last executing test programs: 11m8.785073311s ago: executing program 1 (id=1660): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x20, r1, 0x936355e497c8b7e5, 0x70bd25, 0x25dddbfc, {}, [@ETHTOOL_A_TSINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x4048800) ioctl$auto(0x3, 0x5420, 0x38) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000200)={0x20080522, 0x0}, 0x0) name_to_handle_at$auto(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vidtv.0/i2c-0/0-0068/name\x00', 0x18b080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001180)=""/187, 0xbb) setreuid$auto(0x3, 0x7) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x6f29, 0x0) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) r6 = getuid() keyctl$auto(0xa, r6, 0x0, 0x0, 0x80000000) r7 = getgid() r8 = syz_clone3(&(0x7f0000000440)={0x20100000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000240), {0x2}, &(0x7f00000002c0)=""/122, 0x7a, &(0x7f0000000340)=""/175, &(0x7f0000000400)=[r2, r2, r2, r2], 0x4}, 0x58) msgctl$auto_IPC_STAT(0x0, 0x2, &(0x7f00000004c0)={{0xffff, r6, r7, 0x0, 0xa000, 0x2, 0x4}, &(0x7f0000000080), &(0x7f0000000100)=0x5, 0x6, 0x11, 0x97d7, 0x0, 0x8, 0x1, 0x8001, 0x6637, @raw=0x6, @inferred=r8}) ioctl$auto_USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000001040)={0x80, 0x6, 0x302, 0x401, 0xacf, 0x7, 0x0}) 11m8.030010637s ago: executing program 1 (id=1663): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b5d399b5b", 0xfdef) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x14, 0x0, 0x7) r3 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000080), r2) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_EDGE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="00042bbd6d00000300000000000000bde34aaa4e0c908bd6"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) sendmmsg$auto(r2, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) ioctl$auto_UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000000c0)={0xffffffffffffffff, 0x6, 0x11, 0xfffffffffffffeff}) 11m7.658704143s ago: executing program 1 (id=1666): sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0xc040810) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040894) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x800, 0x0) getpid() sendmsg$auto_NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x852) timerfd_create$auto(0x23, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48080}, 0x4c100) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) io_uring_setup$auto(0x3, 0x0) 11m6.63386536s ago: executing program 1 (id=1669): migrate_pages$auto(0x0, 0x99, 0x0, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd36, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) 11m6.449975314s ago: executing program 1 (id=1671): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x10380, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) (async) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2a, 0x2, 0x1) (async) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) io_uring_setup$auto(0x1, 0x0) (async) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) (async) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x23, 0x80805, 0x0) getsockopt$auto(r2, 0x40000000113, 0x1, 0xfffffffffffffffc, 0x0) unshare$auto(0x85) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8003) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) write$auto(0x3, 0x0, 0x7fffffff) ioctl$auto(r0, 0x1, 0xffffffffffffffff) fcntl$auto_F_SETOWN_EX(r0, 0xf, 0x5) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x113340, 0x0) (async) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x113340, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0xb, 0x40000d, 0x10400, 0x6, 0x4, 0x3, 0xffffffffffffffff, [], {0x7, 0x200004, 0x7, 0x2a3, 0x100, 0x3, 0x40100101, 0x6}, {0xf8, 0x4, 0x9, 0x1, 0x3, 0x40, 0xcc, 0x8, 0x100000000}}) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0xb, 0x40000d, 0x10400, 0x6, 0x4, 0x3, 0xffffffffffffffff, [], {0x7, 0x200004, 0x7, 0x2a3, 0x100, 0x3, 0x40100101, 0x6}, {0xf8, 0x4, 0x9, 0x1, 0x3, 0x40, 0xcc, 0x8, 0x100000000}}) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/ip_vs_app\x00', 0x101000, 0x0) (async) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/ip_vs_app\x00', 0x101000, 0x0) pread64$auto(r3, 0x0, 0x8, 0xffff) (async) pread64$auto(r3, 0x0, 0x8, 0xffff) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x102, 0x0) ioctl$auto_SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, 0x0) (async) ioctl$auto_SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, 0x0) socket(0x23, 0x1, 0x0) (async) socket(0x23, 0x1, 0x0) 10m51.017527483s ago: executing program 32 (id=1671): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x10380, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) (async) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2a, 0x2, 0x1) (async) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) io_uring_setup$auto(0x1, 0x0) (async) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) (async) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x23, 0x80805, 0x0) getsockopt$auto(r2, 0x40000000113, 0x1, 0xfffffffffffffffc, 0x0) unshare$auto(0x85) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8003) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) write$auto(0x3, 0x0, 0x7fffffff) ioctl$auto(r0, 0x1, 0xffffffffffffffff) fcntl$auto_F_SETOWN_EX(r0, 0xf, 0x5) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x113340, 0x0) (async) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x113340, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0xb, 0x40000d, 0x10400, 0x6, 0x4, 0x3, 0xffffffffffffffff, [], {0x7, 0x200004, 0x7, 0x2a3, 0x100, 0x3, 0x40100101, 0x6}, {0xf8, 0x4, 0x9, 0x1, 0x3, 0x40, 0xcc, 0x8, 0x100000000}}) (async) io_uring_setup$auto(0x59, &(0x7f0000000080)={0xb, 0x40000d, 0x10400, 0x6, 0x4, 0x3, 0xffffffffffffffff, [], {0x7, 0x200004, 0x7, 0x2a3, 0x100, 0x3, 0x40100101, 0x6}, {0xf8, 0x4, 0x9, 0x1, 0x3, 0x40, 0xcc, 0x8, 0x100000000}}) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/ip_vs_app\x00', 0x101000, 0x0) (async) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/ip_vs_app\x00', 0x101000, 0x0) pread64$auto(r3, 0x0, 0x8, 0xffff) (async) pread64$auto(r3, 0x0, 0x8, 0xffff) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x102, 0x0) ioctl$auto_SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, 0x0) (async) ioctl$auto_SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, 0x0) socket(0x23, 0x1, 0x0) (async) socket(0x23, 0x1, 0x0) 4m35.054497796s ago: executing program 33 (id=3135): r0 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x40080, 0x0) read$auto_ptdump_fops_(r0, &(0x7f0000000040)=""/90, 0x5a) 2m44.745196309s ago: executing program 34 (id=3483): r0 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0080, 0x0) read$auto_ptdump_fops_(r0, &(0x7f0000000040)=""/90, 0x5a) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(r0, 0x0, 0x1ff, &(0x7f0000000140)='{\x00', &(0x7f0000000180)=0x101) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYBLOB="040006"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r2) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x101000, 0x0) ioctl$auto_SOUND_MIXER_INFO2(r3, 0x805c4d65, &(0x7f0000000100)) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000005c0), r2) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001d40)={0x14, r4, 0x8ff972b65c311bf5, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008090}, 0x4000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) shutdown$auto(0x200000003, 0x1) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r1, &(0x7f0000001300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001d80)={0x1208, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@MACSEC_ATTR_SA_CONFIG={0x11f1, 0x3, 0x0, 0x1, [@typed={0x8, 0x11a, 0x0, 0x0, @u32=0xffffffee}, @generic="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", @generic="f49860b03db50ab59e052db54073214f742e8193a0561fe3ea514eec36aafc3ec80cc44b34e443832187e44781aa89ec60c23682fd720785341ccee28fe8d6487663", @typed={0x8, 0x72, 0x0, 0x0, @u32=0x33cb}, @nested={0xfd, 0x126, 0x0, 0x1, [@generic="ff70e724dcdd93e07bf1c76427f43314b9a57c9183c38259e19d59ece45c10405cf611b05d923a985fb3a1b5d74242afc9940c76175ac1e9fe45536a205b7b71c7c842bdd0e141712a209a0abd46786969a776a97b02a833769f71e945530bfbf62cd787a47e5325f5d7c4288e64a83e75c4263660cf4d750a0c32473d70c3fd343413e14fcac840859d45498d27551fb73ef1fa27fd34ad3c97aa8054235f2710202991ec150195a850d24f7f65df46da5da411591b5b4afbc638b59113054ed40aaa4e2c541026c42d6e3a678fd2b9844f8e2ab0ea23dad3b4fab4fad1210a4cb4b9e36b4ea88c8f418a01208016d61862260cca337339fc"]}, @typed={0x14, 0xe, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @generic="1284ae928ae342c6e96c8b67ed0c84a8b569309592b01680646df272f08e627b79d108973a723894eb9f3c26f58d346ffb0e95cf902eb46b896b0f873032190c02e9bdbe18bbdd22a61450298f01dd9295895e7d3cc8db213b74bbd07243b5b303b2aa49be1ea062b5089af4751e3271acd2085cec6078d484b4e4", @typed={0xc, 0xce, 0x0, 0x0, @u64}]}]}, 0x1208}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 2m39.629445022s ago: executing program 3 (id=3514): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x8802, 0x0) write$auto(r0, 0x0, 0x80000000) socketpair$auto(0x3, 0x5, 0x7, 0x0) unshare$auto(0x427d4d91) socket(0x1d, 0x2, 0x6) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) r2 = socket(0x10, 0x2, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x9, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1f000000", @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, 0x0, 0x4, 0x6586, 0x0) r3 = socket(0xa, 0x801, 0x84) r4 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) ioctl$auto_SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x0) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$auto_VHOST_SET_VRING_NUM(r5, 0x4008af10, &(0x7f0000000040)={0x1, 0x32}) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04, 0x0) setsockopt$auto(r3, 0x84, 0x8, 0x0, 0x3) write$auto(0xca, 0x0, 0x2d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r6 = socket(0x11, 0x80003, 0x300) sysfs$auto(0x2, 0x2, 0x0) setsockopt$auto(r6, 0x107, 0x8, 0x0, 0x6) read$auto(0x3, 0x0, 0x7) openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x180400, 0x0) 2m38.520301958s ago: executing program 3 (id=3516): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x1, 0x100000000000035, 0x0) fsconfig$auto(0xffffffffffffffff, 0x1, &(0x7f0000000000)='4\x93\x03\x00\x04\x00\x00', &(0x7f00000001c0), 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0xfffffffffffffffd, 0x20009, 0x4000000000df, 0x100000cb1, 0x401, 0x200000000008000) r1 = semctl$auto(0x7, 0x2, 0x13, 0x3) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x10, 0x0, 0x0) r3 = getsockopt$auto(r2, 0x84, 0xc75, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) r4 = socket(0xa, 0x3, 0x3b) getsockopt$auto(r4, 0x29, 0x20, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r5) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r5, &(0x7f0000000140)={0x0, 0x9e, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6, 0x2474a7d9180cffa3, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x40c0) sendmsg$auto_NL802154_CMD_SET_ACKREQ_DEFAULT(r4, &(0x7f0000001500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000002980)=ANY=[@ANYBLOB="30140000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="61cedd05ea3ab77b16f5356a295ddd26993bf5793c3d81614dcdb6db9b00586e4a994ccd84f84959cfaca92c831100177d377b69b9a4d8b351c302f3c81e07da6118d2052b5dbd955e6132df147d9df1a3e52e44d510f965dbb251b0c7ae7283b45efcf819c8d13548021d01fbef7d5c49abbfe3cd5272e06ed249157229e27bed8031fe8792881909df3afacd2204d41d6c724ad4695d3a082acaf164504d6982429c64ba4cb47f6041d3baaec3d9e4867144ae3d8d4bb99b640440414192da38aae13929f170f67202142e3f87ce483a5c7ab7b6e0fa2391facaefce08001e00", @ANYRES32=r3, @ANYBLOB="0000008000000000eea84fe29fbead92d0b95f26a0377f993d1d7cc6"], 0x1430}, 0x1, 0x0, 0x0, 0x800}, 0x51) userfaultfd$auto(0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) close_range$auto(0x2, 0x8, 0x0) 2m33.143925799s ago: executing program 3 (id=3519): r0 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x6) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), 0xffffffffffffffff) r2 = getpgid$auto(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = semctl$auto_GETPID(0x5bae, 0x9, 0xb, 0x3) r5 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000100), 0x508080, 0x0) r6 = setfsuid$auto(0x0) r7 = fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000680)={&(0x7f0000000140)={0x52c, r1, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@MACSEC_ATTR_SA_CONFIG={0x24a, 0x3, 0x0, 0x1, [@typed={0x8, 0x11a, 0x0, 0x0, @u32=0x70}, @nested={0x13f, 0x2e, 0x0, 0x1, [@typed={0x8, 0xd, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x104, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x21}}, @generic="2ca8391074813b19d3a52905bc9a3a089b3af19a996cbfc0055ed37864e73e11854c418e39de211073bf62026c26c8d48ffd8fb328d061fd764c1b6107181c15cb65367ddc639720eb6bd60427ee0c977328a83063d5d1db6c85192f03e0f7fd7fa1e7f05bfd62039750b0be1f3114ad85dd052015ffb90d41e92c34db552ff4933679455a7289880d1609fc81a2780c93de2a74dd9e5ddbedf431c1cf7e2ae458208f", @typed={0x6, 0xb6, 0x0, 0x0, @str='\\\x00'}, @generic="56b6c862df5c114125e2f7fb4ff3fbe39fecf8a88ea9fa0853a54fb7bc248bf573592db07aa9b4a1773c0f6f5135a7851068b63a5eecafbe68867ab2889e3305b4165014cfc73d883e4be3ea71056271aa8a4b80496406c2e4c6ce04ef05fd5b48fa12b05af94e180882d41b950ec2fd79ed2a09ec6040fd", @nested={0x4, 0x4f}, @nested={0x4, 0x1e}]}, @generic="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", @typed={0x4, 0x89}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r3}, @MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_SA_CONFIG={0x2bc, 0x3, 0x0, 0x1, [@typed={0xbe, 0xf6, 0x0, 0x0, @binary="c0871b285c27d726ffd0973222a20c40c26a433bb6fd9fcffb57f04b2e995a611e52419a2a4100f9e2ea4c03722538e2a56da36c5e7dd186d82150db611e3cc2efbea5ec99893a82d1ba5222f95994f64b3f51eebb0b21dd2336bb3237fd69c5f904ce693be0b0f1410de62db972bb6d44c0a97ab84b4d1ef360e00abef3282e5b8c5454593245479983eb0822198d1c48ea09ca11e2da27f0c6116c36f1020ae593ef4fdbd692af686527d3bbf5a9f7217ad5dfa79762c1b03b"}, @nested={0x1ed, 0x143, 0x0, 0x1, [@typed={0x8, 0x20, 0x0, 0x0, @pid=r4}, @generic="1e7b286dd0fe1e0bcb4a977778e98a20ada91c00ece12c2a6cd41369bc31f1f1debfe89abf5b2c805a5c122169d80fb610509554b67023205f8efaade40510f22939c1411b4ec2fb7535ea60aec25263975a4a0e734291d2dc2bb743109dd7a40a59789c89e2eda1af154bb7026fce66658c00abd3cd7e2c8d8f2cb20d5c3c70835056d01652acd215d6306640581d5903a401687fbb527a64b7e9559fbd1e50836445ec57c9e02cd86cafeafd5d13886bdff06815901533e1c427b6ee21b9a60756d05f0a", @typed={0x8, 0x7d, 0x0, 0x0, @fd=r5}, @typed={0x8f, 0x11b, 0x0, 0x0, @binary="54ebe2b9ae9bfc082e7e7a5cadc87ea2d475d687f7e1c8a1e116f03f4127ec9f0d734ed53c8b6c6289f8c1a940b4f8c2f0b59edab3da2d6900225eaf82cb060fcde7961f9aab82dc95789904d231076543f3cb1565d3a261a753c706d05a29bec398dafc79f08058f3fdc32c962ddab0ebf81bddfbd3c27e46abc419ffb8b13f1479d5151c4e34927173a5"}, @generic="cc5c8b84a2588ad5cae46ea912b07deed30eb81ab243cb4392e5496f0cec1acf4bea8f0aa57a1f3c8d4554049143626a675a3e6a3d1f576c1c622a2fba044c2055bfe85e722058b710cd4fd42d73b13e26344c9574c75669d189e94c20a10ece1d08912d5204e888e220796f2f4dbf562e8b0305b9b61fe8beabe9f2", @typed={0x8, 0x53, 0x0, 0x0, @uid=r6}]}, @typed={0x8, 0x147, 0x0, 0x0, @pid=r7}]}]}, 0x52c}, 0x1, 0x0, 0x0, 0x44010}, 0x8001) write$auto_bm_register_operations_binfmt_misc(r5, &(0x7f0000000700)="7834890d2f5174627ba0059d1ac4187759051dc00b849a2dc4b35c06945fd95be4329a718bf67ef45deaa2c208fa05db1230e40bc60a6f89b24bb30f8c258af8d4abf224bd6f67dd05a7639edcf4bdb19dbef7fb022ea0a87d1e299505e2dde77fe51180b31140da0c86bcf81d0dfefd3930dab08271f6baae90dc07669d6627da46c614569b8cee91215a0dd2f26908721b7385065d30eb70556bec280cd139107a97c2dd760162cc3f8bc8ae13ff82a974763256cac1a17aad3a5001e76a65fb8d9e83efb3d98a15caa03c178439", 0xcf) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000840), r0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000ec0)={&(0x7f0000000800), 0xc, &(0x7f0000000e80)={&(0x7f0000000880)={0x5cc, r8, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_IE={0x49f, 0x2a, "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"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0x101, 0xba, "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"}, @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}]}, 0x5cc}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) r9 = socket(0x9, 0x1, 0x10000) ioctl$auto_TIOCSETD2(r0, 0x5423, &(0x7f0000000f00)="ac1be4a831707f0ea68cd18576f4bd8441bc377b1e801b9c5844428746426c42fdfcbe601c58c91b0f0f409ac05f") ioctl$auto_SNDRV_PCM_IOCTL_STATUS_EXT642(r0, 0xc0984124, &(0x7f0000000f40)={0x6, "5896ddd2", 0x8000000000000, 0x7, 0xff, 0x1, 0xc37, 0x1, 0xae, 0x8, 0x1, 0x80000000, 0x7, 0xfd, 0xfffffffffffffffd, 0xa8, 0x200, 0x6a21, 0x9, "9b2cfa20e41e114451b9016f0d2e58a2eb266de1"}) r10 = fsopen$auto(&(0x7f0000001000)='wlan1\x00', 0x7) r11 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/security/tomoyo/stat\x00', 0x1018c0, 0x0) r12 = wait4$auto(r4, &(0x7f0000001080)=0xfffffffc, 0x8, &(0x7f00000010c0)={{0x3b4, 0x3a}, {0x5, 0x100000000000}, 0x5, 0x2, 0xf9b1, 0x100000000, 0x800, 0x200, 0x9, 0x7, 0xfffffffffffffeff, 0x5, 0x8, 0x6, 0x441, 0x9}) sched_setattr$auto(r12, &(0x7f0000001180)={0x100, 0x76, 0x8, 0x3, 0x25f, 0x5, 0xd8f, 0x100000000, 0x400, 0x4}, 0x5) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000011c0), r0) setsockopt$auto_SO_RESERVE_MEM(0xffffffffffffffff, 0x3af, 0x49, &(0x7f0000001200)='\\\x00', 0x468) madvise$auto(0x2, 0x8, 0x8000) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000001400)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001280)={0x138, r8, 0x600, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_AUTH_DATA={0xf6, 0x9c, "347a9b1be88d4d4a94a7355c9ff5ce1a871959e9374f2249f4254367eaaf540503fbbf7f00adf95fd3bc0b33d7869be791392a438c1dd1c269c51bdabe32fb76be604002a76538b0d8ed74915c9a0d21e7d8a3698847558e72daa3196bdd30f3f3638896e02f09345575a189494e7b73e01160d3870974c2fa2ec438ee603ddbc7770517a02ef30c523f5798a1b057aef6e8d267ceb05db312b4121523f91b74e5e33933938537d1c68618ab1b6dec5451e71e66232a13cf36343547f9b318d05df48ffcd8b23948ede56607321d806cae5e11676722ee8e5f18504dd3855f60a042f24397461220a1bb026d9a2214b028b9"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "68addb44a7a6cf38"}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0xe, 0x4}}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x8001}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "e335efc4c7b0eaef3c0c9d2c"}]}, 0x138}}, 0x4040002) sendmmsg$auto(r10, &(0x7f0000001580)={{&(0x7f0000001440)="13eb9ed045e61ccf8e5ad36be503eb3b6f66e21849cce4346e988c1171292828", 0x1, &(0x7f0000001500)={&(0x7f0000001480)="a063504e8a9c4f9fc1027aa4c5d95afe269ed708ea5cacbcda11acca045b8bb19b81eef59eaa90b6ee745c46dcec10413e8f26baa0e19f891af8868707e5fb0ba33154d0b5c9ce490b766fe202e6dce966e07715597a75c53af615159be7", 0x100000001}, 0x3, &(0x7f0000001540)="51d412df96db0cc3a293fb651e4ca1ac2c", 0x10001, 0x8000}, 0x5}, 0x0, 0x8) madvise$auto(0x80, 0x2a45, 0xff) r13 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000001600), r9) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(r10, 0xc0385869, &(0x7f0000003780)={r9, &(0x7f0000001640)="42ec04c6bc54d3ab8877ca9bf18682c44ffd9b93e45326522d1f0ba45c99cf503846fcce009ee98fe7559d3ffbef2adacae13a0f64d15b52a93a81d55f112a252bd82ba8c7bf8875852ee30e87fc54a530dc53a44df57ed4afa3f12dff1dbe983a859b53ccbdcb5a37346246cdb23acc8a626b3176f5f14a5473fb18855a0ae41ae07ad796603b8a4cd34e0d2214283fbbc485bf6ae7244dde368449727bd426db61b6229d2a321ea95d12dee30bb5db14b2d0b68fc10296e0f75a9861e77fdb513babfbf32200dc2051f02eb635c6d48f249786e834f711fd44868c8432018be15af75cd04a4f5427d65bdaff868aeb73a11f4416f90a4470", 0xf6b0, &(0x7f0000001740)="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", 0x1, &(0x7f0000002740)="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", &(0x7f0000003740)=0x2}) sendmsg$auto_NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000004f00)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004ec0)={&(0x7f00000037c0)={0x16f4, r13, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSCAT={0x114b, 0xb, 0x0, 0x1, [@generic="02811c067e62bdcf785cd87d2ed7f42946b04c82bd731f5c816223eb87533ca5e752f72cc08f63f3e2a88ea8329971edcdacc0c461746e6286fa45", @typed={0xd3, 0x95, 0x0, 0x0, @binary="b06acad30cbfd07c0e5c0e1ee814043ff9a6f55afe184abdec88d0b589f051ac610f3c4d48dbb3a0016d1b2d3c15f62009655eeb6868b4834cc3e4b9a2c33c49edc1d6b8b6f480923285e65ffe4d5b8d29d6e0f521e3ef49e1c509e136532ece8f93d611dfeaef30e9f49ccf929e4479c151f32c9376ef485d3e92e4cd8afa43670392e1ce2eefa0e855c7a1288b03b0eb04fadb3355f3c859c4a05c22222730deb710bac055cdf784eca76f5aaa9c790abf1212dba818462beac322dbeb40d78c09497a3ad6edcb392c6fffc93106"}, @generic="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", @typed={0xc, 0x41, 0x0, 0x0, @u64=0x9}, @nested={0x8, 0xba, 0x0, 0x1, [@nested={0x4, 0x1b}]}, @typed={0xc, 0xcf, 0x0, 0x0, @u64=0x6}, @typed={0x4, 0xcc}, @typed={0x8, 0xb4, 0x0, 0x0, @fd=r14}, @typed={0xc, 0x59, 0x0, 0x0, @u64=0x4}]}, @NLBL_CIPSOV4_A_MLSLVL={0x1d0, 0x7, 0x0, 0x1, [@nested={0x10, 0x3f, 0x0, 0x1, [@nested={0x4, 0xd0}, @typed={0x8, 0xa8, 0x0, 0x0, @u32=0x5}]}, @generic="a9a329e67cbc428307336f415c557124204964f2a9e873b780c3b20c7bbd405278b610b699e0926eb19f4ef159d7318b7a953fa472ef8578cc0d3fc78a52784addab7b553887a8f68c39f3d5eb7e36ae26ddfab197eb9d7537d0c1105e43379be586637b350503d43ccb9e7fa6cb783804a2f3c8eba325be5ae1616860576a9f8c23ad47d9c4b790eb17d37269dbfaa4192efc661f8bad4e80c26072daee76f0074fc5c5a16e9fab3c0e4b19745f2cb0f387e0dae3572de76095353e829e8294dcb04e549dd7760959786d81dc8c7f470700f5788cb6577b", @generic="e2b58fbede38c57887289a71399268943d46f0b7813acdfd714b9dfcc3613eca593528201f830c49275debd8ea86cda9726fdd68f5b1c22f30929b5fb69ab5066bba3e2e64e2ad24df86dcf263cccbab73473f810f9cc29ff4ba882da49d2a8181bca57943022adb087a9462c79c6d117baadfdfb4e8adeb479e49be9341f94fc9db97d79c2795b186d536fe8fb659c93c6f2510db43395e", @typed={0x3e, 0x108, 0x0, 0x0, @binary="0e841e9a0dc24be578f3c306517b2b4f60069da0a1b8f99df878f802c8482217adc90265c926974f80fc91dd634c06f04ce72e92e7caea161535"}, @typed={0xc, 0x15c, 0x0, 0x0, @u64=0x72}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x3b3, 0x8, 0x0, 0x1, [@generic="a1a7ebc190cbf85627b32e7973aed194b9ed0ee7a5441eccb515ae1085407f6f3778cb8916cafff9c4ad38cccb625e4025e5487ee379add87f081bb182726a7e7c", @typed={0x8, 0x35, 0x0, 0x0, @fd=r11}, @nested={0x18b, 0x29, 0x0, 0x1, [@generic="b2b2e96eff15ac2b8aecdd07f0150de0038bff342d9c2f9b297de07a83eb3d0a9620aaeb", @generic="6c3103b7", @typed={0xaf, 0x3, 0x0, 0x0, @binary="1f4cbbf7e58c885a6e48ee7e53686645f9af78889154eff7838d6d71d3122035b66b99ffb4d9b2343b6af1c0d14519057dc7abe3491bf6f08146ef0531f59e33a14e5cf0df5f7abd82edf634629e74aa4928e8cdb5f663fff019e972da8f9d6739e8bf3b6b3b34034b9a7dbe084f147c426c134069be351b665f7cada89f6bbf02aed292a2ab37b3449a5d6868a590a7a38b9e18d5054411a51777c62415186d24d9e9c0524339237d1330"}, @nested={0x4, 0x9b}, @generic="397165e62b5e9de3d1dc850cc26e7402ed2e7a5365b26344c3bf24eb7cd79352f31b426e18d5ee87587d004e6173f7f665c44a9c6487cd129af56f0b31b850b4734999f9694a874327036397667bcd1cf4e94db19ea5096b0e3661abba49ffdbad847abf144a3049a97fb0320a9b5494ddda2fae9b2a8fe22cc99e328e2de3c0c4e55d7c9391356395393fda30fe80be7acb78ea838690e64ff4817cac8e2cdae3d05a032b0613", @nested={0x4, 0xba}]}, @typed={0x8, 0x13f, 0x0, 0x0, @u32=0x1}, @typed={0xc, 0x150, 0x0, 0x0, @u64=0xa6}, @typed={0x4, 0xe3}, @typed={0xe6, 0x89, 0x0, 0x0, @binary="e03a1e8a9599edced2d0bf7b746366071539b8bd67855a67ead995fdf356d0e0c42a51e03b29179b3fff94e5219abd8e493ab57bd058002ce80dd17616146da0fce4c70f4b77fe8075cc0ece0549457e6108fc56153599126df8a1d490ad70b820307286b36cd869173a9c5b402e1ec020cfabcff62a669a6282af2a57104c347fe560a7cbf0be5abbaa3286679a794d7489dacf314ff1c89de5d4a6269d67760606a1e1392cdec78770d00f0eeb5597e2ffd015f471d49349e29580f50a1ceb6b2021c1c2eb24430ebebb33fb63c3846dff2fc9298af82b882c52cfd811391a03e4"}, @generic="cabc9097d586c5742a758ed9405ff5a9dc577027629ee075104e01f7824dbd71b5950f6e606e3747609f426d9f12db59e2123a7eb18fc9c583c2e157292788083a7d7b4135a69b6b3e2d93f771e2cda33a57d4992a323fd5050f5ecb943e7cda15a86014b0399180d0da5d75fba596892f02fed08d219dee6b26195afd4fa7fff999573fb7628af5c5e29fe788a09b52bd7cecffa003ed42ac9da63e22ea45a8097a579eb2b08e4d83e158579d31b509f61f31ff99028fe858a5422b83a5998bc106305be94da0cb0d6d816ffe2e162c7825", @typed={0x8, 0xe5, 0x0, 0x0, @pid=r7}]}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4}]}, 0x16f4}, 0x1, 0x0, 0x0, 0xc1}, 0x4040000) r15 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000004f40)='/proc/self/projid_map\x00', 0x40200, 0x0) ioctl$auto(r15, 0x7, r0) 2m32.794304479s ago: executing program 3 (id=3521): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) keyctl$auto(0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xa00002) pipe2$auto(&(0x7f0000000080), 0x9) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYBLOB="04030000", @ANYRES16=0x0, @ANYBLOB="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"], 0x304}, 0x1, 0x0, 0x0, 0x40014}, 0x48845) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) r2 = socketcall$auto(0x8000, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) 2m32.308698083s ago: executing program 3 (id=3522): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0xffffffff00000000, 0x400008, 0x100000001, 0x71b3, r2, 0x800008000) fcntl$auto_F_NOTIFY(r2, 0x402, 0x9000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r3, r4, 0x0, 0x3) 2m28.374834852s ago: executing program 3 (id=3526): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r5 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r5, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mq_timedsend$auto(r2, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x7f, 0x3ff, &(0x7f00000002c0)={0x6, 0x81}) bpf$auto(0x40, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0x3fc, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) 2m23.384734825s ago: executing program 6 (id=3504): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_ptdump_curknl_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) madvise$auto(0x0, 