last executing test programs: 2m28.242726156s ago: executing program 2 (id=1484): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1$auto(0x3000000000000) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x7, 0x0) open(0x0, 0x2640, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram8/queue/iostats\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000180)='7\x81=\"\xad\xff\x8d\xf9;\x18\xa4\xb0&L\xeb=j\a\xb3\"Yq\'R\"\n\x1d\xa1\xff\a\x17\x00'/42, 0x81) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0xb80, 0x0) 2m28.014211651s ago: executing program 2 (id=1485): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x80000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{@inferred, 0x30c, 0xfffffffe, 0x8, "3112d598004a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe000900000000000755015e48d", @raw=0x4aa}, 0x3, 0x3, 0x4, @inferred, @integer={0x0, 0x5, 0x8}, "7a9fc199a16a2311eecf2fc7ae1da978dc3e8090334fdd7327d5864256080b000a0600000000000000ce0bb32777702b8d7c2d000000009100001000"}) openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x80001, 0x0) r1 = socket(0x2, 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20008000) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000002c0), 0x2400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x10000000001, 0x0, 0x1, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/ieee80211/phy9/netdev:wlan1/stations/08:02:11:00:00:00/he_capa\x00', 0x80900, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(r2, 0x1, 0x1e, 0x0, 0x9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000380)={[0x1ff, 0x4, 0x3, 0x8000000000001, 0x948f, 0x1003, 0x15f4da07, 0x3, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x0, 0x2, 0x7]}, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r3) sendmsg$auto_TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000004980)=ANY=[], 0x215c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) io_uring_setup$auto(0x2, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/afs/cells\x00', 0x181800, 0x0) read$auto_proc_pagemap_operations_internal(r5, &(0x7f0000000000)=""/217, 0xd9) 2m27.042209442s ago: executing program 2 (id=1488): mmap$auto(0x0, 0x0, 0xc00000072, 0xfffffffffffffff7, 0x1000000002, 0x8000) mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x100, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = socket(0x2b, 0x1, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x89a0, 0x4) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x1) socket(0x11, 0x800, 0xbfffffc0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0x4000000000000df, 0x13, r0, 0x8000) setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyd9\x00', 0x102, 0x0) socket(0xb1b356b3bd2f16d7, 0x2, 0x1) 2m26.780261249s ago: executing program 2 (id=1490): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) write$auto(r0, &(0x7f0000000240)=',-\t', 0x2000008008) setsockopt$auto_SO_TYPE(r0, 0x6, 0x3, &(0x7f0000000000)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x3ff) 2m26.595395806s ago: executing program 2 (id=1491): mmap$auto(0xfffffffffffffffd, 0x40000b, 0x20000df, 0x10, 0xffffffffffffffff, 0xb9) r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x400c091) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netstat\x00', 0x100, 0x0) write$auto(0xca, 0x0, 0x2d9) clock_adjtime$auto(0x200, &(0x7f00000006c0)={0x0, 0x0, 0x20000000000000, 0x40, 0x8, 0x2, 0xf, 0x0, 0x10000, 0x5, 0x0, {0x2, 0x10000}, 0x100000000, 0x5, 0x80000001, 0x9, 0x0, 0x1, 0x0, 0x7, 0x0, 0x5, 0x10}) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000500)='/dev/video0\x00', 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) read$auto_mon_fops_text_t_mon_text(r2, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/pages_to_scan\x00', 0x102, 0x0) sendfile$auto(r3, r3, 0x0, 0x7) clock_adjtime$auto(0x6bc8, &(0x7f00000005c0)={0x9, 0x0, 0x8, 0x8000000000000001, 0x7, 0xfffffffffffffff7, 0x6, 0x0, 0x2, 0x2, 0x1, {0xf, 0x7}, 0x82ba, 0x801, 0x59d, 0x5, 0x0, 0x8000000000000000, 0x100000000, 0x6, 0x9, 0x7, 0x81000}) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000040)) write$auto_snd_pcm_oss_f_reg_pcm_oss(r4, &(0x7f0000000080)="c2", 0x1) ioctl$auto_SNDCTL_DSP_SYNC(r4, 0x5001, 0xfffffffffffffffc) select$auto(0x6, 0x0, 0x0, &(0x7f00000002c0)={[0x1fc, 0x200000000807, 0xd, 0x1, 0x948b, 0x3, 0x7f, 0x3, 0x3, 0x9, 0x4, 0x5, 0x6d3f, 0x9, 0x9, 0xfffffffffffffffd]}, 0x0) read$auto_proc_pid_maps_operations_internal(r0, &(0x7f0000000180)=""/54, 0x60) fsconfig$auto_SHMEM_HUGE_FORCE(0xffffffffffffffff, 0x8, &(0x7f0000001040)='\x00', &(0x7f0000001080)="4d9dee06cd3402104540e67980f17815ca0f9844f6f27454cc369c0903395ec50ec37475f328193ad4e6929bcbed6c2fcd871432c7fdd113cc479c5b162e1cc027e8f6d8f329cc109985736da452477656af18a7aee18de1ac5ba9d37c9c2871f5a85682b3e15c9d1c9c5d98321e9bb6f16dff75c6734e76433752b4a19b1f5d3a9cebd96858f6c9214861d47f1696cbc5af19403474e7e2d22f26b9fe8f349f5af839db416222457ddafca84a2f4d6ff8257685913eb027eef5656ac214b76a9f1ae3434cc92af565", 0xfffffffffffffffe) socket(0xf, 0x3, 0x2) write$auto(r1, &(0x7f00000000c0)='/dev/audio1\x00', 0x9) r5 = getegid() ioctl$auto_SNDCTL_MIDI_INFO(r2, 0xc074510c, &(0x7f0000000340)="a949dff9da5b4066078021a88512747054159f3ad6279fb271038e230654967938cf0719e9e8a33a70dd438beeda9c6542fb23555ac17241217353e9962f6b468bf0a82c92324f500307913d58fae2b4cb13e77324d410975c9816f362ed632d486385713c79da72d165a9e0cf696d258a07d2169252bb5a1014511a27edb1e047a26433ddef399017b6ad35cae945d35d4ff7f9b2cb3173b8180d19014d9b498001484e396605631b43161efafadb068b0c1b2d3d691631") msgctl$auto_IPC_SET(0xffff, 0x1, &(0x7f0000000100)={{0x8001, 0x0, r5, 0x2, 0xfffffff7, 0x8, 0x6}, &(0x7f0000000040)=0x3, &(0x7f0000000080)=0xff, 0x8, 0xffff, 0x7f, 0x3, 0xb57f, 0x9, 0x4, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff}) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000e00)="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", 0xcb6) 2m25.648642134s ago: executing program 2 (id=1495): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/dummy0/flags\x00', 0x2c62, 0x0) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91AU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c8) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) msgctl$auto_IPC_SET(0x669, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'netdevsim0\x00'}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r0, 0x20000000028000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8005) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330, 0x0}, 0x0) quotactl$auto(0x2, &(0x7f0000000040)='/dev/sda1\x00', 0x62a0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x1000000000000005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x23, 0x80002, 0x4) setsockopt$auto(0x3, 0x0, 0x2b, 0x0, 0x108) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000140)={0xffffffffffffffff, 0xf2ae, 0x4, 0x7, 0x2, 0xfee}) msgctl$auto_MSG_STAT(0x5, 0xb, &(0x7f00000002c0)={{0x4, 0xee01, r4, 0xfffffffe, 0x69e, 0x9, 0x6}, &(0x7f00000001c0)=0x3, &(0x7f0000000200)=0x8, 0x8, 0x6, 0x9, 0x1000, 0x8001, 0x2, 0xfffa, 0x7c9, @inferred=r3, @raw=0xfffffff7}) r5 = socket(0x25, 0x1, 0x0) setsockopt$auto(r5, 0x116, 0x7f, 0x0, 0x400) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r5) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 2m24.008992207s ago: executing program 32 (id=1441): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000180)={0x14, r2, 0x1, 0x870bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) r3 = socket(0xa, 0x1, 0x100) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x3fdafc9, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0xc, 0x2, 0x6]}, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r6, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) (async) r7 = socket(0x18, 0x5, 0x1) pselect6$auto(0x200, &(0x7f0000000440)={[0x5, 0xd9c, 0x81, 0x6, 0xff00000000000, 0x9, 0x9, 0x5661, 0x4, 0x3, 0x6, 0x35e, 0xfffffffffffffffd, 0xc1, 0xfffffffffffffffc, 0xc]}, &(0x7f00000004c0)={[0x3ef, 0x3, 0xfffffffffffffffa, 0x9, 0x5, 0x997, 0xe593, 0x7fff, 0x5, 0x6, 0x81, 0x0, 0x8, 0x7c97, 0x4b53, 0x4]}, &(0x7f0000000540)={[0x3, 0x9, 0x40, 0x633, 0x9, 0xfffffffffffffffa, 0x3, 0x80000000001, 0x958, 0x0, 0x6, 0xf, 0xc4, 0x7, 0xfffffffffffffbff, 0x3]}, &(0x7f00000003c0)={0x1, 0x29}, &(0x7f00000005c0)="ceb5e0ab69d18d815e33f7774f9f0043c0126baa808909de2df68fc203ffa31e13d9970e1f79172539a28fb2e91c57a2d5c73a2c2c682dd90caf002d5404bda662a7e3d307fead4338542817893bff1e1867ec37d9566977336fb42ccfa059292cad71cd0793f0582bf8003a947af8713aad3f985522ea9c0ffa8e355a10964f47dc656c756a910d5c069b7f8aa810c8cb9c8864946da96eb21492139e864378d3b35ca875d129ba6cdc45a6e8aebe8593716459af87014044e2eb5209881b548621f93ecdf388aa4ea50c24a1f5ca6cb443e26414c2de02d2873347d0237d0067018786") connect$auto(r7, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) (async) r8 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r3) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r7, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r8, 0x100, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x30004850) msync$auto(0x1ffff001, 0x1800000000000fe, 0x400000004) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r9, 0x5425, 0x0) ioctl$auto_userfaultfd_dev_fops_userfaultfd(r5, 0x0, &(0x7f0000000180)="dc100debc7fd2c4fa89d950e1933e53f8a7a4ce5ce731ee4a3e31a7b62979e93c11e0853962e1f52fca001d62735f7a14fa942a74a70f490f73180a5b476885471f52edabde6ea5d51ad5c1e7a750984447a64bb9ff1d3a7") (async) r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00') ioctl$auto(r9, 0x6, r10) sendmsg$auto_NFSD_CMD_VERSION_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2000c014}, 0x20008040) 2m10.431582582s ago: executing program 33 (id=1495): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/dummy0/flags\x00', 0x2c62, 0x0) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91AU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c8) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) msgctl$auto_IPC_SET(0x669, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'netdevsim0\x00'}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r0, 0x20000000028000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8005) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330, 0x0}, 0x0) quotactl$auto(0x2, &(0x7f0000000040)='/dev/sda1\x00', 0x62a0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x1000000000000005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x23, 0x80002, 0x4) setsockopt$auto(0x3, 0x0, 0x2b, 0x0, 0x108) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000140)={0xffffffffffffffff, 0xf2ae, 0x4, 0x7, 0x2, 0xfee}) msgctl$auto_MSG_STAT(0x5, 0xb, &(0x7f00000002c0)={{0x4, 0xee01, r4, 0xfffffffe, 0x69e, 0x9, 0x6}, &(0x7f00000001c0)=0x3, &(0x7f0000000200)=0x8, 0x8, 0x6, 0x9, 0x1000, 0x8001, 0x2, 0xfffa, 0x7c9, @inferred=r3, @raw=0xfffffff7}) r5 = socket(0x25, 0x1, 0x0) setsockopt$auto(r5, 0x116, 0x7f, 0x0, 0x400) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r5) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) 2m0.200571561s ago: executing program 5 (id=1553): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x7ffff000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x184) ioctl$auto(0xffffffffffffffff, 0x1, r0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) getsockopt$auto(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0x8000000000000eb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x4d, 0x0) r1 = fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) syz_open_procfs$namespace(0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) 1m57.32240265s ago: executing program 5 (id=1594): mmap$auto(0x0, 0x0, 0xc00000072, 0xfffffffffffffff7, 0x1000000002, 0x8000) mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x100, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = socket(0x2b, 0x1, 0x1) r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r2) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xc4, r4, 0xa249789ec29fe60e, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x74c2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x3}, @NL80211_ATTR_TDLS_SUPPORT={0x4}, @NL80211_ATTR_SSID={0x10, 0x34, "8382b846875be2d806f0683f"}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xae}, @NL80211_ATTR_SAE_PASSWORD={0x7c, 0x115, "84358ee34e41fa82aa49c61060d4b2a41f76d3b9cf2cc2f2a137cadc046f6118adfacedc3803a3929710a30288e4acb3ddba7520348d55764a324cbd903b74b1bbea4cd2a3c5dbd11d52a4f6434b16fc0c6a593c880eac98f347e320c3a49f5c285e13954375dbd1fac37041b73773cf411ca7975c2a836c"}]}, 0xc4}, 0x1, 0x0, 0x0, 0xb2d34781e11e8e3a}, 0x4040) ioctl$auto(r2, 0x89a0, 0x4) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x1) socket(0x11, 0x800, 0xbfffffc0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f000000b000), 0x80, 0x0) pread64$auto(r5, &(0x7f000000b040)='\x00', 0x7, 0x6) setsockopt$auto(0x3, 0x114, 0xa, 0x0, 0x4) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ttyd9\x00', 0x102, 0x0) socket(0x10, 0x2, 0xb8) 1m55.278558301s ago: executing program 5 (id=1598): socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x800000}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) socket(0xa, 0x5, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0400290100a1fc5e2693b26b9f9247596fc86782fe9c861b55233ba3b41d2aee91fc1bdf09d6eb6a858b8ea350e88f48826551185b3cef757a28e83df042aa5b3f5d950c85c78185c80a1764d5db363bc7ef6877d795669c5414a80ec7d2c2b568884f0a3b42d8"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x400c040) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_thermal(0x0, 0xffffffffffffffff) msgctl$auto_IPC_INFO(0x7, 0x3, &(0x7f0000000200)={{0x13b8, 0x0, 0xee01, 0x100, 0x3, 0x7fffffff, 0x3afa}, &(0x7f0000000180)=0x3, &(0x7f00000001c0)=0xa, 0x7, 0x3, 0x9, 0x4, 0x8, 0xffff, 0xfffd, 0x6498, @raw=0x71, @raw=0xa}) setsockopt$auto(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x10000) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001c, 0x40007, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = inotify_init1$auto(0xc) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) sendmsg$auto_NL80211_CMD_GET_MPP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x50, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_HE_CAPABILITY={0x3a, 0x10d, "8223d208b7dd3463a3a936686aa5034b5d3d83436b7cb9e8e6724222c1064268a738597d81280455904fad91030000006d95d9650fcc"}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sync_file_range$auto(0xffffffffffffffff, 0x0, 0x8, 0xbeb) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x7fffffe}, 0x3, 0x3, 0x10) 1m53.507028068s ago: executing program 5 (id=1604): r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x4a880, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/tty28\x00', 0x101400, 0x0) ioctl$auto(0xffffffffffffffff, 0x1, r0) getsockopt$auto_SO_SNDLOWAT(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR642(r0, 0xc0884123, 0x0) read$auto(r1, 0x0, 0x80) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000400)="0a9a33aa") shmctl$auto_SHM_STAT(0x5, 0xd, 0x0) ioctl$auto_BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, 0x0) munmap$auto(0x3fb3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) clone$auto(0x3, 0x7, 0x0, 0x0, 0xa081) sendmsg$auto_NL802154_CMD_SEND_BEACONS(r2, 0x0, 0x20040084) setsockopt$auto_SO_ATTACH_REUSEPORT_EBPF(0xffffffffffffffff, 0x40f4, 0x34, 0x0, 0xffffffff) shmctl$auto_IPC_STAT(0x6, 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x240202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m52.962629591s ago: executing program 5 (id=1607): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mkdir$auto(&(0x7f0000000000)='}[,&*}\x00', 0xc001) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = socket(0x29, 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) mmap$auto(0x0, 0x4020008, 0xdf, 0x12, r0, 0x8000) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r0) madvise$auto(0x8, 0x7ff, 0x102) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x20499d, 0x9) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', 0x0, 0x44020, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) 1m51.400480153s ago: executing program 5 (id=1608): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/nbd4/sched/write2_next_rq\x00', 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b67, 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) unshare$auto(0x40000080) r1 = socket(0x11, 0x1, 0x87) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x34, r2, 0x41, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40008840}, 0x801) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0xa, 0x2, 0x0) setsockopt$auto(r3, 0x29, 0x30, 0x0, 0x20004) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) io_submit$auto(0x6, 0x6, &(0x7f0000000240)=&(0x7f0000000200)={0x1, 0x7fff, 0x2, 0x10c, 0x9, r0, 0x4, 0x6, 0x2, 0x0, 0x2, r1}) ioctl$auto_TCFLSH2(r5, 0x540b, &(0x7f0000000280)="1a2e29d0b0ebb36fa3d70644a47ac782a7e8149059ceb66119862f667ba2685c07d845e86017d859a898072b67e3f323aa904a2254d64004eb1cef62815d84cc26cacaa80fd5c9ee8ba536be032b76691543190b9e1d4872c42196ee942ed62ec47685bed8af01989630882aee75a52a1abf9a60cbfb7ee60e2b5d727340") write$auto_configfs_file_operations_configfs_internal(r4, &(0x7f0000000140)="8e", 0x1) close_range$auto(0x2, 0x8, 0x0) prctl$auto_PR_SET_SECCOMP(0x16, 0x9d9, 0x879, 0x1, 0xc606) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r8 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r8) sendmsg$auto_NL80211_CMD_SET_KEY(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0x8b4, r9, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_FILS_ERP_REALM={0x6a, 0xfa, "b6de13d1dd1da14108a91b9edadd5d8bb785e50655d6cd1847dc0e853c350aa409c5887268f82eab6a2cf9750403dc2ede7ae36415dab3fc94d42194f566b5f4b60fc9fbaf7fc52a6ce92db0f94c7897e1f804c3d19e4608b540585932f34e9d00a2b84b5f35"}, @NL80211_ATTR_IE_ASSOC_RESP={0x4f2, 0x80, "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"}, @NL80211_ATTR_TIMEOUT={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xba95}, @NL80211_ATTR_WIPHY_NAME={0x7, 0x2, '!#\x00'}, @NL80211_ATTR_STA_WME={0x24, 0x81, 0x0, 0x1, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x26}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_REKEY_DATA={0x83, 0x7a, 0x0, 0x1, [@typed={0xc, 0x12c, 0x0, 0x0, @u64}, @nested={0x34, 0x54, 0x0, 0x1, [@nested={0x4, 0x4}, @generic="a5bac0cc24f36f72ba11baaac566d205886fd83abe62d6917f2526d6", @nested={0x4, 0x30}, @nested={0x4, 0x137}, @typed={0x8, 0xa6, 0x0, 0x0, @ipv4=@remote}]}, @generic="4010c7d24859f20800c57c540b84fc75df5f0febc2f7181a4d434d8c2833cff9eb7feb09d4d97c0d28d2856f9f378ff927d1e30c50e369", @typed={0x8, 0xd0, 0x0, 0x0, @fd=r6}]}, @NL80211_ATTR_MBSSID_ELEMS={0x27b, 0x133, 0x0, 0x1, [@generic="d0b2dc900cfc98b4c4d10f41cdbe8ac2b40941d4c031fee9fe0cd33ad6d428d98bca6514f8bd02677238648dc46841751237aaea9770a78bb4f98d23871cebdc7fa25b3823137d1db74a3cddb457e5793333ee0f61c958dc5637a34cc821e6c61d6f6600238d570acbfe3fdf7595df6bd17d305dff2594e9186fe27f69ef7ee39a9acfea60ab62ffdbc945c611f9d675e4ca18173c46d8949f7602af6b544d33b6da4957c6a657484ebbc9a57a", @generic="584065bd72239995ee7e323bbf4008eb556051d67a884b9e25848d43ae77c129f2635db71c1a03a4d42649ceba797d55d559d94dbf482277f5ebba6b675eaf72994bb317dd8192f1bacd", @generic="1b0020f93b5ead71c9f3fc9a991f15990efdf54f4425fff4c9bcb31e30926d63dc9eb55a86cf5b589fe47c7821f634eea667532554f7f00db59a23aa93bffff91abdcf40e2d4df560641d447c1505343acfb504031f8657f2ba77d18e38cebde8568ed197d83651f406340e1d45e32f71c98d3e46e8ae5718021943438e6e3e10435b031995fe4fca53a94065a4232e5fd76b315a73d75fce326c6dc50fcdab3e74eeb93f58b79b7b5c47dce4320a1ddc9c7a2b714118a8815e1c696d92bd2d3815be9187b3670e80280463b8e9ad8f6800c2cdec4d20ce834331005f88a15b3", @typed={0x4, 0x7d}, @generic="32ac3e6a73491e5cbec6f0087c07f3433a0bbd7de5d666028433d20ea5b5bff4f8fd583a4c2680ba22e6049b5e9b69a492fa6b2fa335ebb7c0d5ce6c73dffa8c106eae4506ba642c79608aa1f47ba38ddef64c4d25dafd5d980351a40c365fde2e3c10b71606570785f1eaf410072de05acb021dc1056117e06b4f282459a969471cf65b5244961d29614cb50e350720f6249e4a8282a373e893cc98"]}]}, 0x8b4}, 0x1, 0x0, 0x0, 0x4895}, 0x8000) ioctl$auto(r7, 0x541c, r8) sendmsg$auto_NL80211_CMD_GET_MPP(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r9, 0x220, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x7fffffff}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x24044014) 1m49.755564286s ago: executing program 1 (id=1611): mmap$auto(0x0, 0x0, 0xc00000072, 0xfffffffffffffff7, 0x1000000002, 0x8000) mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x100, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = socket(0x2b, 0x1, 0x1) socketpair$auto(0x0, 0x1, 0x2, 0x0) ioctl$auto(r2, 0x89a0, 0x4) open(&(0x7f0000000080)='./cgroup\x00', 0x40001, 0x6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) mmap$auto(0x6, 0x48000a, 0x100002bb, 0x14, 0xffffffffffffffff, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) r3 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xffffffffffffffff, 0x1c0000000000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffdf, @remote}, 0x6a) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x4) fchmod$auto(0x3, 0x800000000000) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x1) socket(0x11, 0x800, 0xbfffffc0) mmap$auto(0x0, 0x20009, 0xe1, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x8, 0x2000000000002) r4 = epoll_create$auto(0x3e) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) 1m47.082440728s ago: executing program 1 (id=1613): socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x800000}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) socket(0xa, 0x5, 0x3) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000022c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="e91c9cb71479fd8b139a99f2508fdb0fe1d7d8f43bbea1937df35c46649ba1fb3d2268d481b7974b7b598d3d9ffc6cbb1513980099a4a5db87187dd07a089131f37b9497c622f46c1d6d0012afa1682ffa34db71270e1ecdb32368d165af805c7ffdcc5fd4fd2d32a9e302f5dc5ae0564dfbffbdb6dbe55645d5621627779cc2f0e97e98e9b467099b9163d5f6cb10d4c694e9596c2441ae3eedcc01d6dc9deee496d27992941889acdd40d8c287eefce39d3375a1653dd54ec5f20f72d35a", @ANYRES16=0x0, @ANYBLOB="040029bd7000fbdbdf2565000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x48050) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) syz_genetlink_get_family_id$auto_thermal(0x0, 0xffffffffffffffff) msgctl$auto_IPC_INFO(0x7, 0x3, &(0x7f0000000200)={{0x13b8, 0x0, 0xee01, 0x100, 0x3, 0x7fffffff, 0x3afa}, &(0x7f0000000180)=0x3, &(0x7f00000001c0)=0xa, 0x7, 0x3, 0x9, 0x4, 0x8, 0xffff, 0xfffd, 0x6498, @raw=0x71, @raw=0xa}) setsockopt$auto(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x10000) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x40007, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) setreuid$auto(0x3, 0x7) kill$auto(0x1, 0x12) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) sendmsg$auto_NL80211_CMD_GET_MPP(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_HE_CAPABILITY={0x10, 0x10d, "8223d208b7dd3463a3a93668"}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sync_file_range$auto(0xffffffffffffffff, 0x0, 0x8, 0xbeb) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x200007, 0x8) 1m45.824817561s ago: executing program 1 (id=1620): openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x48865fdad7f26c1a, 0x0) mmap$auto(0x83, 0x2020009, 0x8, 0xebf, 0xfffffffffffffffa, 0x2) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001040)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) socket(0x1e, 0x5, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x10303f, 0x0) ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0xa, 0x801, 0x106) pipe2$auto(&(0x7f0000000040)=0x8, 0x4800) splice$auto(0x4, 0x0, 0x2, 0x0, 0x1004, 0xf) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x80002, 0x73) utimes$auto(&(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)={0xfffffffffffffffd, 0x10000}) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptydb\x00', 0x107001, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1$auto(0x2077ff) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x8000, 0x0) open(0x0, 0x2640, 0x0) 1m44.54277647s ago: executing program 1 (id=1621): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x7ff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) r1 = socket(0xa, 0x2, 0x0) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x894}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYRES32=r1, @ANYRES8=0x0], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fddbdf252d0000001c00018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000300050000003400018014000200001400025ae6657468e929033208c9ce39eb4341ce315f766972745f77696669000800010000000000000000ebffffefffffffff", @ANYRES32=r4, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x40c0) read$auto(0x3, 0x0, 0xfdef) shutdown$auto(0x200000003, 0x2) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000000), r2) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x8000, 0x0) bpf$auto(0x5, &(0x7f0000000100)=@test={r1, 0x9, 0x2, 0x0, 0x7ff, 0x6, 0x5, 0xffffffff, 0x3, 0x269a, 0x7, 0x80000000, 0x1, 0x5, 0x7}, 0x101) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/007/001\x00', 0x200002, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) socket(0x2, 0x3, 0x1) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x100401, 0x0) write$auto_evm_xattr_ops_evm_secfs(r5, &(0x7f00000000c0)='.', 0x1) 1m44.455443192s ago: executing program 1 (id=1622): mmap$auto(0xd2, 0x4, 0x401, 0xa17, 0xffffffffffffffff, 0x8) mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create$auto(0x4) socket(0x1, 0x80000, 0x3a) getsockopt$auto_SO_GET_FILTER(0xffffffffffffffff, 0xffffffff, 0x1a, &(0x7f00000003c0)='/dev/sg0\x00\x0e\xe7\x8eI\xb3m\x83\xb3\v\\\x9f\xb4\x8f\x7f@7\x03\x00\x00\x00\x86w\x02\xa0\x16MZ\x14W`\xc3HjX\xa4\xe7\xd0\xc5D\xe4\xc5 \x9b3r\x11,\xdd9\r\xab~\xf8\xec\x8az;\xfa\xb3\xc8\x04\x16\xedT\x95\x82-\x05\tZR\b\x14\xe6\xe7\xfc\xfds\x8a\xfayT\x9dp\x1a \xba$\x02bz\xc3\x8c\x7fT2\xfe\x93\xf6[\xc3\xb76\xbc\x88\xee}\xbb`,\x11\xe2gP\xda\xbeG\xb1J\xd5\x14\xb1j\xa8\\\x16Y^U\x0e\xfb\xfa\xe8XJ\x94\xa4\xfb\"\x9b\xb4_\v\n\x97\x8c\x88,l\x91\xec\x1ca\xd0~\x00Zi\x98J\x0eG\xac|a\xd6\xc0\x9f~`\x98\x83\x92\x19\x9a*y\xba{hv\xe5\x98LT\xac\xbf\xff\x86!\xb0\xd1D\xe6G\xd1\x9b\x11\x99\x83\xf3\xd6\xc4Oz\n\xc1\x81\xcco\xf6\x9e9\xc6\x8fG\xef\v\xc1Z\xe7\xa7\'\x8d\xcf\xee+\xacc\xacR\x04N\xb8 J\x7fbQ\x88\xeb\x8b>\xd05\xad\x18n\xd6\xf5T\x81H\xdfY4\xd1\x12\x84\xdfVt\xce\xe9\xe2>\x83g\x0fe\xeb\xe5\xd5\xc3\xa1\x97\xd4\x88\xbdD\xf8\x9bP\xc8\xc1$\x00\x14\x1ak\xc3\xafU\xc4P\x14\xbf\xf1\xfd\xda\x90\x1e\xefY\xe9\xed\x7f', &(0x7f00000000c0)=0xf) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x100, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = socket(0x2b, 0x1, 0x1) r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x89a0, 0x4) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x1) socket(0x29, 0x80013, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000eb1, r3, 0x8000) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0x10007, 0x9, 0x6, 0x8001}, 0x101) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x21, 0x2, 0x2) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000000c0), r4) 1m43.519707259s ago: executing program 1 (id=1625): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="57e72c56e29751a2ac480c"], 0x1c}}, 0x10) (async) socket(0x9, 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) (async) io_uring_setup$auto(0x6, 0x0) r4 = socket(0x2, 0x801, 0x106) setsockopt$auto(r4, 0x6, 0x19, 0x0, 0x9) (async) select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x8, 0x3, 0x10, 0x3, 0x9, 0x9, 0xff, 0x3, 0x2, 0x2, 0x9, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, &(0x7f00000001c0)={[0x1aa57c94, 0x95, 0x5, 0x100000003, 0x8476, 0x6, 0x1, 0x9, 0xec, 0x2, 0x8, 0x8, 0x200, 0x7]}, 0x0) (async) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r3) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x2c, r5, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) (async) r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/nbd6/queue/zoned\x00', 0x6a980, 0x0) read$auto(r7, 0x0, 0x6) (async) r8 = socket(0x10, 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) getsockopt$auto(r8, 0x84, 0x66, 0x0, &(0x7f0000000000)=0x7ffe) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x2000c085) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socket(0x2, 0x1, 0xba6) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) 1m36.181526156s ago: executing program 34 (id=1608): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/nbd4/sched/write2_next_rq\x00', 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b67, 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) unshare$auto(0x40000080) r1 = socket(0x11, 0x1, 0x87) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x34, r2, 0x41, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40008840}, 0x801) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0xa, 0x2, 0x0) setsockopt$auto(r3, 0x29, 0x30, 0x0, 0x20004) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) io_submit$auto(0x6, 0x6, &(0x7f0000000240)=&(0x7f0000000200)={0x1, 0x7fff, 0x2, 0x10c, 0x9, r0, 0x4, 0x6, 0x2, 0x0, 0x2, r1}) ioctl$auto_TCFLSH2(r5, 0x540b, &(0x7f0000000280)="1a2e29d0b0ebb36fa3d70644a47ac782a7e8149059ceb66119862f667ba2685c07d845e86017d859a898072b67e3f323aa904a2254d64004eb1cef62815d84cc26cacaa80fd5c9ee8ba536be032b76691543190b9e1d4872c42196ee942ed62ec47685bed8af01989630882aee75a52a1abf9a60cbfb7ee60e2b5d727340") write$auto_configfs_file_operations_configfs_internal(r4, &(0x7f0000000140)="8e", 0x1) close_range$auto(0x2, 0x8, 0x0) prctl$auto_PR_SET_SECCOMP(0x16, 0x9d9, 0x879, 0x1, 0xc606) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r8 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r8) sendmsg$auto_NL80211_CMD_SET_KEY(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0x8b4, r9, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_FILS_ERP_REALM={0x6a, 0xfa, "b6de13d1dd1da14108a91b9edadd5d8bb785e50655d6cd1847dc0e853c350aa409c5887268f82eab6a2cf9750403dc2ede7ae36415dab3fc94d42194f566b5f4b60fc9fbaf7fc52a6ce92db0f94c7897e1f804c3d19e4608b540585932f34e9d00a2b84b5f35"}, @NL80211_ATTR_IE_ASSOC_RESP={0x4f2, 0x80, "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"}, @NL80211_ATTR_TIMEOUT={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xba95}, @NL80211_ATTR_WIPHY_NAME={0x7, 0x2, '!