last executing test programs: 17m17.745221751s ago: executing program 32 (id=154): mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r0, 0x3b8a, 0x38) socket(0x2, 0x1, 0x120) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) mmap$auto(0x0, 0x1005, 0x4000000000df, 0x40ebd, 0x401, 0x300000000000) ioprio_get$auto(0xffff4499, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0xfffffffffffffffe, 0x800a00006, 0x4, 0x40eb1, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x8de, 0xdf, 0x591b, 0x2, 0xb) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000540)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x8983, 0x4) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xfffffffffffffff6, 0x948b, 0x8000000000003, 0x15f4da0b, 0x3, 0x3, 0x65, 0xfff, 0x7db9974f, 0x6d3e, 0x9, 0x1, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xaeda, 0x7, 0x9, 0x9, 0x400006, 0x1ff, 0x6, 0x3, 0x4, 0xc000000000000000, 0x3, 0x442ff, 0x8, 0x0, 0x7, 0x10001]}, 0x0, 0x0, &(0x7f0000000340)={0x6, 0x400000000000cb}) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20400, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000140)="e9") read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/134, 0x86) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x400fffffdef) openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000240), 0x20f02, 0x0) write$auto(0x3, 0x0, 0xfffffdef) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002d80)=ANY=[@ANYBLOB="580089", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYRES16=r1], 0x1458}, 0x1, 0x0, 0x0, 0x48000}, 0x20000040) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop8/events_poll_msecs\x00', 0x800, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) 16m57.230302813s ago: executing program 33 (id=216): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(0x3, 0x400454ca, 0x38) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="040026bd7000fcdbdf2504000000a5f9b26e87db714f1950a1198258f656ea5a74f1f60e1c34cd4b86af7dfb3451f8afeee67d6bd565316c4d62c7b5e8765fc5e06d2623bddbcf892552d3863e3d69a5a84178c385eea94bd3ac03e5abab46320f62fcce094a6286e7d8cb30f86b08dfc244cbded0dbc3489adc28586128857c5aba2cfe1af88ea72852dad8a72136e34700323beac68d8388ef8364ee71401f9f036006c36d9cbef019b48d051f0d828e60158c3aebb4fc4ade98da723241ed71d99005aa0b3200a7d2e271346b4cf31ba8ec48e465fa8e87"], 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10e, 0x8, 0x0) (async) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xfffffffe, 0x103, 0x10000007, 0x1f, 0x7181, 0x1ffde, 0xb099, 0x3, 0x9, 0x6, 0x3, 0x884, 0x1, 0xb7, 0x9, 0x8, 0x10003, 0xb2, 0x4, 0x0, 0x6, 0x22004, 0x7, 0x1, 0x84, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xb, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0xb, 0x8, 0x2, 0x0, 0x0, 0x0, 0xad3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x7]}, 0x1fe, 0xd) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1000"], 0x3c}}, 0xf7374674b920089e) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='r'], 0x1ac}}, 0x4004) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x6, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0x0) (async) write$auto(0x3, 0x0, 0xfdf3) (async) r1 = openat$auto_ftrace_formats_fops_trace_printk(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/tracing/printk_formats\x00', 0xc0002, 0x0) pread64$auto(r1, 0x0, 0x1, 0xb29e) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001300)={'batadv_slave_0\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r2) (async) openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x200880, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000500), r2) sendmsg$auto_NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="07f2878d26036ee753", @ANYRES16=r6, @ANYBLOB="10012cbd7000fbdbdf25760000008600ba001b5017f2d75201ab75fe4a347995c91369b8292d9acb43cce210427ced1faa0003c72e24f50e9cb0919285bd28c4735c105cca4954d1845dec4d3374fbc7416012d0e65f7e93a8052bf83d1524eb0a6f0122824b4ccb8e0896f313703f4e833f7f52f4a5e04a6b92dafac720ddbef6c280f63456734ca5952d646b994bfc7b87c0fd000004003c000600960004000000040044010c00990006000000000000000400bf00"], 0xbc}, 0x1, 0x0, 0x0, 0x4100}, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/veth0_virt_wifi/drop_unicast_in_l2_multicast\x00', 0x68001, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022cbd7000fbdbdf25120000000c00018008000100", @ANYRES32=r3, @ANYBLOB="000000e90bc9ff00"], 0x28}, 0x1, 0x100000000000000, 0x0, 0x9dfefc5e47f5c72f}, 0x0) 16m4.861642074s ago: executing program 34 (id=336): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x14000, 0x0) ioctl$auto_USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000040)=0x7) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/rcutree/parameters/do_rcu_barrier\x00', 0x10b142, 0x0) sendfile$auto(r1, r1, 0x0, 0x5) 13m13.005036639s ago: executing program 35 (id=696): socket(0x1d, 0x2, 0x6) r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) newfstatat$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x8, 0x7, 0x9, 0x7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x8, 0x5, 0x5, 0x4, 0x1000000000, 0x8, 0x4a7b, 0x8, 0x2}, 0x7) msgctl$auto_MSG_STAT_ANY(0x66, 0xd, &(0x7f0000000400)={{0x7, 0x0, 0xee00, 0x4, 0x80, 0xfffffff0, 0x7fff}, &(0x7f0000000380), &(0x7f00000003c0)=0x4, 0x7, 0x6, 0x4, 0x8, 0x2, 0x1e90, 0x7, 0xa, @raw=0x401, @raw=0xd}) r4 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f0000000580)={@siginfo_0_0={0xa, 0x6, 0x6, @_sigsys={&(0x7f0000000500)="3d5e4752b8f6f4d6ed987a1f7336df3484bb960a8017c450a37d0584308f69a45c74939e84580a6f73963eac765f7e34e5d977b1de9ee5cc398342728bb70c362c56c2ef2a6d5990a200b7dc9311ad193905b887", 0x6, 0x6}}}, 0x0, &(0x7f0000000600)={{0x0, 0x6}, {0xfb2e, 0x8}, 0x10000, 0x6, 0x9d1, 0xa3, 0xfff, 0x8, 0x100, 0x4, 0x2, 0x2, 0x8000000000000001, 0xf70, 0x2, 0x7}) r5 = set_tid_address$auto(&(0x7f00000006c0)=0x8) msgctl$auto(0x8, 0x9, &(0x7f0000000700)={{0xfff, r2, r3, 0x3, 0x15, 0x7, 0x100}, &(0x7f0000000480)=0x8, &(0x7f00000004c0)=0xd, 0x0, 0x8, 0x3ff, 0x5bad, 0x4, 0x7f, 0x874c, 0x7, @inferred=r4, @inferred=r5}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xa, 0x3, 0xe, 0x940, 0xfffffff8, 0x3, 0x1004, 0x1, 0x9, 0x5, 0x6, 0x7, 0x1001000, 0x8, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x4, 0x40000081) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x52, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x8044) setregid$auto(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000180)=""/196, 0xc4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(0x0, 0x0, 0x700) r7 = socket(0xa, 0x5, 0x0) ioctl$auto(r7, 0x8941, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0xb02, 0x0) sendfile$auto(r9, r9, 0x0, 0xb2d) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x54, r10, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, "1bc6e7e10bc66696ea9b05d53fcb46cdea5e227f20ea27bbee943b059ee673eb196cbf758915ad0d31d27b34b0e98cd68af9d349f9047fced32270"}]}, 0x54}}, 0x4004010) 13m12.917495041s ago: executing program 36 (id=694): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/9/chip_name\x00', 0x181040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/48, 0x30) unshare$auto(0x40000080) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x5) unshare$auto(0xffffffff00000001) mmap$auto(0xfffffffffffffffe, 0x8, 0x4000000000db, 0x12, 0x400, 0x8001) setsockopt$auto_SO_TIMESTAMPNS_NEW(0xffffffffffffffff, 0x4, 0x40, 0x0, 0x4) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001bc0)=ANY=[@ANYRESDEC=r2, @ANYBLOB="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"], 0x2bc4}, 0x1, 0x0, 0x0, 0x20008010}, 0x24000080) write$auto_console_fops_tty_io(r2, &(0x7f0000000440)="671d2647dd69b6440843b6e6688a2b5ad9df2669e6f9cd2365", 0xfdef) mmap$auto(0xfffffffffffffffd, 0xffffffffffff36b8, 0x7, 0x17, r2, 0x0) listmount$auto(0x0, 0x0, 0x7fffffffffffffff, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D2\x00', 0x0, 0x0) r3 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) ioperm$auto(0x7, 0x5ad2, 0x8) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000200)={{@raw=0x4, 0x0, 0x1000004, 0x480808, "3112d58500a8b47148e22af9ffb683dbede3d0bf828bbf100000e5e2f96ee50484b0755015e48d00", @inferred=0xffffffffffffffff}, 0x2, 0xc, 0x4, @inferred, @reserved="196c056a347704def6f5c5636ed52c07609cee4319588cd9a11ad396065c1267314ab73ce54c205a43297cf5b6310383212fdbb93e51da48edd9350aa935db0d5d6e32e39d8f68ee55f32c5de7b40a4ceb3840920880cbb9fc246ea65af96a74482a52e660cfc6828ba8c9404d70b947a06c9927ba7f1beed137c48265c74c8d", "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090d70925450ece0bb32777702b07552d000000000000000000ebff0000000000000059a200"}) rt_sigqueueinfo$auto(r4, 0xffff7b6f, &(0x7f0000000000)={@siginfo_0_0={0xf9, 0x401, 0x9, @_sigpoll={0xd}}}) r5 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r5, &(0x7f00000001c0)={{&(0x7f00000000c0), 0x7fcb, 0x0, 0x10015, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x9, 0x100) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/netfs/caches\x00', 0x102, 0x0) pread64$auto(r6, 0x0, 0xfffffffd, 0x1040cb9258) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x7, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) unshare$auto(0x72a1) unshare$auto(0x40000080) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty36\x00', 0x0, 0x0) read$auto(r7, 0x0, 0x80) 3m55.909601976s ago: executing program 8 (id=2098): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x48880, 0x0) poll$auto(&(0x7f0000000180)={0xffffffffffffffff, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x0) mmap$auto(0x0, 0x1, 0xdc, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x800000000001, 0x0) write$auto(r1, &(0x7f00000005c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D_#\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1d\xff\xff\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x18\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc^:\xd1\xe3\xf1@\xc0\x93^:Mn#Oi\xaa[X\x93)\x8f\x03K\xe6\xa4\x11?\xf1\x02+\\\xf9\x8b\xe5l5\x11\x006c\x907E\xeb\x81\fB\xe3\xf8n\x8f\x94V\xbcB\x9cm\x9f\x15\x00Q\xf8\x8fFW#?\xd5Z~\xa51\x832\xbd|\x19\xda\x8e\xf4a\xffN\xd2_\xe5\\\xf8Lzc\xd4\xa0\x1f\x04_\xf1\xc6\fO\xbe?)Q\xc7\\B\xdb\xeaI\xde\xe9m\xf5\xf9\x19\xd3@IK\xe3c\x0ek\x8drZ\xad\xdc\xbb\xfc\xd4\x1f\xdaOW\x87\xb6Fm\x12\xadw(z\\j\xcc0P\xaeC\x9f\xbf\xd5\xf9\xe3\x85~cG\f\x85\xd6\x84ma\xfd\xdayNj\x80\xdd3^\x87,\x14\x8e\xbe$\x05\x8a\xb0 M\xf6$B TCs?\xc5\x90\xc1\x98\xcf\x953\xba\xa9\x91dil[\xfc\a\xbfD\xd9\x8d(F\x1e\f\xec\xe9K|h\xf5\xcaUI\x18#\xbed\xa8C\x8a\xbb\fE\xe6\xa3|\xf7\xa8\xbb\xd3\x97l.V/uc\xb5Q\x1eY\xe0\x03\xa1\xc1\xc8\xe2=RK\x7fWV;\xe4\xccTsf\xa7[\xdd\x9cR\xab\xf81s\xbc\x9c\xaaSGH\x9al\xb9%u\v\xb4\x9d\x95\x16\x01\xbbT\x99S\xf8A\xcd\bRC\xf4\xb0\x1a%\xdd+1\x81\x9d6\x90\xe8\xc6\xc1\x1e\xf0~\xaf\x10g&\xd6\x01l::V\xdbJiVW\xab4G\x97', 0x100000a3d9) madvise$auto(0x40007d, 0xff7ffffffffefffd, 0x15) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) pread64$auto(r2, 0x0, 0x7, 0xffff) r3 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, r1, 0x300000000000) ioctl$auto_UBI_IOCDET(r3, 0x40046f41, 0x0) ioctl$auto_XFS_IOC_FREESP64(r0, 0x40305825, &(0x7f00000000c0)={0x8003, 0x5, 0x736a, 0x8, 0x8001, 0x0}) capset$auto(&(0x7f00000001c0)={0xcc, r4}, &(0x7f0000000200)={0x986, 0xfffffc00, 0x7017}) migrate_pages$auto(r5, 0x6, &(0x7f0000000100)=0x7, &(0x7f0000000140)=0x2) r6 = socket(0x2, 0x1, 0x106) bind$auto(r6, &(0x7f0000000040)=@in={0x2, 0x5, @multicast2}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xa3, 0xeb1, 0xffffffffffffffff, 0x8000) r7 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0\x00', 0x1902, 0x0) ioctl$auto_BLKPG2(r7, 0x1269, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/workqueue/nf_ft_offload_stats/affinity_scope\x00', 0x8000, 0x0) read$auto(r8, 0x0, 0x20) close_range$auto(0x0, r8, 0x4000000000002) socket(0x2, 0x801, 0x106) socketpair$auto(0x1a, 0x9, 0x8000000000000000, 0x0) r9 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtd0ro\x00', 0x0, 0x0) ioctl$auto_BLKPG2(r9, 0x1269, 0x0) close_range$auto(0x2, 0x8, 0x0) 3m53.974377971s ago: executing program 8 (id=2099): sendmsg$auto_MACSEC_CMD_DEL_RXSC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYBLOB="010527bd7000fbdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="1800"], 0x34}, 0x1, 0x0, 0x0, 0x4028811}, 0x4080) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x21, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1e"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) setfsuid$auto(0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x14, r2, 0x1, 0x870bd2b, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_SERVICE(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@nested={0xc, 0x4, 0x0, 0x1, [@typed={0x8, 0x7d, 0x0, 0x0, @pid}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x2}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4050}, 0x20008004) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_XFS_IOC_COMMIT_RANGE(r5, 0x40585883, &(0x7f0000000100)={r3, 0x0, 0x1, 0x8, 0x9, 0x6, [0xca, 0x4, 0x8, 0x8, 0x29, 0xd]}) ioctl$auto_dma_heap_fops_dma_heap(r5, 0xa, &(0x7f0000000040)="b0673f1558dea989b14be22145bacdfe4c7bbf0905bc940741e5b8f24d2f08f19522c2b01dfb000035b6161f8887d3b9642f2c6ae12d3d71eaf9efe1c7657cde2c2cc77e4c2b32715ca6789ce78ca17e5ca6bc3384d2fb2d43d09d6c2cb8296d61311324b0dfa836f5f663ff67fceee936fd2db49abadbd246647dbca61db53ffebdd3635fd3d81dc188af6852577d8f28206a4c0e03ecebddabb4b0d388926a1714b37d253dc48a5432bbedcf") ioctl$auto_BTRFS_IOC_SNAP_DESTROY(r5, 0x5000940f, &(0x7f0000000a00)={@raw=0x5, "1ed45f2f762cd0a0671f78b0380668d29efc651c54fd0eb8b01e13d66e30279214901c2a8535863a1a8e2c8db305949c3af12bc9064e61d4cc8b1631028299cf7832930f74193df9b660afcf1acc65cfeb7a41986c7b8b4c5a26b2ef6fa39f2d8408355841a9664fa61cdff939af05a15e232538b8e0a980f9db3bc2be3933ab8ac779019997d8c04b272a6c10efda66cf9610bb03d231c925f624866fdd00f95aaec80c4656707a1668d29b44288752ece780d79d1ecc386ac9a810fb6fae20fb0e497524b1154626bef45c60289e7e059034682dd639dab9caf819fecad6cb033dba2d58309c9d54cc7948e542468beb58e43d8330816da4c5b72c49666ecf7191112ddcd2b71e40d4038e3a22d74afcd69947b93da4f03386d831bd8fe1bb093839f8e34b723d1df6181d1416c0da98549d06de5a8db8412312f8d26e3e8b12683f3a5b00b073a8cadb627f7ccf55dc17be73174f0f13982f0e60375ae1bdad9404f3e34e9dd0072724fe6a2fada4ea190f763dfa9cb47eae0e741bfb5f229c5e245beece003108cd95a0f1eaa415d8c73964fb8879a026c8055798d76e269101086c617c6f1856c674812d2c1085cc55db0cdde3c29d323fd634cd584d3731951e75cd001d333559b2de0d292449dbd6e190daa26dbb64dbfdf319348bfd51ddaef5f1dd3e8b32365a21396816e5cfef2998d80ce07026e636905c99bf6bc8afe3386f3e1e513a03af95d8372c336019fb2dd28590cd88057557fc11356f11e946cc1516f335ebf09e309ab2501580edfe37611d3f3540e2fa04b8ca9685e259fa2dd50b026b2b5fce5455c7e6e4a67281d3610a6dbf43363e19b41e30ee2a3c4635a0e8f0773210df47669f2d7fba12b159f0f1074eef1bfe932f92c1c135064395acc434b642ab3bc179b0979a13c8282aa94fa3cdbc1efe97228bba1d476cd7ad7e38822f01d6972023fda659a0d39a74e8edc9c93e09b5e424cc59948d01ad1db5433368ba11380fe3d2f9ab5b56cdd6567780170f701b701841d5ae1155d87a28b362b8e38e480de2f39a5b946298b2c822a7638257bdc9fe3962719398fc70ef4886f6d8f8827bb9e4ebab52488780573b77881ae213ab0587582841a98f20dfe7ccb68b7d61d6809b8f3aff455174a24ff1adffe40a9dfb707e53533b1a5668febb9402ba2ae046fe5582dec7967e5d5679a730e38c18bbc4965775b7a05ea51928ad9346c4793c8b692dc4c484007244d824fd0b429cd6475a36b8f30b94a4632f2444073812a9f06c5a16d20d22f03a7d76da55a30e30b73caa025302832b59c34b9898817e14f2e0973405e0effd8d4c1a5e0f36cf7b04bb54eea5c67ec386bdd1f163072013d27044ad9d77eb1752f8b217c885540b43f5960a80b2bca557a889e4a4110d5bbc56ae764abad402a1538880e8e6e1e5511a2b5d9ccffa2e373afd2af6d8eaf60ebf2ec76fa4d953b1e6b936af2d50d3061c1c4070be5481756face2ccc121d529d134ff223a69c24ca3309289707b0a0c98e118ae3a4351e0da23e35a06430511554d437dd3f262486ee17b384a877a066a1e31c1ff06bd7ba7b4aadf78644fe8f7f77171e572e336e6b1b3089dc18b71fb7a160b909a17667ac4159c3cdd4f265ddb23b62b6cb2e49970073e0bf1dc40754fb411ffe32ef3a5a9d6a8aaf9d5169ce21d8426648d98180782d7b1359d45e00bd37b3a81d7ee047f2b3e569c6ea88476669ffeb770cad4aceceff737b2d593a54af13224af4c083b5d5389ff05a3dd085e32ab5b0c482565a8e33c339816d99d1b4ef8380d85d1545e180809df8babbbfef711b8e7f8017906e0dbfdb650a34c30758c5a1d871aa0ca6fbe1022ccb277730e4715cb028c7e1dfd3dd962abd8e289d89d621c240586bfda96536fa4672c44b1600265f8445c7aa124047d6883e9e640edc23be93f47dafdb3036b66b1bd67b94256423404c197bd8b7eeca71139a00091c55aafec722f15de1d5c1bacfbc0687f32e908137aa81f39374dcd7ab1163e0c946b6d789b2a311f52ef32c354164b8f5c39a79ad68c62c065be6c6d119abde2cc7db646ac4d4751eec10772a5cf587badc6af12028b6eda2de4c9df3c6a7134a31b9fef19b42502a1271f30aa785814235f2dc2e3900161b9b7414ddf5c61b5d6b5d094bdfd2961502579ad0ea3fc3df6c6599f2f6495e7830e9bdf9960c575d53ea5c9f2dd0e01eecf279451eaa860a3ac1539326850c3ca541862bcf825caec6c748b71232e0b9896b9594e2c44ac9f0470ad866fa5bc7ba489d0c4c913ab8f3a9ff66e53538b1a123c974a588b1a417421a275f6074d86098782f22d260dc4cbb1e0e68e58de60a8bddb105cdb695311fde07efb9f90e929f5fcc4a9faabd013c32bf7d4af623f49a31bbd2ee9306fddd94ff3d474b999585a51f41616514cd8e05c44b505c6104eb564df838030c5026468fab4ea08dc5fbc8189b060f292144073289ec74b295442a403f396dee687b40ff658c016dfe29d6fe5bb773b421604d6988b3afb37cf53246a6483c6436fced71695af5fff9505848189de7d14e4cbd9cb6dba31562c931146395e7ce59f1352b6e2d445b3c463ccdf431ccc10efb5519685f24fc96d3121c0efa381d73592d933556061a3ae6f57759d257cba25d5c50c9e77af9b074f44cfbcdacb93873b19fc4e2e50416bb589c7c0e5e538c88fc26ce5b5187053bbfff601743bd9c65830fee4cc32410b809f65e9f93e867816849f5992f2ff8d9021417609fd10c95720a698f8b3e0a7cc8d01fe1cac6c591c2029f1887825ff0a17b9ae586d9380dca2f3024184b2b85fef05df14458a75efd6970f930865f70cb741f12f92dc9b27ba1c47d7fe99f6cef3ba41002a4953ff503a2877120612a5f185304ad475eab0da63fa4ca0b9a43d64bf28464f43fab67a245de69d200608ab54d9058b44c4f7cd643948e8161f0bcf7cb86d0197858f2c06dbe4756cd3f40d443857402b3db298e198e7ac060bbb117d22a47937a7c94fd75db7b0861c5c7efa71da1b4313c40529a186fbbd36e7e8a49431af0a39512ef60a4f1c2068ff0773702088924e01c12abda97f6c88b678f71ccc61a84e52ca532cef65c8fa65cfcca9969942f7269cf344150e96895d55ea54229837b0bfc573f92313c61c3f17e68c185d218dfc9216313e0f82ad82fc44dfbb1c394561c2314be0a12c70946f4be049685688556dd2369f7c315bf4d0603c9d00a6a0c61f8ecbaa17483d128c22a4726f0723a3f325afe2116a60639a079c8296ad5646f59068c15dee6f081de83f580c52a862b02f0f66c2fddd88915bb4cc979f84371f6b2b85713c58c40ec2129754894c958684c6f2c3570942d9c8bc74995630144a241c931e7b592f257500e8e8e9057ee0e486bcb6468ca1dd07d8efefff0eec9073e4d3dc2851482d220310174f1d8b0710cb4f03e18335df4a903c3178479f98471d0c72ed9ea977679b9da3963a28861fb38d92143852da6cf12650be18bc323b6bf4b015e5cd2d11c520b52073cabb14a149657e7ba507d8cb725025b0506977cc4aaf623eac79feb91a95e3917560a7fd7d22adad0ffa59451ecfe16d0df4c764299f0ac27c35476a3aaec9fdc06cb8877f8abe15ca138a3e50dec92443cde4ad27071174781d486009151789f839f7d1ec74154e5f0dfcfc85e381417ffabfc217ccba0994ca838b47a832c73f5467432a1f680a4c7e50c23de0a8899ccfaefcd8f8d6fdfac80a1291e983060b774571bd4dc3b9beee4ebb502ce29f80a23eca24dcbc4f37f5b70c6433b3f7db51cabbcde9fb3321c4e59004a89ddf4a92e2f540bcd7d5917a17a1d0686e2ae080312ec9127da8af27990c14d54a608a00e3d66414af70b64c4c470c6964831de6d3c166b2e7fdce72c143752aef71a1c0c664be6ace7e831977f853049e27727b26214bb73818b7a495ca1bc3e4355cc98c9762461d127cdba4efde61c6070a0039dc72bf296818668a6902725e89c33366dc9a45a7fe2cb1a0a29c716cc5b75aff23bcaab49471bdfc047c425b794c2a84d87319e5aabdabed4565dc6cd7af51305f3f4927aedaf506208bed48f9e7ce20125a725c7a966e22c23245044b7cc27e910e4359399702648ca93e3fcafc9be007ceabbccbd6a62ea6c8a2d4444fb0b1a48d21b944e093a983a404b8eb16477c4f2d0942c042e4d77de48df43265cf59d5b998c519af59378b3b26988375049dc54c456cadce242881f4fedac9406e869f8caba1504ebe253c360c78501391cba69d8f032f2af075d25ac4487a78b18b1667a0ed045dcda9b429cc4c3dc0b99832943956e28f1e3f336eb1fd0cbb7b7d1a2a767e6fede9cdca3f9d798339456c2e8c88a5f795292caa1f23e52945d7d5af4118c14c06047c12f3c122bc2e2f264ad31fe8610d6f76179a5fd4d0d9f42702fa21c6f4a417f00c15474979cc76b65aff490ba4e4215f41ce55eb08669f559f9c1987278e21ad73a1fc694818616fa6981fb7d156df626da2c1c83803f36dcc7ce4f91bd9d3a3b38a4ae4543e0f72c971472a4e0e631ef12cd7cbf73f7e8aa66f96148e3e93a6145e8d16910114cc32ce8f95c0e1b96cc875bf2da4fabb765a120fff2a9c1ce078add79d5b6c7e39ab7c49fbd84505cb8a70e90353a2de4d989099c224f310817a7af8a4930c5ba7ccd23f757e7e756e791c98f72dbef2e7614512e10509292b5408b911870c9e51e22ed9e735bc3a31d934a32197690d07d2e074857369566ca1d50e9487e90b3b941a109644657dfdd01691e99437545072010b37a005a33992da7e953099668b8a48183443d04806cf6ddc4e547a0652291928b1230b6e8a62b32ddeae3ccc7befe44318b4d82ec349e50dc121a218842b504cb4288e53e3dfb0fd3b146288cbe1e6618eb7c6c719098ff62193a66f6eb21298f605441584a9de74d0b3c65f90e519cb11abfd6155d95962d8935380a5da7527c82dc346461507b489293fdac34406cfdbd5d1cac3a81b821ced0b1e23c7cc358edb6bef896f8e28d51a9b1e2e7ba1d2590508ca8d66086f2a096266306065985825d8b501aaa0b51b6c325cb734a7b1bfb02a32aa2052e38252f6933ede8dd02a35f3e27767e6acf4352835b4a462e3a3b064df28c7661d890d397522a3340715f4110f31279c63cfaa4dd086e4ab57eec7be45d6a843d88b50ac1780b501c787222d9d13466de65f889ae634dfb1bf1f464d3719aa8599562386127cbd08a5901eb95440b60b07caef50c962574b39adc197056a7d3f84ce15088a8bc603ac5632cfb7d32e50d86fee0a5cc96efb1e3dda26a45652feca7d37521bfe2dffa0f3a0ccabd5f6d6c3aaf1f4c3263dfa2cf91f0c25b3e8d7cfed8d1dada7402900ebb4a9757d4df200d75bfc7ee7940ef7849d3f8ae1b5475a20149825c59d11b6619898afdfebf31f012c1d2f98feeffb583adf447e7669ce591628a8b7c943a6dc5bcd0aaa58f7f03eeed1303fba2888a8703abe6ce751e900961375cd443e240896c1e65aa3bf0ab19668e042f4e2aa86936a80894ec093908e9c3531cbf68d5df8f0ea99de61555f98effef9af8ee8fc445c5e7748ea8e7dc995a1b914533733899dbad8eeb81a20402fc2a696cd9fe9f69cb7245748f59c0144a13c636382d9b364d19745fcd4b5687b9415d4de37f0267bd587410a9f2de9f45c86e396ad424848b1070a7fdd78ba03cd0be3701754cbce90f4ba0497e44d0979ee"}) 3m38.882066897s ago: executing program 37 (id=2099): sendmsg$auto_MACSEC_CMD_DEL_RXSC(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYBLOB="010527bd7000fbdbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="1800"], 0x34}, 0x1, 0x0, 0x0, 0x4028811}, 0x4080) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x21, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="1e"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) setfsuid$auto(0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000000)={0x14, r2, 0x1, 0x870bd2b, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_SERVICE(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@nested={0xc, 0x4, 0x0, 0x1, [@typed={0x8, 0x7d, 0x0, 0x0, @pid}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x2}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4050}, 0x20008004) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_XFS_IOC_COMMIT_RANGE(r5, 0x40585883, &(0x7f0000000100)={r3, 0x0, 0x1, 0x8, 0x9, 0x6, [0xca, 0x4, 0x8, 0x8, 0x29, 0xd]}) ioctl$auto_dma_heap_fops_dma_heap(r5, 0xa, &(0x7f0000000040)="b0673f1558dea989b14be22145bacdfe4c7bbf0905bc940741e5b8f24d2f08f19522c2b01dfb000035b6161f8887d3b9642f2c6ae12d3d71eaf9efe1c7657cde2c2cc77e4c2b32715ca6789ce78ca17e5ca6bc3384d2fb2d43d09d6c2cb8296d61311324b0dfa836f5f663ff67fceee936fd2db49abadbd246647dbca61db53ffebdd3635fd3d81dc188af6852577d8f28206a4c0e03ecebddabb4b0d388926a1714b37d253dc48a5432bbedcf") ioctl$auto_BTRFS_IOC_SNAP_DESTROY(r5, 0x5000940f, &(0x7f0000000a00)={@raw=0x5, "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"}) 2m42.364804342s ago: executing program 9 (id=2260): syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\x00\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0x95) 2m41.105939706s ago: executing program 9 (id=2262): r0 = socket(0xa, 0x5, 0x0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'pimreg\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00@\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf25110000003000018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="140002006261746164765f736c6176655f31000008000100", @ANYRES32=r4, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0xd0) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000280)=@enable_stats={0xd3e5}, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) epoll_ctl$auto(r0, 0x0, r0, &(0x7f0000000240)={0x8, 0xfffffffffffffffd}) setsockopt$auto(0x3, 0x10000000084, 0x72, 0x0, 0xc) 2m40.128490299s ago: executing program 9 (id=2267): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x4d0, 0x400, 0x2}]}) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0x6, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) vmsplice$auto(r2, &(0x7f0000000080)={&(0x7f0000000000)="94d506a12a863d23642946ddf65231269f59750415795f27f74e590ed54b0e2f0e0c15f4b5c571a97a5446d491d60988f16ee5900d6c5a22029810f0e9120550896579946c9d1a2e263b45d6cf16d9d625a5f2fe4ff669f188", 0xd9}, 0xfffffffffffffffe, 0x9) 2m39.4365816s ago: executing program 9 (id=2269): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x100082) (async) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) (async) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x24004141) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1100000012"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x3f00) 2m38.85827819s ago: executing program 9 (id=2271): r0 = mq_open$auto(&(0x7f0000000000)='\'(\x00', 0x9, 0x9, &(0x7f0000000040)={0xda18, 0x5, 0x100000000, 0x3}) bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)=@prog_bind_map={r0, 0xffffffffffffffff, 0x7}, 0x7e62c8cd) r2 = prctl$auto_PR_SCHED_CORE_CREATE(0x4a, 0x1, 0xffffffffffffffff, 0xb1f, 0xa) r3 = bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f0000000140)=@link_update={r2, @new_map_fd=r0, 0x7ff, @old_prog_fd=r0}, 0xfffffffe) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy5/netdev:wlan1/tsf\x00', 0x101000, 0x0) r7 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x400000, 0x0) mmap$auto(0x1, 0x2, 0x3, 0x1f, r4, 0x71) r8 = open_by_handle_at$auto(r5, &(0x7f0000000280)={0x1000, 0x3, "fd597ab485f360b2440f92e78f64f822d90c64aec42528d6f3e4c1fb754c39651681baa6d23a1f43acba233f93b3a40f8dc629aa547f6816510afe04a491f1fa9d53c9d3eb1f715ed68de2a6813272fce938e0723c1d7863b5d884c71b899fc9fdcefd5c10e964a01d4d98d8956f1cc10b01129d446b82fdf9e596ea7c5f08b815bf4ae352c1797928199bb08f65f6c233bd877a1500f77c0b32d8f581e81f348a3a6fdf713d4b8e25fbee32816e0705fa8b1454d8c721852d31bca44192c3ebcc7f75235d1068bbe5a44efa29de3e77c8c18f69b2c5e14b9cf9f49b63db4f251def80ca9ebfc5835c9a034886d0af62b68d2f0245f4ec9c90e8dde0b7d9229f5167d35911b2d1030dfb85ca9837e05860d77b1346eb30eff302d4e7b35bf8172599ccbb733abab6132f01badedf4905573bec8455478984d2b2ddcc76df0b9bea9281e9066e84525231bb9b0de83eeeca482c8da8e30b1051b829bdab47f2ffcf7752fe0fbe17e8bf44c7bc0502cb9f215494319cdc59fc0be28b70b64878c7697de936caeef4cbf5d237fa091edb82630c74249f8a6829164e1808be230d88b162f0688673ef025fa9dcbd14807a9b0ef63687cb3608e23dfce0623f91f487c7c79e49225486d8bc4c939e484b1c0b05e9a3f73b616ef920b6f6a00451d42edf8c6a06cbd04fbe7eabc1974f827b8daa00f92afa4da46d013387d46c84143279b3d3840fbd78d1feccf0703d24b0ba147defb5420e362a81c8e007d290905c19b4569eabd0919cee442ce8e23a4b007e913c90467146f24cf1507c2a465fc86616301ae0858e15a108e9ef0357f1d526ac44ec5893ff8d66c4eaf5cf90b03c4845fcb18009955020e49fb822a36acb0c3426162337940acd80403c083f67e220dcfa666bbb2005b72e221e235b57068e93283db6320545d5f3d7dc8cfa1978d62cdf604310e83fb7f8f59a3a3120f7c091d42c86fed7a5dae370f846b44a77690c52477030d62630d5d575d15c520088da65e3b4a4517fbd53370ffe510431cb50ccf6b9b5db9712bb668606fb1308eb66077f06c24d5af057a0427f6eb606c719e06a6746dcca69f066084274890fbe8e08ab4b3042a602ba703102000f7c3a89a04cc6aaca1bced0c20ae51107591da91e09638c1c2d96e2e08fc3315f69f0ff5cda4f0cf4a38c5039d74cd9a915559519750ecd221ffd7ee8a1c926f7423cfa06559f29960c89ec8e822cb0e81014c458439cb0f88952f4cc53141abb8f64d8ef9a51deeda83ace3a1f1c5245bf1d0d604faef540f3b894fb98fe2ef642980f7c2eac3a855777918fe5c4cbe9e3c102b988434f213af7e0b6a1e12c31f06f138fe3eb9ee796eaa19f76fa11546bccfe3eef24c92de209bb458bbe4a24bc7e71102fd1a8704752f54e402ed9d4673d3f746c8121dff1e52bc325a91483c56adbcf8ef3f6c4ad03cd14b5c2fa0ac5fcfea0aba0702819c64952a59a36fb51d65dd72a00d209fff29559b97d1f0c1566de81dbae34a4ead1c571c65bba3fe7e688b0e9dab34b9ad9587930123fbe096ae9295727f379f5d61424a65b610c23c9281a2832879e20ebeeef26c57ae00bc02caf4864d55418d469f36113bd0c02c46b6204132e4de7ce7fddae8d5f1b3920a068350b98d03a998a4a64667b1aabd64d2740d43d0be1fba184fef0ef041defddfcd5c1abc8ec1c61865e7575083229bdb43a91d99f411f9799d8444bf73d24962ab31b80a8b4172bdea8b662f37548c664aaaa44cfe4112bda69e71550b24fa6afc662d6ee453b29d1da3b4852aa941da0b87d696096eadbc5fd57c90c44563f08568cca9c9f9174c55b6a0c7274d24f4510dc779658ee9cbf2402ed36832b3c408ccf5151c65229a5570b8150d76533d53b9089ccb6a5384b78c26ec22b4eee07b7ac270d3cf27a9bf99ec84586224a53919d03bee2e63c1d661ae570cbb1d1d46659752ea0db5c1ff227d5f61a95607875f32ef122e89773d9721b172aace274c5902f5ce4caae0fa1dfecc90b397d7ab741ff3b5c8bd261973e10916f41efc3360df75c0860e4424e24e7324117f5339bff58b851d8aae4b30e5d851cf6810050eb8963f236ebeaadf3ffda5b1613307b910828e383514afafafc221082a81613a0ea3788780cc4d897dd58e9c2ccd45c01e72e65d7ca0f96a6242c13ad4ea5e3089fa45876a07ca72a88b97b57e622f3f47461864030ebc06cbe783e72103e6ada0959a01434277d6e26a9b5f53c6c11353f98a4bca16ad430dfe98e17da9f565d6f7bb1e1695ef58c45342d071e7cfaad71d51109072f5ef3a98e4284c2f6f401c61c852c38e2b79d1536472889fcd4386275213634169c1133eb5df8173c26aa9718c2e8595ece93b203feb25ccc4e79dcca353c44df21e09ef533f462d4a2abbbf51171af79bdf84b345b985b17f6bdab1747f7500b08c805f3f26dc73d977153708dbacc0bf7711b5f4a875885137f397031721399780d0e39fbfc7e493b136243c16ecdb6b17515a7f85ea9e8ea50abcc332afc0ab4c79bfb48c7bfa19607c9d44ac75d28840bae5755d0618937bca8e1c3f01079c1f321c6de11819a3e749c2878b11ed9a2236033c004d6bbe9aeaaed6acbee9d0e92bfd9f95ba502cee82384d3ce8d7ca51c828a7eacb7931dc0be06658da767b5bf98898b6c107409c54a106686cf62996b651d6092cad3d26b981f0b21eb5ce5a5d49962836816cb268a29c84adb8c211e620b5190ce52cdb0764dbefb34d1203d56de51ecba1379768618bcb0d83d7dea2624187e48f372a56a9edb4e8e1693a26916e52d6dc2716bec4bf3a4164332debf208953e53c31c5627659242ea67e1289450b2cfb1e1643db1e3ae081b47964d71a727977368a3a4fbece93d064f4c10785e9e821dff6e2acb42d186d4b2f9bf9dc123dfa5ba0eec01bacf5ab1137e191ca4dd7d1b274c01f9a18afdbbd6cc1ce7ddcf142fd2c479c7fabcafc18d39e4671b5691aea5bd3e63265768fc635eceba89bc52f0104b617895b9edd2422c9499637cc529b9bbc64167d060a4f913e7914e1728f04687d27d051977190cf58e4a49070d035aedbc53933404968ca0b4f898e9eef7a4b0abf2ee569b4b0bc0108f1232b3024af3d2b282f2759295e667184e57068b5c1ea4b9821c3df3631277869a9db743cf538c2efca133146b4a9d9b03f6f2942fad3e00d8228bab35465c91c18a08f0ce7c8dd255fb283fc39311687f868f94a97f20d115b7ebfa395175a0a0fd54e19e2453061307e0d8d5d3ff5621d4400179da2f9f4ab7d237513348feb4ad97b91ccf45f4dd57901a3825241db52a65de431ae31510c2b4953cb7afaca7a5b3a7d118e8a5dee7980ad8ee8463fcf5e52053a079f1a5d6281448ed1e8336f5b66c609cd8a6251b9c66130d0219e6698558958439e28078d7fcb42b2045726620ccd7805a5a082707014b42f8ba5a8672bb9e359c8300422de58fb89e548e434a1be636f8f93fc73e559cd3f8b869ddbbf4de46d4391b6d78f0ee8f6effdf0f5e4727b0bfbb21ef12679a19745d8fb74ae47a88e57cd10b67016eb88423c34a785f46884fca8585db4dbd2b7711aade7f35cbd5e169c209384a33a900f6874b37b72c01e0ac9c133bc3d8dbb3c738957c9c0bf4ce30bafbe95a030c656db8f8b07718389eded99c2c05553d254183e2f16ac572f6ab872041f7fb60b984d084ec573270dcc6c318ee0c2b8a2956d43f191c5b8604d58f1bede756f956e2f27f13d48e7e7bbcc32caaeb1e087aefa716ab607b4c9e83757fdcafd43c19b6f76374bca4a77deb6d7e24beb8c1030e148686039141484516a7f8944b2faa0410ec351878dca8c2ea794e81345e732810d1435a5757bf9eb31d997072316d5c353ef765a0a4884c097c026204c610bd06f7ffa4cefa2dc4c499081f5d2853bd549cca95d226dc78a0e5a1f3b223a11d1db2422d1ff28b2e2110c0d71dcdaa89445dd0ba399e98645c37abde309ac14f4d8dd683c5d0bb72c8da169ed640625e64efd94bef8813bae1fe10449490a77954bb8ce014463967015537615bb1dee6db9ce3cfe753554c96bf50059b0cc9391b501985d66341e27ebf13176da13ada442910b740be9c17dd7fe4b3bb565f78b742808dbeae1dc674a5640c1e66f73f8d4edfc83fc1417beb059a04d50849cee16d31c7c787bc9eae12035166687daaa3c83e671c89e7173caea2d172df83a709f60c88b8e2de4e99129d877e52d1ba2dc74da3e7300dd4aa4f73ac7d845b53c5ca978ce9da8718b4d178b68d351b931337b4d725195425ebcbaa436255d2ae43c75868db7eb9dccacecb21ac50783f6057ce386408ebbae55f766dab16861456f042bef11dd7a3d1c5289a6daf9a904eabc4fe34858bed51eb31b0b84a9df205afd443c4d4f4f4c6590f8f0d18c46ac3dd0ad3685410ceecdca2e48cd2c379c54ad2bf95c8bd1755df0993be9c03407443074597c71fee05aa72ebe32178636fb0b51cbc0eff5713c6c9e7b020b4087177b998c64d8ce75290aac93933b88b228eb9a53b266cc89c2cfd85658e8d2a43ddb47448945e7fa78c2e3eeb8fbf51e9cce489ed215f76231a8609cad9b276161dda9b07349fa17b33fdab8ff93288c0c937c8f085c3735476ff57e8974b42b74a773c2467b5e486e980318790332019993b56187d6e6adde45ff5630c59e39a78dfc1357431944609500f702f788900b3b225801397aec88edfe8af1872bb435e65f3638959d12fd4373d508e5ca1884e5093e8624a40766a0a9ed90c07f28ec035a67a915da5ea684cb1a2ae35e21d060a2ac5e38241efbdb3b0b2375c17d796050c5e2e3d195ef1bd3a3e7feb40ce4ac6dd164339e8c81c49593c557fdd4348fca4a4dfc9d145240b5e8857aa18b3fe57cdeeffa48e4c89f2067b182a9418065ea0f890730387fc3288923eb7987a6d539ae79a86cd2ecaa38be01659f37b0a84254879393cf617ce41502a5279b896ab894924fb1446ef301c128728cfc7a081678a41f1be78ee8bc46022563cafe9023ec3e0f664069a4af69a054ae6f857f057d00f849b1980b5d2d4f6a363e9970198b403c2dab6d390de5241d996505e67a9658df841ee4c3b5d7d0a6c3885dadb4fddea921eb2989ac4627c116fe94d1575ad3c98361c20ad6ce4bbba4bb9e7291115247e1874a599e9022aeda649eb4e6e23b1ae7791562b6ec7484bb3182a54f61a25d20eee878c1ad9c91039fc9348fb52a2209bc409dcf193da47758d179cc189a9d4902a54a318775cc26de5cec1c0220fce916aef7e8ed94e81efeeeac5e479a5a7c8e2818ff124957f3bdb81a2eb51f7888c77a1a686ad5879b9b43027302437c04d03bfff8e621422c3f1623f61d6d60c4da4f1a8794fcb025b4e8145bc8df70a9deb7673f152fd5c9a0a645d5ad31260adf034c92676595734a3dce1ed793f75b7a5af8a80ac876cc971c43218cd53b54e1eb48f20c794caaa6f8817682f28f14cc8ed9413e4c84d1382fd170fb793df290842ca2254a5ac3b0914933de31ba7661a7c1610694eaf44c489b86e9556c8c421d4b51a087ab3fe59fc00ce71cb5066f6714eda873a038f017e1db88f7406f1e315b4ec99267a98784d27216dacf2a6f5ce98b60dabccd645c2ce0762d75fbf08770655c6ad3edf73ffe997b3a441ae4f2ea030b635565985e3f71412a6bf06ba9fbbce710fe64d86a26ec93e9be040a8c0fae2ec2d35bd02b0e4cc0ffe1915711f1e87e61c2ce6b24"}, 