last executing test programs: 9m43.321146317s ago: executing program 32 (id=138): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x180000000000000, 0x0, 0x0, 0x0, 0x8000000000000000) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) set_mempolicy$auto(0x5, &(0x7f0000000400)=0xfffffffffffffffd, 0x3b) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x3, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x115) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0) semctl$auto_IPC_INFO(0x2, 0x8, 0x3, 0x3) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x9}, 0x7) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000084) msgctl$auto(0x2, 0xec, &(0x7f00000000c0)={{0x1, 0xee00, 0xffffffffffffffff, 0x7ff, 0x0, 0x7ff, 0xff00}, &(0x7f0000000000)=0x80, &(0x7f0000000080)=0x1, 0x0, 0x3, 0x7f, 0x1, 0x1, 0xb33f, 0x7, 0x1, @raw=0x81, @inferred=0xffffffffffffffff}) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xb, 0x9, 0x63, r2, 0x0, 0x0, 0x2, 0xfffffffffffffff7, 0x80000000000080a, 0x0, 0x13, 0x9, 0xffffffff80000000, 0x20000000007, 0x6, 0x400002}) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0xe, 0x2, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x5, 0x0, 0x7, 0x4, 0x3}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 4m5.275203027s ago: executing program 2 (id=1431): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000600)='/sys/devices/platform/dummy_hcd.7/usb8/speed\x00', 0x101100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000640)=""/177, 0xb1) (async) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000640)=""/177, 0xb1) mmap$auto(0xfffffffffffff091, 0x2020009, 0x3, 0xeb1, r0, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) mmap$auto(0x0, 0x9, 0x2, 0x40eb0, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x9, 0x2, 0x40eb0, 0x401, 0x300000000000) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) (async) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x81) (async) socket(0x2, 0x3, 0x81) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/module/hibernate/parameters/compressor\x00', 0x1a1942, 0x0) read$auto(0x3, 0x0, 0x20f34) write$auto(0x3, 0x0, 0xfffffdf2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x59616d61, 0x1, 0x0, 0x1, 0x0) pidfd_open$auto(0x1, 0x0) (async) r2 = pidfd_open$auto(0x1, 0x0) setns(r2, 0x60020000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) pivot_root$auto(&(0x7f0000000040)='..\x00', &(0x7f0000000080)='.\x00') prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x1, 0x8002, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x250a, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x3a32182}, 0xed7138b}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0x420000000e31, 0xffffffffffffffff, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0x420000000e31, 0xffffffffffffffff, 0x0) setresuid$auto(0x0, 0x0, 0x0) (async) setresuid$auto(0x0, 0x0, 0x0) select$auto(0x5, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dri/card0\x00', 0x2, 0x0) ioctl$auto(r3, 0x92106405, r3) (async) ioctl$auto(r3, 0x92106405, r3) 4m4.267316009s ago: executing program 2 (id=1438): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x2, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x5b) r1 = prctl$auto(0x3e, 0x1, 0x0, 0xff, 0x8000000000000001) recvmmsg$auto(r0, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xa00005, 0x9, 0x40abe, r1, 0x7) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) r2 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x40200, 0x0) sendfile$auto(r2, 0x3, 0x0, 0x750) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x280, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) ptrace$auto(0x10, 0x0, 0x4, 0x7ff) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000001600)=ANY=[@ANYBLOB="84130000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=r1, @ANYRES32=0x0, @ANYBLOB="ce00508004002880040040806beac727da61360f5ddece75af1b585ecbd0f472478e1805b55b88876641fb42dc8c2f963c5c082b70fdb266f4ddda624dca904c99e723c463628da8e827b953bc1504a205b27ed289ee24f8f64b625bb56ea580dd5a9595e3c4d32bbbc2c835401adf1e5dd00c0da86d009b74fe2c4fc4dbd56b92956c50446564e598ab677dcca2d3a8e0f1", @ANYRESHEX=r3], 0x1384}, 0x1, 0x0, 0x0, 0x1}, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000053c0), 0x41, 0x0) ioctl$auto_KVM_GET_SUPPORTED_HV_CPUID(r4, 0xc008aec1, &(0x7f0000005400)) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x250c02, 0x0) read$auto(r5, 0x0, 0xb4d3) write$auto(0x3, 0x0, 0xffd8) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.7/usb8/power/level\x00', 0x2881, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f00000002c0)="ddc4", 0x2) mmap$auto_vmwgfx_driver_fops_vmwgfx_drv(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1800000, 0x20010, r1, 0xe) mmap$auto(0xc5d5, 0xffffffffffffff62, 0x8000000000000dc, 0x9b74, r2, 0xe) 4m3.414284413s ago: executing program 2 (id=1443): openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder1\x00', 0x189160, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) mmap$auto(0x0, 0x2020409, 0xa, 0xeb1, 0xffffffffffffffff, 0x8000) eventfd2$auto(0x0, 0x1) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = setfsgid$auto(0xee01) setresgid$auto(r1, 0x0, 0x0) fsconfig$auto_FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000010c0)='\x00', &(0x7f0000001100), r1) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm1p/sub7/sw_params\x00', 0xd0100, 0x0) r3 = syz_clone3(0x0, 0x0) newfstatat$auto(r2, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x9, 0x9, 0x6, 0x0, 0x0, 0xee00, 0x0, 0xf005, 0x5, 0x2, 0x100000000, 0xbd4, 0xa, 0x7, 0x8000, 0x0, 0xa72}, 0x8001) shmctl$auto_SHM_STAT_ANY(0x8, 0xf, &(0x7f00000012c0)={{0x5, 0x0, 0xee01, 0x6, 0x9, 0x3, 0x5}, 0x3add, 0x2, 0x6ce0, 0x1ff, @inferred=r3, @raw=0x8, 0x2aa, 0x0, &(0x7f0000000080)="12aa7a9c7b785557afaed14d96cab2a1149fb03fd4e2bd456131b89ea8e66adcd5c5da00eaf4e6a39cbdf0b7868da62cc2f1e0dac40314c7c6c73d9d88356ba97c13bfc3f9bea234209c3eac183b49025bf231daa3554b5f432f8f0ead25c89850bcbe95daa9f7db55fbe8ce6988c25978492474b37bfaabb0c538af4fe156a8", &(0x7f00000002c0)="2e2ceea5318c948d7ba08d517b489bd1ee27c3da8055f702c14e45bfd6929a37909ac8c453d6963ad5839711ac6537f9295cca2235e9c4d53fb89740de84498911a875ed28b2060b1231af9173a0f525b39e5131b9f592e64f92a6e0533b0a1f57f8ef7a2be3bf7f07c03a47ef9c92617df0c92cc2461606214761682aa1a148193d5fd1b8095b61ba6673c5626f6f521a851ced1f341b4c86f9e2cfb6aa5da74c3420f1898fc63833ca12ee7a3ed2bcef7155a56622cd21829f3c2775247bd24098011c1ae3ed5d34725539df6f93a0b07470a37fcec42bd0a8fd58a07058790072c2fb34bf8239f42034c2dc4d26c366defef07bff057a7cd9d2ffcecf2ba0e9adc91a14d6042713f7813005f5546f93694e57e083dc8dec45daa4ffd0e209c37c8479be70699813c70462027d62529e85b0dc9ed1f625341ef4dfd39a6eef03b4ed5be2a14c162ba8024c82432d7122a58fe8eb730f66608045f56859b50c37c7827f554df88a96ea6f88b12a38c7c84d4eedd95ab36f411ec994f3c14ccc3574958e9b925228b7c228ef879ed51bcdcfe08c59024b77cbe08b2fd5bb5ac4382230d723c585064cfacf928f135819583749eb209461ca08aa7d9987ab0118722b818eef8b94f5778b3b658c8e92aa70892bcb2e98c529eda2996bbf192b99bec1e953437ac8e81a0d35113224bfe6582c5bf85a91008b00f48fe087670c5fcecd479cd0e2c3f151868a1da13988d75452cbce709c2dcf97e47aca09c730bfa4b949d5ca44df61c80fa1858710cd0368ded260f5e8a1200255d74744e40d30f9dc6d066841cd25554d87d8276739ebfa8661b322bc4c47a8c54f56fea6865c9e104bc0747f008a06eed1c13e042aa333fba102d54d50bad9dcaa451b4c61c9619112a2c46f9589f2d82f75fa2bba7629ff97ca775f6892e14e020673d128e7c342bc093e600e5ea97b71ffcfcae10d628954eaccb5acd598f2da23cd9a33b01248b274cfe014688a42f26c35190c7e093c5844d50691b53cd8f365072ed6abe7d05ae4d589f97f906167fcdb2e6b461edaaf08875ec64fe1fcddebbc8fcc0c1a791ee48820c9335513e3091f5a24fcd02472aebf9d0446908dadff411c0cc96f566fe5b15efa6242ec1e59399d68e134145dc8a48f6fb009c66842f5e089ce752bda061f782296403717b4956aa8740ff7cce9066dbc4afe274d55a752072299c3a0758a26e35f3f29f5554c521619c6ed672b44500dedd0e192d191200eed20b87560723ee66481dd3eacc37d9f004e126eb074ba95c9a7e6b80310681abd2b175b796cc475933be39b844aa1434a8d522ba87c4dc66edeee70da5985d618d5e409a938c54042c0087b8c4d0661fcfe61368bce834f558653d7e52d82e642f39ecaf3d6282f487765c77b03dd49a47ac85cb4e62001c45f1c903db836f2a4694fb2d2ce0d65124ab18e6cfe14a9244364653e78e9ebd1ddd2ac6ab52072972752b2623954937bd1cbf33a8ed4c77c529b229d7d7787e704dc58dd73643626a31d68a0426d7789bd3ed79b67b5c6e2fbd02434982003228bd0179e1ba2ca764256949dccca5f0dd08844ee8f2f2a5c7564921012b8f57b43b9f3ff1c7d12bad20fc3326f23b1d6fd71661ae15f2477ccf2196b49145fe8b959258391d1ad98dcbc19d6f242dfea162ebee06a4a5414438ccb7d36b80b1e588b3a992bd0fde15bd8139f287dd8cd5cb0afaede83290a1476e7dff7887f1a1f6a4e96d8afcfc38d1003fafb630c412db6c9d110e7f910428a6942533ebb10977a6b3b4c2cc50ce637d19b14f47eab3fd11c60079944552dbd3a7f887ae2fe0524d55c0732c5bc6df5d8351e8d527514cf3fe284c29e7bd480968868cb0ad054c530fb686580ae4dad80f72776f618486cd8330cdfab55015226f0fe09bd58859b2a932b33c1e15c1ab4ac55615358356eda37f8409f9a9bb404533bd010ef9a7e88860b9cf89ab3e449436f0c1a376762132c9c845e46cf2fd767c1dfd3bb9c65b45cfb6b2e99a2a6f939e36bab9f20d00dbbee3946bc90a9a52044ae8cde1163846532726deed8e40255a319184a474ee187eb41e9c4cfc30457f0356aa8aeee8241cfed7149c38ad7591eddec01f75d17121477af1ed6fbc177b5902db327e6b9da3a2aa524289d04d606c9d2f6f432ffb6dc8f77525f12df4de8db635d99b0ac75e5deb2193a37677244c9bda30680b12363692ec31da380a7b86ee2d9c8ebb56c646b05921a9e736cb0971482351b4034d8b109fb77a9616618283a5634d9a99069fe8314a5b325f5fd641c070a140828a8d4580545c2592d964033312be2d98f576bd8c6ed4d173ea8cf4ce2ba8eb8165ad2184b36d582c6baf7f41e14bf3f8691d3aa016437cf1ad5386891fa74001b12c14e2a6ac7db9159e68e3670386e295db8b08813244771eaa4bb5c67565214955ccfe2526af5140e99945b043b4efd04fefcbcd392f6747ba20b681a150963a0f3643e3cdcf5206e7dc5a55a1de1a8e4c1108cdaefd2b3b9947a43e2e6c624248e3fe9b0f31a3a8f12e72a822fcb2a87da71d32a73b108cac1a8bf0e495f8bf90fe9c69021165efac4e3dc0e551789d2322dbcd4219e7c0ac4af109091bdc5545d7c471c84e0c6ab6ba8abfca1568d609dbef0324844765b97d47a285039b129ad53b1d2df32ad6fe062212bdf700f5b6d91c5fa1ef778bae8b548016ac45e52f6e6ac4683d68009b29fa0a7eb89217cda8166f8b6cca93db10f3d8becf34b663d29ac548b27ce249291ed2c24082b4ed3a2aa441f7431f3ad3fc4a54a6f676afc534b3d18788242fb9356dbefdc5db08df782c79cae642128d1fcbd1768eb826344cbebabfab7534f5da7cdce7104cfcf8d06e43616d88c191de67668d8cfe12a7ea0357f0f176145738ca7674bf996927d17cdb249be54a75d2f7963b6b76c719e40962fcaa23d356956ae908a2f786b58ad50677b343ce7c5db3a25672b01825003b89599530c3878d7f64a6bf7f0fa81a4e4205ae7907d629dddfb57331cd8f01e0212952d51bef46d2bd4c51f90dbc68ee83a5177762c8469a2dd02d4788931af697bc5afe69dc27e34b6d628ca5788014bbaf087181d34d4bce71f62d385d6f80f5a1ce5d278084416347d5c4ae952ce5f7980253240999c02354db000a7d8e86c9d4d0a7227de6ba67fd9c7d242c34099555721518edd4ee49406372fc9d82d574963695b1547e5bcfd9ef9be2d65a902bbc5cff0bbe1581ccde984c61df9f8cec0c76fbf1a508d1ee591358891b392c57cf1fabb1ca2dae2fa7be0566575d082c2c75758e903616ac761bbb5682d71d28ca34644499d846cb7f42b22dca9958a4588e9b1028d1ff81bcd4ced110f2bf28a4852e8877c5abdbd6e90862fe33298ff5beaf977a8e5cca926df0d8eab1a91b41a60eff97e03b78b60bf2e79a257afff994c3b5a0992beb966d506a54505d007f7d07395ad5210f17b2b86479ea4852b819cf2c0c83076127480009176084054d0787ca6f3309450e6a60a9e9a24ad9226f0069462c57b7244a81e916dd306641508f32770dfd56ade2cbdb9ef0ac46fd560d3f12f84396db58212b12fd1e324f2a01b6a53d2d2af490436e8d9b9352a89e96182a90d7c24f9385869c83d1842f1bb1dffdef6d78e4cfb32dbddf0ab3eff33f64f727ec9bf572c6e4de73c6c3026e8802ae6c179d2b2e31efa33191dcd44f695a1f06b53debcc4fab0e38ecba01e1403cee80387d0eaaf766cb245aa02a2aa985b1323c109b605230347b1e4e2beaf9156a6214883619250accf424a5b56589658502c9442bad82a8726f3be2a33d533003543b726e4685857a9fe9a695b0408eb6da49d7be86b2507eb83c5e0131119555ea62cce469158f0af781bd682223770141e055a6f7682d12c835efe099d1d8afd05a27e46bd324f40d64fcb13fba5b6a6a496ac93a98345ba3ac5b5f6ed7e07c6eb6c59d08808e8a93f2b0009c41823ae69074f0c93ee88b63932b54fbc2afb1eab43c9d4f9e0315135db654d63e3fb6a8576b1551f3ef61c7645025f51c2d49d5712d0f787f5477a3f86cf9982fec70fa2be18cc711183a436d4e29c34b276f90d393d6283e1f3a9b24e9310dd2f535c06e81906724129fe77c29bfd5ec73b35f61d3de90d6a98d3c973ab3a169895b811e8a93e16fa7d1da1ceeda29aa134ddbde4886dddb5d31cb1394614e5d7c0202e5e8572d17a67829c88e3bc438b84462a610b0c6f9b093a848320ca0c89c13a2a5052ad531f040b412d3637711bb574cbaa66199df02528db82f84b44f8261cbcbe09544d63785411de469b87915208b69511d71af022ea3f654651e9ae47383cfde1dad01a7ef1ea93fb78856a0c5443baedf6173189ad64cb59a555518dc0991e8772f28b4d045899f06d418b53db3ff054dd12d82d00e0e51b633242f159d7c5c8520a3824185d637970b4ed5199e252071d0359ea3cd9605eccfdb75c8476313275baecaa31c1f4404e2ddc0e4a33953515394e1e1aaab6c1cff3ad39baffb67569585a52d540f99a94ba407e5632e49b8d5d112e973b6f13e4373c92a0309ba14d688e9861e751575a17b4bfc4a8fe4935e93e2cac2d9e2b8d559e9ea8083318112f72e2ba1e6641d05b6330e383adb1e4feffee46559d848ececa6ce1080d643e44241718e606b6cd7e452d69d3e3a371aca50c76ef7b394aa373fef6a6327e7dfd22dca6b01f79586b3e0cee640b437233c0caf70cc0161eb0f67f2b5a9e296379e85d0c0c62d4f7c2df4e9263186545a442cc245323adec12f732f871eb84fe61589367c695dc09e13a09dcc53195515af2e163435e6d3e89d89cbba0315f9b0b8c10246f8eb01bf7f8d508c740052c56eb3edf0c2642a432294693c0e4ea55532f6a9460ad151391c74b91cdd0adfc5e9fd5915b10931c93815021154ab10c9ee1b5656b1e0b4897ae369fd96efd242f5b374ab07b6135896b10c6adc105bc76133ca46fc99c895491d494c5451d267bc846ab2dcaa05868f11c42cb2decc8df7b1d9015423f1e2f03a729c6917b42f41741c8512d1a9ca43f655cc8595674eb1428a9ffd2387cd628ba2958b13fed19065c6029d1ea86e12d79373eb7b8979237cc0b2443f88739666a4ad5c0b8c6549e10388f04ad19efe9fb0b506c6cb3a91c96dd029abf357e6500e88e83c39eee8443d3cd0ce7c5b8297245daa60b666cd9e4ccf73fd7f2a9952cdf758e2876cc953a74efc834056c84b96f274fb2f8b8a3f09679fd9484308504868315c1fc2d81304a7a7c104856822123569522b73582b733f5d5804809e51b33731d67b466891e8ec5caeb09fff432acd00ce3b810d98df83ff0ca8f1197b5445be3d73e0a952ee75a30988f378e4bd44b3bae7680ce9e86a5c75f5b98e7474e2667ba4ad90e1358002827765bc1a3d8c567dee3d08c79281aa988325064040d5a118e3fb218c155472a608e1b74d0c25d71c26f60fbc07bc76aa146ea1210fde5ef9cb697817e21a8a8d1c752a64872583afffceb6bb7f73f45d12c5e1d52cfeff3de1959b69285593be563a87d5ca61b0c01c1c0ca2af3f246655204c417d6501e193e2736d0f18d0d5d87e828c0867e9ff2a15f29a146d7c4c0f7e5bb171c878d94573a84c743ba27eaa67c627e767208132355c1e9f6e05685f2825f5fe654ece67daa16e6fb9162130a20a5a0bc64d3b8734176ad8d1d76e5e202d5fcfaecd6393aa44eb99a1e8295fcb8582b762845382a6e742a8f94"}) r7 = pipe$auto(&(0x7f0000000040)) r8 = setfsgid$auto(0xee01) setresgid$auto(r8, 0x0, 0x0) fsconfig$auto_FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000010c0)='\x00', &(0x7f0000001100), r8) keyctl$auto(0x3, r4, r5, r8, 0x4bc) r9 = setfsuid$auto(0xee00) setreuid$auto(r9, 0x0) r10 = getegid() r11 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000280)={@_si_pad}, 0x3, &(0x7f0000000440)={{0x8, 0x6}, {0x8, 0xc5e}, 0x100000001, 0x3, 0x1, 0xf9, 0xfffffffffffffffc, 0x5, 0x6274, 0x9, 0x0, 0xb, 0x35d, 0x439c, 0x9, 0x7}) shmctl$auto_SHM_STAT_ANY(0x0, 0xf, &(0x7f00000006c0)={{0x7, r9, r10, 0x4, 0x6, 0x81, 0x48d}, 0x1, 0x5, 0x8, 0x2, @inferred=r11, @raw=0x5, 0x5, 0x0, &(0x7f0000000500)="4f98c640887224e1536d4e40a39d3c81a9c6e8ae66bc479f7d92b6c649f07587e8084d4fd558d54a2ddca9c318eb050342e0fbb295dd58250b8d185616881413c9b3a8bbc9cb6f3059624b9d64d81f5b347672273ff0eac474a4fce025de7972a1b178c920727aab101d7741be7f42a7acc5ee4675ca2c96a2d08ca9a74b323f548afca84b63a71fb65c71061963f9693b6afa898480b20dc6d2e4f35f2381eabde6ac3f3b34948a7014878f346459ef0a11d7cb4fe7732d8d9e95d0cc7450914c2b63b9054c10080ba951b8f095adaead86e8bf209f5a9ecef565321572507c2b71c3a04fe37344218ffc325a27547ba7", &(0x7f0000000600)="3b4aab5baf7b70279f51554278b9b2497af28d2f68748361dda23b269d8b59ff913dc2ce2f41389066481eb9ea5492d38b5b950569f4d785c41fe5d0ab02234a66c5d804108051813044b3235a4b452ff0c51b938f2f5440d9ecee6cfad16d8271c93fa2488f5af21c4361fca3799a20b53b6f0c6c3b19b35a674aec24b246c982d5f007b2ecde6cab52699af3b1e94e1a42d4e44b02"}) setresgid$auto(r1, r8, r6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) 4m1.89227265s ago: executing program 2 (id=1450): msgctl$auto_MSG_STAT(0x0, 0xb, &(0x7f0000000080)={{0x6, 0xffffffffffffffff, 0xee01, 0x3, 0x2, 0xffff8000, 0x3}, &(0x7f0000000000)=0x19, &(0x7f0000000040)=0x5, 0x3, 0x4, 0x8, 0x4d6, 0x5, 0x1000, 0x5, 0x69, @raw=0x6}) r1 = semctl$auto_GETPID(0x0, 0xd4, 0xb, 0x7) msgctl$auto_MSG_STAT(0x0, 0xb, &(0x7f0000000180)={{0x5, 0xee00, r0, 0x5, 0x1, 0x0, 0x800}, &(0x7f0000000100)=0x3, &(0x7f0000000140)=0x6, 0x200, 0x4, 0xfffffffffffffffc, 0x4, 0x10000, 0x7f, 0x8, 0x10, @raw=0x1, @inferred=r1}) membarrier$auto_MEMBARRIER_CMD_GLOBAL_EXPEDITED(0x2, 0x0, 0x4) 4m1.76414665s ago: executing program 2 (id=1452): r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1) msgctl$auto(0x1, 0x1, &(0x7f0000000140)={{0xfffffffc, 0x0, 0xee01, 0x9, 0x90}, &(0x7f00000000c0)=0x2, &(0x7f0000000100)=0x8, 0x6, 0x3, 0x6, 0x9, 0xf, 0x1, 0x7, 0xfc0c, @raw=0x7, @inferred=0xffffffffffffffff}) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f00000001c0)={0x81, @raw=0x115, @raw=0x7, 0xd, 0x7fffffff, '\x00', {0x7, 0xfffb, 0x7, 0xee01, 0x0, 0x80, 0x3, 0x0, {0x1}, {0x52, 0x2d}, {0x97, 0x1f}, 0xd74, 0xffffffff, 0xc800000, 0xfe61, 0x3ff, 0xfffc, 0x6, 0x81, 0x4, 0x7, '\x00', 0x1, 0x10000, 0x7ff, 0x6}}) sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)={0x324, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x4f5d}, @NL802154_ATTR_SEC_DEVICE={0x2e4, 0x2e, 0x0, 0x1, [@nested={0x10, 0xa5, 0x0, 0x1, [@typed={0xc, 0x70, 0x0, 0x0, @u64=0x5}]}, @nested={0x1c, 0x0, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @uid=r3}, @typed={0x8, 0xee, 0x0, 0x0, @u32=0xe3}, @nested={0x4, 0x6b}, @nested={0x4, 0x4a}]}, @nested={0x1cb, 0xf5, 0x0, 0x1, [@generic="5048c15cf53ef74f25cd8f731a7ceb095974d8c044043122cea48d6b94502a041b6e71433570fedcd1f48b51f127ea1e7218dd1b6ee9aba921", @nested={0x4, 0x100}, @generic="ecdc35423145b81fad1d41dec989568a6091c1610234e262523995bcefbe2cbcb5c3d3ca4df360afc28d", @nested={0x4, 0x5b}, @generic="11ef3ef2b3397c21f960f4d0b6466a36bcf480ca08c86b6448eaf66d34bce62d3980b4d62ec65be8617b5a2481020a4f975f70319149c5947de1f890fad8af8389257cb0df730e71413dbb2481e5e97b562c6a025fc35ddfed85d69eb05005486d355ffb865d7b2b0be30f71d6fae133365fa6656994ac99aa9656cdf14d2a43b2ddbf4d7735f51971f018f917941d11d6b44defd8ee98d610", @typed={0x4, 0xe5}, @typed={0x8, 0x128, 0x0, 0x0, @uid=r4}, @generic="a0409640806a5a0d4e35966fa7f51b8411edfbd9e3e739a586b3d838bb3178030098a22b03bc6dbf76cdf99da501711052a39a52d524495481c6aebf3604cb0040d19a308a3d2fcde7578719cbee42b62064f57838053c8a352bb68cb7a1fa307f4babe7f1e2a0191d7ac81fb18ed61d7a0ba7e13dfc1d51ed01cc02166130ba94517a45e78977e3f617ba4db5d456436b7b71cae26a237c6fa22b0866683dd4ef3c7d7bb9f8a50fa3bc984bca45c288f012b109e0aaa6"]}, @nested={0xe5, 0x13, 0x0, 0x1, [@generic="d8ffa560d1b7ed5b23df0908c69579a7c6b1bb87e97d18233627da35ee648bc4dacc1f4428b1f642f97eb27fa815868c318ee05c55e669e2296223a1eb5cc34fbad2c177678fd26909b2f0191b9abbc28275a9a5aea5c800f0baaf02f3e58bd3bb96bd2fac2f88182e3fe9453e54c6ade8a5e916a338fcfd685f50fed77a3902262a92c1b625aa469480f70b24e00c07841f620346fdec82609bdc61b6bbc26a8630803d12ea0403ec9713a27064a5ff86ffb1f0d2c8b8f89f26ad2de64c8b397c249a", @typed={0x8, 0xf0, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x28}}, @generic="ed12dc229758753cfd8a7d4c1b3f", @typed={0x4, 0x80}, @nested={0x4, 0x7e}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x97fd}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x4}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x3}]}, 0x324}, 0x1, 0x0, 0x0, 0x10}, 0xc1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000) sendmsg$auto_NFSD_CMD_POOL_MODE_GET(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r6, 0x130a075f65b0c6f5, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x1) socket(0x11, 0x80003, 0x300) setuid$auto(0xe) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) 3m46.771203638s ago: executing program 33 (id=1452): r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r1) msgctl$auto(0x1, 0x1, &(0x7f0000000140)={{0xfffffffc, 0x0, 0xee01, 0x9, 0x90}, &(0x7f00000000c0)=0x2, &(0x7f0000000100)=0x8, 0x6, 0x3, 0x6, 0x9, 0xf, 0x1, 0x7, 0xfc0c, @raw=0x7, @inferred=0xffffffffffffffff}) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f00000001c0)={0x81, @raw=0x115, @raw=0x7, 0xd, 0x7fffffff, '\x00', {0x7, 0xfffb, 0x7, 0xee01, 0x0, 0x80, 0x3, 0x0, {0x1}, {0x52, 0x2d}, {0x97, 0x1f}, 0xd74, 0xffffffff, 0xc800000, 0xfe61, 0x3ff, 0xfffc, 0x6, 0x81, 0x4, 0x7, '\x00', 0x1, 0x10000, 0x7ff, 0x6}}) sendmsg$auto_NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000280)={0x324, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x4f5d}, @NL802154_ATTR_SEC_DEVICE={0x2e4, 0x2e, 0x0, 0x1, [@nested={0x10, 0xa5, 0x0, 0x1, [@typed={0xc, 0x70, 0x0, 0x0, @u64=0x5}]}, @nested={0x1c, 0x0, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @uid=r3}, @typed={0x8, 0xee, 0x0, 0x0, @u32=0xe3}, @nested={0x4, 0x6b}, @nested={0x4, 0x4a}]}, @nested={0x1cb, 0xf5, 0x0, 0x1, [@generic="5048c15cf53ef74f25cd8f731a7ceb095974d8c044043122cea48d6b94502a041b6e71433570fedcd1f48b51f127ea1e7218dd1b6ee9aba921", @nested={0x4, 0x100}, @generic="ecdc35423145b81fad1d41dec989568a6091c1610234e262523995bcefbe2cbcb5c3d3ca4df360afc28d", @nested={0x4, 0x5b}, @generic="11ef3ef2b3397c21f960f4d0b6466a36bcf480ca08c86b6448eaf66d34bce62d3980b4d62ec65be8617b5a2481020a4f975f70319149c5947de1f890fad8af8389257cb0df730e71413dbb2481e5e97b562c6a025fc35ddfed85d69eb05005486d355ffb865d7b2b0be30f71d6fae133365fa6656994ac99aa9656cdf14d2a43b2ddbf4d7735f51971f018f917941d11d6b44defd8ee98d610", @typed={0x4, 0xe5}, @typed={0x8, 0x128, 0x0, 0x0, @uid=r4}, @generic="a0409640806a5a0d4e35966fa7f51b8411edfbd9e3e739a586b3d838bb3178030098a22b03bc6dbf76cdf99da501711052a39a52d524495481c6aebf3604cb0040d19a308a3d2fcde7578719cbee42b62064f57838053c8a352bb68cb7a1fa307f4babe7f1e2a0191d7ac81fb18ed61d7a0ba7e13dfc1d51ed01cc02166130ba94517a45e78977e3f617ba4db5d456436b7b71cae26a237c6fa22b0866683dd4ef3c7d7bb9f8a50fa3bc984bca45c288f012b109e0aaa6"]}, @nested={0xe5, 0x13, 0x0, 0x1, [@generic="d8ffa560d1b7ed5b23df0908c69579a7c6b1bb87e97d18233627da35ee648bc4dacc1f4428b1f642f97eb27fa815868c318ee05c55e669e2296223a1eb5cc34fbad2c177678fd26909b2f0191b9abbc28275a9a5aea5c800f0baaf02f3e58bd3bb96bd2fac2f88182e3fe9453e54c6ade8a5e916a338fcfd685f50fed77a3902262a92c1b625aa469480f70b24e00c07841f620346fdec82609bdc61b6bbc26a8630803d12ea0403ec9713a27064a5ff86ffb1f0d2c8b8f89f26ad2de64c8b397c249a", @typed={0x8, 0xf0, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x28}}, @generic="ed12dc229758753cfd8a7d4c1b3f", @typed={0x4, 0x80}, @nested={0x4, 0x7e}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x97fd}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x4}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x3}]}, 0x324}, 0x1, 0x0, 0x0, 0x10}, 0xc1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x30, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'nfsd\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x30}}, 0x4000) sendmsg$auto_NFSD_CMD_POOL_MODE_GET(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r6, 0x130a075f65b0c6f5, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x1) socket(0x11, 0x80003, 0x300) setuid$auto(0xe) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) 2m36.77862576s ago: executing program 0 (id=1767): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x800, 0x73) (async) socket(0x2, 0x1, 0x84) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) (async, rerun: 32) setsockopt$auto(0x3, 0x10000000084, 0x15, 0x0, 0x8) (async, rerun: 32) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x40080, 0x0) (async) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) (async, rerun: 64) ioctl$auto_USB_RAW_IOCTL_INIT(0xffffffffffffffff, 0x41015500, &(0x7f0000000080)={"44cb9bf73ee4f7d17375d0a2c121fc097204973ce5c568f45cf3a37f00073e797cd85f52c60300259f0f496b584d7480859a383753a492b262cd2e665fea378855d02010d0b1cf7092368788828277decc11b6176237f43ce7d5384aba1e1eee4dd675ba496344c135ba3c9b8cd74d91b5821876925052d05ddd50973f5a648a", "78a1fee6276146f257fe93c9fa89fecfac240fa640931102b4c630bc5601fb47fa67124586bd24165be85c89ed2955a83b4f394d6e6c57281715d54967ac33b5071d2eac8ab7e6921314c5452670cf4223d14a933119c64d9d923ef32ce561acad10f49938168f40e3b68dcaf3e5f074ce961d6a33c481d540e5282df56757d5", 0x5}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$auto_USB_RAW_IOCTL_RUN(r1, 0x5501, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/vhci_hcd.3/usb16/interface_authorized_default\x00', 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async) read$auto(r2, 0x0, 0xe8) (async) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) madvise$auto(0x110c230000, 0x8031ca, 0x9) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'geneve1\x00'}) madvise$auto(0x40, 0x3c6c, 0x3) sendmsg$auto_HSR_C_GET_NODE_LIST(r4, 0x0, 0x24064851) (async) msgctl$auto_IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x6, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x9, 0x4}, 0x0, 0x0, 0x400, 0x4d, 0xaef6, 0x7f, 0x4, 0x0, 0xa4a, 0x1, @raw=0x7}) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x4800) 2m36.372790447s ago: executing program 0 (id=1769): pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x51c, 0x8000) socket(0xa, 0x2, 0x73) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x3, 0x9, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000840)="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", 0xdd4) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x100000000000008, 0x20000007c9, 0xda46, 0xfffefffffffffffc, r0, 0x300000000002) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1000000000000001, 0x0, 0x1, 0x0) unshare$auto(0x1) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x80000000001002, 0x12000000000000, 0x4000000000df, 0xeb4, 0x6, 0x8000008003) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = socket(0x31, 0x6, 0x7fff) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00V\x00\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000040)="32e3eec48051c4cc1bd9d90076d5507aee20a1ffccd1c9977b45b2ce215a1ae8", 0xfff}, 0x3) r5 = socket(0x18, 0x5, 0x1) connect$auto(r5, 0x0, 0x3a) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r3) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r2, 0x0, 0x30004850) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 2m33.750983105s ago: executing program 0 (id=1776): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/system/memory/memory0/phys_device\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x1, r2, @relative_id=0x13, 0xe600}, 0xf) r5 = open(0x0, 0x261c2, 0xd4) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r5, 0x0, 0x3}, 0xc) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) read$auto(0x3, 0x0, 0x8080) ioctl$auto_BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, 0x0) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r6 = socket(0x2, 0x1, 0x2) bind$auto(r6, &(0x7f0000000000)=@in={0x2, 0x3, @multicast1}, 0x6a) connect$auto(r6, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x23}}, 0x54) 2m32.522605001s ago: executing program 4 (id=1781): memfd_secret$auto(0x0) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x1a, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) ioctl$auto_FICLONERANGE(r0, 0x4020940d, 0x4) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) socket(0x2b, 0x1, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) socketpair$auto(0xb, 0x2, 0x9, &(0x7f0000000180)=0x180) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) msgrcv$auto(0x0, 0x0, 0xff9, 0xfffffffffffffffc, 0xb4) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000000)="4c91f2c388274610e12c861bb2bfd9800e9b394b", 0x14) msgsnd$auto(0x0, &(0x7f0000000000)={0x40, 0x5}, 0x8, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r5 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r5, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 2m31.792086045s ago: executing program 0 (id=1783): mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto(r0, 0x0, 0x20) 2m31.661736409s ago: executing program 0 (id=1784): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000580)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9\xe8\xb2\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6E*\xc9\xdd.q\xdbAX\xf6\xfaD\xcdz\xbc~\xf30LE\xb5\x18Wf\xd3\x9b\\\x1c\xbb^\xfb9\xe5\x1b:\xa4\xdd\x81\x91\\\xbc\x1fUl\xfa)\xbf\x9dPV\xae\xa9\x9c)\x01|\xfe\xd0!Rx\a\xc4\xb1$\x8eE\xc2j\x83sLS\xa8H\xf6\xf2,R\x90:\x8fx\xab\x90\xfe$h\x80!