#\x00'}, @NL80211_ATTR_STA_WME={0x24, 0x81, 0x0, 0x1, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x26}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_REKEY_DATA={0x83, 0x7a, 0x0, 0x1, [@typed={0xc, 0x12c, 0x0, 0x0, @u64}, @nested={0x34, 0x54, 0x0, 0x1, [@nested={0x4, 0x4}, @generic="a5bac0cc24f36f72ba11baaac566d205886fd83abe62d6917f2526d6", @nested={0x4, 0x30}, @nested={0x4, 0x137}, @typed={0x8, 0xa6, 0x0, 0x0, @ipv4=@remote}]}, @generic="4010c7d24859f20800c57c540b84fc75df5f0febc2f7181a4d434d8c2833cff9eb7feb09d4d97c0d28d2856f9f378ff927d1e30c50e369", @typed={0x8, 0xd0, 0x0, 0x0, @fd=r6}]}, @NL80211_ATTR_MBSSID_ELEMS={0x27b, 0x133, 0x0, 0x1, [@generic="d0b2dc900cfc98b4c4d10f41cdbe8ac2b40941d4c031fee9fe0cd33ad6d428d98bca6514f8bd02677238648dc46841751237aaea9770a78bb4f98d23871cebdc7fa25b3823137d1db74a3cddb457e5793333ee0f61c958dc5637a34cc821e6c61d6f6600238d570acbfe3fdf7595df6bd17d305dff2594e9186fe27f69ef7ee39a9acfea60ab62ffdbc945c611f9d675e4ca18173c46d8949f7602af6b544d33b6da4957c6a657484ebbc9a57a", @generic="584065bd72239995ee7e323bbf4008eb556051d67a884b9e25848d43ae77c129f2635db71c1a03a4d42649ceba797d55d559d94dbf482277f5ebba6b675eaf72994bb317dd8192f1bacd", @generic="1b0020f93b5ead71c9f3fc9a991f15990efdf54f4425fff4c9bcb31e30926d63dc9eb55a86cf5b589fe47c7821f634eea667532554f7f00db59a23aa93bffff91abdcf40e2d4df560641d447c1505343acfb504031f8657f2ba77d18e38cebde8568ed197d83651f406340e1d45e32f71c98d3e46e8ae5718021943438e6e3e10435b031995fe4fca53a94065a4232e5fd76b315a73d75fce326c6dc50fcdab3e74eeb93f58b79b7b5c47dce4320a1ddc9c7a2b714118a8815e1c696d92bd2d3815be9187b3670e80280463b8e9ad8f6800c2cdec4d20ce834331005f88a15b3", @typed={0x4, 0x7d}, @generic="32ac3e6a73491e5cbec6f0087c07f3433a0bbd7de5d666028433d20ea5b5bff4f8fd583a4c2680ba22e6049b5e9b69a492fa6b2fa335ebb7c0d5ce6c73dffa8c106eae4506ba642c79608aa1f47ba38ddef64c4d25dafd5d980351a40c365fde2e3c10b71606570785f1eaf410072de05acb021dc1056117e06b4f282459a969471cf65b5244961d29614cb50e350720f6249e4a8282a373e893cc98"]}]}, 0x8b4}, 0x1, 0x0, 0x0, 0x4895}, 0x8000) ioctl$auto(r7, 0x541c, r8) sendmsg$auto_NL80211_CMD_GET_MPP(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r9, 0x220, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x7fffffff}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x24044014) 1m35.752013041s ago: executing program 0 (id=1653): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x8, 0x62a6, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x6, 0x0) sendto$auto(r0, 0x0, 0xb, 0xf1a, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x2) unshare$auto(0x40000080) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x88400, 0x0) read$auto(r1, 0x0, 0xe8) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) pipe2$auto(&(0x7f0000000080)=r1, 0x200) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x200082, 0x0) mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r1, 0x28000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x300, 0x0) ioctl$auto_SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000080)) r4 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) r5 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f00000000c0), 0x109002, 0x0) pread64$auto(r5, 0x0, 0x6, 0x400000008) write$auto(r4, 0x0, 0x40) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) setsockopt$auto(r4, 0x6, 0x5, &(0x7f0000000140)='/dev/raw-gadget\x00', 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x3c, r7, 0x1b, 0x70bd26, 0x25dfdbfc, {}, [@OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "89803500"}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x4004800) r8 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000600), 0x142, 0x0) writev$auto(r8, &(0x7f0000000c00)={0x0, 0x7}, 0x4) 1m34.617963332s ago: executing program 0 (id=1654): syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket(0x2, 0x1, 0x106) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x1c9802, 0x0) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x543c00, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x2, "fb2704573a53cf995e9bd50d9a038ae9ba8b6bb523af71be779551bea8bb46e0", @inferred=r2}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x18, 0x101000000000000, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) unshare$auto(0x40000080) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/state\x00', 0x20a42, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000000)="48fca9fce87c944c01b8294348d59fc327dd2324b3227bb0f3ab8cfc9f1a2af72398441d049fa2239e00db60e040770ddc585cf93134ee5ffd950b25b6d6313d0df88c656a49c19a4ccf7cfe7734be012fb567ec156663bfc910854064afb220850b0c319971b90d70332350730381dd5aeb760a16", 0x75) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r2, 0xc0085504, &(0x7f00000001c0)={0x9, 0x1, 0x6}) ioctl$auto(0x3, 0x40103e05, 0xffffffffffffffff) pread64$auto(r1, &(0x7f0000000200)='/proc/scsi/sg/devices\x00', 0x100000001, 0xfd) sendmsg$auto_OVS_VPORT_CMD_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4100}, 0x20000000) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x7}]}, 0x1c}}, 0x20004000) setsockopt$auto(r0, 0x6, 0x5, &(0x7f0000000080)='*\x00', 0xe6) 1m33.678635073s ago: executing program 0 (id=1657): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x5608, 0x7) keyctl$auto(0x3, 0xfffffffffffffffd, 0x0, 0xee01, 0xa00002) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop5/queue/discard_max_bytes\x00', 0x2, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) msgsnd$auto(0xfffffffc, 0x0, 0x1, 0x963) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r2, r2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x8902, 0x0) ioctl$auto_CEC_DQEVENT(r3, 0xc0506107, 0x0) ioctl$auto_CEC_DQEVENT(r3, 0xc0506107, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(0xc8, 0x0, 0x40f6) listmount$auto(&(0x7f0000000000)={0x1f, @raw, 0x80000024, 0xffffffffffffffff, 0x2}, 0x0, 0xf4240, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x80000000, 0x5f, 0x80000001, 0x7, 0x6d3f, 0x7, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0x8, 0x1, 0x948b, 0x3, 0x15f4da0d, 0x3, 0x3, 0x262, 0x8000001c, 0x7, 0x6d3e, 0xc, 0x2, 0x5]}, 0x0) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x8014) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/ip6_flowlabel\x00', 0x1cd141, 0x0) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/free_buffer\x00', 0x4c000, 0xebff) mmap$auto(0x6838, 0x4020009, 0xdf, 0xfffffffffffffffb, 0x401, 0x8000) openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/tracing_thresh\x00', 0x46a041, 0x0) 1m32.396574644s ago: executing program 0 (id=1658): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) (async) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) (async) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x105000, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x405b) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0xa0000, 0x0) ioctl$auto(r0, 0x4b3a, 0x1) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x40009, 0x8, 0x9b72, 0x7, 0x28000) (async, rerun: 32) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async, rerun: 32) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) (async, rerun: 32) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) (rerun: 32) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) read$auto(0x3, 0x0, 0x7) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket(0x2, 0x80002, 0x73) (async, rerun: 64) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) (async) write$auto(0x3, 0x0, 0xfdef) (async) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) semctl$auto(0x4, 0x804, 0x13, 0x46) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x99d1, 0x7, 0xf, 0x1, 0x948b, 0x3, 0x7f, 0x3, 0x8000000003, 0x62, 0x8000001f, 0x40007, 0x4, 0x9, 0x1, 0x8]}, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1m32.232003687s ago: executing program 0 (id=1659): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) prctl$auto(0x6, 0x1, 0x0, 0x0, 0x6) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x220401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)="58fcb282bcbc38bfaef257e019406ea6c445cd4f7f7662ac0f8834baa918d5b3cea133243c4f2b9a39e536b67f5a1a2bfdf589da2b1c980e1ce53883444996d1721d7f3ae627c6c604000000000000007910fbc02d899ab93d002d849884a5377ff11be2ed012110f2f520") r1 = socket(0x10, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6gre0/power/control\x00', 0x10b142, 0x0) r3 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0xc, 0x3, 0x0, 0x0, 0x2) socket(0x3, 0x3, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) getsockopt$auto(r3, 0x9, 0x0, &(0x7f0000000080)='\x00', &(0x7f0000000200)=0x1691) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r5, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/nbd4/queue/optimal_io_size\x00', 0x40000, 0x0) read$auto(r6, 0x0, 0x20) write$auto(r5, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9 \xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) r7 = socket(0x3, 0x5, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r7) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x80080) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) sendfile$auto(r2, r2, 0x0, 0x1000200) close_range$auto(0x0, 0x5, 0x0) 1m31.03276406s ago: executing program 0 (id=1661): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x1, 0xcf5f) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x11, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0xcf) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0xfffffffd, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r1 = socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mprotect$auto(0x0, 0x2, 0x7) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r1, 0x89f2, 0x24) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(r0, 0x84, 0x0, 0x0, &(0x7f0000000000)=0x84) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r3 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r3, 0x0, 0x1) r4 = ioctl$auto_TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x400, &(0x7f0000000000)={0x1, 0x5, 0x8, @raw=0x6c91}}) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), r3) setsockopt$auto(r2, 0x7, 0xdc20, &(0x7f0000000280)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x5) sendmsg$auto_BATADV_CMD_GET_VLAN(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r5, 0x85b123e0a5bc4e55, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_TT_VID={0x6, 0x14, 0xb}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ALGO_NAME={0x5, 0x2, '{'}]}, 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x800) madvise$auto(0x0, 0x200007, 0x19) r6 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x8000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r6, 0x100) mremap$auto(0x0, 0x2, 0x9, 0x3, 0x7fffffffb000) 1m27.89481251s ago: executing program 35 (id=1625): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="57e72c56e29751a2ac480c"], 0x1c}}, 0x10) (async) socket(0x9, 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) (async) io_uring_setup$auto(0x6, 0x0) r4 = socket(0x2, 0x801, 0x106) setsockopt$auto(r4, 0x6, 0x19, 0x0, 0x9) (async) select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x8, 0x3, 0x10, 0x3, 0x9, 0x9, 0xff, 0x3, 0x2, 0x2, 0x9, 0x100000001, 0x8000000000000001, 0x4, 0x9]}, &(0x7f00000001c0)={[0x1aa57c94, 0x95, 0x5, 0x100000003, 0x8476, 0x6, 0x1, 0x9, 0xec, 0x2, 0x8, 0x8, 0x200, 0x7]}, 0x0) (async) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r3) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x2c, r5, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) (async) r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/nbd6/queue/zoned\x00', 0x6a980, 0x0) read$auto(r7, 0x0, 0x6) (async) r8 = socket(0x10, 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) getsockopt$auto(r8, 0x84, 0x66, 0x0, &(0x7f0000000000)=0x7ffe) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x2000c085) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socket(0x2, 0x1, 0xba6) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) 1m16.604620751s ago: executing program 4 (id=1688): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x80000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{@inferred, 0x30c, 0xfffffffe, 0x8, "3112d598004a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe000900000000000755015e48d", @raw=0x4aa}, 0x3, 0x3, 0x4, @inferred, @integer={0x0, 0x5, 0x8}, "7a9fc199a16a2311eecf2fc7ae1da978dc3e8090334fdd7327d5864256080b000a0600000000000000ce0bb32777702b8d7c2d000000009100001000"}) openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x80001, 0x0) r1 = socket(0x2, 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20008000) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000002c0), 0x2400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x10000000001, 0x0, 0x1, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/ieee80211/phy9/netdev:wlan1/stations/08:02:11:00:00:00/he_capa\x00', 0x80900, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(r2, 0x1, 0x1e, 0x0, 0x9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r3) sendmsg$auto_TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000004980)=ANY=[], 0x215c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) io_uring_setup$auto(0x2, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/afs/cells\x00', 0x181800, 0x0) read$auto_proc_pagemap_operations_internal(r4, &(0x7f0000000000)=""/217, 0xd9) 1m15.910877336s ago: executing program 36 (id=1661): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x1, 0xcf5f) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x11, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0xcf) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0xfffffffd, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r1 = socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mprotect$auto(0x0, 0x2, 0x7) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r1, 0x89f2, 0x24) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(r0, 0x84, 0x0, 0x0, &(0x7f0000000000)=0x84) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r3 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r3, 0x0, 0x1) r4 = ioctl$auto_TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x400, &(0x7f0000000000)={0x1, 0x5, 0x8, @raw=0x6c91}}) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), r3) setsockopt$auto(r2, 0x7, 0xdc20, &(0x7f0000000280)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x5) sendmsg$auto_BATADV_CMD_GET_VLAN(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, r5, 0x85b123e0a5bc4e55, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1f3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_TT_VID={0x6, 0x14, 0xb}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ALGO_NAME={0x5, 0x2, '{'}]}, 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x800) madvise$auto(0x0, 0x200007, 0x19) r6 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x8000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r6, 0x100) mremap$auto(0x0, 0x2, 0x9, 0x3, 0x7fffffffb000) 1m15.620979578s ago: executing program 4 (id=1692): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) write$auto(0xffffffffffffffff, 0x0, 0x1000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x11, 0x3, 0x9) (async) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) unshare$auto(0x40000080) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bind$auto(r0, &(0x7f0000000200)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) (async) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000140)=""/103, 0x67) sendmmsg$auto(r0, 0x0, 0x9, 0x20000002) socket(0x2b, 0x1, 0x1) (async) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x81, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) rt_sigaction$auto(0x1, &(0x7f00000001c0)={&(0x7f0000000080)=0x0, 0x7ffffffffffffffb, 0x0, {0x5}}, 0x0, 0x8) (async) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6b) (async) rt_sigaction$auto(0x4, &(0x7f0000000300)={&(0x7f0000000240)=0x0, 0x0, 0x0, {0x1}}, 0x0, 0x8) (async) r2 = gettid() rt_sigqueueinfo$auto(r2, 0x1, 0x0) (async) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) (async) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 1m14.288034789s ago: executing program 4 (id=1695): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r0 = socket(0xa, 0x1, 0x40000100) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)='1\x00', 0xfffffffffffffd55) ioctl$auto_BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f0000000440)={@raw=0xff7, "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"}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x4000000) sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, &(0x7f0000001440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000014c0)=ANY=[@ANYRESHEX=r2, @ANYRES16=r2, @ANYBLOB="000427bd7000fedbdf250300000008000400ff0f00000800030008000000"], 0x24}}, 0x4000) r3 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram12/queue/io_poll_delay\x00', 0x280000, 0x0) read$auto(r4, 0x0, 0x9) writev$auto(r3, &(0x7f0000000200)={0x0, 0x3}, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) bind$auto(r3, &(0x7f00000000c0)=@xdp={0x2c, 0x2, r5, 0x2}, 0x7) sendmmsg$auto(r1, &(0x7f0000000340)={{0x0, 0x8f, 0x0, 0x5, &(0x7f0000000400)="554ae44a", 0x100, 0xb}, 0x8}, 0x3, 0x6) iopl$auto(0x0) openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f0000001480), 0x200, 0x0) write$auto(r3, &(0x7f0000000200)='1\x00', 0x2) r6 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x8100, 0x0) ioctl$auto_TUNSETNOCSUM(r6, 0x400454c8, &(0x7f0000001600)=0x9) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/binder/parameters/stop_on_user_error\x00', 0x2, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000100)='1', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan1/retrans_time\x00', 0x2242, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m13.888707104s ago: executing program 4 (id=1697): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000380), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYRES8=r1], 0x1288}, 0x1, 0x0, 0x0, 0x200000e0}, 0x4000044) syz_genetlink_get_family_id$auto_macsec(0x0, r0) sendfile$auto(r0, r0, &(0x7f0000000340)=0x7, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000240)={[0x1bf, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x5, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f00000003c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\x01\x00\x00\x00\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\b\x00\x00\x00\xea\x0f\xe6\xd2\x06\xec\x02\x9b\xd2\xed\xb9\x8b]\xb1 \xbbs\xef\x01m\x1cww\xf2K\x0f\x99\xd5\xe646\xc4\x87\xba\x88\xec)n!\xa5\xc6\x1d4e\xed\xd8\xd4k\x9a\xb3V\xd8\x95', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) pread64$auto(0xffffffffffffffff, 0x0, 0x594c, 0x9fffffffd) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x4, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x1, 0x0) fcntl$auto(0x3, 0x4, 0xa553) madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xc) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x516, 0x2020009, 0x1, 0xeb1, r4, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, 0x0, 0x5) getpriority$auto_PRIO_USER(0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6a) 1m12.86640821s ago: executing program 4 (id=1699): openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/thread-self/gid_map\x00', 0x802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x200000000000, 0x40000000004, 0x4, 0x3, 0x100000000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, &(0x7f0000000200)) r0 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000003b00)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x600, 0x0) readv$auto(r0, &(0x7f0000003dc0)={0x0, 0x1}, 0xb) r1 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) writev$auto(r1, &(0x7f00000035c0)={0x0, 0x4}, 0x4000000000006) socket(0x80000000000000a, 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0) write$auto(r2, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xff\x17\r\x96\xa3\xcc+\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97\x9cl', 0x100000a3d9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xb4d3) pread64$auto(r3, 0x0, 0x8, 0xffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x55) sendmsg$auto_OVS_DP_CMD_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$auto_OVS_DP_CMD_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[], 0xd000}, 0x1, 0x0, 0x0, 0x50}, 0x0) close_range$auto(0x2, 0x8, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) 1m11.691894715s ago: executing program 4 (id=1701): sysinfo$auto(&(0x7f0000000100)={0x6, [0x4, 0xc, 0x100], 0x200, 0xd5, 0x0, 0x9, 0x6, 0x1, 0x7f, 0x0, 0x7, 0x7, 0x6}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x18, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sg0\x00', 0x20000, 0x0) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000740), 0x101001, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab40, 0x0) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0xfffffffc, &(0x7f0000000180)) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x40044620, 0x0) mmap$auto(0x400000000, 0x2020009, 0x3, 0xeb1, r2, 0x8002) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) r3 = socket(0x29, 0x2, 0x0) ioctl$auto(r3, 0x8911, 0x24) madvise$auto(0x437, 0x8, 0x9) semctl$auto_GETPID(0xaf3, 0x0, 0xb, 0x6) r4 = socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r4, 0x0, 0x80) r5 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r5) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r6, @ANYBLOB], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) 56.070220942s ago: executing program 37 (id=1701): sysinfo$auto(&(0x7f0000000100)={0x6, [0x4, 0xc, 0x100], 0x200, 0xd5, 0x0, 0x9, 0x6, 0x1, 0x7f, 0x0, 0x7, 0x7, 0x6}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x18, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sg0\x00', 0x20000, 0x0) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000740), 0x101001, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab40, 0x0) seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0xfffffffc, &(0x7f0000000180)) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x40044620, 0x0) mmap$auto(0x400000000, 0x2020009, 0x3, 0xeb1, r2, 0x8002) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) r3 = socket(0x29, 0x2, 0x0) ioctl$auto(r3, 0x8911, 0x24) madvise$auto(0x437, 0x8, 0x9) semctl$auto_GETPID(0xaf3, 0x0, 0xb, 0x6) r4 = socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r4, 0x0, 0x80) r5 = socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r5) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r6, @ANYBLOB], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) 32.792371206s ago: executing program 8 (id=1808): mmap$auto(0x0, 0x20009, 0x4000800000df, 0xeb1, 0x401, 0x400000000008000) adjtimex$auto(&(0x7f0000000200)={0x5f95, 0x0, 0x2, 0x2000000a, 0xff7d, 0xbc58, 0x4000005, 0x0, 0x5, 0x8, 0x80000000, {0x7ff, 0xf423f}, 0x2744, 0x200000001, 0xff, 0x7, 0x0, 0x3c8, 0x8, 0x8, 0xffffffffffffffff, 0x1560cc85, 0x9}) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sched_get_priority_min$auto(0x40) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r0, 0xfffffffffffffff9, 0x1) ioctl$auto_BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000100)="099b9092191dd7d27124887e6226613bbeeaa3bf75b874a720b948adb3902f291afb9511b5ad02f7948c8e2e3f7d8c0a38649778163e0fc99e9d56bb7aa28c388ffe298a441b23a5c946fffcdc9deadb0d346937086458ff19f47e11d919ad78631d9470bf4d63b2491d3576235fdf9527bb6bdddb065790c21b58a730a8d2028771750a65e975abe6b31c682f82f76d9b2404e1b0d77647234892c48652d3d670a94d9bad666eea871be40315c898bc82b02028df2b8216fa06efa5e6574a50a7e5d641") timer_create$auto(0xb, 0x0, 0x0) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x9}}, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/sctp/auth_enable\x00', 0x100, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r1, 0x0, 0x0) sched_get_priority_min$auto(0xffff60ce) r2 = open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) fchown$auto(r2, 0xe5a, 0x5) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) utimensat$auto(r3, &(0x7f0000001c80)='\x00', 0x0, 0x1000) 32.506800675s ago: executing program 8 (id=1810): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x80000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000140)={{@inferred, 0x30c, 0xfffffffe, 0x8, "3112d598004a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe000900000000000755015e48d", @raw=0x4aa}, 0x3, 0x3, 0x4, @inferred, @integer={0x0, 0x5, 0x8}, "7a9fc199a16a2311eecf2fc7ae1da978dc3e8090334fdd7327d5864256080b000a0600000000000000ce0bb32777702b8d7c2d000000009100001000"}) openat$auto_iommufd_fops_main(0xffffffffffffff9c, 0x0, 0x80001, 0x0) r1 = socket(0x2, 0x1, 0x0) io_uring_setup$auto(0x1, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20008000) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000002c0), 0x2400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/ieee80211/phy9/netdev:wlan1/stations/08:02:11:00:00:00/he_capa\x00', 0x80900, 0x0) setsockopt$auto(r2, 0x1, 0x1e, 0x0, 0x9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r3) sendmsg$auto_TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000004980)=ANY=[], 0x215c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) io_uring_setup$auto(0x2, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/afs/cells\x00', 0x181800, 0x0) read$auto_proc_pagemap_operations_internal(r4, &(0x7f0000000000)=""/217, 0xd9) 31.403040456s ago: executing program 8 (id=1815): mmap$auto(0x5, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x9) sendmsg$auto_NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000fa03"], 0x5f}, 0x1, 0x0, 0x0, 0x40040094}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_to_batadv\x00', 0x0}) r3 = socket(0xa, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x4, 0x5, r3, @relative_id=0x7, 0xe600}, 0xf) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xa8, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_PSE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PSE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 31.206309348s ago: executing program 8 (id=1816): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/wireless\x00', 0x400, 0x0) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x46, 0x9}, 0x283) pread64$auto(r0, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xe4\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\xb0\xe7\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xf5\xcd\xa3\xe1Q|\r\x18\xd5\xb4\x1c\xa5\xfd\xdf\x98\xd9\xa7\xf3u\xa8ak\xfaHS\xfa\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8\x00\x00\x00', 0x202, 0x7) mmap$auto(0x1, 0x20009, 0x8, 0xeb1, 0x7f, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) mmap$auto(0xfffffffffffffffe, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(0x0, &(0x7f0000000340)={0x0, 