last executing test programs: 7m45.773503392s ago: executing program 2 (id=108): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise$auto(0x0, 0x2003ec, 0x14) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8df41, 0x0) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) ioctl$auto_TUNGETVNETHDRSZ2(0xffffffffffffffff, 0x800454d7, &(0x7f0000000000)=0x3) openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, 0x0, 0x109280, 0x0) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x435f74ef, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 7m44.653510641s ago: executing program 2 (id=112): r0 = openat2$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x8001, 0x1d, 0x10000}, 0x2) ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES2(r0, 0x80489439, &(0x7f0000000080)=[{0x10000, 0xffffffffffffff17, 0x6}, {0x2, 0x4, 0x8000000000000001}, {0xf1, 0x7, 0x7fff}]) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) r1 = getpid() ioctl$auto_TIOCCBRK(r0, 0x5428, &(0x7f0000000300)="cc2ed4772d00f117421dd9ec9ba46c5f1ea6a4e1401e0e882ce7254c7b46bdb424b9") process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) prctl$auto_PR_SYS_DISPATCH_OFF(0x20002, 0x0, r1, 0xffffffffffffffff, 0x81) r2 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f00000001c0), r0) sendmsg$auto_OVS_VPORT_CMD_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYRES16=r1], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x51) madvise$auto(0x1, 0x5b6, 0x15) ioctl$auto_SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000100)="dd9b55e3f8cb58e43e73d3feac7faef6548c629636a507f3619453de025ef26d9f35d5a903b6c42254abb71e69aef4af74c6032dce0ee187c75270e5cbf25166666504d6bf351d7b") 7m44.208400072s ago: executing program 2 (id=113): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x800) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0x0, 0x0) write$auto(r0, 0x0, 0x7ef) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x200004, 0x7, 0x40ebf, 0x602, 0x300000000000) (async) madvise$auto(0x0, 0x20499d, 0x9) select$auto(0x12, 0x0, 0x0, 0x0, 0x0) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) lseek$auto(r0, 0x7ffffffffffffffd, 0x2) (async, rerun: 32) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) (rerun: 32) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(r2, r0, 0x8) (async) r3 = prctl$auto(0x21, 0x1, 0x1, 0x0, 0x0) read$auto_rng_chrdev_ops_core(r3, &(0x7f0000000080)=""/202, 0xca) (async, rerun: 32) ioctl$auto_FS_IOC_GET_ENCRYPTION_NONCE2(r3, 0x8010661b, &(0x7f0000000040)="cd0c0864cb7845cf2a936ec1fbdd9279") (async, rerun: 32) keyctl$auto(0x5, 0xffffffffffffffff, 0x5, 0x5, 0x8) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe08c1, 0x0) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x7, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) mremap$auto(0x200000001000, 0x8, 0x37, 0x3, 0x110c230000) mmap$auto(0x0, 0x2000b, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) (async) read$auto(0x3, 0x0, 0x80) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(&(0x7f0000000000)='./bus\x00', 0xa23c2, 0x1e0) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) (async, rerun: 64) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/loop13\x00', 0x109f02, 0x0) (rerun: 64) 7m42.909407553s ago: executing program 2 (id=115): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x28, r1, 0x1, 0x8070bd27, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0xffff14cb}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x80000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x5c, r5, 0x1, 0x70bd2b, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x1b, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00'}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x5c}, 0x1, 0x3f}, 0x0) 7m42.537336156s ago: executing program 2 (id=118): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x40, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) preadv$auto(0x3, 0x0, 0x3, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x2aa82, 0x0) munmap$auto(0x5, 0x203) ioctl$auto_KVM_CREATE_VM(r0, 0x4018aee2, 0x88) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x40002, 0x0) 7m42.193194883s ago: executing program 2 (id=120): r0 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x3, 0xb, 0x1000, 0xbfb, r0, 0x7) (async) bpf$auto(0x7fffffff, &(0x7f0000000780)=@token_create={0x8c, r0}, 0xd8) ioctl$auto(0xc8, 0xffffffff800454dd, 0x4000000000008) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x9) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/irq/11/actions\x00', 0x28442, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000140)=""/32, 0x6e) unshare$auto(0x40000080) (async) socket(0x12, 0x4, 0x440a) r1 = socket(0x2b, 0x1, 0x0) listen$auto(r1, 0x1) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) (async) syz_genetlink_get_family_id$auto_taskstats(&(0x7f00000000c0), 0xffffffffffffffff) (async) capget$auto(&(0x7f0000000200)={0x1, 0x0}, &(0x7f0000000180)={0x20000101, 0x6ee}) wait4$auto(r3, &(0x7f0000000280)=0x5, 0x0, &(0x7f00000002c0)={{0x8001, 0x2}, {0x800, 0x9f52}, 0x1000, 0x7fff, 0x3, 0x4f, 0x2, 0x8, 0x2, 0x101, 0x4, 0x0, 0x9, 0xab55, 0x6, 0xa}) (async, rerun: 32) r4 = getpid() (rerun: 32) pidfd_open$auto(r4, 0x0) (async, rerun: 32) openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/x86/topo/cpus/0\x00', 0x8200, 0x0) (async, rerun: 32) write$auto(r2, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) (async) ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)) (async) fanotify_init$auto(0x5, 0x2000000000002) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x1001, 0x804) open(&(0x7f0000000000)='./file0\x00', 0x28400, 0x82) (async) open(&(0x7f00000001c0)='./file0\x00', 0x44840, 0x118) (async, rerun: 32) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) (async, rerun: 32) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xffffdffd}, 0x6, 0x400000000000008, 0x5) 7m26.942770921s ago: executing program 32 (id=120): r0 = pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x3, 0xb, 0x1000, 0xbfb, r0, 0x7) (async) bpf$auto(0x7fffffff, &(0x7f0000000780)=@token_create={0x8c, r0}, 0xd8) ioctl$auto(0xc8, 0xffffffff800454dd, 0x4000000000008) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x9) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/irq/11/actions\x00', 0x28442, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000140)=""/32, 0x6e) unshare$auto(0x40000080) (async) socket(0x12, 0x4, 0x440a) r1 = socket(0x2b, 0x1, 0x0) listen$auto(r1, 0x1) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) (async) syz_genetlink_get_family_id$auto_taskstats(&(0x7f00000000c0), 0xffffffffffffffff) (async) capget$auto(&(0x7f0000000200)={0x1, 0x0}, &(0x7f0000000180)={0x20000101, 0x6ee}) wait4$auto(r3, &(0x7f0000000280)=0x5, 0x0, &(0x7f00000002c0)={{0x8001, 0x2}, {0x800, 0x9f52}, 0x1000, 0x7fff, 0x3, 0x4f, 0x2, 0x8, 0x2, 0x101, 0x4, 0x0, 0x9, 0xab55, 0x6, 0xa}) (async, rerun: 32) r4 = getpid() (rerun: 32) pidfd_open$auto(r4, 0x0) (async, rerun: 32) openat$auto_dfs_cpu_ops_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/x86/topo/cpus/0\x00', 0x8200, 0x0) (async, rerun: 32) write$auto(r2, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) (async) ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)) (async) fanotify_init$auto(0x5, 0x2000000000002) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x1001, 0x804) open(&(0x7f0000000000)='./file0\x00', 0x28400, 0x82) (async) open(&(0x7f00000001c0)='./file0\x00', 0x44840, 0x118) (async, rerun: 32) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) (async, rerun: 32) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xffffdffd}, 0x6, 0x400000000000008, 0x5) 5m46.638452377s ago: executing program 0 (id=495): r0 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/uprobe_events\x00', 0x800, 0x0) setsockopt$auto_SO_BSDCOMPAT(r0, 0xa816, 0xe, &(0x7f0000000040)='\x00', 0x3ff) r1 = socket(0x9, 0x80000, 0x4) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg1\x00', 0x402200, 0x0) ioctl$auto_SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f00000000c0)) r3 = syz_clone3(&(0x7f0000000300)={0x4000200, &(0x7f0000000100)=0xffffffffffffffff, &(0x7f0000000140)=0x0, &(0x7f0000000180), {0xc}, &(0x7f00000001c0)=""/116, 0x74, &(0x7f0000000240)=""/95, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) process_madvise$auto_MADV_HUGEPAGE(r4, &(0x7f00000003c0)={&(0x7f0000000380)="8c8e790e870afd1dfb941131870606ed9de0fd138109cf4915d7be94e43d59b905da"}, 0x5, 0xe, 0x0) mprotect$auto(0x9, 0x2, 0x3400) r6 = socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f0000000400)=0x4) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR642(r6, 0xc0884123, &(0x7f0000000440)={0x7f, 0x0, @reserved="0ccd3a59e4c4f8fd6eaeac447b352e62e161e1cc2d0856a8b7ccd93a35e69f473b8369da34c36c9d7ce927c930a26ad06e4cdba0ae55b4d64cf3352de18dd5be", @control={{}, 0x7, {}, {}, 0xae}}) ioctl$auto_XFS_IOC_FREESP64(r6, 0x40305825, &(0x7f0000000500)={0xfff, 0x1, 0x9, 0x2, 0x1ff, r5}) ioctl$auto_dvb_demux_fops_dmxdev(r6, 0x1, &(0x7f0000000540)="4c53e0276c8253d6e45d846508951b4a5f8f95d86699950c3d0c0865f2d0dca1e6f732fbb97770f5fbece5c0111bcaf54187bac0bb61f355b2572e07c39c269d0724924a702f820d45ff70729e30f48c8d1a9ed10252eeb3a6c346cf637e60780a5716a2a095f38387b8975db48828009cd8e89b6787ea9ed5dd5f8e448488ede9c0ade71cf2bf67") mprotect$auto(0xc45, 0x5, 0x30000) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000640), r6) r8 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000680)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x200000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'macvtap0\x00', 0x0}) sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(r1, &(0x7f0000000a80)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a40)={&(0x7f0000000700)={0x33c, r7, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0xd5}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0xf2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1}, @NL802154_ATTR_WPAN_PHY_CAPS={0x2e8, 0x18, 0x0, 0x1, [@typed={0x8, 0x9e, 0x0, 0x0, @pid=r5}, @generic="d63ca4f38d6d8f167b4ac2bea1580618d67c75724fee28752e8214ec7a55a63a462ef6d5b2696ca6f828face18c836f90c4cdfccf54e637f83167cb3f208b238a4e7aca15d6bd81290d0a61fd3fdfde108d53352bfddeb885d9606eb28d3289cf970249994703591f849b1afa72f4bc54457dbb8bc5cf2dcc3ae41be26", @nested={0x8, 0x120, 0x0, 0x1, [@typed={0x4, 0x80}]}, @nested={0x24, 0xa, 0x0, 0x1, [@typed={0x14, 0xfc, 0x0, 0x0, @ipv6=@local}, @nested={0x4, 0x9}, @typed={0x8, 0x14f, 0x0, 0x0, @pid=r5}]}, @nested={0x73, 0x39, 0x0, 0x1, [@generic="74403255de2f6c5fa61b2f7c03b91077bc53088488075ea4138e768018c30687377a6c8245824279264385f462dff244ea01bdeb20df69bdd9fadaac189f49ce68a0c24613b035d172c39862678e23cb8b746fdd22cbeb96754e115fa1476bd81b8e76ad449b383ef0eccbd6f6a420"]}, @typed={0x8, 0xd3, 0x0, 0x0, @pid=r3}, @nested={0xd4, 0x12b, 0x0, 0x1, [@generic="97e556e4aab03b2ad38004726b0823a0789c86e27b58828fe4e7418c2f", @nested={0x4, 0x1f}, @typed={0x8, 0xd, 0x0, 0x0, @fd=r8}, @typed={0x14, 0x21, 0x0, 0x0, @ipv6=@empty}, @generic="dfd7bf59e08a87505bd9210b0c1b4ae27dce248c7e5e0b6cfe270bc062bba4b5fdb0bce98a7c44c21ef0e3d07dfb3d8a3549034f9ff4cc4ae3da1b268ba37ef409cbf3c0fb3cee012590467a9872b7e06e9f9706cfd428e1747a2799c7969a857236789a6d07bee3e796ed10a5d7d1a8fc4c197a5e3db169e9ff51e4ba1ff8174e5b18f7482014ffc078967119f632ad589130"]}, @nested={0x4, 0x68}, @generic="07d88c85698794872d876d05e90f834243574bdb8a4c8ebb094d17573353cd4e1c3aa1022fed57697c31dfd806a6609b3395e18fa1641a91dff7b67f061650ff027f02d4201f1b93becf418c4f5c008b0424d07c546a1763414e8247592dd3073890fd4637128fb065ca85bb9b6e9b9eb102be83c833254c58ca9b9a92b33c80fe34033fa5c4e254403503eef8819792c6ac388902f9501628766ebbc8ab14eaedd566c2f56605dafecdc679ead0602ea408bb79c7b85d2543f66ca21cb181e48c2818dc50ad6c55abee5f3d1cb4b7ea892e5728c842efd444314f177b967e"]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x4}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x4}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x7b}]}, 0x33c}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040054) read$auto_severities_coverage_fops_severity(0xffffffffffffffff, &(0x7f0000000ac0)=""/220, 0xdc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/devices/virtual/net/lapb2/power/autosuspend_delay_ms\x00', 0x2080, 0x0) process_madvise$auto_MADV_GUARD_REMOVE(r6, &(0x7f0000000d00)={&(0x7f0000000c00)="a425022fa569ee143ac0fc0ef289ad1ad932457341b39ebed499722cbe4d159f83af28ce08003bf0b8b5b12bc640e14472e1bf85f14c4c27e6c3d4a94426c9e9985de83aa707317ccca62f63ded752dd1f3c749d6ec92176ed0f736edda586d3cb5ae77effe1dc85d3d4a707c1c4902e9b0f8c518b50239db268110aa99e1c27a630fbaca81f3af8463d2d5f797a53661a8a4a6232034263937aeab687671e9dccd5fe0d4b2b7db57d8a6e7ba64b6ba2e6f908d4ca00884376b48126d1edd2cf52b644b60f6c2e3eed876ceeb84b13abfc89287b4e0d34a305876771f5fadc5db1b309147a6ceda191d264a0f94b5149b740de7b649a23316d99", 0x48}, 0x0, 0x67, 0x94) mmap$auto(0x9, 0x7ff, 0x7aba, 0x18, r1, 0x9) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000d40), 0x101200, 0x0) process_madvise$auto_MADV_DOFORK(r6, &(0x7f0000000dc0)={&(0x7f0000000d80)="620c0b235b9b932fe87de6263180b12775059ab50133059e753df49840f46e690ce93d", 0x4}, 0x7, 0xb, 0x5) pwrite64$auto(r1, &(0x7f0000000e00)=']\x00', 0x1, 0x8) ioctl$auto_FIONBIO(r1, 0x5421, 0x30000000000000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000e40), 0x161103, 0x0) fsconfig$auto_SHMEM_HUGE_WITHIN_SIZE(r0, 0x800, &(0x7f0000000e80)='\'++\x00', &(0x7f0000000ec0)="a92915d852a28b150b10c705039cd2cb766ebddaa44bb55105582c0b107395637729aa9764db0e4a40180ef78106abc231ccf82e5ae93f3d2b2fcd79293677f0bf558f4b773d3acc5ca9fb9d690e8bb251f5fde243d745bbbfbd09dfcfc4d83a305905db8cae1b43456f38856827ba366d7465f7535196baa368f853d02db9cb1a4cec530775f937965c903eda0793400bb2f69ab6b83974d5cc77ca348a0a38c3a4963814ea797362c55c4bf3b284a0c9252aa2ff0da1f3dbab53b0ee6cd78130fba6739eaf16", 0x2) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000fc0), 0x10440, 0x0) syz_clone3(&(0x7f0000001180)={0x400, &(0x7f0000001000)=0xffffffffffffffff, &(0x7f0000001040), &(0x7f0000001080), {0x29}, &(0x7f00000010c0)=""/18, 0x12, &(0x7f0000001100)=""/16, &(0x7f0000001140)=[0xffffffffffffffff, r3], 0x2}, 0x58) process_madvise$auto(r10, &(0x7f00000012c0)={&(0x7f0000001200)="37e23474770a56e4efa885fa7e8d6bba70984b6dcb26d0c96bcf90c7a7b15bdf374970317e61646351c1f49935c86ed87b15e810af3ec7177e2bb29bbb32754a22ed497e0b9a8572ded2e4106d9263eae96404fe125cb0c4e74d9121a9d91b1621f17138813f26d14cb0de39e5fb46a9015c73f80e0949cd2a426092349924a0984900b547cf886934d98c26da6424c593"}, 0x40000, 0x5d6, 0x9) 5m45.233856969s ago: executing program 3 (id=500): select$auto(0x3, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r0, 0x0, 0x4) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=@bpf_attr_7={@btf_id=0x6, 0x101, 0x100, r0}, 0x6) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x1c, r2, 0x9, 0x70bd28, 0x25dfdbfb, {}, [@NET_SHAPER_A_IFINDEX={0x8, 0x8, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0xc050) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x40000, 0x188) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, 0x0, 0x0) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/thread-self/gid_map\x00', 0x802, 0x0) mmap$auto(0x3, 0x40000b, 0xdf, 0x10010, 0xffffffffffffffff, 0x80) r6 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_clone3(&(0x7f0000001280)={0x120020480, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$auto_IMADDTIMER(r6, 0x80044940, 0x0) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00') mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) 5m44.696621314s ago: executing program 0 (id=501): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) dup$auto(r0) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x80, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/034/001\x00', 0x88002, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto(r1, &(0x7f0000000080)='/de}/audio1\x00', 0x2100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x958b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x10000]}, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0x3, 0x6, 0x4, 0x9b4, 0x9, "0800aafc241cd010c7543bfbca2ce1", "0200", '\x00\x00 \x00', "2ff43123", ['\x00', "f8ffffffffffffff00000001", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]}) sysfs$auto(0x2, 0x23, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, 0x0, 0x4) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(r5, 0xae41, r4) 5m44.044262023s ago: executing program 3 (id=504): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f0000000500)='./file1\x00', 0x149443, 0x3f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/028/001\x00', 0x20a803, 0x0) ioctl$auto_USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000440)={0x9, 0x978, 0x0}) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="aa9875c0", @ANYRES16=r4, @ANYBLOB="010026bd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x44004811}, 0x40000c0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) sendfile$auto(r5, r5, 0x0, 0x7fffe000) write$auto_proc_sys_file_operations_proc_sysctl(r5, &(0x7f00000000c0)="1781f983740dfb4fd9d98176a86bc780a1ddac0f7dc6d8257056be17e8bfbde343b19aeb70b51c413a16775ec21cb0c84731310431", 0x35) r6 = socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0xa0, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC_MASK={0x88, 0xd7, "ce663be44c2ab39c0a411e0c0f4b05dbb10589d60e416fbc3a4d1abf8f0d864fbac193f3c08aba595d956e517214235b5c7ceaebcfa8a83e7f198a70fa2fe46142609e753548ee63ec78a9d9418858bf8085a0bcb741abfcd02b606adb439484fdbe0a4279ca405ec02f5ccb6f1357ecedd55958d3561eb7d04fe86859784a0016ba4380"}, @NL80211_ATTR_PRIVACY={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x1}, 0x24008054) sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0xf4, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8b}]}]}, @NL80211_ATTR_VENDOR_DATA={0x7a, 0xc5, "e06e32fa1ec4818585b97e5aa43b973324d5cdff4f91e1a9fecf7530d836f7e6bf2fe52675ca749a5f68be6a20feed92fcff7db76efbd96dac9f1ce7d285c9fb63ef32ea40a1be0ce3a0fc83f0f848f736e6c1791547e820d19ac86aaa421d44b2544bb8974575a92794b3c587d843a4a8e1f7f63b2c"}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_STA_FLAGS={0x28, 0x11, 0x0, 0x1, [@typed={0x8, 0x7b, 0x0, 0x0, @str='nfs\x00'}, @nested={0x1c, 0x8c, 0x0, 0x1, [@typed={0x14, 0x122, 0x0, 0x0, @ipv6=@private0}, @nested={0x4, 0x45}]}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x8004}, 0x20000880) bind$auto(0x3, 0x0, 0x2) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x5, 0x0) shutdown$auto(0x200000003, 0x2) 5m43.273179556s ago: executing program 3 (id=507): madvise$auto_MADV_UNMERGEABLE(0x2, 0x7, 0xd) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='/sys/devices/virtual/dmi/id/modalias\x00', 0x40280, 0x0) madvise$auto_MADV_UNMERGEABLE(0x9, 0x6094, 0xd) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/mpls/conf/netdevsim2/input\x00', 0x40802, 0x0) sendfile$auto(0x6, 0x3, 0x0, 0xc01) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x9) bind$auto(0x3, &(0x7f0000000040)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0xb) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\b\x00\x00', @ANYRES16=r1, @ANYBLOB="00012bbd7000fddbdf252800000005003e000800000031004801a289c1c1f3026f75a4d3a66a76f9f65578159c8a96f55e156e69b5114d651d9ec494a3d7791ee432bb9c"], 0x60}, 0x1, 0x0, 0x0, 0x54}, 0x1) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_setup$auto(0x81c5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) getsockopt$auto(r2, 0x84, 0x1b, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mmap$auto(0x8, 0x200006, 0x2, 0x40ebd, 0x602, 0x300400000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r3, 0x0, 0x5, 0x20000000) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000040)) 5m42.3685926s ago: executing program 0 (id=509): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffdf, 0x7, 0x4, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x6]}, 0x1fe, 0xd) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f00"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082cbd7000fedbdf250300000008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a000500aaaaaaaaaabb00000a00010000000000000000000a000100bbbbbbbbbbbb0000060006000f00000008000400010000880a0011"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x6004000) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_pgetevents$auto(0x5, 0x800, 0x3, 0x0, 