\xe2\nY#\xee\x1b}O=\x8bn\xd7zZ\x18\xa7\x9e~\x94k\x8e\xdba\xf2\xc3G\x8egR3\x1d\x01J\x87\x14(}\f\xb1}%N|z,\xbe\x1fB\xd3\xeb\xec\x83X\x8f\x97\x95\xfd\xed\xe6wt\x1d\xb3\xa8\xfb)L~}\x9f\xbf\xd0\xc9\x9d\x82-C\xc3Ez@\x8c\xbf\xa2 \x88\\\r6M\x83', 0x4, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/4096, 0x1000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x80a, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$auto(0x2, 0x2, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2d, 0x3, 0xffff, 0x15f4da0e, 0x6, 0x9, 0xfffffffffffffffd, 0x8, 0x4, 0xfca, 0x9, 0xfffffffffffffffe, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) write$auto_force_suspend_fops_hci_vhci(0xffffffffffffffff, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b45, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xfffffffffffffff7, 0x5, 0x19, r1, 0x7) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) 2m30.906734522s ago: executing program 4 (id=1788): pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x51c, 0x8000) socket(0xa, 0x2, 0x73) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x3, 0x9, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000840)="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", 0xdd4) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0x7fffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1000000000000001, 0x0, 0x1, 0x0) unshare$auto(0x1) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x80000000001002, 0x12000000000000, 0x4000000000df, 0xeb4, 0x6, 0x8000008003) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = socket(0x31, 0x6, 0x7fff) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00V\x00\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000040)="32e3eec48051c4cc1bd9d90076d5507aee20a1ffccd1c9977b45b2ce215a1ae8", 0xfff}, 0x3) r5 = socket(0x18, 0x5, 0x1) connect$auto(r5, 0x0, 0x3a) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r3) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r2, 0x0, 0x30004850) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 2m29.611572683s ago: executing program 0 (id=1794): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x0, 0x0) epoll_create$auto(0x3e) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd4/integrity/read_verify\x00', 0x20a800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x101000, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x17, 0x0, 0x14) 2m23.534360158s ago: executing program 4 (id=1811): waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x7, 0x8}}}, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x806, 0x6}, 0x4, 0x5, 0x1, 0x3, 0xf405, 0x444, 0x80000000, 0x3, 0xb7, 0x5d9, 0x6, 0x7ff, 0x2055}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x9, 0x80, 0xffb, 0x28c7f2f1, 0x3, 0x80000000008000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$auto_SNAPSHOT_S2RAM(r2, 0x330b, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0x5, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x8, 0x1, 0x7, 0x6, "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"}, 0x4000006, 0x3, 0xff) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r3, 0x40046109, &(0x7f0000002c40)=0xf0) ioctl$auto_FIOCLEX(r1, 0x5451, 0x8) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r5 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) pwritev$auto(r5, &(0x7f0000000180)={0x0, 0x765}, 0x3, 0x5, 0x5) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffffffffffd02, &(0x7f00000001c0)) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x103800, 0x0) ioctl$auto(r6, 0xae41, 0xffffffffffffffff) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r4, 0x7, &(0x7f0000000080)='/dev/cec18\x00', &(0x7f0000000240)="babbd0af7729e097450e5edda443b06da7660969c2390726597c973202c66ae07e0f6cb0309471685c2d6b655e9ad09e7b5fa70ac516e01a4cbfdc20942dca73fb81fb9ff4e2b8bdf7ce5c22593b6d6716caaeaa9ac2446e288520199fa750e76cdbbf8113e305c70a", 0x4) ioctl$auto(0xffffffffffffffff, 0x80046f46, 0x38) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 2m21.88384122s ago: executing program 4 (id=1816): prctl$auto_PR_GET_TSC(0x19, 0xa, 0xd, 0x4, 0x9) mmap$auto(0x0, 0x101, 0x0, 0x14, 0x200000401, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) r0 = socket(0x23, 0x80805, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r2 = getpid() pipe2$auto(&(0x7f00000000c0)=r0, 0xfffffffd) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) ioctl$auto(r1, 0x40246f4c, 0x38) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x5) socket(0x3, 0xd1ce3bc92ca2f340, 0x2) socketpair$auto(0x4, 0x7, 0x80000001, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x20009, 0xdc, 0x16, 0x401, 0x8000) fstat$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x534, 0x36, 0x1009b71, 0xffffffffffffffff, 0xff) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r3, 0xc0045520, 0xffffffffffffffff) r4 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r4, 0x40103d0b, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_deferred_devs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x426f41, 0x0) setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/conf/batadv_slave_0/drop_gratuitous_arp\x00', 0x462001, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 2m21.645009032s ago: executing program 4 (id=1818): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000580)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9\xe8\xb2\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6E*\xc9\xdd.q\xdbAX\xf6\xfaD\xcdz\xbc~\xf30LE\xb5\x18Wf\xd3\x9b\\\x1c\xbb^\xfb9\xe5\x1b:\xa4\xdd\x81\x91\\\xbc\x1fUl\xfa)\xbf\x9dPV\xae\xa9\x9c)\x01|\xfe\xd0!Rx\a\xc4\xb1$\x8eE\xc2j\x83sLS\xa8H\xf6\xf2,R\x90:\x8fx\xab\x90\xfe$h\x80!\xe2\nY#\xee\x1b}O=\x8bn\xd7zZ\x18\xa7\x9e~\x94k\x8e\xdba\xf2\xc3G\x8egR3\x1d\x01J\x87\x14(}\f\xb1}%N|z,\xbe\x1fB\xd3\xeb\xec\x83X\x8f\x97\x95\xfd\xed\xe6wt\x1d\xb3\xa8\xfb)L~}\x9f\xbf\xd0\xc9\x9d\x82-C\xc3Ez@\x8c\xbf\xa2 \x88\\\r6M\x83', 0x4, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim1/net/wlan1/statistics/rx_crc_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/4096, 0x1000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x80a, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$auto(0x2, 0x2, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x2, 0x1d2d, 0x3, 0xffff, 0x15f4da0e, 0x6, 0x9, 0xfffffffffffffffd, 0x8, 0x4, 0xfca, 0x9, 0xfffffffffffffffe, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) write$auto_force_suspend_fops_hci_vhci(0xffffffffffffffff, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b45, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xfffffffffffffff7, 0x5, 0x19, r1, 0x7) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) 2m20.709008755s ago: executing program 4 (id=1821): waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x7, 0x8}}}, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x806, 0x6}, 0x4, 0x5, 0x1, 0x3, 0xf405, 0x444, 0x80000000, 0x3, 0xb7, 0x5d9, 0x6, 0x7ff, 0x2055}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x9, 0x80, 0xffb, 0x28c7f2f1, 0x3, 0x80000000008000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$auto_SNAPSHOT_S2RAM(r2, 0x330b, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0x5, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x8, 0x1, 0x7, 0x6, "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"}, 0x4000006, 0x3, 0xff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000002c40)=0xf0) ioctl$auto_FIOCLEX(r1, 0x5451, 0x8) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) pwritev$auto(r4, &(0x7f0000000180)={0x0, 0x765}, 0x3, 0x5, 0x5) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffffffffffd02, &(0x7f00000001c0)) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x103800, 0x0) ioctl$auto(r5, 0xae41, 0xffffffffffffffff) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r3, 0x7, &(0x7f0000000080)='/dev/cec18\x00', &(0x7f0000000240)="babbd0af7729e097450e5edda443b06da7660969c2390726597c973202c66ae07e0f6cb0309471685c2d6b655e9ad09e7b5fa70ac516e01a4cbfdc20942dca73fb81fb9ff4e2b8bdf7ce5c22593b6d6716caaeaa9ac2446e288520199fa750e76cdbbf8113e305c70a", 0x4) ioctl$auto(0xffffffffffffffff, 0x80046f46, 0x38) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 2m14.530469761s ago: executing program 34 (id=1794): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x0, 0x0) epoll_create$auto(0x3e) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd4/integrity/read_verify\x00', 0x20a800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x101000, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x17, 0x0, 0x14) 2m5.689166405s ago: executing program 35 (id=1821): waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x7, 0x8}}}, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x806, 0x6}, 0x4, 0x5, 0x1, 0x3, 0xf405, 0x444, 0x80000000, 0x3, 0xb7, 0x5d9, 0x6, 0x7ff, 0x2055}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x9, 0x80, 0xffb, 0x28c7f2f1, 0x3, 0x80000000008000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$auto_SNAPSHOT_S2RAM(r2, 0x330b, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0x5, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x8, 0x1, 0x7, 0x6, "551e7285968d8e86bd4794a0e875ee9f7b35db28d0a7e72b7a19039c336389cb57a05ba0582cc612c6c0be4beb4cc54d8337d40c93638ba34c4a0435c32a206e808194584d8c359d418662d18943a5e3c6234e712a096205457b56f0a1e5d4d19835696295a54f38117d9d751e23b5fb61daa5a6b2c75148106dc167a20061e3fe55cc53ffadf62b0945da4b27515a0102a8d2d002a842362b4744b8972a5e11e8a6aab89c7b85947f3901d696d459641aa7e6b89b73387ec5fa2d2af6c992213d82c5774c4bcd4187585bcf652af094e988e75002e01f607abf5e25ae0f5548fd13175b681fc059c1f9160aef893bae78cf6cf62c30fa3f0c5c60cbe383a9c0cc1289519b0c7cff81cc3b4fec739fad19c662b0f98d607b61d825d10e2dd3b27b0f7a6b1adc5a452f344c39da5f086ea7c5d99674ca69c4f5635776e67c151bad72f906cd65231da3a55d6056e23b00686723714fabd752f3e2c86dafdee9d379230c0abeabfde9cf88cae099f3ccc76ea7e64a3734ced5ffe749a8012db53ad4d6a5e347bdd83bb409c1bdb762f4aba145df74833d73ccd583797d4fb4ed3e0c7c29d502aacaef02e114d9e60ca6b0bcb28f825f5d49e94ccd2f830933c39a3ba3782505453e3de872ad8da84a6a22aaa62970428bb9a95d1817dbeeded1c53c5d508dea6cc53d80153b05f954c263278bb9c8bc02f3b1805dd9299dc8b97ebff0165d615ba7bf5ce8c490f4dd273642a18267b0a61a594cb1d608f3dffb292991ea32bb647a6f9b951f283e118dc73b45843b5aa883410e402e3bec9ba889ec237462042cedaed761cca0c3b7058d3ffc276c9a75e18b79804f4e21650d911edbedb9fedd31959a8783b1e39d7d6408554bddb2a5d67703d225fe4422bf2367ca483e77fe479495be3235f4c77b3872a9e33946d2602486b83e84e7d8d1742d369e2d00b9dbb552385502c0f597b3615bed54de65af106b58d2b6bebbdd3fe625152527af965b67e9424da7be2e2574e1492aed568d4faaa9da508e0a2e687876fa291e38b7c3ef38643e2c49e0d46d0f2d53352da2f184c4ced2305865ab0ad1435644419773ea82336ffdf62dd325a6a8b2d199d96dba8a13bb5a86ff65b80818ceb37ee8a2b2a8813b33e474e5b110e1ed13dbc4f52efabbce38935a8ada53a0ed5a1a01453a254a1dc528492159591aa192ff6cfa0b372caf236c78d1a0c94dc37916746358b4cf3cc1c0132657818ce6465e58936dbf5991dfb74ff97382c066ba0ceb06ac4f0c005e4c9166e94161bc08e1c23df7ed3419b10ae229aa6bafb19e6af003c9e319956723d839dc50a7edd8d80bce971ba504e0aac811d76e65acffdc4f7e9836396ba98b824be6cc704c59f5849642b191437a5cf902fc1ac491e8c59241586c6791b282b5cfae57eb7e6792048c4769b5b3f21987ec5097e530fd001da5d2999db4ded708225e9a53a2b48d2be3401a063da3c19168769eccaef710d7c2e06818bb05c4a9aa0ce2785a5a6d2846bac9836f1905a9b042029dcc59d918450b6affb522fbf78116941c5cef4ecb82a2134ee8e67ea6091170b67bfc3abec9e2cfc8208d4ba3bb732230fe6a9470c1152ebdc31bbce93cb742b4484bc1cef4298ce897a36c7e8b3ef8bd1b0e3d4dfa46da8bf89b06d67d8a5da465e8f68f999ec38ef8d1b7972125d2d8492680f6698419313afb74b5f715c90aa5ca0a6ea5561acd89a25d0fd066234b1752d6535251be347d8e69afea162f0ae84aa08a1a5475e6860af5956babe0530b6349e918fa97f14e6a83f7e2054c85ec37424757c49c6b76a889cde8473eebc495ac1088fda54f5c70bb17ef4873bf7b524ae892cd8267adfcd1e7054ac0c8b904855f816cbab8a6c5332d2221060b97931130187e1f07b0b9fad917c06f56d3f9fbca9d0ad93c300d88a6025359eb609e86c2b604d6834cde1351ccb0ba238715d6a77953f58b23a78db05bc38cf1e47d5336226a966af0a88fa19b4d992fc82310b7fceee45a202bfdf759dedee618361082881f91f85020e5282fd6a4ff376455f09bd1ca73b16549"}, 0x4000006, 0x3, 0xff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000002c40)=0xf0) ioctl$auto_FIOCLEX(r1, 0x5451, 0x8) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) pwritev$auto(r4, &(0x7f0000000180)={0x0, 0x765}, 0x3, 0x5, 0x5) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffffffffffd02, &(0x7f00000001c0)) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x103800, 0x0) ioctl$auto(r5, 0xae41, 0xffffffffffffffff) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r3, 0x7, &(0x7f0000000080)='/dev/cec18\x00', &(0x7f0000000240)="babbd0af7729e097450e5edda443b06da7660969c2390726597c973202c66ae07e0f6cb0309471685c2d6b655e9ad09e7b5fa70ac516e01a4cbfdc20942dca73fb81fb9ff4e2b8bdf7ce5c22593b6d6716caaeaa9ac2446e288520199fa750e76cdbbf8113e305c70a", 0x4) ioctl$auto(0xffffffffffffffff, 0x80046f46, 0x38) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 1m44.290288125s ago: executing program 5 (id=1927): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/extra\x00', 0xa142, 0x0) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) r1 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_notify$auto(r1, &(0x7f0000000180)={@sival_ptr=0x0, @raw=0x1, 0x1, @_sigev_thread={0x0, 0x0}}) r2 = mq_open$auto(&(0x7f0000000080)='\\*)A\x00', 0x3, 0x9, 0x0) mq_notify$auto(r2, &(0x7f0000000180)={@sival_ptr=0x0, @inferred=r2, 0x0, @_sigev_thread={0x0, 0x0}}) futex$auto(0x0, 0x84, 0x2, 0x0, 0x0, 0x3) read$auto(r0, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$auto_RTC_IRQP_READ(r3, 0x8008700b, &(0x7f0000000200)=0x9) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x18b100, 0x0) r4 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x82842, 0x85) sync_file_range$auto(r4, 0x1, 0xa31e, 0x7) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x1, 0x106) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/handlers\x00', 0x200, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 1m43.426492665s ago: executing program 5 (id=1930): mmap$auto(0x0, 0x4, 0x350c, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x1, {{0x43, 0x3}, 0x4}}, 0x58) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x200000000000100, 0x2020009, 0x3, 0x15, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/nbd3/queue/iosched/front_merges\x00', 0x2041, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket(0x15, 0x800, 0x10000000) getsockopt$auto(r2, 0x114, 0x2718, 0xfffffffffffffffc, 0x0) socket(0x2, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc3\xdd\xa7\xee$\xf5\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xe6\x06g\x1a\xfc\xa8\x02\vw\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000000) mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nbd4\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={"ef65ce6c00cf81000000ffffffffffffff291d00", 0x3ff, 0x408, 0xffc, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r3, 0x1276, 0x0) madvise$auto(0x0, 0x5, 0x15) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto_BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000480)={@raw=0x5b, 0x3, 0x400000000000000, @unused, @devid=0x4}) prctl$auto(0x43, 0xffffffffffffffff, 0x0, 0x9, 0x8658) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r4 = socket(0x2a, 0x3, 0xff) connect$auto(r4, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) 1m42.876232617s ago: executing program 5 (id=1932): set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) utime$auto(0x0, 0xfffffffffffffffc) madvise$auto(0x4, 0x400, 0x5) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0x0, 0x9, 0x5, 0x8, 0x5}, &(0x7f0000000180)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfffffffffffffff8, 0x0, 0x9, 0x9, 0x4, 0x9, 0xf, @inferred, @raw=0x4}) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x9}, 0x7f) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r3, 0x540a, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) pread64$auto(r5, 0x0, 0x10001, 0x82d) write$auto(r4, 0x0, 0xc) close_range$auto(0x2, 0x8, 0x0) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x1, 0x2a, 0x7fffeffffffff780, 0x80020009b73, r4, 0x8) madvise$auto(0x2, 0x5c61fa2c, 0xf) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) 1m41.363888088s ago: executing program 5 (id=1933): socket(0x2, 0x1, 0x84) mmap$auto(0x0, 0x2000d, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000004300)=""/108, 0x6c) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) close_range$auto(0x0, 0xffffffffffffffff, 0x2) (async) socket(0xa, 0x2, 0x3a) socket(0x18, 0x5, 0x1) (async, rerun: 64) r1 = io_uring_setup$auto(0x1, 0x0) (rerun: 64) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f00000000c0)={0x7, 0x200, "92da859ebe9b50b3bf0a7bbe9deefc95b5105b2f5fceddad5b9327b3c2a7c6e3cb250ac94cf958df179da7889b8702ba0c354612b494d0f75342962e41d8d7dd", "f43c115bbb9079375d4f2044d505d284ada6dfb51375ab1e0344e1baed046503948dc2172854a7fbaef878a839ba17bbbe6200406acf597133b1dd359b4b80064428bb0498416c756d8cad0f9777c92a", 0x0, 0x6, "5c1b48be0b66cbd29a69c02527d1c229b15666cdca8ae6f074387365cf3742a1f144ff6af5e2c44f0af59b3fe530b541b640251a9d70d8c9b3a8438fcc140502"}) io_uring_register$auto(0x2, 0x2, &(0x7f0000000040), 0x86) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x5, 0x4f, 0x8) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async, rerun: 64) mmap$auto(0x1002, 0x9, 0x4, 0x200000eb0, 0x401, 0x701cf82a) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0) sendfile$auto(r2, r2, 0x0, 0x6) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x40007, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x6, 0x62, 0x80000000, 0x2, 0x6d3f, 0x8001, 0xa, 0xfffffffffffffffe]}, 0x0) (async, rerun: 64) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async, rerun: 64) getpid() (async) mlockall$auto(0x5) (async, rerun: 32) rt_sigprocmask$auto(0x6, &(0x7f0000000080)={0x8001000}, 0xffffffffffffffff, 0x8) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m39.985843443s ago: executing program 5 (id=1940): r0 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0xfffffffffffffffe, 0x15, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) setsockopt$auto(0x3, 0x0, 0x11, 0x0, 0x0) timer_create$auto(0xfffffffc, 0x0, 0x0) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/inject\x00', 0x40482, 0x0) write$auto(0x3, 0x0, 0x0) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0xe64e}, {0x9, 0x3}}, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) mmap$auto(0x0, 0x20009, 0x10df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8842, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) writev$auto(r2, &(0x7f0000000200)={0x0, 0x3}, 0x3) openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace_clock\x00', 0x88000, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1b0026bd7000fedbdf2503000000040003800400080004000280128f0bc6b6f709869700010089803500000000000000000000000002"], 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x4800) sendfile$auto(r0, r0, &(0x7f0000000040)=0x10001, 0x5) ioctl$auto(r3, 0x5608, 0x1) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/system/cpu/cpu0/cache/index3/shared_cpu_map\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000080)=""/86, 0x56) read$auto_stat_fops_(r1, &(0x7f0000000100)=""/112, 0x70) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000), 0x206c0, 0x0) 1m39.582626156s ago: executing program 5 (id=1942): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) unshare$auto(0x21) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) r2 = socket(0x26, 0x6, 0xf9a3e988) sendto$auto(r2, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x17) listmount$auto(0x0, 0x0, 0x4, 0x101) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r3) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SCOPE={0xe, 0x4, '/dev/tty6\x00'}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x2}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x100000}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x2400c001) close_range$auto(r0, r2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x40000000029, 0x1a, 0xfffffffffffffffe, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r5, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000000000)={0x28, r6, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_FLAGS={0x8, 0x4, 0x1}, @HWSIM_ATTR_ADDR_TRANSMITTER={0xa, 0x2, "a060292f83d9"}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/tty6\x00', 0x0, 0x0) r7 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r7, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) setgroups$auto(0xe32, 0x0) 1m32.195519683s ago: executing program 6 (id=1977): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) (async) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f0000001200)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x19U\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x81\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xecWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\xfbJ7\xd1\xdc\xe1\x80yi\xef\x91M\xfbB\x97\x80\x9a\xbep\x86\x93\xcc4\xe5\xba\x015I\x1d\r\xdf\xc1Q\x8eM\xa6\t$\xb7ZR\xdcs\x94\xccn\x05\xb8\x06', 0x500000a3d9) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 32) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 64) madvise$auto(0x0, 0x2003f2, 0x15) (rerun: 64) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) madvise$auto(0x1afd, 0x7fffffff, 0x4) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r1 = socket(0x29, 0x2, 0x0) setsockopt$auto(r1, 0x119, 0x1, 0x0, 0x8) (async) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') (async) madvise$auto(0x0, 0x200007, 0x19) (async) mmap$auto(0x0, 0x86f3, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) setsockopt$auto(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x40) (async) bpf$auto(0x9, &(0x7f0000000000)=@test={0x12, 0x1, 0xa93f, 0x9, 0x3, 0x3, 0x3da5, 0x0, 0x1, 0x5, 0x140000000000, 0x0, 0x7, 0x9, 0x1}, 0x171) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='Y\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fcdbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) (async) r2 = socket(0x10, 0x2, 0x4) madvise$auto(0x2, 0x1bf33020, 0x401) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 1m31.604477403s ago: executing program 6 (id=1984): ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{@raw, 0x3, 0xcf, 0x8, "16a0d89bf208384515b5375a677609aa1bc737276563c3d5a2fca999d5797ab7a10a4d2bc341c4bd369ae535", @raw=0x1}, 0x1, @iec958={"19e57b9f98c80d7937fc7d4911ae520ee88faea01c32bca7", "83da00bda2268908e305f7997c832c5309f56392403bf147c5676a1ae7b27cba1e9e7aaefe591ba0d5a964b3128bb5af46fab1c4991e3a741843399d184e66f11f1e512d472aabc9d8feea5611fea566b04dde4ff4ddc3d97cd027c0c4f2974d006e0ced2f6eaad58212bc71163e029ff6b45b9f46d312ad0adc487a86ee8c6c41b029207401d45ad83ec46131a797758dc74c", 0x0, "486d9bc4"}, "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) write$auto(0xffffffffffffffff, &(0x7f0000000080)='V\x89Zn\xbd\x93\x8e\x91$\x11\xddM\n\xc292\xb6$\xde|\x85\x83R\xe7*\x9bY\xce\xa9\x10\xf6\x8c|\xfb\xd0x\xd8\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x05\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa6f\xa8\xe0RV\x91\xd4\x16\xa9\xafWW\xb1\xf4o\x1d \xc6\xef\x9dB\xce\xde\xac\x97v\\n\x00\xc6L\xa8\x01~\xe9\x8d\xc7\x18\xcc\xed\xfe\xe3\xe6!\x9e\x9d\x04\xe9\xfc', 0xdda) mmap$auto(0x1000000000005, 0x8, 0x4000000000e7, 0x800000000000017, 0x401, 0x5) socket(0x11, 0x5, 0x1) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x191000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x43e, 0x10001, 0x0, 0x3, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/dev_snmp6/veth0_virt_wifi\x00', 0x200000, 0x0) writev$auto(0x3, 0x0, 0x8009) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_DEL(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x404c840) mmap$auto(0x6d8c, 0x4020009, 0xe3, 0x10011, 0x401, 0x3) mmap$auto(0x40000004, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd1/stat\x00', 0x19df40, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x5}, 0x5, 0x3, 0x9) read$auto(0x3, 0x0, 0xf34) write$auto(0x3, 0x0, 0xffd8) 1m31.176182515s ago: executing program 6 (id=1986): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socket(0x10, 0x5, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x400080}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/neigh/vlan0/anycast_delay\x00', 0x88042, 0x0) sendfile$auto(r1, r1, 0x0, 0xd021) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000140), r0) 1m30.954306699s ago: executing program 6 (id=1987): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/carrier\x00', 0xc2061, 0x0) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xab\b\x00\x00\x00\x00\x00\x00\x00}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2oc!