0xeeea) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r9, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x14, 0x0, 0x200, 0x70bd28, 0x25dfdbfd}, 0x14}}, 0x4000094) epoll_pwait2$auto(r3, &(0x7f00000013c0)={0x2, 0x5477}, 0x3, &(0x7f0000001400)={0x6, 0x4}, &(0x7f0000001440)={0xffffffffffffffff}, 0x8) sendfile$auto(r7, r5, &(0x7f0000001480)=0x5, 0x7f) r10 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000001500), r2) sendmsg$auto_OVS_METER_CMD_GET(r0, &(0x7f00000018c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001540)={0x330, r10, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@OVS_METER_ATTR_USED={0xc, 0x5, 0x7c2}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0xff}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x1}, @OVS_METER_ATTR_BANDS={0x2fc, 0x4, 0x0, 0x1, [@nested={0xbc, 0x3d, 0x0, 0x1, [@typed={0xa3, 0xcb, 0x0, 0x0, @binary="4b59d8e46aa95978139e2d0cfadc16b6f27b44a85c29ebd3392b2d49f726e65d48e336a242785d4a87a12b58419521e201ccf385625d162136a4e1527819be3f4b9dd141a1f23abaf467158aa49513c6de667311f2a6e01b69a01125668265236ff702bcef252eeddc2f2979f8f24413a061cfdc5d8106cba4ba32380ad7d98b4bec2f0af3604f192e4ff5159e00efd415bf80a7c79bfbd7ed4406174e6e59"}, @nested={0x4, 0x51}, @nested={0x4, 0x13b}, @typed={0xc, 0x9e, 0x0, 0x0, @u64=0xffffffffffffff00}]}, @nested={0x23c, 0x3a, 0x0, 0x1, [@generic="5e0155bed7aeda394dc011cac0075dd6939f495219919ac68833492ad74cb80dfd899b92254434514a18c80f9eca193699540f698b3432343bc0229b23007f10b6e5e161d82e33bd03a8a09e88592a6d545b59386aa7079ee331387fe02af1bcd065fde6bedd886ec06c87cf0321c3ba442a2fb746ccfd8803391ecdd13c77387ed2cbe8f282bf2068b37739cc1f71278246b4c608f3a46e86f0bb4754bd7bde0afa582edb3f5e9698acbd4ad3055cefa6e834738e10fa5661f876", @nested={0x4, 0x90}, @nested={0x4, 0x42}, @generic="ec0513bebea73a94641ba990ca81823d39ef4c89b6b00c8c7618c05b3d576c7e21ade4b8bfe690ef38ab25bcd237757edde45d8c7ce69997898e4ebf93d86d642adb9c8bab18e99f87222d25fc16b744ce44c21084aa448df5f0a21dd49e5d86c5412ff19f82405fad6aa9d368b280a81168d6a8c0e42560f4002dc6f01316cdda0be609d982200c7576975d2b63589f8290a88fa82869c42a060bc551f2232c2d68b400fedff36f0db1c2d7599083089cb175570116d74cd9cb188dee704d0f904eacabf3a2dfa583c4465884ca2aeb694b6c02b80e92e79f95529cc10cc74cb33e9c75b7cf519f9d4c1e1b2ff286", @generic="023510555f8b28696a1cb334f5411d3a639277d1a1b6359d099e174978f4acdc2b42ab9ad7630d5d0eeea46be2511a", @generic="545a6a3fc580ef99e689449c88150d33d1ed368605d6ab1591e7f6f526a5805863692a9faed7fda8eac6ce346a3fea54b2e87b2f7164112827777abb863d7b6dd3ed724e54378cec12b00bc04a399d6733bff1", @nested={0x4, 0xd}]}]}, @OVS_METER_ATTR_KBPS={0x4}]}, 0x330}, 0x1, 0x0, 0x0, 0xc0}, 0x44094) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001900), 0x1, 0x0) r11 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001980), r1) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x30, r11, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x5}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000084}, 0x24008000) read$auto(0xffffffffffffffff, &(0x7f0000001a80)='{\"\x00', 0xfffffffffffffffa) shmctl$auto_IPC_STAT(0x4, 0x2, &(0x7f0000001b80)={{0x3, 0xee00, 0xee01, 0xfffffffe, 0x8, 0x10, 0x6}, 0x0, 0x20, 0x2, 0xf0c8, @inferred, @inferred=0xffffffffffffffff, 0x10, 0x0, &(0x7f0000001ac0)="b4b985b6f32ddcdb087f4730b400e7a7ac734a8aa052598159269cfbe2f9500dac110b771378a6963d84a6fb7920cce3899eac3124cde53274a1b6de960a5dff0c7d", &(0x7f0000001b40)="3b0092779db6b8781c56a41625eb1feede3dab3cd5afac06823960f3c967477f470ab91c467b"}) msgctl$auto(0x2, 0x9, &(0x7f0000001c80)={{0x4, 0xee00, 0xffffffffffffffff, 0x7f, 0x3, 0x4, 0x4}, &(0x7f0000001c00)=0x7, &(0x7f0000001c40)=0x7f, 0x5, 0x7f, 0xb, 0x7437, 0x80, 0x4, 0xf801, 0xa6f1, @inferred, @inferred=0xffffffffffffffff}) ioctl$auto_EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000001d00)={0xee00, 0x6, 0x80, 0xffffffffffffffff, 0x1, 0x9}) setresgid$auto(r12, r13, r14) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000001d40), 0x2000, 0x0) write$auto_vhci_fops_hci_vhci(r3, &(0x7f0000001d80)="97d07f55b5892ac107d2b57eaea27d6cc484caddc79b8c26a5919b6e5c81a7dd56722b67e8d3eedd65c9eed8a41665f921dcce42c756d9afa0612a61cc72421fdce4ae8e923b63b7b4285aa44beab5a387f54e386013149728", 0x59) select$auto(0x7, &(0x7f0000001e00)={[0xfffffffffffffffe, 0x0, 0xd, 0x6, 0x1, 0x0, 0x8000000000000000, 0x2130000000000000, 0xfff, 0x2, 0x4, 0x7, 0x7, 0x5, 0x400, 0x6]}, &(0x7f0000001e80)={[0x0, 0x2b, 0x5, 0xe, 0x4, 0x1, 0x3a9, 0x10, 0x8, 0x0, 0x4, 0x6, 0x7, 0x4, 0x7fffffff, 0x240000000]}, &(0x7f0000001f00)={[0x100000001, 0x5, 0xb3c, 0x740, 0x4, 0x7, 0x200, 0x5, 0x10, 0x9, 0x9e7800000, 0x4, 0x4, 0x600000000, 0x4, 0xfffffffffffffff8]}, &(0x7f0000001f80)={0x7ff, 0x101000000000}) io_uring_setup$auto(0x5, &(0x7f0000001fc0)={0x9e53, 0xc, 0x9b43, 0x810, 0x7ff, 0x1b, r4, [0x4, 0x1, 0x6], {0x9, 0x7f, 0xb17, 0x9, 0x0, 0x6, 0x3e, 0x81, 0x7}, {0x6, 0x1, 0x164, 0x530, 0x2, 0xffffa0dd, 0x0, 0x3, 0x3}}) r16 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000002080), r6) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f00000020c0)={'vlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002100)={'bridge0\x00', 0x0}) sendmsg$auto_NCSI_CMD_SEND_CMD(r9, &(0x7f00000021c0)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x40, r16, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NCSI_ATTR_IFINDEX={0x8, 0x1, r17}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0x6971}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x4}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0x3}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r18}, @NCSI_ATTR_MULTI_FLAG={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) 2m38.396661241s ago: executing program 9 (id=2273): syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) msgctl$auto(0x0, 0x3, 0x0) setsockopt$auto(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) close_range$auto(0x2, 0x8, 0x0) ptrace$auto(0x10, 0x0, 0x4, 0x7ff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.15/usb39/39-0:1.0/ep_81/bInterval\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/pci_hotplug/parameters/debug_acpi\x00', 0x80800, 0x0) sendfile$auto(0x1, r2, 0x0, 0x400007ffff000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ext4/sda1/inode_readahead_blks\x00', 0xe0801, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x101, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x5}, 0xa) madvise$auto(0x0, 0x200006, 0x9) syslog$auto(0x3, 0x0, 0x5) 2m31.410850991s ago: executing program 7 (id=2288): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfdef) unshare$auto(0x40000080) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) chmod$auto(&(0x7f0000000040)='./file0\x00', 0x1000) socket(0x22, 0x1, 0x5) r1 = getpgrp(0xffffffffffffffff) kcmp$auto(r1, 0x0, 0xbf, 0xffffffffffffffff, r0) 2m30.529578548s ago: executing program 7 (id=2291): mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x80000000000000a, 0x2, 0x0) bind$auto(0x3, 0x0, 0x6a) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000100), r0) ioctl$NS_GET_PARENT(r1, 0x8008b70d, 0x0) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x4800c2, 0x0) r3 = socket(0x6, 0xea3d7140ef2ec366, 0x2) getsockopt$auto(r3, 0x0, 0x50, 0x0, &(0x7f00000000c0)=0x1e) write$auto(r2, &(0x7f0000000240)='\x00', 0xffffffffffffffff) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f0000000140)={&(0x7f0000000000), 0x55}, 0x6, 0x2, 0x0) signalfd4$auto(r1, &(0x7f0000000080)={0x8000}, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) r5 = fcntl$auto(0xffffffffffffffff, 0x20007, 0xa553) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) read$auto(0x3, 0x0, 0x8080) r6 = socket(0xa, 0x1, 0x100) r7 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000000c0), r6) sendmsg$auto_OVS_FLOW_CMD_DEL(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r7, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x8000) read$auto(0x3, 0x0, 0x7fffffff) mmap$auto(0x0, 0x400404, 0x9, 0x9b72, 0x2, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) 2m29.530893719s ago: executing program 7 (id=2293): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r1, 0x7f, 0x0, 0x8, 0x1, @relative_fd, 0xd}, 0x92) (async) lsm_list_modules$auto(0x0, 0x0, 0x9) (async) r2 = open(0x0, 0x100000, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x40086602, 0x0) (async) lstat$auto(0x0, 0x0) 2m29.022427146s ago: executing program 7 (id=2296): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) unshare$auto(0x40000080) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100)="9d4dd3", 0xfffffffb}, 0x5, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf250200000008000200", @ANYBLOB="0800070003000000110001006f765f646174617061"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x5, 0x105, 0xc, 0xb, 0x800, 0xffffffffffffffff, 0x5, "d81ddef9d4e6d312212bab98f4060bd8", 0x0, 0xffffffffffffffff, 0x7fffffff, 0xa991, 0x7, 0x8001}, 0x7) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r6, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) pread64$auto(r6, 0x0, 0x7ff, 0xd) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/oss/sndstat\x00', 0x40441, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) get_mempolicy$auto(0x0, 0x0, 0x3, 0x6, 0x100000000001) write$auto(r7, &(0x7f0000000040)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7f) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xff, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0xfffffffffffffffc, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) 2m27.935082197s ago: executing program 7 (id=2300): mmap$auto(0x0, 0x83ff, 0x0, 0xebd, 0x1272, 0x0) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1040, 0x0) (async) r0 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) write$auto_uhid_fops_uhid(r0, 0x0, 0xfccd) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) read$auto(0x3, 0x0, 0x7f) (async) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) (async) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r2, 0x4008af25, &(0x7f0000000000)=0x7) (async) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) (async) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_UNLCK(r3, 0x8, 0x2) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) (async) close_range$auto(0x2, 0xa, 0x0) (async) socket(0x18, 0xa, 0x1) 2m27.676400398s ago: executing program 7 (id=2303): bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x19, 0x5}, 0x7) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) (async) r3 = socket(0x2, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), r4) sendmsg$auto_NFSD_CMD_LISTENER_SET(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000a00)={0x14, r5, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) (async, rerun: 64) recvmmsg$auto(r3, &(0x7f0000000340)={{0x0, 0x28, 0x0, 0x0, 0x0, 0x7, 0xf7a8}, 0x1}, 0x305, 0x3061, 0x0) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$auto_L2TP_CMD_SESSION_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="298d95522847cc7540fa7cdfbdfe0bca77ca22a322ae180bcfb9d9ee9c970610cc34230a31dc6dc38e6bb10fcdb8452ed1e7ba3286aacbad596bd8004802032368bfdca6a7db86b3d70094cd11e3", @ANYRES16=r7, @ANYBLOB="01002abd7000fddbdf250800000008000b0007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004094}, 0x800) (async) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, r2, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x10d}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0xc800) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r6) (async) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) r10 = setfsuid$auto(0xee00) r11 = pidfd_open$auto(0x1, 0x0) process_madvise$auto(r11, 0x0, 0x3, 0x3, 0x8000000000000000) (async, rerun: 32) capset$auto(&(0x7f0000000200)={0xf}, &(0x7f0000000380)={0x85d8, 0x3, 0x3}) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_SCAN(r8, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x310, r9, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_TX_RATES={0x2c3, 0x5a, 0x0, 0x1, [@typed={0x44, 0xec, 0x0, 0x0, @binary="979bd35044b0ea98ff775300bb5256945fd82c2bb7ff199e3b750c03d494e31128e033171c3d0e1b3a56a86088cccb0c8e8ba41d16f9d4f5fce91fc1aee274c8"}, @generic="c62374e4cf25e5374162eb3c79a3336981e8a4d6a5cd6e7d4076de43f90f6060136770ccff50977283630162d73497fc1cac33f861a7bee6d7ba64e48b5414ec700e50fb62818b91a9fb90e4bdecc55f21fcfe450179aae6147d539231854b3cdd521cf855e463c7e485f8c5946c2dc868e9c2", @typed={0x4, 0x113}, @typed={0x8, 0x5c, 0x0, 0x0, @uid=r10}, @nested={0x6f, 0x12f, 0x0, 0x1, [@generic="53eb88e654bded38c3a8248e8675f44df3dec0341aef47f0d48a5b8c28efcc", @generic="9b67e09f0bb5d547866c74828724628a7484ea7ec6bdf182c59a23774090d4a0f2b3a14ff4c2c6842f0dc106c6e658bbdc9236a39b0227c7", @nested={0x4, 0xef}, @typed={0xc, 0xf9, 0x0, 0x0, @str='nl80211\x00'}, @nested={0x4, 0xea}]}, @generic="a12f72900a3769241a2257bebd0cbd40af1097961c8075da15028c38f3cce7534235e548797f456400d4f3a1de98505fa3144508601d299cab45c6d5a271ad0e22d021132514780dd22b109967477d321de22d108e58793525a8d310f82255d1eb0059442db86ee5f6465167f0f62ad1155e8ea39723ae1056d46ee88d62a0d65f29a9553f2a939ada46ff7d1abc29eaae9de14137260ae6ed78722ce7054b", @generic="3cc1cc0a5a3244dff408d099baf5d7baa983f519d90d5ad05f901f3143c321ffb5db09d5d5c6ddf2bab9bd37cb4f55238a98bf58f840ab4eb3c22fe58f7ceac81bda7b30e2a38cf817b2f4516913c3061889c777eb617856f9e55190daa056ba0ea4a29966f3b5a508459814a9c880d5468ece1953a47ac382e08a89184bcc532dae90f07571c434c43a1a67950ca24f0bc0bb40a3b948cff9d8d920fb3c9b1db77971e205ce7250133552e3e88c511bdf8274397ce8d9d17ca80cebaa7e95f517c40daa04ac2e865092f7cfdcb9b677546e319ec6bfe159c8ddf999f1bbb5d34b5403b91fad55574d19cea1df"]}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5cf}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x8}, @NL80211_ATTR_KEY_DATA={0x1c, 0x7, "e343185897427da6f6af6270e849cb9532bb7c40f2bb69fe"}]}, 0x310}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 2m23.386494683s ago: executing program 38 (id=2273): syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) msgctl$auto(0x0, 0x3, 0x0) setsockopt$auto(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) close_range$auto(0x2, 0x8, 0x0) ptrace$auto(0x10, 0x0, 0x4, 0x7ff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.15/usb39/39-0:1.0/ep_81/bInterval\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/pci_hotplug/parameters/debug_acpi\x00', 0x80800, 0x0) sendfile$auto(0x1, r2, 0x0, 0x400007ffff000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ext4/sda1/inode_readahead_blks\x00', 0xe0801, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x101, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x5}, 0xa) madvise$auto(0x0, 0x200006, 0x9) syslog$auto(0x3, 0x0, 0x5) 2m12.479175939s ago: executing program 39 (id=2303): bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x19, 0x5}, 0x7) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) (async) r3 = socket(0x2, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r0, 0x7cb, 0x0) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), r4) sendmsg$auto_NFSD_CMD_LISTENER_SET(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000a00)={0x14, r5, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) (async, rerun: 64) recvmmsg$auto(r3, &(0x7f0000000340)={{0x0, 0x28, 0x0, 0x0, 0x0, 0x7, 0xf7a8}, 0x1}, 0x305, 0x3061, 0x0) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$auto_L2TP_CMD_SESSION_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="298d95522847cc7540fa7cdfbdfe0bca77ca22a322ae180bcfb9d9ee9c970610cc34230a31dc6dc38e6bb10fcdb8452ed1e7ba3286aacbad596bd8004802032368bfdca6a7db86b3d70094cd11e3", @ANYRES16=r7, @ANYBLOB="01002abd7000fddbdf250800000008000b0007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004094}, 0x800) (async) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, r2, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0x10d}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0xc800) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r6) (async) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) r10 = setfsuid$auto(0xee00) r11 = pidfd_open$auto(0x1, 0x0) process_madvise$auto(r11, 0x0, 0x3, 0x3, 0x8000000000000000) (async, rerun: 32) capset$auto(&(0x7f0000000200)={0xf}, &(0x7f0000000380)={0x85d8, 0x3, 0x3}) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_SCAN(r8, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)={0x310, r9, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_TX_RATES={0x2c3, 0x5a, 0x0, 0x1, [@typed={0x44, 0xec, 0x0, 0x0, @binary="979bd35044b0ea98ff775300bb5256945fd82c2bb7ff199e3b750c03d494e31128e033171c3d0e1b3a56a86088cccb0c8e8ba41d16f9d4f5fce91fc1aee274c8"}, @generic="c62374e4cf25e5374162eb3c79a3336981e8a4d6a5cd6e7d4076de43f90f6060136770ccff50977283630162d73497fc1cac33f861a7bee6d7ba64e48b5414ec700e50fb62818b91a9fb90e4bdecc55f21fcfe450179aae6147d539231854b3cdd521cf855e463c7e485f8c5946c2dc868e9c2", @typed={0x4, 0x113}, @typed={0x8, 0x5c, 0x0, 0x0, @uid=r10}, @nested={0x6f, 0x12f, 0x0, 0x1, [@generic="53eb88e654bded38c3a8248e8675f44df3dec0341aef47f0d48a5b8c28efcc", @generic="9b67e09f0bb5d547866c74828724628a7484ea7ec6bdf182c59a23774090d4a0f2b3a14ff4c2c6842f0dc106c6e658bbdc9236a39b0227c7", @nested={0x4, 0xef}, @typed={0xc, 0xf9, 0x0, 0x0, @str='nl80211\x00'}, @nested={0x4, 0xea}]}, @generic="a12f72900a3769241a2257bebd0cbd40af1097961c8075da15028c38f3cce7534235e548797f456400d4f3a1de98505fa3144508601d299cab45c6d5a271ad0e22d021132514780dd22b109967477d321de22d108e58793525a8d310f82255d1eb0059442db86ee5f6465167f0f62ad1155e8ea39723ae1056d46ee88d62a0d65f29a9553f2a939ada46ff7d1abc29eaae9de14137260ae6ed78722ce7054b", @generic="3cc1cc0a5a3244dff408d099baf5d7baa983f519d90d5ad05f901f3143c321ffb5db09d5d5c6ddf2bab9bd37cb4f55238a98bf58f840ab4eb3c22fe58f7ceac81bda7b30e2a38cf817b2f4516913c3061889c777eb617856f9e55190daa056ba0ea4a29966f3b5a508459814a9c880d5468ece1953a47ac382e08a89184bcc532dae90f07571c434c43a1a67950ca24f0bc0bb40a3b948cff9d8d920fb3c9b1db77971e205ce7250133552e3e88c511bdf8274397ce8d9d17ca80cebaa7e95f517c40daa04ac2e865092f7cfdcb9b677546e319ec6bfe159c8ddf999f1bbb5d34b5403b91fad55574d19cea1df"]}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5cf}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x8}, @NL80211_ATTR_KEY_DATA={0x1c, 0x7, "e343185897427da6f6af6270e849cb9532bb7c40f2bb69fe"}]}, 0x310}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 1m24.908403697s ago: executing program 1 (id=2437): mmap$auto(0x0, 0x20009, 0x4000000002df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/block/nbd12/queue/write_cache\x00', 0x80002, 0x0) sendfile$auto(r1, r1, 0x0, 0x400000000003) write$auto(r0, &(0x7f00000000c0)='\x00', 0x2) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000841) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setreuid$auto(0x3, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) 1m20.965071396s ago: executing program 2 (id=2441): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/hid/drivers/asus/unbind\x00', 0x8000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) r2 = open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) unshare$auto(0x40000080) r3 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$auto_NVRAM_SETCKS(r3, 0x7041, 0x0) r4 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) lseek$auto(r0, 0x0, 0x2) readv$auto(r4, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1) r5 = socket(0x2, 0x2, 0x1) getsockopt$auto(r5, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r2) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, r6, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@HWSIM_ATTR_PERM_ADDR={0x19, 0x16, "b98b0fb98363bdc3006bee167c7ce53893abbf32b9"}, @HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x30000}, @HWSIM_ATTR_REG_HINT_ALPHA2={0x4}, @HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x7fffffff}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}, @HWSIM_ATTR_ADDR_TRANSMITTER={0x3d, 0x2, "ee58d01da70df022c40226fbf7c5c7d098d8e2fb450c07badff16b8aea9d0ecc9996f2ccc9d16121797a8d27677a69bf239f587471dba0ca46"}]}, 0x88}}, 0x41) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x80, 0x9}, 0x0, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @inferred=0xffffffffffffffff, @raw=0x1}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f00000006c0)={0x208200700, 0x0, &(0x7f0000000480), &(0x7f00000004c0), {0x2c}, 0x0, 0x0, &(0x7f0000000580)=""/248, &(0x7f0000000680)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6, {r1}}, 0x58) 1m20.959034053s ago: executing program 1 (id=2449): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, 0x0, 0xc800) socket(0xa, 0x1, 0x100) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xa3, 0xeb1, r2, 0x8000) socketpair$auto(0x1, 0x8001, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0xfffd, 0x8000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r3 = socket(0xa, 0x5, 0x84) sendto$auto(r3, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) setns(r1, 0x0) mmap$auto(0x0, 0x22000c, 0xdf, 0x10000000020eb1, 0x40000000000a5, 0x8000) move_pages$auto(0xffffffffffffffff, 0xa6, &(0x7f0000000080)=&(0x7f0000000200)="38b170d0c83ed50ca5f181bdf9a4d0454cc0f188df63ddb5bba40c613603fc50e242e55f160a0b9764e9e2e3c888c179f5f263e961738720918c4fb02da48a8e8a799d5bc71e300a7413fabad8eb8fcca6d3be3afb6afa83537645f932dbd2256dcfa2ac381830ccb103175ce4891b9739d213914d3b484cb3d0a9c47cfdbf29a930d8ce5f3788251cb6e730a3f60e73c3a41b9cf3c3aebb311939b370a700dee567fc4771027ca96d5ed4b5789587c55efc22ee3fc5e7ac3f36271702c917b88600a5f1b08da34f2a054c3c503191a93ceab9d4f5a49b7a4acd4edbd1a215964e55fb7fdc9cf21a", &(0x7f00000003c0)=0x1, 0x0, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x400053, 0x9) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) r5 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) write$auto(r5, &(0x7f0000000340)='3\x00', 0x6) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200", @ANYBLOB="5de1523353"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) 1m19.362523322s ago: executing program 1 (id=2442): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) adjtimex$auto(&(0x7f00000005c0)={0xf332970, 0x0, 0xcea4, 0xfffffffffffffffd, 0xd4, 0x1, 0x0, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0xfffffffffffffffe, 0x4, 0xfffffffffffffffd, 0x1007bfe, 0x0, 0x9, 0x81, 0xdfffffffffff628c, 0x2, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r1, 0x401870cb, r1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x381800, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, 0x0, 0x800) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) readlinkat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='\\\x00', 0x80) ioctl$auto_MTDFILEMODE(0xffffffffffffffff, 0x4d13, 0x0) eventfd$auto(0x80) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0xa0582, 0x0) write$auto(r2, 0x0, 0x2b6) 1m16.798290047s ago: executing program 2 (id=2443): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card1\x00', 0x129e01, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/devices/virtual/thermal/cooling_device0/max_state\x00', 0x500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000005c0)=""/8, 0x8) 1m16.62285727s ago: executing program 1 (id=2444): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x42000, 0x0) socket(0x10, 0x2, 0xc) r1 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC0D0p\x00', 0x400180, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000000c0)={{0x9, 0x9, 0xffff, 0x84}, "6a034a07c7b82d90b69a39e32576f893fba800fefbbabea6ef93efc7996e841f3f1561d4992f726b0a6c36b0b2ff1678e816201cf562367fe6596824588a493d84ba165f00", 0xa}) ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0) ioctl$auto_UI_SET_MSCBIT(r2, 0x40045568, 0x0) syz_clone3(&(0x7f0000000200)={0x40004200, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) socket(0x25, 0x3, 0x6) socket(0x10, 0x2, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0x3, 0x0) fspick$auto(r1, &(0x7f0000000000)='./file0\x00', 0x8) r3 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x101000, 0x0) poll$auto(&(0x7f00000000c0)={r3, 0xa, 0xaf6}, 0x40, 0x0) bpf$auto(0x5, &(0x7f0000001540)=@bpf_attr_3={0x9, 0x9, 0x10000, 0x1, 0x9, 0x80000000, 0x3, 0x5, 0x10000, "06dbde4e070000001b0000000800", 0x0, 0x6, 0x2, 0x2, 0x0, 0x81, 0x4eaf, 0x1, 0x2, 0x5, @attach_prog_fd, 0x3, 0x1ff, 0x100000002, 0x101, 0xe4, 0x6, r0}, 0x1000) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) 1m16.451706377s ago: executing program 2 (id=2445): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) (async) r1 = fcntl$auto(0xffffffffffffffff, 0x20007, 0xa553) (async, rerun: 32) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) getsockopt$auto_SO_MEMINFO(r1, 0x8, 0x37, 0x0, &(0x7f00000000c0)=0x6) (async) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) (async) timer_delete$auto(0x1) (async) getsockopt$auto_SO_ACCEPTCONN(r0, 0x800, 0x1e, 0x0, 0x0) (async, rerun: 64) read$auto(0x3, 0x0, 0x8080) (async, rerun: 64) mmap$auto(0xffffffff, 0x800, 0x2a, 0xeb1, 0xffffffffffffffff, 0x100000001) (async) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) (async) process_mrelease$auto(r1, 0xa) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) (async) unshare$auto(0x40000080) (async, rerun: 64) socket(0xa, 0x5, 0x0) (rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x201, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 64) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) (rerun: 64) 1m15.1743579s ago: executing program 1 (id=2446): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe$auto(&(0x7f0000001480)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000080)={{0x7, 0x3076000000000000}, {0x10, 0x401}}, &(0x7f00000000c0)={{0xd1f3, 0x100000000}, {0xf33, 0x8}}) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x82601, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r1, 0x0, 0x7, &(0x7f0000000180)={&(0x7f00000001c0)="84ff1104008000000000003dde7604e103c3783cf27bae6a18aff2c9bac6007e95310e5bb4803a3f31b0e1cff7870e5a4adcc7c3ccccaa79a9ea", 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, r0) close_range$auto(0x2, 0x8, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x48) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000440)={0x0, 0x7}, 0xc00000003) r4 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/0000:00:02.0/Virtual-2/edid_override\x00', 0x5894c0, 0x0) write$auto_drm_edid_fops_drm_debugfs(r4, 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2000, 0x0) ioctl$auto_SNDCTL_DSP_GETCAPS(r5, 0x8004500f, &(0x7f0000000040)) 1m13.973661141s ago: executing program 1 (id=2447): sigaltstack$auto(&(0x7f0000000180)={0x0, 0x80000001, 0x40b4}, 0x0) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x2, 0x4}, 0x0) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0x2, 0x9, 0x939, 0x6) mmap$auto(0x3, 0x40000c, 0xdf, 0x9b72, 0x2, 0x400000000008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r0) r2 = setfsuid$auto(0xee00) r3 = setfsuid$auto(0xee01) r4 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/version\x00', 0x600, 0x0) preadv$auto(r4, &(0x7f0000000080)={0x0}, 0x6, 0x22, 0x1) setresuid$auto(r2, r3, r2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) ioctl$auto_BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x238f, 0x4, 0x15) setreuid$auto(0x9, 0x1) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) shmat$auto(0x0, 0x0, 0xfffffffa) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) sendmsg$auto_TIPC_NL_BEARER_GET(r1, 0x0, 0x80) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 1m11.798544662s ago: executing program 2 (id=2453): mmap$auto(0x4, 0x20009, 0x4000000010df, 0x40000000000eb1, 0xffffffffffffffff, 0x1) unshare$auto(0x40000080) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) socket(0x11, 0x80003, 0x300) read$auto_tracing_entries_fops_trace(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x101, 0x9, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x2, 0x6, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) ioctl$auto(r1, 0xc1205531, r0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/max_ptes_none\x00', 0x1810c2, 0x0) read$auto(r2, 0x0, 0x9) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$auto_KCMP_FILE(r3, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) rt_sigqueueinfo$auto_SIGCONT(0x0, 0x12, &(0x7f0000000440)={@siginfo_0_0={0x8, 0x17, 0x0, @_timer={r3, 0xe, @sival_int=0x4, 0x3}}}) write$auto(0x3, 0x0, 0xfdef) close_range$auto(r2, r2, 0x0) readv$auto(0x0, &(0x7f0000000080)={0x0, 0x1e}, 0x3) r4 = accept$auto(0xffffffffffffffff, &(0x7f0000000140)=@l2tp={0x2, 0x0, @loopback, 0x2}, &(0x7f0000000380)=0xfff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/dummy0/ifalias\x00', 0x8041, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="276b31aa1562000000008d5da5b9"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bfff0000a75523c6fa9d49fd3230562c138a1644e99febf61d62fcbbf458563df98d3789e34bc12d85ce9cb546455adcc186f5eb5c9429f7052c48c1ee4a380943525e567306dba3568e007890e2fb29a5752a831f77f12b77087f4eea0dc4cf2ac414828b42adf18263527b807190c16d0426fbeb0d0400a988b3aa5cd5369377337be8c41948", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) socket(0x10, 0x2, 0x0) write$auto_safesetid_gid_file_fops_securityfs(r4, &(0x7f0000000580)="755c92eaff4eb7a3596010817ced641a15665d5a46e6a4c84aaa42d5cae710010bff0e3f232c7bf8b3145a05e3b58718fcffe6b14970514d62de35b7a734817813c32e1e3112a57554b5d929cc79ebf11d7b3fc1cdd7a42824bdd1d91dd0c39c6d7428598b93e93de48d2dd3b895863b351b6b700fa2fe436ab611d9f4a090bd4613ec4b59b9f07ef7b5", 0x8a) 1m10.321134531s ago: executing program 2 (id=2457): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe$auto(&(0x7f0000001480)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000080)={{0x7, 0x3076000000000000}, {0x10, 0x401}}, &(0x7f00000000c0)={{0xd1f3, 0x100000000}, {0xf33, 0x8}}) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x82601, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) process_vm_readv$auto(r1, 0x0, 0x7, &(0x7f0000000180)={&(0x7f00000001c0)="84ff1104008000000000003dde7604e103c3783cf27bae6a18aff2c9bac6007e95310e5bb4803a3f31b0e1cff7870e5a4adcc7c3ccccaa79a9ea", 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, r0) close_range$auto(0x2, 0x8, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x48) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000440)={0x0, 0x7}, 0xc00000003) r4 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/0000:00:02.0/Virtual-2/edid_override\x00', 0x5894c0, 0x0) write$auto_drm_edid_fops_drm_debugfs(r4, 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2000, 0x0) ioctl$auto_SNDCTL_DSP_GETCAPS(r5, 0x8004500f, &(0x7f0000000040)) 1m9.415417115s ago: executing program 2 (id=2458): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x1, 0x2020009, 0x40000000003, 0x216, r0, 0x8000) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0xffffffffffffffff, 