0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0xac, 0x7d, 0xfffffffb, 0x90, 0x401, 0x7ff9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) io_pgetevents$auto(0x2, 0x6, 0x0, &(0x7f0000000040)={0xffffffff, 0x7888, 0xd266337, 0x2}, &(0x7f0000000380)={0x6, 0x80}, &(0x7f0000000400)={&(0x7f00000003c0)={0x4}}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x541c, r2) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5m41.897299415s ago: executing program 3 (id=512): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = getpid() mlockall$auto(0x5) fcntl$auto_F_SETOWN(r2, 0x8, r3) rt_sigprocmask$auto(0x6, 0x0, 0xffffffffffffffff, 0x8) close_range$auto(0xffffffffffffffff, 0x8, 0xe3b1) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x7, 0x28000) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon32\x00', 0x0, 0x0) sysfs$auto(0x2, 0x11, 0x0) ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x24600, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r5 = socket(0x11, 0xa, 0x300) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0xff, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc4}, 0x24008811) getrandom$auto(0x0, 0x6000000, 0x3) socket(0x27, 0x80003, 0x300) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) quotactl_fd$auto(r0, 0x4, 0x0, &(0x7f0000000300)="faadf3c37eade74365ec36e4cb4cd1f669eede101c9c40994f0c2b6d89301c019acb7f6129195b3549487cb8bb1d73a7ad1931c6db66b927ce1369e08b2f1e51b1bb2b04dc573352481e8b3f00913d7392dd1304b5a599518832278e6823123fbe9cb6248035a5af3e98fee535bd0db70f8d036492f1594979b07ddc85037e87ea59fc7c18bdc4987584959c53a629049e20b18c48b9bf6dd2f85564071f35a6cb65646220b1fb1b3ab55706b22b29878963260c045a3c3f2b104e1f98937e40") ioperm$auto(0x7, 0x6, 0x4) 5m41.765209745s ago: executing program 0 (id=514): socket$nl_generic(0x10, 0x3, 0x10) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/lru_gen\x00', 0x240040, 0x0) statmount$auto(&(0x7f0000000000)={0x81, @inferred, 0x5, 0xffffffff, 0xfffffffffffffff2}, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffffff01, 0x9, 0x8000000000000000, 0x8, 0x7, 0x9, 0x5, 0x5, 0x9, 0x3, 0x8, 0x5, 0xf, 0x0, 0x9, 0x10001, 0x5}, 0x800, 0x0) (async, rerun: 32) socket(0x1e, 0x1, 0x0) (rerun: 32) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) (async) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x101b00, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x420c1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) socketpair$auto(0x2, 0x5, 0xb, 0x0) (async, rerun: 64) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) open(0x0, 0x163340, 0x2a) (async, rerun: 32) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xfdef, 0xe, &(0x7f0000000100)=@in={0x2, 0x4e20, @multicast2=0xe000006a}, 0x1d) 5m40.331934374s ago: executing program 0 (id=517): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram7\x00', 0x60742, 0x0) (async) r0 = socket(0x2, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0xaa7, 0x0, 0x1, 0x0) (async, rerun: 32) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (rerun: 32) connect$auto(0x3, 0x0, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'veth0_macvtap\x00'}) (async) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) (async) read$auto_nvram_misc_fops_nvram(0xffffffffffffffff, 0x0, 0x0) (async) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x801, 0x100) (async) open(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0xa0400, 0x0) (async) open_by_handle_at$auto(r0, &(0x7f00000001c0)={0x9, 0x200002, "e15bb7e086287ef3de"}, 0x783f182d) (async, rerun: 32) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x840, 0x0) (rerun: 32) ioctl$auto(r3, 0x4b65, 0x7) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async, rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 32) nanosleep$auto(&(0x7f0000000180)={0x0, 0x44d4}, 0x0) (async) getpid() (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 64) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x1, 0x0) (rerun: 64) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) (async) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) select$auto(0x11, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 5m40.289503463s ago: executing program 3 (id=518): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000164c0), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) sysfs$auto(0x2, 0x10000000000002a, 0x81) r3 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r3, 0x15, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_SCAN(r1, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000140)={0x14, r2, 0xd3ac6c422733a379, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$auto_NL80211_CMD_SET_TID_TO_LINK_MAPPING(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb4, r2, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "40efff405fe2ee2c21fa1efdbf54affc7f791daca53e375b959e"}, @NL80211_ATTR_EPCS={0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7}, @NL80211_ATTR_SAE_PASSWORD={0xa, 0x115, "dbfe385d82c6"}, @NL80211_ATTR_FILS_ERP_REALM={0x57, 0xfa, "c727ab2db94e5f1e8c61718e49cfcc76fc161736c20d67aa4775652d90f44c68f3b21d41fe5b084331695af528def34c755a60e940a0cf343802aea1eecac527ca0308627d4b3b36396e72341cd36f3ce5c3a6"}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x4001) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) 5m40.095307762s ago: executing program 3 (id=519): ioctl$auto_FBIOBLANK(0xffffffffffffffff, 0x4611, 0x0) close_range$auto(0x2, 0xa, 0x0) (async) socket(0xa, 0x2, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) (async) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) socket(0x2, 0x2, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x105000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) bind$auto(r0, 0x0, 0x6a) (async) connect$auto(0x3, 0x0, 0x54) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x404b) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) semctl$auto(0x4, 0x804, 0x13, 0x46) (async) select$auto(0x5, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xf, 0x1, 0x948b, 0x3, 0x7f, 0x3, 0x2008000000003, 0x62, 0x8000001f, 0x100000040007, 0x4, 0x9, 0xfffffffffffffffc, 0xffff]}, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/path_max\x00', 0x0, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/rose12/queues/rx-0/rps_cpus\x00', 0x20001, 0x0) (async) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xfffe) 5m36.161564256s ago: executing program 0 (id=524): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40007, 0x1000000005, 0x9b72, 0x2, 0x8000) r1 = userfaultfd$auto(0x1) ioctl$auto(0x3, 0xc018aa3f, 0xf0b) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), r0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x23, 0xa, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r3, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0xa02, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000005, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x28800, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg0\x00', 0x40200, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) mmap$auto(0xfffffffffffffff9, 0x400003, 0x7, 0x9b72, 0x2, 0x8000) ioctl$auto_UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000240)={0x3, 0x8001, [{0xffffffffffffffff, 0x0, 0x9, 0x8000}]}) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) close_range$auto(0x2, 0xa, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) sendfile$auto(r5, r4, 0x0, 0x1000202) 5m24.705518726s ago: executing program 33 (id=519): ioctl$auto_FBIOBLANK(0xffffffffffffffff, 0x4611, 0x0) close_range$auto(0x2, 0xa, 0x0) (async) socket(0xa, 0x2, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) (async) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) socket(0x2, 0x2, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x105000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) bind$auto(r0, 0x0, 0x6a) (async) connect$auto(0x3, 0x0, 0x54) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x404b) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) semctl$auto(0x4, 0x804, 0x13, 0x46) (async) select$auto(0x5, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xf, 0x1, 0x948b, 0x3, 0x7f, 0x3, 0x2008000000003, 0x62, 0x8000001f, 0x100000040007, 0x4, 0x9, 0xfffffffffffffffc, 0xffff]}, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/path_max\x00', 0x0, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/rose12/queues/rx-0/rps_cpus\x00', 0x20001, 0x0) (async) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xfffe) 5m20.540437683s ago: executing program 34 (id=524): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40007, 0x1000000005, 0x9b72, 0x2, 0x8000) r1 = userfaultfd$auto(0x1) ioctl$auto(0x3, 0xc018aa3f, 0xf0b) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), r0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socket(0x23, 0xa, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r3, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0xa02, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000005, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x28800, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg0\x00', 0x40200, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) mmap$auto(0xfffffffffffffff9, 0x400003, 0x7, 0x9b72, 0x2, 0x8000) ioctl$auto_UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000240)={0x3, 0x8001, [{0xffffffffffffffff, 0x0, 0x9, 0x8000}]}) setsockopt$auto(0xffffffffffffffff, 0x1, 0x1021, 0x0, 0xd) close_range$auto(0x2, 0xa, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) sendfile$auto(r5, r4, 0x0, 0x1000202) 2m48.559764679s ago: executing program 5 (id=1056): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x5, 0x100) socket(0x2, 0x2, 0x1) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) 2m47.763676465s ago: executing program 5 (id=1058): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x15, 0x5, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptybd\x00', 0x6202, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) select$auto(0x7, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x2, 0x3, 0x95f4da0a, 0xefffffffffffffff, 0x3, 0x62, 0x80000001, 0x10000000000004, 0x6d40, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x4, 0x1) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe735f26, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc461, 0x80, 0x6, 0x3, 0xfffffffffffffff2, 0x3, 0x1, 0x62, 0x80000022, 0x7, 0x6d42, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0xf87f, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) quotactl_fd$auto(0x0, 0x80000201, 0x0, 0xfffffffffffffffd) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0c/sub0/sw_params\x00', 0x40, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioperm$auto(0xffffffffffffffff, 0x389, 0xd) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb1\x00', 0x20401, 0x0) 2m46.354293782s ago: executing program 5 (id=1069): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) ustat$auto(0x801, 0x0) ioctl$auto_USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0xffffff81) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy1/hwsim/ps\x00', 0x240, 0x0) 2m46.009723163s ago: executing program 5 (id=1070): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) unshare$auto(0x40000080) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000004c0)={[0x203, 0x3, 0xc, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x7fffffff, 0x81, 0x4, 0x9, 0x2]}, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x20cc00, 0x0) read$auto_trace_time_stamp_mode_fops_trace(r0, &(0x7f00000003c0)=""/239, 0xef) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000180), 0x125080, 0x0) write$auto_safesetid_gid_file_fops_securityfs(r1, &(0x7f0000000840)="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", 0x1000) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) madvise$auto(0x0, 0x3, 0x66) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket(0x2, 0x2, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000000c0), r4) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000f9dbdf250100000006000200010000000500070058000000080009000800000008000a000800000008001700", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x0, 0x0) mq_getsetattr$auto(r2, 0x0, 0x0) 2m44.452759778s ago: executing program 5 (id=1076): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001f80), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000000c0)={0x14, r1, 0x59e638bc4fbb3f7d, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48018}, 0x400c880) (async) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x80, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/034/001\x00', 0x88002, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x1, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000340), 0x108800, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) close_range$auto(0x2, 0xa, 0x0) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/vicodec.0/modalias\x00', 0x40, 0x0) (async) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000100)=""/11, 0xb) r4 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) read$auto(r4, &(0x7f0000000280)='\x00Gn\x02\xff\xfdlw,\xaf\xb2?\x13O9\xd915++%\xffah\x88n\xc1U\xc6\xb1\xc1\x9b\xf6s\x0e\x1b\xa0N(F\xf8\xdf\xb4\x858y\xaa\x00\x03\x008~\x03\x96\a\x00\x84h(\x14K\\\xceA\x8eOfeSa\x02T\xba\xceM;9\xa5i\x97[\xd4\r\x92*t\xbc\xfd~\xc40\xbb\x97\x1b\x83\x10\xc0t\x9av\xef\x90\xa4\xb8\v\'\xff\x8c\x1f\xe9U8\x18\xbah\x18\xc5\x85\x8bfKif/\xa4\x9a\xc7],\xb9LW\x18\xb5\xb7\xb8\xe8\xd1\xe1', 0x4) (async) sysfs$auto(0x2, 0x23, 0x0) (async) r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r5, 0x0, 0x4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (async) shmat$auto(0x0, &(0x7f0000000000)='\x9a\x1e2\x8e\xe3o\rJ\x1e\xe3\xb9\x96\x0f\x80\x91\xb8\xb95\x98F\xf8Q\x01\x00\x93^', 0xfffffffa) (async) mremap$auto(0x1ffffffffffe, 0x10, 0x4, 0x80000000000003, 0x100000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x58, 0x0) (async) r7 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) ioctl$auto_UI_SET_EVBIT(r7, 0x40045564, 0x0) close_range$auto(0x2, 0xa, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x1e, 0x4, 0x0) 2m43.941066094s ago: executing program 5 (id=1078): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x14, 0x5, 0x7fc, 0x7fb, &(0x7f00000002c0)}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/netdevsim2/hop_limit\x00', 0x5014c0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800) mmap$auto(0x0, 0x0, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, r0, 0x2007f) r3 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0) write$auto_mousedev_fops_mousedev(r3, &(0x7f0000001380)="22d2", 0xfffffceb) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x108002, 0x0) read$auto_nvram_misc_fops_nvram(r2, &(0x7f0000000380)=""/223, 0xdf) ioctl$auto_NVRAM_INIT(0xffffffffffffffff, 0x7040, 0x0) prctl$auto(0x43, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/stations/08:02:11:00:00:01/rc_stats_csv\x00', 0x2000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x1, 0x4d, &(0x7f0000000180)='\x00\x10\\.\x87\xf8Bw\x9bJx\amt\n\xfe\x9c', &(0x7f0000000040)=0xf7) ioctl$auto_FIONREAD(r4, 0x541b, 0x7ff) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) getdents64$auto(r5, 0x0, 0x18) getdents64$auto(r5, 0x0, 0x18) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x2c02a000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m28.32591436s ago: executing program 35 (id=1078): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000240)={0x23, 0x3, 0x14, 0x5, 0x7fc, 0x7fb, &(0x7f00000002c0)}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv6/conf/netdevsim2/hop_limit\x00', 0x5014c0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x8800) mmap$auto(0x0, 0x0, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, r0, 0x2007f) r3 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0) write$auto_mousedev_fops_mousedev(r3, &(0x7f0000001380)="22d2", 0xfffffceb) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsu\x00', 0x108002, 0x0) read$auto_nvram_misc_fops_nvram(r2, &(0x7f0000000380)=""/223, 0xdf) ioctl$auto_NVRAM_INIT(0xffffffffffffffff, 0x7040, 0x0) prctl$auto(0x43, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/stations/08:02:11:00:00:01/rc_stats_csv\x00', 0x2000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x1, 0x4d, &(0x7f0000000180)='\x00\x10\\.\x87\xf8Bw\x9bJx\amt\n\xfe\x9c', &(0x7f0000000040)=0xf7) ioctl$auto_FIONREAD(r4, 0x541b, 0x7ff) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) getdents64$auto(r5, 0x0, 0x18) getdents64$auto(r5, 0x0, 0x18) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x2c02a000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 14.627146511s ago: executing program 4 (id=1475): r0 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x210840, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, r0, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) (async) socket(0xa, 0x2, 0x0) (async) socketpair$auto(0x1, 0x2, 0xfffffff7, 0x0) (async) open(0x0, 0x149443, 0x0) open(0x0, 0x22240, 0x155) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) ioctl$auto(r2, 0x800064b9, 0x1e6) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) socket(0x2, 0x801, 0x106) (async) socket(0x15, 0x5, 0x0) (async) ioctl$auto_BLKOPENZONE(0xffffffffffffffff, 0x40101286, 0x0) clock_nanosleep$auto(0x2, 0x1, &(0x7f00000000c0)={0x955100000000, 0x3}, &(0x7f0000000140)={0x6, 0x20000000000000}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) 13.608264361s ago: executing program 1 (id=1477): openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace_pipe\x00', 0x68200, 0x0) select$auto(0x5, 0x0, &(0x7f00000001c0)={[0x8, 0x9e7, 0xf, 0x2, 0xe, 0x1, 0x9, 0x4, 0xc68, 0x3, 0x40, 0x8f66, 0x5, 0x9, 0x9, 0x7fffffffffffffff]}, 0x0, 0x0) openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r1) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2004d081}, 0x4010) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, 0x0, 0x20000000) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\xfb\xff\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) 13.542045767s ago: executing program 6 (id=1478): r0 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x29, 0x21, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x26, 0x80805, 0x0) mmap$auto(0xfffffffffffffffc, 0x3, 0x5, 0x10, 0x7, 0x10000) r2 = socket(0x22, 0x2, 0x24) getsockopt$auto(r2, 0x3, 0x1, 0x0, &(0x7f00000000c0)=0x1) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0x40047438, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) getsockopt$auto_SO_PEEK_OFF(r1, 0x2b, 0x2a, &(0x7f0000000000)=',,,(!