0x5607}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="121dbf6cde91d7bdf432f870690aa5c9f05dd16f27eb21079e52fab73bc4f8d12129a87b36c78b5a27ec86f062", 0x7b}, 0x40000000000a, 0x3) ioctl$auto(0x3, 0x400454ca, 0x38) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xd, 0x0, 0x0, &(0x7f0000000200)={[0x8001ff, 0x7, 0xd, 0x8fd6, 0x948d, 0x490, 0x80, 0x3, 0x6, 0x8000000000000001, 0xfffffffffffffff7, 0x100000000000007, 0xd, 0x9, 0x1, 0xfffffffffffffffb]}, 0x0) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/nullb/features\x00', 0x80280, 0x0) clone3$auto(0x0, 0xa) capset$auto(0x0, &(0x7f0000000280)={0xe, 0x1000, 0x8}) read$auto(r2, 0x0, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) setsockopt$auto(0x3, 0x1, 0x2b, 0x0, 0x28) 30.026896324s ago: executing program 8 (id=1819): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x40000008001) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x20000, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r3 = getpid() mlockall$auto(0x5) fcntl$auto_F_SETOWN(r2, 0x8, r3) rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x6}, 0xffffffffffffffff, 0x8) close_range$auto(0xffffffffffffffff, 0x8, 0x9) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x7, 0x28000) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon32\x00', 0x0, 0x0) sysfs$auto(0x2, 0x11, 0x0) ioctl$auto_MON_IOCX_MFETCH(r4, 0xc0109207, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x24600, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r5 = socket(0x11, 0xa, 0x300) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0xff, 0x7) bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)=@bpf_attr_0={0x13, 0x2, 0x800, 0xe5, 0x6, r2, 0x5, "000000000100", 0x0, r0, 0x7c, 0x9, 0x7, 0x6, r5, r1}, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x4, 0x80000000000df, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x4, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) socket(0x27, 0x80003, 0x300) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) quotactl_fd$auto(r0, 0x4, 0x0, &(0x7f0000000300)="faadf3c37eade74365ec36e4cb4cd1f669eede101c9c40994f0c2b6d89301c019acb7f6129195b3549487cb8bb1d73a7ad1931c6db66b927ce1369e08b2f1e51b1bb2b04dc573352481e8b3f00913d7392dd1304b5a599518832278e6823123fbe9cb6248035a5af3e98fee535bd0db70f8d036492f1594979b07ddc85037e87ea59fc7c18bdc4987584959c53a629049e20b18c48b9bf6dd2f85564071f35a6cb65646220b1fb1b3ab55706b22b29878963260c045a3c3f2b104e1f98937e40") 29.353873626s ago: executing program 8 (id=1820): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x220600, 0x0) sysinfo$auto(0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r0 = socket(0x2, 0x3, 0x1) connect$auto(r0, &(0x7f0000000000), 0x55) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000040)={0x0, 0xd5}, 0x1, 0x0, 0x1, 0x9}, 0x6}, 0x6, 0x108800) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0xe8) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x5, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r3, 0x0, 0x20) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x200082, 0x0) mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r1, 0x28000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x23, 0x5, 0x0) listen$auto(0x3, 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) 27.27815986s ago: executing program 6 (id=1826): mmap$auto(0x0, 0xe983, 0xdf, 0x7fffffff, 0x401, 0x8000) socket(0x1d, 0x6, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x103040, 0x0) ppoll$auto(&(0x7f00000001c0)={r0, 0x2c, 0x1000}, 0xb, 0x0, 0x0, 0x8) memfd_secret$auto(0x0) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000140)="d1807307", 0x4) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8a800, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(0xffffffffffffffff, 0x7a4, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x2081, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x1f, 0x4, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x60980, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae90, &(0x7f0000000080)={0xfc}) close_range$auto(0x2, 0xa, 0x0) unshare$auto(0x40000080) pread64$auto(0xffffffffffffffff, 0x0, 0x8, 0x2aa00b6e) mmap$auto(0x0, 0x400408, 0x7, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) msgrcv$auto(0x0, 0x0, 0x1000, 0x8000000000000000, 0xb5) poll$auto(0x0, 0x4, 0x100004) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) 25.211945154s ago: executing program 6 (id=1830): openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci1/rfkill6\x00', 0x200, 0x0) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)=ANY=[@ANYBLOB="c01f00006ec7085c89d1a0d42dce873416fcb9ca2d0a73ff4c62d08d0a1613394ab7d4ca34b76f369b630ee9a4d9a1ec9cad58c7b3c5e3134489050660e2582b154f2c03c192a11400396ef61978ebdc0c3a9c1e396407645baefe97ece5b10b29ca4919e28e038a1e670344e43a758632d7", @ANYRES16=r2, @ANYBLOB="01002ebd5100fbcbdf250100000004000180a81e0180040006809d1e0480fc921cf096b39f43034e2db36a74c0ade1e6a4dafab35aa84881d05d1662bd8a8f48943ea4276b7e1465958d17dd9c9706336d0f4a94c7de9fa79cb659b67f43fa331b6f98fa8ad43a943eac1b528ba83992018ecb03ba5dba6660c32c87b1dc86b69a7f6e747504f11d7688a74c47a4ba4c52d520334c57c56a5fe9358c7a8b45d2c39492577b0c60cedaffccee1b2ebd9a11ad0eab4d390826b494ea05d6578176f70cd9cfc566abf6d1329a68a6a6fc28a2e2c669c39ce8e01d22800c00f3003d69e35a0000000004003b00cc1d8b8008002600", @ANYRES32=r1, @ANYBLOB="08006e00ac1414aab81dbc800c00090004000000000000000c001a0004000000000000008a1d988004004280d81c4f80d41ceb8008006e00", @ANYRES32=0x0, @ANYBLOB="0c00d5000800000000000000ae479b08e6bd0a254417457c996cf26cec9968bb79193b555c11e68008007d000800000008003d00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0400338060459644219488b0fc8609458320c80a5d6689ba38586d0717f34dd72e6eb9c6400400138008006300", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="548d10ff813c12384a1695503744c2c6e8e73c8917b403c82ae0f73574df954c08528206aceda4aa913194d8234526a356c6010d917ca2a4357ba1b76fc577f94042691e5cfbe9bda43d6ba8fa55eeabb51771b1f047da89442ac8d4b7fa95d66ed58575bbf1dad9167662932fa21515acb7a947eeeae5f968208870aaaa33d39ca7cb284b840f3af0223f47e14316f2045e00001000ae8004000c800400d08004002380000000"], 0x1ec0}, 0x1, 0x0, 0x0, 0x40}, 0x4) mmap$auto(0x3, 0x20009, 0x4, 0x200000000eb1, r1, 0x251) close_range$auto(0x2, r0, 0x0) io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000118, 0x400, 0x2}]}) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x102, 0x0) (async) ioctl$auto(0x3, 0x560d, 0x38) (async) socket(0x2b, 0x801, 0x100) (async) close_range$auto(0x2, 0x8, 0x0) (async) r5 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendfile$auto(r5, r5, 0x0, 0x10000800000003) socket(0x2, 0x801, 0x100) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x800, 0x0) preadv$auto(r6, &(0x7f0000000080)={0x0, 0x6}, 0x7, 0xbbf, 0x69bf) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @empty}, 0x51) 24.992013949s ago: executing program 6 (id=1831): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r0 = socket(0xa, 0x1, 0x40000100) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) ioctl$auto_BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000440)={@raw=0xff7, "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"}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x4000000) sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, &(0x7f0000001440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f00000014c0)=ANY=[@ANYRESHEX=r3, @ANYRES16=r3, @ANYBLOB="000427bd7000fedbdf250300000008000400ff0f00000800030008000000"], 0x24}}, 0x4000) r4 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram12/queue/io_poll_delay\x00', 0x280000, 0x0) read$auto(r5, 0x0, 0x9) writev$auto(r4, &(0x7f0000000200)={0x0, 0x3}, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) bind$auto(r4, &(0x7f00000000c0)=@xdp={0x2c, 0x2, r6, 0x2}, 0x7) sendmmsg$auto(r2, &(0x7f0000000340)={{0x0, 0x8f, 0x0, 0x5, &(0x7f0000000400)="554ae44a", 0x100, 0xb}, 0x8}, 0x3, 0x6) iopl$auto(0x0) openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f0000001480), 0x200, 0x0) write$auto(r4, &(0x7f0000000200)='1\x00', 0x2) r7 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x8100, 0x0) ioctl$auto_TUNSETNOCSUM(r7, 0x400454c8, &(0x7f0000001600)=0x9) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/binder/parameters/stop_on_user_error\x00', 0x2, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f0000000100)='1', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan1/retrans_time\x00', 0x2242, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 24.632856675s ago: executing program 6 (id=1833): close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) mmap$auto(0x0, 0x9, 0x0, 0x95a, 0x2, 0x7fff) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', &(0x7f0000000240)=0x7) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0040, 0x0) pread64$auto(r1, 0x0, 0x7ff, 0x400) socket(0xa, 0x1, 0x800007) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x7, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x9, 0x15f4da0a, 0x3, 0xa, 0x62, 0x80000001, 0x3, 0x2, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x2, 0x62, 0x8000001f, 0x7, 0x6d3f, 0x8000000000000001, 0x2, 0x4]}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$auto(0x3, 0x894b, 0x38) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) inotify_init1$auto(0x401) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 23.599469809s ago: executing program 6 (id=1838): mmap$auto(0x0, 0x400005, 0x100000000000df, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x48802, 0x0) read$auto(r0, 0x0, 0xb4d3) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/Writeback-1/edid_override\x00', 0x6401, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYBLOB="5eaee8da8730ca7f762268b4d0acc0fb9cf778bd67738263703729c2a09d2942dd3326bc8e34276f08bee2862460daeea2bdbf805dfb67b4ad5c6a53b597b6736da0acb7bb144d3c9efd7c93442ebd184c077bd7c550a9603fe9902162a95279ee4dcb10f445b30fdfff56105c2d3ea1453fb09a51b57d82b94b3399433ea7d9f74ec69a2291e630edab57a3a7a8523433fd823494d86b11f02a6aefce4c786542aba65499677037c07d37abdb", @ANYRESOCT=r0, @ANYBLOB="2f372b5ddb6f9ba99e7c7547eb0c76e0a49c13e7a20345efeccfa46d18dfc2f9d5a555ee46406b4eaac3ba219549a50156da8f06da6659ccb93e5ba7c2847b988bf4a7165e14cc34673b8cef90b05304c5247c319b0600b745f61f8a18a469d927b90fd11c882cec84b61b12fbc546683cb6ec206c1726f2ff668a219099988109e7fbaaeb7c261f0caa29027553244c7bc96175e381fee71955e30c10f467c765bfc8f3a6be2da3", @ANYBLOB='\b\x007'], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r1 = open(&(0x7f0000000280)='./file0\x00', 0x10000, 0x140) ioctl$auto_IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000140)={0x7fffffffffffffff, 0xc04f, 0x101}) socket(0x2, 0x3, 0x6) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)={0x17c, r4, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_SDP={0x148, 0x13, 0x0, 0x1, [@nested={0x1c, 0xf1, 0x0, 0x1, [@typed={0xc, 0xe8, 0x0, 0x0, @u64=0x7fff}, @nested={0x4, 0x44}, @nested={0x4, 0xae}, @nested={0x4, 0x65}]}, @generic="17905db689192d517cee7e0de5d50815003701c0c7a411bfc1ec8818265a1437e869370b39c3c35d4a4d1759f635f306c267efef0a2a66ad037fa5b09943d3a13d99f41609e6c04955ad33412055544afc1b583a08d3f3d3a97d1bf4b6cb81d7eef4cacc19ebfe1998dfb6026bfab3818228135ece21b1d5fc112505c6a65ac9cc82ac326ff25fc05f4aa62bf47f416c1045d5ecfe7ddd1a945963685183bd75c5a7edb9007f9504e5342c6e32cbd574cda3f246860cc61327", @generic="ccd102fa54bdfa94dff108109a9aac84acd56cce6a98eb5db0", @typed={0x8, 0x81, 0x0, 0x0, @fd=r2}, @generic="c485f20004c8cb3c6ab6d042da7faa62b4bb8ac8e5bdd448fe97ab8d66052212330632c612f47754dd42faa5e635cacf69db272721446d54264056bfc3f22255104a12159b7c8ff38cb4e1f126c5"]}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x7}, @NFC_ATTR_PROTOCOLS={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x6}]}, 0x17c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 23.174497363s ago: executing program 6 (id=1839): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x9, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x22, 0x1, 0x3) socket(0xa, 0x2, 0x3a) mmap$auto(0x1f00, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) io_uring_setup$auto(0x52, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 22.162680472s ago: executing program 9 (id=1841): r0 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r0, 0x65, 0x3, 0x0, 0x5) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) timer_create$auto(0x3, 0x0, 0x0) (async) timer_settime$auto(0x0, 0x368, &(0x7f00000003c0)={{}, {0x0, 0x97}}, 0x0) (async) mmap$auto(0x0, 0x5, 0xfff, 0x44eb2, 0xffffffffffffffff, 0x300000000000) 21.751973733s ago: executing program 9 (id=1842): mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) select$auto(0x3, 0x0, &(0x7f0000000100)={[0xc0, 0xb, 0x0, 0x4, 0xbffffffffffffffc, 0x82, 0x6, 0x2, 0x9, 0xffff, 0x4000000000000002, 0xd, 0x10000000005, 0xfffffffffffffffe, 0x7, 0x1000000006]}, 0x0, 0x0) syslog$auto(0x2, &(0x7f0000000000)='-#:\x00[\xda\xe2\xc3L\xd30{Q\xecvP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\xf2\xbe\xef\v\xf1d\xdd\x0e\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x033\x8f\xb9(\n/\xcdo\xc2', 0xcf) (async) close_range$auto(0x2, 0x8, 0x0) (async) clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) (async) madvise$auto(0x0, 0xf, 0x19) (async) madvise$auto(0x0, 0x2003f0, 0x15) (async) madvise$auto(0x6, 0x4, 0xfffffff7) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x5) (async) fcntl$auto(0x3, 0x4, 0xa553) (async) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000002c0)={{@raw=0x4a5368f1, 0xa, 0x8, 0x1, "4941aa833e2fc65b6b3cf7cec76d6778ad8eac3cda35ba9c2b2d43eeb0dc59c8dd3500f11581916caa0d3053"}, 0x4, 0x4, 0x4, @raw, @reserved="8fc5ebd7104dff6d275c3fc01a483cf52f1a11643bab0093eeb16e9cb1294de22369d09f96cd61ad04ed77d7594f8b3bece99955a5444f7e4e8432050502fdd4f25f12850d7f7a7df5c7ebc94186cfafcefc9115a3156c611e23eac955b6b46aca5217369418e9c7966570c2ab8a2430c522f3940ef59eaf6959f4b431652aee", "6cc1888a6393f1b42858e438f8cc142ef6df00591bc7955610c61c329794e5311121c760cb8211c78e6947a99807bc00"}) (async) r3 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u50x0, 0xffffffffffffffff, 0xe, 0x9, 0x5, 0x8ee9}, 0xfffffff8, 0x2, 0xa9, 0x80000000, @inferred, @raw=0x82020b81, 0xb, 0x0, &(0x7f0000000800)="7ae99779886957032ac3f98116d12b5926a34393fcdbc159b1949c2fb45747e9a23f2a6dc62be997b4affa8ae3452ae2", &(0x7f0000000a80)="d0b12211fb76638865c7cafbdee2d29d8a543cb74d86256e6325b8ae253fb6bb19a6f950d7c51a7018ed32a79d541a26776b3a4e0162289623b7f78467461032a574f44fe165f21d76cd483532af600e128d2d712d5d79610583d7388557c8e0141ea51407ec99cf24481aed28f8aa15ba7bfdd1020f13773877ab38b88b7194bdd776cb5a"}) sendmsg$auto_MACSEC_CMD_DEL_RXSC(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000080}, 0xc, &(0x7f0000000bc0)={&(0x7f0000004280)=ANY=[@ANYBLOB="5c180000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="8f080923033b4076c99e3f3e5bb7ef9aa1c0b4e04991ae267d452c1a1e89cf82e90e247f4023f868dd4066a5431623f9f994de697d0d5400832f7780d918d5c5d40800cf00", @ANYRES32=r0, @ANYBLOB='\b\x00b\x00', @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0000080035800400da8008001100", @ANYRES32=r5, @ANYBLOB="040009000c00088004003e800400f28001c41565c9c4859d28b3657d9487e4a4ee45dc928eb86766176660b0572134d4a02ccf344a00bea503dc5cd0bc32032a64567c9da759c7946fa4e780eebceb01978bb0d9b127b34dda2318c5534831a275007a534c8894f71d1d86e7d3eebf3a779f3f39f6544c0d323f65df7f6f88d7fb588ea77abc001a664902c8b9a1a37e27059e34d042e45f3bee528185707b85c2f5f272dc60721fd8068c6817613a282af6fb5b97a46091de7f3225d199787e1cc7b1785cfc65831211ced4b205e640a3515442637c2fac9b48dfefc60a809a1b4894d39d84ee08e547ac00"], 0x185c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket(0x10, 0x2, 0xf) sendmsg$auto_NFSD_CMD_THREADS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) acct$auto(&(0x7f0000000040)='/dev/mtd0\x00') mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event1\x00', 0x141d82, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x591f81, 0x0) ioctl$auto_SNDCTL_DSP_RESET(r2, 0x5000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r7) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB=' .\x00\x00', @ANYRES16, @ANYBLOB="01002ebd5101fbcbdf250100000004000180072e01"], 0x2e20}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) 21.179121565s ago: executing program 9 (id=1846): madvise$auto(0x0, 0x2000040080000004, 0xe) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptybe\x00', 0x6984c0, 0x0) ioctl$auto_FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x2, 0x801, 0x6) setsockopt$auto(r2, 0x1, 0x12, 0x0, 0xa4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nbd9\x00', 0x0, 0x0) keyctl$auto(0x6, 0xfffffffffffffffc, 0x0, 0x0, 0x101) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f00000001c0)=ANY=[@ANYRES8=r2, @ANYRES16, @ANYBLOB="01002dbd7000ffdbdf25020000000800010009000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2000c800) capset$auto(&(0x7f00000002c0)={0xfffffffd, 0xffffffffffffffff}, &(0x7f0000000380)={0x5, 0xf, 0x80000000}) r4 = prctl$auto(0x3, 0xb, r3, 0x8000000000000000, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto_USBDEVFS_BULK(r4, 0xc0185502, &(0x7f00000003c0)={0x1ff, 0x9, 0x0, &(0x7f0000000440)="a3e9177a47235f555dc81b2805aa80b035b6399213780497b49fe426efd65a4c6b3b8790d490d3af6a50b99494322324f105012171714f62c09df6691f498d39f90ec972c982b26c1014ae13b09c5dd4988d95d7976d6cc0af5ff6e0b376a6f7cc479d90fa762aba58b6481587a4f637b34ac47c2b4c806d9fe00775bb93f14a42c5e89b741dc77a7ef3bcc72491b610b36af57335ef3e70a429a9e39c8ec681a000ff3781318ad7463a5af93be99f3c81ddebac532cc73d2133b0a9aee8f9adee382a47543ba2a8f2f9aa42613b14f480de0bbd2dbef5"}) madvise$auto(0x0, 0x2003f2, 0x15) syslog$auto(0x3, 0x0, 0x5) poll$auto(0x0, 0x7f, 0x9) socket(0x6, 0x5, 0x6) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r6, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r7, r7, 0x0, 0x3) 19.114320779s ago: executing program 9 (id=1849): socket(0x21, 0x2, 0x2) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) mmap$auto(0x0, 0x20009, 0x12, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x43, 0x0) fsopen$auto(0x0, 0x1) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video8\x00', 0x802, 0x0) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) mkdir$auto(&(0x7f0000000040)='}[,&*}\x00', 0xc001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', 0x0, 0x4401d, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x7fffffffffffffff, 0x0) socket(0x1d, 0x2, 0x7) r2 = socket(0x2, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) getsockname$auto(0x3, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) write$auto(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\xf2\x1e\xadp@f\x1b\xd9\xfb\xfa?$B\xcer\xec\xb2!\xdb\xd1\xcaA\b6q\xf6\x17[\xac;\xe9\xe5\fp\xef\xec\x1a\vt\xae\x86l\xb5k{\x0f\x9e\na\x02v\xe8/\xe1t\xcd\x9aT\xee\xbb\xb1\x04o\x8e\x13\'b\xc5\xf5\x03\x98\f:\x92T(i2U\x84\xbbW\']~\x8b,\x96\x12\xbb4\xfa\xb3X\x17u\xc2\xa8\x01\x92\xf3\xef^\x16w6\xc8\xb6\xe0Y\x01v\xb8\xe1\xcc\xb8d\x98\xdd4\x0f\x9f9c\xa5\xb9\x8d$&H\'\x9e\x80\xa0', 0x100000001) 18.642964218s ago: executing program 9 (id=1850): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/nbd4/sched/write2_next_rq\x00', 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b67, 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) unshare$auto(0x40000080) r1 = socket(0x11, 0x1, 0x87) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x3c, r2, 0x41, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x16}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40008840}, 0x801) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) r3 = socket(0xa, 0x2, 0x0) setsockopt$auto(r3, 0x29, 0x30, 0x0, 0x20004) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x1, 0x0) io_submit$auto(0x6, 0x6, &(0x7f0000000240)=&(0x7f0000000200)={0x1, 0x7fff, 0x2, 0x10c, 0x9, r0, 0x4, 0x6, 0x2, 0x0, 0x2, r1}) ioctl$auto_TCFLSH2(r5, 0x540b, &(0x7f0000000280)="1a2e29d0b0ebb36fa3d70644a47ac782a7e8149059ceb66119862f667ba2685c07d845e86017d859a898072b67e3f323aa904a2254d64004eb1cef62815d84cc26cacaa80fd5c9ee8ba536be032b76691543190b9e1d4872c42196ee942ed62ec47685bed8af01989630882aee75a52a1abf9a60cbfb7ee60e2b5d727340") write$auto_configfs_file_operations_configfs_internal(r4, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = prctl$auto_PR_SET_SECCOMP(0x16, 0x9d9, 0x879, 0x1, 0xc606) write$auto_buffer_percent_fops_trace(r7, &(0x7f00000001c0)="dbfe17262f658241b1413a667aaf8ccce5568fd198858540d847b75cfeead603d108cb5efbebc459a98c", 0x2a) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r9 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r9) sendmsg$auto_NL80211_CMD_SET_KEY(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0x8b4, r10, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_FILS_ERP_REALM={0x6a, 0xfa, "b6de13d1dd1da14108a91b9edadd5d8bb785e50655d6cd1847dc0e853c350aa409c5887268f82eab6a2cf9750403dc2ede7ae36415dab3fc94d42194f566b5f4b60fc9fbaf7fc52a6ce92db0f94c7897e1f804c3d19e4608b540585932f34e9d00a2b84b5f35"}, @NL80211_ATTR_IE_ASSOC_RESP={0x4f2, 0x80, "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"}, @NL80211_ATTR_TIMEOUT={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xba95}, @NL80211_ATTR_WIPHY_NAME={0x7, 0x2, '!#\x00'}, @NL80211_ATTR_STA_WME={0x24, 0x81, 0x0, 0x1, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x26}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_REKEY_DATA={0x83, 0x7a, 0x0, 0x1, [@typed={0xc, 0x12c, 0x0, 0x0, @u64}, @nested={0x34, 0x54, 0x0, 0x1, [@nested={0x4, 0x4}, @generic="a5bac0cc24f36f72ba11baaac566d205886fd83abe62d6917f2526d6", @nested={0x4, 0x30}, @nested={0x4, 0x137}, @typed={0x8, 0xa6, 0x0, 0x0, @ipv4=@remote}]}, @generic="4010c7d24859f20800c57c540b84fc75df5f0febc2f7181a4d434d8c2833cff9eb7feb09d4d97c0d28d2856f9f378ff927d1e30c50e369", @typed={0x8, 0xd0, 0x0, 0x0, @fd=r6}]}, @NL80211_ATTR_MBSSID_ELEMS={0x27b, 0x133, 0x0, 0x1, [@generic="d0b2dc900cfc98b4c4d10f41cdbe8ac2b40941d4c031fee9fe0cd33ad6d428d98bca6514f8bd02677238648dc46841751237aaea9770a78bb4f98d23871cebdc7fa25b3823137d1db74a3cddb457e5793333ee0f61c958dc5637a34cc821e6c61d6f6600238d570acbfe3fdf7595df6bd17d305dff2594e9186fe27f69ef7ee39a9acfea60ab62ffdbc945c611f9d675e4ca18173c46d8949f7602af6b544d33b6da4957c6a657484ebbc9a57a", @generic="584065bd72239995ee7e323bbf4008eb556051d67a884b9e25848d43ae77c129f2635db71c1a03a4d42649ceba797d55d559d94dbf482277f5ebba6b675eaf72994bb317dd8192f1bacd", @generic="1b0020f93b5ead71c9f3fc9a991f15990efdf54f4425fff4c9bcb31e30926d63dc9eb55a86cf5b589fe47c7821f634eea667532554f7f00db59a23aa93bffff91abdcf40e2d4df560641d447c1505343acfb504031f8657f2ba77d18e38cebde8568ed197d83651f406340e1d45e32f71c98d3e46e8ae5718021943438e6e3e10435b031995fe4fca53a94065a4232e5fd76b315a73d75fce326c6dc50fcdab3e74eeb93f58b79b7b5c47dce4320a1ddc9c7a2b714118a8815e1c696d92bd2d3815be9187b3670e80280463b8e9ad8f6800c2cdec4d20ce834331005f88a15b3", @typed={0x4, 0x7d}, @generic="32ac3e6a73491e5cbec6f0087c07f3433a0bbd7de5d666028433d20ea5b5bff4f8fd583a4c2680ba22e6049b5e9b69a492fa6b2fa335ebb7c0d5ce6c73dffa8c106eae4506ba642c79608aa1f47ba38ddef64c4d25dafd5d980351a40c365fde2e3c10b71606570785f1eaf410072de05acb021dc1056117e06b4f282459a969471cf65b5244961d29614cb50e350720f6249e4a8282a373e893cc98"]}]}, 0x8b4}, 0x1, 0x0, 0x0, 0x4895}, 0x8000) ioctl$auto(r8, 0x541c, r9) sendmsg$auto_NL80211_CMD_GET_MPP(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r10, 0x220, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x7fffffff}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x24044014) 13.882382607s ago: executing program 38 (id=1820): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x220600, 0x0) sysinfo$auto(0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r0 = socket(0x2, 0x3, 0x1) connect$auto(r0, &(0x7f0000000000), 0x55) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000040)={0x0, 0xd5}, 0x1, 0x0, 0x1, 0x9}, 0x6}, 0x6, 0x108800) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0xe8) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x5, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r3, 0x0, 0x20) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x200082, 0x0) mmap$auto(0x0, 0x40008, 0xb3, 0x9b72, r1, 0x28000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x23, 0x5, 0x0) listen$auto(0x3, 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) 7.873714273s ago: executing program 39 (id=1839): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x9, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x22, 0x1, 0x3) socket(0xa, 0x2, 0x3a) mmap$auto(0x1f00, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) io_uring_setup$auto(0x52, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 5.994660814s ago: executing program 7 (id=1876): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_hcd.4/usb5/power/level\x00', 0x129882, 0x0) r1 = gettid() close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x943, 0x1ffe0, 0x3, 0x6, 0x6, 0x9, 0xffffffff, 0x2, 0x7, 0x200, 0x8, 0x5, 0x3, 0x5, 0x7, 0x0, 0x1, 0x0, 0x1, 0xfffff8ab, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd]}, 0x3, 0x9) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x24030000, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae90, &(0x7f00000001c0)={0x2}) kill$auto(r1, 0x11) pidfd_open$auto(r1, 0x0) socket(0x1d, 0x3, 0x1) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, 0x0, 0xfd}, 0x6a) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0) pwrite64$auto(r5, 0x0, 0x2, 0x0) sendfile$auto(r0, r0, 0x0, 0x7) 5.815373993s ago: executing program 3 (id=1877): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/slab/kmalloc-64/objects\x00', 0x20000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) (async) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r2, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) (async) syz_clone3(&(0x7f0000000240)={0x20200a000, 0x0, 0x0, 0x0, {0x800015}, 0x0, 0x0, 0x0, 0x0}, 0x4e) ioctl$auto(r2, 0x4004550c, r1) (async) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mmap$auto(0x800000000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_register$auto_IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f00000000c0)="d89d94ddc1b7df583e33d5edb76fe9e8b76aa37854c4b4104d4cee5e0b26280c05ed0423340290a182d49797db00007e295a4d515b9fd01ac51e43eeb22da3267397e0d77e181bd98b914f45f6e7f2f52fca8513da9435bc48be55931aa99877f766d221605c80e505aaa79ac54979300ec8b5763a9e588034f447c1311de668ae6176ab16a6402f193f3966fea6487ca17f5a14f08a7b777dc5020c7db017f4", 0x9) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/f2fs/features/project_quota\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000008c0)=""/61, 0x3d) sendmmsg$auto(r3, &(0x7f00000001c0)={{0x0, 0x5, &(0x7f0000000080)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x8001, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r5 = socket(0x29, 0x2, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) epoll_pwait2$auto(r6, 0x0, 0x6d, 0x0, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3900000006bfdfcdf7f1c2383f833257fd42ae04a9e6412e0ff7da1bb5497c286e24c9c43ab6e53ae45e88369130b0fdfa6be6b1aeb78618a028623a46e448f18ec9235e7f4c11bad7e0accf07ef6598038edf31fab3e67e205b20026ccb3517fec3a570636412fbf0bceafd21197babe103669e0596760800df035b99f53d8d00c29e2e3dd5a269634ca23f051d9e2c89389157304e8cb6c0f1190d8b4ee52a73606a5885d90380e083fe908260ab85fe5e", @ANYBLOB="f86c78d2617be1d30c3adbbc6187e1bf50505d73c6ef61ec880fb555ac4d49f84e9ec560e566bf13693c4fadc1d73bfd3c8b464ec7dd836e4bb3a419329c51598273a66a5a2ec9cca56a8171608e7e641b8dc941a1ea2c4614268eea92e74c0617cdc7adcc2631e83e5b65450197ab48c730df52235b60d547d60962a3e8d69065be503c0b967af85ab777f8a37e3c76826ebca8b6ee4c8a1dec4f4ef979162e986f696c39b953fcd775c641fd6268cdac6862e7200f74546319e671fe4060b385ed37b448620eb39330939c685ff4613b22e1840777e852bed5525ad1ff81ee4740c61a7b7a00", @ANYBLOB="4a469c2bc449a0ce6592670663ca094b0cf0a0000274741a2c3bc4ec7b1f30690a7a3b0ef507225ac4c016de92415a3a2a21b23a", @ANYRES64=r5], 0x1ac}}, 0x40000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) recvmmsg$auto(r6, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) ioctl$auto(r5, 0x89f2, 0x24) 5.583391833s ago: executing program 7 (id=1878): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x1f53, 0x2000000000002) open(&(0x7f0000000040)='./file0/file0\x00', 0x6342, 0x240) r0 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r0, &(0x7f0000000200)=@generic={0x11, "0000000300000000929e006300"}, 0x80) setrlimit$auto(0xfffffff9, &(0x7f0000000000)={0x0, 0x5}) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x5, 0x0) fanotify_mark$auto(0x1000000000000, 0x65, 0x9, 0x1, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0x94001, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x20000007, 0xd, 0x6, 0x948f, 0x6, 0x7, 0x3, 0x3, 0x62, 