0x64, 0x9) madvise$auto(0x0, 0x200007, 0x19) 2m22.99090055s ago: executing program 6 (id=3531): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r4 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r4, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0x40, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0x3fc, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) 2m19.809879663s ago: executing program 5 (id=3534): r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) setresuid$auto(0x8, 0x8, 0x0) setfsuid$auto(0x0) fcntl$auto(r1, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) getsockopt$auto(r0, 0x101, 0x66, 0x0, &(0x7f0000000000)=0x3a8b) 2m18.839249308s ago: executing program 5 (id=3535): r0 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev$auto(r0, &(0x7f0000000bc0)={0x0, 0x81}, 0x3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/rose14/statistics/rx_length_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) write$auto_cachefiles_daemon_fops_internal(0xffffffffffffffff, &(0x7f0000000300)="a04f", 0x2) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000040)=0x5) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/stations/08:02:11:00:00:01/he_capa\x00', 0xa0080, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event\x00', 0x181b00, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) sendfile$auto(r3, r3, 0x0, 0x9) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0x2, 0x80802, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), r6) sendmsg$auto_NL80211_CMD_ADD_LINK(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="14850a00", @ANYRES16=r7, @ANYBLOB="00042abd7000fedbdf2594000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x44) r8 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r8, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) ioctl$auto_TIOCSTI2(r5, 0x5412, &(0x7f0000000080)="26e98d836039961c7fc0") sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) ioctl$auto(0xffffffffffffffff, 0x541b, 0x24) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) 2m17.387209926s ago: executing program 5 (id=3536): r0 = socket(0x2d, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x2901, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) r4 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_NOTIFY(r4, 0x402, 0x9000) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0xffffffd) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) shutdown$auto(0x200000003, 0x2) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r3) socket(0x1d, 0x3, 0x1) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000480)={r1, &(0x7f00000001c0)="40af199446b3591b12cea246b833faa593ccfb4ea8426c67957e9afd3cba8dc07f9611561a967b7d829040efec69d850d88cc224741631c1bfd89b60e0e23e6b5119d6c67866e88e47c18fa03940848ae06aa7aa153c9e2b3b20c446569e582cd9377cc8fbd9cd19c59ae5dfa432bd0b2abef211f32023fd29790076d94f9f9d6585573131fe9b43178abd37d24fec102205c51044713c4bd3a49c9cdef1946206a35f96f919ece77cc4b977b83a5b12b5209819fd", 0x0, &(0x7f0000000280)="694563197822af32e6c3976bbcb3fb2a14d954fdfee61bad271bc8f00bf617c7f09b8b622d8b413efcf02cc6946a2095cdf9fd1cf89c889c2739356f341f1b372a1e8f3852ed5dea1c31306f25e696c4e5c3ef09ff33675bf100f1728ce995a4a10e0520c3cc32327ff5f1ad1ad4095349957374a1f4270264bf808dd901fb563a87c5bf111ccb1bb8984d55aa7ea23799b2f3bcecf3cb82a79a02d57b466ce169e98891380fe6b6ac83", 0x0, &(0x7f0000000340)="fcc32559efdbbfcd457d93d5ab47abf5d5ab84bc1f79e042dbdd596d714d1866fecd831c3a1d0fcde682625aac18762cdb32e870beb3d5f8c9180d65084a49e1eccbfdf22a38435f64eb98df288a00abdd48a74622dcab720f56a949ec3c606dceda1f327e8c97e411673cb85ba8a2ef71f43110445c93e020dc9d4111646a10f2afe4e68314dfb7e773dddc0b723ecd029b4f20c795b28bd19d13b440a0b67c4f46391eaa53099134726e7c5488f22353dc63762fc8218b1331586685644c50fc2e31d8fded5d6f481aa6982d4e9f3c6854b73249f06e93c44fe5c1acb135", &(0x7f0000000440)=0x749}) sendmsg$auto_NL80211_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, r7, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x61}}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0xf9f}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x400}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x28, 0x84, 0x0, 0x1, [@generic="94e3c96bd2acf8abc54633240d4b346cbb1358129b767766179fc36595bb180669e7b12b"]}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_PMK={0x26, 0xfe, "66aba618403e0c2ea25c5f6d18736c2f95ba2f223167f3f97ab7ab5b1f2cb839212b"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x2008801) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) 2m16.141278445s ago: executing program 5 (id=3537): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) eventfd$auto(0x6) close_range$auto(r0, 0x8, 0x3ff) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r1 = open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) fstat$auto(r1, 0x0) openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x5, 0x4, 0x7) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x42800, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x22002, 0x0) r2 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mem\x00', 0x200, 0x0) read$auto_proc_mem_operations_base(r2, &(0x7f0000000200)=""/81, 0x51) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x2, 0x80002, 0x73) r4 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, 0x0, 0x80) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r4, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0xa, 0x0, 0x0, 0x0, 0x2) bpf$auto(0x10001, &(0x7f00000002c0)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x9, 0x9, 0xffffffffffffffff, @relative_fd, 0x7}, 0x43) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) 2m15.326905419s ago: executing program 35 (id=3525): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r5 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r5, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mq_timedsend$auto(r2, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x7f, 0x3ff, &(0x7f00000002c0)={0x6, 0x81}) bpf$auto(0x40, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0x3fc, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) 2m15.291250297s ago: executing program 5 (id=3539): r0 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/tracing_cpumask\x00', 0x90801, 0x0) mmap$auto(0x0, 0x0, 0x4000000000df, 0x40eb1, r0, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x80000, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x2001, 0x8) r4 = getuid() r5 = getegid() setregid$auto(r5, r5) statx$auto(r3, &(0x7f0000001100)='./file0\x00', 0x0, 0x10001, &(0x7f0000001140)={0x3, 0x6, 0x9, 0x8, r4, r5, 0x5, 0x1, 0x3, 0xffff, 0xb, 0xb6, {0x10, 0xfffffffa}, {0x1, 0x3}, {0x5, 0x8001}, {0x8, 0x101}, 0x7e05b10d, 0x7, 0x7b6, 0x1, 0xb, 0x7, 0xa, 0x2, 0x5, 0x3, 0x3, 0x1c5, [0x3ff, 0x2, 0x80000001, 0x8, 0x96, 0x0, 0x20, 0x0, 0x5]}) r6 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r6, &(0x7f0000000040)=""/4096, 0xfffffe82) futimesat$auto(0xffffffffffffffff, 0x0, &(0x7f0000001280)={0xa, 0x1000}) r7 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf250100000031208be8a5b4f52d83483e5c2d79da46e337d98473588f99774c7eb4868b973c1cef8187525db7b5b4e78678eb59512dbc7b11f4e29c29e3273c870a9555cf469e67e8886341e84d38edd658cf267f92e1e785a50fe500fbc125a65f8a4e5aa458a90f3d87fc71eca6309fc0ee1724cea121a7c96dbba43270448ec20cd22915c1cfa658b316e773d1eff747e371aace10d66450a3666b7be9754bde44d1"], 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$auto_ILA_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002c070003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x40008c4) semctl$auto(0x7, 0x2, 0x13, 0x1) mmap$auto(0x0, 0x3, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r8 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_notify$auto(r8, 0x0) ioctl$auto_UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x3, 0x8001}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(0xffffffffffffffff, 0x5501, 0x0) ioctl$auto_UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x22041, 0x0) 2m14.185263052s ago: executing program 5 (id=3540): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r5 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r5, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mq_timedsend$auto(r2, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x7f, 0x3ff, &(0x7f00000002c0)={0x6, 0x81}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0x40, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0x3fc, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) 2m12.273849937s ago: executing program 36 (id=3526): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r5 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r5, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mq_timedsend$auto(r2, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x7f, 0x3ff, &(0x7f00000002c0)={0x6, 0x81}) bpf$auto(0x40, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0x3fc, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) 2m7.794899775s ago: executing program 37 (id=3531): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r4 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r4, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0x40, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0x3fc, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) 2m3.242017902s ago: executing program 8 (id=3541): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7ff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) mmap$auto(0x0, 0xc5c, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r3 = bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x1, @prog_cnt=0x4, 0x0, 0x80000000, 0xc, 0xe, 0x5}, 0x7) fanotify_mark$auto(r1, 0x5, 0x7fff, 0xffffffffffffffff, &(0x7f0000000400)='./file0\x00') read$auto(r2, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fbdbdf2501000000040007800c0002000100000000040009800800010000040000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) r7 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002a00), r3) sendmsg$auto_IPVS_CMD_NEW_DEST(r5, &(0x7f0000002ac0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002a80)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00022bbd7000fbdbdf250557d322bc3b6703de78698305aecba3d9d15e8ebab770572236997582cb000000080005000b000000080004000800000008000500d5040000080004000000000008000400ffffffff"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) write$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffffff, &(0x7f0000000140)="d18073", 0x3) r8 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r8, 0xffffffffffdffe00, &(0x7f0000000140)) 2m2.460285299s ago: executing program 8 (id=3544): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0xffffffff00000000, 0x400008, 0x100000001, 0x71b3, r2, 0x800008000) fcntl$auto_F_NOTIFY(r2, 0x402, 0x9000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r3, r4, 0x0, 0x3) 2m0.752129493s ago: executing program 8 (id=3545): r0 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x40080, 0x0) waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x80, 0x1, @_rt={0x0, 0x0, @sival_int=0x1}}}, 0x0, &(0x7f0000000180)={{0x8, 0xfffffffeffffffff}, {0x80000001, 0xfffffffffffffffe}, 0x4, 0x4, 0x80, 0x100, 0x6, 0x7, 0x10001, 0xc, 0x2, 0x6, 0x0, 0x2, 0x5, 0x8}) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) sendfile$auto(r1, r1, 0x0, 0x800400000000ef0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYRES8=r0], 0x14}, 0x1, 0x0, 0x0, 0x80d1}, 0x24004000) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x30017, 0x8020000000a, 0x2, 0x5f, 0x20000000000803, 0xffffffffffffffff}, 0x6f0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) memfd_secret$auto(0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) write$auto(0x3, 0x0, 0xfffffdef) io_uring_setup$auto(0x6, 0x0) ioperm$auto(0x2, 0x7fc, 0x200000) ioperm$auto(0x80, 0x1180, 0x0) 1m59.298537074s ago: executing program 8 (id=3546): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r5 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r5, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mq_timedsend$auto(r2, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x7f, 0x3ff, &(0x7f00000002c0)={0x6, 0x81}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0x40, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0x3fc, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) 1m58.887918831s ago: executing program 38 (id=3540): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r5 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r5, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mq_timedsend$auto(r2, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x7f, 0x3ff, &(0x7f00000002c0)={0x6, 0x81}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0x40, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0x3fc, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) 1m46.810150788s ago: executing program 1 (id=3547): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r5 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r5, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mq_timedsend$auto(r2, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x7f, 0x3ff, &(0x7f00000002c0)={0x6, 0x81}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0x40, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0x3fc, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) 1m46.13266003s ago: executing program 7 (id=3558): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) mmap$auto(0x0, 0x28009, 0x4000000000df, 0xeb2, 0x401, 0x8000) r0 = io_uring_setup$auto(0x5, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xa) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/conf/geneve0/disable_policy\x00', 0x40180, 0x0) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0xa, 0x3, 0x13, 0xde) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) write$auto(r1, 0x0, 0x5) bind$auto(0xffffffffffffffff, &(0x7f0000000140)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x9) write$auto_console_fops_tty_io(r0, &(0x7f0000000240)="7dc6ce2fb970e055d984b785c8fae44ed395fb61c2890c95d5f54ac83ef1b41183fe89dc7b421cdb3942668d98e03b5a6e52535740029d585a28d264c3c15e8ad937660a46025c81f3bfcb3c825610a22ec9c6e42e5ba9cb2115ea2b203f9342c0f4f6dd0fb0aa50a739e5991db73191c4cf3762bba82ca6875ce10376868c932c7dccb897db9455075496a7559752896bad63224e4e2fe636d59c834e98eaa6ea127fa3360ac377765fff5a116415a76d2051f4645a464a92ce7ff13c57f404f05704f23c70527e3d53a12e8314aba47befd5bd0ec17ebe4d82", 0xda) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) sendmsg$auto_OVS_FLOW_CMD_SET(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x800000000000003) epoll_create$auto(0x1) capset$auto(0x0, 0x0) 1m43.753805639s ago: executing program 39 (id=3546): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r5 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r5, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mq_timedsend$auto(r2, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x7f, 0x3ff, &(0x7f00000002c0)={0x6, 0x81}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0x40, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0x3fc, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) 1m42.989867531s ago: executing program 7 (id=3563): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/query\x00', 0x40482, 0x0) r1 = socket(0x11, 0x80003, 0x300) recvmmsg$auto(r1, 0x0, 0x0, 0x9, &(0x7f00000007c0)={0x9, 0x5}) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/ip_mr_cache\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000140)=""/41, 0x29) mmap$auto(0x0, 0x2000c, 0x800000000de, 0xe31, 0x40000000000a5, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x10001) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000240)={0x0, 0x7}, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48442, 0x0) r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_RTC_AIE_ON(r5, 0x7001, 0x0) ptrace$auto_PTRACE_OLDSETOPTIONS(0x4212, 0x0, 0x7ffffffe, 0xf) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000440)="adcf5fa4e2abf25f84761928907ddcfd7863550e28ebcc19720a", 0x1a) r6 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card2\x00', 0x406002, 0x0) read$auto(r6, &(0x7f0000000480)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x893\x8dtK\f$\x7f\xc9mJ\xea\x1a\xe1\x99\xb0\xef\xb0\xff\xae\xcf\xe9\xc8R\x9cX\xd3Hg\xd00\xbdw\xf3f\r\x16\xb3O\x1c\x1a\xe9n\xdf\xa5}\xf9>\x12\x91q\xec#\xf8GbJ\xe6\x9a~\xed@\x86\xfc\xe7\x04\x16\x99c@t\xc2\x06\xc0\x17\xcdq\x979\x97\\\xba\x96\xd4\xf5\x7f\xbb\xbf\x82\x05\x1a\xc1\xd1\xd6T\xc4\xe0JV\x9e\xda#\xe9\x91\x9f)\xb7\xf7\xfb5\x90\xabG\x0f\xbc\xa3\xf6F\xb9\xf5\x1d\x84X\xb2\xf2\xf3Y\xe1\xa6T', 0x7) 1m41.584812861s ago: executing program 7 (id=3564): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x1, 0x20009, 0xdf, 0xebf, 0x40000000000a5, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r3, @ANYRESDEC=r1, @ANYRES16], 0x34}, 0x1, 0x0, 0x0, 0x44040}, 0x40c0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) io_uring_setup$auto(0xf0, &(0x7f0000000180)={0x6, 0x18, 0xd64, 0xc852, 0x6, 0x7, r0, [0x1, 0x401, 0x1000], {0x7, 0x5, 0x1, 0x4, 0x95, 0xf4c, 0x7fff, 0xfffffffb, 0x65f29f6d}, {0x3, 0xadc, 0x10000, 0x0, 0x5, 0xffffffff, 0x1000, 0x54f, 0x5}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r4 = socket(0xa, 0x3, 0xff) connect$auto(r4, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) write$auto_proc_mem_operations_base(0xffffffffffffffff, 0x0, 0x0) syz_clone3(0x0, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4003, 0x3, 0x4, 0x3, 0xffffffffffffffff, [0x3], {0x9, 0x6, 0xf, 0x29f, 0x100, 0xa, 0x101, 0x7, 0x2000}, {0x100, 0x0, 0x52, 0x5, 0x1, 0x6, 0x9, 0xbc, 0x100000000}}) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) futex_wake$auto(&(0x7f0000000000)="facff2b53ab3522cb329b5a87bdbc091f5a6ad597f2789e870d64db4cf6503135f5a750abc973965703b", 0xfffffffffffffff8, 0x7, 0x7f) mseal$auto(0x0, 0x7dda, 0x0) shmget$auto(0x8, 0x10563, 0x568d1af2) mmap$auto(0x0, 0x2000a, 0x10000000000e1, 0xeb2, 0x401, 0x8000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) rseq$auto(0x0, 0x1a, 0xffff, 0x0) 1m38.271002907s ago: executing program 7 (id=3567): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xc642, 0x0) r0 = getsockopt$auto(0x3, 0x6, 0xb, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket(0x2, 0x2, 0x1) cachestat$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x401, 0x428a}, 0x0, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000001240)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x3ff}, 0xc, &(0x7f0000001200)={&(0x7f0000001280)=ANY=[@ANYBLOB="0c0100003fbdf9302a07948fe781ebfac38e71bd0047f72199c94d", @ANYRES16=r2, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x20000000}, 0x402c011) close_range$auto(r1, 0xffffffffffffffff, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x1b, r1, 0x10000}, 0x10) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0xf7f, 0x81}, 0x10, 0x0, 0x0, 0x8) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/vulnerabilities/gather_data_sampling\x00', 0xc2700, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/4096, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x2, 0x0) r4 = pidfd_open$auto(0x1, 0x0) setns(r4, 0x2000000) ioctl$auto_VHOST_SET_VRING_CALL2(r4, 0x4008af21, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r6, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) close_range$auto(0x2, 0x8, 0x0) 1m35.29358443s ago: executing program 7 (id=3569): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = prctl$auto(0x2, 0xfffffffffffffc00, 0x0, 0x1, 0x0) openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, 0x0, 0x642, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x101c82, 0x0) futex$auto(0xfffffffffffffffd, 0x9, 0x5, 0x0, 0x0, 0x1000) write$auto(r2, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto(0xffffffffffffffff, 0x455, r2) rseq$auto(0x0, 0x9, 0xdf2, 0x7) pidfd_open$auto(0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd0\x00', 0x208000, 0x0) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x69a5, 0xa800000000000000) sysfs$auto(0x2, 0x41, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r0, 0x4, 0x0, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x4000003, 0xe, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x9, 0x5, 0x6, 0x7, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x6, 0x0, 0x89ac, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x1fe, 0x81) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYRESOCT=r1, @ANYRES16=r3, @ANYBLOB="000226bd7000fedbdf25030000000600060009000000060007000080000008000200", @ANYBLOB="3e5224510d86b543772d40970b9844d0c345bbac52ef7729df9f001c880c10bd10ae3275e487a973d72189769ca7de7fe4492c3229387153b6c1eba7091a3e3ceb89211e2c0239e6786549e47ee5d02cbffc460acd27abf073c7f6ed457bc3230dcc31a39dab720ae89974927998f890c9419d45caf95856ad1cb3aa7402", @ANYBLOB="0a00050000000000000000000a0005000180c205000000000a00010000000000000000000800040014fcff0008000300050000000a00"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40400c4) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x7) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) mount$auto(&(0x7f0000000000), &(0x7f0000000080)='}[,&*}\x00', 0x0, 0x7fffffff, 0x0) ioctl$auto_RTC_ALM_SET(r3, 0x40247007, &(0x7f00000000c0)={0xb, 0xfffff69a, 0x8, 0x3, 0x6d8efb41, 0xffffffff, 0x0, 0x0, 0x80}) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) 1m34.08238528s ago: executing program 7 (id=3571): close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x1a2) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, &(0x7f0000000080)={0x94}) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae9c, &(0x7f0000000280)={0x8}) 1m31.542951345s ago: executing program 40 (id=3547): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, r1, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) r5 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/self/uid_map\x00', 0x8006, 0x0) write$auto_proc_uid_map_operations_base(r5, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf2502000000810004006e66736600d8efe42d132b72f30c54315aa74a5b8103cf2ddf901f8fc81365e252374483326ace7da356b7a16f5ce613bc0ce3aeb87ed3d22b4a27c3ecc90c70c861befe60a7a9414b446427a001f61379e8caf4519e032a5dda1e1174e2d575772b93fc046cd3a674866b80d91473ece248c03d28f9398a63a785998700000008000300850000000800010002000000"], 0xa8}}, 0x4000) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x404001, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mq_timedsend$auto(r2, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x7f, 0x3ff, &(0x7f00000002c0)={0x6, 0x81}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto(0x40, &(0x7f00000001c0)=@query={@target_fd, 0x8, 0x3, 0x5, 0xff, @count=0x3fc, 0x0, 0x5, 0x80000000000006, 0xd9, 0xffffffff}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000880}, 0x20008000) 1m18.747328509s ago: executing program 41 (id=3571): close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x1a2) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, &(0x7f0000000080)={0x94}) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae9c, &(0x7f0000000280)={0x8}) 15.615560155s ago: executing program 9 (id=3697): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x2008000) sysfs$auto(0x2, 0x17, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0xffffffffffffffff, 0xefc5, 0x8004, 0x8001) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x4) 14.926760714s ago: executing program 9 (id=3700): r0 = socket(0x2d, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x2901, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) r4 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_NOTIFY(r4, 0x402, 0x9000) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0xffffffd) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) shutdown$auto(0x200000003, 0x2) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r3) socket(0x1d, 0x3, 0x1) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000480)={r1, &(0x7f00000001c0)="40af199446b3591b12cea246b833faa593ccfb4ea8426c67957e9afd3cba8dc07f9611561a967b7d829040efec69d850d88cc224741631c1bfd89b60e0e23e6b5119d6c67866e88e47c18fa03940848ae06aa7aa153c9e2b3b20c446569e582cd9377cc8fbd9cd19c59ae5dfa432bd0b2abef211f32023fd29790076d94f9f9d6585573131fe9b43178abd37d24fec102205c51044713c4bd3a49c9cdef1946206a35f96f919ece77cc4b977b83a5b12b5209819fd", 0x0, &(0x7f0000000280)="694563197822af32e6c3976bbcb3fb2a14d954fdfee61bad271bc8f00bf617c7f09b8b622d8b413efcf02cc6946a2095cdf9fd1cf89c889c2739356f341f1b372a1e8f3852ed5dea1c31306f25e696c4e5c3ef09ff33675bf100f1728ce995a4a10e0520c3cc32327ff5f1ad1ad4095349957374a1f4270264bf808dd901fb563a87c5bf111ccb1bb8984d55aa7ea23799b2f3bcecf3cb82a79a02d57b466ce169e98891380fe6b6ac83", 0x0, &(0x7f0000000340)="fcc32559efdbbfcd457d93d5ab47abf5d5ab84bc1f79e042dbdd596d714d1866fecd831c3a1d0fcde682625aac18762cdb32e870beb3d5f8c9180d65084a49e1eccbfdf22a38435f64eb98df288a00abdd48a74622dcab720f56a949ec3c606dceda1f327e8c97e411673cb85ba8a2ef71f43110445c93e020dc9d4111646a10f2afe4e68314dfb7e773dddc0b723ecd029b4f20c795b28bd19d13b440a0b67c4f46391eaa53099134726e7c5488f22353dc63762fc8218b1331586685644c50fc2e31d8fded5d6f481aa6982d4e9f3c6854b73249f06e93c44fe5c1acb135", &(0x7f0000000440)=0x749}) sendmsg$auto_NL80211_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa0, r7, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x61}}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0xf9f}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x400}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x28, 0x84, 0x0, 0x1, [@generic="94e3c96bd2acf8abc54633240d4b346cbb1358129b767766179fc36595bb180669e7b12b"]}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_PMK={0x26, 0xfe, "66aba618403e0c2ea25c5f6d18736c2f95ba2f223167f3f97ab7ab5b1f2cb839212b"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x2008801) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) 11.816350292s ago: executing program 9 (id=3707): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) fsconfig$auto_FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000300)='\v\'\bn\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x1e7\xbb\xedO#\x14mC\x97\x06\xd9bZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\xc6\xc0\x8b\xc0CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xed<\x86[c4%\xa3\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6\b\xe5\xaaJ+\x02\x9b#\xa9\x9b\x17\x82\xd7\xee\xd1\xbf2\x03\x00\x00\x00\x00\x00\x00\x00B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\x00\x00\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\xb2\x1d\xb3\xef#\xcb}b\x90\xafR\xf5\x8cg\x95A\x89\x8d\x9a\xfcV\x9bm\xd4\x82\x7f9\x12\x98\x1c\x8e\x1f\xdc\xe5Y\x7f\xe8\xe1g%\xb8\xf9b!