\x00', &(0x7f0000000040)) ioctl$auto(0x3, 0xff09, 0x0) 13.325504982s ago: executing program 4 (id=1479): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x301c82, 0x0) (async) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x622340, 0x0) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000002180), 0x100, 0x0) socket(0x22, 0x0, 0x84) socket(0x10, 0x4, 0xffffffc0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async, rerun: 64) write$auto(r1, 0x0, 0x98c7) (async, rerun: 64) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0x8000, 0x0) ioctl$auto_EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x2) (async) close_range$auto(r0, 0x8, 0x0) (async) eventfd$auto(0x3) (async) pipe$auto(0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto(0x3, 0x540f, 0x38) (async) socket(0xa, 0x2, 0x88) socketpair$auto(0x1e, 0x1, 0x4, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyya\x00', 0x0, 0x0) 13.32230362s ago: executing program 6 (id=1480): keyctl$auto(0x3, 0xfffffffffffffffd, 0x0, 0xee01, 0xa00002) (async) unshare$auto(0x40000080) (async) write$auto(0xca, 0x0, 0x7f) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$auto_XFS_IOC_ALLOCSP64(r0, 0x40305824, &(0x7f00000016c0)={0x9, 0x8, 0x8, 0x6}) (async) syz_clone(0xc8200, &(0x7f0000001900), 0x0, 0x0, 0x0, &(0x7f0000001a00)="b08dd4f55cef44ebb71e6d4d3b439a076c8fea9e3705ad16d23512786e6430b23227241a6f96") mmap$auto(0x0, 0x2020008, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) rseq$auto(0x0, 0x8000, 0x0, 0x8000006) (async) membarrier$auto(0x4, 0x8000000000000000, 0xffffffff) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001300), 0xffffffffffffffff) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) r1 = prctl$auto(0x3e, 0x80000000001, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xa3, 0xeb1, r1, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) fchdir$auto(r2) (async) shmat$auto(0x0, &(0x7f0000000000)='\x9a\x1e2\x8e\xe3\xb95\x98F\xf8Q\x01\x00\x93^', 0xfff) mkdir$auto(&(0x7f0000000040)='./file1\x00', 0x2) (async) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x414000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f00000001c0)=0x6) (async) unshare$auto(0x40000080) (async) socket(0x1e, 0x1, 0x0) (async) lsm_set_self_attr$auto(0x1, &(0x7f0000000100)={0x68, 0x8, 0x80}, 0x80, 0x0) (async) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0x101500, 0x0) 12.920789104s ago: executing program 4 (id=1482): write$auto_proc_page_owner_threshold_(0xffffffffffffffff, &(0x7f0000000000)="313a0542b2c1ea48c4e69c44dd309d3f5dfd36d87f1ef92d4eea9f7725d20c3adabf607c768603fb09fe6a8d23765408721ab9af02d8c41f9ced0f2c2b7528e3bb93835de15a0bdfc853ee53bf6905d7f3b04d3fa27b26b0e0ed16fa6f845e9ef9915d856d3b835a88f37755130539ebcfd183603ed18ae2041c08e96af98aa82b084168c4ec19173159742a1e4c6425daf4a260921d728bf0cbbd36a6fcb96c28fcdeb752699c79a48f6e29a92ba8e1b11f054a4c21b17ed25fafd0ce9fc3fee5edf2db276da3dc28c878b5e82145db0d89f7f5ce590c5828c7f515581d94", 0xdf) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$auto_PPPIOCDISCONN(r0, 0x7439, 0x0) prctl$auto_PR_SET_MM_START_STACK(0x1, 0x5, 0x0, 0x10000, 0x4) (async) r1 = prctl$auto_PR_SET_MM_START_STACK(0x1, 0x5, 0x0, 0x10000, 0x4) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000a80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000180)={0x884, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x4}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x8}, @NL80211_ATTR_SAR_SPEC={0x144, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS={0x34, 0x2, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x36a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}]}]}, @NL80211_SAR_ATTR_SPECS={0xf4, 0x2, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xffff8001}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1c}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x85}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7fffffff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1ff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x294}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffff9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x10000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x800}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x80000001}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1ff}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0xea}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MLO_TTLM_DLINK={0xbe, 0x148, "3b1aedfb3d9003121101b388795610dd23f80f16250b96544650094209c0b2fd5b92a2313b44a7416d5100374721f59cf7a75513037bdb039bfa149a8ba5d9ac7af459e9bf48fccf1a688e7284c0b588ceea9eefbc85f419d79831f13aea918b314fed506a4f24c53fcd669deec4aaf5eb9c12f995528ff33159ee7738083644d965282ac307edd21e7c126eda9a2d328495143ba332670ead203d8bfc821b158c9be7cf7aec18996a693c3af9530807cd51b6c1e3d08ba40039"}, @NL80211_ATTR_IE_PROBE_RESP={0x65a, 0x7f, "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"}]}, 0x884}, 0x1, 0x0, 0x0, 0x4000800}, 0x200088d0) (async) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000a80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a40)={&(0x7f0000000180)={0x884, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x4}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x8}, @NL80211_ATTR_SAR_SPEC={0x144, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS={0x34, 0x2, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x36a}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}]}]}, @NL80211_SAR_ATTR_SPECS={0xf4, 0x2, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xffff8001}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1c}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x85}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7fffffff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1ff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x294}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffff9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x10000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x800}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x80000001}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1ff}]}]}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0xea}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MLO_TTLM_DLINK={0xbe, 0x148, "3b1aedfb3d9003121101b388795610dd23f80f16250b96544650094209c0b2fd5b92a2313b44a7416d5100374721f59cf7a75513037bdb039bfa149a8ba5d9ac7af459e9bf48fccf1a688e7284c0b588ceea9eefbc85f419d79831f13aea918b314fed506a4f24c53fcd669deec4aaf5eb9c12f995528ff33159ee7738083644d965282ac307edd21e7c126eda9a2d328495143ba332670ead203d8bfc821b158c9be7cf7aec18996a693c3af9530807cd51b6c1e3d08ba40039"}, @NL80211_ATTR_IE_PROBE_RESP={0x65a, 0x7f, "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"}]}, 0x884}, 0x1, 0x0, 0x0, 0x4000800}, 0x200088d0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000b00), r1) (async) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000b00), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000b40)={'pim6reg\x00', 0x0}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r1, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x54, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x3}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x8}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x81}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x81}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) mmap$auto(0x3, 0x8001, 0x81, 0x16, r1, 0x5) ioperm$auto(0xffff, 0x59, 0x3) (async) ioperm$auto(0xffff, 0x59, 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000c80)='/sys/devices/virtual/block/loop2/events_async\x00', 0x800, 0x0) madvise$auto(0x7, 0x10, 0xc6c) (async) madvise$auto(0x7, 0x10, 0xc6c) madvise$auto(0x2, 0x8, 0x9) (async) madvise$auto(0x2, 0x8, 0x9) syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000cc0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000cc0), 0xffffffffffffffff) ioperm$auto(0x1000, 0x10001, 0x80000001) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r1, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x50, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x8ddc}, @THERMAL_GENL_ATTR_THRESHOLD_TEMP={0x8, 0x19, 0x9}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_PERFORMANCE={0x8, 0x16, 0x9}, @THERMAL_GENL_ATTR_CDEV_NAME={0x14, 0x12, 'veth1_macvtap\x00'}, @THERMAL_GENL_ATTR_CDEV_MAX_STATE={0x8, 0x11, 0xffff}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_PERFORMANCE={0x8, 0x16, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x26000881}, 0x40004) setsockopt$auto(r4, 0x9, 0xfffeffff, &(0x7f0000000e40)='NLBL_CIPSOv4\x00', 0x4) mmap$auto(0x2, 0x7, 0x3, 0x13, r0, 0x8) ioctl$auto_PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000e80)=0x2) (async) ioctl$auto_PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000e80)=0x2) unshare$auto(0xfffffffffffffffb) (async) unshare$auto(0xfffffffffffffffb) madvise$auto(0x4, 0x2, 0xffffff81) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000f00), r1) sendmsg$auto_NL80211_CMD_START_NAN(r1, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x48, r5, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2d}, @NL80211_ATTR_S1G_CAPABILITY={0x24, 0x128, "ec9ab0cb54870f2be920ca4c028ee3b0a27547c17296ebe9e232b858512de707"}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$auto_TCP_METRICS_CMD_DEL(r1, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x7c, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @multicast2}, @TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @rand_addr=0x64010102}, @TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @mcast2}, @TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @remote}, @TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @local}, @TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @local}}, @TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x7c}}, 0x0) mq_notify$auto(r0, &(0x7f0000001180)={@sival_int=0xae93, @inferred=r1, 0x6}) setsockopt$auto_SO_REUSEADDR(r0, 0x3, 0x2, &(0x7f00000011c0)=')!+,{\x00', 0x2) connect$auto(0xffffffffffffffff, &(0x7f0000001200)=@llc={0x1a, 0x206, 0x3, 0x1, 0x3, 0x3}, 0x7d1) rename$auto(&(0x7f0000001240)='./file0\x00', &(0x7f0000001280)='./file0\x00') madvise$auto(0x6, 0x9, 0x1) syz_genetlink_get_family_id$auto_gtp(&(0x7f00000012c0), r1) (async) syz_genetlink_get_family_id$auto_gtp(&(0x7f00000012c0), r1) 12.698297804s ago: executing program 4 (id=1484): mmap$auto(0x83, 0x2020009, 0x8, 0xebf, 0xfffffffffffffffa, 0x2) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/lru_gen_full\x00', 0x1c1000, 0x0) r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x10303f, 0x0) ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x801, 0x106) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82) 12.556001729s ago: executing program 1 (id=1485): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/workqueue/nvme_tcp_wq/max_active\x00', 0x182b02, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) select$auto(0x7, &(0x7f0000000000)={[0xc8, 0x8, 0x6, 0x80000000, 0x7, 0x7fff, 0x1, 0x3, 0x19, 0x0, 0x0, 0x7ff, 0x0, 0x3, 0x6, 0x7f]}, &(0x7f0000000080)={[0x7, 0x3, 0x43, 0x5, 0x2, 0x8000000000000000, 0x80000001, 0x7, 0x100000001, 0x2, 0x6, 0x400, 0x4, 0x1, 0x1ff, 0x80000000]}, &(0x7f0000000140)={[0x4, 0x8, 0x8, 0x0, 0x9, 0x7b2, 0xff2d, 0x4, 0x5, 0x4, 0xc, 0x3ff, 0x1000, 0x1a4, 0xffff, 0x7d]}, &(0x7f00000001c0)={0x9, 0x9}) socketpair$auto(0x3, 0x5, 0x7, 0x0) (async) write$auto(0xca, 0x0, 0x2d9) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(0xffffffffffffffff, 0x40085507, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) select$auto(0xfffffff0, &(0x7f0000000200)={[0x8000000000000001, 0x6, 0xc0, 0x9, 0x7, 0x5, 0xdb, 0x530, 0x5, 0x6, 0x9, 0x4, 0x0, 0xff, 0x9, 0x3]}, &(0x7f0000000280)={[0x1, 0x5, 0x374, 0x8000000000000000, 0xfffffffffffffff7, 0x2, 0x2, 0x7, 0x2, 0xdf, 0x1, 0xffff, 0x2, 0x8, 0x10001, 0x7]}, &(0x7f0000000340)={[0x89c3, 0x800, 0x872e, 0x2a, 0x5, 0x7937, 0x4, 0x86, 0xffffffff00000001, 0x4, 0x5, 0x7, 0x8, 0x7, 0x1, 0xfffffffffffffffd]}, &(0x7f00000003c0)={0x4, 0xffffffffffffb3c7}) 12.178360202s ago: executing program 6 (id=1488): unshare$auto(0x4000000a7cf) r0 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0xc0400, 0x0) listen$auto(r0, 0x3) socket(0x9, 0x1, 0x84) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getpid() mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) r1 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r1, 0x65, 0x5, 0x0, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40004) ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f0000000040)={0x0, &(0x7f0000000000)={0xffff, 0x5, 0x7, @raw=0x1}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001f80), 0xffffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x101780, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$auto_VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000002600)={0x0, r4}) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x20300, 0x0) socket(0xa, 0x5, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 12.176097338s ago: executing program 1 (id=1489): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3e8c8ac5, 0xdf, 0x9b72, 0x2, 0x8004) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) dup$auto(r0) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000007c0)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3a8935ae}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000080)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x958b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x40008000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x10000]}, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec29\x00', 0x900, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000100)={"fda256c4", 0x3, 0x6, 0x4, 0x9b4, 0x9, "0800aafc241cd010c7543bfbca2ce1", "0200", '\x00\x00 \x00', "2ff43123", ['\x00', "f8ffffffffffffff00000001", "0004154db00b0004000400", "5fe10eedab2c4b353c392a92"]}) sysfs$auto(0x2, 0x23, 0x0) r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r5, 0x0, 0x4) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) 1.816541376s ago: executing program 4 (id=1491): socket(0x2, 0x2, 0x88) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x1, 0x2020009, 0x1000000000000003, 0xeb1, 0xfffffffffffffffa, 0x8002) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyu2\x00', 0x802, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/ram11/queue/add_random\x00', 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), r0) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf250d0000000c00060001000000000000000800010001"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = epoll_create$auto(0x4) r3 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000001080), r2) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000540)={0x200001, 0x0, 0x14}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) sendto$auto(0x3, 0x0, 0x34000, 0x13f, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) sendmsg$auto_NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r3, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0xc0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4841}, 0x4000) sendmsg$auto_NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x63fe}, @NLBL_MGMT_A_DOMAIN={0x12, 0x1, '7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x7}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x7271d985}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x10}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x4804) io_uring_setup$auto(0x6, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x101401, 0x0) pipe$auto(0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdf3) 1.759111237s ago: executing program 6 (id=1492): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), r0) sendmsg$auto_OVS_VPORT_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_OPTIONS={0x4}, @OVS_VPORT_ATTR_IFINDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r2 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/ieee80211/phy9/netdev:wlan1/stations/08:02:11:00:00:00/last_seq_ctrl\x00', 0x40802, 0x0) close_range$auto(r2, 0xa, 0x7) socket(0x18, 0xa, 0x1) (async) r3 = socket(0x1f, 0x4, 0x600) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) (async) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22240, 0x155) (async, rerun: 64) r4 = socket(0x10, 0x2, 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r5) (async) read$auto(r5, &(0x7f0000000100)='nl80211\x00', 0xbe62) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000003b40)={'veth0_to_hsr\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r7], 0x1ac}}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async, rerun: 32) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r6) (async, rerun: 32) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) socket(0x2, 0x5, 0x0) (async) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.4/usb5/5-0:1.0/bNumEndpoints\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f0000000180)=""/239, 0xef) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) sendmmsg$auto(r3, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xff80}, 0x7, 0x0, 0x2, 0xb}, 0x40000fff}, 0x5, 0x7fffffff) 1.717805091s ago: executing program 1 (id=1493): openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace_pipe\x00', 0x68200, 0x0) select$auto(0x5, 0x0, &(0x7f00000001c0)={[0x8, 0x9e7, 0xf, 0x2, 0xe, 0x1, 0x9, 0x4, 0xc68, 0x3, 0x40, 0x8f66, 0x5, 0x9, 0x9, 0x7fffffffffffffff]}, 0x0, 0x0) openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r1) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2004d081}, 0x4010) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, 0x0, 0x20000000) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\xfb\xff\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) 1.705039531s ago: executing program 7 (id=1494): write$auto(0xffffffffffffffff, 0x0, 0x3) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0xa7c, 0x40eb1, 0xffffffffffffffff, 0x7f) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/discard_zeroes_data\x00', 0xe3142, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram10\x00', 0x49c9c1, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x208701, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x7f, 0x0, [{0x48b, 0x80400, 0x100000000}]}) fanotify_init$auto(0x8, 0x40000005) sendfile$auto(0x1, 0x3, 0x0, 0xc01) mmap$auto(0x20008, 0x18, 0x6, 0xeb1, 0x401, 0x7ffd) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x48002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0x1f40) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x8208ae63, 0x38) socket$nl_generic(0x10, 0x3, 0x10) 1.384778482s ago: executing program 7 (id=1495): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(&(0x7f0000000000)={0x7e, @raw, 0x80000020, 0xd97, 0x2}, 0x0, 0x7ffffffff000, 0x0) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) shmctl$auto_SHM_INFO(0x1000, 0xe, &(0x7f0000000540)={{0x8, 0xee00, 0x0, 0x0, 0xffff, 0x9, 0x10}, 0x4, 0x3, 0x3, 0x0, @inferred, @raw=0x9, 0x4, 0x0, &(0x7f0000000400)="ecd7fd931f6101750eef273f7f60", &(0x7f00000004c0)="a200a82b623ae257b53c64f46455bcbaa12ae75fa4889dc1079c49a469b96e6c4ad92e340fa62d27c0a846d0ecb8abb88bb7bae088fd466677d4d27e9f5dfff8c6b03e0a616b9209c2fc0c421a6054d1e551396e4ee119"}) shmctl$auto_IPC_INFO(0x80000001, 0x3, 0x0) ioctl$auto_XFS_IOC_FREESP(0xffffffffffffffff, 0x4030580b, &(0x7f00000006c0)={0x6, 0x1, 0x0, 0x7, 0x3ff, 0x0}) shmctl$auto_IPC_RMID(0xcbf, 0x0, &(0x7f00000007c0)={{0x8, r1, 0x0, 0x7, 0xfffffffc, 0x7, 0x7}, 0x6, 0x9, 0x4, 0x3, @inferred=0xffffffffffffffff, @inferred=r2, 0x0, 0x0, &(0x7f0000000700)="839b48bde9bd5e68cb7b0c75900bf7865e55fd19caa6360a1866f06732d27746d56bc36001ce074ad7a18da2552af51df4ca7d7caaa638a29cbcec31ab73f2eae57627cf16d97ed0a88b96d4f8d2608021321d520c11c384ecb7f2f44e1a4b878da47ef891992d523fd7c53c14436610e4b937", &(0x7f0000000780)="84f03685ca7f8d7ed6"}) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x6, 0xf, 0xb6e, 0x4, 0x3, 0x96a, 0xfffffffffffffffe, 0x9, 0x5, 0x5, 0x7, 0xb0, 0x9, 0x5, 0x4, 0x5, 0x1, 0x10, 0x0, 0x0, 0x10001, 0x0, 0x2, 0x3, 0x0, 0xfffffffd, 0xfd0, 0x0, [0x0, 0x200000000000000, 0x5, 0x0, 0x4, 0x0, 0x400, 0x0, 0x100000000000, 0xd3, 0x0, 0x40000000000000, 0x2, 0x0, 0xffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x1, 0x800, 0xfffffffffffffffc, 0x2, 0x0, 0x0, 0x0, 0x59f, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd02c, 0x2, 0x0, 0xe]}, 0x10200, 0x82) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r4 = pidfd_open$auto(0x1, 0x0) setns(r4, 0x60020000) msgctl$auto_IPC_INFO(0x7ded, 0x3, &(0x7f0000000180)={{0x1, 0x0, 0xee00, 0x5, 0x9, 0x5, 0x3}, 0x0, 0x0, 0x8, 0x0, 0x7ffffffffffffffc, 0x44, 0x4, 0x5, 0x4, 0x40, @inferred=0xffffffffffffffff, @raw=0x5}) setresuid$auto(r5, 0x0, 0x8000) syz_clone(0x10008000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.07843721s ago: executing program 7 (id=1496): mmap$auto(0x0, 0xfffffffffffffff9, 0x4000000000df, 0xeb2, 0xffffffffffffffff, 0x2) (async, rerun: 32) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) (async, rerun: 32) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)=ANY=[@ANYBLOB="88120000", @ANYRESOCT=r0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="734a876aa29b0877d493e5227c137e1a990b8b782049218d349441c21f23170613015579f29ee902f9c2388c408b595db629b83e27d874bf6d7ae93f84828698fe30ba5d42734269e07bcceb6b7a47b83245f96d4790d73596a2b559ad7c85278728d8e1a55e9d0a3f312fb9463dc5b1d85846e7289b5988b761fb263925105db3684eaf210ce936eb0e61f2f853357b9b995bd909fc9f8e85a672bbc21d8e04c2dffd97b55818bc913196bf863ecaf0929215468edb307eb24a9dffb78b03d6a58927ff490700000008000a00070000000c00028008001000e600000008000a00c066ffff0500090001000000"], 0x1288}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) syz_genetlink_get_family_id$auto_macsec(0x0, r0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4db0a, 0x3, 0x3, 0x62, 0x80000001, 0x9, 0x7, 0x9, 0x1, 0xfffffffffffffffc]}, 0x0) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) mmap$auto(0x0, 0x1000000000000007, 0x40000000000000d, 0x11, r0, 0x8000) (async) write$auto(0x3, 0x0, 0x100082) (async) ioctl$auto_SG_GET_NUM_WAITING(r3, 0x227d, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/pcm\x00', 0x2, 0x0) pread64$auto(r4, 0x0, 0x594c, 0x9fffffffd) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) fdatasync$auto(r4) (async) socket(0x2d, 0x2, 0x0) (async, rerun: 64) socket(0x1e, 0x1, 0x0) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x8, 0xdf, 0xb90, 0x2, 0x8000) io_uring_setup$auto(0x100, 0x0) (async, rerun: 64) socket(0x2b, 0x1, 0x0) (async, rerun: 64) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x42080, 0x0) 953.531576ms ago: executing program 7 (id=1497): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x3d, 0x0) (async) r0 = fsopen$auto(0x0, 0x8) (async) r1 = openat$auto_ftrace_event_id_fops_trace_events(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/id\x00', 0x80000, 0x0) read$auto_ftrace_event_id_fops_trace_events(r1, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x85, 0x0) close_range$auto(0x0, 0xfffff004, 0x2) socket(0xa, 0x2, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x2, 0x88) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x4, 0xf, r3, @relative_fd, 0xe600}, 0xf) (async) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x4) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r6 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) r7 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_EPS_INFO(r7, 0x83c0550b, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nbd4/queue/rq_affinity\x00', 0xae601, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) write$auto(0x3, 0x0, 0x100082) getsockopt$auto(0x3, 0x200000000001, 0x19, 0x0, 0x0) (async) r8 = setfsgid$auto(0xee00) fsconfig$auto(r0, 0x3, &(0x7f0000000200)='Q**\x00W\xdd\xb6\x1f\xd0\xc4\x05X\x9b\xb1NQ\xec\x88\xbe\xb8\xb6\x92\xd4\xd5\xa0u\xdaP\xfc_\xb88\xe8\x8e\xae\xc5[\x88\xd4\xd1\x10-\x94\xba\xc3\xe4\xe9\xa2W\x14\x96\xf5HbI\xa9MU\x94\xf9\x90\'\xf4B\x93N\xbaD\x8c^\xc6\x97.