last executing test programs: 6m26.272805393s ago: executing program 32 (id=1395): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, 0x0, 0xa80, 0x0) read$auto_severities_coverage_fops_severity(r0, 0x0, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video8\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000100)='\x00\x00\x00\x00\x00\xf2\x1e\xadp@f\x1b\xd9\xfb\xfa?$B\xcer\xec\xb2!\xdb\xd1\xcaA\b6q\xf6\x17[\xac;\xe9\xe5\fp\xef\xec\x1a\vt\xae\x86l\xb5k{\x0f\x9e\na\x02v\xe8/\xe1t\xcd\x9aT\xee\xbb\xb1\x04o\x8e\x13\'b\xc5\xf5\x03\x98\f:\x92T(i2U\x84\xbbW\']~\x8b,\x96\x12\xbb4\xfa\xb3X\x17u\xc2\xa8\x01\x92\xf3\xef^\x16w6\xc8\xb6\xe0Y\x01v\xb8\xe1\xcc\xb8d\x98\xdd4\x0f\x9f9c\xa5\xb9\x8d$&H\'\x9e\x80\xa0', 0x100000001) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x9, 0x3, 0x5) prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) munlock$auto(0xf, 0x6) gettid() r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSMRRU(r2, 0x4004743b, 0x0) ioperm$auto(0x40000000000003, 0x3, 0x147) r3 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_clock\x00', 0x101001, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) write$auto_trace_clock_fops_trace(r3, 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) r5 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/snd/pcmC1D0p\x00', 0x80000, 0x0) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR32(r5, 0xc0844123, &(0x7f0000000000)={0x3, @status={0xe93f, 0x0, 0x3, 0x4, 0x1, 0x2df, 0x7ff, 0xccf6}, @reserved="9d92f5c7f63e1053e7ca4e6b87cf17e2e0a0810a15882ffcb924e8313e01a3be43889309f30d430100000000000080d7a49a1d43cf93c72f0bad22eb7800"}) 2m56.186449607s ago: executing program 0 (id=2225): sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000802) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) mmap$auto(0xfffffffffffffffe, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7fffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ram12\x00', 0x0, 0x0) getpid() socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) read$auto(0x4, 0x0, 0xfdef) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r2, &(0x7f000000ca40)={0x0, 0x0, &(0x7f000000ca00)={&(0x7f0000000900)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x4) seccomp$auto(0x1, 0x9, &(0x7f0000000140)="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") r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYRES8, @ANYRES64, @ANYRES16, @ANYRES32=r2], 0x1f8}, 0x1, 0x0, 0x0, 0x40051}, 0x20000000) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x88e, 0xb8, 0x100000000, 0x5, 0x1b, 0x93c, 0x1ffdc, 0x7, 0x2000000000000006, 0x3, 0x9, 0x8, 0x2, 0x8001, 0xae, 0x5, 0x922, 0x7, 0x8005, 0x5, 0x3, 0xfffffffe, 0xfffffffc, 0x1fd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, [0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x15a6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x4, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x400, 0x7ffffffffffffffc, 0x0, 0x10, 0x0, 0x0, 0x7]}, 0x8, 0x83) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000040)=':\'*&\x04!\x00', 0x2001, 0x27) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) 2m53.544392998s ago: executing program 0 (id=2233): mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x2) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000140)='0[.[\x00', 0xcd04) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory0/state\x00', 0x1e1842, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r2 = socket(0x2, 0x80002, 0x73) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x100842, 0x0) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000003c0)={{0x0, 0x6, 0x220800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_START_OLD(r4, 0x5420, 0x0) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto(0x3, 0x9, 0x7b, 0x0, 0x2) mmap$auto(0x3ff, 0x1, 0x800, 0x12, r3, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x10000000008000) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) socket(0x29, 0x2, 0x7721c81f) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x1a6b75d63882a712, 0x0) close_range$auto(0x2, r2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80800, 0x0) acct$auto(&(0x7f0000000100)='/dev/psaux\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x1e8083, 0x0) sendfile$auto(r6, r5, &(0x7f0000000040)=0x91, 0xc3dd) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) sendfile$auto(r1, r1, 0x0, 0xe00000700) 2m48.792620862s ago: executing program 0 (id=2248): write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) request_key$auto_KEY_SPEC_GROUP_KEYRING(&(0x7f0000000480)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', &(0x7f0000000040)='\xaf\x00', &(0x7f0000000200)='[\x00', 0xfffffffffffffffa) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x40000000000008, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x3, 0x16) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) close_range$auto(0x0, 0xfffffffffffff000, 0x0) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r4, 0x40046109, &(0x7f0000002c40)=0xd0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000400)={"f8ab071a", 0x5, 0x4, 0x3, 0x81, 0xaf06, "c27dd21e130257a235608f35b9ff46", "72d15067", "b8919662", "17aba429", ["74ea2a52b5d44affc0a38054", "f97aba2b29705640cf05bf58", "cf66ac3036b01605f0aad490", "e6c21d2bda70d054d9ad103c"]}) mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_ptr=0x0, @inferred=r4, 0x0, @_sigev_thread={0x0, 0x0}}) mq_timedsend$auto(r1, 0x0, 0x2, 0x9, 0x0) 2m44.228203039s ago: executing program 4 (id=2259): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = socket(0x1d, 0x1, 0x7fff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) r3 = socket(0x18, 0x5, 0x1) syz_genetlink_get_family_id$auto_smbd_genl(0x0, r0) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r3, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b47, 0x1) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bus/usb/037/001\x00', 0x40001, 0x0) mmap$auto(0x0, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USBDEVFS_CONTROL(r5, 0xc0185500, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x4c440, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_EPCS_CFG(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000a00)={0x40c, r7, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_FILS_KEK={0x44, 0xf2, "a34a1ba637f5ecbb4e0184539ae27954452ee9feeac160d3b584d8037bc616d3e21720390321168a85660cc6c4424eddac20ee510785a703b5b18b3b573559a8"}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3b1}, @NL80211_ATTR_CQM={0x3a3, 0x5e, 0x0, 0x1, [@typed={0x8, 0x77, 0x0, 0x0, @u32=0x6}, @generic="1a6892324da913486d0e045f2c73b031eed28e04700f4ecd26a1b10a29128eb482f9fa61b3c0b88efeff5d123129bcd1f2019f514fe90e412ad1b2ed12c232e1b6ae81037db9554166902c3de10f82a569668631da7cc8513d052dfb48a3b974c58139169e53c27d571caefcb04504ce48741b0c64e156e22a9c6a0ec5b03f4f68810b1b401ccb6c8a5e67f21b7d0cea7e239af5d76c2d019a83b3e5c5d4556cc08f8538eebfa189214f53009417028ec23305446ce372b0b8ba5a24fee0526577f1877320d26847931d6aea203abc646add90c7d2cfd287db609e2575477cbd68e5ed128bcc2cd9b30e05875202831b72bf", @typed={0x7, 0x82, 0x0, 0x0, @str='-%\x00'}, @generic="feabf6fec1a3b2b53ab6726df9b3c894003a04d6c24b4de2a2743f323c137f823b361643f32d37610fbe10800902d553f3607927b68f5df87812d0424722ba99bb02289e5cb07de03c719a414ae50b8496f6b33dda570a5d8dbe1687094cfa490132ce6e8d1c5d70fd2b2a7d3c38402975f4dcad8eeb16a60c0570ab4c2dbc50ee0a8ccffe8300a6f880c5d09d", @typed={0xc, 0xd1, 0x0, 0x0, @u64=0xffff}, @nested={0x4b, 0x14e, 0x0, 0x1, [@typed={0x14, 0x59, 0x0, 0x0, @ipv6=@empty}, @generic="cedbbbc963a73883f573092a94ce599baa7f17", @generic="6e12282e38b27cc9ca9cd80817ba85eaacaf495b63ea5440", @nested={0x4, 0x3e}, @nested={0x4, 0x96}]}, @generic="3b30ef66d21287e5b190756e673e0268730e28269ea667561b5dad0107abcf5501beaeb1c0930debd06f65ead27f03859ffa3d77c82028247b237e65364d5e8d077afa91e88cd1a5d2ad78d0", @typed={0x4, 0x138}, @generic="f52327ed0b45dceb922f25d6d6739cfa0b5be0fd419e566b5edfea36ca374086872605695fdd18455d545ab98d578e02db1c4f01df39ae27fcfd7f26de667dad53ed60f5ced4eef72865cdea6e709c60a7cf1639a5c5b28eafc3a363384fa021d1f2d5656cc9442eda3f9d2046d2d5ee0439b969e436daa6c6c03444ada3cd7a1a4ab5bf6648ee37", @nested={0xdf, 0x3c, 0x0, 0x1, [@generic="3fc00133b13100a695ba5b51ecd4d82e3f0285cda50017e6c5428a2b3fe74e119fa0a7e0ee45335a4df92393d8525e3c24d87906b6657837", @nested={0x4, 0x123}, @generic="d31eda18aa2374f05ad20609ba6cfcea001876eec5b31460c8fb08dad767aa815eb7e4de1b3a767c92ce2fc41804059ce5dcb8f61e2654548dcbe5733beee8502ac46b395559afd2104f4f0d35a2ad147cdee9ed0b1d2ba0ffaedc94c758562a15a09c7c742712912a7a79ff7fbf7620c13e47643263fc736190c7b7ff2b62ad0eb06f1ae5b772cf2e165c329716c3deb82dffdca462c495fd7f80c17c12d5"]}]}]}, 0x40c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc155) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'pim6reg0\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'ipvlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'nr0\x00'}) 2m43.625835295s ago: executing program 1 (id=2260): openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth0_to_bond\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'pimreg1\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1_to_bond\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x1c, r3, 0xb01, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x240088e4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f00000007c0)={0x16c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_LINKINFO_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x800}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffff9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x400}]}, @ETHTOOL_A_LINKINFO_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xb0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6ea8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x48c44}, 0x40) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x208840, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0xa, 0x801, 0x6) mmap$auto(0x0, 0x2000a, 0x7e, 0xeb2, 0x401, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x29, 0x2, 0xa) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/oss\x00', 0xaa102, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0) 2m43.364084779s ago: executing program 0 (id=2261): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01f13075710000"], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) r2 = io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'hsr0\x00'}) write$auto(r2, &(0x7f0000000040)='/dev/i2c-0\x00', 0xfffffffffffffc00) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HSR_C_GET_NODE_STATUS(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@HSR_A_NODE_ADDR={0xa, 0x1, @local}, @HSR_A_NODE_ADDR={0xa, 0x1, @multicast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240008c5}, 0x4054) ioctl$auto_VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/sg/version\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r7) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r7, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x20, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x8}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x220008c1}, 0xc0) pread64$auto(r6, 0x0, 0xf42f, 0x7f) read$auto(r3, 0x0, 0x3ff) close_range$auto(0x2, 0x8, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) 2m43.099913701s ago: executing program 1 (id=2262): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) keyctl$auto(0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xa00002) pipe2$auto(&(0x7f0000000080), 0x9) r0 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x304, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@MACSEC_ATTR_OFFLOAD={0x25d, 0x9, 0x0, 0x1, [@generic="49676b779b2a77a76a060bcd388839c7617a6c0e91505ef4d22e19af93c01df84cf62f00fdf276ac90aa6a448119459bacf16021823ca082454feaf2980e3d4280983336206e0e2bcd304c93c4349168eb968d0f7bdb80a4ac8726e67ac74f5aa17c75abe2e53abed76b3df15090dd50617324cd40d35d04a56ea2cf92b49c748c7e870c12b8835b0c495387e462b728f45daaa02dd2ee3fd577a5796e864e6782b77adc00f13bf3c7d9aad4ecbe8c348b9ed0", @typed={0x16, 0x50, 0x0, 0x0, @str='/dev/input/event1\x00'}, @generic="a62f85abfccfb6b3610b017dbe9f76ac1ff1968b7e9f181348393c747a9fd06325fb950abba24db680a3c0823bc0c7cfd50a2c502a43861176e4e6718dc77fb2b7713b322767d55a85c18d7999a7982e84ae3023ea05e317f8f6742a24f851d6267668adcfab330438f4be7100d2d5a347548f2e5eee2ed1bb5f263d45cc51f008ae913029bbe7f7ee95d6369e3842262ce7ecba99656007d0a4b396d20624fca65a3e773ffdba6236a337b88ba86ea430b1fd2d09d6edb6e4849ceef933d721fffe5f8e51b9531e0cdfe12ae6cc3de9a63841aee0904c05cd9005c0a5c7e17e324798c2c401", @generic="d66561711abf9ea0da97e1ab7327e6f61b786c335d43254a5255802396c0308963a4a84c80ca1d66bcd13f74f54702835494b330e0ca6448d84216c7419810673a33efd44af8b6133ae64f33bf312909fa5a04f78cb135e45553f8ea12384db4b9777a2b791be159d44a0b3f8466e1a74d91adba10728326e55225e157128f7e1522acccc77bae19cd76133c2a3391fd2405f52f12a5bf12a602f92bf7789b3dc8a85afa713447c2"]}, @MACSEC_ATTR_OFFLOAD={0x8d, 0x9, 0x0, 0x1, [@nested={0xc, 0x8b, 0x0, 0x1, [@typed={0x6, 0xd6, 0x0, 0x0, @str=')\x00'}]}, @generic="984d5707fc7f308e4f1bb513c28243af784351615c4e5f795e1dedacf7d10672fb74558096367c9b4db543bcfed7f41fe8ab7cc4b41178e2d71cfda4d85eb1021f9dc3b8c4467cec90019d16824ff8c322f32875ccfef02230599283a0c2c81b93fcdaaab9ab48f25ed10e9d5387aebabb40b01f5fcfbceb6ab14beaf2"]}]}, 0x304}, 0x1, 0x0, 0x0, 0x40014}, 0x48845) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socketcall$auto(0x8000, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x3fffffffff, 0x3}, 0x6f4) bpf$auto(0x100000001, 0x0, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0xfffffffffffffe94, r0, 0x10, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x400, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) madvise$auto(0x991, 0xffffffffffff0085, 0xff) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x1, 0x7ff, 0x200000000fff, 0x3, 0x100000003) 2m42.701974065s ago: executing program 1 (id=2263): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3db) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1c, 0x1, 0x6, 0xee00, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x90001, 0x0) fdatasync$auto(r1) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYRES16=r2, @ANYBLOB="010031bd7000fddbdf250c000000"], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x0, 0x9, 0x9cad, 0x7ff, 0x3, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20002, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) 2m40.811168568s ago: executing program 4 (id=2265): r0 = openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000180), 0x48402, 0x0) (async) r1 = socket(0x2, 0x5, 0x0) getsockname$auto(r1, &(0x7f0000000000)=@ethernet={0x1, @broadcast}, &(0x7f00000000c0)=0x5) (async) semtimedop$auto(0xfffffffa, &(0x7f0000001000)={0x8000, 0x2, 0x1}, 0x4, &(0x7f0000001080)={0xd, 0x6}) (async) read$auto(r0, 0x0, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/pci/drivers/pata_sch/new_id\x00', 0x10000, 0x0) (async) r2 = socket(0x2, 0x80002, 0x73) io_uring_setup$auto(0x406, 0x0) (async) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c081}, 0x80) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000001040), 0x80, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) (async) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/set_event_pid\x00', 0x141000, 0x0) (async) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) prctl$auto(0x3a, 0x4, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) r4 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r4, 0x0, 0x80, 0x0, 0x0) setsockopt$auto(0x3, 0x6, 0xc, 0x0, 0xfb3) (async) prctl$auto(0x5, 0x6, 0x0, 0xb117, 0x9) (async) mmap$auto(0x200000000000, 0x810004, 0x40000000000ffb, 0x8000000008011, 0x3, 0x8000) 2m40.683023409s ago: executing program 4 (id=2266): ptrace$auto(0xf, 0x0, 0x1, 0x4053) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, 0x0, 0x20000084) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x6) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000180)={0x35, 0x0, 0x1}}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket(0x10, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/thermal/cooling_device1/cur_state\x00', 0x20b42, 0x0) sendfile$auto(r2, r2, 0x0, 0x4f64a1d5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0x2) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffff00, 0x8000}, "290000000000000000000000008000"}) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x444081, 0x0) r4 = socket(0x2, 0x3, 0x4) getsockopt$auto(r4, 0x84, 0x22, 0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) 2m39.510345237s ago: executing program 1 (id=2267): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto_TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$auto_TIOCVHANGUP(r0, 0x5437, 0x0) 2m39.473767763s ago: executing program 4 (id=2268): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) io_uring_setup$auto(0xf0, &(0x7f0000000180)={0x6, 0x18, 0xd64, 0xc852, 0x6, 0x7, r0, [0x1, 0x401, 0x1000], {0x7, 0x5, 0x1, 0x4, 0x95, 0xf4c, 0x7fff, 0xfffffffb, 0x65f29f6d}, {0x3, 0xadc, 0x10000, 0x0, 0x5, 0xffffffff, 0x1000, 0x54f, 0x5}}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680), 0x0) syz_clone3(0x0, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x9, 0x6, 0x3ff, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0x8f, 0x29f, 0x100, 0x83, 0x6, 0xc, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) syz_clone(0x1002000, 0x0, 0x0, 0x0, 0x0, 0x0) futex_wake$auto(0x0, 0x5, 0x4, 0xa) futex_wake$auto(&(0x7f0000000000)="facff2b53ab3522cb329b5a87bdbc091f5a6ad597f2789e870d64db4cf6503135f5a750abc973b65703b664991ab45d13445d9c4df1d25210345f44468854c9689b943d1c65073bf11fd0c98fb48f9f4d67c0908e7470167", 0xfffffffffffffff8, 0xfff, 0x7f) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/rds/tcp/rds_tcp_rcvbuf\x00', 0x141241, 0x0) 2m39.395734021s ago: executing program 1 (id=2269): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0xa, 0xa) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3d, 0x0, 0x8) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/ip6frag_high_thresh\x00', 0x189302, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x55, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x804) r1 = socket$nl_generic(0x10, 0x3, 0x10) open_tree_attr$auto(0xffffffffffffff9c, 0x0, 0x9, 0x0, 0x0) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x68, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x24, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_MAX_PEERS={0x8, 0x1, 0x387}, @NL80211_PMSR_ATTR_TYPE_CAPA={0x18, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_BURSTS_EXPONENT={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_REQ_CIVICLOC={0x4}]}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x1000, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) write$auto_proc_sys_file_operations_proc_sysctl(r0, &(0x7f0000000480)="f85bc801", 0x4) 2m39.26315427s ago: executing program 0 (id=2270): write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x40000000000008, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) getsockopt$auto_SO_SNDLOWAT(r0, 0x7, 0x13, &(0x7f0000000040)=' \'/\x00', &(0x7f0000000200)=0x2dae) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop8\x00', 0x14be42, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') getcwd$auto(0x0, 0xffffffffffffffff) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) open(&(0x7f0000000280)='./file0\x00', 0x200200, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 2m39.074121249s ago: executing program 1 (id=2271): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x31, 0x8000, 0x1ffde, 0x1, 0x2, 0x1, 0x9, 0x3, 0x5, 0x8, 0x3002, 0x9, 0xb, 0x80010002, 0x80, 0xd8f9, 0x0, 0x7, 0x2, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) r2 = socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) r5 = fsopen$auto(&(0x7f0000000040)='MAC80211_HWSIM\x00', 0x4) read$auto(r5, &(0x7f0000000080)='\'){\x00', 0xe) sendmsg$auto_HWSIM_CMD_REGISTER(r0, &(0x7f000000f540)={0x0, 0x0, &(0x7f000000f500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x24, r7, 0x1, 0x70bd2c, 0x25dfdc01, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xa}]}, 0x24}}, 0xc000) 2m35.433343146s ago: executing program 0 (id=2273): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x31, 0x8000, 0x1ffde, 0x1, 0x2, 0x1, 0x9, 0x3, 0x5, 0x8, 0x3002, 0x9, 0xb, 0x80010002, 0x80, 0xd8f9, 0x0, 0x7, 0x2, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000005c0), r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) r2 = socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) r5 = fsopen$auto(&(0x7f0000000040)='MAC80211_HWSIM\x00', 0x4) read$auto(r5, &(0x7f0000000080)='\'){\x00', 0xe) sendmsg$auto_HWSIM_CMD_REGISTER(r0, &(0x7f000000f540)={0x0, 0x0, &(0x7f000000f500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf250100000004001500a4011c80a0010580740100800c0004800800018004000180df000100afdc7501032ead425cb6bc5449270672589e41c7143874ab7289bd1b81928f814ae5eddf931ab83d3a46b9d66c1652b8c95727bad9dc3174df9ed8fb27281cb4c6058db6942eae1c67410a51acddc93f1716e6598bbcf04992698dd325754fda72d9d530edaaedb6e2d84cdf787acb9f86f44297443b97c85487aaf983d1bff22b88f9f983d83d9c79f93385703f54f80bc5415550c7dd5f4a248902a2edbd6f47bd3cca0056751444ae5ad8b9a3a881a6c2273e5ba24b059a9a0b667dde8055e8864b924e9f3caef029c8a4c5d844b630543084dd533f3b028333001a0001001e0977522ea81d3b0055f2b7f1ceaa4eadcf764dd33800000400048008000480040001804000010094efe4c4be782b9190c31f8c718b6b957b4d576213385a5fa1d546ea16475fcbc456863b070284b4815d4b3790e60d58076c6e5d00222e6e986181e51c0004800c00040000000000000000000c000300aa0000000000000028000080200001003569577ca8927bf93424e21c5d8e66ae6de2eaaac47f2fdba609602d04000480"], 0x1bc}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r6 = socket(0x10, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x24, r8, 0x1, 0x70bd2c, 0x25dfdc01, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xa}]}, 0x24}}, 0xc000) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0xfc, &(0x7f0000000100)={0x0, 0xfc6}, 0x2, 0x0, 0x7, 0x3}, 0x800}, 0x7, 0x4008) 2m34.981637457s ago: executing program 4 (id=2274): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x40080, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/kcore\x00', 0x10b402, 0x0) sendfile$auto(0xffffffffffffffff, 0x3, 0x0, 0x7ffff000) select$auto(0x5, 0x0, &(0x7f0000000140)={[0x9, 0x3, 0x3, 0x10, 0x3, 0x9, 0xa, 0xff, 0x3, 0x6, 0x2, 0x7, 0x100000001, 0x8000000000000001, 0x4, 0x80000000]}, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000340)='/proc/thread-self/loginuid\x00', 0x109000, 0x0) r0 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x12, r0, 0x0) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x40146f2c, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) writev$auto(r3, &(0x7f0000000200)={0x0, 0x3}, 0x3) openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0x109c00, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/rpc/nfsd.fh/content\x00', 0x52000, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80180, 0x0) 2m34.196964478s ago: executing program 4 (id=2276): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x31, 0x8000, 0x1ffde, 0x1, 0x2, 0x1, 0x9, 0x3, 0x5, 0x8, 0x3002, 0x9, 0xb, 0x80010002, 0x80, 0xd8f9, 0x0, 0x7, 0x2, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000005c0), r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) r2 = socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) r5 = fsopen$auto(&(0x7f0000000040)='MAC80211_HWSIM\x00', 0x4) read$auto(r5, &(0x7f0000000080)='\'){\x00', 0xe) sendmsg$auto_HWSIM_CMD_REGISTER(r0, &(0x7f000000f540)={0x0, 0x0, &(0x7f000000f500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x24, r7, 0x1, 0x70bd2c, 0x25dfdc01, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xa}]}, 0x24}}, 0xc000) 2m23.915365858s ago: executing program 33 (id=2271): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x31, 0x8000, 0x1ffde, 0x1, 0x2, 0x1, 0x9, 0x3, 0x5, 0x8, 0x3002, 0x9, 0xb, 0x80010002, 0x80, 0xd8f9, 0x0, 0x7, 0x2, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) r2 = socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) r5 = fsopen$auto(&(0x7f0000000040)='MAC80211_HWSIM\x00', 0x4) read$auto(r5, &(0x7f0000000080)='\'){\x00', 0xe) sendmsg$auto_HWSIM_CMD_REGISTER(r0, &(0x7f000000f540)={0x0, 0x0, &(0x7f000000f500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="bcc0419b81e6ec16bc63cabe78671f688a6da107597521229aef1c4782ab8abad19e23e190f5050c4c8bf2873a26f810f45b8a74155d1ae10bdb1e4de9acabf8f0b1a87e2853d88149b37bf0b88c3409a2e500f1b930ccf90903c0cd451b55dfb3d2e5e120527b608562401d3c4a0d8adeb99161626aafb766c6837c169847f10265fc7c553eb407c42f353b8768973ec80c12fff80ff9c1d3937fcd3eec947e013dd36e49f3652d6712fed736db4f42e16f91ec60bc96a8735d5600c4e64837a09f5ef331952a938b49367c834fd707f716f2599ebb9b8d209435ba77903cdae2ed2feb7d838e1afc4daaf5887fccae1021b8ed506738d83614183ee6de9b09f002904292014b8fe3f14c98c00521799762fb2611d65529a09ce82b1cb44ca9c157634ccdce1b082bd58b0e70efccce990a643e39c6febd8c5e3d68b6bbfe141f78", @ANYRES16=r1, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x24, r7, 0x1, 0x70bd2c, 0x25dfdc01, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xa}]}, 0x24}}, 0xc000) 2m19.922134731s ago: executing program 34 (id=2273): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x31, 0x8000, 0x1ffde, 0x1, 0x2, 0x1, 0x9, 0x3, 0x5, 0x8, 0x3002, 0x9, 0xb, 0x80010002, 0x80, 0xd8f9, 0x0, 0x7, 0x2, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000005c0), r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) r2 = socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) r5 = fsopen$auto(&(0x7f0000000040)='MAC80211_HWSIM\x00', 0x4) read$auto(r5, &(0x7f0000000080)='\'){\x00', 0xe) sendmsg$auto_HWSIM_CMD_REGISTER(r0, &(0x7f000000f540)={0x0, 0x0, &(0x7f000000f500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="bcc0419b81e6ec16bc63cabe78671f688a6da107597521229aef1c4782ab8abad19e23e190f5050c4c8bf2873a26f810f45b8a74155d1ae10bdb1e4de9acabf8f0b1a87e2853d88149b37bf0b88c3409a2e500f1b930ccf90903c0cd451b55dfb3d2e5e120527b608562401d3c4a0d8adeb99161626aafb766c6837c169847f10265fc7c553eb407c42f353b8768973ec80c12fff80ff9c1d3937fcd3eec947e013dd36e49f3652d6712fed736db4f42e16f91ec60bc96a8735d5600c4e64837a09f5ef331952a938b49367c834fd707f716f2599ebb9b8d209435ba77903cdae2ed2feb7d838e1afc4daaf5887fccae1021b8ed506738d83614183ee6de9b09f002904292014b8fe3f14c98c00521799762fb2611d65529a09ce82b1cb44ca9c157634ccdce1b082bd58b0e70efccce990a643e39c6febd8c5e3d68b6bbfe141f78", @ANYRES16=r1, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r6 = socket(0x10, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x24, r8, 0x1, 0x70bd2c, 0x25dfdc01, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xa}]}, 0x24}}, 0xc000) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0xfc, &(0x7f0000000100)={0x0, 0xfc6}, 0x2, 0x0, 0x7, 0x3}, 0x800}, 0x7, 0x4008) 2m18.913767844s ago: executing program 35 (id=2276): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x31, 0x8000, 0x1ffde, 0x1, 0x2, 0x1, 0x9, 0x3, 0x5, 0x8, 0x3002, 0x9, 0xb, 0x80010002, 0x80, 0xd8f9, 0x0, 0x7, 0x2, 0x203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000005c0), r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) r2 = socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r3, 0x4048aecb, 0x0) r5 = fsopen$auto(&(0x7f0000000040)='MAC80211_HWSIM\x00', 0x4) read$auto(r5, &(0x7f0000000080)='\'){\x00', 0xe) sendmsg$auto_HWSIM_CMD_REGISTER(r0, &(0x7f000000f540)={0x0, 0x0, &(0x7f000000f500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="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"], 0x1bc}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x24, r7, 0x1, 0x70bd2c, 0x25dfdc01, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0xa}]}, 0x24}}, 0xc000) 1m41.659431824s ago: executing program 7 (id=2390): write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x40000000000008, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mem\x00', 0x101181, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x6, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb1\x00', 0x5512c0, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000000)="c80d1b5d399b3b", 0xfdef) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_ptr=0x0, @inferred, 0x0, @_sigev_thread={0x0, 0x0}}) mq_timedsend$auto(r1, 0x0, 0x2, 0x9, 0x0) 1m39.274056392s ago: executing program 7 (id=2396): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/fail-nth\x00', 0xb41, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) bpf$auto(0xa69, 0x0, 0x4) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) 1m37.902392954s ago: executing program 7 (id=2401): r0 = semctl$auto(0x9e, 0x5, 0xffe00000, 0x2bca) r1 = ioctl$auto_TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, &(0x7f0000000000)=0x7) rt_sigqueueinfo$auto_SIGCONT(r0, 0x12, &(0x7f0000000040)={@siginfo_0_0={0x6, 0x1, 0xd, @_sigpoll={0x9, r1}}}) bind$auto(r2, &(0x7f00000000c0)=@l2={0x1f, 0x7f, @any, 0xfffc, 0x2}, 0x1755237a) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000100), 0x12100, 0x0) getsockopt$auto_SO_NOFCS(r2, 0x9, 