last executing test programs: 2m44.762062796s ago: executing program 0 (id=1923): bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400001, 0x40eff, 0x602, 0xffffffffffff8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) keyctl$auto(0x1, 0x7, 0x100, 0x8, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x4d0000, 0xeb) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x5, 0x84) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x84040, 0x22, 0x12}, 0x18) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r2, 0x8008af83, r2) 2m43.690447512s ago: executing program 0 (id=1930): write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) write$auto(0xffffffffffffffff, 0x0, 0x98c7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000140)=@sco, 0x7) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r1, 0x0, 0x400100000001, 0x1ff) unshare$auto(0x40000080) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) ptrace$auto(0xfffffffffffffff0, 0x0, 0x4, 0x0) ptrace$auto(0x5, 0x0, 0xfffffffffffffffa, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) mmap$auto(0x1fd, 0x6, 0xfd5, 0x1e, r0, 0x0) writev$auto(0x3, &(0x7f0000004100)={0x0, 0x2000000b}, 0x3ff) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20540, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x2a, 0x1, 0x0) ioctl$auto(0x3, 0x5403, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfdef) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000)="b1a5e4e1492212f8340d35bce17107a8") unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80040, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 2m40.083780532s ago: executing program 0 (id=1941): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x400caed0, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_psample(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r4, 0x800, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) ioctl$auto_USBDEVFS_SUBMITURB32(r0, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) ioctl$auto(r0, 0x4004550d, r0) r5 = open(&(0x7f0000000000)='./file0\x00', 0xc2ec0, 0x1d4) execveat$auto(r5, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) 2m39.713249456s ago: executing program 0 (id=1942): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x1cb742, 0x0) uname$auto(&(0x7f0000000280)={"bc3215ea9cc9bfb035b0078f75fbb65f1c9845bbea45b70546128ea6d98fe2177cc83434ca4f6d1086be2472c04b4cbb06423582fb29209b505cf504b3d1332ecd", "068c2eeeda0840f0cb583edddf24c2bea0b8037d6ef729bd1f284aa2009cddef9428b464512919a4c4184f22e39e32099f67974645db915137d43121188d70233e", "e588812da16ad2658e0c55785546a44a9574ae851604081a08ea86a07ffa3b7dafae8b2474190914532a7e02d05004d2de94e937978ced838114358f2370c2c804", "d2881b76da748387350400000030f31693345f05008000b1c7ad91ead328a6fdb567b361806e79a289b496312f080005000000000000000000000000000400", "c186a8c13526707227bfa89d53a2c8f20ec796c7cb1caac5df8cd10f05a82d22b32298572fe7376db6e528d861a9e7b38cb54522b2a1448714f0f5eabba5a6b797", "c7c9d9dcf3583c3eea7928cd59178d9ba7d10865f07967266ba0cf8b6cdd40084f530252f99dfd795f86cb52ab3354421afc687cc6289cb3bee14a138742a3e5db"}) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/smbd_max_fragmented_recv_size\x00', 0xe0002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001cc0)='/dev/input/event1\x00', 0x40000, 0x0) ioctl$auto_EVIOCREVOKE(r1, 0x40044591, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = getpid() syz_clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[r2], 0x1}, 0x58) read$auto(r0, 0x0, 0x1f40) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0x100082) 2m38.972203961s ago: executing program 0 (id=1945): sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000004728a0cf526d7c33bbe2caa9f608d399a8c789117d68e85ecf863e0a7814c927e0519e677d5fb2570d16cec71d5917a58fb9c78bfac86399fe435d03812e540a93512f0954966b702a0035cb7dc9d20703a715e9f2"], 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0xc800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f00000003c0), 0x10d483, 0x0) io_uring_register$auto_IORING_REGISTER_ENABLE_RINGS(r2, 0xc, &(0x7f0000000440)="b9d11c7ecf8c5fef2cf99c8f5a1a9f94d3830dee3f5347a4b0fa9fcdc8f134a18fe67a3b68552ec4262031595a20567d8afba0d09b27d483e5a786cd64b97b2f6db1da34d10d2e0a26165759b96e2fc28d5cbcb36ae9644848a87f5ead4e5b2be1c852951cd0cffa5d2c513f5feef90ed239dd71d9cd1235fecc028973e577ce1509a5b42ff833230aed8630b8a0d29dc17a42ad2d5976c63f11ca4ccf02", 0xa479) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) listmount$auto(0x0, 0x0, 0x0, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) bpf$auto(0x5, 0x0, 0x1000) readv$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x5}, 0x3) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x200}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_IF1_SEQ={0x6, 0x6, 0xf}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x7}, @HSR_A_IF2_AGE={0x8, 0x4, 0x973}]}, 0x68}, 0x1, 0x0, 0x0, 0x18a64d47ddeca1f0}, 0x4040090) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x8) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00022dbd7000fbdbdf25030000000500ede7dc7c810ff3f90d8b000041030008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$auto_BPF_MAP_FREEZE(0x16, &(0x7f0000000300)=@bpf_attr_0={0xd, 0x8, 0x80000, 0x75be, 0x9, r0, 0x8, "0f2c11e205e51caf814aecebc6265729", 0x0, r0, 0x6, 0x80000000, 0x6, 0x80, 0xffffffffffffffff, r0}, 0x8) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3fc, 0x4}, 0xf3, 0x0, 0x0, 0x8) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000080)=0x21) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/amidi2\x00', 0x400000, 0x0) r5 = fanotify_init$auto(0x5, 0x1) fanotify_mark$auto(r5, 0x205, 0x100002, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m38.273458912s ago: executing program 0 (id=1949): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x16f, 0x6, 0xfffffffd) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) socket(0xa, 0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x19, 0xffffffffffffffff, 0x0) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1ff000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x1000000000000eb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) memfd_secret$auto(0xfffeffff) 2m23.14870466s ago: executing program 32 (id=1949): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x16f, 0x6, 0xfffffffd) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) socket(0xa, 0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x19, 0xffffffffffffffff, 0x0) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1ff000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x1000000000000eb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5) memfd_secret$auto(0xfffeffff) 2m7.505970419s ago: executing program 1 (id=2065): mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) (async) listmount$auto(0x0, 0x0, 0xf4240, 0x0) (async) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC1D1c\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(r0, 0xc1004111, 0x0) (async) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, 0x0) (async) setresuid$auto(0x0, 0x0, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) r1 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0) readv$auto(r1, &(0x7f00000018c0)={0x0, 0x1}, 0x9) (async) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dmmidi2\x00', 0x1, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x40100000001) (async) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) (async) prctl$auto_PR_SET_MM_START_STACK(0x80000000, 0x5, 0x0, 0x2, 0x1) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/anycast6\x00', 0x181500, 0x0) r5 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r6, 0x4, 0x7ff) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) ptrace$auto_PTRACE_GETFPREGS(0xe, r6, 0x8, 0xcc6) (async) sched_setattr$auto(r3, 0x0, 0x7b) pread64$auto(r4, 0x0, 0x1ff, 0x5) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) 2m7.373308003s ago: executing program 1 (id=2066): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) setreuid$auto(0x3, 