\xde\xcfg\x98\xab\x9a-T\xf1\x9c\x1f\xf24\x8b])\t\xf7\xc1\x06} \x7f\x1b3\xed\xe1b[\xec\x87\x93\xb1\xdd\x1e^h\xaa\xa9w\xa1\xc7\xbe\xdd\xfed\x9e\nH\f\xcd\xbc6\xfc\x1d\xfe\x9e\xdf7\x0eq\xcez\xfe\xcd\x9cb\n\x9f\x880\xf7\x81B3\xcfO\xfa\x81\xf64\x03\x92\x7fITo\xd9\x99FP\x12\x04\xd6,\x88\x02\x00\xb7\xfc\xb5f\xc62[\xf3\xad\xbb\x98\xa3\xae\x80(\xc35\f7n9}\x8b8+?\x00\xbd\xc6z\xf6Q3\vw\x8b\v\x98\x96\xa2\xa1', &(0x7f0000000040)='+$', r8) (async) r9 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/hsr0/ndisc_notify\x00', 0x244202, 0x0) pwrite64$auto(r9, &(0x7f0000000040)='/proc/sys/user/max_fanotify_g\b\x00\x00\x00s@', 0x7, 0x7) (async) read$auto_clk_summary_fops_(r6, &(0x7f0000000140)=""/131, 0x83) 934.004308ms ago: executing program 7 (id=1498): r0 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = gettid() (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r2 = socket(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) kill$auto(r1, 0x11) (async) r3 = prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4) (async) mmap$auto(0xffffffffffdffffc, 0xfcf, 0x1, 0xeb2, 0xffffffffffffffff, 0x20000007) (async) socket(0xa, 0x2, 0x0) (async) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r4, 0x5001, 0xfffffffffffffffc) (async) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r3, 0xc0385720, &(0x7f0000000140)={0x2, "da1547c1", 0x800, 0xffff, 0x9, 0x1db, "073d61835eeeb884a265d7f5e3b12b22"}) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mmap$auto(0x0, 0xfffffbfffffffffe, 0xdf, 0x9b72, r4, 0x28004) (async) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x80000, 0x0) (async) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) (async) connect$auto(r3, &(0x7f0000000040)=@l2tp={0x2, 0x0, @private=0xa010100, 0x2}, 0xf) (async) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) (async) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/43:352/strict_limit\x00', 0x100b02, 0x0) sendfile$auto(r7, r7, 0x0, 0x3) ioctl$auto(r0, 0x5, r0) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, r7, 0x3) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3d, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) (async) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 742.79398ms ago: executing program 6 (id=1499): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) r1 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) bpf$auto(0x1000, &(0x7f00000000c0)=@prog_bind_map={r1, r0, 0x4}, 0x5) ioctl$auto(r0, 0x64c2, 0x1e2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000005340), 0xffffffffffffffff) getpid() sendmsg$auto_OVS_FLOW_CMD_NEW(r2, &(0x7f00000054c0)={0x0, 0x0, &(0x7f0000005480)={&(0x7f0000000240)={0x15c, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_ACTIONS={0x4}, @OVS_FLOW_ATTR_KEY={0x13f, 0x1, 0x0, 0x1, [@typed={0x4, 0x130}, @nested={0xc8, 0xc1, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="09881699bfdb56c8649cdd117e47bae00ee51f23c454e1e22645567263", @generic="b3bbfc0c2a42e8ce8d8ef5045e6e5670c6f9e9d929d11df98dcb584b614bb69528515ed56af2a424e8deb4a3c22d84f4db703e8a89fa253e62a23303f92fbea84561ac47f80afb780857c4682042ec1710f6e7246449e9f103ca7efb941138493fa57d54fd173aaaf55d6063dab0150f4e3e2ac76f8c319fc5b37a1a022cf63e3ff4aaf0ea16265ac09ead", @typed={0x8, 0xb7, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0xc, 0x10f, 0x0, 0x1, [@typed={0x8, 0x58, 0x0, 0x0, @u32=0x9}]}]}, @typed={0x4, 0xf2}, @generic="6e7c0ec678791ef560f75488ddf551cdf4d045e083a659b90cdd3b5e2a134a865fb740efe7e86cbef172ae887c98233152b49c51004abc41ee2aacbc961abddcba325cca5a3a716d7366f46fdc5a1875410abae4bd298a24aaf8c14c3a0544f162c49f03fe0f58ad1d38e0"]}, @OVS_FLOW_ATTR_ACTIONS={0x4}]}, 0x15c}}, 0x20008844) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r2) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) (async) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) (async) bpf$auto(0x1000, &(0x7f00000000c0)=@prog_bind_map={r1, r0, 0x4}, 0x5) (async) ioctl$auto(r0, 0x64c2, 0x1e2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000005340), 0xffffffffffffffff) (async) getpid() (async) sendmsg$auto_OVS_FLOW_CMD_NEW(r2, &(0x7f00000054c0)={0x0, 0x0, &(0x7f0000005480)={&(0x7f0000000240)={0x15c, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_ACTIONS={0x4}, @OVS_FLOW_ATTR_KEY={0x13f, 0x1, 0x0, 0x1, [@typed={0x4, 0x130}, @nested={0xc8, 0xc1, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="09881699bfdb56c8649cdd117e47bae00ee51f23c454e1e22645567263", @generic="b3bbfc0c2a42e8ce8d8ef5045e6e5670c6f9e9d929d11df98dcb584b614bb69528515ed56af2a424e8deb4a3c22d84f4db703e8a89fa253e62a23303f92fbea84561ac47f80afb780857c4682042ec1710f6e7246449e9f103ca7efb941138493fa57d54fd173aaaf55d6063dab0150f4e3e2ac76f8c319fc5b37a1a022cf63e3ff4aaf0ea16265ac09ead", @typed={0x8, 0xb7, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0xc, 0x10f, 0x0, 0x1, [@typed={0x8, 0x58, 0x0, 0x0, @u32=0x9}]}]}, @typed={0x4, 0xf2}, @generic="6e7c0ec678791ef560f75488ddf551cdf4d045e083a659b90cdd3b5e2a134a865fb740efe7e86cbef172ae887c98233152b49c51004abc41ee2aacbc961abddcba325cca5a3a716d7366f46fdc5a1875410abae4bd298a24aaf8c14c3a0544f162c49f03fe0f58ad1d38e0"]}, @OVS_FLOW_ATTR_ACTIONS={0x4}]}, 0x15c}}, 0x20008844) (async) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r2) (async) 697.459006ms ago: executing program 4 (id=1500): socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000002840)='/sys/kernel/tracing/trace_clock\x00', 0x8000, 0x0) (async) r1 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000002840)='/sys/kernel/tracing/trace_clock\x00', 0x8000, 0x0) preadv$auto(r1, &(0x7f0000002940)={&(0x7f0000002880), 0xa93a}, 0xf, 0x1, 0x6) (async) preadv$auto(r1, &(0x7f0000002940)={&(0x7f0000002880), 0xa93a}, 0xf, 0x1, 0x6) read$auto(r0, 0x0, 0x20) (async) read$auto(r0, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x8, 0xdf, 0x9b70, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x80000, 0x0) (async) socket(0xa, 0x80000, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x2a, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/if_inet6\x00', 0x0, 0x0) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0xc) read$auto_proc_pagemap_operations_internal(0xffffffffffffffff, &(0x7f0000001540)=""/209, 0xd1) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) ioctl$auto_IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000040)={0x8001, 0x1, 0x1, 0x824}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vhci_hcd.15/usb39/descriptors\x00', 0xa35e9e37707e0cc2, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x6}, 0x1) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x6}, 0x1) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd7000fcdbdf2516000000080001000900000008000e00394100000c001700050000000000000005001200070002000600090006000000060009000a000000050013000900000005000700060000000500070006000000b34c90"], 0x60}}, 0x4014) r4 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x571802, 0x0) write$auto(r4, 0x0, 0x881) (async) write$auto(r4, 0x0, 0x881) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), 0xffffffffffffffff) 678.693424ms ago: executing program 1 (id=1501): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) readahead$auto(r0, 0x4, 0x4) sysfs$auto(0x1003, 0x401, 0x0) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f0000000200)='/de\xef\xe7a=v^\x951\x00\f\'\x8b\xd9\xfeN\xcd#)\x8c\x89>-o\xd7\x8f$\xac\xfc\xa2\xccm\x0e \xfb\xe5\xe9\x92\xaa\xef\x84$\x84Ia>6pV;{\'\xaa\xbeC\x14\xb6\xd2\xf6\xb7\xcd\xf6P\x05X\x1dK\x18\x99\x02\xb3\x0fY0\x80\x99\xe3\x0e\xa2D\xc0\xecE\x86\xd9J\x9c\xa8\x98\x02\xdb\xf1\x81TMpS\xc5\xab\xa1\x1bG\v>\x03\xf7\xe1\xaf\xe3\x04\xc3 ffF\x0f\xa6}\xa3\xa8\xd1\xe2\xd0QG\xa6\xa6\x8e7\x80\xd9\xd0\xdf\xad\xb1\x15\xca\xbb\xd5j\x94\xc6<\x18\x15\xcc\x8d\x14\xd8\xb8L\x03\xdd~\xe7%\xcb\xdd\xda!\xd45Z\xd0\xfc\x1b\xf0\xe1\xd6:\xd7\xe9N\xc1W\xe3\xae\xe9\xb27>k\xf8\xdf\xe1\xf9\xcc\xcb\v\x01D\xc3\xa9T\xb9UY\xaf\xa4\xe4\xfec\xa3\x9bI@\xb7w\xf8\x14\xc0\xd5\xd5\x95\a\xf5e\xfa\x94M\xb8%a\xa53fc\x95\'\xedc\xc5\xad\x7fM\xb4\xf39\x82\xdf8Y)\x8e\xa6\x0e[\xe1\x88\x1d\x0f[j\xe9\x83\x11\x1e\xca2\xba\xdb\xe4\b%\n\xcb\xbar\xf8\x84\xb0\x00$V\xa6`;\xfao\xe6A\x1b\xf2d\xfc\xb4}\xecP\x80h\xfb\x9f3e}\x8edq\x86\x00\xe0bb\x16\xb1kM\xc6GW#-\xf6\x17$BW\x83J\xd7g\xf1\xc0\xbf\x03>\xf2\xeb g\xb7\x14\xc6\xc7\xc9]\xce.\x82Y\x98\tg\v\x11a\v\xb4\xab\x12\xc7', 0x8) mmap$auto(0x0, 0xdf33, 0xe2, 0xeb1, 0x405, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/self/net/ip_vs_conn\x00', 0x20440, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x23, 0x0) fsopen$auto(0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r2, &(0x7f00000056c0)={0x0, 0x0, &(0x7f0000005680)={&(0x7f0000000200)={0x1c, r3, 0xbb484b3ccf0b22b, 0x70bd2b, 0x25dfdbfc, {}, [@MACSEC_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x40094) close_range$auto(r1, r2, 0x20008000) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_CREATE_VM(r4, 0xc048aeca, 0x0) 352.974707ms ago: executing program 6 (id=1502): socket(0x2b, 0x1, 0xfffffffe) (async) bind$auto(0x3, &(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x3}}, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}, 0x54) (async) fanotify_init$auto(0x4f5, 0xde9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x2c2580, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(0xffffffffffffffff, 0xc1004111, 0x0) (async) r1 = fcntl$auto_F_WRLCK(r0, 0xfffffffe, 0x1) (async, rerun: 64) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0040, 0x0) (async, rerun: 64) mmap$auto(0x1, 0x2020009, 0x4, 0xeb1, 0xfffffffffffffffa, 0x6) (async) close_range$auto(0x2, 0x8, 0x0) read$auto_nvmf_dev_fops_fabrics(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000) ioctl$auto_SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) (async) socket(0xa, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(r1, 0x8, 0x0) (async, rerun: 64) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (rerun: 64) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0xc048aeca, 0x0) (async) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x308, 0x0) (async) write$auto(r4, &(0x7f0000000ec0)='/Eev/Audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xff\xffd\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\xdcn\x89C:\x91\xfd\x02\xda\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1a\xca%\x12\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>b\xb8&\x959-\n\xcc\xfd\xff\xff\xff\xff\xff\xff\xff\xca,\x95k8\x83\xcf\xc5D\xcc5\xc6\x16\xb9i?\x15\xad\xdd\xb2_\xb8B\xb8\x9b\x99\xdd\xe0G\x85SP&7\xe3~K\v\xa9(Vo\xe1 \xd8\xb9\xb3NSu\x8f\xf2fH\xe2^{zV\xfe+j9jqt=\x1b\x88*\xc4u\x8b\xe3q!\xa6\'\xda[iZ\xe7\x85\xe9tU\x81(WUP\xfd\x02m\x7f\x95\x93H\x90\xceoh\x87C)\xc6\xb2\x8f\xb9X\x8e\x90\xa2\xab\x15`\x8d\xde\x8d\x93\x8f\fN/\xc5\x1e\xb4\x15mlc\xa4z\x89\xc7>\x8esb\xbf\xf1\"\xc1(\x1f+~\xe1\xb36WS\xd7\x7f\xff\xce1M\x17\xb4\xf0\xf9\xc1\x12L\xac\xbc\xb0]\vg\xcf\x0e\xc6\x93\x12\xf43\xbaw\x8b\xa9\xd5\xe3\x11n\x85\xf0\xc7\xcf&\x87\xc7#u\xbep+4,\x05n\xb8~\xca\x92;\x12o\x9e|\xb958i*\xaeC\x04\x90\xe2\xe9\xa0UI\xe3b\x89o\xccb(r\xd6\x8a\xe6D\xe5\x91?\xbd<\x18C;:\xb7A\"\xd4v \x1c/O\xf6H\xd9\x80\xeb6x\xa8\xac\xaf8F2\xde\xec9\n\xfd\v*p\xa9\xb4t]\xaf$\x95\x1cpq\xc9e\x89\x97\xc1\nB\x00\xb5<3J\xc7&\\\xd6\tT\a\x9c\v\x92H\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdp\b\xe2\xdc!\xe1\xa9htk\xaf\xe2\xc2B\'w\xd3Q\xb2\x01@v\xdbB\xd973\xa9\x18\xd1\x83Z\xcf(\xda%\x0fV\xc8Q\x05jPk\xa9\xb5\xa4\x8b\x9eA7\xbd\a]\x049~n\xe7eb\xcbJtjQ&\xe2LkAU\xe4[Og)wW\xf6ZH\xbfP.\xac\x9a\x8aj\xb9\xedk\xadRs\x87\xb6\x0e\x15#\x16\x03\xba,\x19y\x84\x17h\x96\x9c\x06\x83p\xf3\x8cU\xb7\x87\xcb\x80}\xb4\xb0dr\x88\xca1\xe9\'\xcdt\xe1l\xfcf l\x9dB>\x11\x16g;\xbb\x04\x9aF#\x891\xe1\xc5C\'\xc4\xcdC7\xe7\xd2\xca\xa2\xe29\xaf\xec\x1a8\v\x94\x80\x02\xa5\xaa2\x8eR\xe9le\xc2\xb3\xe0\x16P\xd6\xc7vQ\xf9\x86N\x1e\xbd\r\x1cF\xd8\x8bg\xcaa\f\xa1\xf7\x1a\x8e/\xfd\xc9c\xa8\v\xa1\x8d\xc4\xe9\x87\xb9\x0f\xfe\x8e\xc8\x06\x8d\x98:\xe3y\x1e\x10F\x8c-\x81\x83\xc5\xafZ\xf2\xf2g\x9e\x05\x10\x15\x95\x86\r\x97?\xc5Zl\xedR\x91\xca\xda\x90\x02\x9a\xfc\xdb\xc6\'\xc6B\xf4\xa6\xbe\xbd\xa0T\xb1\x89\xa8C;\xbc\xc4A\x9d\x18@\x98\x81\x8c\xc6\x90N\xc2\x8cP\xdc~\xe7\b\\\x1eC\xf1\xd1Y\xba\xa6\xc6<\xb6_\xce\xb7\xf4\xff\xe4or\x1b\xdb\xaa\xdd(\x85\x16\x1a\xb90\xb0\x84\xeb\xeake\x8e9y\x17\xfeH\xf9\xb9\x9c\xcd<\xb4\xe8B_\x9c\x12\x13\xa7\xa4H?\xa2\xcc}\x03\bj(\xeb}S\x94F\xfa-@n\xd7r\x8d\x91\xb4I\x12\x9d^%\xc8\xb8\xeb\xfc5R\xba\xb4\xf6/\v\xd8y\x88g\xc0J\xa3.\xf1\x00\xf0\x8b\xd7\x9fO\xf8\x12\xe3\x1f%\x9d\xa3\xdb\xc26i\xf2+\xd2u-{\x8f\xf9\xd6\a#\x0e\xdd\x12\x81\xb6h!S\xa15B\xc3\x066\x8c\x1c', 0x100000a3d9) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyrf\x00', 0x80400, 0x0) 4.748069ms ago: executing program 1 (id=1503): mmap$auto(0x0, 0x400008, 0xdf, 0x9b32, 0x2, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) prctl$auto_PR_SET_MM_END_CODE(0x0, 0x2, 0xffffffffffffffff, 0xc, 0x101) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000700)='/proc/thread-self/net/kcm_stats\x00', 0x60080, 0x0) pread64$auto(r1, 0x0, 0x8, 0xffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r2, r3, 0x0, 0x1) fstat$auto(r0, 0x0) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x28c602, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x4610, 0x0) 0s ago: executing program 7 (id=1504): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = gettid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) kill$auto(r0, 0x11) (async) kill$auto(r0, 0x11) prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4) mmap$auto(0xffffffffffdffffc, 0xfcf, 0x1, 0xeb2, 0xffffffffffffffff, 0x20000007) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0xfffffffffffffffc) (async) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0xfffffffffffffffc) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mmap$auto(0x0, 0xfffffbfffffffffe, 0xdf, 0x9b72, r2, 0x28004) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) connect$auto(r2, &(0x7f0000000040)=@l2tp={0x2, 0x0, @private=0xa010100, 0x2}, 0xf) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) (async) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20c01, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/43:352/strict_limit\x00', 0x100b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) (async) sendfile$auto(r6, r6, 0x0, 0x3) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3d, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_clone3(&(0x7f0000000380)={0x1a8040100, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0), {0x3d}, &(0x7f0000000440)=""/242, 0xf2, &(0x7f0000000200)=""/147, &(0x7f0000000340)=[r0, r0, 0x0, 0x0, r0], 0x5, {r5}}, 0x58) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3, 0x208000001f, 0x2, 0x6d3c, 0x9, 0x2, 0x6]}, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r7 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(r7, 0x0, 0x80000001, 0x0) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    syzkaller syzkaller login: [ 409.639431][T11473] kernel read not supported for file /gMQ_g _N{7vGlq wĉu}OUVW.uw.`O:KdYѮaj7nwKQHg[壣%'ϖX:DktހX [$O8 bŹ9F@eMU;$Q8҇ŝ赵DtS^0YJpu (pid: 11473 comm: syz.5.970) [ 409.668027][ T30] audit: type=1800 audit(6051286060.033:36): pid=11473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.970" name=BEF282E71467B5EE4D5113A25F67BF09FAF25F4EB07BF9B53776EE47D96CBF8671207796D9E9A8E1F0C71F1EC4C4897583E87DBD7F4F91C15556572EB6AD047502772EEC604FC10E15E73AC91B4BCD64590395D1AEC19B969F616AD2FCFC1F37AFCA6EF6C0774BCEE751AEC9486701EFDA5BE5A3A325278FCF96583A04446B747FDE8001DD589188A109C3F1FE5B93244F382062B492F4BCC5B99839FC46ECDC40DDDA654DE055C83BF5E7245138D287DDC59DC5E8B5B5B8DF44D0E8748A53AABEAABA9E5E301AF859F54A700875BA98 dev="mqueue" ino=36343 res=0 errno=0 [ 410.425049][T11488] block2mtd: device name too long [ 410.539412][T11490] input input24: cannot allocate more than FF_MAX_EFFECTS effects [ 410.583786][ T30] audit: type=1800 audit(6051286060.943:37): pid=11490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.973" name="discovery_nqn" dev="configfs" ino=36908 res=0 errno=0 [ 411.600839][T11518] Line length is too long: Should be less than 4094 [ 413.775042][T11573] FAULT_INJECTION: forcing a failure. [ 413.775042][T11573] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 413.853658][T11573] CPU: 1 UID: 0 PID: 11573 Comm: syz.6.991 Not tainted syzkaller #0 PREEMPT(full) [ 413.853704][T11573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 413.853726][T11573] Call Trace: [ 413.853737][T11573] [ 413.853750][T11573] dump_stack_lvl+0x16c/0x1f0 [ 413.853802][T11573] should_fail_ex+0x512/0x640 [ 413.853859][T11573] should_fail_alloc_page+0xe7/0x130 [ 413.853907][T11573] prepare_alloc_pages+0x3c2/0x610 [ 413.853957][T11573] ? arch_stack_walk+0xa6/0x100 [ 413.853997][T11573] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 413.854047][T11573] ? stack_trace_save+0x8e/0xc0 [ 413.854085][T11573] ? __pfx_stack_trace_save+0x10/0x10 [ 413.854123][T11573] ? stack_depot_save_flags+0x29/0x9c0 [ 413.854174][T11573] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 413.854218][T11573] ? kasan_save_stack+0x42/0x60 [ 413.854255][T11573] ? kasan_save_stack+0x33/0x60 [ 413.854290][T11573] ? kasan_save_track+0x14/0x30 [ 413.854326][T11573] ? __kasan_slab_alloc+0x89/0x90 [ 413.854365][T11573] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 413.854403][T11573] ? security_inode_alloc+0x3b/0x2b0 [ 413.854440][T11573] ? inode_init_always_gfp+0xce4/0x1030 [ 413.854482][T11573] ? do_syscall_64+0xcd/0x490 [ 413.854525][T11573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.854568][T11573] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 413.854631][T11573] ? policy_nodemask+0xea/0x4e0 [ 413.854680][T11573] alloc_pages_mpol+0x1fb/0x550 [ 413.854727][T11573] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 413.854782][T11573] ? sk_prot_alloc+0x1a8/0x2a0 [ 413.854831][T11573] ___kmalloc_large_node+0xed/0x160 [ 413.854886][T11573] ? sk_prot_alloc+0x1a8/0x2a0 [ 413.854936][T11573] __kmalloc_large_node_noprof+0x1c/0x70 [ 413.854991][T11573] __kmalloc_noprof.cold+0xc/0x61 [ 413.855049][T11573] sk_prot_alloc+0x1a8/0x2a0 [ 413.855106][T11573] sk_alloc+0x36/0xc20 [ 413.855149][T11573] can_create+0x1e5/0x600 [ 413.855195][T11573] __sock_create+0x335/0x8d0 [ 413.855235][T11573] __sys_socket+0x14d/0x260 [ 413.855270][T11573] ? __pfx___sys_socket+0x10/0x10 [ 413.855303][T11573] ? xfd_validate_state+0x61/0x180 [ 413.855350][T11573] ? __pfx_ksys_write+0x10/0x10 [ 413.855396][T11573] __x64_sys_socket+0x72/0xb0 [ 413.855428][T11573] ? lockdep_hardirqs_on+0x7c/0x110 [ 413.855471][T11573] do_syscall_64+0xcd/0x490 [ 413.855519][T11573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.855552][T11573] RIP: 0033:0x7fbf4e78ebe9 [ 413.855579][T11573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.855619][T11573] RSP: 002b:00007fbf4f5c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 413.855651][T11573] RAX: ffffffffffffffda RBX: 00007fbf4e9b6180 RCX: 00007fbf4e78ebe9 [ 413.855672][T11573] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000001d [ 413.855691][T11573] RBP: 00007fbf4e811e19 R08: 0000000000000000 R09: 0000000000000000 [ 413.855710][T11573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.855729][T11573] R13: 00007fbf4e9b6218 R14: 00007fbf4e9b6180 R15: 00007fffc9ef7818 [ 413.855771][T11573] [ 414.295968][T11579] IPVS: length: 7562853 != 24 [ 414.620034][T11584] hugetlbfs: syz.5.992 (11584): Using mlock ulimits for SHM_HUGETLB is obsolete [ 414.821346][T11287] Bluetooth: hci4: unexpected event 0x01 length: 5 > 1 [ 416.833591][T11634] Invalid ELF header magic: != ELF [ 417.441981][T11649] netlink: 'syz.4.1005': attribute type 2 has an invalid length. [ 417.450228][T11649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1005'. [ 421.943860][T11762] FAULT_INJECTION: forcing a failure. [ 421.943860][T11762] name fail_futex, interval 1, probability 0, space 0, times 0 [ 422.008599][T11762] CPU: 1 UID: 0 PID: 11762 Comm: syz.5.1025 Not tainted syzkaller #0 PREEMPT(full) [ 422.008644][T11762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 422.008663][T11762] Call Trace: [ 422.008674][T11762] [ 422.008686][T11762] dump_stack_lvl+0x16c/0x1f0 [ 422.008747][T11762] should_fail_ex+0x512/0x640 [ 422.008814][T11762] get_futex_key+0x1d0/0x1560 [ 422.008860][T11762] ? __pfx_get_futex_key+0x10/0x10 [ 422.008917][T11762] ? __pfx_css_rstat_updated+0x10/0x10 [ 422.008966][T11762] futex_wake+0xea/0x530 [ 422.009021][T11762] ? __pfx_futex_wake+0x10/0x10 [ 422.009072][T11762] ? do_user_addr_fault+0x829/0x1370 [ 422.009135][T11762] ? do_user_addr_fault+0x843/0x1370 [ 422.009194][T11762] do_futex+0x1e3/0x350 [ 422.009238][T11762] ? __pfx_do_futex+0x10/0x10 [ 422.009278][T11762] ? irqentry_exit+0x3b/0x90 [ 422.009322][T11762] ? lockdep_hardirqs_on+0x7c/0x110 [ 422.009375][T11762] __x64_sys_futex+0x1e0/0x4c0 [ 422.009422][T11762] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 422.009472][T11762] ? __pfx___x64_sys_futex+0x10/0x10 [ 422.009520][T11762] ? syscall_user_dispatch+0x78/0x140 [ 422.009586][T11762] do_syscall_64+0xcd/0x490 [ 422.009635][T11762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.009670][T11762] RIP: 0033:0x7f408378ebe9 [ 422.009695][T11762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.009729][T11762] RSP: 002b:00007f40846110e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 422.009769][T11762] RAX: ffffffffffffffda RBX: 00007f40839b6188 RCX: 00007f408378ebe9 [ 422.009791][T11762] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f40839b618c [ 422.009813][T11762] RBP: 00007f40839b6180 R08: 00007f4084654000 R09: 0000000000000000 [ 422.009835][T11762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.009857][T11762] R13: 00007f40839b6218 R14: 00007ffcfca0d820 R15: 00007ffcfca0d908 [ 422.009900][T11762] [ 422.998251][T11767] blktrace: Concurrent blktraces are not allowed on ram7 [ 423.689713][T11781] netlink: 25520 bytes leftover after parsing attributes in process `syz.5.1029'. [ 423.699267][T11781] netlink: zone id is out of range [ 423.715771][T11781] netlink: zone id is out of range [ 423.801236][T11781] netlink: zone id is out of range [ 423.852822][T11781] netlink: zone id is out of range [ 423.859051][T11781] netlink: zone id is out of range [ 423.865731][T11781] netlink: zone id is out of range [ 423.872479][T11781] netlink: zone id is out of range [ 423.878976][T11781] netlink: zone id is out of range [ 423.886132][T11781] netlink: zone id is out of range [ 423.893669][T11781] netlink: zone id is out of range [ 429.024380][T11887] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1048'. [ 429.126635][T11887] bridge0: entered allmulticast mode [ 431.054452][T11938] Invalid ELF header magic: != ELF [ 431.465624][T11938] can: request_module (can-proto-0) failed. [ 434.302516][T12011] raw_sendmsg: syz.6.1073 forgot to set AF_INET. Fix it! [ 437.692873][T12053] Process accounting paused [ 450.453441][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.460127][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.500962][ T9188] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 451.511002][ T9188] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 451.526436][ T9188] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 451.536730][ T9188] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 451.544981][ T9188] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 453.462720][T12235] chnl_net:caif_netlink_parms(): no params data found [ 453.646688][ T9188] Bluetooth: hci3: command tx timeout [ 453.788076][T12267] net_ratelimit: 63 callbacks suppressed [ 453.788101][T12267] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 454.202125][T12235] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.266443][T12235] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.297255][T12235] bridge_slave_0: entered allmulticast mode [ 454.344090][T12235] bridge_slave_0: entered promiscuous mode [ 454.364505][T12235] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.376754][T12235] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.384065][T12235] bridge_slave_1: entered allmulticast mode [ 454.396141][T12235] bridge_slave_1: entered promiscuous mode [ 454.621990][T12288] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1121'. [ 454.691368][T12235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.756940][ T9188] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 454.756977][ T9188] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 454.774085][ T9188] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 454.774141][ T9188] Bluetooth: hci1: adv larger than maximum supported [ 454.781526][ T9188] Bluetooth: hci1: adv larger than maximum supported [ 454.788345][ T9188] Bluetooth: hci1: Unknown advertising packet type: 0x55 [ 454.795039][ T9188] Bluetooth: hci1: Malformed LE Event: 0x0d [ 455.732404][ T9188] Bluetooth: hci3: command tx timeout [ 455.749599][T12235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.983319][T12235] team0: Port device team_slave_0 added [ 456.017509][T12235] team0: Port device team_slave_1 added [ 456.109834][T12235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.126454][T12235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.210285][T12235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.316435][T12235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.324003][T12235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.403276][T12235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.568818][T12304] FAULT_INJECTION: forcing a failure. [ 456.568818][T12304] name failslab, interval 1, probability 0, space 0, times 0 [ 456.582335][T12304] CPU: 1 UID: 0 PID: 12304 Comm: syz.1.1126 Not tainted syzkaller #0 PREEMPT(full) [ 456.582380][T12304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 456.582401][T12304] Call Trace: [ 456.582412][T12304] [ 456.582423][T12304] dump_stack_lvl+0x16c/0x1f0 [ 456.582474][T12304] should_fail_ex+0x512/0x640 [ 456.582544][T12304] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 456.582588][T12304] should_failslab+0xc2/0x120 [ 456.582633][T12304] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 456.582671][T12304] ? rcu_is_watching+0x12/0xc0 [ 456.582703][T12304] ? seq_open+0x55/0x170 [ 456.582756][T12304] seq_open+0x55/0x170 [ 456.582804][T12304] __seq_open_private+0x3e/0xd0 [ 456.582855][T12304] pid_numa_maps_open+0x29/0xf0 [ 456.582894][T12304] do_dentry_open+0x982/0x1530 [ 456.582935][T12304] ? __pfx_pid_numa_maps_open+0x10/0x10 [ 456.582981][T12304] vfs_open+0x82/0x3f0 [ 456.583053][T12304] path_openat+0x1de4/0x2cb0 [ 456.583108][T12304] ? __pfx_path_openat+0x10/0x10 [ 456.583160][T12304] do_filp_open+0x20b/0x470 [ 456.583210][T12304] ? __pfx_do_filp_open+0x10/0x10 [ 456.583266][T12304] ? __pfx_kfree_link+0x10/0x10 [ 456.583331][T12304] ? alloc_fd+0x471/0x7d0 [ 456.583381][T12304] do_sys_openat2+0x11b/0x1d0 [ 456.583434][T12304] ? __pfx_do_sys_openat2+0x10/0x10 [ 456.583504][T12304] __x64_sys_openat+0x174/0x210 [ 456.583558][T12304] ? __pfx___x64_sys_openat+0x10/0x10 [ 456.583630][T12304] do_syscall_64+0xcd/0x490 [ 456.583679][T12304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.583712][T12304] RIP: 0033:0x7f29bb38ebe9 [ 456.583738][T12304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.583784][T12304] RSP: 002b:00007f29bc1e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 456.583815][T12304] RAX: ffffffffffffffda RBX: 00007f29bb5b5fa0 RCX: 00007f29bb38ebe9 [ 456.583836][T12304] RDX: 0000000000040080 RSI: 0000200000003640 RDI: ffffffffffffff9c [ 456.583858][T12304] RBP: 00007f29bb411e19 R08: 0000000000000000 R09: 0000000000000000 [ 456.583878][T12304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.583898][T12304] R13: 00007f29bb5b6038 R14: 00007f29bb5b5fa0 R15: 00007ffd3b0616d8 [ 456.583940][T12304] [ 456.818985][T12306] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1125'. [ 457.129483][T12235] hsr_slave_0: entered promiscuous mode [ 457.157431][T12235] hsr_slave_1: entered promiscuous mode [ 457.193614][T12235] debugfs: 'hsr0' already exists in 'hsr' [ 457.200526][T12235] Cannot create hsr debugfs directory [ 457.238366][T12310] __vm_enough_memory: pid: 12310, comm: syz.6.1127, bytes: 4398046511104 not enough memory for the allocation [ 457.806524][ T9188] Bluetooth: hci3: command tx timeout [ 458.141777][T12235] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 458.246206][T12235] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 458.401146][T12235] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 458.547847][T12235] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 459.285630][ T9188] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 459.550438][T12235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.687393][T12235] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.778727][ T9294] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.785906][ T9294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.844760][ T9294] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.851996][ T9294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.896368][ T9188] Bluetooth: hci3: command tx timeout [ 460.035465][T12235] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 460.066318][T12235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 460.895568][T12378] ptrace attach of "./syz-executor exec"[12381] was attempted by "./syz-executor exec"[12378] [ 461.903693][T12235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.107516][T12395] netlink: 'syz.6.1140': attribute type 1 has an invalid length. [ 463.152851][T12235] veth0_vlan: entered promiscuous mode [ 463.190316][T12235] veth1_vlan: entered promiscuous mode [ 463.333825][T12235] veth0_macvtap: entered promiscuous mode [ 463.442315][T12406] Invalid ELF header magic: != ELF [ 463.459636][T12235] veth1_macvtap: entered promiscuous mode [ 463.668888][T12235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.840694][T12235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.901311][ T9147] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.924952][ T9147] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.250638][ T9147] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.287260][ T9147] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.546818][T12415] bond0: option packets_per_slave: invalid value ( Xnp) [ 464.557536][T12419] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 464.587003][T12415] bond0: option packets_per_slave: allowed values 0 - 65535 [ 464.939892][ T9145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.991085][ T9145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.158120][ T9152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.221054][ T9152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.595122][T12436] sp0: Synchronizing with TNC [ 465.899594][T12443] FAULT_INJECTION: forcing a failure. [ 465.899594][T12443] name failslab, interval 1, probability 0, space 0, times 0 [ 465.930994][T12443] CPU: 1 UID: 0 PID: 12443 Comm: syz.7.1110 Not tainted syzkaller #0 PREEMPT(full) [ 465.931039][T12443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 465.931058][T12443] Call Trace: [ 465.931069][T12443] [ 465.931081][T12443] dump_stack_lvl+0x16c/0x1f0 [ 465.931130][T12443] should_fail_ex+0x512/0x640 [ 465.931176][T12443] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 465.931222][T12443] should_failslab+0xc2/0x120 [ 465.931268][T12443] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 465.931305][T12443] ? __proc_create+0xc3/0x8e0 [ 465.931348][T12443] ? __proc_create+0x2ce/0x8e0 [ 465.931398][T12443] __proc_create+0x2ce/0x8e0 [ 465.931447][T12443] ? __pfx___proc_create+0x10/0x10 [ 465.931499][T12443] ? __pfx___netlink_kernel_create+0x10/0x10 [ 465.931555][T12443] ? fib4_semantics_init+0x25/0x100 [ 465.931601][T12443] proc_create_reg+0x7d/0x180 [ 465.931655][T12443] proc_create_seq_private+0x8e/0x180 [ 465.931710][T12443] ? __pfx_proc_create_seq_private+0x10/0x10 [ 465.931764][T12443] ? __pfx_nl_fib_input+0x10/0x10 [ 465.931821][T12443] ? __pfx_ip_rt_do_proc_init+0x10/0x10 [ 465.931874][T12443] ip_rt_do_proc_init+0x57/0x1b0 [ 465.931928][T12443] ops_init+0x1e2/0x5f0 [ 465.931980][T12443] setup_net+0x10f/0x380 [ 465.932023][T12443] ? lockdep_init_map_type+0x5c/0x280 [ 465.932091][T12443] ? __pfx_setup_net+0x10/0x10 [ 465.932142][T12443] ? debug_mutex_init+0x37/0x70 [ 465.932182][T12443] copy_net_ns+0x2a6/0x5f0 [ 465.932241][T12443] create_new_namespaces+0x3ea/0xa90 [ 465.932291][T12443] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 465.932336][T12443] ksys_unshare+0x45b/0xa40 [ 465.932384][T12443] ? __pfx_ksys_unshare+0x10/0x10 [ 465.932434][T12443] ? xfd_validate_state+0x61/0x180 [ 465.932499][T12443] __x64_sys_unshare+0x31/0x40 [ 465.932557][T12443] do_syscall_64+0xcd/0x490 [ 465.932609][T12443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.932644][T12443] RIP: 0033:0x7fe83ef8ebe9 [ 465.932672][T12443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.932706][T12443] RSP: 002b:00007fe83fd34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 465.932739][T12443] RAX: ffffffffffffffda RBX: 00007fe83f1b5fa0 RCX: 00007fe83ef8ebe9 [ 465.932761][T12443] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 465.932782][T12443] RBP: 00007fe83f011e19 R08: 0000000000000000 R09: 0000000000000000 [ 465.932803][T12443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.932824][T12443] R13: 00007fe83f1b6038 R14: 00007fe83f1b5fa0 R15: 00007ffe009dc398 [ 465.932868][T12443] [ 467.240687][T12453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1152'. [ 467.609939][T12456] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1153'. [ 468.197449][T12458] Process accounting resumed [ 468.437887][T12471] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1157'. [ 468.437887][T12472] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1157'. [ 468.562851][T11287] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 468.562882][T11287] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 468.580704][T11287] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 468.580751][T11287] Bluetooth: hci1: Malformed LE Event: 0x0d [ 468.687819][ T9188] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 468.887215][T12490] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input28 [ 470.222026][T12507] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.372799][T12517] FAULT_INJECTION: forcing a failure. [ 470.372799][T12517] name failslab, interval 1, probability 0, space 0, times 0 [ 470.463088][T12517] CPU: 0 UID: 0 PID: 12517 Comm: syz.7.1166 Not tainted syzkaller #0 PREEMPT(full) [ 470.463130][T12517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 470.463159][T12517] Call Trace: [ 470.463170][T12517] [ 470.463183][T12517] dump_stack_lvl+0x16c/0x1f0 [ 470.463232][T12517] should_fail_ex+0x512/0x640 [ 470.463286][T12517] should_failslab+0xc2/0x120 [ 470.463329][T12517] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 470.463371][T12517] ? zswap_store+0x839/0x25a0 [ 470.463437][T12517] zswap_store+0x839/0x25a0 [ 470.463507][T12517] ? __pfx_zswap_store+0x10/0x10 [ 470.463559][T12517] ? do_raw_spin_lock+0x12c/0x2b0 [ 470.463611][T12517] ? find_held_lock+0x2b/0x80 [ 470.463644][T12517] ? folio_free_swap+0x171/0x580 [ 470.463694][T12517] ? do_raw_spin_unlock+0x172/0x230 [ 470.463745][T12517] ? swp_swap_info+0xce/0x130 [ 470.463790][T12517] ? __pfx_swp_swap_info+0x10/0x10 [ 470.463838][T12517] ? mod_memcg_lruvec_state+0x389/0x5f0 [ 470.463898][T12517] swap_writeout+0x3b2/0xfe0 [ 470.463951][T12517] ? mark_held_locks+0x49/0x80 [ 470.463993][T12517] ? _raw_spin_unlock_irq+0x23/0x50 [ 470.464037][T12517] shmem_writeout+0xc29/0x1140 [ 470.464082][T12517] ? __pfx_shmem_writeout+0x10/0x10 [ 470.464122][T12517] ? inode_to_bdi+0x9e/0x160 [ 470.464174][T12517] ? folio_clear_dirty_for_io+0x112/0x810 [ 470.464233][T12517] shrink_folio_list+0x2f4c/0x4880 [ 470.464299][T12517] ? __pfx_shrink_folio_list+0x10/0x10 [ 470.464334][T12517] ? __pfx___page_table_check_zero+0x10/0x10 [ 470.464368][T12517] ? lockdep_hardirqs_on+0x7c/0x110 [ 470.464406][T12517] ? post_alloc_hook+0x1af/0x230 [ 470.464435][T12517] ? get_page_from_freelist+0x132b/0x38e0 [ 470.464492][T12517] ? __lock_acquire+0x62e/0x1ce0 [ 470.464528][T12517] reclaim_folio_list+0xda/0x5d0 [ 470.464551][T12517] ? __pfx_css_rstat_updated+0x10/0x10 [ 470.464579][T12517] ? __pfx_reclaim_folio_list+0x10/0x10 [ 470.464616][T12517] ? lru_gen_update_size+0x543/0xe10 [ 470.464646][T12517] ? lru_gen_del_folio+0x32b/0x540 [ 470.464670][T12517] reclaim_pages+0x47b/0x650 [ 470.464699][T12517] ? __pfx_reclaim_pages+0x10/0x10 [ 470.464723][T12517] ? find_held_lock+0x2b/0x80 [ 470.464746][T12517] ? madvise_cold_or_pageout_pte_range+0x749/0x2120 [ 470.464788][T12517] madvise_cold_or_pageout_pte_range+0x1546/0x2120 [ 470.464838][T12517] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 470.464881][T12517] ? lock_acquire+0x179/0x350 [ 470.464916][T12517] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 470.464954][T12517] walk_pgd_range+0xc02/0x1f50 [ 470.465004][T12517] ? __pfx_walk_pgd_range+0x10/0x10 [ 470.465041][T12517] __walk_page_range+0x163/0x820 [ 470.465075][T12517] ? __lock_acquire+0xb97/0x1ce0 [ 470.465114][T12517] walk_page_range_vma+0x2c7/0xa20 [ 470.465156][T12517] ? __pfx_walk_page_range_vma+0x10/0x10 [ 470.465187][T12517] ? find_held_lock+0x2b/0x80 [ 470.465234][T12517] madvise_pageout+0x257/0x540 [ 470.465283][T12517] ? __pfx_madvise_pageout+0x10/0x10 [ 470.465328][T12517] ? finish_task_switch.isra.0+0x21c/0xc10 [ 470.465379][T12517] madvise_vma_behavior+0xb22/0x2d60 [ 470.465420][T12517] ? mas_prev_setup.constprop.0+0xb6/0x9d0 [ 470.465452][T12517] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 470.465490][T12517] ? __pfx_mas_prev+0x10/0x10 [ 470.465529][T12517] ? find_vma_prev+0xda/0x160 [ 470.465574][T12517] ? find_held_lock+0x2b/0x80 [ 470.465595][T12517] ? __pfx_find_vma_prev+0x10/0x10 [ 470.465629][T12517] ? futex_unqueue+0x133/0x2c0 [ 470.465664][T12517] ? __futex_wait+0x24c/0x2f0 [ 470.465702][T12517] madvise_walk_vmas+0x31f/0x9c0 [ 470.465741][T12517] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 470.465783][T12517] madvise_do_behavior+0x1e2/0x530 [ 470.465815][T12517] ? futex_private_hash_put+0x18a/0x300 [ 470.465844][T12517] ? __pfx_madvise_do_behavior+0x10/0x10 [ 470.465879][T12517] ? down_read+0x13d/0x480 [ 470.465926][T12517] do_madvise+0x176/0x240 [ 470.465958][T12517] ? __pfx_do_madvise+0x10/0x10 [ 470.465991][T12517] ? do_futex+0x122/0x350 [ 470.466039][T12517] ? syscall_user_dispatch+0x78/0x140 [ 470.466081][T12517] __x64_sys_madvise+0xa9/0x110 [ 470.466116][T12517] do_syscall_64+0xcd/0x490 [ 470.466158][T12517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.466182][T12517] RIP: 0033:0x7fe83ef8ebe9 [ 