_sys_openat2+0xb8/0x280 [ 577.367463][T13986] ? __pfx_do_sys_openat2+0x10/0x10 [ 577.367503][T13986] __do_sys_openat2+0x1c0/0x2d0 [ 577.367530][T13986] ? __pfx___do_sys_openat2+0x10/0x10 [ 577.367554][T13986] ? ksys_write+0x1ac/0x250 [ 577.367601][T13986] do_syscall_64+0xcd/0xf80 [ 577.367635][T13986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.367661][T13986] RIP: 0033:0x7f6468d8f7c9 [ 577.367682][T13986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.367707][T13986] RSP: 002b:00007f6469cbd038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 577.367742][T13986] RAX: ffffffffffffffda RBX: 00007f6468fe5fa0 RCX: 00007f6468d8f7c9 [ 577.367759][T13986] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 577.367776][T13986] RBP: 00007f6469cbd090 R08: 0000000000000000 R09: 0000000000000000 [ 577.367792][T13986] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 577.367807][T13986] R13: 00007f6468fe6038 R14: 00007f6468fe5fa0 R15: 00007fffda644d98 [ 577.367845][T13986] [ 577.411325][T13980] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 579.541884][T14033] futex_wake_op: syz.1.1743 tries to shift op by -2048; fix this program [ 579.581842][T14028] 0x000000000001-0x000000020000 : "" [ 579.635440][T14035] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 579.646867][T14028] ftl_cs: FTL header corrupt! [ 579.796507][T14029] Invalid ELF header magic: != ELF [ 580.139941][T14048] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1746'. [ 580.343671][T14053] FAULT_INJECTION: forcing a failure. [ 580.343671][T14053] name failslab, interval 1, probability 0, space 0, times 0 [ 580.397835][T14053] CPU: 0 UID: 0 PID: 14053 Comm: syz.2.1747 Not tainted syzkaller #0 PREEMPT(full) [ 580.397877][T14053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 580.397895][T14053] Call Trace: [ 580.397905][T14053] [ 580.397916][T14053] dump_stack_lvl+0x16c/0x1f0 [ 580.397959][T14053] should_fail_ex+0x512/0x640 [ 580.397992][T14053] ? __kmalloc_cache_noprof+0x5f/0x770 [ 580.398027][T14053] should_failslab+0xc2/0x120 [ 580.398079][T14053] __kmalloc_cache_noprof+0x72/0x770 [ 580.398109][T14053] ? snd_timer_instance_new+0x47/0x2e0 [ 580.398152][T14053] ? __lock_acquire+0x433/0x22f0 [ 580.398189][T14053] ? snd_timer_instance_new+0x47/0x2e0 [ 580.398226][T14053] snd_timer_instance_new+0x47/0x2e0 [ 580.398276][T14053] snd_seq_timer_open+0x1cc/0x600 [ 580.398322][T14053] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 580.398365][T14053] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 580.398396][T14053] ? lockdep_hardirqs_on+0x7c/0x110 [ 580.398431][T14053] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 580.398453][T14053] queue_use+0xe3/0x250 [ 580.398480][T14053] snd_seq_queue_alloc+0x2e5/0x5a0 [ 580.398511][T14053] snd_seq_ioctl_create_queue+0xa9/0x390 [ 580.398534][T14053] call_seq_client_ctl+0x9f/0x110 [ 580.398557][T14053] snd_seq_kernel_client_ctl+0x7a/0xc0 [ 580.398579][T14053] alloc_seq_queue+0xda/0x180 [ 580.398598][T14053] ? __pfx_alloc_seq_queue+0x10/0x10 [ 580.398626][T14053] ? mark_held_locks+0x49/0x80 [ 580.398640][T14053] ? _raw_spin_unlock_irq+0x23/0x50 [ 580.398653][T14053] ? lockdep_hardirqs_on+0x7c/0x110 [ 580.398672][T14053] snd_seq_oss_open+0x38c/0xa20 [ 580.398695][T14053] odev_open+0x79/0xc0 [ 580.398710][T14053] ? __pfx_odev_open+0x10/0x10 [ 580.398727][T14053] soundcore_open+0x40c/0x580 [ 580.398746][T14053] ? __pfx_soundcore_open+0x10/0x10 [ 580.398763][T14053] chrdev_open+0x234/0x6a0 [ 580.398783][T14053] ? __pfx_apparmor_file_open+0x10/0x10 [ 580.398799][T14053] ? __pfx_chrdev_open+0x10/0x10 [ 580.398819][T14053] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 580.398843][T14053] do_dentry_open+0x748/0x1590 [ 580.398861][T14053] ? __pfx_chrdev_open+0x10/0x10 [ 580.398884][T14053] vfs_open+0x82/0x3f0 [ 580.398900][T14053] path_openat+0x2078/0x3140 [ 580.398924][T14053] ? __pfx_path_openat+0x10/0x10 [ 580.398949][T14053] do_filp_open+0x20b/0x470 [ 580.398969][T14053] ? __pfx_do_filp_open+0x10/0x10 [ 580.399007][T14053] ? alloc_fd+0x471/0x7d0 [ 580.399031][T14053] do_sys_openat2+0x11f/0x280 [ 580.399045][T14053] ? __pfx_do_sys_openat2+0x10/0x10 [ 580.399065][T14053] __x64_sys_openat+0x174/0x210 [ 580.399079][T14053] ? __pfx___x64_sys_openat+0x10/0x10 [ 580.399100][T14053] do_syscall_64+0xcd/0xf80 [ 580.399118][T14053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.399132][T14053] RIP: 0033:0x7f16ceb8f7c9 [ 580.399144][T14053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.399157][T14053] RSP: 002b:00007f16cf941038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 580.399171][T14053] RAX: ffffffffffffffda RBX: 00007f16cede5fa0 RCX: 00007f16ceb8f7c9 [ 580.399180][T14053] RDX: 0000000000100842 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 580.399188][T14053] RBP: 00007f16cec13f91 R08: 0000000000000000 R09: 0000000000000000 [ 580.399196][T14053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.399204][T14053] R13: 00007f16cede6038 R14: 00007f16cede5fa0 R15: 00007fff72748648 [ 580.399221][T14053] [ 580.771100][T14053] sock: sock_timestamping_bind_phc: sock not bind to device [ 581.266484][T14055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1748'. [ 581.799894][T14075] blktrace: Concurrent blktraces are not allowed on loop2 [ 582.147180][T14079] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 583.047327][ T5849] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 583.706804][T14102] FAULT_INJECTION: forcing a failure. [ 583.706804][T14102] name failslab, interval 1, probability 0, space 0, times 0 [ 583.813509][T14102] CPU: 0 UID: 0 PID: 14102 Comm: syz.3.1758 Not tainted syzkaller #0 PREEMPT(full) [ 583.813551][T14102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 583.813566][T14102] Call Trace: [ 583.813576][T14102] [ 583.813587][T14102] dump_stack_lvl+0x16c/0x1f0 [ 583.813627][T14102] should_fail_ex+0x512/0x640 [ 583.813669][T14102] ? fs_reclaim_acquire+0xae/0x150 [ 583.813716][T14102] should_failslab+0xc2/0x120 [ 583.813758][T14102] __kmalloc_noprof+0xdd/0x870 [ 583.813786][T14102] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 583.813839][T14102] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 583.813881][T14102] tomoyo_realpath_from_path+0xc2/0x6e0 [ 583.813928][T14102] ? tomoyo_profile+0x47/0x60 [ 583.813961][T14102] tomoyo_path_perm+0x274/0x460 [ 583.813996][T14102] ? tomoyo_path_perm+0x260/0x460 [ 583.814035][T14102] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 583.814116][T14102] ? __pfx_ima_file_check+0x10/0x10 [ 583.814148][T14102] ? hook_file_truncate+0xc7/0x250 [ 583.814191][T14102] security_file_truncate+0x84/0x1e0 [ 583.814234][T14102] path_openat+0x23a4/0x3140 [ 583.814285][T14102] ? __pfx_path_openat+0x10/0x10 [ 583.814340][T14102] do_filp_open+0x20b/0x470 [ 583.814382][T14102] ? __pfx_do_filp_open+0x10/0x10 [ 583.814449][T14102] ? alloc_fd+0x471/0x7d0 [ 583.814501][T14102] do_sys_openat2+0x11f/0x280 [ 583.814530][T14102] ? __pfx_do_sys_openat2+0x10/0x10 [ 583.814576][T14102] __x64_sys_openat+0x174/0x210 [ 583.814607][T14102] ? __pfx___x64_sys_openat+0x10/0x10 [ 583.814663][T14102] do_syscall_64+0xcd/0xf80 [ 583.814704][T14102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.814735][T14102] RIP: 0033:0x7f68ab58f7c9 [ 583.814761][T14102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.814791][T14102] RSP: 002b:00007f68ac493038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 583.814820][T14102] RAX: ffffffffffffffda RBX: 00007f68ab7e6090 RCX: 00007f68ab58f7c9 [ 583.814841][T14102] RDX: 000000000010bb02 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 583.814862][T14102] RBP: 00007f68ab613f91 R08: 0000000000000000 R09: 0000000000000000 [ 583.814880][T14102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.814898][T14102] R13: 00007f68ab7e6128 R14: 00007f68ab7e6090 R15: 00007ffc86374b68 [ 583.814938][T14102] [ 583.814951][T14102] ERROR: Out of memory at tomoyo_realpath_from_path. [ 584.002320][ C0] vkms_vblank_simulate: vblank timer overrun [ 584.156038][T14104] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1759'. [ 584.228282][T14108] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1759'. [ 584.423222][T14113] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 584.469354][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1760'. [ 585.105921][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 586.005760][T14134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1766'. [ 586.431583][T14134] team0: Port device team_slave_1 removed [ 587.100795][T14152] FAULT_INJECTION: forcing a failure. [ 587.100795][T14152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.195255][T14152] CPU: 1 UID: 0 PID: 14152 Comm: syz.0.1771 Not tainted syzkaller #0 PREEMPT(full) [ 587.195285][T14152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 587.195298][T14152] Call Trace: [ 587.195306][T14152] [ 587.195315][T14152] dump_stack_lvl+0x16c/0x1f0 [ 587.195349][T14152] should_fail_ex+0x512/0x640 [ 587.195379][T14152] _copy_to_user+0x32/0xd0 [ 587.195415][T14152] simple_read_from_buffer+0xcb/0x170 [ 587.195456][T14152] proc_fail_nth_read+0x197/0x240 [ 587.195514][T14152] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 587.195563][T14152] ? rw_verify_area+0xcf/0x6c0 [ 587.195597][T14152] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 587.195641][T14152] vfs_read+0x1e4/0xcf0 [ 587.195680][T14152] ? __pfx___mutex_lock+0x10/0x10 [ 587.195719][T14152] ? __pfx_vfs_read+0x10/0x10 [ 587.195767][T14152] ? __fget_files+0x20e/0x3c0 [ 587.195823][T14152] ksys_read+0x12a/0x250 [ 587.195859][T14152] ? __pfx_ksys_read+0x10/0x10 [ 587.195910][T14152] do_syscall_64+0xcd/0xf80 [ 587.195947][T14152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.195975][T14152] RIP: 0033:0x7f6468d8e1dc [ 587.195998][T14152] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 587.196024][T14152] RSP: 002b:00007f6469cbd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 587.196051][T14152] RAX: ffffffffffffffda RBX: 00007f6468fe5fa0 RCX: 00007f6468d8e1dc [ 587.196069][T14152] RDX: 000000000000000f RSI: 00007f6469cbd0a0 RDI: 0000000000000003 [ 587.196086][T14152] RBP: 00007f6469cbd090 R08: 0000000000000000 R09: 0000000000000000 [ 587.196103][T14152] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 587.196119][T14152] R13: 00007f6468fe6038 R14: 00007f6468fe5fa0 R15: 00007fffda644d98 [ 587.196161][T14152] [ 587.853238][T14166] random: crng reseeded on system resumption [ 588.888045][T14166] Process accounting resumed [ 589.304508][T14184] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 589.364233][T14185] ecryptfs_miscdev_write: Minimum acceptable packet size is [14], but amount of data written is only [5]. Discarding response packet. [ 589.451050][T14180] Process accounting paused [ 591.304443][T14173] Process accounting paused [ 592.090752][T14213] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1786'. [ 595.482196][T14255] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input86 [ 596.295726][T14272] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1800'. [ 596.338550][T14272] veth1_macvtap: left promiscuous mode [ 596.902376][T14283] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1802'. [ 597.373932][ T5839] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 598.451691][T14302] netlink: 'syz.0.1807': attribute type 1 has an invalid length. [ 598.829195][T14301] zswap: compressor not available [ 599.421450][T14090] Bluetooth: hci1: command 0x0c1a tx timeout [ 602.820558][T14406] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 602.872784][T14410] random: crng reseeded on system resumption [ 602.881311][T14409] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 604.688880][T14450] input: f¬ as /devices/virtual/input/input88 [ 605.264716][T14463] Invalid ELF header magic: != ELF [ 606.176480][T14483] netlink: 'syz.0.1854': attribute type 1 has an invalid length. [ 606.405856][T14486] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 606.840725][T14500] FAULT_INJECTION: forcing a failure. [ 606.840725][T14500] name failslab, interval 1, probability 0, space 0, times 0 [ 606.903222][T14500] CPU: 0 UID: 0 PID: 14500 Comm: syz.3.1857 Not tainted syzkaller #0 PREEMPT(full) [ 606.903265][T14500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 606.903282][T14500] Call Trace: [ 606.903293][T14500] [ 606.903305][T14500] dump_stack_lvl+0x16c/0x1f0 [ 606.903347][T14500] should_fail_ex+0x512/0x640 [ 606.903380][T14500] ? kmem_cache_alloc_noprof+0x62/0x720 [ 606.903417][T14500] should_failslab+0xc2/0x120 [ 606.903468][T14500] kmem_cache_alloc_noprof+0x75/0x720 [ 606.903500][T14500] ? getname_flags.part.0+0x4c/0x550 [ 606.903538][T14500] ? getname_flags.part.0+0x4c/0x550 [ 606.903567][T14500] getname_flags.part.0+0x4c/0x550 [ 606.903613][T14500] getname_flags+0x93/0xf0 [ 606.903653][T14500] do_sys_openat2+0xb8/0x280 [ 606.903684][T14500] ? __pfx_do_sys_openat2+0x10/0x10 [ 606.903730][T14500] __x64_sys_openat+0x174/0x210 [ 606.903762][T14500] ? __pfx___x64_sys_openat+0x10/0x10 [ 606.903812][T14500] do_syscall_64+0xcd/0xf80 [ 606.903853][T14500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.903883][T14500] RIP: 0033:0x7f68ab58f7c9 [ 606.903909][T14500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.903938][T14500] RSP: 002b:00007f68ac493038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 606.903967][T14500] RAX: ffffffffffffffda RBX: 00007f68ab7e6090 RCX: 00007f68ab58f7c9 [ 606.903988][T14500] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 606.904006][T14500] RBP: 00007f68ab613f91 R08: 0000000000000000 R09: 0000000000000000 [ 606.904025][T14500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.904043][T14500] R13: 00007f68ab7e6128 R14: 00007f68ab7e6090 R15: 00007ffc86374b68 [ 606.904082][T14500] [ 607.089604][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.407630][T14506] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(7) [ 607.875479][T14511] zswap: compressor not available [ 610.098647][T14561] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(8.0.1), cmd(2) [ 611.827877][T14577] netlink: 290 bytes leftover after parsing attributes in process `syz.1.1877'. [ 612.634453][T14597] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 612.709861][T14597] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 615.781432][T14654] zswap: compressor not available [ 616.018263][T14656] zswap: compressor not available [ 616.460632][T14670] random: crng reseeded on system resumption [ 617.475214][T14679] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 617.581581][T14681] block2mtd: error: cannot open device [ 617.975471][T14684] FAULT_INJECTION: forcing a failure. [ 617.975471][T14684] name fail_futex, interval 1, probability 0, space 