0x7) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0xf5, 0x400008, 0xdf, 0x10, 0x2, 0x8000) mremap$auto(0x200000000000, 0xfffffffffffffbff, 0x4, 0x0, 0x11fffffff) keyctl$auto(0x5, 0xffffffffffffffff, 0x5, 0x5, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8947, &(0x7f0000000f00)={'pim6reg0\x00'}) fstatfs$auto(0x3, 0x0) close_range$auto(0x2, 0x8, 0x8) r3 = socket(0x10, 0x2, 0x4) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x400440, 0x0) r5 = seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000300)="dab63028a9a7b59bed79a41254eac4bac054f0094191b5c40b0b01430f3f82a2832c72a5d76e6e165e5c2f7d01bf5d92bcb58f56f6cd5a5ec891f34b68b83848c83f754aa2dea6cd44f2310afc7dcf017fec054bbafe5d1f734a82b0709befd0e8fc3e7f79a8095ff6b63b9cce348df1cc909598e79bd3c8026fab08848eaf22821359ac14d84cdc7438cd6bc07dd5a01339617c50edbd3a07c102cc6d493b80d84152924ae8812bee8bb0280fd97da258ba6c5b97cb4ac75a22d2112b059af0871411e4956167f9e714e360854813e9e8a38c7b47f0f3faf55e3a28e609465b86ccf595ea7ea2") syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000000c0), r5) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000000) write$auto(r4, &(0x7f0000000040)='S\x00\x00\x00\xfc\xff\xff\xff', 0x8587) dup2$auto(r3, r2) mmap$auto(0x1, 0x6, 0x7fffffffffffffff, 0x411, r0, 0x3) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) select$auto(0x2, &(0x7f0000000180)={[0x6fe2, 0xffffffffffffffff, 0xd7, 0x4b9, 0x400, 0x100000001, 0x80, 0x6, 0x4, 0x20000000000000, 0xb8, 0xf6c, 0x40, 0x9, 0x0, 0x74d]}, &(0x7f0000000400)={[0x3, 0xe, 0x4, 0xa, 0x7, 0x4, 0x9, 0x0, 0x3234, 0x10000400, 0x8000, 0x7fffffffffffffff, 0x5, 0x4, 0xfffffffffffffffc, 0x2]}, &(0x7f0000000280)={[0x8000000000000001, 0xda42, 0x8, 0x100000000000009, 0x2, 0x9, 0x1, 0x400, 0x6f1, 0x400, 0xa8c, 0x2, 0x6, 0xff, 0x7, 0x4]}, &(0x7f0000000000)={0x8b89, 0x88d4}) 2m7.08907092s ago: executing program 1 (id=2068): socket(0xa, 0x2, 0x88) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x80000a, 0x7, 0x3, 0x9, 0xec, 0x8000, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x100000, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3]}, 0x1fe, 0xd) r0 = socket(0x10, 0x2, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x382, 0x0) sendfile$auto(r1, r1, 0x0, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) getsockname$auto(0x3, &(0x7f00000002c0), &(0x7f0000000180)=0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) setsockopt$auto_SO_DOMAIN(r2, 0x4, 0x27, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/batadv_slave_0/proxy_ndp\x00', 0x5) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000480)={&(0x7f0000000240)="4c0c580000000000090000000000000007a4bac083077e", 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x11}, 0x5}, 0x2, 0x100) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0xfffffea7, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) 2m6.834108886s ago: executing program 1 (id=2070): mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) sysfs$auto(0x2, 0x4, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKRESETZONE(r0, 0x40101283, &(0x7f0000000040)={0x6000000, 0x2}) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r1, 0x8931, 0x24) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b49, 0x9) mmap$auto(0x0, 0x40006, 0xdf, 0x57c8772, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x18, 0x1, 0x0) mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) semctl$auto_SEM_INFO(0x0, 0xfffffffd, 0x13, 0x1) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r6, 0xc0105512, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r5, 0x10f, 0x87, 0x0, 0x14) ioctl$auto(r4, 0x2, 0x6) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) gettimeofday$auto(0xfffffffffffffffd, 0x0) close_range$auto(0x2, 0x8, 0x0) 2m5.085985852s ago: executing program 1 (id=2079): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3b3d2cbd7000fbdbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="0a000900aaaaaaaaaa110000"], 0x28}, 0x1, 0x100000001000000, 0x0, 0x2019}, 0x8080) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r4 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r4, 0x11, 0x67, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140), 0x55) socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_BATADV_CMD_GET_HARDIF(r0, 0x0, 0x4008000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/fs/ocfs2/dlm_recover_callback_support\x00', 0x880080, 0x0) r5 = socket(0xa, 0x2, 0x3a) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) bpf$auto(0x5, &(0x7f0000001080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) setsockopt$auto(r5, 0x29, 0x4e, &(0x7f0000000040)='!\x00', 0x1ff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="2f212cbd7000c9edd8fa6574a16208000300", @ANYRES32=r8], 0x2c}}, 0x4000000) 2m3.816982062s ago: executing program 1 (id=2083): mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b72, r0) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) r2 = fcntl$auto(r1, 0x400, 0x1) r3 = open(&(0x7f0000000800)='./file0\x00', 0x222b40, 0x144) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) unshare$auto(0x40000080) (rerun: 32) getrlimit$auto(0xffff, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 64) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) msgctl$auto_IPC_SET(0xeb1b, 0x1, 0x0) (async, rerun: 64) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) (async, rerun: 64) writev$auto(0xffffffffffffffff, 0x0, 0x8) (async) write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xcee0\xcd\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xe0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x101001, 0x0) (async) r5 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/ksm_merging_pages\x00', 0x181100, 0x0) read$auto_proc_single_file_operations_base(r5, &(0x7f0000000040)=""/137, 0x89) (async) ioctl$auto_UI_DEV_CREATE(r4, 0x5501, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) (async, rerun: 32) unshare$auto(0xffffffff80000001) (async, rerun: 32) ioctl$auto_SG_GET_TIMEOUT(r2, 0x2202, &(0x7f0000000100)="031906e0e34767bf91d59f558b193ecda9484f62cd46d418f92f0faf2766dac24004cf27c67885b87eb3a343116adf648046a297ef8cac2653f37744213b45c71bbfd0340c9300fad5fa161b1557031ea9f112bd25") (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0x2003f0, 0x15) (async) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r6, 0x0, 0xb4d3) 1m54.915901038s ago: executing program 3 (id=2107): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) semctl$auto(0x7, 0x2, 0x13, 0x3) socket(0xa, 0x1, 0xfffffeff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10, 0x0, [{0x484, 0x400, 0x9}]}) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x4b564d06, 0xe3, 0x100000007f}]}) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x80040, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x0, 0x2, 0x9, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x80802, 0x0) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x1e, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 1m54.334812505s ago: executing program 3 (id=2108): close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r1) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x23, 0x80805, 0x0) bind$auto(r0, &(0x7f0000000000)=@in={0x2, 0x4e21, @empty}, 0x3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/memory_tiering/memory_tier4/nodelist\x00', 0x22100, 0x0) setrlimit$auto(0x7, &(0x7f0000001380)={0x5, 0x6}) close_range$auto(0x2, 0xa, 0x0) r5 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r7, r6, 0x4, 0x1ff, r5, @relative_id=0x13, 0xe600}, 0xf) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000080)=""/247, 0xf7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000180), 0xc842, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1fd, 0x7, 0xd3e, 0x4000000000001, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x7, 0x4000000006d3f, 0xc, 0x20000002, 0xfffffffffffffffe]}, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x37, 0xa, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x7, 0x3, 0x800, 0x80000023, 0x200000000000007, 0x6d42, 0xc, 0x2495dae0, 0x6]}, 