0x2b, &(0x7f0000000140)='%&\\)}\x00', &(0x7f0000000180)=0x5) process_madvise$auto_MADV_KEEPONFORK(r1, &(0x7f0000000240)={&(0x7f00000001c0)="45c4b3820c144d5824e4a07f1abc529780d82cc8d7e3d9461308b515b587a6c7c47fa139dbed63757ecd493a26d7e51e44b99991917363a89d570d5429a485ad41bda935cfd0ac48e8abbff8fa04e685c2bed1625022c551d32e79b6f58e6f2550a7a8c3de592183a87637430475db9a33bcbe7cca87c1ebd4d1ea8bacd6", 0x4}, 0x5, 0x13, 0x5) write$auto(r2, &(0x7f0000000280)='/dev/mapper/control\x00', 0x7) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000300), r1) sendmsg$auto_TIPC_NL_LINK_SET(r1, &(0x7f00000018c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001880)={&(0x7f0000000340)={0x152c, r3, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1aa, 0x9, 0x0, 0x1, [@typed={0x8, 0x129, 0x0, 0x0, @u32=0x40}, @generic="8a2dd4f8eea3af918c541fe429f82ec050b4a16f5058c56819688c19803a92cd5d74eaf8ce03d9662985336dbbc480e4d7524f0c2d09bc85718af71119b37f08e74f1d22c4efede0d4f8ee3214ce888ba24cda0d51c4b182c779271baa4cf012efad", @generic="c4fa3ba7b9368d63636a0d564a01f049f7d8a190bc", @nested={0x56, 0x47, 0x0, 0x1, [@generic="3797a2b69a866b74330aac0a365baa141cb508fa7d858e26e202704c5da721f95f37c1234fdd0161a64f674764b2f14349754caee09a670c543b9991f1d3d4c5e9d0e6deee012b040f5e7b04e8c8d279e05c"]}, @generic="9623c77ea4ce7ce20ae4080dcbee30684410f9e0e3a186840fd66c901d29074d74168899056dbe7c11b3edc1c6d823fe08310fe81b4ce06087fb4db34e38c7be40c6594031dd3e850f592d88922085c77acfb102fd6bd286d8e4933ac0526827504fe3d9d45db1fd7017fe6e5babbfdac9d679ab6cc7061e80da52990e3bfe9f4eb181510fcfb54f1780968f967ae762b569bacefd104a8c4420684e118a2996eabe0158d48fc5a3cb04edefe8e13cd6fa0745dfc4ba79531a0f7b7bfdae8f2189e99252d1fada4c4ef8a36c70fb53"]}, @TIPC_NLA_BEARER={0x136b, 0x1, 0x0, 0x1, [@generic="bb8bf1aa25ccec350eb6cff3ecf4a5709a781845f9f6c94526044f407f17b392a6273af2ab2fc22fa5bb05ecea2a386f7b3cbfb545e22957e0129a98a218d78b3a5fd46cc9f99fbf1bf4f0e6e20a8597b89b1807cbdf6fff5a55d2cf2a2a915e3d", @nested={0x1046, 0x3c, 0x0, 0x1, [@generic="d290e47ceed51cbdd172be19277306edae7e0b233c70e540390410704ba7f4fdd6baa9e67395e46a5709a2d33a8cca3d42f5dfd8b71c", @nested={0x4, 0xb8}, @generic="cd1167a6b8f264f7ce0f0136f27f200e157f9aff1baffb21f583c72fb8f5df4d65ab49ee827e45ed17cf9653a7e1bdce60517577e6fafaef5503ee95fde77e6841fbe374692fc35daa148cde2ddf4c9ffdd0c01c938ba69fc973f887dbefb726b5c698645b594f9979c3253deee5ee67721aa902512c4432af917d7a213d06c93dc9f08d329b3663b0670f2246d44d8c3145b932ca714f39e382e6f64a3ad1ea7120f7bba7fa00666a5b384b95fbc8e12de8c6e766467b5496ee64c1fefe57480ecf560fcad5369c9a170c1e9a625d5d4af87b3eb11b8daf4a3a84917dfaee2d2178f30b273579b45ba0d4e177412ef64a0275888010f04750156443b0b45bea6a0a063f8b20d0bc41af147df35fc53ea51ac5b5df7fb1a4be274f33133004306743072c1fa17775f0a685c59b8b7bb732f9e50940eaa5963dfba96ab059de2de55ebfd123a5d4c3c6ceae5b5d0305ff439395f2af68cf110f2b669baee32f6420945f57977aed5c098341f698257bfc461e15aaee85f03a577a1bfacdb388b96c5f0992e38d023f39f57142349a9120d8b945ed3cc2bdc04d43bae11d21209b84d4b1292e1e4ab042bcd75298acf55ddb1c46c3a7dc09b7355e482cf0059541fa73e1bdb0ac6d7fa4d76e7b7490a57e82007b86d2fa7bf1a1870236570ade9a1c003d5e6708fba04ae3dd9d6808354d018d41ecabe7516da54283de670ff9c90e51cd54f7806b461a20408ed40ff244638cd3b071175c6cc47781a461704d9a5a63ec3774f8a724aaabd6ce3f366d7416a87c0c3d8fec1e6aee7d3f6f82ff119c9d50eeac142532617a3d9f4a8910fa735e11bda3d6b574ef28762dbf13add211aa3a4de4135f9d211161581acff145e4ba937b06929ce2dfd1b3faeb7773e1a78f0c972834720709edcec3db8a82e90ae2d7ef8cdd7d5742288b6e29b303d21cbc2dae1cff1f67d5d922e7c069c01e6b44f145b4d4be13233b44b34150d2ab237481a11df775837a5b9c3611df6d085ca37633e9f5de1d10215190b97a5ae348738eae21085e2c59b1aa490ba5960fdfd63208d0b742df2230d928d73af2a66df948e8e7ac4dbcc8dd8d18da2ff126b2d439339b72d502357ee13e8d2b570013b99c9e86a7b3f784d0961c07becd9893d6a19d5302a8f15e2f3c53c92d638eed09b4a442b64448bf3ed0f5819d7849131225d1fe9d5c7548c6beee53a6747b05799d9dde7392f62304a6698c855153edd66019cd96b71dc4704475881f005988ece7b31d7e078c8965964f85672fa6da8c994d82cecbb002b2587f1cb9b86847cab3fa9560a14426f083e8712fb24765b2aedc17eb112f933b74d0caefcde0b2cb9c88c0a231c8976531dcd8bc4c18ca391e6f260d31ccfd955569e99a98d968653559c0ec3417128263852a4a9b339c8d60ca70dfc8ac6f1392c76b2c401ae491ff60271a67859bfa8272d4cd97cec3b4bdf0c5f063831a110a7e1e7071eb9a9392eadf08f179d9a4f956ce32aada018f406e990298557e8607ed26e658ea98d13508a64fa2f2d43ccca55bfe7a651b2ff65f8b9323e98b431d37057a67879be1661d5269e37695885492fd46ead707d92a0fb43be0566ea5a907d9da1fabb6d90ed51274ba62c99a3f84abf594160104f82443099d727b06a505d18578cb432b7a4561a7012c2b4051a2082cb42bc6598856d04bd5906c9c1d42fb1e02c3f29f0093f077893240f5938fa0bb35b29b4546a21b5c8410994a5f1d534c9df3a7d6d146a499143abacc5831f46b83a3bb3f55c2373d44763f9ef08d382e1cb8efca3c7dca90469e8591fa53312b4aac5fd5d6b335e52e8bc1e0adc3c2a679bb424455dae83a73dddeb6471c5d8b78cd8f10c77bdfbe25029b2a34b3d12816f34d8f3d6176f82ef20629d01392bcf538c0cad905c0e92ec523ae64a4df4ea5e85e6417dd0bd94fecc7195bf767f6a1195cd515018f276b18f476c7e2be5447fe91a378b0b66832642705c1b1c6a772b282577761d8bb66199205ee08b10f848120b5a93bda87525db04bfb26a349ce8cdd69fc79e3bd1d4af2e92ea5487da8baa564f666ca6341f8941306aac74d71ef9a52b9cd29a8954ea3856a1caea014bd9e82f9632123e90e762f99e58483f2777f412453156f4917ed124b75ebadd4cb6e6e3aeb22d9826a67c28662bdeb75826b9ea75469dbbfdad9fa62c543ff0cfd78fb5e975566adc5f0f2bc86800ebe43f460b47ce819077173342030b6f664e133c56a876714d53884ffb05ffd6d5bb281ad5aad413fa49e0598f03b3fd3d7d9c9bf2b0120286fcabfa6203872761d689c1c55ddce6e5d6afdd1977967d8e23badeebff40a81a045bceecd9515692e498dd11111b34fbeb1eb2ef2e8971f910a83b75f1eb07bad3b565eaa49062c74a0b0161535cefe70dda0ce8201a00ad16a6d44864ee3c633b2d3477b2beb3354af93cf73aba1aab9b09d3d1ae084e7f928c9a928cb42e40a5ee9e209151242b716c296a73c6dbf9564141b356b6afc4e36a3fa8685fb179b74573eb454a29fd99a25f6c50a36f869ef0785058281bfaf68216b3197cbf20d00cf6c89038078b1a843be9e79f3da77460f500f10d31d01661ac5a75815fd54c23dcb66159c3a9a1f208987a2c5ab8a15d6758de98d19264b7dbd2b243d87dd2a3000ec22678a8037afa07360e74eb330aa6d6ae2deec3160adf2f73d17414b3b2144edf504e0a6714c74699fb32f843c6ff1a19ebe2b5c7cd9cb33880ae141c4dabb4285a58c5752d45dbc1f08de40d1e9ba038a98ab14d304c8f4200e1eea38f6fbc5eaf741242d3f824616764edf28299a2a3a803331e5520b802914d40fe0b55feee187f7997b7f410a0086a9fe9c63d7eabb2496c4d7cb6bd182c3c01c45b01042d8b539882c9f9f73694218628e5e86e3fdd14a597ffe1b5d906d78f0fe020d2fcdcff3af49bbda385b3f6041b185398838a395354f2b3c22c09cdde8ed76a9359393c59581a73e19bdc75f1441d4884051c27006098e5a74aa7b4716f1d85dd74ad4039b91e924119500fd61b72492c52f217487f8330d37c9c79413a42366f4eaf09d2f26c1616edf561fb2be704175a4ec69c1da37b6fcd1b38868093b20509f0b1adedd29337874c8ae80465dcbf781597d662112005fdd4877a900770af27500b513b1ef5aa5c28f6b88e8098e752dc2d97dd21bff77509717949c17f62f3fa3af7cbfb7631d3379d285fa0fa847860019011d32df60bb7b34e454fb0e21f0e7993674eee0a0a080349ebc143312e3e386a3f67126ee563076cb35d6dab1cf3025f9ed4e71c7fe3a27288e3c1cedb4b4c81b79f3e3a67b404abe2a938f4f9b7b5aabf7e6d278907f3142fd09ab149f90e2fc387b2ec415d563d46c7f89dce3f19c0b2b005465aba2e5361e76dddf580a846bbdfc1bbbdd870efd3123ae9646a7d31ccab7d2862ba43edb23f43377c708f2044aec69b983dcabe1f08ad75712df8689e263be59c17d3e9e3e7ec809ddb931655b9b5558b6fca6d8b04649ed5e0cd9b515c18661462bfba7536de1ecd0613215c0a3e697bd04dba7a92df7847a0e694bc946859e2a801b53038db894ee6b002b568aebec2715ba9760b6512eec12586cd67befff689abc05ce0ffe98b99cfc6c3b3de301afbf6b6c95b7d91d092408b3e378b73c65a5109ef4d000143203620b4cf8cf9bdbd24908deed2bfe75ab4e449abbfee42c243fe722017d4a74313f327763b8553b509b77f20e4c84c9d9190f9cd8ee98062d37f132f26386ad2d4b1b0a475de4d32493e4392ca6aaaf4bbace26983477fa3dc8bf836aace639dbdc224706d99323088d2c52cd2ac70a8c9d73ab89062681e2f0ecb678cb281a83e590183dd869d409942f769c5613dee155c24e80adea58b35e5dfd430b780fd293d2e822f95028da3fa0cbba61ccdd6e9159d72211c6eeddb79a18eba39c70e3cf438280435652b3e8258f24dd58a00849de558a035fb4d69601f52badd3876a787a7ed6dacc47df43bc7dd80174996fafad5c95e3a5901a485376232d07e0e3a2dacee2f008d47c39adb5eb003fb7e18021c3b0160314ae5844178635b1fe8fac6c767a1bb95f610894e231226e320d68b320580359d56fee578b26202f68507c1080c2c645c97df96dc80ca432b7d326386a7c0e5b1ffb4d2120561a5b5f776633c10a3eb0b844fcf25212ba48619487d4091a7e6912544b8b36fee2ca57ec89d5efda4e1bfce4b65d6c3f55ae1ab68e10906ca3840bba40b2a6547bae1d634d12be6a3b8b7266b18f81abd9521fe2ee5e89bba924f467b66295fe3128d4d072dc4540dc94a299bea724ef42b67bf76db1a741d905d4905126a3572dbb11d26da579aae2ba5c5aae46483e190bdf611f8d3b043720f8438797295ec4d2d5cb857050432da1aa6bc2f1816da7a715492f6b2153801a88f0cf3d3a6e80eeabb70cd6acae9c3d18cf45b8fa69b422c457fb83e8667983541b66d6a3e1c9db0a2e7aa3f10359b21841dc830f65432a547003608838ff2bead91bed3dc820d73619df72313917ea2e69032b0f4c548f06aebb01eebfee6bd4f72b1ff4d05d2e79a0c6ff37c16fbabaaecc3d9a8282aba371fc25aedd73544933d6e950cfc603db65d19958ed5176a89e9e79de4dff2afad73173abf3e136c83b2534fa2e92132dfc053665624ecc2d8294082fbfc53cb572431e654b675d7793867420f0185c39618785ef7faaae0e69c0c8c3f96a0c9c6695bc2527943b6ebab7ab8a54b728dd733307b0355460fb37e352518b2ba24066245c9361091c7e6105dbdd240a188be58db2ec64aad2ce71155f6118c620f6f4966160b00d5013aed03ae4a73d3c8c3dd17959c233c06298d7e3afa555634bbadbd739d4a9eacd609552a73d6d240df64ad2427941d3a82386d1d93d08d8b8b63aa223473c2c9886ad1bb245fe531eb31a327b09794dccdd8c0e50163e8f3ce254e7573b1a452aa9055764bbb2ebfc20817ce874223cd242a19ef5f5027ed7029e3b1567497072f5c0bfcff9a85ea2600bf27ee9a3997ac52e7846b476f3a7b5d00e51e4cc6121780dcb07118a1d293e4832f8b36663422ef0f2b4769f3212c87217f19204b6684f1b661c3ea8886fea78532661b207a11f4a385663a6d70bccd2bcc3595949c8b29a795182b40072b3436a9c6ff6acb63c092aca1fda860ff89735f3c5697f632098b8b68fd4d7f3649a0f0b436a69aac2f51879feb31c9dabcb0d7e91e32b03ea2f014274772b2ed02b2c1b677553568f5216c04fe4826d3d626b26c394c9c47860c140592bb390c48ce750bf8555fcde3fa8846768c2aa1a360298f48ccd6933b330ef19f249bdb78646ebb1ed3286062d15bda7e5065bff800ab5e7a00d15ee30de6716cc3897b675cf752c5178d97521d00b2388ae0c5e62fab26c557891a6e42248a4e3f0946eb408cfc09e870fedb6a74e8abd2d8e2564f6106b08af97181740c17b7a7a98e461ca054309ac5406c8fab41b69a25fa05e234708977b42c7534466e976d4d31003371f122687cb5dbbca3816bf6a72b6d1a8b503cc6d3f3cb1291ae37c14e7967d86b49d7378e823e85bb2219c713d8820c037a07ed824626d7f6c31279190d1b37b42d3f2df63e73d808d6e16b891532cbe8d2483f4b55b6a2f3bca677068fbef4ed0d196623ad9d7c2d9077a21a82626ed975e0f9904cc19244fc1a3f5007c9490c5ccb5ef65411763d5457c3d04998ec01b959cbb931b59d4522acbf3fda5d2c283", @typed={0x8, 0x117, 0x0, 0x0, @u32=0x6}]}, @generic="150a76a7622791dd032bba22551eb5343987331fd2e9560c43ea06c93015451a620075ba4e10a24c6b33a8dbf238b70d36c4f9517d362076314eb47ba215c698f35c7a0c036b93dc0deba21241703f9af9dddd1e89a41e541cec734800d928c2dcc234e8a9bae9ca5c1c660f9c2f2e66a0b9158fdd59ae6f19b954dcc7048a04995aa90b5bb6dc4722eaa81ff76e9bc4e31308325d638e77d59c1cba92fe608e03426e896bd5bec82e84d03a31be86354f15507668ff30e2133a50f983d3928d52aedf6d864336323002c8ba5cfae5922203de", @generic="8a1221a9f7b9da954359d74d70ab0d2fc5aa2790e8f24be532192437ad39305f11f88518c07fc1915d0063462380497bb9a9589d0855c93e2f153a7ecc21c2982a2ad290f92455094ea44e2bd1f1d6582f42be311c8ccf5d2a03c24807d0bace1a57340c40bdc922161e2402fc9108f30696a383c68ef1c4e5d2bc7c0b876b65654548626434b92693873edccd718d3eadee15ba738336b680774c9af0c20d0db1f93565ccfd27b470f0e21a34ad743e24b3b32266a8e390ff3e2003fd09acb9da2450b966eae64bb302ae", @generic="43609bad89fc24e8184dc899a5c2ace13f3c7e73ccfbf21076e2e8a118cb2a370de686e58087b2391c6b2e45afee1f1cf6a6036ed3aedaec1dca7a52c34a946f125446cde513885ba01716d0c7ee0502ff3aee53ceab859e4eb6146de38ba715351fade1ca1c7bfb5898543707dd68cba77069510867370d22e2637fd7de73cd9e5628eff688805f656c6c24e9cb69d58a65184ad75aecb0a828327d2e8e3b04768c919e4eef55715a892b318e1387ec63618c1e48fc6ec5158298fbdc32246daefd4369710384b9526e5acc0f72fc9f5be44bf0d81b83a4987cd1e3", @typed={0x12, 0x159, 0x0, 0x0, @str='\xbe$.\xe4#*\'[@\x95}*.\x00'}, @typed={0x8, 0x88, 0x0, 0x0, @fd=r1}, @generic="06da90330a8e3fa449885a2e5b0791bb569f9ed464793da670c7a059fa7ad3d2ee25597bced25bb8"]}]}, 0x152c}, 0x1, 0x0, 0x0, 0x40048}, 0x200000d1) r4 = openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/debug/o2hb/quorum_regions\x00', 0x10002, 0x0) bind$auto(r4, &(0x7f0000001940)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x6) r5 = socket(0x21, 0x80000, 0xfffffffe) write$auto_proc_clear_refs_operations_internal(r2, &(0x7f0000001980)="56b4dbc86c64878517b60e6e1602b7898e78b194d1671d0be4bb515237044598d379a954e606d92716fa6a27dac2a113a9f8e063d3f88b260922f5a75301c27f94", 0x41) openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000001a00), 0x80000, 0x0) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000001a40)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0x20000, 0x0) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001ac0), r1) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(r5, &(0x7f0000002c40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002c00)={&(0x7f0000001b00)={0x10d8, r6, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x4}, @NL802154_ATTR_SEC_DEVKEY={0x1018, 0x2f, 0x0, 0x1, [@generic="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", @typed={0x14, 0xa6, 0x0, 0x0, @ipv6=@remote}]}, @NL802154_ATTR_COORDINATOR={0xa4, 0x1e, 0x0, 0x1, [@typed={0x9e, 0x76, 0x0, 0x0, @binary="1ce540ccc6fe5bfc1734af061ea36ff9189c6560ec24ddda0fd6379d2cff71e613a3eeac604e4302c15278d572d96ab3bfd3aa354d033842b7b57df3a32687574fe9f484f7503f4a77becbf2288571608bd169706f5038730303ed18686bd00d8fdb9f6ab5c8a3beba9c40d4e7ae66d6f7f13b3c2b95fd4552c39a5782466d2ff6f9020c77704be316eadc7eeacd50b741f97e6b61d45e449a50"}]}]}, 0x10d8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) r7 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000002cc0), r1) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000002d80)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x2c, r7, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xa}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xf2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x2000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x44040) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002dc0)='/sys/devices/virtual/net/nr6/carrier_up_count\x00', 0x2, 0x0) r8 = openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000002e00)='/sys/kernel/tracing/README\x00', 0x0, 0x0) shutdown$auto(r8, 0x50fc) ioctl$auto_PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000002e40)=0x4) r9 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000002ec0), r2) sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f0000002f80)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x4043820}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x34, r9, 0x400, 0x70bd25, 0x25dfdbff, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x2d}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x9}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x8}, @CTRL_ATTR_OP={0x8, 0xa, 0x10}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8000) recvfrom$auto(r5, &(0x7f0000002fc0)="8a530c6c0c0e7f277523b4f96ed2c99f63860666a046507bf2e88932b54ac3c4e29f22f9a1b373615aecfe1e9bc02461574a518d5624c1cf418a24d29262c404551c04c5025596db0e210e583529df861967ca13d2c1f473bdaf5d0eb637b01c9b788e52f592a917eda61064976f327593f43cf00a69275478c5cd44431f4bb010dca5e099bd0eb8e8413f3f41cbae4e2c7a6cbd46eea5d860beca93cd3a276cb59b2e47f4bd9b0c3c74b8be1be473f6270c581d55e702535e40fa8bf1db39f15be6e97f4f7c390a800c3f1e23506c2b86bac113c2c1", 0x19, 0x3ff, &(0x7f00000030c0)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000003100)=0xf) mmap$auto(0x3, 0x2, 0xa, 0x19, 0xffffffffffffffff, 0x5) fsconfig$auto_SHMEM_HUGE_WITHIN_SIZE(r1, 0x4, &(0x7f0000003140)='%&\\)}\x00', &(0x7f0000003180)="46b60c6658692b45eaf158340d59bd9772b1571829b40503780acc1524fc9e49a44c5ca6aa14817c4eaa94566d2981865c674f4d2497a26c399317efc837", 0x2) sendmsg$auto_BATADV_CMD_SET_VLAN(r1, &(0x7f0000003300)={&(0x7f00000031c0), 0xc, &(0x7f00000032c0)={&(0x7f0000003240)={0x48, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_TPMETER_BYTES={0xc, 0xc, 0x4}, @BATADV_ATTR_FLAG_BEST={0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_DAT_CACHE_VID={0x6, 0x25, 0x7ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x20040800) 1m37.659652398s ago: executing program 7 (id=2402): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r0, 0x0, 0x1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0xc800) r1 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) writev$auto(r1, &(0x7f0000000000)={&(0x7f0000000000), 0x4}, 0x2) unshare$auto(0xfffffffffffff801) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r3, 0x4008af83, 0x0) setns(r2, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) timer_settime$auto(0x0, 0x519a, &(0x7f0000000100)={{0xa6, 0x7}, {0x0, 0x3}}, 0x0) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) connect$auto(0xffffffffffffffff, &(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x4, 0x3}}, 0x100) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) syz_clone(0x220c00, 0x0, 0x0, 0x0, 0x0, 0x0) 1m37.264451532s ago: executing program 7 (id=2405): mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) rename$auto(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2c080, 0x68) unlinkat$auto(r0, &(0x7f0000000080)='./file0\x00', 0xa) mkdir$auto(&(0x7f0000000000)='./file0/file1\x00', 0x2) renameat2$auto(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000240)='./file1\x00', 0x0) 1m36.981843943s ago: executing program 7 (id=2408): r0 = socket(0xa, 0xa, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28070000ca9798a092c935eba1bbbfeafa9bf321148c863cb828440f1cfe7db944f5bb62a063705760c9ae31e0094dccf178b651c003a2aa0e0dfff1d270cdc9ea1f072bebe6137a0def36f93fad13f2e8faa3b1bc802e5f69ab6dd681ea76686b90d4bd5da5cf1fdd51cc8e1e757d0242220791a32f4fc65dceb1587fea8258125493b632e9571d3db3338e2512f473b8a233c6f6db9096de1e66680614595f80f1275b3e4d39d646a387e07f37d2246a648738ebbbffff26e46bf404f172af786837d4b6518cae1fe741cb378ae7c90d5d4506ae098b9fbed28129ffcce2d2cc6cc0efcdfe2ed226cba900"/250, @ANYRES16=r2, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00", @ANYRESHEX=r0, @ANYBLOB="0c002e010010000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0xc040) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x200000c0}, 0xc004) recvmmsg$auto(r1, &(0x7f00000002c0)={{0x0, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0xe, 0x0) r4 = openat$auto_fops_x16_ro_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/dormant_links\x00', 0x40942, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/ip6tnl0/threaded\x00', 0x103b02, 0x0) sendfile$auto(r5, r5, 0x0, 0x8080000001) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000280)="b4dc694efa1149efce5bd03c592600a75e6cc91e39f5aebeed", 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/snd/midiC2D0\x00', 0x119003, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) r6 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x7, 0x5, 0x6, 0x7, 0x400b, r6, [], {0x6, 0x6, 0x7, 0x29a, 0x8, 0x80, 0x104, 0x6, 0x4}, {0x100, 0xfffffffd, 0x40101, 0x85, 0x2, 0x24, 0x8000, 0x8, 0x3}}) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r7, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x18000, 0xd, 0x1, 0x9489, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x0, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x0) 1m21.690398731s ago: executing program 36 (id=2408): r0 = socket(0xa, 0xa, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28070000ca9798a092c935eba1bbbfeafa9bf321148c863cb828440f1cfe7db944f5bb62a063705760c9ae31e0094dccf178b651c003a2aa0e0dfff1d270cdc9ea1f072bebe6137a0def36f93fad13f2e8faa3b1bc802e5f69ab6dd681ea76686b90d4bd5da5cf1fdd51cc8e1e757d0242220791a32f4fc65dceb1587fea8258125493b632e9571d3db3338e2512f473b8a233c6f6db9096de1e66680614595f80f1275b3e4d39d646a387e07f37d2246a648738ebbbffff26e46bf404f172af786837d4b6518cae1fe741cb378ae7c90d5d4506ae098b9fbed28129ffcce2d2cc6cc0efcdfe2ed226cba900"/250, @ANYRES16=r2, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00", @ANYRESHEX=r0, @ANYBLOB="0c002e010010000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0xc040) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x200000c0}, 0xc004) recvmmsg$auto(r1, &(0x7f00000002c0)={{0x0, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0xe, 0x0) r4 = openat$auto_fops_x16_ro_(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/dormant_links\x00', 0x40942, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/ip6tnl0/threaded\x00', 0x103b02, 0x0) sendfile$auto(r5, r5, 0x0, 0x8080000001) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000280)="b4dc694efa1149efce5bd03c592600a75e6cc91e39f5aebeed", 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000480)='/dev/snd/midiC2D0\x00', 0x119003, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) umount2$auto(&(0x7f0000000000)='.\x00', 0x8) r6 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x7, 0x5, 0x6, 0x7, 0x400b, r6, [], {0x6, 0x6, 0x7, 0x29a, 0x8, 0x80, 0x104, 0x6, 0x4}, {0x100, 0xfffffffd, 0x40101, 0x85, 0x2, 0x24, 0x8000, 0x8, 0x3}}) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r7, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x18000, 0xd, 0x1, 0x9489, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x0, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x0) 1m12.47302064s ago: executing program 5 (id=2499): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = clone3$auto(&(0x7f0000000040)={0x43, 0x4, 0xa5e7, 0x10000, 0x1, 0x8000000000000000, 0x10, 0x5, 0xf, 0x1ff, 0x5185}, 0x1) prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) lseek$auto(0x3, 0x2, 0x4) r4 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r3, 0x4b72, r4) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0x11, 0x3, 0x9) pipe2$auto(&(0x7f00000000c0), 0x0) writev$auto(0xca, &(0x7f0000000080)={&(0x7f00000000c0), 0x2}, 0x2000000000000003) madvise$auto(0x0, 0x200007, 0x19) 1m9.965800862s ago: executing program 5 (id=2504): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0x5, 0x0) inotify_init1$auto(0x800) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x2d2481, 0x0) ioctl$auto(0x3, 0x6f41, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x17) dup3$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) request_key$auto_KEY_SPEC_REQKEY_AUTH_KEY(0x0, 0x0, 0x0, 0xfffffffffffffff9) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/ip_vs\x00', 0x181800, 0x0) pread64$auto(r0, 0x0, 0x13ed, 0x4000000000000009) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyd9\x00', 0x266281, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x4020aea5, 0x38) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r2, 0x4018620d, 0x9) 1m5.744775013s ago: executing program 5 (id=2519): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) setsockopt$auto(0xffffffffffffffff, 0xce, 0x3ff, 0x0, 0x2a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x40, r1, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "8b09791485470000004000"}, @OVS_PACKET_ATTR_KEY={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0x10, 0x0, 0x0, @u64=0x100}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) unshare$auto(0x40000080) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000280)=0x5) unshare$auto(0x40000080) r2 = socket(0x18, 0x800, 0x2) getpeername$auto(r2, 0x0, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) write$auto(r3, &(0x7f0000000400)='/d-v/\x98\x93\x00\x00\x001\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0x33b8, r3, 0x81) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r5 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sg1\x00', 0x800, 0x0) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x3, 0x5, 0x4, 0xeb3, 0xffffffffffffffff, 0x8000008000) socket$nl_generic(0x10, 0x3, 0x10) 1m3.766784126s ago: executing program 5 (id=2525): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x0, 0x6, 0x10000000000, 0x11, 0x3, 0x2000) (fail_nth: 4) 1m3.538721053s ago: executing program 5 (id=2529): close_range$auto(0x2, 0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto_TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$auto_TIOCVHANGUP(r1, 0x5437, 0x0) 1m2.979914746s ago: executing program 5 (id=2532): sendmsg$auto_HSR_C_GET_NODE_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2a000020}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x10) r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/pcmC1D0p\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000440)={0x7, "154c8b83", 0x7fffffff, 0x4, 0xf, 0x2, 0x6, 0x2, 0x5, 0x800, 0xfd, 0x5, 0x1, 0x400, 0x7, 0x0, 0x10001, 0x8000000000000, 0x7, "e549d8be6ac314bf7353aaf6c5ed6983147acfb7"}) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0xfffffe82) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x18, r2, 0xb01, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_HE_CAPABILITY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x4000890) futimesat$auto(0xffffffffffffffff, 0x0, &(0x7f0000001280)={0xa, 0x1000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r5, 0x41015500, &(0x7f0000000080)={"44cb9bf73ee4f7d17375d0a2c121fc097204973ce5c568f45cf3a37f00073e797cd85f52c60300259f0f496b584d7480859a383753a492b262cd2e665fea378855d02010d0b1cf7092368788828277decc11b6176237f43ce7d5384aba1e1eee4dd675ba496344c135ba3c9b8cd74d91b5821876925052d05ddd50973f5a648a", "78a1fee6276146f257fe93c9fa89fecfac240fa640931102b4c63f0bd4bd4890b490124586bd24165be85c89ed2955a83b4f394d6e6c57281715d54967ac33b5071d2eac8ab7e6921314c5452670cf4223d14a933119c64d9d923ef32ce561acad10f49938168f40e3b68dcaf3e5f174ce961d6a33c481d540e5282df56757d5", 0x5}) sendmsg$auto_ILA_CMD_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x20, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x24000000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001140)={{@raw=0x200, 0x1, 0x7f, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d", @raw=0x2}, 0x503, 0x5, 0x4, @raw=0x7, @enumerated={0xc, 0x0, "cb0c80699beb33ab05dc27d4bf2a711a4378ba926b660e893ca63be6c004786ceac50991aa4975421eebb8e24b11006a359336cf5c603240dff7022f6bd2af13", 0x6, 0x10001}, "7a9fc199a16a2311eacf2fc7ae1d8778dc618090334fdd73340238d21000debe0eda71bdd709254592b67f9cb5adb17884a16f7ce8cbce0bb32791702b8d7c2d"}) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop15/queue/rotational\x00', 0xa081, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) r8 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r8, 0x0, 0x7) writev$auto(r7, &(0x7f0000000240)={0x0, 0x5}, 0xa) write$auto(r6, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x6) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram11/ext_range\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r9, &(0x7f0000000100)=""/4096, 0x1000) r10 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyp6\x00', 0x80800, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001100)='/dev/binderfs/binder1\x00', 0x505801, 0x0) r11 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x9, 0x7) newfstatat$auto(r11, 0x0, 0x0, 0xfffff29f) write$auto_console_fops_tty_io(r10, &(0x7f0000000480)="40ed02a93a25e99649d8d18c66797017494f81f91701c5442ee9506981c838872e5757ebc2abba86954144da81848fc4be6fcb58d9844b7c19a380cb4160d65aadffbcb0befdb53c7b0a754d47eb90f14d8359b433917af615736d899b08d65a5d04db714ce70e1816018d2a94f7c856616673e2f75f800a1751968b98c4d2c3cfbde4b7a17303f5a6e77bbceb92fbc7a9fdb5c97b958090932dac316f502f353fd94d8dfb2169917f6daf80b03f", 0xae) socket(0x11, 0x3, 0x9) 59.042163445s ago: executing program 3 (id=2551): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/input/event0\x00', 0x0, 0x0) ioctl$auto_EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000240)=0xb20) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x5, 0x0) socket(0x2a, 0x2, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x100000000001}, 0x3) clock_nanosleep$auto(0xb, 0x9, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000100)={@siginfo_0_0={0xa, 0x2, 0x40, @_rt={0xffffffffffffffff, 0x0, @sival_int=0x3dd}}}, 0x2, &(0x7f0000000180)={{0x5, 0x1}, {0x1, 0x9}, 0x24b, 0xf, 0x2, 0x6, 0x2, 0x1ff, 0x7fffffffffffffff, 0x4b, 0xba, 0x4, 0x7, 0x28b2, 0x5, 0x73}) pidfd_open$auto(r3, 0x6) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) unshare$auto(0x40000080) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) 57.822978835s ago: executing program 3 (id=2557): socket(0x2, 0x2, 0x88) 57.715993583s ago: executing program 3 (id=2559): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r1 = prctl$auto(0x7, 0x3f7, 0x0, 0xffffffffffffffff, 0x6) shmctl$auto_IPC_STAT(0xffff, 0x2, &(0x7f00000001c0)={{0x76f8c966, 0xee00, 0xffffffffffffffff, 0x4, 0x3, 0x20000003, 0x8}, 0x8, 0xce, 0x3, 0x4, @raw=0x1, @inferred=0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000280)="072646921a727bd9233ac9ad591af2a532e3c46623665b66c010da25d3609241b85422cfeffd62c863e1bd26d3ec3bb02940cb4e76c1e26eaf0ee7148191ecbc63fd104bf941581b848652331bc1ead1ce621cf97e3d1bae67e83df75a6574a462d7153aa6b168a1dc", &(0x7f0000000180)}) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x9a240, 0x0) ioctl$auto(r2, 0x5646, r2) read$auto_v4l2_fops_v4l2_dev(r2, 0x0, 0x0) ioctl$auto(r2, 0x2400000, 0xffffffffffffffff) r3 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x509c40, 0x0) sendto$auto(0xffffffffffffffff, &(0x7f0000000180)="b03188399fe6c630a0e6e9b47e7cdf95ed6db3740c77c6e4de1bba028e746f6e53b45fe99e1671935cd1bf714c986cf5e0b12652266aaeb0a487c221e7a3986a1335b52576ce78ed4aac413528c30f05de3e549aa4743b3599b036e373822e6f7d1bd0e621f1d1", 0x8000000000000000, 0x7, &(0x7f0000000300)=@nfc={0x27, 0x0, 0x0, 0x1}, 