0, times 0 [ 617.988533][T14684] CPU: 0 UID: 0 PID: 14684 Comm: syz.3.1897 Not tainted syzkaller #0 PREEMPT(full) [ 617.988575][T14684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 617.988592][T14684] Call Trace: [ 617.988603][T14684] [ 617.988615][T14684] dump_stack_lvl+0x16c/0x1f0 [ 617.988657][T14684] should_fail_ex+0x512/0x640 [ 617.988698][T14684] should_fail_futex+0x4c/0x60 [ 617.988731][T14684] futex_lock_pi_atomic+0x127/0xc50 [ 617.988780][T14684] futex_lock_pi+0x23f/0x7c0 [ 617.988829][T14684] ? __pfx_futex_lock_pi+0x10/0x10 [ 617.988868][T14684] ? __futex_wait+0x24b/0x2f0 [ 617.988913][T14684] ? lockdep_hardirqs_on+0x7c/0x110 [ 617.988973][T14684] ? futex_private_hash_put+0x160/0x1b0 [ 617.989012][T14684] ? __pfx_futex_wake_mark+0x10/0x10 [ 617.989066][T14684] ? ksys_write+0x190/0x250 [ 617.989111][T14684] do_futex+0x11a/0x350 [ 617.989147][T14684] ? __pfx_do_futex+0x10/0x10 [ 617.989192][T14684] __x64_sys_futex+0x1e0/0x4c0 [ 617.989231][T14684] ? fput+0x70/0xf0 [ 617.989255][T14684] ? __pfx___x64_sys_futex+0x10/0x10 [ 617.989289][T14684] ? xfd_validate_state+0x61/0x180 [ 617.989332][T14684] ? __pfx_ksys_write+0x10/0x10 [ 617.989383][T14684] do_syscall_64+0xcd/0xf80 [ 617.989431][T14684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.989463][T14684] RIP: 0033:0x7f68ab58f7c9 [ 617.989490][T14684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 617.989521][T14684] RSP: 002b:00007f68ac4b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 617.989552][T14684] RAX: ffffffffffffffda RBX: 00007f68ab7e5fa0 RCX: 00007f68ab58f7c9 [ 617.989573][T14684] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 617.989591][T14684] RBP: 00007f68ab613f91 R08: 0000000000000000 R09: 000000008000fff5 [ 617.989610][T14684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 617.989627][T14684] R13: 00007f68ab7e6038 R14: 00007f68ab7e5fa0 R15: 00007ffc86374b68 [ 617.989669][T14684] [ 619.028039][T14689] Process accounting paused [ 620.830477][T14090] Bluetooth: hci3: hcon ffff888033ca8000 sent 0 < count 256 [ 622.489322][T14754] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1910'. [ 622.914774][T14754] sctp: [Deprecated]: syz.3.1910 (pid 14754) Use of struct sctp_assoc_value in delayed_ack socket option. [ 622.914774][T14754] Use struct sctp_sack_info instead [ 623.980203][ T5833] Process accounting resumed [ 624.956646][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 624.968603][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 624.977506][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 624.988818][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 624.999581][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 625.979401][T14791] chnl_net:caif_netlink_parms(): no params data found [ 626.470234][T14791] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.478100][T14791] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.485762][T14791] bridge_slave_0: entered allmulticast mode [ 626.495252][T14791] bridge_slave_0: entered promiscuous mode [ 626.505986][T14791] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.513311][T14791] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.520617][T14791] bridge_slave_1: entered allmulticast mode [ 626.570492][T14791] bridge_slave_1: entered promiscuous mode [ 626.705596][T14791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.786062][T14791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.003140][T14791] team0: Port device team_slave_0 added [ 627.040028][T14090] Bluetooth: hci4: command tx timeout [ 627.044852][T14791] team0: Port device team_slave_1 added [ 627.232788][T14791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.254191][T14791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.357597][T14791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.440151][T14791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.455678][T14791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.525201][T14791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.066503][ T5980] smpboot: CPU 0 is now offline [ 628.089761][T14791] hsr_slave_0: entered promiscuous mode [ 628.117392][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.125067][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.145284][T14791] hsr_slave_1: entered promiscuous mode [ 628.194217][T14791] debugfs: 'hsr0' already exists in 'hsr' [ 628.199991][T14791] Cannot create hsr debugfs directory [ 629.107354][T14090] Bluetooth: hci4: command tx timeout [ 629.247920][T14791] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 629.340917][T14791] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 629.445537][T14791] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 629.549985][T14791] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 630.411579][T14858] random: crng reseeded on system resumption [ 631.149543][T14791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.176299][T14090] Bluetooth: hci4: command tx timeout [ 631.250153][T14791] 8021q: adding VLAN 0 to HW filter on device team0 [ 631.311983][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.319164][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.446457][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.453611][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.477264][T14869] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 631.563014][T14871] random: crng reseeded on system resumption [ 632.451052][T14791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.551078][T14887] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input90 [ 632.959185][T14892] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input91 [ 633.246808][T14090] Bluetooth: hci4: command tx timeout [ 634.064905][T14791] veth0_vlan: entered promiscuous mode [ 634.341744][T14791] veth1_vlan: entered promiscuous mode [ 634.723385][T14791] veth0_macvtap: entered promiscuous mode [ 634.801372][T14791] veth1_macvtap: entered promiscuous mode [ 634.903259][T14791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.980756][T14791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 635.069458][ T3458] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.131004][ T3458] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.204976][ T3458] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.448225][ T3458] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.597651][T14922] random: crng reseeded on system resumption [ 635.866724][ T6492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.921375][ T6492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.147815][T14935] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 636.170935][ T6491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.243175][ T6491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.902654][T14949] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 637.168805][T14959] FAULT_INJECTION: forcing a failure. [ 637.168805][T14959] name failslab, interval 1, probability 0, space 0, times 0 [ 637.285935][T14959] CPU: 1 UID: 0 PID: 14959 Comm: syz.3.1949 Not tainted syzkaller #0 PREEMPT(full) [ 637.285962][T14959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 637.285973][T14959] Call Trace: [ 637.285980][T14959] [ 637.285987][T14959] dump_stack_lvl+0x16c/0x1f0 [ 637.286014][T14959] should_fail_ex+0x512/0x640 [ 637.286036][T14959] ? kmem_cache_alloc_noprof+0x62/0x720 [ 637.286057][T14959] should_failslab+0xc2/0x120 [ 637.286084][T14959] kmem_cache_alloc_noprof+0x75/0x720 [ 637.286109][T14959] ? net_alloc_generic+0x1e/0x70 [ 637.286129][T14959] ? copy_net_ns+0xe8/0x5d0 [ 637.286155][T14959] ? copy_net_ns+0xe8/0x5d0 [ 637.286176][T14959] copy_net_ns+0xe8/0x5d0 [ 637.286198][T14959] ? copy_cgroup_ns+0x71/0x980 [ 637.286218][T14959] create_new_namespaces+0x3ea/0xab0 [ 637.286249][T14959] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 637.286277][T14959] ksys_unshare+0x45b/0xa40 [ 637.286294][T14959] ? __pfx_ksys_unshare+0x10/0x10 [ 637.286311][T14959] ? xfd_validate_state+0x61/0x180 [ 637.286344][T14959] __x64_sys_unshare+0x31/0x40 [ 637.286360][T14959] do_syscall_64+0xcd/0xf80 [ 637.286383][T14959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.286400][T14959] RIP: 0033:0x7f68ab58f7c9 [ 637.286414][T14959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.286430][T14959] RSP: 002b:00007f68ac4b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 637.286447][T14959] RAX: ffffffffffffffda RBX: 00007f68ab7e5fa0 RCX: 00007f68ab58f7c9 [ 637.286458][T14959] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 637.286468][T14959] RBP: 00007f68ab613f91 R08: 0000000000000000 R09: 0000000000000000 [ 637.286478][T14959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 637.286488][T14959] R13: 00007f68ab7e6038 R14: 00007f68ab7e5fa0 R15: 00007ffc86374b68 [ 637.286509][T14959] [ 637.496896][T14959] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 638.038730][T14971] blktrace: Concurrent blktraces are not allowed on loop2 [ 638.086059][T14973] nvme_fcloop: unknown parameter or missing value '0' [ 639.287892][T14997] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 639.441859][T14989] Invalid ELF header magic: != ELF [ 640.136538][T15013] FAULT_INJECTION: forcing a failure. [ 640.136538][T15013] name failslab, interval 1, probability 0, space 0, times 0 [ 640.229293][T15013] CPU: 1 UID: 0 PID: 15013 Comm: syz.2.1957 Not tainted syzkaller #0 PREEMPT(full) [ 640.229320][T15013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 640.229335][T15013] Call Trace: [ 640.229342][T15013] [ 640.229349][T15013] dump_stack_lvl+0x16c/0x1f0 [ 640.229375][T15013] should_fail_ex+0x512/0x640 [ 640.229397][T15013] ? __kmalloc_cache_node_noprof+0x62/0x790 [ 640.229422][T15013] should_failslab+0xc2/0x120 [ 640.229448][T15013] __kmalloc_cache_node_noprof+0x75/0x790 [ 640.229470][T15013] ? shrinker_alloc+0x789/0xbf0 [ 640.229488][T15013] ? shrinker_alloc+0x5e7/0xbf0 [ 640.229509][T15013] ? shrinker_alloc+0x789/0xbf0 [ 640.229526][T15013] shrinker_alloc+0x789/0xbf0 [ 640.229554][T15013] ? __pfx_shrinker_alloc+0x10/0x10 [ 640.229576][T15013] ? lockdep_init_map_type+0x5c/0x270 [ 640.229598][T15013] ? __raw_spin_lock_init+0x3a/0x110 [ 640.229620][T15013] ? __init_rwsem+0x12d/0x1b0 [ 640.229643][T15013] alloc_super+0x7d7/0xd00 [ 640.229669][T15013] ? __pfx_test_keyed_super+0x10/0x10 [ 640.229686][T15013] sget_fc+0x116/0xc20 [ 640.229708][T15013] ? apparmor_capable+0x1d8/0x4e0 [ 640.229728][T15013] ? __pfx_set_anon_super_fc+0x10/0x10 [ 640.229749][T15013] ? __pfx_rpc_fill_super+0x10/0x10 [ 640.229767][T15013] get_tree_keyed+0x59/0x1d0 [ 640.229791][T15013] vfs_get_tree+0x8e/0x330 [ 640.229810][T15013] vfs_cmd_create+0xd7/0x2a0 [ 640.229830][T15013] __do_sys_fsconfig+0x7b8/0xbe0 [ 640.229851][T15013] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 640.229882][T15013] do_syscall_64+0xcd/0xf80 [ 640.229905][T15013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.229922][T15013] RIP: 0033:0x7f16ceb8f7c9 [ 640.229937][T15013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.229953][T15013] RSP: 002b:00007f16cf941038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 640.229971][T15013] RAX: ffffffffffffffda RBX: 00007f16cede5fa0 RCX: 00007f16ceb8f7c9 [ 640.229981][T15013] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 000000000000000a [ 640.229991][T15013] RBP: 00007f16cec13f91 R08: 0000000000000000 R09: 0000000000000000 [ 640.230001][T15013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.230011][T15013] R13: 00007f16cede6038 R14: 00007f16cede5fa0 R15: 00007fff72748648 [ 640.230035][T15013] [ 644.260822][T15054] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1966'. [ 645.488777][T15068] netlink: 25 bytes leftover after parsing attributes in process `syz.4.1970'. [ 645.533697][T15068] netlink: 330 bytes leftover after parsing attributes in process `syz.4.1970'. [ 646.157658][T15065] zswap: compressor not available [ 647.070844][T15087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1975'. [ 648.020384][T15093] FAULT_INJECTION: forcing a failure. [ 648.020384][T15093] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.128994][T15093] CPU: 1 UID: 0 PID: 15093 Comm: syz.3.1976 Not tainted syzkaller #0 PREEMPT(full) [ 648.129022][T15093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 648.129032][T15093] Call Trace: [ 648.129038][T15093] [ 648.129045][T15093] dump_stack_lvl+0x16c/0x1f0 [ 648.129079][T15093] should_fail_ex+0x512/0x640 [ 648.129103][T15093] _copy_to_iter+0x29f/0x1710 [ 648.129127][T15093] ? chacha_block_generic+0x211/0x330 [ 648.129151][T15093] ? __pfx__copy_to_iter+0x10/0x10 [ 648.129174][T15093] ? lockdep_hardirqs_on+0x7c/0x110 [ 648.129195][T15093] ? crng_make_state+0x48e/0x6c0 [ 648.129215][T15093] get_random_bytes_user+0x17f/0x3c0 [ 648.129235][T15093] ? __pfx_get_random_bytes_user+0x10/0x10 [ 648.129251][T15093] ? do_writev+0x218/0x340 [ 648.129277][T15093] ? do_futex+0x122/0x350 [ 648.129304][T15093] ? import_ubuf+0x1b6/0x220 [ 648.129324][T15093] ? __UNIQUE_ID_modinfo_895+0x644a28ac/0xffffffffffeca88d [ 648.129351][T15093] __x64_sys_getrandom+0x183/0x290 [ 648.129371][T15093] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 648.129400][T15093] do_syscall_64+0xcd/0xf80 [ 648.129422][T15093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.129439][T15093] RIP: 0033:0x7f68ab58f7c9 [ 648.129453][T15093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.129469][T15093] RSP: 002b:00007f68ac493038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 648.129486][T15093] RAX: ffffffffffffffda RBX: 00007f68ab7e6090 RCX: 00007f68ab58f7c9 [ 648.129497][T15093] RDX: 0000000000000003 RSI: ffffffffff60001f RDI: 0000000000000000 [ 648.129507][T15093] RBP: 00007f68ab613f91 R08: 0000000000000000 R09: 0000000000000000 [ 648.129517][T15093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.129527][T15093] R13: 00007f68ab7e6128 R14: 00007f68ab7e6090 R15: 00007ffc86374b68 [ 648.129544][T15093] ? __UNIQUE_ID_modinfo_895+0x644a28ac/0xffffffffffeca88d [ 648.129574][T15093] [ 648.334734][ C1] vkms_vblank_simulate: vblank timer overrun [ 649.584060][T15101] : Can't lookup blockdev [ 651.010233][T15117] Invalid ELF header magic: != ELF [ 651.135900][T15117] Invalid ELF header magic: != ELF [ 651.384547][T15117] Invalid ELF header magic: != ELF [ 651.393004][ T5837] Process accounting resumed [ 652.318622][T15138] can: request_module (can-proto-5) failed. [ 652.334356][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 652.345135][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 652.355454][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 652.363379][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 652.371529][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 