\xc8\xa0\xf7\x06\xbb\xdf\x1d\xfb\x00\x979\x8e\xd0AP\xbf\x1fM\x1fd~\xeeS^8v\x80\x1b\xb1I\xb1\xa4\x89\xc7\x9d\xf2P\x04\x99N{\x9a\xfa\xf3\xcb\xc3Bx\xb5\xb8*\xa0-\xda\x84\xc5S\xe2\xc6\x92/\xed\xc2\xceK\xad\x00\x00*)Hh\x8d\x06cQ\xf1\x9d\xad\r}\x15e\x18\x06\xe3\xd2\xe4Q', &(0x7f0000000280), 0x5) 10.588805334s ago: executing program 9 (id=3708): r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10000000043, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) vmsplice$auto(r0, &(0x7f0000000000)={&(0x7f0000000100)="40af61c5eeb4c600157227ffe84a39d6648efe85e5515ab2db50e3b05758a1215dcc464b73e6c843ca060ec8b777dffb9aa60f3ec33dbfb98ed4b3092389282855652aa38b4a7f5e8aa5834f34e209a282f1538e8182a8266a18e07d94016e54398f755117ba99f489c9248dc4e5d4d985d1bb68c3b2a44491e6055ba6a9d23ab3ae99b29979c3565a5da868970434449117c3b0d9f7c65d1c4124d6116f0c7f4bef724ff680a614805b13196b0c3551e21931a1c8792729d2eec51fe9bf4a4ec555219a1639c2d867ff1c3d5263ebf76ebcb016ce128e", 0x5}, 0x15, 0x5) connect$auto(0x3, &(0x7f0000000200)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x18b800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x11, 0x3, 0x2) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) socket(0x11, 0x2, 0x73) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) fstat$auto(0xffffffffffffffff, 0x0) fanotify_init$auto(0x5, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x40401, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TCFLSH2(r2, 0x5411, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) close_range$auto(0x2, r1, 0x0) socket(0x10, 0x2, 0x4) 9.710240662s ago: executing program 9 (id=3711): openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec7\x00', 0x80001, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000040)=0xb0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r1, 0x28000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0xffffffffffffffff, 0x8, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) sendfile$auto(r2, 0xffffffffffffffff, 0x0, 0x48) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) close_range$auto(0x2, 0x8, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x82942, 0x0) write$auto(0x3, 0x0, 0x7) prctl$auto(0x3e, 0xa, r0, 0x1, 0x0) mmap$auto(0x0, 0x25, 0xcfdb, 0xba79, 0xfffffffffffffffa, 0x3) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) msgrcv$auto(0x0, 0x0, 0x4, 0x9, 0x3) msgctl$auto(0x0, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$auto(0x3, 0x10f, 0x82, 0x0, 0x14) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) 9.65960592s ago: executing program 0 (id=3712): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0xc0a85322, 0x38) r0 = getpgid(0xffffffffffffffff) rt_sigqueueinfo$auto_SIGCONT(r0, 0x12, &(0x7f0000000140)={@siginfo_0_0={0x8, 0x0, 0x4, @_sigsys={&(0x7f00000000c0)="608440e307e70cdb98456120661775cc030437b598d5b6d0837ad6ec6d55fd4cdd06a0412eee0e2f98f70c2f586c5a6c86bd19fd1560e2f1d4210896b0f23e876cfbb7ec31bd2c98f71372fe6042b72c974b5c9351b9b372262cf457b5301789f2c294ba53730e26c7f0e43a2b0ee731b2", 0x4, 0xffffffff}}}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop10/queue/add_random\x00', 0x80302, 0x0) writev$auto(r1, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x4) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) socket(0x2b, 0x5, 0xfffffffd) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x103080, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x400000f1, 0x400, 0x718c1257}]}) 7.098446783s ago: executing program 0 (id=3719): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x101202, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x5, 0x801, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r3 = socket(0x23, 0x2, 0x0) sendto$auto(r3, 0x0, 0x8000000008000, 0x0, &(0x7f0000000100)=@in={0x23, 0x0, @local}, 0x80) rseq$auto(&(0x7f00000004c0)={0x12, 0x401, 0xd, 0x6, 0xfffffeff, 0x2}, 0x8002, 0x0, 0x8) finit_module$auto(r0, &(0x7f00000001c0)='\x00', 0x4) ioctl$auto_USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x80802, 0x0) ioctl$auto_SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f0000000240)=0x776) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, 0x0, 0x3c3501, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) connect$auto(0xffffffffffffffff, &(0x7f0000000200)=@generic={0x2, "58d4b123b1b80936e4b0a0a0c8f2"}, 0x80000055) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) 6.431919682s ago: executing program 2 (id=3720): r0 = socket(0x29, 0x800, 0x0) (async, rerun: 32) setsockopt$auto(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x4) (rerun: 32) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)) fcntl$auto(r1, 0x402, 0x2) (async, rerun: 64) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40302, 0x0) (async, rerun: 64) close_range$auto(0x2, 0xa, 0x0) (async) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x6, 0x80dc, 0xeb1, 0x401, 0x8006) (async) sendmsg$auto_TCP_METRICS_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) (async) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) (async, rerun: 64) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket(0x25, 0x5, 0x2) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x1000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) io_uring_setup$auto(0x946, 0x0) (async) r3 = getpid() rt_sigqueueinfo$auto_SIGCONT(r3, 0x12, &(0x7f00000001c0)={@_si_pad}) (async) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0) (async, rerun: 32) open(0x0, 0x161342, 0x130) (async, rerun: 32) write$auto(0x3, 0x0, 0x7fffffff) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_vdpa(0x0, 0xffffffffffffffff) (async) connect$auto(0x3, 0x0, 0x55) 5.97557664s ago: executing program 2 (id=3721): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r1 = socket(0x2, 0x1, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e23}, 0x67) ioctl$auto_BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000180)={@raw=0x6, 0x5, 0x2, @unused, @name="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"}) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x412, 0x0, 0x9, 0x0, 0x2, 0xb}, 0x800009}, 0x4, 0x20000000) (async) write$auto(r0, &(0x7f0000000080)='/dev/audio\x00', 0x7ff) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) (async) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) select$auto(0x5, 0x0, &(0x7f0000000100)={[0x8, 0x6, 0x7, 0x8000, 0x5, 0x4000000, 0x5, 0x25991f93, 0xd, 0x1000, 0xfb, 0x1, 0x8, 0x4f, 0x96, 0x100]}, 0x0, 0x0) 5.968189253s ago: executing program 4 (id=3722): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) listen$auto(0x3, 0x81) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xc4f, 0x4958, 0x2, 0x8002) close_range$auto(0x2, 0x8, 0x7ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x4840) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffffffffffd80, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="72010000", @ANYRES64=r0], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x2) socket(0x2d, 0x2, 0x0) epoll_create$auto(0x2) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdd, 0x9b75, 0x2, 0x8000) clock_settime$auto(0x14, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000002c0)={0x9, &(0x7f0000000000)={0x50, 0xf2, 0xb0}}) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) io_uring_setup$auto(0x2, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) 5.166523217s ago: executing program 2 (id=3723): socket(0xe, 0x2, 0x0) r0 = openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f000000b000), 0x80, 0x0) pread64$auto(r0, &(0x7f000000b040)='\x00', 0x20000000007, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptypd\x00', 0x141000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) connect$auto(0x3, 0x0, 0x50) io_uring_enter$auto(0xffffffffffffffff, 0x9, 0x820e, 0x6, 0x0, 0x18) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x0) socket(0x10, 0x2, 0xc) write$auto(0xffffffffffffffff, 0x0, 0xfdef) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/if_inet6\x00', 0x181800, 0x0) read$auto(0x3, 0x0, 0xfdef) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae91, &(0x7f00000000c0)={0x3}) getsockopt$auto(0x3, 0x11d, 0xb, 0x0, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x4040, 0x0) fadvise64$auto(r3, 0x7fffffffffffffff, 0x400000040000005, 0x4) getpgrp(0x0) setfsuid$auto(0xee00) r4 = socket(0x29, 0x2, 0x0) ioctl$auto(r4, 0x8971, 0x24) mmap$auto(0x100000000, 0x4, 0xce, 0x7fffffff, r4, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000003f00)='/sys/devices/virtual/net/bond0/bonding/ad_partner_key\x00', 0x60400, 0x0) 4.615971987s ago: executing program 4 (id=3724): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop6/queue/zoned\x00', 0x80140, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000080)=""/200, 0xc8) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/loop8/poll_stat\x00', 0x88002, 0x0) r1 = socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000000)=0xfb) pread64$auto(r1, 0x0, 0x5000f429, 0x5) 4.413945837s ago: executing program 4 (id=3725): mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) symlink$auto(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008011, 0x4, 0x0) ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(r1, 0xc038586b, &(0x7f0000000340)={r1, &(0x7f0000000180)="bd93e934e638ddd084b8ceb031a2841e9ae65fc618f86e7099cda26d3d1acf0e4a22", 0x6, &(0x7f00000001c0)="130ab48bb47ede4df9cf3a8e4a6844f3b42d5e6f5066fdf293a99f413245714039343d90739351978fa495b54f0a1b94a39d3eb76b6459b6f34bee2a18f1f2812d454cfd9effbe7bf509df04b3201ca2959801eaf1615cc86d3351f9eb48ee1b923df8d1f1cb70db0d480a52e52b022224adf0cd727a44a97fb421147e06ccb78dab274cad515d269c4086290f5b0771367e72331b842c7c181240a6f07745c542ffae4536bacc4aa8423e93dcdb0d637b53b9b0d5b35951202d78be21789f40a6993b49f7533e16426b0fdddafdf99baa458af39a1c1ca341bce025cb", 0x9, &(0x7f00000002c0)="66b2f0a17d26c846059e23c907ccba492cbd9414d5d418104892ce40ec4d289a7a16f4ec9156416cd756d3eb97de40", &(0x7f0000000300)=0x2}) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008012, 0x1000000004, 0x0) landlock_add_rule$auto_LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000080)="357fcdd71d5fca32bafb9629965c308163f41f9a432741470878d9b0958afaf122a1b7fcc8d032020e276c1bbacb72f0994046b090a983aa5a1d359b9c6ec965926fdd34f9507831509ce0ed0e50980cc4087cb15ebdb8966bfc40c23f34d35901211ae80699d7f66f7a9c", 0x7ff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r2, &(0x7f000000a5c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="14080000", @ANYRES16=r3, @ANYBLOB="01002ebd7000ffdbdf251b000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24008880) ioctl$auto_CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0xa, 0x3, 0x3a) bind$auto(r4, &(0x7f0000000040)=@generic={0xa, "2c551d000000ff8000"}, 0x66) getsockopt$auto_SO_REUSEPORT(0xffffffffffffffff, 0x6, 0xf, &(0x7f0000000000)='/dev/cec12\x00', &(0x7f0000000040)=0x6) 3.900902344s ago: executing program 2 (id=3726): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x2008, 0x0) r0 = socket(0x1d, 0x2, 0x6) setsockopt$auto(r0, 0x6a, 0x5, 0x0, 0x3) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xb, 0x800, 0x84) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x101042, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x181000, 0x0) r2 = io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x5, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) socket(0x848000000015, 0x5, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfffffdf1) ioctl$auto(0x3, 0x89ed, 0xfffffffffffff4e0) fsopen$auto(0x0, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x16a41, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_netdev(0x0, r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) msgctl$auto_MSG_STAT_ANY(0x1, 0xd, &(0x7f0000000380)={{0xfffffff9, 0xee01, 0xffffffffffffffff, 0xfffffffe, 0x1, 0xdbf, 0x5}, &(0x7f0000000300)=0x8, 0x0, 0x8000, 0x6, 0x8, 0xfffffffffffffffb, 0x5, 0x7, 0x3, 0x100}) sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x4) write$auto_tomoyo_operations_securityfs_if(r1, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) 3.330204936s ago: executing program 0 (id=3727): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r0, 0x0, 0x800) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0) sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, 0x0, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r5, 0x7f, 0x99, 0x8, 0x1, @relative_fd, 0xd}, 0x92) sendmsg$auto_NL80211_CMD_SET_PMK(r0, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0xec, r1, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_INDOOR={0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffff9}, @NL80211_ATTR_VENDOR_DATA={0xc1, 0xc5, "78ea464cee324badaa84fbbec405f78e57f4df8b2af58a6b283cc7ee82f54b8821d0706bec38f0a8d0f46317ac78e2c59a6134ded58e46d78dbd2b7b552ea52b9e7bb91aac9006642b69568c463349a051829e8afa8a37fb37a04a4622842bcadf8eedb4649306938bd20289f65cdb4a8e91a2136a12bf3e550e0c76dcc686e3e5c4cc45683c8b67509c6d8787db1a0bf63ffb95b266a9392cfa80f562a2806e8d383ec5ed6ac81650d32da074546acf923cc140ff09da6ac30416a058"}]}, 0xec}}, 0x24000084) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x8000) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=' .\x00\x00', @ANYRES16=r3, @ANYBLOB="01002ebd5100fbcbdf25010012ea03000180072e01805a848d4efe0a6e3148821026"], 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) syz_clone(0x5000400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.775780297s ago: executing program 9 (id=3728): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0xffffffff00000000, 0x400008, 0x100000001, 0x71b3, r2, 0x800008000) fcntl$auto_F_NOTIFY(r2, 0x402, 0x9000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r3, r4, 0x0, 0x3) 2.649417647s ago: executing program 2 (id=3729): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x2, 0x7352, 0x34, 0x65f, 0x7fffffff, 0x2, 0x3, 0x20000002, 0x8, 0x3, 0x4, 0x4, 0xb4, 0x9, 0xd, 0x87, 0x80, 0x4, 0x3, 0x7, 0x1002001, 0x203, 0x8, 0x84, 0x0, 0x0, 0x0, 0x10000000, 0x0, [0x98bb, 0x20000000000, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6fe, 0x80000000, 0x0, 0x0, 0x0, 0x244d, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6]}, 0x3, 0xd) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8ef, 0x0, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x60, r5, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x2, 0xfffffffffffffffd, 0x0, 0x0, 0x300000, 0x8, 0xef, 0x9}}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x3ff}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x40881) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/ram2/events_async\x00', 0x88800, 0x0) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/kernel/timer_migration\x00', 0x242, 0x0) sendfile$auto(r7, r6, 0x0, 0x7fffe000) sendmsg$auto_TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000000480)={0x18, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x404c045}, 0x0) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000073, 0x400, 0x4}]}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x101b00, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x40001, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) 2.497308897s ago: executing program 4 (id=3730): r0 = socket(0x2, 0x1, 0x104) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) sysfs$auto(0x2, 0x6, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/ip6_tables_matches\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000180)=""/190, 0xbe) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) getpid() r2 = fsmount$auto(0xffffffffffffffff, 0x9, 0x200002) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty14\x00', 0x101000, 0x0) ioctl$auto_TCSBRKP2(r3, 0x5425, 0x0) r4 = ioctl$auto_TUNGETVNETHDRSZ2(r2, 0x800454d7, &(0x7f0000000000)=0x7) ioctl$auto_SNDRV_PCM_IOCTL_STATUS_EXT642(r4, 0xc0984124, &(0x7f00000000c0)={0x6, "d7a92b89", 0xffffffffffffffff, 0x1, 0x81, 0x31, 0x8, 0x8, 0x5, 0x0, 0x4, 0x0, 0x9, 0x8, 0x1, 0x1, 0x3ff, 0x8000, 0x9, "e16985b65a73ed461dd39be639c71e6eff3591dc"}) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0xfffffff7fffffffc, 0x4020009, 0x6, 0x11, 0xffffffffffffffff, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NCSI_CMD_SEND_CMD(r5, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x5e8, 0x0, 0x200, 0x0, 0x25dfdbfe, {}, [@NCSI_ATTR_DATA={0x5d2, 0x5, "86b3a829151ca54214cb45adf6669e21cc8ecde3fe10823d175c6d3bc9a6a9eea30d156aa5d7610d82f1a76d3dac0c31f2f082d50b2efd40cde996c4d0c25d9a99d01d701fbeb9cbf5f6d7b0ba64387e9739158cc57fd770693d64c901cbf12d7062e07d446c86aaecdae41386ab9085bb43dd116cea4656614ecb23c017adfa186aa4cd80ae3098d030f9fadcd6414ca343ce49613db482c789b56d4bcff036cf42b20d911fab17884e55f71c23337db70e058b4e353de6bd957c49f250e4de6f284317fd8d363f5f9af6189cdab70bbef8fed1ce5fec38b030d716e7323a622eac6dfb85378f3475a7302d9f1ba0edf845f68183c0cbbc9a33affded35f08577af904c936677b058c465785c4bdf941d6fcb7a1948a865bcc06e06c177b244fbe152f088b288b78459cfc89dc77b0d12daf2241743425accb29d9ca0d92d2df11fcbc72694f11caf95e6c6e1232deb44de0e5d847d4032ee89c1bff698424fb2f30f287f8c9972384dc2847615d51df59efe0d3156b505b2b1a25dcf7906d2231ca22439c1381b2b44ba4a8388dfc9cb1077ff5be35528e9356474283700b579c26896a3e30a0f0c1fb91a458e89ef06bcdf46ea638c63211e8ab096d6f3241780c9447f6699ed045548812defd1f424fa0e29f42aecf1da914df3f8158293ca79f0132094fc0a6af17d955a0dc67ca69adfc1397e78a37b2170d34dac5451bf93eb90022e761990ab187a4f587fc713f6539e2aade5dcf5268e5c825bcee153894e9a16ec3f304eeff5af5b89e798863d7980aab187374fe454af03880c23f92bfa4220fc402eb0a5b3554a07bedd3c9b9e8de17484cbdee9ac1b421fa5b49eed08237929bf55fd3436b82695b90ede80d70d3902c9b1cfa5888b2b1f03792a0a08a4e4936337f6591fe00adcaaf9c2a5f1ae5237010604c1088b0ce123799ae98096be14af4b1ec1e61fd860b698ee8e4f2e167b54744c71e9bae536bcfa52e63a24b3700e783e0632115c275cae67f491362fc5bcfa3bcf790998dae9e95fc8c88fd724c3bc21d38b29c93a6225d699c35251d416c4941f5fc8644b4495be59a770e1e59601f2d0198cf7802a0b60c41e3ac53f1534ae0cf50bca3436eff0560d512b60ec4577ec3e2a363a678dd9515a1cfa0324f0612605dde196ec1545f438ffb83ae5fddf8011f3cba4760568f0ad7d02ecb8db6260a2a08a3b8c358dcde831f45825dd904462096622b4c3246a67226c228e7c156c3bf82fd8d9b5f0317160c0c1b94e0a9e6e2653a62d15531c2e20e727ee30e993f5bfb9380a9c188e6c18434453b09beb88eaaf3acc6857a8460414ff469ed4df81dcb71bb0698bfdb7cebaafee8dc10ef560d0bb54b19950f46b7a6875c02ae064028a62f97fca0a18cbf768e1e83ff51afd9277a4b5fad6c823732d4dadf28547b460caefdce83f2f66365ce323e34d3aa457ee3b4b529ea091d46e49b71f7d80b063eaa4418c29099da05e2c198af78d22fa9c295aeafe80027c1751c7d6c4df3740b9cd3207ca657ab1f60e8fe1dfbb60eba71293b024b6727d30de611e4f545ea020f535985480afab790549877bdaf2f90a02a02ce16b12deda351a041fa0e5653503074c72057e0eac52dd6b0b1b9681167160f26ab11b1147f809325f4e72af60c926414d5e4f1c28569ed59de940c678164737b61c4e8dc70f329a4806cb0954ee6b555fcbc02ed45444d30a97a77171298fe9620bf0d08461bd334a9a217fd3347fbca2f4d9ffdd9f6c1a4ac16ede345bbc25bcb96b02f96ee5aa488126deb5f03e9e7a6d873823786b6ed9a420141763dd6a376e46e18bd03094cd081fdb13e98d318cc25302e2e787be528eddd7bf990c361d6038635c5968e8030026fde4868823b28e57273fd4739b62eea971a3dfa3cbca1cb64ec8bba2ae41a820ac2f3cd1ec579497571331d13138dc4bdeca2c55fab78e46efc0adb4557c87a5262ff9f2f63a329673cb1fac06424ad71fccc3dd59a68f0081339cb40471e8fc2c6e2cb6542a696956f744d88943531a1626663217eecb613bd504b9ff773e737b53ada31420e810a7b2a4a076fd526dedbd"}]}, 0x5e8}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3129efd0c53f07dc6401a418aa8231a1cdd1c570440d45d4250d6319f56585a9a33e10ef85cf56a6229644b4393005cb1cb45a3ab88b376ce52606d0c2a0498774fcf93d9189feb32a9a020039cef3fa8855504bae052f98a9d803ecff8add21c5095f42f6aec1fa00d965ba8fe0f164d30f9fa0e6c90455d8243ceacc97bc10c6f68d350865f40455f99154aaa07420bc901fbf5a82181dd0", @ANYBLOB="1a00", @ANYRES16], 0x1ac}}, 0x20008800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r5, &(0x7f0000000280)={{0x0, 0xffffffff, &(0x7f0000000080)={&(0x7f0000000480)="016ea15fcb6d1f473afc4a538013717e5e33f1a89cbc3b0747a9390d8692732551b597597f5826e035b14ad2e2ad0d3bf73f65ef914f65b8a8ede4b2f1e69bbfc72bb9ed09d60ba0f898cda43b6602b39d0a686370cfd89d475924ed7c431e91ff81a314a45d6268eaa23e441663569ce918d2f0328cbf7a14804ba5d915c323a5b477344741735b62fed4642336e40ead9d6bf8bf30abf5329b8120c02cdb445188c31e6fc7fd301c526b8daa443d40135e81782293cae746dddd17345c", 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x5, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(r4, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x0, 0xfffffffa, 0x7, 0xc1b8, 0x9, r2, 0x1, "2d5eba9a31b2fddf79a8dbbebbf7154e", 0x0, r3, 0x5, 0x1, 0x3, 0x5, 0xffffffffffffffff, r6}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) 2.141671096s ago: executing program 0 (id=3731): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) fsconfig$auto_FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000300)='\v\'\bn\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x1e7\xbb\xedO#\x14mC\x97\x06\xd9bZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\xc6\xc0\x8b\xc0CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xed<\x86[c4%\xa3\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6\b\xe5\xaaJ+\x02\x9b#\xa9\x9b\x17\x82\xd7\xee\xd1\xbf2\x03\x00\x00\x00\x00\x00\x00\x00B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\x00\x00\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\xb2\x1d\xb3\xef#\xcb}b\x90\xafR\xf5\x8cg\x95A\x89\x8d\x9a\xfcV\x9bm\xd4\x82\x7f9\x12\x98\x1c\x8e\x1f\xdc\xe5Y\x7f\xe8\xe1g%\xb8\xf9b!\xc8\xa0\xf7\x06\xbb\xdf\x1d\xfb\x00\x979\x8e\xd0AP\xbf\x1fM\x1fd~\xeeS^8v\x80\x1b\xb1I\xb1\xa4\x89\xc7\x9d\xf2P\x04\x99N{\x9a\xfa\xf3\xcb\xc3Bx\xb5\xb8*\xa0-\xda\x84\xc5S\xe2\xc6\x92/\xed\xc2\xceK\xad\x00\x00*)Hh\x8d\x06cQ\xf1\x9d\xad\r}\x15e\x18\x06\xe3\xd2\xe4Q', &(0x7f0000000280), 0x5) 1.772900622s ago: executing program 4 (id=3732): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nbd3/queue/nr_requests\x00', 0x143262, 0x0) statmount$auto(0x0, &(0x7f00000013c0)={0x7, 0x2, 0x6, 0x7, 0x84, 0x7, 0x1ffde, 0x820c, 0x6, 0x2, 0x9, 0x2, 0x6, 0x4, 0xfffffffeffffffff, 0xffff, 0x589bbfc3, 0x10000, 0x80, 0x8, 0x2d7d01bf, 0x7, 0x0, 0x9, 0x4, 0x3, 0x6, 0xff, 0x0, 0x4, 0xffffffe0, [0x4000000000004, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x8, 0xfffffffffffffffc, 0x0, 0x3a, 0x80000001, 0xffffffffffffffff, 0x80000, 0x80000001, 0x0, 0x20000000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x45, 0x7, 0x0, 0xa9e9, 0x8000000000, 0x400000003, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7ff, 0x4, 0x35, 0x0, 0x2, 0x2, 0x1, 0x0, 0x1000000000001000]}, 0x1fe, 0x200a) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0x8}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) writev$auto(r0, &(0x7f0000000340)={&(0x7f00000002c0), 0xda7e}, 0x9) setitimer$auto_ITIMER_REAL(0x0, &(0x7f0000000180)={{0x7, 0x6}, {0x51, 0xd8bd}}, 0x0) mmap$auto(0x0, 0x4000c, 0x6, 0x9b72, 0x7, 0x3) sysfs$auto(0x2, 0x100000000000038, 0x0) r1 = signalfd$auto(0xffffffffffffffff, 0x0, 0x8) timer_create$auto(0x3, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000a40)=""/4083, 0xff3) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x0, 0x400}, {0x0, 0x87}}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = waitid$auto(0x2, r1, &(0x7f0000000280)={@_si_pad}, 0x5, &(0x7f0000000380)={{0x1}, {0xc0000000000000, 0x97}, 0x5, 0x58, 0x9, 0x2, 0x100000000, 0x3, 0x1, 0x2, 0x9, 0x2, 0x1, 0xb61e, 0x6, 0x4}) move_pages$auto(r2, 0x8, &(0x7f0000000140)=&(0x7f0000000480)="6e3b1c322fbf9657dd54452d1b991e377ad042e0c457663ebc5815a9851e71fb3f3617f039737f388d6f6487c321000000009b1296bd2b53bb5a80b7e0d4322c7eafc476ba4a6c67b8d6fc68711d8612c1836211503281a2f7499fae84ce37cdf4277f866a74f9879b1ee89e6b56554139020b399fc8c879573c13c98c6ab42ffda4c35dc46737f7793b", &(0x7f00000001c0)=0x9, &(0x7f0000000300)=0x5, 0x2) close_range$auto(0x2, 0x8, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r4, 0x0, 0x20) writev$auto(r3, &(0x7f0000000200)={0x0, 0x3}, 0x3) bind$auto(0x3, 0x0, 0x9) close_range$auto(0x2, 0xa, 0x0) 1.359537929s ago: executing program 0 (id=3733): r0 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/tracing_cpumask\x00', 0x90801, 0x0) mmap$auto(0x0, 0x0, 0x4000000000df, 0x40eb1, r0, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x80000, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x2001, 0x8) r3 = getuid() r4 = getegid() setregid$auto(r4, r4) statx$auto(r2, &(0x7f0000001100)='./file0\x00', 0x0, 0x10001, &(0x7f0000001140)={0x3, 0x6, 0x9, 0x8, r3, r4, 0x5, 0x1, 0x3, 0xffff, 0xb, 0xb6, {0x10, 0xfffffffa}, {0x1, 0x3}, {0x5, 0x8001}, {0x8, 0x101}, 0x7e05b10d, 0x7, 0x7b6, 0x1, 0xb, 0x7, 0xa, 0x2, 0x5, 0x3, 0x3, 0x1c5, [0x3ff, 0x2, 0x80000001, 0x8, 0x96, 0x0, 0x20, 0x0, 0x5]}) r5 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r5, &(0x7f0000000040)=""/4096, 0xfffffe82) futimesat$auto(0xffffffffffffffff, 0x0, &(0x7f0000001280)={0xa, 0x1000}) r6 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf250100000031208be8a5b4f52d83483e5c2d79da46e337d98473588f99774c7eb4868b973c1cef8187525db7b5b4e78678eb59512dbc7b11f4e29c29e3273c870a9555cf469e67e8886341e84d38edd658cf267f92e1e785a50fe500fbc125a65f8a4e5aa458a90f3d87fc71eca6309fc0ee1724cea121a7c96dbba43270448ec20cd22915c1cfa658b316e773d1eff747e371aace10d66450a3666b7be9754bde44d1"], 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x0) sendmsg$auto_ILA_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002c070003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x40008c4) semctl$auto(0x7, 0x2, 0x13, 0x1) r7 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r8 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_notify$auto(r8, 0x0) ioctl$auto_UI_DEV_SETUP(r7, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x3, 0x8001}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r7, 0x5501, 0x0) ioctl$auto_UI_SET_SNDBIT(r7, 0x4004556a, 0x0) socket(0xa, 0x3, 