0x5) sendto$auto(r1, &(0x7f0000000480)="5fdfa74732a111dfdfb7b4792e688e08e11082bbfa0e48b4b6e43cf8750a722287ee8cb325685ea0b59507efb71f9663ab35b18dc99d1dffd61260cc20731711b33dacd7b10d07b034f4084aac1d19f332ae649363eebc58d84e6aaa034af89b507f24119a305012af20d2a5ff4bbc34c063e7b4d7ba64a50fcd9842f95c2b3b63bc35c05703606b902ccf64d117aba877a768ce301584bd5f930a4e", 0xfffffffffffffffc, 0x8, &(0x7f0000000540)=@nfc={0x27, 0x0, 0x1, 0x3}, 0x7) pwrite64$auto(r3, &(0x7f0000000440)='+(#\\&\x00', 0x9, 0x3ff) sendmsg$auto_IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000005800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000057c0)={0x0}, 0x1, 0x0, 0x0, 0x8c0}, 0x1) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x24048020}, 0x8001) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffff9}, 0x6, 0xe27c, 0x8) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x800, 0x0, 0x7, 0x0, 0x1f, 0xfffffffd}, 0x10004}, 0x5, 0x1ffffffe) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, 0x0, 0x240081, 0x0) mmap$auto(0x400c, 0x1, 0x1, 0xfffffffffffff596, r1, 0xd94) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r1) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="10002dbd7000fedbdf25620000000600b400080000006a5af3ba04008e00"], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x4008080) 57.62067853s ago: executing program 3 (id=2560): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0xb) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x2}}, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xc, 0x0, 0x13c, 0x0, 0x0, 0xd}, 0x5af}, 0x40, 0x100) 57.43568915s ago: executing program 3 (id=2562): openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x80, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000003c0), 0x101200, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0x4, 0x7d48, 0x9488, 0x4, 0x15f4da0c, 0x0, 0x3, 0x0, 0x7, 0x7, 0x4, 0x0, 0x2, 0x1]}, 0x0) 56.487954608s ago: executing program 3 (id=2564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card2\x00', 0x82755abcad0e000b, 0x0) ioctl$auto_RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000040)=0x7ff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd24, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) 47.27664626s ago: executing program 37 (id=2532): sendmsg$auto_HSR_C_GET_NODE_LIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2a000020}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x10) r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/pcmC1D0p\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000440)={0x7, "154c8b83", 0x7fffffff, 0x4, 0xf, 0x2, 0x6, 0x2, 0x5, 0x800, 0xfd, 0x5, 0x1, 0x400, 0x7, 0x0, 0x10001, 0x8000000000000, 0x7, "e549d8be6ac314bf7353aaf6c5ed6983147acfb7"}) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0xfffffe82) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPP(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x18, r2, 0xb01, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_HE_CAPABILITY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x4000890) futimesat$auto(0xffffffffffffffff, 0x0, &(0x7f0000001280)={0xa, 0x1000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r5, 0x41015500, &(0x7f0000000080)={"44cb9bf73ee4f7d17375d0a2c121fc097204973ce5c568f45cf3a37f00073e797cd85f52c60300259f0f496b584d7480859a383753a492b262cd2e665fea378855d02010d0b1cf7092368788828277decc11b6176237f43ce7d5384aba1e1eee4dd675ba496344c135ba3c9b8cd74d91b5821876925052d05ddd50973f5a648a", "78a1fee6276146f257fe93c9fa89fecfac240fa640931102b4c63f0bd4bd4890b490124586bd24165be85c89ed2955a83b4f394d6e6c57281715d54967ac33b5071d2eac8ab7e6921314c5452670cf4223d14a933119c64d9d923ef32ce561acad10f49938168f40e3b68dcaf3e5f174ce961d6a33c481d540e5282df56757d5", 0x5}) sendmsg$auto_ILA_CMD_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x20, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0x24000000000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000001140)={{@raw=0x200, 0x1, 0x7f, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d", @raw=0x2}, 0x503, 0x5, 0x4, @raw=0x7, @enumerated={0xc, 0x0, "cb0c80699beb33ab05dc27d4bf2a711a4378ba926b660e893ca63be6c004786ceac50991aa4975421eebb8e24b11006a359336cf5c603240dff7022f6bd2af13", 0x6, 0x10001}, "7a9fc199a16a2311eacf2fc7ae1d8778dc618090334fdd73340238d21000debe0eda71bdd709254592b67f9cb5adb17884a16f7ce8cbce0bb32791702b8d7c2d"}) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop15/queue/rotational\x00', 0xa081, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) r8 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) read$auto(r8, 0x0, 0x7) writev$auto(r7, &(0x7f0000000240)={0x0, 0x5}, 0xa) write$auto(r6, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x6) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram11/ext_range\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r9, &(0x7f0000000100)=""/4096, 0x1000) r10 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyp6\x00', 0x80800, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001100)='/dev/binderfs/binder1\x00', 0x505801, 0x0) r11 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x9, 0x7) newfstatat$auto(r11, 0x0, 0x0, 0xfffff29f) write$auto_console_fops_tty_io(r10, &(0x7f0000000480)="40ed02a93a25e99649d8d18c66797017494f81f91701c5442ee9506981c838872e5757ebc2abba86954144da81848fc4be6fcb58d9844b7c19a380cb4160d65aadffbcb0befdb53c7b0a754d47eb90f14d8359b433917af615736d899b08d65a5d04db714ce70e1816018d2a94f7c856616673e2f75f800a1751968b98c4d2c3cfbde4b7a17303f5a6e77bbceb92fbc7a9fdb5c97b958090932dac316f502f353fd94d8dfb2169917f6daf80b03f", 0xae) socket(0x11, 0x3, 0x9) 40.818920229s ago: executing program 38 (id=2564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card2\x00', 0x82755abcad0e000b, 0x0) ioctl$auto_RTC_IRQP_READ(r2, 0x8008700b, &(0x7f0000000040)=0x7ff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd24, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) 8.93215651s ago: executing program 2 (id=2680): openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x80, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000003c0), 0x101200, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0x4, 0x7d48, 0x9488, 0x4, 0x15f4da0c, 0x500000000000000, 0x3, 0x0, 0x7, 0x7, 0x4, 0x0, 0x2, 0x1]}, 0x0) 7.774688156s ago: executing program 2 (id=2684): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) inotify_init1$auto(0x800) io_uring_setup$auto(0x4, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x2d2481, 0x0) ioctl$auto(0x3, 0x6f41, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x17) dup3$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x9) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) request_key$auto_KEY_SPEC_REQKEY_AUTH_KEY(0x0, 0x0, 0x0, 0xfffffffffffffff9) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/ip_vs\x00', 0x181800, 0x0) pread64$auto(r0, 0x0, 0x13ed, 0x4000000000000009) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyd9\x00', 0x266281, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x4020aea5, 0x38) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) ioctl$auto(r2, 0x4018620d, 0x9) 6.527993103s ago: executing program 8 (id=2688): write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x40000000000008, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_ptr=0x0, @inferred, 0x0, @_sigev_thread={0x0, 0x0}}) mq_timedsend$auto(r1, 0x0, 0x2, 0x9, 0x0) 6.2423716s ago: executing program 9 (id=2689): write$auto(0xffffffffffffffff, 0x0, 0xa) r0 = socket(0x2b, 0x80000, 0x8) (async) mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) (async) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0x1e1500, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) (async) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) mmap$auto(0x0, 0xda, 0x1, 0xeb1, 0x40000000000a5, 0x8000) (async) r2 = io_uring_setup$auto(0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_3={0x3, 0x280, 0x0, 0x2, 0x2, 0x3, 0x7ff, 0x0, 0x6, "67c418cf3d482281e0f4a7e3d08fd667", r3, 0x996, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0x0, 0x51f, 0x3, 0x8, @attach_btf_obj_fd=r2, 0x9, 0x3, 0x4, 0x5, 0x3f, r1, r1}, 0x8a4) io_cancel$auto(0x7, 0xfffffffffffffffc, 0x0) (async) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000300), 0xfffffffffffffdee) (async) ioctl$auto_IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, 0x0) shutdown$auto(r0, 0x4) unshare$auto(0x40000080) (async) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xf9, 0xfffffffffffffffa, 0x8000) (async) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r5 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0\x00') (async) rename$auto(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0\x00') r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x400, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x1, 0x84) (async) fsconfig$auto_FSCONFIG_CMD_CREATE(r4, 0x6, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', &(0x7f0000000180)="2f5293ac8ce5867e425aaea7c5933f83d3ec6406400b41e658e027ec5b7a1e47e4a3ab3f95f699672b679d9afba1b965b11f79c2b32dac16e20dbdd26a5d257829fb8c29183b493da9efd7ee5cf4af6a0fd7b14edc22e7fa42464763d3b9998553a95cebdc0080d4f2c0b8279b39493785f4248a8d7b74be1d8d41c196eca3b653e630665d330c17a00ee9ef51bd8ff6", 0x7a2) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_score_adj\x00', 0x142, 0x0) write$auto(r6, 0x0, 0x100086) 5.287219525s ago: executing program 6 (id=2691): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) socket(0x2a, 0x2, 0x6) ioctl$auto(0x3, 0x5411, 0x10000000000402) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x0, 0x0) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000001640), 0x200, 0x0) r2 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r2, 0x4c80, 0xfffffffffffffffd) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000000)='//\xf2\x00', 0x80000000) adjtimex$auto(0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x581402, 0x0) r3 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r3, 0xc0403d11, 0x0) waitid$auto_P_ALL(0x0, 0x3b000, 0x0, 0x400002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2002, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000007c0)={{@raw=0x1, 0x8, 0x4, 0xa2, "c6e47a44a36664a5e709f0e4c97056bc9fa32c617bb88dc98fa7591aefc4647f5af349f8e1e79c823b22958f"}, 0x1, @enumerated=@item=[0x0, 0x3, 0x1, 0xb, 0x6, 0x8001, 0x14, 0x0, 0x10001, 0xefe, 0xfffffff9, 0x5, 0x8005, 0x62f, 0xff, 0x42, 0x1fc, 0xfffffff0, 0x1000, 0x7, 0x3, 0x3, 0x0, 0x6, 0xb94, 0xfffffffd, 0x8, 0x6, 0x3, 0xe8, 0x4, 0xce6, 0x9, 0x46f, 0x8, 0x1, 0x6, 0x4, 0x6, 0x8, 0x80, 0x9, 0x65b, 0x9, 0x7, 0x81, 0x1ce8, 0x9, 0x4, 0xf7f, 0x5, 0x4, 0x2, 0x1000, 0x9, 0x0, 0x400, 0x0, 0x0, 0x6, 0x207d, 0xa79, 0x5, 0x5, 0x3, 0x80, 0x6ed, 0x2, 0x1, 0x3, 0x8, 0x4, 0x8, 0x0, 0x80000000, 0x5, 0x8, 0x6, 0x0, 0xa, 0x2, 0x5, 0x400, 0x6, 0x4, 0x9, 0x29, 0x7ff, 0x30971ad3, 0x9, 0x78d, 0x7f, 0x0, 0x8002, 0x20000, 0x40, 0x0, 0xc, 0x40005, 0xfffff43e, 0xfffffffc, 0x4f000, 0xff, 0x5, 0x7, 0xd49e923b, 0x4, 0xcee, 0x77, 0xf2, 0x0, 0x21b, 0x7f79, 0x9, 0x20005b, 0x8, 0x10011, 0x8, 0x3, 0xc2, 0x3, 0x5, 0x1000, 0x1, 0x7, 0x403, 0x8, 0x1], "4570dcfd140074f863fc1385c4fd7abe6fce96c0b442897f58fd7d975d164deff4eef5b9f9173fa400163669eae95125d4bd68ca54ca1b0aefb60ffa8d501b1329af8d4108ac145aa564c6e7a09ea1b2dfae0f309c6ea508833d7d134b13d8cb3ef95bf5ed43801c280c02a5a853512e6f730d43226f00af1c5ac268ecc1d18f"}) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20881, 0x0) write$auto(r4, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) select$auto(0x4, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x34, 0x0, 0x800, 0x3, 0x5e78, 0x6, 0x40000040, 0x80000000089, 0x8, 0x9020, 0x0, 0x5, 0x4db1, 0x401, 0xfffffffffffffff7]}, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bus/usb/037/001\x00', 0x24ea82, 0x0) 5.108228049s ago: executing program 9 (id=2692): openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC0D0p\x00', 0x80, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000003c0), 0x101200, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0x4, 0x7d48, 0x9488, 0x4, 0x15f4da0c, 0x600000000000000, 0x3, 0x0, 0x7, 0x7, 0x4, 0x0, 0x2, 0x1]}, 0x0) 4.363332993s ago: executing program 8 (id=2693): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/vlan1/route_localnet\x00', 0x42a81, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/hugetlb.1GB.limit_in_bytes\x00', 0x10b142, 0x0) sendfile$auto(r0, r1, 0x0, 0x1000200) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2b, 0x1, 0x0) signalfd4$auto(r2, &(0x7f00000000c0), 0x6, 0xc) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000080), 0x12, 0x0, 0x9, 0x0, 0x1, 0xfffffffd}, 0x10001}, 0x5, 0xfff) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) 4.215236793s ago: executing program 8 (id=2694): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x1, 0x19, 0xfffffffffffffffa, 0x9) (async) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) socket(0x10, 0x2, 0x4) (async) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) mmap$auto(0xfffffffffffff765, 0x1, 0x4000000000df, 0xeb1, 0x401, 0x6) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, 0x0, 0x505100, 0x0) (async) ioctl$auto(0x3, 0x400454ca, 0x38) sysfs$auto(0x2, 0x1e, 0x0) (async) ioctl$auto_TUNSETVNETLE2(r0, 0x400454dc, 0x0) (async) write$auto(0x3, 0x0, 0xfdf3) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x1aa, &(0x7f0000000100)={0x0, 0x14}, 0x6, 0x0, 0x5, 0x1001}, 0x5}, 0x2, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004881}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027"], 0x1ac}}, 0x4000080) (async) sendmmsg$auto(0x3, &(0x7f00000003c0)={{0x0, 0x1, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x40007}, 0x70f, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0) (async) fcntl$auto(0x8000000000000001, 0x26, 0x8) (async) r1 = socket(0xa, 0x1, 0x0) getsockopt$auto(r1, 0x6, 0x2000a, 0x0, &(0x7f0000000040)=0xa8) (async) mmap$auto(0x0, 0x20000400008, 0xde, 0x9b72, 0xffffffffffffffff, 0xa) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) io_uring_setup$auto(0x6, 0x0) (async) socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0) ioctl$auto_BINDER_CTL_ADD(r2, 0xc1086201, 0x0) (async) socket(0x2, 0x80002, 0x73) socket(0x0, 0x80000, 0x3) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) 4.11605896s ago: executing program 9 (id=2695): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/flags\x00', 0xa401, 0x0) write$auto(r0, &(0x7f0000000180)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfdf1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/memfd_noexec\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, r0, 0x8000) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) write$auto(0x3, 0x0, 0xfdef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/flags\x00', 0xa401, 0x0) (async) write$auto(r0, &(0x7f0000000180)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfdf1) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/memfd_noexec\x00', 0x2, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, r0, 0x8000) (async) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) (async) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) (async) write$auto(0x3, 0x0, 0xfdef) (async) 3.532053111s ago: executing program 9 (id=2696): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x40000000003, 0x12020006, 0x3, 0xfffffffffffffffc, r0, 0xf) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, 0x0) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0xffffffffffffffff, 0x300000000000) setsockopt$auto_SO_REUSEADDR(r1, 0x2, 0x2, &(0x7f0000000080)='&,-\x00', 0x4) rseq$auto(0x0, 0x6, 0x0, 0x2) socket(0x2c, 0x80003, 0x0) write$auto(0xca, &(0x7f0000000040)='\x04\x1c\xdc\xec7z\xdf3\xf2\xd3!\v\xb0M\xf8Q\x15\f', 0x2d8) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) 3.527733713s ago: executing program 6 (id=2697): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d", 0x4) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto_TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$auto_TIOCVHANGUP(r1, 0x5437, 0x0) 3.103659908s ago: executing program 6 (id=2698): mmap$auto(0x200000000000000, 0x400008, 0x100000e1, 0x9b72, 0x2, 0x400008000) r0 = socket(0xa, 0x5, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/software/type\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000240)=""/157, 0x9d) connect$auto(0x3, &(0x7f0000000180)=@in={0x2, 0x0, @rand_addr=0x64010102}, 0x54) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}, 0x55) sysfs$auto(0x2, 0x810000000000003a, 0x0) getsockopt$auto(r0, 0x84, 0x1d, 0x0, 0x0) 2.623344497s ago: executing program 9 (id=2699): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r0, 0x0, 0x6) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'veth1_to_bridge\x00', 0x0}) r4 = socket(0x22, 0x2, 0x2) getsockname$auto(r4, 0x0, 0x0) sendmsg$auto_BATADV_CMD_SET_MESH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x38, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFNAME={0x14, 0x7, 'netpci0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) pread64$auto(r5, &(0x7f0000000040)='\xaa{^@,-.\x00', 0x77ae, 0x5) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) prctl$auto_PR_SCHED_CORE_SHARE_TO(0xdc9, 0x2, 0x0, 0xfff, 0x6) (async) r7 = prctl$auto_PR_SCHED_CORE_SHARE_TO(0xdc9, 0x2, 0x0, 0xfff, 0x6) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) write$auto(r8, &(0x7f0000000040)=',,\x00', 0x8) ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, 0x0) (async) ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000240)=""/122, 0x7a) (async) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000240)=""/122, 0x7a) socket(0x10, 0x2, 0x0) (async) r9 = socket(0x10, 0x2, 0x0) socket(0x2, 0xa, 0x106) (async) r10 = socket(0x2, 0xa, 0x106) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r10, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) r11 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), r10) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(r10, &(0x7f0000001c40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c00)={&(0x7f0000005dc0)={0x34, r11, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@THERMAL_GENL_ATTR_TZ={0x4}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1a, 0x6}, @THERMAL_GENL_ATTR_CDEV_MAX_STATE={0x8, 0x11, 0x4}, @THERMAL_GENL_ATTR_TZ_CDEV_WEIGHT={0x8, 0xb, 0x6}, @THERMAL_GENL_ATTR_TZ_GOV={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(r10, &(0x7f0000001c40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c00)={&(0x7f0000005dc0)={0x34, r11, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@THERMAL_GENL_ATTR_TZ={0x4}, @THERMAL_GENL_ATTR_THRESHOLD_DIRECTION={0x8, 0x1a, 0x6}, @THERMAL_GENL_ATTR_CDEV_MAX_STATE={0x8, 0x11, 0x4}, @THERMAL_GENL_ATTR_TZ_CDEV_WEIGHT={0x8, 0xb, 0x6}, @THERMAL_GENL_ATTR_TZ_GOV={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r12 = getpid() process_vm_readv$auto(r12, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000500)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) clone3$auto(&(0x7f00000019c0)={0xa67b, 0x1, 0x2, 0x2, 0x5, 0x6, 0x5, 0x8, 0x8, 0x8, 0x4}, 0x89) (async) clone3$auto(&(0x7f00000019c0)={0xa67b, 0x1, 0x2, 0x2, 0x5, 0x6, 0x5, 0x8, 0x8, 0x8, 0x4}, 0x89) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000003080)={0x16a4, r11, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_TZ_TRIP={0x136f, 0x4, 0x0, 0x1, [@nested={0x1128, 0x79, 0x0, 0x1, [@generic="ca2f9532e23f494deec311ec7f28dcd9ce31a455eaf1dde7b94a3e85d190bb0047c2bed9d30ad525b465842c4dc31f578faa46af93b28a20e093774e02cc9b1b3ca3c9c6b5e01e29eefb6bb0d0e8736aabd2793d68ffa3a5d17d23c957bb436f8554a175a5b1fa929b9371e3d87fce1e2a4e64f6a26745b16308cc694b6450aa9aa0bfb5931d0d1fe549598984c4297d", @nested={0x28, 0x155}, @generic="23aa3faf7c2ca8939ce28686737f370e784a93cf4860982d81a80ab2247f99916b3e57b7016dffb7a879836d852e43a9a0d1aeb086b08bef4e08b707dcee573223683cdd0e3a82f437db65d7f51b64d5d9f9d0e9f54e1d6cc440ddc3b4a1baf328c7b6a2438a9218ba9c893d2e7b22a7acb33064b8635880ecb32257fc11aae6a396c964c877cf11893935f3", @generic="71409a9e", @generic="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"]}, @typed={0xc, 0xc9, 0x0, 0x0, @u64=0x80000001}, @nested={0x12d, 0x9f, 0x0, 0x1, [@generic="63312f151a613997795c0944c1680d2ad90db96330139054cd787f01141ca4d9edf2ce68737f5ffebc1a5241676172cb0fcb94e76f65dabb5ee77a606f490adf61cd2a7e163bb2e6a2e295b6f1c3f905a5aa7470a3471480f3585c02286e6ed55f78c820", @generic="cc793534d310491a680c92d51669ab83e2582279e6d03d2ac276c78d4cf43b2a7d8882087f4a9034e152612e6b91f3f4494536cdba9468", @generic="35405d03f079868f5504fb97459105d130ab86f2981d55eea7530a9bf58f80d0cc0f40208efde960a06cd99fd3368dcfa540be447b7523fde0cd142e99770b19bbc416141d3978dcb2bc0c50e9db62a95df5b5f7bc0519fd85a5767b2413188c0fea8b056ac16c11a08468d2cc45a34df3a1c53e175b2fa90507eab8dec5b77fbbb05975f5bc71fd751f", @nested={0x4, 0x17}]}, @nested={0xde, 0x97, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x4, 0x33}, @generic="9935f110d27cdcda887cbb5368135068a2e0bfd67d5048b067fa35dd7e4ffd366fa632e9db51457b0f56b9a3d62ac136fdfd3227a91c8e1dff001ae30b006fd102979956d2c2a015e746a358ea213f14898673f38d7e3caab66f4bf0bb65d7b8085ef624f5a7bc94f48b31b83e27352df4f0a8761e36f5d15c95582d87647375a21b7fe30ff272156a1c089313e327a2fa17d7d99f3ac0aaa26aaf8fe7cfca2be7ec3eb3a9f373f5d74a39d33f84ca86352706210370adf8816c017fcefc", @typed={0x8, 0x56, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0xc}, @nested={0x4, 0x22}]}, @generic="ddec03f8b752ab3f8578f1b4eae8decd1d7fd025b5ab2b7fbf7efca6b508065d7f3e6a054a6f0d"]}, @THERMAL_GENL_ATTR_TZ_ID={0x8, 0x2, 0x303}, @THERMAL_GENL_ATTR_TZ_NAME={0x5, 0xa, '{'}, @THERMAL_GENL_ATTR_CPU_CAPABILITY={0x5c, 0x14, 0x0, 0x1, [@typed={0xc, 0x43, 0x0, 0x0, @u64=0x5}, @nested={0x4b, 0x2f, 0x0, 0x1, [@generic="653fba7e32f8c883e2730584e73f0f2d5a0f1e600e9550", @generic="dbf3a189a5bd68c654bceace9daab89127891f6b2150c280593604c0846d12c10e4322cc7385f579a6c9bce7", @nested={0x4, 0xe6}]}]}, @THERMAL_GENL_ATTR_TZ_TRIP={0x290, 0x4, 0x0, 0x1, [@typed={0x8, 0xb2, 0x0, 0x0, @pid=r12}, @generic="d5d4183272b0543ac29b71d6315afa57cc65aa4a6020d1798a0ddf7625a50688", @nested={0x133, 0x608, 0x0, 0x1, [@generic="6f9c84c092020a97eddf482343ba6e513ee96835bc226863be3210be0edddbfa674df9a1c3bd3d400d44fee46e51e2d18819d8a23a5ae52f571dfbe7c97202a1a0717f93130e919cdb2a6c9421527c26963cac985136c2620b73f8bb10babee70364b100587eb38f2765b05bd9c2c3da20cb5cfed2", @generic="7b0d90149e82956726d46fa7341e16781489ff5ec44629e680c0a01b5a4da8ea15eff2070ce97aac069ab3f84aa5116c5f6f7cebd113249ddf0da2ccf6f4946012616ad36626a5498b276404721af20bb209f048992e647dad7e8744841fbcf6d8341511a4d5b3f8d10fdabd70d96cb9a2db858ed660619fc80d22dfc32013e5b5c8980a6025cec9e7bb501511e5db2faa6be8e24ff68c67b21dc14906824dafdcc6906a507c8f35ebd678584cb5378f7e16bd3b7599a50c176c"]}, @nested={0x11a, 0xab, 0x0, 0x1, [@typed={0x8, 0x67, 0x0, 0x0, @fd=r9}, @generic="804ed43c7204f6a6ed4977388d6099f1315ab85668dd5523f45b1a3645d078e854d00cec10130aacd8494e10e72fcff87750322a92af3d8c3942194dc98fdf78be108c59726a7e0c5e986944b3f0f4558180047b8db47a607a1077c50dad6c3dca81c2095a0d3362c7ccc139eeb8cdb107ec9fd9669c505d7825027fa8b23445c19eab29c19324eca121f4e1bd49fa6df606f8400e3362e53cb686d7e995648fff7f96f3dbcd5881e74c49769452c218c27bfca39d8e8deb752f6e81819d8e472275d9237700b40ce3136048a9c6d7a3bacf083daeaf8c29a37bafceaeb132447151644d1d4928ad8677d20155481836cc65", @typed={0x16, 0x147, 0x0, 0x0, @binary="11224c3c3eaf2944e6961a699e77d4a80801"}, @nested={0x4, 0xd9}]}, @nested={0x14, 0x95, 0x0, 0x1, [@nested={0x4, 0x5d}, @typed={0xc, 0x35, 0x0, 0x0, @u64=0x6}]}]}, @THERMAL_GENL_ATTR_TZ_TRIP_HYST={0x8, 0x8, 0x5}, @THERMAL_GENL_ATTR_CDEV_NAME={0x14, 0x12, 'veth0_to_bridge\x00'}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x7}]}, 0x16a4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000003080)={0x16a4, r11, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_TZ_TRIP={0x136f, 0x4, 0x0, 0x1, [@nested={0x1128, 0x79, 0x0, 0x1, [@generic="ca2f9532e23f494deec311ec7f28dcd9ce31a455eaf1dde7b94a3e85d190bb0047c2bed9d30ad525b465842c4dc31f578faa46af93b28a20e093774e02cc9b1b3ca3c9c6b5e01e29eefb6bb0d0e8736aabd2793d68ffa3a5d17d23c957bb436f8554a175a5b1fa929b9371e3d87fce1e2a4e64f6a26745b16308cc694b6450aa9aa0bfb5931d0d1fe549598984c4297d", @nested={0x28, 0x155}, @generic="23aa3faf7c2ca8939ce28686737f370e784a93cf4860982d81a80ab2247f99916b3e57b7016dffb7a879836d852e43a9a0d1aeb086b08bef4e08b707dcee573223683cdd0e3a82f437db65d7f51b64d5d9f9d0e9f54e1d6cc440ddc3b4a1baf328c7b6a2438a9218ba9c893d2e7b22a7acb33064b8635880ecb32257fc11aae6a396c964c877cf11893935f3", @generic="71409a9e", @generic="fb8875685a6f1283d748d97cf915e3ba362f984f9e12f8089313a4c96486d154ce1da7477602305b84fc96607cc890e1fa342c5bc628c291cb981326f72d95eb5a38706684312b0c7983ead57c631eff4a3b901b6e68af758bc9c3265feb38a06ca92e0d8b6982f561d57f5f5b944f744cc1e85c2980c29f77f86872767d1950655207738d017d2039cd2fe720de3bf88f508fa0cc0ddd829a85f38172aaac7531a62ef587e7f2e6e9eb3c02a2632c2b852610a6c8f803eefeb8164d326c585da250772b9cab76bc046194251ad98d8cf73b743fba758fbbd76d18b0218673b707f51757e20307d9761ced162074752c8c2f71d6bbf84e9fcf9525a383ba460f55a01cd590a56fb63200b3b18b3ac6cd7c361d9d977456bc0d9fa65cfa7325a1bcc9a77526d4879de5fe9d3494941b04360d66f5353a131cdbacd86f2fae6de5ccec111315116748625b54136eb9eb6ebe640e951aeab6585a3da2416527aace92fcc6b1fc02e0fd785865df6302b5fe554cc857fc87d433c54948e90a2d0e8ddd4c658e2ea6a48cf7323bd8f7ca1e8ef5174d9a0f207360f9b89c4d116f42329af7954104d5d946cdfed59e1c136961094eb34ddbd1407c6bad14b90ea1910801a47442cfa5e7157a226256fcaf9900f03f32feb2102aaeca7dab28f5623a25b978e47ef1def4294d43ac706823f3726fb06e9ac468324b8317ed9cc7a625011bda3829de97e7a5d2f3fe618191f5c8038d7b81ac85c1d48b0cf9839a8189e43a4077fa614b1511af35675dff3efdb8ba776531b25550aa4591b1ce994cf7738423c0894c324cbe037e43a2d4f8253cf65525470700bb6bb9a2f6f20d7b01e7f733cd69052c6e8ea134b99c5649e1e0fe2b4b65c4f40a73111c22c9653456831bfd933e5a2de2592f5baac5b29b0f08c109a82bb7f0386f240a5932058cb579c7667dd2cc3b2dece3e38e18b1306e8c6d2b1303a9b34a65109125358954b3d60b375c3eb75dc6a151ea0c6f4e5e15decae9009ec392455e0de294d9d316ffff53f8b2bf002f31637bf965cc06315aca754919b18ccf608faf40c51f1a149825199da6f681b64e1b37bf1990fff3d1aa272b810122e285e55ee84131ced9ef98187ab8172c2341c5352032145d270d801faf7f316ff007ed7ec8e688e372f605add2ce4734ba2ec6c632a8d1430f7883a3f6fa7c829ad21b542921c65d1a077bdc132bb5ec77b7ee6b6c53822dd3497d1e14d165dd5be97c2e4790b40f7ceb9eaaa5a072394b92f072ae51b65e81398d9082f2c9786e4abd0608cbda731f81dbf4d31dbd3c1e389acb791ec7ecf1fb74ded6fc98bd8293872a8625f4405cff008933dd0f068ab1c2bd757088373e530923d38f59c68c908beb99d4179d5cecf22b2f782e45671e3c9149ba8ca3f2a4f516a192c1e0738f2a1c1847763c4963f5c10b8a1e8665162e8d85dee1328476a174cceb81c7c232bac94b79283191fbd24f9c6e51a609f70008c13f3ee167dadfd74b786b2856d10c42e1482776984dc7f9042d7110641a54302b384fabd7e565b51c6c93b06605b1ddb4cf6f786810945edc20d8146940a40f528ba35752e30a085794d83bae4b42fa65f0ee03b6b783bd960e33b1f36d99b295a58ff20d34a5160fd652c78af6d881237deb0255f5bdb0510c3efcc52c4d3c49aa9fd2995c78311a1a25bef889f23cc16c2b42edd8f2a8ab3f01c42b1034bbe3227c3d213cfd2cd498a10311fdc2dfdf3fd6bd8ec26f06b712e987a8e5c0e6965e86b3ac65adfcd35a2f1f7dd74347ea7cc019586c6c5c94735efc0d5f730eaa31f8a7aad6d120d40e34d1d0cb26c0b3ba6836e55b82d9d10ba3df8d6383a5d6bbc886476fc5bc503b31e4ec6805e39c9a1254e0662ed8890a789a59ba4d06a7ae4f58d162c31013b5b94071f3c995f54a536344fdfe035b12ee4afe823c71f744ce62491338c0dfdd42ba9a4f9e8d5184597c46eafb85c16fc1fb7d7381632c794e151037d7323dc77e24b8e1ec62981e8901e912e277e5570a0cf650bc0b2af5c0fa7ad999b4abce8ed9cfe080775d0f08b9da14398b5dd0079c75e6f55f90449aff8b6bf7067a111d5daea73e7c4b9832f828bfe7a2cc47d2ed96016f7131959d58f61c53f1f8808b57d166ebc8b270d2a634885a811990974e5817a2bd65b268b114cd4a42582c31e190948afa349f7154a6ab5f05fee315be8293899c313bf1a78aee7e56682bd12f6f194f1d79ed5925723a9bf5347f80990228f94e9d283d05f9d67dcf6a4beaeb2a84d6654e1eea99bcc624ce9a313b1f56a0814e74d77cd8dae572caefdddab07cb94c88eb1f765f5e1c62d52e31844cb19a5760cc8f65c15726c147fd2c9818cc89b662ab54efe663d731db60aed7e23e0d11179ae7c961e64fc7fee478077112a82e71da996d280b0f3775d483e2f81973f0d30201675a9ce41d9120350cb5e8b8e15a4f7e4751b70f298d15adc210ca4759d421da8b3f2dced5f7781e0f5ce36f8393ee1c98f24db3cda5fd377d50841fa2347251436b03acb9759c3e4e8fd84a54642a90f5558a0675f68259f15cf2c54f6e1cb0dc9291a3d7349e9fe726bc457368db08f8806af9f4356951b27a142fffe57c00a0068a20366e50649efd70466fe4ca5d42967265321143c947f74b9e92819646c6956f8ee7f8ddcf020ceb7d603408dd0e62335cbe44d592bc6714005e2244b3a6becf23d8b210601570b4b77df4fadfe3462885fe4b5176c7f1d21a905e11fbadc14926e844901aef49d507a30762ee4b0e5ee4532311d2c206f44f1a26b5a9fbb73b43cf1752173d7c47b80141575b7dae459869df00e1318929691b0dd39e9457888e42665593d17bf1b6a9f2f2abdc74520f45bb4e832b05ada07aad88ae1613cce66878738c104c31049600447b0b1d803c371645a4dbc376cda9e5a8c48f81c0810def079fb79f0430429b064fa905527845a37b718d7e272cb6a4fe7860ee9cbdeaedb6f5a983e100f7b1564ea7d58ee5a250fee7b2f6151204d597320f5664bca88b3e74aad88cd698c620079b6c40cf94e5dcf28e859f7419916ffa859850b2b3276fa6c12c80631ed80f9dd919f86a190d3190f91899ae051b1c38e5dd1ca55469963c62f175a97fde7dfc9469886df48375cc3a46e9565617dfdfc625f3d1ae4201eb833fc040d805452c0859d39d18fd49d663ef179e18cdd1bd1dd4d407df670b98fafe13e0ccc662c384f82fb96aa2152d750f8803ce44d9bb0cc2c31a0d2a3356f43eaedc115546f6d62222045b3dfb55842ac022d89801abd6a8029ecd574c515ac37b5827f964ef154690ea0f229cc9af81e75e046376918fd6d3286fbec28ace70edabbfa4c0976bada26962e82434452da284356a039abaaa81475a3e8f4d778b406a772e658c88995dd9b22ae52fd19c9ddc44b577fd9a2d1017043284c3184acb13ddf499687bef9145e71c782221d65c80499ad8b0a3643a2fd86972cf8e695f0992d0795fcf57424fb79832de34ae8f082a1625449104f86f65d15278d825c3498a5ff5ed41fa81b21584d5bd5397401e621cb9ecebd87dac50295d5e4718a6959313adb5034559d35231ded38acd18a33fddc20f85cd1e17fefbbd04764a172c0a303225c96ba7163e1efcf65de88dc802c7fe42ad1265f11cad5439d2cbe2c16430f37f591b416c7dce397ddb832d9666fb97f9479ed5d25064b66e44a1389150f70f5205e1e519e3be41ee907c1168584853d7aa38940ae2d57434807731388479e60eb73ae7b95ea0e26b10ee58ea501ff2f50d491b6ac9bac99ccfd5cddf774a042002eca656bb80a41241407681b7db6dfa5617ad7c339e1121a502d654329fe97f853249dc80d75025c6a47c63de290288b53313eadaf60cddb6c08428cf4b1dc0b0d2d38c5441c3e0fe7899dcdbfa597a8692ac34da842b97ead4fa5ef672ba9206e34296ba81b95777e0c6acb1b04c92921febae3ce86e40c400769782bdda56790d3a129b73c7f74a5fa16d44ea0ff94abd3c56593f0a7f351d2865ce48f3079c81b07eef6584b829e96afb8f35ed11542e2320d48867337cee64f95dc8bf1cf17758407566922b7ecda407d62ab21b15c9fbf2431715352c3e5822bd9f3e2af9cc3cef48dd2bf95e419a0ad08625bcb6bad8b410abf23c2f8c4680e4b40e073c9d332b8d6683791eb733d243eddb93f6d61415147e0b72832feb35267873d9a7f8810f6457d2574e48860bbf363aa32a077aa41b1024c8b0070ff39144b68b21120dc614bf25de7a549cc8dd4748b8eec1e9d8bfd905dc2bc98b77d17562d56a17d8945152a64c6d465544f9cf225ef641131bff2c5148c1d6e9587c2a0f1be9d46ea3476fc7a2ee5409a1ada8016b5b717ca0e4eeeba01d0ea92ccd39d751f4cc7051da2ffd5e17763c8b828734dedf1a2d00a74dc4cbd0d07ffd0e3ceaf056ae017552b25bf2009492a4d71fd744e90f8f563b336a087696f9af37094f7c86bce03911400d731eba075ae9bce1ec3c5fbe599d9c17fdc54102fe3ac4067ed8f72655834a29cdc05c22ac7c7bae55a61270849043d4c81a574984c95240e175dceff8d4556d9bef9497447e7a4f1d113c0363e5d98c53cf80810b85a544f2dd11c0d845fe7b35b609f25f128339c3d43d7dd680de5cf5b348341412e2674ba49417a55864eb471ca14b43523f6fb8ed17930b3362744c4f449a88e3e24fa890401d94f3505118ec3d39c7827fb2c44ffdbf4999534d7d63727cd8eccb69b23d2ffed1e2a8cee918b7eb842627b45ee3a0014bd606c6e73212d533fd3c193bc222b1e78261a43bac967c30ad5bce7d10415d3e5ec0f220f2772c1561b176505124222ac9032bb56817033d9a4703993ac3133a781cc04390471fd5a3ddc37e6deddeadbe225440e72f3d923427d55badfb18fbdeeb7da5bb255680743b989fcdfe52e6ea226f5396bf5e1fae7c6e55aa71ce330fea8b99da47b655e3bda449e94e2c4b4110d2eb94698a5292aa61fbacb6c6d183373baac1fc89d614218b756107680b3c04577aace71a7801ed755e21b9a92b2463d66e7608d771bbc51817b16e26f86205b9c395d54f59be1e867ab00ae439a51818021ffb31ca0b390ad4d75cc3d408bf32c7d2003a5a20358457732707beaae884fab3a42ebcfa89fc1e75bb35529d7d53332d8856ce03209a107cd63eb114d4a9651195eff95abc76b8527ee5a4ae2563e075fb19dabd621dd2c2cec50718b5a448c41243d1767198f766ab14ee69757ad7b9cdd2a25dd8bca3989bee85fa83ee2510672d4bce1f182c09af716bad3add7e394ec92da04c8082af5c548e19552be5e98f6f9528fdf9f5128baae0731c5daa54e2a2a011c5a9e1a8a8a7c9e8580e972c9768c516992939f2d30b4a1bad05fb07e4a90552c2773187d28cf84e11cd72d1f56be4cb41cfeb3a11b27e8191fec5030e4c56ec0be32a53b5d20cd2ee58894416e1d5fe0310638b70e32937204dce0b115b444e45fcdf12543244b364b4e50f06144d3c878029eb8acd5f22962fa19cfee781fc6942e93509c668b512c9a278c7103ab152c92a509a6b310165ec96a34b5d72780d81c5b511c77ef8fba3c752f2d405a626155b01c19fa8afe79fbc00af976af82acf7b9867f6ebf42f5dadea8e00d0de76137fc64a8370e79fbf9abb8d97dba69d9c286e66edcf2c9f5ad0f666632bdf179dd1a6d2861e92440b93fcedcd09dd2b9734b825c523fc335fedf174b7457dd54416ce865566ec"]}, @typed={0xc, 