653.178058][T15140] chnl_net:caif_netlink_parms(): no params data found [ 653.264207][T15155] debugfs: '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211' [ 653.672326][T15140] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.717156][T15140] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.758112][T15140] bridge_slave_0: entered allmulticast mode [ 653.812431][T15140] bridge_slave_0: entered promiscuous mode [ 653.819214][T15168] FAULT_INJECTION: forcing a failure. [ 653.819214][T15168] name failslab, interval 1, probability 0, space 0, times 0 [ 653.891909][T15168] CPU: 1 UID: 0 PID: 15168 Comm: syz.4.1992 Not tainted syzkaller #0 PREEMPT(full) [ 653.891935][T15168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 653.891945][T15168] Call Trace: [ 653.891951][T15168] [ 653.891958][T15168] dump_stack_lvl+0x16c/0x1f0 [ 653.891985][T15168] should_fail_ex+0x512/0x640 [ 653.892005][T15168] ? kmem_cache_alloc_lru_noprof+0x66/0x720 [ 653.892034][T15168] should_failslab+0xc2/0x120 [ 653.892060][T15168] kmem_cache_alloc_lru_noprof+0x79/0x720 [ 653.892078][T15168] ? __dquot_initialize+0x299/0xd50 [ 653.892097][T15168] ? __d_alloc+0x35/0xa80 [ 653.892126][T15168] ? __d_alloc+0x35/0xa80 [ 653.892149][T15168] __d_alloc+0x35/0xa80 [ 653.892178][T15168] d_alloc_pseudo+0x1c/0xc0 [ 653.892197][T15168] alloc_file_pseudo+0xcf/0x230 [ 653.892216][T15168] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 653.892239][T15168] __shmem_file_setup+0x1a3/0x330 [ 653.892268][T15168] shmem_zero_setup+0x93/0x1a0 [ 653.892287][T15168] __mmap_region+0x2076/0x2770 [ 653.892308][T15168] ? __pfx___mmap_region+0x10/0x10 [ 653.892326][T15168] ? kvm_sched_clock_read+0x11/0x20 [ 653.892344][T15168] ? sched_clock+0x38/0x60 [ 653.892371][T15168] ? lock_acquire+0x179/0x330 [ 653.892390][T15168] ? find_held_lock+0x2b/0x80 [ 653.892418][T15168] ? finish_task_switch.isra.0+0x207/0xbc0 [ 653.892444][T15168] ? lockdep_hardirqs_on+0x7c/0x110 [ 653.892501][T15168] ? rcu_is_watching+0x12/0xc0 [ 653.892531][T15168] mmap_region+0x1ab/0x3f0 [ 653.892549][T15168] ? __get_unmapped_area+0x267/0x440 [ 653.892575][T15168] do_mmap+0xa3e/0x1210 [ 653.892601][T15168] ? __pfx_do_mmap+0x10/0x10 [ 653.892623][T15168] ? __pfx_down_write_killable+0x10/0x10 [ 653.892652][T15168] vm_mmap_pgoff+0x29e/0x470 [ 653.892678][T15168] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 653.892704][T15168] ? __x64_sys_futex+0x1e0/0x4c0 [ 653.892725][T15168] ? __x64_sys_futex+0x1e9/0x4c0 [ 653.892752][T15168] ksys_mmap_pgoff+0x7d/0x5c0 [ 653.892774][T15168] ? syscall_user_dispatch+0x78/0x140 [ 653.892800][T15168] __x64_sys_mmap+0x125/0x190 [ 653.892819][T15168] do_syscall_64+0xcd/0xf80 [ 653.892841][T15168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.892858][T15168] RIP: 0033:0x7f1aac98f7c9 [ 653.892872][T15168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.892889][T15168] RSP: 002b:00007f1aad813038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 653.892905][T15168] RAX: ffffffffffffffda RBX: 00007f1aacbe6090 RCX: 00007f1aac98f7c9 [ 653.892916][T15168] RDX: 00000000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 653.892926][T15168] RBP: 00007f1aaca13f91 R08: 0000000000000401 R09: 0000000000000000 [ 653.892936][T15168] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 653.892946][T15168] R13: 00007f1aacbe6128 R14: 00007f1aacbe6090 R15: 00007ffdb90ea808 [ 653.892969][T15168] [ 654.223980][T15140] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.253622][T15169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1992'. [ 654.304124][T15140] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.312988][T15140] bridge_slave_1: entered allmulticast mode [ 654.320364][T15140] bridge_slave_1: entered promiscuous mode [ 654.407140][T15140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.422122][T15140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.453773][T15140] team0: Port device team_slave_0 added [ 654.461852][T15140] team0: Port device team_slave_1 added [ 654.487825][T15140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.495012][T15140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.542850][ T5839] Bluetooth: hci5: command tx timeout [ 654.552291][T15140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.576544][T15140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.583505][T15140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.646747][T15140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.817933][T15140] hsr_slave_0: entered promiscuous mode [ 654.856629][T15140] hsr_slave_1: entered promiscuous mode [ 654.887057][T15140] debugfs: 'hsr0' already exists in 'hsr' [ 654.912268][T15140] Cannot create hsr debugfs directory [ 655.661593][T15179] device-mapper: ioctl: Invalid ioctl structure: uuid ž, name , dev 400000000 [ 655.803305][T15140] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 655.901533][T15140] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 656.039360][T15140] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 656.094423][T15140] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 656.526069][T15140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.564569][ T5839] Bluetooth: hci5: command tx timeout [ 656.626721][T15140] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.686967][ T6490] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.694154][ T6490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.829564][ T6490] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.836801][ T6490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.088885][T14090] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 657.100408][T14090] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 657.109162][T14090] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 657.117890][T14090] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 657.126698][T14090] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 657.923716][T15140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.006160][T15201] chnl_net:caif_netlink_parms(): no params data found [ 658.086620][T15217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1999'. [ 658.493613][T15201] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.536547][T15201] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.581315][T15201] bridge_slave_0: entered allmulticast mode [ 658.621164][T15201] bridge_slave_0: entered promiscuous mode [ 658.633518][T14090] Bluetooth: hci5: command tx timeout [ 658.664476][T15201] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.705354][T15201] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.742535][T15201] bridge_slave_1: entered allmulticast mode [ 658.781401][T15201] bridge_slave_1: entered promiscuous mode [ 658.989077][T15201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.043440][T15201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.193405][T14090] Bluetooth: hci6: command tx timeout [ 659.224647][T15201] team0: Port device team_slave_0 added [ 659.275445][T15201] team0: Port device team_slave_1 added [ 659.420831][T15244] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 659.438099][T15201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.465269][T15201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.567362][T15201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.630353][T15201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.660702][T15201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.787637][T15201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.036457][T15140] veth0_vlan: entered promiscuous mode [ 660.182544][T15256] raw_sendmsg: syz.3.2009 forgot to set AF_INET. Fix it! [ 660.244514][T15201] hsr_slave_0: entered promiscuous mode [ 660.280420][T15201] hsr_slave_1: entered promiscuous mode [ 660.334800][T15201] debugfs: 'hsr0' already exists in 'hsr' [ 660.359128][T15201] Cannot create hsr debugfs directory [ 660.394704][T15140] veth1_vlan: entered promiscuous mode [ 660.514546][T15257] blktrace: Concurrent blktraces are not allowed on loop5 [ 660.573179][T15257] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 660.702809][T14090] Bluetooth: hci5: command tx timeout [ 660.875675][T15140] veth0_macvtap: entered promiscuous mode [ 660.936931][T15140] veth1_macvtap: entered promiscuous mode [ 661.085232][T15140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 661.152403][T15140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 661.242441][T15266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2010'. [ 661.261159][T14090] Bluetooth: hci6: command tx timeout [ 661.292942][ T6491] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.353287][ T6491] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.476267][ T6491] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.550008][T15201] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 661.611583][ T6491] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.671478][T15201] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 661.764038][T15201] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 661.837156][T15201] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 661.872719][T15273] FAULT_INJECTION: forcing a failure. [ 661.872719][T15273] name failslab, interval 1, probability 0, space 0, times 0 [ 661.930529][T15275] binder: binder_mmap: 15274 0-1000 bad vm_flags failed -1 [ 661.957062][T15273] CPU: 1 UID: 0 PID: 15273 Comm: syz.3.2012 Not tainted syzkaller #0 PREEMPT(full) [ 661.957089][T15273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 661.957099][T15273] Call Trace: [ 661.957106][T15273] [ 661.957114][T15273] dump_stack_lvl+0x16c/0x1f0 [ 661.957140][T15273] should_fail_ex+0x512/0x640 [ 661.957168][T15273] ? kmem_cache_alloc_noprof+0x62/0x720 [ 661.957189][T15273] should_failslab+0xc2/0x120 [ 661.957215][T15273] kmem_cache_alloc_noprof+0x75/0x720 [ 661.957233][T15273] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 661.957256][T15273] ? acpi_ps_alloc_op+0x29d/0x360 [ 661.957282][T15273] ? acpi_ps_alloc_op+0x29d/0x360 [ 661.957302][T15273] acpi_ps_alloc_op+0x29d/0x360 [ 661.957322][T15273] ? acpi_ut_status_exit+0x103/0x1c0 [ 661.957345][T15273] acpi_ps_create_op+0x4bd/0xd30 [ 661.957366][T15273] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 661.957389][T15273] ? __pfx_acpi_ps_create_op+0x10/0x10 [ 661.957411][T15273] ? acpi_ut_status_exit+0x103/0x1c0 [ 661.957437][T15273] acpi_ps_parse_loop+0xf06/0x2470 [ 661.957464][T15273] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 661.957482][T15273] ? kmem_cache_alloc_noprof+0x2a1/0x720 [ 661.957499][T15273] ? __pfx_acpi_ut_track_stack_ptr+0x10/0x10 [ 661.957520][T15273] ? acpi_ut_create_thread_state+0x6d/0x170 [ 661.957547][T15273] acpi_ps_parse_aml+0x817/0x1170 [ 661.957572][T15273] acpi_ps_execute_method+0x5c4/0xe90 [ 661.957600][T15273] acpi_ns_evaluate+0x98c/0x16d0 [ 661.957629][T15273] acpi_evaluate_object+0x4ca/0xdf0 [ 661.957647][T15273] ? ksys_read+0x12a/0x250 [ 661.957673][T15273] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 661.957694][T15273] ? __pfx___might_resched+0x10/0x10 [ 661.957723][T15273] acpi_evaluate_integer+0xdd/0x200 [ 661.957749][T15273] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 661.957784][T15273] ? __pfx_status_show+0x10/0x10 [ 661.957800][T15273] status_show+0xa0/0x120 [ 661.957818][T15273] ? __pfx_status_show+0x10/0x10 [ 661.957847][T15273] dev_attr_show+0x56/0xe0 [ 661.957866][T15273] ? __pfx_dev_attr_show+0x10/0x10 [ 661.957882][T15273] sysfs_kf_seq_show+0x216/0x3e0 [ 661.957904][T15273] seq_read_iter+0x50e/0x12d0 [ 661.957935][T15273] kernfs_fop_read_iter+0x46c/0x610 [ 661.957961][T15273] ? rw_verify_area+0xcf/0x6c0 [ 661.957984][T15273] vfs_read+0x8bf/0xcf0 [ 661.958012][T15273] ? __pfx_vfs_read+0x10/0x10 [ 661.958049][T15273] ksys_read+0x12a/0x250 [ 661.958072][T15273] ? __pfx_ksys_read+0x10/0x10 [ 661.958104][T15273] do_syscall_64+0xcd/0xf80 [ 661.958129][T15273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.958149][T15273] RIP: 0033:0x7f68ab58f7c9 [ 661.958173][T15273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.958189][T15273] RSP: 002b:00007f68ac4b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 661.958203][T15273] RAX: ffffffffffffffda RBX: 00007f68ab7e5fa0 RCX: 00007f68ab58f7c9 [ 661.958213][T15273] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000006 [ 661.958221][T15273] RBP: 00007f68ab613f91 R08: 0000000000000000 R09: 0000000000000000 [ 661.958229][T15273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.958238][T15273] R13: 00007f68ab7e6038 R14: 00007f68ab7e5fa0 R15: 00007ffc86374b68 [ 661.958257][T15273] [ 661.958287][T15273] ACPI Error: [ 662.346331][ T6491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.361274][ T6494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.385227][ T6491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.407179][ T6494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.123994][T15273] Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 663.232106][T15201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.332022][T14090] Bluetooth: hci6: command tx timeout [ 663.367534][T15201] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.545070][ T6172] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.552256][ T6172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.605571][ T6172] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.612724][ T6172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.837383][T15201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 665.408455][T14090] Bluetooth: hci6: command tx timeout [ 666.599058][T15201] veth0_vlan: entered promiscuous mode [ 666.701626][T15201] veth1_vlan: entered promiscuous mode [ 666.859400][T15201] veth0_macvtap: entered promiscuous mode [ 666.937967][T15201] veth1_macvtap: entered promiscuous mode [ 667.048047][T15201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.136606][T15201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.184755][T15349] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 667.213423][ T6488] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.245431][T15349] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 667.267345][ T6488] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.292894][T15349] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 667.332274][T15349] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 667.369027][ T6488] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.409356][ T6488] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.430702][T15349] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 667.476571][T15349] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 667.536587][T15349] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 