0x0) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x602, 0x1) r8 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) fanotify_mark$auto(0x0, 0x451, 0xa, r8, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) 1m54.147631727s ago: executing program 3 (id=2109): open_by_handle_at$auto(0x1, &(0x7f0000000040)={0x0, 0x2}, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000440)={0x8, 0x1, 0x401bf, 0x7352, 0x31, 0x65f, 0x1ffde, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x100000006, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x8, 0x200000, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x1ff, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) dup2$auto(0x0, 0x3) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'dvmrp0\x00'}) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0x3, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x8, 0x40000009, 0xffffffffffffffff, 0xfffffffffffffffd]}, 0x0) write$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/bridge_slave_0/ra_defrtr_metric\x00', 0x10000, 0x0) clone$auto(0x20083b46, 0x2, 0x0, 0x0, 0x1fffffffffffe) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/lockdep\x00', 0x2, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000240)=""/255, 0xff) mmap$auto(0x0, 0x5, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x0, 0x5, 0x0) inotify_init1$auto(0x800) io_uring_setup$auto(0x4, 0x0) socket(0x10, 0x3, 0x15) 1m53.071660337s ago: executing program 3 (id=2112): mmap$auto(0x0, 0x200004, 0x0, 0x40ebd, 0xffffffffffffffff, 0xa) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4188aea7, &(0x7f0000000040)={0x2, 0x0, [{0xffffffff, 0x8, 0x3}, {0x8, 0x4a, 0xb}, {0x9, 0x6, 0x6}, {0x0, 0x4, 0x7ff}, {0x9, 0x10000, 0x3ba}, {0x9, 0x81, 0x2}, {0x10000, 0x407, 0x8004}]}) (async) r2 = epoll_create$auto(0x4) (async) r3 = socket(0x2, 0x5, 0x0) (async) clone$auto(0xb74b, 0xfffffffe, &(0x7f00000003c0)=0x99, 0x0, 0xc) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) (async) epoll_ctl$auto(r3, 0x1, r3, 0x0) (async) r4 = epoll_create$auto(0x3e) epoll_ctl$auto(r4, 0x1, r2, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) (async) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0xad00, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x7, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b71, 0x2, 0xb817) (async) getsockopt$auto(0xffffffffffffffff, 0x9, 0x400, 0x0, 0x0) (async) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x801, 0x106) 1m52.689850951s ago: executing program 3 (id=2113): rseq$auto(&(0x7f0000000580)={0x5, 0x85, 0x9416, 0x1, 0x7, 0x6, "551e7285968d8e86"}, 0x6, 0x3, 0xff) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getpid() sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) (async) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) (async) prctl$auto(0x16, 0x2, 0x2, 0x4000000d, 0x100) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) mmap$auto(0x0, 0x40009, 0x7fffffff, 0x9b72, 0xffffffffffffffff, 0x100000000028000) (async) r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/vht_capa\x00', 0x842, 0x0) read$auto_mon_fops_binary_mon_bin(r0, &(0x7f0000000a80)=""/4096, 0x1000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x3c41, 0x0) getpid() gettid() (async) open(0x0, 0x581402, 0x2) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000100), 0x28000, 0x0) 1m51.680932841s ago: executing program 3 (id=2115): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x2) r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r0, &(0x7f0000008d40)='($}-)#@\x00', 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x10cc3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r1 = socket(0xf, 0xa, 0xf) setsockopt$auto(r1, 0x1, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x2) mmap$auto(0x0, 0x400005, 0x40df, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) r4 = openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0) ioctl$auto_XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f00000006c0)={r4, 0x0, 0x0, 0x0, 0xfffff38b, &(0x7f0000000600)="35ca3b758f9b8b16eb43972e8a660d8f5ad3f7f285a2009c84f7a36a560d62d2e295bf731397253d664e17accf80de5a724ff3d8535747bed725236fd487e0baa53649d5bcb37adf9a8546b1e7b8a06ac4969e4ea02135b546b6359474f5528984fc", &(0x7f0000000680)=0x6}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) select$auto(0x9, &(0x7f00000000c0)={[0xa4c7, 0x9, 0x1, 0x7, 0x9, 0x2, 0x0, 0x6, 0x0, 0x3, 0xdd2, 0xd, 0x9, 0x11, 0x4]}, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) shmctl$auto_SHM_STAT_ANY(0x7ff, 0xf, 0x0) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop3\x00', 0x40, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xfffffffffffffffb, 0x8) 1m48.359011883s ago: executing program 33 (id=2083): mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r0, 0x4b72, r0) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) r2 = fcntl$auto(r1, 0x400, 0x1) r3 = open(&(0x7f0000000800)='./file0\x00', 0x222b40, 0x144) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 32) unshare$auto(0x40000080) (rerun: 32) getrlimit$auto(0xffff, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 64) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) msgctl$auto_IPC_SET(0xeb1b, 0x1, 0x0) (async, rerun: 64) msgctl$auto_IPC_RMID(0x4, 0x0, 0x0) (async, rerun: 64) writev$auto(0xffffffffffffffff, 0x0, 0x8) (async) write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xcee0\xcd\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xe0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x101001, 0x0) (async) r5 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/ksm_merging_pages\x00', 0x181100, 0x0) read$auto_proc_single_file_operations_base(r5, &(0x7f0000000040)=""/137, 0x89) (async) ioctl$auto_UI_DEV_CREATE(r4, 0x5501, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) (async, rerun: 32) unshare$auto(0xffffffff80000001) (async, rerun: 32) ioctl$auto_SG_GET_TIMEOUT(r2, 0x2202, &(0x7f0000000100)="031906e0e34767bf91d59f558b193ecda9484f62cd46d418f92f0faf2766dac24004cf27c67885b87eb3a343116adf648046a297ef8cac2653f37744213b45c71bbfd0340c9300fad5fa161b1557031ea9f112bd25") (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0x2003f0, 0x15) (async) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r6, 0x0, 0xb4d3) 1m37.432269292s ago: executing program 5 (id=2145): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/bus/hid/drivers/asus/unbind\x00', 0x8000, 0x0) r2 = prctl$auto(0x10, 0x1, 0x0, 0x1, 0x400000000000) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) mmap$auto(0x0, 0x9644, 0xdf, 0x9b72, 0x2, 0x2d4a29c0) pivot_root$auto(0x0, 0x0) open(0x0, 0x7ffd, 0x12) kexec_load$auto(0x9, 0x0, 0x0, 0x1003e0000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x7f, 0x82020009, 0x3, 0xeb1, 0xffffffffffffffff, 0xfff) unshare$auto(0x40000080) r3 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$auto_NVRAM_SETCKS(r3, 0x7041, 0x0) r4 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000240), 0x80840, 0x0) lseek$auto(r0, 0x0, 0x2) readv$auto(r4, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1) r5 = socket(0x2, 0x2, 0x1) getsockopt$auto(r5, 0x1, 0x4, &(0x7f0000000040)='/dev/cec27\x00', 0x0) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r5) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="8800000014217b839f75ba52e387db83191e7c34462718f6bfa05d653f2c440e78d589112b12ceab7505ace665f29086545f7135af73e59f258cf8ba93c12efd9c315c161f894a21cc251200fe6c8c1bdded93298b7b890800000000000000e5cb9bcc4a1ec045b662b622fd91d270a45a3ac9aa75747891", @ANYRES16=r6, @ANYBLOB="02002dbd7000fddbdf250300000019001600b98b0fb98363bdc3006bee167c7ce53893abbf32b900000008000c000000030004000b0008001700ffffff7f04000e003d000200ee58d01da70df022c40226fbf7c5c7d098d8e2fb450c07badff16b8aea9d0ecc9996f2ccc9d16121797a8d27677a69bf239f587471dba0ca46000000"], 0x88}}, 0x41) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000280), 0x39ab41, 0x0) msgctl$auto_MSG_STAT_ANY(0x3, 0xd, &(0x7f00000003c0)={{0x7fff, 0xee00, 0xffffffffffffffff, 0xffdf, 0xa8, 0x80, 0x9}, 0x0, &(0x7f0000000380)=0x2, 0x5, 