0x80000003, 0x0, 0x1, 0x9, 0x7, 0xffffffffffffffff]}, 0x0) 5.220136162s ago: executing program 7 (id=1879): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket(0x11, 0x800, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x400000f4, 0x400, 0x2}]}) 5.051009396s ago: executing program 7 (id=1880): r0 = set_tid_address$auto(0x0) ioprio_get$auto_IOPRIO_WHO_PROCESS(0x1, r0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = socket(0x2, 0x1, 0x0) r3 = getsockopt$auto(r2, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x3b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x21000000000000, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) unshare$auto(0x40000080) io_uring_setup$auto(0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x48, r5, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_ACTIONS={0x2c, 0x3, 0x0, 0x1, [@nested={0x28, 0x1, 0x0, 0x1, [@nested={0x24, 0x106, 0x0, 0x1, [@nested={0x1d, 0x74, 0x0, 0x1, [@nested={0xfffffffffffffe4c, 0x4d}, @typed={0xa888, 0xd0, 0x0, 0x0, @u32=0xa888}, @typed={0x4, 0x3}, @generic="2a9d272f66", @nested={0x4, 0x33}]}]}]}]}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000140)=ANY=[@ANYBLOB='=', @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbdf250b00000008000300", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x890) ioctl$auto_VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000040)={0x8}) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) pwrite64$auto(r6, 0x0, 0x1, 0x27) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r7 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r7, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) 4.628158455s ago: executing program 3 (id=1881): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x8d, 0x20009, 0x4000000000df, 0x11, 0x401, 0x7ff) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) brk$auto(0x7fffffffafff) (async) mmap$auto(0x7fff, 0x400008, 0xda, 0x9b72, 0x2, 0x480000000008001) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) (async) capset$auto(0x0, &(0x7f0000000100)={0x1ff, 0xfff, 0x1000}) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x5602, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, 0x0, 0x2100, 0x0) read$auto_stat_fops_per_vm_kvm_main(r3, 0x0, 0x0) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0xa, 0x572, 0x8008000000008014, r0, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) brk$auto(0x8) (async) mmap$auto(0x0, 0x400020009, 0x10000000000df, 0x13, 0x8000000401, 0x7fffffffffffffff) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) fstat$auto(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x1a0000000000, 0x7f, 0x77d508f7, 0xee01, 0xee01, 0x0, 0x8, 0xa6ee, 0x8, 0x100000000, 0x7, 0x7ff, 0x10, 0x9, 0x4, 0xd}) (async) semctl$auto_SETALL(0x2, 0x6, 0x11, 0xb1c) (async) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) getrandom$auto(0x0, 0x6000000, 0x3) 3.323779175s ago: executing program 3 (id=1882): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r1) sendmsg$auto_CTRL_CMD_GETFAMILY(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf25030000000600010030"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) r3 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), r1) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=')\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="ffff2cbd7000fbdbdf2502000000040001"], 0x18}}, 0x4000010) (async) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_CDEV_ID={0x8, 0xf, 0x2}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_PERFORMANCE={0x8, 0x16, 0x3ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = open(&(0x7f0000000000)='./file0\x00', 0x101800, 0x100) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r6, 0x0, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000680), r7) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="110b27f27200fbdbdf250c00000008000300", @ANYRES32=r9], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x9800) r10 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_NEW_DEST(r12, 0x0, 0x20000000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100cda4429629bd7100f9db5f2502"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r8, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_MCAST_FLAGS_PRIV={0x8, 0x27, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_TPMETER_BYTES={0xc, 0xc, 0x7fffffff}, @BATADV_ATTR_BLA_ADDRESS={0xa, 0x1f, @broadcast}, @BATADV_ATTR_TT_TTVN={0x5, 0x11, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FLAG_BEST={0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) r13 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001ec0)='/sys/power/mem_sleep\x00', 0x2402, 0x0) read$auto(r13, 0x0, 0x7d) dup2$auto(r13, r5) (async) write$auto(r5, 0x0, 0x6) (async) r14 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f00000003c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r14, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e21}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000024}, 0x20004040) (async) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0xd0) 3.239449998s ago: executing program 40 (id=1850): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/nbd4/sched/write2_next_rq\x00', 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b67, 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) unshare$auto(0x40000080) r1 = socket(0x11, 0x1, 0x87) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x3c, r2, 0x41, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x6}, @L2TP_ATTR_PEER_COOKIE={0xc}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, 0x16}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40008840}, 0x801) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) r3 = socket(0xa, 0x2, 0x0) setsockopt$auto(r3, 0x29, 0x30, 0x0, 0x20004) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x1, 0x0) io_submit$auto(0x6, 0x6, &(0x7f0000000240)=&(0x7f0000000200)={0x1, 0x7fff, 0x2, 0x10c, 0x9, r0, 0x4, 0x6, 0x2, 0x0, 0x2, r1}) ioctl$auto_TCFLSH2(r5, 0x540b, &(0x7f0000000280)="1a2e29d0b0ebb36fa3d70644a47ac782a7e8149059ceb66119862f667ba2685c07d845e86017d859a898072b67e3f323aa904a2254d64004eb1cef62815d84cc26cacaa80fd5c9ee8ba536be032b76691543190b9e1d4872c42196ee942ed62ec47685bed8af01989630882aee75a52a1abf9a60cbfb7ee60e2b5d727340") write$auto_configfs_file_operations_configfs_internal(r4, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = prctl$auto_PR_SET_SECCOMP(0x16, 0x9d9, 0x879, 0x1, 0xc606) write$auto_buffer_percent_fops_trace(r7, &(0x7f00000001c0)="dbfe17262f658241b1413a667aaf8ccce5568fd198858540d847b75cfeead603d108cb5efbebc459a98c", 0x2a) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r9 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r9) sendmsg$auto_NL80211_CMD_SET_KEY(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)={0x8b4, r10, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_FILS_ERP_REALM={0x6a, 0xfa, "b6de13d1dd1da14108a91b9edadd5d8bb785e50655d6cd1847dc0e853c350aa409c5887268f82eab6a2cf9750403dc2ede7ae36415dab3fc94d42194f566b5f4b60fc9fbaf7fc52a6ce92db0f94c7897e1f804c3d19e4608b540585932f34e9d00a2b84b5f35"}, @NL80211_ATTR_IE_ASSOC_RESP={0x4f2, 0x80, "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"}, @NL80211_ATTR_TIMEOUT={0x8}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xba95}, @NL80211_ATTR_WIPHY_NAME={0x7, 0x2, '!#\x00'}, @NL80211_ATTR_STA_WME={0x24, 0x81, 0x0, 0x1, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x26}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}]}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_REKEY_DATA={0x83, 0x7a, 0x0, 0x1, [@typed={0xc, 0x12c, 0x0, 0x0, @u64}, @nested={0x34, 0x54, 0x0, 0x1, [@nested={0x4, 0x4}, @generic="a5bac0cc24f36f72ba11baaac566d205886fd83abe62d6917f2526d6", @nested={0x4, 0x30}, @nested={0x4, 0x137}, @typed={0x8, 0xa6, 0x0, 0x0, @ipv4=@remote}]}, @generic="4010c7d24859f20800c57c540b84fc75df5f0febc2f7181a4d434d8c2833cff9eb7feb09d4d97c0d28d2856f9f378ff927d1e30c50e369", @typed={0x8, 0xd0, 0x0, 0x0, @fd=r6}]}, @NL80211_ATTR_MBSSID_ELEMS={0x27b, 0x133, 0x0, 0x1, [@generic="d0b2dc900cfc98b4c4d10f41cdbe8ac2b40941d4c031fee9fe0cd33ad6d428d98bca6514f8bd02677238648dc46841751237aaea9770a78bb4f98d23871cebdc7fa25b3823137d1db74a3cddb457e5793333ee0f61c958dc5637a34cc821e6c61d6f6600238d570acbfe3fdf7595df6bd17d305dff2594e9186fe27f69ef7ee39a9acfea60ab62ffdbc945c611f9d675e4ca18173c46d8949f7602af6b544d33b6da4957c6a657484ebbc9a57a", @generic="584065bd72239995ee7e323bbf4008eb556051d67a884b9e25848d43ae77c129f2635db71c1a03a4d42649ceba797d55d559d94dbf482277f5ebba6b675eaf72994bb317dd8192f1bacd", @generic="1b0020f93b5ead71c9f3fc9a991f15990efdf54f4425fff4c9bcb31e30926d63dc9eb55a86cf5b589fe47c7821f634eea667532554f7f00db59a23aa93bffff91abdcf40e2d4df560641d447c1505343acfb504031f8657f2ba77d18e38cebde8568ed197d83651f406340e1d45e32f71c98d3e46e8ae5718021943438e6e3e10435b031995fe4fca53a94065a4232e5fd76b315a73d75fce326c6dc50fcdab3e74eeb93f58b79b7b5c47dce4320a1ddc9c7a2b714118a8815e1c696d92bd2d3815be9187b3670e80280463b8e9ad8f6800c2cdec4d20ce834331005f88a15b3", @typed={0x4, 0x7d}, @generic="32ac3e6a73491e5cbec6f0087c07f3433a0bbd7de5d666028433d20ea5b5bff4f8fd583a4c2680ba22e6049b5e9b69a492fa6b2fa335ebb7c0d5ce6c73dffa8c106eae4506ba642c79608aa1f47ba38ddef64c4d25dafd5d980351a40c365fde2e3c10b71606570785f1eaf410072de05acb021dc1056117e06b4f282459a969471cf65b5244961d29614cb50e350720f6249e4a8282a373e893cc98"]}]}, 0x8b4}, 0x1, 0x0, 0x0, 0x4895}, 0x8000) ioctl$auto(r8, 0x541c, r9) sendmsg$auto_NL80211_CMD_GET_MPP(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r10, 0x220, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x7fffffff}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x1ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x24044014) 3.046411777s ago: executing program 3 (id=1884): fchdir$auto(0xffffffffffffffff) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) getpid() (async) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r0 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r0, &(0x7f0000000680)={&(0x7f0000000300)="64074c974bc700bf3e0ea3cb2a0e6fb39becec71e3a4d0a56fd330f661933ddee8f7e24e910a635beff3ee8ee14b1c06ea42210c954dbb2646ec4926a181e72e60e162246177fab5b4ca997754a8c9cddab6d3c54cbfb66c3783772d50cc1e5778975d5b19cb2cf6de8f594e2311768d1b3d94adef00"/136, 0x40200}, 0x3) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20000084}, 0x44098) r1 = socket(0x18, 0x3, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004) (async) r2 = socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x0, 0x4000000df, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) r3 = socket(0x2, 0x5, 0x0) (async, rerun: 64) sendmsg$auto_NL80211_CMD_DEL_PMK(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)={0x30, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x7ff}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x72}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e23}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x4000801) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x7e, 0x0, 0x7) (async) bind$auto(0x3, 0x0, 0x6a) (async, rerun: 64) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) (rerun: 64) setsockopt$auto(r2, 0x10000000084, 0x23, 0x0, 0x8) (async) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(0xffffffffffffffff, 0x0, 0x4000000) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0006, 0x17) (rerun: 32) mbind$auto(0x2000, 0x800000100000004, 0x100000000, 0x0, 0x1003, 0x2) (async) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async, rerun: 32) open(&(0x7f0000000080)='./cgroup\x00', 0x101000, 0x0) (async, rerun: 32) r4 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r4, 0x65, 0x2, 0x0, 0xaf7) 1.524120818s ago: executing program 3 (id=1885): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) rt_sigaction$auto(0xfffffffe, &(0x7f0000000000)={0x0, 0x4, 0x0, {0x5}}, 0x0, 0x8) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) sysfs$auto(0x2, 0x3f, 0x0) (async) r0 = fsopen$auto(0x0, 0x4) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x8, 0x400000df, 0x9b72, 0x2, 0x8000) (async) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000240)={0x0, 0x7}, 0x3) (async) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb2, 0x602, 0x300000000000) (async) madvise$auto(0x0, 0xffffffffffff0006, 0x17) (async) futex_wait$auto(0x0, 0x1000000000000, 0x4, 0xa, 0x0, 0x7) futex_wake$auto(0x0, 0x7, 0xfffffffb, 0x2) (async) epoll_create$auto(0x4) (async) futex_wake$auto(0x0, 0x6, 0x9, 0x3) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x100000000) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x801, 0x84) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x280, 0x0) ioctl$auto_SNDCTL_SEQ_TESTMIDI(r3, 0x40045108, &(0x7f00000000c0)) (async) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e20, @rand_addr=0xfffffffe}, 0x57) (async) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x55) (async) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) 1.493347857s ago: executing program 7 (id=1886): keyctl$auto(0x3, 0xfffffffffffffffd, 0x0, 0xee01, 0xa00002) unshare$auto(0x40000080) (async) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002d000800070000000000000000", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) (async) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x9003, 0x0) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) getsockopt$auto(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) (async) io_uring_register$auto_IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000580)="4a176d10348fddad80b7d53fe10a29e435213131d4b30ed6f339acc67f48aa891f000ac47cb6d9782621b1ca03dacfc62e9cd2acdf2b79f83a3e5b85cf04afdc0c97d6e7ab909d00dba11c3413afcde2ada916be7b80070eae8437171a7a298fe9685cc03b2d0e99c9d8b9f9a9ada70edf4d4589f11d8fbd2fdd92ffc759000000000000000000000000060000004d057973e389b50f", 0xfffffff4) mount$auto(&(0x7f00000000c0)='bond_slave_0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='|\xbf\x00', 0x27, &(0x7f0000000380)="ac3ba49da32cfed8a652f36515fb27ed9d6ca4553ddee28d06832e5fecb98be686a81e59192628ad6c7c6949cda870b7d782b987ae7e961d7d8167bef6507364e994e91a5cf3cb471c9153572422d90bcce30aa93b9aebe787d80d168ffb500d0ecc46bf3368ee5b2a700d6578b41ee9061023f1127461a95bb7a0f208eb93dcfb292c5755e7ce5534a029e86eb9dbe29271d98ff639f1a6fb836ce46cc9ec1d67429d0ae4d162460e21487cd6c70028c5400f539ac11e2b5302") (async, rerun: 64) getpid() (async, rerun: 64) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x188302, 0x0) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) (async) unshare$auto(0x40000080) (async, rerun: 64) r0 = socket(0x10, 0x2, 0x0) (rerun: 64) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xa6ff, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e"], 0x1ac}}, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) readv$auto(0x4, &(0x7f0000000100)={0x0, 0x1000}, 0x8) (async) write$auto(0x3, 0x0, 0xfdef) (async, rerun: 64) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) (async, rerun: 64) write$auto(0xca, 0x0, 0x7f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 565.636689ms ago: executing program 7 (id=1887): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x129e01, 0x0) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) fcntl$auto(0x3, 0x4, 0xa553) read$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) write$auto(0x3, 0x0, 0xfffffdef) close_range$auto(r0, 0x8, 0x0) r1 = socket(0xa, 0x2, 0x0) write$auto_force_wakeup_fops_hci_vhci(0xffffffffffffffff, 0x0, 0x0) setsockopt$auto(r1, 0x0, 0x30, 0x0, 0x568) bpf$auto(0x3, 0x0, 0x6f3) socket(0xa, 0x2, 0x88) mincore$auto(0x1000, 0x8003, 0x0) setsockopt$auto(0x3, 0x0, 0x20, 0x0, 0x28) sendmsg$auto_NET_SHAPER_CMD_DELETE(0xffffffffffffffff, 0x0, 0x10) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = gettid() prctl$auto(0x3e, 0x1, r3, 0x4000000000000005, 0x0) select$auto(0x81, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) clock_adjtime$auto(0x1, 0x0) write$auto(r2, 0x0, 0x100000a3d9) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_WIPHY(r4, 0x0, 0x4004800) 0s ago: executing program 3 (id=1888): syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001540), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mknod$auto(&(0x7f00000003c0)='./file0\x00', 0x9, 0x9) mount$auto(&(0x7f0000000000)='veth0_macvtap\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x83b5a3da03b67f5b}, 0x404c040) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x13, 0x0, 0xfb3) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000200), 0xc02, 0x0) write$auto(r4, 0x0, 0xc3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r1, 0x703, 0x70bd27, 0x25dfd9fc}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4) kernel console output (not intermixed with test programs): te+0x338/0x8d0 [ 490.983531][T12717] __sys_socket+0x14d/0x260 [ 490.983549][T12717] ? __pfx___sys_socket+0x10/0x10 [ 490.983567][T12717] ? xfd_validate_state+0x61/0x180 [ 490.983592][T12717] ? __pfx___do_sys_prctl+0x10/0x10 [ 490.983624][T12717] __x64_sys_socket+0x72/0xb0 [ 490.983641][T12717] ? lockdep_hardirqs_on+0x7c/0x110 [ 490.983663][T12717] do_syscall_64+0xcd/0x490 [ 490.983689][T12717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.983707][T12717] RIP: 0033:0x7fb59d58ebe9 [ 490.983723][T12717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.983740][T12717] RSP: 002b:00007fb59e37c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 490.983758][T12717] RAX: ffffffffffffffda RBX: 00007fb59d7b5fa0 RCX: 00007fb59d58ebe9 [ 490.983769][T12717] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d [ 490.983780][T12717] RBP: 00007fb59d611e19 R08: 0000000000000000 R09: 0000000000000000 [ 490.983790][T12717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.983801][T12717] R13: 00007fb59d7b6038 R14: 00007fb59d7b5fa0 R15: 00007ffd1ef34348 [ 490.983822][T12717] [ 491.640600][T12722] netlink: 'syz.1.1266': attribute type 10 has an invalid length. [ 492.402855][T12736] FAULT_INJECTION: forcing a failure. [ 492.402855][T12736] name fail_futex, interval 1, probability 0, space 0, times 0 [ 492.578328][T12736] CPU: 1 UID: 0 PID: 12736 Comm: syz.1.1267 Tainted: G U syzkaller #0 PREEMPT(full) [ 492.578366][T12736] Tainted: [U]=USER [ 492.578372][T12736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 492.578382][T12736] Call Trace: [ 492.578388][T12736] [ 492.578395][T12736] dump_stack_lvl+0x16c/0x1f0 [ 492.578423][T12736] should_fail_ex+0x512/0x640 [ 492.578451][T12736] get_futex_key+0x1d0/0x1560 [ 492.578480][T12736] ? __pfx_get_futex_key+0x10/0x10 [ 492.578501][T12736] ? __mutex_trylock_common+0xe9/0x250 [ 492.578532][T12736] futex_wake+0xea/0x530 [ 492.578560][T12736] ? __pfx_futex_wake+0x10/0x10 [ 492.578596][T12736] do_futex+0x1e3/0x350 [ 492.578619][T12736] ? __pfx_do_futex+0x10/0x10 [ 492.578639][T12736] ? __might_fault+0xe3/0x190 [ 492.578665][T12736] mm_release+0x24e/0x300 [ 492.578686][T12736] do_exit+0x68e/0x2bf0 [ 492.578716][T12736] ? __pfx_do_exit+0x10/0x10 [ 492.578739][T12736] ? do_raw_spin_lock+0x12c/0x2b0 [ 492.578765][T12736] ? find_held_lock+0x2b/0x80 [ 492.578786][T12736] do_group_exit+0xd3/0x2a0 [ 492.578812][T12736] get_signal+0x2673/0x26d0 [ 492.578836][T12736] ? fd_install+0x225/0x750 [ 492.578855][T12736] ? putname+0x12/0x1a0 [ 492.578879][T12736] ? __pfx_get_signal+0x10/0x10 [ 492.578899][T12736] ? do_futex+0x122/0x350 [ 492.578921][T12736] ? __pfx_do_futex+0x10/0x10 [ 492.578944][T12736] arch_do_signal_or_restart+0x8f/0x790 [ 492.578969][T12736] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 492.578999][T12736] ? xfd_validate_state+0x61/0x180 [ 492.579030][T12736] exit_to_user_mode_loop+0x84/0x110 [ 492.579057][T12736] do_syscall_64+0x3f6/0x490 [ 492.579083][T12736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.579101][T12736] RIP: 0033:0x7fabcb98ebe9 [ 492.579115][T12736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.579133][T12736] RSP: 002b:00007fabcc7a80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 492.579150][T12736] RAX: fffffffffffffe00 RBX: 00007fabcbbb6188 RCX: 00007fabcb98ebe9 [ 492.579161][T12736] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fabcbbb6188 [ 492.579172][T12736] RBP: 00007fabcbbb6180 R08: 0000000000000000 R09: 0000000000000000 [ 492.579182][T12736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.579192][T12736] R13: 00007fabcbbb6218 R14: 00007ffc32364830 R15: 00007ffc32364918 [ 492.579215][T12736] [ 492.892344][T12749] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 493.123487][T12756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1272'. [ 495.964228][T12816] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1286'. [ 497.071392][T12805] FAULT_INJECTION: forcing a failure. [ 497.071392][T12805] name failslab, interval 1, probability 0, space 0, times 0 [ 497.305886][T12805] CPU: 1 UID: 0 PID: 12805 Comm: syz.1.1282 Tainted: G U syzkaller #0 PREEMPT(full) [ 497.305919][T12805] Tainted: [U]=USER [ 497.305925][T12805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 497.305936][T12805] Call Trace: [ 497.305942][T12805] [ 497.305950][T12805] dump_stack_lvl+0x16c/0x1f0 [ 497.305979][T12805] should_fail_ex+0x512/0x640 [ 497.306004][T12805] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 497.306029][T12805] should_failslab+0xc2/0x120 [ 497.306054][T12805] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 497.306076][T12805] ? ptlock_alloc+0x1f/0x70 [ 497.306098][T12805] ptlock_alloc+0x1f/0x70 [ 497.306116][T12805] pte_alloc_one+0x82/0x3a0 [ 497.306136][T12805] copy_huge_pmd+0x18d/0x2f90 [ 497.306171][T12805] ? __pfx_copy_huge_pmd+0x10/0x10 [ 497.306199][T12805] ? __pfx___might_resched+0x10/0x10 [ 497.306217][T12805] ? copy_page_range+0x1fa8/0x5c80 [ 497.306245][T12805] copy_page_range+0x20d6/0x5c80 [ 497.306286][T12805] ? mas_destroy+0x5de/0xa20 [ 497.306312][T12805] ? __pfx_copy_page_range+0x10/0x10 [ 497.306333][T12805] ? mas_store+0x7a9/0x1160 [ 497.306359][T12805] ? find_held_lock+0x2b/0x80 [ 497.306379][T12805] ? __vma_enter_locked+0x163/0x3f0 [ 497.306409][T12805] dup_mmap+0xe88/0x21d0 [ 497.306445][T12805] ? __pfx_dup_mmap+0x10/0x10 [ 497.306488][T12805] copy_process+0x4081/0x7690 [ 497.306511][T12805] ? __pfx___futex_wait+0x10/0x10 [ 497.306546][T12805] ? __pfx_copy_process+0x10/0x10 [ 497.306568][T12805] ? futex_private_hash_put+0x176/0x300 [ 497.306592][T12805] ? futex_private_hash_put+0x18a/0x300 [ 497.306617][T12805] kernel_clone+0xfc/0x930 [ 497.306646][T12805] ? __pfx_kernel_clone+0x10/0x10 [ 497.306683][T12805] __do_sys_clone+0xce/0x120 [ 497.306705][T12805] ? __pfx___do_sys_clone+0x10/0x10 [ 497.306727][T12805] ? find_held_lock+0x2b/0x80 [ 497.306753][T12805] ? xfd_validate_state+0x61/0x180 [ 497.306788][T12805] do_syscall_64+0xcd/0x490 [ 497.306814][T12805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.306832][T12805] RIP: 0033:0x7fabcb98ebe9 [ 497.306847][T12805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.306864][T12805] RSP: 002b:00007fabcc7c8fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 497.306882][T12805] RAX: ffffffffffffffda RBX: 00007fabcbbb6090 RCX: 00007fabcb98ebe9 [ 497.306894][T12805] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 497.306905][T12805] RBP: 00007fabcba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 497.306915][T12805] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 497.306926][T12805] R13: 00007fabcbbb6128 R14: 00007fabcbbb6090 R15: 00007ffc32364918 [ 497.306949][T12805] [ 498.287206][T12853] ptrace attach of "./syz-executor exec"[12854] was attempted by "./syz-executor exec"[12853] [ 502.562821][T12919] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input45 [ 503.753347][T12939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1302'. [ 503.951811][T12950] random: crng reseeded on system resumption [ 506.846473][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.855783][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.872654][T12980] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input46 [ 507.047470][T12969] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1307'. [ 507.699229][T12981] kexec: Could not allocate control_code_buffer [ 507.720991][T12999] FAULT_INJECTION: forcing a failure. [ 507.720991][T12999] name failslab, interval 1, probability 0, space 0, times 0 [ 507.798089][T12999] CPU: 1 UID: 0 PID: 12999 Comm: syz.3.1314 Tainted: G U syzkaller #0 PREEMPT(full) [ 507.798121][T12999] Tainted: [U]=USER [ 507.798127][T12999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 507.798138][T12999] Call Trace: [ 507.798144][T12999] [ 507.798152][T12999] dump_stack_lvl+0x16c/0x1f0 [ 507.798188][T12999] should_fail_ex+0x512/0x640 [ 507.798214][T12999] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 507.798237][T12999] should_failslab+0xc2/0x120 [ 507.798261][T12999] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 507.798283][T12999] ? __kernfs_new_node+0xd2/0x8e0 [ 507.798310][T12999] __kernfs_new_node+0xd2/0x8e0 [ 507.798336][T12999] ? __pfx___kernfs_new_node+0x10/0x10 [ 507.798364][T12999] ? find_held_lock+0x2b/0x80 [ 507.798383][T12999] ? kernfs_root+0xee/0x2a0 [ 507.798410][T12999] kernfs_new_node+0x13c/0x1e0 [ 507.798439][T12999] __kernfs_create_file+0x53/0x350 [ 507.798460][T12999] sysfs_add_file_mode_ns+0x207/0x3c0 [ 507.798492][T12999] internal_create_group+0x578/0xf30 [ 507.798521][T12999] ? __pfx_internal_create_group+0x10/0x10 [ 507.798549][T12999] ? kernfs_create_link+0x1bd/0x240 [ 507.798571][T12999] internal_create_groups+0x9d/0x150 [ 507.798596][T12999] device_add+0x6d1/0x1aa0 [ 507.798616][T12999] ? __pfx_device_add+0x10/0x10 [ 507.798633][T12999] ? lockdep_init_map_type+0x5c/0x280 [ 507.798658][T12999] ? __init_waitqueue_head+0xca/0x150 [ 507.798690][T12999] netdev_register_kobject+0x1a9/0x3d0 [ 507.798722][T12999] register_netdevice+0x13dc/0x2270 [ 507.798754][T12999] ? __pfx_register_netdevice+0x10/0x10 [ 507.798781][T12999] ? dev_addr_mod+0x316/0x540 [ 507.798804][T12999] __tun_chr_ioctl+0x1ed9/0x48b0 [ 507.798823][T12999] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 507.798854][T12999] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 507.798874][T12999] ? hook_file_ioctl_common+0x145/0x410 [ 507.798903][T12999] ? __fget_files+0x20e/0x3c0 [ 507.798926][T12999] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 507.798944][T12999] __x64_sys_ioctl+0x18e/0x210 [ 507.798974][T12999] do_syscall_64+0xcd/0x490 [ 507.799000][T12999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.799018][T12999] RIP: 0033:0x7f153158ebe9 [ 507.799033][T12999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.799051][T12999] RSP: 002b:00007f1532355038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 507.799069][T12999] RAX: ffffffffffffffda RBX: 00007f15317b5fa0 RCX: 00007f153158ebe9 [ 507.799081][T12999] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000003 [ 507.799092][T12999] RBP: 00007f1531611e19 R08: 0000000000000000 R09: 0000000000000000 [ 507.799102][T12999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.799113][T12999] R13: 00007f15317b6038 R14: 00007f15317b5fa0 R15: 00007fff12e2d138 [ 507.799136][T12999] [ 509.493682][T13011] i2c i2c-0: new_device: Missing parameters [ 510.570871][T13034] ptrace attach of "./syz-executor exec"[5866] was attempted by "./syz-executor exec"[13034] [ 510.809955][T13039] binder: 13038:13039 ioctl c018620c 0 returned -14 [ 512.615468][T13061] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input47 [ 515.184579][ T5184] Bluetooth: hci0: unexpected event 0x1d length: 10 > 5 [ 518.200325][T13199] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1352'. [ 520.183084][T13237] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 520.240076][T13237] netlink: 130 bytes leftover after parsing attributes in process `syz.2.1358'. [ 521.953619][T13288] FAULT_INJECTION: forcing a failure. [ 521.953619][T13288] name failslab, interval 1, probability 0, space 0, times 0 [ 522.073259][T13288] CPU: 1 UID: 0 PID: 13288 Comm: syz.2.1366 Tainted: G U syzkaller #0 PREEMPT(full) [ 522.073292][T13288] Tainted: [U]=USER [ 522.073298][T13288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 522.073309][T13288] Call Trace: [ 522.073315][T13288] [ 522.073322][T13288] dump_stack_lvl+0x16c/0x1f0 [ 522.073352][T13288] should_fail_ex+0x512/0x640 [ 522.073377][T13288] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 522.073402][T13288] should_failslab+0xc2/0x120 [ 522.073427][T13288] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 522.073452][T13288] ? __proc_create+0xc3/0x8e0 [ 522.073477][T13288] ? __proc_create+0x2ce/0x8e0 [ 522.073505][T13288] __proc_create+0x2ce/0x8e0 [ 