667.568733][T15349] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 667.638695][T15349] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 667.688800][T15349] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 667.774677][T15349] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 667.918127][T15349] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 667.966059][T15349] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 667.990893][T15349] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 668.031075][T15349] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 668.074163][T15349] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 668.174819][T15349] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 668.285286][T15349] CPU0 is offline. [ 668.467741][ T6494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.513340][ T6494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.623502][ T6172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.661822][T14090] Bluetooth: hci1: command 0x0c1a tx timeout [ 668.685320][ T6172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.875004][T15367] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2030'. [ 669.298710][T14090] Bluetooth: hci0: command 0x0c1a tx timeout [ 669.458596][T14090] Bluetooth: hci2: command 0x0c1a tx timeout [ 669.536766][T14090] Bluetooth: hci3: command 0x0c1a tx timeout [ 669.696579][T14090] Bluetooth: hci4: command 0x0c1a tx timeout [ 669.936359][T14090] Bluetooth: hci5: command 0x0c1a tx timeout [ 670.125057][T14090] Bluetooth: hci6: command 0x0c1a tx timeout [ 670.731232][T14090] Bluetooth: hci1: command 0x0c1a tx timeout [ 671.043290][T15401] FAULT_INJECTION: forcing a failure. [ 671.043290][T15401] name failslab, interval 1, probability 0, space 0, times 0 [ 671.132965][T15401] CPU: 1 UID: 0 PID: 15401 Comm: syz.4.2035 Not tainted syzkaller #0 PREEMPT(full) [ 671.132987][T15401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 671.132995][T15401] Call Trace: [ 671.133001][T15401] [ 671.133007][T15401] dump_stack_lvl+0x16c/0x1f0 [ 671.133031][T15401] should_fail_ex+0x512/0x640 [ 671.133047][T15401] ? __kmalloc_cache_noprof+0x5f/0x770 [ 671.133063][T15401] should_failslab+0xc2/0x120 [ 671.133083][T15401] __kmalloc_cache_noprof+0x72/0x770 [ 671.133097][T15401] ? refill_pi_state_cache+0x89/0x250 [ 671.133124][T15401] ? refill_pi_state_cache+0x89/0x250 [ 671.133143][T15401] refill_pi_state_cache+0x89/0x250 [ 671.133162][T15401] futex_lock_pi+0x175/0x7c0 [ 671.133183][T15401] ? futex_unqueue+0x13d/0x2c0 [ 671.133199][T15401] ? __pfx_futex_lock_pi+0x10/0x10 [ 671.133217][T15401] ? __futex_wait+0x24b/0x2f0 [ 671.133249][T15401] ? futex_private_hash_put+0x160/0x1b0 [ 671.133267][T15401] ? __pfx_futex_wake_mark+0x10/0x10 [ 671.133292][T15401] ? ksys_write+0x190/0x250 [ 671.133313][T15401] do_futex+0x11a/0x350 [ 671.133329][T15401] ? __pfx_do_futex+0x10/0x10 [ 671.133343][T15401] ? __lock_acquire+0x433/0x22f0 [ 671.133362][T15401] __x64_sys_futex+0x1e0/0x4c0 [ 671.133381][T15401] ? __pfx___x64_sys_futex+0x10/0x10 [ 671.133397][T15401] ? xfd_validate_state+0x61/0x180 [ 671.133417][T15401] ? __task_pid_nr_ns+0x1f5/0x500 [ 671.133435][T15401] do_syscall_64+0xcd/0xf80 [ 671.133453][T15401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.133467][T15401] RIP: 0033:0x7f1aac98f7c9 [ 671.133478][T15401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.133491][T15401] RSP: 002b:00007f1aad834038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 671.133505][T15401] RAX: ffffffffffffffda RBX: 00007f1aacbe5fa0 RCX: 00007f1aac98f7c9 [ 671.133514][T15401] RDX: 0000000080000001 RSI: 0000000000000006 RDI: 0000000000000000 [ 671.133522][T15401] RBP: 00007f1aaca13f91 R08: 0000000000000000 R09: 0000000000000000 [ 671.133530][T15401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 671.133538][T15401] R13: 00007f1aacbe6038 R14: 00007f1aacbe5fa0 R15: 00007ffdb90ea808 [ 671.133555][T15401] [ 671.360188][ C1] vkms_vblank_simulate: vblank timer overrun [ 671.709058][T14090] Bluetooth: hci0: command 0x0c1a tx timeout [ 671.717002][T14090] Bluetooth: hci3: command 0x0c1a tx timeout [ 671.739727][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 671.837250][T15402] Bluetooth: hci4: command 0x0c1a tx timeout [ 672.097170][T15402] Bluetooth: hci5: command 0x0c1a tx timeout [ 672.199128][T15402] Bluetooth: hci6: command 0x0c1a tx timeout [ 673.793647][T15425] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 673.914752][T15402] Bluetooth: hci4: command 0x0c1a tx timeout [ 674.154683][T15402] Bluetooth: hci5: command 0x0c1a tx timeout [ 674.232514][T15402] Bluetooth: hci6: command 0x0c1a tx timeout [ 677.441035][T15449] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 677.569525][T15449] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 677.678287][T15449] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 677.838096][T15449] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 677.966528][T15449] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 678.092558][T15449] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 678.162492][T15449] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 678.168597][T15449] CPU0 is offline. [ 679.485057][T15402] Bluetooth: hci1: command 0x0c1a tx timeout [ 679.567930][T15402] Bluetooth: hci0: command 0x0c1a tx timeout [ 679.726194][T15402] Bluetooth: hci2: command 0x0c1a tx timeout [ 679.884353][T15402] Bluetooth: hci3: command 0x0c1a tx timeout [ 679.962632][T15402] Bluetooth: hci4: command 0x0c1a tx timeout [ 680.129801][ T5839] Bluetooth: hci5: command 0x0c1a tx timeout [ 680.137029][T15402] Bluetooth: hci6: command 0x0c1a tx timeout [ 681.439962][ T30] audit: type=1800 audit(4294969725.003:16): pid=15475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2052" name="dbroot" dev="configfs" ino=230077 res=0 errno=0 [ 682.094507][T15482] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 682.202697][T15481] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 682.692924][T15485] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 683.700580][T15402] Bluetooth: hci6: unexpected subevent 0x04 length: 122 > 11 [ 684.864340][T15499] blktrace: Concurrent blktraces are not allowed on loop5 [ 685.993565][T15515] FAULT_INJECTION: forcing a failure. [ 685.993565][T15515] name failslab, interval 1, probability 0, space 0, times 0 [ 686.059709][T15515] CPU: 1 UID: 0 PID: 15515 Comm: syz.3.2060 Not tainted syzkaller #0 PREEMPT(full) [ 686.059736][T15515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 686.059747][T15515] Call Trace: [ 686.059753][T15515] [ 686.059762][T15515] dump_stack_lvl+0x16c/0x1f0 [ 686.059789][T15515] should_fail_ex+0x512/0x640 [ 686.059810][T15515] ? kmem_cache_alloc_noprof+0x62/0x720 [ 686.059832][T15515] should_failslab+0xc2/0x120 [ 686.059857][T15515] kmem_cache_alloc_noprof+0x75/0x720 [ 686.059875][T15515] ? __proc_create+0x2c8/0x8d0 [ 686.059902][T15515] ? __proc_create+0x2c8/0x8d0 [ 686.059922][T15515] __proc_create+0x2c8/0x8d0 [ 686.059944][T15515] ? __pfx___proc_create+0x10/0x10 [ 686.059970][T15515] ? _raw_write_unlock+0x28/0x50 [ 686.059990][T15515] ? proc_register+0x559/0x8b0 [ 686.060024][T15515] proc_create_reg+0x7d/0x180 [ 686.060049][T15515] proc_create_net_data+0x8e/0x1c0 [ 686.060074][T15515] ? __pfx_proc_create_net_data+0x10/0x10 [ 686.060097][T15515] ? __pfx_proc_create_net_data+0x10/0x10 [ 686.060122][T15515] ? __kasan_kmalloc+0xaa/0xb0 [ 686.060152][T15515] ip_vs_conn_net_init+0x13f/0x200 [ 686.060172][T15515] __ip_vs_init+0x27d/0x520 [ 686.060191][T15515] ? __pfx___ip_vs_init+0x10/0x10 [ 686.060209][T15515] ops_init+0x1e2/0x5f0 [ 686.060232][T15515] setup_net+0x11d/0x3a0 [ 686.060252][T15515] ? __pfx_setup_net+0x10/0x10 [ 686.060271][T15515] ? lockdep_init_map_type+0x5c/0x270 [ 686.060294][T15515] ? mutex_init_lockep+0x110/0x150 [ 686.060319][T15515] copy_net_ns+0x351/0x5d0 [ 686.060345][T15515] create_new_namespaces+0x3ea/0xab0 [ 686.060376][T15515] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 686.060404][T15515] ksys_unshare+0x45b/0xa40 [ 686.060421][T15515] ? __pfx_ksys_unshare+0x10/0x10 [ 686.060439][T15515] ? xfd_validate_state+0x61/0x180 [ 686.060473][T15515] __x64_sys_unshare+0x31/0x40 [ 686.060489][T15515] do_syscall_64+0xcd/0xf80 [ 686.060512][T15515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 686.060530][T15515] RIP: 0033:0x7f68ab58f7c9 [ 686.060545][T15515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 686.060563][T15515] RSP: 002b:00007f68ac4b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 686.060581][T15515] RAX: ffffffffffffffda RBX: 00007f68ab7e5fa0 RCX: 00007f68ab58f7c9 [ 686.060592][T15515] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 686.060602][T15515] RBP: 00007f68ab613f91 R08: 0000000000000000 R09: 0000000000000000 [ 686.060612][T15515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 686.060622][T15515] R13: 00007f68ab7e6038 R14: 00007f68ab7e5fa0 R15: 00007ffc86374b68 [ 686.060644][T15515] [ 687.614217][ T5839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 687.624427][ T5839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 687.632441][ T5839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 687.640492][ T5839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 687.648160][ T5839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 688.262608][T15531] sp0: Synchronizing with TNC [ 688.341686][T15531] netlink: 'syz.6.2064': attribute type 1 has an invalid length. [ 688.375788][T15531] netlink: 'syz.6.2064': attribute type 1 has an invalid length. [ 688.384729][T15538] phram: not enough arguments [ 688.425617][T15531] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2064'. [ 688.493842][T15531] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2064'. [ 688.518969][T15519] chnl_net:caif_netlink_parms(): no params data found [ 688.950696][T15519] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.003057][T15519] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.047099][T15519] bridge_slave_0: entered allmulticast mode [ 689.080186][T15519] bridge_slave_0: entered promiscuous mode [ 689.139064][T15519] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.181424][T15519] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.246269][T15519] bridge_slave_1: entered allmulticast mode [ 689.296377][T15519] bridge_slave_1: entered promiscuous mode [ 689.544609][T15519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.674828][ T5839] Bluetooth: hci7: command tx timeout [ 689.686470][T15519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.760296][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 689.766820][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.915361][T15519] team0: Port device team_slave_0 added [ 689.953878][T15519] team0: Port device team_slave_1 added [ 690.040851][T15560] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2069'. [ 690.082982][T15519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.091705][T15560] netlink: 'syz.6.2069': attribute type 1 has an invalid length. [ 690.099546][T15560] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2069'. [ 690.163207][T15519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.277096][T15519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.327482][T15519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.364344][T15519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.487556][T15519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.700323][T15557] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 690.740066][T15557] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 690.762889][T15557] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 690.795729][T15557] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 690.826269][T15557] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 690.841911][T15519] hsr_slave_0: entered promiscuous mode [ 690.866565][T15557] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 690.874046][T15519] hsr_slave_1: entered promiscuous mode [ 690.887816][T15557] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 690.898279][T15519] debugfs: 'hsr0' already exists in 'hsr' [ 690.904140][T15519] Cannot create hsr debugfs directory [ 690.921820][T15557] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 690.942742][T15557] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 690.991917][T15557] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 691.021170][T15557] CPU0 is offline. [ 691.320404][T15565] FAULT_INJECTION: forcing a failure. [ 691.320404][T15565] name failslab, interval 1, probability 0, space 0, times 0 [ 691.404435][T15565] CPU: 1 UID: 0 PID: 15565 Comm: syz.6.2071 Not tainted syzkaller #0 PREEMPT(full) [ 691.404462][T15565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 691.404472][T15565] Call Trace: [ 691.404478][T15565] [ 691.404485][T15565] dump_stack_lvl+0x16c/0x1f0 [ 691.404512][T15565] should_fail_ex+0x512/0x640 [ 691.404533][T15565] ? kmem_cache_alloc_noprof+0x62/0x720 [ 691.404556][T15565] should_failslab+0xc2/0x120 [ 691.404586][T15565] kmem_cache_alloc_noprof+0x75/0x720 [ 691.404604][T15565] ? alloc_empty_file+0x55/0x1e0 [ 691.404626][T15565] ? alloc_empty_file+0x55/0x1e0 [ 691.404641][T15565] ? _raw_spin_unlock+0x28/0x50 [ 691.404657][T15565] alloc_empty_file+0x55/0x1e0 [ 691.404674][T15565] alloc_file_pseudo+0x13a/0x230 [ 691.404693][T15565] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 691.404709][T15565] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 691.404737][T15565] create_pipe_files+0x36d/0x9a0 [ 691.404772][T15565] do_pipe2+0xaf/0x1c0 [ 691.404796][T15565] ? __pfx_do_pipe2+0x10/0x10 [ 691.404821][T15565] ? xfd_validate_state+0x61/0x180 [ 691.404847][T15565] ? __pfx_do_writev+0x10/0x10 [ 691.404873][T15565] __x64_sys_pipe+0x33/0x50 [ 691.404898][T15565] do_syscall_64+0xcd/0xf80 [ 691.404921][T15565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.404939][T15565] RIP: 0033:0x7f920c18f7c9 [ 691.404953][T15565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.404969][T15565] RSP: 002b:00007f920cf5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 691.404986][T15565] RAX: ffffffffffffffda RBX: 00007f920c3e5fa0 RCX: 00007f920c18f7c9 [ 691.404997][T15565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 691.405007][T15565] RBP: 00007f920c213f91 R08: 0000000000000000 R09: 0000000000000000 [ 691.405017][T15565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.405026][T15565] R13: 00007f920c3e6038 R14: 00007f920c3e5fa0 R15: 00007ffe190ec4b8 [ 691.405048][T15565] [ 691.684231][T15519] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 691.796858][T15519] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 691.879180][T15519] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 