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x83) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r1 = fsopen$auto(0x0, 0x1) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r2, 0xc1004111, 0x0) r3 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0) readv$auto(r3, &(0x7f00000018c0)={0x0, 0x1}, 0x9) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/personality\x00', 0x8002, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dri/renderD128\x00', 0x0, 0x0) r5 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vgem/clients\x00', 0x60440, 0x0) r6 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x28000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LOCK(r6, 0x40405514, 0x0) write$auto_hwsim_simulate_radar_(r1, &(0x7f00000005c0)="19f794e9d13ace05adfdf3969f94335e05636a94cdd9c4500a22f9c90c06314a7b63ad889a31ed4110d28d6f510834e1b3da9615944866651f7d49a209e9b2e7058bc43c50f734eccf54e402bf5a1772447a8b19c167ccb20cd89a256f47048794fb92dbae1c80b9a4b7846767a4b0eca34b50584cb48549b3cd32e22698f69d52e4fc888ced5061d448d75f703c4861b7fb13fb66585e8606f417c6fc341d9e8b709fecc329a91988ac4bdd0652e3e191a6427c8d297f81545796b2d5510218eab66d95d92a7568e4068e14a139d128306c11300512b74bebefea38475818689360d77de09741cc3727953230e55c5d5ec9bf82900668", 0xf7) read$auto_drm_debugfs_entry_fops_drm_debugfs(r5, &(0x7f0000000100)=""/153, 0x99) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 1m30.186353013s ago: executing program 6 (id=1990): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r0 = socket(0x10, 0x2, 0x6) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setsockopt$auto_SO_PROTOCOL(r0, 0x8, 0x26, &(0x7f0000000080)='.,&\x00', 0x10001) socketcall$auto(0x8000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) r2 = openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000240), 0x181a03, 0x0) splice$auto(r2, 0x0, r2, 0x0, 0x3, 0x3) connect$auto(0x3, &(0x7f00000000c0)=@llc={0x1a, 0x322, 0xab, 0x7, 0x8d, 0xd, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x55) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r3, 0x8008551c, 0xffffffffffffffff) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) statmount$auto(&(0x7f0000000000)={0x5, @inferred=r1, 0x0, 0x7fffffffffffffff, 0x3}, &(0x7f0000000280)={0x5d, 0x1, 0x8, 0x7, 0x0, 0x628, 0xac, 0x16f, 0x7, 0x100000000, 0xfff, 0x2, 0x1, 0x1, 0x4, 0x7, 0x9, 0x5e64, 0x9, 0x73, 0x1ad, 0xa, 0x1686, 0x10000, 0x40, 0x4, 0x0, 0x7a5, 0x4, 0x9, 0xffffffff, [0x6, 0x7fff, 0x8000000000000001, 0x8, 0x10000, 0x377f, 0x3, 0x100000001, 0x3, 0x1000, 0x4, 0x9, 0x10001, 0x5, 0xfff, 0x3, 0xfffffffffffffffc, 0x5, 0x5, 0x20000000000, 0x1, 0x80000000000000, 0x8, 0x7, 0x1, 0xffffffff, 0x400, 0x400, 0xff, 0x7, 0x3, 0x0, 0xffffffff, 0xa55d, 0x0, 0xd4, 0x200, 0xed6, 0x5, 0x3, 0x8, 0x9, 0x101], "39ea2693f20a4c16dd5763868b20de367608c6935fe8df6203c95915ab566262312b2470c811e304c5ab03b08c1933235d1afa9ebde09e8f231c394bd027836448a309cdc1f35b193ba000a52faaca4ec7586092270befc0ae46e188ce270e"}, 0x0, 0x6) 1m28.855366926s ago: executing program 6 (id=1997): write$auto(0xffffffffffffffff, 0x0, 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) fanotify_mark$auto(0x0, 0x105, 0x8009, 0xffffffffffffffff, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x98, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SCOPE={0x72, 0x4, 'nfsQ\x00\xed\x0e1\x1ds\xb8\f\x11@\xdd\x11\x8fF\xf1z\xa1\xe67\x14\xc5\xd8\xf3\x18\xe9\x8c\xf8#\xcc\x8c^\xd7\xdb<\x96w\xe1z\xe99\xc4\xddS\xf4\xc0gq\xf0\x142f{\xe2\xb6\x13\xa1\a=\x12`&\xd1\xa3\x0e!p\x90A\xd6h>\xc22\x90\xff\xeb=\xf7\x9f\x84y4\vJ\xa9\x14\xc2\xca\x8df\x0ek\xc1\t\xd6\x10\xf4\xb8\x8c\xac\xd3L\x8c\xb6\xc0\xc5'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x98}}, 0x4000) io_uring_register$auto(r0, 0x18, 0x0, 0x9) timer_create$auto(0x0, 0x0, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, r5, 0x300000000000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MM_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050728bd7000ffdbdf252a00000024000180080003000300000008d900000104000008001700d20200000806030007000008"], 0x38}, 0x1, 0x0, 0x0, 0x44808}, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mlock$auto(0xfbea, 0x7fffffffffffffff) 1m24.325431709s ago: executing program 36 (id=1942): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) unshare$auto(0x21) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x40001, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfff) r2 = socket(0x26, 0x6, 0xf9a3e988) sendto$auto(r2, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x17) listmount$auto(0x0, 0x0, 0x4, 0x101) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r3) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000002a80)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x4}, @NFSD_A_SERVER_SOCK_ADDR={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SCOPE={0xe, 0x4, '/dev/tty6\x00'}, @NFSD_A_SERVER_SCOPE={0x5, 0x4, '\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x2}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x100000}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x2400c001) close_range$auto(r0, r2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x40000000029, 0x1a, 0xfffffffffffffffe, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r5, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000000000)={0x28, r6, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_FLAGS={0x8, 0x4, 0x1}, @HWSIM_ATTR_ADDR_TRANSMITTER={0xa, 0x2, "a060292f83d9"}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/tty6\x00', 0x0, 0x0) r7 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r7, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) setgroups$auto(0xe32, 0x0) 1m13.713223678s ago: executing program 37 (id=1997): write$auto(0xffffffffffffffff, 0x0, 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) fanotify_mark$auto(0x0, 0x105, 0x8009, 0xffffffffffffffff, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x98, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NFSD_A_SERVER_SCOPE={0x72, 0x4, 'nfsQ\x00\xed\x0e1\x1ds\xb8\f\x11@\xdd\x11\x8fF\xf1z\xa1\xe67\x14\xc5\xd8\xf3\x18\xe9\x8c\xf8#\xcc\x8c^\xd7\xdb<\x96w\xe1z\xe99\xc4\xddS\xf4\xc0gq\xf0\x142f{\xe2\xb6\x13\xa1\a=\x12`&\xd1\xa3\x0e!p\x90A\xd6h>\xc22\x90\xff\xeb=\xf7\x9f\x84y4\vJ\xa9\x14\xc2\xca\x8df\x0ek\xc1\t\xd6\x10\xf4\xb8\x8c\xac\xd3L\x8c\xb6\xc0\xc5'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x98}}, 0x4000) io_uring_register$auto(r0, 0x18, 0x0, 0x9) timer_create$auto(0x0, 0x0, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, r5, 0x300000000000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MM_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050728bd7000ffdbdf252a00000024000180080003000300000008d900000104000008001700d20200000806030007000008"], 0x38}, 0x1, 0x0, 0x0, 0x44808}, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mlock$auto(0xfbea, 0x7fffffffffffffff) 42.15596855s ago: executing program 1 (id=2158): socket$nl_generic(0x10, 0x3, 0x10) write$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffffff, 0x0, 0x20) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast1, 0x2}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r1 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) socket(0x2, 0x1, 0x0) pipe$auto(0x0) socketpair$auto(0x1, 0x9, 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r2, r2, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video49\x00', 0xa240, 0x0) ioctl$auto(r3, 0xc0585611, r3) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r1, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) move_pages$auto(0x0, 0x477, 0x0, 0x0, 0x0, 0x0) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x1) 41.853926539s ago: executing program 1 (id=2159): mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x1, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) (async) read$auto(0xffffffffffffffff, 0x0, 0x80000001) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x39b8) (async, rerun: 32) write$auto(0x3, 0x0, 0xfffffdef) (rerun: 32) io_uring_setup$auto(0x6, 0x0) (async) madvise$auto(0x0, 0x200204, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="810b25bd7000ffdbdf251100000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) io_uring_setup$auto(0x1, 0x0) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) uname$auto(0x0) (async) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) 40.722762876s ago: executing program 1 (id=2163): mmap$auto(0x10000000, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x7fff) io_uring_setup$auto(0x6, 0x0) r0 = socketcall$auto(0x1004, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000600), 0x82, 0x0) read$auto_ima_ascii_measurements_ops_ima_fs(r2, 0x0, 0x0) ioctl$auto(0x3, 0xae60, r2) ioctl$auto(0x3, 0x4008ae61, r0) r3 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x42080, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r3, &(0x7f0000000040)=""/66, 0x42) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000003900)='\t', 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r4, &(0x7f0000001680)="a7", 0xfffffc96) syz_open_procfs$namespace(0x0, 0x0) io_cancel$auto(0x7, 0xfffffffffffffffc, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mincore$auto(0x1000, 0x8001, 0x0) mmap$auto(0x3, 0x9, 0x6, 0xeba, r0, 0x8002) unshare$auto(0x40000080) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) 36.953367733s ago: executing program 1 (id=2180): prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) landlock_create_ruleset$auto(&(0x7f0000000140)={0x7, 0xdd4, 0x9}, 0x8000000000000002, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x42800, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) ioctl$auto(r1, 0x80845663, r1) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x42, 0x90) fanotify_mark$auto(r0, 0x4bb, 0x9, r2, &(0x7f0000000100)='./file0\x00') close_range$auto(0x2, 0x8, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYBLOB="d8040000", @ANYRES16=0x0, @ANYBLOB="008200"/16, @ANYRES32=0x0, @ANYBLOB="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"], 0x4d8}, 0x1, 0x0, 0x0, 0x40014}, 0x48845) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socketcall$auto(0x8000, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r5) ioctl$auto_KVM_GET_MSRS(r4, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) mprotect$auto(0x110c238000, 0x1, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r7 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_add_rule$auto(r7, 0x2, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x2, 0x5ae, 0x5, 0x7, 0x6, 0x10000, 0x1, 0xa, 0x8, 0x6, 0x9, 0x200005, 0x4, 0x1ff, 0x2, 0x8, 0x10000, 0x0, 0x6, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, [0x80, 0x0, 0x0, 0x400000000, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000004, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffbfffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000]}, 0x6, 0x1000000) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0x8, 0x0) 35.765333325s ago: executing program 1 (id=2185): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x181, 0x0) r1 = socket(0x11, 0x3, 0x9) mmap$auto(0x9, 0x20008, 0x4000000000e0, 0xffffffff, r1, 0x40000008000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8fg\x1b\x04\xad>\x96\xe9IG\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6\x00\x00\x00\x00\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xees\xf0\xc2\xad\xae\x99\xeb\xc5\xf0\"\x92\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\x00\x00\x00', 0x0, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000300)='/Eev/au\tio1\x00VI\x92\x10\xf8\x1aO\x84\x9a\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ar.U\xee\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\x95\xe2\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf', 0x100000a3d7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/netdevsim5/power/control\x00', 0x161080, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYRES16=r1, @ANYRESDEC=r0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYRES8, @ANYRESOCT=r2, @ANYRES64=r0, @ANYRES16, @ANYRESOCT, @ANYRESOCT], 0xb4}}, 0x20000054) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0xfff) write$auto(r3, 0x0, 0x98c7) mmap$auto(0x0, 0x9, 0x8000000005, 0x200018, 0xffffffffffffffff, 0x4) madvise$auto(0x0, 0x4, 0x15) unshare$auto(0x40000080) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/dev_snmp6/ip6_vti0\x00', 0x2000, 0x0) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000400), 0x181040, 0x0) ppoll$auto(&(0x7f0000000440)={0xffffffffffffffff, 0x4}, 0x6, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(r4, 0x84, 0x80, 0x0, &(0x7f0000000300)=0x1000c) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000840)="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", 0x930) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x9, 0xd) 34.773096431s ago: executing program 1 (id=2192): waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x7, 0x8}}}, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x806, 0x6}, 0x4, 0x5, 0x1, 0x3, 0xf405, 0x444, 0x80000000, 0x3, 0xb7, 0x5d9, 0x6, 0x7ff, 0x2055}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x9, 0x80, 0xffb, 0x28c7f2f1, 0x3, 0x80000000008000) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$auto_SNAPSHOT_S2RAM(r2, 0x330b, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0x5, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x8, 0x1, 0x7, 0x6, "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"}, 0x4000006, 0x3, 0xff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r3, 0x40046109, &(0x7f0000002c40)=0xf0) ioctl$auto_FIOCLEX(r1, 0x5451, 0x8) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r5 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) pwritev$auto(r5, &(0x7f0000000180)={0x0, 0x765}, 0x3, 0x5, 0x5) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffffffffffd02, &(0x7f00000001c0)) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x103800, 0x0) ioctl$auto(r6, 0xae41, 0xffffffffffffffff) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r4, 0x7, &(0x7f0000000080)='/dev/cec18\x00', &(0x7f0000000240)="babbd0af7729e097450e5edda443b06da7660969c2390726597c973202c66ae07e0f6cb0309471685c2d6b655e9ad09e7b5fa70ac516e01a4cbfdc20942dca73fb81fb9ff4e2b8bdf7ce5c22593b6d6716caaeaa9ac2446e288520199fa750e76cdbbf8113e305c70a", 0x4) ioctl$auto(0xffffffffffffffff, 0x80046f46, 0x38) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 29.506292062s ago: executing program 8 (id=2223): close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd2/queue/read_ahead_kb\x00', 0xa001, 0x0) (async) r1 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) execveat$auto(r0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x10000) (async) ioctl$auto_BCH_IOCTL_DISK_ONLINE(r1, 0x4010bc06, 0x0) (async) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0x8000, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r3) r5 = ioctl$auto_TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(r5, 0x0, 0x20000094) (async) read$auto_proc_pid_cmdline_ops_base(r5, &(0x7f0000000040)=""/64, 0x40) (async) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0xdd, 0x0, [{0x40000002, 0x9, 0x3b0}]}) 29.248357556s ago: executing program 8 (id=2226): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) sysfs$auto(0x2, 0x810000000000003a, 0x0) ppoll$auto(&(0x7f0000003600)={0x8, 0x800, 0x1}, 0xd6, 0x0, 0x0, 0x8) fsopen$auto(0x0, 0x1) 29.089044348s ago: executing program 8 (id=2229): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x3, 0x80000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) fstat$auto(0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/neigh/ipvlan1/retrans_time\x00', 0x2242, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x280, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) pidfd_open$auto(0x1, 0x80) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001ff, 0x20000000007, 0x41, 0xbc3, 0x800, 0x3, 0x510, 0xc, 0x400000000003, 0x3, 0x0, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x15ed]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) 27.869882827s ago: executing program 8 (id=2232): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001080)='/dev/v4l-touch5\x00', 0x103040, 0x0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f00000010c0)=""/22, 0x16) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/fail-nth\x00', 0x2d2002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/i8042/serio1/power/wakeup\x00', 0x20200, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) mremap$auto(0x0, 0x2, 0x8, 0x3, 0x7effffffb000) brk$auto(0x7fffffffefff) close_range$auto(0x2, 0xffffffffffffffff, 0x0) mmap$auto(0x2, 0x100002020004, 0x10, 0xfb8, 0xfffffffffffffffa, 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/fail-nth\x00', 0x40802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) fanotify_mark$auto(0xffffffffffffffff, 0x0, 0xfffffffffff8fbff, 0xffffffffffffffff, 0x0) socket(0x1d, 0x2, 0x6) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/mac80211_hwsim/hwsim12/uevent\x00', 0x40e00, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x169780, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r2, 0x40101286, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000001040), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x5, 0x25dfdbfd, {}, [@GTPA_I_TEI={0x8, 0x8, 0x5}, @GTPA_LINK={0x31, 0x1, 0x6551e4df}, @GTPA_I_TEI={0x8, 0x8, 0xed2d}, @GTPA_O_TEI={0x8, 0x9, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x14) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket(0x2b, 0x1, 0x1) r6 = openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) readv$auto(r6, &(0x7f0000002c80)={&(0x7f0000002c00), 0x1}, 0x6) ioctl$auto(r5, 0x89a0, 0x4) write$auto(0x3, 0x0, 0x100082) 26.774117773s ago: executing program 8 (id=2237): r0 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r0, &(0x7f0000000200)=@generic={0x11, "00030f00"}, 0x80) (async) mmap$auto(0x0, 0x1, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000000000000000) (async) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy7/queues\x00', 0x20000, 0x0) (async) mmap$auto(0x0, 0x400000000400008, 0x9, 0xf1, 0x2, 0x18000) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$auto_stats_fops_2(0xffffffffffffff9c, &(0x7f000000b000), 0x80, 0x0) pread64$auto(r2, &(0x7f000000b040)='\x00', 0x7, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r5 = ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r6, r6, 0x0, 0x3) (async) write$auto(r5, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x100000000) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/sockstat\x00', 0x22000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) mmap$auto(0x0, 0x5, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/net/rose15/address\x00', 0x0, 0x0) mincore$auto(0x1000, 0x8001, 0x0) r7 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev1\x00', 0xe0800, 0x0) ioctl$auto(r7, 0xc0205648, r7) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r8) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000005a2d11d191fca564596157c9866dad87ced631e186de7f6b64b9109e2f9b958793d2e9db26786fcf9e24c534ad0c4c287995805327fe990bc3db571a8db30b97d09fb8c814984b0652628f9ce32c56ce4b652dade9cd53324d7ab1d9812895427bc94bcf659dd5e4c518375517854a62c1c26d2a80497ebf418c7def465dd523b28073ccb33e4df3437932b0b36c0fc150d3d34f9f469743251e1bd73e028c11e505c8daefd01eb3470f9f09a4e19eae7ed21581b77c4a00aab0bc73f53d79587c02042d", @ANYRES16=r9, @ANYBLOB="010025bd7000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r9, @ANYBLOB="a3002dbd7000fadbdf250400000004000d00"], 0x18}, 0x1, 0x0, 0x0, 0x4000004}, 0x4044820) 26.382272095s ago: executing program 8 (id=2239): socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x7, 0x2, 0xeb1, 0x404, 0x8000) r0 = bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x5, 0xa37, 0xffffffffffffffff, @relative_fd, 0x1}, 0xd7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r3 = gettid() syz_clone3(&(0x7f00000003c0)={0x5000, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r3], 0x1}, 0x58) connect$auto(r2, &(0x7f0000000440)=@hci={0x1f, 0x0, 0x2}, 0x1) write$auto(0x3, 0x0, 0x100082) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r4) sendmsg$auto_NFSD_CMD_VERSION_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x28, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x14, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x4010) sendmsg$auto_NFSD_CMD_VERSION_GET(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x4, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_VLAN(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd70001698fcdbdf25110000000800030020875f8ac604eeaad00bdb3d94a780e4d8f48345909687ad88b736b891322e8a50b5ac1ea854da00b45b57a066ba7fae7766e3122173bf8f8800207965d80fee1971cde4f1e9b93c35f0e28207", @ANYRES32=r8, @ANYBLOB="06002800d5190000"], 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x4008090) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4044000}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0xc8}, 0x1, 0x0, 0x3, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x30017, 0x8020000000a, 0x2, 0x5f, 0x20000000000803, 0xffffffffffffffff}, 0x6f0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) 19.730387546s ago: executing program 38 (id=2192): waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x7, 0x8}}}, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x806, 0x6}, 0x4, 0x5, 0x1, 0x3, 0xf405, 0x444, 0x80000000, 0x3, 0xb7, 0x5d9, 0x6, 0x7ff, 0x2055}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x9, 0x80, 0xffb, 0x28c7f2f1, 0x3, 0x80000000008000) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$auto_SNAPSHOT_S2RAM(r2, 0x330b, 0x0) ioctl$auto_VHOST_SET_BACKEND_FEATURES(r1, 0x4008af25, &(0x7f0000000000)=0x7) mmap$auto(0x4, 0x5, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x8, 0x1, 0x7, 0x6, "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"}, 0x4000006, 0x3, 0xff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) ioctl$auto_CEC_S_MODE(r3, 0x40046109, &(0x7f0000002c40)=0xf0) ioctl$auto_FIOCLEX(r1, 0x5451, 0x8) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r5 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) pwritev$auto(r5, &(0x7f0000000180)={0x0, 0x765}, 0x3, 0x5, 0x5) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffffffffffd02, &(0x7f00000001c0)) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x103800, 0x0) ioctl$auto(r6, 0xae41, 0xffffffffffffffff) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r4, 0x7, &(0x7f0000000080)='/dev/cec18\x00', &(0x7f0000000240)="babbd0af7729e097450e5edda443b06da7660969c2390726597c973202c66ae07e0f6cb0309471685c2d6b655e9ad09e7b5fa70ac516e01a4cbfdc20942dca73fb81fb9ff4e2b8bdf7ce5c22593b6d6716caaeaa9ac2446e288520199fa750e76cdbbf8113e305c70a", 0x4) ioctl$auto(0xffffffffffffffff, 0x80046f46, 0x38) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 12.301189014s ago: executing program 9 (id=2280): pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x51c, 0x8000) socket(0xa, 0x2, 0x73) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000840), 0x0) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0x7fffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1000000000000001, 0x0, 0x1, 0x0) unshare$auto(0x1) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x80000000001002, 0x12000000000000, 0x4000000000df, 0xeb4, 0x6, 0x8000008003) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = socket(0x31, 0x6, 0x7fff) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00V\x00\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000040)="32e3eec48051c4cc1bd9d90076d5507aee20a1ffccd1c9977b45b2ce215a1ae8", 0xfff}, 0x3) r5 = socket(0x18, 0x5, 0x1) connect$auto(r5, 0x0, 0x3a) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r3) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r2, 0x0, 0x30004850) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 11.17692414s ago: executing program 39 (id=2239): socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x7, 0x2, 0xeb1, 0x404, 0x8000) r0 = bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x5, 0xa37, 0xffffffffffffffff, @relative_fd, 0x1}, 0xd7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r3 = gettid() syz_clone3(&(0x7f00000003c0)={0x5000, 0x0, 0x0, 0x0, {0x3}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r3], 0x1}, 0x58) connect$auto(r2, &(0x7f0000000440)=@hci={0x1f, 0x0, 0x2}, 0x1) write$auto(0x3, 0x0, 0x100082) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r4) sendmsg$auto_NFSD_CMD_VERSION_SET(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x28, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x14, 0x1, 0x0, 0x1, [@NFSD_A_VERSION_MAJOR={0x8, 0x1, 0x4}, @NFSD_A_VERSION_MINOR={0x8, 0x2, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000001}, 0x4010) sendmsg$auto_NFSD_CMD_VERSION_GET(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x4, 0x70bd28, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_VLAN(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002abd70001698fcdbdf25110000000800030020875f8ac604eeaad00bdb3d94a780e4d8f48345909687ad88b736b891322e8a50b5ac1ea854da00b45b57a066ba7fae7766e3122173bf8f8800207965d80fee1971cde4f1e9b93c35f0e28207", @ANYRES32=r8, @ANYBLOB="06002800d5190000"], 0x24}, 0x1, 0x0, 0x0, 0x40801}, 0x4008090) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4044000}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0xc8}, 0x1, 0x0, 0x3, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x30017, 0x8020000000a, 0x2, 0x5f, 0x20000000000803, 0xffffffffffffffff}, 0x6f0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) 10.254866816s ago: executing program 9 (id=2285): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x110c230000, 0x1, 0x9) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900), 0x0) getrandom$auto(0x0, 0x3, 0x80000001) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) keyctl$auto(0xe, 0x1, 0x1, 0x4, 0x6) msync$auto(0x110c230000, 0x200001, 0x6) close_range$auto(0x2, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/avoid_reset_quirk\x00', 0x68006, 0x0) write$auto(r1, 0x0, 0x8) 10.193822528s ago: executing program 3 (id=2286): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181881, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 9.950389625s ago: executing program 7 (id=2287): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd3/hctx0/sched_tags_bitmap\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x800004000006c, 0x10000ff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x43b, 0x1, 0x42, 0x200000000065f, 0x401ffde, 0x7, 0x3, 0x2, 0x100, 0x3eb, 0x0, 0x2, 0x3000, 0x2, 0x6, 0x10003, 0x82, 0x4, 0x0, 0x7, 0x1ffb, 0x203, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x80000000, 0x4, 0xfffffffffffffffc, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffbfffc, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x7fff]}, 0x7, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x1, 0x0, 0xffffffffffffff39, 0x1) semctl$auto(0x1ff, 0x2, 0x13, 0x1) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000480), 0x200000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.7/usb8/ep_00/direction\x00', 0x20400, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf2503000000790008805b4f2525b2dc3a73ec37e7122e6f0d55382854d419b883b7ed64bd3c7b9fb15273e787030718751e0a22cc6cabcae114aa6448d0356183e1ca7c01536c5c6f37915b26a3e75515ab02807fe932b8a415a581dcdc7800f91e231c001d800400d3800c002000f3000000002b3c0c7e9b52baf56fe40000000008008c00ac1414aa000000700002806a00e400addd3588300c750bd8c6341eedf20d260a37a63d761fd730c00d02e9ba0a478e7a2f6629a6ad6201"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x204880, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x64842, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0) 9.928049819s ago: executing program 3 (id=2288): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = bpf$auto(0x8000000, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x6, 0x80, 0x8, 0xd8, 0xfffffa13, 0x200, 0x8, 0x3fd, 0xffffffffffffffff, 0xe2, 0x2, 0xc28}, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, 0x0, 0x24000000) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r3, &(0x7f00000005c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0xffffffffffffffff, 0x2000d, 0x8, 0xeb1, 0x404, 0x80000000) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000001bc0)="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", 0x850) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x40, 0x4, 0x62, 0x180000000, 0x9, 0x6d3f, 0x9, 0x0, 0x95]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0xc0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000180), 0xffffffffffffffff) fcntl$auto_F_SETLKW(r1, 0x7, 0x8001) socket(0x2a, 0x2, 0xa) r4 = socket(0x2, 0x1, 0x0) bind$auto(r4, &(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x6, 0x20000000) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82942, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x3}, 0x6, 0x0, 0x4, 0x9}, 0x9}, 0x3, 0x1f00) syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.357030676s ago: executing program 7 (id=2289): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) (async) socket(0x18, 0xa, 0x1) (async, rerun: 64) socket(0x2, 0x3, 0xa) (async, rerun: 64) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000140)='0[.[\x00', 0xcd04) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x1) (async) statmount$auto(0x0, &(0x7f00000002c0)={0x0, 0x2, 0x5ae, 0x5, 0x7, 0x26, 0x2, 0x1, 0xffffffffffffffff, 0x8, 0x6, 0x5, 0x5, 0x4, 0x0, 0x2, 0x8, 0x10000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200, 0xbba, 0x0, 0x80000, 0x0, 0x0, 0xe, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x4000000000000, 0x0, 0x0, 0x9, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff]}, 0x6, 0x1000000) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(0xffffffffffffffff, &(0x7f00000004c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xb0r\x93\x8d\x9b&C\xa7R\xe1\"\xdb \x19\x02\x11c\xdbWS\x01\xb6\xd8\xba\xeasp\xeaL\xde\xfb`\xc4\x1dDm5\xeeYEq+\x17ZEW\xfb\x8fdJ\aQ\xcc1M\x13k\xd6P\xd27\xf2\xc6E\xad1i\xf7\xab\xc3\'\x1ahq\xb1`E\xe7\xe4[\x00[\xf7gx\xe4\x9bK\xa8\xd7\x8a\x7f\x8a$E\xad5%?\xce~\x01E\x9a\x0f\xa1e]\xc9D\xc5p\xf6L\xef\xd6]\xbb\xc8\x1d\xeb\xef,\xab\x1dHk\x87\x95$\xc1\"\x98I!