522.073531][T13288] ? __pfx___proc_create+0x10/0x10 [ 522.073561][T13288] ? _raw_write_unlock+0x28/0x50 [ 522.073582][T13288] ? proc_register+0x314/0x5f0 [ 522.073615][T13288] proc_create_reg+0x7d/0x180 [ 522.073643][T13288] proc_create_data+0x86/0x110 [ 522.073670][T13288] ? __pfx_proc_create_data+0x10/0x10 [ 522.073698][T13288] ? cache_register_net+0x137/0x5e0 [ 522.073725][T13288] cache_register_net+0x2d6/0x5e0 [ 522.073750][T13288] unix_gid_cache_create+0x8b/0x130 [ 522.073773][T13288] ? __pfx_sunrpc_init_net+0x10/0x10 [ 522.073790][T13288] sunrpc_init_net+0x71/0x190 [ 522.073809][T13288] ops_init+0x1e2/0x5f0 [ 522.073837][T13288] setup_net+0x10f/0x380 [ 522.073860][T13288] ? lockdep_init_map_type+0x5c/0x280 [ 522.073885][T13288] ? __pfx_setup_net+0x10/0x10 [ 522.073910][T13288] ? debug_mutex_init+0x37/0x70 [ 522.073930][T13288] copy_net_ns+0x2a6/0x5f0 [ 522.073961][T13288] create_new_namespaces+0x3ea/0xa90 [ 522.073994][T13288] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 522.074017][T13288] ksys_unshare+0x45b/0xa40 [ 522.074042][T13288] ? __pfx_ksys_unshare+0x10/0x10 [ 522.074070][T13288] ? syscall_user_dispatch+0x78/0x140 [ 522.074104][T13288] __x64_sys_unshare+0x31/0x40 [ 522.074128][T13288] do_syscall_64+0xcd/0x490 [ 522.074155][T13288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.074173][T13288] RIP: 0033:0x7fdfc3d8ebe9 [ 522.074188][T13288] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.074206][T13288] RSP: 002b:00007fdfc4ba4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 522.074224][T13288] RAX: ffffffffffffffda RBX: 00007fdfc3fb5fa0 RCX: 00007fdfc3d8ebe9 [ 522.074236][T13288] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 522.074246][T13288] RBP: 00007fdfc3e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 522.074257][T13288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.074267][T13288] R13: 00007fdfc3fb6038 R14: 00007fdfc3fb5fa0 R15: 00007fff34a983b8 [ 522.074290][T13288] [ 523.999347][T13322] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1372'. [ 525.331694][T13309] FAULT_INJECTION: forcing a failure. [ 525.331694][T13309] name failslab, interval 1, probability 0, space 0, times 0 [ 525.393520][T13353] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 525.393520][T13353] The task syz.0.1376 (13353) triggered the difference, watch for misbehavior. [ 525.515791][T13309] CPU: 1 UID: 0 PID: 13309 Comm: syz.1.1369 Tainted: G U syzkaller #0 PREEMPT(full) [ 525.515822][T13309] Tainted: [U]=USER [ 525.515829][T13309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 525.515839][T13309] Call Trace: [ 525.515846][T13309] [ 525.515853][T13309] dump_stack_lvl+0x16c/0x1f0 [ 525.515882][T13309] should_fail_ex+0x512/0x640 [ 525.515907][T13309] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 525.515932][T13309] should_failslab+0xc2/0x120 [ 525.515955][T13309] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 525.515975][T13309] ? __pfx_trace_kmem_cache_alloc+0x1/0x10 [ 525.516004][T13309] ? anon_vma_fork+0xe6/0x620 [ 525.516027][T13309] anon_vma_fork+0xe6/0x620 [ 525.516045][T13309] ? vm_area_dup+0x5a1/0x8d0 [ 525.516065][T13309] dup_mmap+0x152e/0x21d0 [ 525.516100][T13309] ? __pfx_dup_mmap+0x10/0x10 [ 525.516142][T13309] copy_process+0x4081/0x7690 [ 525.516166][T13309] ? __pfx___futex_wait+0x10/0x10 [ 525.516191][T13309] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 525.516241][T13309] ? __pfx_copy_process+0x10/0x10 [ 525.516264][T13309] ? futex_private_hash_put+0x176/0x300 [ 525.516288][T13309] ? futex_private_hash_put+0x18a/0x300 [ 525.516313][T13309] kernel_clone+0xfc/0x930 [ 525.516338][T13309] ? __pfx_kernel_clone+0x10/0x10 [ 525.516374][T13309] __do_sys_clone+0xce/0x120 [ 525.516398][T13309] ? __pfx___do_sys_clone+0x10/0x10 [ 525.516420][T13309] ? find_held_lock+0x2b/0x80 [ 525.516448][T13309] ? xfd_validate_state+0x61/0x180 [ 525.516482][T13309] do_syscall_64+0xcd/0x490 [ 525.516508][T13309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.516526][T13309] RIP: 0033:0x7fabcb98ebe9 [ 525.516542][T13309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.516560][T13309] RSP: 002b:00007fabcc7c8fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 525.516577][T13309] RAX: ffffffffffffffda RBX: 00007fabcbbb6090 RCX: 00007fabcb98ebe9 [ 525.516589][T13309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 525.516600][T13309] RBP: 00007fabcba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 525.516610][T13309] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 525.516620][T13309] R13: 00007fabcbbb6128 R14: 00007fabcbbb6090 R15: 00007ffc32364918 [ 525.516643][T13309] [ 525.750518][ C1] vkms_vblank_simulate: vblank timer overrun [ 531.092568][T13489] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 532.530986][ T5184] Bluetooth: hci2: command 0x0406 tx timeout [ 532.537140][ T24] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 533.285195][ T5184] Bluetooth: hci3: unexpected event 0x35 length: 13 > 6 [ 534.035398][T13534] [ 535.065723][T13529] FAULT_INJECTION: forcing a failure. [ 535.065723][T13529] name failslab, interval 1, probability 0, space 0, times 0 [ 535.154660][T13529] CPU: 1 UID: 0 PID: 13529 Comm: syz.3.1409 Tainted: G U syzkaller #0 PREEMPT(full) [ 535.154693][T13529] Tainted: [U]=USER [ 535.154699][T13529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 535.154710][T13529] Call Trace: [ 535.154716][T13529] [ 535.154723][T13529] dump_stack_lvl+0x16c/0x1f0 [ 535.154752][T13529] should_fail_ex+0x512/0x640 [ 535.154777][T13529] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 535.154803][T13529] should_failslab+0xc2/0x120 [ 535.154827][T13529] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 535.154847][T13529] ? __pfx_trace_kmem_cache_alloc+0x1/0x10 [ 535.154875][T13529] ? anon_vma_fork+0x200/0x620 [ 535.154899][T13529] anon_vma_fork+0x200/0x620 [ 535.154921][T13529] dup_mmap+0x152e/0x21d0 [ 535.154956][T13529] ? __pfx_dup_mmap+0x10/0x10 [ 535.154998][T13529] copy_process+0x4081/0x7690 [ 535.155021][T13529] ? __pfx___futex_wait+0x10/0x10 [ 535.155056][T13529] ? __pfx_copy_process+0x10/0x10 [ 535.155079][T13529] ? futex_private_hash_put+0x176/0x300 [ 535.155103][T13529] ? futex_private_hash_put+0x18a/0x300 [ 535.155136][T13529] kernel_clone+0xfc/0x930 [ 535.155160][T13529] ? __pfx_kernel_clone+0x10/0x10 [ 535.155196][T13529] __do_sys_clone+0xce/0x120 [ 535.155218][T13529] ? __pfx___do_sys_clone+0x10/0x10 [ 535.155240][T13529] ? find_held_lock+0x2b/0x80 [ 535.155268][T13529] ? xfd_validate_state+0x61/0x180 [ 535.155302][T13529] do_syscall_64+0xcd/0x490 [ 535.155328][T13529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.155347][T13529] RIP: 0033:0x7f153158ebe9 [ 535.155362][T13529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.155380][T13529] RSP: 002b:00007f1532333fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 535.155397][T13529] RAX: ffffffffffffffda RBX: 00007f15317b6090 RCX: 00007f153158ebe9 [ 535.155409][T13529] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 535.155419][T13529] RBP: 00007f1531611e19 R08: 0000000000000000 R09: 0000000000000000 [ 535.155429][T13529] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 535.155439][T13529] R13: 00007f15317b6128 R14: 00007f15317b6090 R15: 00007fff12e2d138 [ 535.155461][T13529] [ 537.443079][T13589] FAULT_INJECTION: forcing a failure. [ 537.443079][T13589] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 537.484709][T13589] CPU: 1 UID: 0 PID: 13589 Comm: syz.1.1422 Tainted: G U syzkaller #0 PREEMPT(full) [ 537.484740][T13589] Tainted: [U]=USER [ 537.484746][T13589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 537.484756][T13589] Call Trace: [ 537.484763][T13589] [ 537.484771][T13589] dump_stack_lvl+0x16c/0x1f0 [ 537.484798][T13589] should_fail_ex+0x512/0x640 [ 537.484828][T13589] should_fail_alloc_page+0xe7/0x130 [ 537.484854][T13589] prepare_alloc_pages+0x3c2/0x610 [ 537.484888][T13589] ? rcu_is_watching+0x12/0xc0 [ 537.484909][T13589] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 537.484931][T13589] ? __lock_acquire+0xb97/0x1ce0 [ 537.484963][T13589] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 537.484985][T13589] ? do_raw_spin_lock+0x12c/0x2b0 [ 537.485013][T13589] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 537.485041][T13589] ? find_held_lock+0x2b/0x80 [ 537.485065][T13589] ? __lock_acquire+0xb97/0x1ce0 [ 537.485088][T13589] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 537.485117][T13589] ? policy_nodemask+0xea/0x4e0 [ 537.485143][T13589] alloc_pages_mpol+0x1fb/0x550 [ 537.485168][T13589] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 537.485197][T13589] folio_alloc_mpol_noprof+0x36/0x2f0 [ 537.485226][T13589] shmem_alloc_folio+0x135/0x160 [ 537.485255][T13589] shmem_alloc_and_add_folio+0x499/0xc20 [ 537.485281][T13589] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 537.485303][T13589] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 537.485328][T13589] shmem_get_folio_gfp+0x67f/0x1600 [ 537.485353][T13589] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 537.485380][T13589] shmem_write_begin+0x160/0x300 [ 537.485403][T13589] ? __pfx_shmem_write_begin+0x10/0x10 [ 537.485423][T13589] ? timestamp_truncate+0x21e/0x2d0 [ 537.485445][T13589] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 537.485478][T13589] generic_perform_write+0x3c2/0x900 [ 537.485504][T13589] ? __pfx_generic_perform_write+0x10/0x10 [ 537.485525][T13589] ? inode_needs_update_time.part.0+0x191/0x270 [ 537.485553][T13589] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 537.485577][T13589] shmem_file_write_iter+0x10e/0x140 [ 537.485603][T13589] __kernel_write_iter+0x31a/0xb10 [ 537.485626][T13589] ? __pfx___kernel_write_iter+0x10/0x10 [ 537.485646][T13589] ? __up_read+0x1f8/0x750 [ 537.485674][T13589] ? dump_user_range+0x756/0xb70 [ 537.485702][T13589] dump_user_range+0x413/0xb70 [ 537.485725][T13589] ? __pfx_dump_user_range+0x10/0x10 [ 537.485745][T13589] ? elf_coredump_extra_notes_write+0xbd/0x4f0 [ 537.485778][T13589] ? __pfx_writenote+0x10/0x10 [ 537.485803][T13589] elf_core_dump+0x2929/0x3b60 [ 537.485835][T13589] ? __pfx_elf_core_dump+0x10/0x10 [ 537.485854][T13589] ? kasan_save_stack+0x33/0x60 [ 537.485879][T13589] ? kasan_save_track+0x14/0x30 [ 537.485898][T13589] ? __kasan_kmalloc+0xaa/0xb0 [ 537.485916][T13589] ? vfs_coredump+0x1dca/0x5670 [ 537.485931][T13589] ? get_signal+0x22e3/0x26d0 [ 537.485951][T13589] ? arch_do_signal_or_restart+0x8f/0x790 [ 537.485978][T13589] ? 0xffffffffff600000 [ 537.486030][T13589] ? vfs_coredump+0x2b94/0x5670 [ 537.486046][T13589] vfs_coredump+0x2b94/0x5670 [ 537.486072][T13589] ? __pfx_vfs_coredump+0x10/0x10 [ 537.486091][T13589] ? __lock_acquire+0x62e/0x1ce0 [ 537.486119][T13589] ? __lock_acquire+0x62e/0x1ce0 [ 537.486145][T13589] ? lock_acquire+0x179/0x350 [ 537.486179][T13589] ? is_bpf_text_address+0x8a/0x1a0 [ 537.486201][T13589] ? bpf_ksym_find+0x124/0x1c0 [ 537.486223][T13589] ? __kernel_text_address+0xd/0x40 [ 537.486240][T13589] ? unwind_get_return_address+0x59/0xa0 [ 537.486259][T13589] ? arch_stack_walk+0xa6/0x100 [ 537.486287][T13589] ? stack_trace_save+0x8e/0xc0 [ 537.486307][T13589] ? __pfx_stack_trace_save+0x10/0x10 [ 537.486328][T13589] ? stack_depot_save_flags+0x29/0x9c0 [ 537.486353][T13589] ? __lock_acquire+0xb97/0x1ce0 [ 537.486385][T13589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.486432][T13589] ? proc_coredump_connector+0x2d1/0x4f0 [ 537.486452][T13589] ? __pfx_proc_coredump_connector+0x10/0x10 [ 537.486477][T13589] ? rcu_is_watching+0x12/0xc0 [ 537.486498][T13589] get_signal+0x22e3/0x26d0 [ 537.486532][T13589] ? __pfx_get_signal+0x10/0x10 [ 537.486557][T13589] ? trace_signal_generate+0x18b/0x200 [ 537.486580][T13589] ? find_held_lock+0x2b/0x80 [ 537.486601][T13589] arch_do_signal_or_restart+0x8f/0x790 [ 537.486623][T13589] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 537.486647][T13589] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 537.486668][T13589] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 537.486697][T13589] ? syscall_user_dispatch+0x10c/0x140 [ 537.486728][T13589] exit_to_user_mode_loop+0x84/0x110 [ 537.486755][T13589] do_syscall_64+0x3f6/0x490 [ 537.486782][T13589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.486799][T13589] RIP: 0033:0x7fabcb98ebe9 [ 537.486814][T13589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.486831][T13589] RSP: 002b:00007fabcc7ea0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 537.486850][T13589] RAX: 00000000000000ca RBX: 00007fabcbbb5fa8 RCX: 00007fabcb98ebe9 [ 537.486861][T13589] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fabcbbb5fac [ 537.486881][T13589] RBP: 00007fabcbbb5fa0 R08: 00007fabcc7eb000 R09: 0000000000000000 [ 537.486892][T13589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.486903][T13589] R13: 00007fabcbbb6038 R14: 00007ffc32364830 R15: 00007ffc32364918 [ 537.486927][T13589] [ 541.230944][ T30] audit: type=1800 audit(4294967495.120:15): pid=13647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1434" name="SYSVffffffff" dev="tmpfs" ino=0 res=0 errno=0 [ 542.043407][ T5184] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 543.664263][T13703] random: crng reseeded on system resumption [ 545.774831][T13754] mkiss: ax0: crc mode is auto. [ 548.421035][T13809] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1461'. [ 548.468867][T13809] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 548.498364][T13809] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.978109][T13819] ptrace attach of "./syz-executor exec"[5866] was attempted by "./syz-executor exec"[13819] [ 553.209613][T13891] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input48 [ 554.872245][T13930] ubi: mtd0 is already attached to ubi0 [ 555.673361][ T5184] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 555.784589][T13947] block2mtd: illegal erase size [ 556.446825][T13962] FAULT_INJECTION: forcing a failure. [ 556.446825][T13962] name failslab, interval 1, probability 0, space 0, times 0 [ 556.479808][T13962] CPU: 1 UID: 0 PID: 13962 Comm: syz.0.1494 Tainted: G U syzkaller #0 PREEMPT(full) [ 556.479840][T13962] Tainted: [U]=USER [ 556.479846][T13962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 556.479861][T13962] Call Trace: [ 556.479868][T13962] [ 556.479875][T13962] dump_stack_lvl+0x16c/0x1f0 [ 556.479903][T13962] should_fail_ex+0x512/0x640 [ 556.479932][T13962] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 556.479957][T13962] should_failslab+0xc2/0x120 [ 556.479981][T13962] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 556.480004][T13962] ? security_file_alloc+0x34/0x2b0 [ 556.480032][T13962] security_file_alloc+0x34/0x2b0 [ 556.480057][T13962] init_file+0x93/0x4c0 [ 556.480083][T13962] alloc_empty_file+0x73/0x1e0 [ 556.480110][T13962] alloc_file_pseudo+0x13a/0x230 [ 556.480138][T13962] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 556.480164][T13962] ? alloc_fd+0x471/0x7d0 [ 556.480187][T13962] sock_alloc_file+0x50/0x210 [ 556.480214][T13962] __sys_socket+0x1c0/0x260 [ 556.480231][T13962] ? fdget_pos+0x2b8/0x370 [ 556.480251][T13962] ? __pfx___sys_socket+0x10/0x10 [ 556.480269][T13962] ? xfd_validate_state+0x61/0x180 [ 556.480295][T13962] ? __pfx_ksys_write+0x10/0x10 [ 556.480320][T13962] __x64_sys_socket+0x72/0xb0 [ 556.480337][T13962] ? lockdep_hardirqs_on+0x7c/0x110 [ 556.480359][T13962] do_syscall_64+0xcd/0x490 [ 556.480385][T13962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.480403][T13962] RIP: 0033:0x7fb59d58ebe9 [ 556.480418][T13962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.480436][T13962] RSP: 002b:00007fb59e37c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 556.480454][T13962] RAX: ffffffffffffffda RBX: 00007fb59d7b5fa0 RCX: 00007fb59d58ebe9 [ 556.480466][T13962] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 556.480477][T13962] RBP: 00007fb59d611e19 R08: 0000000000000000 R09: 0000000000000000 [ 556.480487][T13962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.480497][T13962] R13: 00007fb59d7b6038 R14: 00007fb59d7b5fa0 R15: 00007ffd1ef34348 [ 556.480519][T13962] [ 556.875053][T13967] FAULT_INJECTION: forcing a failure. [ 556.875053][T13967] name failslab, interval 1, probability 0, space 0, times 0 [ 556.887799][T13967] CPU: 1 UID: 0 PID: 13967 Comm: syz.2.1495 Tainted: G U syzkaller #0 PREEMPT(full) [ 556.887830][T13967] Tainted: [U]=USER [ 556.887836][T13967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 556.887847][T13967] Call Trace: [ 556.887853][T13967] [ 556.887861][T13967] dump_stack_lvl+0x16c/0x1f0 [ 556.887889][T13967] should_fail_ex+0x512/0x640 [ 556.887914][T13967] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 556.887939][T13967] should_failslab+0xc2/0x120 [ 556.887963][T13967] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 556.887984][T13967] ? _raw_spin_unlock+0x28/0x50 [ 556.888004][T13967] ? alloc_inode+0xc3/0x240 [ 556.888033][T13967] alloc_inode+0xc3/0x240 [ 556.888058][T13967] new_inode+0x22/0x1c0 [ 556.888085][T13967] simple_fill_super+0x306/0x720 [ 556.888108][T13967] ? __pfx_nfsd_fill_super+0x10/0x10 [ 556.888129][T13967] nfsd_fill_super+0x90/0x530 [ 556.888149][T13967] ? __pfx_set_anon_super_fc+0x10/0x10 [ 556.888168][T13967] ? __pfx_nfsd_fill_super+0x10/0x10 [ 556.888188][T13967] get_tree_keyed+0x10e/0x1d0 [ 556.888210][T13967] vfs_get_tree+0x8b/0x340 [ 556.888226][T13967] path_mount+0x1513/0x2000 [ 556.888252][T13967] ? __pfx_path_mount+0x10/0x10 [ 556.888276][T13967] ? kmem_cache_free+0x2d1/0x4d0 [ 556.888295][T13967] ? putname+0x154/0x1a0 [ 556.888321][T13967] ? putname+0x154/0x1a0 [ 556.888347][T13967] ? __x64_sys_mount+0x28d/0x310 [ 556.888368][T13967] __x64_sys_mount+0x28d/0x310 [ 556.888391][T13967] ? __pfx___x64_sys_mount+0x10/0x10 [ 556.888421][T13967] do_syscall_64+0xcd/0x490 [ 556.888451][T13967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.888470][T13967] RIP: 0033:0x7fdfc3d8ebe9 [ 556.888485][T13967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.888503][T13967] RSP: 002b:00007fdfc4ba4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 556.888521][T13967] RAX: ffffffffffffffda RBX: 00007fdfc3fb5fa0 RCX: 00007fdfc3d8ebe9 [ 556.888532][T13967] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 556.888543][T13967] RBP: 00007fdfc3e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 556.888554][T13967] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000000 [ 556.888564][T13967] R13: 00007fdfc3fb6038 R14: 00007fdfc3fb5fa0 R15: 00007fff34a983b8 [ 556.888587][T13967] [ 558.635299][T13991] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 558.757043][T13991] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 558.855443][T13991] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 559.575036][T13631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 559.586350][T13631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 559.596538][T13631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 559.605079][T13631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 559.613676][T13631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 560.332114][T14005] chnl_net:caif_netlink_parms(): no params data found [ 560.555824][T14005] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.590339][T14005] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.597558][T14005] bridge_slave_0: entered allmulticast mode [ 560.633154][T14005] bridge_slave_0: entered promiscuous mode [ 560.672205][T14005] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.690404][T14005] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.697612][T14005] bridge_slave_1: entered allmulticast mode [ 560.739756][T14005] bridge_slave_1: entered promiscuous mode [ 560.850940][T14005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.902411][T14005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.025237][T14005] team0: Port device team_slave_0 added [ 561.051234][T14005] team0: Port device team_slave_1 added [ 561.170665][T14005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.177694][T14005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.309928][T14005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.347111][T14005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.357127][T14005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.418324][T14005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.520374][T14005] hsr_slave_0: entered promiscuous mode [ 561.532962][T14005] hsr_slave_1: entered promiscuous mode [ 561.552073][T14005] debugfs: 'hsr0' already exists in 'hsr' [ 561.564898][T14005] Cannot create hsr debugfs directory [ 561.638634][T13631] Bluetooth: hci4: command tx timeout [ 561.880363][T14037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 561.994426][T14005] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 562.026782][T14005] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 562.056187][T14005] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 562.090301][T14005] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 562.163174][T14038] zswap: compressor 000 not available [ 562.357021][T14051] __vm_enough_memory: pid: 14051, comm: syz.0.1512, bytes: 4398046511104 not enough memory for the allocation [ 562.391205][T14005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.467793][T14005] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.533492][T12767] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.540651][T12767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.584554][T12767] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.591806][T12767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.682473][T14059] FAULT_INJECTION: forcing a failure. [ 562.682473][T14059] name failslab, interval 1, probability 0, space 0, times 0 [ 562.716655][T14059] CPU: 1 UID: 0 PID: 14059 Comm: syz.0.1513 Tainted: G U syzkaller #0 PREEMPT(full) [ 562.716688][T14059] Tainted: [U]=USER [ 562.716695][T14059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 562.716705][T14059] Call Trace: [ 562.716711][T14059] [ 562.716720][T14059] dump_stack_lvl+0x16c/0x1f0 [ 562.716748][T14059] should_fail_ex+0x512/0x640 [ 562.716773][T14059] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 562.716798][T14059] should_failslab+0xc2/0x120 [ 562.716823][T14059] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 562.716844][T14059] ? sk_prot_alloc+0x60/0x2a0 [ 562.716874][T14059] sk_prot_alloc+0x60/0x2a0 [ 562.716911][T14059] sk_alloc+0x36/0xc20 [ 562.716935][T14059] tipc_sk_create+0xcf/0x21a0 [ 562.716957][T14059] ? find_held_lock+0x2b/0x80 [ 562.716976][T14059] ? __sock_create+0x2f2/0x8d0 [ 562.716997][T14059] __sock_create+0x338/0x8d0 [ 562.717019][T14059] __sys_socket+0x14d/0x260 [ 562.717038][T14059] ? __pfx___sys_socket+0x10/0x10 [ 562.717056][T14059] ? xfd_validate_state+0x61/0x180 [ 562.717088][T14059] __x64_sys_socket+0x72/0xb0 [ 562.717105][T14059] ? lockdep_hardirqs_on+0x7c/0x110 [ 562.717128][T14059] do_syscall_64+0xcd/0x490 [ 562.717153][T14059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.717171][T14059] RIP: 0033:0x7fb59d58ebe9 [ 562.717186][T14059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.717203][T14059] RSP: 002b:00007fb59e33a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 562.717221][T14059] RAX: ffffffffffffffda RBX: 00007fb59d7b6180 RCX: 00007fb59d58ebe9 [ 562.717232][T14059] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 562.717243][T14059] RBP: 00007fb59d611e19 R08: 0000000000000000 R09: 0000000000000000 [ 562.717254][T14059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.717264][T14059] R13: 00007fb59d7b6218 R14: 00007fb59d7b6180 R15: 00007ffd1ef34348 [ 562.717285][T14059] [ 562.932880][T14005] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 562.943609][T14005] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 563.195171][T14005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.721566][T13631] Bluetooth: hci4: command tx timeout [ 564.255412][T14005] veth0_vlan: entered promiscuous mode [ 564.344420][T14005] veth1_vlan: entered promiscuous mode [ 564.482633][T14005] veth0_macvtap: entered promiscuous mode [ 564.568730][T14005] veth1_macvtap: entered promiscuous mode [ 564.805553][T14005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.871014][T14005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.976826][T12082] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.026129][T12082] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.071151][T12082] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.097240][T12082] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.319462][T11315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.361429][T11315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.694271][T12765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.757718][T12765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.799259][T13631] Bluetooth: hci4: command tx timeout [ 566.096997][T14123] netlink: zone id is out of range [ 566.153366][T14123] netlink: zone id is out of range [ 566.191914][T14123] netlink: zone id is out of range [ 566.197061][T14123] netlink: zone id is out of range [ 566.231261][T14123] netlink: zone id is out of range [ 566.253004][T14123] netlink: zone id is out of range [ 566.283862][T14123] netlink: zone id is out of range [ 566.321602][T14123] netlink: zone id is out of range [ 566.354786][T14123] netlink: zone id is out of range [ 566.374753][T14123] netlink: zone id is out of range [ 567.155794][T14142] Invalid ELF header magic: != ELF [ 567.878859][T13631] Bluetooth: hci4: command tx timeout [ 568.287481][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.294075][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.125699][T14195] kAFS: Invalid Command on /proc/fs/afs/cells file [ 569.214590][T14197] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 569.312450][T14202] ubi: mtd0 is already attached to ubi0 [ 569.342361][T14202] ubi0: detaching mtd0 [ 569.371591][T14203] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1538'. [ 569.391805][T14202] ubi0: mtd0 is detached [ 569.454851][T14203] veth0_macvtap: left promiscuous mode [ 571.424307][T14250] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1548'. [ 573.059580][ T5184] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 573.071314][ T5184] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 573.080028][ T5184] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 573.089075][ T5184] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 573.096621][ T5184] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 573.838528][T14283] chnl_net:caif_netlink_parms(): no params data found [ 574.226976][T14283] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.281524][T14283] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.322528][T14283] bridge_slave_0: entered allmulticast mode [ 574.352798][T14283] bridge_slave_0: entered promiscuous mode [ 574.394225][T14283] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.425270][T14283] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.456294][T14283] bridge_slave_1: entered allmulticast mode [ 574.491411][T14283] bridge_slave_1: entered promiscuous mode [ 574.687701][T14283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.764481][T14283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.075494][T14283] team0: Port device team_slave_0 added [ 575.137898][T14283] team0: Port device team_slave_1 added [ 575.158586][ T5184] Bluetooth: hci5: command tx timeout [ 575.402106][T14283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.437344][T14283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.538646][T14283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.644456][T14283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.675931][T14283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.785498][T14283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.930545][ T30] audit: type=1800 audit(4294967529.820:16): pid=14325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1563" name="dbroot" dev="configfs" ino=52006 res=0 errno=0 [ 575.990538][T14283] hsr_slave_0: entered promiscuous mode [ 575.996821][T14283] hsr_slave_1: entered promiscuous mode [ 576.046934][T14283] debugfs: 'hsr0' already exists in 'hsr' [ 576.076834][T14283] Cannot create hsr debugfs directory [ 577.017711][ T30] audit: type=1400 audit(4294967530.890:17): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=14347 comm="syz.4.1569" [ 577.111066][T14350] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1569'. [ 