691.906316][T15519] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 692.065996][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 692.247711][T15519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.329082][T15519] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.372993][ T6488] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.380966][ T6488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.454684][ T6488] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.462509][ T6488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.781728][T15402] Bluetooth: hci0: command 0x0c1a tx timeout [ 692.788693][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 692.822195][T15592] mkiss: ax0: crc mode is auto. [ 692.858314][ T5849] Bluetooth: hci3: command 0x0c1a tx timeout [ 692.869802][T15402] Bluetooth: hci4: command 0x0c1a tx timeout [ 692.876972][ T5839] Bluetooth: hci5: command 0x0c1a tx timeout [ 692.936221][T15402] Bluetooth: hci6: command 0x0c1a tx timeout [ 692.942820][ T5839] Bluetooth: hci7: command 0x040f tx timeout [ 693.126692][T15592] ptp ptp0: delete virtual clock ptp10 [ 693.178124][T15592] ptp ptp0: delete virtual clock ptp9 [ 693.226910][T15592] ptp ptp0: delete virtual clock ptp8 [ 693.278413][T15592] ptp ptp0: delete virtual clock ptp7 [ 693.330063][T15592] ptp ptp0: delete virtual clock ptp6 [ 693.376991][T15592] ptp ptp0: delete virtual clock ptp5 [ 693.398256][T15519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.424965][T15592] ptp ptp0: delete virtual clock ptp4 [ 693.471593][T15592] ptp ptp0: guarantee physical clock free running [ 694.116909][T15609] sctp: [Deprecated]: syz.3.2080 (pid 15609) Use of struct sctp_assoc_value in delayed_ack socket option. [ 694.116909][T15609] Use struct sctp_sack_info instead [ 694.426651][T15519] veth0_vlan: entered promiscuous mode [ 694.488919][T15519] veth1_vlan: entered promiscuous mode [ 694.637282][T15519] veth0_macvtap: entered promiscuous mode [ 694.698617][T15519] veth1_macvtap: entered promiscuous mode [ 694.799352][T15519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.911115][T15519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 695.004485][ T5839] Bluetooth: hci7: command 0x040f tx timeout [ 695.061239][ T6481] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.154801][T15623] binder: BINDER_SET_CONTEXT_MGR already set [ 695.218948][ T6481] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.243459][T15623] binder: 15618:15623 ioctl 4018620d 9 returned -16 [ 695.311416][ T6481] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.373269][ T6481] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.521505][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.596317][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.935403][T15402] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 696.948304][T15402] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 696.957617][T15402] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 696.965604][T15402] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 696.973317][T15402] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 697.074068][T15402] Bluetooth: hci7: command 0x040f tx timeout [ 697.198790][ T6495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.260916][ T6495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.164738][T15641] chnl_net:caif_netlink_parms(): no params data found [ 698.721222][T15641] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.777338][T15641] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.817134][T15641] bridge_slave_0: entered allmulticast mode [ 698.882053][T15641] bridge_slave_0: entered promiscuous mode [ 698.962918][T15641] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.034314][T15641] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.063932][T15402] Bluetooth: hci8: command tx timeout [ 699.126639][T15641] bridge_slave_1: entered allmulticast mode [ 699.142984][T15402] Bluetooth: hci7: command 0x040f tx timeout [ 699.198183][T15641] bridge_slave_1: entered promiscuous mode [ 699.425693][T15641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.535431][T15641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.741173][T15641] team0: Port device team_slave_0 added [ 699.758383][T15641] team0: Port device team_slave_1 added [ 699.956277][T15641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.009854][T15641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.195525][T15641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.275636][T15641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.328146][T15641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.358144][ C1] vkms_vblank_simulate: vblank timer overrun [ 700.494299][T15641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.974729][T15641] hsr_slave_0: entered promiscuous mode [ 701.003920][T15641] hsr_slave_1: entered promiscuous mode [ 701.043079][T15641] debugfs: 'hsr0' already exists in 'hsr' [ 701.049828][T15641] Cannot create hsr debugfs directory [ 701.135747][T15402] Bluetooth: hci8: command tx timeout [ 701.212859][T15402] Bluetooth: hci7: command 0x040f tx timeout [ 702.009653][T15700] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 702.102393][T15641] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 702.184166][T15641] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 702.260755][T15641] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 702.349762][T15641] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 702.954120][T15641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.175882][T15717] netlink: 206 bytes leftover after parsing attributes in process `syz.3.2102'. [ 703.215822][T15402] Bluetooth: hci8: command tx timeout [ 703.498392][T15641] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.830830][ T6490] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.839541][ T6490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.941877][ T6490] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.949744][ T6490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 704.253728][T15731] random: crng reseeded on system resumption [ 705.271053][T15402] Bluetooth: hci8: command tx timeout [ 705.345032][ T30] audit: type=1800 audit(4294969749.047:17): pid=15743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2106" name="version" dev="configfs" ino=240096 res=0 errno=0 [ 705.868599][T15641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 705.899749][T15748] FAULT_INJECTION: forcing a failure. [ 705.899749][T15748] name fail_futex, interval 1, probability 0, space 0, times 0 [ 706.037221][T15748] CPU: 1 UID: 0 PID: 15748 Comm: syz.3.2107 Not tainted syzkaller #0 PREEMPT(full) [ 706.037248][T15748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 706.037258][T15748] Call Trace: [ 706.037265][T15748] [ 706.037272][T15748] dump_stack_lvl+0x16c/0x1f0 [ 706.037298][T15748] should_fail_ex+0x512/0x640 [ 706.037322][T15748] get_futex_key+0x1d0/0x15f0 [ 706.037345][T15748] ? __pfx_get_futex_key+0x10/0x10 [ 706.037373][T15748] futex_wake+0xea/0x530 [ 706.037396][T15748] ? lockdep_init_map_type+0x5c/0x270 [ 706.037418][T15748] ? __pfx_futex_wake+0x10/0x10 [ 706.037444][T15748] ? percpu_counter_add_batch+0xca/0x200 [ 706.037461][T15748] ? errseq_sample+0x53/0x70 [ 706.037485][T15748] ? file_init_path+0x4fe/0x760 [ 706.037505][T15748] do_futex+0x1e3/0x350 [ 706.037526][T15748] ? __pfx_do_futex+0x10/0x10 [ 706.037547][T15748] ? fd_install+0x223/0x570 [ 706.037573][T15748] __x64_sys_futex+0x1e0/0x4c0 [ 706.037596][T15748] ? __sys_socket+0xad/0x2d0 [ 706.037622][T15748] ? __pfx___x64_sys_futex+0x10/0x10 [ 706.037645][T15748] ? xfd_validate_state+0x61/0x180 [ 706.037678][T15748] do_syscall_64+0xcd/0xf80 [ 706.037701][T15748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.037719][T15748] RIP: 0033:0x7f68ab58f7c9 [ 706.037733][T15748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 706.037750][T15748] RSP: 002b:00007f68ac4b40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 706.037768][T15748] RAX: ffffffffffffffda RBX: 00007f68ab7e5fa8 RCX: 00007f68ab58f7c9 [ 706.037779][T15748] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f68ab7e5fac [ 706.037790][T15748] RBP: 00007f68ab7e5fa0 R08: 00007f68ac4b5000 R09: 0000000000000000 [ 706.037800][T15748] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 706.037810][T15748] R13: 00007f68ab7e6038 R14: 00007ffc86374a80 R15: 00007ffc86374b68 [ 706.037832][T15748] [ 706.912919][T15757] random: crng reseeded on system resumption [ 706.993908][T15757] hub 1-0:1.0: USB hub found [ 707.127837][T15757] hub 1-0:1.0: 1 port detected [ 707.174640][T15764] Restarting kernel threads ... [ 707.202589][T15764] Done restarting kernel threads. [ 707.466797][T15402] Bluetooth: hci7: unknown advertising packet type: 0xea [ 707.543385][T15773] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2112'. [ 708.327630][T15641] veth0_vlan: entered promiscuous mode [ 708.648379][T15641] veth1_vlan: entered promiscuous mode [ 708.787243][T15641] veth0_macvtap: entered promiscuous mode [ 708.884245][T15641] veth1_macvtap: entered promiscuous mode [ 709.002635][T15641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.082314][T15641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.190012][ T6492] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.247095][ T6492] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.370460][ T6492] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.484003][T15754] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.594239][T15795] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 709.822744][ T6492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.880956][ T6492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.217632][T15795] nfs: Bad value for 'source' [ 710.245796][T15795] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2115'. [ 710.299690][ T8418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.342870][ T8418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.355003][T15803] netlink: 2468 bytes leftover after parsing attributes in process `syz.6.2116'. [ 711.272671][T15810] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2085'. [ 711.900505][T15816] FAULT_INJECTION: forcing a failure. [ 711.900505][T15816] name failslab, interval 1, probability 0, space 0, times 0 [ 711.986803][T15816] CPU: 1 UID: 5 PID: 15816 Comm: syz.3.2120 Not tainted syzkaller #0 PREEMPT(full) [ 711.986830][T15816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 711.986840][T15816] Call Trace: [ 711.986847][T15816] [ 711.986855][T15816] dump_stack_lvl+0x16c/0x1f0 [ 711.986881][T15816] should_fail_ex+0x512/0x640 [ 711.986902][T15816] ? kmem_cache_alloc_noprof+0x62/0x720 [ 711.986933][T15816] should_failslab+0xc2/0x120 [ 711.986959][T15816] kmem_cache_alloc_noprof+0x75/0x720 [ 711.986979][T15816] ? __proc_create+0x2c8/0x8d0 [ 711.987005][T15816] ? __proc_create+0x2c8/0x8d0 [ 711.987027][T15816] __proc_create+0x2c8/0x8d0 [ 711.987050][T15816] ? __pfx___proc_create+0x10/0x10 [ 711.987076][T15816] ? __pfx___netlink_kernel_create+0x10/0x10 [ 711.987102][T15816] proc_create_reg+0x7d/0x180 [ 711.987128][T15816] proc_create_seq_private+0x8e/0x180 [ 711.987154][T15816] ? __pfx_proc_create_seq_private+0x10/0x10 [ 711.987178][T15816] ? __pfx_nl_fib_input+0x10/0x10 [ 711.987207][T15816] ? __pfx_ip_rt_do_proc_init+0x10/0x10 [ 711.987232][T15816] ip_rt_do_proc_init+0x57/0x1b0 [ 711.987257][T15816] ops_init+0x1e2/0x5f0 [ 711.987280][T15816] setup_net+0x11d/0x3a0 [ 711.987301][T15816] ? __pfx_setup_net+0x10/0x10 [ 711.987320][T15816] ? lockdep_init_map_type+0x5c/0x270 [ 711.987341][T15816] ? mutex_init_lockep+0x110/0x150 [ 711.987364][T15816] copy_net_ns+0x351/0x5d0 [ 711.987390][T15816] create_new_namespaces+0x3ea/0xab0 [ 711.987420][T15816] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 711.987448][T15816] ksys_unshare+0x45b/0xa40 [ 711.987465][T15816] ? __pfx_ksys_unshare+0x10/0x10 [ 711.987482][T15816] ? xfd_validate_state+0x61/0x180 [ 711.987515][T15816] __x64_sys_unshare+0x31/0x40 [ 711.987531][T15816] do_syscall_64+0xcd/0xf80 [ 711.987553][T15816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.987570][T15816] RIP: 0033:0x7f68ab58f7c9 [ 711.987586][T15816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.987602][T15816] RSP: 002b:00007f68ac4b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 711.987619][T15816] RAX: ffffffffffffffda RBX: 00007f68ab7e5fa0 RCX: 00007f68ab58f7c9 [ 711.987631][T15816] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 711.987641][T15816] RBP: 00007f68ab613f91 R08: 0000000000000000 R09: 0000000000000000 [ 711.987651][T15816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 711.987661][T15816] R13: 00007f68ab7e6038 R14: 00007f68ab7e5fa0 R15: 00007ffc86374b68 [ 711.987683][T15816] [ 712.329575][T15794] kexec: Could not allocate control_code_buffer [ 715.928648][T15848] FAULT_INJECTION: forcing a failure. [ 715.928648][T15848] name fail_futex, interval 1, probability 0, space 0, times 0 [ 716.146791][T15848] CPU: 1 UID: 0 PID: 15848 Comm: syz.3.2126 Not tainted syzkaller #0 PREEMPT(full) [ 716.146819][T15848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 716.146830][T15848] Call Trace: [ 716.146836][T15848] [ 716.146843][T15848] dump_stack_lvl+0x16c/0x1f0 [ 716.146870][T15848] should_fail_ex+0x512/0x640 [ 716.146894][T15848] get_futex_key+0x1d0/0x15f0 [ 716.146917][T15848] ? __pfx_get_futex_key+0x10/0x10 [ 716.146943][T15848] futex_wake+0xea/0x530 [ 716.146968][T15848] ? kasan_quarantine_put+0x10a/0x240 [ 716.146992][T15848] ? __pfx_futex_wake+0x10/0x10 [ 716.147019][T15848] ? putname+0xf5/0x1a0 [ 716.147049][T15848] do_futex+0x1e3/0x350 [ 716.147070][T15848] ? __pfx_do_futex+0x10/0x10 [ 716.147096][T15848] __x64_sys_futex+0x1e0/0x4c0 [ 716.147118][T15848] ? __x64_sys_openat+0x174/0x210 [ 716.147137][T15848] ? __pfx___x64_sys_futex+0x10/0x10 [ 716.147165][T15848] do_syscall_64+0xcd/0xf80 [ 716.147188][T15848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.147206][T15848] RIP: 0033:0x7f68ab58f7c9 [ 716.147220][T15848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 716.147236][T15848] RSP: 002b:00007f68ac4720e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 716.147253][T15848] RAX: ffffffffffffffda RBX: 00007f68ab7e6188 RCX: 00007f68ab58f7c9 [ 716.147265][T15848] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f68ab7e618c [ 716.147275][T15848] RBP: 00007f68ab7e6180 R08: 00007f68ac4b5000 R09: 0000000000000000 [ 716.147285][T15848] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 716.147295][T15848] R13: 00007f68ab7e6218 R14: 00007ffc86374a80 R15: 00007ffc86374b68 [ 716.147316][T15848] [ 716.394730][T15854] misc userio: Invalid payload size [ 716.455678][T15851] misc