0x1, 0x3, 0x0, 0x8, 0x5, 0xfffc, 0x8c2, @raw=0x2, @raw=0x1}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x40, 0xfffffffffffffffe, 0x0, 0x2, 0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(r1, &(0x7f0000000200)='\'#\\\x00', 0x400) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f00000006c0)={0x208200700, 0x0, &(0x7f0000000480), &(0x7f00000004c0), {0x2c}, &(0x7f0000000500)=""/84, 0x54, &(0x7f0000000580)=""/248, &(0x7f0000000680)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x6, {r2}}, 0x58) 1m35.991856028s ago: executing program 34 (id=2115): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x2) r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r0, &(0x7f0000008d40)='($}-)#@\x00', 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x10cc3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x8, 0x3a02, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x9, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r1 = socket(0xf, 0xa, 0xf) setsockopt$auto(r1, 0x1, 0xc, 0x0, 0x7fffffff) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x2) mmap$auto(0x0, 0x400005, 0x40df, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) r4 = openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0) ioctl$auto_XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f00000006c0)={r4, 0x0, 0x0, 0x0, 0xfffff38b, &(0x7f0000000600)="35ca3b758f9b8b16eb43972e8a660d8f5ad3f7f285a2009c84f7a36a560d62d2e295bf731397253d664e17accf80de5a724ff3d8535747bed725236fd487e0baa53649d5bcb37adf9a8546b1e7b8a06ac4969e4ea02135b546b6359474f5528984fc", &(0x7f0000000680)=0x6}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) select$auto(0x9, &(0x7f00000000c0)={[0xa4c7, 0x9, 0x1, 0x7, 0x9, 0x2, 0x0, 0x6, 0x0, 0x3, 0xdd2, 0xd, 0x9, 0x11, 0x4]}, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) shmctl$auto_SHM_STAT_ANY(0x7ff, 0xf, 0x0) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop3\x00', 0x40, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x0, 0xfffffffffffffffb, 0x8) 1m35.802480234s ago: executing program 5 (id=2149): syz_clone(0x800, &(0x7f0000000040)="c543a277873528c2f124", 0xa, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)="132edfb55cd59403a2a8d6129707d4acc36be98f3637359396a16de98537e6446c4efe6f84cf26b485406dec2a4ade8815ac83a06bf39168989622e37e") r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000100)='/proc/devices\x00', 0x0, 0x0) r1 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim0/psample/enable\x00', 0x2, 0x0) write$auto_nsim_psample_enable_fops_psample(r1, &(0x7f0000000100)='O', 0x1) r2 = socketcall$auto_SYS_SOCKETPAIR(0x8, &(0x7f0000000000)=0x9) close_range$auto(r2, r0, 0x6) 1m35.646325509s ago: executing program 5 (id=2150): prctl$auto(0x3c8b, 0x200000001, 0x0, 0x1, 0x207) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = epoll_create$auto(0x4) epoll_pwait$auto(r0, 0x0, 0x800, 0x4d, 0x0, 0x8) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x400000000008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x10303f, 0x0) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000400)="e53e06d47f95951672eeb1c9463b3895e9a42e2e5bc743ac", 0x18) r2 = socket(0x23, 0x5, 0x0) bind$auto(r2, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x0, 0xa3}, 0x80) close_range$auto(0x2, 0xa, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r4 = ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) statx$auto(r4, 0x0, 0x80566c, 0x80000006, 0x0) madvise$auto(0x0, 0xfffffffffdff0002, 0x119) mlock$auto(0x112, 0x80006) ioctl$auto_SNAPSHOT_PREF_IMAGE_SIZE(r4, 0x3312, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x6b, 0x1, 0xffffffffffffffff, 0x200) madvise$auto(0x0, 0x200007, 0x19) 1m34.567558417s ago: executing program 5 (id=2152): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x8, 0x1, 0x101, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) socket(0xa, 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x4ea06, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r2, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x6) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r3, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r4) ioctl$auto_RTC_WKALM_SET(r1, 0x4028700f, &(0x7f00000001c0)={0x1, 0x5, {0x1, 0x9, 0x3, 0x1, 0xfffffff9, 0x25f9, 0x1, 0x0, 0xffff}}) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="08000100486600", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) setsockopt$auto_SO_RXQ_OVFL(r0, 0x42, 0x28, &(0x7f0000000040)='\\]\x00', 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129a00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x140242, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty44\x00', 0x20000, 0x0) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) read$auto(r9, 0x0, 0x20) writev$auto(r8, &(0x7f0000000200)={0x0, 0x10}, 0x3) 1m34.356300011s ago: executing program 5 (id=2154): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x400000, 0x0) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x4c5322, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x8}) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffff5fdffe00, &(0x7f0000000400)=';') openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/netfilter/nf_log/3\x00', 0xa2202, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x3550c1, 0xe8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2100, 0x0) io_uring_setup$auto(0x1, 0x0) io_uring_setup$auto(0x7, 0x0) openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim1/take_snapshot\x00', 0x2001, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/025/001\x00', 0x8a900, 0x0) socket(0x10, 0x2, 0xfffffffc) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/enable\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x109500, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) io_uring_setup$auto(0x85, 0x0) socketpair$auto(0x4004, 0x7, 0x4, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) read$auto(r0, 0x0, 0x7ff) 1m33.888007897s ago: executing program 5 (id=2156): readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x6c, 0x2020005, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000040)={0x8}) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/rfkill2/uevent\x00', 0x10b142, 0x0) r1 = socket(0x10, 0x802, 0x0) sendfile$auto(r1, r0, 0x0, 0x800) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r2, &(0x7f0000000180)="0a1b9a5c7d00006e163bb154d7886d8edeea371cadb848770dc8f745d1c76eedba12b9f694dabdbcf3401910000000000060000023b5d40a", 0x38) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) getrandom$auto(0x0, 0x6000000, 0x3) r3 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, 0x0, 0x189000, 0x0) readv$auto(r3, &(0x7f00000018c0)={0x0, 0x1}, 0x9) mbind$auto(0x0, 0xf, 0x4, 0x0, 0x7, 0x2) ioctl$auto_UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000200)={0x0, 0x7fffffff, {0x679, 0x27f, 0x81, {0x1, 0x4}, {0x4, 0x4ca2}, @constant={0x701, {0x8000, 0x7, 0x5, 0x5}}}, {0x400, 0x101, 0xf, {0x5, 0xf}, {0xe028, 0x1}, @condition=[{0xfffe, 0x5, 0x2, 0x9, 0x9, 0x7}, {0x81, 0xab5, 0x6, 0x5, 0xe994, 0x9}]}}) socket(0x2000000000000021, 0x2, 0x10000000000002) signalfd$auto(0xffffffffffffffff, 0x0, 0x8) read$auto(0x3, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x68, 0x0, 0x24000810}, 0xd0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x2, 0xa, 0x0) adjtimex$auto(&(0x7f0000000100)={0x5, 0x0, 0xc7e700000000000, 0xffff, 0x10001, 0xa74, 0x6, 0x0, 0x34625180, 0x5, 0x3, {0x4, 0x861}, 0x6, 0x5, 0x800, 0xdc7, 0x0, 0x10, 0x3, 0x8000000000000000, 0x401, 0x9, 0x9}) madvise$auto(0x110c230000, 0x1, 0x9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd1\x00', 0x80000, 0x0) 1m25.350037308s ago: executing program 4 (id=2179): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_ECHOREQ(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r1, 0x203, 0x70bd25, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8}, @GTPA_LINK={0x8, 0x1, 0x1}, @GTPA_VERSION={0x8, 0x2, 0xdcd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x80044944, 0x0) 1m25.168828533s ago: executing program 4 (id=2180): r0 = openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x128c1, 0x0) mmap$auto(0x0, 0x80000000, 0xdf, 0x20eb5, r0, 0x9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x3, 0x100) socket(0x2a, 0x2, 0x0) pipe$auto(&(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) statmount$auto(&(0x7f0000000000)={0x7e, @raw=0x400, 0x80000024, 0x7fff, 0x4}, 0x0, 0x7feffffff001, 0x4) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0xc805) io_uring_setup$auto(0xa, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_TASKSTATS_CMD_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010a2bbd7000fbdbdf25010000000e0004004e2d4e3a", @ANYRESHEX=r5], 0x24}, 0x1, 0x0, 0x0, 0xc800}, 0x2400c0d0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) timer_create$auto(0x3, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000003c0)={{}, {0x0, 0x97}}, 0x0) setitimer$auto(0x1, &(0x7f0000000000)={{0x2, 0x4}, {0x5, 0x6}}, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 1m24.753368458s ago: executing program 4 (id=2182): bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) mmap$auto(0x0, 0xa00006, 0x400001, 0x40eff, 0x602, 0xffffffffffff8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) keyctl$auto(0x1, 0x7, 0x100, 0x8, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$dir(0xffffffffffffff9c, 0x0, 0x4d0000, 0xeb) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x84) socket(0xa, 0x5, 0x84) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x84040, 0x22, 0x12}, 0x18) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(r2, 0x8008af83, r2) 1m23.763281728s ago: executing program 4 (id=2186): r0 = socket(0x11, 0xa, 0x9) bind$auto(r0, &(0x7f0000000140), 0x10) (async) socket(0x29, 0x2, 0x0) 1m23.550016633s ago: executing program 4 (id=2188): r0 = socket(0x1d, 0x3, 0x1) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="13002ebd7000dddbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="05003d00f0"], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) setsockopt$auto(r0, 0x65, 0x3, 0x0, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd6c00fbdbdf250200000008000300000000000800010047c7e2"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cpu.pressure\x00', 0x183142, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x9, 0x21e9, 0x7ff, 0x6, 0x2, 0xb, 0x2e, 0x0, 0x3}, 0x6f4) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) sendfile$auto(r4, r4, 0x0, 0xc01) 1m23.320577119s ago: executing program 4 (id=2189): mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) r0 = socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) socket(0x2, 0x5, 0x0) r1 = io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r2 = fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(r1, r2, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401bf, 0x7352, 0x3f, 0x1ff, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x5, 0x3000, 0x0, 0x6, 0x10002, 0x80, 0x400, 0x0, 0x7, 0x1ffc, 0x8203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x5, 0x0, [0xffffffffffffffff, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x952, 0x0, 0x4]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20048810}, 0x40000) mmap$auto(0x0, 0x2000b, 0xe2, 0xeb1, 0x405, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sg0\x00', 0x0, 0x0) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r5, 0x110, 0x4, 0x0, 0x4) ioctl$auto_BLKSECTGET2(r4, 0x1267, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) 1m18.498518909s ago: executing program 35 (id=2156): readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x6c, 0x2020005, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000040)={0x8}) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/rfkill2/uevent\x00', 0x10b142, 0x0) r1 = socket(0x10, 0x802, 0x0) sendfile$auto(r1, r0, 0x0, 0x800) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r2, &(0x7f0000000180)="0a1b9a5c7d00006e163bb154d7886d8edeea371cadb848770dc8f745d1c76eedba12b9f694dabdbcf3401910000000000060000023b5d40a", 0x38) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) getrandom$auto(0x0, 0x6000000, 0x3) r3 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, 0x0, 0x189000, 0x0) readv$auto(r3, &(0x7f00000018c0)={0x0, 0x1}, 0x9) mbind$auto(0x0, 0xf, 0x4, 0x0, 0x7, 0x2) ioctl$auto_UI_BEGIN_FF_UPLOAD(0xffffffffffffffff, 0xc06855c8, &(0x7f0000000200)={0x0, 0x7fffffff, {0x679, 0x27f, 0x81, {0x1, 0x4}, {0x4, 0x4ca2}, @constant={0x701, {0x8000, 0x7, 0x5, 0x5}}}, {0x400, 0x101, 0xf, {0x5, 0xf}, {0xe028, 0x1}, @condition=[{0xfffe, 0x5, 0x2, 0x9, 0x9, 0x7}, {0x81, 0xab5, 0x6, 0x5, 0xe994, 0x9}]}}) socket(0x2000000000000021, 0x2, 0x10000000000002) signalfd$auto(0xffffffffffffffff, 0x0, 0x8) read$auto(0x3, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x68, 0x0, 0x24000810}, 0xd0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x2, 0xa, 0x0) adjtimex$auto(&(0x7f0000000100)={0x5, 0x0, 0xc7e700000000000, 0xffff, 0x10001, 0xa74, 0x6, 0x0, 0x34625180, 0x5, 0x3, {0x4, 0x861}, 0x6, 0x5, 0x800, 0xdc7, 0x0, 0x10, 0x3, 0x8000000000000000, 0x401, 0x9, 0x9}) madvise$auto(0x110c230000, 0x1, 0x9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd1\x00', 0x80000, 0x0) 1m10.471472171s ago: executing program 2 (id=2222): close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x261c2, 0x84) socket(0x18, 0x3, 0x2) r0 = socket(0x18, 0x2, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x5, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_FLUSH_UEID(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0x80) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x40601, 0x0) write$auto(r2, &(0x7f00000002c0)='1\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) open(0x0, 0x261c2, 0x84) (async) socket(0x18, 0x3, 0x2) (async) socket(0x18, 0x2, 0x0) (async) close_range$auto(0x0, 0xffffffffffffffff, 0x2) (async) socket(0xa, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x18, 0x5, 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000007c0), 0xffffffffffffffff) (async) sendmsg$auto_SMC_NETLINK_FLUSH_UEID(r0, &(0x7f0000000880)={&(0x7f0000000780), 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0x80) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x40601, 0x0) (async) write$auto(r2, &(0x7f00000002c0)='1\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) (async) 1m10.233911378s ago: executing program 2 (id=2223): r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) setrlimit$auto(0x7, 0x0) ioctl$auto_TIOCGPTPEER2(r2, 0x5441, 0x0) ioctl$auto(r1, 0x4b4b, r0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setresuid$auto(0x0, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = getsockopt$auto(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) setuid$auto(0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, 0x0, 0x84000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x240007, 0x19) ioctl$auto_TCFLSH2(r1, 0x80045439, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) ioctl$auto(r1, 0x89f2, r1) socket(0x2, 0x80002, 0x73) connect$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x6) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) 1m8.89963268s ago: executing program 2 (id=2226): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/haltpoll/parameters/guest_halt_poll_shrink\x00', 0x24082, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0x8000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) openat$auto_ima_ascii_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000100), 0x4800, 0x0) openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci1/rfkill6/power\x00', 0x101280, 0x0) (async) r3 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci1/rfkill6/power\x00', 0x101280, 0x0) ioctl$auto_BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000001200)={@raw=0x9, "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"}) shmctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000180)={{0x3, 0x0, 0xffffffffffffffff, 0x5, 0x8, 0x401, 0x40}, 0x41f, 0xffffffffffffffff, 0xa9a, 0xffffffffffffffff, @raw=0x1, @inferred=0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0}) (async) shmctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000180)={{0x3, 