0x3b) mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x22041, 0x0) 1.129843154s ago: executing program 4 (id=3734): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2c, 0x1, 0x0) listen$auto(0x3, 0x81) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0xffffffff00000000, 0x400008, 0x100000001, 0x71b3, r2, 0x800008000) fcntl$auto_F_NOTIFY(r2, 0x402, 0x9000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) prctl$auto(0x1000000003b, 0x1, 0x4, 0xd73, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r3, r4, 0x0, 0x3) 129.028702ms ago: executing program 0 (id=3735): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = socket(0x27, 0x4, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r1, @ANYBLOB="436de98e45d2f87f38dc7f8ca354d069d5261493a5c96fe06e68d56b8706955befe6acfcd40607169276c6980845ec52721923277f3699ade2db75b97208da6aaf384730d8279c7c08bbbf5f29df32879ee2deb647db34bdb3fff04806aedbda6c848479084eda0922101e90dde0fe9e6a9b08cf694ea5e93da828af7b0d95a3b02820bc1388d20abb8b4bf55b5edf98b1b44a74062d3b52268447b199c9426ced0950159cd7baedc8d523108d885add136dc35ba73f845ef0dedb0e64149cd00cc000ed0df7ad5747a49092cf48e6e2b65a2ff4f0bc34618bdf482b0bf9e0de58632c3b0a74a2d33a4515d90a81a2"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24048004) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/pagemap\x00', 0x309801, 0x0) r2 = getpid() openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x478442, 0x0) io_getevents$auto(0x24, 0xffffffff, 0x4, 0x0, 0xfffffffffffffffd) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="00000000003dd9260a"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4044054) waitid$auto_P_PID(0x1, r2, &(0x7f0000000200)={@siginfo_0_0={0x87b, 0xff, 0x8, @_sigsys={&(0x7f0000000180)="a066b8e840c6311618ee915dcba2b561883f43193d2a5631fe8489c54c2e58e828919abdaea9ede3515e3e06ef5d9e26a356338ed2792d285c9166f052064c40c858589a8fc08743324746bfd929a8d9ab975df177246f1824ee62a621dc9c9b00fe", 0xffffffff, 0x7}}}, 0x1, &(0x7f0000000340)={{0x1, 0x8}, {0x8000000, 0x9}, 0x8, 0x6, 0x8, 0x1, 0x9, 0x6, 0x69, 0x3, 0x6, 0x0, 0x2, 0x37, 0x4, 0x6}) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 2 (id=3736): connect$auto(0x3, 0x0, 0x58) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0xffffffffffffffff, 0x40009, 0xdf, 0x9b72, 0x7, 0x40000028000) capset$auto(&(0x7f0000000040)={0x19980330}, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x208401, 0x0) ioctl$auto(r1, 0x401070cd, 0x5) r2 = openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev$auto(r2, &(0x7f0000000100)={0x0, 0x10}, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x8000001, 0x0, 0x2000000000000003, 0x0, 0x7b3, 0x1}, 0x401}, 0x6, 0xa0000000) r3 = socket(0x1e, 0x80007, 0x84) sendto$auto(r3, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000080)={0x5, 0xfffffffb, [0xfffffffd, 0x3ff, 0xc7, 0x80000001, 0x7]}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000001100), 0x129a4bf7bca8a7f9, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r4, 0xc0085504, &(0x7f0000000040)={0x9, 0x1, 0x5}) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000003d40), 0xffffffffffffffff) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x6, 0x61c, 0x6) madvise$auto(0x0, 0x200007, 0x19) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video7\x00', 0x10202, 0x0) kernel console output (not intermixed with test programs): 64.903043][T20462] [ 965.257208][T20420] team0: Port device team_slave_0 added [ 965.279136][T20420] team0: Port device team_slave_1 added [ 965.319429][T20420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.326535][T20420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.352671][T20420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.365762][T20420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 965.372770][T20420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.399335][T20420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.459837][T20420] hsr_slave_0: entered promiscuous mode [ 965.466946][T20420] hsr_slave_1: entered promiscuous mode [ 965.473273][T20420] debugfs: 'hsr0' already exists in 'hsr' [ 965.479625][T20420] Cannot create hsr debugfs directory [ 966.324553][T20420] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 966.486582][T20420] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 966.554866][T20420] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 966.588260][T20420] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 966.835415][T14973] Bluetooth: hci0: command tx timeout [ 966.913344][T20420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 967.094028][T20420] 8021q: adding VLAN 0 to HW filter on device team0 [ 967.204063][T20389] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.211302][T20389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 967.292097][T13371] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.299322][T13371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 968.405254][T20420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 968.933700][T14973] Bluetooth: hci0: command tx timeout [ 969.525996][T20420] veth0_vlan: entered promiscuous mode [ 969.542218][T20420] veth1_vlan: entered promiscuous mode [ 970.046695][T20420] veth0_macvtap: entered promiscuous mode [ 970.105456][T20420] veth1_macvtap: entered promiscuous mode [ 970.502449][T20420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 970.557842][T20420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 970.637699][T14083] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.720325][T14083] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.754612][T14083] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.800081][T13988] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.979261][T13988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.999114][T14973] Bluetooth: hci0: command tx timeout [ 971.033499][T13988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.176241][T20389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.208247][T20389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 972.088945][T20573] zswap: compressor not available [ 973.517274][T20605] Setting dangerous option i915.mitigations - tainting kernel [ 973.613936][T20605] Bad "i915.mitigations=CmâUQF\ ", 'CmâUQF\' is unknown [ 974.297557][T20617] FAULT_INJECTION: forcing a failure. [ 974.297557][T20617] name fail_futex, interval 1, probability 0, space 0, times 0 [ 974.310800][T20617] CPU: 1 UID: 0 PID: 20617 Comm: syz.4.3214 Tainted: G U L syzkaller #0 PREEMPT(full) [ 974.310859][T20617] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 974.310874][T20617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 974.310896][T20617] Call Trace: [ 974.310908][T20617] [ 974.310922][T20617] dump_stack_lvl+0x100/0x190 [ 974.310984][T20617] should_fail_ex.cold+0x5/0xa [ 974.311030][T20617] get_futex_key+0x1d2/0x1620 [ 974.311091][T20617] ? __pfx_get_futex_key+0x10/0x10 [ 974.311135][T20617] ? find_held_lock+0x2b/0x80 [ 974.311171][T20617] ? futex_wake+0x456/0x530 [ 974.311236][T20617] futex_wake+0xea/0x530 [ 974.311291][T20617] ? __pfx_futex_wait+0x10/0x10 [ 974.311348][T20617] ? __pfx_futex_wake+0x10/0x10 [ 974.311409][T20617] ? __lock_acquire+0x4a5/0x2630 [ 974.311467][T20617] do_futex+0x32b/0x350 [ 974.311515][T20617] ? __pfx_do_futex+0x10/0x10 [ 974.311565][T20617] ? find_held_lock+0x2b/0x80 [ 974.311607][T20617] __x64_sys_futex+0x34f/0x4d0 [ 974.311659][T20617] ? __fget_files+0x21f/0x3d0 [ 974.311695][T20617] ? __pfx___x64_sys_futex+0x10/0x10 [ 974.311761][T20617] do_syscall_64+0x106/0xf80 [ 974.311816][T20617] ? clear_bhb_loop+0x40/0x90 [ 974.311860][T20617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.311897][T20617] RIP: 0033:0x7feec7d9c799 [ 974.311927][T20617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.311962][T20617] RSP: 002b:00007feec8c5c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 974.311996][T20617] RAX: ffffffffffffffda RBX: 00007feec8015fa8 RCX: 00007feec7d9c799 [ 974.312019][T20617] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feec8015fac [ 974.312042][T20617] RBP: 00007feec8015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 974.312073][T20617] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 974.312097][T20617] R13: 00007feec8016038 R14: 00007ffe74c8e130 R15: 00007ffe74c8e218 [ 974.312144][T20617] [ 975.715271][T20641] syz.0.3218 (20641) used obsolete PPPIOCDETACH ioctl [ 977.617574][T20686] netlink: 146 bytes leftover after parsing attributes in process `syz.5.3225'. [ 977.982477][T20696] : Can't lookup blockdev [ 980.711589][ C1] sd 0:0:1:0: [sda] tag#6310 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 980.722214][ C1] sd 0:0:1:0: [sda] tag#6310 CDB: Read(6) 08 00 00 00 09 00 00 00 00 00 00 00 [ 983.693626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 983.852033][T20779] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input84 [ 984.005323][T20782] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3246'. [ 984.953754][T20798] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input85 [ 984.986911][T20799] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input86 [ 987.408529][T20823] Process accounting resumed [ 987.629015][T20847] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input87 [ 988.271560][T20854] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3263'. [ 988.594287][T20857] futex_wake_op: syz.0.3265 tries to shift op by -2048; fix this program [ 988.603023][T20857] futex_wake_op: syz.0.3265 tries to shift op by -2048; fix this program [ 988.642278][T20857] 0x000000000001-0x000000020000 : "" [ 988.650240][T20861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3267'. [ 988.683180][T20861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3267'. [ 988.697833][T20857] ftl_cs: FTL header corrupt! [ 990.947270][T20904] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 991.128988][T20901] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 991.611455][T20920] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input88 [ 992.842728][T20933] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 993.553494][T14973] Bluetooth: hci2: command 0x0c1a tx timeout [ 993.560388][ T5891] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 995.633486][T14973] Bluetooth: hci2: command 0x0c1a tx timeout [ 995.649727][ T5891] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 998.091777][T20980] block nbd8: shutting down sockets [ 999.080463][T21021] NFSD: Failed to start, no listeners configured. [ 999.265254][T21032] futex_wake_op: syz.0.3292 tries to shift op by -2048; fix this program [ 999.323465][T21032] futex_wake_op: syz.0.3292 tries to shift op by -2048; fix this program [ 999.362618][T21032] 0x000000000001-0x000000020000 : "" [ 999.425827][T21032] ftl_cs: FTL header corrupt! [ 1000.232588][T21043] zswap: compressor not available [ 1000.532215][T21048] zswap: compressor not available [ 1000.914051][T21063] : Can't lookup blockdev [ 1001.182533][T21069] FAULT_INJECTION: forcing a failure. [ 1001.182533][T21069] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.196883][T21069] CPU: 0 UID: 0 PID: 21069 Comm: syz.5.3297 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1001.196939][T21069] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1001.196952][T21069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1001.196971][T21069] Call Trace: [ 1001.196982][T21069] [ 1001.196994][T21069] dump_stack_lvl+0x100/0x190 [ 1001.197054][T21069] should_fail_ex.cold+0x5/0xa [ 1001.197098][T21069] should_failslab+0xc2/0x120 [ 1001.197142][T21069] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1001.197208][T21069] ? __d_alloc+0x34/0xa80 [ 1001.197247][T21069] ? __pfx_css_rstat_updated+0x10/0x10 [ 1001.197289][T21069] ? mas_next_node+0x7f8/0xf30 [ 1001.197349][T21069] __d_alloc+0x34/0xa80 [ 1001.197396][T21069] d_alloc_parallel+0x111/0x14e0 [ 1001.197456][T21069] ? look_up_lock_class+0x64/0x120 [ 1001.197513][T21069] ? register_lock_class+0x40/0x560 [ 1001.197564][T21069] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1001.197622][T21069] ? lockdep_init_map_type+0x5c/0x250 [ 1001.197673][T21069] ? lockdep_init_map_type+0x5c/0x250 [ 1001.197732][T21069] __lookup_slow+0x193/0x460 [ 1001.197781][T21069] ? __pfx___lookup_slow+0x10/0x10 [ 1001.197866][T21069] lookup_slow+0x50/0x70 [ 1001.197915][T21069] link_path_walk+0x1377/0x1cc0 [ 1001.197984][T21069] __filename_parentat+0x213/0x740 [ 1001.198049][T21069] ? __pfx___filename_parentat+0x10/0x10 [ 1001.198146][T21069] ? __lock_acquire+0x4a5/0x2630 [ 1001.198207][T21069] filename_create+0xbe/0x400 [ 1001.198265][T21069] ? __pfx_filename_create+0x10/0x10 [ 1001.198330][T21069] ? find_held_lock+0x2b/0x80 [ 1001.198371][T21069] filename_mkdirat+0xb9/0x5e0 [ 1001.198419][T21069] ? __pfx_filename_mkdirat+0x10/0x10 [ 1001.198460][T21069] ? strncpy_from_user+0x19d/0x2d0 [ 1001.198507][T21069] ? do_getname+0x191/0x390 [ 1001.198567][T21069] __x64_sys_mkdir+0x6b/0x90 [ 1001.198611][T21069] do_syscall_64+0x106/0xf80 [ 1001.198664][T21069] ? clear_bhb_loop+0x40/0x90 [ 1001.198709][T21069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.198747][T21069] RIP: 0033:0x7fbeb639c799 [ 1001.198779][T21069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.198814][T21069] RSP: 002b:00007fbeb7222028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1001.198849][T21069] RAX: ffffffffffffffda RBX: 00007fbeb6615fa0 RCX: 00007fbeb639c799 [ 1001.198872][T21069] RDX: 0000000000000000 RSI: 00000000000005a7 RDI: 0000200000000080 [ 1001.198894][T21069] RBP: 00007fbeb6432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1001.198916][T21069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1001.198937][T21069] R13: 00007fbeb6616038 R14: 00007fbeb6615fa0 R15: 00007fffc5090ea8 [ 1001.198983][T21069] [ 1001.818922][T21063] netlink: 326 bytes leftover after parsing attributes in process `syz.3.3295'. [ 1001.981245][T21073] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3298'. [ 1005.919502][T21116] futex_wake_op: syz.5.3307 tries to shift op by -2048; fix this program [ 1007.613079][T21155] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input89 [ 1008.907023][T21167] vhci_hcd: not connected 4 [ 1009.289583][T21170] FAULT_INJECTION: forcing a failure. [ 1009.289583][T21170] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.313732][T21170] CPU: 1 UID: 0 PID: 21170 Comm: syz.3.3318 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1009.313803][T21170] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1009.313817][T21170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1009.313837][T21170] Call Trace: [ 1009.313848][T21170] [ 1009.313862][T21170] dump_stack_lvl+0x100/0x190 [ 1009.313925][T21170] should_fail_ex.cold+0x5/0xa [ 1009.313971][T21170] should_failslab+0xc2/0x120 [ 1009.314013][T21170] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1009.314069][T21170] ? security_file_alloc+0x34/0x2c0 [ 1009.314116][T21170] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1009.314163][T21170] security_file_alloc+0x34/0x2c0 [ 1009.314209][T21170] init_file+0x95/0x480 [ 1009.314253][T21170] alloc_empty_file+0x73/0x1c0 [ 1009.314301][T21170] alloc_file_pseudo+0x13a/0x230 [ 1009.314351][T21170] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1009.314399][T21170] ? alloc_fd+0x476/0x790 [ 1009.314441][T21170] sock_alloc_file+0x50/0x210 [ 1009.314594][T21170] __sys_socket+0x1c0/0x260 [ 1009.314635][T21170] ? __pfx___sys_socket+0x10/0x10 [ 1009.314690][T21170] __x64_sys_socket+0x72/0xb0 [ 1009.314730][T21170] ? lockdep_hardirqs_on+0x78/0x100 [ 1009.314794][T21170] do_syscall_64+0x106/0xf80 [ 1009.314846][T21170] ? clear_bhb_loop+0x40/0x90 [ 1009.314887][T21170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.314922][T21170] RIP: 0033:0x7ff4ac59c799 [ 1009.314950][T21170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1009.314984][T21170] RSP: 002b:00007ff4ad507028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1009.315017][T21170] RAX: ffffffffffffffda RBX: 00007ff4ac815fa0 RCX: 00007ff4ac59c799 [ 1009.315040][T21170] RDX: 0000000000000073 RSI: 0000000000080002 RDI: 0000000000000002 [ 1009.315062][T21170] RBP: 00007ff4ac632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1009.315083][T21170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1009.315103][T21170] R13: 00007ff4ac816038 R14: 00007ff4ac815fa0 R15: 00007ffff0959058 [ 1009.315147][T21170] [ 1011.029519][T21189] futex_wake_op: syz.0.3319 tries to shift op by -2048; fix this program [ 1011.745195][T21276] vhci_hcd: not connected 4 [ 1012.633225][T21285] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3329'. [ 1014.524944][T21298] FAULT_INJECTION: forcing a failure. [ 1014.524944][T21298] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1014.583657][T21298] CPU: 1 UID: 0 PID: 21298 Comm: syz.0.3333 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1014.583720][T21298] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1014.583735][T21298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1014.583756][T21298] Call Trace: [ 1014.583768][T21298] [ 1014.583782][T21298] dump_stack_lvl+0x100/0x190 [ 1014.583845][T21298] should_fail_ex.cold+0x5/0xa [ 1014.583881][T21298] ? prepare_alloc_pages+0x16d/0x5f0 [ 1014.583928][T21298] should_fail_alloc_page+0xeb/0x140 [ 1014.583970][T21298] prepare_alloc_pages+0x1f0/0x5f0 [ 1014.584013][T21298] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1014.584055][T21298] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1014.584113][T21298] ? vms_complete_munmap_vmas+0x1e1/0xdd0 [ 1014.584179][T21298] ? __pfx_vms_complete_munmap_vmas+0x10/0x10 [ 1014.584230][T21298] ? vma_wants_writenotify+0x10b/0x390 [ 1014.584286][T21298] ? __pfx_vma_wants_writenotify+0x10/0x10 [ 1014.584354][T21298] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1014.584420][T21298] ? vma_set_page_prot+0xb1/0x120 [ 1014.584472][T21298] ? mas_ascend+0x53d/0xb30 [ 1014.584525][T21298] ? __pfx___mmap_region+0x10/0x10 [ 1014.584575][T21298] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1014.584613][T21298] ? policy_nodemask+0xed/0x4f0 [ 1014.584657][T21298] alloc_pages_mpol+0x1fb/0x550 [ 1014.584700][T21298] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1014.584752][T21298] alloc_pages_noprof+0x131/0x390 [ 1014.584795][T21298] __pmd_alloc+0x3b/0x950 [ 1014.584842][T21298] __handle_mm_fault+0xa99/0x2b60 [ 1014.584898][T21298] ? mt_find+0x45e/0x8e0 [ 1014.584932][T21298] ? __pfx___handle_mm_fault+0x10/0x10 [ 1014.584979][T21298] ? __pfx_mt_find+0x10/0x10 [ 1014.585045][T21298] handle_mm_fault+0x36d/0xa20 [ 1014.585103][T21298] __get_user_pages+0xf9c/0x34d0 [ 1014.585161][T21298] ? __pfx___get_user_pages+0x10/0x10 [ 1014.585215][T21298] populate_vma_page_range+0x267/0x3f0 [ 1014.585262][T21298] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1014.585306][T21298] ? __pfx_find_vma_intersection+0x10/0x10 [ 1014.585354][T21298] ? do_mmap+0x93f/0x12f0 [ 1014.585400][T21298] __mm_populate+0x107/0x3a0 [ 1014.585446][T21298] ? __pfx___mm_populate+0x10/0x10 [ 1014.585494][T21298] ? up_write+0x290/0x4f0 [ 1014.585553][T21298] vm_mmap_pgoff+0x37f/0x470 [ 1014.585600][T21298] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1014.585653][T21298] ? do_futex+0x192/0x350 [ 1014.585701][T21298] ? __pfx_do_futex+0x10/0x10 [ 1014.585759][T21298] ksys_mmap_pgoff+0xe1/0x650 [ 1014.585800][T21298] ? __x64_sys_futex+0x34f/0x4d0 [ 1014.585846][T21298] ? __x64_sys_futex+0x358/0x4d0 [ 1014.585894][T21298] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1014.585933][T21298] ? xfd_validate_state+0x129/0x190 [ 1014.585994][T21298] __x64_sys_mmap+0x125/0x190 [ 1014.586052][T21298] do_syscall_64+0x106/0xf80 [ 1014.586104][T21298] ? clear_bhb_loop+0x40/0x90 [ 1014.586146][T21298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.586182][T21298] RIP: 0033:0x7fc0c399c799 [ 1014.586212][T21298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.586247][T21298] RSP: 002b:00007fc0c48d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1014.586280][T21298] RAX: ffffffffffffffda RBX: 00007fc0c3c15fa0 RCX: 00007fc0c399c799 [ 1014.586303][T21298] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1014.586354][T21298] RBP: 00007fc0c3a32c99 R08: ffffffffffffffff R09: 0000000000008000 [ 1014.586378][T21298] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1014.586400][T21298] R13: 00007fc0c3c16038 R14: 00007fc0c3c15fa0 R15: 00007ffd140529b8 [ 1014.586445][T21298] [ 1014.969401][T21299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.983162][T21299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1016.050615][T21312] Invalid ELF header magic: != ELF [ 1018.051094][T21335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3340'. [ 1018.658392][T21334] Process accounting paused [ 1021.820478][T21370] FAULT_INJECTION: forcing a failure. [ 1021.820478][T21370] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.860436][T21370] CPU: 1 UID: 0 PID: 21370 Comm: syz.4.3346 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1021.860497][T21370] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1021.860512][T21370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1021.860534][T21370] Call Trace: [ 1021.860547][T21370] [ 1021.860561][T21370] dump_stack_lvl+0x100/0x190 [ 1021.860626][T21370] should_fail_ex.cold+0x5/0xa [ 1021.860671][T21370] should_failslab+0xc2/0x120 [ 1021.860713][T21370] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1021.860767][T21370] ? dup_fd+0x4d/0xd10 [ 1021.860803][T21370] ? do_futex+0x192/0x350 [ 1021.860858][T21370] dup_fd+0x4d/0xd10 [ 1021.860898][T21370] ? bpf_lsm_capable+0x9/0x10 [ 1021.860937][T21370] ? security_capable+0x80/0x260 [ 1021.861006][T21370] __x64_sys_close_range+0x405/0x5d0 [ 1021.861069][T21370] ? __pfx___x64_sys_close_range+0x10/0x10 [ 1021.861124][T21370] do_syscall_64+0x106/0xf80 [ 1021.861180][T21370] ? clear_bhb_loop+0x40/0x90 [ 1021.861224][T21370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.861270][T21370] RIP: 0033:0x7feec7d9c799 [ 1021.861300][T21370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1021.861337][T21370] RSP: 002b:00007feec8c3b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1021.861372][T21370] RAX: ffffffffffffffda RBX: 00007feec8016090 RCX: 00007feec7d9c799 [ 1021.861397][T21370] RDX: 0000000000000002 RSI: fffffffffffff001 RDI: 0000000000000000 [ 1021.861420][T21370] RBP: 00007feec7e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1021.861444][T21370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1021.861466][T21370] R13: 00007feec8016128 R14: 00007feec8016090 R15: 00007ffe74c8e218 [ 1021.861512][T21370] [ 1022.102670][T21371] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input90 [ 1022.154198][T21370] netlink: 4644 bytes leftover after parsing attributes in process `syz.4.3346'. [ 1022.477940][T21365] netlink: 186 bytes leftover after parsing attributes in process `syz.3.3344'. [ 1024.148771][T21407] FAULT_INJECTION: forcing a failure. [ 1024.148771][T21407] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.227423][T21407] CPU: 1 UID: 0 PID: 21407 Comm: syz.4.3355 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1024.227483][T21407] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1024.227498][T21407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1024.227519][T21407] Call Trace: [ 1024.227532][T21407] [ 1024.227545][T21407] dump_stack_lvl+0x100/0x190 [ 1024.227607][T21407] should_fail_ex.cold+0x5/0xa [ 1024.227652][T21407] should_failslab+0xc2/0x120 [ 1024.227694][T21407] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1024.227753][T21407] ? alloc_inode+0x68/0x250 [ 1024.227802][T21407] ? simple_start_creating+0xb0/0x110 [ 1024.227877][T21407] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1024.228005][T21407] alloc_inode+0x68/0x250 [ 1024.228065][T21407] new_inode+0x22/0x1c0 [ 1024.228109][T21407] __debugfs_create_file+0x105/0x4f0 [ 1024.228147][T21407] debugfs_create_file_full+0x41/0x60 [ 1024.228185][T21407] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1024.228228][T21407] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1024.228271][T21407] ? rcu_is_watching+0x12/0xc0 [ 1024.228348][T21407] ? lockdep_init_map_type+0x5c/0x250 [ 1024.228395][T21407] preinit_net.part.0+0x24e/0x8f0 [ 1024.228446][T21407] copy_net_ns+0x339/0x7c0 [ 1024.228479][T21407] create_new_namespaces+0x3ea/0xac0 [ 1024.228522][T21407] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1024.228560][T21407] ksys_unshare+0x473/0xad0 [ 1024.228602][T21407] ? __pfx_ksys_unshare+0x10/0x10 [ 1024.228653][T21407] __x64_sys_unshare+0x31/0x40 [ 1024.228691][T21407] do_syscall_64+0x106/0xf80 [ 1024.228735][T21407] ? clear_bhb_loop+0x40/0x90 [ 1024.228771][T21407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.228801][T21407] RIP: 0033:0x7feec7d9c799 [ 1024.228826][T21407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.228854][T21407] RSP: 002b:00007feec8c5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1024.228883][T21407] RAX: ffffffffffffffda RBX: 00007feec8015fa0 RCX: 00007feec7d9c799 [ 1024.228903][T21407] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1024.228921][T21407] RBP: 00007feec7e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1024.228939][T21407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1024.228957][T21407] R13: 00007feec8016038 R14: 00007feec8015fa0 R15: 00007ffe74c8e218 [ 1024.228995][T21407] [ 1024.344310][T21407] debugfs: out of free dentries, can not create file 'net_refcnt@ffff888057874f00' [ 1025.029345][T21414] Invalid ELF header magic: != ELF [ 1026.289594][T21436] QAT: Device 0 not found [ 1028.704408][T21474] kAFS: unparsable volume name [ 1029.202312][T21485] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 1029.437975][ C1] sd 0:0:1:0: [sda] tag#6311 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1029.448564][ C1] sd 0:0:1:0: [sda] tag#6311 CDB: Read(6) 08 00 00 00 09 00 00 00 00 00 00 00 [ 1029.866579][T21494] netlink: 'syz.5.3368': attribute type 21 has an invalid length. [ 1029.933138][T21494] netlink: 326 bytes leftover after parsing attributes in process `syz.5.3368'. [ 