userio: Invalid payload size [ 716.659626][T15859] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 717.458619][T15870] netlink: 342 bytes leftover after parsing attributes in process `syz.8.2133'. [ 717.755437][T15872] FAULT_INJECTION: forcing a failure. [ 717.755437][T15872] name failslab, interval 1, probability 0, space 0, times 0 [ 718.184413][T15872] CPU: 1 UID: 0 PID: 15872 Comm: syz.6.2132 Not tainted syzkaller #0 PREEMPT(full) [ 718.184440][T15872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 718.184450][T15872] Call Trace: [ 718.184458][T15872] [ 718.184466][T15872] dump_stack_lvl+0x16c/0x1f0 [ 718.184494][T15872] should_fail_ex+0x512/0x640 [ 718.184514][T15872] ? __kmalloc_cache_noprof+0x5f/0x770 [ 718.184535][T15872] should_failslab+0xc2/0x120 [ 718.184562][T15872] __kmalloc_cache_noprof+0x72/0x770 [ 718.184580][T15872] ? cgroup_file_open+0x92/0x440 [ 718.184608][T15872] ? lockdep_init_map_type+0x5c/0x270 [ 718.184631][T15872] ? cgroup_file_open+0x92/0x440 [ 718.184656][T15872] cgroup_file_open+0x92/0x440 [ 718.184681][T15872] ? __pfx_cgroup_file_open+0x10/0x10 [ 718.184709][T15872] kernfs_fop_open+0x8c9/0xda0 [ 718.184740][T15872] do_dentry_open+0x748/0x1590 [ 718.184764][T15872] ? __pfx_kernfs_fop_open+0x10/0x10 [ 718.184795][T15872] vfs_open+0x82/0x3f0 [ 718.184815][T15872] path_openat+0x2078/0x3140 [ 718.184846][T15872] ? __pfx_path_openat+0x10/0x10 [ 718.184886][T15872] do_filp_open+0x20b/0x470 [ 718.184912][T15872] ? __pfx_do_filp_open+0x10/0x10 [ 718.184953][T15872] ? alloc_fd+0x471/0x7d0 [ 718.184982][T15872] do_sys_openat2+0x11f/0x280 [ 718.185000][T15872] ? __pfx_do_sys_openat2+0x10/0x10 [ 718.185026][T15872] __x64_sys_openat+0x174/0x210 [ 718.185045][T15872] ? __pfx___x64_sys_openat+0x10/0x10 [ 718.185073][T15872] do_syscall_64+0xcd/0xf80 [ 718.185097][T15872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.185115][T15872] RIP: 0033:0x7f920c18f7c9 [ 718.185130][T15872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 718.185147][T15872] RSP: 002b:00007f920cf5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 718.185164][T15872] RAX: ffffffffffffffda RBX: 00007f920c3e5fa0 RCX: 00007f920c18f7c9 [ 718.185175][T15872] RDX: 000000000014bb00 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 718.185186][T15872] RBP: 00007f920c213f91 R08: 0000000000000000 R09: 0000000000000000 [ 718.185196][T15872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.185206][T15872] R13: 00007f920c3e6038 R14: 00007f920c3e5fa0 R15: 00007ffe190ec4b8 [ 718.185228][T15872] [ 720.193772][T15891] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input100 [ 720.980314][T15890] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input101 [ 722.233271][T15910] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 726.673062][T15963] netlink: 330 bytes leftover after parsing attributes in process `syz.8.2152'. [ 727.744894][T15983] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 729.940805][ T30] audit: type=1800 audit(4294969773.765:18): pid=16026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2164" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 731.738552][T16029] delete_channel: no stack [ 733.315760][ T5839] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 733.329675][ T5839] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 733.338721][ T5839] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 733.346627][ T5839] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 733.365861][ T5839] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 734.268220][T16070] chnl_net:caif_netlink_parms(): no params data found [ 735.124507][T16070] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.202452][T16070] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.258041][T16070] bridge_slave_0: entered allmulticast mode [ 735.299061][T16070] bridge_slave_0: entered promiscuous mode [ 735.343169][T16070] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.380772][T16102] FAULT_INJECTION: forcing a failure. [ 735.380772][T16102] name failslab, interval 1, probability 0, space 0, times 0 [ 735.413307][T16070] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.442453][ T5839] Bluetooth: hci9: command tx timeout [ 735.454122][T16070] bridge_slave_1: entered allmulticast mode [ 735.493351][T16070] bridge_slave_1: entered promiscuous mode [ 735.504887][T16102] CPU: 1 UID: 0 PID: 16102 Comm: syz.8.2174 Not tainted syzkaller #0 PREEMPT(full) [ 735.504914][T16102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 735.504929][T16102] Call Trace: [ 735.504937][T16102] [ 735.504944][T16102] dump_stack_lvl+0x16c/0x1f0 [ 735.504972][T16102] should_fail_ex+0x512/0x640 [ 735.504997][T16102] ? __kmalloc_cache_noprof+0x5f/0x770 [ 735.505017][T16102] should_failslab+0xc2/0x120 [ 735.505043][T16102] __kmalloc_cache_noprof+0x72/0x770 [ 735.505060][T16102] ? lockdep_init_map_type+0x5c/0x270 [ 735.505081][T16102] ? fib6_net_init+0x3f9/0xb20 [ 735.505103][T16102] ? lockdep_init_map_type+0x5c/0x270 [ 735.505125][T16102] ? fib6_net_init+0x3f9/0xb20 [ 735.505145][T16102] fib6_net_init+0x3f9/0xb20 [ 735.505168][T16102] ? __pfx_fib6_net_init+0x10/0x10 [ 735.505190][T16102] ops_init+0x1e2/0x5f0 [ 735.505213][T16102] setup_net+0x11d/0x3a0 [ 735.505235][T16102] ? __pfx_setup_net+0x10/0x10 [ 735.505254][T16102] ? lockdep_init_map_type+0x5c/0x270 [ 735.505274][T16102] ? mutex_init_lockep+0x110/0x150 [ 735.505297][T16102] copy_net_ns+0x351/0x5d0 [ 735.505322][T16102] create_new_namespaces+0x3ea/0xab0 [ 735.505353][T16102] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 735.505380][T16102] ksys_unshare+0x45b/0xa40 [ 735.505397][T16102] ? __pfx_ksys_unshare+0x10/0x10 [ 735.505414][T16102] ? xfd_validate_state+0x61/0x180 [ 735.505447][T16102] __x64_sys_unshare+0x31/0x40 [ 735.505463][T16102] do_syscall_64+0xcd/0xf80 [ 735.505486][T16102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.505511][T16102] RIP: 0033:0x7f805118f7c9 [ 735.505525][T16102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.505541][T16102] RSP: 002b:00007f8051fb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 735.505558][T16102] RAX: ffffffffffffffda RBX: 00007f80513e5fa0 RCX: 00007f805118f7c9 [ 735.505569][T16102] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 735.505580][T16102] RBP: 00007f8051213f91 R08: 0000000000000000 R09: 0000000000000000 [ 735.505590][T16102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.505601][T16102] R13: 00007f80513e6038 R14: 00007f80513e5fa0 R15: 00007ffee083e498 [ 735.505624][T16102] [ 735.869055][T16070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.881444][T16070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.911925][T16070] team0: Port device team_slave_0 added [ 735.935689][T16070] team0: Port device team_slave_1 added [ 735.962655][T16070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 735.970360][T16070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.996919][T16070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.009114][T16070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.016136][T16070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.108057][T16070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.450989][T16070] hsr_slave_0: entered promiscuous mode [ 736.495543][T16070] hsr_slave_1: entered promiscuous mode [ 736.542614][T16070] debugfs: 'hsr0' already exists in 'hsr' [ 736.572245][T16070] Cannot create hsr debugfs directory [ 737.503409][ T5839] Bluetooth: hci9: command tx timeout [ 737.955403][T16070] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 738.128005][T16070] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 738.360931][T16070] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 738.489638][T16070] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 738.921779][T16070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.013962][T16070] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.152284][ T6490] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.159597][ T6490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.300680][ T6497] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.308239][ T6497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.573076][ T5839] Bluetooth: hci9: command tx timeout [ 739.965542][T16162] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 740.047345][T16165] netlink: zone id is out of range [ 740.111198][T16165] netlink: zone id is out of range [ 740.145582][T16165] netlink: zone id is out of range [ 740.181206][T16165] netlink: set zone limit has 4 unknown bytes [ 740.638874][T16179] netlink: 346 bytes leftover after parsing attributes in process `syz.8.2189'. [ 741.107714][T16070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.241478][T16199] FAULT_INJECTION: forcing a failure. [ 741.241478][T16199] name failslab, interval 1, probability 0, space 0, times 0 [ 741.400911][T16199] CPU: 1 UID: 0 PID: 16199 Comm: syz.8.2191 Not tainted syzkaller #0 PREEMPT(full) [ 741.400938][T16199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 741.400948][T16199] Call Trace: [ 741.400954][T16199] [ 741.400962][T16199] dump_stack_lvl+0x16c/0x1f0 [ 741.400988][T16199] should_fail_ex+0x512/0x640 [ 741.401010][T16199] ? kmem_cache_alloc_noprof+0x62/0x720 [ 741.401031][T16199] should_failslab+0xc2/0x120 [ 741.401057][T16199] kmem_cache_alloc_noprof+0x75/0x720 [ 741.401076][T16199] ? __proc_create+0x2c8/0x8d0 [ 741.401103][T16199] ? __proc_create+0x2c8/0x8d0 [ 741.401124][T16199] __proc_create+0x2c8/0x8d0 [ 741.401147][T16199] ? __pfx___proc_create+0x10/0x10 [ 741.401172][T16199] ? _raw_write_unlock+0x28/0x50 [ 741.401192][T16199] ? proc_register+0x559/0x8b0 [ 741.401216][T16199] proc_create_reg+0x7d/0x180 [ 741.401241][T16199] ? __pfx_can_rcvlist_proc_show+0x10/0x10 [ 741.401265][T16199] proc_create_net_single+0x86/0x180 [ 741.401289][T16199] ? __pfx_proc_create_net_single+0x10/0x10 [ 741.401319][T16199] can_init_proc+0x1e1/0x4d0 [ 741.401343][T16199] can_pernet_init+0x1e4/0x370 [ 741.401366][T16199] ? __pfx_can_pernet_init+0x10/0x10 [ 741.401385][T16199] ops_init+0x1e2/0x5f0 [ 741.401409][T16199] setup_net+0x11d/0x3a0 [ 741.401429][T16199] ? __pfx_setup_net+0x10/0x10 [ 741.401448][T16199] ? lockdep_init_map_type+0x5c/0x270 [ 741.401476][T16199] ? mutex_init_lockep+0x110/0x150 [ 741.401500][T16199] copy_net_ns+0x351/0x5d0 [ 741.401524][T16199] create_new_namespaces+0x3ea/0xab0 [ 741.401557][T16199] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 741.401584][T16199] ksys_unshare+0x45b/0xa40 [ 741.401602][T16199] ? __pfx_ksys_unshare+0x10/0x10 [ 741.401619][T16199] ? xfd_validate_state+0x61/0x180 [ 741.401653][T16199] __x64_sys_unshare+0x31/0x40 [ 741.401669][T16199] do_syscall_64+0xcd/0xf80 [ 741.401691][T16199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.401707][T16199] RIP: 0033:0x7f805118f7c9 [ 741.401722][T16199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.401739][T16199] RSP: 002b:00007f8051fb0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 741.401756][T16199] RAX: ffffffffffffffda RBX: 00007f80513e5fa0 RCX: 00007f805118f7c9 [ 741.401767][T16199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 741.401777][T16199] RBP: 00007f8051213f91 R08: 0000000000000000 R09: 0000000000000000 [ 741.401787][T16199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.401796][T16199] R13: 00007f80513e6038 R14: 00007f80513e5fa0 R15: 00007ffee083e498 [ 741.401818][T16199] [ 741.671511][ C1] vkms_vblank_simulate: vblank timer overrun [ 741.709919][T16207] Invalid ELF header len 5 [ 741.785347][ T5839] Bluetooth: hci9: command tx timeout [ 742.973273][T16224] ptrace attach of "./syz-executor exec"[16230] was attempted by "./syz-executor exec"[16224] [ 743.011475][T16070] veth0_vlan: entered promiscuous mode [ 743.265264][T16070] veth1_vlan: entered promiscuous mode [ 743.970026][T16070] veth0_macvtap: entered promiscuous mode [ 744.000249][T16070] veth1_macvtap: entered promiscuous mode [ 744.068319][T16070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 744.309727][T16070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 744.392228][ T6490] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.475737][ T6488] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.539503][ T6488] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.609991][ T6488] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.778194][T16237] zswap: compressor 000 not available [ 744.999655][ T6490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.062710][ T6490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.164693][T16240] zswap: compressor 000 not available [ 745.403589][ T6494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.446675][ T6494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.202001][ T6488] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.548813][ T6488] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.863831][ T6488] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.192356][ T6488] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.407700][T16279] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 747.573773][T16283] FAULT_INJECTION: forcing a failure. [ 747.573773][T16283] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 747.752504][T16283] CPU: 1 UID: 0 PID: 16283 Comm: syz.9.2206 Not tainted syzkaller #0 PREEMPT(full) [ 747.752530][T16283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 747.752541][T16283] Call Trace: [ 747.752547][T16283] [ 747.752555][T16283] dump_stack_lvl+0x16c/0x1f0 [ 747.752582][T16283] should_fail_ex+0x512/0x640 [ 747.752606][T16283] should_fail_alloc_page+0xe7/0x130 [ 747.752634][T16283] prepare_alloc_pages+0x3c2/0x610 [ 747.752663][T16283] __alloc_frozen_pages_noprof+0x18b/0x2440 [ 747.752687][T16283] ? __lock_acquire+0x433/0x22f0 [ 747.752711][T16283] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 747.752740][T16283] ? find_held_lock+0x2b/0x80 [ 747.752765][T16283] ? is_bpf_text_address+0x8a/0x1a0 [ 747.752787][T16283] ? bpf_ksym_find+0x124/0x1c0 [ 747.752802][T16283] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 747.752829][T16283] ? policy_nodemask+0xea/0x4e0 [ 747.752855][T16283] alloc_pages_mpol+0x1fb/0x550 [ 747.752881][T16283] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 747.752912][T16283] folio_alloc_mpol_noprof+0x36/0xe0 [ 747.752941][T16283] shmem_alloc_folio+0x135/0x160 [ 747.752967][T16283] shmem_alloc_and_add_folio+0x494/0xc20 [ 747.753000][T16283] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 747.753029][T16283] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 747.753051][T16283] shmem_get_folio_gfp+0x67f/0x1610 [ 747.753072][T16283] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 747.753089][T16283] ? filemap_map_pages+0x12dd/0x1e00 [ 