0xa0af) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0x401, 0x8000) ioctl$auto(r1, 0xc0045405, 0xffffffffffffffff) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mkdir$auto(&(0x7f00000002c0)='./file0\x00', 0x3) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x101040, 0x149) getxattrat$auto(r2, &(0x7f0000000300)='./file0\x00', 0xeb, &(0x7f0000000180)='/sys/ker\x8d$g\xe5\xb0(\xec\xe8\xde\xbf\x17e\xe6nel/debug/check_ws:A\xe9\x88\xec\x8e\xeb\xf2\f\\\x94\x1a\x1bmo\x88\x1d\xcb\xb6\x04S\x10\xc5\xdc\x92\x8d\xb1Cz\x05\xbb\xd1l\'\xb1\x03\xeagi\xcf\xef0j\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0xffffffff) mmap$auto(0x200, 0x400008, 0x200, 0x9b76, r0, 0x6) r3 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) read$auto_check_wx_fops_(r3, &(0x7f0000000080)=""/228, 0xe4) mmap$auto(0x0, 0x810004, 0xffb, 0x651b, 0x3, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0xad6c1c5f547bf689) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim2/hwstats/l3/enable_ifindex\x00', 0x81242, 0x0) futex$auto(0x0, 0x8, 0x2, 0x0, 0x0, 0xfffffff7) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/hsr0/forwarding\x00', 0x2000, 0x0) read$auto(r4, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xe9) 1m5.13767956s ago: executing program 6 (id=2463): prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) (async) r0 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) lstat$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x6f, 0x1, 0x8, 0x3, 0x0, 0xee00, 0x0, 0x6, 0x722, 0x9, 0x7, 0x1, 0x3, 0x2c8ebe2a, 0x7c1, 0x1, 0x4}) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000002b00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000000440)=ANY=[@ANYBLOB="84140000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fedbdf2503000000430003800800d0005414ba998835ba06d112506ca644159752238049ba4227592c34706c6ec9658c5d5c4b48ff4bcdfbd48d02ecf9baacaaaac681064c521635337731f441957ed6bfc4f97e4fd58961d8da219e819055ef24b42694ebd2edc7436f1fbe5cd9f6bf61ded5e39b3386b7a4f3c5cd4f8f4921d42251924485b7ee02d5ddaaf1fc525212719afa751f7f3acb0f86eec2d4e313a899be266578910bf68e01d98fcaad2abf7e47e0396c2bd9a032ed81b45c3ae03332426fcd88f22730a1e8428a50f7803bdcbedd925091da369297568a4b", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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"], 0x1484}, 0x1, 0x0, 0x0, 0x4814}, 0x4) (async) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000002b00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000000440)=ANY=[@ANYBLOB="84140000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fedbdf2503000000430003800800d0005414ba998835ba06d112506ca644159752238049ba4227592c34706c6ec9658c5d5c4b48ff4bcdfbd48d02ecf9baacaaaac681064c521635337731f441957ed6bfc4f97e4fd58961d8da219e819055ef24b42694ebd2edc7436f1fbe5cd9f6bf61ded5e39b3386b7a4f3c5cd4f8f4921d42251924485b7ee02d5ddaaf1fc525212719afa751f7f3acb0f86eec2d4e313a899be266578910bf68e01d98fcaad2abf7e47e0396c2bd9a032ed81b45c3ae03332426fcd88f22730a1e8428a50f7803bdcbedd925091da369297568a4b", @ANYRES32=0x0, @ANYBLOB="0c00f70009000000000000001800e980040098800400738005002000ffff400000000000f47181a56a3b9ba03cefc9f9e1f491e8144a9f001b140380474e0f06d201ccb8d98aa3eaa41d6da123bfca69add0d96c98cf85e39fdf4db33d552fee9bc93e3c97e9c24ffe5415839fe8ca8130dfc4d4d9e348316e67c8c56af148b3e1764ceddf8d8eae7b6a0eacb600c0c4c27b20c254cbf390130c6fe3b4e2aa4d4c74d071bde5735ab134b31cd7374482f8e15f5738577dedbb5ca6151c3ffe909ac5667ab8f021e39a726e0fe8c3be9278482817d0353055425cdcad5697b73b304e5b64540b8b42f3fc69fdd89fd9234ff5ac16fc34eda58eb39e63ed896439675d94c9429a1c9e828fd0a38ec1fb58c3292fb2726510c06ae8237cf0e22f642a257fbb0a080ed549d666bde8398158007b9f08d8872bedbed840edb8454db67a4a3d05347bffb47a593a74b244543c41583ec129799ebce1cdfb063556167d499090e3fdd0cff7e8511dd567393da7441cf702f4037a9d123b0660faf65f6bbfc51fce1a0c92a9dcecb765f2b28f3f119e7026eecee89b2d54710b6384e1a65d7ad78f624801de0b8fd40400b18014004b002001000000000000000000000000000108006a0064010100fa10fd800800f900", @ANYRES32=r0, @ANYBLOB="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"], 0x1484}, 0x1, 0x0, 0x0, 0x4814}, 0x4) mmap$auto(0x0, 0x40009, 0x129, 0x9b72, 0x7, 0x28000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/ext4/sda1/last_trim_minblks\x00', 0x2400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/7, 0x7) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xf, 0x3, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x70) (async) open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x70) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) readv$auto(0x3, &(0x7f0000000100)={0x0, 0x7}, 0x7) r4 = socket(0x23, 0x1, 0x0) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r5, 0x5646, r5) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000280)=""/24, 0x18) socket(0x1e, 0x1, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9) (async) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x68140, 0x0) (async) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x68140, 0x0) ioctl$auto(r6, 0x5457, 0xd8) (async) ioctl$auto(r6, 0x5457, 0xd8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES64=r2, @ANYRESHEX=0x0, @ANYRESDEC=r1], 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x4000811) socket(0x1d, 0x2, 0x3) r7 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r7, 0xc0686611, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) 1m4.470263326s ago: executing program 6 (id=2464): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="21c47b7a08d60211c870e09ae59a1fa1be7a6395e6a4bf2fb2971e5407e382b36978122d9e4827fb751dc7de9068648079a885faa503a9006e083d1b5b091e724cb4598f89a0d080935af77875c09157f09cd9e364850115f7f40a8c8fc11826d02a1c8aa1f6dd974010f8fdf820dc5e8332d55fde680f9ec4d13ab548079c631592289ab9354582f0c54c0acab17cc36a7159e172ac07f95feb775575532b1a4d753dc10dde131e46b755b62524088a437e78ca79d7faca907bc798efd73091693a780ed8138d168b363515952ffbd19f0b479804235ee194e3f2a3c2d5", @ANYRES16=r1, @ANYBLOB="000826bd7000ffdbdf25150000000b0019000503c9d968f4c60006001400252f0000"], 0x28}, 0x1, 0x0, 0x0, 0x20044800}, 0x800) read$auto(r0, 0x0, 0x7fff) r2 = socket(0x11, 0x80003, 0x300) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000640), r2) sendmsg$auto_IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="000125db700000000000020006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x1) pipe2$auto(0x0, 0x80) r4 = setfsuid$auto(0xee00) setreuid$auto(r4, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) epoll_create$auto(0xfffffff8) setsockopt$auto(r2, 0x107, 0x1, 0x0, 0x8004) mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) r6 = bpf$auto(0xf, &(0x7f0000000080)=@bpf_attr_4={0x1e, 0xffffffffffffffff, 0xffffffff, r5}, 0xd) bpf$auto(0x3, 0x0, 0x8) write$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000003900)='\t', 0x1) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000004c0)=""/244, 0xf4) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/i915/parameters/mitigations\x00', 0x88302, 0x0) sendfile$auto(r7, r7, 0x0, 0x7ffff000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@HWSIM_ATTR_MULTI_RADIO={0x4}, @HWSIM_ATTR_NO_VIF={0x4}, @HWSIM_ATTR_NO_VIF={0x4}, @HWSIM_ATTR_COOKIE={0xc, 0x8, 0x5aba}, @HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x20040000) statmount$auto(0x0, &(0x7f0000000740)={0x100008, 0x1, 0x401bf, 0x7352, 0x38, 0x65f, 0x1ffde, 0x7, 0x7f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x1, 0x4, 0xfffffffc, 0x5, 0x2000, 0x203, 0x838b, 0x83, 0x2, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffff7cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3], "42487da7"}, 0x1fe, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r8 = socket(0x10, 0x2, 0x0) shmctl$auto_SHM_STAT(0xa1d, 0xd, &(0x7f0000000540)={{0x7, 0xffffffffffffffff, 0xee01, 0x63, 0x7, 0x4, 0x1ff}, 0x9, 0x5, 0x5, 0x4, @raw=0x9, @inferred, 0x1f75, 0x0, &(0x7f00000003c0)="dc1e1804bcd2ab53a4a939417bc5e83419a226aa83252738c366f455989f5cda08abf1c09f1086c546809f7cff7278ad67c33927f9c19c825c08522a3abbbba441527c1c1b880fd15d45816358f42a0bef91b1cb6ae293df0930483bf7ed6be030240ed6be59316aaab4c83fbed8bb1dee47017de72ae8de87512708bd82f8ff2fbd861e809df104b021f7e7990b8a10ae5c42490a09ac71fbfbe9ba90857f9098dec8800438ffe542d33856650f15aefb78b69ac7e1f28f60", &(0x7f0000000480)="22f7f6fdf0a74267ae175b51b51bf9f657651ad1203046890ca4320b0fd236d4174b9c7a50116ae22db211af6624e52376c634f3162d292cd2a805a9c6f2ca14a162e3f711bbc7cdcfaff35b7a1c9f1500c8a5fa52634479919ee21ade65f9e121e728dd40d933cb862f2c0fc31aec758b99187ced53c760627a243a873c56d2498819a5c6ae5eae7bbcedfe"}) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1m3.891941272s ago: executing program 6 (id=2465): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x3, 0x6) r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) 1m3.740278016s ago: executing program 6 (id=2466): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/sound/seq/uevent\x00', 0x8500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/4096, 0x1000) r1 = socket(0xa, 0x1, 0x84) fcntl$auto(0xffffffffffffffff, 0x402, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0xffff9ada, 0x1, 0x29, 0x7, 0x3f, 0xfffffffffffffffa, 0x7fff, 0x0, 0xa, 0x2, 0x9, 0x9, 0x2, 0x4, 0xfffffff7fffffff8, 0x9, 0x2, 0x10000, 0x7e, 0x7, 0x0, 0x7, 0x2000, 0x1, 0x0, 0x84, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xadd, 0xe9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2fa8d220]}, 0x1ff, 0x200d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) fsmount$auto(0xffffffffffffffff, 0x1, 0x25) recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES16=r3], 0x1ac}}, 0x40000) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/sound/seq/uevent\x00', 0x8500, 0x0) (async) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/4096, 0x1000) (async) socket(0xa, 0x1, 0x84) (async) fcntl$auto(0xffffffffffffffff, 0x402, 0xffffffffffffffff) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0xffff9ada, 0x1, 0x29, 0x7, 0x3f, 0xfffffffffffffffa, 0x7fff, 0x0, 0xa, 0x2, 0x9, 0x9, 0x2, 0x4, 0xfffffff7fffffff8, 0x9, 0x2, 0x10000, 0x7e, 0x7, 0x0, 0x7, 0x2000, 0x1, 0x0, 0x84, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xadd, 0xe9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2fa8d220]}, 0x1ff, 0x200d) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) fsmount$auto(0xffffffffffffffff, 0x1, 0x25) (async) recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) (async) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES16=r3], 0x1ac}}, 0x40000) (async) 1m3.074214071s ago: executing program 6 (id=2467): bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb3, 0x602, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r3, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000000440)=ANY=[@ANYBLOB="db80d8e5", @ANYRES16=r4, @ANYBLOB="01022cbd7000ffdbdf250200000004000180340201802d0239801b02eb804540411dc202cca7c3000938b0c18de4cfac1203a8319dc7b96f0e2a79334de3be28009e292ede89fa030800dd00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\b\x00-\x00', @ANYRES32, @ANYBLOB="5ecb8698ec000000"], 0x24c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000048) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r2, 0x0, 0x1) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty29\x00', 0x800, 0x0) ioctl$auto(r5, 0x5608, 0x7) setpriority$auto(0x2, 0x0, 0xf2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) 1m1.800377804s ago: executing program 6 (id=2468): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x108000, 0x800032, 0x4) (async) madvise$auto(0x108000, 0x800032, 0x4) madvise$auto(0x0, 0x5, 0x15) (async) madvise$auto(0x0, 0x5, 0x15) madvise$auto(0x0, 0x200007, 0x19) (async) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000dc, 0xeb1, 0x401, 0x9000) (async) mmap$auto(0x0, 0x20009, 0x4000000000dc, 0xeb1, 0x401, 0x9000) madvise$auto(0x9, 0x5e, 0x3) (async) madvise$auto(0x9, 0x5e, 0x3) socketpair$auto(0x1e, 0x5, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) (async) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8005) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') umount2$auto(&(0x7f0000000080)='.\x00', 0x3) r1 = open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) (async) socket(0x2, 0x1, 0x106) ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304, 0x0) (async) ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) ioctl$auto(0xffffffffffffffff, 0x400064c8, 0xffffffffffffffff) listen$auto(0x3, 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) sendmmsg$auto(r0, &(0x7f0000000080)={{&(0x7f0000000040), 0x12, 0x0, 0xd, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x20000) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/user\x00') 58.550388022s ago: executing program 40 (id=2447): sigaltstack$auto(&(0x7f0000000180)={0x0, 0x80000001, 0x40b4}, 0x0) sigaltstack$auto(&(0x7f0000000080)={0x0, 0x2, 0x4}, 0x0) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0x2, 0x9, 0x939, 0x6) mmap$auto(0x3, 0x40000c, 0xdf, 0x9b72, 0x2, 0x400000000008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r0) r2 = setfsuid$auto(0xee00) r3 = setfsuid$auto(0xee01) r4 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/version\x00', 0x600, 0x0) preadv$auto(r4, &(0x7f0000000080)={0x0}, 0x6, 0x22, 0x1) setresuid$auto(r2, r3, r2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) ioctl$auto_BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range$auto(0x0, 0x5, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x238f, 0x4, 0x15) setreuid$auto(0x9, 0x1) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) shmat$auto(0x0, 0x0, 0xfffffffa) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) sendmsg$auto_TIPC_NL_BEARER_GET(r1, 0x0, 0x80) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 53.742779573s ago: executing program 41 (id=2458): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x1, 0x2020009, 0x40000000003, 0x216, r0, 0x8000) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0xffffffffffffffff, 0xa0af) mmap$auto(0x0, 0x5, 0x4000000000e2, 0xeb1, 0x401, 0x8000) ioctl$auto(r1, 0xc0045405, 0xffffffffffffffff) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mkdir$auto(&(0x7f00000002c0)='./file0\x00', 0x3) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x101040, 0x149) getxattrat$auto(r2, &(0x7f0000000300)='./file0\x00', 0xeb, &(0x7f0000000180)='/sys/ker\x8d$g\xe5\xb0(\xec\xe8\xde\xbf\x17e\xe6nel/debug/check_ws:A\xe9\x88\xec\x8e\xeb\xf2\f\\\x94\x1a\x1bmo\x88\x1d\xcb\xb6\x04S\x10\xc5\xdc\x92\x8d\xb1Cz\x05\xbb\xd1l\'\xb1\x03\xeagi\xcf\xef0j\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0xffffffff) mmap$auto(0x200, 0x400008, 0x200, 0x9b76, r0, 0x6) r3 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) read$auto_check_wx_fops_(r3, &(0x7f0000000080)=""/228, 0xe4) mmap$auto(0x0, 0x810004, 0xffb, 0x651b, 0x3, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0xad6c1c5f547bf689) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim2/hwstats/l3/enable_ifindex\x00', 0x81242, 0x0) futex$auto(0x0, 0x8, 0x2, 0x0, 0x0, 0xfffffff7) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/hsr0/forwarding\x00', 0x2000, 0x0) read$auto(r4, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xe9) 46.172903275s ago: executing program 42 (id=2468): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x108000, 0x800032, 0x4) (async) madvise$auto(0x108000, 0x800032, 0x4) madvise$auto(0x0, 0x5, 0x15) (async) madvise$auto(0x0, 0x5, 0x15) madvise$auto(0x0, 0x200007, 0x19) (async) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000dc, 0xeb1, 0x401, 0x9000) (async) mmap$auto(0x0, 0x20009, 0x4000000000dc, 0xeb1, 0x401, 0x9000) madvise$auto(0x9, 0x5e, 0x3) (async) madvise$auto(0x9, 0x5e, 0x3) socketpair$auto(0x1e, 0x5, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) (async) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8005) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') umount2$auto(&(0x7f0000000080)='.\x00', 0x3) r1 = open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) (async) socket(0x2, 0x1, 0x106) ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304, 0x0) (async) ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) ioctl$auto(0xffffffffffffffff, 0x400064c8, 0xffffffffffffffff) listen$auto(0x3, 0x81) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) sendmmsg$auto(r0, &(0x7f0000000080)={{&(0x7f0000000040), 0x12, 0x0, 0xd, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x20000) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/user\x00') 41.140237096s ago: executing program 0 (id=2494): r0 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000001cc0)='/sys/kernel/debug/tracing/available_tracers\x00', 0x100, 0x0) pread64$auto(r0, &(0x7f0000000300)='\x03\xf2v\xad\x06\\\xdd\xa2\xc96\x00k.\x8fC\xb6\x83\x18\xe0\xfdh\xdf\xfe\x16\x18\xfcJ\xf3\xbb\xc7\xfe$x\xb5M\x84:\xc1\v:\xcf1\xe2\x16\xc1S/\xb3u\x04:Ew\x84\x15|yT\x83zV\xa2J\\\xe1H\xce\xffod\xfd\x9b\xccm\xc4\x16\xf6\x0f\xdc/yca\xb1\x1f^\x1b+\xfe nF\xa1Z\xc6\xec\xb5\x87I\xc6\xeaks\x02y8\x82_5\x17\x0e1C`\xc3XPI\xab\xa3*C\x84:\xedY\x17T\x1b\xeb&\xa4\xbb\xa7>\xd3v\xcf\x9eFL\xf0\xd3\xd3\x82\x0e\x1d\xc9\xe6\xfd\xbeb\xff0\x17?`\xa4\x11\x06\xaf\xd8\xea\\\x01\xda[\xe8%(p`\x01\xc7\xfc\t\x80\xb0\xb02\xe1\xe9\xee9\xb5\xc9\xd0\x18+\x10a@9|\x01T\xa5\xc4K\x03\a\xe4\xae\xf4\xf9\x98\x8a\x96\x9e\xbc\xca\x1e\x8e\x04X\xef\x85\x7f\x86\xa5\xbd[\xb6\xaf\xff\xc0K\n\x14\xdf\x8ei%\xd9vo\xf6\xb9\xc9\xa2pq2)2\f\x91\t!\xe9rq\xe7\x98\xee\x83\xb7&\xaeH\xc7\a\x05\x8a\xac\xb0fI\xae\xa5\xaa\x16e K\r\xf2\a#\xa1\xfc\x1e\xef\xa8\x1dXZ\x12\xfd)\xe4\xe7\x87\xdc\xd1\xf6\xbe,F\x06\xed\xeeD\xf2\x85x\xe4)\x91/jnf\xd9\xd7\x9d\xce\n\x8e\x9e\xd1\xdf\x02\xac\xab\x0es\xdc\x8ey(\x83\xb8\xa5\x9b\xa4\xaa\xae\xff\'\xa5\xe3\x96\xd1\x1d\x9d\x8a\xd0\x1b\xf0Y\xd0\xd0t8\xdb #\xf9h\x06+$\x03\xcc\xf9=\xdd\x95rw\x91\xd8\x9e\t\'b2\x99\xd5_\xa5*\x00\xfax@M>\xfb\xd2g\x1b\xd7\x97\xb3\f-cl\x99\xe32e\xc9\x17}\x1d1y\xcc\x144\xd2\x97V\r\x00\x00\x00\xf4j\x14\xbb\x82\x14\xa7\xae\x02\xee\x17\rz\xc9\xde\xa3\xeb%\xf0\xd0\xde\v\xa9\x8e\xa5T\"\xb1\xa2\v\xd7/\xe6\xebO`\xec\x90\x9c\xde+\xef*\x03\xb5\x0fK\xb2\xed\xaf3#\xe0.x\x9b\xba\xcc\xe50\beZ\xee\x00\x00\x00\x00\xac~\xab\xc4B\xce\xe1}n\x8c\x8by\x9c6\xbd\xa7\xb9\xdd\x1cX\x87\x1cor\xe1/\v\xfb\xa9\xda\f\x84l\xc3f\x8b}r\x04\xc0l\xd9\xe8A\x94\fdj\xf1\xe00z\xe8+\xec\xd7l\xd0Of\xaaF\xda\xe1\xa0\xb3p7`\xe8\x1f\xff\x05\\\xec\xc4\xcd\xc8\xc8\x13c\xd3\xcaKc\"\x95o\xca\x9a\x11_!\x97\x8f\xa7\x11\xe3$\xf0\xbf\xcfT\x83h\xa9\x82eI*\x87\x1e\x84D\xba\r\xa7\xec~90\xc1\f\xd4:s\xd7\x88\xda\xdc\xe0\xc7\xbc*\xe9\xd2\xfc\x96Q\x8d\xb1\xc9\x15\x97\xf6\xadQ?\xbb\xb1S\xfb\xec#tH.F\xd0\xf2\xa7.\x19\xa2\xdc\\{\x1bF\xd6\x1c\xb9\xfc$\x80\x8dFBFT%\x13\xe2/\xf9,y\x94v\xb2\x9b\x89\xfaN\xb1}#\x00M,', 0xffff, 0x3) write$auto(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r1, 0x5646, r1) read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000280)=""/40, 0x28) socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r2 = openat$auto_fops_u32_ro_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim3/ports/0/bpf_offloaded_id\x00', 0x200, 0x0) connect$auto(r2, &(0x7f00000000c0)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0) r4 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r4, 0x0, 0x2, 0x100) fadvise64$auto(r3, 0x8, 0x400000000000006, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x9, 0xe) madvise$auto(0x0, 0x200007, 0x8) 37.506751522s ago: executing program 0 (id=2498): mmap$auto(0x0, 0x8, 0xdc, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x3, 0x66) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$auto_BPF_MAP_CREATE(0x0, &(0x7f0000000080)=@enable_stats={0x3}, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x10000, 0xdd, 0x12, r2, 0x28000) write$auto(0x6, 0x0, 0x100000001) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x42, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/ext4/sda1/msg_count\x00', 0x80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000)=""/9, 0x9) timer_create$auto_CLOCK_REALTIME(0x0, &(0x7f0000001280)={@sival_ptr=&(0x7f0000001140)="52eda49ffe96a15bd5c30193962098884fea2dba15b35ce1a8414d408513c8a98185f6cc1d1f2c3300b480a3a56ac31a9e2dc1a9724f1f549e5bb7927baa4b5f8e5b5a357d0257ba9c36afb235413c4634bd17755b716f5ab19f9f5ad9de8ef14b986aeb0ee7af02f391c23228f21ffc", @inferred=r1, 0x7, @_sigev_thread={&(0x7f0000001200)=&(0x7f00000011c0)=0x81, &(0x7f0000001240)="f3c683a93f906e39dd3e82d9e159a455f7b15e7b7f0dc4dcef"}}, &(0x7f00000012c0)=0x5) ioctl$auto(r3, 0x9210640c, 0xffffffffffffffff) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r5 = socket(0x1e, 0x1, 0x0) r6 = socket(0x2, 0x1, 0x0) ioctl$auto_BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000140)={@inferred=r6, "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"}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r7}, 0x6a) bind$auto(r5, &(0x7f0000000040)=@xdp={0x2c, 0xa, r7, 0x7}, 0x66) 36.862759729s ago: executing program 0 (id=2499): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) prctl$auto(0x4e, 0x1, 0x0, 0x1, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xb, 0x7ffffffff000, 0x82}, 0x1, 0x0, 0x0, 0x623d) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/4096, 0x1000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000001100)='/dev/sequencer2\x00', 0x4801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2c, 0x3, 0x4, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x8, 0x4, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/wakeup/wakeup8/active_time_ms\x00', 0x8400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000001c0)=""/176, 0xb0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) write$auto_force_suspend_fops_hci_vhci(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r3, 0x4b45, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x400, 0x7fff, 0x0, 0x10000, 0x100000000000007) madvise$auto(0x0, 0xffffffffffff0005, 0x19) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0xfffffffffffffff7, 0x5, 0x19, r1, 0x7) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) close_range$auto(0x2, 0xa, 0x0) 35.564056678s ago: executing program 0 (id=2501): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x5, 0x7, 0x4) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0xb4001280, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x2b, 0x0, 0x81) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x15, 0x5, 0x0) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x42842, 0x95) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x2a482, 0x0) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x11, 0x3, 0x7fff) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) memfd_create$auto(0x0, 0x2) socket(0xa, 0x2, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202002, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x8800) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 33.713619006s ago: executing program 0 (id=2503): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0xf, 0x0, &(0x7f0000000080)=0x9b) clock_getres$auto(0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setfsuid$auto(0x0) msgctl$auto_IPC_RMID(0x6, 0x0, &(0x7f0000000200)={{0x7ff, 0xffffffffffffffff, 0xee00, 0x1, 0x1ff, 0x7, 0x9}, &(0x7f0000000180)=0x40, 0x0, 0x1, 0x0, 0x400, 0x5, 0x5, 0x7, 0x400, 0x5, @raw=0x6, @raw=0x3}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x15, 0x5, 0x0) getsockopt$auto(r1, 0x27b7282c, 0x7, 0xfffffffffffffffc, 0x0) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, 0x0, 0x20004000) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x3, 0x21) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000040)="78298dc7", 0x1) r3 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/current\x00', 0x1, 0x0) poll$auto(&(0x7f00000000c0)={r1, 0x1, 0x9}, 0x8, 0x2) write$auto(r3, 0x0, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) tkill$auto(0x1, 0x7) write$auto(r2, &(0x7f0000000080)='7\x00\\\xa0\x04|3\x1ck\x00'/24, 0x5) mknod$auto(&(0x7f00000003c0)=':,\x00\xbd\x80\xd6\x002\xb37\xff\x1a\x9e99\xda\xd1v\'\xc6\xd2Fw;\x00v\xdce\xad\xf4\xdb\xc7\x946\xe4\f\x9el]L+\x06\x130V\x1b,d\x8f\xa0\xabDUdk\xac\x82\\tyQ\xd8j\a\x1a[\xdb\x96\x1f{2\x04\xc5Y\xc1@\x0e\xeeWZ\x94N\xd4\xc8q=\x9b\xd1\x7fR3\xb6`\x00\xb3\xe5|1\xba\r\x85\x89\xfe\xed\xe1\xad`\x92\xc7\x9c\xd7\xd8\x15\t&\xb7\xfc\x82\xc4\xd3J\xae\x810\x19\x14\t\xc2\xa5V\xaa\x8d\x04\xf5\xf3\xd6\xd1\xe9k\xaf\x1a\xc6u\x96\xf7\xaa\x84\x92\x995m\xf9O\xc0\x1e\xa05\xdb\xa5\xae\r\x06\xe6\xc3\xd0\xf8:\xf7\xc5u\x91\xf8\x91\xee\xd8y\xb8\xc1)\xad\x05\xeb\xe9\xab\r\x9a@\aa(\x1a\xa4\xc1\xcf\\\xf0\xc3~\xbbd\x94\x9c\x02\xd4\xfc\xd2`\xd9\x83{-\x81zY\\\xac!#\xea\xba\x86)\xe9\xbc\x82\xf6\xd2\x7f\xdb\xa1\xd5\x89|\xa0O\xfcqZ\x85@A\x90\"\x11L\xdd\xa5\x9f\xf5', 0x20e9, 0x103) unshare$auto(0x40000080) mmap$auto(0xaa, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) shmdt$auto(0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x8, 0x6, 0x9, 0x8011, r2, 0x80) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mincore$auto(0x1000, 0x4000000, 0x0) 31.030748117s ago: executing program 0 (id=2508): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x0, 0x1, 0x42, 0x200000000065f, 0x401ffde, 0x7, 0x3, 0x2, 0x100, 0x3eb, 0x5, 0x2, 0x3000, 0x2, 0x6, 0x10003, 0x82, 0x4, 0x0, 0x7, 0x1ffb, 0x203, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x80000000, 0x4, 0xfffffffffffffffc, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffbfffc, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x7fff]}, 0x7, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000040)={0x0, 0x8d}, 0x1, 0x0, 0x7, 0xa505}, 0x800}, 0x400, 0x4004) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0xad6c1c5f547bf689) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim2/hwstats/l3/enable_ifindex\x00', 0x81242, 0x0) futex$auto(0x0, 0x8, 0x2, 0x0, 0x0, 0xfffffff7) ioctl$auto_VHOST_SET_FEATURES2(r1, 0x4008af00, &(0x7f0000000140)=0x864d) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/hsr0/forwarding\x00', 0x2000, 0x0) read$auto(r2, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xe9) 30.066796516s ago: executing program 43 (id=2508): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x0, 0x1, 0x42, 0x200000000065f, 0x401ffde, 0x7, 0x3, 0x2, 0x100, 0x3eb, 0x5, 0x2, 0x3000, 0x2, 0x6, 0x10003, 0x82, 0x4, 0x0, 0x7, 0x1ffb, 0x203, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x80000000, 0x4, 0xfffffffffffffffc, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffbfffc, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x7fff]}, 0x7, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000040)={0x0, 0x8d}, 0x1, 0x0, 0x7, 0xa505}, 0x800}, 0x400, 0x4004) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0xad6c1c5f547bf689) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim2/hwstats/l3/enable_ifindex\x00', 0x81242, 0x0) futex$auto(0x0, 0x8, 0x2, 0x0, 0x0, 0xfffffff7) ioctl$auto_VHOST_SET_FEATURES2(r1, 0x4008af00, &(0x7f0000000140)=0x864d) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/hsr0/forwarding\x00', 0x2000, 0x0) read$auto(r2, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xe9) 13.184613577s ago: executing program 4 (id=2532): mmap$auto(0x5ced, 0x8001, 0x4200000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0xf, 0x2, 0x3, 0x66, 0x0, 0x0, 0x0, 0x1000000006, 0xfffffffffffffffe, 0x7ffffffffffffffd, 0x5, 0x80000000, 0x6, 0x7, 0x7, 0x61, 0x40000103}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f00000001c0)) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) io_uring_setup$auto(0x9, &(0x7f0000000200)={0x3, 0x100, 0x39eb, 0x3, 0x3, 0xfff, r0, [0x1, 0x1, 0x8e], {0x401, 0x4, 0x6b, 0x9, 0xbded, 0xffff, 0x800, 0xdc1, 0x8000000000000001}, {0x5, 0xdd, 0xee, 0x3, 0xd, 0x3, 0x101, 0x4}}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, 0x0, 0x80, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/channel\x00', 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) open(0x0, 0x518282, 0x78e22799f4a46e8e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) r5 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x27, 0x7, 0x3f, 0xfffffffffffffffa, 0x1ffda, 0x0, 0xa, 0x2, 0x3, 0x7, 0x9, 0x4, 0xfffffffffffffff8, 0x9, 0x2, 0x10000, 0x1, 0x7, 0x0, 0x7, 0x2001, 0x1, 0x0, 0x84, 0x0, 0x0, 0xa6, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0xadd, 0xe9, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x8000000000000001, 0x1, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffffffffffa, 0xffffffdffffffffd]}, 0x1ff, 0x200d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r1, @ANYRES8=r4], 0x1ac}}, 0x40000) recvmmsg$auto(r5, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) 11.211426442s ago: executing program 4 (id=2534): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto_SO_SNDBUF(0xffffffffffffffff, 0x4000000, 0x7, &(0x7f00000000c0)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x8000) mmap$auto(0x0, 0x400007, 0x3, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x6, 0x0, 0x11, r0, 0x8000) mmap$auto(0x0, 0x9, 0xe0, 0xeb7, r0, 0xffffffffffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x200100, 0x0) pipe$auto(0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/sockstat6\x00', 0x189201, 0x0) write$auto(r2, 0x0, 0xe) unshare$auto(0x40000080) socket(0x1d, 0x5, 0xc) mmap$auto(0xed4, 0x1, 0xe, 0x16, r0, 0x2) setsockopt$auto(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x56b) mmap$auto(0x0, 0x2, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2eb) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) pread64$auto(0xffffffffffffffff, 0x0, 0x7f8, 0x40000000000) r3 = socket(0x22, 0x1, 0x80000000) r4 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) unshare$auto(0x40000080) sendmmsg$auto(r3, 0x0, 0x200004, 0x2) mmap$auto(0x3ae, 0x7fffffff, 0xe4, 0x9b72, r4, 0x43) mmap$auto(0x2, 0x80000000, 0x4, 0xa10, r2, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xa, 0x0) io_uring_register$auto(r1, 0xdc8, &(0x7f0000000140)="a43ea6da418cc07474be0f6a1693d6b8d114341a56e78e3f1d2a72dd4313ec1cafcd352d65f857113e93135497d22886c31bd105da9945ed035f57cb82a55bc2928a0a1ec8af9e6e7c7ce9d01ec7332a82c4c1b8b37a09383fdc8c58b07eaf72a7b2a71f7df688d09aa8389753138527a5b0e86a446aae79fa66c35ce18444e2eb0caacb07d5a1638b5b7c981dd3dd2d3fc7ba67129b6e81db1f3db989ac7045b6ba16171cb3d25133267684953f6eb268cb4ee0ab86e7a21bfcded72efd2e452207be", 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x0, 0xffffffffffff0001, 0x15) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x800, 0x100) 8.617515251s ago: executing program 4 (id=2536): r0 = socket(0x2, 0x80805, 0x0) getsockopt$auto(r0, 0x84, 0x3, 0x0, 0x0) (async) close_range$auto(r0, 0xffffffffffffffff, 0x0) ioctl$auto(0xffffffffffffffff, 0x64c5, 0xffffffffffffffff) (async) pipe$auto(&(0x7f0000000040)) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) unshare$auto(0x8000000) (async) semget$auto(0x0, 0x2e4a, 0x8000) (async) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0) (async) socketpair$auto(0xb, 0x0, 0xfffffffa, &(0x7f0000000000)=0x9) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0) ioctl$auto_FIONCLEX(r3, 0x5450, 0xb) (async) accept$auto(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) (async) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/protocols\x00', 0x100, 0x0) (async) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x121002, 0x0) write$auto(r4, 0x0, 0x100) (async) close_range$auto(0x2, 0x8, 0x0) (async) acct$auto(&(0x7f0000000000)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/dT\x02\xa2%h\xdd\xfep\x0e\xe6\x96w\x05r\x9c\xb6L\t0\x0f\x954\xf6\b\xa0&C\x83L\xc0\xe9\t\"\xa5\x8f\xce\x03\xb6\x16\x90\xc3\x97\xb7\n\"zB\xedCf\xfd \x87\xdb\x8f\x87\xe9\xea\x89-B\x06\x97\xcb+\xf09\xa1\xa5\x8d\x9b\b\xc8\x15\xb6|\xc7 t\xc8#\xf8,\xab\xa7\xf6\x03Z\x93\xf5\xc8\x87\xc9z}]\x85\xcc\xd5d\x02\x90{\xc3_\xd4>b\x96\xc5\x93\xb1\xa0E\xda\xb8\xb1\xa5G\r\xf4[\xec \"\xd9\x13\x803\xa6V\xe3\x06\xc72\xc0d|?\xfaA\xd2\xd6\xce\xfa\x9a\x98\x01\aXV.\xf15>;\xfat9\x8f\xbf\x8dRQf\xa4\x11\x13\xa0R\xcb\xc2v\x0f\xfc\xb3:f\x8f\xae\xcc\xbb\xd2\xfa\xef%\xfa\x85\xd9\x7fL\xad\xab\xd0\xd1\xc9vJr\x89\x90vq\x17\xbb\x82[D\xedJ\xe7{re\x8a\xeb~\xf1V<\xc2p~\x90\xe6\x1c\xf86\xeb\x11\xe2\x90\rr\xda.