470.466201][T12517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.466224][T12517] RSP: 002b:00007fe83d1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 470.466245][T12517] RAX: ffffffffffffffda RBX: 00007fe83f1b6180 RCX: 00007fe83ef8ebe9 [ 470.466260][T12517] RDX: 0000000000000015 RSI: 00000000002003f2 RDI: 0000000000000000 [ 470.466274][T12517] RBP: 00007fe83f011e19 R08: 0000000000000000 R09: 0000000000000000 [ 470.466288][T12517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 470.466302][T12517] R13: 00007fe83f1b6218 R14: 00007fe83f1b6180 R15: 00007ffe009dc398 [ 470.466332][T12517] [ 471.538085][T12507] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.674961][T12507] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.875014][T12507] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.289930][T12568] bcache: register_bcache() error : failed to open device [ 476.875672][T12622] svc: failed to register nfsdv3 RPC service (errno 111). [ 476.939083][T12622] svc: failed to register nfsaclv3 RPC service (errno 111). [ 477.916459][T12635] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 483.588903][T12726] : Can't lookup blockdev [ 486.863897][T12792] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 487.799857][T12793] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 488.478894][T12809] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1207'. [ 488.580971][T12809] veth1_macvtap: left promiscuous mode [ 489.092887][T12832] random: crng reseeded on system resumption [ 489.225083][T12523] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:11: iget: checksum invalid [ 489.309378][T12523] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 489.323843][T12559] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:21: iget: checksum invalid [ 489.415169][T12559] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db.p7s failed with error -74 [ 489.436928][T12523] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:11: iget: checksum invalid [ 489.474757][T12523] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 489.487008][T12559] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:21: iget: checksum invalid [ 489.571229][T12559] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 489.583727][T12523] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:11: iget: checksum invalid [ 489.648425][T12523] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 489.659988][T12559] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:21: iget: checksum invalid [ 489.738371][T12559] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db.p7s failed with error -74 [ 489.751804][T12523] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:11: iget: checksum invalid [ 489.771094][T12523] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 489.782417][T12559] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:21: iget: checksum invalid [ 489.821389][T12559] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 489.830696][T12523] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 489.864506][T12523] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 489.885184][T12559] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 490.067911][T12559] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s /[ 490.248787][T12841] can: request_module (can-proto-3) failed. [ 490.903494][T12871] FAULT_INJECTION: forcing a failure. [ 490.903494][T12871] name failslab, interval 1, probability 0, space 0, times 0 [ 490.926425][T12871] CPU: 1 UID: 0 PID: 12871 Comm: syz.7.1215 Not tainted syzkaller #0 PREEMPT(full) [ 490.926467][T12871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 490.926486][T12871] Call Trace: [ 490.926496][T12871] [ 490.926509][T12871] dump_stack_lvl+0x16c/0x1f0 [ 490.926574][T12871] should_fail_ex+0x512/0x640 [ 490.926619][T12871] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 490.926659][T12871] should_failslab+0xc2/0x120 [ 490.926703][T12871] __kmalloc_cache_noprof+0x6a/0x3e0 [ 490.926736][T12871] ? __pfx_ndisc_net_init+0x10/0x10 [ 490.926776][T12871] ? ipv6_inetpeer_init+0x3f/0xb0 [ 490.926825][T12871] ? __pfx_ipv6_inetpeer_init+0x10/0x10 [ 490.926882][T12871] ipv6_inetpeer_init+0x3f/0xb0 [ 490.926930][T12871] ops_init+0x1e2/0x5f0 [ 490.926981][T12871] setup_net+0x10f/0x380 [ 490.927024][T12871] ? lockdep_init_map_type+0x5c/0x280 [ 490.927071][T12871] ? __pfx_setup_net+0x10/0x10 [ 490.927120][T12871] ? debug_mutex_init+0x37/0x70 [ 490.927158][T12871] copy_net_ns+0x2a6/0x5f0 [ 490.927212][T12871] create_new_namespaces+0x3ea/0xa90 [ 490.927260][T12871] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 490.927302][T12871] ksys_unshare+0x45b/0xa40 [ 490.927347][T12871] ? __pfx_ksys_unshare+0x10/0x10 [ 490.927394][T12871] ? xfd_validate_state+0x61/0x180 [ 490.927455][T12871] __x64_sys_unshare+0x31/0x40 [ 490.927500][T12871] do_syscall_64+0xcd/0x490 [ 490.927548][T12871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.927579][T12871] RIP: 0033:0x7fe83ef8ebe9 [ 490.927604][T12871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.927639][T12871] RSP: 002b:00007fe83fd34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 490.927670][T12871] RAX: ffffffffffffffda RBX: 00007fe83f1b5fa0 RCX: 00007fe83ef8ebe9 [ 490.927691][T12871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 490.927711][T12871] RBP: 00007fe83f011e19 R08: 0000000000000000 R09: 0000000000000000 [ 490.927730][T12871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.927749][T12871] R13: 00007fe83f1b6038 R14: 00007fe83f1b5fa0 R15: 00007ffe009dc398 [ 490.927791][T12871] [ 491.693772][ T9188] Bluetooth: hci3: Malformed Event: 0x02 [ 492.069223][T12891] bridge0: port 3(team0) entered blocking state [ 492.092593][T12891] bridge0: port 3(team0) entered disabled state [ 492.138357][T12891] team0: entered allmulticast mode [ 492.150772][T12891] team_slave_0: entered allmulticast mode [ 492.157977][T12891] team_slave_1: entered allmulticast mode [ 492.192235][T12891] team0: entered promiscuous mode [ 492.217411][T12891] team_slave_0: entered promiscuous mode [ 492.223289][T12891] team_slave_1: entered promiscuous mode [ 492.257352][T12891] bridge0: port 3(team0) entered blocking state [ 492.263747][T12891] bridge0: port 3(team0) entered forwarding state [ 493.074360][T12906] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 500.110799][T12905] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 500.152985][T12878] Process accounting paused [ 500.819280][T12559] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:21: iget: checksum invalid [ 500.933640][T12559] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 500.944607][T12571] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:25: iget: checksum invalid [ 501.012399][T12571] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db.p7s failed with error -74 [ 501.044882][T12559] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:21: iget: checksum invalid [ 501.115983][T12571] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:25: iget: checksum invalid [ 501.135545][T12559] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 501.184025][T12571] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 501.195188][T12559] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:21: iget: checksum invalid [ 501.237477][T12571] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:25: iget: checksum invalid [ 501.249152][T12559] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 501.275320][T12571] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db.p7s failed with error -74 [ 501.290498][T12559] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:21: iget: checksum invalid [ 501.333625][T12559] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 501.342771][T12571] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:25: iget: checksum invalid [ 501.389992][T12559] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 501.407590][T12571] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 501.450822][T12559] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 501.462453][T12571] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 501.502860][T12571] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 501.870076][T13017] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input33 [ 511.460821][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.467334][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.157261][T12991] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 512.164062][T12991] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 512.170227][T12991] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 512.182325][T12991] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 512.188681][T12991] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 512.199628][T12991] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 512.233622][T13015] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 512.586515][T13050] netlink: 'syz.4.1230': attribute type 2 has an invalid length. [ 512.633009][T13050] sd 0:0:1:0: PR command failed: 1026 [ 512.651922][T13050] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 512.658712][T13050] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 512.666149][ T30] audit: type=1326 audit(1843104566.226:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13046 comm="syz.1.1232" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f29bb38ebe9 code=0x0 [ 512.718249][T13056] netlink: 'syz.4.1230': attribute type 2 has an invalid length. [ 512.918231][T12571] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.478543][T12571] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.551611][T12571] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.164404][T11287] Bluetooth: hci1: command 0x0c1a tx timeout [ 514.172077][ T9190] Bluetooth: hci2: command 0x0c1a tx timeout [ 514.178402][ T9188] Bluetooth: hci0: command 0x0c1a tx timeout [ 514.242689][ T9188] Bluetooth: hci3: command 0x0c1a tx timeout [ 514.436322][T12571] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.577017][ T9188] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 514.577051][ T9188] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 514.577083][ T9188] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 514.577148][ T9188] Bluetooth: hci2: adv larger than maximum supported [ 514.577183][ T9188] Bluetooth: hci2: adv larger than maximum supported [ 514.577204][ T9188] Bluetooth: hci2: Malformed LE Event: 0x0d [ 514.863397][T12571] bridge_slave_1: left allmulticast mode [ 514.869099][T12571] bridge_slave_1: left promiscuous mode [ 514.881318][T12571] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.925748][T12571] bridge_slave_0: left allmulticast mode [ 514.933714][T12571] bridge_slave_0: left promiscuous mode [ 514.944156][T12571] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.313536][ T9188] Bluetooth: hci3: command 0x0c1a tx timeout [ 516.571409][T12571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.680570][T12571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.745122][T12571] bond0 (unregistering): Released all slaves [ 517.894040][T12571] hsr_slave_0: left promiscuous mode [ 517.910821][T12571] hsr_slave_1: left promiscuous mode [ 517.940999][T12571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.971961][T12571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.024953][T12571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.059943][T12571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.204357][T12571] veth1_macvtap: left promiscuous mode [ 518.232639][T12571] veth0_macvtap: left promiscuous mode [ 518.264014][T12571] veth1_vlan: left promiscuous mode [ 518.288496][T12571] veth0_vlan: left promiscuous mode [ 518.385531][ T9188] Bluetooth: hci3: command 0x0c1a tx timeout [ 519.249467][T12571] team0 (unregistering): Port device team_slave_0 removed [ 522.228060][ T43] Process accounting resumed [ 523.291074][T13193] FAULT_INJECTION: forcing a failure. [ 523.291074][T13193] name failslab, interval 1, probability 0, space 0, times 0 [ 523.363533][T13193] CPU: 0 UID: 0 PID: 13193 Comm: syz.4.1259 Not tainted syzkaller #0 PREEMPT(full) [ 523.363582][T13193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 523.363602][T13193] Call Trace: [ 523.363613][T13193] [ 523.363625][T13193] dump_stack_lvl+0x16c/0x1f0 [ 523.363676][T13193] should_fail_ex+0x512/0x640 [ 523.363725][T13193] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 523.363766][T13193] should_failslab+0xc2/0x120 [ 523.363809][T13193] __kmalloc_cache_noprof+0x6a/0x3e0 [ 523.363846][T13193] ? kobject_uevent_env+0x265/0x1870 [ 523.363907][T13193] kobject_uevent_env+0x265/0x1870 [ 523.363960][T13193] ? __pfx_dev_uevent_name+0x10/0x10 [ 523.364015][T13193] ? bus_to_subsys+0x131/0x160 [ 523.364058][T13193] device_add+0x10dd/0x1aa0 [ 523.364093][T13193] ? __pfx_device_add+0x10/0x10 [ 523.364141][T13193] nfc_register_device+0x41/0x3c0 [ 523.364193][T13193] nci_register_device+0x7f1/0xb80 [ 523.364244][T13193] ? __pfx_nci_register_device+0x10/0x10 [ 523.364290][T13193] ? lockdep_init_map_type+0x5c/0x280 [ 523.364345][T13193] virtual_ncidev_open+0x141/0x220 [ 523.364384][T13193] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 523.364421][T13193] misc_open+0x35a/0x420 [ 523.364458][T13193] ? __pfx_misc_open+0x10/0x10 [ 523.364493][T13193] chrdev_open+0x234/0x6a0 [ 523.364536][T13193] ? __pfx_apparmor_file_open+0x10/0x10 [ 523.364574][T13193] ? __pfx_chrdev_open+0x10/0x10 [ 523.364622][T13193] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 523.364669][T13193] do_dentry_open+0x982/0x1530 [ 523.364713][T13193] ? __pfx_chrdev_open+0x10/0x10 [ 523.364767][T13193] vfs_open+0x82/0x3f0 [ 523.364823][T13193] path_openat+0x1de4/0x2cb0 [ 523.364878][T13193] ? __pfx_path_openat+0x10/0x10 [ 523.364931][T13193] do_filp_open+0x20b/0x470 [ 523.364974][T13193] ? __pfx_do_filp_open+0x10/0x10 [ 523.365051][T13193] ? alloc_fd+0x471/0x7d0 [ 523.365101][T13193] do_sys_openat2+0x11b/0x1d0 [ 523.365165][T13193] ? __pfx_do_sys_openat2+0x10/0x10 [ 523.365240][T13193] __x64_sys_openat+0x174/0x210 [ 523.365292][T13193] ? __pfx___x64_sys_openat+0x10/0x10 [ 523.365387][T13193] do_syscall_64+0xcd/0x490 [ 523.365438][T13193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.365473][T13193] RIP: 0033:0x7f348178ebe9 [ 523.365502][T13193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.365536][T13193] RSP: 002b:00007f34826c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 523.365568][T13193] RAX: ffffffffffffffda RBX: 00007f34819b5fa0 RCX: 00007f348178ebe9 [ 523.365590][T13193] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 523.365611][T13193] RBP: 00007f3481811e19 R08: 0000000000000000 R09: 0000000000000000 [ 523.365632][T13193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.365651][T13193] R13: 00007f34819b6038 R14: 00007f34819b5fa0 R15: 00007fff5d553c98 [ 523.365696][T13193] [ 523.993268][ T30] audit: type=1804 audit(1843104577.594:39): pid=13202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1260" name="/newroot/sys/kernel/debug/tracing/trace" dev="tracefs" ino=1144 res=1 errno=0 [ 524.016697][ C1] vkms_vblank_simulate: vblank timer overrun [ 524.607111][T13231] ACPI: Can not change Invalid GPE/Fixed Event status [ 527.951492][T13314] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 531.447885][T13462] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1293'. [ 532.661623][T13487] netlink: 13832 bytes leftover after parsing attributes in process `syz.4.1297'. [ 533.409774][T13500] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 534.255099][T13533] random: crng reseeded on system resumption [ 534.261942][T12562] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:23: iget: checksum invalid [ 534.294577][T12562] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 534.305227][T12557] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:19: iget: checksum invalid [ 534.329719][T12557] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db.p7s failed with error -74 [ 534.344703][T12562] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:23: iget: checksum invalid [ 534.360721][T12562] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 534.370527][T12557] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:19: iget: checksum invalid [ 534.396311][T12557] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 534.409106][T12562] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:23: iget: checksum invalid [ 534.426853][T12557] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:19: iget: checksum invalid [ 534.449896][T12562] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 534.467458][T12557] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db.p7s failed with error -74 [ 534.481132][T12562] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:23: iget: checksum invalid [ 534.500573][T12557] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:19: iget: checksum invalid [ 534.512307][T12562] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 534.537266][T12557] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 534.548419][T12562] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 534.566584][T12557] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 534.579095][T12562] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 534.594862][T12557] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 544.866753][T13635] input: f as /devices/virtual/input/input35 [ 547.000467][T13666] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1327'. [ 547.268798][T13669] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1328'. [ 547.305551][T13669] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.1328: iget: checksum invalid [ 547.376811][T13666] FAULT_INJECTION: forcing a failure. [ 547.376811][T13666] name failslab, interval 1, probability 0, space 0, times 0 [ 547.409835][T13669] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 547.426388][T13669] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.1328: iget: checksum invalid [ 547.449527][T13666] CPU: 0 UID: 0 PID: 13666 Comm: syz.7.1327 Not tainted syzkaller #0 PREEMPT(full) [ 547.449564][T13666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 547.449581][T13666] Call Trace: [ 547.449590][T13666] [ 547.449600][T13666] dump_stack_lvl+0x16c/0x1f0 [ 547.449642][T13666] should_fail_ex+0x512/0x640 [ 547.449687][T13666] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 547.449727][T13666] should_failslab+0xc2/0x120 [ 547.449762][T13666] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 547.449796][T13666] ? virtual_ncidev_open+0x6f/0x220 [ 547.449823][T13666] ? kvasprintf_const+0x66/0x1a0 [ 547.449869][T13666] kvasprintf+0xbc/0x160 [ 547.449894][T13666] ? __pfx_kvasprintf+0x10/0x10 [ 547.449922][T13666] ? rcu_is_watching+0x12/0xc0 [ 547.449948][T13666] ? kfree+0x24f/0x4d0 [ 547.449971][T13666] ? mark_held_locks+0x49/0x80 [ 547.450011][T13666] kvasprintf_const+0x66/0x1a0 [ 547.450039][T13666] kobject_set_name_vargs+0x5a/0x140 [ 547.450081][T13666] dev_set_name+0xc7/0x100 [ 547.450109][T13666] ? __pfx_dev_set_name+0x10/0x10 [ 547.450153][T13666] nfc_allocate_device+0x206/0x5e0 [ 547.450195][T13666] nci_allocate_device+0x23b/0x430 [ 547.450228][T13666] virtual_ncidev_open+0x6f/0x220 [ 547.450262][T13666] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 547.450295][T13666] misc_open+0x35a/0x420 [ 547.450339][T13666] ? __pfx_misc_open+0x10/0x10 [ 547.450368][T13666] chrdev_open+0x234/0x6a0 [ 547.450405][T13666] ? __pfx_apparmor_file_open+0x10/0x10 [ 547.450437][T13666] ? __pfx_chrdev_open+0x10/0x10 [ 547.450477][T13666] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 547.450518][T13666] do_dentry_open+0x982/0x1530 [ 547.450553][T13666] ? __pfx_chrdev_open+0x10/0x10 [ 547.450598][T13666] vfs_open+0x82/0x3f0 [ 547.450645][T13666] path_openat+0x1de4/0x2cb0 [ 547.450711][T13666] ? __pfx_path_openat+0x10/0x10 [ 547.450772][T13666] do_filp_open+0x20b/0x470 [ 547.450807][T13666] ? __pfx_do_filp_open+0x10/0x10 [ 547.450867][T13666] ? alloc_fd+0x471/0x7d0 [ 547.450908][T13666] do_sys_openat2+0x11b/0x1d0 [ 547.450963][T13666] ? __pfx_do_sys_openat2+0x10/0x10 [ 547.451019][T13666] __x64_sys_openat+0x174/0x210 [ 547.451062][T13666] ? __pfx___x64_sys_openat+0x10/0x10 [ 547.451118][T13666] do_syscall_64+0xcd/0x490 [ 