\x81\b\x9a6\xfa\xda\xf5\xe5l\xd9\x10\f:\x99\x0f\xea\xc4\x03h\xc6y\x1f\xb5f,\xa6*\xa2\"7i\xd0+mr\xd1\'\x9b\xd1\b\xef\xa6\xaa\xa3o\xa0', 0x81) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (rerun: 64) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) (async) socket(0xa, 0x2, 0x88) select$auto(0x80, &(0x7f0000000180)={[0x8000000000000001, 0x4, 0x1, 0x7, 0xc, 0x8, 0x0, 0x7, 0x0, 0x5f58f684, 0x100000001, 0x5, 0x82, 0x2, 0x9, 0x200]}, &(0x7f0000000200)={[0xd, 0xaee, 0x0, 0x7f, 0x10001, 0x6, 0x9, 0xfffffffffffffffc, 0x4, 0xd, 0x80, 0x90, 0x4, 0xffffffff, 0x800, 0x6]}, &(0x7f00000005c0)={[0xef, 0x2, 0x776, 0x7ff, 0x2, 0x3329, 0x2c8, 0x8, 0x7, 0xe61, 0x4e4, 0x0, 0x7, 0x223, 0x3, 0xe5]}, &(0x7f0000000100)={0x200, 0x300}) write$auto_seq_oss_f_ops_seq_oss(r2, 0x0, 0x0) 8.101030467s ago: executing program 3 (id=2290): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x51c, 0x8000) socket(0xa, 0x2, 0x73) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000840)="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", 0xdd4) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0x7fffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1000000000000001, 0x0, 0x1, 0x0) unshare$auto(0x1) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x80000000001002, 0x12000000000000, 0x4000000000df, 0xeb4, 0x6, 0x8000008003) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = socket(0x31, 0x6, 0x7fff) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00V\x00\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000040)="32e3eec48051c4cc1bd9d90076d5507aee20a1ffccd1c9977b45b2ce215a1ae8", 0xfff}, 0x3) r5 = socket(0x18, 0x5, 0x1) connect$auto(r5, 0x0, 0x3a) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r3) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r2, 0x0, 0x30004850) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 7.886853967s ago: executing program 9 (id=2291): unshare$auto(0x40000080) r0 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x20, r5, 0x1, 0x70bd31, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x5}]}]}]}, 0x20}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) bpf$auto(0x2, 0x0, 0x1) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r7, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 7.634444243s ago: executing program 7 (id=2292): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) timer_create$auto(0x3, 0x0, 0x0) socket(0xb, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000002f80), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000000)={0x2c, r1, 0x5, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, 0x5}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) socket(0x10, 0x2, 0x0) userfaultfd$auto(0x1) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x2, 0x801, 0x106) socket(0xa, 0x2, 0x0) socket(0xa, 0x2, 0x3a) r2 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_prog_fd=r2}, 0xa3) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) mmap$auto(0x0, 0x5, 0xfff, 0x44eb2, 0x10006, 0x300000000000) socket(0xa, 0x1, 0x84) 7.356240323s ago: executing program 7 (id=2293): pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x51c, 0x8000) socket(0xa, 0x2, 0x73) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000840), 0x0) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0x7fffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1000000000000001, 0x0, 0x1, 0x0) unshare$auto(0x1) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x80000000001002, 0x12000000000000, 0x4000000000df, 0xeb4, 0x6, 0x8000008003) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = socket(0x31, 0x6, 0x7fff) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00V\x00\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000040)="32e3eec48051c4cc1bd9d90076d5507aee20a1ffccd1c9977b45b2ce215a1ae8", 0xfff}, 0x3) r5 = socket(0x18, 0x5, 0x1) connect$auto(r5, 0x0, 0x3a) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r3) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r2, 0x0, 0x30004850) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 5.245271591s ago: executing program 9 (id=2294): close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @str='@):^\\/\\\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24040804) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r2, 0x2, 0x9) ioctl$auto(0x3, 0x400c4d05, 0x5) ioctl$auto(0x3, 0x400c4d05, r2) close_range$auto(0x2, 0x8, 0x0) 5.007895093s ago: executing program 9 (id=2295): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) write$auto(r0, &(0x7f0000000280)='S\x00\x00\x00\xfe\xff\xff\xff\xdf\x9e\xf4\x14\xd2d2\xc4\x97\xde0\xb1\x85\xc6vHI\x8bMJ}\x8d\xc1\x94D\xdbSt/\xdd\xb5\fnW{\xb0^:\x80\xb5\xdd\x8d\x1e\x96\xdf\xcb\xac\xbfB\xb3\xba\x9a\x02\xeaZ\xb9Rg\"\x87\x9e\x9c\xb3\xac\x16\xa3g\xad\xf7<\xc5c\xfa2\x97,O\xb2\xe3\xad\xe0v\x13\x1dc\xf6\xa8\xce*\xee\xcdX\x1dM\xe3\x8cT\xc6\x1dj\xe8\xc1\xc0\x85cp\xad\v,O\xb8\x9b\xd8\xe0\x964/\x8fQ\xaf\x13\xd7\xf14\x85\xe8\x0f\'\xc4\xe3\x1c\x92\x85\x88\\\xb0', 0x808587) (async) write$auto(r0, &(0x7f0000000280)='S\x00\x00\x00\xfe\xff\xff\xff\xdf\x9e\xf4\x14\xd2d2\xc4\x97\xde0\xb1\x85\xc6vHI\x8bMJ}\x8d\xc1\x94D\xdbSt/\xdd\xb5\fnW{\xb0^:\x80\xb5\xdd\x8d\x1e\x96\xdf\xcb\xac\xbfB\xb3\xba\x9a\x02\xeaZ\xb9Rg\"\x87\x9e\x9c\xb3\xac\x16\xa3g\xad\xf7<\xc5c\xfa2\x97,O\xb2\xe3\xad\xe0v\x13\x1dc\xf6\xa8\xce*\xee\xcdX\x1dM\xe3\x8cT\xc6\x1dj\xe8\xc1\xc0\x85cp\xad\v,O\xb8\x9b\xd8\xe0\x964/\x8fQ\xaf\x13\xd7\xf14\x85\xe8\x0f\'\xc4\xe3\x1c\x92\x85\x88\\\xb0', 0x808587) select$auto(0x8, &(0x7f00000000c0)={[0xeeda, 0x7, 0x4, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x10001, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x1ff, 0x7fa, 0x22104, 0x9, 0x7, 0x7ff, 0x20010180, 0x4000000f}, 0x198) (async) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x1ff, 0x7fa, 0x22104, 0x9, 0x7, 0x7ff, 0x20010180, 0x4000000f}, 0x198) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) (async) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) (async) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r2 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000), 0x80b02, 0x0) keyctl$auto(0x14, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x1) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/vmallocinfo\x00', 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x3}, 0x2, &(0x7f0000000280), 0x7, 0xa505}, 0xc06}, 0xfffffffd, 0x8) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000180)=""/250, 0xfa) mmap$auto(0x0, 0x400004, 0x3ff, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400004, 0x3ff, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto(0xffffffffffffffff, 0x0, 0x39b8) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000240), 0x0) write$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000100)="02a6c1", 0x3) (async) write$auto_vhci_fops_hci_vhci(r2, &(0x7f0000000100)="02a6c1", 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r1, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/12/effective_affinity\x00', 0x10b402, 0x0) mmap$auto(0x0, 0x4, 0x1, 0x40eb1, 0x602, 0x300000000000) socket(0xa, 0x801, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x40f42, 0x0) (async) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x40f42, 0x0) write$auto(r4, &(0x7f0000000180)='/L\xf2\x00', 0x80000000) socket(0x15, 0x5, 0x0) (async) socket(0x15, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.103784912s ago: executing program 7 (id=2296): mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) sysfs$auto(0x2, 0x100000000000033, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = fanotify_init$auto(0x5, 0xfffffffe) fanotify_mark$auto(r0, 0x209, 0xa, r0, 0x0) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3a) socket(0x29, 0x2, 0x0) r3 = socket(0x11, 0x3, 0x9) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) socket(0xa, 0x3, 0x6) clone$auto(0x4, 0x2002, 0x0, 0x0, 0x9) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_fd=r4, r2, 0x99, 0x2, 0x1, @relative_fd=r3, 0x9}, 0xaf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x6) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x0, 0x3}, 0xc) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x400c00, 0x0) read$auto(r5, 0x0, 0x39b8) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') ioctl$auto(0xffffffffffffffff, 0xab07, 0xffffffffffffffff) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) 3.039917332s ago: executing program 3 (id=2297): socket(0x10, 0x2, 0x0) socket(0x3, 0x4, 0x7fff) r0 = socket(0x11, 0x804, 0x5) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x801, 0x84) socket(0xa, 0x2, 0x0) socket(0xa, 0x2, 0x3a) r1 = socket(0xa, 0x2, 0x8c) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=r0, 0x8, @old_prog_fd=r1}, 0xa3) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x2, 0x0, 0x9) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) unshare$auto(0x40000080) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(0xffffffffffffffff, 0x0, 0x24000080) r2 = socket(0x11, 0xa, 0x9) bind$auto(r2, &(0x7f0000000140), 0x10) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0xfffffffffffffffd, 0x40000b, 0x20000df, 0x10, 0xffffffffffffffff, 0xb9) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) 2.365778514s ago: executing program 3 (id=2298): openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000140)='/proc/devices\x00', 0x244202, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b4e, 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x27ffe) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r1 = socket(0x1f, 0x4, 0x1) connect$auto(r1, &(0x7f0000000000)=@in={0x2, 0x100, @multicast1}, 0x3a) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r2 = socket(0x11, 0x80003, 0x300) ioctl$auto_FIFREEZE(r2, 0xc0045878, 0xffffffffffffffff) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) write$auto(r3, 0x0, 0x0) sendfile$auto(0x2, 0x3, &(0x7f0000000040)=0x80, 0xc3e0) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x9, 0x2) r4 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0p\x00', 0x88000, 0x0) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR32(r4, 0xc0844123, &(0x7f0000000000)={0x3, @reserved="b0ced85561201faf2e3bda83264e3e64cb43da8e8d4bf90665438ff677bfa74f8212bf7eda92f9ed8464a32a5525502ba67c116b8a15d2d5ea597ccb48b073eb", @control={0x9, 0xffff}}) shmget$auto(0x0, 0x2, 0x8) openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/available_tracers\x00', 0x40400, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x20742, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)) fcntl$auto_F_OFD_SETLKW(0xffffffffffffffff, 0x26, 0x8) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001080)='/dev/v4l-touch5\x00', 0x103040, 0x0) read$auto_v4l2_fops_v4l2_dev(r6, &(0x7f00000010c0)=""/22, 0x16) prctl$auto_PR_PAC_SET_ENABLED_KEYS(0x3c, 0x68b, 0x5, 0x800, 0x74) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x555d82, 0x0) 2.165240447s ago: executing program 7 (id=2299): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram1/trace/start_lba\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000200)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x3) mmap$auto(0x2, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/fail-nth\x00', 0x121100, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r4) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000480)={0x20, r5, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_DATA={0x4}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x9}]}, 0x20}, 0x1, 0x3000700, 0x0, 0x1}, 0x8010) r6 = socket(0x10, 0x2, 0x4) write$auto(r6, &(0x7f0000000000)='-\x00', 0xfdef) r7 = syz_genetlink_get_family_id$auto_ethtool(0x0, r2) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="09000000e6ec09812644b5ba6ed03dfcbd24412bffc58b4f75f84ee0170ea7813e38ee9617aa17aeea52", @ANYRES16=r7, @ANYBLOB="010031bd7000fddbdf250c0000000c0003800800038004000580"], 0x20}}, 0x24048084) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r8, 0xc008ae88, &(0x7f00000005c0)={0x2, 0x0, [{0x490, 0x400, 0x9}]}) madvise$auto(0x0, 0x200007, 0x19) 1.889735874s ago: executing program 3 (id=2300): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async, rerun: 64) socket(0x11, 0xa, 0x300) (async, rerun: 64) close_range$auto(0x0, 0x5, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, r1, 0x1b, 0x70bd26, 0x25dfdbfe, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x15, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590822ad9"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x2, 0x88) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_5={@target_ifindex=r5, r4, 0x8, 0x1, 0xffffffffffffffff, @relative_fd=r2, 0xe600}, 0xf) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) (async, rerun: 32) mknodat$auto(0xffffffffffffffff, 0x0, 0xfff, 0xfffffff8) (async, rerun: 32) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socketpair$auto(0x1e, 0x1, 0x0, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) ppoll$auto(0x0, 0x2, 0x0, 0x0, 0x8) (async) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x12\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) 1.626173451s ago: executing program 9 (id=2301): keyctl$auto(0x11, 0xfffffffffffffffa, 0x0, 0x4, 0x3) (async) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000000), 0x2440, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) bpf$auto(0x8000000, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x3, 0x80, 0x8, 0x4, 0x1, 0x200, 0x8, 0x401, 0x2, 0xe2, 0x4, 0xc28}, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2903c2, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu0/hotplug/state\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x100000001, 0x9) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) (async) write$auto(r1, 0x0, 0x2) (async) getrlimit$auto(0x3, 0x0) (async) fdatasync$auto(r1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r2, 0x127f, 0x0) (async) r3 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x303101, 0x0) getsockopt$auto_SO_PEEK_OFF(r3, 0x8, 0x2a, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', &(0x7f00000001c0)=0x6) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) (async) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) (async) ioctl$auto(0xffffffffffffffff, 0xc040564a, 0xffffffffffffffff) (async) ioctl$auto_FS_IOC_GETFSUUID(r4, 0x80111500, 0x5) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) 0s ago: executing program 2 (id=2284): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xab\b\x00\x00\x00\x00\x00\x00\x00}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2oc!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x83) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r1, 0xc1004111, 0x0) r2 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0) readv$auto(r2, &(0x7f00000018c0)={0x0, 0x1}, 0x9) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/personality\x00', 0x8002, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dri/renderD128\x00', 0x0, 0x0) r4 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vgem/clients\x00', 0x60440, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x28000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LOCK(r5, 0x40405514, 0x0) write$auto_hwsim_simulate_radar_(r0, &(0x7f00000005c0)="19f794e9d13ace05adfdf3969f94335e05636a94cdd9c4500a22f9c90c06314a7b63ad889a31ed4110d28d6f510834e1b3da9615944866651f7d49a209e9b2e7058bc43c50f734eccf54e402bf5a1772447a8b19c167ccb20cd89a256f47048794fb92dbae1c80b9a4b7846767a4b0eca34b50584cb48549b3cd32e22698f69d52e4fc888ced5061d448d75f703c4861b7fb13fb66585e8606f417c6fc341d9e8b709fecc329a91988ac4bdd0652e3e191a6427c8d297f81545796b2d5510218eab66d95d92a7568e4068e14a139d128306c11300512b74bebefea38475818689360d77de09741cc3727953230e55c5d5ec9bf82900668", 0xf7) read$auto_drm_debugfs_entry_fops_drm_debugfs(r4, &(0x7f0000000100)=""/153, 0x99) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) kernel console output (not intermixed with test programs): 969651][T13887] ? __pfx___handle_mm_fault+0x10/0x10 [ 576.969682][T13887] handle_mm_fault+0x3fe/0xad0 [ 576.969701][T13887] __get_user_pages+0x54e/0x3590 [ 576.969741][T13887] ? __pfx___get_user_pages+0x10/0x10 [ 576.969769][T13887] populate_vma_page_range+0x267/0x3f0 [ 576.969794][T13887] ? __pfx_populate_vma_page_range+0x10/0x10 [ 576.969817][T13887] ? __pfx_find_vma_intersection+0x10/0x10 [ 576.969838][T13887] ? do_mmap+0x69c/0x1210 [ 576.969861][T13887] __mm_populate+0x1d8/0x380 [ 576.969884][T13887] ? __pfx___mm_populate+0x10/0x10 [ 576.969908][T13887] ? up_write+0x282/0x4e0 [ 576.969926][T13887] vm_mmap_pgoff+0x37f/0x470 [ 576.969948][T13887] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 576.969972][T13887] ? __x64_sys_futex+0x1e0/0x4c0 [ 576.969988][T13887] ? __x64_sys_futex+0x1e9/0x4c0 [ 576.970007][T13887] ksys_mmap_pgoff+0x7d/0x5c0 [ 576.970026][T13887] ? xfd_validate_state+0x61/0x180 [ 576.970040][T13887] ? __pfx___do_sys_close_range+0x10/0x10 [ 576.970064][T13887] __x64_sys_mmap+0x125/0x190 [ 576.970084][T13887] do_syscall_64+0xcd/0xf80 [ 576.970101][T13887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.970117][T13887] RIP: 0033:0x7f655778f7c9 [ 576.970130][T13887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.970145][T13887] RSP: 002b:00007f6558577038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 576.970160][T13887] RAX: ffffffffffffffda RBX: 00007f65579e5fa0 RCX: 00007f655778f7c9 [ 576.970170][T13887] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 576.970179][T13887] RBP: 00007f6557813f91 R08: 0000000000000002 R09: 0000000000008000 [ 576.970188][T13887] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 576.970205][T13887] R13: 00007f65579e6038 R14: 00007f65579e5fa0 R15: 00007ffdcd6de9b8 [ 576.970225][T13887] [ 579.566646][T13945] FAULT_INJECTION: forcing a failure. [ 579.566646][T13945] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 579.622744][T13945] CPU: 0 UID: 0 PID: 13945 Comm: syz.4.1741 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 579.622782][T13945] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 579.622791][T13945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 579.622800][T13945] Call Trace: [ 579.622805][T13945] [ 579.622812][T13945] dump_stack_lvl+0x16c/0x1f0 [ 579.622834][T13945] should_fail_ex+0x512/0x640 [ 579.622859][T13945] should_fail_alloc_page+0xe7/0x130 [ 579.622884][T13945] prepare_alloc_pages+0x401/0x670 [ 579.622910][T13945] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 579.622929][T13945] ? mas_next_slot+0x12d3/0x1cb0 [ 579.622964][T13945] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 579.622981][T13945] ? mas_find+0x156/0x6d0 [ 579.622999][T13945] ? validate_mm+0x403/0x560 [ 579.623019][T13945] ? __pfx_validate_mm+0x10/0x10 [ 579.623038][T13945] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 579.623063][T13945] ? policy_nodemask+0xea/0x4e0 [ 579.623087][T13945] alloc_pages_mpol+0x1fb/0x550 [ 579.623109][T13945] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 579.623136][T13945] alloc_pages_noprof+0x131/0x390 [ 579.623158][T13945] __pmd_alloc+0x3b/0x9c0 [ 579.623182][T13945] move_page_tables+0x32a9/0x4380 [ 579.623204][T13945] ? __pfx_copy_vma+0x10/0x10 [ 579.623224][T13945] ? __pfx_move_page_tables+0x10/0x10 [ 579.623255][T13945] copy_vma_and_data+0x24e/0x790 [ 579.623274][T13945] ? __pfx_copy_vma_and_data+0x10/0x10 [ 579.623301][T13945] ? find_held_lock+0x2b/0x80 [ 579.623321][T13945] ? move_vma+0x533/0x1790 [ 579.623336][T13945] ? __vm_enough_memory+0x184/0x3f0 [ 579.623360][T13945] move_vma+0x545/0x1790 [ 579.623379][T13945] ? __pfx_move_vma+0x10/0x10 [ 579.623399][T13945] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 579.623423][T13945] ? cap_mmap_addr+0x4b/0x120 [ 579.623440][T13945] ? bpf_lsm_mmap_addr+0x9/0x10 [ 579.623457][T13945] ? security_mmap_addr+0x6c/0x1e0 [ 579.623479][T13945] ? __get_unmapped_area+0x267/0x3f0 [ 579.623502][T13945] ? vrm_set_new_addr+0x208/0x290 [ 579.623519][T13945] mremap_to+0x1b7/0x450 [ 579.623537][T13945] do_mremap+0x13a8/0x2020 [ 579.623555][T13945] ? futex_private_hash_put+0x150/0x1b0 [ 579.623575][T13945] ? __pfx_do_mremap+0x10/0x10 [ 579.623602][T13945] __do_sys_mremap+0x119/0x170 [ 579.623619][T13945] ? __pfx___do_sys_mremap+0x10/0x10 [ 579.623636][T13945] ? find_held_lock+0x2b/0x80 [ 579.623657][T13945] ? __x64_sys_futex+0x1e0/0x4c0 [ 579.623685][T13945] do_syscall_64+0xcd/0xf80 [ 579.623702][T13945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.623717][T13945] RIP: 0033:0x7f655778f7c9 [ 579.623732][T13945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.623746][T13945] RSP: 002b:00007f6558577038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 579.623760][T13945] RAX: ffffffffffffffda RBX: 00007f65579e5fa0 RCX: 00007f655778f7c9 [ 579.623770][T13945] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 579.623779][T13945] RBP: 00007f6557813f91 R08: 0000000100000000 R09: 0000000000000000 [ 579.623789][T13945] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 579.623798][T13945] R13: 00007f65579e6038 R14: 00007f65579e5fa0 R15: 00007ffdcd6de9b8 [ 579.623818][T13945] [ 580.053018][T13947] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1742'. [ 581.425012][T13974] netlink: 146 bytes leftover after parsing attributes in process `syz.4.1748'. [ 581.961373][T13979] Invalid ELF header magic: != ELF [ 583.843318][T13990] Invalid ELF header magic: != ELF [ 584.475130][T14003] FAULT_INJECTION: forcing a failure. [ 584.475130][T14003] name fail_futex, interval 1, probability 0, space 0, times 0 [ 584.522725][T14003] CPU: 0 UID: 0 PID: 14003 Comm: syz.5.1757 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 584.522763][T14003] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 584.522771][T14003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 584.522780][T14003] Call Trace: [ 584.522786][T14003] [ 584.522793][T14003] dump_stack_lvl+0x16c/0x1f0 [ 584.522815][T14003] should_fail_ex+0x512/0x640 [ 584.522839][T14003] get_futex_key+0x1d0/0x15f0 [ 584.522859][T14003] ? __pfx_get_futex_key+0x10/0x10 [ 584.522882][T14003] futex_wake+0xea/0x530 [ 584.522900][T14003] ? futex_wait+0x120/0x380 [ 584.522919][T14003] ? __pfx_futex_wait+0x10/0x10 [ 584.522939][T14003] ? __pfx_futex_wake+0x10/0x10 [ 584.522963][T14003] ? ksys_write+0x190/0x250 [ 584.522987][T14003] do_futex+0x1e3/0x350 [ 584.523003][T14003] ? __pfx_do_futex+0x10/0x10 [ 584.523021][T14003] ? cap_task_prctl+0x2af/0xa80 [ 584.523042][T14003] __x64_sys_futex+0x1e0/0x4c0 [ 584.523061][T14003] ? __pfx___x64_sys_futex+0x10/0x10 [ 584.523078][T14003] ? xfd_validate_state+0x61/0x180 [ 584.523091][T14003] ? __pfx___do_sys_prctl+0x10/0x10 [ 584.523113][T14003] do_syscall_64+0xcd/0xf80 [ 584.523130][T14003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.523146][T14003] RIP: 0033:0x7f1d0cb8f7c9 [ 584.523160][T14003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.523175][T14003] RSP: 002b:00007f1d0daf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 584.523190][T14003] RAX: ffffffffffffffda RBX: 00007f1d0cde5fa8 RCX: 00007f1d0cb8f7c9 [ 584.523201][T14003] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1d0cde5fac [ 584.523212][T14003] RBP: 00007f1d0cde5fa0 R08: 00007f1d0daf7000 R09: 0000000000000000 [ 584.523224][T14003] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 584.523234][T14003] R13: 00007f1d0cde6038 R14: 00007ffc508c6600 R15: 00007ffc508c66e8 [ 584.523254][T14003] [ 584.733256][T14003] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1757'. [ 585.382303][T13996] FAULT_INJECTION: forcing a failure. [ 585.382303][T13996] name failslab, interval 1, probability 0, space 0, times 0 [ 585.426114][T13996] CPU: 0 UID: 0 PID: 13996 Comm: syz.4.1755 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 585.426152][T13996] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 585.426161][T13996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 585.426170][T13996] Call Trace: [ 585.426176][T13996] [ 585.426183][T13996] dump_stack_lvl+0x16c/0x1f0 [ 585.426205][T13996] should_fail_ex+0x512/0x640 [ 585.426226][T13996] ? __kvmalloc_node_noprof+0x129/0xa40 [ 585.426249][T13996] should_failslab+0xc2/0x120 [ 585.426271][T13996] __kvmalloc_node_noprof+0x14a/0xa40 [ 585.426291][T13996] ? lockdep_init_map_type+0x5c/0x270 [ 585.426306][T13996] ? open_substream+0x311/0x9d0 [ 585.426329][T13996] ? open_substream+0x311/0x9d0 [ 585.426346][T13996] open_substream+0x311/0x9d0 [ 585.426366][T13996] rawmidi_open_priv+0x543/0x6e0 [ 585.426389][T13996] snd_rawmidi_open+0x4cb/0xbf0 [ 585.426413][T13996] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 585.426434][T13996] ? __pfx_default_wake_function+0x10/0x10 [ 585.426456][T13996] ? kobject_get_unless_zero+0x156/0x1e0 [ 585.426475][T13996] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 585.426496][T13996] snd_open+0x22d/0x4c0 [ 585.426511][T13996] ? __pfx_snd_open+0x10/0x10 [ 585.426527][T13996] chrdev_open+0x234/0x6a0 [ 585.426549][T13996] ? __pfx_apparmor_file_open+0x10/0x10 [ 585.426576][T13996] ? __pfx_chrdev_open+0x10/0x10 [ 585.426599][T13996] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 585.426628][T13996] do_dentry_open+0x748/0x1590 [ 585.426650][T13996] ? __pfx_chrdev_open+0x10/0x10 [ 585.426676][T13996] vfs_open+0x82/0x3f0 [ 585.426694][T13996] path_openat+0x2078/0x3140 [ 585.426721][T13996] ? __pfx_path_openat+0x10/0x10 [ 585.426750][T13996] do_filp_open+0x20b/0x470 [ 585.426772][T13996] ? __pfx_do_filp_open+0x10/0x10 [ 585.426807][T13996] ? alloc_fd+0x471/0x7d0 [ 585.426833][T13996] do_sys_openat2+0x11f/0x280 [ 585.426849][T13996] ? __pfx_do_sys_openat2+0x10/0x10 [ 585.426872][T13996] __x64_sys_openat+0x174/0x210 [ 585.426888][T13996] ? __pfx___x64_sys_openat+0x10/0x10 [ 585.426913][T13996] do_syscall_64+0xcd/0xf80 [ 585.426930][T13996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.426946][T13996] RIP: 0033:0x7f655778f7c9 [ 585.426960][T13996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.426975][T13996] RSP: 002b:00007f6558577038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 585.426989][T13996] RAX: ffffffffffffffda RBX: 00007f65579e5fa0 RCX: 00007f655778f7c9 [ 585.427000][T13996] RDX: 0000000000000003 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 585.427010][T13996] RBP: 00007f6557813f91 R08: 0000000000000000 R09: 0000000000000000 [ 585.427019][T13996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 585.427028][T13996] R13: 00007f65579e6038 R14: 00007f65579e5fa0 R15: 00007ffdcd6de9b8 [ 585.427049][T13996] [ 586.216817][T14021] random: crng reseeded on system resumption [ 587.070294][T14026] usb usb2: usbfs: process 14026 (syz.5.1760) did not claim interface 4 before use [ 587.138230][T14026] __vm_enough_memory: pid: 14026, comm: syz.5.1760, bytes: 4398046511104 not enough memory for the allocation [ 587.319933][T14026] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 589.091488][T14059] FAULT_INJECTION: forcing a failure. [ 589.091488][T14059] name fail_futex, interval 1, probability 0, space 0, times 0 [ 589.247573][T14065] random: crng reseeded on system resumption [ 589.259875][T14059] CPU: 0 UID: 0 PID: 14059 Comm: syz.4.1768 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 589.259913][T14059] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 589.259922][T14059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 589.259933][T14059] Call Trace: [ 589.259938][T14059] [ 589.259945][T14059] dump_stack_lvl+0x16c/0x1f0 [ 589.259968][T14059] should_fail_ex+0x512/0x640 [ 589.259994][T14059] get_futex_key+0x1d0/0x15f0 [ 589.260015][T14059] ? __pfx_get_futex_key+0x10/0x10 [ 589.260034][T14059] ? free_pages_and_swap_cache+0x328/0x4a0 [ 589.260058][T14059] futex_wait_setup+0x9d/0x570 [ 589.260084][T14059] __futex_wait+0x193/0x2f0 [ 589.260104][T14059] ? __pfx___futex_wait+0x10/0x10 [ 589.260127][T14059] ? __pfx_futex_wake_mark+0x10/0x10 [ 589.260150][T14059] ? futex_hash+0x2c5/0x380 [ 589.260168][T14059] ? futex_private_hash_put+0x160/0x1b0 [ 589.260186][T14059] futex_wait+0xe8/0x380 [ 589.260206][T14059] ? __pfx_futex_wait+0x10/0x10 [ 589.260231][T14059] ? madvise_unlock+0x7c/0x220 [ 589.260267][T14059] do_futex+0x229/0x350 [ 589.260286][T14059] ? __pfx_do_futex+0x10/0x10 [ 589.260309][T14059] __x64_sys_futex+0x1e0/0x4c0 [ 589.260329][T14059] ? __pfx___x64_sys_futex+0x10/0x10 [ 589.260347][T14059] ? xfd_validate_state+0x61/0x180 [ 589.260360][T14059] ? __pfx_ksys_write+0x10/0x10 [ 589.260387][T14059] do_syscall_64+0xcd/0xf80 [ 589.260404][T14059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.260419][T14059] RIP: 0033:0x7f655778f7c9 [ 589.260433][T14059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.260448][T14059] RSP: 002b:00007f65585560e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 589.260463][T14059] RAX: ffffffffffffffda RBX: 00007f65579e6098 RCX: 00007f655778f7c9 [ 589.260473][T14059] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f65579e6098 [ 589.260483][T14059] RBP: 00007f65579e6090 R08: 0000000000000000 R09: 0000000000000000 [ 589.260492][T14059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 589.260501][T14059] R13: 00007f65579e6128 R14: 00007ffdcd6de8d0 R15: 00007ffdcd6de9b8 [ 589.260520][T14059] [ 590.186825][T14080] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 591.042682][T14086] random: crng reseeded on system resumption [ 592.059378][T14117] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1778'. [ 593.339044][T14137] Invalid ELF header magic: != ELF [ 594.210643][T14150] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36 [ 594.783549][T14161] random: crng reseeded on system resumption [ 594.862350][T14161] hub 1-0:1.0: USB hub found [ 594.871847][T14161] hub 1-0:1.0: 1 port detected [ 594.885897][T14161] Restarting kernel threads ... [ 594.887728][T14161] Done restarting kernel threads. [ 595.696507][T14172] netlink: zone id is out of range [ 595.696521][T14172] netlink: zone id is out of range [ 595.696527][T14172] netlink: zone id is out of range [ 595.696533][T14172] netlink: zone id is out of range [ 595.696538][T14172] netlink: zone id is out of range [ 595.696544][T14172] netlink: zone id is out of range [ 595.696550][T14172] netlink: zone id is out of range [ 595.696556][T14172] netlink: zone id is out of range [ 595.696561][T14172] netlink: zone id is out of range [ 595.696567][T14172] netlink: zone id is out of range [ 596.014822][T14174] FAULT_INJECTION: forcing a failure. [ 596.014822][T14174] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 596.014886][T14174] CPU: 0 UID: 7 PID: 14174 Comm: syz.1.1791 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 596.014918][T14174] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 596.014927][T14174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 596.014936][T14174] Call Trace: [ 596.014941][T14174] [ 596.014948][T14174] dump_stack_lvl+0x16c/0x1f0 [ 596.014968][T14174] should_fail_ex+0x512/0x640 [ 596.014993][T14174] should_fail_alloc_page+0xe7/0x130 [ 596.015017][T14174] prepare_alloc_pages+0x401/0x670 [ 596.015041][T14174] ? rcu_is_watching+0x12/0xc0 [ 596.015064][T14174] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 596.015085][T14174] ? stack_trace_save+0x8e/0xc0 [ 596.015107][T14174] ? __pfx_stack_trace_save+0x10/0x10 [ 596.015130][T14174] ? stack_depot_save_flags+0x29/0x9b0 [ 596.015150][T14174] ? __kernel_text_address+0xd/0x40 [ 596.015169][T14174] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 596.015189][T14174] ? soundcore_open+0x40c/0x580 [ 596.015209][T14174] ? chrdev_open+0x234/0x6a0 [ 596.015236][T14174] ? do_dentry_open+0x748/0x1590 [ 596.015257][T14174] ? vfs_open+0x82/0x3f0 [ 596.015273][T14174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.015294][T14174] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 596.015340][T14174] ? policy_nodemask+0xea/0x4e0 [ 596.015365][T14174] alloc_pages_mpol+0x1fb/0x550 [ 596.015396][T14174] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 596.015424][T14174] alloc_pages_noprof+0x131/0x390 [ 596.015448][T14174] alloc_pages_exact_noprof+0x37/0xe0 [ 596.015472][T14174] ? __asan_memset+0x23/0x50 [ 596.015490][T14174] snd_pcm_attach_substream+0x4bb/0xd60 [ 596.015517][T14174] snd_pcm_open_substream+0x8d/0x1820 [ 596.015540][T14174] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 596.015567][T14174] snd_pcm_oss_open+0x735/0x1400 [ 596.015591][T14174] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 596.015609][T14174] ? __lock_acquire+0x436/0x2890 [ 596.015623][T14174] ? __pfx_default_wake_function+0x10/0x10 [ 596.015645][T14174] ? __lock_acquire+0x436/0x2890 [ 596.015663][T14174] ? do_raw_spin_lock+0x12c/0x2b0 [ 596.015681][T14174] ? soundcore_open+0x35a/0x580 [ 596.015697][T14174] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 596.015717][T14174] soundcore_open+0x40c/0x580 [ 596.015734][T14174] ? __pfx_soundcore_open+0x10/0x10 [ 596.015749][T14174] chrdev_open+0x234/0x6a0 [ 596.015770][T14174] ? __pfx_apparmor_file_open+0x10/0x10 [ 596.015789][T14174] ? __pfx_chrdev_open+0x10/0x10 [ 596.015811][T14174] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 596.015839][T14174] do_dentry_open+0x748/0x1590 [ 596.015859][T14174] ? __pfx_chrdev_open+0x10/0x10 [ 596.015886][T14174] vfs_open+0x82/0x3f0 [ 596.015903][T14174] path_openat+0x2078/0x3140 [ 596.015932][T14174] ? __pfx_path_openat+0x10/0x10 [ 596.015960][T14174] do_filp_open+0x20b/0x470 [ 596.015982][T14174] ? __pfx_do_filp_open+0x10/0x10 [ 596.016018][T14174] ? alloc_fd+0x471/0x7d0 [ 596.016044][T14174] do_sys_openat2+0x11f/0x280 [ 596.016060][T14174] ? __pfx_do_sys_openat2+0x10/0x10 [ 596.016083][T14174] __x64_sys_openat+0x174/0x210 [ 596.016118][T14174] ? __pfx___x64_sys_openat+0x10/0x10 [ 596.016144][T14174] do_syscall_64+0xcd/0xf80 [ 596.016162][T14174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.016177][T14174] RIP: 0033:0x7f1ca6d8f7c9 [ 596.016191][T14174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.016206][T14174] RSP: 002b:00007f1ca7b58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 596.016222][T14174] RAX: ffffffffffffffda RBX: 00007f1ca6fe6090 RCX: 00007f1ca6d8f7c9 [ 596.016233][T14174] RDX: 0000000000020342 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 596.016243][T14174] RBP: 00007f1ca6e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 596.016252][T14174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.016262][T14174] R13: 00007f1ca6fe6128 R14: 00007f1ca6fe6090 R15: 00007ffc73d90288 [ 596.016282][T14174] [ 596.495888][T14185] FAULT_INJECTION: forcing a failure. [ 596.495888][T14185] name failslab, interval 1, probability 0, space 0, times 0 [ 596.495921][T14185] CPU: 0 UID: 0 PID: 14185 Comm: syz.5.1795 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 596.495952][T14185] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 596.495960][T14185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 596.495969][T14185] Call Trace: [ 596.495974][T14185] [ 596.495980][T14185] dump_stack_lvl+0x16c/0x1f0 [ 596.495999][T14185] should_fail_ex+0x512/0x640 [ 596.496020][T14185] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 596.496041][T14185] should_failslab+0xc2/0x120 [ 596.496082][T14185] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 596.496100][T14185] ? __d_alloc+0x35/0xa80 [ 596.496125][T14185] ? __d_alloc+0x35/0xa80 [ 596.496145][T14185] __d_alloc+0x35/0xa80 [ 596.496169][T14185] d_alloc_pseudo+0x1c/0xc0 [ 596.496186][T14185] alloc_file_pseudo+0xcf/0x230 [ 596.496202][T14185] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 596.496217][T14185] ? alloc_fd+0x471/0x7d0 [ 596.496241][T14185] sock_alloc_file+0x50/0x210 [ 596.496256][T14185] __sys_socket+0x1c0/0x260 [ 596.496273][T14185] ? __pfx___sys_socket+0x10/0x10 [ 596.496290][T14185] ? xfd_validate_state+0x61/0x180 [ 596.496308][T14185] __x64_sys_socket+0x72/0xb0 [ 596.496324][T14185] ? lockdep_hardirqs_on+0x7c/0x110 [ 596.496339][T14185] do_syscall_64+0xcd/0xf80 [ 596.496355][T14185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.496370][T14185] RIP: 0033:0x7f1d0cb8f7c9 [ 596.496382][T14185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.496396][T14185] RSP: 002b:00007f1d0daf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 596.496410][T14185] RAX: ffffffffffffffda RBX: 00007f1d0cde5fa0 RCX: 00007f1d0cb8f7c9 [ 596.496419][T14185] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000025 [ 596.496428][T14185] RBP: 00007f1d0cc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 596.496436][T14185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.496445][T14185] R13: 00007f1d0cde6038 R14: 00007f1d0cde5fa0 R15: 00007ffc508c66e8 [ 596.496463][T14185] [ 596.546363][T14186] random: crng reseeded on system resumption [ 597.530094][T14214] FAULT_INJECTION: forcing a failure. [ 597.530094][T14214] name fail_futex, interval 1, probability 0, space 0, times 0 [ 597.530127][T14214] CPU: 0 UID: 0 PID: 14214 Comm: syz.5.1798 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 597.530166][T14214] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 597.530179][T14214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 597.530188][T14214] Call Trace: [ 597.530193][T14214] [ 597.530200][T14214] dump_stack_lvl+0x16c/0x1f0 [ 597.530220][T14214] should_fail_ex+0x512/0x640 [ 597.530244][T14214] get_futex_key+0x1d0/0x15f0 [ 597.530262][T14214] ? __pfx_get_futex_key+0x10/0x10 [ 597.530278][T14214] ? __lock_acquire+0x436/0x2890 [ 597.530300][T14214] futex_wait_setup+0x9d/0x570 [ 597.530325][T14214] __futex_wait+0x193/0x2f0 [ 597.530345][T14214] ? __pfx___futex_wait+0x10/0x10 [ 597.530368][T14214] ? __pfx_futex_wake_mark+0x10/0x10 [ 597.530389][T14214] ? futex_hash+0x2c5/0x380 [ 597.530406][T14214] ? futex_private_hash_put+0x160/0x1b0 [ 597.530425][T14214] futex_wait+0xe8/0x380 [ 597.530444][T14214] ? __pfx_futex_wait+0x10/0x10 [ 597.530479][T14214] ? up_write+0x282/0x4e0 [ 597.530496][T14214] do_futex+0x229/0x350 [ 597.530513][T14214] ? __pfx_do_futex+0x10/0x10 [ 597.530533][T14214] __x64_sys_futex+0x1e0/0x4c0 [ 597.530551][T14214] ? ptrace_check_attach+0x9c/0x3f0 [ 597.530572][T14214] ? __pfx___x64_sys_futex+0x10/0x10 [ 597.530588][T14214] ? xfd_validate_state+0x61/0x180 [ 597.530601][T14214] ? do_raw_read_unlock+0x44/0xe0 [ 597.530623][T14214] do_syscall_64+0xcd/0xf80 [ 597.530646][T14214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.530661][T14214] RIP: 0033:0x7f1d0cb8f7c9 [ 597.530673][T14214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.530687][T14214] RSP: 002b:00007f1d0dad50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 597.530701][T14214] RAX: ffffffffffffffda RBX: 00007f1d0cde6098 RCX: 00007f1d0cb8f7c9 [ 597.530711][T14214] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1d0cde6098 [ 597.530720][T14214] RBP: 00007f1d0cde6090 R08: 0000000000000000 R09: 0000000000000000 [ 597.530728][T14214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.530736][T14214] R13: 00007f1d0cde6128 R14: 00007ffc508c6600 R15: 00007ffc508c66e8 [ 597.530755][T14214] [ 598.031526][T14222] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 598.492102][T14224] serio: Serial port ttyS2 [ 599.425877][T14238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1805'. [ 600.611964][T14246] zswap: compressor *E;3߃L MapCMcsyF*srHDU}]$rm+8ጅY7TU9d L@saXfmY6  =KԿ_+ gX not available [ 601.883006][T14263] random: crng reseeded on system resumption [ 603.153754][T14279] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1814'. [ 603.678369][T14289] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 605.368496][T14318] random: crng reseeded on system resumption [ 605.777621][T14322] nbd: socks must be embedded in a SOCK_ITEM attr [ 606.626876][T14334] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 606.706942][T14332] binder: 14329:14332 ioctl c018620c 0 returned -22 [ 607.603580][T14345] FAULT_INJECTION: forcing a failure. [ 607.603580][T14345] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 607.634766][T14345] CPU: 0 UID: 0 PID: 14345 Comm: syz.5.1830 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 607.634802][T14345] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 607.634811][T14345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 607.634820][T14345] Call Trace: [ 607.634825][T14345] [ 607.634832][T14345] dump_stack_lvl+0x16c/0x1f0 [ 607.634852][T14345] should_fail_ex+0x512/0x640 [ 607.634876][T14345] should_fail_alloc_page+0xe7/0x130 [ 607.634900][T14345] prepare_alloc_pages+0x401/0x670 [ 607.634926][T14345] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 607.634971][T14345] ? stack_trace_save+0x8e/0xc0 [ 607.634994][T14345] ? __pfx_stack_trace_save+0x10/0x10 [ 607.635017][T14345] ? stack_depot_save_flags+0x29/0x9b0 [ 607.635036][T14345] ? trace_mm_page_alloc+0x11b/0x180 [ 607.635060][T14345] ? kasan_save_stack+0x42/0x60 [ 607.635079][T14345] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 607.635096][T14345] ? kmem_cache_alloc_noprof+0x25e/0x770 [ 607.635113][T14345] ? __handle_mm_fault+0xbeb/0x2bb0 [ 607.635127][T14345] ? do_user_addr_fault+0x7a6/0x1370 [ 607.635145][T14345] ? exc_page_fault+0x64/0xc0 [ 607.635158][T14345] ? asm_exc_page_fault+0x26/0x30 [ 607.635172][T14345] ? rep_movs_alternative+0x11/0x90 [ 607.635196][T14345] ? _copy_to_iter+0x383/0x1710 [ 607.635214][T14345] ? seq_read_iter+0xd02/0x12d0 [ 607.635232][T14345] ? kernfs_fop_read_iter+0x46c/0x610 [ 607.635262][T14345] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 607.635286][T14345] ? policy_nodemask+0xea/0x4e0 [ 607.635310][T14345] alloc_pages_mpol+0x1fb/0x550 [ 607.635332][T14345] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 607.635359][T14345] alloc_pages_noprof+0x131/0x390 [ 607.635381][T14345] pte_alloc_one+0x1e/0x3d0 [ 607.635402][T14345] __do_fault+0x320/0x490 [ 607.635421][T14345] do_fault+0x302/0x1ad0 [ 607.635440][T14345] ? __pfx_filemap_map_pages+0x10/0x10 [ 607.635457][T14345] ? __pmd_alloc+0x6aa/0x9c0 [ 607.635480][T14345] __handle_mm_fault+0x1919/0x2bb0 [ 607.635501][T14345] ? __pfx___handle_mm_fault+0x10/0x10 [ 607.635527][T14345] ? find_vma+0xbf/0x140 [ 607.635546][T14345] ? __pfx_find_vma+0x10/0x10 [ 607.635567][T14345] handle_mm_fault+0x3fe/0xad0 [ 607.635586][T14345] do_user_addr_fault+0x7a6/0x1370 [ 607.635605][T14345] ? rcu_is_watching+0x12/0xc0 [ 607.635628][T14345] exc_page_fault+0x64/0xc0 [ 607.635643][T14345] asm_exc_page_fault+0x26/0x30 [ 607.635657][T14345] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 607.635677][T14345] Code: c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 81 04 00 66 66 2e 0f [ 607.635691][T14345] RSP: 0018:ffffc9000bb67ad8 EFLAGS: 00050202 [ 607.635704][T14345] RAX: 0000000000000035 RBX: 0000000000000004 RCX: 0000000000000004 [ 607.635714][T14345] RDX: ffffed10053d8001 RSI: ffff888029ec0000 RDI: 0000000000000000 [ 607.635726][T14345] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed10053d8000 [ 607.635737][T14345] R10: ffff888029ec0003 R11: ffff8880789329b0 R12: ffffc9000bb67d90 [ 607.635746][T14345] R13: 0000000000000004 R14: ffff888029ec0000 R15: 00007ffffffff000 [ 607.635766][T14345] _copy_to_iter+0x383/0x1710 [ 607.635787][T14345] ? __mutex_unlock_slowpath+0x161/0x790 [ 607.635806][T14345] ? __pfx__copy_to_iter+0x10/0x10 [ 607.635825][T14345] ? kernfs_seq_stop+0xcd/0x120 [ 607.635848][T14345] ? kernfs_put_active+0x86/0xe0 [ 607.635869][T14345] seq_read_iter+0xd02/0x12d0 [ 607.635895][T14345] kernfs_fop_read_iter+0x46c/0x610 [ 607.635917][T14345] ? rw_verify_area+0xcf/0x6c0 [ 607.635937][T14345] vfs_read+0x8bf/0xcf0 [ 607.635961][T14345] ? __pfx_vfs_read+0x10/0x10 [ 607.635993][T14345] ksys_read+0x12a/0x250 [ 607.636013][T14345] ? __pfx_ksys_read+0x10/0x10 [ 607.636038][T14345] do_syscall_64+0xcd/0xf80 [ 607.636055][T14345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.636069][T14345] RIP: 0033:0x7f1d0cb8f7c9 [ 607.636081][T14345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 607.636094][T14345] RSP: 002b:00007f1d0daf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 607.636107][T14345] RAX: ffffffffffffffda RBX: 00007f1d0cde5fa0 RCX: 00007f1d0cb8f7c9 [ 607.636117][T14345] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000003 [ 607.636125][T14345] RBP: 00007f1d0daf6090 R08: 0000000000000000 R09: 0000000000000000 [ 607.636133][T14345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.636142][T14345] R13: 00007f1d0cde6038 R14: 00007f1d0cde5fa0 R15: 00007ffc508c66e8 [ 607.636161][T14345] [ 608.465553][T14351] vhci_hcd: not connected 4 [ 608.993120][T14356] zswap: compressor not available [ 609.729634][T14366] FAULT_INJECTION: forcing a failure. [ 609.729634][T14366] name failslab, interval 1, probability 0, space 0, times 0 [ 609.765886][T14366] CPU: 0 UID: 0 PID: 14366 Comm: syz.1.1835 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 609.765925][T14366] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 609.765934][T14366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 609.765944][T14366] Call Trace: [ 609.765955][T14366] [ 609.765962][T14366] dump_stack_lvl+0x16c/0x1f0 [ 609.765984][T14366] should_fail_ex+0x512/0x640 [ 609.766006][T14366] ? kmem_cache_alloc_noprof+0x62/0x770 [ 609.766027][T14366] should_failslab+0xc2/0x120 [ 609.766051][T14366] kmem_cache_alloc_noprof+0x83/0x770 [ 609.766067][T14366] ? kmem_cache_alloc_noprof+0x281/0x770 [ 609.766083][T14366] ? anon_vma_fork+0x200/0x620 [ 609.766106][T14366] ? anon_vma_fork+0x200/0x620 [ 609.766120][T14366] anon_vma_fork+0x200/0x620 [ 609.766137][T14366] dup_mmap+0x12d3/0x20e0 [ 609.766167][T14366] ? __pfx_dup_mmap+0x10/0x10 [ 609.766209][T14366] copy_process+0x3b9f/0x7430 [ 609.766231][T14366] ? preempt_schedule_thunk+0x16/0x30 [ 609.766254][T14366] ? __pfx_copy_process+0x10/0x10 [ 609.766275][T14366] ? find_held_lock+0x2b/0x80 [ 609.766297][T14366] ? futex_private_hash_put+0x160/0x1b0 [ 609.766318][T14366] kernel_clone+0xfc/0x910 [ 609.766340][T14366] ? __pfx_futex_wake+0x10/0x10 [ 609.766360][T14366] ? __pfx_kernel_clone+0x10/0x10 [ 609.766380][T14366] ? __pfx_vfs_writev+0x10/0x10 [ 609.766410][T14366] __do_sys_clone+0xce/0x120 [ 609.766432][T14366] ? __pfx___do_sys_clone+0x10/0x10 [ 609.766462][T14366] ? xfd_validate_state+0x61/0x180 [ 609.766475][T14366] ? __pfx_do_writev+0x10/0x10 [ 609.766499][T14366] do_syscall_64+0xcd/0xf80 [ 609.766515][T14366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.766531][T14366] RIP: 0033:0x7f1ca6d8f7c9 [ 609.766545][T14366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.766559][T14366] RSP: 002b:00007f1ca7b57fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 609.766575][T14366] RAX: ffffffffffffffda RBX: 00007f1ca6fe6090 RCX: 00007f1ca6d8f7c9 [ 609.766585][T14366] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 609.766595][T14366] RBP: 00007f1ca6e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 609.766605][T14366] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 609.766614][T14366] R13: 00007f1ca6fe6128 R14: 00007f1ca6fe6090 R15: 00007ffc73d90288 [ 609.766635][T14366] [ 610.215997][T14375] netlink: 62 bytes leftover after parsing attributes in process `syz.5.1837'. [ 610.425639][T14379] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 611.190195][T11499] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 611.201372][T11499] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 611.211239][T11499] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 611.220128][T11499] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 611.236894][T11499] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 611.582574][T14386] chnl_net:caif_netlink_parms(): no params data found [ 611.781662][T14386] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.801218][T14386] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.818841][T14386] bridge_slave_0: entered allmulticast mode [ 611.836280][T14386] bridge_slave_0: entered promiscuous mode [ 611.857004][T14386] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.872266][T14386] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.887329][T14386] bridge_slave_1: entered allmulticast mode [ 611.905815][T14386] bridge_slave_1: entered promiscuous mode [ 611.982639][T14386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.017569][T14386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.106068][T14386] team0: Port device team_slave_0 added [ 612.133887][T14386] team0: Port device team_slave_1 added [ 612.243453][T14386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.264037][T14386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.360172][T14386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.384695][T14386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.419785][T14386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.521425][T14386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.781954][T14386] hsr_slave_0: entered promiscuous mode [ 612.808736][T14386] hsr_slave_1: entered promiscuous mode [ 612.827504][T14386] debugfs: 'hsr0' already exists in 'hsr' [ 612.850220][T14386] Cannot create hsr debugfs directory [ 613.246284][T14418] net_ratelimit: 5 callbacks suppressed [ 613.246300][T14418] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 613.265986][T11499] Bluetooth: hci5: command tx timeout [ 613.367867][T14420] FAULT_INJECTION: forcing a failure. [ 613.367867][T14420] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 613.397811][T14386] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 613.437188][T14420] CPU: 0 UID: 0 PID: 14420 Comm: syz.1.1846 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 613.437222][T14420] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 613.437230][T14420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 613.437240][T14420] Call Trace: [ 613.437245][T14420] [ 613.437251][T14420] dump_stack_lvl+0x16c/0x1f0 [ 613.437273][T14420] should_fail_ex+0x512/0x640 [ 613.437298][T14420] should_fail_alloc_page+0xe7/0x130 [ 613.437322][T14420] prepare_alloc_pages+0x401/0x670 [ 613.437349][T14420] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 613.437374][T14420] ? __lock_acquire+0x436/0x2890 [ 613.437393][T14420] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 613.437419][T14420] ? is_bpf_text_address+0x8a/0x1a0 [ 613.437439][T14420] ? bpf_ksym_find+0x124/0x1c0 [ 613.437455][T14420] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 613.437480][T14420] ? is_bpf_text_address+0x94/0x1a0 [ 613.437498][T14420] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 613.437522][T14420] ? policy_nodemask+0xea/0x4e0 [ 613.437547][T14420] alloc_pages_mpol+0x1fb/0x550 [ 613.437570][T14420] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 613.437610][T14420] folio_alloc_mpol_noprof+0x36/0x2f0 [ 613.437629][T14420] shmem_alloc_folio+0x135/0x160 [ 613.437655][T14420] shmem_alloc_and_add_folio+0x494/0xc20 [ 613.437677][T14420] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 613.438243][T14420] ? shmem_allowable_huge_orders+0xd4/0x3f0 [ 613.438265][T14420] shmem_get_folio_gfp+0x67f/0x1610 [ 613.438288][T14420] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 613.438311][T14420] shmem_fault+0x1fe/0xa00 [ 613.438329][T14420] ? __pfx_shmem_fault+0x10/0x10 [ 613.438344][T14420] ? trace_kmem_cache_alloc+0x28/0xb0 [ 613.438368][T14420] ? ptlock_alloc+0x1f/0x70 [ 613.438384][T14420] ? lockdep_init_map_type+0x5c/0x270 [ 613.438414][T14420] ? __raw_spin_lock_init+0x3a/0x110 [ 613.438435][T14420] __do_fault+0x10d/0x490 [ 613.438455][T14420] do_fault+0x302/0x1ad0 [ 613.438476][T14420] ? __pfx_filemap_map_pages+0x10/0x10 [ 613.438493][T14420] ? __pmd_alloc+0x6aa/0x9c0 [ 613.438525][T14420] __handle_mm_fault+0x1919/0x2bb0 [ 613.438551][T14420] ? __pfx___handle_mm_fault+0x10/0x10 [ 613.438578][T14420] ? find_vma+0xbf/0x140 [ 613.438598][T14420] ? __pfx_find_vma+0x10/0x10 [ 613.438620][T14420] handle_mm_fault+0x3fe/0xad0 [ 613.438640][T14420] do_user_addr_fault+0x7a6/0x1370 [ 613.438661][T14420] ? rcu_is_watching+0x12/0xc0 [ 613.438685][T14420] exc_page_fault+0x64/0xc0 [ 613.438702][T14420] asm_exc_page_fault+0x26/0x30 [ 613.438718][T14420] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 613.438740][T14420] Code: c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 81 04 00 66 66 2e 0f [ 613.438785][T14420] RSP: 0018:ffffc9000b98fad8 EFLAGS: 00050202 [ 613.438803][T14420] RAX: 0000000000000035 RBX: 0000000000000004 RCX: 0000000000000004 [ 613.438812][T14420] RDX: ffffed10134d6801 RSI: ffff88809a6b4000 RDI: 0000000000000000 [ 613.438821][T14420] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed10134d6800 [ 613.438831][T14420] R10: ffff88809a6b4003 R11: ffff88802c8ca9b0 R12: ffffc9000b98fd90 [ 613.438840][T14420] R13: 0000000000000004 R14: ffff88809a6b4000 R15: 00007ffffffff000 [ 613.438861][T14420] _copy_to_iter+0x383/0x1710 [ 613.438884][T14420] ? __mutex_unlock_slowpath+0x161/0x790 [ 613.438904][T14420] ? __pfx__copy_to_iter+0x10/0x10 [ 613.438924][T14420] ? kernfs_seq_stop+0xcd/0x120 [ 613.438950][T14420] ? kernfs_put_active+0x86/0xe0 [ 613.438971][T14420] seq_read_iter+0xd02/0x12d0 [ 613.439001][T14420] kernfs_fop_read_iter+0x46c/0x610 [ 613.439023][T14420] ? rw_verify_area+0xcf/0x6c0 [ 613.439045][T14420] vfs_read+0x8bf/0xcf0 [ 613.439073][T14420] ? __pfx_vfs_read+0x10/0x10 [ 613.439110][T14420] ksys_read+0x12a/0x250 [ 613.439130][T14420] ? __pfx_ksys_read+0x10/0x10 [ 613.439157][T14420] do_syscall_64+0xcd/0xf80 [ 613.439174][T14420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.439189][T14420] RIP: 0033:0x7f1ca6d8f7c9 [ 613.439203][T14420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.439217][T14420] RSP: 002b:00007f1ca7b79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 613.439231][T14420] RAX: ffffffffffffffda RBX: 00007f1ca6fe5fa0 RCX: 00007f1ca6d8f7c9 [ 613.439240][T14420] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000003 [ 613.439249][T14420] RBP: 00007f1ca7b79090 R08: 0000000000000000 R09: 0000000000000000 [ 613.439257][T14420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.439266][T14420] R13: 00007f1ca6fe6038 R14: 00007f1ca6fe5fa0 R15: 00007ffc73d90288 [ 613.439286][T14420] [ 613.927188][T14386] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 614.540654][T14386] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 614.575952][T14386] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 614.897816][T14386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.003666][T14386] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.052953][T11802] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.053056][T11802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.055579][T11802] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.055647][T11802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.333920][T11499] Bluetooth: hci5: command tx timeout [ 615.678031][T14386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.395564][T14386] veth0_vlan: entered promiscuous mode [ 616.433757][T14386] veth1_vlan: entered promiscuous mode [ 616.511690][T14386] veth0_macvtap: entered promiscuous mode [ 616.568560][T14386] veth1_macvtap: entered promiscuous mode [ 616.639866][T14386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.678507][T14386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.732898][T11204] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.768930][T11204] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.817616][T11204] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.866746][T11204] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.010648][T11204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.052982][T11204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.124865][T14203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.152392][T14203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.402129][T11499] Bluetooth: hci5: command tx timeout [ 617.689311][T14482] binder: 14481:14482 ioctl c018620c 0 returned -22 [ 618.069697][T14487] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 618.503226][T14492] FAULT_INJECTION: forcing a failure. [ 618.503226][T14492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.557622][T14492] CPU: 0 UID: 0 PID: 14492 Comm: syz.5.1856 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 618.557658][T14492] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 618.557667][T14492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 618.557676][T14492] Call Trace: [ 618.557681][T14492] [ 618.557688][T14492] dump_stack_lvl+0x16c/0x1f0 [ 618.557711][T14492] should_fail_ex+0x512/0x640 [ 618.557735][T14492] _copy_to_user+0x32/0xd0 [ 618.557756][T14492] simple_read_from_buffer+0xcb/0x170 [ 618.557777][T14492] proc_fail_nth_read+0x197/0x240 [ 618.557802][T14492] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 618.557827][T14492] ? rw_verify_area+0xcf/0x6c0 [ 618.557845][T14492] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 618.557868][T14492] vfs_read+0x1e4/0xcf0 [ 618.557889][T14492] ? __pfx___mutex_lock+0x10/0x10 [ 618.557907][T14492] ? __pfx_vfs_read+0x10/0x10 [ 618.557932][T14492] ? __fget_files+0x20e/0x3c0 [ 618.557957][T14492] ksys_read+0x12a/0x250 [ 618.557976][T14492] ? __pfx_ksys_read+0x10/0x10 [ 618.558001][T14492] do_syscall_64+0xcd/0xf80 [ 618.558018][T14492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.558034][T14492] RIP: 0033:0x7f1d0cb8e1dc [ 618.558047][T14492] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 618.558061][T14492] RSP: 002b:00007f1d0daf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 618.558076][T14492] RAX: ffffffffffffffda RBX: 00007f1d0cde5fa0 RCX: 00007f1d0cb8e1dc [ 618.558091][T14492] RDX: 000000000000000f RSI: 00007f1d0daf60a0 RDI: 0000000000000004 [ 618.558100][T14492] RBP: 00007f1d0daf6090 R08: 0000000000000000 R09: 0000000000000000 [ 618.558109][T14492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.558117][T14492] R13: 00007f1d0cde6038 R14: 00007f1d0cde5fa0 R15: 00007ffc508c66e8 [ 618.558137][T14492] [ 619.251305][T14497] zswap: compressor not available [ 619.471044][T11499] Bluetooth: hci5: command tx timeout [ 619.651078][T14507] zswap: compressor not available [ 619.683490][T14512] nvme_fcloop: unknown parameter or missing value '0' [ 619.823395][T14509] FAULT_INJECTION: forcing a failure. [ 619.823395][T14509] name failslab, interval 1, probability 0, space 0, times 0 [ 619.919965][T14509] CPU: 0 UID: 0 PID: 14509 Comm: syz.5.1860 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 619.920002][T14509] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 619.920011][T14509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 619.920020][T14509] Call Trace: [ 619.920026][T14509] [ 619.920032][T14509] dump_stack_lvl+0x16c/0x1f0 [ 619.920054][T14509] should_fail_ex+0x512/0x640 [ 619.920075][T14509] ? fs_reclaim_acquire+0xae/0x150 [ 619.920101][T14509] should_failslab+0xc2/0x120 [ 619.920125][T14509] __kmalloc_noprof+0xeb/0x910 [ 619.920142][T14509] ? tomoyo_encode2+0x100/0x3e0 [ 619.920159][T14509] ? tomoyo_encode2+0x100/0x3e0 [ 619.920171][T14509] tomoyo_encode2+0x100/0x3e0 [ 619.920186][T14509] tomoyo_encode+0x29/0x50 [ 619.920199][T14509] tomoyo_realpath_from_path+0x18f/0x6e0 [ 619.920219][T14509] tomoyo_path_number_perm+0x245/0x580 [ 619.920239][T14509] ? tomoyo_path_number_perm+0x237/0x580 [ 619.920261][T14509] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 619.920283][T14509] ? rcu_read_unlock+0x17/0x60 [ 619.920309][T14509] ? do_raw_spin_lock+0x12c/0x2b0 [ 619.920326][T14509] ? find_held_lock+0x2b/0x80 [ 619.920354][T14509] ? find_held_lock+0x2b/0x80 [ 619.920372][T14509] ? __pfx___d_add+0x10/0x10 [ 619.920386][T14509] ? d_alloc+0x176/0x1e0 [ 619.920407][T14509] ? current_check_access_path+0x33b/0x460 [ 619.920431][T14509] ? __pfx_current_check_access_path+0x10/0x10 [ 619.920456][T14509] ? simple_lookup+0x105/0x1d0 [ 619.920480][T14509] tomoyo_path_mknod+0x10c/0x190 [ 619.920496][T14509] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 619.920514][T14509] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 619.920540][T14509] security_path_mknod+0x161/0x310 [ 619.920563][T14509] do_mknodat+0x24e/0x6f0 [ 619.920586][T14509] ? __pfx_do_mknodat+0x10/0x10 [ 619.920606][T14509] ? getname_flags.part.0+0x1c5/0x550 [ 619.920626][T14509] __x64_sys_mknod+0x87/0xb0 [ 619.920648][T14509] do_syscall_64+0xcd/0xf80 [ 619.920666][T14509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.920681][T14509] RIP: 0033:0x7f1d0cb8f7c9 [ 619.920696][T14509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.920711][T14509] RSP: 002b:00007f1d0dad5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 619.920726][T14509] RAX: ffffffffffffffda RBX: 00007f1d0cde6090 RCX: 00007f1d0cb8f7c9 [ 619.920736][T14509] RDX: 0000000000000004 RSI: 0000000000001001 RDI: 0000200000000040 [ 619.920745][T14509] RBP: 00007f1d0cc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 619.920754][T14509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.920764][T14509] R13: 00007f1d0cde6128 R14: 00007f1d0cde6090 R15: 00007ffc508c66e8 [ 619.920785][T14509] [ 619.920803][T14509] ERROR: Out of memory at tomoyo_realpath_from_path. [ 620.401810][T11233] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 620.468399][T11233] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 620.477393][T11233] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 620.488533][T11233] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 620.514096][T11233] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 620.714169][T14526] random: crng reseeded on system resumption [ 621.406035][T14532] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 621.478364][T14521] chnl_net:caif_netlink_parms(): no params data found [ 621.725602][T14521] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.759122][T14521] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.766384][T14521] bridge_slave_0: entered allmulticast mode [ 621.798734][T14521] bridge_slave_0: entered promiscuous mode [ 621.819244][T14521] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.838389][T14521] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.845944][T14521] bridge_slave_1: entered allmulticast mode [ 621.882597][T14521] bridge_slave_1: entered promiscuous mode [ 621.965444][T14521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.054112][T14521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 622.160826][T14521] team0: Port device team_slave_0 added [ 622.210102][T14521] team0: Port device team_slave_1 added [ 622.355539][T14521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.362553][T14521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.501854][T14521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.560794][T14521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.573034][T11499] Bluetooth: hci6: command tx timeout [ 622.600092][T14521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.728428][T14521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.002422][T14521] hsr_slave_0: entered promiscuous mode [ 623.041174][T14521] hsr_slave_1: entered promiscuous mode [ 623.075337][T14521] debugfs: 'hsr0' already exists in 'hsr' [ 623.121150][T14521] Cannot create hsr debugfs directory [ 623.839194][T14521] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 624.035802][T14521] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 624.159196][T14521] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 624.225698][T14521] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 624.535684][T14521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.630225][T14521] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.641417][T11499] Bluetooth: hci6: command tx timeout [ 624.725387][T14577] random: crng reseeded on system resumption [ 624.733536][T11206] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.740794][T11206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.770447][T14573] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1872'. [ 624.811089][T11206] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.818297][T11206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.867358][T14573] macsec0: entered allmulticast mode [ 624.890252][T14573] veth1_macvtap: entered allmulticast mode [ 625.813955][T14521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.237348][T14601] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1877'. [ 626.583940][T14610] __vm_enough_memory: pid: 14610, comm: syz.6.1879, bytes: 4398046511104 not enough memory for the allocation [ 626.709869][T11499] Bluetooth: hci6: command tx timeout [ 626.914663][T14521] veth0_vlan: entered promiscuous mode [ 626.977075][T14521] veth1_vlan: entered promiscuous mode [ 627.160022][T14521] veth0_macvtap: entered promiscuous mode [ 627.216095][T14521] veth1_macvtap: entered promiscuous mode [ 627.405083][T14521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.497574][T14521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.525222][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.532159][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.652718][T11206] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.697645][T11206] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.886038][T11206] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.991932][T11206] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.253282][T13798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.302147][T13798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.400031][T11804] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.435148][T11804] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.780088][T11499] Bluetooth: hci6: command tx timeout [ 629.409020][T14647] random: crng reseeded on system resumption [ 631.323510][T14671] vivid-007: ================= START STATUS ================= [ 631.385846][T14671] vivid-007: Generate PTS: true [ 631.433813][T14671] vivid-007: Generate SCR: true [ 631.456842][T14671] tpg source WxH: 320x240 (Y'CbCr) [ 631.492971][T14671] tpg field: 1 [ 631.496399][T14671] tpg crop: (0,0)/320x240 [ 631.500716][T14671] tpg compose: (0,0)/320x240 [ 631.550144][T14671] tpg colorspace: 8 [ 631.575264][T14671] tpg transfer function: 0/0 [ 631.591227][T14674] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 631.633800][T14671] tpg Y'CbCr encoding: 0/0 [ 631.698858][T14671] tpg quantization: 0/0 [ 631.751864][T14671] tpg RGB range: 0/2 [ 631.801655][T14671] vivid-007: ================== END STATUS ================== [ 632.108199][ T30] audit: type=1800 audit(1765210418.690:18): pid=14671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1891" name="lu_gp_id" dev="configfs" ino=58607 res=0 errno=0 [ 633.860918][T14711] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 634.170149][T14701] kexec: Could not allocate control_code_buffer [ 636.696502][T14757] ima: policy update failed [ 636.713934][ T30] audit: type=1802 audit(1765210423.306:19): pid=14757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1908" res=0 errno=0 [ 637.086603][T14762] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1911'. [ 639.090619][T14801] usb usb24: usbfs: process 14801 (syz.7.1919) did not claim interface 7 before use [ 641.378023][T14852] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input37 [ 642.960524][T14891] FAULT_INJECTION: forcing a failure. [ 642.960524][T14891] name fail_futex, interval 1, probability 0, space 0, times 0 [ 643.134565][T14891] CPU: 0 UID: 0 PID: 14891 Comm: syz.5.1932 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 643.134603][T14891] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 643.134611][T14891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 643.134621][T14891] Call Trace: [ 643.134627][T14891] [ 643.134633][T14891] dump_stack_lvl+0x16c/0x1f0 [ 643.134663][T14891] should_fail_ex+0x512/0x640 [ 643.134687][T14891] get_futex_key+0x1d0/0x15f0 [ 643.134707][T14891] ? __pfx_get_futex_key+0x10/0x10 [ 643.134730][T14891] futex_wake+0xea/0x530 [ 643.134748][T14891] ? futex_wait+0x120/0x380 [ 643.134768][T14891] ? __pfx_futex_wait+0x10/0x10 [ 643.134788][T14891] ? __pfx_futex_wake+0x10/0x10 [ 643.134810][T14891] ? snd_ctl_ioctl+0x322/0x13e0 [ 643.134829][T14891] do_futex+0x1e3/0x350 [ 643.134845][T14891] ? __pfx_do_futex+0x10/0x10 [ 643.134863][T14891] ? __pfx_sched_core_share_pid+0x10/0x10 [ 643.134887][T14891] __x64_sys_futex+0x1e0/0x4c0 [ 643.134906][T14891] ? __pfx___x64_sys_futex+0x10/0x10 [ 643.134923][T14891] ? __pfx___do_sys_prctl+0x10/0x10 [ 643.134945][T14891] do_syscall_64+0xcd/0xf80 [ 643.134961][T14891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.134977][T14891] RIP: 0033:0x7f1d0cb8f7c9 [ 643.134990][T14891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.135004][T14891] RSP: 002b:00007f1d0dad50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 643.135019][T14891] RAX: ffffffffffffffda RBX: 00007f1d0cde6098 RCX: 00007f1d0cb8f7c9 [ 643.135029][T14891] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1d0cde609c [ 643.135038][T14891] RBP: 00007f1d0cde6090 R08: 00007f1d0daf7000 R09: 0000000000000000 [ 643.135047][T14891] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 643.135057][T14891] R13: 00007f1d0cde6128 R14: 00007ffc508c6600 R15: 00007ffc508c66e8 [ 643.135076][T14891] [ 644.859187][T14913] ima: policy update failed [ 644.917795][ T30] audit: type=1802 audit(1765210431.562:20): pid=14913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.1935" res=0 errno=0 [ 645.573786][T14937] random: crng reseeded on system resumption [ 645.645119][T14938] Restarting kernel threads ... [ 645.668342][T14940] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1940'. [ 645.702657][T14938] Done restarting kernel threads. [ 646.347027][T14961] futex_wake_op: syz.1.1944 tries to shift op by -2048; fix this program [ 646.500043][T14955] 0x000000000001-0x000000020000 : "" [ 646.565360][T14955] ftl_cs: FTL header corrupt! [ 647.281693][T14977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1947'. [ 650.270212][ T30] audit: type=1800 audit(1765210436.962:21): pid=15027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1959" name="dbroot" dev="configfs" ino=60371 res=0 errno=0 [ 650.995129][T15049] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 653.157567][T15086] ptp ptp0: new virtual clock ptp1 [ 653.193496][T15086] ptp ptp0: new virtual clock ptp2 [ 653.226264][T15086] ptp ptp0: new virtual clock ptp3 [ 653.276262][T15086] ptp ptp0: guarantee physical clock free running [ 653.470586][T15104] netlink: 330 bytes leftover after parsing attributes in process `syz.7.1978'. [ 654.935164][T15115] delete_channel: no stack [ 655.620742][T15156] netlink: 'syz.7.1992': attribute type 1 has an invalid length. [ 655.945058][T15161] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input38 [ 656.705415][T15182] FAULT_INJECTION: forcing a failure. [ 656.705415][T15182] name fail_futex, interval 1, probability 0, space 0, times 0 [ 656.776637][T15182] CPU: 0 UID: 0 PID: 15182 Comm: syz.6.1997 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 656.776678][T15182] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 656.776687][T15182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 656.776696][T15182] Call Trace: [ 656.776702][T15182] [ 656.776709][T15182] dump_stack_lvl+0x16c/0x1f0 [ 656.776731][T15182] should_fail_ex+0x512/0x640 [ 656.776757][T15182] get_futex_key+0x1d0/0x15f0 [ 656.776776][T15182] ? __pfx_get_futex_key+0x10/0x10 [ 656.776798][T15182] futex_wait_setup+0x9d/0x570 [ 656.776824][T15182] __futex_wait+0x193/0x2f0 [ 656.776844][T15182] ? __pfx___futex_wait+0x10/0x10 [ 656.776867][T15182] ? __pfx_futex_wake_mark+0x10/0x10 [ 656.776889][T15182] ? futex_hash+0x2c5/0x380 [ 656.776906][T15182] ? futex_private_hash_put+0x160/0x1b0 [ 656.776923][T15182] futex_wait+0xe8/0x380 [ 656.776943][T15182] ? __pfx_futex_wait+0x10/0x10 [ 656.776967][T15182] ? __might_fault+0xe3/0x190 [ 656.776982][T15182] ? __might_fault+0x13b/0x190 [ 656.777002][T15182] do_futex+0x229/0x350 [ 656.777019][T15182] ? __pfx_do_futex+0x10/0x10 [ 656.777035][T15182] ? fput+0x70/0xf0 [ 656.777048][T15182] ? __sys_connect+0xe0/0x160 [ 656.777070][T15182] __x64_sys_futex+0x1e0/0x4c0 [ 656.777089][T15182] ? __pfx___x64_sys_futex+0x10/0x10 [ 656.777106][T15182] ? xfd_validate_state+0x61/0x180 [ 656.777119][T15182] ? __pfx_ksys_write+0x10/0x10 [ 656.777145][T15182] do_syscall_64+0xcd/0xf80 [ 656.777162][T15182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.777179][T15182] RIP: 0033:0x7f66df78f7c9 [ 656.777193][T15182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.777208][T15182] RSP: 002b:00007f66e05f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 656.777222][T15182] RAX: ffffffffffffffda RBX: 00007f66df9e5fa8 RCX: 00007f66df78f7c9 [ 656.777231][T15182] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f66df9e5fa8 [ 656.777240][T15182] RBP: 00007f66df9e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 656.777249][T15182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.777258][T15182] R13: 00007f66df9e6038 R14: 00007ffec5896fb0 R15: 00007ffec5897098 [ 656.777278][T15182] [ 657.612987][T15201] debugfs: '!PjE r҄y*"l-y–L HnwO~̓]' already exists in 'ieee80211' [ 657.643261][T11499] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 658.635003][T15222] netlink: 338 bytes leftover after parsing attributes in process `syz.7.2002'. [ 658.680211][T15222] macsec0: entered allmulticast mode [ 658.698501][T15222] veth1_macvtap: entered allmulticast mode [ 659.084559][T15230] random: crng reseeded on system resumption [ 659.645321][T11233] Bluetooth: hci0: command 0x0c1a tx timeout [ 660.243356][T15240] binder: 15239:15240 ioctl c018620c 0 returned -1 [ 660.265286][T15240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2006'. [ 660.364746][T15244] Invalid ELF header magic: != ELF [ 661.410533][T11203] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 661.420391][T11203] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 661.431962][T11203] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 661.440295][T11203] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 661.447885][T11203] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 661.618198][T15267] ptp ptp0: guarantee physical clock free running [ 661.715514][T11203] Bluetooth: hci0: command 0x0c1a tx timeout [ 661.785888][T15263] chnl_net:caif_netlink_parms(): no params data found [ 661.915544][T15263] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.935321][T15263] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.949808][T15263] bridge_slave_0: entered allmulticast mode [ 661.958563][T15263] bridge_slave_0: entered promiscuous mode [ 661.967446][T15263] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.976261][T15263] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.984167][T15263] bridge_slave_1: entered allmulticast mode [ 661.991445][T15263] bridge_slave_1: entered promiscuous mode [ 662.092816][T15263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 662.123323][T15263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 662.171417][T15263] team0: Port device team_slave_0 added [ 662.196167][T15263] team0: Port device team_slave_1 added [ 662.289942][T15263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 662.312748][T15263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.385841][T15263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 662.418237][T15263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 662.438736][T15263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 662.505158][T15263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.759033][T15263] hsr_slave_0: entered promiscuous mode [ 662.771970][T15263] hsr_slave_1: entered promiscuous mode [ 662.774096][T15263] debugfs: 'hsr0' already exists in 'hsr' [ 662.774118][T15263] Cannot create hsr debugfs directory [ 663.171194][T15294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2014'. [ 663.465645][T11233] Bluetooth: hci7: command tx timeout [ 663.486316][T15296] random: crng reseeded on system resumption [ 663.509125][T15263] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 663.541745][T15263] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 663.584660][T15263] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 663.638129][T15263] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 663.856215][T15263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.929944][T15263] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.996667][T11806] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.003992][T11806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.062890][T11806] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.070059][T11806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.618706][T15263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.923558][T15324] FAULT_INJECTION: forcing a failure. [ 664.923558][T15324] name failslab, interval 1, probability 0, space 0, times 0 [ 664.978270][T15324] CPU: 0 UID: 0 PID: 15324 Comm: syz.1.2020 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 664.978307][T15324] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 664.978316][T15324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 664.978326][T15324] Call Trace: [ 664.978331][T15324] [ 664.978338][T15324] dump_stack_lvl+0x16c/0x1f0 [ 664.978359][T15324] should_fail_ex+0x512/0x640 [ 664.978381][T15324] ? __kmalloc_node_noprof+0xcd/0x930 [ 664.978405][T15324] should_failslab+0xc2/0x120 [ 664.978428][T15324] __kmalloc_node_noprof+0xee/0x930 [ 664.978448][T15324] ? user_buffer_init+0x4d0/0x750 [ 664.978470][T15324] ? user_buffer_init+0x4d0/0x750 [ 664.978488][T15324] user_buffer_init+0x4d0/0x750 [ 664.978510][T15324] tracing_mark_open+0x19d/0x220 [ 664.978531][T15324] do_dentry_open+0x748/0x1590 [ 664.978552][T15324] ? __pfx_tracing_mark_open+0x10/0x10 [ 664.978578][T15324] vfs_open+0x82/0x3f0 [ 664.978596][T15324] path_openat+0x2078/0x3140 [ 664.978623][T15324] ? __pfx_path_openat+0x10/0x10 [ 664.978651][T15324] do_filp_open+0x20b/0x470 [ 664.978673][T15324] ? __pfx_do_filp_open+0x10/0x10 [ 664.978708][T15324] ? alloc_fd+0x471/0x7d0 [ 664.978742][T15324] do_sys_openat2+0x11f/0x280 [ 664.978759][T15324] ? __pfx_do_sys_openat2+0x10/0x10 [ 664.978784][T15324] __x64_sys_openat+0x174/0x210 [ 664.978802][T15324] ? __pfx___x64_sys_openat+0x10/0x10 [ 664.978827][T15324] do_syscall_64+0xcd/0xf80 [ 664.978844][T15324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.978859][T15324] RIP: 0033:0x7f1ca6d8f7c9 [ 664.978872][T15324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 664.978886][T15324] RSP: 002b:00007f1ca7b58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 664.978902][T15324] RAX: ffffffffffffffda RBX: 00007f1ca6fe6090 RCX: 00007f1ca6d8f7c9 [ 664.978912][T15324] RDX: 0000000000000201 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 664.978922][T15324] RBP: 00007f1ca6e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 664.978930][T15324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.978939][T15324] R13: 00007f1ca6fe6128 R14: 00007f1ca6fe6090 R15: 00007ffc73d90288 [ 664.978959][T15324] [ 665.377741][T15263] veth0_vlan: entered promiscuous mode [ 665.388531][T15263] veth1_vlan: entered promiscuous mode [ 665.418614][T15263] veth0_macvtap: entered promiscuous mode [ 665.428299][T15263] veth1_macvtap: entered promiscuous mode [ 665.445514][T15263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.460962][T15263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.498881][T14925] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.573536][T11233] Bluetooth: hci7: command tx timeout [ 665.586340][T14925] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.642946][T14925] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.704928][T14925] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.781106][T11684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.821125][T11684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.909564][T11684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.964545][T11684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.751394][T15356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2025'. [ 667.527270][T15362] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 667.601548][T11233] Bluetooth: hci7: command tx timeout [ 668.102769][T15375] random: crng reseeded on system resumption [ 669.216060][T15393] vivid-007: ================= START STATUS ================= [ 669.264224][T15393] vivid-007: Generate PTS: true [ 669.269226][T15393] vivid-007: Generate SCR: true [ 669.304273][T15393] tpg source WxH: 320x240 (Y'CbCr) [ 669.309537][T15393] tpg field: 1 [ 669.323468][T15393] tpg crop: (0,0)/320x240 [ 669.338153][T15393] tpg compose: (0,0)/320x240 [ 669.343337][T15393] tpg colorspace: 8 [ 669.347144][T15393] tpg transfer function: 0/0 [ 669.391357][T15393] tpg Y'CbCr encoding: 0/0 [ 669.401994][T15393] tpg quantization: 0/0 [ 669.415455][T15393] tpg RGB range: 0/2 [ 669.419381][T15393] vivid-007: ================== END STATUS ================== [ 669.540268][T15395] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input41 [ 669.671282][T11233] Bluetooth: hci7: command tx timeout [ 669.717345][T15399] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input42 [ 669.763469][ T30] audit: type=1800 audit(1765210456.561:22): pid=15398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2041" name="lu_gp_id" dev="configfs" ino=63291 res=0 errno=0 [ 671.007099][T15420] ima: policy update failed [ 671.028226][ T30] audit: type=1802 audit(1765210457.828:23): pid=15420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.2039" res=0 errno=0 [ 671.136852][T15428] netlink: 'syz.8.2043': attribute type 23 has an invalid length. [ 671.997292][T11233] Bluetooth: hci7: SCO packet for unknown connection handle 0 [ 672.248862][T11203] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 672.267990][T11203] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 672.277629][T11203] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 672.286222][T11203] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 672.294022][T11203] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 672.305398][T15455] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 672.946394][T15456] chnl_net:caif_netlink_parms(): no params data found [ 673.253300][T15456] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.303072][T15456] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.360972][T15456] bridge_slave_0: entered allmulticast mode [ 673.391730][T15456] bridge_slave_0: entered promiscuous mode [ 673.440215][T15456] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.447381][T15456] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.479302][T15456] bridge_slave_1: entered allmulticast mode [ 673.511246][T15456] bridge_slave_1: entered promiscuous mode [ 673.668574][T15456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.725175][T15456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.917072][T15483] FAULT_INJECTION: forcing a failure. [ 673.917072][T15483] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 673.960745][T15456] team0: Port device team_slave_0 added [ 674.003418][T15456] team0: Port device team_slave_1 added [ 674.036886][T15483] CPU: 0 UID: 0 PID: 15483 Comm: syz.1.2055 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 674.036923][T15483] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 674.036932][T15483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 674.036942][T15483] Call Trace: [ 674.036948][T15483] [ 674.036954][T15483] dump_stack_lvl+0x16c/0x1f0 [ 674.036976][T15483] should_fail_ex+0x512/0x640 [ 674.037001][T15483] should_fail_alloc_page+0xe7/0x130 [ 674.037026][T15483] prepare_alloc_pages+0x401/0x670 [ 674.037049][T15483] ? __lock_acquire+0x436/0x2890 [ 674.037065][T15483] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 674.037083][T15483] ? kvm_sched_clock_read+0x11/0x20 [ 674.037101][T15483] ? lock_acquire+0x179/0x330 [ 674.037114][T15483] ? find_held_lock+0x2b/0x80 [ 674.037135][T15483] ? finish_task_switch.isra.0+0x202/0xbd0 [ 674.037158][T15483] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 674.037178][T15483] ? finish_task_switch.isra.0+0x207/0xbd0 [ 674.037201][T15483] ? __schedule+0x114c/0x6150 [ 