\x82\xbd\x0f\xbd{\x861\x03\xda-#\\^`\xc8\x01%V\xab\r\b\xde\xaa\xf8s\x86K\bR\x12\xbc{\xef\xc5<\xfd\x02\xe2\xf0\br\xde\n\xe4\xa6\v\xbcd\x9e\xe9\xbd\x18\x89\xa1\xe8w\x0e7\xae\x10e\xb6\xce\xe25\xdf\xd8\x12X`\xec\n\x87\x86X\x9b\x80i7\xcb\xed\xbdQ\xe4\xbb*\xedq\xb0>\x92\xb6W\b\x1eV\xadk\x11\xa9\xa1\x1f\xe1\xac\xb7\xd0\xcc\x94\xc1g\x8c\xe5\xf0\"\xe1\xc2. \\X\xe0\xd30\xa9X\x8dB\xb1\xddS\xbey\xb4]j \x96\xe3\x84\xcc\x02C\xd23\x16T\xden\"\xea\xf2j\b\xd2\xf6\xe5\xc2a\xaa\xefr\x80\rZ\x06s\xa0\xaf\x93MmM|\xfdN\x19\xf0RS\xc4\xca\x84H\x19T\xd4\xc4\x00\x04\x00\x00\x00\x00\x00\x00\x8a\xd0\xd48\xb4\x0e0\xff\x98\xce\x01\'\x83i\xd9\x94\xcf\xd7\x03_|J\x9b\x06q\x0e\xdf_/u\xfa\xcd\xb9\"L\x17\xc3\xdc\x16\xc7\x02\xb7\x91\x85Ot\xd0r\xc2r\xee\xce\xefU\x1a\x89\xd6,\x04\x96o\xb9\x1b\x19b&O\xf2\xf1\xef\xd1\x04A\x00q?\xa0\x00\xec\xf17\xbbpu\xeeW\xd7HSXt\xe4\xf07+\xc8\xd3\x87|\x15\x9b\x95t\x195l\xcb\xfd\xae@\xbd>\xdcd\xaa\x19r\xec_>\xf2\x7f\xe6\xe7\x1c\x1dE\x87k(k\x98\x81\xe8\t\"\xed\x94\xe33\xebk*\xc1\xcc\x98\x1d\xdd\x9c\v\xc3\xef\x9b\xc3\xca\x14\xb54\x8aS\xa0`*\xc4\xe6|n\xc7\xbf1\x02yc\xc2\xf3\xb1\x0e\xb4\xc5\xf3\xe2\x10\xa9\xbdQ\xb6\xc7\x81_3^y\x06\x0f\xec\x95\xf0QP\x1c\xc7;\x7f\x03i\x91\xff\xa0\xfek\xb1\xd1\xa3w\x1b\'[\x00|\xe6\xaa\xe3 \x9d\xb6g\xe2l\xe3q!\xfa\x15\xab\x9e\xe0\xbbp\xcfqT<\xe0\"\x17\x1a\xd3\xa6\x05\xa40\x9a\x90\x12\x17t%\x17+\x8b\xf7u\x93\xf9') (async) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(0xffffffffffffffff, 0x0, 0x48080) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_POWER_STATE(r5, 0x800455d1, &(0x7f0000000100)=0x11512) 8.325105961s ago: executing program 3 (id=2537): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010005000000fbdbdf25880000000400dd00"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x10) listmount$auto(0x0, 0x0, 0xf4240, 0x0) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC1D1c\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', 0x0) bpf$auto(0x6, &(0x7f0000000000)=@bpf_attr_3={0x1, 0x9067, 0x40000080018c, 0x6a, 0x0, 0x8, 0x4, 0x57b8, 0xf, "63ac0600000033ebc15774e816ef77cf", 0x0, 0x100543, 0x4, 0x207, 0x3, 0x1009, 0x4, 0x2, 0xe, 0x5, @attach_btf_obj_fd, 0x166, 0x7fb, 0x6, 0xa, 0x48000000}, 0x10) writev$auto(0xc8, &(0x7f00000028c0)={&(0x7f0000000000), 0x200}, 0x9) setresuid$auto(0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x538, r0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_MESH_ID={0xa, 0x18, "8765839be1d1"}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_VENDOR_DATA={0x28, 0xc5, "d19f3b98daeb63ec0a45156a38993e14fc3f2accabf37e8c522d8058e434ecc56b0794e5"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x34}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "d366b7db35437c4dea30f43b"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x3f0, 0x6e, 0x0, 0x1, [@nested={0x8b, 0x19, 0x0, 0x1, [@typed={0x8, 0x29, 0x0, 0x0, @pid}, @generic="f7b1840e10c37193057e77525de3f9ee243423a5a3239d46e4a7778f37773837bfa5e978c3c25f7bdd320deecd5cfa50088ab114ab2fb9047154a3339ddf60c125a3df53d0394875f6ce6dd05fa3d39e356b94000a8ffcb286df082954cc900f2b046574c181c70ebf2afac4aa68fdeba2d68045c51a12", @typed={0x8, 0xf6, 0x0, 0x0, @u32=0x5}]}, @nested={0xe6, 0x25, 0x0, 0x1, [@typed={0x31, 0xd6, 0x0, 0x0, @ipv6=@remote}, @generic="85f58c546fbbe9347ba3592fcfdb8d309a7fd803c613c6bdf8ab8f90167b7e03990ff504d46bcebc5c22b2052345531a063eb153e5abec3bbad9df4c3ea2e82692723a7b78761772bd869cfcdcc54fce8d2c66d5553d3d53c54f5883ecdfce9c0065075348e9790199ce598c68d37e116f2f22e0b10a511cacb063e9cb23c9479d1327dd03007eb2048a5ecda13d23ba2e95a13ba754", @nested={0x4, 0x5f}, @generic, @generic="3c78c1722797b20255d296f37c20c1936ed1a83418d1abf888071530917573d373ea729d1951b38121cffba58307fa7b6bc4cb10"]}, @generic, @typed={0x8, 0xf4, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x19d, 0x59, 0x0, 0x1, [@typed={0x8, 0x120, 0x0, 0x0, @uid}, @typed={0x16, 0x58, 0x0, 0x0, @str='/dev/snd/midiC2D0\x00'}, @nested={0x156, 0x78, 0x0, 0x1, [@generic="39cb98fbcbd6b0b6a554cb82ed2a3fab375452556baec725002a3e749226de2200ea9ec74a8a5cdd6010a08f03ab6f6a6eed0b44402515d1601f65143948446e9150d7c1ef4320da88da5b1f1a0220c1d7ad91ee52ece43e89758dd48d0762df18e0f5faacfe73dafe8fb1b3de3fac1f13160bed1b07fde0744d32bcd52137e3d3ccfde2aa8162f562590cbea7c013edb6f8066c7943919eab8a0b5c369e52b1bf684ed32d9f2fcef716d630e375bbfc8ab5269070dc07cfbdc48e597d3e29bb51cce4f287c6d5f3b17ba06ce7de2c3df86578ab908eb8d8", @typed={0x8, 0x137, 0x0, 0x0, @uid=0xee01}, @generic="d2028158b31fdc62e2835171328d397371b420d8414e10e26ef9eab8fc8cf7e94af66156316569072d92e895b23fe5325ca48458e99cb75607ad8516c2a8980c78773c20f629b7f9318da6724b0d34be2a6f1031e936cc441f2abdbd7fb4e8cacaa330e57ee6", @typed={0x4, 0x1a}, @typed={0x7, 0xea, 0x0, 0x0, @str='}!\x00'}]}, @generic="82af7348f08bb383112fa5d2e3cb1ed0a4b3c147d7b9115dd220a8a3a9ecd8bc1e"]}, @nested={0x4, 0xd}, @generic, @typed={0x14, 0x23, 0x0, 0x0, @ipv6=@loopback}, @generic="fdd5e8369df766e2de34655b58146066123bfd4dc97358afeeb4cbc6d774f0ec8b09519bd81f1d7a662578d7d30d2e255bf5b2b3f782626f6c46e4b5629e92f3ae4770ede010a6648d72c1a7a2a3950b33696604ccd04d8a5fd396d023d5dc09040e6448c8821808c44facf22f89eb1fb3c7412f5aa7cd4fc9c6b64cf60acf3d66ff825ecf2ae257714402c08ee7575d4fe58592eae47c5c3b10e6d54b48e1a34a88b018539d13ae3097409d07dcc7116b911ecd67825f15"]}, @NL80211_ATTR_PMKR0_NAME={0xcb, 0x102, "98433b45485b0d07f3af16801785094a6587d6303f241689b1d1c9c0c8398b54f43586f91d1324ce74406cf1b171de4a0068812e62f6ee82b56662a4f9f2b45fe2d5efe9c4222554921d37e9804a49ae94bd1ffbe0c245d2c015b1f89d9a5a826ccbd3cb8e7525cb9d7e46d2603719ba2441008a02c106d487e169bc205da6b217a386a17f197ef50047b281fd5b5062d60c793c2a1381b773b456be0344d6dcd2827b8ae029b454d192712a32fa126cbb7c8c1d05103557987a92063f9a5d5d0fdacd32255cf1"}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0xef07}]}, 0x538}, 0x1, 0x0, 0x0, 0x8805}, 0x8000) r2 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0) readv$auto(r2, &(0x7f00000018c0)={0x0, 0x1}, 0x9) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x40100000001) prctl$auto_PR_SET_MM_START_STACK(0x80000000, 0x5, 0x0, 0x2, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/anycast6\x00', 0x181500, 0x0) sched_setattr$auto(r4, &(0x7f0000000340)={0x7, 0x6, 0xfffffffffffffff9, 0xfff, 0xa, 0x1f9, 0x6, 0x9, 0x4, 0x8001}, 0x7b) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x20010, 0x7, 0xeb1, 0x404, 0x10008000) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 8.058447509s ago: executing program 4 (id=2538): sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40008c0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) rseq$auto(&(0x7f0000000240)={0xe, 0x20401, 0x5fc, 0x800, 0xffffffff, 0x5b8f, "f57d9a26b8680a348296f69c08c4eb04e565eabfffbf371f8426a86faa86b84b16ad9cf7028f7093f2c8d13b288731d2abbcac4d0fd059f428b3e11300fa547fe062b12862ee42"}, 0x8000, 0x0, 0x800007) (async) rseq$auto(&(0x7f0000000240)={0xe, 0x20401, 0x5fc, 0x800, 0xffffffff, 0x5b8f, "f57d9a26b8680a348296f69c08c4eb04e565eabfffbf371f8426a86faa86b84b16ad9cf7028f7093f2c8d13b288731d2abbcac4d0fd059f428b3e11300fa547fe062b12862ee42"}, 0x8000, 0x0, 0x800007) madvise$auto(0x0, 0xffffffffffff0005, 0x13) setgroups$auto(0xe32, 0x0) (async) setgroups$auto(0xe32, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) mmap$auto(0x4, 0x2420007, 0xfffffffffffffff5, 0x200000000000f8, 0xffffffffffffffff, 0x1) (async) mmap$auto(0x4, 0x2420007, 0xfffffffffffffff5, 0x200000000000f8, 0xffffffffffffffff, 0x1) r0 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) ptrace$auto(0x4206, r0, 0x1d4, 0x200005) (async) ptrace$auto(0x4206, r0, 0x1d4, 0x200005) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, 0x0, 0x582, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) ioctl$auto(0xffffffffffffffff, 0x40205657, 0x38) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0) (async) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0xf0e01, 0x0) (async) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/lru_gen_full\x00', 0xf0e01, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x8208ae63, 0x38) (async) ioctl$auto(0x3, 0x8208ae63, 0x38) ioctl$auto_SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x1, 0x84) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) (async) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 7.641419292s ago: executing program 5 (id=2539): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/conf/netdevsim1/ignore_routes_with_linkdown\x00', 0x202, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000100)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xae\xb5Ac\x92\x90\xa53\x80\xa8\x8fNfI\xd8#\xb7\xec\xcd\xb5\xed_y\xce_\xb6J\xfe\xdfu\xf8\xea\xad\xd3\xf3*&\x1a\xe9.\x15Q\x9e\x88\xf1\x10\xfay\xc6\x7fSIg4R\x88]@jx6*\f\xe6\xde\xce\xfa\x90\xc3b\x10e\xf8\x04\xce\x01}\xce\xd7\xfa\xc9\xa7\xe3l\xb3\xb0#\xa4\xa09)\x96\x84\x9dg9\n\xd7!\xea\xca\x97[\xe0 \xbe\x1d\xa1\xee\xbe\xd2\xce\x86^\xd3b`', 0x81) listen$auto(r3, 0x1f64b57d) fsconfig$auto_EROFS_MOUNT_DAX_ALWAYS(r3, 0x5, 0x0, 0x0, 0x40) setreuid$auto(0xffffffffffffffff, 0x8) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/options/test_nop_refuse\x00', 0x10080, 0x0) sendmsg$auto_NL80211_CMD_DEL_STATION(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x8c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5}, @NL80211_ATTR_SAE_PASSWORD={0x6f, 0x115, "b4efda248fb85a9ea4f66b0eb18a2e504385eb1012b3ccdd0aa245f4181cb62804197463f1caba9aea7bad9291117730df5adface311b2880855dd7caa19365397a7d1d91861f3e7fc708c1e6d9983b8774a30fc3405ce49cc346dd2ba641d1623f62bf684bb9d4019a442"}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x4001) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_TUNNEL_INFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) sendfile$auto(r1, r0, 0x0, 0x48) 6.915850116s ago: executing program 5 (id=2540): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x23, 0x80805, 0x2) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) bpf$auto(0x0, &(0x7f0000000040)=@batch={0x400, 0x5, 0x4, 0x5, 0x3, r1, 0x63, 0x8}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) close_range$auto(0x2, r1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) socket(0x2, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x9, 0x6, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x1aa, 0x0, 0x6, 0x0, 0x5, 0x1001}, 0x5}, 0x2, 0x100) bpf$auto(0xf7fff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x71c, 0xfaae, 0x468, 0xd, 0x2, 0x8, 0x9, 0x4, 0x1fc, 0x5, 0xb5, 0x4, 0x806, 0xd9ee}, 0xa3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) 4.889974551s ago: executing program 4 (id=2541): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="9be10e5e", @ANYRESHEX=r1, @ANYRES8=r1], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x24004840) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) inotify_init1$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xffffffefffffffff, 0x14, 0xffffffffffffffff, 0xb) socket(0x22, 0x7fffe, 0x6) r2 = io_uring_setup$auto(0xd, 0x0) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)=@link_create={@prog_fd, @target_ifindex, 0x1, 0x26ed, @kprobe_multi={0x8001, 0x401, 0x1, 0xd, 0x8}}, 0x200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r4, 0xc038563c, r3) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) close_range$auto(r2, 0xfffffffffffff001, 0x4) socket(0x29, 0x3, 0x300) open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r1, &(0x7f00000006c0)={0x224, 0x2, "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"}, 0x9) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/vhci_hcd.6/usbmon/usbmon22/uevent\x00', 0x210400, 0x0) read$auto(r6, 0x0, 0x20) recvmsg$auto(r5, &(0x7f00000005c0)={0x0, 0x8, &(0x7f00000004c0)={&(0x7f00000003c0)="444debcb5d4827b41b873d646e2663fb2d4aa24da78f4b3472bd8daf8c57304fe5302fe1869cfca458a5a39bd4006710640f6032088c509f0c082c1b04896afe04d524b8b80ce2949dae1a1d2bec705c343bc92a41212ae3ed0a036e67d0c6d7b35e6cb8956ef9b289a7e42615af9f0470dc70d3deea952a1d85a1a845530a190757f55d6e53993d1e8f22b49f44b8a5b9b989d8ed44e1a1f0002bb9f9c8813bee34cfb9b329b8b45794054ee04fdb17a945013b532f53854704c99cc8f02c1582b9c91704e2ed3d57e019cf620547", 0x3}, 0xd3, &(0x7f0000000500)="6bfee52cc6d76e1c2f8b714f9ce8de29c2b8c6a36fd1081b8f6753c4db3a957fc9f3c8ce5a1f6aae5db64bc4b8383dea96682820b78f0fdf870dba5430e851305d4713df7f1124096ace834632a497cc07ffb3b6254aa69082434244066c46fe36fd6a587c8d1a8b40662762a5e48ddb2c86fa27c693a26df7fa2dd4f5762a1616bbbc094ba84c2f033b83814b8572c7bb08c224a9b33f1ac650d8c51cff0960141e613531d3f03e45860d2c2f7110f12d60c0", 0xc, 0xffffffff}, 0xfffffff7) 4.771159224s ago: executing program 3 (id=2542): openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) socket(0x2, 0x1, 0x106) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x3, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) epoll_pwait2$auto(0xffffffffffffffff, 0x0, 0x101, &(0x7f0000000400)={0x7, 0x80000001}, 0x0, 0x8) r2 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f00000001c0), r0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r5 = setfsuid$auto(0xee01) setresuid$auto(0x0, r5, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000040)={0xfffffffa, 0xee01, 0xb82, 0x1000}) ioctl$auto_XFS_IOC_FREESP(r4, 0x4030580b, &(0x7f00000001c0)={0xfff7, 0xfeff, 0x9, 0x100000000, 0x7f, 0xffffffffffffffff}) shmctl$auto_SHM_UNLOCK(0x80, 0xc, &(0x7f00000002c0)={{0xcd79, r5, r6, 0xfb, 0xbe2, 0x2, 0x9}, 0xa16, 0x6, 0x2, 0x8, @inferred=r7, @raw=0xb247, 0x1, 0x0, &(0x7f0000000200)="faad107b011f1b7cecd6e2e7e02cee71d9ef62324c9e45185e8dcef260dd4af0e918adabc646fc6e5962ce0a87792460456ef7353b0b489caead07e1bb6db2bbfac07cfc3894e062a0dc593f8bdd6660edb8fe29df85948c040823917c", &(0x7f0000000280)="88e9a4047db4d1f5690753115eec44cf4b2e1d78f85a7ecf2fde84d6a25c1155cb1d4e1bfaa022cb9f5a3e33ad043809d7909cd125"}) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r2, @ANYBLOB="6236db6220ee631c9c00938004803e800400408008004200000d0000000000000000", @ANYRES32=0xee01, @ANYBLOB="b73df807a4a520943c12d69cd96d78101a7960eed1165924f6d856fedf857e223aecce161acd6b99da0c69de8f00eb6ae6be0dc65aee95d4f11e29fc6f41059259ed531ec557f24c8d64d11c29915530c35fe9527c665d9c675802847823c82f81e5dc71806da570fe9539810800c200", @ANYRES32=r5, @ANYBLOB="04001a800400948008005100ac1e0101040047800800010007000000"], 0xbc}, 0x1, 0x0, 0x0, 0x24000}, 0x11) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) socket(0xa, 0x5, 0x0) socket(0xa, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) r8 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) read$auto_i2cdev_fops_i2c_dev(r8, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r9 = socket(0x10, 0x2, 0x4) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/lru_gen_full\x00', 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c082) write$auto(r9, &(0x7f0000000000)='-\x00', 0xfdef) 4.699357277s ago: executing program 5 (id=2543): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0) r0 = socket(0x10, 0x2, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x9) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_tun_fops_tun(0xffffffffffffffff, 0x0, 0x0) madvise$auto(0x0, 0x600009, 0x19) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x2000, 0x0) ioctl$auto(r1, 0x4b4e, r1) setsockopt$auto_SO_NO_CHECK(r0, 0xffffffff, 0xb, &(0x7f0000000040)='/dev/tty12\x00', 0xd) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004580), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x20, r4, 0x601, 0x70bd29, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x4}, @OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x14ed4312}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008011, 0x4, 0x0) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008012, 0x1000000004, 0x0) ioctl$auto(0xffffffffffffffff, 0x8946, 0x24) fanotify_init$auto(0x0, 0x5) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x7654, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) 3.89633066s ago: executing program 3 (id=2544): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) connect$auto(0x3, &(0x7f0000000080)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4}, 0x81) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) (rerun: 32) pread64$auto(r1, 0x0, 0x1000000000000006, 0x80000000000001ff) readv$auto(0x3, 0x0, 0x4) (async) unshare$auto(0x40000080) (async) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x2, 0x4cbd5d) (async) ptrace$auto(0x5, 0x0, 0xfffffffffffffffa, 0x8) (async) mmap$auto(0xf22, 0x6, 0xfd5, 0x9d, r2, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/mtu\x00', 0xe3102, 0x0) sendfile$auto(r3, r3, 0x0, 0x2) openat$auto_ht40allow_map_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy7/ht40allow_map\x00', 0x20000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) socket(0x1d, 0x3, 0x1) (rerun: 64) setsockopt$auto(r2, 0x67, 0x1000, 0x0, 0x5) (async) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = getpid() epoll_pwait$auto(r1, &(0x7f0000000040)={0xffffffff, 0x10001}, 0x7, 0x3, &(0x7f00000001c0)={0x8}, 0x8) (async) process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async, rerun: 64) io_uring_register$auto(0x2, 0x4d85, &(0x7f0000000340)="769431532d162d4ba37fac9be067cea6a986dcd81968f6268d27c66f084ec67fde2c787ca5f099b766033e2cc7e395f6d8e7b3d305d491416aa82de4f4122a2336d7be6f00668a8d444c3493689ca8b44a440d4d401d9f881d96ee84602d63e9efbd3071d471a25fef2d8eca7803e1f8c6", 0x3) (async, rerun: 64) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x3, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 3.351844958s ago: executing program 5 (id=2545): close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x10, 0x80002, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0xa, 0x0) timerfd_create$auto(0x0, 0x0) timerfd_settime$auto(r0, 0x3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0xd365, &(0x7f0000000000)={0x0, 0x10002, 0x7d, 0x5, 0x6, 0x5, r1, [], {0x2, 0x4, 0x6, 0x2, 0x400, 0x0, 0x7, 0x5, 0x80000000}, {0x7, 0xd, 0x6e68, 0x8, 0x6b, 0x9, 0x0, 0xfffffffa, 0xb1}}) prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x4, 0xa5, 0x3, 0x9) (async) prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x4, 0xa5, 0x3, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0006, 0x17) ioctl$auto_TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) (async) r2 = ioctl$auto_TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) r3 = gettid() mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) setresuid$auto(0x8, 0x0, 0x4) (async) setresuid$auto(0x8, 0x0, 0x4) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000007, 0x7, 0x6}, 0x0, 0x7ffffffff000, 0x0) (async) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000007, 0x7, 0x6}, 0x0, 0x7ffffffff000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x2, 0x73) kill$auto(r3, 0x11) setsockopt$auto_SO_CNX_ADVICE(r2, 0x2, 0x35, 0x0, 0x81) madvise$auto(0x8, 0xffffffffffff0005, 0x19) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r1) madvise$auto(0x1000, 0x400050, 0x9) munmap$auto(0x8000, 0xffffffff) (async) munmap$auto(0x8000, 0xffffffff) 3.032023532s ago: executing program 8 (id=2509): socket(0x9, 0x80000, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x72, 0x0, 0xc) socket(0x9, 0x80000, 0x0) (async) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) io_uring_setup$auto(0x1, 0x0) (async) setsockopt$auto(0x3, 0x10000000084, 0x72, 0x0, 0xc) (async) 2.702521416s ago: executing program 8 (id=2546): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) ioctl$auto(0x3, 0x40081271, 0x38) 2.452357951s ago: executing program 8 (id=2547): mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) clone$auto(0x0, 0x5, 0x0, 0x0, 0x3ff) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) set_mempolicy$auto(0x6, 0x0, 0x21) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x5, 0x0) setsockopt$auto(r0, 0x0, 0x2a, 0x0, 0x108) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000002f80), 0x2, 0x0) r1 = openat$auto_fops_u64_ro_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/zswap/reject_compress_fail\x00', 0x0, 0x0) shmctl$auto_SHM_UNLOCK(0x3, 0xc, &(0x7f0000001280)={{0x200, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x7, 0xf03}, 0xe, 0x8000000000000000, 0x3ff, 0x5, @inferred=0xffffffffffffffff, @raw=0x2b37, 0x6200, 0x0, &(0x7f0000001180)="58a653fbfb7f58d537cce78ad5120c136bd82fdaccf535e77f0ca134c086d376fbbf89", &(0x7f00000011c0)="2a3039aac69d005a4356aee16f63763d220a1ff4d8286eb5945ebb1c5686ea14be27a1a689734226f4f132122a1ac236e5b6b935af643b784431417841504d7befa763548b5126fd3d62357c37a2515d2158c020d65282ad7f03302af2dafb7cd0accd769ba16a36bc1abf541e6fc5b95b86ed5658fdc12d5e0bc6b39f1ff84bfff4f5635b8a65b5500580801788c7566ccdd70934b665ca7487393c"}) fsconfig$auto_FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000100)='/dev/video13\x00', &(0x7f0000000180)="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", r2) fstat$auto(0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = socket(0xa, 0x2, 0x73) setsockopt$auto_SO_ATTACH_BPF(r3, 0x0, 0x32, &(0x7f0000001300)=':{#\x00', 0x81) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video13\x00', 0x20000, 0x0) ioctl$auto(0x3, 0xc0285628, 0x8) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) r4 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r5 = socket(0x10, 0x2, 0x0) fstatfs$auto(r4, &(0x7f0000000000)={0x6, 0x5, 0x7, 0x1, 0x7, 0x2, 0x9, {[0x6, 0x1ff]}, 0x7, 0x1, 0x4, [0x0, 0x8, 0xd05b, 0x7]}) openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg/0:0:0:0\x00', 0x200040, 0x0) sendmmsg$auto(r5, 0x0, 0x3, 0x0) 1.892081478s ago: executing program 5 (id=2548): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x121d02, 0x0) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x622340, 0x0) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) memfd_secret$auto(0x0) ptrace$auto(0x4206, 0x1, 0x8000000000000000, 0x200005) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000002180), 0x100, 0x0) eventfd$auto(0x3) pipe$auto(0x0) r0 = socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x55) r1 = socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(r0, 0x0, 0x5c8) close_range$auto(r1, 0xfffffffffffff000, 0x4000000000002) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 1.642482704s ago: executing program 3 (id=2549): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0x7f, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), r1) (async, rerun: 64) r3 = socket(0x2, 0x1, 0x106) (rerun: 64) setsockopt$auto(r3, 0x6, 0x10000100, 0x0, 0x2d48) (async) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) 1.28128347s ago: executing program 4 (id=2550): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010005000000fbdbdf25880000000400dd00"], 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x10) listmount$auto(0x0, 0x0, 0xf4240, 0x0) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC1D1c\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, 0x0) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, &(0x7f00000001c0)='/dev/virtual_nci\x00', 0x0) bpf$auto(0x6, &(0x7f0000000000)=@bpf_attr_3={0x1, 0x9067, 0x40000080018c, 0x6a, 0x0, 0x8, 0x4, 0x57b8, 0xf, "63ac0600000033ebc15774e816ef77cf", 0x0, 0x100543, 0x4, 0x207, 0x3, 0x1009, 0x4, 0x2, 0xe, 0x5, @attach_btf_obj_fd, 0x166, 0x7fb, 0x6, 0xa, 0x48000000}, 0x10) writev$auto(0xc8, &(0x7f00000028c0)={&(0x7f0000000000), 0x200}, 0x9) setresuid$auto(0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x538, r0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_MESH_ID={0xa, 0x18, "8765839be1d1"}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_VENDOR_DATA={0x28, 0xc5, "d19f3b98daeb63ec0a45156a38993e14fc3f2accabf37e8c522d8058e434ecc56b0794e5"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x34}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "d366b7db35437c4dea30f43b"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x3f0, 0x6e, 0x0, 0x1, [@nested={0x8b, 0x19, 0x0, 0x1, [@typed={0x8, 0x29, 0x0, 0x0, @pid}, @generic="f7b1840e10c37193057e77525de3f9ee243423a5a3239d46e4a7778f37773837bfa5e978c3c25f7bdd320deecd5cfa50088ab114ab2fb9047154a3339ddf60c125a3df53d0394875f6ce6dd05fa3d39e356b94000a8ffcb286df082954cc900f2b046574c181c70ebf2afac4aa68fdeba2d68045c51a12", @typed={0x8, 0xf6, 0x0, 0x0, @u32=0x5}]}, @nested={0xe6, 0x25, 0x0, 0x1, [@typed={0x31, 0xd6, 0x0, 0x0, @ipv6=@remote}, @generic="85f58c546fbbe9347ba3592fcfdb8d309a7fd803c613c6bdf8ab8f90167b7e03990ff504d46bcebc5c22b2052345531a063eb153e5abec3bbad9df4c3ea2e82692723a7b78761772bd869cfcdcc54fce8d2c66d5553d3d53c54f5883ecdfce9c0065075348e9790199ce598c68d37e116f2f22e0b10a511cacb063e9cb23c9479d1327dd03007eb2048a5ecda13d23ba2e95a13ba754", @nested={0x4, 0x5f}, @generic, @generic="3c78c1722797b20255d296f37c20c1936ed1a83418d1abf888071530917573d373ea729d1951b38121cffba58307fa7b6bc4cb10"]}, @generic, @typed={0x8, 0xf4, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x19d, 0x59, 0x0, 0x1, [@typed={0x8, 0x120, 0x0, 0x0, @uid}, @typed={0x16, 0x58, 0x0, 0x0, @str='/dev/snd/midiC2D0\x00'}, @nested={0x156, 0x78, 0x0, 0x1, [@generic="39cb98fbcbd6b0b6a554cb82ed2a3fab375452556baec725002a3e749226de2200ea9ec74a8a5cdd6010a08f03ab6f6a6eed0b44402515d1601f65143948446e9150d7c1ef4320da88da5b1f1a0220c1d7ad91ee52ece43e89758dd48d0762df18e0f5faacfe73dafe8fb1b3de3fac1f13160bed1b07fde0744d32bcd52137e3d3ccfde2aa8162f562590cbea7c013edb6f8066c7943919eab8a0b5c369e52b1bf684ed32d9f2fcef716d630e375bbfc8ab5269070dc07cfbdc48e597d3e29bb51cce4f287c6d5f3b17ba06ce7de2c3df86578ab908eb8d8", @typed={0x8, 0x137, 0x0, 0x0, @uid=0xee01}, @generic="d2028158b31fdc62e2835171328d397371b420d8414e10e26ef9eab8fc8cf7e94af66156316569072d92e895b23fe5325ca48458e99cb75607ad8516c2a8980c78773c20f629b7f9318da6724b0d34be2a6f1031e936cc441f2abdbd7fb4e8cacaa330e57ee6", @typed={0x4, 0x1a}, @typed={0x7, 0xea, 0x0, 0x0, @str='}!\x00'}]}, @generic="82af7348f08bb383112fa5d2e3cb1ed0a4b3c147d7b9115dd220a8a3a9ecd8bc1e"]}, @nested={0x4, 0xd}, @generic, @typed={0x14, 0x23, 0x0, 0x0, @ipv6=@loopback}, @generic="fdd5e8369df766e2de34655b58146066123bfd4dc97358afeeb4cbc6d774f0ec8b09519bd81f1d7a662578d7d30d2e255bf5b2b3f782626f6c46e4b5629e92f3ae4770ede010a6648d72c1a7a2a3950b33696604ccd04d8a5fd396d023d5dc09040e6448c8821808c44facf22f89eb1fb3c7412f5aa7cd4fc9c6b64cf60acf3d66ff825ecf2ae257714402c08ee7575d4fe58592eae47c5c3b10e6d54b48e1a34a88b018539d13ae3097409d07dcc7116b911ecd67825f15"]}, @NL80211_ATTR_PMKR0_NAME={0xcb, 0x102, "98433b45485b0d07f3af16801785094a6587d6303f241689b1d1c9c0c8398b54f43586f91d1324ce74406cf1b171de4a0068812e62f6ee82b56662a4f9f2b45fe2d5efe9c4222554921d37e9804a49ae94bd1ffbe0c245d2c015b1f89d9a5a826ccbd3cb8e7525cb9d7e46d2603719ba2441008a02c106d487e169bc205da6b217a386a17f197ef50047b281fd5b5062d60c793c2a1381b773b456be0344d6dcd2827b8ae029b454d192712a32fa126cbb7c8c1d05103557987a92063f9a5d5d0fdacd32255cf1"}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0xef07}]}, 0x538}, 0x1, 0x0, 0x0, 0x8805}, 0x8000) r2 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0) readv$auto(r2, &(0x7f00000018c0)={0x0, 0x1}, 0x9) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x40100000001) prctl$auto_PR_SET_MM_START_STACK(0x80000000, 0x5, 0x0, 0x2, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/anycast6\x00', 0x181500, 0x0) sched_setattr$auto(r4, &(0x7f0000000340)={0x7, 0x6, 0xfffffffffffffff9, 0xfff, 0xa, 0x1f9, 0x6, 0x9, 0x4, 0x8001}, 0x7b) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x20010, 0x7, 0xeb1, 0x404, 0x10008000) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 871.422422ms ago: executing program 3 (id=2551): syz_clone3(&(0x7f0000001240)={0x2000000, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100), {0x27}, &(0x7f0000000140)=""/173, 0xad, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x5c}, 0x58) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/kaweth/remove_id\x00', 0xa0900, 0x0) read$auto(r0, 0x0, 0x7) sendmsg$auto_TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x80) readv$auto(0xca, &(0x7f0000000040)={&(0x7f0000000000), 0x9}, 0x10) move_pages$auto(0x1, 0x80000000000003fb, 0x0, 0x0, 0x0, 0x4) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000400)={{0xc, 0x23, 0xa6, 0x83}, "66ac010005000000000068d590eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eb624ad63110d61771552c03de65800", 0x2}) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r2) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x20, r3, 0x301, 0x4070bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_NAME={0xc, 0x2, 'nl80211\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfded, 0x3) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/iomem\x00', 0x1c9a02, 0x0) pread64$auto(r4, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) prctl$auto(0x1000000003b, 0x800003, 0x4, 0x5, 0x6) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/15/smp_affinity\x00', 0x48041, 0x0) write$auto(r5, 0x0, 0x8ed) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400, 0x0) 738.318059ms ago: executing program 5 (id=2552): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(0x0, 0xfffffff4, 0x0, 0x5) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r4 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(r4, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x9d) read$auto(r3, 0x0, 0x2) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "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"}, 0x6, 0x3, 0xff) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x1, 0x40009, 0xdf, 0x13, 0xffffffffffffffff, 0x10001) fcntl$auto_F_UNLCK(r2, 0x8, 0x2) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@kbuf=0x0, 0x2, 0x8000, 0x3000}, 0x4) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0x3b, 0x5, 0x8) 20.826447ms ago: executing program 8 (id=2553): prctl$auto_PR_GET_MDWE(0x42, 0x5, 0xffffffffffffffff, 0x2, 0x80000000000) prctl$auto_PR_GET_MDWE(0x42, 0xfffffffeffffffff, 0x62, 0xffffffffffffffff, 0x10001) prctl$auto_PR_GET_MDWE(0x42, 0x5, 0x1, 0x7, 0x0) prctl$auto_PR_GET_MDWE(0x42, 0x34, 0x7, 0x80, 0xaa) prctl$auto_PR_GET_MDWE(0x42, 0x9, 0x3, 0x2, 0x1dd) prctl$auto_PR_GET_MDWE(0x42, 0x3, 0x2, 0xfffffffffffffffb, 0x8) prctl$auto_PR_GET_MDWE(0x42, 0x2, 0x5, 0x200000000000, 0x4) r0 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) read$auto_ctl_device_fops_user(r0, 0x0, 0x0) prctl$auto_PR_GET_MDWE(0x42, 0x96b, 0x8, 0x2928512a, 0x8001) prctl$auto_PR_GET_MDWE(0x42, 0x600, 0x100, 0x8, 0x1) prctl$auto_PR_GET_MDWE(0x42, 0x0, 0x7, 0xfd, 0x7) prctl$auto_PR_GET_MDWE(0x42, 0xdc, 0x5, 0x4, 0x5) sendto$auto(r0, &(0x7f0000000040)="8415848c579c193ff6eb9f56a87b54e8005af69f4fcfe9ec6647bd0107ecc27cfc07c52e664c9ae5ba655bd7b5446c734e93683a3076d10cbf24762123fb2124352b1cdf18d3065abac882f562381360851470ff59c5eb4334c51829f8029e1b28b937cb19c9c61341e0dc64b42c736840fca32754c304c4be1614e25c846bc933fa9f5d0c65e8847ef3d0fcd9cc7a3ff671bbc183d3b870807dfb1781bb069d25dfec417de152caf24cc554fdaf582fcd8b20c22892bd50c20b960d9493", 0x8, 0x1, &(0x7f0000000100)=@l2={0x1f, 0x9, @none, 0x14ec}, 0x1) prctl$auto_PR_GET_MDWE(0x42, 0x8001, 0x6, 0x7fffffff, 0x7fffffffffffffff) prctl$auto_PR_GET_MDWE(0x42, 0x8001, 0xd2e, 0x4, 0x3) prctl$auto_PR_GET_MDWE(0x42, 0xfffffffffffffff9, 0x9, 0x400, 0x6) prctl$auto_PR_GET_MDWE(0x42, 0xe, 0xe86, 0x3, 0x2550) prctl$auto_PR_GET_MDWE(0x42, 0x4, 0x0, 0x400, 0x1f) prctl$auto_PR_GET_MDWE(0x42, 0x0, 0x9, 0x7, 0xe0c) prctl$auto_PR_GET_MDWE(0x42, 0x4, 0xffffffffffff8001, 0x27b471b4, 0x1) prctl$auto_PR_GET_MDWE(0x42, 0x8, 0x4f52, 0x3, 0x0) prctl$auto_PR_GET_MDWE(0x42, 0x904b, 0x10001, 0x2, 0x3) prctl$auto_PR_GET_MDWE(0x42, 0x100000001, 0x3, 0xdb, 0xa21) prctl$auto_PR_GET_MDWE(0x42, 0x200, 0x0, 0xdb0, 0x4) prctl$auto_PR_GET_MDWE(0x42, 0x5, 0x5, 0x9, 0x9) prctl$auto_PR_GET_MDWE(0x42, 0x7, 0x9, 0x400, 0x8001) r1 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000140)=0x2) read$auto_ftrace_enable_fops_trace_events(r1, &(0x7f0000000180)=""/151, 0x97) prctl$auto_PR_GET_MDWE(0x42, 0xfffffffffffffffb, 0x8, 0x6ec9, 0x5) 0s ago: executing program 3 (id=2554): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r4 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto(r4, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) close_range$auto(0x2, r3, 0x3f) r5 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r5, 0x401c5820, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x143242, 0x164) io_uring_register$auto_IORING_REGISTER_FILE_ALLOC_RANGE(r2, 0x19, &(0x7f0000000080)="1679623710d3b5893828b7fd2ad76c8c824c4d76986db57088f92912b3a2024d383cd07c601319495ba90050", 0x2) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2181, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/mac802154_hwsim/ieee802154/phy1/net/wpan1/queues/rx-0/rps_flow_cnt\x00', 0xc0302, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000000)={0x34, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x10001}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040000}, 0x700000000000000) kernel