547.451158][T13666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.451185][T13666] RIP: 0033:0x7fe83ef8ebe9 [ 547.451207][T13666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.451235][T13666] RSP: 002b:00007fe83fd34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 547.451261][T13666] RAX: ffffffffffffffda RBX: 00007fe83f1b5fa0 RCX: 00007fe83ef8ebe9 [ 547.451279][T13666] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 547.451297][T13666] RBP: 00007fe83f011e19 R08: 0000000000000000 R09: 0000000000000000 [ 547.451313][T13666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 547.451328][T13666] R13: 00007fe83f1b6038 R14: 00007fe83f1b5fa0 R15: 00007ffe009dc398 [ 547.451363][T13666] [ 547.753550][ C0] vkms_vblank_simulate: vblank timer overrun [ 547.774388][T13669] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 syzkaller syzkaller login: [ 547.895774][T13669] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.1328: iget: checksum invalid [ 547.907872][T13669] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 547.919030][T13669] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.4.1328: iget: checksum invalid [ 547.931680][T13669] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 547.942325][T13669] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 547.953790][T13669] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 548.888781][T13708] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input36 [ 549.937275][T13718] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 552.990792][T13792] openvswitch: netlink: Message has 230 unknown bytes. [ 554.400424][T13845] FAULT_INJECTION: forcing a failure. [ 554.400424][T13845] name failslab, interval 1, probability 0, space 0, times 0 [ 554.413234][T13845] CPU: 1 UID: 0 PID: 13845 Comm: syz.4.1358 Not tainted syzkaller #0 PREEMPT(full) [ 554.413261][T13845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 554.413275][T13845] Call Trace: [ 554.413282][T13845] [ 554.413291][T13845] dump_stack_lvl+0x16c/0x1f0 [ 554.413323][T13845] should_fail_ex+0x512/0x640 [ 554.413354][T13845] ? fs_reclaim_acquire+0xae/0x150 [ 554.413389][T13845] ? tomoyo_encode2+0x100/0x3e0 [ 554.413419][T13845] should_failslab+0xc2/0x120 [ 554.413448][T13845] __kmalloc_noprof+0xd2/0x510 [ 554.413474][T13845] ? d_absolute_path+0x136/0x1a0 [ 554.413509][T13845] tomoyo_encode2+0x100/0x3e0 [ 554.413543][T13845] tomoyo_encode+0x29/0x50 [ 554.413572][T13845] tomoyo_realpath_from_path+0x18f/0x6e0 [ 554.413612][T13845] tomoyo_path_number_perm+0x245/0x580 [ 554.413638][T13845] ? tomoyo_path_number_perm+0x237/0x580 [ 554.413667][T13845] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 554.413703][T13845] ? __lock_acquire+0xb97/0x1ce0 [ 554.413747][T13845] ? do_raw_spin_unlock+0x172/0x230 [ 554.413781][T13845] ? _raw_spin_unlock+0x28/0x50 [ 554.413804][T13845] ? current_check_access_path+0x33c/0x460 [ 554.413839][T13845] ? __pfx_current_check_access_path+0x10/0x10 [ 554.413872][T13845] ? simple_lookup+0x105/0x1d0 [ 554.413907][T13845] tomoyo_path_mknod+0x10c/0x190 [ 554.413927][T13845] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 554.413950][T13845] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 554.413987][T13845] security_path_mknod+0x161/0x310 [ 554.414016][T13845] do_mknodat+0x239/0x5d0 [ 554.414044][T13845] ? __pfx_do_mknodat+0x10/0x10 [ 554.414067][T13845] ? getname_flags.part.0+0x1c5/0x550 [ 554.414107][T13845] __x64_sys_mknod+0x87/0xb0 [ 554.414133][T13845] do_syscall_64+0xcd/0x490 [ 554.414165][T13845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.414186][T13845] RIP: 0033:0x7f348178ebe9 [ 554.414203][T13845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.414223][T13845] RSP: 002b:00007f34826c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 554.414243][T13845] RAX: ffffffffffffffda RBX: 00007f34819b5fa0 RCX: 00007f348178ebe9 [ 554.414257][T13845] RDX: 00000000fffffffa RSI: 00000000000000cb RDI: 0000200000000180 [ 554.414271][T13845] RBP: 00007f3481811e19 R08: 0000000000000000 R09: 0000000000000000 [ 554.414284][T13845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.414297][T13845] R13: 00007f34819b6038 R14: 00007f34819b5fa0 R15: 00007fff5d553c98 [ 554.414324][T13845] [ 554.414344][T13845] ERROR: Out of memory at tomoyo_realpath_from_path. [ 555.108932][ T9188] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 555.108978][ T9188] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 555.126737][ T9188] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 555.126809][ T9188] Bluetooth: hci0: adv larger than maximum supported [ 555.136461][ T9188] Bluetooth: hci0: adv larger than maximum supported [ 555.143533][ T9188] Bluetooth: hci0: Malformed LE Event: 0x0d [ 555.385786][T13863] netlink: 346 bytes leftover after parsing attributes in process `syz.4.1363'. [ 555.399144][T13863] rnbd_client L213: map_device: Parameters missing [ 555.455192][ T30] audit: type=1804 audit(1843104609.076:40): pid=13861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1362" name="/newroot/56/file0" dev="tmpfs" ino=311 res=1 errno=0 [ 555.513203][ T30] audit: type=1804 audit(1843104609.136:41): pid=13855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.1362" name="/newroot/56/file0" dev="tmpfs" ino=311 res=1 errno=0 [ 555.890834][T13880] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 555.904823][T13882] __vm_enough_memory: pid: 13882, comm: syz.6.1370, bytes: 4398046511104 not enough memory for the allocation [ 557.340105][T13912] Invalid ELF header magic: != ELF [ 557.623301][T13920] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 557.924548][ T9188] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 557.924587][ T9188] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 557.943593][ T9188] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 557.944900][ T9188] Bluetooth: hci3: adv larger than maximum supported [ 557.945159][ T9188] Bluetooth: hci3: adv larger than maximum supported [ 557.945255][ T9188] Bluetooth: hci3: Malformed LE Event: 0x0d [ 559.162984][T13948] FAULT_INJECTION: forcing a failure. [ 559.162984][T13948] name failslab, interval 1, probability 0, space 0, times 0 [ 559.264856][T13948] CPU: 0 UID: 0 PID: 13948 Comm: syz.1.1381 Not tainted syzkaller #0 PREEMPT(full) [ 559.264888][T13948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 559.264902][T13948] Call Trace: [ 559.264910][T13948] [ 559.264918][T13948] dump_stack_lvl+0x16c/0x1f0 [ 559.264954][T13948] should_fail_ex+0x512/0x640 [ 559.264987][T13948] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 559.265019][T13948] should_failslab+0xc2/0x120 [ 559.265049][T13948] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 559.265078][T13948] ? alloc_inode+0xc3/0x240 [ 559.265115][T13948] alloc_inode+0xc3/0x240 [ 559.265148][T13948] path_from_stashed+0x25b/0x750 [ 559.265174][T13948] ? alloc_fd+0x471/0x7d0 [ 559.265202][T13948] pidfs_alloc_file+0xf8/0x290 [ 559.265224][T13948] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 559.265250][T13948] ? _raw_spin_unlock_irq+0x23/0x50 [ 559.265291][T13948] pidfd_prepare+0x129/0x200 [ 559.265320][T13948] __x64_sys_pidfd_open+0x105/0x1a0 [ 559.265354][T13948] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 559.265391][T13948] ? rcu_is_watching+0x12/0xc0 [ 559.265415][T13948] do_syscall_64+0xcd/0x490 [ 559.265446][T13948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.265468][T13948] RIP: 0033:0x7f29bb38ebe9 [ 559.265484][T13948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.265505][T13948] RSP: 002b:00007f29bc1e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 559.265525][T13948] RAX: ffffffffffffffda RBX: 00007f29bb5b5fa0 RCX: 00007f29bb38ebe9 [ 559.265539][T13948] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 559.265561][T13948] RBP: 00007f29bb411e19 R08: 0000000000000000 R09: 0000000000000000 [ 559.265573][T13948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.265586][T13948] R13: 00007f29bb5b6038 R14: 00007f29bb5b5fa0 R15: 00007ffd3b0616d8 [ 559.265613][T13948] [ 559.509284][T13953] FAULT_INJECTION: forcing a failure. [ 559.509284][T13953] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 559.569136][T13953] CPU: 1 UID: 0 PID: 13953 Comm: syz.7.1383 Not tainted syzkaller #0 PREEMPT(full) [ 559.569180][T13953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 559.569198][T13953] Call Trace: [ 559.569224][T13953] [ 559.569236][T13953] dump_stack_lvl+0x16c/0x1f0 [ 559.569283][T13953] should_fail_ex+0x512/0x640 [ 559.569334][T13953] should_fail_alloc_page+0xe7/0x130 [ 559.569379][T13953] prepare_alloc_pages+0x3c2/0x610 [ 559.569427][T13953] ? rcu_is_watching+0x12/0xc0 [ 559.569463][T13953] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 559.569520][T13953] ? lock_acquire+0x179/0x350 [ 559.569561][T13953] ? find_held_lock+0x2b/0x80 [ 559.569597][T13953] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 559.569639][T13953] ? iomap_adjust_read_range+0x1cf/0x6f0 [ 559.569696][T13953] ? __lock_acquire+0x62e/0x1ce0 [ 559.569745][T13953] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 559.569795][T13953] ? policy_nodemask+0xea/0x4e0 [ 559.569860][T13953] alloc_pages_mpol+0x1fb/0x550 [ 559.569905][T13953] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 559.569960][T13953] folio_alloc_mpol_noprof+0x36/0x2f0 [ 559.570011][T13953] vma_alloc_folio_noprof+0xed/0x1e0 [ 559.570068][T13953] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 559.570119][T13953] ? rcu_read_unlock+0x2d/0xb0 [ 559.570164][T13953] do_wp_page+0x1e5b/0x4f00 [ 559.570225][T13953] ? __pfx_do_wp_page+0x10/0x10 [ 559.570280][T13953] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 559.570330][T13953] ? ___pte_offset_map+0x2ad/0x4f0 [ 559.570382][T13953] __handle_mm_fault+0x1b2d/0x2a50 [ 559.570439][T13953] ? __pfx___handle_mm_fault+0x10/0x10 [ 559.570479][T13953] ? lock_vma_under_rcu+0x1eb/0x530 [ 559.570537][T13953] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 559.570582][T13953] handle_mm_fault+0x589/0xd10 [ 559.570617][T13953] ? __bpf_trace_exceptions+0x1/0x40 [ 559.570668][T13953] do_user_addr_fault+0x60c/0x1370 [ 559.570728][T13953] ? rcu_is_watching+0x12/0xc0 [ 559.570764][T13953] exc_page_fault+0x5c/0xb0 [ 559.570805][T13953] asm_exc_page_fault+0x26/0x30 [ 559.570834][T13953] RIP: 0033:0x7fe83ee6eba4 [ 559.570858][T13953] Code: 48 83 ec 38 80 7f 4e 00 44 8b 6f 48 88 4c 24 1f 0f 85 c5 03 00 00 45 85 ed 0f 85 b7 03 00 00 4c 8b 52 38 49 89 d0 4c 03 52 18 47 4e 01 8b 52 04 48 89 fb 48 89 d0 49 8d 14 d2 49 39 50 28 0f [ 559.570888][T13953] RSP: 002b:00007ffe009dc3d0 EFLAGS: 00010202 [ 559.570914][T13953] RAX: 00007fe83f1b6180 RBX: 00007fe83fce5720 RCX: 0000000000000000 [ 559.570933][T13953] RDX: 00007fe83f1b6218 RSI: 0000000000000016 RDI: 00007fe83fce5720 [ 559.570953][T13953] RBP: 00007fe83f1b6218 R08: 00007fe83f1b6218 R09: 0000000000000009 [ 559.570973][T13953] R10: 00007fe83e1fb008 R11: 0000000000000246 R12: 0000000000000003 [ 559.570992][T13953] R13: 0000000000000000 R14: 0000000000088b28 R15: 00007ffe009dc610 [ 559.571042][T13953] [ 559.571311][T13953] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 561.461721][T14000] FAULT_INJECTION: forcing a failure. [ 561.461721][T14000] name failslab, interval 1, probability 0, space 0, times 0 [ 561.474556][T14000] CPU: 1 UID: 0 PID: 14000 Comm: syz.7.1388 Not tainted syzkaller #0 PREEMPT(full) [ 561.474600][T14000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 561.474618][T14000] Call Trace: [ 561.474628][T14000] [ 561.474639][T14000] dump_stack_lvl+0x16c/0x1f0 [ 561.474689][T14000] should_fail_ex+0x512/0x640 [ 561.474736][T14000] ? __kmalloc_noprof+0xbf/0x510 [ 561.474785][T14000] ? lsm_blob_alloc+0x68/0x90 [ 561.474812][T14000] should_failslab+0xc2/0x120 [ 561.474850][T14000] __kmalloc_noprof+0xd2/0x510 [ 561.474897][T14000] lsm_blob_alloc+0x68/0x90 [ 561.474923][T14000] security_sk_alloc+0x30/0x270 [ 561.474961][T14000] sk_prot_alloc+0x1c7/0x2a0 [ 561.475015][T14000] sk_alloc+0x36/0xc20 [ 561.475053][T14000] tun_chr_open+0x80/0x5e0 [ 561.475101][T14000] ? __pfx_tun_chr_open+0x10/0x10 [ 561.475142][T14000] misc_open+0x35a/0x420 [ 561.475178][T14000] ? __pfx_misc_open+0x10/0x10 [ 561.475207][T14000] chrdev_open+0x234/0x6a0 [ 561.475267][T14000] ? __pfx_apparmor_file_open+0x10/0x10 [ 561.475305][T14000] ? __pfx_chrdev_open+0x10/0x10 [ 561.475349][T14000] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 561.475403][T14000] do_dentry_open+0x982/0x1530 [ 561.475442][T14000] ? __pfx_chrdev_open+0x10/0x10 [ 561.475490][T14000] vfs_open+0x82/0x3f0 [ 561.475542][T14000] path_openat+0x1de4/0x2cb0 [ 561.475592][T14000] ? __pfx_path_openat+0x10/0x10 [ 561.475638][T14000] do_filp_open+0x20b/0x470 [ 561.475677][T14000] ? __pfx_do_filp_open+0x10/0x10 [ 561.475741][T14000] ? alloc_fd+0x471/0x7d0 [ 561.475785][T14000] do_sys_openat2+0x11b/0x1d0 [ 561.475831][T14000] ? __pfx_do_sys_openat2+0x10/0x10 [ 561.475893][T14000] __x64_sys_openat+0x174/0x210 [ 561.475941][T14000] ? __pfx___x64_sys_openat+0x10/0x10 [ 561.476006][T14000] do_syscall_64+0xcd/0x490 [ 561.476055][T14000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.476086][T14000] RIP: 0033:0x7fe83ef8ebe9 [ 561.476109][T14000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.476142][T14000] RSP: 002b:00007fe83d1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 561.476174][T14000] RAX: ffffffffffffffda RBX: 00007fe83f1b6180 RCX: 00007fe83ef8ebe9 [ 561.476200][T14000] RDX: 0000000000002002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 561.476220][T14000] RBP: 00007fe83f011e19 R08: 0000000000000000 R09: 0000000000000000 [ 561.476238][T14000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.476261][T14000] R13: 00007fe83f1b6218 R14: 00007fe83f1b6180 R15: 00007ffe009dc398 [ 561.476300][T14000] [ 562.464024][ T9188] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 562.464065][ T9188] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 562.487808][ T9188] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 562.487850][ T9188] Bluetooth: hci2: adv larger than maximum supported [ 562.503593][ T9188] Bluetooth: hci2: adv larger than maximum supported [ 562.510468][ T9188] Bluetooth: hci2: Malformed LE Event: 0x0d [ 562.859622][ T30] audit: type=1326 audit(1843104616.481:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14021 comm="syz.4.1393" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f348178ebe9 code=0x0 [ 563.857431][T14056] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 563.876507][T14056] ima: policy update failed [ 563.881461][ T30] audit: type=1802 audit(1843104617.511:43): pid=14056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.1398" res=0 errno=0 [ 564.252481][T14062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1400'. [ 564.507651][T14071] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1402'. [ 564.562281][T14071] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1402'. [ 564.595598][T14071] netlink: 134 bytes leftover after parsing attributes in process `syz.1.1402'. [ 564.939139][ T30] audit: type=1800 audit(1843104618.572:44): pid=14074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1403" name="dbroot" dev="configfs" ino=49981 res=0 errno=0 [ 565.199752][T14088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1406'. [ 566.582315][T14116] openvswitch: netlink: Message has 8 unknown bytes. [ 568.766382][T14161] FAULT_INJECTION: forcing a failure. [ 568.766382][T14161] name failslab, interval 1, probability 0, space 0, times 0 [ 568.835122][T14161] CPU: 1 UID: 0 PID: 14161 Comm: syz.7.1420 Not tainted syzkaller #0 PREEMPT(full) [ 568.835159][T14161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 568.835174][T14161] Call Trace: [ 568.835187][T14161] [ 568.835195][T14161] dump_stack_lvl+0x16c/0x1f0 [ 568.835231][T14161] should_fail_ex+0x512/0x640 [ 568.835264][T14161] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 568.835295][T14161] should_failslab+0xc2/0x120 [ 568.835326][T14161] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 568.835354][T14161] ? sk_prot_alloc+0x60/0x2a0 [ 568.835394][T14161] sk_prot_alloc+0x60/0x2a0 [ 568.835432][T14161] sk_alloc+0x36/0xc20 [ 568.835462][T14161] tipc_sk_create+0xcf/0x21a0 [ 568.835490][T14161] ? find_held_lock+0x2b/0x80 [ 568.835514][T14161] ? __sock_create+0x2f2/0x8d0 [ 568.835540][T14161] __sock_create+0x335/0x8d0 [ 568.835567][T14161] __sys_socket+0x14d/0x260 [ 568.835590][T14161] ? __pfx___sys_socket+0x10/0x10 [ 568.835614][T14161] ? xfd_validate_state+0x61/0x180 [ 568.835656][T14161] __x64_sys_socket+0x72/0xb0 [ 568.835678][T14161] ? lockdep_hardirqs_on+0x7c/0x110 [ 568.835707][T14161] do_syscall_64+0xcd/0x490 [ 568.835741][T14161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.835764][T14161] RIP: 0033:0x7fe83ef8ebe9 [ 568.835781][T14161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.835804][T14161] RSP: 002b:00007fe83fd34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 568.835825][T14161] RAX: ffffffffffffffda RBX: 00007fe83f1b5fa0 RCX: 00007fe83ef8ebe9 [ 568.835841][T14161] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 568.835854][T14161] RBP: 00007fe83f011e19 R08: 0000000000000000 R09: 0000000000000000 [ 568.835868][T14161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.835881][T14161] R13: 00007fe83f1b6038 R14: 00007fe83f1b5fa0 R15: 00007ffe009dc398 [ 568.835910][T14161] [ 569.776074][T14167] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.1421: iget: checksum invalid [ 569.804217][T14180] i2c i2c-0: delete_device: Can't find device in list [ 569.847030][T14167] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 569.911935][T14167] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.1421: iget: checksum invalid [ 569.948848][T14167] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 570.025789][T14167] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.1421: iget: checksum invalid [ 570.039794][T14167] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 570.079535][T14167] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm syz.6.1421: iget: checksum invalid [ 570.093300][T14167] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 570.184658][T14167] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 570.218892][T14167] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 572.621035][T14232] netlink: 'syz.1.1433': attribute type 3 has an invalid length. [ 572.834230][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.841202][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.719540][T14264] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 575.019825][T14266] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 577.346360][T14299] FAULT_INJECTION: forcing a failure. [ 577.346360][T14299] name failslab, interval 1, probability 0, space 0, times 0 [ 577.393965][T14299] CPU: 1 UID: 0 PID: 14299 Comm: syz.1.1448 Not tainted syzkaller #0 PREEMPT(full) [ 577.393996][T14299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 577.394009][T14299] Call Trace: [ 577.394017][T14299] [ 577.394025][T14299] dump_stack_lvl+0x16c/0x1f0 [ 577.394058][T14299] should_fail_ex+0x512/0x640 [ 577.394089][T14299] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 577.394118][T14299] should_failslab+0xc2/0x120 [ 577.394147][T14299] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 577.394172][T14299] ? __proc_create+0xc3/0x8e0 [ 577.394206][T14299] ? __proc_create+0x2ce/0x8e0 [ 577.394241][T14299] __proc_create+0x2ce/0x8e0 [ 577.394273][T14299] ? __pfx___proc_create+0x10/0x10 [ 577.394308][T14299] ? _raw_write_unlock+0x28/0x50 [ 577.394334][T14299] ? proc_register+0x314/0x5f0 [ 577.394369][T14299] proc_create_reg+0x7d/0x180 [ 577.394403][T14299] ? __pfx_ip_vs_stats_show+0x10/0x10 [ 577.394432][T14299] proc_create_net_single+0x86/0x180 [ 577.394473][T14299] ? __pfx_proc_create_net_single+0x10/0x10 [ 577.394516][T14299] ip_vs_control_net_init+0x457/0x1d20 [ 577.394539][T14299] ? debug_mutex_init+0x37/0x70 [ 577.394564][T14299] __ip_vs_init+0x217/0x520 [ 577.394589][T14299] ? __pfx___ip_vs_init+0x10/0x10 [ 577.394612][T14299] ops_init+0x1e2/0x5f0 [ 577.394645][T14299] setup_net+0x10f/0x380 [ 577.394674][T14299] ? lockdep_init_map_type+0x5c/0x280 [ 577.394704][T14299] ? __pfx_setup_net+0x10/0x10 [ 577.394736][T14299] ? debug_mutex_init+0x37/0x70 [ 577.394760][T14299] copy_net_ns+0x2a6/0x5f0 [ 577.394796][T14299] create_new_namespaces+0x3ea/0xa90 [ 577.394827][T14299] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 577.394854][T14299] ksys_unshare+0x45b/0xa40 [ 577.394885][T14299] ? __pfx_ksys_unshare+0x10/0x10 [ 577.394915][T14299] ? xfd_validate_state+0x61/0x180 [ 577.394955][T14299] __x64_sys_unshare+0x31/0x40 [ 577.394988][T14299] do_syscall_64+0xcd/0x490 [ 577.395020][T14299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.395041][T14299] RIP: 0033:0x7f29bb38ebe9 [ 577.395058][T14299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.395079][T14299] RSP: 002b:00007f29bc1e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 577.395100][T14299] RAX: ffffffffffffffda RBX: 00007f29bb5b5fa0 RCX: 00007f29bb38ebe9 [ 577.395114][T14299] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 577.395127][T14299] RBP: 00007f29bb411e19 R08: 0000000000000000 R09: 0000000000000000 [ 577.395139][T14299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.395152][T14299] R13: 00007f29bb5b6038 R14: 00007f29bb5b5fa0 R15: 00007ffd3b0616d8 [ 577.395179][T14299] [ 578.786932][T14324] FAULT_INJECTION: forcing a failure. [ 578.786932][T14324] name failslab, interval 1, probability 0, space 0, times 0 [ 578.800797][T14326] bond0: option all_slaves_active: invalid value () [ 578.874694][T14324] CPU: 0 UID: 0 PID: 14324 Comm: syz.6.1451 Not tainted syzkaller #0 PREEMPT(full) [ 578.874741][T14324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 578.874760][T14324] Call Trace: [ 578.874769][T14324] [ 578.874781][T14324] dump_stack_lvl+0x16c/0x1f0 [ 578.874828][T14324] should_fail_ex+0x512/0x640 [ 578.874873][T14324] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 578.874916][T14324] should_failslab+0xc2/0x120 [ 578.874958][T14324] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 578.874999][T14324] ? seq_open+0x55/0x170 [ 578.875052][T14324] ? __pfx_tracing_trace_options_show+0x10/0x10 [ 578.875090][T14324] seq_open+0x55/0x170 [ 578.875146][T14324] ? __pfx_tracing_trace_options_show+0x10/0x10 [ 578.875186][T14324] single_open+0xfc/0x1f0 [ 578.875237][T14324] tracing_trace_options_open+0xa7/0x100 [ 578.875287][T14324] do_dentry_open+0x982/0x1530 [ 578.875329][T14324] ? __pfx_tracing_trace_options_open+0x10/0x10 [ 578.875386][T14324] vfs_open+0x82/0x3f0 [ 578.875439][T14324] path_openat+0x1de4/0x2cb0 [ 578.875492][T14324] ? __pfx_path_openat+0x10/0x10 [ 578.875543][T14324] do_filp_open+0x20b/0x470 [ 578.875582][T14324] ? __pfx_do_filp_open+0x10/0x10 [ 578.875651][T14324] ? alloc_fd+0x471/0x7d0 [ 578.875698][T14324] do_sys_openat2+0x11b/0x1d0 [ 578.875747][T14324] ? __pfx_do_sys_openat2+0x10/0x10 [ 578.875815][T14324] __x64_sys_openat+0x174/0x210 [ 578.875867][T14324] ? __pfx___x64_sys_openat+0x10/0x10 [ 578.875929][T14324] do_syscall_64+0xcd/0x490 [ 578.875980][T14324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.876007][T14324] RIP: 0033:0x7fbf4e78ebe9 [ 578.876030][T14324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.876057][T14324] RSP: 002b:00007fbf4f60a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 578.876084][T14324] RAX: ffffffffffffffda RBX: 00007fbf4e9b5fa0 RCX: 00007fbf4e78ebe9 [ 578.876100][T14324] RDX: 0000000000084100 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 578.876145][T14324] RBP: 00007fbf4e811e19 R08: 0000000000000000 R09: 0000000000000000 [ 578.876162][T14324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.876179][T14324] R13: 00007fbf4e9b6038 R14: 00007fbf4e9b5fa0 R15: 00007fffc9ef7818 [ 578.876215][T14324] [ 579.081716][T14316] bond0: option all_slaves_active: invalid value () [ 579.083440][ C0] vkms_vblank_simulate: vblank timer overrun [ 579.340476][T14328] nbd: couldn't find device at index 137 [ 579.774360][T14339] ptrace attach of "./syz-executor exec"[14340] was attempted by "./syz-executor exec"[14339] [ 580.122115][ T9188] Bluetooth: hci0: unexpected event 0x35 length: 13 > 6 [ 582.996948][T14416] FAULT_INJECTION: forcing a failure. [ 582.996948][T14416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.043818][T14416] CPU: 0 UID: 0 PID: 14416 Comm: syz.7.1471 Not tainted syzkaller #0 PREEMPT(full) [ 583.043863][T14416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 583.043883][T14416] Call Trace: [ 583.043894][T14416] [ 583.043905][T14416] dump_stack_lvl+0x16c/0x1f0 [ 583.043955][T14416] should_fail_ex+0x512/0x640 [ 583.044005][T14416] strncpy_from_user+0x3b/0x2e0 [ 583.044062][T14416] getname_flags.part.0+0x8f/0x550 [ 583.044114][T14416] ? find_held_lock+0x2b/0x80 [ 583.044149][T14416] getname_flags+0x93/0xf0 [ 583.044185][T14416] do_sys_openat2+0xb8/0x1d0 [ 583.044236][T14416] ? __pfx_do_sys_openat2+0x10/0x10 [ 583.044289][T14416] ? __rseq_handle_notify_resume+0x681/0x10e0 [ 583.044344][T14416] __x64_sys_openat+0x174/0x210 [ 583.044395][T14416] ? __pfx___x64_sys_openat+0x10/0x10 [ 583.044462][T14416] do_syscall_64+0xcd/0x490 [ 583.044509][T14416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.044542][T14416] RIP: 0033:0x7fe83ef8ebe9 [ 583.044567][T14416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.044599][T14416] RSP: 002b:00007fe83fd34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 583.044629][T14416] RAX: ffffffffffffffda RBX: 00007fe83f1b5fa0 RCX: 00007fe83ef8ebe9 [ 583.044649][T14416] RDX: 00000000000b8200 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 583.044673][T14416] RBP: 00007fe83f011e19 R08: 0000000000000000 R09: 0000000000000000 [ 583.044694][T14416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.044713][T14416] R13: 00007fe83f1b6038 R14: 00007fe83f1b5fa0 R15: 00007ffe009dc398 [ 583.044754][T14416] [ 583.217324][ C0] vkms_vblank_simulate: vblank timer overrun [ 585.085909][T14443] delete_channel: no stack [ 585.117410][ T9188] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 585.117460][ T9188] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 585.132265][ T9188] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 585.132290][ T9188] Bluetooth: hci2: adv larger than maximum supported [ 585.139325][ T9188] Bluetooth: hci2: adv larger than maximum supported [ 585.146073][ T9188] Bluetooth: hci2: Malformed LE Event: 0x0d [ 585.727076][T14475] random: crng reseeded on system resumption [ 585.750699][T12553] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:15: iget: checksum invalid [ 585.762356][T12553] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 585.780342][T12562] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:23: iget: checksum invalid [ 585.801915][T12553] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:15: iget: checksum invalid [ 585.816425][T12562] (NULL device *): loading /lib/firmware/updates/syzkaller/regulatory.db.p7s failed with error -74 [ 585.858639][T12553] (NULL device *): loading /lib/firmware/updates/regulatory.db failed with error -74 [ 585.914367][T12562] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:23: iget: checksum invalid [ 585.939565][ T9188] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 585.968804][T12553] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:15: iget: checksum invalid [ 585.981097][T12562] (NULL device *): loading /lib/firmware/updates/regulatory.db.p7s failed with error -74 [ 586.018500][T12553] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 586.031907][T12562] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:23: iget: checksum invalid [ 586.073923][T12553] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:15: iget: checksum invalid [ 586.085828][T12562] (NULL device *): loading /lib/firmware/syzkaller/regulatory.db.p7s failed with error -74 [ 586.148082][T12553] (NULL device *): loading /lib/firmware/regulatory.db failed with error -74 [ 586.162301][T12562] EXT4-fs error (device sda1): ext4_lookup:1787: inode #274: comm kworker/u10:23: iget: checksum invalid [ 586.214275][T12553] (NULL device *): Direct firmware load for regulatory.db failed with error -74 [ 586.237175][T12562] (NULL device *): loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 586.256721][T12553] (NULL device *): Falling back to sysfs fallback for: regulatory.db [ 586.274950][T12562] (NULL device *): Direct firmware load for regulatory.db.p7s failed with error -74 [ 586.306963][T12562] (NULL device *): Falling back to sysfs fallback for: regulatory.db.p7s [ 596.516015][T14497] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 596.516940][T14500] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 596.899615][ T9188] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 596.899651][ T9188] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 596.915148][ T9188] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 596.915181][ T9188] Bluetooth: hci2: adv larger than maximum supported [ 596.922287][ T9188] Bluetooth: hci2: adv larger than maximum supported [ 596.929519][ T9188] Bluetooth: hci2: Malformed LE Event: 0x0d [ 597.104071][T14543] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1495'. [ 597.231783][T14543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.243100][T14543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.254264][T14543] bond0 (unregistering): Released all slaves [ 597.524031][ T30] audit: type=1326 audit(1843104651.173:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.7.1498" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe83ef8ebe9 code=0x0 [ 597.808135][T14569] openvswitch: netlink: Key type 304 is out of range max 32 [ 597.858280][T14573] openvswitch: netlink: Key type 304 is out of range max 32 [ 598.573106][ T30] audit: type=1326 audit(1843104652.224:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14589 comm="syz.7.1504" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe83ef8ebe9 code=0x0 [ 598.596564][T14588] ================================================================== [ 598.596582][T14588] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0xa03/0xc70 [ 598.596640][T14588] Read of size 256 at addr ffff88807d5b1fc0 by task syz.1.1503/14588 [ 598.596666][T14588] [ 598.596680][T14588] CPU: 1 UID: 0 PID: 14588 Comm: syz.1.1503 Not tainted syzkaller #0 PREEMPT(full) [ 598.596713][T14588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 598.596730][T14588] Call Trace: [ 598.596740][T14588] [ 598.596751][T14588] dump_stack_lvl+0x116/0x1f0 [ 598.596791][T14588] print_report+0xcd/0x630 [ 598.596827][T14588] ? __virt_addr_valid+0x81/0x610 [ 598.596862][T14588] ? __phys_addr+0xe8/0x180 [ 598.596898][T14588] ? fbcon_prepare_logo+0xa03/0xc70 [ 598.596932][T14588] kasan_report+0xe0/0x110 [ 598.596970][T14588] ? fbcon_prepare_logo+0xa03/0xc70 [ 598.597009][T14588] kasan_check_range+0x100/0x1b0 [ 598.597052][T14588] __asan_memcpy+0x23/0x60 [ 598.597081][T14588] fbcon_prepare_logo+0xa03/0xc70 [ 598.597125][T14588] fbcon_init+0xd77/0x1900 [ 598.597166][T14588] visual_init+0x320/0x620 [ 598.597196][T14588] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 598.597239][T14588] store_bind+0x61d/0x760 [ 598.597277][T14588] ? sysfs_file_kobj+0xe4/0x290 [ 598.597308][T14588] ? __pfx_store_bind+0x10/0x10 [ 598.597343][T14588] dev_attr_store+0x55/0x80 [ 598.597384][T14588] ? __pfx_dev_attr_store+0x10/0x10 [ 598.597427][T14588] sysfs_kf_write+0xf2/0x150 [ 598.597459][T14588] kernfs_fop_write_iter+0x354/0x510 [ 598.597485][T14588] ? __pfx_sysfs_kf_write+0x10/0x10 [ 598.597518][T14588] iter_file_splice_write+0xa24/0x12e0 [ 598.597561][T14588] ? __pfx_iter_file_splice_write+0x10/0x10 [ 598.597596][T14588] ? __pfx_copy_splice_read+0x10/0x10 [ 598.597641][T14588] ? __pfx_iter_file_splice_write+0x10/0x10 [ 598.597675][T14588] direct_splice_actor+0x18f/0x6c0 [ 598.597707][T14588] splice_direct_to_actor+0x345/0xa30 [ 598.597739][T14588] ? __pfx_direct_splice_actor+0x10/0x10 [ 598.597774][T14588] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 598.597810][T14588] do_splice_direct+0x174/0x240 [ 598.597839][T14588] ? __pfx_do_splice_direct+0x10/0x10 [ 598.597868][T14588] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 598.597900][T14588] ? rw_verify_area+0xcf/0x6c0 [ 598.597930][T14588] do_sendfile+0xb06/0xe50 [ 598.597964][T14588] ? __pfx_do_sendfile+0x10/0x10 [ 598.597997][T14588] ? __x64_sys_futex+0x1e0/0x4c0 [ 598.598034][T14588] ? __x64_sys_futex+0x1e9/0x4c0 [ 598.598073][T14588] __x64_sys_sendfile64+0x1d8/0x220 [ 598.598114][T14588] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 598.598160][T14588] do_syscall_64+0xcd/0x490 [ 598.598201][T14588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.598230][T14588] RIP: 0033:0x7f29bb38ebe9 [ 598.598251][T14588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.598280][T14588] RSP: 002b:00007f29bc1e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 598.598307][T14588] RAX: ffffffffffffffda RBX: 00007f29bb5b5fa0 RCX: 00007f29bb38ebe9 [ 598.598327][T14588] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 598.598344][T14588] RBP: 00007f29bb411e19 R08: 0000000000000000 R09: 0000000000000000 [ 598.598361][T14588] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 598.598378][T14588] R13: 00007f29bb5b6038 R14: 00007f29bb5b5fa0 R15: 00007ffd3b0616d8 [ 598.598405][T14588] [ 598.598414][T14588] [ 598.598421][T14588] Allocated by task 12311: [ 598.598434][T14588] kasan_save_stack+0x33/0x60 [ 598.598466][T14588] kasan_save_track+0x14/0x30 [ 598.598498][T14588] __kasan_slab_alloc+0x89/0x90 [ 598.598531][T14588] kmem_cache_alloc_node_noprof+0x1d5/0x3b0 [ 598.598564][T14588] alloc_vmap_area+0x645/0x29c0 [ 598.598603][T14588] __get_vm_area_node+0x1ca/0x330 [ 598.598652][T14588] __vmalloc_node_range_noprof+0x271/0x14b0 [ 598.598679][T14588] __vmalloc_node_noprof+0xad/0xf0 [ 598.598702][T14588] copy_process+0x2c70/0x7690 [ 598.598737][T14588] kernel_clone+0xfc/0x930 [ 598.598769][T14588] __do_sys_clone3+0x212/0x290 [ 598.598802][T14588] do_syscall_64+0xcd/0x490 [ 598.598835][T14588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.598860][T14588] [ 598.598867][T14588] The buggy address belongs to the object at ffff88807d5b1f70 [ 598.598867][T14588] which belongs to the cache vmap_area of size 72 [ 598.598889][T14588] The buggy address is located 8 bytes to the right of [ 598.598889][T14588] allocated 72-byte region [ffff88807d5b1f70, ffff88807d5b1fb8) [ 598.598918][T14588] [ 598.598925][T14588] The buggy address belongs to the physical page: [ 598.598937][T14588] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807d5b1b60 pfn:0x7d5b1 [ 598.598963][T14588] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 598.598988][T14588] page_type: f5(slab) [ 598.599012][T14588] raw: 00fff00000000200 ffff88801b84ba00 ffffea00008ce310 ffffea00008ad710 [ 598.599038][T14588] raw: ffff88807d5b1b60 0000000000270010 00000000f5000000 0000000000000000 [ 598.599054][T14588] page dumped because: kasan: bad access detected [ 598.599067][T14588] page_owner tracks the page as allocated [ 598.599076][T14588] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 11756, tgid 11756 (syz.5.1025), ts 421838102114, free_ts 421722793984 [ 598.599122][T14588] post_alloc_hook+0x1c0/0x230 [ 598.599149][T14588] get_page_from_freelist+0x132b/0x38e0 [ 598.599179][T14588] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 598.599229][T14588] alloc_pages_mpol+0x1fb/0x550 [ 598.599285][T14588] new_slab+0x247/0x330 [ 598.599312][T14588] ___slab_alloc+0xcf2/0x1740 [ 598.599341][T14588] __slab_alloc.constprop.0+0x56/0xb0 [ 598.599373][T14588] kmem_cache_alloc_node_noprof+0xf5/0x3b0 [ 598.599411][T14588] alloc_vmap_area+0xdc8/0x29c0 [ 598.599456][T14588] __get_vm_area_node+0x1ca/0x330 [ 598.599503][T14588] __vmalloc_node_range_noprof+0x271/0x14b0 [ 598.599537][T14588] __vmalloc_node_noprof+0xad/0xf0 [ 598.599565][T14588] copy_process+0x2c70/0x7690 [ 598.599604][T14588] kernel_clone+0xfc/0x930 [ 598.599654][T14588] __do_sys_clone3+0x212/0x290 [ 598.599695][T14588] do_syscall_64+0xcd/0x490 [ 598.599739][T14588] page last free pid 15 tgid 15 stack trace: [ 598.599756][T14588] __free_frozen_pages+0x7d5/0x10f0 [ 598.599787][T14588] tlb_remove_table_rcu+0x116/0x1a0 [ 598.599817][T14588] rcu_core+0x799/0x1530 [ 598.599842][T14588] handle_softirqs+0x219/0x8e0 [ 598.599876][T14588] run_ksoftirqd+0x3a/0x60 [ 598.599910][T14588] smpboot_thread_fn+0x3f4/0xae0 [ 598.599947][T14588] kthread+0x3c5/0x780 [ 598.599990][T14588] ret_from_fork+0x5d4/0x6f0 [ 598.600041][T14588] ret_from_fork_asm+0x1a/0x30 [ 598.600080][T14588] [ 598.600088][T14588] Memory state around the buggy address: [ 598.600104][T14588] ffff88807d5b1e80: fc fc fc fc 00 00 00 00 00 00 00 00 00 fc fc fc [ 598.600129][T14588] ffff88807d5b1f00: fc 00 00 00 00 00 00 00 00 00 fc fc fc fc 00 00 [ 598.600154][T14588] >ffff88807d5b1f80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 598.600173][T14588] ^ [ 598.600191][T14588] ffff88807d5b2000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 598.600216][T14588] ffff88807d5b2080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 598.600235][T14588] ================================================================== [ 598.600542][T14588] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 598.600562][T14588] CPU: 1 UID: 0 PID: 14588 Comm: syz.1.1503 Not tainted syzkaller #0 PREEMPT(full) [ 598.600595][T14588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 598.600611][T14588] Call Trace: [ 598.600620][T14588] [ 598.600637][T14588] dump_stack_lvl+0x3d/0x1f0 [ 598.600676][T14588] vpanic+0x6e8/0x7a0 [ 598.600717][T14588] ? __pfx_vpanic+0x10/0x10 [ 598.600762][T14588] ? fbcon_prepare_logo+0xa03/0xc70 [ 598.600800][T14588] panic+0xca/0xd0 [ 598.600838][T14588] ? __pfx_panic+0x10/0x10 [ 598.600886][T14588] check_panic_on_warn+0xab/0xb0 [ 598.600927][T14588] end_report+0x107/0x170 [ 598.600964][T14588] kasan_report+0xee/0x110 [ 598.601002][T14588] ? fbcon_prepare_logo+0xa03/0xc70 [ 598.601043][T14588] kasan_check_range+0x100/0x1b0 [ 598.601086][T14588] __asan_memcpy+0x23/0x60 [ 598.601116][T14588] fbcon_prepare_logo+0xa03/0xc70 [ 598.601178][T14588] fbcon_init+0xd77/0x1900 [ 598.601221][T14588] visual_init+0x320/0x620 [ 598.601254][T14588] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 598.601299][T14588] store_bind+0x61d/0x760 [ 598.601339][T14588] ? sysfs_file_kobj+0xe4/0x290 [ 598.601372][T14588] ? __pfx_store_bind+0x10/0x10 [ 598.601408][T14588] dev_attr_store+0x55/0x80 [ 598.601454][T14588] ? __pfx_dev_attr_store+0x10/0x10 [ 598.601500][T14588] sysfs_kf_write+0xf2/0x150 [ 598.601534][T14588] kernfs_fop_write_iter+0x354/0x510 [ 598.601563][T14588] ? __pfx_sysfs_kf_write+0x10/0x10 [ 598.601598][T14588] iter_file_splice_write+0xa24/0x12e0 [ 598.601675][T14588] ? __pfx_iter_file_splice_write+0x10/0x10 [ 598.601712][T14588] ? __pfx_copy_splice_read+0x10/0x10 [ 598.601753][T14588] ? __pfx_iter_file_splice_write+0x10/0x10 [ 598.601801][T14588] direct_splice_actor+0x18f/0x6c0 [ 598.601833][T14588] splice_direct_to_actor+0x345/0xa30 [ 598.601865][T14588] ? __pfx_direct_splice_actor+0x10/0x10 [ 598.601897][T14588] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 598.601931][T14588] do_splice_direct+0x174/0x240 [ 598.601959][T14588] ? __pfx_do_splice_direct+0x10/0x10 [ 598.601989][T14588] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 598.602020][T14588] ? rw_verify_area+0xcf/0x6c0 [ 598.602049][T14588] do_sendfile+0xb06/0xe50 [ 598.602082][T14588] ? __pfx_do_sendfile+0x10/0x10 [ 598.602116][T14588] ? __x64_sys_futex+0x1e0/0x4c0 [ 598.602152][T14588] ? __x64_sys_futex+0x1e9/0x4c0 [ 598.602191][T14588] __x64_sys_sendfile64+0x1d8/0x220 [ 598.602233][T14588] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 598.602278][T14588] do_syscall_64+0xcd/0x490 [ 598.602319][T14588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.602346][T14588] RIP: 0033:0x7f29bb38ebe9 [ 598.602367][T14588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.602396][T14588] RSP: 002b:00007f29bc1e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 598.602423][T14588] RAX: ffffffffffffffda RBX: 00007f29bb5b5fa0 RCX: 00007f29bb38ebe9 [ 598.602442][T14588] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 598.602459][T14588] RBP: 00007f29bb411e19 R08: 0000000000000000 R09: 0000000000000000 [ 598.602476][T14588] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 598.602493][T14588] R13: 00007f29bb5b6038 R14: 00007f29bb5b5fa0 R15: 00007ffd3b0616d8 [ 598.602521][T14588] [ 598.602920][T14588] Kernel Offset: disabled