674.037218][T15483] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 674.037241][T15483] ? policy_nodemask+0xea/0x4e0 [ 674.037265][T15483] alloc_pages_mpol+0x1fb/0x550 [ 674.037288][T15483] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 674.037314][T15483] folio_alloc_mpol_noprof+0x36/0x2f0 [ 674.037330][T15483] vma_alloc_folio_noprof+0xed/0x1e0 [ 674.037344][T15483] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 674.037365][T15483] do_anonymous_page+0xc81/0x2190 [ 674.037388][T15483] __handle_mm_fault+0x1ecf/0x2bb0 [ 674.037406][T15483] ? reacquire_held_locks+0xcd/0x1f0 [ 674.037420][T15483] ? __pfx___handle_mm_fault+0x10/0x10 [ 674.037438][T15483] ? lock_vma_under_rcu+0x176/0x580 [ 674.037459][T15483] ? fd_install+0x223/0x570 [ 674.037484][T15483] handle_mm_fault+0x3fe/0xad0 [ 674.037502][T15483] do_user_addr_fault+0x60c/0x1370 [ 674.037522][T15483] ? rcu_is_watching+0x12/0xc0 [ 674.037545][T15483] exc_page_fault+0x64/0xc0 [ 674.037560][T15483] asm_exc_page_fault+0x26/0x30 [ 674.037582][T15483] RIP: 0033:0x7f1ca6c5a65b [ 674.037596][T15483] Code: 00 00 00 48 8d 3d dd 5a 19 00 48 89 c1 31 c0 e8 2b 39 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 5b 19 00 48 89 34 24 48 8b 14 24 48 8b [ 674.037612][T15483] RSP: 002b:00007f1ca7b77fb0 EFLAGS: 00010202 [ 674.037626][T15483] RAX: 0000000000000000 RBX: 00007f1ca6fe5fa0 RCX: 0000000000000000 [ 674.037636][T15483] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000004440 [ 674.037646][T15483] RBP: 00007f1ca6e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 674.037657][T15483] R10: 0000200000004440 R11: 0000000000000000 R12: 0000000000000000 [ 674.037666][T15483] R13: 00007f1ca6fe6038 R14: 00007f1ca6fe5fa0 R15: 00007ffc73d90288 [ 674.037687][T15483] [ 674.037872][T15483] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 674.450299][T15456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.459572][T11203] Bluetooth: hci8: command tx timeout [ 674.487394][T15456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.528924][T15456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.559965][T15456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.572828][T15456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.607528][T15456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.819287][T15456] hsr_slave_0: entered promiscuous mode [ 674.846859][T15456] hsr_slave_1: entered promiscuous mode [ 674.847471][T15456] debugfs: 'hsr0' already exists in 'hsr' [ 674.847497][T15456] Cannot create hsr debugfs directory [ 675.109991][T15501] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input43 [ 675.600354][T15456] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 675.684792][T15456] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 675.895715][T15456] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 676.006557][T15456] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 676.219953][T15507] netlink: 346 bytes leftover after parsing attributes in process `syz.8.2059'. [ 676.443499][T15456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.485534][T15456] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.497921][T14198] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.497992][T14198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.511790][T11203] Bluetooth: hci8: command tx timeout [ 676.524259][T14198] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.524335][T14198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.092502][T15527] ima: policy update failed [ 677.092621][ T30] audit: type=1802 audit(1765210463.932:24): pid=15527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.2062" res=0 errno=0 [ 677.291408][T15456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.995438][T15456] veth0_vlan: entered promiscuous mode [ 678.047386][T15456] veth1_vlan: entered promiscuous mode [ 678.228502][T15456] veth0_macvtap: entered promiscuous mode [ 678.296818][T15456] veth1_macvtap: entered promiscuous mode [ 678.338812][T15548] random: crng reseeded on system resumption [ 678.389775][T15456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.585728][T11203] Bluetooth: hci8: command tx timeout [ 678.623255][T15456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.833447][T15557] ima: policy update failed [ 678.860324][ T30] audit: type=1802 audit(1765210465.712:25): pid=15557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.2070" res=0 errno=0 [ 678.941082][T14198] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.055901][T14198] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.084992][T15563] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2072'. [ 679.133251][T14198] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.244157][T14198] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.585136][T13800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.619334][T13800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.741426][T14198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.774266][T14198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.121448][T15574] openvswitch: netlink: Flow key attribute not present in set flow. [ 680.149224][T15575] openvswitch: netlink: Flow key attribute not present in set flow. [ 680.195578][T15574] netlink: 'syz.9.2047': attribute type 4 has an invalid length. [ 680.227192][T15574] netlink: 'syz.9.2047': attribute type 1 has an invalid length. [ 680.541307][T15575] zswap: compressor not available [ 680.648378][T11203] Bluetooth: hci8: command tx timeout [ 680.865833][T15574] zswap: compressor not available [ 682.382851][T15625] Invalid ELF header magic: != ELF [ 683.166828][T15626] Invalid ELF header magic: != ELF [ 684.168485][T15666] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2092'. [ 685.212600][T15663] random: crng reseeded on system resumption [ 685.684431][T15673] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 687.761770][T15714] random: crng reseeded on system resumption [ 688.024413][T15716] FAULT_INJECTION: forcing a failure. [ 688.024413][T15716] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 688.156536][T15716] CPU: 0 UID: 0 PID: 15716 Comm: syz.9.2101 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 688.156573][T15716] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 688.156582][T15716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 688.156591][T15716] Call Trace: [ 688.156597][T15716] [ 688.156604][T15716] dump_stack_lvl+0x16c/0x1f0 [ 688.156625][T15716] should_fail_ex+0x512/0x640 [ 688.156649][T15716] should_fail_alloc_page+0xe7/0x130 [ 688.156674][T15716] prepare_alloc_pages+0x401/0x670 [ 688.156696][T15716] ? __lock_acquire+0x436/0x2890 [ 688.156713][T15716] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 688.156731][T15716] ? kvm_sched_clock_read+0x11/0x20 [ 688.156748][T15716] ? lock_acquire+0x179/0x330 [ 688.156761][T15716] ? find_held_lock+0x2b/0x80 [ 688.156780][T15716] ? finish_task_switch.isra.0+0x202/0xbd0 [ 688.156802][T15716] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 688.156822][T15716] ? finish_task_switch.isra.0+0x207/0xbd0 [ 688.156845][T15716] ? __schedule+0x114c/0x6150 [ 688.156861][T15716] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 688.156885][T15716] ? policy_nodemask+0xea/0x4e0 [ 688.156909][T15716] alloc_pages_mpol+0x1fb/0x550 [ 688.156931][T15716] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 688.156965][T15716] folio_alloc_mpol_noprof+0x36/0x2f0 [ 688.156982][T15716] vma_alloc_folio_noprof+0xed/0x1e0 [ 688.156997][T15716] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 688.157017][T15716] do_anonymous_page+0xc81/0x2190 [ 688.157041][T15716] __handle_mm_fault+0x1ecf/0x2bb0 [ 688.157059][T15716] ? reacquire_held_locks+0xcd/0x1f0 [ 688.157074][T15716] ? __pfx___handle_mm_fault+0x10/0x10 [ 688.157091][T15716] ? lock_vma_under_rcu+0x176/0x580 [ 688.157112][T15716] ? fd_install+0x223/0x570 [ 688.157137][T15716] handle_mm_fault+0x3fe/0xad0 [ 688.157159][T15716] do_user_addr_fault+0x60c/0x1370 [ 688.157185][T15716] ? rcu_is_watching+0x12/0xc0 [ 688.157209][T15716] exc_page_fault+0x64/0xc0 [ 688.157225][T15716] asm_exc_page_fault+0x26/0x30 [ 688.157241][T15716] RIP: 0033:0x7f3fa845a65b [ 688.157254][T15716] Code: 00 00 00 48 8d 3d dd 5a 19 00 48 89 c1 31 c0 e8 2b 39 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 5b 19 00 48 89 34 24 48 8b 14 24 48 8b [ 688.157268][T15716] RSP: 002b:00007f3fa9367fb0 EFLAGS: 00010202 [ 688.157280][T15716] RAX: 0000000000000000 RBX: 00007f3fa87e6090 RCX: 0000000000000000 [ 688.157289][T15716] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000004440 [ 688.157299][T15716] RBP: 00007f3fa8613f91 R08: 0000000000000000 R09: 0000000000000000 [ 688.157308][T15716] R10: 0000200000004440 R11: 0000000000000000 R12: 0000000000000000 [ 688.157316][T15716] R13: 00007f3fa87e6128 R14: 00007f3fa87e6090 R15: 00007ffeeb9ad8a8 [ 688.157337][T15716] [ 688.506382][T15716] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 688.580855][T15719] random: crng reseeded on system resumption [ 688.790133][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.806603][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.825219][T12539] NFSD: Failed to start, no listeners configured. [ 689.713742][T15731] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 690.669976][T15755] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2112'. [ 691.140014][T15769] random: crng reseeded on system resumption [ 691.292236][T15771] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 693.455106][T15808] GUP no longer grows the stack in syz.8.2123 (15808): 14000-18000 (4000) [ 693.516565][T15808] CPU: 0 UID: 0 PID: 15808 Comm: syz.8.2123 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 693.516602][T15808] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 693.516611][T15808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 693.516620][T15808] Call Trace: [ 693.516625][T15808] [ 693.516632][T15808] dump_stack_lvl+0x16c/0x1f0 [ 693.516680][T15808] gup_vma_lookup+0x1d2/0x220 [ 693.516704][T15808] __get_user_pages+0x241/0x3590 [ 693.516733][T15808] ? find_held_lock+0x2b/0x80 [ 693.516755][T15808] ? __pfx___get_user_pages+0x10/0x10 [ 693.516782][T15808] get_user_pages_remote+0x243/0xab0 [ 693.516807][T15808] ? __pfx_get_user_pages_remote+0x10/0x10 [ 693.516830][T15808] ? __pfx___might_resched+0x10/0x10 [ 693.516851][T15808] ? noop_dirty_folio+0x5e/0xb0 [ 693.516873][T15808] __access_remote_vm+0x24d/0x850 [ 693.516898][T15808] ? __pfx___access_remote_vm+0x10/0x10 [ 693.516923][T15808] mem_rw+0x20e/0x640 [ 693.516946][T15808] ? __pfx_mem_write+0x10/0x10 [ 693.516966][T15808] vfs_write+0x2a0/0x11d0 [ 693.516988][T15808] ? __pfx___mutex_lock+0x10/0x10 [ 693.517006][T15808] ? __pfx_vfs_write+0x10/0x10 [ 693.517032][T15808] ? __fget_files+0x20e/0x3c0 [ 693.517058][T15808] ksys_write+0x12a/0x250 [ 693.517077][T15808] ? __pfx_ksys_write+0x10/0x10 [ 693.517104][T15808] do_syscall_64+0xcd/0xf80 [ 693.517121][T15808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.517136][T15808] RIP: 0033:0x7f8e2938f7c9 [ 693.517149][T15808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 693.517164][T15808] RSP: 002b:00007f8e2a276038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 693.517180][T15808] RAX: ffffffffffffffda RBX: 00007f8e295e5fa0 RCX: 00007f8e2938f7c9 [ 693.517190][T15808] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 693.517199][T15808] RBP: 00007f8e29413f91 R08: 0000000000000000 R09: 0000000000000000 [ 693.517208][T15808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.517216][T15808] R13: 00007f8e295e6038 R14: 00007f8e295e5fa0 R15: 00007ffe67171458 [ 693.517237][T15808] [ 693.821815][T15812] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2124'. [ 695.823034][T15842] PM: Enabling pm_trace changes system date and time during resume. [ 695.823034][T15842] PM: Correct system time has to be restored manually after resume. [ 696.505817][T15848] random: crng reseeded on system resumption [ 697.611622][T15878] random: crng reseeded on system resumption [ 699.703621][T15913] FAULT_INJECTION: forcing a failure. [ 699.703621][T15913] name fail_futex, interval 1, probability 0, space 0, times 0 [ 699.806710][T15913] CPU: 0 UID: 0 PID: 15913 Comm: syz.9.2150 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 699.806745][T15913] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 699.806753][T15913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 699.806762][T15913] Call Trace: [ 699.806768][T15913] [ 699.806774][T15913] dump_stack_lvl+0x16c/0x1f0 [ 699.806795][T15913] should_fail_ex+0x512/0x640 [ 699.806818][T15913] get_futex_key+0x1d0/0x15f0 [ 699.806837][T15913] ? __pfx_get_futex_key+0x10/0x10 [ 699.806852][T15913] ? find_held_lock+0x2b/0x80 [ 699.806876][T15913] futex_wake+0xea/0x530 [ 699.806897][T15913] ? __pfx_futex_wake+0x10/0x10 [ 699.806919][T15913] ? madvise_unlock+0x7c/0x220 [ 699.806948][T15913] do_futex+0x1e3/0x350 [ 699.806964][T15913] ? __pfx_do_futex+0x10/0x10 [ 699.806980][T15913] ? __fget_files+0x204/0x3c0 [ 699.807004][T15913] __x64_sys_futex+0x1e0/0x4c0 [ 699.807023][T15913] ? __pfx___x64_sys_futex+0x10/0x10 [ 699.807041][T15913] ? ksys_mmap_pgoff+0x85/0x5c0 [ 699.807061][T15913] ? __pfx_ksys_write+0x10/0x10 [ 699.807087][T15913] do_syscall_64+0xcd/0xf80 [ 699.807117][T15913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.807134][T15913] RIP: 0033:0x7f3fa858f7c9 [ 699.807146][T15913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 699.807161][T15913] RSP: 002b:00007f3fa938a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 699.807175][T15913] RAX: ffffffffffffffda RBX: 00007f3fa87e5fa8 RCX: 00007f3fa858f7c9 [ 699.807185][T15913] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3fa87e5fac [ 699.807199][T15913] RBP: 00007f3fa87e5fa0 R08: 00007f3fa938b000 R09: 0000000000000000 [ 699.807208][T15913] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 699.807217][T15913] R13: 00007f3fa87e6038 R14: 00007ffeeb9ad7c0 R15: 00007ffeeb9ad8a8 [ 699.807236][T15913] [ 700.684729][T15920] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE r҄y*"l-y–L̓]' [ 700.706568][T15920] CPU: 0 UID: 0 PID: 15920 Comm: syz.1.2151 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 700.706608][T15920] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 700.706617][T15920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 700.706626][T15920] Call Trace: [ 700.706632][T15920] [ 700.706638][T15920] dump_stack_lvl+0x16c/0x1f0 [ 700.706661][T15920] sysfs_warn_dup+0x7f/0xa0 [ 700.706678][T15920] sysfs_do_create_link_sd+0x124/0x140 [ 700.706697][T15920] sysfs_create_link+0x61/0xc0 [ 700.706713][T15920] device_add+0x652/0x1980 [ 700.706731][T15920] ? __pfx_device_add+0x10/0x10 [ 700.706744][T15920] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 700.706768][T15920] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 700.706797][T15920] wiphy_register+0x1ea1/0x2cc0 [ 700.706814][T15920] ? __rtnl_unlock+0x68/0xf0 [ 700.706830][T15920] ? napi_enable_locked+0x9f0/0xa00 [ 700.706856][T15920] ? __pfx_wiphy_register+0x10/0x10 [ 700.706873][T15920] ? __asan_memset+0x23/0x50 [ 700.706897][T15920] ? ieee80211_init_rate_ctrl_alg+0x125/0x680 [ 700.706917][T15920] ieee80211_register_hw+0x2bb2/0x4160 [ 700.706951][T15920] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 700.706968][T15920] ? __pfx___debug_object_init+0x10/0x10 [ 700.706989][T15920] ? find_held_lock+0x2b/0x80 [ 700.707010][T15920] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 700.707033][T15920] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 700.707048][T15920] ? __hrtimer_setup+0x176/0x280 [ 700.707069][T15920] mac80211_hwsim_new_radio+0x3323/0x5150 [ 700.707101][T15920] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 700.707127][T15920] hwsim_new_radio_nl+0xba2/0x1330 [ 700.707149][T15920] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 700.707175][T15920] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 700.707194][T15920] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 700.707217][T15920] genl_family_rcv_msg_doit+0x209/0x2f0 [ 700.707236][T15920] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 700.707254][T15920] ? genl_get_cmd+0x194/0x580 [ 700.707274][T15920] ? bpf_lsm_capable+0x9/0x10 [ 700.707293][T15920] ? security_capable+0x7e/0x260 [ 700.707311][T15920] ? ns_capable+0xd7/0x110 [ 700.707331][T15920] genl_rcv_msg+0x55c/0x800 [ 700.707351][T15920] ? __pfx_genl_rcv_msg+0x10/0x10 [ 700.707369][T15920] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 700.707396][T15920] netlink_rcv_skb+0x158/0x420 [ 700.707411][T15920] ? __pfx_genl_rcv_msg+0x10/0x10 [ 700.707430][T15920] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 700.707453][T15920] ? netlink_deliver_tap+0x1ae/0xd30 [ 700.707479][T15920] genl_rcv+0x28/0x40 [ 700.707494][T15920] netlink_unicast+0x5aa/0x870 [ 700.707512][T15920] ? __pfx_netlink_unicast+0x10/0x10 [ 700.707526][T15920] ? __pfx___might_resched+0x10/0x10 [ 700.707546][T15920] ? __lock_acquire+0x436/0x2890 [ 700.707565][T15920] netlink_sendmsg+0x8c8/0xdd0 [ 700.707583][T15920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 700.707601][T15920] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 700.707623][T15920] ____sys_sendmsg+0xa5d/0xc30 [ 700.707640][T15920] ? copy_msghdr_from_user+0x10a/0x160 [ 700.707662][T15920] ? __pfx_____sys_sendmsg+0x10/0x10 [ 700.707678][T15920] ? preempt_schedule_thunk+0x16/0x30 [ 700.707696][T15920] ? try_to_wake_up+0xa67/0x1860 [ 700.707719][T15920] ___sys_sendmsg+0x134/0x1d0 [ 700.707743][T15920] ? __pfx____sys_sendmsg+0x10/0x10 [ 700.707765][T15920] ? futex_private_hash_put+0x160/0x1b0 [ 700.707804][T15920] __sys_sendmsg+0x16d/0x220 [ 700.707827][T15920] ? __pfx___sys_sendmsg+0x10/0x10 [ 700.707849][T15920] ? __x64_sys_futex+0x1e0/0x4c0 [ 700.707878][T15920] do_syscall_64+0xcd/0xf80 [ 700.707895][T15920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.707911][T15920] RIP: 0033:0x7f1ca6d8f7c9 [ 700.707930][T15920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.707946][T15920] RSP: 002b:00007f1ca7b79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 700.707962][T15920] RAX: ffffffffffffffda RBX: 00007f1ca6fe5fa0 RCX: 00007f1ca6d8f7c9 [ 700.707972][T15920] RDX: 0000000004000800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 700.707981][T15920] RBP: 00007f1ca6e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 700.707992][T15920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.708001][T15920] R13: 00007f1ca6fe6038 R14: 00007f1ca6fe5fa0 R15: 00007ffc73d90288 [ 700.708022][T15920] [ 704.253001][T15974] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff8165ac9a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 704.268927][T15974] Call Trace: [ 704.272203][T15974] [ 704.275122][T15974] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 704.281828][T15974] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 704.287734][T15974] ? debug_object_deactivate+0x1ec/0x3a0 [ 704.293457][T15974] mce_cpu_restart+0xd9/0x1f0 [ 704.298166][T15974] ? __pfx_mce_cpu_restart+0x10/0x10 [ 704.303541][T15974] smp_call_function_many_cond+0x1200/0x15e0 [ 704.309609][T15974] ? __pfx_mce_cpu_restart+0x10/0x10 [ 704.314885][T15974] ? mark_held_locks+0x49/0x80 [ 704.319726][T15974] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 704.325924][T15974] ? lockdep_hardirqs_on+0x7c/0x110 [ 704.331147][T15974] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 704.338111][T15974] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 704.344459][T15974] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 704.350453][T15974] ? __pfx_mce_cpu_restart+0x10/0x10 [ 704.355785][T15974] on_each_cpu_cond_mask+0x40/0x90 [ 704.360989][T15974] set_bank+0x240/0x3a0 [ 704.365309][T15974] ? __pfx_set_bank+0x10/0x10 [ 704.370010][T15974] ? find_held_lock+0x2b/0x80 [ 704.374778][T15974] ? __pfx_set_bank+0x10/0x10 [ 704.379456][T15974] dev_attr_store+0x58/0x80 [ 704.383975][T15974] ? __pfx_dev_attr_store+0x10/0x10 [ 704.389199][T15974] sysfs_kf_write+0xf2/0x150 [ 704.393791][T15974] kernfs_fop_write_iter+0x3af/0x570 [ 704.399072][T15974] ? __pfx_sysfs_kf_write+0x10/0x10 [ 704.404264][T15974] vfs_write+0x7d3/0x11d0 [ 704.408683][T15974] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 704.414746][T15974] ? __pfx_vfs_write+0x10/0x10 [ 704.420010][T15974] ksys_write+0x12a/0x250 [ 704.424352][T15974] ? __pfx_ksys_write+0x10/0x10 [ 704.429299][T15974] do_syscall_64+0xcd/0xf80 [ 704.433850][T15974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.439765][T15974] RIP: 0033:0x7f8e2938f7c9 [ 704.444252][T15974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 704.464829][T15974] RSP: 002b:00007f8e2a255038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 704.473254][T15974] RAX: ffffffffffffffda RBX: 00007f8e295e6090 RCX: 00007f8e2938f7c9 [ 704.481254][T15974] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000004 [ 704.489216][T15974] RBP: 00007f8e29413f91 R08: 0000000000000000 R09: 0000000000000000 [ 704.497180][T15974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.505238][T15974] R13: 00007f8e295e6128 R14: 00007f8e295e6090 R15: 00007ffe67171458 [ 704.513236][T15974] [ 706.767681][T15994] ima: policy update failed [ 706.794033][ T30] audit: type=1802 audit(4294967321.670:26): pid=15994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.2167" res=0 errno=0 [ 707.606277][T16018] mmap: syz.8.2173 (16018): VmData 45809664 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 707.941216][T16024] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2175'. [ 708.286392][T16032] ima: policy update failed [ 708.319623][ T30] audit: type=1802 audit(4294967323.199:27): pid=16032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.2178" res=0 errno=0 [ 708.933634][T16039] FAULT_INJECTION: forcing a failure. [ 708.933634][T16039] name failslab, interval 1, probability 0, space 0, times 0 [ 709.023678][T16039] CPU: 0 UID: 0 PID: 16039 Comm: syz.7.2181 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 709.023713][T16039] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 709.023721][T16039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 709.023730][T16039] Call Trace: [ 709.023735][T16039] [ 709.023741][T16039] dump_stack_lvl+0x16c/0x1f0 [ 709.023763][T16039] should_fail_ex+0x512/0x640 [ 709.023783][T16039] ? fs_reclaim_acquire+0xae/0x150 [ 709.023808][T16039] should_failslab+0xc2/0x120 [ 709.023831][T16039] kmem_cache_alloc_noprof+0x83/0x770 [ 709.023848][T16039] ? __pfx_map_id_range_down+0x10/0x10 [ 709.023869][T16039] ? security_inode_alloc+0x3b/0x2b0 [ 709.023910][T16039] ? security_inode_alloc+0x3b/0x2b0 [ 709.023928][T16039] security_inode_alloc+0x3b/0x2b0 [ 709.023947][T16039] inode_init_always_gfp+0xced/0x1040 [ 709.023972][T16039] alloc_inode+0x86/0x240 [ 709.023988][T16039] path_from_stashed+0x25b/0x750 [ 709.024010][T16039] ? do_raw_spin_unlock+0x172/0x230 [ 709.024036][T16039] ns_get_path+0x60/0x80 [ 709.024059][T16039] proc_ns_get_link+0x121/0x230 [ 709.024075][T16039] ? __pfx_proc_ns_get_link+0x10/0x10 [ 709.024093][T16039] ? atime_needs_update+0x8b/0x710 [ 709.024112][T16039] pick_link+0xc96/0x13b0 [ 709.024129][T16039] ? __pfx_proc_ns_get_link+0x10/0x10 [ 709.024147][T16039] step_into_slowpath+0x6c6/0xf50 [ 709.024169][T16039] ? __pfx_step_into_slowpath+0x10/0x10 [ 709.024187][T16039] ? find_held_lock+0x2b/0x80 [ 709.024211][T16039] path_openat+0x10db/0x3140 [ 709.024238][T16039] ? __pfx_path_openat+0x10/0x10 [ 709.024265][T16039] do_filp_open+0x20b/0x470 [ 709.024287][T16039] ? __pfx_do_filp_open+0x10/0x10 [ 709.024321][T16039] ? alloc_fd+0x471/0x7d0 [ 709.024346][T16039] do_sys_openat2+0x11f/0x280 [ 709.024362][T16039] ? __pfx_do_sys_openat2+0x10/0x10 [ 709.024385][T16039] __x64_sys_openat+0x174/0x210 [ 709.024401][T16039] ? __pfx___x64_sys_openat+0x10/0x10 [ 709.024423][T16039] do_syscall_64+0xcd/0xf80 [ 709.024440][T16039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.024455][T16039] RIP: 0033:0x7fe9fb98e010 [ 709.024469][T16039] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 709.024483][T16039] RSP: 002b:00007fe9fc877f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 709.024497][T16039] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe9fb98e010 [ 709.024507][T16039] RDX: 0000000000000002 RSI: 00007fe9fc877fa0 RDI: 00000000ffffff9c [ 709.024515][T16039] RBP: 00007fe9fc877fa0 R08: 0000000000000000 R09: 0000000000000000 [ 709.024524][T16039] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 709.024532][T16039] R13: 00007fe9fbbe6038 R14: 00007fe9fbbe5fa0 R15: 00007fffe4780a48 [ 709.024551][T16039] [ 709.940598][T16057] binder: 16055:16057 ioctl 40046104 2000000000c0 returned -22 [ 710.206509][T16070] ima: policy update failed [ 710.289891][ T30] audit: type=1802 audit(4294967325.119:28): pid=16070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.2187" res=0 errno=0 [ 710.358540][T16066] zswap: compressor not available [ 710.408993][T16080] random: crng reseeded on system resumption [ 711.103373][T16094] FAULT_INJECTION: forcing a failure. [ 711.103373][T16094] name failslab, interval 1, probability 0, space 0, times 0 [ 711.148883][T16094] CPU: 0 UID: 0 PID: 16094 Comm: syz.9.2193 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 711.148920][T16094] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 711.148929][T16094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 711.148938][T16094] Call Trace: [ 711.148944][T16094] [ 711.148951][T16094] dump_stack_lvl+0x16c/0x1f0 [ 711.148972][T16094] should_fail_ex+0x512/0x640 [ 711.148993][T16094] ? kmem_cache_alloc_noprof+0x62/0x770 [ 711.149015][T16094] should_failslab+0xc2/0x120 [ 711.149038][T16094] kmem_cache_alloc_noprof+0x83/0x770 [ 711.149055][T16094] ? sk_prot_alloc+0x60/0x2a0 [ 711.149074][T16094] ? sk_prot_alloc+0x60/0x2a0 [ 711.149088][T16094] sk_prot_alloc+0x60/0x2a0 [ 711.149105][T16094] sk_alloc+0x36/0xe30 [ 711.149126][T16094] kcm_create+0xfc/0x690 [ 711.149159][T16094] __sock_create+0x339/0x8a0 [ 711.149181][T16094] __sys_socket+0x14d/0x260 [ 711.149200][T16094] ? __pfx___sys_socket+0x10/0x10 [ 711.149218][T16094] ? xfd_validate_state+0x61/0x180 [ 711.149233][T16094] ? __pfx_ksys_write+0x10/0x10 [ 711.149257][T16094] __x64_sys_socket+0x72/0xb0 [ 711.149274][T16094] ? lockdep_hardirqs_on+0x7c/0x110 [ 711.149289][T16094] do_syscall_64+0xcd/0xf80 [ 711.149305][T16094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.149321][T16094] RIP: 0033:0x7f3fa858f7c9 [ 711.149334][T16094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 711.149349][T16094] RSP: 002b:00007f3fa938a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 711.149364][T16094] RAX: ffffffffffffffda RBX: 00007f3fa87e5fa0 RCX: 00007f3fa858f7c9 [ 711.149375][T16094] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000029 [ 711.149383][T16094] RBP: 00007f3fa8613f91 R08: 0000000000000000 R09: 0000000000000000 [ 711.149392][T16094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 711.149401][T16094] R13: 00007f3fa87e6038 R14: 00007f3fa87e5fa0 R15: 00007ffeeb9ad8a8 [ 711.149420][T16094] [ 711.368484][T16094] openvswitch: netlink: nsh attribute has 14 unknown bytes. [ 711.390315][T16094] ima: policy update failed [ 711.515123][ T30] audit: type=1802 audit(4294967326.286:29): pid=16094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.9.2193" res=0 errno=0 [ 712.129250][T16116] random: crng reseeded on system resumption [ 712.476325][T16127] ima: policy update failed [ 712.504493][ T30] audit: type=1802 audit(4294967327.412:30): pid=16127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.2202" res=0 errno=0 [ 713.062232][T16139] cifs: Unknown parameter ';4.