577.136924][T14283] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 577.205084][T14283] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 577.240342][ T5184] Bluetooth: hci5: command tx timeout [ 577.415477][T14283] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 577.457008][T14283] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 577.775434][T14347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.890975][T14283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.030958][T14283] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.112893][T12082] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.120114][T12082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.220015][T12082] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.227169][T12082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.572520][T14283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 579.319335][ T5184] Bluetooth: hci5: command tx timeout [ 579.694016][T14283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.625476][T14283] veth0_vlan: entered promiscuous mode [ 580.681151][T14283] veth1_vlan: entered promiscuous mode [ 580.791874][T14283] veth0_macvtap: entered promiscuous mode [ 580.838309][T14283] veth1_macvtap: entered promiscuous mode [ 580.920453][T14283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.963397][T14283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.030746][T12765] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.090937][T12765] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.175423][T12765] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.218377][T12765] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.398659][ T5184] Bluetooth: hci5: command tx timeout [ 581.821609][T11315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.877666][T11315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.014191][T12086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.065343][T12086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.310512][T14505] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 585.714041][T14518] FAULT_INJECTION: forcing a failure. [ 585.714041][T14518] name failslab, interval 1, probability 0, space 0, times 0 [ 585.819800][T14518] CPU: 1 UID: 0 PID: 14518 Comm: syz.5.1594 Tainted: G U syzkaller #0 PREEMPT(full) [ 585.819831][T14518] Tainted: [U]=USER [ 585.819838][T14518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 585.819848][T14518] Call Trace: [ 585.819855][T14518] [ 585.819862][T14518] dump_stack_lvl+0x16c/0x1f0 [ 585.819890][T14518] should_fail_ex+0x512/0x640 [ 585.819915][T14518] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 585.819941][T14518] should_failslab+0xc2/0x120 [ 585.819964][T14518] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 585.819986][T14518] ? __kernfs_new_node+0xd2/0x8e0 [ 585.820012][T14518] __kernfs_new_node+0xd2/0x8e0 [ 585.820038][T14518] ? __pfx___kernfs_new_node+0x10/0x10 [ 585.820067][T14518] ? find_held_lock+0x2b/0x80 [ 585.820085][T14518] ? kernfs_root+0xee/0x2a0 [ 585.820112][T14518] kernfs_new_node+0x13c/0x1e0 [ 585.820142][T14518] __kernfs_create_file+0x53/0x350 [ 585.820163][T14518] sysfs_add_file_mode_ns+0x207/0x3c0 [ 585.820190][T14518] internal_create_group+0x578/0xf30 [ 585.820220][T14518] ? __pfx_internal_create_group+0x10/0x10 [ 585.820247][T14518] ? kernfs_create_link+0x1bd/0x240 [ 585.820269][T14518] internal_create_groups+0x9d/0x150 [ 585.820295][T14518] device_add+0x6d1/0x1aa0 [ 585.820314][T14518] ? __pfx_device_add+0x10/0x10 [ 585.820331][T14518] ? lockdep_init_map_type+0x5c/0x280 [ 585.820355][T14518] ? __init_waitqueue_head+0xca/0x150 [ 585.820387][T14518] netdev_register_kobject+0x1a9/0x3d0 [ 585.820431][T14518] register_netdevice+0x13dc/0x2270 [ 585.820463][T14518] ? __pfx_register_netdevice+0x10/0x10 [ 585.820496][T14518] br_add_bridge+0x9a/0xf0 [ 585.820520][T14518] br_ioctl_stub+0x482/0x4c0 [ 585.820547][T14518] ? __pfx_br_ioctl_stub+0x10/0x10 [ 585.820572][T14518] ? __pfx___mutex_lock+0x10/0x10 [ 585.820608][T14518] ? __pfx_br_ioctl_stub+0x10/0x10 [ 585.820634][T14518] br_ioctl_call+0x53/0xa0 [ 585.820652][T14518] sock_ioctl+0x365/0x6b0 [ 585.820670][T14518] ? __pfx_sock_ioctl+0x10/0x10 [ 585.820686][T14518] ? hook_file_ioctl_common+0x145/0x410 [ 585.820715][T14518] ? __fget_files+0x20e/0x3c0 [ 585.820737][T14518] ? __pfx_sock_ioctl+0x10/0x10 [ 585.820756][T14518] __x64_sys_ioctl+0x18e/0x210 [ 585.820786][T14518] do_syscall_64+0xcd/0x490 [ 585.820811][T14518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.820830][T14518] RIP: 0033:0x7fd9d138ebe9 [ 585.820845][T14518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.820862][T14518] RSP: 002b:00007fd9d21c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 585.820880][T14518] RAX: ffffffffffffffda RBX: 00007fd9d15b5fa0 RCX: 00007fd9d138ebe9 [ 585.820891][T14518] RDX: 0000000000000004 RSI: 00000000000089a0 RDI: 0000000000000005 [ 585.820902][T14518] RBP: 00007fd9d1411e19 R08: 0000000000000000 R09: 0000000000000000 [ 585.820912][T14518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.820922][T14518] R13: 00007fd9d15b6038 R14: 00007fd9d15b5fa0 R15: 00007ffd663377f8 [ 585.820951][T14518] [ 587.738764][T14558] random: crng reseeded on system resumption [ 590.063371][T14570] FAULT_INJECTION: forcing a failure. [ 590.063371][T14570] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 590.180856][T14570] CPU: 1 UID: 0 PID: 14570 Comm: syz.0.1602 Tainted: G U syzkaller #0 PREEMPT(full) [ 590.180889][T14570] Tainted: [U]=USER [ 590.180895][T14570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 590.180906][T14570] Call Trace: [ 590.180912][T14570] [ 590.180920][T14570] dump_stack_lvl+0x16c/0x1f0 [ 590.180950][T14570] should_fail_ex+0x512/0x640 [ 590.180980][T14570] should_fail_alloc_page+0xe7/0x130 [ 590.181006][T14570] prepare_alloc_pages+0x3c2/0x610 [ 590.181038][T14570] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 590.181062][T14570] ? __pfx_stack_trace_save+0x10/0x10 [ 590.181085][T14570] ? stack_depot_save_flags+0x29/0x9c0 [ 590.181111][T14570] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 590.181135][T14570] ? kasan_save_stack+0x42/0x60 [ 590.181154][T14570] ? kasan_save_stack+0x33/0x60 [ 590.181174][T14570] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 590.181199][T14570] ? __pmd_alloc+0xbf/0x930 [ 590.181225][T14570] ? dup_mmap+0xe88/0x21d0 [ 590.181250][T14570] ? kernel_clone+0xfc/0x930 [ 590.181272][T14570] ? __do_sys_clone+0xce/0x120 [ 590.181292][T14570] ? do_syscall_64+0xcd/0x490 [ 590.181315][T14570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.181343][T14570] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 590.181382][T14570] ? policy_nodemask+0xea/0x4e0 [ 590.181408][T14570] alloc_pages_mpol+0x1fb/0x550 [ 590.181433][T14570] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 590.181464][T14570] alloc_pages_noprof+0x131/0x390 [ 590.181488][T14570] pte_alloc_one+0x1c/0x3a0 [ 590.181509][T14570] __pte_alloc+0x6d/0x3c0 [ 590.181533][T14570] ? __pfx___pte_alloc+0x10/0x10 [ 590.181557][T14570] ? _raw_spin_unlock+0x28/0x50 [ 590.181576][T14570] ? __pmd_alloc+0x3fb/0x930 [ 590.181604][T14570] copy_page_range+0x3b83/0x5c80 [ 590.181646][T14570] ? mas_destroy+0x5de/0xa20 [ 590.181671][T14570] ? __pfx_copy_page_range+0x10/0x10 [ 590.181692][T14570] ? mas_store+0x7a9/0x1160 [ 590.181719][T14570] ? find_held_lock+0x2b/0x80 [ 590.181737][T14570] ? __pfx_mas_store+0x10/0x10 [ 590.181761][T14570] ? __vma_enter_locked+0x163/0x3f0 [ 590.181791][T14570] dup_mmap+0xe88/0x21d0 [ 590.181826][T14570] ? __pfx_dup_mmap+0x10/0x10 [ 590.181868][T14570] copy_process+0x4081/0x7690 [ 590.181890][T14570] ? __pfx___futex_wait+0x10/0x10 [ 590.181916][T14570] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 590.181945][T14570] ? __pfx_copy_process+0x10/0x10 [ 590.181967][T14570] ? futex_private_hash_put+0x176/0x300 [ 590.181991][T14570] ? futex_private_hash_put+0x18a/0x300 [ 590.182016][T14570] kernel_clone+0xfc/0x930 [ 590.182040][T14570] ? __pfx_kernel_clone+0x10/0x10 [ 590.182076][T14570] __do_sys_clone+0xce/0x120 [ 590.182098][T14570] ? __pfx___do_sys_clone+0x10/0x10 [ 590.182120][T14570] ? find_held_lock+0x2b/0x80 [ 590.182146][T14570] ? xfd_validate_state+0x61/0x180 [ 590.182180][T14570] do_syscall_64+0xcd/0x490 [ 590.182206][T14570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.182224][T14570] RIP: 0033:0x7fb59d58ebe9 [ 590.182240][T14570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.182257][T14570] RSP: 002b:00007fb59e35afe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 590.182275][T14570] RAX: ffffffffffffffda RBX: 00007fb59d7b6090 RCX: 00007fb59d58ebe9 [ 590.182287][T14570] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 590.182297][T14570] RBP: 00007fb59d611e19 R08: 0000000000000000 R09: 0000000000000000 [ 590.182308][T14570] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 590.182318][T14570] R13: 00007fb59d7b6128 R14: 00007fb59d7b6090 R15: 00007ffd1ef34348 [ 590.182341][T14570] [ 592.651245][T14603] FAULT_INJECTION: forcing a failure. [ 592.651245][T14603] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 592.771078][T14603] CPU: 1 UID: 0 PID: 14603 Comm: syz.0.1609 Tainted: G U syzkaller #0 PREEMPT(full) [ 592.771112][T14603] Tainted: [U]=USER [ 592.771118][T14603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 592.771129][T14603] Call Trace: [ 592.771135][T14603] [ 592.771143][T14603] dump_stack_lvl+0x16c/0x1f0 [ 592.771173][T14603] should_fail_ex+0x512/0x640 [ 592.771209][T14603] should_fail_alloc_page+0xe7/0x130 [ 592.771236][T14603] prepare_alloc_pages+0x3c2/0x610 [ 592.771266][T14603] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 592.771292][T14603] ? __lock_acquire+0x62e/0x1ce0 [ 592.771317][T14603] ? __lock_acquire+0x62e/0x1ce0 [ 592.771345][T14603] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 592.771385][T14603] ? find_held_lock+0x2b/0x80 [ 592.771403][T14603] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 592.771430][T14603] ? policy_nodemask+0xea/0x4e0 [ 592.771456][T14603] alloc_pages_mpol+0x1fb/0x550 [ 592.771480][T14603] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 592.771510][T14603] folio_alloc_mpol_noprof+0x36/0x2f0 [ 592.771539][T14603] shmem_alloc_folio+0x135/0x160 [ 592.771569][T14603] shmem_alloc_and_add_folio+0x499/0xc20 [ 592.771595][T14603] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 592.771617][T14603] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 592.771642][T14603] shmem_get_folio_gfp+0x67f/0x1600 [ 592.771668][T14603] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 592.771692][T14603] ? filemap_map_pages+0xf58/0x1670 [ 592.771716][T14603] shmem_fault+0x1fe/0xa30 [ 592.771738][T14603] ? __pfx_shmem_fault+0x10/0x10 [ 592.771760][T14603] ? rcu_is_watching+0x12/0xc0 [ 592.771779][T14603] ? __pfx_filemap_map_pages+0x10/0x10 [ 592.771806][T14603] ? __pfx_filemap_map_pages+0x10/0x10 [ 592.771827][T14603] __do_fault+0x10d/0x490 [ 592.771850][T14603] ? __pfx_filemap_map_pages+0x10/0x10 [ 592.771870][T14603] do_pte_missing+0xf50/0x3ba0 [ 592.771889][T14603] ? do_raw_spin_unlock+0x172/0x230 [ 592.771917][T14603] ? __pmd_alloc+0x3fb/0x930 [ 592.771946][T14603] __handle_mm_fault+0x152a/0x2a50 [ 592.771967][T14603] ? mt_find+0x3ef/0xa30 [ 592.771992][T14603] ? __pfx___handle_mm_fault+0x10/0x10 [ 592.772009][T14603] ? __pfx_mt_find+0x10/0x10 [ 592.772045][T14603] ? find_vma+0xbf/0x140 [ 592.772068][T14603] ? __pfx_find_vma+0x10/0x10 [ 592.772094][T14603] handle_mm_fault+0x589/0xd10 [ 592.772113][T14603] ? __bpf_trace_exceptions+0x1/0x40 [ 592.772143][T14603] do_user_addr_fault+0x7a6/0x1370 [ 592.772173][T14603] ? rcu_is_watching+0x12/0xc0 [ 592.772194][T14603] exc_page_fault+0x5c/0xb0 [ 592.772216][T14603] asm_exc_page_fault+0x26/0x30 [ 592.772234][T14603] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 592.772253][T14603] Code: c4 10 e9 14 1f 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 592.772271][T14603] RSP: 0018:ffffc9000eccfd70 EFLAGS: 00050202 [ 592.772286][T14603] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 592.772297][T14603] RDX: fffff52001d99fbc RSI: 0000000000000000 RDI: ffffc9000eccfde0 [ 592.772308][T14603] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52001d99fbc [ 592.772318][T14603] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 592.772328][T14603] R13: ffffc9000eccfde0 R14: 0000000000000000 R15: 0000000000000000 [ 592.772350][T14603] _copy_from_user+0x98/0xd0 [ 592.772387][T14603] do_sock_getsockopt+0x3ca/0x440 [ 592.772417][T14603] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 592.772445][T14603] ? __fget_files+0x204/0x3c0 [ 592.772475][T14603] __sys_getsockopt+0x123/0x1b0 [ 592.772504][T14603] __x64_sys_getsockopt+0xbd/0x160 [ 592.772526][T14603] ? do_syscall_64+0x91/0x490 [ 592.772550][T14603] ? lockdep_hardirqs_on+0x7c/0x110 [ 592.772572][T14603] do_syscall_64+0xcd/0x490 [ 592.772597][T14603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.772615][T14603] RIP: 0033:0x7fb59d58ebe9 [ 592.772630][T14603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.772647][T14603] RSP: 002b:00007fb59e33a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 592.772663][T14603] RAX: ffffffffffffffda RBX: 00007fb59d7b6180 RCX: 00007fb59d58ebe9 [ 592.772674][T14603] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000004 [ 592.772685][T14603] RBP: 00007fb59d611e19 R08: 0000000000000000 R09: 0000000000000000 [ 592.772696][T14603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.772706][T14603] R13: 00007fb59d7b6218 R14: 00007fb59d7b6180 R15: 00007ffd1ef34348 [ 592.772728][T14603] [ 594.186686][T14606] FAULT_INJECTION: forcing a failure. [ 594.186686][T14606] name fail_futex, interval 1, probability 0, space 0, times 0 [ 594.285900][T14606] CPU: 1 UID: 0 PID: 14606 Comm: syz.1.1611 Tainted: G U syzkaller #0 PREEMPT(full) [ 594.285930][T14606] Tainted: [U]=USER [ 594.285937][T14606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 594.285947][T14606] Call Trace: [ 594.285953][T14606] [ 594.285960][T14606] dump_stack_lvl+0x16c/0x1f0 [ 594.285989][T14606] should_fail_ex+0x512/0x640 [ 594.286018][T14606] get_futex_key+0xff0/0x1560 [ 594.286042][T14606] ? __pfx_get_futex_key+0x10/0x10 [ 594.286063][T14606] ? __mutex_trylock_common+0xe9/0x250 [ 594.286092][T14606] futex_wake+0xea/0x530 [ 594.286120][T14606] ? __pfx_futex_wake+0x10/0x10 [ 594.286159][T14606] do_futex+0x1e3/0x350 [ 594.286187][T14606] ? __pfx_do_futex+0x10/0x10 [ 594.286207][T14606] ? __might_fault+0xe3/0x190 [ 594.286233][T14606] mm_release+0x24e/0x300 [ 594.286259][T14606] do_exit+0x68e/0x2bf0 [ 594.286287][T14606] ? __pfx_do_exit+0x10/0x10 [ 594.286311][T14606] ? do_raw_spin_lock+0x12c/0x2b0 [ 594.286348][T14606] ? find_held_lock+0x2b/0x80 [ 594.286368][T14606] do_group_exit+0xd3/0x2a0 [ 594.286394][T14606] get_signal+0x2673/0x26d0 [ 594.286422][T14606] ? __pfx_get_signal+0x10/0x10 [ 594.286441][T14606] ? do_futex+0x122/0x350 [ 594.286463][T14606] ? __pfx_do_futex+0x10/0x10 [ 594.286487][T14606] arch_do_signal_or_restart+0x8f/0x790 [ 594.286511][T14606] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 594.286540][T14606] ? xfd_validate_state+0x61/0x180 [ 594.286564][T14606] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 594.286589][T14606] exit_to_user_mode_loop+0x84/0x110 [ 594.286616][T14606] do_syscall_64+0x3f6/0x490 [ 594.286641][T14606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.286659][T14606] RIP: 0033:0x7fabcb98ebe9 [ 594.286675][T14606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.286692][T14606] RSP: 002b:00007fabcc7ea0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 594.286710][T14606] RAX: fffffffffffffe00 RBX: 00007fabcbbb5fa8 RCX: 00007fabcb98ebe9 [ 594.286721][T14606] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fabcbbb5fa8 [ 594.286732][T14606] RBP: 00007fabcbbb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 594.286743][T14606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 594.286753][T14606] R13: 00007fabcbbb6038 R14: 00007ffc32364830 R15: 00007ffc32364918 [ 594.286774][T14606] [ 594.996682][T14607] kexec: Could not allocate control_code_buffer [ 595.187791][T14617] netlink: 'syz.4.1612': attribute type 4 has an invalid length. [ 596.153314][T14629] ptrace attach of ""[14630] was attempted by "./syz-executor exec"[14629] [ 596.901136][T14646] random: crng reseeded on system resumption [ 597.550828][T14638] FAULT_INJECTION: forcing a failure. [ 597.550828][T14638] name failslab, interval 1, probability 0, space 0, times 0 [ 597.612119][T14638] CPU: 1 UID: 0 PID: 14638 Comm: syz.4.1618 Tainted: G U syzkaller #0 PREEMPT(full) [ 597.612152][T14638] Tainted: [U]=USER [ 597.612158][T14638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 597.612168][T14638] Call Trace: [ 597.612175][T14638] [ 597.612182][T14638] dump_stack_lvl+0x16c/0x1f0 [ 597.612211][T14638] should_fail_ex+0x512/0x640 [ 597.612237][T14638] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 597.612261][T14638] should_failslab+0xc2/0x120 [ 597.612285][T14638] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 597.612307][T14638] ? ptlock_alloc+0x1f/0x70 [ 597.612333][T14638] ptlock_alloc+0x1f/0x70 [ 597.612364][T14638] pte_alloc_one+0x82/0x3a0 [ 597.612385][T14638] copy_huge_pmd+0x18d/0x2f90 [ 597.612421][T14638] ? __pfx_copy_huge_pmd+0x10/0x10 [ 597.612449][T14638] ? __pfx___might_resched+0x10/0x10 [ 597.612468][T14638] ? copy_page_range+0x1fa8/0x5c80 [ 597.612489][T14638] copy_page_range+0x20d6/0x5c80 [ 597.612534][T14638] ? mas_destroy+0x5de/0xa20 [ 597.612560][T14638] ? __pfx_copy_page_range+0x10/0x10 [ 597.612585][T14638] ? mas_store+0x7a9/0x1160 [ 597.612614][T14638] ? find_held_lock+0x2b/0x80 [ 597.612638][T14638] ? __vma_enter_locked+0x163/0x3f0 [ 597.612671][T14638] dup_mmap+0xe88/0x21d0 [ 597.612707][T14638] ? __pfx_dup_mmap+0x10/0x10 [ 597.612750][T14638] copy_process+0x4081/0x7690 [ 597.612773][T14638] ? __pfx___futex_wait+0x10/0x10 [ 597.612809][T14638] ? __pfx_copy_process+0x10/0x10 [ 597.612831][T14638] ? futex_private_hash_put+0x176/0x300 [ 597.612856][T14638] ? futex_private_hash_put+0x18a/0x300 [ 597.612881][T14638] kernel_clone+0xfc/0x930 [ 597.612906][T14638] ? __pfx_kernel_clone+0x10/0x10 [ 597.612942][T14638] __do_sys_clone+0xce/0x120 [ 597.612965][T14638] ? __pfx___do_sys_clone+0x10/0x10 [ 597.612987][T14638] ? find_held_lock+0x2b/0x80 [ 597.613013][T14638] ? xfd_validate_state+0x61/0x180 [ 597.613048][T14638] do_syscall_64+0xcd/0x490 [ 597.613074][T14638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.613092][T14638] RIP: 0033:0x7f7cda18ebe9 [ 597.613108][T14638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.613125][T14638] RSP: 002b:00007f7cdaf81fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 597.613143][T14638] RAX: ffffffffffffffda RBX: 00007f7cda3b5fa0 RCX: 00007f7cda18ebe9 [ 597.613155][T14638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 597.613165][T14638] RBP: 00007f7cda211e19 R08: 0000000000000000 R09: 0000000000000000 [ 597.613176][T14638] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 597.613186][T14638] R13: 00007f7cda3b6038 R14: 00007f7cda3b5fa0 R15: 00007ffe62375d48 [ 597.613209][T14638] [ 598.091702][T14662] FAULT_INJECTION: forcing a failure. [ 598.091702][T14662] name failslab, interval 1, probability 0, space 0, times 0 [ 598.104606][T14662] CPU: 1 UID: 0 PID: 14662 Comm: syz.1.1622 Tainted: G U syzkaller #0 PREEMPT(full) [ 598.104637][T14662] Tainted: [U]=USER [ 598.104643][T14662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 598.104654][T14662] Call Trace: [ 598.104661][T14662] [ 598.104668][T14662] dump_stack_lvl+0x16c/0x1f0 [ 598.104697][T14662] should_fail_ex+0x512/0x640 [ 598.104723][T14662] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 598.104747][T14662] should_failslab+0xc2/0x120 [ 598.104771][T14662] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 598.104794][T14662] ? sock_alloc_inode+0x25/0x1c0 [ 598.104824][T14662] ? __pfx_sock_alloc_inode+0x10/0x10 [ 598.104850][T14662] sock_alloc_inode+0x25/0x1c0 [ 598.104876][T14662] alloc_inode+0x64/0x240 [ 598.104901][T14662] sock_alloc+0x40/0x280 [ 598.104926][T14662] __sock_create+0xc1/0x8d0 [ 598.104947][T14662] __sys_socket+0x14d/0x260 [ 598.104963][T14662] ? fdget_pos+0x2b8/0x370 [ 598.104983][T14662] ? __pfx___sys_socket+0x10/0x10 [ 598.105001][T14662] ? xfd_validate_state+0x61/0x180 [ 598.105028][T14662] ? __pfx_ksys_write+0x10/0x10 [ 598.105053][T14662] __x64_sys_socket+0x72/0xb0 [ 598.105070][T14662] ? lockdep_hardirqs_on+0x7c/0x110 [ 598.105092][T14662] do_syscall_64+0xcd/0x490 [ 598.105117][T14662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.105135][T14662] RIP: 0033:0x7fabcb98ebe9 [ 598.105150][T14662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.105167][T14662] RSP: 002b:00007fabcc7ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 598.105185][T14662] RAX: ffffffffffffffda RBX: 00007fabcbbb5fa0 RCX: 00007fabcb98ebe9 [ 598.105197][T14662] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000021 [ 598.105207][T14662] RBP: 00007fabcba11e19 R08: 0000000000000000 R09: 0000000000000000 [ 598.105217][T14662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.105227][T14662] R13: 00007fabcbbb6038 R14: 00007fabcbbb5fa0 R15: 00007ffc32364918 [ 598.105249][T14662] [ 598.105257][T14662] net_ratelimit: 659 callbacks suppressed [ 598.105267][T14662] socket: no more sockets [ 599.033828][T14671] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 601.793919][T14704] FAULT_INJECTION: forcing a failure. [ 601.793919][T14704] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 601.832811][T14704] CPU: 1 UID: 0 PID: 14704 Comm: syz.0.1634 Tainted: G U syzkaller #0 PREEMPT(full) [ 601.832843][T14704] Tainted: [U]=USER [ 601.832849][T14704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 601.832859][T14704] Call Trace: [ 601.832865][T14704] [ 601.832873][T14704] dump_stack_lvl+0x16c/0x1f0 [ 601.832903][T14704] should_fail_ex+0x512/0x640 [ 601.832932][T14704] should_fail_alloc_page+0xe7/0x130 [ 601.832958][T14704] prepare_alloc_pages+0x3c2/0x610 [ 601.832988][T14704] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 601.833010][T14704] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 601.833039][T14704] ? __lock_acquire+0x62e/0x1ce0 [ 601.833065][T14704] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 601.833086][T14704] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 601.833121][T14704] ? __lock_acquire+0xb97/0x1ce0 [ 601.833142][T14704] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 601.833170][T14704] ? policy_nodemask+0xea/0x4e0 [ 601.833195][T14704] alloc_pages_mpol+0x1fb/0x550 [ 601.833220][T14704] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 601.833246][T14704] ? do_raw_spin_lock+0x12c/0x2b0 [ 601.833272][T14704] ? find_held_lock+0x2b/0x80 [ 601.833293][T14704] alloc_pages_noprof+0x131/0x390 [ 601.833318][T14704] __pmd_alloc+0x3b/0x930 [ 601.833343][T14704] ? __pud_alloc+0x526/0x750 [ 601.833370][T14704] copy_page_range+0x3eaf/0x5c80 [ 601.833391][T14704] ? copy_process+0x4081/0x7690 [ 601.833434][T14704] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 601.833462][T14704] ? mas_wr_store_entry+0xa14/0x2550 [ 601.833488][T14704] ? mas_destroy+0x5de/0xa20 [ 601.833521][T14704] ? __pfx_copy_page_range+0x10/0x10 [ 601.833543][T14704] ? mas_store+0x7a9/0x1160 [ 601.833570][T14704] ? find_held_lock+0x2b/0x80 [ 601.833588][T14704] ? __pfx_mas_store+0x10/0x10 [ 601.833612][T14704] ? __vma_enter_locked+0x163/0x3f0 [ 601.833643][T14704] dup_mmap+0xe88/0x21d0 [ 601.833679][T14704] ? __pfx_dup_mmap+0x10/0x10 [ 601.833722][T14704] copy_process+0x4081/0x7690 [ 601.833756][T14704] ? __pfx_copy_process+0x10/0x10 [ 601.833778][T14704] ? futex_private_hash_put+0x176/0x300 [ 601.833805][T14704] ? futex_private_hash_put+0x18a/0x300 [ 601.833831][T14704] kernel_clone+0xfc/0x930 [ 601.833853][T14704] ? __pfx_futex_wake+0x10/0x10 [ 601.833879][T14704] ? __pfx_kernel_clone+0x10/0x10 [ 601.833915][T14704] __do_sys_clone+0xce/0x120 [ 601.833938][T14704] ? __pfx___do_sys_clone+0x10/0x10 [ 601.833960][T14704] ? find_held_lock+0x2b/0x80 [ 601.833986][T14704] ? xfd_validate_state+0x61/0x180 [ 601.834021][T14704] do_syscall_64+0xcd/0x490 [ 601.834047][T14704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.834065][T14704] RIP: 0033:0x7fb59d58ebe9 [ 601.834080][T14704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.834098][T14704] RSP: 002b:00007fb59e37bfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 601.834116][T14704] RAX: ffffffffffffffda RBX: 00007fb59d7b5fa0 RCX: 00007fb59d58ebe9 [ 601.834127][T14704] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 601.834137][T14704] RBP: 00007fb59d611e19 R08: 0000000000000000 R09: 0000000000000000 [ 601.834148][T14704] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 601.834158][T14704] R13: 00007fb59d7b6038 R14: 00007fb59d7b5fa0 R15: 00007ffd1ef34348 [ 601.834181][T14704] [ 603.214340][T14727] random: crng reseeded on system resumption [ 606.946415][T14782] FAULT_INJECTION: forcing a failure. [ 606.946415][T14782] name failslab, interval 1, probability 0, space 0, times 0 [ 607.065119][T14782] CPU: 1 UID: 0 PID: 14782 Comm: syz.0.1653 Tainted: G U syzkaller #0 PREEMPT(full) [ 607.065150][T14782] Tainted: [U]=USER [ 607.065156][T14782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 607.065167][T14782] Call Trace: [ 607.065174][T14782] [ 607.065181][T14782] dump_stack_lvl+0x16c/0x1f0 [ 607.065211][T14782] should_fail_ex+0x512/0x640 [ 607.065244][T14782] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 607.065266][T14782] should_failslab+0xc2/0x120 [ 607.065290][T14782] __kmalloc_cache_noprof+0x6a/0x3e0 [ 607.065308][T14782] ? snd_ctl_get_preferred_subdevice+0x184/0x200 [ 607.065331][T14782] ? snd_pcm_attach_substream+0x441/0xd60 [ 607.065358][T14782] snd_pcm_attach_substream+0x441/0xd60 [ 607.065386][T14782] snd_pcm_open_substream+0x8d/0x17f0 [ 607.065409][T14782] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 607.065436][T14782] snd_pcm_oss_open+0x735/0x1400 [ 607.065461][T14782] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 607.065479][T14782] ? __lock_acquire+0xb97/0x1ce0 [ 607.065504][T14782] ? __pfx_default_wake_function+0x10/0x10 [ 607.065524][T14782] ? __lock_acquire+0xb97/0x1ce0 [ 607.065552][T14782] ? do_raw_spin_lock+0x12c/0x2b0 [ 607.065581][T14782] ? soundcore_open+0x35a/0x580 [ 607.065606][T14782] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 607.065624][T14782] soundcore_open+0x40c/0x580 [ 607.065650][T14782] ? __pfx_soundcore_open+0x10/0x10 [ 607.065675][T14782] chrdev_open+0x234/0x6a0 [ 607.065697][T14782] ? __pfx_apparmor_file_open+0x10/0x10 [ 607.065717][T14782] ? __pfx_chrdev_open+0x10/0x10 [ 607.065741][T14782] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 607.065766][T14782] do_dentry_open+0x982/0x1530 [ 607.065787][T14782] ? __pfx_chrdev_open+0x10/0x10 [ 607.065814][T14782] vfs_open+0x82/0x3f0 [ 607.065843][T14782] path_openat+0x1de4/0x2cb0 [ 607.065871][T14782] ? __pfx_path_openat+0x10/0x10 [ 607.065898][T14782] do_filp_open+0x20b/0x470 [ 607.065919][T14782] ? __pfx_do_filp_open+0x10/0x10 [ 607.065955][T14782] ? alloc_fd+0x471/0x7d0 [ 607.065980][T14782] do_sys_openat2+0x11b/0x1d0 [ 607.066007][T14782] ? __pfx_do_sys_openat2+0x10/0x10 [ 607.066043][T14782] __x64_sys_openat+0x174/0x210 [ 607.066071][T14782] ? __pfx___x64_sys_openat+0x10/0x10 [ 607.066107][T14782] do_syscall_64+0xcd/0x490 [ 607.066133][T14782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.066152][T14782] RIP: 0033:0x7fb59d58ebe9 [ 607.066167][T14782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.066185][T14782] RSP: 002b:00007fb59e35b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 607.066203][T14782] RAX: ffffffffffffffda RBX: 00007fb59d7b6090 RCX: 00007fb59d58ebe9 [ 607.066214][T14782] RDX: 0000000000000300 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 607.066226][T14782] RBP: 00007fb59d611e19 R08: 0000000000000000 R09: 0000000000000000 [ 607.066243][T14782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 607.066254][T14782] R13: 00007fb59d7b6128 R14: 00007fb59d7b6090 R15: 00007ffd1ef34348 [ 607.066277][T14782] [ 607.068323][T13631] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 607.324606][ C1] vkms_vblank_simulate: vblank timer overrun [ 607.418707][T13631] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 607.428219][T13631] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 607.438358][T13631] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 