1030.156809][T21497] Invalid ELF header magic: != ELF [ 1030.277924][T21503] input: f as /devices/virtual/input/input92 [ 1031.742618][T21540] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3381'. [ 1031.820482][T21540] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 1031.830489][T21540] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -74 [ 1031.851161][T21540] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 1032.582607][T21547] NFSD: Failed to start, no listeners configured. [ 1032.769104][T21560] random: crng reseeded on system resumption [ 1039.467180][T21704] NFSD: Failed to start, no listeners configured. [ 1040.770218][T21726] vivid-005: ================= START STATUS ================= [ 1040.789912][T21726] vivid-005: ================== END STATUS ================== [ 1042.067167][T21749] vhci_hcd: not connected 4 [ 1043.922111][T21782] can: request_module (can-proto-4) failed. [ 1045.022116][T21808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3444'. [ 1051.126569][T21891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3466'. [ 1051.189717][T21872] kexec: Could not allocate control_code_buffer [ 1051.236488][T21891] FAULT_INJECTION: forcing a failure. [ 1051.236488][T21891] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1051.321335][T21891] CPU: 0 UID: 0 PID: 21891 Comm: syz.0.3466 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1051.321395][T21891] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1051.321408][T21891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1051.321427][T21891] Call Trace: [ 1051.321439][T21891] [ 1051.321453][T21891] dump_stack_lvl+0x100/0x190 [ 1051.321512][T21891] should_fail_ex.cold+0x5/0xa [ 1051.321550][T21891] ? prepare_alloc_pages+0x16d/0x5f0 [ 1051.321598][T21891] should_fail_alloc_page+0xeb/0x140 [ 1051.321641][T21891] prepare_alloc_pages+0x1f0/0x5f0 [ 1051.321690][T21891] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1051.321770][T21891] ? stack_trace_save+0x8e/0xc0 [ 1051.321808][T21891] ? __pfx_stack_trace_save+0x10/0x10 [ 1051.321847][T21891] ? stack_depot_save_flags+0x27/0x9d0 [ 1051.321900][T21891] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1051.321955][T21891] ? kasan_save_stack+0x3f/0x50 [ 1051.322010][T21891] ? kasan_save_stack+0x30/0x50 [ 1051.322063][T21891] ? kasan_save_track+0x14/0x30 [ 1051.322096][T21891] ? system_heap_allocate+0xeb/0x1170 [ 1051.322236][T21891] ? __x64_sys_ioctl+0x18e/0x210 [ 1051.322287][T21891] ? do_syscall_64+0x106/0xf80 [ 1051.322339][T21891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.322397][T21891] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1051.322438][T21891] ? policy_nodemask+0xed/0x4f0 [ 1051.322480][T21891] alloc_pages_mpol+0x1fb/0x550 [ 1051.322521][T21891] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1051.322562][T21891] ? lockdep_init_map_type+0x5c/0x250 [ 1051.322615][T21891] alloc_pages_noprof+0x131/0x390 [ 1051.322654][T21891] system_heap_allocate+0x2d2/0x1170 [ 1051.322700][T21891] ? __pfx_system_heap_allocate+0x10/0x10 [ 1051.322737][T21891] ? __might_fault+0xc5/0x140 [ 1051.322839][T21891] dma_heap_ioctl+0x37f/0x5e0 [ 1051.322942][T21891] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1051.322997][T21891] ? find_held_lock+0x2b/0x80 [ 1051.323053][T21891] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1051.323109][T21891] __x64_sys_ioctl+0x18e/0x210 [ 1051.323165][T21891] do_syscall_64+0x106/0xf80 [ 1051.323217][T21891] ? clear_bhb_loop+0x40/0x90 [ 1051.323261][T21891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.323298][T21891] RIP: 0033:0x7fc0c399c799 [ 1051.323331][T21891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1051.323365][T21891] RSP: 002b:00007fc0c48d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1051.323398][T21891] RAX: ffffffffffffffda RBX: 00007fc0c3c15fa0 RCX: 00007fc0c399c799 [ 1051.323422][T21891] RDX: 0000200000000140 RSI: ffffffffffdffe00 RDI: 0000000000000006 [ 1051.323444][T21891] RBP: 00007fc0c3a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1051.323464][T21891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1051.323484][T21891] R13: 00007fc0c3c16038 R14: 00007fc0c3c15fa0 R15: 00007ffd140529b8 [ 1051.323528][T21891] [ 1053.968874][T21922] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input95 [ 1054.963718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 1055.910686][T21952] FAULT_INJECTION: forcing a failure. [ 1055.910686][T21952] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.962592][T21952] CPU: 1 UID: 0 PID: 21952 Comm: syz.0.3479 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1055.962646][T21952] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1055.962659][T21952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1055.962677][T21952] Call Trace: [ 1055.962689][T21952] [ 1055.962701][T21952] dump_stack_lvl+0x100/0x190 [ 1055.962758][T21952] should_fail_ex.cold+0x5/0xa [ 1055.962799][T21952] should_failslab+0xc2/0x120 [ 1055.962843][T21952] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1055.962889][T21952] ? madvise_collapse+0x1b5/0xbe0 [ 1055.962941][T21952] madvise_collapse+0x1b5/0xbe0 [ 1055.962999][T21952] ? __pfx_madvise_collapse+0x10/0x10 [ 1055.963043][T21952] ? __print_lock_name+0x21/0x80 [ 1055.963079][T21952] ? is_bpf_text_address+0x8a/0x1a0 [ 1055.963142][T21952] madvise_vma_behavior+0x1987/0x3050 [ 1055.963190][T21952] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1055.963233][T21952] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 1055.963297][T21952] ? mas_prev+0x9b/0xf0 [ 1055.963329][T21952] ? __pfx_mas_prev+0x10/0x10 [ 1055.963371][T21952] ? find_vma_prev+0xd8/0x150 [ 1055.963407][T21952] ? _kstrtoull+0x13c/0x1f0 [ 1055.963458][T21952] ? __pfx_find_vma_prev+0x10/0x10 [ 1055.963523][T21952] madvise_walk_vmas+0x2fe/0xa90 [ 1055.963573][T21952] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1055.963629][T21952] madvise_do_behavior+0x1ea/0x510 [ 1055.963675][T21952] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1055.963720][T21952] ? down_read+0x13b/0x460 [ 1055.963776][T21952] do_madvise+0x195/0x240 [ 1055.963817][T21952] ? __pfx_do_madvise+0x10/0x10 [ 1055.963858][T21952] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1055.963942][T21952] ? ksys_write+0x1ac/0x250 [ 1055.963976][T21952] ? __pfx_ksys_write+0x10/0x10 [ 1055.964008][T21952] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1055.964060][T21952] __x64_sys_madvise+0xa9/0x110 [ 1055.964101][T21952] ? lockdep_hardirqs_on+0x78/0x100 [ 1055.964157][T21952] do_syscall_64+0x106/0xf80 [ 1055.964194][T21952] ? clear_bhb_loop+0x40/0x90 [ 1055.964224][T21952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.964254][T21952] RIP: 0033:0x7fc0c399c799 [ 1055.964275][T21952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.964298][T21952] RSP: 002b:00007fc0c48d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1055.964321][T21952] RAX: ffffffffffffffda RBX: 00007fc0c3c15fa0 RCX: 00007fc0c399c799 [ 1055.964337][T21952] RDX: 0000000000000019 RSI: 0000000000200007 RDI: 0000000000000000 [ 1055.964352][T21952] RBP: 00007fc0c48d8090 R08: 0000000000000000 R09: 0000000000000000 [ 1055.964368][T21952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1055.964382][T21952] R13: 00007fc0c3c16038 R14: 00007fc0c3c15fa0 R15: 00007ffd140529b8 [ 1055.964413][T21952] [ 1056.577607][T21958] futex_wake_op: syz.3.3480 tries to shift op by -2048; fix this program [ 1056.633072][T21959] misc userio: No port type given on /dev/userio [ 1056.634305][T21958] futex_wake_op: syz.3.3480 tries to shift op by -2048; fix this program [ 1058.425149][T21975] hub 1-0:1.0: USB hub found [ 1058.430302][T21975] hub 1-0:1.0: 1 port detected [ 1058.462174][T21975] vhci_hcd: not connected 4 [ 1059.439999][T21984] FAULT_INJECTION: forcing a failure. [ 1059.439999][T21984] name failslab, interval 1, probability 0, space 0, times 0 [ 1059.483609][T21984] CPU: 0 UID: 0 PID: 21984 Comm: syz.3.3487 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1059.483653][T21984] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1059.483663][T21984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1059.483679][T21984] Call Trace: [ 1059.483687][T21984] [ 1059.483698][T21984] dump_stack_lvl+0x100/0x190 [ 1059.483743][T21984] should_fail_ex.cold+0x5/0xa [ 1059.483774][T21984] should_failslab+0xc2/0x120 [ 1059.483803][T21984] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1059.483843][T21984] ? __kernfs_new_node+0xd2/0x960 [ 1059.483889][T21984] __kernfs_new_node+0xd2/0x960 [ 1059.483927][T21984] ? __lock_acquire+0x4a5/0x2630 [ 1059.483962][T21984] ? __pfx___kernfs_new_node+0x10/0x10 [ 1059.484008][T21984] ? find_held_lock+0x2b/0x80 [ 1059.484033][T21984] ? kernfs_root+0xee/0x2a0 [ 1059.484097][T21984] ? kernfs_root+0xee/0x2a0 [ 1059.484141][T21984] kernfs_new_node+0x11b/0x1a0 [ 1059.484178][T21984] __kernfs_create_file+0x53/0x350 [ 1059.484213][T21984] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1059.484257][T21984] internal_create_group+0x593/0xf40 [ 1059.484304][T21984] ? __pfx_internal_create_group+0x10/0x10 [ 1059.484349][T21984] ? kernfs_create_link+0x1bd/0x240 [ 1059.484385][T21984] internal_create_groups+0x9d/0x150 [ 1059.484427][T21984] device_add+0xf5b/0x1950 [ 1059.484536][T21984] ? __pfx_device_add+0x10/0x10 [ 1059.484569][T21984] ? lockdep_init_map_type+0x5c/0x250 [ 1059.484605][T21984] ? __init_waitqueue_head+0xca/0x150 [ 1059.484653][T21984] netdev_register_kobject+0x1a9/0x3d0 [ 1059.484714][T21984] register_netdevice+0x12e0/0x2210 [ 1059.484779][T21984] ? __pfx_register_netdevice+0x10/0x10 [ 1059.484828][T21984] ? __pfx_loopback_net_init+0x10/0x10 [ 1059.484899][T21984] register_netdev+0x34/0x50 [ 1059.484940][T21984] loopback_net_init+0x7a/0x170 [ 1059.484970][T21984] ? __pfx_loopback_net_init+0x10/0x10 [ 1059.484998][T21984] ops_init+0x1e2/0x5f0 [ 1059.485041][T21984] setup_net+0x118/0x3a0 [ 1059.485082][T21984] ? __pfx_setup_net+0x10/0x10 [ 1059.485121][T21984] ? lockdep_init_map_type+0x5c/0x250 [ 1059.485165][T21984] ? mutex_init_lockep+0x110/0x150 [ 1059.485206][T21984] copy_net_ns+0x46f/0x7c0 [ 1059.485236][T21984] create_new_namespaces+0x3ea/0xac0 [ 1059.485272][T21984] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1059.485304][T21984] ksys_unshare+0x473/0xad0 [ 1059.485340][T21984] ? __pfx_ksys_unshare+0x10/0x10 [ 1059.485385][T21984] __x64_sys_unshare+0x31/0x40 [ 1059.485418][T21984] do_syscall_64+0x106/0xf80 [ 1059.485457][T21984] ? clear_bhb_loop+0x40/0x90 [ 1059.485490][T21984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.485516][T21984] RIP: 0033:0x7ff4ac59c799 [ 1059.485538][T21984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1059.485564][T21984] RSP: 002b:00007ff4ad507028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1059.485589][T21984] RAX: ffffffffffffffda RBX: 00007ff4ac815fa0 RCX: 00007ff4ac59c799 [ 1059.485607][T21984] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1059.485623][T21984] RBP: 00007ff4ac632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1059.485639][T21984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1059.485655][T21984] R13: 00007ff4ac816038 R14: 00007ff4ac815fa0 R15: 00007ffff0959058 [ 1059.485688][T21984] [ 1059.933567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 1061.691464][T22002] NFSD: Failed to start, no listeners configured. [ 1061.746217][T22003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3490'. [ 1064.591330][T22023] FAULT_INJECTION: forcing a failure. [ 1064.591330][T22023] name failslab, interval 1, probability 0, space 0, times 0 [ 1064.605172][T22023] CPU: 1 UID: 0 PID: 22023 Comm: syz.3.3493 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1064.605236][T22023] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1064.605250][T22023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1064.605272][T22023] Call Trace: [ 1064.605281][T22023] [ 1064.605290][T22023] dump_stack_lvl+0x100/0x190 [ 1064.605335][T22023] should_fail_ex.cold+0x5/0xa [ 1064.605367][T22023] should_failslab+0xc2/0x120 [ 1064.605395][T22023] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1064.605431][T22023] ? vkms_atomic_crtc_duplicate_state+0x7a/0x1e0 [ 1064.605561][T22023] vkms_atomic_crtc_duplicate_state+0x7a/0x1e0 [ 1064.605598][T22023] drm_atomic_get_crtc_state+0x1de/0x620 [ 1064.605664][T22023] drm_atomic_get_plane_state+0x4a3/0x760 [ 1064.605700][T22023] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 1064.605757][T22023] ? trace_contention_end+0x140/0x180 [ 1064.605799][T22023] ? __mutex_lock+0x26a/0x1b90 [ 1064.605841][T22023] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1064.605883][T22023] ? drm_master_internal_acquire+0x21/0x80 [ 1064.605948][T22023] drm_client_modeset_commit_locked+0x14d/0x580 [ 1064.605993][T22023] drm_client_modeset_commit+0x4f/0x80 [ 1064.606032][T22023] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 1064.606112][T22023] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 1064.606154][T22023] drm_fbdev_client_restore+0x1b/0x30 [ 1064.606201][T22023] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 1064.606238][T22023] drm_client_dev_restore+0x205/0x2a0 [ 1064.606282][T22023] drm_release+0x2c6/0x360 [ 1064.606336][T22023] ? __pfx_drm_release+0x10/0x10 [ 1064.606372][T22023] __fput+0x3ff/0xb40 [ 1064.606411][T22023] task_work_run+0x150/0x240 [ 1064.606452][T22023] ? __pfx_task_work_run+0x10/0x10 [ 1064.606500][T22023] exit_to_user_mode_loop+0x100/0x4a0 [ 1064.606539][T22023] do_syscall_64+0x668/0xf80 [ 1064.606577][T22023] ? clear_bhb_loop+0x40/0x90 [ 1064.606610][T22023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.606637][T22023] RIP: 0033:0x7ff4ac59c799 [ 1064.606658][T22023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1064.606684][T22023] RSP: 002b:00007ff4ad4c5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1064.606709][T22023] RAX: 0000000000000000 RBX: 00007ff4ac816180 RCX: 00007ff4ac59c799 [ 1064.606725][T22023] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1064.606741][T22023] RBP: 00007ff4ac632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1064.606757][T22023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1064.606773][T22023] R13: 00007ff4ac816218 R14: 00007ff4ac816180 R15: 00007ffff0959058 [ 1064.606807][T22023] [ 1069.658846][T22060] NFSD: Failed to start, no listeners configured. [ 1072.669364][T22082] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input96 [ 1073.139231][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1073.166849][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1073.181013][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1073.201970][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1073.223964][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1073.415671][T22089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3508'. [ 1073.838471][T22093] zram0: detected capacity change from 16 to 0 [ 1074.244378][T22084] chnl_net:caif_netlink_parms(): no params data found [ 1075.035107][T21968] bridge0: port 3(syz_tun) entered disabled state [ 1075.210980][T21968] syz_tun (unregistering): left allmulticast mode [ 1075.241089][T21968] syz_tun (unregistering): left promiscuous mode [ 1075.272262][T21968] bridge0: port 3(syz_tun) entered disabled state [ 1075.332951][ T5833] Bluetooth: hci1: command tx timeout [ 1075.752536][T22084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.772119][T22084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.790245][T22084] bridge_slave_0: entered allmulticast mode [ 1075.814995][T22084] bridge_slave_0: entered promiscuous mode [ 1075.947610][T20397] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.037915][T22084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.084311][T22084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.099983][T22084] bridge_slave_1: entered allmulticast mode [ 1076.144840][T22084] bridge_slave_1: entered promiscuous mode [ 1076.471195][T22084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.673198][T20397] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.771787][T22084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1077.061136][T22121] NFSD: Failed to start, no listeners configured. [ 1077.086482][T20397] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.270523][T22084] team0: Port device team_slave_0 added [ 1077.286780][T22084] team0: Port device team_slave_1 added [ 1077.394087][ T5833] Bluetooth: hci1: command tx timeout [ 1077.675927][T22084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1077.698154][T22084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1077.765219][T22128] random: crng reseeded on system resumption [ 1077.768830][T22084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1078.028829][T22084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1078.039818][T22084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.067866][T22084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1078.405867][T22134] nbd: socks must be embedded in a SOCK_ITEM attr [ 1078.415383][T22134] block nbd3: shutting down sockets [ 1078.611756][T20397] bridge_slave_1: left allmulticast mode [ 1078.634486][T20397] bridge_slave_1: left promiscuous mode [ 1078.663890][T20397] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.712268][T20397] bridge_slave_0: left allmulticast mode [ 1078.756364][T20397] bridge_slave_0: left promiscuous mode [ 1078.796042][T20397] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.473756][ T5833] Bluetooth: hci1: command tx timeout [ 1079.730440][T20397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1079.891318][T20397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1079.909689][T20397] bond0 (unregistering): Released all slaves [ 1080.284896][T22084] hsr_slave_0: entered promiscuous mode [ 1080.291910][T22084] hsr_slave_1: entered promiscuous mode [ 1080.333627][T22084] debugfs: 'hsr0' already exists in 'hsr' [ 1080.352154][T22084] Cannot create hsr debugfs directory [ 1080.612781][T20397] tipc: Left network mode [ 1080.823991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 1081.564103][ T5833] Bluetooth: hci1: command tx timeout [ 1081.596624][T20397] hsr_slave_0: left promiscuous mode [ 1081.630575][T20397] hsr_slave_1: left promiscuous mode [ 1081.657197][T20397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1081.666104][T20397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1081.685085][T20397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1081.723585][T20397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1081.778570][T20397] veth1_macvtap: left promiscuous mode [ 1081.793069][T20397] veth0_macvtap: left promiscuous mode [ 1081.812193][T20397] veth1_vlan: left promiscuous mode [ 1081.827455][T20397] veth0_vlan: left promiscuous mode [ 1081.983654][T22153] FAULT_INJECTION: forcing a failure. [ 1081.983654][T22153] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.996485][T22153] CPU: 1 UID: 0 PID: 22153 Comm: syz.5.3517 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1081.996539][T22153] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1081.996553][T22153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1081.996573][T22153] Call Trace: [ 1081.996584][T22153] [ 1081.996599][T22153] dump_stack_lvl+0x100/0x190 [ 1081.996662][T22153] should_fail_ex.cold+0x5/0xa [ 1081.996703][T22153] should_failslab+0xc2/0x120 [ 1081.996742][T22153] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1081.996796][T22153] ? __pmd_alloc+0xbf/0x950 [ 1081.996846][T22153] __pmd_alloc+0xbf/0x950 [ 1081.996898][T22153] move_page_tables+0x3224/0x4500 [ 1081.996955][T22153] ? __pfx_copy_vma+0x10/0x10 [ 1081.997009][T22153] ? __pfx_css_rstat_updated+0x10/0x10 [ 1081.997062][T22153] ? __pfx_move_page_tables+0x10/0x10 [ 1081.997149][T22153] ? finish_task_switch.isra.0+0x200/0xb80 [ 1081.997196][T22153] copy_vma_and_data+0x25c/0x7c0 [ 1081.997255][T22153] ? __pfx_copy_vma_and_data+0x10/0x10 [ 1081.997327][T22153] ? __vma_start_write+0x17f/0x280 [ 1081.997384][T22153] ? __pfx___vma_start_write+0x10/0x10 [ 1081.997447][T22153] move_vma+0x51b/0x1890 [ 1081.997506][T22153] ? __pfx_move_vma+0x10/0x10 [ 1081.997563][T22153] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1081.997607][T22153] ? cap_mmap_addr+0x4b/0x120 [ 1081.997641][T22153] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1081.997674][T22153] ? security_mmap_addr+0x71/0x1e0 [ 1081.997720][T22153] ? __get_unmapped_area+0x255/0x3e0 [ 1081.997766][T22153] ? vrm_set_new_addr+0x204/0x290 [ 1081.997821][T22153] mremap_to+0x1b7/0x450 [ 1081.997875][T22153] do_mremap+0xb76/0x2130 [ 1081.997947][T22153] ? __pfx_do_mremap+0x10/0x10 [ 1081.998012][T22153] ? ksys_write+0x190/0x250 [ 1081.998057][T22153] __do_sys_mremap+0x126/0x170 [ 1081.998110][T22153] ? __pfx___do_sys_mremap+0x10/0x10 [ 1081.998175][T22153] ? __x64_sys_futex+0x34f/0x4d0 [ 1081.998247][T22153] do_syscall_64+0x106/0xf80 [ 1081.998299][T22153] ? clear_bhb_loop+0x40/0x90 [ 1081.998343][T22153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.998390][T22153] RIP: 0033:0x7fbeb639c799 [ 1081.998419][T22153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.998453][T22153] RSP: 002b:00007fbeb7222028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1081.998486][T22153] RAX: ffffffffffffffda RBX: 00007fbeb6615fa0 RCX: 00007fbeb639c799 [ 1081.998509][T22153] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 1081.998529][T22153] RBP: 00007fbeb6432c99 R08: 0000000100000000 R09: 0000000000000000 [ 1081.998550][T22153] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1081.998570][T22153] R13: 00007fbeb6616038 R14: 00007fbeb6615fa0 R15: 00007fffc5090ea8 [ 1081.998615][T22153] [ 1083.044908][T20397] team0 (unregistering): Port device team_slave_1 removed [ 1083.114153][T20397] team0 (unregistering): Port device team_slave_0 removed [ 1084.259406][T22172] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input97 [ 1084.271698][T22084] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1084.364256][T22084] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1084.452700][T22084] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1084.497410][T22084] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1085.626467][T22084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.364590][T22084] 8021q: adding VLAN 0 to HW filter on device team0 [ 1086.621576][T20398] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.628819][T20398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1087.123469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1087.549035][T20389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.556291][T20389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1087.567251][T14973] Bluetooth: hci0: command 0x0406 tx timeout [ 1090.529760][T22084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1092.138255][T22084] veth0_vlan: entered promiscuous mode [ 1092.190397][T22084] veth1_vlan: entered promiscuous mode [ 1092.361373][T22084] veth0_macvtap: entered promiscuous mode [ 1092.402578][T22084] veth1_macvtap: entered promiscuous mode [ 1092.509122][T22084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1092.521936][T22084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1092.545888][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.600578][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.650481][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.755184][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1093.184750][ C1] sd 0:0:1:0: [sda] tag#6327 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1093.195309][ C1] sd 0:0:1:0: [sda] tag#6327 CDB: Read(6) 08 00 00 00 09 00 00 00 00 00 00 00 [ 1093.249063][T13371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1093.266055][T13371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.451791][T13371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1093.471225][T13371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1102.369406][T14973] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1102.381863][T14973] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1102.396006][T14973] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1102.418885][T14973] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1102.428658][T14973] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1102.802552][T22348] chnl_net:caif_netlink_parms(): no params data found [ 1103.049717][T22348] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.064967][T22348] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.072411][T22348] bridge_slave_0: entered allmulticast mode [ 1103.092690][T22348] bridge_slave_0: entered promiscuous mode [ 1103.169627][T22348] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.212282][T22348] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.244753][T22348] bridge_slave_1: entered allmulticast mode [ 1103.279218][T22348] bridge_slave_1: entered promiscuous mode [ 1103.530537][T22348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1103.578536][T22348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1103.847863][T22348] team0: Port device team_slave_0 added [ 1103.878766][T22348] team0: Port device team_slave_1 added [ 1103.998217][T22348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1104.022814][T22348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1104.069333][T22348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.130342][T22348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.145950][T22348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1104.183502][T22348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.369020][T22348] hsr_slave_0: entered promiscuous mode [ 1104.388569][T22348] hsr_slave_1: entered promiscuous mode [ 1104.409882][T22348] debugfs: 'hsr0' already exists in 'hsr' [ 1104.434247][T22348] Cannot create hsr debugfs directory [ 1104.529129][T14973] Bluetooth: hci2: command tx timeout [ 