0x0, 0xffffffffffffffff, 0x5, 0x8, 0x401, 0x40}, 0x41f, 0xffffffffffffffff, 0xa9a, 0xffffffffffffffff, @raw=0x1, @inferred=0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0}) ioctl$auto(0x3, 0xae41, r1) (async) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) 1m8.589648813s ago: executing program 2 (id=2228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000040), 0xffffffffffffffff) r2 = set_tid_address$auto(&(0x7f0000000080)=0x8) newfstatat$auto(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0xc, 0x2, 0xe00000000000, 0x567, 0xee00, 0xee00, 0x0, 0x8, 0x7fffffff, 0x9, 0x9, 0x4, 0x6, 0x4, 0x718, 0x9, 0x100000001}, 0x4) r4 = ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f00000001c0)) r5 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r0, &(0x7f0000000e80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000240)={0xbd4, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x171, 0x1, 0x0, 0x1, [@generic="c2174d6a94242b479a2f943515169b153d713609fab1df93804459fdd230eba87f6d06f1e7d62e19fdfeee9b53c0cbd88624976d11f7506799245860fee57ad147aed4491c2e817b8cb044725ed1bdf2896137545832f13eee875eb6790076f19df211db82ad57be86d3d37595ed02206d5ac6ec034168db3f81818bd6e6fc067f785dfe7367a3caa0ab925fe990a1c274e8fff9110e3406444d988c", @generic="b9dc9771a99c67caf85416d98e8ecbd3ab7279f40d32cf68308c0e6b661361ff77c88eb9216a7a2631497313fa139a1e52805fda0eab0646866249cffc15db7eb198bef7edd78ad7b0f0920b272419f12c432b94093095dd2220f4d80ff9ecc851a75bef0a9c057c891a178ce3c233df75da2e7dc21cba67eeef931beb6ef815b69f3859fc54ef08d08839ae7141f8b4560f9e6ecf3fbb83bd9b858cbf261b94c261a868d6e68e0268ff8c42dfff8436f416152b8f0944854aa50b920d8b73dc88c351495269e73c76aad3c2f2c0849af8"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1df, 0x1, 0x0, 0x1, [@typed={0x8, 0xa6, 0x0, 0x0, @u32=0xffffeee1}, @generic="212432a61893c930eb96bc800e750e90ef90b3e6445426b359a4bff0d76bb3a07fe0b7a8d4c71702d4d04cc0b00b0944983b69f046f7d75ef3f3a1a85efa24867b96d56f18bc28deca5faee7d314f6a78802be1e507888937d5b5d8fbfc118532381dd0f9af12bf008233ee5ba6bfad0541f7685f52ebef671f3fd97d319bb32b1f65ca980129208fd45fba5a14e5d645382d94ad877649e01cd67bc53786af96cff075cd1dab979353ec149a090842370dfd6743a6ef0b5ff70ac71abab3c5a7f84304e99f8b21daefe45c77820f90c647fbfb4348c1f793941a72426891afaf95b4403487b", @generic="d19522ac", @typed={0x4, 0xb}, @generic="b65cc653f06e3682955ed60dcd6b4f1f9785ba6a406027942079745df58d3e00fe6fc843e9e6d88242ae120f1dc067c909a6b15a6264ff934eebd649663ac2d078630a853faa58213759e07ec988a464799de47a093d13e25cd3712a493e889689dfa68214cd5257bcd62b09b37a60789eb0c5cc1d44d9934541c997b20ab966de74c5625246ed25bbcd61d7065e974ae14aecd361d7cfb15b061cf85996c4f4cfbc3f622de0905ed9ad6dfee2433a051128f059d6913482cb4c845c63db3accd4b0b87a0f6c525d8ee48e0f699839fc5297498920", @nested={0x8, 0xc5, 0x0, 0x1, [@nested={0x4, 0x9d}]}, @typed={0x8, 0x4e, 0x0, 0x0, @ipv4=@empty}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x96, 0x1, 0x0, 0x1, [@nested={0x8, 0x149, 0x0, 0x1, [@nested={0x4, 0x80}]}, @nested={0xc, 0x149, 0x0, 0x1, [@typed={0x5, 0x10c, 0x0, 0x0, @str='\x00'}]}, @typed={0x14, 0x74, 0x0, 0x0, @ipv6=@local}, @generic="608ad153949cb0a0017741f47731646af9fe5e43826b5aa7929ee427665318d87b4b9bc1162022d0dd12476a2eaa57b49626787059695922790a157aebfa8ae614191d907c74f20cf1951a1216576215c2aa77af2f53983ec484", @nested={0x8, 0x13a, 0x0, 0x1, [@typed={0x4, 0x140}]}, @typed={0x8, 0xd8, 0x0, 0x0, @fd}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x37c, 0x1, 0x0, 0x1, [@nested={0x109, 0x2a, 0x0, 0x1, [@typed={0x8, 0x2d, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x103, 0x0, 0x0, @uid=r3}, @generic="cf50d8e43a2156c5b233f1a1dc3cf075f1f4d1a2386f010606027648b6f05787a55fbce958b306eebb594041db64271d2598ac6153efbacb77f3e174865bdd6b6379501a328e26b5fd", @generic="b9761e642d8a8b25c9d358b4d7eafe565cf0cb0150af0867c2349942dad4cbd2d515ef1e60bb45ee1aa3031d01c7134304c8a13c6b21cdfb8425a9638b2175ed2a55deb5d7deea3e88923f1bd7ef7d0252a4644908683bfb5796c191b0d94301d3cb2d2e7c62401b082accc6ef29ec8704d91216969707f980f30bdf28a7185e904e10731198d03c5c74c91840042ab7f88aed65c1e15e25736bc4dac2c8ea1bcb8db880971b53deec1bd815"]}, @typed={0xc, 0x96, 0x0, 0x0, @u64=0x5}, @typed={0x75, 0x68, 0x0, 0x0, @binary="801a61ecb263405e5f912bfe4573e66f1bb2507a875cbaef1c63088dc826b01c03be09682a6291097b9822f63b06c1dec00e5f14a48175fd9cd1e294deba1431ed69386849813e585a45ca80a263a0146e1acbf70dcf346e38352ffb06bcfee9ad099c442ded4ce02b6a095b462b0334c0"}, @generic="9ae2b452c384e3be2f9c5993debab3b2af049eb8574344f959ef1fdd1a6911f9e2cac913e895e6b5f3ee818e30579b1ac52236f9", @nested={0x1a7, 0xca, 0x0, 0x1, [@generic="81d9d8b64e2f1e1cdb0d28acb36fe44ee8ffb8d682318b7857bf73a57215259bfd0af844252ac5ba703d333cdc9b8c0b387c781f6c82c2b12a6f07de3ef0a08809a066adb359a7bac248f5b6fbb6201dc6c6dde3e9ff2928640f4dc02a86fc8e8077a984b610370a472350229961a5628816ae9dbbab72daafbb275d76429c3b629f49730b7a88304bf8ad21bc5b76466b21bb7918db6af69f9d290a26be2fcd4c399c23dbd3a21a751d413fc3", @generic="dd95ebe55f6f04d86963dc86095274fe5002b5bc9a1bbeff38877bea407b1205462da2ddb772e4e49a486d8a7329d0133129447d0d17520ec60adc70c501c4e31b781c50581a4f36c95659032db10ae383f23ef81fe8727f603da89c9f3789b419a3a7d43a74d982a8fd8315d7094d9926c7eaf65e1470a74f473c75f717796ea46646f49bbbec566a4980350fa7c9ba879bbd9427974e89a0545b8fe21702b71ea1a7602ea66486e26960534749c7932e5f97193f5dc84268693a04b9b474625061d5cef722d411cc0f0e6bee261925f9a46a8d89d683878e0beb516bc61711e35d3347f418a6241ace33375ed7f30321efe989d28a"]}, @typed={0x9, 0x4e, 0x0, 0x0, @str='(:&!\x00'}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x454, 0x1, 0x0, 0x1, [@generic="8d3f1713cd0d20473dbc7e78dccc5f4c2bfc5f3d17e3e8da0b5df1e85f4e1c0292efc9cb8415deb2cca81e22866cd9be17aca43439fa13177fd94e42c759d30d8347500edc74edde396afc53a80519d5f8c8d0391a3d06dc288a926910321587b737c8860deb527e0a2ef0b704908569b04d6ed9e143818cfb2caa8eaa6de49ba11c4fd5c900b491a0020289f6c41ef9eeca775ac48391f757f6904cc33f940b1514c22b98b092e735194acbd51f01db0eac19de4f716d49a5faf8bcdd454e004cea077a3252a272c3d70f4b88aef795e9", @typed={0xc, 0xd6, 0x0, 0x0, @u64=0xe}, @nested={0x14b, 0x24, 0x0, 0x1, [@nested={0x4, 0x19}, @typed={0x8, 0x61, 0x0, 0x0, @ipv4=@multicast1}, @generic="05ad0818bd0855227f092f0481b34e30ac69bb493707a927c50c6ee758d5848305a35424385bdffeec460db8adf898d04f7bd6a77bc03dfb891bfddb6d302a178ffffcde49521b31bcaf938d99c40c2d76a39bd385ba53e18d94bf3843e33f606ba9b9dffd", @typed={0x4, 0x14e}, @generic="9a61da764f33bdfdbc9edc5446fac573c33e9fcfcd59b84df3f38abfea75095602c6968d02000edd2738cb926a69ce6c3c1721ec1d0fc5be777cdd932ebb7224673d5005c3924cf3d7b33d41b6e412478fcf355b91d135b9ed5f06eb6e5ed528035325cc4144c36dc259aa398c0522b5d2cd62cc78b512231a61181230513e1a2acea9052f88aa63ff0e70c659f55221468727006518c40e09703a92ef418fe42e6b5a9aca99c4318ddfb0af62dd2cc3f6f844ccbf4cd9a572ee2c26ae95e0388a3cd3583dcbba911bcf", @typed={0x8, 0x1f, 0x0, 0x0, @fd=r4}]}, @nested={0x155, 0x10f, 0x0, 0x1, [@nested={0x4, 0x7f}, @typed={0x8, 0x43, 0x0, 0x0, @fd=r5}, @nested={0x4, 0xb4}, @nested={0x4, 0x7c}, @generic="222cfa8e67c71c3d15b94fc35efb7b9ce4f3f44ee9732bfb183c81abcd4a324bf78e178bbfdfa5d5ce7fd3dfe8cf6052f7e330eb84305bd1e94b8d6109746522f322f11e9c2605c854651a4f3b865044b6c0e8e225f81065a40b4f7b63dd06703ff6387bc3e47ef917ada5096882363aa12192722e7b976b6681", @nested={0x4, 0x83}, @nested={0x4, 0x12b}, @generic="06a4a445c1b522615674ddd7b7e6a05069f233ea05ac2246a18f64fe6db896a3af24d68b06cf9bb0df9506324e715eef977e952ffe9721f4894cbf9ca0eaf5fadecccb8f9b3f05a85ab2b1bbc61fd48fb5fef3c888bad977c839b9868d7bafd5a0bed0121ac17db240104714d41fb4e9d64449c7ffe341677408b7eb32d24a067da8bf732fc0d54a261867061faf820d6b10ae3899f11010fce559688edaf39da3916c5c2826e295d4163682ffb8dee9a9c4dd", @nested={0x4, 0x27}, @nested={0x4, 0x14d}]}, @generic="dd21e8e3a91e502bd87c473e3f553071d1cbeae7c04d957eca7056ee04ffb05158c587b7b7a9b3a0f3da9fe3d6e06a877cd026d252566eea196735489fe85dd72005bd58f106607c804387dde66e4ab46901a3b05fa17467e8178bffd3d15ab2b995111df6112b940d0060cc190a2321255d46df60754eb87f4503695f36ce9f50baf8b649d4e6e0e5ee841303eb8e21d0cd7fa97925f020b367727d1bc5ceff24abe2a5747e93af435a37bf758686154bf9a9e14b44c819a2c0490ba82d102eb91fc61df71c9bb5d426d9e1159431"]}]}, 