0xc9, 0x0, 0x0, @u64=0x80000001}, @nested={0x12d, 0x9f, 0x0, 0x1, [@generic="63312f151a613997795c0944c1680d2ad90db96330139054cd787f01141ca4d9edf2ce68737f5ffebc1a5241676172cb0fcb94e76f65dabb5ee77a606f490adf61cd2a7e163bb2e6a2e295b6f1c3f905a5aa7470a3471480f3585c02286e6ed55f78c820", @generic="cc793534d310491a680c92d51669ab83e2582279e6d03d2ac276c78d4cf43b2a7d8882087f4a9034e152612e6b91f3f4494536cdba9468", @generic="35405d03f079868f5504fb97459105d130ab86f2981d55eea7530a9bf58f80d0cc0f40208efde960a06cd99fd3368dcfa540be447b7523fde0cd142e99770b19bbc416141d3978dcb2bc0c50e9db62a95df5b5f7bc0519fd85a5767b2413188c0fea8b056ac16c11a08468d2cc45a34df3a1c53e175b2fa90507eab8dec5b77fbbb05975f5bc71fd751f", @nested={0x4, 0x17}]}, @nested={0xde, 0x97, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x4, 0x33}, @generic="9935f110d27cdcda887cbb5368135068a2e0bfd67d5048b067fa35dd7e4ffd366fa632e9db51457b0f56b9a3d62ac136fdfd3227a91c8e1dff001ae30b006fd102979956d2c2a015e746a358ea213f14898673f38d7e3caab66f4bf0bb65d7b8085ef624f5a7bc94f48b31b83e27352df4f0a8761e36f5d15c95582d87647375a21b7fe30ff272156a1c089313e327a2fa17d7d99f3ac0aaa26aaf8fe7cfca2be7ec3eb3a9f373f5d74a39d33f84ca86352706210370adf8816c017fcefc", @typed={0x8, 0x56, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0xc}, @nested={0x4, 0x22}]}, @generic="ddec03f8b752ab3f8578f1b4eae8decd1d7fd025b5ab2b7fbf7efca6b508065d7f3e6a054a6f0d"]}, @THERMAL_GENL_ATTR_TZ_ID={0x8, 0x2, 0x303}, @THERMAL_GENL_ATTR_TZ_NAME={0x5, 0xa, '{'}, @THERMAL_GENL_ATTR_CPU_CAPABILITY={0x5c, 0x14, 0x0, 0x1, [@typed={0xc, 0x43, 0x0, 0x0, @u64=0x5}, @nested={0x4b, 0x2f, 0x0, 0x1, [@generic="653fba7e32f8c883e2730584e73f0f2d5a0f1e600e9550", @generic="dbf3a189a5bd68c654bceace9daab89127891f6b2150c280593604c0846d12c10e4322cc7385f579a6c9bce7", @nested={0x4, 0xe6}]}]}, @THERMAL_GENL_ATTR_TZ_TRIP={0x290, 0x4, 0x0, 0x1, [@typed={0x8, 0xb2, 0x0, 0x0, @pid=r12}, @generic="d5d4183272b0543ac29b71d6315afa57cc65aa4a6020d1798a0ddf7625a50688", @nested={0x133, 0x608, 0x0, 0x1, [@generic="6f9c84c092020a97eddf482343ba6e513ee96835bc226863be3210be0edddbfa674df9a1c3bd3d400d44fee46e51e2d18819d8a23a5ae52f571dfbe7c97202a1a0717f93130e919cdb2a6c9421527c26963cac985136c2620b73f8bb10babee70364b100587eb38f2765b05bd9c2c3da20cb5cfed2", @generic="7b0d90149e82956726d46fa7341e16781489ff5ec44629e680c0a01b5a4da8ea15eff2070ce97aac069ab3f84aa5116c5f6f7cebd113249ddf0da2ccf6f4946012616ad36626a5498b276404721af20bb209f048992e647dad7e8744841fbcf6d8341511a4d5b3f8d10fdabd70d96cb9a2db858ed660619fc80d22dfc32013e5b5c8980a6025cec9e7bb501511e5db2faa6be8e24ff68c67b21dc14906824dafdcc6906a507c8f35ebd678584cb5378f7e16bd3b7599a50c176c"]}, @nested={0x11a, 0xab, 0x0, 0x1, [@typed={0x8, 0x67, 0x0, 0x0, @fd=r9}, @generic="804ed43c7204f6a6ed4977388d6099f1315ab85668dd5523f45b1a3645d078e854d00cec10130aacd8494e10e72fcff87750322a92af3d8c3942194dc98fdf78be108c59726a7e0c5e986944b3f0f4558180047b8db47a607a1077c50dad6c3dca81c2095a0d3362c7ccc139eeb8cdb107ec9fd9669c505d7825027fa8b23445c19eab29c19324eca121f4e1bd49fa6df606f8400e3362e53cb686d7e995648fff7f96f3dbcd5881e74c49769452c218c27bfca39d8e8deb752f6e81819d8e472275d9237700b40ce3136048a9c6d7a3bacf083daeaf8c29a37bafceaeb132447151644d1d4928ad8677d20155481836cc65", @typed={0x16, 0x147, 0x0, 0x0, @binary="11224c3c3eaf2944e6961a699e77d4a80801"}, @nested={0x4, 0xd9}]}, @nested={0x14, 0x95, 0x0, 0x1, [@nested={0x4, 0x5d}, @typed={0xc, 0x35, 0x0, 0x0, @u64=0x6}]}]}, @THERMAL_GENL_ATTR_TZ_TRIP_HYST={0x8, 0x8, 0x5}, @THERMAL_GENL_ATTR_CDEV_NAME={0x14, 0x12, 'veth0_to_bridge\x00'}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_EFFICIENCY={0x8, 0x17, 0x7}]}, 0x16a4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r13 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd14/queue/wbt_lat_usec\x00', 0xa001, 0x0) write$auto(r13, &(0x7f0000000080)='0[.[\x00', 0x1) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_GOV(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r11, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_TZ_TRIP_TEMP={0x8, 0x7, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.243701288s ago: executing program 2 (id=2700): mmap$auto(0x0, 0x9d90, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto_IOCTL_VM_SOCKETS_GET_LOCAL_CID(r0, 0x7b9, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/oss/devices\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000000)=""/65, 0x41) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) ioctl$auto(0x3, 0xc0104d03, 0x5) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000001100), 0xa8000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPP(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2c, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_HE_CAPABILITY={0x15, 0x10d, "8223d208b7dd3463a3a936688073d724bb"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r5 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r5, 0x0, 0x1) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/default/forwarding\x00', 0x141241, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) sendfile$auto(r6, r7, 0x0, 0x2) sendmsg$auto_NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, r4, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "fb7d"}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4040004) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r2, 0xc0085504, &(0x7f0000000040)={0x9, 0x1, 0x5}) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x1, 0x0, 0x0) ioctl$auto_HPET_DPI(0xffffffffffffffff, 0x6805, 0x0) r8 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r8, &(0x7f00000020c0)=""/4093, 0xffd) 1.667948537s ago: executing program 6 (id=2701): write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x40000000000008, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_ptr=0x0, @inferred, 0x0, @_sigev_thread={0x0, 0x0}}) mq_timedsend$auto(r1, 0x0, 0x2, 0x9, 0x0) 1.66419843s ago: executing program 2 (id=2702): write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x40000000000008, 0x202000a, 0xffffffff, 0xdc, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00', 0x100000002, 0x100000001) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mq_notify$auto(0xffffffffffffffff, &(0x7f0000000180)={@sival_ptr=0x0, @inferred, 0x0, @_sigev_thread={0x0, 0x0}}) mq_timedsend$auto(r1, 0x0, 0x2, 0x9, 0x0) 1.476325719s ago: executing program 8 (id=2703): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x4, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = pidfd_open$auto(0x1, 0x0) ioctl$auto_BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000200)={@inferred=r0, 0x26, 0x9b2, @btrfs_ioctl_vol_args_v2_3_0={0x5, &(0x7f0000000180)={0x5, 0x8001, 0x98a, 0xf, {0x5, 0x5, 0x9, 0x18c, 0x3cb5893a}, [0x80000001, 0xfffffffffffffffe, 0x6ebe, 0x3]}}, @devid=0x100}) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x184) r2 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000100)="c2a7c888bc3950e635f15de4c4597ecb5bd84fcb75cc29dfb49849114e8813c1ac260fe499d22e241706bf48f40fe761fd879887862514461cb4b68e71a0e446f42ae10216902c609149bc3215621521306ee81cc5749ac63ff150151d2d9e408b1a8989e0b42cf11d379e25") readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) 1.286222913s ago: executing program 8 (id=2704): mmap$auto(0x0, 0x5, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') timerfd_create$auto(0x7, 0x0) timerfd_gettime$auto(0x4, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x210402, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x200400, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r0, 0xae03, 0xe9) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x101, 0x0) socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0xa, 0x100073) socket(0x2, 0x1, 0x84) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x23, 0x5, 0x0) listen$auto(0x3, 0x81) connect$auto(0x3, &(0x7f00000000c0)=@phonet={0x23, 0x0, 0x2, 0x5}, 0x51) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r1 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x84, 0xe, 0x0, &(0x7f0000000040)=0xb0) 1.022322128s ago: executing program 8 (id=2705): socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) accept4$auto(r0, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NFSD_A_SERVER_LEASETIME={0x8}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event1\x00', 0xa082, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x4011) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) sendfile$auto(r1, r1, 0x0, 0x1) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x202000, 0x0) ioctl$auto_UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000180)={0x3, 0x5}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 710.652577ms ago: executing program 2 (id=2706): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x1f000000, 0x6, 0x10000000000, 0x11, 0x3, 0x2000) 523.284305ms ago: executing program 2 (id=2707): mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) prctl$auto_PR_SCHED_CORE_SHARE_TO(0x7, 0x2, 0xffffffffffffffff, 0x6, 0x3) socket(0x2, 0x1, 0x106) connect$auto(0x3, 0x0, 0x54) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(r0, r0, 0x0) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, 0x0, 0x54) r1 = getsockopt$auto(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) r2 = syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) socket(0x11, 0x80003, 0x300) bpf$auto(0x0, 0x0, 0x92) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x81000a0}, 0xc, &(0x7f0000000180)={&(0x7f0000004780)={0x14, r2, 0x200, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x800, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x6e642, 0x0) write$auto(r4, &(0x7f0000000400)='odev/audio1\x00', 0x100000a3d9) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x800000000000000, 0x400008, 0xdf, 0x1009b72, 0x2, 0x8000) socket(0x2, 0x3, 0x6) r5 = socket(0xa, 0x1, 0x84) capget$auto(0x0, 0xfffffffffffffffe) getsockopt$auto(r5, 0x84, 0x85, 0x0, 0x0) 373.781851ms ago: executing program 9 (id=2708): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2e, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0x5, 0x0) setrlimit$auto(0x0, &(0x7f0000000000)={0x1, 0xfb3}) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) epoll_create$auto(0x20003f) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r3, 0x0) mmap$auto(0x0, 0x10000, 0xdd, 0x12, 0xffffffffffffffff, 0x28000) r4 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/mem\x00', 0x4c000, 0x0) write$auto_proc_mem_operations_base(r4, &(0x7f0000001680)="a7", 0x80047) open(&(0x7f0000000040)='.\x00', 0x0, 0x88) r5 = fcntl$auto(r2, 0x410, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r7) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time_for_children\x00') r10 = ioctl$NS_GET_PARENT(r9, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r8, 0x805, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r10}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x1000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) sendmsg$auto_NL80211_CMD_GET_SCAN(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="100027bd7000fcdb4c702000000004002400"], 0x18}, 0x1, 0x0, 0x0, 0x48014}, 0x8000) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x8, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24040844}, 0x4000c41) r11 = open(&(0x7f0000000180)='./file0\x00', 0x595002, 0x408) linkat$auto(r11, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) 367.780294ms ago: executing program 6 (id=2709): mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1cb602, 0x0) ioctl$auto_BLKPBSZGET(r0, 0x127b, 0x0) (async) r1 = socket(0x29, 0x2, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) epoll_create$auto(0x3e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x2001, 0x0) (async) r3 = socket(0x15, 0x5, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) (async) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) (async) ioctl$auto(r2, 0xc0046209, 0x9) r4 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) pread64$auto(r4, 0x0, 0x2, 0x3) socket(0x2, 0x80002, 0x73) (async) socket(0x2, 0x1, 0x84) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) recvmmsg$auto(r5, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r1, 0x8919, 0x24) (async) close_range$auto(0x2, 0x8000, 0x0) (async) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) (async) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 0s ago: executing program 6 (id=2710): mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = pidfd_open$auto(0x1, 0x0) r1 = socket(0x23, 0x80000, 0xfffffffc) setsockopt$auto(r1, 0x6, 0x1f, 0x0, 0x3d) setsockopt$auto(0x4, 0x0, 0x484, 0xfffffffffffffffe, 0x20) ioctl$auto_FS_IOC_UNRESVSP(r0, 0x40305829, 0x0) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r2, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) execve$auto(0x0, 0x0, 0x0) socket(0x23, 0x3, 0x2) unshare$auto(0x40000080) dup2$auto(0xffffffffffffffff, 0xffffffffffffffff) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x2) socketpair$auto(0xb, 0x9, 0x800, 0x0) setsockopt$auto(0x3, 0x0, 0x18, 0x0, 0x2) unshare$auto(0x7) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x22a40, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_uring_setup$auto(0x6, 0x0) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x1c, r3, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NFSD_A_POOL_MODE_MODE={0x7, 0x1, '!%\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44800) kernel console output (not intermixed with test programs): x_addrconf_init_net+0x10/0x10 [ 609.734233][T21904] ops_init+0x1e2/0x5f0 [ 609.734252][T21904] setup_net+0x118/0x3a0 [ 609.734269][T21904] ? __pfx_setup_net+0x10/0x10 [ 609.734284][T21904] ? lockdep_init_map_type+0x5c/0x250 [ 609.734302][T21904] ? mutex_init_lockep+0x110/0x150 [ 609.734324][T21904] copy_net_ns+0x46f/0x7c0 [ 609.734343][T21904] create_new_namespaces+0x3ea/0xac0 [ 609.734363][T21904] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 609.734380][T21904] ksys_unshare+0x455/0xab0 [ 609.734399][T21904] ? __pfx_ksys_unshare+0x10/0x10 [ 609.734423][T21904] __x64_sys_unshare+0x31/0x40 [ 609.734439][T21904] do_syscall_64+0x106/0xf80 [ 609.734455][T21904] ? clear_bhb_loop+0x40/0x90 [ 609.734476][T21904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.734490][T21904] RIP: 0033:0x7fb593f9c629 [ 609.734503][T21904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.734518][T21904] RSP: 002b:00007fb591d91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 609.734532][T21904] RAX: ffffffffffffffda RBX: 00007fb594216270 RCX: 00007fb593f9c629 [ 609.734542][T21904] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 609.734550][T21904] RBP: 00007fb594032b39 R08: 0000000000000000 R09: 0000000000000000 [ 609.734559][T21904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.734567][T21904] R13: 00007fb594216308 R14: 00007fb594216270 R15: 00007ffe6a2d6d28 [ 609.734587][T21904] [ 610.578781][T21935] Invalid ELF header magic: != ELF [ 610.645228][ T7169] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 610.645253][ T7169] Bluetooth: hci2: unexpected subevent 0x03 length: 725 > 9 [ 611.451219][ T31] oom_reaper: reaped process 21826 (syz.0.2208), now anon-rss:0kB, file-rss:29268kB, shmem-rss:0kB [ 611.696369][T22003] netlink: 122 bytes leftover after parsing attributes in process `syz.1.2217'. [ 612.195361][T22027] futex_wake_op: syz.0.2218 tries to shift op by -2048; fix this program [ 612.347825][T22027] futex_wake_op: syz.0.2218 tries to shift op by -2048; fix this program [ 614.027638][T22157] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2228'. [ 614.082780][T22157] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2228'. [ 614.136838][T22157] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2228'. [ 614.302033][T22157] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2228'. [ 614.363176][T22157] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2228'. [ 614.408130][T22157] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2228'. [ 614.455320][T22157] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2228'. [ 614.496968][T22157] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2228'. [ 614.538953][T22157] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2228'. [ 615.532738][ T5828] Process accounting resumed [ 615.597321][T22224] Process accounting resumed [ 616.321704][T22233] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 616.420135][T22233] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 616.545902][T22233] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 616.646777][T22233] page_type: f5(slab) [ 616.697558][T22233] raw: 00fff00000000040 ffff888140413280 dead000000000100 dead000000000122 [ 616.840568][T22233] raw: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 616.962070][T22233] head: 00fff00000000040 ffff888140413280 dead000000000100 dead000000000122 [ 617.044920][T22233] head: 0000000000000000 0000000000190019 00000000f5000000 0000000000000000 [ 617.139042][T22233] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 617.157517][T22301] NFSD: Failed to start, no listeners configured. [ 617.300004][T22233] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 617.365516][T22233] page dumped because: unmovable page [ 617.365593][T22233] page_owner tracks the page as allocated [ 617.365630][T22233] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5206, tgid 5206 (udevadm), ts 29359788245, free_ts 23412743818 [ 617.365666][T22233] post_alloc_hook+0x153/0x170 [ 617.365689][T22233] get_page_from_freelist+0x111d/0x3140 [ 617.365710][T22233] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 617.365730][T22233] new_slab+0xa6/0x6d0 [ 617.365746][T22233] refill_objects+0x26b/0x400 [ 617.365764][T22233] __pcs_replace_empty_main+0x19f/0x600 [ 617.365783][T22233] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 617.365803][T22233] alloc_inode+0x183/0x250 [ 617.365820][T22233] iget_locked+0x1d9/0x6d0 [ 617.365837][T22233] kernfs_get_inode+0x46/0x470 [ 617.365854][T22233] kernfs_iop_lookup+0x1a7/0x2d0 [ 617.365873][T22233] lookup_open.isra.0+0x631/0x11b0 [ 617.365891][T22233] path_openat+0xa98/0x31a0 [ 617.365904][T22233] do_file_open+0x20e/0x430 [ 617.365917][T22233] do_sys_openat2+0x10d/0x1e0 [ 617.365942][T22233] __x64_sys_openat+0x12d/0x210 [ 617.365960][T22233] page last free pid 1 tgid 1 stack trace: [ 617.365969][T22233] __free_frozen_pages+0x7e1/0x10d0 [ 617.365985][T22233] free_contig_range+0xde/0x1d0 [ 617.366002][T22233] destroy_args+0xa8/0x7a0 [ 617.366019][T22233] debug_vm_pgtable+0x1b66/0x34c0 [ 617.366036][T22233] do_one_initcall+0x11d/0x760 [ 617.366051][T22233] kernel_init_freeable+0x6e5/0x7a0 [ 617.366069][T22233] kernel_init+0x1f/0x1e0 [ 617.366087][T22233] ret_from_fork+0x754/0xd80 [ 617.366108][T22233] ret_from_fork_asm+0x1a/0x30 [ 617.384343][ T5174] ERROR: Out of memory at tomoyo_memory_ok. [ 618.167582][T22316] __nla_validate_parse: 56 callbacks suppressed [ 618.167598][T22316] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2237'. [ 619.934296][T22387] futex_wake_op: syz.1.2245 tries to shift op by -2048; fix this program [ 619.991809][T22387] futex_wake_op: syz.1.2245 tries to shift op by -2048; fix this program [ 622.363107][T22511] futex_wake_op: syz.3.2255 tries to shift op by -2048; fix this program [ 622.416549][T22511] futex_wake_op: syz.3.2255 tries to shift op by -2048; fix this program [ 622.612756][ T5822] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 622.612788][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 622.612810][ T5822] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 622.612815][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 622.612824][ T5822] Call Trace: [ 622.612829][ T5822] [ 622.612835][ T5822] dump_stack_lvl+0x100/0x190 [ 622.612861][ T5822] dump_header+0xfb/0x606 [ 622.612877][ T5822] oom_kill_process.cold+0xd/0x330 [ 622.612894][ T5822] out_of_memory+0x340/0x14f0 [ 622.612918][ T5822] ? __pfx_out_of_memory+0x10/0x10 [ 622.612942][ T5822] mem_cgroup_out_of_memory+0xc6/0x130 [ 622.612962][ T5822] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 622.612979][ T5822] ? find_held_lock+0x2b/0x80 [ 622.612995][ T5822] ? do_raw_spin_unlock+0x145/0x1e0 [ 622.613016][ T5822] ? _raw_spin_unlock+0x28/0x50 [ 622.613041][ T5822] try_charge_memcg+0x652/0xc90 [ 622.613058][ T5822] ? __pfx_try_charge_memcg+0x10/0x10 [ 622.613076][ T5822] ? find_held_lock+0x2b/0x80 [ 622.613088][ T5822] ? rcu_read_unlock+0x17/0x60 [ 622.613101][ T5822] ? rcu_read_unlock+0x17/0x60 [ 622.613117][ T5822] charge_memcg+0xa6/0x280 [ 622.613130][ T5822] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 622.613149][ T5822] __swap_cache_prepare_and_add+0x528/0x9e0 [ 622.613176][ T5822] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 622.613194][ T5822] ? __pfx_swap_entry_swapped+0x10/0x10 [ 622.613222][ T5822] swap_cache_alloc_folio+0x1cb/0x300 [ 622.613242][ T5822] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 622.613262][ T5822] ? finish_task_switch.isra.0+0x2c6/0xb80 [ 622.613280][ T5822] swap_cluster_readahead+0x411/0x770 [ 622.613304][ T5822] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 622.613326][ T5822] ? update_cfs_rq_load_avg+0x51/0x550 [ 622.613349][ T5822] ? get_vma_policy+0x23f/0x3b0 [ 622.613366][ T5822] swapin_readahead+0x160/0x12c0 [ 622.613391][ T5822] ? __pfx_swapin_readahead+0x10/0x10 [ 622.613408][ T5822] ? find_held_lock+0x2b/0x80 [ 622.613420][ T5822] ? swap_table_get+0x103/0x2c0 [ 622.613437][ T5822] ? swap_table_get+0x103/0x2c0 [ 622.613457][ T5822] ? swap_table_get+0x10d/0x2c0 [ 622.613479][ T5822] ? swap_cache_get_folio+0x1ae/0x600 [ 622.613498][ T5822] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 622.613515][ T5822] ? __pfx_get_swap_device+0x10/0x10 [ 622.613541][ T5822] ? do_swap_page+0xb2e/0x68e0 [ 622.613558][ T5822] do_swap_page+0xb2e/0x68e0 [ 622.613585][ T5822] ? __pfx_do_swap_page+0x10/0x10 [ 622.613604][ T5822] ? __free_object+0x2a8/0x400 [ 622.613622][ T5822] ? lockdep_hardirqs_on+0x78/0x100 [ 622.613639][ T5822] ? rcu_is_watching+0x12/0xc0 [ 622.613661][ T5822] ? __pte_offset_map+0x179/0x310 [ 622.613687][ T5822] __handle_mm_fault+0x18c1/0x2b60 [ 622.613708][ T5822] ? reacquire_held_locks+0xce/0x1e0 [ 622.613727][ T5822] ? __pfx___handle_mm_fault+0x10/0x10 [ 622.613749][ T5822] ? lock_vma_under_rcu+0x17c/0x590 [ 622.613778][ T5822] handle_mm_fault+0x36d/0xa20 [ 622.613800][ T5822] do_user_addr_fault+0x5a3/0x12f0 [ 622.613828][ T5822] exc_page_fault+0x6f/0xd0 [ 622.613844][ T5822] asm_exc_page_fault+0x26/0x30 [ 622.613858][ T5822] RIP: 0033:0x7f6f6e15cece [ 622.613872][ T5822] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 622.613886][ T5822] RSP: 002b:00007ffd325596d8 EFLAGS: 00010246 [ 622.613899][ T5822] RAX: 0000000000000000 RBX: 0000555568be8500 RCX: 00007f6f6e15cece [ 622.613908][ T5822] RDX: 00007ffd32559730 RSI: 0000000000000000 RDI: 0000000000000000 [ 622.613917][ T5822] RBP: 00007ffd3255979c R08: 0000000000000000 R09: 0000000000000000 [ 622.613926][ T5822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 622.613935][ T5822] R13: 00000000000927c0 R14: 00000000000979c5 R15: 00007ffd325597f0 [ 622.613954][ T5822] [ 622.613960][ T5822] memory: usage 3072kB, limit 3072kB, failcnt 148799 [ 622.613970][ T5822] memory+swap: usage 34856kB, limit 9007199254740988kB, failcnt 0 [ 622.613980][ T5822] kmem: usage 2732kB, limit 9007199254740988kB, failcnt 0 [ 622.613990][ T5822] Memory cgroup stats for /syz0: [ 622.614151][ T5822] cache 0 [ 622.614159][ T5822] rss 0 [ 622.614164][ T5822] rss_huge 0 [ 622.614170][ T5822] shmem 0 [ 622.614176][ T5822] mapped_file 0 [ 622.614182][ T5822] dirty 0 [ 622.614188][ T5822] writeback 0 [ 622.614194][ T5822] workingset_refault_anon 26516 [ 622.614200][ T5822] workingset_refault_file 40603 [ 622.614207][ T5822] swap 32546816 [ 622.614213][ T5822] swapcached 800272384 [ 622.614219][ T5822] pgpgin 515392 [ 622.614225][ T5822] pgpgout 561343 [ 622.614231][ T5822] pgfault 346189 [ 622.614237][ T5822] pgmajfault 12328 [ 622.614242][ T5822] inactive_anon 0 [ 622.614248][ T5822] active_anon 249856 [ 622.614254][ T5822] inactive_file 0 [ 622.614260][ T5822] active_file 0 [ 622.614266][ T5822] unevictable 0 [ 622.614272][ T5822] hierarchical_memory_limit 3145728 [ 622.614279][ T5822] hierarchical_memsw_limit 9223372036854771712 [ 622.614302][ T5822] total_cache 0 [ 622.614308][ T5822] total_rss 0 [ 622.614314][ T5822] total_rss_huge 0 [ 622.614320][ T5822] total_shmem 0 [ 622.614326][ T5822] total_mapped_file 0 [ 622.614332][ T5822] total_dirty 0 [ 622.614338][ T5822] total_writeback 0 [ 622.614344][ T5822] total_workingset_refault_anon 26516 [ 622.614350][ T5822] total_workingset_refault_file 40603 [ 622.614357][ T5822] total_swap 32546816 [ 622.614364][ T5822] total_swapcached 800272384 [ 622.614370][ T5822] total_pgpgin 515392 [ 622.614376][ T5822] total_pgpgout 561343 [ 622.614382][ T5822] total_pgfault 346189 [ 622.614389][ T5822] total_pgmajfault 12328 [ 622.614395][ T5822] total_inactive_anon 0 [ 622.614401][ T5822] total_active_anon 249856 [ 622.614408][ T5822] total_inactive_file 0 [ 622.614414][ T5822] total_active_file 0 [ 622.614420][ T5822] total_unevictable 0 [ 622.614426][ T5822] anon_cost 0 [ 622.614432][ T5822] file_cost 0 [ 622.614438][ T5822] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2199,pid=21795,uid=0 [ 622.614514][ T5822] Memory cgroup out of memory: Killed process 21795 (syz.0.2199) total-vm:108504kB, anon-rss:1232kB, file-rss:45040kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:1000 [ 623.424562][T22514] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2254'. [ 623.428450][T22520] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 623.444286][T22520] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 623.449937][T22520] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 