1105.267239][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1105.280668][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1105.305758][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1105.321204][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1105.330665][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1105.850388][T22348] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1105.972918][T22348] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1106.069271][T22348] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1106.118898][T22348] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1106.340008][T22370] chnl_net:caif_netlink_parms(): no params data found [ 1106.602430][T14973] Bluetooth: hci2: command tx timeout [ 1106.705558][T22370] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.712849][T22370] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.738774][T22370] bridge_slave_0: entered allmulticast mode [ 1106.779215][T22370] bridge_slave_0: entered promiscuous mode [ 1106.808646][T22370] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.834590][T22370] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.841937][T22370] bridge_slave_1: entered allmulticast mode [ 1106.869871][T22370] bridge_slave_1: entered promiscuous mode [ 1106.887470][T22348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1106.974650][T22370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1107.010049][T22370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1107.046794][T22348] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.116628][T13987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.123859][T13987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1107.192492][T13987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.199759][T13987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1107.226701][T22370] team0: Port device team_slave_0 added [ 1107.256739][T22370] team0: Port device team_slave_1 added [ 1107.366275][T22370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1107.386445][T22370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1107.394799][T14973] Bluetooth: hci3: command tx timeout [ 1107.452719][T22370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1107.527467][T22370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1107.564911][T22370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1107.651317][T22370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1107.889580][T22370] hsr_slave_0: entered promiscuous mode [ 1107.926265][T22370] hsr_slave_1: entered promiscuous mode [ 1107.932819][T22370] debugfs: 'hsr0' already exists in 'hsr' [ 1107.983579][T22370] Cannot create hsr debugfs directory [ 1108.673894][T14973] Bluetooth: hci2: command tx timeout [ 1108.688162][T22348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1108.847984][T22370] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1108.895742][T22370] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1108.956444][T22370] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1108.985185][T22370] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1109.469621][T22370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1109.475294][T14973] Bluetooth: hci3: command tx timeout [ 1109.599324][T22370] 8021q: adding VLAN 0 to HW filter on device team0 [ 1109.680898][T20389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.688136][T20389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1109.749337][T13987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.756596][T13987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1109.918993][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1109.932267][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1109.944876][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1109.956362][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1109.964596][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1110.055856][T22348] veth0_vlan: entered promiscuous mode [ 1110.171239][T22348] veth1_vlan: entered promiscuous mode [ 1110.422564][T22348] veth0_macvtap: entered promiscuous mode [ 1110.449314][T22348] veth1_macvtap: entered promiscuous mode [ 1110.473223][T22348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1110.490578][T22348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1110.559010][T20398] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.568271][T13371] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.629687][T13371] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.648228][T13371] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.753831][T14973] Bluetooth: hci2: command tx timeout [ 1110.904060][T22450] chnl_net:caif_netlink_parms(): no params data found [ 1111.088924][T22370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1111.099203][T13987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.115962][T13987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.255197][T22450] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.262602][T22450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.274022][T22450] bridge_slave_0: entered allmulticast mode [ 1111.282412][T22450] bridge_slave_0: entered promiscuous mode [ 1111.315178][T22450] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.322404][T22450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.331090][T22450] bridge_slave_1: entered allmulticast mode [ 1111.340091][T22450] bridge_slave_1: entered promiscuous mode [ 1111.360072][T20397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.370322][T20397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.451269][T22450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1111.497036][T22450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1111.553436][T14973] Bluetooth: hci3: command tx timeout [ 1111.616665][T22450] team0: Port device team_slave_0 added [ 1111.666267][T22450] team0: Port device team_slave_1 added [ 1111.784077][T22450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1111.791089][T22450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1111.850707][T22450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1111.877783][T22450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1111.894894][T22450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1111.927747][T22450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1112.034442][T14973] Bluetooth: hci6: command tx timeout [ 1112.218799][T22450] hsr_slave_0: entered promiscuous mode [ 1112.240940][T22450] hsr_slave_1: entered promiscuous mode [ 1112.265511][T22450] debugfs: 'hsr0' already exists in 'hsr' [ 1112.271319][T22450] Cannot create hsr debugfs directory [ 1112.477952][T22370] veth0_vlan: entered promiscuous mode [ 1112.558665][T22370] veth1_vlan: entered promiscuous mode [ 1112.782381][T22370] veth0_macvtap: entered promiscuous mode [ 1112.836859][T22370] veth1_macvtap: entered promiscuous mode [ 1112.899058][T22370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.950509][T22370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1113.038275][T20397] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.050214][T20397] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.092515][T20397] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.102452][T20397] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.150954][T22450] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1113.189225][T22450] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1113.222439][T22450] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1113.295067][T22450] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1113.410893][T13988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.434050][T13988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.533577][T20398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.541479][T20398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.634506][T14973] Bluetooth: hci3: command tx timeout [ 1113.782081][T22450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1113.908972][T22450] 8021q: adding VLAN 0 to HW filter on device team0 [ 1113.950876][T20398] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.958141][T20398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1114.027217][T20398] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.034486][T20398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1114.113483][T14973] Bluetooth: hci6: command tx timeout [ 1114.201774][T22450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1114.330855][T22483] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3541'. [ 1114.837484][T22450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1116.149910][T22450] veth0_vlan: entered promiscuous mode [ 1116.210786][T14973] Bluetooth: hci6: command tx timeout [ 1116.378094][T22450] veth1_vlan: entered promiscuous mode [ 1116.528247][T22450] veth0_macvtap: entered promiscuous mode [ 1116.672732][T22450] veth1_macvtap: entered promiscuous mode [ 1116.801258][T22450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1116.836568][T22450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.899250][T20397] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.934094][T20397] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.955563][T22506] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1117.021934][T20397] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.053922][T20397] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.235601][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.295660][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.441908][T20389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1117.493253][T20389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1117.988981][T22512] block2mtd: illegal erase size [ 1118.274528][T14973] Bluetooth: hci6: command tx timeout [ 1118.941071][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1118.968926][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1118.995758][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1119.005870][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1119.014841][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1119.841987][T22524] chnl_net:caif_netlink_parms(): no params data found [ 1120.389128][T22524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.456084][T22524] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.506374][T22524] bridge_slave_0: entered allmulticast mode [ 1120.555095][T22524] bridge_slave_0: entered promiscuous mode [ 1120.575352][T22524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.582567][T22524] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.642152][T22524] bridge_slave_1: entered allmulticast mode [ 1120.682023][T22524] bridge_slave_1: entered promiscuous mode [ 1120.696448][T22531] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3548'. [ 1120.800302][T22531] FAULT_INJECTION: forcing a failure. [ 1120.800302][T22531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1120.835023][T22531] CPU: 1 UID: 0 PID: 22531 Comm: syz.9.3548 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1120.835084][T22531] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1120.835099][T22531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1120.835121][T22531] Call Trace: [ 1120.835134][T22531] [ 1120.835149][T22531] dump_stack_lvl+0x100/0x190 [ 1120.835217][T22531] should_fail_ex.cold+0x5/0xa [ 1120.835260][T22531] strncpy_from_user+0x3b/0x2d0 [ 1120.835309][T22531] do_getname+0x78/0x390 [ 1120.835360][T22531] do_sys_openat2+0xc5/0x1e0 [ 1120.835407][T22531] ? __pfx_do_sys_openat2+0x10/0x10 [ 1120.835459][T22531] ? __sys_sendmsg+0x18f/0x220 [ 1120.835520][T22531] __x64_sys_openat+0x12d/0x210 [ 1120.835569][T22531] ? __pfx___x64_sys_openat+0x10/0x10 [ 1120.835650][T22531] do_syscall_64+0x106/0xf80 [ 1120.835712][T22531] ? clear_bhb_loop+0x40/0x90 [ 1120.835756][T22531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.835791][T22531] RIP: 0033:0x7faa50f9c799 [ 1120.835819][T22531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1120.835862][T22531] RSP: 002b:00007faa51e84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1120.835896][T22531] RAX: ffffffffffffffda RBX: 00007faa51215fa0 RCX: 00007faa50f9c799 [ 1120.835919][T22531] RDX: 0000000000022001 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 1120.835941][T22531] RBP: 00007faa51032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1120.835961][T22531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1120.835982][T22531] R13: 00007faa51216038 R14: 00007faa51215fa0 R15: 00007ffc86ab7498 [ 1120.836026][T22531] [ 1121.074779][T14973] Bluetooth: hci7: command tx timeout [ 1121.347956][T22524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.406060][T22524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1121.717945][T22524] team0: Port device team_slave_0 added [ 1121.786782][T22524] team0: Port device team_slave_1 added [ 1121.933969][T22524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1121.941103][T22524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1121.980243][T22524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1122.032115][T22524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1122.060286][T22524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1122.100446][T22524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1122.406636][T22524] hsr_slave_0: entered promiscuous mode [ 1122.438322][T22524] hsr_slave_1: entered promiscuous mode [ 1122.472879][T22524] debugfs: 'hsr0' already exists in 'hsr' [ 1122.500137][T22524] Cannot create hsr debugfs directory [ 1123.153809][T14973] Bluetooth: hci7: command tx timeout [ 1125.234079][T14973] Bluetooth: hci7: command tx timeout [ 1126.128826][T22573] netlink: 330 bytes leftover after parsing attributes in process `syz.9.3551'. [ 1126.196740][T22573] mac80211_hwsim hwsim39 : renamed from wlan0 (while UP) [ 1126.291555][T22524] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1126.357781][T22524] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1126.400849][T22524] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1126.438457][T22524] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1126.834732][T22524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1126.927328][T22524] 8021q: adding VLAN 0 to HW filter on device team0 [ 1126.972596][T13987] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.979874][T13987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1127.100905][T13987] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.108178][T13987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1127.324460][T14973] Bluetooth: hci7: command tx timeout [ 1127.436285][T22597] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input98 [ 1128.204114][T22524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1128.457356][T22524] veth0_vlan: entered promiscuous mode [ 1128.499521][T22524] veth1_vlan: entered promiscuous mode [ 1128.852743][T22524] veth0_macvtap: entered promiscuous mode [ 1129.069557][T22524] veth1_macvtap: entered promiscuous mode [ 1129.157163][T22524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1129.210265][T22524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1129.369132][T13987] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.414107][T13987] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.491604][T13987] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.551335][T13987] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.729982][T22628] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1129.897666][T20397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1129.914928][T20397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.047567][T20397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1130.077057][T20397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1131.210982][T22635] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3557'. [ 1133.867477][ T5833] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1133.879414][ T5833] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1133.893958][ T5833] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1133.904739][ T5833] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1133.932211][ T5833] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1134.700399][T22681] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1134.724896][T22681] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1134.746361][T22681] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1134.765845][T22681] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1134.806211][T22681] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1134.855945][T22681] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1134.900447][T22681] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1134.935209][T22681] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1134.953858][T22681] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1134.967176][T22681] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1135.000270][T22681] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1135.025622][T22681] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1135.055012][T22681] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1135.081758][T22681] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1135.106679][T22681] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1135.134485][T22681] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1135.162857][T22681] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1135.190014][T22681] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1135.247413][T22681] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1135.270470][T22681] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1135.297136][T22681] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1135.327428][T22681] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1135.351911][T22690] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1135.902672][T22682] chnl_net:caif_netlink_parms(): no params data found [ 1136.156209][T22682] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.171766][T22682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.179608][T22682] bridge_slave_0: entered allmulticast mode [ 1136.188400][T22682] bridge_slave_0: entered promiscuous mode [ 1136.196403][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 1136.206420][T22682] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.214771][T22682] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.222779][T22682] bridge_slave_1: entered allmulticast mode [ 1136.232081][T22682] bridge_slave_1: entered promiscuous mode [ 1136.288436][T22682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1136.318261][T22682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1136.521410][T22711] tipc: Started in network mode [ 1136.534405][T22711] tipc: Node identity ffffffff, cluster identity 4711 [ 1136.541741][T22711] tipc: Node number set to 4294967295 [ 1136.605116][T22682] team0: Port device team_slave_0 added [ 1136.619042][T22682] team0: Port device team_slave_1 added [ 1136.766975][T14973] Bluetooth: hci5: command 0x0c1a tx timeout [ 1136.773651][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 1136.833678][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 1136.987986][T22682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1136.997202][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 1137.022768][T22682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1137.086671][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 1137.133989][T22682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1137.155527][ T5833] Bluetooth: hci6: command 0x0c1a tx timeout [ 1137.233501][ T5833] Bluetooth: hci7: command 0x0c1a tx timeout [ 1137.249441][T22682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1137.256747][T22682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1137.319448][ T5833] Bluetooth: hci8: command 0x041b tx timeout [ 1137.420997][T22682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1137.939183][T22682] hsr_slave_0: entered promiscuous mode [ 1137.985652][T22682] hsr_slave_1: entered promiscuous mode [ 1138.013794][T22682] debugfs: 'hsr0' already exists in 'hsr' [ 1138.019564][T22682] Cannot create hsr debugfs directory [ 1138.834239][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 1138.913896][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 1139.083827][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 1139.163627][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 1139.236496][T22682] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.242714][ T5833] Bluetooth: hci6: command 0x0c1a tx timeout [ 1139.323816][ T5833] Bluetooth: hci7: command 0x0c1a tx timeout [ 1139.394062][ T5833] Bluetooth: hci8: command 0x041b tx timeout [ 1140.005862][T22682] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1140.551241][T22682] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.003565][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 1141.148354][T22682] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.185478][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 1141.233552][T14973] Bluetooth: hci3: command 0x0c1a tx timeout [ 1141.314193][T14973] Bluetooth: hci6: command 0x0c1a tx timeout [ 1141.393632][T14973] Bluetooth: hci7: command 0x0c1a tx timeout [ 1141.406535][T22682] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.473513][T14973] Bluetooth: hci8: command 0x041b tx timeout [ 1142.835245][T22682] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1142.937561][T22682] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1143.087745][T22682] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1143.198997][T22794] can: request_module (can-proto-0) failed. [ 1143.262144][T22682] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1143.553589][T14973] Bluetooth: hci8: command 0x041b tx timeout [ 1143.661042][T22682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1143.810156][T22682] 8021q: adding VLAN 0 to HW filter on device team0 [ 1143.872410][T20397] bridge0: port 1(bridge_slave_0) entered blocking state [ 1143.879692][T20397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1143.918534][T20397] bridge0: port 2(bridge_slave_1) entered blocking state [ 1143.925716][T20397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1144.161725][T22682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1144.959515][T22682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1145.115502][T22682] veth0_vlan: entered promiscuous mode [ 1145.208662][T22682] veth1_vlan: entered promiscuous mode [ 1145.287000][T22682] veth0_macvtap: entered promiscuous mode [ 1145.322380][T22682] veth1_macvtap: entered promiscuous mode [ 1145.470143][T22682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1145.545519][T22682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1145.588073][T20397] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.627743][T20397] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.640726][T14973] Bluetooth: hci8: command 0x041b tx timeout [ 1145.719116][T20397] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1145.764733][T13987] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1146.042772][ T5833] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1146.056802][ T5833] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1146.065909][ T5833] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1146.080259][ T5833] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1146.090278][ T5833] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1146.197579][T20397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.226379][T20397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1146.491544][T20398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1146.527674][T20398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1147.087908][T22831] chnl_net:caif_netlink_parms(): no params data found [ 1147.714122][T14973] Bluetooth: hci8: command 0x041b tx timeout [ 1148.101159][T22831] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.148223][T22831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.202533][T14973] Bluetooth: hci9: command tx timeout [ 1148.212521][T22831] bridge_slave_0: entered allmulticast mode [ 1148.226847][T22831] bridge_slave_0: entered promiscuous mode [ 1148.251246][T22831] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.258921][T22831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.276249][T22831] bridge_slave_1: entered allmulticast mode [ 1148.286045][T22831] bridge_slave_1: entered promiscuous mode [ 1148.446437][T22831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1148.489235][T22831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1148.582933][T22831] team0: Port device team_slave_0 added [ 1148.592671][T22831] team0: Port device team_slave_1 added [ 1148.718359][T22831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1148.757037][T22831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1148.837671][T22831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1149.088977][T22831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1149.107179][T22831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1149.163837][T22831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1149.532503][T22831] hsr_slave_0: entered promiscuous mode [ 1149.564980][T22831] hsr_slave_1: entered promiscuous mode [ 1149.571699][T22831] debugfs: 'hsr0' already exists in 'hsr' [ 1149.601624][T22831] Cannot create hsr debugfs directory [ 1150.273545][T14973] Bluetooth: hci9: command tx timeout [ 1150.534983][T22884] FAULT_INJECTION: forcing a failure. [ 1150.534983][T22884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1150.613568][T22884] CPU: 1 UID: 0 PID: 22884 Comm: syz.2.3576 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1150.613627][T22884] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1150.613641][T22884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1150.613662][T22884] Call Trace: [ 1150.613674][T22884] [ 1150.613688][T22884] dump_stack_lvl+0x100/0x190 [ 1150.613753][T22884] should_fail_ex.cold+0x5/0xa [ 1150.613799][T22884] _copy_to_user+0x32/0xd0 [ 1150.613848][T22884] dma_heap_ioctl+0x413/0x5e0 [ 