console output (not intermixed with test programs): syz.6.2151" name="/newroot/428/file0" dev="tmpfs" ino=2285 res=1 errno=0 [ 992.787511][ T5833] Bluetooth: hci4: command tx timeout [ 992.834629][ T30] audit: type=1804 audit(4294967324.090:28): pid=17617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2151" name="/newroot/428/file0" dev="tmpfs" ino=2285 res=1 errno=0 [ 992.927386][T13958] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.934547][T13958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 993.023618][ T30] audit: type=1800 audit(4294967324.100:29): pid=17621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2151" name="file0" dev="tmpfs" ino=2285 res=0 errno=0 [ 993.223218][T13958] bridge0: port 2(bridge_slave_1) entered blocking state [ 993.230412][T13958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.501957][T17509] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 993.529164][T17639] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2155'. [ 993.605525][T17509] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 994.040701][T17652] netlink: 326 bytes leftover after parsing attributes in process `syz.6.2157'. [ 994.180973][T17655] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 994.256598][T17655] CPU: 0 UID: 0 PID: 17655 Comm: syz.1.2158 Tainted: G U syzkaller #0 PREEMPT(full) [ 994.256634][T17655] Tainted: [U]=USER [ 994.256642][T17655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 994.256655][T17655] Call Trace: [ 994.256662][T17655] [ 994.256671][T17655] dump_stack_lvl+0x16c/0x1f0 [ 994.256717][T17655] sysfs_warn_dup+0x7f/0xa0 [ 994.256754][T17655] sysfs_do_create_link_sd+0x124/0x140 [ 994.256793][T17655] sysfs_create_link+0x61/0xc0 [ 994.256829][T17655] device_add+0x62c/0x1aa0 [ 994.256853][T17655] ? __pfx_device_add+0x10/0x10 [ 994.256873][T17655] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 994.256905][T17655] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 994.256947][T17655] wiphy_register+0x1eb0/0x2b20 [ 994.256969][T17655] ? netdev_run_todo+0x864/0x1320 [ 994.257015][T17655] ? __pfx_wiphy_register+0x10/0x10 [ 994.257054][T17655] ieee80211_register_hw+0x253d/0x4120 [ 994.257089][T17655] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 994.257111][T17655] ? __pfx___debug_object_init+0x10/0x10 [ 994.257148][T17655] ? find_held_lock+0x2b/0x80 [ 994.257181][T17655] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 994.257212][T17655] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 994.257244][T17655] ? __hrtimer_setup+0x176/0x280 [ 994.257275][T17655] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 994.257319][T17655] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 994.257354][T17655] hwsim_new_radio_nl+0xba2/0x1330 [ 994.257382][T17655] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 994.257417][T17655] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 994.257445][T17655] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 994.257478][T17655] genl_family_rcv_msg_doit+0x209/0x2f0 [ 994.257506][T17655] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 994.257542][T17655] ? bpf_lsm_capable+0x9/0x10 [ 994.257564][T17655] ? security_capable+0x7e/0x260 [ 994.257587][T17655] ? ns_capable+0xd7/0x110 [ 994.257623][T17655] genl_rcv_msg+0x55c/0x800 [ 994.257651][T17655] ? __pfx_genl_rcv_msg+0x10/0x10 [ 994.257677][T17655] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 994.257721][T17655] netlink_rcv_skb+0x158/0x420 [ 994.257758][T17655] ? __pfx_genl_rcv_msg+0x10/0x10 [ 994.257785][T17655] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 994.257835][T17655] ? netlink_deliver_tap+0x1ae/0xd30 [ 994.257874][T17655] genl_rcv+0x28/0x40 [ 994.257894][T17655] netlink_unicast+0x5aa/0x870 [ 994.257935][T17655] ? __pfx_netlink_unicast+0x10/0x10 [ 994.257972][T17655] ? __pfx___might_resched+0x10/0x10 [ 994.258014][T17655] netlink_sendmsg+0x8c8/0xdd0 [ 994.258056][T17655] ? __pfx_netlink_sendmsg+0x10/0x10 [ 994.258097][T17655] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 994.258126][T17655] ____sys_sendmsg+0xa98/0xc70 [ 994.258152][T17655] ? copy_msghdr_from_user+0x10a/0x160 [ 994.258190][T17655] ? __pfx_____sys_sendmsg+0x10/0x10 [ 994.258223][T17655] ? __pfx_futex_wake_mark+0x10/0x10 [ 994.258256][T17655] ___sys_sendmsg+0x134/0x1d0 [ 994.258288][T17655] ? futex_private_hash_put+0x176/0x300 [ 994.258327][T17655] ? __pfx____sys_sendmsg+0x10/0x10 [ 994.258360][T17655] ? __lock_acquire+0x622/0x1c90 [ 994.258420][T17655] __sys_sendmsg+0x16d/0x220 [ 994.258456][T17655] ? __pfx___sys_sendmsg+0x10/0x10 [ 994.258490][T17655] ? __x64_sys_futex+0x1e0/0x4c0 [ 994.258531][T17655] do_syscall_64+0xcd/0xfa0 [ 994.258568][T17655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.258591][T17655] RIP: 0033:0x7f50e9f8eec9 [ 994.258610][T17655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 994.258632][T17655] RSP: 002b:00007f50eadd0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 994.258653][T17655] RAX: ffffffffffffffda RBX: 00007f50ea1e5fa0 RCX: 00007f50e9f8eec9 [ 994.258668][T17655] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 994.258682][T17655] RBP: 00007f50ea011f91 R08: 0000000000000000 R09: 0000000000000000 [ 994.258700][T17655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 994.258715][T17655] R13: 00007f50ea1e6038 R14: 00007f50ea1e5fa0 R15: 00007ffeb03d5638 [ 994.258746][T17655] [ 997.051105][T17509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 998.457805][T17693] qrtr: Invalid version 0 [ 998.848277][T17509] veth0_vlan: entered promiscuous mode [ 998.921545][T17509] veth1_vlan: entered promiscuous mode [ 999.116679][T17509] veth0_macvtap: entered promiscuous mode [ 999.186638][T17509] veth1_macvtap: entered promiscuous mode [ 999.327505][T17509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 999.405311][T17509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 999.508997][T17702] Invalid ELF header magic: != ELF [ 999.733890][T13962] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.777235][T13962] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.941444][T13962] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.001543][T13962] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1000.344292][T17707] netlink: 342 bytes leftover after parsing attributes in process `syz.7.2166'. [ 1000.629868][T13233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1000.681745][T13233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.921567][T13962] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.215249][T13962] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.344543][ T8456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1001.390050][ T8456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1001.514944][T13962] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.712839][T13962] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.795313][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1001.803364][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.331080][T13962] bridge_slave_1: left allmulticast mode [ 1002.384482][T13962] bridge_slave_1: left promiscuous mode [ 1002.454527][T13962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.512254][T13962] bridge_slave_0: left allmulticast mode [ 1002.581391][T13962] bridge_slave_0: left promiscuous mode [ 1002.626233][T13962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.355584][T13962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1004.382235][T13962] bond_slave_0: left allmulticast mode [ 1004.398272][T13962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1004.420907][T13962] bond_slave_1: left allmulticast mode [ 1004.440189][T13962] bond0 (unregistering): Released all slaves [ 1005.856510][T13962] hsr_slave_0: left promiscuous mode [ 1006.058711][T13962] hsr_slave_1: left promiscuous mode [ 1006.113795][T13962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.164893][T13962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.265287][T13962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.318362][T13962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.582980][T13962] veth1_macvtap: left promiscuous mode [ 1006.607785][T13962] veth0_macvtap: left promiscuous mode [ 1006.625728][T13962] veth1_vlan: left promiscuous mode [ 1006.659190][T13962] veth0_vlan: left promiscuous mode [ 1007.777151][T17820] netlink: 326 bytes leftover after parsing attributes in process `syz.7.2184'. [ 1008.084026][T13962] team0 (unregistering): Port device team_slave_0 removed [ 1012.171027][T17885] netlink: 'syz.1.2195': attribute type 11 has an invalid length. [ 1013.201414][ T5833] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 1013.201446][ T5833] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 1013.216811][ T5833] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 1013.216883][ T5833] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1014.021434][T13960] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 5 with max blocks 2 with error 117 [ 1014.102210][T13960] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1014.102210][T13960] [ 1015.024384][T17948] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2207'. [ 1015.914833][T13960] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.301779][T13960] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1016.803691][T17973] bond0: invalid ARP target specified [ 1017.694600][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1017.706129][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1017.715391][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1017.724327][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1017.732568][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1017.878588][T13960] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.429800][T13960] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.566332][T13960] bridge_slave_1: left allmulticast mode [ 1019.596674][T13960] bridge_slave_1: left promiscuous mode [ 1019.602420][T13960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.676599][T18003] program syz.7.2218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1019.697224][T13960] bridge_slave_0: left allmulticast mode [ 1019.702896][T13960] bridge_slave_0: left promiscuous mode [ 1019.760615][T13960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.768511][ T5148] Bluetooth: hci1: command tx timeout [ 1021.040344][T13960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1021.071275][T13960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1021.093580][T13960] bond0 (unregistering): Released all slaves [ 1021.613335][T13963] netdevsim netdevsim15 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.834982][ T5148] Bluetooth: hci1: command tx timeout [ 1021.854113][T18024] random: crng reseeded on system resumption [ 1022.036850][T18024] FAULT_INJECTION: forcing a failure. [ 1022.036850][T18024] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1022.162640][T13960] hsr_slave_0: left promiscuous mode [ 1022.188875][T13960] hsr_slave_1: left promiscuous mode [ 1022.209751][T13960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1022.230241][T18024] CPU: 0 UID: 0 PID: 18024 Comm: syz.6.2228 Tainted: G U syzkaller #0 PREEMPT(full) [ 1022.230276][T18024] Tainted: [U]=USER [ 1022.230284][T18024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1022.230297][T18024] Call Trace: [ 1022.230305][T18024] [ 1022.230313][T18024] dump_stack_lvl+0x16c/0x1f0 [ 1022.230353][T18024] should_fail_ex+0x512/0x640 [ 1022.230395][T18024] should_fail_alloc_page+0xe7/0x130 [ 1022.230421][T18024] prepare_alloc_pages+0x3c2/0x610 [ 1022.230443][T18024] ? __kernel_text_address+0xd/0x40 [ 1022.230477][T18024] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 1022.230520][T18024] ? stack_trace_save+0x8e/0xc0 [ 1022.230556][T18024] ? __pfx_stack_trace_save+0x10/0x10 [ 1022.230593][T18024] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1022.230631][T18024] ? kasan_save_stack+0x42/0x60 [ 1022.230670][T18024] ? kasan_save_stack+0x33/0x60 [ 1022.230707][T18024] ? misc_open+0x26d/0x450 [ 1022.230742][T18024] ? chrdev_open+0x234/0x6a0 [ 1022.230777][T18024] ? do_dentry_open+0x982/0x1530 [ 1022.230810][T18024] ? vfs_open+0x82/0x3f0 [ 1022.230832][T18024] ? path_openat+0x1de4/0x2cb0 [ 1022.230863][T18024] ? do_filp_open+0x20b/0x470 [ 1022.230894][T18024] ? do_sys_openat2+0x11b/0x1d0 [ 1022.230917][T18024] ? __x64_sys_openat+0x174/0x210 [ 1022.230942][T18024] ? do_syscall_64+0xcd/0xfa0 [ 1022.230975][T18024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.231000][T18024] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1022.231034][T18024] ? policy_nodemask+0xea/0x4e0 [ 1022.231059][T18024] alloc_pages_mpol+0x1fb/0x550 [ 1022.231083][T18024] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1022.231115][T18024] alloc_pages_noprof+0x131/0x390 [ 1022.231139][T18024] get_zeroed_page_noprof+0x18/0xb0 [ 1022.231184][T18024] get_image_page+0x18/0x190 [ 1022.231218][T18024] chain_alloc+0x8c/0xd0 [ 1022.231252][T18024] memory_bm_create+0x30f/0x810 [ 1022.231298][T18024] create_basic_memory_bitmaps+0x10b/0x320 [ 1022.231340][T18024] snapshot_open+0x235/0x2b0 [ 1022.231360][T18024] ? __pfx_snapshot_open+0x10/0x10 [ 1022.231382][T18024] misc_open+0x26d/0x450 [ 1022.231419][T18024] ? __pfx_misc_open+0x10/0x10 [ 1022.231456][T18024] chrdev_open+0x234/0x6a0 [ 1022.231491][T18024] ? __pfx_apparmor_file_open+0x10/0x10 [ 1022.231517][T18024] ? __pfx_chrdev_open+0x10/0x10 [ 1022.231555][T18024] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1022.231595][T18024] do_dentry_open+0x982/0x1530 [ 1022.231631][T18024] ? __pfx_chrdev_open+0x10/0x10 [ 1022.231674][T18024] vfs_open+0x82/0x3f0 [ 1022.231702][T18024] path_openat+0x1de4/0x2cb0 [ 1022.231750][T18024] ? __pfx_path_openat+0x10/0x10 [ 1022.231786][T18024] ? __lock_acquire+0xb8a/0x1c90 [ 1022.231814][T18024] do_filp_open+0x20b/0x470 [ 1022.231848][T18024] ? __pfx_do_filp_open+0x10/0x10 [ 1022.231904][T18024] ? alloc_fd+0x471/0x7d0 [ 1022.231945][T18024] do_sys_openat2+0x11b/0x1d0 [ 1022.231970][T18024] ? __pfx_do_sys_openat2+0x10/0x10 [ 1022.232007][T18024] __x64_sys_openat+0x174/0x210 [ 1022.232034][T18024] ? __pfx___x64_sys_openat+0x10/0x10 [ 1022.232073][T18024] do_syscall_64+0xcd/0xfa0 [ 1022.232110][T18024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.232134][T18024] RIP: 0033:0x7fb10fb8eec9 [ 1022.232153][T18024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1022.232181][T18024] RSP: 002b:00007fb110ab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1022.232203][T18024] RAX: ffffffffffffffda RBX: 00007fb10fde5fa0 RCX: 00007fb10fb8eec9 [ 1022.232219][T18024] RDX: 0000000000180b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1022.232234][T18024] RBP: 00007fb10fc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1022.232249][T18024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1022.232262][T18024] R13: 00007fb10fde6038 R14: 00007fb10fde5fa0 R15: 00007ffc14efaca8 [ 1022.232294][T18024] [ 1022.609329][T13960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1023.495033][T13960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1023.502682][T13960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.632149][T13960] veth1_macvtap: left promiscuous mode [ 1023.667777][T13960] veth0_macvtap: left promiscuous mode [ 1023.673700][T13960] veth1_vlan: left promiscuous mode [ 1023.721673][T13960] veth0_vlan: left promiscuous mode [ 1023.904565][ T5148] Bluetooth: hci1: command tx timeout [ 1025.624572][T13960] team0 (unregistering): Port device team_slave_1 removed [ 1025.715861][T13960] team0 (unregistering): Port device team_slave_0 removed [ 1025.973841][ T5148] Bluetooth: hci1: command tx timeout [ 1026.598290][T17980] chnl_net:caif_netlink_parms(): no params data found [ 1027.512006][T17980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.554483][T17980] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.582751][T17980] bridge_slave_0: entered allmulticast mode [ 1027.604752][T17980] bridge_slave_0: entered promiscuous mode [ 1027.637289][T17980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.666465][T17980] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.687343][T17980] bridge_slave_1: entered allmulticast mode [ 1027.718285][T17980] bridge_slave_1: entered promiscuous mode [ 1027.901448][T17980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1027.960073][T17980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1028.217657][T17980] team0: Port device team_slave_0 added [ 1028.272408][T17980] team0: Port device team_slave_1 added [ 1028.554210][T17980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1028.609984][T17980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.712600][T18099] random: crng reseeded on system resumption [ 1028.772966][T18099] FAULT_INJECTION: forcing a failure. [ 1028.772966][T18099] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.823307][T17980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1028.940002][T17980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1028.977788][T18099] CPU: 0 UID: 0 PID: 18099 Comm: syz.1.2231 Tainted: G U syzkaller #0 PREEMPT(full) [ 1028.977830][T18099] Tainted: [U]=USER [ 1028.977838][T18099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1028.977852][T18099] Call Trace: [ 1028.977860][T18099] [ 1028.977869][T18099] dump_stack_lvl+0x16c/0x1f0 [ 1028.977909][T18099] should_fail_ex+0x512/0x640 [ 1028.977947][T18099] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1028.977981][T18099] should_failslab+0xc2/0x120 [ 1028.978004][T18099] __kmalloc_cache_noprof+0x72/0x780 [ 1028.978035][T18099] ? memory_bm_create+0x154/0x810 [ 1028.978074][T18099] ? memory_bm_create+0x154/0x810 [ 1028.978106][T18099] memory_bm_create+0x154/0x810 [ 1028.978151][T18099] create_basic_memory_bitmaps+0x10b/0x320 [ 1028.978192][T18099] snapshot_open+0x235/0x2b0 [ 1028.978212][T18099] ? __pfx_snapshot_open+0x10/0x10 [ 1028.978234][T18099] misc_open+0x26d/0x450 [ 1028.978272][T18099] ? __pfx_misc_open+0x10/0x10 [ 1028.978308][T18099] chrdev_open+0x234/0x6a0 [ 1028.978343][T18099] ? __pfx_apparmor_file_open+0x10/0x10 [ 1028.978369][T18099] ? __pfx_chrdev_open+0x10/0x10 [ 1028.978408][T18099] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 1028.978460][T18099] do_dentry_open+0x982/0x1530 [ 1028.978495][T18099] ? __pfx_chrdev_open+0x10/0x10 [ 1028.978536][T18099] vfs_open+0x82/0x3f0 [ 1028.978568][T18099] path_openat+0x1de4/0x2cb0 [ 1028.978611][T18099] ? __pfx_path_openat+0x10/0x10 [ 1028.978646][T18099] ? __lock_acquire+0xb8a/0x1c90 [ 1028.978673][T18099] do_filp_open+0x20b/0x470 [ 1028.978706][T18099] ? __pfx_do_filp_open+0x10/0x10 [ 1028.978759][T18099] ? alloc_fd+0x471/0x7d0 [ 1028.978815][T18099] do_sys_openat2+0x11b/0x1d0 [ 1028.978841][T18099] ? __pfx_do_sys_openat2+0x10/0x10 [ 1028.978879][T18099] __x64_sys_openat+0x174/0x210 [ 1028.978906][T18099] ? __pfx___x64_sys_openat+0x10/0x10 [ 1028.978945][T18099] do_syscall_64+0xcd/0xfa0 [ 1028.978983][T18099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.979007][T18099] RIP: 0033:0x7f50e9f8eec9 [ 1028.979025][T18099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1028.979048][T18099] RSP: 002b:00007f50eadd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1028.979070][T18099] RAX: ffffffffffffffda RBX: 00007f50ea1e5fa0 RCX: 00007f50e9f8eec9 [ 1028.979086][T18099] RDX: 0000000000180b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1028.979101][T18099] RBP: 00007f50ea011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1028.979115][T18099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1028.979129][T18099] R13: 00007f50ea1e6038 R14: 00007f50ea1e5fa0 R15: 00007ffeb03d5638 [ 1028.979160][T18099] [ 1029.602587][T17980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.628611][T17980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1030.069641][T17980] hsr_slave_0: entered promiscuous mode [ 1030.092921][T17980] hsr_slave_1: entered promiscuous mode [ 1031.337534][T18136] usb usb36: usbfs: process 18136 (syz.6.2238) did not claim interface 0 before use [ 1031.456603][T18140] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 1031.492622][T18139] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 1032.246281][T17980] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1032.580947][T17980] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1032.656762][T17980] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1032.801486][T18170] netlink: 334 bytes leftover after parsing attributes in process `syz.7.2244'. [ 1032.833705][T17980] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1033.395689][T17980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.500696][T17980] 8021q: adding VLAN 0 to HW filter on device team0 [ 1033.629755][T13960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.636916][T13960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1033.719917][T13960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.727110][T13960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1033.764910][T18186] nbd: must specify at least one socket [ 1033.970740][T17980] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1034.072463][T17980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1035.114380][T17980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1035.332129][T18224] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 1036.683685][T17980] veth0_vlan: entered promiscuous mode [ 1036.763410][T17980] veth1_vlan: entered promiscuous mode [ 1037.094920][T17980] veth0_macvtap: entered promiscuous mode [ 1037.191963][T17980] veth1_macvtap: entered promiscuous mode [ 1037.368052][T17980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1037.448307][T17980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1037.574025][T13963] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.605239][T13960] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.677496][T13960] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.707452][T18264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2254'. [ 1037.762487][T18267] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2255'. [ 1037.817566][T13960] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.868170][T18267] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.875445][T18267] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.316585][T13963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.393646][T13963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1038.670258][T13962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1038.714959][ T5148] Bluetooth: hci0: unexpected event 0x02 length: 726 > 260 [ 1038.721804][T13962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1039.730614][ T5148] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1040.935154][T18313] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2261'. [ 1041.009424][T18317] netlink: 13 bytes leftover after parsing attributes in process `syz.6.2261'. [ 1041.061901][T18219] kexec: Could not allocate control_code_buffer [ 1041.104795][ T5833] Bluetooth: hci2: unexpected event 0x3e length: 728 > 260 [ 1041.104826][ T5833] Bluetooth: hci2: unexpected subevent 0x03 length: 727 > 9 [ 1041.142513][T18313] random: crng reseeded on system resumption [ 1041.663472][T18329] nbd: must specify at least one socket [ 1041.811486][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 1043.178042][ T5148] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1043.192668][ T5148] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1043.208460][ T5148] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1043.219366][ T5148] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1043.228810][ T5148] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1044.107446][T18360] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1044.150250][T18360] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1044.198320][T18360] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1044.235768][T18360] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1044.286644][T18360] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1044.316038][T18360] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1044.364656][T18360] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1044.421109][T18360] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1044.455038][T18360] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1044.558122][T18360] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1045.293329][T18355] chnl_net:caif_netlink_parms(): no params data found [ 1045.472053][ T5148] Bluetooth: hci2: command 0x0406 tx timeout [ 1045.993651][T18355] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.031258][T18355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.063165][T18355] bridge_slave_0: entered allmulticast mode [ 1046.107633][T18355] bridge_slave_0: entered promiscuous mode [ 1046.151303][T18355] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.192462][T18355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.240215][T18355] bridge_slave_1: entered allmulticast mode [ 1046.272541][ T5148] Bluetooth: hci6: command 0x0406 tx timeout [ 1046.279524][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 1046.303200][T18355] bridge_slave_1: entered promiscuous mode [ 1046.349115][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 1046.427733][ T5833] Bluetooth: hci0: command 0x041b tx timeout [ 1046.553235][T18355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1046.618511][T18355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.810978][T18355] team0: Port device team_slave_0 added [ 1046.847323][T18355] team0: Port device team_slave_1 added [ 1047.029444][T18355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1047.064984][T18355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1047.213240][T18355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1047.270207][T18355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1047.324312][T18355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1047.417190][T18421] Process accounting resumed [ 1047.428295][T18429] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2278'. [ 1047.472134][T18355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1047.542223][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 1047.717895][T18355] hsr_slave_0: entered promiscuous mode [ 1047.763820][T18355] hsr_slave_1: entered promiscuous mode [ 1047.797536][T18355] debugfs: 'hsr0' already exists in 'hsr' [ 1047.838267][T18355] Cannot create hsr debugfs directory [ 1048.417171][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 1048.471146][T18355] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.498939][ T5833] Bluetooth: hci0: command 0x041b tx timeout [ 1048.755281][T18355] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.074602][T18355] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.298113][T18355] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.827903][T18355] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1049.876129][T18355] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1049.964064][T18355] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1050.044296][T18355] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1050.088783][T18472] binder: 18471:18472 ioctl 41015500 200000000180 returned -22 [ 1050.122564][T18472] binder: 18471:18472 ioctl 41015500 200000000180 returned -22 [ 1050.382155][T18355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1050.453935][T18355] 8021q: adding VLAN 0 to HW filter on device team0 [ 1050.488197][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 1050.526713][ T8456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.533855][ T8456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1050.566318][ T5833] Bluetooth: hci0: command 0x041b tx timeout [ 1050.624825][ T8456] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.632003][ T8456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.479043][T18355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1051.662597][T18355] veth0_vlan: entered promiscuous mode [ 1051.712425][T18355] veth1_vlan: entered promiscuous mode [ 1051.791906][T18355] veth0_macvtap: entered promiscuous mode [ 1051.824939][T18355] veth1_macvtap: entered promiscuous mode [ 1051.880928][T18355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1051.924193][T18355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.970285][T13962] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.008686][T13962] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.049008][T13962] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.088145][T13962] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1052.211827][T13960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.254888][T13960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.339664][T13960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1052.415889][T13960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.635724][ T5833] Bluetooth: hci0: command 0x041b tx timeout [ 1052.657214][T18517] random: crng reseeded on system resumption [ 1053.113359][T18528] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2296'. [ 1053.223030][T18529] Setting dangerous option i915.mitigations - tainting kernel [ 1053.677720][T18536] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2297'. [ 1053.716027][T18536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.723642][T18536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.704414][ T5833] Bluetooth: hci0: command 0x041b tx timeout [ 1056.773834][ T5833] Bluetooth: hci0: command 0x041b tx timeout [ 1056.959723][T18581] netlink: 326 bytes leftover after parsing attributes in process `syz.6.2307'. [ 1057.507861][T18587] size and base must be multiples of 4 kiB [ 1057.541788][T18587] CPU: 0 UID: 0 PID: 18587 Comm: syz.6.2308 Tainted: G U syzkaller #0 PREEMPT(full) [ 1057.541826][T18587] Tainted: [U]=USER [ 1057.541834][T18587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1057.541848][T18587] Call Trace: [ 1057.541855][T18587] [ 1057.541864][T18587] dump_stack_lvl+0x16c/0x1f0 [ 1057.541904][T18587] mtrr_del+0xd1/0x110 [ 1057.541929][T18587] mtrr_ioctl+0x922/0xcf0 [ 1057.541959][T18587] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1057.541990][T18587] ? find_held_lock+0x2b/0x80 [ 1057.542030][T18587] ? __fget_files+0x20e/0x3c0 [ 1057.542063][T18587] ? __pfx_mtrr_ioctl+0x10/0x10 [ 1057.542087][T18587] proc_reg_unlocked_ioctl+0x229/0x320 [ 1057.542112][T18587] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 1057.542139][T18587] __x64_sys_ioctl+0x18e/0x210 [ 1057.542168][T18587] do_syscall_64+0xcd/0xfa0 [ 1057.542204][T18587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.542228][T18587] RIP: 0033:0x7fb10fb8eec9 [ 1057.542247][T18587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1057.542270][T18587] RSP: 002b:00007fb110a96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1057.542291][T18587] RAX: ffffffffffffffda RBX: 00007fb10fde6090 RCX: 00007fb10fb8eec9 [ 1057.542307][T18587] RDX: 0000000000000007 RSI: 0000000040104d04 RDI: 0000000000000002 [ 1057.542321][T18587] RBP: 00007fb10fc11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1057.542336][T18587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1057.542350][T18587] R13: 00007fb10fde6128 R14: 00007fb10fde6090 R15: 00007ffc14efaca8 [ 1057.542380][T18587] [ 1058.121984][T18590] Invalid ELF header magic: != ELF [ 1059.321281][ T5148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1059.330461][ T5148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1059.338235][ T5148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1059.347571][ T5148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1059.356766][ T5148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1060.548879][T18613] chnl_net:caif_netlink_parms(): no params data found [ 1061.231666][T18613] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.264952][T18613] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.296158][T18613] bridge_slave_0: entered allmulticast mode [ 1061.323716][T18613] bridge_slave_0: entered promiscuous mode [ 