607.447178][T13631] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 608.189262][T13631] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 608.237660][T14784] chnl_net:caif_netlink_parms(): no params data found [ 608.619678][T14784] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.635262][T14784] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.653421][T14784] bridge_slave_0: entered allmulticast mode [ 608.676590][T14784] bridge_slave_0: entered promiscuous mode [ 608.705585][T14784] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.738842][T14784] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.746160][T14784] bridge_slave_1: entered allmulticast mode [ 608.802664][T14784] bridge_slave_1: entered promiscuous mode [ 609.222253][T14784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.268181][T14784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.447633][T14784] team0: Port device team_slave_0 added [ 609.461417][T14784] team0: Port device team_slave_1 added [ 609.483096][T13631] Bluetooth: hci6: command tx timeout [ 609.744337][T14784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.771186][T14784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.870145][T14784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.946530][T14784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.968645][T14784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.063024][T14784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.282775][T14784] hsr_slave_0: entered promiscuous mode [ 610.306763][T14784] hsr_slave_1: entered promiscuous mode [ 610.333193][T14784] debugfs: 'hsr0' already exists in 'hsr' [ 610.360536][T14784] Cannot create hsr debugfs directory [ 610.377930][T14820] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input49 [ 610.863347][T14821] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input50 [ 611.152062][T14784] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 611.211264][T14784] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 611.260107][T14784] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 611.304623][T14784] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 611.554139][T14784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.561970][T13631] Bluetooth: hci6: command tx timeout [ 611.617095][T14784] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.656091][T12765] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.663283][T12765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.703735][T12765] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.710910][T12765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.032520][T14844] ACPI: Can not change Invalid GPE/Fixed Event status [ 612.113873][T14784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.500870][T14784] veth0_vlan: entered promiscuous mode [ 612.515655][T14784] veth1_vlan: entered promiscuous mode [ 612.556506][T14784] veth0_macvtap: entered promiscuous mode [ 612.567936][T14784] veth1_macvtap: entered promiscuous mode [ 612.595826][T14784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.623528][T14784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.644596][T12765] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.676866][T12765] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.712464][T12765] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.751572][T12765] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.842030][T11314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.892150][T11314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.956765][T11318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.965702][T11318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.214876][T14854] zswap: compressor not available [ 613.643276][T13631] Bluetooth: hci6: command tx timeout [ 614.137930][T14874] FAULT_INJECTION: forcing a failure. [ 614.137930][T14874] name failslab, interval 1, probability 0, space 0, times 0 [ 614.173366][T14874] CPU: 1 UID: 0 PID: 14874 Comm: syz.4.1666 Tainted: G U syzkaller #0 PREEMPT(full) [ 614.173403][T14874] Tainted: [U]=USER [ 614.173409][T14874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 614.173420][T14874] Call Trace: [ 614.173427][T14874] [ 614.173434][T14874] dump_stack_lvl+0x16c/0x1f0 [ 614.173464][T14874] should_fail_ex+0x512/0x640 [ 614.173490][T14874] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 614.173517][T14874] should_failslab+0xc2/0x120 [ 614.173541][T14874] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 614.173565][T14874] ? kstrdup_const+0x63/0x80 [ 614.173591][T14874] kstrdup+0x53/0x100 [ 614.173614][T14874] kstrdup_const+0x63/0x80 [ 614.173635][T14874] __kernfs_new_node+0x9b/0x8e0 [ 614.173662][T14874] ? __pfx___kernfs_new_node+0x10/0x10 [ 614.173691][T14874] ? find_held_lock+0x2b/0x80 [ 614.173710][T14874] ? kernfs_root+0xee/0x2a0 [ 614.173737][T14874] kernfs_new_node+0x13c/0x1e0 [ 614.173767][T14874] kernfs_create_link+0xcc/0x240 [ 614.173787][T14874] sysfs_do_create_link_sd+0x90/0x140 [ 614.173811][T14874] sysfs_create_link+0x61/0xc0 [ 614.173833][T14874] device_add+0x62c/0x1aa0 [ 614.173854][T14874] ? __pfx_device_add+0x10/0x10 [ 614.173870][T14874] ? lockdep_init_map_type+0x5c/0x280 [ 614.173895][T14874] ? __init_waitqueue_head+0xca/0x150 [ 614.173929][T14874] netdev_register_kobject+0x1a9/0x3d0 [ 614.173961][T14874] register_netdevice+0x13dc/0x2270 [ 614.173992][T14874] ? __pfx_register_netdevice+0x10/0x10 [ 614.174026][T14874] br_add_bridge+0x9a/0xf0 [ 614.174050][T14874] br_ioctl_stub+0x482/0x4c0 [ 614.174077][T14874] ? __pfx_br_ioctl_stub+0x10/0x10 [ 614.174102][T14874] ? __pfx___mutex_lock+0x10/0x10 [ 614.174139][T14874] ? __pfx_br_ioctl_stub+0x10/0x10 [ 614.174171][T14874] br_ioctl_call+0x53/0xa0 [ 614.174191][T14874] sock_ioctl+0x365/0x6b0 [ 614.174209][T14874] ? __pfx_sock_ioctl+0x10/0x10 [ 614.174225][T14874] ? hook_file_ioctl_common+0x145/0x410 [ 614.174254][T14874] ? __fget_files+0x20e/0x3c0 [ 614.174278][T14874] ? __pfx_sock_ioctl+0x10/0x10 [ 614.174298][T14874] __x64_sys_ioctl+0x18e/0x210 [ 614.174329][T14874] do_syscall_64+0xcd/0x490 [ 614.174355][T14874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.174373][T14874] RIP: 0033:0x7f7cda18ebe9 [ 614.174388][T14874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.174406][T14874] RSP: 002b:00007f7cdaf82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 614.174423][T14874] RAX: ffffffffffffffda RBX: 00007f7cda3b5fa0 RCX: 00007f7cda18ebe9 [ 614.174435][T14874] RDX: 0000000000000004 RSI: 00000000000089a0 RDI: 0000000000000005 [ 614.174446][T14874] RBP: 00007f7cda211e19 R08: 0000000000000000 R09: 0000000000000000 [ 614.174456][T14874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 614.174467][T14874] R13: 00007f7cda3b6038 R14: 00007f7cda3b5fa0 R15: 00007ffe62375d48 [ 614.174490][T14874] [ 614.974050][ T5184] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 614.984174][ T5184] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 614.992181][ T5184] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 615.008669][ T5184] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 615.017090][ T5184] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 615.662402][T14881] chnl_net:caif_netlink_parms(): no params data found [ 615.726726][ T5184] Bluetooth: hci6: command tx timeout [ 615.796663][T14895] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 615.796663][T14895] M' is too long [ 615.916508][T14895] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 615.916508][T14895] W ' is too long [ 616.042013][T14881] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.073914][T14881] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.104815][T14881] bridge_slave_0: entered allmulticast mode [ 616.136767][T14881] bridge_slave_0: entered promiscuous mode [ 616.221420][T14881] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.235424][T14881] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.260631][T14881] bridge_slave_1: entered allmulticast mode [ 616.278339][T14881] bridge_slave_1: entered promiscuous mode [ 616.408288][T14881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.467087][T14881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.729537][T14881] team0: Port device team_slave_0 added [ 616.915888][T14881] team0: Port device team_slave_1 added [ 616.960986][T14922] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 617.078933][ T5184] Bluetooth: hci7: command tx timeout [ 617.088793][T14923] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input51 [ 617.327061][T14881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.369234][T14881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.532205][T14881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.617960][T14881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.669448][T14881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.836568][T14881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.137052][T14881] hsr_slave_0: entered promiscuous mode [ 618.180659][T14881] hsr_slave_1: entered promiscuous mode [ 618.222661][T14881] debugfs: 'hsr0' already exists in 'hsr' [ 618.251496][T14881] Cannot create hsr debugfs directory [ 619.160020][ T5184] Bluetooth: hci7: command tx timeout [ 619.234073][T14881] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 619.277793][T14881] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 619.360055][T14881] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 619.416215][T14881] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 619.575600][T14964] syz.6.1678 (14964): /proc/14951/oom_adj is deprecated, please use /proc/14951/oom_score_adj instead. [ 619.923517][T14881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.997624][T14881] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.056131][T12082] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.063387][T12082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.114969][T12082] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.122144][T12082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.320187][T14881] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 620.361485][T14881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 621.225700][T14881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.244658][ T5184] Bluetooth: hci7: command tx timeout [ 622.137852][T14881] veth0_vlan: entered promiscuous mode [ 622.201622][T14881] veth1_vlan: entered promiscuous mode [ 622.316018][T14881] veth0_macvtap: entered promiscuous mode [ 622.354604][T14881] veth1_macvtap: entered promiscuous mode [ 622.425110][T14881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.490805][T14881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.532339][T12086] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.573968][T12086] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.611705][T12086] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.677957][T12086] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.932540][T11318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.979766][T11318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.082259][T11318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.142001][T11318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.320087][ T5184] Bluetooth: hci7: command tx timeout [ 627.632584][T13631] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 627.650858][T13631] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 627.661825][T13631] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 627.670618][T13631] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 627.678077][T13631] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 628.147343][T15057] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 628.895150][T15052] chnl_net:caif_netlink_parms(): no params data found [ 629.691308][T15052] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.730050][T13631] Bluetooth: hci8: command tx timeout [ 629.742152][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.750883][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.767944][T15052] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.799277][T15052] bridge_slave_0: entered allmulticast mode [ 629.843189][T15052] bridge_slave_0: entered promiscuous mode [ 629.886914][T15052] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.929722][T15052] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.963059][T15086] __vm_enough_memory: pid: 15086, comm: syz.4.1699, bytes: 4398046511104 not enough memory for the allocation [ 629.983159][T15052] bridge_slave_1: entered allmulticast mode [ 630.014002][T15052] bridge_slave_1: entered promiscuous mode [ 630.255134][T15052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 630.321736][T15052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 630.580786][T15052] team0: Port device team_slave_0 added [ 630.627013][T15052] team0: Port device team_slave_1 added [ 630.823954][T15052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.854885][T15052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.984991][T15052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.037678][T15052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.068043][T15052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.177571][T15052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.424164][T15052] hsr_slave_0: entered promiscuous mode [ 631.469356][T15052] hsr_slave_1: entered promiscuous mode [ 631.475464][T15052] debugfs: 'hsr0' already exists in 'hsr' [ 631.538723][T15052] Cannot create hsr debugfs directory [ 631.798552][ T5184] Bluetooth: hci8: command tx timeout [ 633.343725][T15052] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 633.426731][T15052] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 633.469549][T15052] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 633.526436][T15052] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 633.840138][T15052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.879573][ T5184] Bluetooth: hci8: command tx timeout [ 633.932451][T15052] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.967576][T12767] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.974787][T12767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.244679][T12767] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.251862][T12767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.445708][T15052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 635.104084][T15052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.153726][T15128] random: crng reseeded on system resumption [ 635.964830][ T5184] Bluetooth: hci8: command tx timeout [ 635.990896][T15052] veth0_vlan: entered promiscuous mode [ 636.032090][T15052] veth1_vlan: entered promiscuous mode [ 636.141923][T15052] veth0_macvtap: entered promiscuous mode [ 636.176564][T15052] veth1_macvtap: entered promiscuous mode [ 636.264387][T15052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 636.316121][T15052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.406574][T12086] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.442604][T12086] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.554782][T12086] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.598313][T12086] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.817320][T11315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.868505][T11315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.964244][T12082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.991554][T12082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.121449][T15160] random: crng reseeded on system resumption [ 639.863993][T15182] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 640.876389][T15195] random: crng reseeded on system resumption [ 641.055927][T15193] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input52 [ 642.158927][T15209] ptrace attach of "./syz-executor exec"[14881] was attempted by "./syz-executor exec"[15209] [ 642.206971][T15208] vhci_hcd: invalid port number 16 [ 642.239226][T15208] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 642.801364][T15218] random: crng reseeded on system resumption [ 647.605025][T13631] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 647.615142][T13631] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 647.624640][T13631] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 647.637147][T13631] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 647.659168][T13631] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 648.683656][T15313] chnl_net:caif_netlink_parms(): no params data found [ 649.014898][T15313] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.043200][T15313] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.089789][T15313] bridge_slave_0: entered allmulticast mode [ 649.129932][T15313] bridge_slave_0: entered promiscuous mode [ 649.178042][T15313] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.232740][T15313] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.256993][T15313] bridge_slave_1: entered allmulticast mode [ 649.294991][T15313] bridge_slave_1: entered promiscuous mode [ 649.633500][T15313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.702401][T15313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.719338][T15316] Bluetooth: hci9: command tx timeout [ 649.866909][T15313] team0: Port device team_slave_0 added [ 649.901038][T15313] team0: Port device team_slave_1 added [ 650.022951][T15313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.062498][T15313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 650.150451][T15343] FAULT_INJECTION: forcing a failure. [ 650.150451][T15343] name failslab, interval 1, probability 0, space 0, times 0 [ 650.175730][T15313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.243773][T15343] CPU: 1 UID: 0 PID: 15343 Comm: syz.8.1748 Tainted: G U syzkaller #0 PREEMPT(full) [ 650.243805][T15343] Tainted: [U]=USER [ 650.243811][T15343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 650.243823][T15343] Call Trace: [ 650.243829][T15343] [ 650.243837][T15343] dump_stack_lvl+0x16c/0x1f0 [ 650.243866][T15343] should_fail_ex+0x512/0x640 [ 650.243892][T15343] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 650.243921][T15343] should_failslab+0xc2/0x120 [ 650.243945][T15343] __kmalloc_cache_noprof+0x6a/0x3e0 [ 650.243965][T15343] ? open_substream+0xec/0x990 [ 650.243985][T15343] ? _raw_spin_unlock_irq+0x23/0x50 [ 650.244009][T15343] open_substream+0xec/0x990 [ 650.244032][T15343] rawmidi_open_priv+0x543/0x6e0 [ 650.244056][T15343] snd_rawmidi_open+0x4cc/0xbf0 [ 650.244080][T15343] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 650.244102][T15343] ? __pfx_default_wake_function+0x10/0x10 [ 650.244124][T15343] ? kobject_get_unless_zero+0x156/0x1e0 [ 650.244151][T15343] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 650.244172][T15343] snd_open+0x22d/0x4c0 [ 650.244199][T15343] ? __pfx_snd_open+0x10/0x10 [ 650.244224][T15343] chrdev_open+0x234/0x6a0 [ 650.244246][T15343] ? __pfx_apparmor_file_open+0x10/0x10 [ 650.244267][T15343] ? __pfx_chrdev_open+0x10/0x10 [ 650.244290][T15343] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 650.244315][T15343] do_dentry_open+0x982/0x1530 [ 650.244338][T15343] ? __pfx_chrdev_open+0x10/0x10 [ 650.244365][T15343] vfs_open+0x82/0x3f0 [ 650.244394][T15343] path_openat+0x1de4/0x2cb0 [ 650.244423][T15343] ? __pfx_path_openat+0x10/0x10 [ 650.244449][T15343] do_filp_open+0x20b/0x470 [ 650.244470][T15343] ? __pfx_do_filp_open+0x10/0x10 [ 650.244507][T15343] ? alloc_fd+0x471/0x7d0 [ 650.244532][T15343] do_sys_openat2+0x11b/0x1d0 [ 650.244559][T15343] ? __pfx_do_sys_openat2+0x10/0x10 [ 650.244594][T15343] __x64_sys_openat+0x174/0x210 [ 650.244622][T15343] ? __pfx___x64_sys_openat+0x10/0x10 [ 650.244659][T15343] do_syscall_64+0xcd/0x490 [ 650.244685][T15343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.244703][T15343] RIP: 0033:0x7f663538ebe9 [ 650.244719][T15343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.244736][T15343] RSP: 002b:00007f66362a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 650.244754][T15343] RAX: ffffffffffffffda RBX: 00007f66355b6090 RCX: 00007f663538ebe9 [ 650.244766][T15343] RDX: 0000000000080102 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 650.244777][T15343] RBP: 00007f6635411e19 R08: 0000000000000000 R09: 0000000000000000 [ 650.244788][T15343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 650.244803][T15343] R13: 00007f66355b6128 R14: 00007f66355b6090 R15: 00007ffc9c4b0708 [ 650.244825][T15343] [ 651.015684][T15313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.082853][T15313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 651.217442][T15313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.466183][T15313] hsr_slave_0: entered promiscuous mode [ 651.503035][T15313] hsr_slave_1: entered promiscuous mode [ 651.531632][T15313] debugfs: 'hsr0' already exists in 'hsr' [ 651.578014][T15313] Cannot create hsr debugfs directory [ 651.799473][T15316] Bluetooth: hci9: command tx timeout [ 652.545032][T15313] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 652.635295][T15313] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 652.737727][T15313] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 652.847072][T15313] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 652.874239][T15375] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x79802 [ 652.901208][T15375] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 652.979158][T15375] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 653.035955][T15375] raw: ffff888000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 653.080850][T15375] page dumped because: unmovable page [ 653.126655][T15375] page_owner tracks the page as allocated [ 653.162001][T15375] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 9711, tgid 9705 (syz.1.643), ts 318445366060, free_ts 314859445908 [ 653.245583][T15375] post_alloc_hook+0x1c0/0x230 [ 653.283687][T15375] get_page_from_freelist+0x132b/0x38e0 [ 653.331225][T15375] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 653.366523][T15375] alloc_pages_mpol+0x1fb/0x550 [ 653.396997][T15375] alloc_pages_noprof+0x131/0x390 [ 653.480850][T15375] __vmalloc_node_range_noprof+0x72f/0x14b0 [ 653.487058][T15375] __vmalloc_node_noprof+0xad/0xf0 [ 653.515573][T15313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.583050][T15375] pcpu_mem_zalloc+0x54/0xb0 [ 653.615319][T15313] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.644048][T15375] pcpu_create_chunk+0x432/0x730 [ 653.680311][T12765] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.687468][T12765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.699888][T15375] pcpu_alloc_noprof+0x11e3/0x1470 [ 653.705033][T15375] bpf_map_alloc_percpu+0x9a/0x4b0 [ 653.762307][T12765] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.769512][T12765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.855032][T15375] htab_map_alloc+0x10ca/0x1570 [ 653.880088][T15316] Bluetooth: hci9: command tx timeout [ 653.904150][T15375] map_create+0x58f/0x1f80 [ 653.972549][T15375] __sys_bpf+0x44d2/0x4de0 [ 653.977095][T15375] __x64_sys_bpf+0x78/0xc0 [ 654.009507][T15375] do_syscall_64+0xcd/0x490 [ 654.025522][T15375] page last free pid 23 tgid 23 stack trace: [ 654.059005][T15375] __free_frozen_pages+0x7d5/0x10f0 [ 654.064278][T15375] tlb_remove_table_rcu+0x116/0x1a0 [ 654.105379][T15375] rcu_core+0x799/0x1530 [ 654.133268][T15375] handle_softirqs+0x219/0x8e0 [ 654.152866][T15375] run_ksoftirqd+0x3a/0x60 [ 654.172132][T15375] smpboot_thread_fn+0x3f4/0xae0 [ 654.177129][T15375] kthread+0x3c5/0x780 [ 654.218599][T15375] ret_from_fork+0x5d4/0x6f0 [ 654.243837][T15375] ret_from_fork_asm+0x1a/0x30 [ 654.756223][T15313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.959546][T15316] Bluetooth: hci9: command tx timeout [ 656.440979][T15313] veth0_vlan: entered promiscuous mode [ 656.533417][T15313] veth1_vlan: entered promiscuous mode [ 656.835864][T15458] __vm_enough_memory: pid: 15458, comm: syz.6.1769, bytes: 4398046511104 not enough memory for the allocation [ 656.931949][T15313] veth0_macvtap: entered promiscuous mode [ 657.028265][T15313] veth1_macvtap: entered promiscuous mode [ 657.117509][T15313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.222647][T15313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.301015][T11314] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.358561][T11314] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.382984][T15461] netlink: zone id is out of range [ 657.427846][T15461] netlink: zone id is out of range [ 657.476086][T15461] netlink: zone id is out of range [ 657.486174][T11314] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.516457][T15461] netlink: zone id is out of range [ 657.530609][T11314] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.541851][T15461] netlink: zone id is out of range [ 657.564451][T15461] netlink: zone id is out of range [ 657.608226][T15461] netlink: zone id is out of range [ 657.663894][T15461] netlink: zone id is out of range [ 657.817244][T12082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.879978][T12082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.889620][T15461] netlink: set zone limit has 8 unknown bytes [ 657.963274][T11314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.998073][T11314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.394184][ T5184] Bluetooth: hci7: unexpected event 0x35 length: 13 > 6 [ 659.588164][T15497] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1778'. [ 660.746265][T15525] FAULT_INJECTION: forcing a failure. [ 660.746265][T15525] name fail_futex, interval 1, probability 0, space 0, times 0 [ 660.864216][T15525] CPU: 1 UID: 0 PID: 15525 Comm: syz.8.1783 Tainted: G U syzkaller #0 PREEMPT(full) [ 660.864246][T15525] Tainted: [U]=USER [ 660.864257][T15525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 660.864267][T15525] Call Trace: [ 660.864273][T15525] [ 660.864280][T15525] dump_stack_lvl+0x16c/0x1f0 [ 660.864308][T15525] should_fail_ex+0x512/0x640 [ 660.864336][T15525] get_futex_key+0x1d0/0x1560 [ 660.864359][T15525] ? find_held_lock+0x2b/0x80 [ 660.864377][T15525] ? __pfx_get_futex_key+0x10/0x10 [ 660.864401][T15525] ? tomoyo_path_number_perm+0x18d/0x580 [ 660.864427][T15525] futex_wake+0xea/0x530 [ 660.864451][T15525] ? kvm_arch_dev_ioctl+0x111/0x760 [ 660.864472][T15525] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 660.864493][T15525] ? __pfx_futex_wake+0x10/0x10 [ 660.864524][T15525] ? do_vfs_ioctl+0x128/0x14f0 [ 660.864554][T15525] do_futex+0x1e3/0x350 [ 660.864577][T15525] ? __pfx_do_futex+0x10/0x10 [ 660.864601][T15525] ? find_held_lock+0x2b/0x80 [ 660.864621][T15525] __x64_sys_futex+0x1e0/0x4c0 [ 660.864645][T15525] ? __fget_files+0x20e/0x3c0 [ 660.864664][T15525] ? __pfx___x64_sys_futex+0x10/0x10 [ 660.864689][T15525] ? fput+0x9b/0xd0 [ 660.864716][T15525] do_syscall_64+0xcd/0x490 [ 660.864749][T15525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.864767][T15525] RIP: 0033:0x7f663538ebe9 [ 660.864782][T15525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.864799][T15525] RSP: 002b:00007f66362820e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 660.864816][T15525] RAX: ffffffffffffffda RBX: 00007f66355b6188 RCX: 00007f663538ebe9 [ 660.864828][T15525] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f66355b618c [ 660.864838][T15525] RBP: 00007f66355b6180 R08: 00007f66362c5000 R09: 0000000000000000 [ 660.864849][T15525] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 660.864859][T15525] R13: 00007f66355b6218 R14: 00007ffc9c4b0620 R15: 00007ffc9c4b0708 [ 660.864881][T15525] [ 661.071894][ C1] vkms_vblank_simulate: vblank timer overrun [ 662.797420][T15556] FAULT_INJECTION: forcing a failure. [ 662.797420][T15556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 662.917368][T15556] CPU: 1 UID: 0 PID: 15556 Comm: syz.7.1787 Tainted: G U syzkaller #0 PREEMPT(full) [ 662.917399][T15556] Tainted: [U]=USER [ 662.917405][T15556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 662.917415][T15556] Call Trace: [ 662.917422][T15556] [ 662.917429][T15556] dump_stack_lvl+0x16c/0x1f0 [ 662.917458][T15556] should_fail_ex+0x512/0x640 [ 662.917486][T15556] _copy_to_user+0x32/0xd0 [ 662.917503][T15556] simple_read_from_buffer+0xcb/0x170 [ 662.917524][T15556] proc_fail_nth_read+0x197/0x240 [ 662.917544][T15556] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 662.917565][T15556] ? rw_verify_area+0xcf/0x6c0 [ 662.917583][T15556] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 662.917602][T15556] vfs_read+0x1e4/0xcf0 [ 662.917622][T15556] ? do_fanotify_mark+0x56d/0x3600 [ 662.917652][T15556] ? __pfx_vfs_read+0x10/0x10 [ 662.917677][T15556] ? __pfx_do_fanotify_mark+0x10/0x10 [ 662.917717][T15556] ksys_read+0x12a/0x250 [ 662.917737][T15556] ? __pfx_ksys_read+0x10/0x10 [ 662.917763][T15556] do_syscall_64+0xcd/0x490 [ 662.917788][T15556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.917807][T15556] RIP: 0033:0x7fc85798d5fc [ 662.917828][T15556] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 662.917846][T15556] RSP: 002b:00007fc858861030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 662.917863][T15556] RAX: ffffffffffffffda RBX: 00007fc857bb5fa0 RCX: 00007fc85798d5fc [ 662.917880][T15556] RDX: 000000000000000f RSI: 00007fc8588610a0 RDI: 0000000000000004 [ 662.917891][T15556] RBP: 00007fc858861090 R08: 0000000000000000 R09: 0000000000000000 [ 662.917901][T15556] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 662.917912][T15556] R13: 00007fc857bb6038 R14: 00007fc857bb5fa0 R15: 00007fff2ace5ba8 [ 662.917933][T15556] [ 663.104868][ C1] vkms_vblank_simulate: vblank timer overrun [ 666.062254][T15609] openvswitch: netlink: Key type 6420 is out of range max 32 [ 668.654880][T15629] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 668.837770][T15648] block nbd0: shutting down sockets [ 671.252386][T15690] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 671.725573][ T30] audit: type=1800 audit(4294969673.621:18): pid=15706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1816" name="features" dev="configfs" ino=62015 res=0 errno=0 [ 671.980570][T15701] sp0: Synchronizing with TNC [ 672.835075][T15698] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1812'. [ 673.484613][T15719] FAULT_INJECTION: forcing a failure. [ 673.484613][T15719] name failslab, interval 1, probability 0, space 0, times 0 [ 673.692776][T15719] CPU: 1 UID: 0 PID: 15719 Comm: syz.8.1820 Tainted: G U syzkaller #0 PREEMPT(full) [ 673.692813][T15719] Tainted: [U]=USER [ 673.692819][T15719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 673.692830][T15719] Call Trace: [ 673.692836][T15719] [ 673.692843][T15719] dump_stack_lvl+0x16c/0x1f0 [ 673.692873][T15719] should_fail_ex+0x512/0x640 [ 673.692899][T15719] ? fs_reclaim_acquire+0xae/0x150 [ 673.692929][T15719] should_failslab+0xc2/0x120 [ 673.692952][T15719] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 673.692974][T15719] ? security_inode_alloc+0x3b/0x2b0 [ 673.692999][T15719] security_inode_alloc+0x3b/0x2b0 [ 673.693020][T15719] inode_init_always_gfp+0xce4/0x1030 [ 673.693046][T15719] alloc_inode+0x86/0x240 [ 673.693071][T15719] new_inode+0x22/0x1c0 [ 673.693099][T15719] simple_fill_super+0x306/0x720 [ 673.693122][T15719] ? __pfx_nfsd_fill_super+0x10/0x10 [ 673.693143][T15719] nfsd_fill_super+0x90/0x530 [ 673.693163][T15719] ? __pfx_set_anon_super_fc+0x10/0x10 [ 673.693181][T15719] ? __pfx_nfsd_fill_super+0x10/0x10 [ 673.693201][T15719] get_tree_keyed+0x10e/0x1d0 [ 673.693223][T15719] vfs_get_tree+0x8b/0x340 [ 673.693240][T15719] path_mount+0x1513/0x2000 [ 673.693266][T15719] ? __pfx_path_mount+0x10/0x10 [ 673.693290][T15719] ? kmem_cache_free+0x2d1/0x4d0 [ 673.693309][T15719] ? putname+0x154/0x1a0 [ 673.693336][T15719] ? putname+0x154/0x1a0 [ 673.693362][T15719] ? __x64_sys_mount+0x28d/0x310 [ 673.693383][T15719] __x64_sys_mount+0x28d/0x310 [ 673.693406][T15719] ? __pfx___x64_sys_mount+0x10/0x10 [ 673.693437][T15719] do_syscall_64+0xcd/0x490 [ 673.693463][T15719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.693481][T15719] RIP: 0033:0x7f663538ebe9 [ 673.693496][T15719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.693514][T15719] RSP: 002b:00007f66362a3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 673.693532][T15719] RAX: ffffffffffffffda RBX: 00007f66355b6090 RCX: 00007f663538ebe9 [ 673.693543][T15719] RDX: 0000200000000140 RSI: 00002000000000c0 RDI: 0000000000000000 [ 673.693554][T15719] RBP: 00007f6635411e19 R08: 0000000000000000 R09: 0000000000000000 [ 673.693565][T15719] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 673.693575][T15719] R13: 00007f66355b6128 R14: 00007f66355b6090 R15: 00007ffc9c4b0708 [ 673.693652][T15719] [ 677.746765][T15777] netlink: 338 bytes leftover after parsing attributes in process `syz.7.1832'. [ 677.811956][ T5876] Bluetooth: hci9: unexpected event 0x3d length: 726 > 14 [ 678.401129][T15790] netlink: 330 bytes leftover after parsing attributes in process `syz.9.1835'. [ 679.502872][T15803] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 679.519307][T15803] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 679.551179][T15803] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 679.651239][T15803] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 679.694879][T15803] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 679.725585][T15803] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 679.813382][T15803] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 679.886046][T15803] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 679.933168][T15803] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 679.964050][T15803] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 680.063703][T15803] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 680.115257][T15803] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 680.199177][T15803] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 680.243072][T15803] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 680.294421][T15803] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 680.400067][T15803] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 680.451707][T15803] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 680.513241][T15803] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 680.571309][T15803] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 680.637477][T15803] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 680.690026][T15803] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 680.747533][T15803] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 680.770659][T15803] CPU0 is offline. [ 680.989758][T15834] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 681.345010][ T5876] Bluetooth: hci0: command 0x0406 tx timeout [ 681.578589][ T5876] Bluetooth: hci1: command 0x0406 tx timeout [ 681.658231][ T5876] Bluetooth: hci3: command 0x0406 tx timeout [ 681.737297][ T5876] Bluetooth: hci4: command 0x0c1a tx timeout [ 681.810554][T15845] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 681.898103][ T5876] Bluetooth: hci5: command 0x0c1a tx timeout [ 682.136204][ T5876] Bluetooth: hci6: command 0x0c1a tx timeout [ 682.293968][ T5876] Bluetooth: hci7: command 0x0c1a tx timeout [ 682.453241][ T5876] Bluetooth: hci8: command 0x0c1a tx timeout [ 682.712427][ T5876] Bluetooth: hci9: command 0x0c1a tx timeout [ 683.154608][T15856] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 683.647400][ T5876] Bluetooth: hci1: command 0x0406 tx timeout [ 683.806902][ T5876] Bluetooth: hci4: command 0x0c1a tx timeout [ 683.965840][ T5876] Bluetooth: hci5: command 0x0c1a tx timeout [ 684.205124][ T5876] Bluetooth: hci6: command 0x0c1a tx timeout [ 684.363410][ T5876] Bluetooth: hci7: command 0x0c1a tx timeout [ 684.522576][ T5876] Bluetooth: hci8: command 0x0c1a tx timeout [ 684.761164][ T5876] Bluetooth: hci9: command 0x0c1a tx timeout [ 685.286421][T15873] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 685.875658][ T5876] Bluetooth: hci4: command 0x0c1a tx timeout [ 686.034970][ T5876] Bluetooth: hci5: command 0x0c1a tx timeout [ 686.273878][ T5876] Bluetooth: hci6: command 0x0c1a tx timeout [ 686.432491][ T5876] Bluetooth: hci7: command 0x0c1a tx timeout [ 686.593977][ T5876] Bluetooth: hci8: command 0x0c1a tx timeout [ 686.614412][T15882] vhci_hcd: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 686.830648][ T5876] Bluetooth: hci9: command 0x0c1a tx timeout [ 687.150858][T15887] Invalid ELF header magic: != ELF [ 689.165760][ T5184] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 689.182213][ T5184] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 689.191186][ T5184] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 689.204378][ T5184] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 689.212526][ T5184] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 689.464813][T15901] chnl_net:caif_netlink_parms(): no params data found [ 689.723311][T15901] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.757193][T15901] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.764643][T15901] bridge_slave_0: entered allmulticast mode [ 689.841661][T15901] bridge_slave_0: entered promiscuous mode [ 689.873134][T15901] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.900765][T15901] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.929896][T15901] bridge_slave_1: entered allmulticast mode [ 689.949563][T15901] bridge_slave_1: entered promiscuous mode [ 690.076009][T15901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.124054][T15901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.237691][T15901] team0: Port device team_slave_0 added [ 690.284812][T15901] team0: Port device team_slave_1 added [ 690.438014][T15901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.478718][T15901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.630716][T15901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.705127][T15901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.750038][T15901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.852223][T15901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.081279][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.087600][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.143336][T15901] hsr_slave_0: entered promiscuous mode [ 691.189024][T15901] hsr_slave_1: entered promiscuous mode [ 691.195127][T15901] debugfs: 'hsr0' already exists in 'hsr' [ 691.277260][T15901] Cannot create hsr debugfs directory [ 691.291003][ T5184] Bluetooth: hci10: command tx timeout [ 691.877401][T15901] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.105523][T15901] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.337577][T15901] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.616930][T15901] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.694155][T15962] Unable to find swap-space signature [ 693.063645][T15901] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 693.143557][T15901] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 693.190925][T15901] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 693.245644][T15901] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 693.360026][ T5184] Bluetooth: hci10: command tx timeout [ 693.491948][T15901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.564518][T15901] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.594116][T12767] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.601290][T12767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.664650][T12767] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.671965][T12767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.211180][T15901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.346985][T15901] veth0_vlan: entered promiscuous mode [ 694.394881][T15901] veth1_vlan: entered promiscuous mode [ 694.468096][T15901] veth0_macvtap: entered promiscuous mode [ 694.507180][T15901] veth1_macvtap: entered promiscuous mode [ 694.585901][T15901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.658373][T15901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.744501][T11314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.791473][T11314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.863996][T11314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.888943][T15989] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1873'. [ 694.919927][T11314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.955832][T15989] geneve1: entered promiscuous mode [ 694.975907][T15991] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1873'. [ 695.002086][T15989] geneve1: entered allmulticast mode [ 695.334880][T12767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.401917][T12767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.432819][ T5184] Bluetooth: hci10: command tx timeout [ 695.530818][T12086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.572954][T12086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.617162][ T5876] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 695.628037][ T5876] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 695.649548][ T5876] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 695.659228][ T5876] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 695.672059][ T5876] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 695.842151][T15999] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 696.024099][T15999] Invalid ELF header magic: != ELF [ 696.635195][T15994] chnl_net:caif_netlink_parms(): no params data found [ 696.693777][T16010] misc userio: No port type given on /dev/userio [ 697.139228][T15994] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.171923][T15994] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.209266][T15994] bridge_slave_0: entered allmulticast mode [ 697.248056][T15994] bridge_slave_0: entered promiscuous mode [ 697.297045][T15994] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.304239][T15994] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.379346][T15994] bridge_slave_1: entered allmulticast mode [ 697.412609][T15994] bridge_slave_1: entered promiscuous mode [ 697.504764][ T5876] Bluetooth: hci10: command tx timeout [ 697.579584][T15994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.652203][T15994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.738286][ T5876] Bluetooth: hci11: command tx timeout [ 697.798832][T15994] team0: Port device team_slave_0 added [ 697.870852][T15994] team0: Port device team_slave_1 added [ 698.002908][T15994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.034552][T15994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.150749][T15994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.200108][T15994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.238048][T15994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.363322][T15994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.623043][T15994] hsr_slave_0: entered promiscuous mode [ 698.667404][T15994] hsr_slave_1: entered promiscuous mode [ 698.695013][T16037] random: crng reseeded on system resumption [ 698.706989][T15994] debugfs: 'hsr0' already exists in 'hsr' [ 698.731267][T15994] Cannot create hsr debugfs directory [ 699.803419][ T5876] Bluetooth: hci11: command tx timeout [ 699.812005][T15994] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.140011][T15994] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.204182][ T5184] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 700.218244][ T5184] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 700.227206][ T5184] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 700.235455][ T5184] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 700.243912][ T5184] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 700.411222][T15994] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.560424][T15994] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.091290][T16057] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 701.427615][T15994] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 701.520202][T15994] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 701.599343][T15994] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 701.662645][T16052] chnl_net:caif_netlink_parms(): no params data found [ 701.697128][T15994] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 701.872458][ T5184] Bluetooth: hci11: command tx timeout [ 702.047306][T16052] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.091056][T16052] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.111256][T16052] bridge_slave_0: entered allmulticast mode [ 702.158586][T16052] bridge_slave_0: entered promiscuous mode [ 702.197604][T16052] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.240244][T16052] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.263547][T16052] bridge_slave_1: entered allmulticast mode [ 702.300544][T16052] bridge_slave_1: entered promiscuous mode [ 702.350329][ T5184] Bluetooth: hci12: command tx timeout [ 702.466161][T16052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.515234][ T31] INFO: task syz.2.1495:13967 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 702.566762][T16052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.578505][ T31] Tainted: G U syzkaller #0 [ 702.585030][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 702.670160][ T31] task:syz.2.1495 state:D stack:27304 pid:13967 tgid:13966 ppid:6084 task_flags:0x400140 flags:0x00004006 [ 702.724068][T16086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1888'. [ 702.772810][ T31] Call Trace: [ 702.785776][ T31] [ 702.800527][ T31] __schedule+0x1190/0x5de0 [ 702.805086][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 702.851074][ T31] ? __pfx___schedule+0x10/0x10 [ 702.855987][ T31] ? find_held_lock+0x2b/0x80 [ 702.889653][ T31] ? schedule+0x2d7/0x3a0 [ 702.914914][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 702.926685][ T31] schedule+0xe7/0x3a0 [ 702.940120][ T31] schedule_preempt_disabled+0x13/0x30 [ 702.960090][ T31] __mutex_lock+0x81b/0x1060 [ 702.981411][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 703.036167][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 703.070612][ T31] ? net_generic+0xea/0x2a0 [ 703.112890][ T31] ? __pfx_nfsd_fill_super+0x10/0x10 [ 703.175234][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 703.180607][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 703.212944][ T31] nfsd_umount+0x48/0xe0 [ 703.217772][ T31] deactivate_locked_super+0xbe/0x1a0 [ 703.223159][ T31] get_tree_keyed+0x18a/0x1d0 [ 703.235716][ T31] vfs_get_tree+0x8b/0x340 [ 703.240171][ T31] path_mount+0x1513/0x2000 [ 703.244720][ T31] ? __pfx_path_mount+0x10/0x10 [ 703.254845][ T31] ? kmem_cache_free+0x2d1/0x4d0 [ 703.259800][ T31] ? putname+0x154/0x1a0 [ 703.264067][ T31] ? putname+0x154/0x1a0 [ 703.273922][ T31] ? __x64_sys_mount+0x28d/0x310 [ 703.282311][ T31] __x64_sys_mount+0x28d/0x310 [ 703.292620][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 703.300522][ T31] do_syscall_64+0xcd/0x490 [ 703.314435][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.320924][ T31] RIP: 0033:0x7fdfc3d8ebe9 [ 703.332882][ T31] RSP: 002b:00007fdfc4ba4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 703.341582][ T31] RAX: ffffffffffffffda RBX: 00007fdfc3fb5fa0 RCX: 00007fdfc3d8ebe9 [ 703.355581][ T31] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 0000000000000000 [ 703.363671][ T31] RBP: 00007fdfc3e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 703.374233][ T31] R10: 0000000000010001 R11: 0000000000000246 R12: 0000000000000000 [ 703.382240][ T31] R13: 00007fdfc3fb6038 R14: 00007fdfc3fb5fa0 R15: 00007fff34a983b8 [ 703.400559][ T31] [ 703.464297][T16084] ieee80211 phy44: Selected rate control algorithm 'minstrel_ht' [ 703.482000][ T31] INFO: task syz.2.1495:13976 blocked for more than 144 seconds. [ 703.509430][ T31] Tainted: G U syzkaller #0 [ 703.522331][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 703.538239][ T31] task:syz.2.1495 state:D stack:29112 pid:13976 tgid:13966 ppid:6084 task_flags:0x400140 flags:0x00004004 [ 703.560918][ T31] Call Trace: [ 703.565689][ T31] [ 703.568679][ T31] __schedule+0x1190/0x5de0 [ 703.578651][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 703.583872][ T31] ? __pfx___schedule+0x10/0x10 [ 703.588737][ T31] ? find_held_lock+0x2b/0x80 [ 703.598652][ T31] ? schedule+0x2d7/0x3a0 [ 703.605900][ T31] schedule+0xe7/0x3a0 [ 703.618766][ T31] super_lock+0x2c0/0x3f0 [ 703.626325][ T31] ? __pfx_super_lock+0x10/0x10 [ 703.631223][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 703.645613][ T31] ? grab_super+0x9e/0x420 [ 703.650174][ T31] ? __pfx_test_keyed_super+0x10/0x10 [ 703.660522][ T31] grab_super+0xab/0x420 [ 703.665272][ T31] ? __pfx_grab_super+0x10/0x10 [ 703.670234][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 703.681257][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 703.687151][ T31] ? __pfx_test_keyed_super+0x10/0x10 [ 703.698204][ T31] sget_fc+0x612/0xc20 [ 703.702304][ T31] ? __pfx_set_anon_super_fc+0x10/0x10 [ 703.722463][ T31] ? __pfx_nfsd_fill_super+0x10/0x10 [ 703.727800][ T31] get_tree_keyed+0x59/0x1d0 [ 703.742329][ T31] vfs_get_tree+0x8b/0x340 [ 703.746779][ T31] path_mount+0x1513/0x2000 [ 703.751319][ T31] ? __pfx_path_mount+0x10/0x10 [ 703.761127][ T31] ? kmem_cache_free+0x2d1/0x4d0 [ 703.766317][ T31] ? putname+0x154/0x1a0 [ 703.770582][ T31] ? putname+0x154/0x1a0 [ 703.780057][ T31] ? __x64_sys_mount+0x28d/0x310 [ 703.789755][ T31] __x64_sys_mount+0x28d/0x310 [ 703.800022][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 703.805851][ T31] do_syscall_64+0xcd/0x490 [ 703.810395][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.827873][ T31] RIP: 0033:0x7fdfc3d8ebe9 [ 703.834290][ T31] RSP: 002b:00007fdfc4b83038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 703.850863][ T31] RAX: ffffffffffffffda RBX: 00007fdfc3fb6090 RCX: 00007fdfc3d8ebe9 [ 703.865366][ T31] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 703.875442][ T31] RBP: 00007fdfc3e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 703.887323][ T31] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 703.898215][ T31] R13: 00007fdfc3fb6128 R14: 00007fdfc3fb6090 R15: 00007fff34a983b8 [ 703.910120][ T31] [ 703.943013][ T5184] Bluetooth: hci11: command tx timeout [ 703.970192][ T31] [ 703.970192][ T31] Showing all locks held in the system: [ 704.011995][ T31] 1 lock held by khungtaskd/31: [ 704.080542][ T31] #0: ffffffff8e5c10a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 704.166046][ T31] 2 locks held by syz-executor/5862: [ 704.198652][ T31] #0: ffff88807f9fc0e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 704.284705][ T31] #1: ffffffff8e9d96c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 704.319506][ T31] 2 locks held by syz-executor/5866: [ 704.327055][ T31] #0: ffff8880696c00e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 704.378971][ T31] #1: ffffffff8e9d96c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 704.388659][ T31] 2 locks held by getty/10498: [ 704.419357][ T5184] Bluetooth: hci12: command tx timeout [ 704.462017][ T31] #0: ffff8880316a90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 704.498635][ T31] #1: ffffc90002eb02f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 704.551833][ T31] 2 locks held by kworker/u8:61/12767: [ 704.557425][ T31] 2 locks held by syz.3.1441/13687: [ 704.587155][ T31] #0: ffffffff90429f50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 704.597864][ T31] #1: ffffffff8e9d96c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 704.612997][ T31] 2 locks held by syz.2.1495/13967: [ 704.618555][ T31] #0: ffff8880542140e0 (&type->s_umount_key#53/1){+.+.}-{4:4}, at: alloc_super+0x235/0xbd0 [ 704.637778][ T31] #1: ffffffff8e9d96c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 704.653742][ T31] 2 locks held by syz-executor/14005: [ 704.661585][ T31] #0: ffff8880322460e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 704.682583][ T31] #1: ffffffff8e9d96c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 704.694132][ T31] 2 locks held by syz-executor/14283: [ 704.705003][ T31] #0: ffff8880339a40e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 704.715605][ T31] #1: ffffffff8e9d96c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 704.731746][ T31] 2 locks held by syz-executor/15313: [ 704.747086][ T31] #0: ffff88802d1c40e0 (&type->s_umount_key#54){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 704.765304][ T31] #1: ffffffff8e9d96c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 704.775220][ T31] 2 locks held by syz.8.1820/15719: [ 704.787469][ T31] #0: ffff88807f0080e0 (&type->s_umount_key#53/1){+.+.}-{4:4}, at: alloc_super+0x235/0xbd0 [ 704.804212][ T31] #1: ffffffff8e9d96c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 704.814307][ T31] 2 locks held by syz.6.1839/15816: [ 704.826654][ T31] #0: ffffffff90429f50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 704.844297][ T31] #1: ffffffff8e9d96c8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 704.854596][ T31] 4 locks held by syz-executor/15994: [ 704.867524][ T31] #0: ffff888080e50dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 704.881133][ T31] #1: ffff888080e500b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 704.897477][ T31] #2: ffffffff905eeae8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 704.914336][ T31] #3: ffff888057250338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 704.924157][ T31] 3 locks held by syz-executor/16052: [ 704.935847][ T31] #0: ffff888045214dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 704.950485][ T31] #1: ffff8880452140b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 704.962958][ T31] #2: ffffffff905eeae8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 704.978553][ T31] 1 lock held by syz.7.1887/16088: [ 704.983668][ T31] #0: ffffffff8e5cc638 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 705.003966][ T31] 1 lock held by syz.3.1888/16086: [ 705.011614][ T31] #0: ffffffff8e5cc638 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 705.038190][ T31] [ 705.040552][ T31] ============================================= [ 705.040552][ T31] [ 705.110000][ T31] NMI backtrace for cpu 1 [ 705.110024][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U syzkaller #0 PREEMPT(full) [ 705.110050][ T31] Tainted: [U]=USER [ 705.110056][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 705.110067][ T31] Call Trace: [ 705.110074][ T31] [ 705.110082][ T31] dump_stack_lvl+0x116/0x1f0 [ 705.110111][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 705.110129][ T31] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 705.110152][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 705.110180][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 705.110201][ T31] watchdog+0xf0e/0x1260 [ 705.110230][ T31] ? __pfx_watchdog+0x10/0x10 [ 705.110254][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 705.110278][ T31] ? __kthread_parkme+0x19e/0x250 [ 705.110301][ T31] ? __pfx_watchdog+0x10/0x10 [ 705.110338][ T31] kthread+0x3c5/0x780 [ 705.110364][ T31] ? __pfx_kthread+0x10/0x10 [ 705.110390][ T31] ? rcu_is_watching+0x12/0xc0 [ 705.110409][ T31] ? __pfx_kthread+0x10/0x10 [ 705.110435][ T31] ret_from_fork+0x5d4/0x6f0 [ 705.110462][ T31] ? __pfx_kthread+0x10/0x10 [ 705.110488][ T31] ret_from_fork_asm+0x1a/0x30 [ 705.110518][ T31] [ 705.110528][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 705.239247][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U syzkaller #0 PREEMPT(full) [ 705.250016][ T31] Tainted: [U]=USER [ 705.253819][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 705.263868][ T31] Call Trace: [ 705.267150][ T31] [ 705.270081][ T31] dump_stack_lvl+0x3d/0x1f0 [ 705.274694][ T31] vpanic+0x6e8/0x7a0 [ 705.278685][ T31] ? __pfx_vpanic+0x10/0x10 [ 705.283200][ T31] panic+0xca/0xd0 [ 705.287015][ T31] ? __pfx_panic+0x10/0x10 [ 705.291435][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 705.297153][ T31] ? irq_work_queue+0xce/0x100 [ 705.302011][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 705.307999][ T31] ? __wake_up_klogd.part.0+0x99/0xf0 [ 705.313388][ T31] ? watchdog+0xd78/0x1260 [ 705.317826][ T31] ? watchdog+0xd6b/0x1260 [ 705.322349][ T31] watchdog+0xd89/0x1260 [ 705.326635][ T31] ? __pfx_watchdog+0x10/0x10 [ 705.331426][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 705.336628][ T31] ? __kthread_parkme+0x19e/0x250 [ 705.341932][ T31] ? __pfx_watchdog+0x10/0x10 [ 705.346645][ T31] kthread+0x3c5/0x780 [ 705.350740][ T31] ? __pfx_kthread+0x10/0x10 [ 705.355522][ T31] ? rcu_is_watching+0x12/0xc0 [ 705.360546][ T31] ? __pfx_kthread+0x10/0x10 [ 705.365231][ T31] ret_from_fork+0x5d4/0x6f0 [ 705.369832][ T31] ? __pfx_kthread+0x10/0x10 [ 705.374446][ T31] ret_from_fork_asm+0x1a/0x30 [ 705.379222][ T31] [ 705.382294][ T31] Kernel Offset: disabled [ 705.386616][ T31] Rebooting in 86400 seconds..