747.753114][T16283] shmem_fault+0x1fe/0xa00 [ 747.753132][T16283] ? __pfx_shmem_fault+0x10/0x10 [ 747.753150][T16283] ? rcu_is_watching+0x12/0xc0 [ 747.753177][T16283] ? __pfx_filemap_map_pages+0x10/0x10 [ 747.753201][T16283] __do_fault+0x10d/0x490 [ 747.753221][T16283] do_pte_missing+0xfb2/0x4000 [ 747.753251][T16283] ? __pmd_alloc+0x64f/0x8b0 [ 747.753277][T16283] __handle_mm_fault+0x14ca/0x2a30 [ 747.753309][T16283] ? __pfx___handle_mm_fault+0x10/0x10 [ 747.753350][T16283] ? find_vma+0xbf/0x140 [ 747.753369][T16283] ? __pfx_find_vma+0x10/0x10 [ 747.753388][T16283] ? __pfx_try_to_wake_up+0x10/0x10 [ 747.753415][T16283] handle_mm_fault+0x3fe/0xad0 [ 747.753453][T16283] do_user_addr_fault+0x2e4/0xda0 [ 747.753475][T16283] ? rcu_is_watching+0x12/0xc0 [ 747.753503][T16283] exc_page_fault+0x64/0xc0 [ 747.753525][T16283] asm_exc_page_fault+0x26/0x30 [ 747.753542][T16283] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 747.753569][T16283] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 7a 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 747.753587][T16283] RSP: 0018:ffffc9000c747da0 EFLAGS: 00050212 [ 747.753602][T16283] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000010 [ 747.753613][T16283] RDX: fffff520018e8fd2 RSI: 0000000000000000 RDI: ffffc9000c747e80 [ 747.753624][T16283] RBP: 0000000000000010 R08: 0000000000000001 R09: fffff520018e8fd1 [ 747.753634][T16283] R10: ffffc9000c747e8f R11: 00000000ffffffff R12: 0000000000000000 [ 747.753644][T16283] R13: ffffc9000c747e80 R14: 1ffff920018e8fc4 R15: ffffc9000c747e80 [ 747.753667][T16283] _copy_from_user+0x98/0xd0 [ 747.753689][T16283] write_ldt+0xfc/0xd20 [ 747.753713][T16283] ? __pfx_write_ldt+0x10/0x10 [ 747.753731][T16283] ? fput+0x70/0xf0 [ 747.753748][T16283] ? __pfx_ksys_write+0x10/0x10 [ 747.753776][T16283] __x64_sys_modify_ldt+0xb1/0x170 [ 747.753797][T16283] do_syscall_64+0xcd/0xf80 [ 747.753819][T16283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.753836][T16283] RIP: 0033:0x7f2d5898f7c9 [ 747.753850][T16283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 747.753865][T16283] RSP: 002b:00007f2d598b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 747.753881][T16283] RAX: ffffffffffffffda RBX: 00007f2d58be6090 RCX: 00007f2d5898f7c9 [ 747.753892][T16283] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000001 [ 747.753902][T16283] RBP: 00007f2d58a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 747.753912][T16283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.753925][T16283] R13: 00007f2d58be6128 R14: 00007f2d58be6090 R15: 00007ffcce783558 [ 747.753950][T16283] [ 748.616341][T16292] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 749.896950][ T6488] bridge_slave_1: left allmulticast mode [ 749.939426][ T6488] bridge_slave_1: left promiscuous mode [ 749.945997][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.186149][T15402] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 750.196567][T15402] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 750.205140][T15402] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 750.217530][T15402] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 750.227650][T15402] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 750.325074][ T30] audit: type=1806 audit(4294969794.251:19): xattr="." res=0 [ 750.367676][ T6488] bridge_slave_0: left allmulticast mode [ 750.373640][ T6488] bridge_slave_0: left promiscuous mode [ 750.477501][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.556719][ T30] audit: type=1800 audit(4294969794.492:20): pid=16321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2212" name="members" dev="configfs" ino=257659 res=0 errno=0 [ 750.883176][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 750.894867][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.152636][ T30] audit: type=1800 audit(4294969796.090:21): pid=16342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2217" name="dbroot" dev="configfs" ino=258203 res=0 errno=0 [ 752.275702][ T6488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.307485][T15402] Bluetooth: hci8: command tx timeout [ 752.330707][ T6488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 752.380108][ T6488] bond0 (unregistering): Released all slaves [ 752.853967][T16346] random: crng reseeded on system resumption [ 753.636166][T16369] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 754.053563][T15402] Bluetooth: hci6: Malformed Event: 0x13 [ 754.109685][ T6488] hsr_slave_0: left promiscuous mode [ 754.152287][ T6488] hsr_slave_1: left promiscuous mode [ 754.157414][ T6488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.157453][ T6488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.188779][ T6488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.188801][ T6488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.382336][T15402] Bluetooth: hci8: command tx timeout [ 754.419708][ T6488] veth1_macvtap: left promiscuous mode [ 754.419825][ T6488] veth0_macvtap: left promiscuous mode [ 754.419974][ T6488] veth1_vlan: left promiscuous mode [ 754.420109][ T6488] veth0_vlan: left promiscuous mode [ 754.521316][T16377] ptp: physical clock is free running [ 754.718708][T16349] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 756.205026][T16405] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2227'. [ 756.317486][T16406] binder: BINDER_SET_CONTEXT_MGR already set [ 756.366275][T16406] binder: 16404:16406 ioctl 4018620d 9 returned -16 [ 756.445627][T15402] Bluetooth: hci8: command tx timeout [ 758.471961][ T6488] team0 (unregistering): Port device team_slave_1 removed [ 758.517620][T15402] Bluetooth: hci8: command tx timeout [ 758.666491][ T6488] team0 (unregistering): Port device team_slave_0 removed [ 760.546059][T16310] chnl_net:caif_netlink_parms(): no params data found [ 761.365017][T16310] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.431759][T16310] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.495964][T16310] bridge_slave_0: entered allmulticast mode [ 761.575736][T16310] bridge_slave_0: entered promiscuous mode [ 761.733385][T16310] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.800092][T16310] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.867811][T16310] bridge_slave_1: entered allmulticast mode [ 761.916619][T16310] bridge_slave_1: entered promiscuous mode [ 762.355894][T16310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 762.438772][T16310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 762.714702][T16310] team0: Port device team_slave_0 added [ 762.789201][T16310] team0: Port device team_slave_1 added [ 763.195039][T16310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.251428][T16310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.383115][T16310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.431360][T16473] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 763.464722][T16310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.492606][T16310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.626768][T16310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.016766][T16310] hsr_slave_0: entered promiscuous mode [ 764.073438][T16310] hsr_slave_1: entered promiscuous mode [ 764.113165][T16310] debugfs: 'hsr0' already exists in 'hsr' [ 764.174762][T16310] Cannot create hsr debugfs directory [ 765.062170][T16310] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.430769][T16310] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.641582][T16310] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.316485][T16310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 766.453862][T16310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 766.670738][T16532] nbd: must specify a size in bytes for the device [ 766.802757][T16310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 766.858627][T16310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 767.672412][T16310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.783792][T16310] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.839784][T15664] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.847048][T15664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.973520][T15664] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.980705][T15664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.094516][T16310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 769.301935][T16310] veth0_vlan: entered promiscuous mode [ 769.362907][T16310] veth1_vlan: entered promiscuous mode [ 769.511466][T16310] veth0_macvtap: entered promiscuous mode [ 769.745912][T16310] veth1_macvtap: entered promiscuous mode [ 769.898140][T16310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.962798][T16310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 770.129730][ T3458] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.194720][ T3458] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.424163][ T3458] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.596750][ T3458] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.916365][ T6488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.971013][ T6488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.099431][ T6490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.152781][ T6490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.900639][T16581] serio: Serial port ttyS2 [ 773.987728][T16616] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 774.667635][T16622] ptp: physical clock is free running [ 775.029882][T16635] program syz.0.2261 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 775.230654][T16636] random: crng reseeded on system resumption [ 777.655229][ T5839] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 777.665591][ T5839] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 777.673719][ T5839] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 777.698975][ T5839] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 777.715517][ T5839] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 777.900363][T16665] Process accounting resumed [ 778.232587][T16674] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2267'. [ 779.151618][T16662] chnl_net:caif_netlink_parms(): no params data found [ 779.763859][ T5839] Bluetooth: hci10: command tx timeout [ 779.943465][T16662] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.950825][T16662] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.012930][T16662] bridge_slave_0: entered allmulticast mode [ 780.066390][T16699] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 780.093431][T16662] bridge_slave_0: entered promiscuous mode [ 780.132826][T16662] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.140084][T16662] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.214923][T16662] bridge_slave_1: entered allmulticast mode [ 780.275056][T16662] bridge_slave_1: entered promiscuous mode [ 780.794234][T16662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.972260][T16662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.277380][T16662] team0: Port device team_slave_0 added [ 781.362815][T16662] team0: Port device team_slave_1 added [ 781.603759][T16662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.645427][T16662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.834007][ T5839] Bluetooth: hci10: command tx timeout [ 781.876405][T16662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.014534][T16662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.021596][T16662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.312816][T16662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.681446][T16662] hsr_slave_0: entered promiscuous mode [ 782.687946][T16662] hsr_slave_1: entered promiscuous mode [ 782.782549][T16662] debugfs: 'hsr0' already exists in 'hsr' [ 782.828523][T16662] Cannot create hsr debugfs directory [ 783.252571][T16746] Console: switching to colour frame buffer device 128x48 [ 783.315346][T16749] FAULT_INJECTION: forcing a failure. [ 783.315346][T16749] name failslab, interval 1, probability 0, space 0, times 0 [ 783.315379][T16749] CPU: 1 UID: 0 PID: 16749 Comm: syz.0.2276 Not tainted syzkaller #0 PREEMPT(full) [ 783.315401][T16749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 783.315410][T16749] Call Trace: [ 783.315417][T16749] [ 783.315424][T16749] dump_stack_lvl+0x16c/0x1f0 [ 783.315450][T16749] should_fail_ex+0x512/0x640 [ 783.315470][T16749] ? fs_reclaim_acquire+0xae/0x150 [ 783.315496][T16749] should_failslab+0xc2/0x120 [ 783.315522][T16749] __kmalloc_cache_noprof+0x72/0x770 [ 783.315540][T16749] ? do_proc_control+0x335/0x10a0 [ 783.315561][T16749] ? do_proc_control+0x335/0x10a0 [ 783.315576][T16749] do_proc_control+0x335/0x10a0 [ 783.315594][T16749] ? __might_fault+0x13b/0x190 [ 783.315611][T16749] ? __pfx_do_proc_control+0x10/0x10 [ 783.315633][T16749] usbdev_ioctl+0x22ff/0x4070 [ 783.315653][T16749] ? __pfx_usbdev_ioctl+0x10/0x10 [ 783.315673][T16749] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 783.315706][T16749] ? do_vfs_ioctl+0x128/0x14f0 [ 783.315735][T16749] ? find_held_lock+0x2b/0x80 [ 783.315760][T16749] ? hook_file_ioctl_common+0x145/0x410 [ 783.315789][T16749] ? __fget_files+0x20e/0x3c0 [ 783.315815][T16749] ? __pfx_usbdev_ioctl+0x10/0x10 [ 783.315833][T16749] __x64_sys_ioctl+0x18e/0x210 [ 783.315854][T16749] do_syscall_64+0xcd/0xf80 [ 783.315878][T16749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.315896][T16749] RIP: 0033:0x7f5a32d8f7c9 [ 783.315910][T16749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 783.315927][T16749] RSP: 002b:00007f5a33b4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 783.315943][T16749] RAX: ffffffffffffffda RBX: 00007f5a32fe6090 RCX: 00007f5a32d8f7c9 [ 783.315955][T16749] RDX: 0000000000000000 RSI: 00000000c0185500 RDI: 0000000000000007 [ 783.315965][T16749] RBP: 00007f5a32e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 783.315975][T16749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 783.315985][T16749] R13: 00007f5a32fe6128 R14: 00007f5a32fe6090 R15: 00007ffcbae798f8 [ 783.316008][T16749] [ 783.904497][ T5839] Bluetooth: hci10: command tx timeout [ 783.931426][T16662] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.107563][T16756] : Can't lookup blockdev [ 784.177672][T16758] netlink: 186 bytes leftover after parsing attributes in process `syz.6.2277'. [ 784.800289][T16662] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.257581][ T31] INFO: task syz.1.1946:14939 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 785.257609][ T31] Not tainted syzkaller #0 [ 785.257621][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 785.257628][ T31] task:syz.1.1946 state:D stack:27544 pid:14939 tgid:14933 ppid:5837 task_flags:0x400140 flags:0x00080002 [ 785.257683][ T31] Call