1150.613914][T22884] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1150.613978][T22884] ? find_held_lock+0x2b/0x80 [ 1150.614034][T22884] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1150.614088][T22884] __x64_sys_ioctl+0x18e/0x210 [ 1150.614144][T22884] do_syscall_64+0x106/0xf80 [ 1150.614194][T22884] ? clear_bhb_loop+0x40/0x90 [ 1150.614236][T22884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.614271][T22884] RIP: 0033:0x7fc40579c799 [ 1150.614298][T22884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1150.614334][T22884] RSP: 002b:00007fc4066dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1150.614367][T22884] RAX: ffffffffffffffda RBX: 00007fc405a15fa0 RCX: 00007fc40579c799 [ 1150.614389][T22884] RDX: 0000200000000140 RSI: ffffffffffdffe00 RDI: 0000000000000006 [ 1150.614410][T22884] RBP: 00007fc405832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1150.614430][T22884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1150.614449][T22884] R13: 00007fc405a16038 R14: 00007fc405a15fa0 R15: 00007fff987780d8 [ 1150.614493][T22884] [ 1151.406921][ T30] audit: type=1804 audit(4294967676.200:29): pid=22891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.3577" name=2F6E6577726F6F742F31372F22050820 dev="tmpfs" ino=108 res=1 errno=0 [ 1151.499142][ T30] audit: type=1800 audit(4294967676.200:30): pid=22891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3577" name=22050820 dev="tmpfs" ino=108 res=0 errno=0 [ 1152.353786][T14973] Bluetooth: hci9: command tx timeout [ 1152.958334][T22831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1153.102147][T22831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1153.187574][T22831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1153.281954][T22831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1153.812891][T22831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1153.868715][T22931] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3581'. [ 1153.895854][T22831] 8021q: adding VLAN 0 to HW filter on device team0 [ 1153.920579][T22931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1153.986563][T22931] bridge_slave_1 (unregistering): left allmulticast mode [ 1154.048659][T22931] bridge_slave_1 (unregistering): left promiscuous mode [ 1154.130462][T22931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.272632][T20398] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.279942][T20398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1154.371384][T20398] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.378632][T20398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1154.441039][T14973] Bluetooth: hci9: command tx timeout [ 1154.795215][T22946] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input100 [ 1155.376962][T22946] tipc: Withdrawal distribution failure [ 1155.520950][T22831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1155.814481][T22831] veth0_vlan: entered promiscuous mode [ 1155.879977][T22831] veth1_vlan: entered promiscuous mode [ 1156.044099][T22831] veth0_macvtap: entered promiscuous mode [ 1156.117810][T22831] veth1_macvtap: entered promiscuous mode [ 1156.218853][T22831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1156.305387][T22831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1156.372985][T20397] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.423547][T20397] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.432365][T20397] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1156.499029][T20397] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1157.453648][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1157.461546][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1157.665080][T22990] [U] [ 1157.861265][T20389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1157.901786][T20389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1159.006924][ T5833] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1159.034412][ T5833] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1159.043723][ T5833] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1159.065828][ T5833] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1159.082545][ T5833] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1159.668757][ T30] audit: type=1800 audit(4294967684.500:31): pid=23015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3587" name="dbroot" dev="configfs" ino=319569 res=0 errno=0 [ 1161.154904][T11427] Bluetooth: hci10: command tx timeout [ 1161.461223][T23005] chnl_net:caif_netlink_parms(): no params data found [ 1162.492640][T23005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.554571][T23005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.561952][T23005] bridge_slave_0: entered allmulticast mode [ 1162.633105][T23005] bridge_slave_0: entered promiscuous mode [ 1162.705029][T23005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.712337][T23005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.773947][T23005] bridge_slave_1: entered allmulticast mode [ 1162.810620][T23005] bridge_slave_1: entered promiscuous mode [ 1163.086495][T23005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1163.155006][T23005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1163.234446][T11427] Bluetooth: hci10: command tx timeout [ 1163.395594][T23005] team0: Port device team_slave_0 added [ 1163.435825][T23005] team0: Port device team_slave_1 added [ 1163.738601][T23005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1163.775590][T23005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1163.893353][T23005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1163.976269][T23005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1163.993365][T23005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1164.132994][T23005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1164.731954][T23005] hsr_slave_0: entered promiscuous mode [ 1164.754401][T23005] hsr_slave_1: entered promiscuous mode [ 1164.778906][T23005] debugfs: 'hsr0' already exists in 'hsr' [ 1164.823445][T23005] Cannot create hsr debugfs directory [ 1165.316367][T11427] Bluetooth: hci10: command tx timeout [ 1166.249322][T23005] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.013693][T23094] FAULT_INJECTION: forcing a failure. [ 1167.013693][T23094] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.026515][T23094] CPU: 0 UID: 0 PID: 23094 Comm: syz.9.3595 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1167.026572][T23094] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1167.026586][T23094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1167.026612][T23094] Call Trace: [ 1167.026621][T23094] [ 1167.026632][T23094] dump_stack_lvl+0x100/0x190 [ 1167.026678][T23094] should_fail_ex.cold+0x5/0xa [ 1167.026709][T23094] should_failslab+0xc2/0x120 [ 1167.026738][T23094] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1167.026781][T23094] ? security_file_alloc+0x34/0x2c0 [ 1167.026814][T23094] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1167.026848][T23094] security_file_alloc+0x34/0x2c0 [ 1167.026881][T23094] init_file+0x95/0x480 [ 1167.026913][T23094] alloc_empty_file+0x73/0x1c0 [ 1167.026950][T23094] alloc_file_pseudo+0x13a/0x230 [ 1167.026985][T23094] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1167.027020][T23094] ? alloc_fd+0x476/0x790 [ 1167.027052][T23094] sock_alloc_file+0x50/0x210 [ 1167.027096][T23094] __sys_socket+0x1c0/0x260 [ 1167.027127][T23094] ? __pfx___sys_socket+0x10/0x10 [ 1167.027166][T23094] __x64_sys_socket+0x72/0xb0 [ 1167.027196][T23094] ? lockdep_hardirqs_on+0x78/0x100 [ 1167.027236][T23094] do_syscall_64+0x106/0xf80 [ 1167.027274][T23094] ? clear_bhb_loop+0x40/0x90 [ 1167.027306][T23094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.027333][T23094] RIP: 0033:0x7faa50f9c799 [ 1167.027355][T23094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1167.027381][T23094] RSP: 002b:00007faa51e21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1167.027406][T23094] RAX: ffffffffffffffda RBX: 00007faa51216270 RCX: 00007faa50f9c799 [ 1167.027429][T23094] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1167.027445][T23094] RBP: 00007faa51032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1167.027462][T23094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1167.027477][T23094] R13: 00007faa51216308 R14: 00007faa51216270 R15: 00007ffc86ab7498 [ 1167.027510][T23094] [ 1167.396883][T11427] Bluetooth: hci10: command tx timeout [ 1167.573251][T23005] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.023640][T23005] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.689367][T23005] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.089557][T23125] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3597'. [ 1170.220097][T23125] blkio.reset_stats is deprecated [ 1170.678986][T23005] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1170.799335][T23005] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1170.861568][T23005] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1170.972424][T23005] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1172.569293][T23005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1172.867343][T23005] 8021q: adding VLAN 0 to HW filter on device team0 [ 1173.330548][T13988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.337808][T13988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1173.742547][T20397] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.749859][T20397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1174.689922][T23183] FAULT_INJECTION: forcing a failure. [ 1174.689922][T23183] name failslab, interval 1, probability 0, space 0, times 0 [ 1174.748819][T23183] CPU: 0 UID: 0 PID: 23183 Comm: syz.0.3602 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1174.748880][T23183] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1174.748895][T23183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1174.748916][T23183] Call Trace: [ 1174.748928][T23183] [ 1174.748942][T23183] dump_stack_lvl+0x100/0x190 [ 1174.749005][T23183] should_fail_ex.cold+0x5/0xa [ 1174.749049][T23183] should_failslab+0xc2/0x120 [ 1174.749089][T23183] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1174.749145][T23183] ? __pmd_alloc+0xbf/0x950 [ 1174.749194][T23183] __pmd_alloc+0xbf/0x950 [ 1174.749240][T23183] move_page_tables+0x3224/0x4500 [ 1174.749309][T23183] ? __pfx_copy_vma+0x10/0x10 [ 1174.749363][T23183] ? __pfx_css_rstat_updated+0x10/0x10 [ 1174.749417][T23183] ? __pfx_move_page_tables+0x10/0x10 [ 1174.749490][T23183] ? finish_task_switch.isra.0+0x200/0xb80 [ 1174.749537][T23183] copy_vma_and_data+0x25c/0x7c0 [ 1174.749594][T23183] ? __pfx_copy_vma_and_data+0x10/0x10 [ 1174.749664][T23183] ? __vma_start_write+0x17f/0x280 [ 1174.749712][T23183] ? __pfx___vma_start_write+0x10/0x10 [ 1174.749771][T23183] move_vma+0x51b/0x1890 [ 1174.749832][T23183] ? __pfx_move_vma+0x10/0x10 [ 1174.749888][T23183] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1174.749931][T23183] ? cap_mmap_addr+0x4b/0x120 [ 1174.749964][T23183] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1174.750004][T23183] ? security_mmap_addr+0x71/0x1e0 [ 1174.750050][T23183] ? __get_unmapped_area+0x255/0x3e0 [ 1174.750095][T23183] ? vrm_set_new_addr+0x204/0x290 [ 1174.750152][T23183] mremap_to+0x1b7/0x450 [ 1174.750208][T23183] do_mremap+0xb76/0x2130 [ 1174.750289][T23183] ? __pfx_do_mremap+0x10/0x10 [ 1174.750353][T23183] ? ksys_write+0x190/0x250 [ 1174.750396][T23183] __do_sys_mremap+0x126/0x170 [ 1174.750452][T23183] ? __pfx___do_sys_mremap+0x10/0x10 [ 1174.750517][T23183] ? __x64_sys_futex+0x34f/0x4d0 [ 1174.750592][T23183] do_syscall_64+0x106/0xf80 [ 1174.750646][T23183] ? clear_bhb_loop+0x40/0x90 [ 1174.750691][T23183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.750728][T23183] RIP: 0033:0x7f462379c799 [ 1174.750757][T23183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1174.750794][T23183] RSP: 002b:00007f4624728028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1174.750838][T23183] RAX: ffffffffffffffda RBX: 00007f4623a15fa0 RCX: 00007f462379c799 [ 1174.750861][T23183] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 1174.750888][T23183] RBP: 00007f4623832c99 R08: 0000000100000000 R09: 0000000000000000 [ 1174.750917][T23183] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1174.750938][T23183] R13: 00007f4623a16038 R14: 00007f4623a15fa0 R15: 00007ffd1b83b638 [ 1174.750983][T23183] [ 1175.033812][T23005] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1176.886316][T23005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1179.138046][T23005] veth0_vlan: entered promiscuous mode [ 1179.286952][T23005] veth1_vlan: entered promiscuous mode [ 1179.489033][T23005] veth0_macvtap: entered promiscuous mode [ 1179.548724][T23005] veth1_macvtap: entered promiscuous mode [ 1179.687724][T23005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1179.756918][T23005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1179.830735][ T1162] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.903071][ T1162] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.951583][ T1162] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.040732][ T1162] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.210708][ T30] audit: type=1800 audit(4294967705.010:32): pid=23245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3609" name="members" dev="configfs" ino=328101 res=0 errno=0 [ 1181.093650][T23248] zswap: compressor not available [ 1181.501457][T20389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1181.609321][T20389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1182.106193][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1182.136676][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.194497][T23290] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -74 [ 1184.303713][T23290] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -74 [ 1184.448934][T23290] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 1186.547683][T23328] input: jJǸ-9%vJ86 as /devices/virtual/input/input101 [ 1187.660113][T23333] FAULT_INJECTION: forcing a failure. [ 1187.660113][T23333] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1187.753587][T23333] CPU: 1 UID: 0 PID: 23333 Comm: syz.2.3619 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1187.753648][T23333] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1187.753662][T23333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1187.753684][T23333] Call Trace: [ 1187.753697][T23333] [ 1187.753711][T23333] dump_stack_lvl+0x100/0x190 [ 1187.753771][T23333] should_fail_ex.cold+0x5/0xa [ 1187.753808][T23333] ? prepare_alloc_pages+0x16d/0x5f0 [ 1187.753853][T23333] should_fail_alloc_page+0xeb/0x140 [ 1187.753895][T23333] prepare_alloc_pages+0x1f0/0x5f0 [ 1187.753944][T23333] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1187.754006][T23333] ? stack_trace_save+0x8e/0xc0 [ 1187.754041][T23333] ? __pfx_stack_trace_save+0x10/0x10 [ 1187.754079][T23333] ? stack_depot_save_flags+0x27/0x9d0 [ 1187.754134][T23333] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1187.754187][T23333] ? kasan_save_stack+0x3f/0x50 [ 1187.754243][T23333] ? kasan_save_stack+0x30/0x50 [ 1187.754295][T23333] ? kasan_save_track+0x14/0x30 [ 1187.754326][T23333] ? system_heap_allocate+0xeb/0x1170 [ 1187.754362][T23333] ? __x64_sys_ioctl+0x18e/0x210 [ 1187.754425][T23333] ? do_syscall_64+0x106/0xf80 [ 1187.754478][T23333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.754537][T23333] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1187.754574][T23333] ? policy_nodemask+0xed/0x4f0 [ 1187.754621][T23333] alloc_pages_mpol+0x1fb/0x550 [ 1187.754662][T23333] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1187.754705][T23333] ? lockdep_init_map_type+0x5c/0x250 [ 1187.754761][T23333] alloc_pages_noprof+0x131/0x390 [ 1187.754803][T23333] system_heap_allocate+0x2d2/0x1170 [ 1187.754850][T23333] ? __pfx_system_heap_allocate+0x10/0x10 [ 1187.754886][T23333] ? __might_fault+0xc5/0x140 [ 1187.754953][T23333] dma_heap_ioctl+0x37f/0x5e0 [ 1187.755011][T23333] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1187.755064][T23333] ? find_held_lock+0x2b/0x80 [ 1187.755115][T23333] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1187.755172][T23333] __x64_sys_ioctl+0x18e/0x210 [ 1187.755226][T23333] do_syscall_64+0x106/0xf80 [ 1187.755279][T23333] ? clear_bhb_loop+0x40/0x90 [ 1187.755322][T23333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1187.755360][T23333] RIP: 0033:0x7fc40579c799 [ 1187.755397][T23333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1187.755435][T23333] RSP: 002b:00007fc4066dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1187.755469][T23333] RAX: ffffffffffffffda RBX: 00007fc405a15fa0 RCX: 00007fc40579c799 [ 1187.755493][T23333] RDX: 0000200000000140 RSI: ffffffffffdffe00 RDI: 0000000000000005 [ 1187.755515][T23333] RBP: 00007fc405832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1187.755536][T23333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1187.755557][T23333] R13: 00007fc405a16038 R14: 00007fc405a15fa0 R15: 00007fff987780d8 [ 1187.755601][T23333] [ 1188.832493][T23344] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1192.244111][T23377] FAULT_INJECTION: forcing a failure. [ 1192.244111][T23377] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.256955][T23377] CPU: 0 UID: 0 PID: 23377 Comm: syz.9.3627 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1192.257013][T23377] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1192.257027][T23377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1192.257048][T23377] Call Trace: [ 1192.257060][T23377] [ 1192.257074][T23377] dump_stack_lvl+0x100/0x190 [ 1192.257147][T23377] should_fail_ex.cold+0x5/0xa [ 1192.257193][T23377] should_failslab+0xc2/0x120 [ 1192.257231][T23377] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1192.257284][T23377] ? __pmd_alloc+0xbf/0x950 [ 1192.257335][T23377] __pmd_alloc+0xbf/0x950 [ 1192.257381][T23377] move_page_tables+0x3224/0x4500 [ 1192.257444][T23377] ? __pfx_copy_vma+0x10/0x10 [ 1192.257512][T23377] ? __pfx_move_page_tables+0x10/0x10 [ 1192.257585][T23377] ? finish_task_switch.isra.0+0x200/0xb80 [ 1192.257633][T23377] copy_vma_and_data+0x25c/0x7c0 [ 1192.257701][T23377] ? __pfx_copy_vma_and_data+0x10/0x10 [ 1192.257776][T23377] ? __vma_start_write+0x17f/0x280 [ 1192.257824][T23377] ? __pfx___vma_start_write+0x10/0x10 [ 1192.257883][T23377] move_vma+0x51b/0x1890 [ 1192.257941][T23377] ? __pfx_move_vma+0x10/0x10 [ 1192.257998][T23377] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1192.258041][T23377] ? cap_mmap_addr+0x4b/0x120 [ 1192.258074][T23377] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1192.258108][T23377] ? security_mmap_addr+0x71/0x1e0 [ 1192.258158][T23377] ? __get_unmapped_area+0x255/0x3e0 [ 1192.258205][T23377] ? vrm_set_new_addr+0x204/0x290 [ 1192.258263][T23377] mremap_to+0x1b7/0x450 [ 1192.258317][T23377] do_mremap+0xb76/0x2130 [ 1192.258387][T23377] ? __pfx_do_mremap+0x10/0x10 [ 1192.258449][T23377] ? ksys_write+0x190/0x250 [ 1192.258493][T23377] __do_sys_mremap+0x126/0x170 [ 1192.258548][T23377] ? __pfx___do_sys_mremap+0x10/0x10 [ 1192.258610][T23377] ? __x64_sys_futex+0x34f/0x4d0 [ 1192.258688][T23377] do_syscall_64+0x106/0xf80 [ 1192.258743][T23377] ? clear_bhb_loop+0x40/0x90 [ 1192.258787][T23377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.258824][T23377] RIP: 0033:0x7faa50f9c799 [ 1192.258853][T23377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1192.258890][T23377] RSP: 002b:00007faa51e84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1192.258923][T23377] RAX: ffffffffffffffda RBX: 00007faa51215fa0 RCX: 00007faa50f9c799 [ 1192.258947][T23377] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 1192.258969][T23377] RBP: 00007faa51032c99 R08: 0000000100000000 R09: 0000000000000000 [ 1192.258990][T23377] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1192.259010][T23377] R13: 00007faa51216038 R14: 00007faa51215fa0 R15: 00007ffc86ab7498 [ 1192.259055][T23377] [ 1194.054626][T23399] FAULT_INJECTION: forcing a failure. [ 1194.054626][T23399] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.131821][T23399] CPU: 1 UID: 0 PID: 23399 Comm: syz.2.3631 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1194.131872][T23399] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1194.131882][T23399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1194.131899][T23399] Call Trace: [ 1194.131908][T23399] [ 1194.131918][T23399] dump_stack_lvl+0x100/0x190 [ 1194.131963][T23399] should_fail_ex.cold+0x5/0xa [ 1194.131997][T23399] should_failslab+0xc2/0x120 [ 1194.132028][T23399] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1194.132069][T23399] ? mas_alloc_nodes+0x280/0x390 [ 1194.132110][T23399] mas_alloc_nodes+0x280/0x390 [ 1194.132148][T23399] mas_preallocate+0x39c/0xf10 [ 1194.132188][T23399] ? __memcg_slab_post_alloc_hook+0x420/0x990 [ 1194.132225][T23399] ? __pfx_mas_preallocate+0x10/0x10 [ 1194.132276][T23399] ? anon_vma_name+0x5a/0x250 [ 1194.132313][T23399] __split_vma+0x33d/0xd90 [ 1194.132356][T23399] ? __pfx___split_vma+0x10/0x10 [ 1194.132400][T23399] ? find_vma+0xbf/0x140 [ 1194.132433][T23399] vma_modify+0x1121/0x2250 [ 1194.132478][T23399] ? __pfx_vma_modify+0x10/0x10 [ 1194.132524][T23399] vma_modify_policy+0x238/0x300 [ 1194.132564][T23399] ? __pfx_vma_modify_policy+0x10/0x10 [ 1194.132622][T23399] ? mas_walk+0x6ef/0x9b0 [ 1194.132662][T23399] mbind_range+0x175/0x550 [ 1194.132699][T23399] do_mbind+0x7de/0xfd0 [ 1194.132741][T23399] ? __pfx_do_mbind+0x10/0x10 [ 1194.132774][T23399] ? __lock_acquire+0x4a5/0x2630 [ 1194.132822][T23399] ? __pfx_get_nodes+0x10/0x10 [ 1194.132852][T23399] ? find_held_lock+0x2b/0x80 [ 1194.132886][T23399] kernel_mbind+0x1b7/0x200 [ 1194.132923][T23399] ? __pfx_kernel_mbind+0x10/0x10 [ 1194.132965][T23399] do_syscall_64+0x106/0xf80 [ 1194.133003][T23399] ? clear_bhb_loop+0x40/0x90 [ 1194.133036][T23399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.133063][T23399] RIP: 0033:0x7fc40579c799 [ 1194.133084][T23399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1194.133109][T23399] RSP: 002b:00007fc4066dd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1194.133133][T23399] RAX: ffffffffffffffda RBX: 00007fc405a15fa0 RCX: 00007fc40579c799 [ 1194.133150][T23399] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 1194.133167][T23399] RBP: 00007fc405832c99 R08: 0000002000000006 R09: 0000000000000002 [ 1194.133184][T23399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1194.133199][T23399] R13: 00007fc405a16038 R14: 00007fc405a15fa0 R15: 00007fff987780d8 [ 1194.133232][T23399] [ 1197.314099][T23420] FAULT_INJECTION: forcing a failure. [ 1197.314099][T23420] name failslab, interval 1, probability 0, space 0, times 0 [ 1197.431793][T23420] CPU: 1 UID: 0 PID: 23420 Comm: syz.9.3636 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1197.431851][T23420] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1197.431865][T23420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1197.431897][T23420] Call Trace: [ 1197.431909][T23420] [ 1197.431923][T23420] dump_stack_lvl+0x100/0x190 [ 1197.431987][T23420] should_fail_ex.cold+0x5/0xa [ 1197.432031][T23420] ? inotify_handle_inode_event+0x1a5/0x6a0 [ 1197.432082][T23420] should_failslab+0xc2/0x120 [ 1197.432123][T23420] __kmalloc_noprof+0xe0/0x850 [ 1197.432178][T23420] ? stack_trace_save+0x8e/0xc0 [ 1197.432234][T23420] inotify_handle_inode_event+0x1a5/0x6a0 [ 1197.432295][T23420] ? __pfx_inotify_handle_inode_event+0x10/0x10 [ 1197.432347][T23420] fsnotify_handle_inode_event.isra.0+0x1e3/0x410 [ 1197.432393][T23420] fsnotify+0x187d/0x3550 [ 1197.432442][T23420] ? __pfx_fsnotify+0x10/0x10 [ 1197.432500][T23420] __fsnotify_parent+0x704/0xca0 [ 1197.432549][T23420] ? __pfx___fsnotify_parent+0x10/0x10 [ 1197.432613][T23420] ? __pfx___might_resched+0x10/0x10 [ 1197.432683][T23420] ? __fput+0x30d/0xb40 [ 1197.432723][T23420] __fput+0x30d/0xb40 [ 1197.432779][T23420] task_work_run+0x150/0x240 [ 1197.432836][T23420] ? __pfx_task_work_run+0x10/0x10 [ 1197.432903][T23420] exit_to_user_mode_loop+0x100/0x4a0 [ 1197.432957][T23420] do_syscall_64+0x668/0xf80 [ 1197.433012][T23420] ? clear_bhb_loop+0x40/0x90 [ 1197.433058][T23420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.433095][T23420] RIP: 0033:0x7faa50f9c799 [ 1197.433124][T23420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1197.433159][T23420] RSP: 002b:00007faa51e84028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1197.433192][T23420] RAX: 0000000000000000 RBX: 00007faa51215fa0 RCX: 00007faa50f9c799 [ 1197.433223][T23420] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1197.433244][T23420] RBP: 00007faa51032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1197.433265][T23420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1197.433285][T23420] R13: 00007faa51216038 R14: 00007faa51215fa0 R15: 00007ffc86ab7498 [ 1197.433327][T23420] [ 1198.261930][T23437] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input102 [ 1199.545540][T23464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3647'. [ 1199.584103][T23464] netlink: 'syz.2.3647': attribute type 7 has an invalid length. [ 1200.370976][T23444] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1200.464042][T23444] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1200.511666][T23444] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1200.529357][T23444] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1200.603777][T23444] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1200.693728][T23444] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1200.699928][T23444] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1200.771217][T23444] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1200.795247][T23444] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1200.858570][T23444] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 1200.924337][T23444] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 1200.996299][T14973] Bluetooth: hci4: command 0x0c1a tx timeout [ 1201.025929][T23444] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 