1061.347651][T18613] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.378684][T18613] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.391709][ T5148] Bluetooth: hci4: command tx timeout [ 1061.421579][T18613] bridge_slave_1: entered allmulticast mode [ 1061.450504][T18613] bridge_slave_1: entered promiscuous mode [ 1061.590326][T18613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1061.644605][T18613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1061.715581][T18663] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2321'. [ 1061.763966][T18613] team0: Port device team_slave_0 added [ 1061.786750][T18613] team0: Port device team_slave_1 added [ 1061.888572][T18613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.913276][T18613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.971617][T18613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.984623][T18613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.993611][T18613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1062.046520][T18613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.246267][T18613] hsr_slave_0: entered promiscuous mode [ 1062.274373][T18613] hsr_slave_1: entered promiscuous mode [ 1062.312150][T18613] debugfs: 'hsr0' already exists in 'hsr' [ 1062.334324][T18613] Cannot create hsr debugfs directory [ 1062.920104][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1062.926768][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1063.411371][T18685] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2324'. [ 1063.463541][ T5148] Bluetooth: hci4: command tx timeout [ 1064.128176][T18613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1064.208535][T18613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1064.520998][T18613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1064.647719][T18613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1065.513194][T18613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1065.527834][ T5148] Bluetooth: hci4: command tx timeout [ 1065.622277][T18613] 8021q: adding VLAN 0 to HW filter on device team0 [ 1065.662921][T13963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.670120][T13963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1065.745886][T13963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.753054][T13963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1066.626768][T18613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1066.853110][T18613] veth0_vlan: entered promiscuous mode [ 1066.907223][T18613] veth1_vlan: entered promiscuous mode [ 1067.003793][T18753] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1067.101213][T18613] veth0_macvtap: entered promiscuous mode [ 1067.161881][T18613] veth1_macvtap: entered promiscuous mode [ 1067.266267][T18613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1067.332516][T18613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1067.398693][ T8456] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.417354][T18760] random: crng reseeded on system resumption [ 1067.442329][ T8456] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.508465][ T8456] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.550002][T13962] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.597428][ T5148] Bluetooth: hci4: command tx timeout [ 1067.891505][T15630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1067.941337][T15630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.168864][ T8456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.202675][ T8456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.264888][T16238] usb usb38-port5: attempt power cycle [ 1068.872486][T16238] usb usb38-port5: unable to enumerate USB device [ 1069.442329][T18796] random: crng reseeded on system resumption [ 1071.066705][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1071.078994][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1071.086935][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1071.103759][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1071.114402][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1072.239768][T18819] chnl_net:caif_netlink_parms(): no params data found [ 1072.866151][T18819] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.909384][T18819] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.951188][T18819] bridge_slave_0: entered allmulticast mode [ 1073.021334][T18819] bridge_slave_0: entered promiscuous mode [ 1073.049875][T18819] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.095870][T18819] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.143181][T18819] bridge_slave_1: entered allmulticast mode [ 1073.168485][ T5833] Bluetooth: hci5: command tx timeout [ 1073.182545][T18819] bridge_slave_1: entered promiscuous mode [ 1073.514686][T18819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1073.597030][T18819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1073.960548][T18819] team0: Port device team_slave_0 added [ 1074.029574][T18819] team0: Port device team_slave_1 added [ 1074.130518][T18879] netlink: 146 bytes leftover after parsing attributes in process `syz.3.2347'. [ 1074.290080][T18819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1074.373402][T18819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1074.535016][T18819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1074.655048][T18819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1074.697777][T18819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1074.833012][T18819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1074.993841][T18889] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1075.043318][T18889] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1075.066101][T18889] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1075.171146][T18889] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1075.223732][T18889] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1075.237173][ T5833] Bluetooth: hci5: command tx timeout [ 1075.257357][T18889] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1075.287061][T18889] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1075.320486][T18819] hsr_slave_0: entered promiscuous mode [ 1075.369511][T18819] hsr_slave_1: entered promiscuous mode [ 1075.395920][T18819] debugfs: 'hsr0' already exists in 'hsr' [ 1075.430176][T18819] Cannot create hsr debugfs directory [ 1075.498392][T18889] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1075.722460][T18889] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1075.783266][T18889] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1075.870231][T18889] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1076.621201][T18913] FAULT_INJECTION: forcing a failure. [ 1076.621201][T18913] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.699176][T18913] CPU: 0 UID: 0 PID: 18913 Comm: syz.1.2353 Tainted: G U syzkaller #0 PREEMPT(full) [ 1076.699215][T18913] Tainted: [U]=USER [ 1076.699222][T18913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1076.699236][T18913] Call Trace: [ 1076.699251][T18913] [ 1076.699260][T18913] dump_stack_lvl+0x16c/0x1f0 [ 1076.699300][T18913] should_fail_ex+0x512/0x640 [ 1076.699338][T18913] ? __kmalloc_noprof+0xca/0x880 [ 1076.699371][T18913] should_failslab+0xc2/0x120 [ 1076.699393][T18913] __kmalloc_noprof+0xdd/0x880 [ 1076.699423][T18913] ? kobject_get_path+0xd2/0x2a0 [ 1076.699468][T18913] ? kobject_get_path+0xd2/0x2a0 [ 1076.699504][T18913] kobject_get_path+0xd2/0x2a0 [ 1076.699551][T18913] kobject_uevent_env+0x289/0x1870 [ 1076.699576][T18913] ? __pfx_dev_uevent_name+0x10/0x10 [ 1076.699610][T18913] ? bus_to_subsys+0x131/0x160 [ 1076.699639][T18913] device_add+0x10dd/0x1aa0 [ 1076.699664][T18913] ? __pfx_device_add+0x10/0x10 [ 1076.699686][T18913] ? lockdep_init_map_type+0x5c/0x280 [ 1076.699717][T18913] ? __init_waitqueue_head+0xca/0x150 [ 1076.699754][T18913] netdev_register_kobject+0x1a9/0x3d0 [ 1076.699784][T18913] register_netdevice+0x13dc/0x2270 [ 1076.699813][T18913] ? __pfx_register_netdevice+0x10/0x10 [ 1076.699845][T18913] __ip_tunnel_create+0x540/0x6e0 [ 1076.699872][T18913] ? __pfx___ip_tunnel_create+0x10/0x10 [ 1076.699907][T18913] ip_tunnel_init_net+0x22f/0x7d0 [ 1076.699937][T18913] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 1076.699971][T18913] ? ops_init+0x77/0x5f0 [ 1076.700010][T18913] ? __pfx_ipgre_init_net+0x10/0x10 [ 1076.700046][T18913] ops_init+0x1e2/0x5f0 [ 1076.700086][T18913] setup_net+0x100/0x390 [ 1076.700124][T18913] ? __pfx_setup_net+0x10/0x10 [ 1076.700162][T18913] ? debug_mutex_init+0x37/0x70 [ 1076.700198][T18913] copy_net_ns+0x2f8/0x690 [ 1076.700225][T18913] create_new_namespaces+0x3ea/0xa90 [ 1076.700274][T18913] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1076.700313][T18913] ksys_unshare+0x45b/0xa40 [ 1076.700337][T18913] ? __pfx_ksys_unshare+0x10/0x10 [ 1076.700362][T18913] ? xfd_validate_state+0x61/0x180 [ 1076.700395][T18913] __x64_sys_unshare+0x31/0x40 [ 1076.700418][T18913] do_syscall_64+0xcd/0xfa0 [ 1076.700455][T18913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.700479][T18913] RIP: 0033:0x7f100038eec9 [ 1076.700497][T18913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1076.700520][T18913] RSP: 002b:00007f10011fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1076.700542][T18913] RAX: ffffffffffffffda RBX: 00007f10005e5fa0 RCX: 00007f100038eec9 [ 1076.700558][T18913] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1076.700572][T18913] RBP: 00007f1000411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1076.700586][T18913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1076.700599][T18913] R13: 00007f10005e6038 R14: 00007f10005e5fa0 R15: 00007fff9f3584f8 [ 1076.700631][T18913] [ 1077.030209][T18935] random: crng reseeded on system resumption [ 1077.367487][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 1077.374047][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 1077.383955][ T5833] Bluetooth: hci6: command 0x0406 tx timeout [ 1077.390494][ T5833] Bluetooth: hci0: command 0x041b tx timeout [ 1077.396824][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 1077.402916][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 1077.517325][T18941] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2354'. [ 1077.583617][T18938] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1077.837214][ T5148] Bluetooth: hci5: command 0x0419 tx timeout [ 1078.008127][T18947] FAULT_INJECTION: forcing a failure. [ 1078.008127][T18947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1078.103464][ T5910] usb usb38-port5: attempt power cycle [ 1078.129477][T18947] CPU: 0 UID: 0 PID: 18947 Comm: syz.3.2356 Tainted: G U syzkaller #0 PREEMPT(full) [ 1078.129512][T18947] Tainted: [U]=USER [ 1078.129519][T18947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1078.129531][T18947] Call Trace: [ 1078.129538][T18947] [ 1078.129547][T18947] dump_stack_lvl+0x16c/0x1f0 [ 1078.129583][T18947] should_fail_ex+0x512/0x640 [ 1078.129622][T18947] _copy_from_user+0x2e/0xd0 [ 1078.129644][T18947] copy_msghdr_from_user+0x98/0x160 [ 1078.129679][T18947] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1078.129726][T18947] ___sys_sendmsg+0xfe/0x1d0 [ 1078.129761][T18947] ? __pfx____sys_sendmsg+0x10/0x10 [ 1078.129792][T18947] ? __lock_acquire+0x622/0x1c90 [ 1078.129848][T18947] __sys_sendmsg+0x16d/0x220 [ 1078.129882][T18947] ? __pfx___sys_sendmsg+0x10/0x10 [ 1078.129933][T18947] do_syscall_64+0xcd/0xfa0 [ 1078.129968][T18947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.129991][T18947] RIP: 0033:0x7f04b898eec9 [ 1078.130007][T18947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1078.130030][T18947] RSP: 002b:00007f04b9885038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1078.130051][T18947] RAX: ffffffffffffffda RBX: 00007f04b8be6090 RCX: 00007f04b898eec9 [ 1078.130067][T18947] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 0000000000000003 [ 1078.130081][T18947] RBP: 00007f04b9885090 R08: 0000000000000000 R09: 0000000000000000 [ 1078.130100][T18947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1078.130113][T18947] R13: 00007f04b8be6128 R14: 00007f04b8be6090 R15: 00007fffb2e3bd68 [ 1078.130143][T18947] [ 1079.098138][ T5910] usb usb38-port5: unable to enumerate USB device [ 1079.468199][ T5148] Bluetooth: hci4: command 0x0c1a tx timeout [ 1079.853250][ T5148] Bluetooth: hci5: command 0x0419 tx timeout [ 1080.690791][T18989] ubi0: attaching mtd0 [ 1080.715823][T18989] ubi0: scanning is finished [ 1080.766620][T18989] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1081.121704][T18819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1081.236707][T18819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1081.295793][T18989] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1081.330233][T18819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1081.415520][T18819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1081.497595][T19004] random: crng reseeded on system resumption [ 1081.524907][ T5148] Bluetooth: hci4: command 0x0c1a tx timeout [ 1081.923014][ T5148] Bluetooth: hci5: command 0x0419 tx timeout [ 1082.274709][T18819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1082.283516][T19028] nbd: socks must be embedded in a SOCK_ITEM attr [ 1082.387651][T18819] 8021q: adding VLAN 0 to HW filter on device team0 [ 1082.500631][T13960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.507791][T13960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1082.654842][T13960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.662029][T13960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1083.052529][T18819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1083.994914][ T5148] Bluetooth: hci5: command 0x0419 tx timeout [ 1084.584158][T18819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1085.213215][T18819] veth0_vlan: entered promiscuous mode [ 1085.330552][T18819] veth1_vlan: entered promiscuous mode [ 1085.655700][T18819] veth0_macvtap: entered promiscuous mode [ 1085.742032][T18819] veth1_macvtap: entered promiscuous mode [ 1085.906597][T18819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1086.002344][T18819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1086.060977][T13960] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.105970][T13960] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.173354][T13960] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.194333][T19080] netlink: 4892 bytes leftover after parsing attributes in process `syz.1.2371'. [ 1086.284129][T13960] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1086.614193][T13960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.682554][T13960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.843645][T13960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.889726][T13960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.319723][T19154] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1092.374094][T19155] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81653b6a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 1092.389955][T19155] Call Trace: [ 1092.393242][T19155] [ 1092.396192][T19155] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 1092.402887][T19155] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1092.408743][T19155] ? debug_object_deactivate+0x1ec/0x3a0 [ 1092.414414][T19155] mce_cpu_restart+0xd9/0x1f0 [ 1092.419116][T19155] ? __pfx_mce_cpu_restart+0x10/0x10 [ 1092.424419][T19155] smp_call_function_many_cond+0x122a/0x1600 [ 1092.430431][T19155] ? __pfx_mce_cpu_restart+0x10/0x10 [ 1092.435735][T19155] ? mark_held_locks+0x49/0x80 [ 1092.440519][T19155] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1092.446347][T19155] ? lockdep_hardirqs_on+0x7c/0x110 [ 1092.451570][T19155] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1092.457397][T19155] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1092.463747][T19155] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 1092.469755][T19155] ? __pfx_mce_cpu_restart+0x10/0x10 [ 1092.475065][T19155] on_each_cpu_cond_mask+0x40/0x90 [ 1092.480213][T19155] set_bank+0x240/0x3a0 [ 1092.484379][T19155] ? __pfx_set_bank+0x10/0x10 [ 1092.489066][T19155] ? find_held_lock+0x2b/0x80 [ 1092.493767][T19155] ? __pfx_set_bank+0x10/0x10 [ 1092.498462][T19155] dev_attr_store+0x58/0x80 [ 1092.502987][T19155] ? __pfx_dev_attr_store+0x10/0x10 [ 1092.508213][T19155] sysfs_kf_write+0xf2/0x150 [ 1092.512830][T19155] kernfs_fop_write_iter+0x3af/0x570 [ 1092.518139][T19155] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1092.523363][T19155] vfs_write+0x7d3/0x11d0 [ 1092.527708][T19155] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1092.533542][T19155] ? __pfx___mutex_lock+0x10/0x10 [ 1092.538596][T19155] ? __pfx_vfs_write+0x10/0x10 [ 1092.543397][T19155] ksys_write+0x12a/0x250 [ 1092.547757][T19155] ? __pfx_ksys_write+0x10/0x10 [ 1092.552636][T19155] do_syscall_64+0xcd/0xfa0 [ 1092.557162][T19155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.563063][T19155] RIP: 0033:0x7f04b898eec9 [ 1092.567487][T19155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1092.587102][T19155] RSP: 002b:00007f04b9885038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1092.595542][T19155] RAX: ffffffffffffffda RBX: 00007f04b8be6090 RCX: 00007f04b898eec9 [ 1092.603535][T19155] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000004 [ 1092.611519][T19155] RBP: 00007f04b8a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1092.619495][T19155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1092.627469][T19155] R13: 00007f04b8be6128 R14: 00007f04b8be6090 R15: 00007fffb2e3bd68 [ 1092.635465][T19155] [ 1092.764579][T19144] FAULT_INJECTION: forcing a failure. [ 1092.764579][T19144] name failslab, interval 1, probability 0, space 0, times 0 [ 1092.794984][T19144] CPU: 0 UID: 0 PID: 19144 Comm: syz.2.2379 Tainted: G U syzkaller #0 PREEMPT(full) [ 1092.795024][T19144] Tainted: [U]=USER [ 1092.795032][T19144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1092.795047][T19144] Call Trace: [ 1092.795055][T19144] [ 1092.795064][T19144] dump_stack_lvl+0x16c/0x1f0 [ 1092.795104][T19144] should_fail_ex+0x512/0x640 [ 1092.795143][T19144] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1092.795179][T19144] should_failslab+0xc2/0x120 [ 1092.795203][T19144] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1092.795235][T19144] ? __kernfs_new_node+0xd2/0x8e0 [ 1092.795279][T19144] ? __kernfs_new_node+0xd2/0x8e0 [ 1092.795317][T19144] __kernfs_new_node+0xd2/0x8e0 [ 1092.795356][T19144] ? kernfs_add_one+0x37d/0x840 [ 1092.795382][T19144] ? __pfx___kernfs_new_node+0x10/0x10 [ 1092.795430][T19144] ? find_held_lock+0x2b/0x80 [ 1092.795464][T19144] ? kernfs_root+0xee/0x2a0 [ 1092.795492][T19144] kernfs_new_node+0x13c/0x1e0 [ 1092.795518][T19144] ? net_ns_get_ownership+0xf8/0x1b0 [ 1092.795559][T19144] kernfs_create_dir_ns+0x4c/0x1a0 [ 1092.795590][T19144] internal_create_group+0x34d/0xf30 [ 1092.795620][T19144] ? __pfx_internal_create_group+0x10/0x10 [ 1092.795644][T19144] ? __pfx_internal_create_group+0x10/0x10 [ 1092.795672][T19144] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1092.795712][T19144] ? bus_to_subsys+0x131/0x160 [ 1092.795757][T19144] dpm_sysfs_add+0x80/0x280 [ 1092.795799][T19144] device_add+0x9a6/0x1aa0 [ 1092.795824][T19144] ? __pfx_device_add+0x10/0x10 [ 1092.795853][T19144] ? lockdep_init_map_type+0x5c/0x280 [ 1092.795881][T19144] ? __init_waitqueue_head+0xca/0x150 [ 1092.795919][T19144] netdev_register_kobject+0x1a9/0x3d0 [ 1092.795951][T19144] register_netdevice+0x13dc/0x2270 [ 1092.795980][T19144] ? __pfx_register_netdevice+0x10/0x10 [ 1092.796012][T19144] __ip_tunnel_create+0x540/0x6e0 [ 1092.796040][T19144] ? __pfx___ip_tunnel_create+0x10/0x10 [ 1092.796076][T19144] ip_tunnel_init_net+0x22f/0x7d0 [ 1092.796106][T19144] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 1092.796142][T19144] ? ops_init+0x77/0x5f0 [ 1092.796181][T19144] ? __pfx_ipgre_init_net+0x10/0x10 [ 1092.796218][T19144] ops_init+0x1e2/0x5f0 [ 1092.796258][T19144] setup_net+0x100/0x390 [ 1092.796296][T19144] ? __pfx_setup_net+0x10/0x10 [ 1092.796335][T19144] ? debug_mutex_init+0x37/0x70 [ 1092.796371][T19144] copy_net_ns+0x2f8/0x690 [ 1092.796398][T19144] create_new_namespaces+0x3ea/0xa90 [ 1092.796441][T19144] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1092.796480][T19144] ksys_unshare+0x45b/0xa40 [ 1092.796504][T19144] ? __pfx_ksys_unshare+0x10/0x10 [ 1092.796529][T19144] ? xfd_validate_state+0x61/0x180 [ 1092.796564][T19144] __x64_sys_unshare+0x31/0x40 [ 1092.796588][T19144] do_syscall_64+0xcd/0xfa0 [ 1092.796626][T19144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.796651][T19144] RIP: 0033:0x7fe2cc18eec9 [ 1092.796670][T19144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1092.796694][T19144] RSP: 002b:00007fe2cd0a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1092.796717][T19144] RAX: ffffffffffffffda RBX: 00007fe2cc3e6270 RCX: 00007fe2cc18eec9 [ 1092.796734][T19144] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1092.796749][T19144] RBP: 00007fe2cc211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1092.796764][T19144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1092.796778][T19144] R13: 00007fe2cc3e6308 R14: 00007fe2cc3e6270 R15: 00007ffd2de97ca8 [ 1092.796810][T19144] [ 1094.561314][T19179] FAULT_INJECTION: forcing a failure. [ 1094.561314][T19179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1094.634387][T19179] CPU: 0 UID: 0 PID: 19179 Comm: syz.1.2386 Tainted: G U syzkaller #0 PREEMPT(full) [ 1094.634423][T19179] Tainted: [U]=USER [ 1094.634431][T19179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1094.634445][T19179] Call Trace: [ 1094.634453][T19179] [ 1094.634462][T19179] dump_stack_lvl+0x16c/0x1f0 [ 1094.634501][T19179] should_fail_ex+0x512/0x640 [ 1094.634543][T19179] _copy_from_iter+0x29f/0x1720 [ 1094.634586][T19179] ? __alloc_skb+0x200/0x380 [ 1094.634627][T19179] ? __pfx__copy_from_iter+0x10/0x10 [ 1094.634665][T19179] ? netlink_autobind.isra.0+0x158/0x370 [ 1094.634714][T19179] netlink_sendmsg+0x820/0xdd0 [ 1094.634757][T19179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1094.634799][T19179] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1094.634828][T19179] ____sys_sendmsg+0xa98/0xc70 [ 1094.634855][T19179] ? copy_msghdr_from_user+0x10a/0x160 [ 1094.634890][T19179] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1094.634929][T19179] ___sys_sendmsg+0x134/0x1d0 [ 1094.634965][T19179] ? __pfx____sys_sendmsg+0x10/0x10 [ 1094.634997][T19179] ? __lock_acquire+0x622/0x1c90 [ 1094.635056][T19179] __sys_sendmsg+0x16d/0x220 [ 1094.635091][T19179] ? __pfx___sys_sendmsg+0x10/0x10 [ 1094.635144][T19179] do_syscall_64+0xcd/0xfa0 [ 1094.635182][T19179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.635205][T19179] RIP: 0033:0x7f100038eec9 [ 1094.635223][T19179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1094.635247][T19179] RSP: 002b:00007f10011fa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1094.635269][T19179] RAX: ffffffffffffffda RBX: 00007f10005e5fa0 RCX: 00007f100038eec9 [ 1094.635285][T19179] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 0000000000000003 [ 1094.635299][T19179] RBP: 00007f10011fa090 R08: 0000000000000000 R09: 0000000000000000 [ 1094.635313][T19179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1094.635327][T19179] R13: 00007f10005e6038 R14: 00007f10005e5fa0 R15: 00007fff9f3584f8 [ 1094.635358][T19179] [ 1097.032744][T19215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2392'. [ 1097.119273][ T5148] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1098.324564][T19233] FAULT_INJECTION: forcing a failure. [ 1098.324564][T19233] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.324627][T19233] CPU: 0 UID: 0 PID: 19233 Comm: syz.1.2396 Tainted: G U syzkaller #0 PREEMPT(full) [ 1098.324661][T19233] Tainted: [U]=USER [ 1098.324669][T19233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1098.324684][T19233] Call Trace: [ 1098.324691][T19233] [ 1098.324701][T19233] dump_stack_lvl+0x16c/0x1f0 [ 1098.324741][T19233] should_fail_ex+0x512/0x640 [ 1098.324780][T19233] ? fs_reclaim_acquire+0xae/0x150 [ 1098.324805][T19233] should_failslab+0xc2/0x120 [ 1098.324829][T19233] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1098.324860][T19233] ? is_bpf_text_address+0x8a/0x1a0 [ 1098.324885][T19233] ? __kernfs_new_node+0xd2/0x8e0 [ 1098.324929][T19233] ? __kernfs_new_node+0xd2/0x8e0 [ 1098.324965][T19233] __kernfs_new_node+0xd2/0x8e0 [ 1098.325007][T19233] ? __pfx___kernfs_new_node+0x10/0x10 [ 1098.325054][T19233] ? find_held_lock+0x2b/0x80 [ 1098.325088][T19233] ? kernfs_root+0xee/0x2a0 [ 1098.325115][T19233] kernfs_new_node+0x13c/0x1e0 [ 1098.325141][T19233] ? kasan_save_stack+0x42/0x60 [ 1098.325180][T19233] kernfs_create_dir_ns+0x4c/0x1a0 [ 1098.325210][T19233] sysfs_create_dir_ns+0x13a/0x2b0 [ 1098.325263][T19233] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1098.325303][T19233] ? rcu_is_watching+0x12/0xc0 [ 1098.325338][T19233] ? kfree+0x252/0x6d0 [ 1098.325370][T19233] kobject_add_internal+0x2c4/0x9b0 [ 1098.325394][T19233] ? kfree_const+0x55/0x60 [ 1098.325430][T19233] kobject_add+0x16e/0x240 [ 1098.325453][T19233] ? __pfx_kobject_add+0x10/0x10 [ 1098.325492][T19233] kobject_create_and_add+0x7e/0xf0 [ 1098.325522][T19233] __add_disk+0x709/0xf00 [ 1098.325565][T19233] add_disk_fwnode+0x13f/0x5d0 [ 1098.325606][T19233] loop_add+0x903/0xb70 [ 1098.325634][T19233] ? __pfx_loop_add+0x10/0x10 [ 1098.325679][T19233] ? find_held_lock+0x2b/0x80 [ 1098.325716][T19233] loop_control_ioctl+0x13e/0x630 [ 1098.325744][T19233] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1098.325783][T19233] ? __pfx_loop_control_ioctl+0x10/0x10 [ 1098.325811][T19233] __x64_sys_ioctl+0x18e/0x210 [ 1098.325842][T19233] do_syscall_64+0xcd/0xfa0 [ 1098.325881][T19233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.325906][T19233] RIP: 0033:0x7f100038eec9 [ 1098.325926][T19233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1098.325950][T19233] RSP: 002b:00007f10011d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1098.325974][T19233] RAX: ffffffffffffffda RBX: 00007f10005e6090 RCX: 00007f100038eec9 [ 1098.325992][T19233] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000006 [ 1098.326008][T19233] RBP: 00007f1000411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1098.326024][T19233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1098.326039][T19233] R13: 00007f10005e6128 R14: 00007f10005e6090 R15: 00007fff9f3584f8 [ 1098.326077][T19233] [ 1098.447127][T19233] kobject: kobject_add_internal failed for slaves (error: -12 parent: loop32) [ 1098.447155][T19233] kobject: kobject_create_and_add: kobject_add error: -12 [ 1100.709945][T19269] futex_wake_op: syz.1.2400 tries to shift op by -9; fix this program [ 1101.162498][T19257] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2399'. [ 1104.198278][T19320] random: crng reseeded on system resumption [ 1105.489550][T19339] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2410'. [ 1107.164703][T19336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2409'. [ 1108.257572][T19390] FAULT_INJECTION: forcing a failure. [ 1108.257572][T19390] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.306585][T19390] CPU: 0 UID: 0 PID: 19390 Comm: syz.3.2417 Tainted: G U syzkaller #0 PREEMPT(full) [ 1108.306625][T19390] Tainted: [U]=USER [ 1108.306633][T19390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1108.306648][T19390] Call Trace: [ 1108.306656][T19390] [ 1108.306665][T19390] dump_stack_lvl+0x16c/0x1f0 [ 1108.306706][T19390] should_fail_ex+0x512/0x640 [ 1108.306749][T19390] should_failslab+0xc2/0x120 [ 1108.306774][T19390] __kmalloc_cache_noprof+0x72/0x780 [ 1108.306803][T19390] ? __task_pid_nr_ns+0x1f5/0x500 [ 1108.306829][T19390] ? proc_thread_self_get_link+0x1c6/0x240 [ 1108.306875][T19390] ? proc_thread_self_get_link+0x1c6/0x240 [ 1108.306914][T19390] proc_thread_self_get_link+0x1c6/0x240 [ 1108.306954][T19390] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 1108.306994][T19390] step_into+0x189e/0x21a0 [ 1108.307030][T19390] ? __pfx_step_into+0x10/0x10 [ 1108.307065][T19390] ? lookup_fast+0x156/0x610 [ 1108.307098][T19390] walk_component+0xfc/0x5b0 [ 1108.307130][T19390] link_path_walk+0x627/0xe20 [ 1108.307172][T19390] path_openat+0x1b0/0x2cb0 [ 1108.307215][T19390] ? __pfx_path_openat+0x10/0x10 [ 1108.307251][T19390] ? __lock_acquire+0xb8a/0x1c90 [ 1108.307279][T19390] do_filp_open+0x20b/0x470 [ 1108.307314][T19390] ? __pfx_do_filp_open+0x10/0x10 [ 1108.307369][T19390] ? alloc_fd+0x471/0x7d0 [ 1108.307416][T19390] do_sys_openat2+0x11b/0x1d0 [ 1108.307443][T19390] ? __pfx_do_sys_openat2+0x10/0x10 [ 1108.307481][T19390] __x64_sys_openat+0x174/0x210 [ 1108.307509][T19390] ? __pfx___x64_sys_openat+0x10/0x10 [ 1108.307549][T19390] do_syscall_64+0xcd/0xfa0 [ 1108.307587][T19390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.307611][T19390] RIP: 0033:0x7f04b898eec9 [ 1108.307630][T19390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1108.307654][T19390] RSP: 002b:00007f04b98a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1108.307677][T19390] RAX: ffffffffffffffda RBX: 00007f04b8be5fa0 RCX: 00007f04b898eec9 [ 1108.307693][T19390] RDX: 0000000000048041 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1108.307709][T19390] RBP: 00007f04b8a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1108.307723][T19390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1108.307738][T19390] R13: 00007f04b8be6038 R14: 00007f04b8be5fa0 R15: 00007fffb2e3bd68 [ 1108.307769][T19390] [ 1108.551756][ C0] vkms_vblank_simulate: vblank timer overrun [ 1111.934090][T19443] cgroup: fork rejected by pids controller in /syz3 [ 1114.891028][T19509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2428'. [ 1117.085812][T19547] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2436'. [ 1117.135427][T19547] FAULT_INJECTION: forcing a failure. [ 1117.135427][T19547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1117.195710][T19547] CPU: 0 UID: 0 PID: 19547 Comm: syz.2.2436 Tainted: G U syzkaller #0 PREEMPT(full) [ 1117.195755][T19547] Tainted: [U]=USER [ 1117.195764][T19547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1117.195782][T19547] Call Trace: [ 1117.195792][T19547] [ 1117.195803][T19547] dump_stack_lvl+0x16c/0x1f0 [ 1117.195849][T19547] should_fail_ex+0x512/0x640 [ 1117.195899][T19547] _copy_to_user+0x32/0xd0 [ 1117.195927][T19547] simple_read_from_buffer+0xcb/0x170 [ 1117.195965][T19547] proc_fail_nth_read+0x197/0x240 [ 1117.196000][T19547] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1117.196035][T19547] ? rw_verify_area+0xcf/0x6c0 [ 1117.196064][T19547] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1117.196097][T19547] vfs_read+0x1e4/0xcf0 [ 1117.196134][T19547] ? __pfx___mutex_lock+0x10/0x10 [ 1117.196171][T19547] ? __pfx_vfs_read+0x10/0x10 [ 1117.196213][T19547] ? __fget_files+0x20e/0x3c0 [ 1117.196253][T19547] ksys_read+0x12a/0x250 [ 1117.196285][T19547] ? __pfx_ksys_read+0x10/0x10 [ 1117.196326][T19547] do_syscall_64+0xcd/0xfa0 [ 1117.196363][T19547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.196387][T19547] RIP: 0033:0x7fe2cc18d8dc [ 1117.196406][T19547] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1117.196429][T19547] RSP: 002b:00007fe2cd10a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1117.196451][T19547] RAX: ffffffffffffffda RBX: 00007fe2cc3e5fa0 RCX: 00007fe2cc18d8dc [ 1117.196466][T19547] RDX: 000000000000000f RSI: 00007fe2cd10a0a0 RDI: 0000000000000004 [ 1117.196481][T19547] RBP: 00007fe2cd10a090 R08: 0000000000000000 R09: 0000000000000000 [ 1117.196495][T19547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1117.196509][T19547] R13: 00007fe2cc3e6038 R14: 00007fe2cc3e5fa0 R15: 00007ffd2de97ca8 [ 1117.196545][T19547] [ 1120.047734][T19584] binder: 19582:19584 ioctl c008551a 200000000040 returned -22 [ 1121.770475][T19611] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2449'. [ 1122.297961][T19619] random: crng reseeded on system resumption [ 1123.457283][T19628] sd 0:0:1:0: PR command failed: 1026 [ 1123.463124][T19628] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1124.034701][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1124.046417][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1124.135637][T19628] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1125.467897][T19643] input: jJǸ-¶š9ã%vø“û¨ as /devices/virtual/input/input36 [ 1127.190074][T19671] FAULT_INJECTION: forcing a failure. [ 1127.190074][T19671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1127.227446][T19671] CPU: 0 UID: 0 PID: 19671 Comm: syz.1.2446 Tainted: G U syzkaller #0 PREEMPT(full) [ 1127.227486][T19671] Tainted: [U]=USER [ 1127.227494][T19671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1127.227509][T19671] Call Trace: [ 1127.227516][T19671] [ 1127.227526][T19671] dump_stack_lvl+0x16c/0x1f0 [ 1127.227566][T19671] should_fail_ex+0x512/0x640 [ 1127.227609][T19671] strncpy_from_user+0x3b/0x2e0 [ 1127.227649][T19671] __do_sys_memfd_create+0x1b1/0x8a0 [ 1127.227687][T19671] do_syscall_64+0xcd/0xfa0 [ 1127.227726][T19671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.227752][T19671] RIP: 0033:0x7f100038eec9 [ 1127.227772][T19671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1127.227796][T19671] RSP: 002b:00007f10011d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1127.227819][T19671] RAX: ffffffffffffffda RBX: 00007f10005e6090 RCX: 00007f100038eec9 [ 1127.227835][T19671] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000000 [ 1127.227849][T19671] RBP: 00007f1000411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1127.227864][T19671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1127.227879][T19671] R13: 00007f10005e6128 R14: 00007f10005e6090 R15: 00007fff9f3584f8 [ 1127.227910][T19671] [ 1127.373154][ C0] vkms_vblank_simulate: vblank timer overrun [ 1132.016531][T19707] FAULT_INJECTION: forcing a failure. [ 1132.016531][T19707] name failslab, interval 1, probability 0, space 0, times 0 [ 1132.095958][T19707] CPU: 0 UID: 0 PID: 19707 Comm: syz.2.2457 Tainted: G U syzkaller #0 PREEMPT(full) [ 1132.095997][T19707] Tainted: [U]=USER [ 1132.096005][T19707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1132.096019][T19707] Call Trace: [ 1132.096027][T19707] [ 1132.096036][T19707] dump_stack_lvl+0x16c/0x1f0 [ 1132.096077][T19707] should_fail_ex+0x512/0x640 [ 1132.096116][T19707] ? __kmalloc_cache_noprof+0x5f/0x780 [ 1132.096151][T19707] should_failslab+0xc2/0x120 [ 1132.096174][T19707] __kmalloc_cache_noprof+0x72/0x780 [ 1132.096214][T19707] ? __do_sys_memfd_create+0x17b/0x8a0 [ 1132.096244][T19707] ? __pfx___x64_sys_mount+0x10/0x10 [ 1132.096283][T19707] ? __do_sys_memfd_create+0x17b/0x8a0 [ 1132.096310][T19707] __do_sys_memfd_create+0x17b/0x8a0 [ 1132.096340][T19707] do_syscall_64+0xcd/0xfa0 [ 1132.096378][T19707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.096403][T19707] RIP: 0033:0x7fe2cc18eec9 [ 1132.096421][T19707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1132.096445][T19707] RSP: 002b:00007fe2cd10a038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1132.096467][T19707] RAX: ffffffffffffffda RBX: 00007fe2cc3e5fa0 RCX: 00007fe2cc18eec9 [ 1132.096483][T19707] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000000 [ 1132.096498][T19707] RBP: 00007fe2cc211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1132.096513][T19707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1132.096527][T19707] R13: 00007fe2cc3e6038 R14: 00007fe2cc3e5fa0 R15: 00007ffd2de97ca8 [ 1132.096559][T19707] [ 1135.740227][T19720] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2461'. [ 1136.884910][T19727] vivid-007: ================= START STATUS ================= [ 1136.905136][T19727] vivid-007: Generate PTS: true [ 1136.924920][T19727] vivid-007: Generate SCR: true [ 1136.931669][T19727] tpg source WxH: 320x240 (Y'CbCr) [ 1136.947040][T19727] tpg field: 1 [ 1136.950468][T19727] tpg crop: (0,0)/320x240 [ 1136.954805][T19727] tpg compose: (0,0)/320x240 [ 1136.975509][T19727] tpg colorspace: 8 [ 1136.979694][T19727] tpg transfer function: 0/0 [ 1136.984303][T19727] tpg Y'CbCr encoding: 0/0 [ 1137.006534][T19727] tpg quantization: 0/0 [ 1137.011083][T19727] tpg RGB range: 0/2 [ 1137.015512][T19727] vivid-007: ================== END STATUS ================== [ 1137.686976][T19733] zswap: compressor not available [ 1137.702607][T19736] Setting dangerous option i915.mitigations - tainting kernel [ 1137.735928][T19731] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2464'. [ 1137.978159][T18613] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1138.084750][T19739] netlink: 504 bytes leftover after parsing attributes in process `syz.6.2465'. [ 1138.382631][T13960] netdevsim netdevsim15 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.399846][T18613] CPU: 0 UID: 0 PID: 18613 Comm: syz-executor Tainted: G U syzkaller #0 PREEMPT(full) [ 1138.399882][T18613] Tainted: [U]=USER [ 1138.399889][T18613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1138.399903][T18613] Call Trace: [ 1138.399910][T18613] [ 1138.399919][T18613] dump_stack_lvl+0x16c/0x1f0 [ 1138.399957][T18613] dump_header+0x101/0x930 [ 1138.400002][T18613] oom_kill_process+0x272/0xa40 [ 1138.400034][T18613] out_of_memory+0x350/0x1700 [ 1138.400092][T18613] ? __pfx_out_of_memory+0x10/0x10 [ 1138.400130][T18613] mem_cgroup_out_of_memory+0x118/0x130 [ 1138.400159][T18613] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1138.400193][T18613] ? do_raw_spin_unlock+0x172/0x230 [ 1138.400226][T18613] try_charge_memcg+0x695/0xd30 [ 1138.400268][T18613] ? __pfx_try_charge_memcg+0x10/0x10 [ 1138.400304][T18613] ? __print_lock_name+0x31/0xe0 [ 1138.400337][T18613] ? rcu_read_unlock+0x17/0x60 [ 1138.400365][T18613] charge_memcg+0x8a/0x230 [ 1138.400401][T18613] __mem_cgroup_charge+0x2b/0x1e0 [ 1138.400426][T18613] filemap_add_folio+0xe6/0x610 [ 1138.400460][T18613] ? __pfx_filemap_add_folio+0x10/0x10 [ 1138.400500][T18613] __filemap_get_folio+0x510/0xc30 [ 1138.400538][T18613] filemap_fault+0x661/0x29a0 [ 1138.400577][T18613] ? __pfx_filemap_fault+0x10/0x10 [ 1138.400622][T18613] ? __pfx_filemap_map_pages+0x10/0x10 [ 1138.400655][T18613] __do_fault+0x10d/0x490 [ 1138.400689][T18613] ? __pfx_filemap_map_pages+0x10/0x10 [ 1138.400717][T18613] do_pte_missing+0xf4a/0x3ba0 [ 1138.400744][T18613] ? find_held_lock+0x2b/0x80 [ 1138.400775][T18613] ? __handle_mm_fault+0x1529/0x2aa0 [ 1138.400806][T18613] __handle_mm_fault+0x1556/0x2aa0 [ 1138.400842][T18613] ? __pfx___handle_mm_fault+0x10/0x10 [ 1138.400873][T18613] ? lock_vma_under_rcu+0x176/0x530 [ 1138.400911][T18613] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 1138.400938][T18613] ? __pfx___do_sys_wait4+0x10/0x10 [ 1138.400972][T18613] handle_mm_fault+0x589/0xd10 [ 1138.401000][T18613] ? __pkru_allows_pkey+0x11/0xb0 [ 1138.401030][T18613] do_user_addr_fault+0x60c/0x1370 [ 1138.401062][T18613] ? rcu_is_watching+0x12/0xc0 [ 1138.401098][T18613] exc_page_fault+0x64/0xc0 [ 1138.401131][T18613] asm_exc_page_fault+0x26/0x30 [ 1138.401153][T18613] RIP: 0033:0x7f04b8865db4 [ 1138.401172][T18613] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 e8 f9 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 f8 ea 00 48 01 d1 [ 1138.401195][T18613] RSP: 002b:00007fffb2e3c0f0 EFLAGS: 00010202 [ 1138.401212][T18613] RAX: 0000001b2f524000 RBX: 00000000000000b4 RCX: 0000000000116138 [ 1138.401228][T18613] RDX: 00000000095f0306 RSI: 00007fffb2e3c180 RDI: 00007f04b98a7010 [ 1138.401242][T18613] RBP: 00007fffb2e3c12c R08: 0000000000035c64 R09: 00007f04b98a7000 [ 1138.401257][T18613] R10: 0000000000000001 R11: 0022cb9e184b0dde R12: 0000000000001388 [ 1138.401271][T18613] R13: 00000000000927c0 R14: 0000000000115a4c R15: 00007fffb2e3c180 [ 1138.401301][T18613] [ 1138.401310][T18613] memory: usage 307200kB, limit 307200kB, failcnt 27939 [ 1138.733552][T19741] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2466'. [ 1138.929797][T13960] bridge_slave_1: left allmulticast mode [ 1138.952904][T13960] bridge_slave_1: left promiscuous mode [ 1138.967287][T18613] memory+swap: usage 431900kB, limit 9007199254740988kB, failcnt 0 [ 1138.982169][T13960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.999347][T18613] kmem: usage 3204kB, limit 9007199254740988kB, failcnt 0 [ 1139.011676][T13960] bridge_slave_0: left allmulticast mode [ 1139.025109][T18613] Memory cgroup stats for /syz3: [ 1139.025700][T18613] cache 306786304 [ 1139.034333][T13960] bridge_slave_0: left promiscuous mode [ 1139.044499][T18613] rss 4448256 [ 1139.061466][T13960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.071264][T18613] rss_huge 2097152 [ 1139.075007][T18613] shmem 306782208 [ 1139.094277][T18613] mapped_file 12099584 [ 1139.114598][T18613] dirty 0 [ 1139.141544][T18613] writeback 0 [ 1139.160677][T18613] workingset_refault_anon 754 [ 1139.183382][T18613] workingset_refault_file 447 [ 1139.201740][T18613] swap 127692800 [ 1139.215234][T18613] swapcached 53248 [ 1139.218987][T18613] pgpgin 165867 [ 1139.222453][T18613] pgpgout 92423 [ 1139.272328][T18613] pgfault 74494 [ 1139.284681][T18613] pgmajfault 73 [ 1139.288165][T18613] inactive_anon 110616576 [ 1139.333948][T18613] active_anon 200671232 [ 1139.338137][T18613] inactive_file 4096 [ 1139.342027][T18613] active_file 0 [ 1139.419510][T18613] unevictable 0 [ 1139.423026][T18613] hierarchical_memory_limit 314572800 [ 1139.471080][T18613] hierarchical_memsw_limit 9223372036854771712 [ 1139.513823][T18613] total_cache 306786304 [ 1139.528327][T18613] total_rss 4448256 [ 1139.560787][T18613] total_rss_huge 2097152 [ 1139.574491][T18613] total_shmem 306782208 [ 1139.598681][T18613] total_mapped_file 12099584 [ 1139.631022][T18613] total_dirty 0 [ 1139.640742][T18613] total_writeback 0 [ 1139.675564][T18613] total_workingset_refault_anon 754 [ 1139.680800][T18613] total_workingset_refault_file 447 [ 1139.698063][T18613] total_swap 127692800 [ 1139.734229][T18613] total_swapcached 53248 [ 1139.738507][T18613] total_pgpgin 165867 [ 1139.766115][T18613] total_pgpgout 92423 [ 1139.770406][T18613] total_pgfault 74494 [ 1139.833191][T18613] total_pgmajfault 73 [ 1139.837222][T18613] total_inactive_anon 110616576 [ 1139.871067][T18613] total_active_anon 200671232 [ 1139.875785][T18613] total_inactive_file 4096 [ 1139.914684][T18613] total_active_file 0 [ 1139.918712][T18613] total_unevictable 0 [ 1139.963886][T18613] anon_cost 0 [ 1139.969823][T18613] file_cost 0 [ 1139.980932][T18613] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2427,pid=19480,uid=0 [ 1140.065476][T18613] Memory cgroup out of memory: Killed process 19480 (syz.3.2427) total-vm:131872kB, anon-rss:3348kB, file-rss:29988kB, shmem-rss:11776kB, UID:0 pgtables:196kB oom_score_adj:1000 [ 1142.257835][ T5148] Bluetooth: hci4: unexpected subevent 0x04 length: 122 > 11 [ 1142.609664][T19755] FAULT_INJECTION: forcing a failure. [ 1142.609664][T19755] name failslab, interval 1, probability 0, space 0, times 0 [ 1142.756261][T19755] CPU: 0 UID: 0 PID: 19755 Comm: syz.3.2469 Tainted: G U syzkaller #0 PREEMPT(full) [ 1142.756300][T19755] Tainted: [U]=USER [ 1142.756309][T19755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1142.756323][T19755] Call Trace: [ 1142.756332][T19755] [ 1142.756341][T19755] dump_stack_lvl+0x16c/0x1f0 [ 1142.756386][T19755] should_fail_ex+0x512/0x640 [ 1142.756424][T19755] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1142.756460][T19755] should_failslab+0xc2/0x120 [ 1142.756487][T19755] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1142.756520][T19755] ? vm_area_dup+0x27/0x8d0 [ 1142.756561][T19755] ? vm_area_dup+0x27/0x8d0 [ 1142.756588][T19755] vm_area_dup+0x27/0x8d0 [ 1142.756620][T19755] __split_vma+0x18e/0x1070 [ 1142.756653][T19755] ? __pfx___split_vma+0x10/0x10 [ 1142.756690][T19755] ? __pfx_mas_prev+0x10/0x10 [ 1142.756719][T19755] vms_gather_munmap_vmas+0x3aa/0x1340 [ 1142.756756][T19755] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1142.756791][T19755] ? mas_walk+0x6f5/0x980 [ 1142.756832][T19755] __mmap_region+0x434/0x27a0 [ 1142.756865][T19755] ? find_held_lock+0x2b/0x80 [ 1142.756899][T19755] ? __pfx___mmap_region+0x10/0x10 [ 1142.756929][T19755] ? finish_task_switch.isra.0+0x21c/0xc10 [ 1142.756965][T19755] ? rcu_is_watching+0x12/0xc0 [ 1142.756998][T19755] ? finish_task_switch.isra.0+0x221/0xc10 [ 1142.757031][T19755] ? lockdep_hardirqs_on+0x7c/0x110 [ 1142.757067][T19755] ? finish_task_switch.isra.0+0x221/0xc10 [ 1142.757121][T19755] ? __lock_acquire+0x622/0x1c90 [ 1142.757148][T19755] ? __pfx___schedule+0x10/0x10 [ 1142.757215][T19755] ? trace_cap_capable+0x18d/0x200 [ 1142.757249][T19755] mmap_region+0x1ab/0x3f0 [ 1142.757281][T19755] ? __get_unmapped_area+0x267/0x440 [ 1142.757307][T19755] do_mmap+0xa3e/0x1210 [ 1142.757335][T19755] ? __pfx_do_mmap+0x10/0x10 [ 1142.757358][T19755] ? __pfx_down_write_killable+0x10/0x10 [ 1142.757388][T19755] vm_mmap_pgoff+0x29e/0x470 [ 1142.757433][T19755] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1142.757480][T19755] ? __x64_sys_futex+0x1e0/0x4c0 [ 1142.757503][T19755] ? __x64_sys_futex+0x1e9/0x4c0 [ 1142.757531][T19755] ksys_mmap_pgoff+0x7d/0x5c0 [ 1142.757575][T19755] ? xfd_validate_state+0x61/0x180 [ 1142.757600][T19755] ? __pfx_ksys_write+0x10/0x10 [ 1142.757639][T19755] __x64_sys_mmap+0x125/0x190 [ 1142.757671][T19755] do_syscall_64+0xcd/0xfa0 [ 1142.757709][T19755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.757733][T19755] RIP: 0033:0x7f04b898eec9 [ 1142.757754][T19755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1142.757778][T19755] RSP: 002b:00007f04b98a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1142.757802][T19755] RAX: ffffffffffffffda RBX: 00007f04b8be5fa0 RCX: 00007f04b898eec9 [ 1142.757818][T19755] RDX: 00000000000000df RSI: 000000000000e983 RDI: 0000000000000000 [ 1142.757833][T19755] RBP: 00007f04b8a11f91 R08: 0000000000000401 R09: 0000000000008000 [ 1142.757848][T19755] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1142.757863][T19755] R13: 00007f04b8be6038 R14: 00007f04b8be5fa0 R15: 00007fffb2e3bd68 [ 1142.757895][T19755] [ 1143.324382][T13960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1143.337001][T13960] bond0 (unregistering): Released all slaves [ 1143.771307][T13960] tipc: Left network mode [ 1144.030300][T19769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2473'. [ 1144.117642][T19766] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2473'. [ 1144.221055][T19769] geneve1: entered promiscuous mode [ 1144.226330][T19769] geneve1: entered allmulticast mode [ 1144.298906][T19769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2473'. [ 1144.455423][T19769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2473'. [ 1144.512333][T19776] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1144.522447][T19776] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1144.530904][T19776] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1144.539410][T19776] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1144.552218][T19776] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1144.632653][T19769] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2473'. [ 1145.070569][T13960] veth0_macvtap: left promiscuous mode [ 1145.085850][T13960] veth1_vlan: left promiscuous mode [ 1145.095434][T13960] veth0_vlan: left promiscuous mode [ 1145.789488][T13960] team0 (unregistering): Port device team_slave_1 removed [ 1145.846926][T13960] team0 (unregistering): Port device team_slave_0 removed [ 1146.626668][T19776] Bluetooth: hci7: command tx timeout [ 1146.761120][T19775] chnl_net:caif_netlink_parms(): no params data found [ 1147.010212][T19775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.029008][T19775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.043934][T19775] bridge_slave_0: entered allmulticast mode [ 1147.062746][T19775] bridge_slave_0: entered promiscuous mode [ 1147.076143][T19775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.098487][T19775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.129064][T19775] bridge_slave_1: entered allmulticast mode [ 1147.162791][T19775] bridge_slave_1: entered promiscuous mode [ 1147.256452][T19775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1147.285489][T19775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1147.388327][T19775] team0: Port device team_slave_0 added [ 1147.429700][T19775] team0: Port device team_slave_1 added [ 1147.532756][T19775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1147.540252][T19775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1147.620737][T19775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1147.646373][T19775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1147.661394][T19775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1147.729396][T19775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1147.846593][T19775] hsr_slave_0: entered promiscuous mode [ 1147.860637][T19775] hsr_slave_1: entered promiscuous mode [ 1147.877945][T19775] debugfs: 'hsr0' already exists in 'hsr' [ 1147.889357][T19775] Cannot create hsr debugfs directory [ 1148.248239][T13223] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 1376 with max blocks 8 with error 117 [ 1148.319066][T13223] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1148.319066][T13223] [ 1148.374372][T13223] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 1375 with max blocks 1 with error 117 [ 1148.446669][T13223] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1148.446669][T13223] [ 1148.700891][T19776] Bluetooth: hci7: command tx timeout [ 1148.716918][T13223] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 1375 with max blocks 1 with error 117 [ 1148.820841][T13223] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1148.820841][T13223] [ 1148.930036][T19815] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1148.992044][T19818] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2479'. [ 1149.582675][T19775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1149.648129][ T5148] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1149.662450][ T5148] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1149.671534][ T5148] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1149.679513][ T5148] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1149.690619][ T5148] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1149.704502][T19775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1149.763429][T19775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1149.825104][T19775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1150.520095][T19775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1150.637569][T19775] 8021q: adding VLAN 0 to HW filter on device team0 [ 1150.691982][T19827] chnl_net:caif_netlink_parms(): no params data found [ 1150.762764][T13960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.769994][T13960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1150.784490][T19776] Bluetooth: hci7: command tx timeout [ 1150.852502][T13960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.859703][T13960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1151.344227][T19827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.391907][T19827] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.429661][T19827] bridge_slave_0: entered allmulticast mode [ 1151.490114][T19827] bridge_slave_0: entered promiscuous mode [ 1151.516347][T19827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.549949][T19827] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.584698][T19827] bridge_slave_1: entered allmulticast mode [ 1151.620566][T19827] bridge_slave_1: entered promiscuous mode [ 1151.802020][T19827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1151.811300][ T5148] Bluetooth: hci8: command tx timeout [ 1151.887220][T19827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1152.070240][T19827] team0: Port device team_slave_0 added [ 1152.139960][T19827] team0: Port device team_slave_1 added [ 1152.152996][T19775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1152.273890][T19827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1152.300928][T19827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1152.409173][T19827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1152.453894][T19827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1152.484895][T19827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1152.608102][T19827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1152.834814][ T5148] Bluetooth: hci7: command tx timeout [ 1153.002630][T19775] veth0_vlan: entered promiscuous mode [ 1153.118815][T19827] hsr_slave_0: entered promiscuous mode [ 1153.143352][T19827] hsr_slave_1: entered promiscuous mode [ 1153.172113][T19827] debugfs: 'hsr0' already exists in 'hsr' [ 1153.177882][T19827] Cannot create hsr debugfs directory [ 1153.353423][T19775] veth1_vlan: entered promiscuous mode [ 1153.664959][T19775] veth0_macvtap: entered promiscuous mode [ 1153.811398][T19775] veth1_macvtap: entered promiscuous mode [ 1153.879109][ T5148] Bluetooth: hci8: command tx timeout [ 1154.064930][T19896] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2484'. [ 1154.124436][T19775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1154.134713][T19897] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2484'. [ 1154.441165][T19775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1154.619205][T15630] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.792031][T15630] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1154.842067][T15630] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.028130][T15630] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.318317][T15630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.362026][T15630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.564323][ T8456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1155.583017][T19827] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1155.608153][ T8456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1155.829549][T19827] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1155.938123][ T5148] Bluetooth: hci8: command tx timeout [ 1155.975671][T19827] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1156.080874][T19925] netlink: 18 bytes leftover after parsing attributes in process `syz.0.2470'. [ 1156.118852][T19827] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1157.098755][T19943] FAULT_INJECTION: forcing a failure. [ 1157.098755][T19943] name failslab, interval 1, probability 0, space 0, times 0 [ 1157.202510][T19943] CPU: 0 UID: 0 PID: 19943 Comm: syz.3.2489 Tainted: G U syzkaller #0 PREEMPT(full) [ 1157.202548][T19943] Tainted: [U]=USER [ 1157.202556][T19943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1157.202571][T19943] Call Trace: [ 1157.202579][T19943] [ 1157.202588][T19943] dump_stack_lvl+0x16c/0x1f0 [ 1157.202629][T19943] should_fail_ex+0x512/0x640 [ 1157.202666][T19943] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1157.202702][T19943] should_failslab+0xc2/0x120 [ 1157.202725][T19943] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1157.202757][T19943] ? acpi_ut_create_generic_state+0x61/0xc0 [ 1157.202803][T19943] ? acpi_ut_create_generic_state+0x61/0xc0 [ 1157.202840][T19943] acpi_ut_create_generic_state+0x61/0xc0 [ 1157.202879][T19943] acpi_ps_init_scope+0x3a/0x240 [ 1157.202903][T19943] acpi_ds_init_aml_walk+0x1f6/0x680 [ 1157.202957][T19943] acpi_ds_call_control_method+0x3a2/0xab0 [ 1157.202998][T19943] acpi_ps_parse_aml+0xab3/0x1170 [ 1157.203026][T19943] acpi_ps_execute_method+0x5c4/0xe90 [ 1157.203059][T19943] acpi_ns_evaluate+0x98c/0x16d0 [ 1157.203093][T19943] acpi_evaluate_object+0x4ca/0xdf0 [ 1157.203135][T19943] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1157.203173][T19943] ? __mutex_trylock_common+0xe9/0x250 [ 1157.203205][T19943] acpi_evaluate_integer+0xdd/0x200 [ 1157.203235][T19943] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 1157.203278][T19943] ? __pfx_status_show+0x10/0x10 [ 1157.203312][T19943] status_show+0xa0/0x120 [ 1157.203346][T19943] ? __pfx_status_show+0x10/0x10 [ 1157.203389][T19943] dev_attr_show+0x56/0xe0 [ 1157.203428][T19943] ? __pfx_dev_attr_show+0x10/0x10 [ 1157.203463][T19943] sysfs_kf_seq_show+0x216/0x3e0 [ 1157.203503][T19943] seq_read_iter+0x50e/0x12d0 [ 1157.203545][T19943] kernfs_fop_read_iter+0x46c/0x610 [ 1157.203577][T19943] ? rw_verify_area+0xcf/0x6c0 [ 1157.203610][T19943] vfs_read+0x8bf/0xcf0 [ 1157.203648][T19943] ? __pfx___mutex_lock+0x10/0x10 [ 1157.203687][T19943] ? __pfx_vfs_read+0x10/0x10 [ 1157.203740][T19943] ksys_read+0x12a/0x250 [ 1157.203773][T19943] ? __pfx_ksys_read+0x10/0x10 [ 1157.203816][T19943] do_syscall_64+0xcd/0xfa0 [ 1157.203854][T19943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.203879][T19943] RIP: 0033:0x7f04b898eec9 [ 1157.203899][T19943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1157.203923][T19943] RSP: 002b:00007f04b98a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1157.203989][T19943] RAX: ffffffffffffffda RBX: 00007f04b8be5fa0 RCX: 00007f04b898eec9 [ 1157.204006][T19943] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000004 [ 1157.204021][T19943] RBP: 00007f04b8a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1157.204036][T19943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1157.204050][T19943] R13: 00007f04b8be6038 R14: 00007f04b8be5fa0 R15: 00007fffb2e3bd68 [ 1157.204083][T19943] [ 1157.204242][T19943] ACPI Error: [ 1157.866021][T19776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1157.900071][T19776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1157.915254][T19776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1157.968305][T19827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1157.994868][T19776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1158.012082][T19776] Bluetooth: hci8: command tx timeout [ 1158.020257][T19776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1158.259242][T19827] 8021q: adding VLAN 0 to HW filter on device team0 [ 1158.307053][T15630] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.314191][T15630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1158.360178][T13960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.367408][T13960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.443508][T19943] Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20250807/psparse-529) [ 1158.933416][T19962] Console: switching to colour VGA+ 80x25 [ 1159.739663][T19946] chnl_net:caif_netlink_parms(): no params data found [ 1159.846756][T19827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1160.315336][T19776] Bluetooth: hci2: command tx timeout [ 1160.720865][T19946] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.797544][T19946] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.832755][T19946] bridge_slave_0: entered allmulticast mode [ 1160.901944][T19946] bridge_slave_0: entered promiscuous mode [ 1160.910502][T20002] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1161.005043][T19946] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.044343][T19946] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.132404][T20002] vivid-007: ================= START STATUS ================= [ 1161.140086][T20002] vivid-007: Generate PTS: true [ 1161.147231][T19946] bridge_slave_1: entered allmulticast mode [ 1161.175716][T19946] bridge_slave_1: entered promiscuous mode [ 1161.269478][T20009] openvswitch: netlink: Message has 254 unknown bytes. [ 1161.300353][T20002] vivid-007: Generate SCR: true [ 1161.305290][T20002] tpg source WxH: 320x240 (Y'CbCr) [ 1161.429073][T20002] tpg field: 1 [ 1161.432514][T20002] tpg crop: (0,0)/320x240 [ 1161.458882][T20002] tpg compose: (0,0)/320x240 [ 1161.463575][T20002] tpg colorspace: 8 [ 1161.512728][T19946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1161.605027][T19946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.614761][T20002] tpg transfer function: 0/0 [ 1161.745229][T20002] tpg Y'CbCr encoding: 0/0 [ 1161.788284][T20002] tpg quantization: 0/0 [ 1161.792480][T20002] tpg RGB range: 0/2 [ 1161.900778][T20022] random: crng reseeded on system resumption [ 1161.936459][T20002] vivid-007: ================== END STATUS ================== [ 1161.977982][T19946] team0: Port device team_slave_0 added [ 1162.080527][T19946] team0: Port device team_slave_1 added [ 1162.282335][T19946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1162.334677][T19946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1162.391440][T19776] Bluetooth: hci2: command tx timeout [ 1162.483324][T19946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1162.543657][T19946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1162.577097][T19946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1162.705151][T19946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1163.109635][T19827] veth0_vlan: entered promiscuous mode [ 1163.172060][T19946] hsr_slave_0: entered promiscuous mode [ 1163.230616][T19946] hsr_slave_1: entered promiscuous mode [ 1163.236950][T19946] debugfs: 'hsr0' already exists in 'hsr' [ 1163.279489][T19946] Cannot create hsr debugfs directory [ 1163.324263][T19827] veth1_vlan: entered promiscuous mode [ 1163.921091][T19827] veth0_macvtap: entered promiscuous mode [ 1163.981214][T19827] veth1_macvtap: entered promiscuous mode [ 1164.326925][T19827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1164.427729][T19827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1164.456561][T19776] Bluetooth: hci2: command tx timeout [ 1164.637883][T13233] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1164.670320][T13233] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.058115][T13233] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.124339][T13233] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1165.892491][T13233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1165.944966][T13233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.225778][T13958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1166.233633][T13958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1166.323350][T19946] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1166.416583][T19946] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1166.522887][T19776] Bluetooth: hci2: command tx timeout [ 1166.637249][T19946] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1166.717529][T19946] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1167.010341][T20096] ptrace attach of "./syz-executor exec"[19827] was attempted by ""[20096] [ 1167.456409][T20084] ima: policy update failed [ 1167.546493][ T30] audit: type=1802 audit(4294967499.738:30): pid=20084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2501" res=0 errno=0 [ 1167.570825][T20084] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2501'. [ 1167.751105][T19946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1167.856659][T19946] 8021q: adding VLAN 0 to HW filter on device team0 [ 1167.953935][T13962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.961125][T13962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1168.028638][T13962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.035830][T13962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1168.346472][T19946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1168.660864][T20110] FAULT_INJECTION: forcing a failure. [ 1168.660864][T20110] name failslab, interval 1, probability 0, space 0, times 0 [ 1168.975855][T20110] CPU: 0 UID: 0 PID: 20110 Comm: syz.0.2503 Tainted: G U syzkaller #0 PREEMPT(full) [ 1168.975905][T20110] Tainted: [U]=USER [ 1168.975913][T20110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1168.975927][T20110] Call Trace: [ 1168.975935][T20110] [ 1168.975944][T20110] dump_stack_lvl+0x16c/0x1f0 [ 1168.975988][T20110] should_fail_ex+0x512/0x640 [ 1168.976026][T20110] ? fs_reclaim_acquire+0xae/0x150 [ 1168.976052][T20110] should_failslab+0xc2/0x120 [ 1168.976075][T20110] __kmalloc_noprof+0xdd/0x880 [ 1168.976104][T20110] ? kfree+0x252/0x6d0 [ 1168.976131][T20110] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1168.976172][T20110] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 1168.976206][T20110] tomoyo_realpath_from_path+0xc2/0x6e0 [ 1168.976243][T20110] ? tomoyo_profile+0x47/0x60 [ 1168.976283][T20110] tomoyo_mkdev_perm+0x22b/0x570 [ 1168.976310][T20110] ? tomoyo_mkdev_perm+0x217/0x570 [ 