0xbd4}, 0x1, 0x0, 0x0, 0x854}, 0x2000004) ioctl$auto_USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000ec0)=0x8) write$auto_tracing_entries_fops_trace(r4, &(0x7f0000000f00)="47b9f008061ee52bfff1a5abd3b7209f8c61fa5cdb1f60d19a9de627902c1ccca6c3e5f83c0adca9beed96206159a29b25ab01495a41b04e02e270812135f7779f72b8be4bc1656862610f0a0c3395dc16897b8aba7a6a3cc13385dd5cfb6d02b20e2595fd7332c49a", 0x69) r6 = openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000f80), 0x563442, 0x0) setsockopt$auto_SO_RESERVE_MEM(r6, 0x2, 0x49, &(0x7f0000000fc0)='+%$d[\x00', 0x9) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001000), 0x44883, 0x0) sendmmsg$auto(r5, &(0x7f0000001280)={{&(0x7f0000001040)="6932da26c539f1d89cf01d9ec8540158d3521a6a4dbb8309106e1164f25b59a0b595cd4d5596408544f8bdc73ed84fa1217ee3fabc88bd6c4eced1b54cf5b5c2e4fa14ba090995777334730eaad7f15f7c6519d83fbf994b1e43da07ae5e1df38dd6498fff7f2b23cb532a4086234f1cb9f7fda1", 0x0, &(0x7f0000001140)={&(0x7f00000010c0)="c814a686e06a8eba2abc9587ba3d9405ae0ef58cae086bdeddba406ac39176ef997fd54fbf430c1e12ea5e7801ed6db43927ab9e46998cdafe08be82f86b32cd4028b09711b1a8fc6e712e88e7cda8c36bb96b281642c2b241"}, 0xfffffffffffffffd, &(0x7f0000001180)="a9c06ace425d97f3ff04da097f5d3ceaa3f0e445c61afdf9d0f2ce1b6c3a60db8941a9650f298c22705c239821b8a0ac28a761acdb85ea817e3b6266e2f7c2a2defb487a7b74a3d02e662e00a730807997ab617edaf4317395cd7c86ed5ee80808b8471c2b428a51d58e07ea794a137e56d7776798de86b1d09553084bbe10a89cac56b3895dd89cadeb0f48e70e9311581e74bfd68b8af0828206a9cedc3f24c015e3ccf1c8e0d91fadebf95575a1e2bb8aee8bc4597bae4b69b0d154d2db85ea1247879ca7d78a25ea188abe2bd6981984bc6d14cdcef92223652c", 0xc, 0x4}, 0x1}, 0x1, 0x7) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/sys/net/ipv6/conf/veth1_to_bridge/rpl_seg_enabled\x00', 0x100, 0x0) r8 = prctl$auto_PR_SCHED_CORE_SHARE_TO(0x9, 0x2, r2, 0x5, 0x9) openat$dir(0xffffffffffffff9c, &(0x7f0000001300)='./file0\x00', 0x200, 0x105) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001380), r0) sendmsg$auto_NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000001600)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0xd1c6a086882f8351}, 0xc, &(0x7f00000015c0)={&(0x7f00000013c0)={0x1d8, r9, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e23}, @NL80211_ATTR_TIMEOUT={0x8}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_TX_RATES={0x4b, 0x5a, 0x0, 0x1, [@generic="ad12de6ba287c428dea5730b005bcf83ae49c0dff96ffebe07bad16c895d16aeaad4f9e1af175a9cf77693f8203bcdaf225a1488c2b44e409ec3520720e8c61b652c9877a8b2b8"]}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x17}, @NL80211_ATTR_MESH_ID={0x1b, 0x18, "5b324dc87d8eb6c4585e67dc51dd9196b08555cfceb75f"}, @NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_AUTH_DATA={0xb4, 0x9c, "b746e692fc791f6c4788428cd23171be05ba88e1815612d6b00284b37030554ef849134104f3dcdb4733029dde030b724de1cca6e7971d3bede9ed6f0b078891c113785b3978d3737fd597e0e341ade1b1ef69bd63b05a85038af8635d579317c6ab4eec9debdc843cdf31f34f9504d776888d7ecf1a712234d19addedba29783642f1f9b232d541a0cb46705e0b817586da649baddb12859b22015cd340244eff31ce65502acfae3ee17807764fd6fc"}, @NL80211_ATTR_REKEY_DATA={0x76, 0x7a, 0x0, 0x1, [@generic="2bc296b0736fdd2bd7a6ed9d4576625f47d35cebedf576dc64f9847306747580863cc310cb55685ac724281ba42b0c7865bb1a13703eff3f915d67d6714358bc52f3c04d209f101a294a65ab5bab1accf7963060ac70792f578fd10c7c1404dd981e205b108e9e858bd4b4ab05e783ec7014"]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x10, 0x13, "c6d617dfcc9d338d7355cdc8"}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4040801}, 0x80) ioctl$auto_BLKROSET(r4, 0x125d, 0x0) r10 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000001680), r8) sendmsg$auto_IPVS_CMD_NEW_DEST(r4, &(0x7f0000003a40)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003a00)={&(0x7f00000016c0)={0x2340, r10, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xff, 0x3, 0x0, 0x1, [@typed={0x8, 0x134, 0x0, 0x0, @ipv4=@multicast1}, @generic="08ef2d1020359b521dbd0ba41f6b03d9361ff1e606ad70d2413185e5e017074a64a1b63e6068b596a8d664650b06e8637a22ce42aa899da80c12aa6b2407d4ac8fb7c3b3973155f6fa88056f33dc8145d7cf23fe779a181eaa3638158cac9050cb020494ca37be24f6d80eaf70ffe2c36fbb485c2bf1456e8a2e7647a9ef111f0905531ec10cf277f34159e72319e67917cff3b8b136ac9a54957b0093329538556edab074eea9f1858561a9ea65c247d0de7f0ff089a445dd8066652cc9ab78c6f33b9cc3013e88f5aef94c8d891ce7d227f6ad8bfaed77925e2b4fa1e326", @nested={0x14, 0x56, 0x0, 0x1, [@nested={0x4, 0xb2}, @typed={0x8, 0x98, 0x0, 0x0, @uid=r3}, @nested={0x4, 0x39}]}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@typed={0x4, 0xb4}, @typed={0x7, 0x7b, 0x0, 0x0, @str='[^\x00'}, @typed={0x8, 0x7f, 0x0, 0x0, @ipv4=@multicast1}, @generic]}, @IPVS_CMD_ATTR_SERVICE={0x220c, 0x1, 0x0, 0x1, [@generic="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", @nested={0xff, 0x7e, 0x0, 0x1, [@generic="a04c0ed6f3e2ee7408a5eb038101b5eb36b44c2f4900c353f5e8f124b7fd542661429f5c7c3ed4b00f49b395439b36fa10eba4f64deecd238ed46c0f9d9551ba77128be99cb5e40c8db5454209f43eaee67156a38b0f4f11566372f9adb86a96d12bd522ed74e3b43fe27a815f624075fe764e4df27f10224ec2732bed24dbd6a227605e29", @generic="e8a476c4c1f3261d8e66cc87766d45a42da0fb619260af3f08e8a83d5359d31707e092055bcefb81f2f6735d424b0c019d7773a3f0a8feff73c057821c3f6f30d331a76048fbcf7fcad316839a0eef417af009e7bb5e5ba409e2a54b17318e27a2741182a2e6ce9b952967e8f11bfe2b913684414723"]}, @nested={0x105e, 0x3c, 0x0, 0x1, [@nested={0x4, 0x48}, @generic="e6194cdd16ac81dfde0d96e431f632e2b18ce8f1e7fdec77636f18a921a951b3f9483ee7627eb9ff04607b1d809b602f694a77d52d7bc4947ada40c5ae5ba1e7c99f83caad5e501f31eb38cdcb5b7d1605ce00655d62", @generic="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"]}, @generic="c9ea4988aa2d1ccc28a2f59f93136d11616ef4246e45a5b13d21fb48f6e42db16b75e92352443628fe0c28913a10413bf5c78dc8eaa29f504f132e5487c86b254f483be60f7ad6f705c239e4cd089bedaf93b7e3d0744f49137510312ec3af273788ec80ecbce953fdd1be39d03cda2ded94c11cd734e1ba7941058c60306c0e820286221ff4693bee53f54130cc3b3f3a5f4187", @typed={0x14, 0xb8, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x2340}, 0x1, 0x0, 0x0, 0x20008048}, 0x40) ioctl$auto_USBDEVFS_RELEASEINTERFACE(r4, 0x80045510, &(0x7f0000003a80)=0x8) setsockopt$auto_SO_TIMESTAMP_OLD(r7, 0x8, 0x1d, &(0x7f0000003ac0)='[^\x00', 0xac) r11 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000003b40), r0) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(r4, &(0x7f0000003c00)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003b80)={0x14, r11, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r12 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000003c40), 0x414000, 0x0) ioctl$auto_XFS_IOC_EXCHANGE_RANGE(r8, 0x40285881, &(0x7f0000003c80)={r12, 0x0, 0x1, 0x0, 0x9, 0xffffffffffffffff}) bpf$auto_BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000003cc0)=@test={r5, 0x8, 0x2, 0x6, 0xfffffffffffffff8, 0x76f8, 0x2, 0x8, 0x1, 0x1, 0xffffffffffffffff, 0x7, 0x6092, 0x5, 0x7}, 0x1) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_THREADS_SET(r13, &(0x7f0000003ec0)={&(0x7f0000003d80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003e80)={&(0x7f0000003e00)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x9}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xce}, @NFSD_A_SERVER_SCOPE={0x2a, 0x4, '/sys/kernel/debug/hsr/hsr0/node_table\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 1m8.498904266s ago: executing program 2 (id=2229): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xb, 0x0) socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x200009}, 0x1}, 0x2, 0x0) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) write$auto(0x3, 0x0, 0x81) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0xb, 0x0) (async) socket(0x2, 0x5, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) (async) socket(0x2, 0x1, 0x84) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x200009}, 0x1}, 0x2, 