1201.044300][T23444] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 1201.112649][T23444] Bluetooth: hci10: Opcode 0x0406 failed: -4 [ 1201.364752][T23444] Bluetooth: hci10: Opcode 0x0406 failed: -4 [ 1202.241893][T23496] QAT: Invalid ioctl 21536 [ 1202.513366][T14973] Bluetooth: hci0: command 0x0406 tx timeout [ 1202.519580][T11427] Bluetooth: hci5: command 0x0c1a tx timeout [ 1202.595122][T14973] Bluetooth: hci1: command 0x0c1a tx timeout [ 1202.675971][T14973] Bluetooth: hci2: command 0x0c1a tx timeout [ 1202.753541][T14973] Bluetooth: hci6: command 0x0c1a tx timeout [ 1202.759691][T11427] Bluetooth: hci3: command 0x0c1a tx timeout [ 1202.834677][T14973] Bluetooth: hci8: command 0x041b tx timeout [ 1202.841221][T11427] Bluetooth: hci7: command 0x0c1a tx timeout [ 1202.914260][T14973] Bluetooth: hci9: command 0x0c1a tx timeout [ 1202.941619][T23509] sd 0:0:1:0: PR command failed: 1026 [ 1203.033506][T23509] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1203.073465][T14973] Bluetooth: hci10: command 0x0c1a tx timeout [ 1203.104217][T23509] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1204.692512][T23534] futex_wake_op: syz.2.3658 tries to shift op by -2048; fix this program [ 1204.742986][T23534] 0x000000000001-0x000000020000 : "" [ 1204.774090][T23534] ftl_cs: FTL header corrupt! [ 1204.993903][T14973] Bluetooth: hci9: command 0x0c1a tx timeout [ 1205.154337][T14973] Bluetooth: hci10: command 0x0c1a tx timeout [ 1207.075451][T14973] Bluetooth: hci9: command 0x0c1a tx timeout [ 1207.233665][T14973] Bluetooth: hci10: command 0x0c1a tx timeout [ 1209.077611][T23583] FAULT_INJECTION: forcing a failure. [ 1209.077611][T23583] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.129537][T23583] CPU: 1 UID: 0 PID: 23583 Comm: syz.0.3668 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1209.129597][T23583] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1209.129611][T23583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1209.129631][T23583] Call Trace: [ 1209.129643][T23583] [ 1209.129655][T23583] dump_stack_lvl+0x100/0x190 [ 1209.129720][T23583] should_fail_ex.cold+0x5/0xa [ 1209.129797][T23583] ? inotify_handle_inode_event+0x1a5/0x6a0 [ 1209.129850][T23583] should_failslab+0xc2/0x120 [ 1209.129888][T23583] __kmalloc_noprof+0xe0/0x850 [ 1209.129940][T23583] ? stack_trace_save+0x8e/0xc0 [ 1209.129987][T23583] inotify_handle_inode_event+0x1a5/0x6a0 [ 1209.130045][T23583] ? __pfx_inotify_handle_inode_event+0x10/0x10 [ 1209.130098][T23583] fsnotify_handle_inode_event.isra.0+0x1e3/0x410 [ 1209.130146][T23583] fsnotify+0x187d/0x3550 [ 1209.130195][T23583] ? __pfx_fsnotify+0x10/0x10 [ 1209.130250][T23583] __fsnotify_parent+0x704/0xca0 [ 1209.130299][T23583] ? __pfx___fsnotify_parent+0x10/0x10 [ 1209.130347][T23583] ? __pfx___might_resched+0x10/0x10 [ 1209.130406][T23583] ? __fput+0x30d/0xb40 [ 1209.130444][T23583] __fput+0x30d/0xb40 [ 1209.130494][T23583] task_work_run+0x150/0x240 [ 1209.130546][T23583] ? __pfx_task_work_run+0x10/0x10 [ 1209.130610][T23583] exit_to_user_mode_loop+0x100/0x4a0 [ 1209.130660][T23583] do_syscall_64+0x668/0xf80 [ 1209.130710][T23583] ? clear_bhb_loop+0x40/0x90 [ 1209.130750][T23583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.130797][T23583] RIP: 0033:0x7f462379c799 [ 1209.130825][T23583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1209.130859][T23583] RSP: 002b:00007f46246c5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1209.130891][T23583] RAX: 0000000000000000 RBX: 00007f4623a16270 RCX: 00007f462379c799 [ 1209.130913][T23583] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1209.130932][T23583] RBP: 00007f4623832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1209.130953][T23583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1209.130973][T23583] R13: 00007f4623a16308 R14: 00007f4623a16270 R15: 00007ffd1b83b638 [ 1209.131019][T23583] [ 1210.845154][T23600] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1211.722834][T23612] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 1211.768249][T23612] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 1211.800524][T23610] FAULT_INJECTION: forcing a failure. [ 1211.800524][T23610] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1211.908648][T23610] CPU: 0 UID: 0 PID: 23610 Comm: syz.9.3673 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1211.908708][T23610] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1211.908723][T23610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1211.908755][T23610] Call Trace: [ 1211.908768][T23610] [ 1211.908784][T23610] dump_stack_lvl+0x100/0x190 [ 1211.908854][T23610] should_fail_ex.cold+0x5/0xa [ 1211.908890][T23610] ? prepare_alloc_pages+0x16d/0x5f0 [ 1211.908937][T23610] should_fail_alloc_page+0xeb/0x140 [ 1211.908979][T23610] prepare_alloc_pages+0x1f0/0x5f0 [ 1211.909030][T23610] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1211.909095][T23610] ? stack_trace_save+0x8e/0xc0 [ 1211.909133][T23610] ? __pfx_stack_trace_save+0x10/0x10 [ 1211.909171][T23610] ? stack_depot_save_flags+0x27/0x9d0 [ 1211.909224][T23610] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1211.909282][T23610] ? kasan_save_stack+0x3f/0x50 [ 1211.909338][T23610] ? kasan_save_stack+0x30/0x50 [ 1211.909393][T23610] ? kasan_save_track+0x14/0x30 [ 1211.909425][T23610] ? system_heap_allocate+0xeb/0x1170 [ 1211.909463][T23610] ? __x64_sys_ioctl+0x18e/0x210 [ 1211.909515][T23610] ? do_syscall_64+0x106/0xf80 [ 1211.909569][T23610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.909628][T23610] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1211.909674][T23610] ? policy_nodemask+0xed/0x4f0 [ 1211.909718][T23610] alloc_pages_mpol+0x1fb/0x550 [ 1211.909772][T23610] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1211.909817][T23610] ? lockdep_init_map_type+0x5c/0x250 [ 1211.909873][T23610] alloc_pages_noprof+0x131/0x390 [ 1211.909915][T23610] system_heap_allocate+0x2d2/0x1170 [ 1211.909964][T23610] ? __pfx_system_heap_allocate+0x10/0x10 [ 1211.910004][T23610] ? __might_fault+0xc5/0x140 [ 1211.910075][T23610] dma_heap_ioctl+0x37f/0x5e0 [ 1211.910137][T23610] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1211.910192][T23610] ? find_held_lock+0x2b/0x80 [ 1211.910248][T23610] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1211.910309][T23610] __x64_sys_ioctl+0x18e/0x210 [ 1211.910366][T23610] do_syscall_64+0x106/0xf80 [ 1211.910419][T23610] ? clear_bhb_loop+0x40/0x90 [ 1211.910463][T23610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.910502][T23610] RIP: 0033:0x7faa50f9c799 [ 1211.910531][T23610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1211.910568][T23610] RSP: 002b:00007faa51e84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1211.910614][T23610] RAX: ffffffffffffffda RBX: 00007faa51215fa0 RCX: 00007faa50f9c799 [ 1211.910663][T23610] RDX: 0000200000000140 RSI: ffffffffffdffe00 RDI: 0000000000000005 [ 1211.910688][T23610] RBP: 00007faa51032c99 R08: 0000000000000000 R09: 0000000000000000 [ 1211.910711][T23610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1211.910732][T23610] R13: 00007faa51216038 R14: 00007faa51215fa0 R15: 00007ffc86ab7498 [ 1211.910788][T23610] [ 1212.391861][T23621] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1212.857328][T13987] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 1327 with max blocks 18 with error 74 [ 1212.906675][T13987] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1212.906675][T13987] [ 1213.189124][T23636] sd 0:0:1:0: PR command failed: 1026 [ 1213.243445][T23636] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1213.296907][T23636] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1218.158824][T23702] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3691'. [ 1220.351722][T23718] FAULT_INJECTION: forcing a failure. [ 1220.351722][T23718] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.381130][T23719] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input104 [ 1220.616681][T23718] CPU: 0 UID: 0 PID: 23718 Comm: syz.9.3692 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1220.616740][T23718] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1220.616754][T23718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1220.616775][T23718] Call Trace: [ 1220.616786][T23718] [ 1220.616798][T23718] dump_stack_lvl+0x100/0x190 [ 1220.616859][T23718] should_fail_ex.cold+0x5/0xa [ 1220.616901][T23718] should_failslab+0xc2/0x120 [ 1220.616942][T23718] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1220.616996][T23718] ? alloc_empty_file+0x55/0x1c0 [ 1220.617049][T23718] alloc_empty_file+0x55/0x1c0 [ 1220.617095][T23718] alloc_file_pseudo+0x13a/0x230 [ 1220.617142][T23718] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1220.617187][T23718] ? alloc_fd+0x476/0x790 [ 1220.617230][T23718] sock_alloc_file+0x50/0x210 [ 1220.617288][T23718] __sys_socket+0x1c0/0x260 [ 1220.617331][T23718] ? __pfx___sys_socket+0x10/0x10 [ 1220.617386][T23718] __x64_sys_socket+0x72/0xb0 [ 1220.617426][T23718] ? lockdep_hardirqs_on+0x78/0x100 [ 1220.617492][T23718] do_syscall_64+0x106/0xf80 [ 1220.617544][T23718] ? clear_bhb_loop+0x40/0x90 [ 1220.617587][T23718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.617624][T23718] RIP: 0033:0x7faa50f9e007 [ 1220.617653][T23718] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1220.617690][T23718] RSP: 002b:00007faa51e82f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1220.617725][T23718] RAX: ffffffffffffffda RBX: 00007faa51215fa0 RCX: 00007faa50f9e007 [ 1220.617749][T23718] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1220.617770][T23718] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1220.617794][T23718] R10: 0000200000000180 R11: 0000000000000286 R12: 0000000000000000 [ 1220.617815][T23718] R13: 00007faa51216038 R14: 00007faa51215fa0 R15: 00007ffc86ab7498 [ 1220.617860][T23718] [ 1221.615048][T23733] block2mtd: illegal erase size [ 1223.198854][T23765] tipc: Started in network mode [ 1223.218060][T23765] tipc: Node identity ffffffff, cluster identity 4711 [ 1223.227542][T23765] tipc: Node number set to 4294967295 [ 1223.437570][T14973] Bluetooth: hci10: unexpected subevent 0x01 length: 123 > 18 [ 1224.874397][T23789] futex_wake_op: syz.0.3706 tries to shift op by -2048; fix this program [ 1224.956568][T23789] futex_wake_op: syz.0.3706 tries to shift op by -2048; fix this program [ 1225.036226][T23789] 0x000000000001-0x000000020000 : "" [ 1225.087833][T23789] ftl_cs: FTL header corrupt! [ 1227.627273][ T30] audit: type=1800 audit(4294967752.460:33): pid=23813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3713" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 1228.525539][T23832] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1229.570654][T23841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3717'. [ 1229.620635][T23840] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input105 [ 1231.332091][T23853] FAULT_INJECTION: forcing a failure. [ 1231.332091][T23853] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.380707][T23853] CPU: 1 UID: 0 PID: 23853 Comm: syz.0.3719 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1231.380770][T23853] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1231.380786][T23853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1231.380809][T23853] Call Trace: [ 1231.380821][T23853] [ 1231.380835][T23853] dump_stack_lvl+0x100/0x190 [ 1231.380916][T23853] should_fail_ex.cold+0x5/0xa [ 1231.380958][T23853] ? inotify_handle_inode_event+0x1a5/0x6a0 [ 1231.381009][T23853] should_failslab+0xc2/0x120 [ 1231.381048][T23853] __kmalloc_noprof+0xe0/0x850 [ 1231.381102][T23853] ? stack_trace_save+0x8e/0xc0 [ 1231.381147][T23853] inotify_handle_inode_event+0x1a5/0x6a0 [ 1231.381206][T23853] ? __pfx_inotify_handle_inode_event+0x10/0x10 [ 1231.381257][T23853] fsnotify_handle_inode_event.isra.0+0x1e3/0x410 [ 1231.381311][T23853] fsnotify+0x187d/0x3550 [ 1231.381360][T23853] ? __pfx_fsnotify+0x10/0x10 [ 1231.381416][T23853] __fsnotify_parent+0x704/0xca0 [ 1231.381465][T23853] ? __pfx___fsnotify_parent+0x10/0x10 [ 1231.381515][T23853] ? __pfx___might_resched+0x10/0x10 [ 1231.381585][T23853] ? __fput+0x30d/0xb40 [ 1231.381627][T23853] __fput+0x30d/0xb40 [ 1231.381677][T23853] task_work_run+0x150/0x240 [ 1231.381734][T23853] ? __pfx_task_work_run+0x10/0x10 [ 1231.381800][T23853] exit_to_user_mode_loop+0x100/0x4a0 [ 1231.381853][T23853] do_syscall_64+0x668/0xf80 [ 1231.381908][T23853] ? clear_bhb_loop+0x40/0x90 [ 1231.381953][T23853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.381991][T23853] RIP: 0033:0x7f462379c799 [ 1231.382029][T23853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1231.382067][T23853] RSP: 002b:00007f46246e6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1231.382107][T23853] RAX: 0000000000000000 RBX: 00007f4623a16180 RCX: 00007f462379c799 [ 1231.382131][T23853] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1231.382152][T23853] RBP: 00007f4623832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1231.382174][T23853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1231.382195][T23853] R13: 00007f4623a16218 R14: 00007f4623a16180 R15: 00007ffd1b83b638 [ 1231.382242][T23853] [ 1233.883949][T23893] netlink: zone id is out of range [ 1233.889354][T23893] netlink: zone id is out of range [ 1233.974891][T23893] netlink: zone id is out of range [ 1233.980541][T23893] netlink: zone id is out of range [ 1233.997313][T23893] netlink: zone id is out of range [ 1234.031707][T23893] netlink: zone id is out of range [ 1234.064757][T23893] netlink: zone id is out of range [ 1234.071692][T23895] netlink: zone id is out of range [ 1234.093044][T23893] netlink: zone id is out of range [ 1234.119605][T23895] netlink: zone id is out of range [ 1234.802661][ T30] audit: type=1804 audit(4294967759.630:34): pid=23908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3729" name="/newroot/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter" dev="tracefs" ino=19680823 res=1 errno=0 [ 1235.487841][T23920] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input106 [ 1236.193073][T23926] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input107 [ 1237.156575][ T31] INFO: task syz.3.3526:22237 blocked for more than 143 seconds. [ 1237.192935][ T31] Tainted: G U L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1237.243491][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1237.262610][ T31] task:syz.3.3526 state:D stack:27312 pid:22237 tgid:22230 ppid:16695 task_flags:0x400140 flags:0x00080002 [ 1237.275012][ T31] Call Trace: [ 1237.278523][ T31] [ 1237.284004][ T31] __schedule+0xfee/0x6120 [ 1237.289120][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1237.422015][ T31] ? __pfx___schedule+0x10/0x10 [ 1237.468718][ T31] ? find_held_lock+0x2b/0x80 [ 1237.498547][ T31] ? schedule+0x2bf/0x390 [ 1237.503057][ T31] schedule+0xdd/0x390 [ 1237.539195][ T31] schedule_preempt_disabled+0x13/0x30 [ 1237.573658][ T31] __mutex_lock+0xc9a/0x1b90 [ 1237.578491][ T31] ? nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 1237.584913][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1237.635488][ T31] ? net_generic+0xea/0x2a0 [ 1237.640180][ T31] ? net_generic+0xea/0x2a0 [ 1237.753370][ T31] ? nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 1237.759452][ T31] nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 1237.883824][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 1237.889493][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1237.973402][ T31] ? genl_get_cmd+0x3ef/0x720 [ 1237.978165][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1237.982885][ T31] ? security_capable+0x80/0x260 [ 1238.063412][ T31] genl_rcv_msg+0x560/0x800 [ 1238.068110][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1238.087799][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 1238.118753][ T31] netlink_rcv_skb+0x159/0x420 [ 1238.143308][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1238.148453][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1238.183457][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1238.188971][ T31] genl_rcv+0x28/0x40 [ 1238.193037][ T31] netlink_unicast+0x5aa/0x870 [ 1238.224707][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1238.230150][ T31] netlink_sendmsg+0x8b0/0xda0 [ 1238.243350][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1238.248758][ T31] ? __import_iovec+0x1d2/0x640 [ 1238.263329][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1238.269109][ T31] ____sys_sendmsg+0x9e1/0xb70 [ 1238.283744][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1238.291126][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1238.307198][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 1238.312931][ T31] ___sys_sendmsg+0x190/0x1e0 [ 1238.335686][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1238.341102][ T31] __sys_sendmsg+0x170/0x220 [ 1238.352863][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1238.369461][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 1238.385825][ T31] do_syscall_64+0x106/0xf80 [ 1238.390584][ T31] ? clear_bhb_loop+0x40/0x90 [ 1238.404212][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1238.424784][ T31] RIP: 0033:0x7ff4ac59c799 [ 1238.429319][ T31] RSP: 002b:00007ff4ad4c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1238.460161][ T31] RAX: ffffffffffffffda RBX: 00007ff4ac816180 RCX: 00007ff4ac59c799 [ 1238.483538][ T31] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000006 [ 1238.491823][ T31] RBP: 00007ff4ac632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1238.523684][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1238.543340][ T31] R13: 00007ff4ac816218 R14: 00007ff4ac816180 R15: 00007ffff0959058 [ 1238.551446][ T31] [ 1238.583671][ T31] [ 1238.583671][ T31] Showing all locks held in the system: [ 1238.591512][ T31] 6 locks held by kworker/u8:1/13: [ 1238.648477][ T31] #0: ffff8880b843b360 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1238.659168][ T31] #1: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2c11/0x6120 [ 1238.672101][ T31] #2: ffff8880b8426358 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x124/0x1d0 [ 1238.694563][ T31] #3: ffffffff9b451f48 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x144/0x490 [ 1238.710279][ T31] #4: ffffffff8e7e7720 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x1ea0 [ 1238.724746][ T31] #5: ffff8880b843f728 ((local_lock_t *)&pcs->lock){+.+.}-{3:3}, at: __kfree_rcu_sheaf+0x86/0x720 [ 1238.772446][ T31] 1 lock held by khungtaskd/31: [ 1238.782502][ T31] #0: ffffffff8e7e7720 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1238.794099][ T31] 9 locks held by kworker/u8:3/49: [ 1238.799373][ T31] 2 locks held by getty/5583: [ 1238.808648][ T31] #0: ffff8880346d30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1238.822501][ T31] #1: ffff8880346d3130 (&tty->atomic_write_lock){+.+.}-{4:4}, at: file_tty_write.isra.0+0x24b/0x890 [ 1238.843746][ T31] 4 locks held by kworker/u8:24/13987: [ 1238.852008][ T31] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1238.863637][ T31] #1: ffffc900038bfd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1238.880010][ T31] #2: ffffffff905fca90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1238.894655][ T31] #3: ffffffff8e7f3200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 1238.906542][ T31] 2 locks held by syz.4.3525/22216: [ 1238.911844][ T31] #0: ffffffff906c1610 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1238.935002][ T31] #1: ffffffff8ec585a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 1238.945876][ T31] 2 locks held by syz.3.3526/22237: [ 1238.951145][ T31] #0: ffffffff906c1610 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1238.961595][ T31] #1: ffffffff8ec585a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 1238.972911][ T31] 2 locks held by syz.6.3531/22300: [ 1238.979291][ T31] #0: ffffffff906c1610 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1238.993187][ T31] #1: ffffffff8ec585a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 1239.063305][ T31] 2 locks held by syz-executor/22348: [ 1239.068769][ T31] #0: ffff88807b6d00e0 (&type->s_umount_key#55){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 1239.113649][ T31] #1: ffffffff8ec585a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1239.133634][ T31] 2 locks held by syz.5.3540/22359: [ 1239.139011][ T31] #0: ffffffff906c1610 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1239.147895][ T31] #1: ffffffff8ec585a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 1239.158581][ T31] 1 lock held by syz-executor/22450: [ 1239.164241][ T31] #0: ffffffff8e7f3338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1239.174761][ T31] 2 locks held by syz.8.3546/22519: [ 1239.180099][ T31] #0: ffffffff906c1610 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1239.188885][ T31] #1: ffffffff8ec585a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 1239.199392][ T31] 2 locks held by syz.1.3547/22645: [ 1239.205142][ T31] #0: ffffffff906c1610 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1239.213811][ T31] #1: ffffffff8ec585a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 1239.227742][ T31] 2 locks held by syz.0.3735/23937: [ 1239.233602][ T31] #0: ffffffff905fca90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1239.243125][ T31] #1: ffffffff8e7f3338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1239.254428][ T31] 1 lock held by syz.2.3736/23939: [ 1239.413654][ T31] [ 1239.416144][ T31] ============================================= [ 1239.416144][ T31] [ 1239.443731][ T31] NMI backtrace for cpu 0 [ 1239.443759][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1239.443807][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1239.443819][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1239.443839][ T31] Call Trace: [ 1239.443850][ T31] [ 1239.443863][ T31] dump_stack_lvl+0x100/0x190 [ 1239.443919][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1239.443980][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1239.444028][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1239.444073][ T31] sys_info+0x141/0x190 [ 1239.444114][ T31] watchdog+0xd25/0x1050 [ 1239.444159][ T31] ? __pfx_watchdog+0x10/0x10 [ 1239.444195][ T31] ? __kthread_parkme+0x18c/0x230 [ 1239.444238][ T31] ? kthread+0x13a/0x450 [ 1239.444281][ T31] ? __pfx_watchdog+0x10/0x10 [ 1239.444311][ T31] kthread+0x370/0x450 [ 1239.444355][ T31] ? __pfx_kthread+0x10/0x10 [ 1239.444401][ T31] ret_from_fork+0x754/0xd80 [ 1239.444453][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1239.444508][ T31] ? __switch_to+0x7b4/0x1120 [ 1239.444546][ T31] ? __pfx_kthread+0x10/0x10 [ 1239.444593][ T31] ret_from_fork_asm+0x1a/0x30 [ 1239.444651][ T31] [ 1239.444664][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1239.576389][ C1] NMI backtrace for cpu 1 [ 1239.576422][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1239.576463][ C1] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1239.576474][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1239.576490][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1239.576538][ C1] Code: 28 85 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 b0 1d 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1239.576564][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000242 [ 1239.576593][ C1] RAX: 000000000057bf7f RBX: ffff88801e688000 RCX: ffffffff8b8ddc75 [ 1239.576612][ C1] RDX: 0000000000000000 RSI: ffffffff8de80d8a RDI: ffffffff8c1b11a0 [ 1239.576629][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a679d [ 1239.576646][ C1] R10: ffff8880b8533ceb R11: 0000000000000000 R12: 0000000000000001 [ 1239.576663][ C1] R13: ffffed1003cd1000 R14: 0000000000000001 R15: ffffffff90d9da10 [ 1239.576680][ C1] FS: 0000000000000000(0000) GS:ffff888124446000(0000) knlGS:0000000000000000 [ 1239.576706][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1239.576724][ C1] CR2: 0000000000000007 CR3: 0000000037ecc000 CR4: 00000000003526f0 [ 1239.576741][ C1] Call Trace: [ 1239.576751][ C1] [ 1239.576761][ C1] default_idle+0x9/0x10 [ 1239.576787][ C1] default_idle_call+0x6c/0xb0 [ 1239.576815][ C1] do_idle+0x464/0x590 [ 1239.576843][ C1] ? __pfx_do_idle+0x10/0x10 [ 1239.576874][ C1] cpu_startup_entry+0x4f/0x60 [ 1239.576901][ C1] start_secondary+0x21d/0x2d0 [ 1239.576939][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1239.576980][ C1] common_startup_64+0x13e/0x148 [ 1239.577019][ C1] [ 1239.919530][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1239.926465][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1239.937312][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1239.942555][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1239.952664][ T31] Call Trace: [ 1239.955991][ T31] [ 1239.958963][ T31] dump_stack_lvl+0x100/0x190 [ 1239.963720][ T31] vpanic+0x552/0x970 [ 1239.967815][ T31] ? __pfx_vpanic+0x10/0x10 [ 1239.972373][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1239.978598][ T31] panic+0xd1/0xe0 [ 1239.982377][ T31] ? __pfx_panic+0x10/0x10 [ 1239.986858][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1239.993088][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1239.999323][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1240.005556][ T31] ? watchdog.cold+0x198/0x1ca [ 1240.010387][ T31] ? watchdog+0xd35/0x1050 [ 1240.014867][ T31] watchdog.cold+0x1a9/0x1ca [ 1240.019533][ T31] ? __pfx_watchdog+0x10/0x10 [ 1240.024279][ T31] ? __kthread_parkme+0x18c/0x230 [ 1240.029377][ T31] ? kthread+0x13a/0x450 [ 1240.034103][ T31] ? __pfx_watchdog+0x10/0x10 [ 1240.038856][ T31] kthread+0x370/0x450 [ 1240.043000][ T31] ? __pfx_kthread+0x10/0x10 [ 1240.047930][ T31] ret_from_fork+0x754/0xd80 [ 1240.052600][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1240.057794][ T31] ? __switch_to+0x7b4/0x1120 [ 1240.062625][ T31] ? __pfx_kthread+0x10/0x10 [ 1240.067294][ T31] ret_from_fork_asm+0x1a/0x30 [ 1240.072142][ T31] [ 1240.075837][ T31] Kernel Offset: disabled [ 1240.080390][ T31] Rebooting in 86400 seconds..