հhf[GL̺_,"̒ |TeVז+#L/V")WbH#' [ 713.618484][T16159] ima: policy update failed [ 713.624198][ T30] audit: type=1802 audit(4294967328.538:31): pid=16159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.2212" res=0 errno=0 [ 713.755509][T11203] Bluetooth: hci7: Malformed LE Event: 0x1b [ 715.185351][T16187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 715.305313][T16186] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 715.483329][T16195] ima: policy update failed [ 715.507128][ T30] audit: type=1802 audit(4294967330.429:32): pid=16195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.9.2221" res=0 errno=0 [ 716.645752][T16233] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 717.689110][T16245] FAULT_INJECTION: forcing a failure. [ 717.689110][T16245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.760455][T16245] CPU: 0 UID: 0 PID: 16245 Comm: syz.8.2232 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 717.760493][T16245] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 717.760502][T16245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 717.760510][T16245] Call Trace: [ 717.760516][T16245] [ 717.760521][T16245] dump_stack_lvl+0x16c/0x1f0 [ 717.760542][T16245] should_fail_ex+0x512/0x640 [ 717.760566][T16245] _copy_from_user+0x2e/0xd0 [ 717.760586][T16245] get_timespec64+0x8b/0x1b0 [ 717.760601][T16245] ? __pfx_get_timespec64+0x10/0x10 [ 717.760614][T16245] ? ktime_get+0x200/0x310 [ 717.760633][T16245] __x64_sys_futex+0x288/0x4c0 [ 717.760653][T16245] ? __pfx___x64_sys_futex+0x10/0x10 [ 717.760669][T16245] ? xfd_validate_state+0x61/0x180 [ 717.760689][T16245] do_syscall_64+0xcd/0xf80 [ 717.760706][T16245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.760721][T16245] RIP: 0033:0x7f8e2938f7c9 [ 717.760734][T16245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.760748][T16245] RSP: 002b:00007ffe671715b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 717.760762][T16245] RAX: ffffffffffffffda RBX: 00000000000aff63 RCX: 00007f8e2938f7c9 [ 717.760772][T16245] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8e295e5fac [ 717.760780][T16245] RBP: 0000000000000032 R08: 00007f8e2a277000 R09: 00000011671718af [ 717.760789][T16245] R10: 00007ffe671716b0 R11: 0000000000000246 R12: 00007f8e295e5fac [ 717.760798][T16245] R13: 00007ffe671716b0 R14: 00000000000aff95 R15: 00007ffe671716d0 [ 717.760817][T16245] [ 717.978680][T16233] kexec: Could not allocate control_code_buffer [ 718.174526][T16251] random: crng reseeded on system resumption [ 718.297491][T11203] Bluetooth: hci8: unexpected event 0x1c length: 725 > 5 [ 718.461915][T16246] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2232'. [ 718.554238][T16245] ima: policy update failed [ 718.610317][ T30] audit: type=1802 audit(4294967333.536:33): pid=16245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.2232" res=0 errno=0 [ 718.749961][T16259] can: request_module (can-proto-5) failed. [ 720.813821][T16304] hub 1-0:1.0: USB hub found [ 720.830411][T16304] hub 1-0:1.0: 1 port detected [ 721.532644][T16303] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 721.540384][T16303] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 721.547080][T16303] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 721.556214][T16303] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 721.565698][T16303] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 721.572442][T16303] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 721.579684][T16303] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 721.589422][T16303] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 721.595583][T16303] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 721.614457][T16303] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 721.624976][T16303] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 721.632418][T16303] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 721.640111][T16303] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 721.649635][T16303] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 721.655797][T16303] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 721.664377][T16303] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 721.674223][T16303] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 721.681414][T16303] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 721.689636][T16303] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 721.715790][T16303] ima: policy update failed [ 721.725003][ T30] audit: type=1802 audit(4294967336.684:34): pid=16303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.9.2246" res=0 errno=0 [ 722.312456][T16320] mkiss: ax0: crc mode is auto. [ 722.814169][T11203] Bluetooth: hci0: command 0x0c1a tx timeout [ 723.296811][T16335] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 723.607856][T11499] Bluetooth: hci4: command 0x0c1a tx timeout [ 723.614040][T11203] Bluetooth: hci5: command 0x0c1a tx timeout [ 723.620298][T11233] Bluetooth: hci1: command 0x040f tx timeout [ 723.626513][T11233] Bluetooth: hci2: command 0x0c1a tx timeout [ 723.633160][T11231] Bluetooth: hci3: command 0x0c1a tx timeout [ 723.678724][T16352] vhci_hcd vhci_hcd.0: invalid port number 16 [ 723.686677][T11233] Bluetooth: hci6: command 0x0c1a tx timeout [ 723.692805][T11208] Bluetooth: hci8: command 0x0c1a tx timeout [ 723.699439][T16351] Bluetooth: hci7: command 0x0c1a tx timeout [ 724.155003][T16363] netlink: 330 bytes leftover after parsing attributes in process `syz.7.2258'. [ 725.015955][T16373] hub 1-0:1.0: USB hub found [ 725.032663][T16373] hub 1-0:1.0: 1 port detected [ 725.069643][T16374] hub 1-0:1.0: USB hub found [ 725.089103][T16374] hub 1-0:1.0: 1 port detected [ 725.275875][T16376] ima: policy update failed [ 725.295069][ T30] audit: type=1802 audit(4294967340.274:35): pid=16376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.2261" res=0 errno=0 [ 725.679684][T11233] Bluetooth: hci1: command 0x040f tx timeout [ 725.685804][T11208] Bluetooth: hci5: command 0x0c1a tx timeout [ 725.691973][T16351] Bluetooth: hci2: command 0x0c1a tx timeout [ 725.757364][T11208] Bluetooth: hci6: command 0x0c1a tx timeout [ 725.764789][T11233] Bluetooth: hci8: command 0x0c1a tx timeout [ 725.771129][T16351] Bluetooth: hci7: command 0x0c1a tx timeout [ 725.951397][T16387] [U] [ 725.954616][T16387] [U] [ 725.957338][T16387] [U] [ 725.960122][T16387] [U] [ 726.128245][T11233] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 726.138203][T11233] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 726.146795][T11233] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 726.155566][T11233] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 726.165363][T11233] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 726.264548][T16387] [U] [ 726.267273][T16387] [U] [ 726.269956][T16387] [U] [ 726.272654][T16387] [U] [ 726.317684][T16403] random: crng reseeded on system resumption [ 726.354178][T16387] [U] [ 726.356990][T16387] [U] [ 726.359823][T16387] [U] [ 726.362585][T16387] [U] [ 726.453898][T16387] [U] [ 726.627198][T16400] chnl_net:caif_netlink_parms(): no params data found [ 726.852165][T16400] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.877801][T16400] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.903522][T16400] bridge_slave_0: entered allmulticast mode [ 726.926492][T16400] bridge_slave_0: entered promiscuous mode [ 726.959832][T16400] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.986584][T16400] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.015422][T16400] bridge_slave_1: entered allmulticast mode [ 727.037999][T16400] bridge_slave_1: entered promiscuous mode [ 727.134943][T16400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.182714][T16400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.280284][T16400] team0: Port device team_slave_0 added [ 727.319334][T16400] team0: Port device team_slave_1 added [ 727.406114][T16400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.438120][T16400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.528189][T16400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.566761][T16400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.595358][T16400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 727.702861][T16400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.744619][T11233] Bluetooth: hci5: command 0x0c1a tx timeout [ 727.766433][T16414] netlink: 342 bytes leftover after parsing attributes in process `syz.9.2269'. [ 727.823961][T11208] Bluetooth: hci6: command 0x0c1a tx timeout [ 727.831267][T16351] Bluetooth: hci8: command 0x0c1a tx timeout [ 727.837504][T11233] Bluetooth: hci7: command 0x0c1a tx timeout [ 727.861957][T16400] hsr_slave_0: entered promiscuous mode [ 727.881417][T16400] hsr_slave_1: entered promiscuous mode [ 727.895643][T16400] debugfs: 'hsr0' already exists in 'hsr' [ 727.908345][T16400] Cannot create hsr debugfs directory [ 728.224439][T11233] Bluetooth: hci9: command tx timeout [ 729.616033][T16400] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 729.723737][T16400] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 729.827405][T16400] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 729.942752][T16400] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 730.289622][T11233] Bluetooth: hci9: command tx timeout [ 730.408326][T16457] netlink: 2468 bytes leftover after parsing attributes in process `syz.9.2274'. [ 730.632275][T16400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.688878][T16400] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.700533][T11690] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.700605][T11690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.723068][T14199] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.723144][T14199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.227069][T16477] vhci_hcd vhci_hcd.0: invalid port number 16 [ 731.438218][T16400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.587483][T16400] veth0_vlan: entered promiscuous mode [ 731.628829][T16400] veth1_vlan: entered promiscuous mode [ 731.717178][T16400] veth0_macvtap: entered promiscuous mode [ 731.728870][T16400] veth1_macvtap: entered promiscuous mode [ 731.795001][T16400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 731.812397][T16400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.848038][T13800] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.848085][T13800] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.848110][T13800] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.848135][T13800] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.133752][T14928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.133783][T14928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.241900][T14190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 732.241920][T14190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.358486][T11233] Bluetooth: hci9: command tx timeout [ 733.078220][T16511] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 733.973380][T16503] kexec: Could not allocate control_code_buffer [ 734.390362][T16540] nfs: Unknown parameter 'w`_I+;' [ 734.439081][T11233] Bluetooth: hci9: command tx timeout [ 734.879441][T11208] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 734.900492][T11208] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 734.914852][T11208] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 734.936293][T11208] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 734.946247][T11208] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 735.715361][T16569] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input45 [ 735.850765][T16550] chnl_net:caif_netlink_parms(): no params data found [ 736.524839][T16550] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.562461][T16550] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.608628][T16550] bridge_slave_0: entered allmulticast mode [ 736.650366][T16550] bridge_slave_0: entered promiscuous mode [ 736.698401][T16550] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.738106][T16550] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.765780][T16550] bridge_slave_1: entered allmulticast mode [ 736.813565][T16550] bridge_slave_1: entered promiscuous mode [ 736.977632][T11208] Bluetooth: hci10: command tx timeout [ 737.043972][T16550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.108209][T16550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.153686][T16582] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 737.217068][T16582] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 737.263865][T16550] team0: Port device team_slave_0 added [ 737.271346][T16582] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 737.278952][T16582] page_type: f5(slab) [ 737.315299][T16550] team0: Port device team_slave_1 added [ 737.342041][T16582] raw: 00fff00000000040 ffff88813ff27140 dead000000000122 0000000000000000 [ 737.404382][T16582] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 737.458520][T16550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.472857][T16582] head: 00fff00000000040 ffff88813ff27140 dead000000000122 0000000000000000 [ 737.486909][T16556] ima: policy update failed [ 737.514054][T16582] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 737.524065][T16550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.552509][ T30] audit: type=1802 audit(4294967352.572:36): pid=16556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.9.2285" res=0 errno=0 [ 737.603130][T16582] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 737.603204][T16582] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 737.603215][T16582] page dumped because: unmovable page [ 737.603224][T16582] page_owner tracks the page as allocated [ 737.603242][T16582] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 14195, tgid 14195 (kworker/u11:26), ts 736696665515, free_ts 736621024739 [ 737.603273][T16582] post_alloc_hook+0x1af/0x220 [ 737.603293][T16582] get_page_from_freelist+0xd0b/0x31a0 [ 737.603310][T16582] __alloc_frozen_pages_noprof+0x25f/0x2430 [ 737.603328][T16582] alloc_pages_mpol+0x1fb/0x550 [ 737.603350][T16582] new_slab+0x2c3/0x430 [ 737.603364][T16582] ___slab_alloc+0xe18/0x1c90 [ 737.603378][T16582] __slab_alloc.constprop.0+0x63/0x110 [ 737.603393][T16582] __kmalloc_node_track_caller_noprof+0x4d6/0x930 [ 737.603414][T16582] kmalloc_reserve+0xef/0x2c0 [ 737.603430][T16582] __alloc_skb+0x186/0x410 [ 737.603449][T16582] nsim_dev_trap_report_work+0x2b1/0xcf0 [ 737.603468][T16582] process_one_work+0x9ba/0x1b20 [ 737.603485][T16582] worker_thread+0x6c8/0xf10 [ 737.603500][T16582] kthread+0x3c5/0x780 [ 737.603525][T16582] ret_from_fork+0x983/0xb10 [ 737.603541][T16582] ret_from_fork_asm+0x1a/0x30 [ 737.603564][T16582] page last free pid 5188 tgid 5188 stack trace: [ 737.603573][T16582] __free_frozen_pages+0x7df/0x1170 [ 737.603587][T16582] __put_partials+0x130/0x170 [ 737.603603][T16582] qlist_free_all+0x4c/0xf0 [ 737.603621][T16582] kasan_quarantine_reduce+0x195/0x1e0 [ 737.603640][T16582] __kasan_slab_alloc+0x69/0x90 [ 737.603661][T16582] kmem_cache_alloc_node_noprof+0x298/0x800 [ 737.603679][T16582] __alloc_skb+0x156/0x410 [ 737.603697][T16582] alloc_skb_with_frags+0xe0/0x860 [ 737.603711][T16582] sock_alloc_send_pskb+0x7f9/0x980 [ 737.603731][T16582] unix_dgram_sendmsg+0x3bc/0x1830 [ 737.603751][T16582] __sys_sendto+0x4a3/0x520 [ 737.603770][T16582] __x64_sys_sendto+0xe0/0x1c0 [ 737.603790][T16582] do_syscall_64+0xcd/0xf80 [ 737.603806][T16582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.733061][T16550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.739972][T16550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.739989][T16550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.740009][T16550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.042337][T16550] hsr_slave_0: entered promiscuous mode [ 738.051769][T16550] hsr_slave_1: entered promiscuous mode [ 738.052333][T16550] debugfs: 'hsr0' already exists in 'hsr' [ 738.052351][T16550] Cannot create hsr debugfs directory [ 739.040749][T11208] Bluetooth: hci10: command tx timeout [ 740.196614][T16550] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.326961][T16653] tipc: Enabling of bearer <@):^\/\> rejected, media not registered [ 740.509250][T16550] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.628163][T16550] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.755286][T16550] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.111244][T11208] Bluetooth: hci10: command tx timeout [ 741.343151][T16550] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 741.356297][T16550] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 741.381197][T16550] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 741.386885][T16550] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 741.682789][T16550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.723698][T16550] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.731646][T11690] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.731715][T11690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.778945][T13800] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.779016][T13800] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.307269][T16550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.538213][T16550] veth0_vlan: entered promiscuous mode [ 742.616327][T16550] veth1_vlan: entered promiscuous mode [ 742.981207][T16550] veth0_macvtap: entered promiscuous mode [ 743.165425][T16550] veth1_macvtap: entered promiscuous mode [ 743.178315][T11233] Bluetooth: hci10: command tx timeout [ 743.285124][T16708] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 743.348816][T16550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.395426][T16707] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 743.422796][T16550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.508555][T11806] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.557097][T11806] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.654952][T11208] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 743.724712][T11806] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.823332][T11806] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.876119][T16721] netlink: 'syz.3.2300': attribute type 1 has an invalid length. [ 744.468133][T14199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 744.517477][T14199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.134216][T11226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.181631][T11226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.485037][ T31] INFO: task syz-executor:5833 blocked for more than 142 seconds. [ 745.492989][ T31] Tainted: G U W L XTNJ syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 745.547596][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 745.587499][T16758] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 745.599396][ T31] task:syz-executor state:D stack:23512 pid:5833 tgid:5833 ppid:1 task_flags:0x400140 flags:0x00080002 [ 745.684336][ T31] Call Trace: [ 745.687651][ T31] [ 745.690578][ T31] ? __schedule+0x10b9/0x6150 [ 745.729513][ T31] __schedule+0x1139/0x6150 [ 745.773526][ T31] ? __lock_acquire+0x436/0x2890 [ 745.809118][ T31] ? __pfx___schedule+0x10/0x10 [ 745.945897][ T31] ? find_held_lock+0x2b/0x80 [ 745.979114][ T31] ? schedule+0x2d7/0x3a0 [ 746.031706][ T31] schedule+0xe7/0x3a0 [ 746.036010][ T31] schedule_preempt_disabled+0x13/0x30 [ 746.120765][ T31] __mutex_lock+0xc69/0x1ca0 [ 746.147551][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 746.187587][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 746.197238][ T31] ? net_generic+0xea/0x2a0 [ 746.212754][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 746.218088][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 746.250235][ T31] nfsd_umount+0x3b/0x60 [ 746.254576][ T31] deactivate_locked_super+0xc1/0x1a0 [ 746.260011][ T31] deactivate_super+0xde/0x100 [ 746.275274][ T31] cleanup_mnt+0x225/0x450 [ 746.279702][ T31] task_work_run+0x150/0x240 [ 746.304032][ T31] ? __pfx_task_work_run+0x10/0x10 [ 746.309224][ T31] exit_to_user_mode_loop+0xfb/0x540 [ 746.329944][ T31] do_syscall_64+0x4ee/0xf80 [ 746.334787][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.359613][ T31] RIP: 0033:0x7f06c9990af7 [ 746.364236][ T31] RSP: 002b:00007ffd9cff3ed8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 746.379907][ T31] RAX: 0000000000000000 RBX: 00007f06c9a13d7d RCX: 00007f06c9990af7 [ 746.387919][ T31] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd9cff5020 [ 746.423336][ T31] RBP: 00007ffd9cff500c R08: 0000000000000000 R09: 0000000000000000 [ 746.451292][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd9cff5020 [ 746.469232][ T31] R13: 00007f06c9a13d7d R14: 0000000000091e15 R15: 00007ffd9cff5060 [ 746.477482][ T31] [ 746.491095][ T31] [ 746.491095][ T31] Showing all locks held in the system: [ 746.644823][ T31] 2 locks held by kworker/0:0/9: [ 746.700073][ T31] #0: ffff88813ff55948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 746.755883][ T31] #1: ffffc900000e7c90 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 746.818398][ T31] 1 lock held by khungtaskd/31: [ 746.823525][ T31] #0: ffffffff8e3c94a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 746.927795][ T31] 2 locks held by kworker/0:3/981: [ 746.962193][ T31] #0: ffff88813ff55948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 747.039028][ T31] #1: ffff8880b8424608 (psi_seq){-.-.}-{0:0}, at: __schedule+0x19b1/0x6150 [ 747.105605][ T31] 2 locks held by getty/5588: [ 747.110321][ T31] #0: ffff88814e66c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 747.214876][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x1510 [ 747.274497][ T31] 2 locks held by syz-executor/5828: [ 747.279811][ T31] #0: ffff8880796360e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 747.352670][ T31] #1: ffffffff8e8010a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 747.373959][ T31] 2 locks held by syz-executor/5833: [ 747.379280][ T31] #0: ffff8880845e20e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 747.415996][ T31] #1: ffffffff8e8010a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 747.429151][ T31] 2 locks held by syz-executor/6821: [ 747.434833][ T31] #0: ffff888058a220e0 (&type->s_umount_key#51){+.+.}-{4:4}, at: deactivate_super+0xd6/0x100 [ 747.445497][ T31] #1: ffffffff8e8010a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 747.457070][ T31] 2 locks held by syz.2.1452/12539: [ 747.462283][ T31] #0: ffffffff901e0090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 747.479558][ T31] #1: ffffffff8e8010a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 747.490107][ T31] 2 locks held by kworker/u11:38/14929: [ 747.496086][ T31] #0: ffff88801cfd5948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x128d/0x1b20 [ 747.507047][ T31] #1: ffffc900041dfc90 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x914/0x1b20 [ 747.522889][ T31] 2 locks held by syz.5.1942/14954: [ 747.528345][ T31] #0: ffffffff901e0090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 747.537731][ T31] #1: ffffffff8e8010a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1ae0 [ 747.550832][ T31] 2 locks held by syz.6.1997/15182: [ 747.557358][ T31] #0: ffffffff901e0090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 747.566060][ T31] #1: ffffffff8e8010a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 747.579520][ T31] 1 lock held by syz.7.2041/15404: [ 747.586261][ T31] #0: ffffffff90139be8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 747.595773][ T31] 2 locks held by syz.8.2239/16273: [ 747.601039][ T31] #0: ffffffff901e0090 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 747.609803][ T31] #1: ffffffff8e8010a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xc4/0x7a0 [ 747.620221][ T31] 3 locks held by syz-executor/16400: [ 747.630140][ T31] #0: ffff888022b4cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xc0 [ 747.640586][ T31] #1: ffff888022b4c0c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3af/0x1260 [ 747.652189][ T31] #2: ffffffff903b6a08 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x290 [ 747.662904][ T31] 2 locks held by syz.3.2300/16719: [ 747.668135][ T31] #0: ffff888076dba488 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 747.681747][ T31] #1: ffffffff8e3d4bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 747.693440][ T31] 1 lock held by syz.9.2301/16724: [ 747.698571][ T31] #0: ffffffff8e3d4bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 747.708996][ T31] 4 locks held by syz.2.2284/16758: [ 747.715543][ T31] #0: ffff8880970a0ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xc0 [ 747.725688][ T31] #1: ffff8880970a00c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3af/0x1260 [ 747.740471][ T31] #2: ffffffff903b6a08 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x290 [ 747.751272][ T31] #3: ffff88805ca39b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x760 [ 747.878801][ T31] [ 747.909576][ T31] ============================================= [ 747.909576][ T31] [ 747.992523][ T31] NMI backtrace for cpu 0 [ 747.992543][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 747.992573][ T31] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 747.992581][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 747.992590][ T31] Call Trace: [ 747.992595][ T31] [ 747.992603][ T31] dump_stack_lvl+0x116/0x1f0 [ 747.992624][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 747.992645][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 747.992662][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 747.992684][ T31] sys_info+0x133/0x180 [ 747.992701][ T31] watchdog+0xe66/0x1180 [ 747.992727][ T31] ? rcu_is_watching+0x12/0xc0 [ 747.992748][ T31] ? __pfx_watchdog+0x10/0x10 [ 747.992768][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 747.992785][ T31] ? __kthread_parkme+0x19e/0x250 [ 747.992808][ T31] ? __pfx_watchdog+0x10/0x10 [ 747.992829][ T31] kthread+0x3c5/0x780 [ 747.992843][ T31] ? __pfx_kthread+0x10/0x10 [ 747.992859][ T31] ? rcu_is_watching+0x12/0xc0 [ 747.992878][ T31] ? __pfx_kthread+0x10/0x10 [ 747.992893][ T31] ret_from_fork+0x983/0xb10 [ 747.992908][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 747.992924][ T31] ? __switch_to+0x7af/0x10d0 [ 747.992944][ T31] ? __pfx_kthread+0x10/0x10 [ 747.992959][ T31] ret_from_fork_asm+0x1a/0x30 [ 747.992989][ T31] [ 748.473858][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 748.480827][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 748.491513][ T31] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 748.501829][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 748.511894][ T31] Call Trace: [ 748.515291][ T31] [ 748.518222][ T31] dump_stack_lvl+0x3d/0x1f0 [ 748.522817][ T31] vpanic+0x640/0x6f0 [ 748.526895][ T31] panic+0xca/0xd0 [ 748.530752][ T31] ? __pfx_panic+0x10/0x10 [ 748.535421][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 748.541420][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 748.547673][ T31] ? nmi_trigger_cpumask_backtrace+0x2be/0x300 [ 748.554052][ T31] ? watchdog+0xe83/0x1180 [ 748.558879][ T31] ? watchdog+0xe76/0x1180 [ 748.563399][ T31] watchdog+0xe94/0x1180 [ 748.568808][ T31] ? rcu_is_watching+0x12/0xc0 [ 748.573603][ T31] ? __pfx_watchdog+0x10/0x10 [ 748.578612][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 748.584005][ T31] ? __kthread_parkme+0x19e/0x250 [ 748.589045][ T31] ? __pfx_watchdog+0x10/0x10 [ 748.593985][ T31] kthread+0x3c5/0x780 [ 748.598067][ T31] ? __pfx_kthread+0x10/0x10 [ 748.603101][ T31] ? rcu_is_watching+0x12/0xc0 [ 748.607964][ T31] ? __pfx_kthread+0x10/0x10 [ 748.612646][ T31] ret_from_fork+0x983/0xb10 [ 748.617233][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 748.622516][ T31] ? __switch_to+0x7af/0x10d0 [ 748.627279][ T31] ? __pfx_kthread+0x10/0x10 [ 748.631869][ T31] ret_from_fork_asm+0x1a/0x30 [ 748.636763][ T31] [ 748.639939][ T31] Kernel Offset: disabled [ 748.644288][ T31] Rebooting in 86400 seconds..