1168.976339][T20110] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 1168.976368][T20110] ? do_raw_spin_lock+0x12c/0x2b0 [ 1168.976405][T20110] ? do_raw_spin_unlock+0x172/0x230 [ 1168.976451][T20110] ? __pfx_current_check_access_path+0x10/0x10 [ 1168.976488][T20110] ? simple_lookup+0x105/0x1d0 [ 1168.976524][T20110] tomoyo_path_mknod+0x12a/0x190 [ 1168.976563][T20110] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 1168.976604][T20110] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1168.976641][T20110] security_path_mknod+0x161/0x310 [ 1168.976672][T20110] do_mknodat+0x239/0x5d0 [ 1168.976708][T20110] ? __pfx_do_mknodat+0x10/0x10 [ 1168.976740][T20110] ? getname_flags.part.0+0x1c5/0x550 [ 1168.976773][T20110] __x64_sys_mknod+0x87/0xb0 [ 1168.976808][T20110] do_syscall_64+0xcd/0xfa0 [ 1168.976847][T20110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.976878][T20110] RIP: 0033:0x7f67d218eec9 [ 1168.976903][T20110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1168.976927][T20110] RSP: 002b:00007f67d2fd6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1168.976950][T20110] RAX: ffffffffffffffda RBX: 00007f67d23e5fa0 RCX: 00007f67d218eec9 [ 1168.976967][T20110] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 1168.976982][T20110] RBP: 00007f67d2211f91 R08: 0000000000000000 R09: 0000000000000000 [ 1168.976998][T20110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1168.977012][T20110] R13: 00007f67d23e6038 R14: 00007f67d23e5fa0 R15: 00007fff530fc1a8 [ 1168.977044][T20110] [ 1168.977199][T20110] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1170.633909][T19946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1172.032211][T20189] FAULT_INJECTION: forcing a failure. [ 1172.032211][T20189] name failslab, interval 1, probability 0, space 0, times 0 [ 1172.128253][T20189] CPU: 0 UID: 0 PID: 20189 Comm: syz.3.2510 Tainted: G U syzkaller #0 PREEMPT(full) [ 1172.128292][T20189] Tainted: [U]=USER [ 1172.128300][T20189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1172.128315][T20189] Call Trace: [ 1172.128323][T20189] [ 1172.128332][T20189] dump_stack_lvl+0x16c/0x1f0 [ 1172.128373][T20189] should_fail_ex+0x512/0x640 [ 1172.128411][T20189] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1172.128447][T20189] should_failslab+0xc2/0x120 [ 1172.128470][T20189] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1172.128502][T20189] ? sk_prot_alloc+0x60/0x2a0 [ 1172.128532][T20189] ? sk_prot_alloc+0x60/0x2a0 [ 1172.128556][T20189] sk_prot_alloc+0x60/0x2a0 [ 1172.128605][T20189] sk_alloc+0x36/0xc20 [ 1172.128640][T20189] rxrpc_create+0x116/0x8d0 [ 1172.128675][T20189] __sock_create+0x338/0x8d0 [ 1172.128708][T20189] __sys_socket+0x14d/0x260 [ 1172.128737][T20189] ? __pfx___sys_socket+0x10/0x10 [ 1172.128765][T20189] ? xfd_validate_state+0x61/0x180 [ 1172.128790][T20189] ? __pfx_ksys_write+0x10/0x10 [ 1172.128831][T20189] __x64_sys_socket+0x72/0xb0 [ 1172.128858][T20189] ? lockdep_hardirqs_on+0x7c/0x110 [ 1172.128893][T20189] do_syscall_64+0xcd/0xfa0 [ 1172.128930][T20189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.128954][T20189] RIP: 0033:0x7f04b898eec9 [ 1172.128972][T20189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1172.128996][T20189] RSP: 002b:00007f04b98a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1172.129019][T20189] RAX: ffffffffffffffda RBX: 00007f04b8be5fa0 RCX: 00007f04b898eec9 [ 1172.129035][T20189] RDX: 0010000000000002 RSI: 0000000000000002 RDI: 2000000000000021 [ 1172.129050][T20189] RBP: 00007f04b8a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1172.129065][T20189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1172.129079][T20189] R13: 00007f04b8be6038 R14: 00007f04b8be5fa0 R15: 00007fffb2e3bd68 [ 1172.129111][T20189] [ 1172.587217][ T5148] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1172.596755][ T5148] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1172.604929][ T5148] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1172.613192][ T5148] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1172.621792][ T5148] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1172.668173][T13960] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.828132][T19946] veth0_vlan: entered promiscuous mode [ 1173.032333][T13960] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.213144][T20199] device-mapper: ioctl: only supply one of name or uuid, cmd(11) [ 1173.226263][T19946] veth1_vlan: entered promiscuous mode [ 1173.402064][T20205] FAULT_INJECTION: forcing a failure. [ 1173.402064][T20205] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.424036][T13960] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.484578][T20205] CPU: 0 UID: 0 PID: 20205 Comm: syz.3.2513 Tainted: G U syzkaller #0 PREEMPT(full) [ 1173.484617][T20205] Tainted: [U]=USER [ 1173.484626][T20205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1173.484641][T20205] Call Trace: [ 1173.484648][T20205] [ 1173.484658][T20205] dump_stack_lvl+0x16c/0x1f0 [ 1173.484698][T20205] should_fail_ex+0x512/0x640 [ 1173.484745][T20205] should_failslab+0xc2/0x120 [ 1173.484769][T20205] __kmalloc_cache_noprof+0x72/0x780 [ 1173.484800][T20205] ? __task_pid_nr_ns+0x1f5/0x500 [ 1173.484826][T20205] ? proc_self_get_link+0x1a9/0x230 [ 1173.484870][T20205] ? proc_self_get_link+0x1a9/0x230 [ 1173.484908][T20205] proc_self_get_link+0x1a9/0x230 [ 1173.484947][T20205] ? __pfx_proc_self_get_link+0x10/0x10 [ 1173.484985][T20205] step_into+0x189e/0x21a0 [ 1173.485029][T20205] ? __pfx_step_into+0x10/0x10 [ 1173.485064][T20205] ? lookup_fast+0x156/0x610 [ 1173.485098][T20205] walk_component+0xfc/0x5b0 [ 1173.485131][T20205] link_path_walk+0x627/0xe20 [ 1173.485173][T20205] path_openat+0x1b0/0x2cb0 [ 1173.485217][T20205] ? __pfx_path_openat+0x10/0x10 [ 1173.485254][T20205] ? __lock_acquire+0xb8a/0x1c90 [ 1173.485282][T20205] do_filp_open+0x20b/0x470 [ 1173.485317][T20205] ? __pfx_do_filp_open+0x10/0x10 [ 1173.485373][T20205] ? alloc_fd+0x471/0x7d0 [ 1173.485413][T20205] do_sys_openat2+0x11b/0x1d0 [ 1173.485440][T20205] ? __pfx_do_sys_openat2+0x10/0x10 [ 1173.485479][T20205] __x64_sys_openat+0x174/0x210 [ 1173.485514][T20205] ? __pfx___x64_sys_openat+0x10/0x10 [ 1173.485555][T20205] do_syscall_64+0xcd/0xfa0 [ 1173.485594][T20205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.485620][T20205] RIP: 0033:0x7f04b898eec9 [ 1173.485639][T20205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1173.485663][T20205] RSP: 002b:00007f04b9885038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1173.485685][T20205] RAX: ffffffffffffffda RBX: 00007f04b8be6090 RCX: 00007f04b898eec9 [ 1173.485701][T20205] RDX: 0000000000109480 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1173.485717][T20205] RBP: 00007f04b8a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1173.485732][T20205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1173.485747][T20205] R13: 00007f04b8be6128 R14: 00007f04b8be6090 R15: 00007fffb2e3bd68 [ 1173.485779][T20205] [ 1174.234784][T13960] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1174.722646][ T5148] Bluetooth: hci7: command tx timeout [ 1174.788222][T19946] veth0_macvtap: entered promiscuous mode [ 1175.248567][T19946] veth1_macvtap: entered promiscuous mode [ 1176.777403][T13960] bridge_slave_1: left allmulticast mode [ 1176.789317][ T5148] Bluetooth: hci7: command tx timeout [ 1176.794832][T13960] bridge_slave_1: left promiscuous mode [ 1176.820409][T13960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.886616][T13960] bridge_slave_0: left allmulticast mode [ 1176.909586][T13960] bridge_slave_0: left promiscuous mode [ 1176.925811][T13960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.531121][T13960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1177.558601][T13960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1177.612441][T13960] bond0 (unregistering): Released all slaves [ 1177.637509][T19946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1177.663305][T20193] chnl_net:caif_netlink_parms(): no params data found [ 1177.741115][T19946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1177.863093][T13223] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.884240][T13223] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.893219][T13223] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.062074][T13223] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1178.134994][T13223] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 5 with max blocks 3 with error 117 [ 1178.256714][T13223] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1178.256714][T13223] [ 1178.394296][T20271] netlink: 326 bytes leftover after parsing attributes in process `syz.5.2518'. [ 1178.462758][T20273] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1178.575196][T13960] hsr_slave_0: left promiscuous mode [ 1178.603212][T13960] hsr_slave_1: left promiscuous mode [ 1178.642616][T13960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1178.679017][T13960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1178.722414][T13960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1178.766228][T13960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1178.861354][T19776] Bluetooth: hci7: command tx timeout [ 1178.940117][T13960] veth1_macvtap: left promiscuous mode [ 1178.945680][T13960] veth0_macvtap: left promiscuous mode [ 1179.009169][T13960] veth1_vlan: left promiscuous mode [ 1179.014557][T13960] veth0_vlan: left promiscuous mode [ 1180.934642][T19776] Bluetooth: hci7: command tx timeout [ 1181.423807][T13960] team0 (unregistering): Port device team_slave_1 removed [ 1181.612244][T13960] team0 (unregistering): Port device team_slave_0 removed [ 1183.238141][T20173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.252069][T20193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.298094][T20173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.334084][T20193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.363695][T20193] bridge_slave_0: entered allmulticast mode [ 1183.424077][T20193] bridge_slave_0: entered promiscuous mode [ 1183.478949][T20193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.516020][T20193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.564683][T20193] bridge_slave_1: entered allmulticast mode [ 1183.603240][T20193] bridge_slave_1: entered promiscuous mode [ 1183.890988][T20193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1183.997721][T20193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1184.527321][T20193] team0: Port device team_slave_0 added [ 1184.562240][T13962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1184.593624][T13962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.614521][T20193] team0: Port device team_slave_1 added [ 1185.096680][T20193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1185.124809][T20193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1185.178886][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1185.196542][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1185.336146][T20193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1185.407969][T20193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1185.455110][T20193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1185.684202][T20193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1186.446285][T20193] hsr_slave_0: entered promiscuous mode [ 1186.463176][T20193] hsr_slave_1: entered promiscuous mode [ 1186.501285][T20193] debugfs: 'hsr0' already exists in 'hsr' [ 1186.533679][T20193] Cannot create hsr debugfs directory [ 1187.412066][T19776] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 1187.412457][T19776] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 1187.420117][T19776] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 1187.434068][T19776] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 1187.441802][T19776] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 1187.450214][T19776] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 1187.462961][T19776] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 1187.470503][T19776] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 1187.480094][T19776] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 1187.487487][T19776] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 1188.837491][T20413] random: crng reseeded on system resumption [ 1188.861500][T20193] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.232290][T20193] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.464207][T20193] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.706105][T20193] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.885409][T20442] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1191.868648][T20193] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1192.092319][T20193] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1192.134414][T20193] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1192.292516][T20193] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1193.112390][T20193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1193.249082][T20193] 8021q: adding VLAN 0 to HW filter on device team0 [ 1193.368913][T13962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.376087][T13962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1193.518446][T13962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.525636][T13962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1193.572404][T20480] ALSA: mixer_oss: invalid OSS volume '' [ 1193.814722][T20193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1193.918725][T20193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1194.504769][T20500] FAULT_INJECTION: forcing a failure. [ 1194.504769][T20500] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.586617][T20500] CPU: 0 UID: 0 PID: 20500 Comm: syz.5.2539 Tainted: G U syzkaller #0 PREEMPT(full) [ 1194.586661][T20500] Tainted: [U]=USER [ 1194.586669][T20500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1194.586683][T20500] Call Trace: [ 1194.586691][T20500] [ 1194.586700][T20500] dump_stack_lvl+0x16c/0x1f0 [ 1194.586741][T20500] should_fail_ex+0x512/0x640 [ 1194.586780][T20500] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1194.586816][T20500] should_failslab+0xc2/0x120 [ 1194.586840][T20500] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1194.586872][T20500] ? prepare_creds+0x2c/0x7d0 [ 1194.586905][T20500] ? prepare_creds+0x2c/0x7d0 [ 1194.586931][T20500] prepare_creds+0x2c/0x7d0 [ 1194.586961][T20500] __sys_setreuid+0x101/0xaf0 [ 1194.586995][T20500] ? rcu_is_watching+0x12/0xc0 [ 1194.587032][T20500] do_syscall_64+0xcd/0xfa0 [ 1194.587070][T20500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.587095][T20500] RIP: 0033:0x7f367c58eec9 [ 1194.587113][T20500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1194.587138][T20500] RSP: 002b:00007f367d421038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 1194.587161][T20500] RAX: ffffffffffffffda RBX: 00007f367c7e5fa0 RCX: 00007f367c58eec9 [ 1194.587177][T20500] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffffffffffff [ 1194.587192][T20500] RBP: 00007f367c611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1194.587207][T20500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1194.587222][T20500] R13: 00007f367c7e6038 R14: 00007f367c7e5fa0 R15: 00007ffc3849b468 [ 1194.587253][T20500] [ 1195.250847][T19776] bt_warn_ratelimited: 23 callbacks suppressed [ 1195.250967][T19776] Bluetooth: hci8: unexpected event 0x06 length: 440 > 3 [ 1195.280100][T20193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1195.605545][T20488] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1195.680182][T20488] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1195.742982][T20488] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1195.828698][T20488] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1195.897717][T20488] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1195.992127][T20488] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1196.069061][T20488] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1196.095717][T20488] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1196.217538][T20488] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1196.313747][T20488] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1196.358729][T20488] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1196.374961][T19776] Bluetooth: hci3: command 0x0406 tx timeout [ 1196.417754][T20193] veth0_vlan: entered promiscuous mode [ 1196.464015][T20193] veth1_vlan: entered promiscuous mode [ 1196.481988][T20488] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1196.550234][T20488] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1196.597923][T20193] veth0_macvtap: entered promiscuous mode [ 1196.626100][T20488] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1196.664344][T20193] veth1_macvtap: entered promiscuous mode [ 1196.737286][T20488] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1196.758262][T20193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1196.827349][T20193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1196.892068][T20498] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1196.913964][T20509] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1196.937938][T13960] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.142383][T13960] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.213699][T13960] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.403319][T13960] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.727256][T19776] Bluetooth: hci6: command 0x0406 tx timeout [ 1197.801053][T19776] Bluetooth: hci1: command 0x0c1a tx timeout [ 1197.881198][T19776] Bluetooth: hci0: command 0x041b tx timeout [ 1197.900940][T13962] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.908783][T13962] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.965484][T19776] Bluetooth: hci4: command 0x0c1a tx timeout [ 1198.043294][T19776] Bluetooth: hci5: command 0x0419 tx timeout [ 1198.118983][T19776] Bluetooth: hci8: command 0x0c1a tx timeout [ 1198.360681][T19776] Bluetooth: hci2: command 0x0c1a tx timeout [ 1198.506456][T15630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.514321][T15630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.601521][T19776] Bluetooth: hci7: command 0x0c1a tx timeout [ 1200.190561][T19776] Bluetooth: hci8: command 0x0c1a tx timeout [ 1200.463253][T19776] Bluetooth: hci2: command 0x0c1a tx timeout [ 1200.664987][T19776] Bluetooth: hci7: command 0x0c1a tx timeout [ 1201.331481][T20619] input: f¬ as /devices/virtual/input/input37 [ 1202.256995][T19776] Bluetooth: hci8: command 0x0c1a tx timeout [ 1202.337092][ T31] INFO: task syz.9.2273:18376 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1202.387860][ T31] Tainted: G U syzkaller #0 [ 1202.457149][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1202.501015][T19776] Bluetooth: hci2: command 0x0c1a tx timeout [ 1202.535261][T20642] dlm: non-version read from control device 0 [ 1202.551046][ T31] task:syz.9.2273 state:D stack:27256 pid:18376 tgid:18367 ppid:17980 task_flags:0x400140 flags:0x00080002 [ 1202.647570][ T31] Call Trace: [ 1202.682292][ T31] [ 1202.724180][ T31] __schedule+0x1190/0x5de0 [ 1202.735843][T19776] Bluetooth: hci7: command 0x0c1a tx timeout [ 1202.774445][ T31] ? __lock_acquire+0x622/0x1c90 [ 1202.779453][ T31] ? __pfx___schedule+0x10/0x10 [ 1202.842659][ T31] ? find_held_lock+0x2b/0x80 [ 1202.925745][ T31] ? schedule+0x2d7/0x3a0 [ 1202.930168][ T31] ? expkey_flush+0x20/0x90 [ 1203.032845][ T31] schedule+0xe7/0x3a0 [ 1203.037001][ T31] schedule_preempt_disabled+0x13/0x30 [ 1203.133400][ T31] __mutex_lock+0x818/0x1060 [ 1203.138065][ T31] ? expkey_flush+0x20/0x90 [ 1203.201058][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1203.251526][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 1203.257065][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1203.331844][ T31] ? __pfx_cache_clean+0x10/0x10 [ 1203.371232][ T31] ? __pfx___might_resched+0x10/0x10 [ 1203.376582][ T31] ? __pfx_expkey_flush+0x10/0x10 [ 1203.434914][ T31] ? expkey_flush+0x20/0x90 [ 1203.439469][ T31] expkey_flush+0x20/0x90 [ 1203.500164][ T31] write_flush.constprop.0+0x2af/0x3d0 [ 1203.505685][ T31] ? __pfx_write_flush.constprop.0+0x10/0x10 [ 1203.582723][ T31] ? iovec_from_user+0xbb/0x140 [ 1203.587651][ T31] ? __pfx_write_flush_procfs+0x10/0x10 [ 1203.656890][ T31] proc_reg_write+0x240/0x330 [ 1203.699816][ T31] ? __pfx_proc_reg_write+0x10/0x10 [ 1203.705068][ T31] vfs_writev+0x5df/0xde0 [ 1203.748874][ T31] ? __pfx_vfs_writev+0x10/0x10 [ 1203.778737][ T31] ? __mutex_lock+0x1c5/0x1060 [ 1203.783583][ T31] ? kmem_cache_free+0x2d4/0x6c0 [ 1203.788545][ T31] ? putname+0x154/0x1a0 [ 1203.854362][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1203.878891][ T31] ? __fget_files+0x20e/0x3c0 [ 1203.883683][ T31] ? do_writev+0x132/0x340 [ 1203.930028][ T31] do_writev+0x132/0x340 [ 1203.948103][ T31] ? __pfx_do_writev+0x10/0x10 [ 1203.952922][ T31] ? syscall_user_dispatch+0x78/0x140 [ 1203.998480][ T31] do_syscall_64+0xcd/0xfa0 [ 1204.003059][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.058342][ T31] RIP: 0033:0x7f2e34f8eec9 [ 1204.062801][ T31] RSP: 002b:00007f2e35dbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1204.126926][ T31] RAX: ffffffffffffffda RBX: 00007f2e351e6180 RCX: 00007f2e34f8eec9 [ 1204.134964][ T31] RDX: 000000000000000a RSI: 0000200000000200 RDI: 0000000000000006 [ 1204.196533][ T31] RBP: 00007f2e35011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1204.256206][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1204.296018][ T31] R13: 00007f2e351e6218 R14: 00007f2e351e6180 R15: 00007ffd1b421da8 [ 1204.326166][ T31] [ 1204.329393][ T31] INFO: task syz.7.2303:18555 blocked for more than 145 seconds. [ 1204.475371][ T31] Tainted: G U syzkaller #0 [ 1204.481909][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1204.537727][ T31] task:syz.7.2303 state:D stack:27672 pid:18555 tgid:18554 ppid:9917 task_flags:0x400140 flags:0x00080002 [ 1204.604423][ T31] Call Trace: [ 1204.608496][ T31] [ 1204.611449][ T31] __schedule+0x1190/0x5de0 [ 1204.628693][ T31] ? check_path.constprop.0+0x24/0x50 [ 1204.634127][ T31] ? __lock_acquire+0x622/0x1c90 [ 1204.656216][ T31] ? __pfx___schedule+0x10/0x10 [ 1204.679743][ T31] ? find_held_lock+0x2b/0x80 [ 1204.701371][ T31] ? schedule+0x2d7/0x3a0 [ 1204.705975][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1204.724167][ T31] schedule+0xe7/0x3a0 [ 1204.728280][ T31] schedule_preempt_disabled+0x13/0x30 [ 1204.742832][ T31] __mutex_lock+0x818/0x1060 [ 1204.756502][ T31] ? ____sys_sendmsg+0xa98/0xc70 [ 1204.774635][ T31] ? ___sys_sendmsg+0x134/0x1d0 [ 1204.779535][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1204.793454][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1204.798531][ T31] ? __asan_memset+0x23/0x50 [ 1204.803139][ T31] ? __nla_validate_parse+0x600/0x2880 [ 1204.833285][ T31] ? nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1204.839143][ T31] nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1204.854420][ T31] ? rcu_is_watching+0x12/0xc0 [ 1204.859233][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1204.888278][ T31] ? __nla_parse+0x40/0x60 [ 1204.892750][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1204.912807][ T31] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1204.920968][ T31] genl_family_rcv_msg_doit+0x209/0x2f0 [ 1204.940789][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1204.963203][ T31] ? rcu_is_watching+0x12/0xc0 [ 1204.968037][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1204.982474][ T31] ? security_capable+0x7e/0x260 [ 1204.987459][ T31] genl_rcv_msg+0x55c/0x800 [ 1204.991980][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1205.015539][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 1205.021773][ T31] netlink_rcv_skb+0x158/0x420 [ 1205.052112][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1205.061669][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1205.072428][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1205.091879][ T31] genl_rcv+0x28/0x40 [ 1205.095907][ T31] netlink_unicast+0x5aa/0x870 [ 1205.100702][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1205.121807][ T31] ? __pfx___might_resched+0x10/0x10 [ 1205.127160][ T31] netlink_sendmsg+0x8c8/0xdd0 [ 1205.142559][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1205.147914][ T31] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 1205.171428][ T31] ____sys_sendmsg+0xa98/0xc70 [ 1205.176246][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 1205.194963][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1205.200314][ T31] ___sys_sendmsg+0x134/0x1d0 [ 1205.221380][ T31] ? futex_private_hash_put+0x176/0x300 [ 1205.226988][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1205.246689][ T31] ? __lock_acquire+0x622/0x1c90 [ 1205.262847][ T31] __sys_sendmsg+0x16d/0x220 [ 1205.271081][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1205.276233][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 1205.303757][ T31] do_syscall_64+0xcd/0xfa0 [ 1205.308317][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.324429][ T31] RIP: 0033:0x7f7a2238eec9 [ 1205.328889][ T31] RSP: 002b:00007f7a232ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1205.349583][ T31] RAX: ffffffffffffffda RBX: 00007f7a225e5fa0 RCX: 00007f7a2238eec9 [ 1205.374526][ T31] RDX: 0000000000044000 RSI: 0000200000000f00 RDI: 0000000000000025 [ 1205.390821][ T31] RBP: 00007f7a22411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1205.398837][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1205.433099][ T31] R13: 00007f7a225e6038 R14: 00007f7a225e5fa0 R15: 00007ffd5cebcae8 [ 1205.450018][ T31] [ 1205.509756][ T31] [ 1205.509756][ T31] Showing all locks held in the system: [ 1205.517503][ T31] 1 lock held by pool_workqueue_/3: [ 1205.728739][ T31] #0: ffffffff8e3cf878 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1205.808186][ T31] 1 lock held by khungtaskd/31: [ 1205.813102][ T31] #0: ffffffff8e3c42e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1205.928059][ T31] 2 locks held by kworker/0:6/10135: [ 1205.969110][ T31] #0: ffff88813ff19948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1206.056853][ T31] #1: ffffc90002ed7d00 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1206.066618][ T31] 2 locks held by getty/14085: [ 1206.178665][ T31] #0: ffff88814dcd00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1206.246913][ T31] #1: ffffc9000458b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1206.316378][ T31] 3 locks held by kworker/0:0/16238: [ 1206.321790][ T31] 2 locks held by syz.8.2099/17361: [ 1206.410921][ T31] #0: ffffffff901a2390 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1206.474973][ T31] #1: ffffffff8e7ecdc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1206.564229][ T31] 2 locks held by syz-executor/18355: [ 1206.569653][ T31] #0: ffff88802acb00e0 (&type->s_umount_key#54){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1206.659133][ T31] #1: ffffffff8e7ecdc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1206.695295][ T31] 3 locks held by syz.9.2273/18376: [ 1206.700531][ T31] #0: ffff88807702e0f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 1206.773162][ T31] #1: ffff88807a398420 (sb_writers#3){.+.+}-{0:0}, at: do_writev+0x132/0x340 [ 1206.782126][ T31] #2: ffffffff8e7ecdc8 (nfsd_mutex){+.+.}-{4:4}, at: expkey_flush+0x20/0x90 [ 1206.833135][ T31] 2 locks held by syz.7.2303/18555: [ 1206.838374][ T31] #0: ffffffff901a2390 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1206.883714][ T31] #1: ffffffff8e7ecdc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b10 [ 1206.932351][ T31] 2 locks held by syz-executor/18819: [ 1206.937784][ T31] #0: ffff88806160e0e0 (&type->s_umount_key#54){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1206.982060][ T31] #1: ffffffff8e7ecdc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1207.022305][ T31] 2 locks held by syz.6.2468/19753: [ 1207.027541][ T31] #0: ffff88807e92c0e0 (&type->s_umount_key#54){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1207.077568][ T31] #1: ffffffff8e7ecdc8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1207.119577][ T31] 3 locks held by kworker/u8:0/20170: [ 1207.131425][ T31] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1207.171059][ T31] #1: ffffc900047dfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1207.213898][ T31] #2: ffffffff900fea48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1207.250671][ T31] 1 lock held by syz.4.2538/20493: [ 1207.255821][ T31] #0: ffffffff900fea48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1207.300100][ T31] 1 lock held by syz.8.2547/20601: [ 1207.320304][ T31] #0: ffffffff900fea48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1207.329343][ T31] 2 locks held by syz.5.2552/20635: [ 1207.358605][ T31] #0: ffffffff900fea48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1207.393342][ T31] #1: ffffffff8e3cf878 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1207.449659][ T31] 1 lock held by syz.3.2554/20640: [ 1207.455127][ T31] #0: ffffffff900fea48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1207.490125][ T31] 4 locks held by sed/20685: [ 1207.612337][ T31] [ 1207.614708][ T31] ============================================= [ 1207.614708][ T31] [ 1207.674276][ T31] NMI backtrace for cpu 0 [ 1207.674298][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U syzkaller #0 PREEMPT(full) [ 1207.674330][ T31] Tainted: [U]=USER [ 1207.674338][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1207.674352][ T31] Call Trace: [ 1207.674359][ T31] [ 1207.674368][ T31] dump_stack_lvl+0x116/0x1f0 [ 1207.674412][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1207.674435][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1207.674469][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1207.674495][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1207.674524][ T31] watchdog+0xf3f/0x1170 [ 1207.674557][ T31] ? rcu_is_watching+0x12/0xc0 [ 1207.674590][ T31] ? __pfx_watchdog+0x10/0x10 [ 1207.674617][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1207.674652][ T31] ? __kthread_parkme+0x19e/0x250 [ 1207.674689][ T31] ? __pfx_watchdog+0x10/0x10 [ 1207.674717][ T31] kthread+0x3c5/0x780 [ 1207.674742][ T31] ? __pfx_kthread+0x10/0x10 [ 1207.674769][ T31] ? rcu_is_watching+0x12/0xc0 [ 1207.674800][ T31] ? __pfx_kthread+0x10/0x10 [ 1207.674826][ T31] ret_from_fork+0x675/0x7d0 [ 1207.674850][ T31] ? __pfx_kthread+0x10/0x10 [ 1207.674875][ T31] ret_from_fork_asm+0x1a/0x30 [ 1207.674912][ T31] [ 1207.674927][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1207.807407][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U syzkaller #0 PREEMPT(full) [ 1207.818091][ T31] Tainted: [U]=USER [ 1207.821893][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1207.831951][ T31] Call Trace: [ 1207.835231][ T31] [ 1207.838165][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1207.842780][ T31] vpanic+0x640/0x6f0 [ 1207.846777][ T31] panic+0xca/0xd0 [ 1207.850506][ T31] ? __pfx_panic+0x10/0x10 [ 1207.854929][ T31] ? nmi_backtrace_stall_check+0x6e/0x540 [ 1207.860682][ T31] ? irq_work_queue+0xce/0x100 [ 1207.865463][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1207.871461][ T31] ? __wake_up_klogd.part.0+0x99/0xf0 [ 1207.876842][ T31] ? watchdog+0xe48/0x1170 [ 1207.881291][ T31] ? watchdog+0xe3b/0x1170 [ 1207.885738][ T31] watchdog+0xe59/0x1170 [ 1207.890000][ T31] ? rcu_is_watching+0x12/0xc0 [ 1207.894777][ T31] ? __pfx_watchdog+0x10/0x10 [ 1207.899467][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1207.904692][ T31] ? __kthread_parkme+0x19e/0x250 [ 1207.909736][ T31] ? __pfx_watchdog+0x10/0x10 [ 1207.914428][ T31] kthread+0x3c5/0x780 [ 1207.918508][ T31] ? __pfx_kthread+0x10/0x10 [ 1207.923112][ T31] ? rcu_is_watching+0x12/0xc0 [ 1207.927895][ T31] ? __pfx_kthread+0x10/0x10 [ 1207.932499][ T31] ret_from_fork+0x675/0x7d0 [ 1207.937102][ T31] ? __pfx_kthread+0x10/0x10 [ 1207.941701][ T31] ret_from_fork_asm+0x1a/0x30 [ 1207.946484][ T31] [ 1207.949589][ T31] Kernel Offset: disabled [ 1207.953917][ T31] Rebooting in 86400 seconds..