623.450116][T22520] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 623.736323][T22526] kexec: Could not allocate control_code_buffer [ 624.499145][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.499216][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.894652][ T7169] Bluetooth: hci3: command 0x0c1a tx timeout [ 625.447520][ T7169] Bluetooth: hci1: command 0x0c1a tx timeout [ 625.447552][ T7169] Bluetooth: hci2: command 0x0c1a tx timeout [ 625.527879][ T7258] Bluetooth: hci4: command 0x0c1a tx timeout [ 627.282959][T22601] vhci_hcd vhci_hcd.2: default hub control req: 0000 v0000 i0000 l0 [ 627.347433][T22653] syz.1.2263 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 627.389153][T22653] CPU: 0 UID: 0 PID: 22653 Comm: syz.1.2263 Tainted: G U L syzkaller #0 PREEMPT(full) [ 627.389181][T22653] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 627.389187][T22653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 627.389196][T22653] Call Trace: [ 627.389202][T22653] [ 627.389208][T22653] dump_stack_lvl+0x100/0x190 [ 627.389234][T22653] dump_header+0xfb/0x606 [ 627.389251][T22653] oom_kill_process.cold+0xd/0x330 [ 627.389269][T22653] out_of_memory+0x340/0x14f0 [ 627.389294][T22653] ? __pfx_out_of_memory+0x10/0x10 [ 627.389319][T22653] mem_cgroup_out_of_memory+0xc6/0x130 [ 627.389339][T22653] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 627.389356][T22653] ? find_held_lock+0x2b/0x80 [ 627.389374][T22653] ? do_raw_spin_unlock+0x145/0x1e0 [ 627.389395][T22653] ? _raw_spin_unlock+0x28/0x50 [ 627.389420][T22653] try_charge_memcg+0x652/0xc90 [ 627.389438][T22653] ? __pfx_try_charge_memcg+0x10/0x10 [ 627.389457][T22653] ? find_held_lock+0x2b/0x80 [ 627.389469][T22653] ? rcu_read_unlock+0x17/0x60 [ 627.389484][T22653] ? rcu_read_unlock+0x17/0x60 [ 627.389501][T22653] charge_memcg+0xa6/0x280 [ 627.389515][T22653] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 627.389535][T22653] __swap_cache_prepare_and_add+0x528/0x9e0 [ 627.389562][T22653] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 627.389581][T22653] ? __pfx_swap_entry_swapped+0x10/0x10 [ 627.389609][T22653] swap_cache_alloc_folio+0x1cb/0x300 [ 627.389630][T22653] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 627.389655][T22653] swap_cluster_readahead+0x411/0x770 [ 627.389680][T22653] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 627.389714][T22653] shmem_swapin_folio+0x22a4/0x2c10 [ 627.389737][T22653] ? find_held_lock+0x2b/0x80 [ 627.389750][T22653] ? filemap_get_entry+0x1a7/0x3b0 [ 627.389776][T22653] ? __pfx_shmem_swapin_folio+0x10/0x10 [ 627.389796][T22653] ? __pfx_filemap_get_entry+0x10/0x10 [ 627.389815][T22653] ? mod_memcg_lruvec_state+0x1a6/0x630 [ 627.389843][T22653] shmem_get_folio_gfp+0x56c/0x1900 [ 627.389868][T22653] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 627.389891][T22653] ? find_held_lock+0x2b/0x80 [ 627.389906][T22653] shmem_get_folio+0x84/0xb0 [ 627.389929][T22653] collapse_file+0x1263/0x3cc0 [ 627.389949][T22653] ? __lock_acquire+0x4a5/0x2630 [ 627.389968][T22653] ? __pfx_collapse_file+0x10/0x10 [ 627.389991][T22653] ? find_held_lock+0x2b/0x80 [ 627.390011][T22653] ? hpage_collapse_scan_file+0x583/0x1fc0 [ 627.390027][T22653] ? hpage_collapse_scan_file+0x583/0x1fc0 [ 627.390046][T22653] hpage_collapse_scan_file+0x603/0x1fc0 [ 627.390067][T22653] ? __pfx_hpage_collapse_scan_file+0x10/0x10 [ 627.390087][T22653] ? madvise_collapse+0x3cb/0xbe0 [ 627.390102][T22653] ? madvise_collapse+0x3cb/0xbe0 [ 627.390123][T22653] madvise_collapse+0x412/0xbe0 [ 627.390144][T22653] ? finish_task_switch.isra.0+0x200/0xb80 [ 627.390160][T22653] ? __pfx_madvise_collapse+0x10/0x10 [ 627.390177][T22653] ? rcu_is_cpu_rrupt_from_idle+0x1b0/0x270 [ 627.390206][T22653] madvise_vma_behavior+0x1987/0x3050 [ 627.390226][T22653] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 627.390242][T22653] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 627.390261][T22653] ? mas_prev+0x9b/0xf0 [ 627.390277][T22653] ? __pfx_mas_prev+0x10/0x10 [ 627.390299][T22653] ? find_vma_prev+0xd8/0x150 [ 627.390313][T22653] ? futex_unqueue+0x133/0x2c0 [ 627.390330][T22653] ? __pfx_find_vma_prev+0x10/0x10 [ 627.390350][T22653] ? __futex_wait+0x256/0x300 [ 627.390375][T22653] madvise_walk_vmas+0x2fe/0xa90 [ 627.390395][T22653] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 627.390416][T22653] madvise_do_behavior+0x1ea/0x510 [ 627.390434][T22653] ? __pfx_madvise_do_behavior+0x10/0x10 [ 627.390450][T22653] ? down_read+0x13b/0x460 [ 627.390477][T22653] do_madvise+0x195/0x240 [ 627.390492][T22653] ? __pfx_do_madvise+0x10/0x10 [ 627.390508][T22653] ? do_futex+0x192/0x350 [ 627.390530][T22653] ? __sys_sendmsg+0x18f/0x220 [ 627.390559][T22653] __x64_sys_madvise+0xa9/0x110 [ 627.390574][T22653] ? lockdep_hardirqs_on+0x78/0x100 [ 627.390590][T22653] do_syscall_64+0x106/0xf80 [ 627.390606][T22653] ? clear_bhb_loop+0x40/0x90 [ 627.390624][T22653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.390639][T22653] RIP: 0033:0x7f60d659c629 [ 627.390654][T22653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.390669][T22653] RSP: 002b:00007f60d741b028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 627.390684][T22653] RAX: ffffffffffffffda RBX: 00007f60d6816180 RCX: 00007f60d659c629 [ 627.390694][T22653] RDX: 0000000000000019 RSI: 0000000000200007 RDI: 0000000000000000 [ 627.390703][T22653] RBP: 00007f60d6632b39 R08: 0000000000000000 R09: 0000000000000000 [ 627.390712][T22653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.390721][T22653] R13: 00007f60d6816218 R14: 00007f60d6816180 R15: 00007ffcfb8e55e8 [ 627.390741][T22653] [ 627.390748][T22653] memory: usage 3072kB, limit 3072kB, failcnt 149476 [ 628.753859][T22653] memory+swap: usage 3732kB, limit 9007199254740988kB, failcnt 0 [ 628.773033][T22653] kmem: usage 2812kB, limit 9007199254740988kB, failcnt 0 [ 628.784223][T22653] Memory cgroup stats for /syz0: [ 628.784326][T22653] cache 0 [ 628.802098][T22653] rss 0 [ 628.808218][T22653] rss_huge 0 [ 628.815064][T22653] shmem 0 [ 628.822352][T22653] mapped_file 0 [ 628.829323][T22653] dirty 0 [ 628.835536][T22653] writeback 0 [ 628.842388][T22653] workingset_refault_anon 26975 [ 628.847237][T22653] workingset_refault_file 40603 [ 628.865484][T22653] swap 675840 [ 628.868785][T22653] swapcached 801390592 [ 628.881626][T22653] pgpgin 516229 [ 628.888423][T22653] pgpgout 562202 [ 628.895546][T22653] pgfault 347581 [ 628.904925][T22653] pgmajfault 12595 [ 628.913094][T22653] inactive_anon 8192 [ 628.916994][T22653] active_anon 258048 [ 628.930217][T22653] inactive_file 0 [ 628.938359][T22653] active_file 0 [ 628.945465][T22653] unevictable 0 [ 628.948945][T22653] hierarchical_memory_limit 3145728 [ 628.963268][T22653] hierarchical_memsw_limit 9223372036854771712 [ 628.979656][T22653] total_cache 0 [ 628.986454][T22653] total_rss 0 [ 628.994449][T22653] total_rss_huge 0 [ 628.998172][T22653] total_shmem 0 [ 629.010596][T22653] total_mapped_file 0 [ 629.019015][T22653] total_dirty 0 [ 629.028290][T22653] total_writeback 0 [ 629.035603][T22653] total_workingset_refault_anon 26975 [ 629.046670][T22653] total_workingset_refault_file 40603 [ 629.058896][T22653] total_swap 675840 [ 629.066257][T22653] total_swapcached 801390592 [ 629.076525][T22653] total_pgpgin 516229 [ 629.087059][T22653] total_pgpgout 562202 [ 629.095673][T22653] total_pgfault 347581 [ 629.105596][T22653] total_pgmajfault 12595 [ 629.114521][T22653] total_inactive_anon 8192 [ 629.124602][T22653] total_active_anon 258048 [ 629.140727][T22653] total_inactive_file 0 [ 629.144896][T22653] total_active_file 0 [ 629.157883][T22653] total_unevictable 0 [ 629.166606][T22653] anon_cost 0 [ 629.173448][T22653] file_cost 0 [ 629.176744][T22653] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2261,pid=22616,uid=0 [ 629.215350][T22653] Memory cgroup out of memory: Killed process 22616 (syz.0.2261) total-vm:211444kB, anon-rss:1228kB, file-rss:30476kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 629.918171][T22737] debugfs: '!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' already exists in 'ieee80211' [ 630.782379][ T5822] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 630.868582][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 630.868610][ T5822] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 630.868617][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 630.868626][ T5822] Call Trace: [ 630.868631][ T5822] [ 630.868638][ T5822] dump_stack_lvl+0x100/0x190 [ 630.868663][ T5822] dump_header+0xfb/0x606 [ 630.868681][ T5822] oom_kill_process.cold+0xd/0x330 [ 630.868699][ T5822] out_of_memory+0x340/0x14f0 [ 630.868723][ T5822] ? __pfx_out_of_memory+0x10/0x10 [ 630.868755][ T5822] mem_cgroup_out_of_memory+0xc6/0x130 [ 630.868775][ T5822] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 630.868792][ T5822] ? find_held_lock+0x2b/0x80 [ 630.868809][ T5822] ? do_raw_spin_unlock+0x145/0x1e0 [ 630.868831][ T5822] ? _raw_spin_unlock+0x28/0x50 [ 630.868856][ T5822] try_charge_memcg+0x652/0xc90 [ 630.868874][ T5822] ? __pfx_try_charge_memcg+0x10/0x10 [ 630.868892][ T5822] ? find_held_lock+0x2b/0x80 [ 630.868905][ T5822] ? rcu_read_unlock+0x17/0x60 [ 630.868919][ T5822] ? rcu_read_unlock+0x17/0x60 [ 630.868935][ T5822] charge_memcg+0xa6/0x280 [ 630.868949][ T5822] mem_cgroup_swapin_charge_folio+0xeb/0x470 [ 630.868969][ T5822] __swap_cache_prepare_and_add+0x528/0x9e0 [ 630.868997][ T5822] ? __pfx___swap_cache_prepare_and_add+0x10/0x10 [ 630.869015][ T5822] ? __pfx_swap_entry_swapped+0x10/0x10 [ 630.869043][ T5822] swap_cache_alloc_folio+0x1cb/0x300 [ 630.869064][ T5822] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 630.869084][ T5822] ? lockdep_hardirqs_on+0x78/0x100 [ 630.869100][ T5822] ? finish_task_switch.isra.0+0x205/0xb80 [ 630.869119][ T5822] swap_cluster_readahead+0x411/0x770 [ 630.869143][ T5822] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 630.869165][ T5822] ? update_cfs_rq_load_avg+0x51/0x550 [ 630.869190][ T5822] ? get_vma_policy+0x23f/0x3b0 [ 630.869207][ T5822] swapin_readahead+0x160/0x12c0 [ 630.869232][ T5822] ? __pfx_swapin_readahead+0x10/0x10 [ 630.869251][ T5822] ? find_held_lock+0x2b/0x80 [ 630.869263][ T5822] ? swap_table_get+0x103/0x2c0 [ 630.869280][ T5822] ? swap_table_get+0x103/0x2c0 [ 630.869301][ T5822] ? swap_table_get+0x10d/0x2c0 [ 630.869319][ T5822] ? swap_cache_get_folio+0x1ae/0x600 [ 630.869338][ T5822] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 630.869355][ T5822] ? __pfx_get_swap_device+0x10/0x10 [ 630.869382][ T5822] ? do_swap_page+0xb2e/0x68e0 [ 630.869399][ T5822] do_swap_page+0xb2e/0x68e0 [ 630.869426][ T5822] ? __pfx_do_swap_page+0x10/0x10 [ 630.869445][ T5822] ? __free_object+0x2a8/0x400 [ 630.869463][ T5822] ? lockdep_hardirqs_on+0x78/0x100 [ 630.869480][ T5822] ? rcu_is_watching+0x12/0xc0 [ 630.869502][ T5822] ? __pte_offset_map+0x179/0x310 [ 630.869527][ T5822] __handle_mm_fault+0x18c1/0x2b60 [ 630.869549][ T5822] ? reacquire_held_locks+0xce/0x1e0 [ 630.869568][ T5822] ? __pfx___handle_mm_fault+0x10/0x10 [ 630.869590][ T5822] ? lock_vma_under_rcu+0x17c/0x590 [ 630.869620][ T5822] handle_mm_fault+0x36d/0xa20 [ 630.869642][ T5822] do_user_addr_fault+0x5a3/0x12f0 [ 630.869670][ T5822] exc_page_fault+0x6f/0xd0 [ 630.869686][ T5822] asm_exc_page_fault+0x26/0x30 [ 630.869701][ T5822] RIP: 0033:0x7f6f6e15cece [ 630.869715][ T5822] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 630.869733][ T5822] RSP: 002b:00007ffd325596d8 EFLAGS: 00010246 [ 630.869746][ T5822] RAX: 0000000000000000 RBX: 0000555568be8500 RCX: 00007f6f6e15cece [ 630.869755][ T5822] RDX: 00007ffd32559730 RSI: 0000000000000000 RDI: 0000000000000000 [ 630.869765][ T5822] RBP: 00007ffd3255979c R08: 0000000000000000 R09: 0000000000000000 [ 630.869774][ T5822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 630.869782][ T5822] R13: 00000000000927c0 R14: 0000000000099d44 R15: 00007ffd325597f0 [ 630.869802][ T5822] [ 631.327840][ T5822] memory: usage 3072kB, limit 3072kB, failcnt 149681 [ 631.334599][ T5822] memory+swap: usage 3776kB, limit 9007199254740988kB, failcnt 0 [ 631.342344][ T5822] kmem: usage 2884kB, limit 9007199254740988kB, failcnt 0 [ 631.349430][ T5822] Memory cgroup stats for /syz0: [ 631.349526][ T5822] cache 0 [ 631.358303][ T5822] rss 0 [ 631.361115][ T5822] rss_huge 0 [ 631.364297][ T5822] shmem 0 [ 631.367214][ T5822] mapped_file 0 [ 631.371925][ T5822] dirty 0 [ 631.374855][ T5822] writeback 0 [ 631.378115][ T5822] workingset_refault_anon 27008 [ 631.383568][ T5822] workingset_refault_file 40603 [ 631.388400][ T5822] swap 720896 [ 631.391694][ T5822] swapcached 801423360 [ 631.395773][ T5822] pgpgin 516303 [ 631.399210][ T5822] pgpgout 562295 [ 631.402778][ T5822] pgfault 348004 [ 631.406299][ T5822] pgmajfault 12609 [ 631.409993][ T5822] inactive_anon 20480 [ 631.413990][ T5822] active_anon 172032 [ 631.417863][ T5822] inactive_file 0 [ 631.421520][ T5822] active_file 0 [ 631.424955][ T5822] unevictable 0 [ 631.428386][ T5822] hierarchical_memory_limit 3145728 [ 631.433605][ T5822] hierarchical_memsw_limit 9223372036854771712 [ 631.439741][ T5822] total_cache 0 [ 631.443217][ T5822] total_rss 0 [ 631.446480][ T5822] total_rss_huge 0 [ 631.450177][ T5822] total_shmem 0 [ 631.453925][ T5822] total_mapped_file 0 [ 631.457897][ T5822] total_dirty 0 [ 631.462264][ T5822] total_writeback 0 [ 631.466056][ T5822] total_workingset_refault_anon 27008 [ 631.471449][ T5822] total_workingset_refault_file 40603 [ 631.476798][ T5822] total_swap 720896 [ 631.480639][ T5822] total_swapcached 801423360 [ 631.485780][ T5822] total_pgpgin 516303 [ 631.489747][ T5822] total_pgpgout 562295 [ 631.493837][ T5822] total_pgfault 348004 [ 631.497881][ T5822] total_pgmajfault 12609 [ 631.502125][ T5822] total_inactive_anon 20480 [ 631.506603][ T5822] total_active_anon 172032 [ 631.511020][ T5822] total_inactive_file 0 [ 631.515152][ T5822] total_active_file 0 [ 631.519105][ T5822] total_unevictable 0 [ 631.523163][ T5822] anon_cost 0 [ 631.526425][ T5822] file_cost 0 [ 631.529684][ T5822] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2270,pid=22741,uid=0 [ 631.544579][ T5822] Memory cgroup out of memory: Killed process 22741 (syz.0.2270) total-vm:135388kB, anon-rss:1232kB, file-rss:22200kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 633.625279][ T31] oom_reaper: reaped process 22741 (syz.0.2270), now anon-rss:0kB, file-rss:21172kB, shmem-rss:0kB [ 634.360336][T22838] FAULT_INJECTION: forcing a failure. [ 634.360336][T22838] name failslab, interval 1, probability 0, space 0, times 0 [ 634.389668][T22838] CPU: 0 UID: 0 PID: 22838 Comm: syz.4.2274 Tainted: G U L syzkaller #0 PREEMPT(full) [ 634.389697][T22838] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 634.389704][T22838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 634.389714][T22838] Call Trace: [ 634.389720][T22838] [ 634.389727][T22838] dump_stack_lvl+0x100/0x190 [ 634.389755][T22838] should_fail_ex.cold+0x5/0xa [ 634.389774][T22838] should_failslab+0xc2/0x120 [ 634.389789][T22838] __kmalloc_node_noprof+0xe6/0x850 [ 634.389809][T22838] ? user_buffer_init+0x2a1/0x6d0 [ 634.389834][T22838] user_buffer_init+0x2a1/0x6d0 [ 634.389857][T22838] tracing_mark_open+0x1b7/0x240 [ 634.389880][T22838] do_dentry_open+0x6d8/0x1660 [ 634.389902][T22838] ? __pfx_tracing_mark_open+0x10/0x10 [ 634.389928][T22838] vfs_open+0x82/0x3f0 [ 634.389947][T22838] path_openat+0x208c/0x31a0 [ 634.389967][T22838] ? __pfx_path_openat+0x10/0x10 [ 634.389988][T22838] do_file_open+0x20e/0x430 [ 634.390004][T22838] ? __pfx_do_file_open+0x10/0x10 [ 634.390031][T22838] ? alloc_fd+0x476/0x790 [ 634.390055][T22838] ? do_getname+0x191/0x390 [ 634.390073][T22838] do_sys_openat2+0x10d/0x1e0 [ 634.390090][T22838] ? __pfx_do_sys_openat2+0x10/0x10 [ 634.390109][T22838] ? __fget_files+0x21f/0x3d0 [ 634.390135][T22838] __x64_sys_openat+0x12d/0x210 [ 634.390153][T22838] ? __pfx___x64_sys_openat+0x10/0x10 [ 634.390178][T22838] do_syscall_64+0x106/0xf80 [ 634.390194][T22838] ? clear_bhb_loop+0x40/0x90 [ 634.390212][T22838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.390227][T22838] RIP: 0033:0x7fb593f9c629 [ 634.390242][T22838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.390256][T22838] RSP: 002b:00007fb5921f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 634.390271][T22838] RAX: ffffffffffffffda RBX: 00007fb594215fa0 RCX: 00007fb593f9c629 [ 634.390281][T22838] RDX: 0000000000109c00 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 634.390290][T22838] RBP: 00007fb594032b39 R08: 0000000000000000 R09: 0000000000000000 [ 634.390299][T22838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.390307][T22838] R13: 00007fb594216038 R14: 00007fb594215fa0 R15: 00007ffe6a2d6d28 [ 634.390327][T22838] [ 635.577387][T22847] netlink: 'syz.3.2275': attribute type 4 has an invalid length. [ 637.296316][T22867] openvswitch: netlink: Key 15 has unexpected len 16 expected 4 [ 638.847507][T22888] netlink: 'syz.3.2285': attribute type 4 has an invalid length. [ 645.607140][ T7169] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 645.619581][ T7169] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 645.629277][ T7169] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 645.636942][ T7169] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 645.644501][ T7169] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 646.018512][T22975] chnl_net:caif_netlink_parms(): no params data found [ 646.172705][T22975] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.188423][T22975] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.205804][T22975] bridge_slave_0: entered allmulticast mode [ 646.219077][T22975] bridge_slave_0: entered promiscuous mode [ 646.237071][T22975] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.250366][T22975] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.268541][T22975] bridge_slave_1: entered allmulticast mode [ 646.285758][T22975] bridge_slave_1: entered promiscuous mode [ 646.346850][T22975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.373672][T22975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.449968][T22975] team0: Port device team_slave_0 added [ 646.465502][T22975] team0: Port device team_slave_1 added [ 646.529447][T22975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.536414][T22975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.604734][T22975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.630187][T22975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.637153][T22975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 646.708931][T22975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.790868][T22975] hsr_slave_0: entered promiscuous mode [ 646.811598][T22975] hsr_slave_1: entered promiscuous mode [ 646.827415][T22975] debugfs: 'hsr0' already exists in 'hsr' [ 646.838191][T22975] Cannot create hsr debugfs directory [ 647.212676][T22975] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 647.255563][T22975] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 647.279740][T22975] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 647.297969][T22975] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 647.455307][T22975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 647.490926][T22975] 8021q: adding VLAN 0 to HW filter on device team0 [ 647.513703][ T7168] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.520923][ T7168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.551264][ T7168] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.558456][ T7168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.622991][T22975] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 647.700202][ T7169] Bluetooth: hci0: command tx timeout [ 647.889943][T22975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.206442][T22975] veth0_vlan: entered promiscuous mode [ 648.229200][T22975] veth1_vlan: entered promiscuous mode [ 648.276302][T22975] veth0_macvtap: entered promiscuous mode [ 648.301798][T22975] veth1_macvtap: entered promiscuous mode [ 648.327409][T22975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.356273][T22975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 648.385072][ T7168] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.411328][ T7168] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.439795][ T7168] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.448519][ T7168] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.558261][ T7168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.570754][ T7168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 648.640930][ T8032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 648.649836][ T8032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.661969][ T7258] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 649.671822][ T7258] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 649.682425][ T7258] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 649.692338][ T7258] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 649.701816][ T7258] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 649.780226][ T7169] Bluetooth: hci0: command tx timeout [ 650.325179][T23303] chnl_net:caif_netlink_parms(): no params data found [ 650.659939][T23303] bridge0: port 1(bridge_slave_0) entered blocking state [ 650.711238][ T7258] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 650.727141][ T7258] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 650.735955][ T7258] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 650.750725][ T7258] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 650.758191][ T7258] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 650.783670][T23303] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.840314][T23303] bridge_slave_0: entered allmulticast mode [ 650.887490][T23303] bridge_slave_0: entered promiscuous mode [ 650.919058][T23303] bridge0: port 2(bridge_slave_1) entered blocking state [ 650.943544][T23303] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.960523][T23303] bridge_slave_1: entered allmulticast mode [ 650.976679][T23303] bridge_slave_1: entered promiscuous mode [ 651.017722][T22172] bridge0: port 3(syz_tun) entered disabled state [ 651.071624][T22172] syz_tun (unregistering): left allmulticast mode [ 651.078059][T22172] syz_tun (unregistering): left promiscuous mode [ 651.120362][T22172] bridge0: port 3(syz_tun) entered disabled state [ 651.282438][T23303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.379546][T23303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.565664][T23303] team0: Port device team_slave_0 added [ 651.583226][T23303] team0: Port device team_slave_1 added [ 651.777217][T23303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.790713][ T7258] Bluetooth: hci1: command tx timeout [ 651.807633][T23303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.869877][ T7258] Bluetooth: hci0: command tx timeout [ 651.903069][T23303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.037232][T23303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.070968][T23303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.152981][T23303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.445889][T23303] hsr_slave_0: entered promiscuous mode [ 652.473640][T23303] hsr_slave_1: entered promiscuous mode [ 652.501639][T23303] debugfs: 'hsr0' already exists in 'hsr' [ 652.539377][T23303] Cannot create hsr debugfs directory [ 652.827152][ T7258] Bluetooth: hci3: command tx timeout [ 652.880237][T23428] chnl_net:caif_netlink_parms(): no params data found [ 653.283984][T23428] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.291075][T23428] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.323341][T23428] bridge_slave_0: entered allmulticast mode [ 653.351835][T23428] bridge_slave_0: entered promiscuous mode [ 653.380194][T23428] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.392525][T23732] ERROR: Out of memory at tomoyo_memory_ok. [ 653.415087][T23428] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.441773][T23428] bridge_slave_1: entered allmulticast mode [ 653.448800][T23428] bridge_slave_1: entered promiscuous mode [ 653.573731][T23303] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 653.612583][T23303] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 653.643790][T23428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.678729][T23303] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 653.699533][T23428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 653.745640][T23303] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 653.862577][ T7258] Bluetooth: hci1: command tx timeout [ 653.903610][T23428] team0: Port device team_slave_0 added [ 653.928669][T23428] team0: Port device team_slave_1 added [ 653.944323][ T7258] Bluetooth: hci0: command tx timeout [ 654.051214][T23428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.078803][T23428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.186523][T23428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.227478][T23428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.254149][T23428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.338225][T23428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.618137][T23428] hsr_slave_0: entered promiscuous mode [ 654.643901][T23428] hsr_slave_1: entered promiscuous mode [ 654.649972][T23428] debugfs: 'hsr0' already exists in 'hsr' [ 654.699950][T23428] Cannot create hsr debugfs directory [ 654.798404][T23303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.821153][T23303] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.873476][ T7168] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.873573][ T7168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.897158][ T7694] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.897228][ T7694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.902910][ T7258] Bluetooth: hci3: command tx timeout [ 655.425579][T23428] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 655.543576][T23428] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 655.564382][T23428] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 655.614452][T23428] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 655.663254][T23303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.942860][ T7258] Bluetooth: hci1: command tx timeout [ 656.081630][T23428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.171493][T23428] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.286541][ T8032] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.293809][ T8032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.335103][ T8032] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.342357][ T8032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.458223][T23428] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 656.493147][T23428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 656.584751][T23303] veth0_vlan: entered promiscuous mode [ 656.641516][T23303] veth1_vlan: entered promiscuous mode [ 656.734332][T23303] veth0_macvtap: entered promiscuous mode [ 656.804893][T23303] veth1_macvtap: entered promiscuous mode [ 656.879953][T23303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 656.984126][ T7258] Bluetooth: hci3: command tx timeout [ 657.057662][T23303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.213478][ T8851] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.222913][ T7694] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.251276][T23428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.260872][ T7258] Bluetooth: hci2: Malformed LE Event: 0x0b [ 657.282709][ T7694] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.329423][ T7694] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.559902][ T8032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.603555][ T8032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.706626][ T8032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.731492][ T8032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.018860][T23428] veth0_vlan: entered promiscuous mode [ 658.025098][ T7258] Bluetooth: hci1: command tx timeout [ 658.067853][T23428] veth1_vlan: entered promiscuous mode [ 658.168690][T23428] veth0_macvtap: entered promiscuous mode [ 658.219827][T23428] veth1_macvtap: entered promiscuous mode [ 658.272625][T23428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.351536][T23428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.415586][ T8032] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.445266][ T8032] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.565790][ T8032] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.604299][ T8032] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.034752][ T8851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.043062][ T8851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.070272][ T7258] Bluetooth: hci3: command tx timeout [ 659.271439][ T7168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.295456][ T7168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.522656][ T7258] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 663.786389][T24187] random: crng reseeded on system resumption [ 664.035953][T24187] hub 