Trace: [ 785.257690][ T31] [ 785.257700][ T31] ? __schedule+0x10b9/0x6150 [ 785.257725][ T31] __schedule+0x1139/0x6150 [ 785.257757][ T31] ? __pfx___schedule+0x10/0x10 [ 785.257777][ T31] ? find_held_lock+0x2b/0x80 [ 785.257805][ T31] ? schedule+0x2d7/0x3a0 [ 785.257828][ T31] schedule+0xe7/0x3a0 [ 785.257849][ T31] schedule_preempt_disabled+0x13/0x30 [ 785.257870][ T31] __mutex_lock+0xcf8/0x1b10 [ 785.257896][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 785.257927][ T31] ? __lock_acquire+0x433/0x22f0 [ 785.257949][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 785.257982][ T31] ? net_generic+0xea/0x2a0 [ 785.258011][ T31] ? nfsd_nl_threads_set_doit+0x687/0xbc0 [ 785.258040][ T31] nfsd_nl_threads_set_doit+0x687/0xbc0 [ 785.258073][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 785.258105][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 785.258140][ T31] ? __dev_queue_xmit+0xaf1/0x4330 [ 785.258171][ T31] ? genl_get_cmd+0x194/0x580 [ 785.258202][ T31] ? bpf_lsm_capable+0x9/0x10 [ 785.258224][ T31] ? security_capable+0x7e/0x260 [ 785.258250][ T31] genl_rcv_msg+0x55c/0x800 [ 785.258280][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 785.258308][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 785.258346][ T31] netlink_rcv_skb+0x158/0x420 [ 785.258370][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 785.258398][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 785.258431][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 785.258458][ T31] genl_rcv+0x28/0x40 [ 785.258482][ T31] netlink_unicast+0x5aa/0x870 [ 785.258510][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 785.258542][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 785.258570][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 785.258597][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 785.258623][ T31] ____sys_sendmsg+0xa5d/0xc30 [ 785.258650][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 785.258672][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 785.258696][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 785.258729][ T31] ? try_to_wake_up+0xa67/0x1860 [ 785.258760][ T31] ___sys_sendmsg+0x134/0x1d0 [ 785.258780][ T31] ? find_held_lock+0x2b/0x80 [ 785.258807][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 785.258828][ T31] ? __lock_acquire+0x433/0x22f0 [ 785.258873][ T31] __sys_sendmsg+0x16d/0x220 [ 785.258895][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 785.258916][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 785.258972][ T31] do_syscall_64+0xcd/0xf80 [ 785.258997][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.259017][ T31] RIP: 0033:0x7fd0de78f7c9 [ 785.259033][ T31] RSP: 002b:00007fd0df5e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 785.259052][ T31] RAX: ffffffffffffffda RBX: 00007fd0de9e6090 RCX: 00007fd0de78f7c9 [ 785.259065][ T31] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003 [ 785.259077][ T31] RBP: 00007fd0de813f91 R08: 0000000000000000 R09: 0000000000000000 [ 785.259089][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.259100][ T31] R13: 00007fd0de9e6128 R14: 00007fd0de9e6090 R15: 00007ffe87838268 [ 785.259129][ T31] [ 785.259137][ T31] INFO: task syz.2.1960:15029 blocked for more than 143 seconds. [ 785.259150][ T31] Not tainted syzkaller #0 [ 785.259159][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 785.259167][ T31] task:syz.2.1960 state:D stack:27544 pid:15029 tgid:15021 ppid:5835 task_flags:0x400140 flags:0x00080002 [ 785.259218][ T31] Call Trace: [ 785.259224][ T31] [ 785.259233][ T31] ? __schedule+0x10b9/0x6150 [ 785.259253][ T31] __schedule+0x1139/0x6150 [ 785.259277][ T31] ? __lock_acquire+0x433/0x22f0 [ 785.259303][ T31] ? __pfx___schedule+0x10/0x10 [ 785.259323][ T31] ? find_held_lock+0x2b/0x80 [ 785.259350][ T31] ? schedule+0x2d7/0x3a0 [ 785.259373][ T31] schedule+0xe7/0x3a0 [ 785.259394][ T31] schedule_preempt_disabled+0x13/0x30 [ 785.259414][ T31] __mutex_lock+0xcf8/0x1b10 [ 785.259437][ T31] ? genl_family_rcv_msg_doit+0xbf/0x2f0 [ 785.259466][ T31] ? netlink_unicast+0x5aa/0x870 [ 785.259488][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1ae0 [ 785.259517][ T31] ? ___sys_sendmsg+0x134/0x1d0 [ 785.259536][ T31] ? do_syscall_64+0xcd/0xf80 [ 785.259561][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 785.259593][ T31] ? __asan_memset+0x23/0x50 [ 785.259615][ T31] ? __nla_validate_parse+0x600/0x2880 [ 785.259647][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1ae0 [ 785.259675][ T31] nfsd_nl_listener_set_doit+0xd5/0x1ae0 [ 785.259711][ T31] ? rcu_is_watching+0x12/0xc0 [ 785.259740][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 785.259770][ T31] ? __nla_parse+0x40/0x60 [ 785.259798][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 785.259827][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 785.259861][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 785.259890][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 785.259917][ T31] ? __dev_queue_xmit+0xaf1/0x4330 [ 785.259945][ T31] ? genl_get_cmd+0x194/0x580 [ 785.259975][ T31] ? bpf_lsm_capable+0x9/0x10 [ 785.259997][ T31] ? security_capable+0x7e/0x260 [ 785.260022][ T31] genl_rcv_msg+0x55c/0x800 [ 785.260051][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 785.260079][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 785.260122][ T31] netlink_rcv_skb+0x158/0x420 [ 785.260147][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 785.260175][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 785.260208][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 785.260234][ T31] genl_rcv+0x28/0x40 [ 785.260258][ T31] netlink_unicast+0x5aa/0x870 [ 785.260285][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 785.260317][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 785.260345][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 785.260372][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 785.260398][ T31] ____sys_sendmsg+0xa5d/0xc30 [ 785.260425][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 785.260446][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 785.260470][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 785.260503][ T31] ? try_to_wake_up+0xa67/0x1860 [ 785.260533][ T31] ___sys_sendmsg+0x134/0x1d0 [ 785.260552][ T31] ? find_held_lock+0x2b/0x80 [ 785.260580][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 785.260601][ T31] ? __lock_acquire+0x433/0x22f0 [ 785.260646][ T31] __sys_sendmsg+0x16d/0x220 [ 785.260668][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 785.260688][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 785.260724][ T31] do_syscall_64+0xcd/0xf80 [ 785.260748][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.260767][ T31] RIP: 0033:0x7f16ceb8f7c9 [ 785.260781][ T31] RSP: 002b:00007f16ccdd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 785.260799][ T31] RAX: ffffffffffffffda RBX: 00007f16cede6180 RCX: 00007f16ceb8f7c9 [ 785.260811][ T31] RDX: 0000000020000000 RSI: 0000200000005380 RDI: 0000000000000008 [ 785.260823][ T31] RBP: 00007f16cec13f91 R08: 0000000000000000 R09: 0000000000000000 [ 785.260835][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.260847][ T31] R13: 00007f16cede6218 R14: 00007f16cede6180 R15: 00007fff72748648 [ 785.260871][ T31] [ 785.260904][ T31] [ 785.260904][ T31] Showing all locks held in the system: [ 785.260913][ T31] 6 locks held by kworker/u8:0/12: [ 785.260926][ T31] 1 lock held by khungtaskd/31: [ 785.260936][ T31] #0: ffffffff8e1c95a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 785.261022][ T31] 2 locks held by getty/12138: [ 785.261033][ T31] #0: ffff888034a990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 785.261083][ T31] #1: ffffc90004da72f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 785.261134][ T31] 2 locks held by syz.0.1868/14547: [ 785.261145][ T31] #0: ffffffff8ffbdcd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 785.261196][ T31] #1: ffffffff8e5fbc68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1ae0 [ 785.261253][ T31] 2 locks held by syz.1.1946/14939: [ 785.261263][ T31] #0: ffffffff8ffbdcd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 785.261314][ T31] #1: ffffffff8e5fbc68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 785.261370][ T31] 2 locks held by syz.2.1960/15029: [ 785.261380][ T31] #0: ffffffff8ffbdcd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 785.261431][ T31] #1: ffffffff8e5fbc68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1ae0 [ 785.261487][ T31] 2 locks held by syz-executor/15140: [ 785.261497][ T31] #0: ffff888021baa0e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 785.261553][ T31] #1: ffffffff8e5fbc68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 785.261605][ T31] 4 locks held by syz-executor/15201: [ 785.261617][ T31] 2 locks held by syz.4.2035/15401: [ 785.261627][ T31] #0: ffffffff8ffbdcd0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 785.261678][ T31] #1: ffffffff8e5fbc68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 785.261734][ T31] 2 locks held by syz-executor/15519: [ 785.261744][ T31] #0: ffff888056f8a0e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 785.261807][ T31] #1: ffffffff8e5fbc68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 785.261860][ T31] 4 locks held by kworker/u8:7/15754: [ 785.261870][ T31] #0: ffff88801ba9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 785.261920][ T31] #1: ffffc90004567c90 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 785.261969][ T31] #2: ffffffff8ff01bf0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x830 [ 785.262021][ T31] #3: ffffffff8ff18148 (rtnl_mutex){+.+.}-{4:4}, at: mpls_net_exit+0x83/0x350 [ 785.262076][ T31] 2 locks held by syz.9.2234/16452: [ 785.262090][ T31] #0: ffff88801c3000e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 785.262150][ T31] #1: ffffffff8e5fbc68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 785.262202][ T31] 9 locks held by syz-executor/16662: [ 785.262213][ T31] #0: ffff888030972420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 785.262268][ T31] #1: ffff8880843f4888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x570 [ 785.262323][ T31] #2: ffff888143f68f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2ff/0x570 [ 785.262381][ T31] #3: ffffffff8f492f48 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x4a0 [ 785.262436][ T31] #4: ffff88807ad5b0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xa4/0x620 [ 785.262483][ T31] #5: ffff88807ad5c250 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1d0 [ 785.262537][ T31] #6: ffffffff8ff18148 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x108/0x800 [ 785.262582][ T31] #7: ffff888077e1cd38 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x19fe/0x2570 [ 785.262640][ T31] #8: ffffffff8e1d4bb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 785.262689][ T31] 4 locks held by syz.6.2270/16724: [ 785.262700][ T31] 1 lock held by syz.3.2274/16737: [ 785.262711][ T31] 1 lock held by syz.3.2274/16739: [ 785.262721][ T31] 5 locks held by syz.0.2276/16746: [ 785.262732][ T31] 4 locks held by dhcpcd-run-hook/16765: [ 785.262746][ T31] [ 785.262753][ T31] ============================================= [ 785.262753][ T31] [ 785.262762][ T31] NMI backtrace for cpu 1 [ 785.262773][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 785.262792][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 785.262802][ T31] Call Trace: [ 785.262808][ T31] [ 785.262815][ T31] dump_stack_lvl+0x116/0x1f0 [ 785.262839][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 785.262869][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 785.262899][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 785.262928][ T31] watchdog+0xf14/0x1140 [ 785.262958][ T31] ? rcu_is_watching+0x12/0xc0 [ 785.262983][ T31] ? __pfx_watchdog+0x10/0x10 [ 785.263008][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 785.263030][ T31] ? __kthread_parkme+0x19e/0x250 [ 785.263057][ T31] ? __pfx_watchdog+0x10/0x10 [ 785.263083][ T31] kthread+0x3c5/0x780 [ 785.263102][ T31] ? __pfx_kthread+0x10/0x10 [ 785.263128][ T31] ? rcu_is_watching+0x12/0xc0 [ 785.263154][ T31] ? __pfx_kthread+0x10/0x10 [ 785.263173][ T31] ret_from_fork+0x983/0xb10 [ 785.263190][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 785.263207][ T31] ? __switch_to+0x7af/0x10d0 [ 785.263229][ T31] ? __pfx_kthread+0x10/0x10 [ 785.263248][ T31] ret_from_fork_asm+0x1a/0x30 [ 785.263280][ T31] [ 785.286391][T16662] bridge0: port 3(netdevsim1) entered disabled state [ 785.697991][T16662] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 785.698040][T16662] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode [ 785.699539][T16662] bridge0: port 3(netdevsim1) entered disabled state [ 785.794686][T16662] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.972198][ T5839] Bluetooth: hci10: command tx timeout [ 785.992725][T16662] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.140233][ T6490] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.472090][ T6490] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.944104][ T6490] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.101529][ T6490] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.550522][ T6490] netdevsim netdevsim1335 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.886498][ T6490] bridge_slave_1: left allmulticast mode [ 788.892221][ T6490] bridge_slave_1: left promiscuous mode [ 788.895122][ T6490] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.898204][ T6490] bridge_slave_0: left allmulticast mode [ 788.898221][ T6490] bridge_slave_0: left promiscuous mode [ 788.898325][ T6490] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.260829][ T6490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 790.271209][ T6490] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 790.282379][ T6490] bond0 (unregistering): Released all slaves [ 790.362733][ T6490] ovs_ÿþÿþ?: left promiscuous mode [ 790.479257][ T6490] tipc: Left network mode [ 791.198248][ T6490] hsr_slave_0: left promiscuous mode [ 791.211653][ T6490] hsr_slave_1: left promiscuous mode [ 791.212231][ T6490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 791.212249][ T6490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.212796][ T6490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 791.212811][ T6490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.265867][ T6490] veth1_macvtap: left promiscuous mode [ 791.265928][ T6490] veth0_macvtap: left promiscuous mode [ 791.266045][ T6490] veth1_vlan: left promiscuous mode [ 791.267350][ T6490] veth0_vlan: left promiscuous mode [ 795.408591][ T6490] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0