1-0:1.0: USB hub found [ 664.157463][T24187] hub 1-0:1.0: 1 port detected [ 664.248030][ T7169] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 664.258654][ T7169] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 664.267512][ T7169] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 664.275218][ T7169] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 664.282684][ T7169] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 666.349981][ T7258] Bluetooth: hci4: command tx timeout [ 667.005902][T24330] ubi0: attaching mtd0 [ 667.030312][T24330] ubi0: scanning is finished [ 667.035884][T24330] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 667.650285][T24330] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 667.826786][T24194] chnl_net:caif_netlink_parms(): no params data found [ 668.432761][ T7258] Bluetooth: hci4: command tx timeout [ 669.548395][T24194] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.612527][T24194] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.660577][T24194] bridge_slave_0: entered allmulticast mode [ 669.712552][T24194] bridge_slave_0: entered promiscuous mode [ 669.751786][T24194] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.822031][T24194] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.859910][T24194] bridge_slave_1: entered allmulticast mode [ 669.902661][T24194] bridge_slave_1: entered promiscuous mode [ 669.922337][T24461] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2320'. [ 670.040516][T24460] bond0: option arp_all_targets: invalid value (/dev/a¸kfŒudio1) [ 670.205817][T24194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.295861][T24194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.510030][ T7258] Bluetooth: hci4: command tx timeout [ 670.667810][T24507] FAULT_INJECTION: forcing a failure. [ 670.667810][T24507] name failslab, interval 1, probability 0, space 0, times 0 [ 670.729851][T24507] CPU: 0 UID: 0 PID: 24507 Comm: syz.7.2324 Tainted: G U L syzkaller #0 PREEMPT(full) [ 670.729879][T24507] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 670.729886][T24507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 670.729895][T24507] Call Trace: [ 670.729902][T24507] [ 670.729910][T24507] dump_stack_lvl+0x100/0x190 [ 670.729956][T24507] should_fail_ex.cold+0x5/0xa [ 670.729975][T24507] should_failslab+0xc2/0x120 [ 670.729995][T24507] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 670.730017][T24507] ? blk_alloc_queue+0x31/0x790 [ 670.730036][T24507] blk_alloc_queue+0x31/0x790 [ 670.730093][T24507] __blk_alloc_disk+0xa0/0x170 [ 670.730115][T24507] ? __pfx___blk_alloc_disk+0x10/0x10 [ 670.730147][T24507] ? __pfx_idr_alloc+0x10/0x10 [ 670.730163][T24507] ? lockdep_init_map_type+0x5c/0x250 [ 670.730183][T24507] ? __raw_spin_lock_init+0x3a/0x110 [ 670.730206][T24507] ? __pfx_hot_add_show+0x10/0x10 [ 670.730221][T24507] zram_add+0x1bf/0x610 [ 670.730236][T24507] ? __pfx_zram_add+0x10/0x10 [ 670.730262][T24507] ? find_held_lock+0x2b/0x80 [ 670.730275][T24507] ? sysfs_file_kobj+0xe4/0x290 [ 670.730295][T24507] ? __pfx_hot_add_show+0x10/0x10 [ 670.730310][T24507] hot_add_show+0x21/0x80 [ 670.730325][T24507] class_attr_show+0x72/0xa0 [ 670.730346][T24507] ? __pfx_class_attr_show+0x10/0x10 [ 670.730366][T24507] sysfs_kf_seq_show+0x217/0x3a0 [ 670.730387][T24507] seq_read_iter+0x32f/0x1270 [ 670.730416][T24507] kernfs_fop_read_iter+0x46c/0x610 [ 670.730431][T24507] ? rw_verify_area+0xce/0x6d0 [ 670.730450][T24507] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 670.730466][T24507] vfs_read+0x825/0xb30 [ 670.730490][T24507] ? __pfx_vfs_read+0x10/0x10 [ 670.730523][T24507] ksys_read+0x12a/0x250 [ 670.730543][T24507] ? __pfx_ksys_read+0x10/0x10 [ 670.730570][T24507] do_syscall_64+0x106/0xf80 [ 670.730585][T24507] ? clear_bhb_loop+0x40/0x90 [ 670.730603][T24507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.730619][T24507] RIP: 0033:0x7f7c0279c629 [ 670.730633][T24507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.730648][T24507] RSP: 002b:00007f7c035d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 670.730663][T24507] RAX: ffffffffffffffda RBX: 00007f7c02a15fa0 RCX: 00007f7c0279c629 [ 670.730673][T24507] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000005 [ 670.730682][T24507] RBP: 00007f7c02832b39 R08: 0000000000000000 R09: 0000000000000000 [ 670.730691][T24507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.730700][T24507] R13: 00007f7c02a16038 R14: 00007f7c02a15fa0 R15: 00007ffcdef79108 [ 670.730720][T24507] [ 671.016414][T24194] team0: Port device team_slave_0 added [ 671.025742][T24194] team0: Port device team_slave_1 added [ 671.047394][T24194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.054432][T24194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.080494][T24194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.092404][T24194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.099338][T24194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.127076][T24194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.163495][T24194] hsr_slave_0: entered promiscuous mode [ 671.169834][T24194] hsr_slave_1: entered promiscuous mode [ 671.176347][T24194] debugfs: 'hsr0' already exists in 'hsr' [ 671.182170][T24194] Cannot create hsr debugfs directory [ 671.905080][T24194] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.923238][T24507] zram: Error allocating disk structure for device 1 [ 672.080340][T24194] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.266135][T24194] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.419363][T24194] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.591390][ T7258] Bluetooth: hci4: command tx timeout [ 672.656989][ T8853] gretap0: left allmulticast mode [ 672.673592][ T8853] gretap0: left promiscuous mode [ 672.699774][ T8853] bridge0: port 3(gretap0) entered disabled state [ 672.732352][ T8853] bridge_slave_0: left allmulticast mode [ 672.759174][ T8853] bridge_slave_0: left promiscuous mode [ 672.784077][ T8853] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.459114][ T8853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 673.515688][ T8853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 673.574360][ T8853] bond0 (unregistering): Released all slaves [ 673.798633][T24753] zswap: compressor û not available [ 673.911957][T24760] Setting dangerous option i915.mitigations - tainting kernel [ 673.979139][T24756] Setting dangerous option i915.mitigations - tainting kernel [ 674.084786][T24757] [U] ^Z [ 674.325934][T24194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 674.453441][T24194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 674.475875][T24838] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 674.500524][T24194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 674.574125][T24194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 675.150328][ T8853] hsr_slave_0: left promiscuous mode [ 675.161430][ T8853] hsr_slave_1: left promiscuous mode [ 675.182542][ T8853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 675.214061][ T8853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 675.243563][ T8853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 675.269945][ T8853] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 675.300983][ T8853] veth1_macvtap: left promiscuous mode [ 675.326616][ T8853] veth0_macvtap: left promiscuous mode [ 675.346427][ T8853] veth0_vlan: left promiscuous mode [ 676.417533][ T8853] team0 (unregistering): Port device team_slave_1 removed [ 676.498533][ T8853] team0 (unregistering): Port device team_slave_0 removed [ 676.847451][T24194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.952434][T24194] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.025651][ T8865] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.032795][ T8865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.101714][ T8865] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.108993][ T8865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.308199][T24194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 677.866805][ T29] audit: type=1326 audit(4294969722.793:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24961 comm="syz.6.2344" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb453d9c629 code=0x0 [ 678.019984][T24194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.204923][T24194] veth0_vlan: entered promiscuous mode [ 678.229616][T24194] veth1_vlan: entered promiscuous mode [ 678.268157][T24194] veth0_macvtap: entered promiscuous mode [ 678.287028][T24194] veth1_macvtap: entered promiscuous mode [ 678.311661][T24194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.330602][T24194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.365843][ T8864] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.403383][ T8864] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.431061][ T8864] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.481474][ T8864] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.499435][T25001] netlink: 'syz.5.2346': attribute type 23 has an invalid length. [ 678.855206][ T7168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.863054][ T7168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.160254][ T7168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.209990][ T7168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.227718][T25040] futex_wake_op: syz.5.2350 tries to shift op by -2048; fix this program [ 679.266980][T25040] futex_wake_op: syz.5.2350 tries to shift op by -2048; fix this program [ 679.347283][T25044] 0x000000000001-0x000000020000 : "" [ 679.441712][T25044] ftl_cs: FTL header corrupt! [ 679.679223][T25053] ERROR: Out of memory at tomoyo_memory_ok. [ 680.049370][T25076] FAULT_INJECTION: forcing a failure. [ 680.049370][T25076] name failslab, interval 1, probability 0, space 0, times 0 [ 680.064242][T25075] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 680.109682][T25076] CPU: 0 UID: 0 PID: 25076 Comm: syz.3.2353 Tainted: G U L syzkaller #0 PREEMPT(full) [ 680.109716][T25076] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 680.109723][T25076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 680.109733][T25076] Call Trace: [ 680.109740][T25076] [ 680.109747][T25076] dump_stack_lvl+0x100/0x190 [ 680.109776][T25076] should_fail_ex.cold+0x5/0xa [ 680.109795][T25076] ? tomoyo_realpath_from_path+0xb6/0x690 [ 680.109812][T25076] should_failslab+0xc2/0x120 [ 680.109827][T25076] __kmalloc_noprof+0xe0/0x850 [ 680.109856][T25076] tomoyo_realpath_from_path+0xb6/0x690 [ 680.109877][T25076] tomoyo_check_open_permission+0x2af/0x3c0 [ 680.109899][T25076] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 680.109940][T25076] ? do_raw_spin_lock+0x128/0x260 [ 680.109963][T25076] ? path_get+0x61/0x80 [ 680.109980][T25076] tomoyo_file_open+0x6b/0x90 [ 680.109999][T25076] security_file_open+0xb5/0x1e0 [ 680.110015][T25076] do_dentry_open+0x5aa/0x1660 [ 680.110039][T25076] ? security_inode_permission+0xbf/0x250 [ 680.110063][T25076] vfs_open+0x82/0x3f0 [ 680.110091][T25076] path_openat+0x208c/0x31a0 [ 680.110113][T25076] ? __pfx_path_openat+0x10/0x10 [ 680.110135][T25076] do_file_open+0x20e/0x430 [ 680.110151][T25076] ? __pfx_do_file_open+0x10/0x10 [ 680.110180][T25076] ? alloc_fd+0x476/0x790 [ 680.110206][T25076] ? do_getname+0x191/0x390 [ 680.110265][T25076] do_sys_openat2+0x10d/0x1e0 [ 680.110284][T25076] ? __pfx_do_sys_openat2+0x10/0x10 [ 680.110310][T25076] __x64_sys_openat+0x12d/0x210 [ 680.110330][T25076] ? __pfx___x64_sys_openat+0x10/0x10 [ 680.110358][T25076] do_syscall_64+0x106/0xf80 [ 680.110374][T25076] ? clear_bhb_loop+0x40/0x90 [ 680.110393][T25076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.110409][T25076] RIP: 0033:0x7f6d4f99c629 [ 680.110423][T25076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.110438][T25076] RSP: 002b:00007f6d508b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 680.110454][T25076] RAX: ffffffffffffffda RBX: 00007f6d4fc15fa0 RCX: 00007f6d4f99c629 [ 680.110464][T25076] RDX: 0000000000101000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 680.110478][T25076] RBP: 00007f6d4fa32b39 R08: 0000000000000000 R09: 0000000000000000 [ 680.110487][T25076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.110496][T25076] R13: 00007f6d4fc16038 R14: 00007f6d4fc15fa0 R15: 00007fff90718758 [ 680.110516][T25076] [ 680.112545][T25076] ERROR: Out of memory at tomoyo_realpath_from_path. [ 680.917852][ T7258] Bluetooth: hci3: Unexpected cc 0x7c89 with no status [ 681.904046][T25156] QAT: Device 0 not found [ 681.977615][T25156] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 681.983729][T25156] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 682.413346][T25156] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 682.504131][T25156] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 682.526885][T25156] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 682.536580][T25167] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2361'. [ 682.638648][T25156] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 682.674401][T25167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.697005][T25156] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 682.702966][T25156] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 682.789617][T25167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.811979][T25156] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 682.821826][T25167] bond0 (unregistering): Released all slaves [ 682.830799][T25156] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 682.863489][T25156] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 682.986025][T25156] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 684.039138][ T7258] Bluetooth: hci0: command 0x0c1a tx timeout [ 684.518291][ T7258] Bluetooth: hci1: command 0x0c1a tx timeout [ 684.757959][ T7258] Bluetooth: hci3: command 0x0c1a tx timeout [ 684.837238][ T7258] Bluetooth: hci4: command 0x0c1a tx timeout [ 684.947612][T25274] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 685.436965][T25302] [U] [ 685.968195][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.974536][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.055473][T25330] netlink: zone id is out of range [ 686.118235][ T7258] Bluetooth: hci0: command 0x0c1a tx timeout [ 686.145171][T25330] netlink: zone id is out of range [ 686.204036][T25330] netlink: zone id is out of range [ 686.277306][T25330] netlink: zone id is out of range [ 686.333202][T25330] netlink: zone id is out of range [ 686.393733][T25330] netlink: zone id is out of range [ 686.468760][T25330] netlink: zone id is out of range [ 686.518839][T25330] netlink: zone id is out of range [ 686.597568][T25330] netlink: zone id is out of range [ 686.607451][ T7258] Bluetooth: hci1: command 0x0c1a tx timeout [ 686.629297][T25358] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2380'. [ 686.738304][T25330] netlink: zone id is out of range [ 686.838359][ T7258] Bluetooth: hci3: command 0x0c1a tx timeout [ 686.919150][ T7258] Bluetooth: hci4: command 0x0c1a tx timeout [ 688.199297][ T7258] Bluetooth: hci0: command 0x0c1a tx timeout [ 688.608266][T25494] program syz.5.2391 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 688.679584][ T7258] Bluetooth: hci1: command 0x0c1a tx timeout [ 688.700963][T25494] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 688.919598][ T7258] Bluetooth: hci3: command 0x0c1a tx timeout [ 689.003408][ T7258] Bluetooth: hci4: command 0x0c1a tx timeout [ 690.057106][T25541] FAULT_INJECTION: forcing a failure. [ 690.057106][T25541] name failslab, interval 1, probability 0, space 0, times 0 [ 690.120623][T25541] CPU: 0 UID: 0 PID: 25541 Comm: syz.7.2396 Tainted: G U L syzkaller #0 PREEMPT(full) [ 690.120650][T25541] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 690.120656][T25541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 690.120665][T25541] Call Trace: [ 690.120671][T25541] [ 690.120677][T25541] dump_stack_lvl+0x100/0x190 [ 690.120703][T25541] should_fail_ex.cold+0x5/0xa [ 690.120721][T25541] should_failslab+0xc2/0x120 [ 690.120736][T25541] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 690.120756][T25541] ? security_inode_alloc+0x3b/0x2c0 [ 690.120777][T25541] ? lockdep_init_map_type+0x5c/0x250 [ 690.120799][T25541] security_inode_alloc+0x3b/0x2c0 [ 690.120820][T25541] inode_init_always_gfp+0xced/0x1040 [ 690.120845][T25541] alloc_inode+0x8e/0x250 [ 690.120863][T25541] new_inode+0x22/0x1c0 [ 690.120881][T25541] __debugfs_create_file+0x105/0x4f0 [ 690.120906][T25541] debugfs_create_file_full+0x41/0x60 [ 690.120929][T25541] kvm_dev_ioctl+0x1491/0x1a50 [ 690.120952][T25541] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 690.120974][T25541] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 690.120991][T25541] __x64_sys_ioctl+0x18e/0x210 [ 690.121013][T25541] do_syscall_64+0x106/0xf80 [ 690.121029][T25541] ? clear_bhb_loop+0x40/0x90 [ 690.121047][T25541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.121062][T25541] RIP: 0033:0x7f7c0279c629 [ 690.121075][T25541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.121089][T25541] RSP: 002b:00007f7c035d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 690.121103][T25541] RAX: ffffffffffffffda RBX: 00007f7c02a15fa0 RCX: 00007f7c0279c629 [ 690.121114][T25541] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000006 [ 690.121122][T25541] RBP: 00007f7c02832b39 R08: 0000000000000000 R09: 0000000000000000 [ 690.121131][T25541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.121139][T25541] R13: 00007f7c02a16038 R14: 00007f7c02a15fa0 R15: 00007ffcdef79108 [ 690.121158][T25541] [ 690.121180][T25541] debugfs: out of free dentries, can not create file 'max_mmu_page_hash_collisions' [ 691.667189][T25619] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 695.269715][T25845] loop5: detected capacity change from 0 to 8 [ 698.221243][T25930] Invalid ELF header magic: != ELF [ 699.077792][T25938] Invalid ELF header magic: != ELF [ 699.184848][T25946] ptrace attach of "./syz-executor exec"[24194] was attempted by "./syz-executor exec"[25946] [ 699.696753][T25985] input input20: cannot allocate more than FF_MAX_EFFECTS effects [ 699.999796][T25989] FAULT_INJECTION: forcing a failure. [ 699.999796][T25989] name failslab, interval 1, probability 0, space 0, times 0 [ 700.044214][T25989] CPU: 0 UID: 0 PID: 25989 Comm: syz.6.2432 Tainted: G U L syzkaller #0 PREEMPT(full) [ 700.044247][T25989] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 700.044253][T25989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 700.044262][T25989] Call Trace: [ 700.044270][T25989] [ 700.044279][T25989] dump_stack_lvl+0x100/0x190 [ 700.044307][T25989] should_fail_ex.cold+0x5/0xa [ 700.044325][T25989] ? constrain_params_by_rules+0x175/0xcc0 [ 700.044340][T25989] should_failslab+0xc2/0x120 [ 700.044355][T25989] __kmalloc_noprof+0xe0/0x850 [ 700.044378][T25989] ? lockdep_hardirqs_on+0x78/0x100 [ 700.044397][T25989] constrain_params_by_rules+0x175/0xcc0 [ 700.044427][T25989] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 700.044447][T25989] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 700.044470][T25989] ? snd_interval_refine+0x2d0/0x580 [ 700.044491][T25989] snd_pcm_hw_refine+0x7e7/0xad0 [ 700.044509][T25989] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 700.044528][T25989] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 700.044546][T25989] ? snd_pcm_hw_param_value+0x27b/0x5b0 [ 700.044569][T25989] snd_pcm_hw_param_first+0x2b0/0x680 [ 700.044594][T25989] snd_pcm_hw_params+0x496/0x1cb0 [ 700.044613][T25989] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 700.044629][T25989] ? snd_pcm_hw_param_near.constprop.0+0x578/0x850 [ 700.044654][T25989] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 700.044679][T25989] snd_pcm_kernel_ioctl+0x167/0x2e0 [ 700.044696][T25989] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 700.044728][T25989] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 700.044752][T25989] ? __pfx___mutex_lock+0x10/0x10 [ 700.044780][T25989] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 700.044803][T25989] snd_pcm_oss_sync+0x265/0x840 [ 700.044828][T25989] snd_pcm_oss_release+0x238/0x300 [ 700.044849][T25989] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 700.044871][T25989] __fput+0x3ff/0xb40 [ 700.044891][T25989] task_work_run+0x150/0x240 [ 700.044914][T25989] ? __pfx_task_work_run+0x10/0x10 [ 700.044939][T25989] exit_to_user_mode_loop+0x100/0x4a0 [ 700.044960][T25989] do_syscall_64+0x668/0xf80 [ 700.044976][T25989] ? clear_bhb_loop+0x40/0x90 [ 700.044994][T25989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.045010][T25989] RIP: 0033:0x7fb453d9c629 [ 700.045024][T25989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.045039][T25989] RSP: 002b:00007fb454be0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 700.045054][T25989] RAX: 0000000000000000 RBX: 00007fb454015fa0 RCX: 00007fb453d9c629 [ 700.045064][T25989] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 700.045073][T25989] RBP: 00007fb453e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 700.045082][T25989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.045091][T25989] R13: 00007fb454016038 R14: 00007fb454015fa0 R15: 00007ffd4b0550a8 [ 700.045112][T25989] [ 700.498147][T25991] net_ratelimit: 149 callbacks suppressed [ 700.498164][T25991] openvswitch: netlink: IP tunnel dst address not specified [ 701.267598][T26007] netlink: 'syz.6.2437': attribute type 11 has an invalid length. [ 701.569280][T25997] batman_adv: batadv0: adding TT local entry 00:00:03:00:00:00 to non-existent VLAN 16 [ 706.574719][ T29] audit: type=1800 audit(4294967299.120:26): pid=26286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2461" name="dbroot" dev="configfs" ino=85023 res=0 errno=0 [ 706.605671][T26286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2461'. [ 706.661431][T26286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2461'. [ 707.910323][ T7169] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 707.922365][ T7169] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 707.931693][ T7169] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 707.950538][ T7169] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 707.957948][ T7169] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 708.675791][T26317] chnl_net:caif_netlink_parms(): no params data found [ 709.235004][T26317] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.275124][T26317] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.314338][T26317] bridge_slave_0: entered allmulticast mode [ 709.400199][T26317] bridge_slave_0: entered promiscuous mode [ 709.529944][T26317] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.595527][T26317] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.806221][T26317] bridge_slave_1: entered allmulticast mode [ 709.825642][T26317] bridge_slave_1: entered promiscuous mode [ 709.871756][T26481] random: crng reseeded on system resumption [ 709.997875][ T7169] Bluetooth: hci2: command tx timeout [ 710.192240][T26317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.244456][T26317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.427523][T26317] team0: Port device team_slave_0 added [ 710.462603][T26317] team0: Port device team_slave_1 added [ 710.549882][T26551] FAULT_INJECTION: forcing a failure. [ 710.549882][T26551] name failslab, interval 1, probability 0, space 0, times 0 [ 710.590503][T26317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.623572][T26551] CPU: 0 UID: 0 PID: 26551 Comm: syz.5.2477 Tainted: G U L syzkaller #0 PREEMPT(full) [ 710.623599][T26551] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 710.623605][T26551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 710.623614][T26551] Call Trace: [ 710.623619][T26551] [ 710.623625][T26551] dump_stack_lvl+0x100/0x190 [ 710.623652][T26551] should_fail_ex.cold+0x5/0xa [ 710.623669][T26551] should_failslab+0xc2/0x120 [ 710.623685][T26551] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 710.623705][T26551] ? __proc_create+0x2cb/0x8c0 [ 710.623730][T26551] __proc_create+0x2cb/0x8c0 [ 710.623751][T26551] ? __pfx___proc_create+0x10/0x10 [ 710.623775][T26551] ? _raw_write_unlock+0x28/0x50 [ 710.623790][T26551] ? proc_register+0x559/0x8a0 [ 710.623814][T26551] proc_create_reg+0x75/0x170 [ 710.623835][T26551] ? __pfx_ip_vs_stats_show+0x10/0x10 [ 710.623855][T26551] proc_create_net_single+0x86/0x180 [ 710.623877][T26551] ? __pfx_proc_create_net_single+0x10/0x10 [ 710.623905][T26551] ip_vs_control_net_init+0x4a9/0x1d50 [ 710.623927][T26551] ? mutex_init_lockep+0x110/0x150 [ 710.623948][T26551] __ip_vs_init+0x217/0x520 [ 710.623963][T26551] ? __pfx___ip_vs_init+0x10/0x10 [ 710.623975][T26551] ops_init+0x1e2/0x5f0 [ 710.623995][T26551] setup_net+0x118/0x3a0 [ 710.624012][T26551] ? __pfx_setup_net+0x10/0x10 [ 710.624028][T26551] ? lockdep_init_map_type+0x5c/0x250 [ 710.624047][T26551] ? mutex_init_lockep+0x110/0x150 [ 710.624069][T26551] copy_net_ns+0x46f/0x7c0 [ 710.624089][T26551] create_new_namespaces+0x3ea/0xac0 [ 710.624109][T26551] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 710.624126][T26551] ksys_unshare+0x455/0xab0 [ 710.624145][T26551] ? __pfx_ksys_unshare+0x10/0x10 [ 710.624170][T26551] __x64_sys_unshare+0x31/0x40 [ 710.624187][T26551] do_syscall_64+0x106/0xf80 [ 710.624202][T26551] ? clear_bhb_loop+0x40/0x90 [ 710.624220][T26551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.624235][T26551] RIP: 0033:0x7f6b2419c629 [ 710.624248][T26551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.624263][T26551] RSP: 002b:00007f6b25055028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 710.624280][T26551] RAX: ffffffffffffffda RBX: 00007f6b24415fa0 RCX: 00007f6b2419c629 [ 710.624290][T26551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 710.624299][T26551] RBP: 00007f6b24232b39 R08: 0000000000000000 R09: 0000000000000000 [ 710.624308][T26551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.624316][T26551] R13: 00007f6b24416038 R14: 00007f6b24415fa0 R15: 00007ffc5ae66048 [ 710.624336][T26551] [ 711.167555][T26317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.221369][T26317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.471659][T26317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.478714][T26317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.579683][T26317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.694263][T26317] hsr_slave_0: entered promiscuous mode [ 711.713737][T26317] hsr_slave_1: entered promiscuous mode [ 711.729671][T26317] debugfs: 'hsr0' already exists in 'hsr' [ 711.744273][T26317] Cannot create hsr debugfs directory [ 712.067738][ T7169] Bluetooth: hci2: command tx timeout [ 712.240053][T26668] netlink: 4394 bytes leftover after parsing attributes in process `syz.6.2481'. [ 712.525183][T26317] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 712.581275][T26317] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 712.615600][T26317] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 712.665423][T26317] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 713.412561][T26317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.474947][T26317] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.518107][ T7168] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.525275][ T7168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.578195][ T7168] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.585449][ T7168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.136594][ T7169] Bluetooth: hci2: command tx timeout [ 714.410678][T26317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.458394][T26718] kexec: Could not allocate control_code_buffer [ 714.559323][T26770] netlink: 'syz.3.2490': attribute type 23 has an invalid length. [ 714.895570][T26788] FAULT_INJECTION: forcing a failure. [ 714.895570][T26788] name failslab, interval 1, probability 0, space 0, times 0 [ 714.913771][T26789] __vm_enough_memory: pid: 26789, comm: syz.5.2491, bytes: 4398046511104 not enough memory for the allocation [ 714.958408][T26788] CPU: 0 UID: 0 PID: 26788 Comm: syz.3.2492 Tainted: G U L syzkaller #0 PREEMPT(full) [ 714.958436][T26788] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 714.958443][T26788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 714.958451][T26788] Call Trace: [ 714.958457][T26788] [ 714.958463][T26788] dump_stack_lvl+0x100/0x190 [ 714.958489][T26788] should_fail_ex.cold+0x5/0xa [ 714.958507][T26788] should_failslab+0xc2/0x120 [ 714.958522][T26788] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 714.958550][T26788] ? vm_area_alloc+0x1f/0x160 [ 714.958568][T26788] ? vma_merge_new_range+0x38b/0xa30 [ 714.958590][T26788] vm_area_alloc+0x1f/0x160 [ 714.958607][T26788] __mmap_region+0x10cc/0x29e0 [ 714.958633][T26788] ? __pfx___mmap_region+0x10/0x10 [ 714.958650][T26788] ? process_measurement+0x1f4/0x2350 [ 714.958672][T26788] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 714.958694][T26788] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 714.958741][T26788] ? is_bpf_text_address+0x94/0x1a0 [ 714.958763][T26788] ? kernel_text_address+0x8d/0x100 [ 714.958785][T26788] ? __kernel_text_address+0xd/0x30 [ 714.958828][T26788] ? rcu_is_watching+0x12/0xc0 [ 714.958849][T26788] ? cap_capable+0x107/0x460 [ 714.958871][T26788] mmap_region+0x180/0x3e0 [ 714.958894][T26788] do_mmap+0xc63/0x12f0 [ 714.958912][T26788] ? __pfx_do_mmap+0x10/0x10 [ 714.958927][T26788] ? __pfx_down_write_killable+0x10/0x10 [ 714.958951][T26788] vm_mmap_pgoff+0x29e/0x470 [ 714.958969][T26788] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 714.958983][T26788] ? __fget_files+0x215/0x3d0 [ 714.959008][T26788] ? __fget_files+0x21f/0x3d0 [ 714.959033][T26788] ksys_mmap_pgoff+0x3c8/0x650 [ 714.959049][T26788] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 714.959062][T26788] ? fput+0x79/0x100 [ 714.959077][T26788] ? ksys_write+0x1ac/0x250 [ 714.959099][T26788] ? __pfx_ksys_write+0x10/0x10 [ 714.959127][T26788] __x64_sys_mmap+0x125/0x190 [ 714.959151][T26788] do_syscall_64+0x106/0xf80 [ 714.959166][T26788] ? clear_bhb_loop+0x40/0x90 [ 714.959185][T26788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.959199][T26788] RIP: 0033:0x7f6d4f99c629 [ 714.959212][T26788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.959227][T26788] RSP: 002b:00007f6d508b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 714.959242][T26788] RAX: ffffffffffffffda RBX: 00007f6d4fc15fa0 RCX: 00007f6d4f99c629 [ 714.959251][T26788] RDX: 0000010000000000 RSI: 0000000000000006 RDI: 0000000000000000 [ 714.959260][T26788] RBP: 00007f6d508b9090 R08: 0000000000000003 R09: 0000000000002000 [ 714.959269][T26788] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 714.959277][T26788] R13: 00007f6d4fc16038 R14: 00007f6d4fc15fa0 R15: 00007fff90718758 [ 714.959296][T26788] [ 715.461932][T26317] veth0_vlan: entered promiscuous mode [ 715.472185][T26317] veth1_vlan: entered promiscuous mode [ 715.495134][T26317] veth0_macvtap: entered promiscuous mode [ 715.503848][T26317] veth1_macvtap: entered promiscuous mode [ 715.518763][T26317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 715.529170][T26317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 715.555062][T26795] FAULT_INJECTION: forcing a failure. [ 715.555062][T26795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 715.576949][T26795] CPU: 0 UID: 0 PID: 26795 Comm: syz.3.2494 Tainted: G U L syzkaller #0 PREEMPT(full) [ 715.576977][T26795] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 715.576983][T26795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 715.576992][T26795] Call Trace: [ 715.576997][T26795] [ 715.577010][T26795] dump_stack_lvl+0x100/0x190 [ 715.577036][T26795] should_fail_ex.cold+0x5/0xa [ 715.577055][T26795] _copy_from_user+0x2e/0xd0 [ 715.577078][T26795] uhid_char_write+0x16d/0xfd0 [ 715.577101][T26795] vfs_write+0x2aa/0x1070 [ 715.577124][T26795] ? __pfx_uhid_char_write+0x10/0x10 [ 715.577145][T26795] ? __pfx_vfs_write+0x10/0x10 [ 715.577165][T26795] ? find_held_lock+0x2b/0x80 [ 715.577178][T26795] ? __fget_files+0x215/0x3d0 [ 715.577199][T26795] ? __fget_files+0x215/0x3d0 [ 715.577223][T26795] ? __fget_files+0x21f/0x3d0 [ 715.577250][T26795] ksys_write+0x1f8/0x250 [ 715.577271][T26795] ? __pfx_ksys_write+0x10/0x10 [ 715.577297][T26795] do_syscall_64+0x106/0xf80 [ 715.577314][T26795] ? clear_bhb_loop+0x40/0x90 [ 715.577332][T26795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.577347][T26795] RIP: 0033:0x7f6d4f99c629 [ 715.577361][T26795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.577375][T26795] RSP: 002b:00007f6d508b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 715.577390][T26795] RAX: ffffffffffffffda RBX: 00007f6d4fc15fa0 RCX: 00007f6d4f99c629 [ 715.577400][T26795] RDX: 000000000000fccd RSI: 0000000000000000 RDI: 0000000000000003 [ 715.577409][T26795] RBP: 00007f6d508b9090 R08: 0000000000000000 R09: 0000000000000000 [ 715.577418][T26795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.577427][T26795] R13: 00007f6d4fc16038 R14: 00007f6d4fc15fa0 R15: 00007fff90718758 [ 715.577446][T26795] [ 715.836950][ T7168] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.845803][ T7168] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.854697][ T7168] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.864269][ T7168] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.949070][ T7168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.957104][ T7168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.964536][ T7168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.039944][ T7168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.206092][ T7169] Bluetooth: hci2: command tx timeout [ 718.414908][T27046] FAULT_INJECTION: forcing a failure. [ 718.414908][T27046] name failslab, interval 1, probability 0, space 0, times 0 [ 718.484195][T27046] CPU: 0 UID: 0 PID: 27046 Comm: syz.6.2501 Tainted: G U L syzkaller #0 PREEMPT(full) [ 718.484222][T27046] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 718.484228][T27046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 718.484238][T27046] Call Trace: [ 718.484243][T27046] [ 718.484249][T27046] dump_stack_lvl+0x100/0x190 [ 718.484275][T27046] should_fail_ex.cold+0x5/0xa [ 718.484293][T27046] should_failslab+0xc2/0x120 [ 718.484308][T27046] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 718.484328][T27046] ? mas_alloc_nodes+0x280/0x390 [ 718.484355][T27046] mas_alloc_nodes+0x280/0x390 [ 718.484380][T27046] mas_preallocate+0x39c/0xf10 [ 718.484400][T27046] ? __pfx_mas_preallocate+0x10/0x10 [ 718.484421][T27046] ? vm_area_alloc+0x1f/0x160 [ 718.484441][T27046] ? lockdep_init_map_type+0x5c/0x250 [ 718.484462][T27046] __mmap_region+0x12b5/0x29e0 [ 718.484485][T27046] ? __pfx___mmap_region+0x10/0x10 [ 718.484503][T27046] ? process_measurement+0x1f4/0x2350 [ 718.484525][T27046] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 718.484547][T27046] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 718.484596][T27046] ? is_bpf_text_address+0x94/0x1a0 [ 718.484618][T27046] ? kernel_text_address+0x8d/0x100 [ 718.484639][T27046] ? __kernel_text_address+0xd/0x30 [ 718.484682][T27046] ? rcu_is_watching+0x12/0xc0 [ 718.484704][T27046] ? cap_capable+0x107/0x460 [ 718.484731][T27046] mmap_region+0x180/0x3e0 [ 718.484755][T27046] do_mmap+0xc63/0x12f0 [ 718.484774][T27046] ? __pfx_do_mmap+0x10/0x10 [ 718.484789][T27046] ? __pfx_down_write_killable+0x10/0x10 [ 718.484812][T27046] vm_mmap_pgoff+0x29e/0x470 [ 718.484831][T27046] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 718.484845][T27046] ? __fget_files+0x215/0x3d0 [ 718.484870][T27046] ? __fget_files+0x21f/0x3d0 [ 718.484895][T27046] ksys_mmap_pgoff+0x3c8/0x650 [ 718.484911][T27046] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 718.484925][T27046] ? fput+0x79/0x100 [ 718.484940][T27046] ? ksys_write+0x1ac/0x250 [ 718.484961][T27046] ? __pfx_ksys_write+0x10/0x10 [ 718.484984][T27046] __x64_sys_mmap+0x125/0x190 [ 718.485008][T27046] do_syscall_64+0x106/0xf80 [ 718.485023][T27046] ? clear_bhb_loop+0x40/0x90 [ 718.485042][T27046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.485057][T27046] RIP: 0033:0x7fb453d9c629 [ 718.485070][T27046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.485083][T27046] RSP: 002b:00007fb454be0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 718.485098][T27046] RAX: ffffffffffffffda RBX: 00007fb454015fa0 RCX: 00007fb453d9c629 [ 718.485108][T27046] RDX: 0000010000000000 RSI: 0000000000000006 RDI: 0000000000000000 [ 718.485117][T27046] RBP: 00007fb454be0090 R08: 0000000000000003 R09: 0000000000002000 [ 718.485126][T27046] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 718.485134][T27046] R13: 00007fb454016038 R14: 00007fb454015fa0 R15: 00007ffd4b0550a8 [ 718.485153][T27046] [ 719.758694][T27100] FAULT_INJECTION: forcing a failure. [ 719.758694][T27100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.838235][T27100] CPU: 0 UID: 0 PID: 27100 Comm: syz.8.2506 Tainted: G U L syzkaller #0 PREEMPT(full) [ 719.838262][T27100] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 719.838268][T27100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 719.838278][T27100] Call Trace: [ 719.838283][T27100] [ 719.838289][T27100] dump_stack_lvl+0x100/0x190 [ 719.838316][T27100] should_fail_ex.cold+0x5/0xa [ 719.838334][T27100] _copy_to_user+0x32/0xd0 [ 719.838358][T27100] simple_read_from_buffer+0xcb/0x170 [ 719.838381][T27100] proc_fail_nth_read+0x1af/0x230 [ 719.838398][T27100] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 719.838416][T27100] ? rw_verify_area+0xce/0x6d0 [ 719.838436][T27100] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 719.838452][T27100] vfs_read+0x1e4/0xb30 [ 719.838475][T27100] ? __pfx_vfs_read+0x10/0x10 [ 719.838495][T27100] ? __fget_files+0x215/0x3d0 [ 719.838521][T27100] ? __fget_files+0x21f/0x3d0 [ 719.838548][T27100] ksys_read+0x12a/0x250 [ 719.838568][T27100] ? __pfx_ksys_read+0x10/0x10 [ 719.838594][T27100] do_syscall_64+0x106/0xf80 [ 719.838610][T27100] ? clear_bhb_loop+0x40/0x90 [ 719.838628][T27100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.838642][T27100] RIP: 0033:0x7f15fb35cece [ 719.838655][T27100] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 719.838677][T27100] RSP: 002b:00007f15f95f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 719.838692][T27100] RAX: ffffffffffffffda RBX: 00007f15f95f66c0 RCX: 00007f15fb35cece [ 719.838702][T27100] RDX: 000000000000000f RSI: 00007f15f95f60a0 RDI: 000000000000000a [ 719.838711][T27100] RBP: 00007f15f95f6090 R08: 0000000000000000 R09: 0000000000000000 [ 719.838719][T27100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.838728][T27100] R13: 00007f15fb616128 R14: 00007f15fb616090 R15: 00007ffd10d612d8 [ 719.838748][T27100] [ 720.354049][T27146] block2mtd: illegal erase size [ 721.578904][T27208] FAULT_INJECTION: forcing a failure. [ 721.578904][T27208] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 721.642840][T27208] CPU: 0 UID: 0 PID: 27208 Comm: syz.8.2516 Tainted: G U L syzkaller #0 PREEMPT(full) [ 721.642866][T27208] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 721.642872][T27208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 721.642881][T27208] Call Trace: [ 721.642887][T27208] [ 721.642893][T27208] dump_stack_lvl+0x100/0x190 [ 721.642919][T27208] should_fail_ex.cold+0x5/0xa [ 721.642934][T27208] ? prepare_alloc_pages+0x16d/0x5f0 [ 721.642952][T27208] should_fail_alloc_page+0xeb/0x140 [ 721.642968][T27208] prepare_alloc_pages+0x1f0/0x5f0 [ 721.642986][T27208] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 721.643006][T27208] ? mas_alloc_nodes+0x280/0x390 [ 721.643029][T27208] ? __mmap_region+0x12b5/0x29e0 [ 721.643046][T27208] ? mmap_region+0x180/0x3e0 [ 721.643068][T27208] ? __lock_acquire+0x4a5/0x2630 [ 721.643092][T27208] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 721.643113][T27208] ? lock_acquire+0x1cf/0x380 [ 721.643138][T27208] ? __mutex_lock+0x26a/0x1b90 [ 721.643156][T27208] ? ring_buffer_map+0x145/0xcd0 [ 721.643179][T27208] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 721.643208][T27208] ? policy_nodemask+0xed/0x4f0 [ 721.643225][T27208] alloc_pages_mpol+0x1fb/0x550 [ 721.643240][T27208] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 721.643260][T27208] alloc_pages_noprof+0x131/0x390 [ 721.643275][T27208] ring_buffer_map+0x88e/0xcd0 [ 721.643301][T27208] ? vm_area_alloc+0x1f/0x160 [ 721.643322][T27208] tracing_buffers_mmap+0x117/0x1b0 [ 721.643341][T27208] __mmap_region+0x1443/0x29e0 [ 721.643364][T27208] ? __pfx___mmap_region+0x10/0x10 [ 721.643382][T27208] ? process_measurement+0x1f4/0x2350 [ 721.643403][T27208] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 721.643425][T27208] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 721.643474][T27208] ? is_bpf_text_address+0x94/0x1a0 [ 721.643496][T27208] ? kernel_text_address+0x8d/0x100 [ 721.643523][T27208] ? __kernel_text_address+0xd/0x30 [ 721.643567][T27208] ? rcu_is_watching+0x12/0xc0 [ 721.643589][T27208] ? cap_capable+0x107/0x460 [ 721.643610][T27208] mmap_region+0x180/0x3e0 [ 721.643637][T27208] do_mmap+0xc63/0x12f0 [ 721.643656][T27208] ? __pfx_do_mmap+0x10/0x10 [ 721.643671][T27208] ? __pfx_down_write_killable+0x10/0x10 [ 721.643694][T27208] vm_mmap_pgoff+0x29e/0x470 [ 721.643713][T27208] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 721.643727][T27208] ? __fget_files+0x215/0x3d0 [ 721.643757][T27208] ? __fget_files+0x21f/0x3d0 [ 721.643786][T27208] ksys_mmap_pgoff+0x3c8/0x650 [ 721.643802][T27208] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 721.643815][T27208] ? fput+0x79/0x100 [ 721.643835][T27208] ? ksys_write+0x1ac/0x250 [ 721.643860][T27208] ? __pfx_ksys_write+0x10/0x10 [ 721.643891][T27208] __x64_sys_mmap+0x125/0x190 [ 721.643916][T27208] do_syscall_64+0x106/0xf80 [ 721.643931][T27208] ? clear_bhb_loop+0x40/0x90 [ 721.643949][T27208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.643964][T27208] RIP: 0033:0x7f15fb39c629 [ 721.643981][T27208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.643995][T27208] RSP: 002b:00007f15fc176028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 721.644013][T27208] RAX: ffffffffffffffda RBX: 00007f15fb615fa0 RCX: 00007f15fb39c629 [ 721.644023][T27208] RDX: 0000010000000000 RSI: 0000000000000006 RDI: 0000000000000000 [ 721.644032][T27208] RBP: 00007f15fc176090 R08: 0000000000000003 R09: 0000000000002000 [ 721.644041][T27208] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 721.644049][T27208] R13: 00007f15fb616038 R14: 00007f15fb615fa0 R15: 00007ffd10d612d8 [ 721.644073][T27208] [ 722.783350][T27214] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 723.325194][T27251] zswap: compressor û not available [ 723.776491][T27272] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 723.938925][T27282] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2520'. [ 724.015358][T27293] netlink: 28321 bytes leftover after parsing attributes in process `syz.6.2520'. [ 724.884555][T27323] vhci_hcd: not connected 4 [ 725.948609][T27362] sp0: Synchronizing with TNC [ 726.811176][T27391] FAULT_INJECTION: forcing a failure. [ 726.811176][T27391] name failslab, interval 1, probability 0, space 0, times 0 [ 726.865802][T27391] CPU: 0 UID: 0 PID: 27391 Comm: syz.8.2533 Tainted: G U L syzkaller #0 PREEMPT(full) [ 726.865829][T27391] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 726.865835][T27391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 726.865844][T27391] Call Trace: [ 726.865849][T27391] [ 726.865855][T27391] dump_stack_lvl+0x100/0x190 [ 726.865880][T27391] should_fail_ex.cold+0x5/0xa [ 726.865898][T27391] should_failslab+0xc2/0x120 [ 726.865913][T27391] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 726.865933][T27391] ? do_getname+0x35/0x390 [ 726.865960][T27391] ? strncpy_from_user+0x19d/0x2d0 [ 726.865984][T27391] do_getname+0x35/0x390 [ 726.866003][T27391] __x64_sys_linkat+0xe0/0x150 [ 726.866020][T27391] do_syscall_64+0x106/0xf80 [ 726.866036][T27391] ? clear_bhb_loop+0x40/0x90 [ 726.866054][T27391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.866069][T27391] RIP: 0033:0x7f15fb39c629 [ 726.866082][T27391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.866096][T27391] RSP: 002b:00007f15fc176028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 726.866111][T27391] RAX: ffffffffffffffda RBX: 00007f15fb615fa0 RCX: 00007f15fb39c629 [ 726.866120][T27391] RDX: ffffffffffffff9c RSI: 0000000000000000 RDI: 0000000000000003 [ 726.866129][T27391] RBP: 00007f15fc176090 R08: 0000000000001000 R09: 0000000000000000 [ 726.866138][T27391] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 726.866146][T27391] R13: 00007f15fb616038 R14: 00007f15fb615fa0 R15: 00007ffd10d612d8 [ 726.866165][T27391] [ 727.677744][T27442] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 729.179850][T27527] FAULT_INJECTION: forcing a failure. [ 729.179850][T27527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.241607][T27527] CPU: 0 UID: 0 PID: 27527 Comm: syz.8.2546 Tainted: G U L syzkaller #0 PREEMPT(full) [ 729.241634][T27527] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 729.241640][T27527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 729.241649][T27527] Call Trace: [ 729.241654][T27527] [ 729.241660][T27527] dump_stack_lvl+0x100/0x190 [ 729.241687][T27527] should_fail_ex.cold+0x5/0xa [ 729.241704][T27527] strncpy_from_user+0x3b/0x2d0 [ 729.241728][T27527] do_getname+0x78/0x390 [ 729.241748][T27527] __x64_sys_linkat+0xe0/0x150 [ 729.241765][T27527] do_syscall_64+0x106/0xf80 [ 729.241781][T27527] ? clear_bhb_loop+0x40/0x90 [ 729.241799][T27527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.241814][T27527] RIP: 0033:0x7f15fb39c629 [ 729.241828][T27527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.241841][T27527] RSP: 002b:00007f15fc176028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 729.241856][T27527] RAX: ffffffffffffffda RBX: 00007f15fb615fa0 RCX: 00007f15fb39c629 [ 729.241866][T27527] RDX: ffffffffffffff9c RSI: 0000000000000000 RDI: 0000000000000003 [ 729.241875][T27527] RBP: 00007f15fc176090 R08: 0000000000001000 R09: 0000000000000000 [ 729.241884][T27527] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 729.241892][T27527] R13: 00007f15fb616038 R14: 00007f15fb615fa0 R15: 00007ffd10d612d8 [ 729.241911][T27527] [ 729.854786][T27544] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 730.001234][T27544] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 730.134138][T27544] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 730.208834][T27544] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 730.280922][T27544] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 730.348222][T27544] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 730.373688][T27544] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 731.077400][T27604] FAULT_INJECTION: forcing a failure. [ 731.077400][T27604] name failslab, interval 1, probability 0, space 0, times 0 [ 731.146525][T27604] CPU: 0 UID: 0 PID: 27604 Comm: syz.8.2555 Tainted: G U L syzkaller #0 PREEMPT(full) [ 731.146554][T27604] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 731.146560][T27604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 731.146569][T27604] Call Trace: [ 731.146574][T27604] [ 731.146580][T27604] dump_stack_lvl+0x100/0x190 [ 731.146607][T27604] should_fail_ex.cold+0x5/0xa [ 731.146625][T27604] should_failslab+0xc2/0x120 [ 731.146648][T27604] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 731.146672][T27604] ? __d_alloc+0x34/0xa80 [ 731.146691][T27604] __d_alloc+0x34/0xa80 [ 731.146708][T27604] d_alloc+0x4a/0x1e0 [ 731.146723][T27604] lookup_one_qstr_excl+0x175/0x250 [ 731.146740][T27604] ? mnt_want_write+0x161/0x450 [ 731.146762][T27604] filename_create+0x1cf/0x400 [ 731.146783][T27604] ? __pfx_filename_create+0x10/0x10 [ 731.146810][T27604] filename_linkat+0x18c/0x640 [ 731.146829][T27604] ? __pfx_filename_linkat+0x10/0x10 [ 731.146854][T27604] ? do_getname+0x191/0x390 [ 731.146873][T27604] __x64_sys_linkat+0xf6/0x150 [ 731.146890][T27604] do_syscall_64+0x106/0xf80 [ 731.146906][T27604] ? clear_bhb_loop+0x40/0x90 [ 731.146930][T27604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.146945][T27604] RIP: 0033:0x7f15fb39c629 [ 731.146958][T27604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.146972][T27604] RSP: 002b:00007f15fc176028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 731.146988][T27604] RAX: ffffffffffffffda RBX: 00007f15fb615fa0 RCX: 00007f15fb39c629 [ 731.146998][T27604] RDX: ffffffffffffff9c RSI: 0000000000000000 RDI: 0000000000000003 [ 731.147007][T27604] RBP: 00007f15fc176090 R08: 0000000000001000 R09: 0000000000000000 [ 731.147016][T27604] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 731.147024][T27604] R13: 00007f15fb616038 R14: 00007f15fb615fa0 R15: 00007ffd10d612d8 [ 731.147044][T27604] [ 731.890557][ T7169] Bluetooth: hci0: command 0x0c1a tx timeout [ 732.043528][ T7169] Bluetooth: hci1: command 0x0c1a tx timeout [ 732.203680][ T7169] Bluetooth: hci4: command 0x0c1a tx timeout [ 732.210001][ T7258] Bluetooth: hci3: command 0x0c1a tx timeout [ 732.281818][ T7169] Bluetooth: hci2: command 0x0c1a tx timeout [ 734.351006][ T7169] Bluetooth: hci2: command 0x0c1a tx timeout [ 735.927199][T27729] Invalid ELF header magic: != ELF [ 736.420306][ T7169] Bluetooth: hci2: command 0x0c1a tx timeout [ 737.549222][ T5828] Process accounting resumed [ 738.087214][T27799] bonding: no command found in bonding_masters - use +ifname or -ifname [ 738.706629][ T29] audit: type=1800 audit(4294967331.428:27): pid=27817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2578" name="dbroot" dev="configfs" ino=88936 res=0 errno=0 [ 739.790478][T27844] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2581'. [ 740.808927][T27925] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 741.253609][T27933] FAULT_INJECTION: forcing a failure. [ 741.253609][T27933] name failslab, interval 1, probability 0, space 0, times 0 [ 741.317293][T27933] CPU: 0 UID: 0 PID: 27933 Comm: syz.8.2588 Tainted: G U L syzkaller #0 PREEMPT(full) [ 741.317322][T27933] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 741.317331][T27933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 741.317340][T27933] Call Trace: [ 741.317345][T27933] [ 741.317351][T27933] dump_stack_lvl+0x100/0x190 [ 741.317378][T27933] should_fail_ex.cold+0x5/0xa [ 741.317396][T27933] should_failslab+0xc2/0x120 [ 741.317410][T27933] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 741.317430][T27933] ? security_inode_alloc+0x3b/0x2c0 [ 741.317451][T27933] ? lockdep_init_map_type+0x5c/0x250 [ 741.317472][T27933] security_inode_alloc+0x3b/0x2c0 [ 741.317492][T27933] inode_init_always_gfp+0xced/0x1040 [ 741.317517][T27933] alloc_inode+0x8e/0x250 [ 741.317534][T27933] sock_alloc+0x44/0x280 [ 741.317551][T27933] ? security_socket_create+0x7f/0x250 [ 741.317571][T27933] __sock_create+0xc2/0x860 [ 741.317594][T27933] __sys_socket+0x14d/0x260 [ 741.317614][T27933] ? exc_page_fault+0x6f/0xd0 [ 741.317634][T27933] ? __pfx___sys_socket+0x10/0x10 [ 741.317657][T27933] ? do_user_addr_fault+0x8d6/0x12f0 [ 741.317682][T27933] __x64_sys_socket+0x72/0xb0 [ 741.317702][T27933] ? lockdep_hardirqs_on+0x78/0x100 [ 741.317718][T27933] do_syscall_64+0x106/0xf80 [ 741.317733][T27933] ? clear_bhb_loop+0x40/0x90 [ 741.317751][T27933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.317766][T27933] RIP: 0033:0x7f15fb39c629 [ 741.317779][T27933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.317793][T27933] RSP: 002b:00007f15f95f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 741.317808][T27933] RAX: ffffffffffffffda RBX: 00007f15fb616090 RCX: 00007f15fb39c629 [ 741.317818][T27933] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 741.317826][T27933] RBP: 00007f15fb432b39 R08: 0000000000000000 R09: 0000000000000000 [ 741.317835][T27933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.317844][T27933] R13: 00007f15fb616128 R14: 00007f15fb616090 R15: 00007ffd10d612d8 [ 741.317863][T27933] [ 741.317897][T27933] socket: no more sockets [ 742.260667][ T7258] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 742.280984][ T7258] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 742.292372][ T7258] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 742.315680][ T7258] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 742.323578][ T7258] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 742.966546][T27963] chnl_net:caif_netlink_parms(): no params data found [ 743.317286][T27963] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.355657][T27963] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.384394][T27963] bridge_slave_0: entered allmulticast mode [ 743.417605][T27963] bridge_slave_0: entered promiscuous mode [ 743.451715][T27963] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.483116][T27963] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.518129][T27963] bridge_slave_1: entered allmulticast mode [ 743.553820][T27963] bridge_slave_1: entered promiscuous mode [ 743.748258][T27963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.846809][T27963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.986695][T28150] futex_wake_op: syz.6.2597 tries to shift op by -1; fix this program [ 744.046681][T27963] team0: Port device team_slave_0 added [ 744.059638][T27963] team0: Port device team_slave_1 added [ 744.134642][T27963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.147468][T27963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.174714][T27963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.193808][T27963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 744.224741][T27963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.335864][T27963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 744.381390][ T7258] Bluetooth: hci5: command tx timeout [ 744.599996][T27963] hsr_slave_0: entered promiscuous mode [ 744.640476][T27963] hsr_slave_1: entered promiscuous mode [ 744.652220][T27963] debugfs: 'hsr0' already exists in 'hsr' [ 744.670422][T27963] Cannot create hsr debugfs directory [ 745.778960][T27963] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 745.811135][T27963] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 745.984025][T27963] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 746.053605][T27963] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 746.310377][T28449] zswap: compressor not available [ 746.451863][ T7258] Bluetooth: hci5: command tx timeout [ 746.792909][T27963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.855213][T27963] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.867122][ T8865] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.867191][ T8865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.902884][ T8032] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.902953][ T8032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.167720][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.175550][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.427841][T27963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.911519][T28519] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 747.951519][T28519] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 747.957944][T28519] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 747.994322][T28519] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 748.029643][T28519] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 748.061849][T28519] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 748.087111][T28519] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 748.108159][T27963] veth0_vlan: entered promiscuous mode [ 748.131275][T28519] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 748.144252][T27963] veth1_vlan: entered promiscuous mode [ 748.240657][T27963] veth0_macvtap: entered promiscuous mode [ 748.270568][T27963] veth1_macvtap: entered promiscuous mode [ 748.401084][T27963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 748.466088][T27963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 748.774928][ T8853] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.820064][ T8853] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.873724][ T7258] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 748.887279][ T7258] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 748.896327][ T7258] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 748.918236][ T7258] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 748.927231][ T7258] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 749.098843][ T8853] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.131244][ T8853] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.157752][ T7258] Bluetooth: hci0: command 0x0c1a tx timeout [ 749.608525][ T7694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.648110][ T7694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 749.840056][ T7694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.885130][ T7694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.029809][ T7258] Bluetooth: hci2: command 0x0c1a tx timeout [ 750.036915][ T7258] Bluetooth: hci4: command 0x0c1a tx timeout [ 750.043824][ T7169] Bluetooth: hci3: command 0x0c1a tx timeout [ 750.051224][ T7169] Bluetooth: hci1: command 0x0c1a tx timeout [ 750.110154][T28746] Bluetooth: hci5: command 0x0419 tx timeout [ 750.262447][T28771] QAT: Stopping all acceleration devices. [ 750.316597][T28577] chnl_net:caif_netlink_parms(): no params data found [ 750.466896][T28778] bridge0: port 3(team0) entered blocking state [ 750.490448][T28778] bridge0: port 3(team0) entered disabled state [ 750.535422][T28778] team0: entered allmulticast mode [ 750.564544][T28778] team_slave_0: entered allmulticast mode [ 750.598370][T28778] team_slave_1: entered allmulticast mode [ 750.634277][T28778] team0: entered promiscuous mode [ 750.654475][T28778] team_slave_0: entered promiscuous mode [ 750.673119][T28778] team_slave_1: entered promiscuous mode [ 750.683191][T28778] bridge0: port 3(team0) entered blocking state [ 750.689608][T28778] bridge0: port 3(team0) entered forwarding state [ 750.984586][T28746] Bluetooth: hci6: command tx timeout [ 751.020172][T28577] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.050357][T28577] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.078836][T28577] bridge_slave_0: entered allmulticast mode [ 751.126357][T28577] bridge_slave_0: entered promiscuous mode [ 751.326033][T28577] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.382267][T28577] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.434479][T28577] bridge_slave_1: entered allmulticast mode [ 751.479595][T28577] bridge_slave_1: entered promiscuous mode [ 751.775522][T28577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.856218][T28577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.047766][T28577] team0: Port device team_slave_0 added [ 752.111873][T28577] team0: Port device team_slave_1 added [ 752.179414][T28746] Bluetooth: hci5: command 0x0419 tx timeout [ 752.242071][T28577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.311063][T28577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.479402][T28577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.545993][T28577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.597325][T28577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.716276][T28878] netlink: 'syz.9.2613': attribute type 4 has an invalid length. [ 752.799258][T28577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 753.054180][T28746] Bluetooth: hci6: command tx timeout [ 753.108265][T28577] hsr_slave_0: entered promiscuous mode [ 753.162695][T28577] hsr_slave_1: entered promiscuous mode [ 753.205526][T28577] debugfs: 'hsr0' already exists in 'hsr' [ 753.255546][T28577] Cannot create hsr debugfs directory [ 754.211854][T29077] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(127.0.0), cmd(15) [ 754.253340][T28746] Bluetooth: hci5: command 0x0419 tx timeout [ 755.123415][T28746] Bluetooth: hci6: command tx timeout [ 755.715229][T28577] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 755.786724][T28577] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 755.881924][T28577] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 755.911063][T29147] FAULT_INJECTION: forcing a failure. [ 755.911063][T29147] name failslab, interval 1, probability 0, space 0, times 0 [ 755.950528][T28577] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 755.978982][T29147] CPU: 0 UID: 0 PID: 29147 Comm: syz.9.2624 Tainted: G U L syzkaller #0 PREEMPT(full) [ 755.979009][T29147] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 755.979015][T29147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 755.979026][T29147] Call Trace: [ 755.979031][T29147] [ 755.979038][T29147] dump_stack_lvl+0x100/0x190 [ 755.979067][T29147] should_fail_ex.cold+0x5/0xa [ 755.979084][T29147] should_failslab+0xc2/0x120 [ 755.979099][T29147] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 755.979120][T29147] ? alloc_empty_file+0x55/0x1c0 [ 755.979137][T29147] ? __pfx_stack_trace_save+0x10/0x10 [ 755.979154][T29147] alloc_empty_file+0x55/0x1c0 [ 755.979171][T29147] path_openat+0xe8/0x31a0 [ 755.979184][T29147] ? kasan_save_stack+0x3f/0x50 [ 755.979204][T29147] ? kasan_save_stack+0x30/0x50 [ 755.979223][T29147] ? kasan_save_track+0x14/0x30 [ 755.979243][T29147] ? __kasan_slab_alloc+0x89/0x90 [ 755.979264][T29147] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 755.979283][T29147] ? do_getname+0x35/0x390 [ 755.979298][T29147] ? do_sys_openat2+0xc5/0x1e0 [ 755.979315][T29147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.979332][T29147] ? __pfx_path_openat+0x10/0x10 [ 755.979352][T29147] do_file_open+0x20e/0x430 [ 755.979367][T29147] ? __pfx_do_file_open+0x10/0x10 [ 755.979393][T29147] ? alloc_fd+0x476/0x790 [ 755.979417][T29147] ? do_getname+0x191/0x390 [ 755.979435][T29147] do_sys_openat2+0x10d/0x1e0 [ 755.979452][T29147] ? __pfx_do_sys_openat2+0x10/0x10 [ 755.979476][T29147] __x64_sys_openat+0x12d/0x210 [ 755.979494][T29147] ? __pfx___x64_sys_openat+0x10/0x10 [ 755.979519][T29147] do_syscall_64+0x106/0xf80 [ 755.979535][T29147] ? clear_bhb_loop+0x40/0x90 [ 755.979552][T29147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.979567][T29147] RIP: 0033:0x7fd652b9c629 [ 755.979586][T29147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.979600][T29147] RSP: 002b:00007fd653ab8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 755.979615][T29147] RAX: ffffffffffffffda RBX: 00007fd652e15fa0 RCX: 00007fd652b9c629 [ 755.979626][T29147] RDX: 000000000006ab82 RSI: 00002000000011c0 RDI: ffffffffffffff9c [ 755.979635][T29147] RBP: 00007fd652c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 755.979644][T29147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.979652][T29147] R13: 00007fd652e16038 R14: 00007fd652e15fa0 R15: 00007ffd427a6e08 [ 755.979671][T29147] [ 756.537526][T28746] Bluetooth: hci5: command 0x0419 tx timeout [ 757.000137][T28577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 757.133718][T28577] 8021q: adding VLAN 0 to HW filter on device team0 [ 757.212262][T28746] Bluetooth: hci6: command tx timeout [ 757.288847][ T8853] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.296986][ T8853] bridge0: port 1(bridge_slave_0) entered forwarding state [ 757.389846][ T8853] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.397250][ T8853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.537657][T29179] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2626'. [ 757.557727][T28577] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 757.709562][T28577] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 759.124901][T28577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 759.557194][T28577] veth0_vlan: entered promiscuous mode [ 759.688742][T28577] veth1_vlan: entered promiscuous mode [ 760.123755][T28577] veth0_macvtap: entered promiscuous mode [ 760.194792][T28577] veth1_macvtap: entered promiscuous mode [ 760.662826][T28577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 760.785570][T28577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 761.239057][ T7694] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.313516][ T7694] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.613589][ T7694] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 761.663690][ T7694] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.096795][ T8864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.105175][ T8864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.643678][ T8864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.702633][ T8864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.156330][T29443] futex_wake_op: syz.6.2635 tries to shift op by -2048; fix this program [ 764.234078][T29437] 0x000000000001-0x000000020000 : "" [ 764.473687][T29437] ftl_cs: FTL header corrupt! [ 764.535646][T29443] futex_wake_op: syz.6.2635 tries to shift op by -2048; fix this program [ 764.682000][T29443] futex_wake_op: syz.6.2635 tries to shift op by -2048; fix this program [ 764.697972][T29472] ERROR: Out of memory at tomoyo_memory_ok. [ 764.725392][T29488] Invalid ELF header magic: != ELF [ 764.875691][T29446] FAULT_INJECTION: forcing a failure. [ 764.875691][T29446] name failslab, interval 1, probability 0, space 0, times 0 [ 764.951590][T29446] CPU: 0 UID: 0 PID: 29446 Comm: syz.2.2638 Tainted: G U L syzkaller #0 PREEMPT(full) [ 764.951618][T29446] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 764.951625][T29446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 764.951634][T29446] Call Trace: [ 764.951640][T29446] [ 764.951647][T29446] dump_stack_lvl+0x100/0x190 [ 764.951675][T29446] should_fail_ex.cold+0x5/0xa [ 764.951694][T29446] should_failslab+0xc2/0x120 [ 764.951709][T29446] __kvmalloc_node_noprof+0xfa/0xa00 [ 764.951730][T29446] ? file_tty_write.isra.0+0x64e/0x890 [ 764.951758][T29446] file_tty_write.isra.0+0x64e/0x890 [ 764.951776][T29446] ? security_file_permission+0x76/0x210 [ 764.951801][T29446] ? rw_verify_area+0xce/0x6d0 [ 764.951822][T29446] vfs_write+0x6ac/0x1070 [ 764.951857][T29446] ? __pfx_tty_write+0x10/0x10 [ 764.951875][T29446] ? __pfx_vfs_write+0x10/0x10 [ 764.951897][T29446] ? find_held_lock+0x2b/0x80 [ 764.951923][T29446] ksys_write+0x12a/0x250 [ 764.951944][T29446] ? __pfx_ksys_write+0x10/0x10 [ 764.951970][T29446] do_syscall_64+0x106/0xf80 [ 764.951987][T29446] ? clear_bhb_loop+0x40/0x90 [ 764.952005][T29446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.952020][T29446] RIP: 0033:0x7fb03fd9c629 [ 764.952033][T29446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.952050][T29446] RSP: 002b:00007fb040c55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 764.952066][T29446] RAX: ffffffffffffffda RBX: 00007fb040015fa0 RCX: 00007fb03fd9c629 [ 764.952076][T29446] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 764.952085][T29446] RBP: 00007fb03fe32b39 R08: 0000000000000000 R09: 0000000000000000 [ 764.952094][T29446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.952103][T29446] R13: 00007fb040016038 R14: 00007fb040015fa0 R15: 00007ffeee134ef8 [ 764.952123][T29446] [ 766.763040][T29573] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2642'. [ 766.768749][T29573] netlink: 354 bytes leftover after parsing attributes in process `syz.9.2642'. [ 767.901450][T29613] netlink: 326 bytes leftover after parsing attributes in process `syz.8.2644'. [ 769.960880][T29712] binder: 29708:29712 ioctl 4018620b 9 returned -22 [ 771.461675][T29740] can: request_module (can-proto-0) failed. [ 774.536654][T29821] netlink: 'syz.9.2659': attribute type 4 has an invalid length. [ 775.114954][T29838] block nbd8: shutting down sockets [ 780.359359][T30048] ERROR: Out of memory at tomoyo_memory_ok. [ 780.437552][T30059] ERROR: Out of memory at tomoyo_memory_ok. [ 780.505321][T30056] ERROR: Out of memory at tomoyo_memory_ok. [ 780.577335][T30058] ERROR: Out of memory at tomoyo_memory_ok. [ 783.590899][T30163] netlink: 330 bytes leftover after parsing attributes in process `syz.6.2690'. [ 784.123859][T30204] FAULT_INJECTION: forcing a failure. [ 784.123859][T30204] name failslab, interval 1, probability 0, space 0, times 0 [ 784.221788][T30204] CPU: 0 UID: 0 PID: 30204 Comm: syz.6.2691 Tainted: G U L syzkaller #0 PREEMPT(full) [ 784.221819][T30204] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 784.221826][T30204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 784.221835][T30204] Call Trace: [ 784.221842][T30204] [ 784.221849][T30204] dump_stack_lvl+0x100/0x190 [ 784.221878][T30204] should_fail_ex.cold+0x5/0xa [ 784.221897][T30204] should_failslab+0xc2/0x120 [ 784.221912][T30204] __kmalloc_cache_noprof+0x7a/0x6f0 [ 784.221930][T30204] ? device_add+0xd3a/0x1950 [ 784.221956][T30204] device_add+0xd3a/0x1950 [ 784.221977][T30204] ? dev_set_name+0xc7/0x100 [ 784.221992][T30204] ? __pfx_dev_set_name+0x10/0x10 [ 784.222007][T30204] ? __pfx_device_add+0x10/0x10 [ 784.222027][T30204] ? __pfx___might_resched+0x10/0x10 [ 784.222047][T30204] ? lockdep_hardirqs_on+0x78/0x100 [ 784.222070][T30204] __add_disk+0x518/0xe40 [ 784.222095][T30204] add_disk_fwnode+0x118/0x5c0 [ 784.222117][T30204] loop_add+0x90b/0xb60 [ 784.222132][T30204] ? __pfx_loop_add+0x10/0x10 [ 784.222164][T30204] loop_control_ioctl+0xae/0x620 [ 784.222182][T30204] ? __pfx_loop_control_ioctl+0x10/0x10 [ 784.222197][T30204] ? xfd_validate_state+0x129/0x190 [ 784.222219][T30204] ? __pfx_loop_control_ioctl+0x10/0x10 [ 784.222236][T30204] __x64_sys_ioctl+0x18e/0x210 [ 784.222256][T30204] do_syscall_64+0x106/0xf80 [ 784.222271][T30204] ? clear_bhb_loop+0x40/0x90 [ 784.222290][T30204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.222305][T30204] RIP: 0033:0x7fb453d9c629 [ 784.222318][T30204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.222332][T30204] RSP: 002b:00007fb454be0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 784.222348][T30204] RAX: ffffffffffffffda RBX: 00007fb454015fa0 RCX: 00007fb453d9c629 [ 784.222358][T30204] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000002 [ 784.222367][T30204] RBP: 00007fb453e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 784.222376][T30204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.222384][T30204] R13: 00007fb454016038 R14: 00007fb454015fa0 R15: 00007ffd4b0550a8 [ 784.222404][T30204] [ 785.834747][T28746] Bluetooth: hci5: unexpected event 0x1c length: 725 > 5 [ 786.788124][T30282] block2mtd: Using custom MTD label '' for dev [ 786.862551][T30282] block2mtd: error: cannot open device [ 786.896147][T30283] FAULT_INJECTION: forcing a failure. [ 786.896147][T30283] name failslab, interval 1, probability 0, space 0, times 0 [ 786.997667][T30283] CPU: 0 UID: 0 PID: 30283 Comm: syz.9.2699 Tainted: G U L syzkaller #0 PREEMPT(full) [ 786.997696][T30283] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 786.997701][T30283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 786.997711][T30283] Call Trace: [ 786.997717][T30283] [ 786.997730][T30283] dump_stack_lvl+0x100/0x190 [ 786.997757][T30283] should_fail_ex.cold+0x5/0xa [ 786.997776][T30283] should_failslab+0xc2/0x120 [ 786.997791][T30283] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 786.997811][T30283] ? acpi_ps_alloc_op+0x29d/0x360 [ 786.997838][T30283] acpi_ps_alloc_op+0x29d/0x360 [ 786.997859][T30283] ? acpi_ut_status_exit+0x111/0x1c0 [ 786.997883][T30283] acpi_ps_create_op+0x4b3/0xd10 [ 786.997906][T30283] ? __pfx_acpi_ps_create_op+0x10/0x10 [ 786.997927][T30283] ? __pfx_acpi_ut_trace_ptr+0x10/0x10 [ 786.997950][T30283] ? acpi_ut_value_exit+0x10d/0x190 [ 786.997976][T30283] acpi_ps_parse_loop+0xa65/0x24a0 [ 786.998002][T30283] ? __kmalloc_noprof+0x320/0x850 [ 786.998024][T30283] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 786.998045][T30283] ? acpi_ut_status_exit+0x111/0x1c0 [ 786.998068][T30283] ? acpi_ds_call_control_method+0x435/0xab0 [ 786.998090][T30283] acpi_ps_parse_aml+0x81e/0x1120 [ 786.998115][T30283] acpi_ps_execute_method+0x5c4/0xe90 [ 786.998133][T30283] acpi_ns_evaluate+0x640/0x1670 [ 786.998153][T30283] acpi_evaluate_object+0x420/0xe00 [ 786.998177][T30283] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 786.998203][T30283] acpi_evaluate_integer+0xdf/0x220 [ 786.998221][T30283] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 786.998246][T30283] ? __pfx_status_show+0x10/0x10 [ 786.998265][T30283] status_show+0xa0/0x120 [ 786.998284][T30283] ? __pfx_status_show+0x10/0x10 [ 786.998308][T30283] dev_attr_show+0x52/0xa0 [ 786.998332][T30283] ? __pfx_dev_attr_show+0x10/0x10 [ 786.998353][T30283] sysfs_kf_seq_show+0x217/0x3a0 [ 786.998374][T30283] seq_read_iter+0x32f/0x1270 [ 786.998404][T30283] kernfs_fop_read_iter+0x46c/0x610 [ 786.998419][T30283] ? rw_verify_area+0xce/0x6d0 [ 786.998438][T30283] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 786.998454][T30283] vfs_read+0x825/0xb30 [ 786.998478][T30283] ? __pfx_vfs_read+0x10/0x10 [ 786.998511][T30283] ksys_read+0x12a/0x250 [ 786.998531][T30283] ? __pfx_ksys_read+0x10/0x10 [ 786.998561][T30283] do_syscall_64+0x106/0xf80 [ 786.998577][T30283] ? clear_bhb_loop+0x40/0x90 [ 786.998595][T30283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.998610][T30283] RIP: 0033:0x7fd652b9c629 [ 786.998624][T30283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.998637][T30283] RSP: 002b:00007fd653a97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 786.998652][T30283] RAX: ffffffffffffffda RBX: 00007fd652e16090 RCX: 00007fd652b9c629 [ 786.998662][T30283] RDX: 000000000000007a RSI: 0000200000000240 RDI: 0000000000000006 [ 786.998671][T30283] RBP: 00007fd652c32b39 R08: 0000000000000000 R09: 0000000000000000 [ 786.998680][T30283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.998689][T30283] R13: 00007fd652e16128 R14: 00007fd652e16090 R15: 00007ffd427a6e08 [ 786.998708][T30283] [ 787.004288][T30283] ACPI Error: Aborting method \_SB.IQST due to previous error (AE_NO_MEMORY) (20251212/psparse-529) [ 788.601704][T30283] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20251212/psparse-529) [ 789.186544][ T30] INFO: task syz.0.2273:22833 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 789.235050][ T30] Tainted: G U L syzkaller #0 [ 789.297564][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 789.359700][ T30] task:syz.0.2273 state:D stack:23384 pid:22833 tgid:22832 ppid:5822 task_flags:0x400140 flags:0x00080002 [ 789.466549][ T30] Call Trace: [ 789.507190][ T30] [ 789.510153][ T30] __schedule+0xfee/0x60e0 [ 789.595165][ T30] ? __lock_acquire+0x4a5/0x2630 [ 789.600270][ T30] ? kasan_save_stack+0x30/0x50 [ 789.649840][ T30] ? __pfx___schedule+0x10/0x10 [ 789.681728][ T30] ? find_held_lock+0x2b/0x80 [ 789.703383][ T30] ? schedule+0x2bf/0x390 [ 789.707742][ T30] schedule+0xdd/0x390 [ 789.711971][ T30] schedule_preempt_disabled+0x13/0x30 [ 789.762854][ T30] __mutex_lock+0xc9a/0x1b90 [ 789.767479][ T30] ? nfsd_nl_threads_set_doit+0x718/0xc60 [ 789.798893][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 789.812683][ T30] ? net_generic+0xea/0x2a0 [ 789.817240][ T30] ? net_generic+0xea/0x2a0 [ 789.821779][ T30] ? nfsd_nl_threads_set_doit+0x718/0xc60 [ 789.839215][ T30] nfsd_nl_threads_set_doit+0x718/0xc60 [ 789.857732][ T30] genl_family_rcv_msg_doit+0x214/0x300 [ 789.872339][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 789.892215][ T30] ? genl_get_cmd+0x3ef/0x720 [ 789.897026][ T30] ? bpf_lsm_capable+0x9/0x10 [ 789.912580][ T30] ? security_capable+0x80/0x260 [ 789.917575][ T30] genl_rcv_msg+0x560/0x800 [ 789.930024][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 789.935461][ T30] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 789.952756][ T30] netlink_rcv_skb+0x159/0x420 [ 789.972361][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 789.985876][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 789.991199][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 790.007125][ T30] genl_rcv+0x28/0x40 [ 790.011770][ T30] netlink_unicast+0x5aa/0x870 [ 790.016574][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 790.022833][ T30] netlink_sendmsg+0x8b0/0xda0 [ 790.027611][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 790.034059][ T30] ? __import_iovec+0x1d2/0x640 [ 790.038925][ T30] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 790.046561][ T30] ____sys_sendmsg+0xa54/0xc30 [ 790.051597][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 790.058768][ T30] ? try_to_wake_up+0x644/0x1a80 [ 790.065675][ T30] ___sys_sendmsg+0x190/0x1e0 [ 790.070378][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 790.082399][ T30] ? futex_private_hash_put+0x107/0x1c0 [ 790.088094][ T30] __sys_sendmsg+0x170/0x220 [ 790.093091][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 790.098300][ T30] ? __x64_sys_futex+0x34f/0x4d0 [ 790.103692][ T30] do_syscall_64+0x106/0xf80 [ 790.108638][ T30] ? clear_bhb_loop+0x40/0x90 [ 790.114146][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.121554][ T30] RIP: 0033:0x7f6f6e19c629 [ 790.125981][ T30] RSP: 002b:00007f6f6c3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 790.135833][ T30] RAX: ffffffffffffffda RBX: 00007f6f6e415fa0 RCX: 00007f6f6e19c629 [ 790.152238][ T30] RDX: 000000000000c000 RSI: 0000200000000480 RDI: 0000000000000005 [ 790.162508][ T30] RBP: 00007f6f6e232b39 R08: 0000000000000000 R09: 0000000000000000 [ 790.170622][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 790.180027][ T30] R13: 00007f6f6e416038 R14: 00007f6f6e415fa0 R15: 00007ffd325593f8 [ 790.195176][ T30] [ 790.291643][ T30] INFO: task syz.4.2276:22845 blocked for more than 144 seconds. [ 790.299656][ T30] Tainted: G U L syzkaller #0 [ 790.379990][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 790.422149][ T30] task:syz.4.2276 state:D stack:27304 pid:22845 tgid:22844 ppid:12491 task_flags:0x400140 flags:0x00080002 [ 790.487346][ T30] Call Trace: [ 790.499264][ T30] [ 790.502242][ T30] __schedule+0xfee/0x60e0 [ 790.506652][ T30] ? __lock_acquire+0x4a5/0x2630 [ 790.559769][ T30] ? kasan_save_stack+0x30/0x50 [ 790.598522][ T30] ? __pfx___schedule+0x10/0x10 [ 790.603936][ T30] ? find_held_lock+0x2b/0x80 [ 790.641710][ T30] ? schedule+0x2bf/0x390 [ 790.678102][ T30] schedule+0xdd/0x390 [ 790.682301][ T30] schedule_preempt_disabled+0x13/0x30 [ 790.687792][ T30] __mutex_lock+0xc9a/0x1b90 [ 790.738351][ T30] ? nfsd_nl_threads_set_doit+0x718/0xc60 [ 790.744205][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 790.784397][ T30] ? net_generic+0xea/0x2a0 [ 790.799027][ T30] ? net_generic+0xea/0x2a0 [ 790.803572][ T30] ? nfsd_nl_threads_set_doit+0x718/0xc60 [ 790.809923][ T30] nfsd_nl_threads_set_doit+0x718/0xc60 [ 790.815497][ T30] genl_family_rcv_msg_doit+0x214/0x300 [ 790.821920][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 790.828438][ T30] ? genl_get_cmd+0x3ef/0x720 [ 790.833203][ T30] ? bpf_lsm_capable+0x9/0x10 [ 790.840550][ T30] ? security_capable+0x80/0x260 [ 790.845548][ T30] genl_rcv_msg+0x560/0x800 [ 790.851846][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 790.861341][ T30] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 790.867764][ T30] netlink_rcv_skb+0x159/0x420 [ 790.874373][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 790.880670][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 790.885966][ T30] ? netlink_deliver_tap+0x1ae/0xcc0 [ 790.891584][ T30] genl_rcv+0x28/0x40 [ 790.896145][ T30] netlink_unicast+0x5aa/0x870 [ 790.901832][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 790.907505][ T30] netlink_sendmsg+0x8b0/0xda0 [ 790.912887][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 790.919510][ T30] ? __import_iovec+0x1d2/0x640 [ 790.924483][ T30] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 790.930534][ T30] ____sys_sendmsg+0xa54/0xc30 [ 790.935321][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 790.941384][ T30] ? __pfx_futex_wake_mark+0x10/0x10 [ 790.949964][ T30] ___sys_sendmsg+0x190/0x1e0 [ 790.954704][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 790.962426][ T30] __sys_sendmsg+0x170/0x220 [ 790.969784][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 790.977790][ T30] ? __x64_sys_futex+0x34f/0x4d0 [ 790.982788][ T30] do_syscall_64+0x106/0xf80 [ 790.988592][ T30] ? clear_bhb_loop+0x40/0x90 [ 790.993396][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.000199][ T30] RIP: 0033:0x7fb593f9c629 [ 791.004806][ T30] RSP: 002b:00007fb5921f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 791.013552][ T30] RAX: ffffffffffffffda RBX: 00007fb594215fa0 RCX: 00007fb593f9c629 [ 791.026052][ T30] RDX: 000000000000c000 RSI: 0000200000000480 RDI: 0000000000000006 [ 791.034598][ T30] RBP: 00007fb594032b39 R08: 0000000000000000 R09: 0000000000000000 [ 791.043170][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 791.051945][ T30] R13: 00007fb594216038 R14: 00007fb594215fa0 R15: 00007ffe6a2d6d28 [ 791.064118][ T30] [ 791.115908][ T30] [ 791.115908][ T30] Showing all locks held in the system: [ 791.123838][ T30] 1 lock held by pool_workqueue_/3: [ 791.146900][ T30] #0: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 791.158205][ T30] 3 locks held by kworker/0:1/10: [ 791.168722][ T30] #0: ffff88813fe63548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 791.190513][ T30] #1: ffffc900000f7d08 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 791.206705][ T30] #2: ffff888026210240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x63b0 [ 791.217560][ T30] 1 lock held by khungtaskd/30: [ 791.222444][ T30] #0: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 791.232897][ T30] 3 locks held by kworker/u10:11/7694: [ 791.238703][ T30] #0: ffff88813fea4148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 791.250376][ T30] #1: ffffc900058d7d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 791.261420][ T30] #2: ffffffff90611f28 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 791.272537][ T30] 4 locks held by kworker/u10:15/8032: [ 791.282403][ T30] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 791.294046][ T30] #1: ffffc90000ab7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 791.308816][ T30] #2: ffffffff905f95d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 791.319341][ T30] #3: ffffffff90611f28 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1b/0x250 [ 791.329720][ T30] 2 locks held by getty/13930: [ 791.335522][ T30] #0: ffff888033d910a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 791.346975][ T30] #1: ffffc90003efb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 791.358212][ T30] 2 locks held by syz.1.2271/22761: [ 791.363497][ T30] #0: ffffffff906be0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 791.373712][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x718/0xc60 [ 791.388753][ T30] 2 locks held by syz.0.2273/22833: [ 791.393991][ T30] #0: ffffffff906be0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 791.403199][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x718/0xc60 [ 791.416603][ T30] 2 locks held by syz.4.2276/22845: [ 791.421812][ T30] #0: ffffffff906be0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 791.432517][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x718/0xc60 [ 791.442933][ T30] 2 locks held by syz.7.2408/25686: [ 791.448937][ T30] #0: ffff8880381260e0 (&type->s_umount_key#53){++++}-{4:4}, at: deactivate_super+0xdf/0x110 [ 791.459951][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 791.471704][ T30] 3 locks held by syz.5.2532/27383: [ 791.477114][ T30] #0: ffff888078405278 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 791.488258][ T30] #1: ffff888036cc0420 (sb_writers#3){.+.+}-{0:0}, at: do_writev+0x13e/0x340 [ 791.499775][ T30] #2: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: expkey_flush+0x18/0x90 [ 791.510253][ T30] 2 locks held by syz.3.2564/27637: [ 791.516453][ T30] #0: ffffffff906be0b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 791.527957][ T30] #1: ffffffff8ec58388 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1b20 [ 791.539285][ T30] 2 locks held by syz.9.2665/29893: [ 791.544862][ T30] #0: ffffffff90611f28 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 791.554253][ T30] #1: ffffffff8e7f4e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 791.564934][ T30] 1 lock held by syz.8.2705/30362: [ 791.571719][ T30] #0: ffffffff90611f28 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 791.582619][ T30] 1 lock held by syz.6.2710/30401: [ 791.589878][ T30] #0: ffffffff90611f28 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 791.650161][ T30] [ 791.652509][ T30] ============================================= [ 791.652509][ T30] [ 791.698887][ T30] NMI backtrace for cpu 0 [ 791.698903][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 791.698942][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 791.698948][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 791.698957][ T30] Call Trace: [ 791.698962][ T30] [ 791.698968][ T30] dump_stack_lvl+0x100/0x190 [ 791.698994][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 791.699017][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 791.699039][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 791.699063][ T30] sys_info+0x141/0x190 [ 791.699081][ T30] watchdog+0xd25/0x1050 [ 791.699100][ T30] ? __pfx_watchdog+0x10/0x10 [ 791.699114][ T30] ? __kthread_parkme+0x18c/0x230 [ 791.699132][ T30] ? kthread+0x13a/0x450 [ 791.699154][ T30] ? __pfx_watchdog+0x10/0x10 [ 791.699172][ T30] kthread+0x370/0x450 [ 791.699189][ T30] ? __pfx_kthread+0x10/0x10 [ 791.699208][ T30] ret_from_fork+0x754/0xd80 [ 791.699230][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 791.699251][ T30] ? __switch_to+0x7b4/0x1120 [ 791.699267][ T30] ? __pfx_kthread+0x10/0x10 [ 791.699286][ T30] ret_from_fork_asm+0x1a/0x30 [ 791.699310][ T30] [ 792.075091][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 792.081978][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 792.092750][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 792.097936][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 792.108338][ T30] Call Trace: [ 792.111810][ T30] [ 792.114859][ T30] dump_stack_lvl+0x100/0x190 [ 792.119569][ T30] vpanic+0x552/0x970 [ 792.123548][ T30] ? __pfx_vpanic+0x10/0x10 [ 792.128038][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 792.134365][ T30] panic+0xd1/0xe0 [ 792.138177][ T30] ? __pfx_panic+0x10/0x10 [ 792.142601][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 792.148755][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 792.154990][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 792.161665][ T30] ? watchdog.cold+0x198/0x1ca [ 792.166433][ T30] ? watchdog+0xd35/0x1050 [ 792.171363][ T30] watchdog.cold+0x1a9/0x1ca [ 792.176060][ T30] ? __pfx_watchdog+0x10/0x10 [ 792.180741][ T30] ? __kthread_parkme+0x18c/0x230 [ 792.185866][ T30] ? kthread+0x13a/0x450 [ 792.190228][ T30] ? __pfx_watchdog+0x10/0x10 [ 792.194901][ T30] kthread+0x370/0x450 [ 792.199191][ T30] ? __pfx_kthread+0x10/0x10 [ 792.203805][ T30] ret_from_fork+0x754/0xd80 [ 792.208504][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 792.213635][ T30] ? __switch_to+0x7b4/0x1120 [ 792.218331][ T30] ? __pfx_kthread+0x10/0x10 [ 792.222970][ T30] ret_from_fork_asm+0x1a/0x30 [ 792.227758][ T30] [ 792.231268][ T30] Kernel Offset: disabled [ 792.235612][ T30] Rebooting in 86400 seconds..