0x0) (async) close_range$auto(0x0, 0xffffeffe, 0x2) (async) pipe$auto(0x0) (async) unshare$auto(0x40000080) (async) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) (async) write$auto(0x3, 0x0, 0x81) (async) close_range$auto(0x2, 0x8, 0x0) (async) 1m8.144960219s ago: executing program 36 (id=2189): mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) r0 = socket(0x2a, 0x2, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) socket(0x2, 0x5, 0x0) r1 = io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r2 = fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(r1, r2, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x7d4, 0x1, 0x401bf, 0x7352, 0x3f, 0x1ff, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x5, 0x3000, 0x0, 0x6, 0x10002, 0x80, 0x400, 0x0, 0x7, 0x1ffc, 0x8203, 0x400, 0x84, 0x0, 0x0, 0x0, 0x5, 0x0, [0xffffffffffffffff, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x952, 0x0, 0x4]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20048810}, 0x40000) mmap$auto(0x0, 0x2000b, 0xe2, 0xeb1, 0x405, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sg0\x00', 0x0, 0x0) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r5, 0x110, 0x4, 0x0, 0x4) ioctl$auto_BLKSECTGET2(r4, 0x1267, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) 1m7.481973773s ago: executing program 2 (id=2233): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x80000, 0x0) mmap$auto(0x8000000000000001, 0x2a, 0x2, 0x4009b72, r0, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/swaps\x00', 0x1a3000, 0x0) poll$auto(&(0x7f00000000c0)={r0, 0xfff, 0x9}, 0x1, 0x24) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x4}, @ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x810) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe}]}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x6c}}, 0x4000) pread64$auto(r2, 0x0, 0xa8, 0x4) unshare$auto(0x40000080) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) r8 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) writev$auto(r8, &(0x7f0000000140)={&(0x7f0000000040), 0x5}, 0x5) setsockopt$auto(0x3, 0x80, 0x7b, 0x0, 0x3ff) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) close_range$auto(0x2, 0xa, 0x0) 51.786748675s ago: executing program 37 (id=2233): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x80000, 0x0) mmap$auto(0x8000000000000001, 0x2a, 0x2, 0x4009b72, r0, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/swaps\x00', 0x1a3000, 0x0) poll$auto(&(0x7f00000000c0)={r0, 0xfff, 0x9}, 0x1, 0x24) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000001c0), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r6, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x4}, @ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x810) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xe}]}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x6c}}, 0x4000) pread64$auto(r2, 0x0, 0xa8, 0x4) unshare$auto(0x40000080) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) r8 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) writev$auto(r8, &(0x7f0000000140)={&(0x7f0000000040), 0x5}, 0x5) setsockopt$auto(0x3, 0x80, 0x7b, 0x0, 0x3ff) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) close_range$auto(0x2, 0xa, 0x0) 36.901625437s ago: executing program 8 (id=2318): read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/173, 0xad) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000001140)='/dev/midi2\x00', 0x248003, 0x0) prctl$auto(0x3e, 0x1000, 0x0, 0x7fffffffffffffff, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000100)=""/4096, 0x1000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @multicast1}, 0x54) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x8, 0x2, 0x1d30, 0x100, 0x400000004, 0x15f4da0e, 0x6, 0x9, 0x100000000000000c, 0x9, 0x4, 0x1040000fca, 0x9, 0x4, 0x4000000000000d]}, 0x0) socket(0x10, 0x1, 0x7) r2 = openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/hci1/force_suspend\x00', 0x121401, 0x0) write$auto_force_suspend_fops_hci_vhci(r2, 0x0, 0x0) mmap$auto(0x0, 0x8400008, 0xf, 0x810, r1, 0xfffffffffffffffa) mlockall$auto(0x7) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) futimesat$auto(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', &(0x7f0000001100)={0x7fffffffffffffff, 0x3}) madvise$auto(0x0, 0x2003f0, 0x15) socket(0x2c, 0x80003, 0x0) setsockopt$auto(0x3, 0x11b, 0x2, 0xffffffffffffffff, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) prctl$auto(0x400, 0x7fff, 0x0, 0xfffd, 0x100000000000007) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7f, 0x0) 34.949187992s ago: executing program 8 (id=2325): r0 = open(&(0x7f0000000080)='./cgroup/file0\x00', 0x8000, 0x149) ioctl$auto_BLKZEROOUT(r0, 0x127f, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyre\x00', 0x800, 0x0) ioctl$auto_TIOCMSET(r1, 0x5418, &(0x7f00000000c0)="353d6c296ab2829011f34b32cee61b9322a2229813b5cc4d4290a53e10239f0e0f06603a029e1c2ab4eca89f4e6026eb02f44a4dfb310e69240fc83a2cec8b4d3c15d7cb9dd24b68f5aa574872c489c2df0a4368d13591a2893b0ce01781a961249ee96c5910c45e3efa07f0104832855fa58e35e53f973689a3a93f7b95fc140078554682c852986999b8b684c73fb8806872efaba0fe17df04ca9da56471861787ee85655f27ca7d030759ff86de") 33.863746273s ago: executing program 8 (id=2327): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r3) pread64$auto(0xffffffffffffffff, 0x0, 0x1ff, 0x8800000000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x20000, 0x0) close_range$auto(0x2, 0x8, 0x0) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) timer_create$auto_CLOCK_TAI(0xb, &(0x7f0000000140)={@sival_int=0x812b, @raw=0x7ff, 0xfff, @_tid}, &(0x7f0000000180)=0x5) 31.636081307s ago: executing program 8 (id=2335): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @rand_addr=0x64010100}, 0x54) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setresuid$auto(0x0, 0x8, 0x0) r2 = setfsuid$auto(0x0) r3 = socket(0x9, 0x7, 0x0) getsockopt$auto(r3, 0x107, 0x1, 0x0, 0x0) setuid$auto(r2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$auto(r4, &(0x7f0000000840)={{&(0x7f0000000680)="e7e884b3f036108b32ee57ba95940d2c97b1e485013e6675a46cb717b9c643037183d6770bac65ede353a2fc4dc1883047f4c80df3bdadd0efb830b852ac06b3b4b15a4049c1d2314f5d052ed569015c362d1c862c89ed3d10980d3884476837643c9250d59feb", 0x2, &(0x7f00000002c0)={&(0x7f0000000700)="92bfafd0d84459353e5b51c03120d8d9b8e8d01c59e09cc757a5bace510c8ccb94222c48baefa32f0e8d916c3c5ad568aa8fa08b0256f6eab0348251aff0c31c2e", 0x1}, 0x2, &(0x7f0000000780)="7e0577f1ffe08a4a80345c5e2d7bcdc57e1978ccdd77f5b28fc49a1d1b150a1e8900960289170006f5986e282e47c3cd38801a548ec6e4ed8d642096b9e24f7231c1054c90b7695497620a0117d9a38c38e8f30ba121003c8d007e5d191664c2329da91be1828505851611a5e0c2f4ad9cd84487631bc9369c9c750269711df7552ffdcb56c93ff3a80498779c2094a264791ae29a10b2aeda3b4e3611bda8240154", 0x3, 0xa}, 0x5}, 0xa67, 0xa8, &(0x7f0000000880)={0xffffffffffffff7f, 0x8}) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000380), r0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r6, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40010) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01032cb57000fbe0df250a00000006000100170000e22bbf3fcf4040e070d0a6c62bafb8b3938f741015ce0156a21b6f4cb954cc6997af8bcebab6f9750e9de4e13ad295a4a40b1f972a575ed0c60d2ad237fefa6f70376eea9faf614cb39a850102438891c057f9f18c9354443f0a2193218d9aedd7c184f02435d6ba18f1a094965b6c8bbcefedd757427b0f12fa88b487dc3caa09810b3d9975fe78a4e6b21c8b1fe8c72d133fc060265d076309551060c8b03837140c0faf0f3677128a290423d1c01c5628538c8b96dbb99fa36cee4be947c9d7e920f9bc9a592f51a3ec86f2856daa583df930493ccc"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r4) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r6) r9 = fcntl$auto_F_GETOWN(r4, 0x9, 0x2) sendmsg$auto_NL80211_CMD_ABORT_SCAN(r7, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x19c, r8, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DATA={0x7, 0x7, "987774"}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [@typed={0x8, 0xff, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}}]}, @NL80211_ATTR_TX_RATES={0x174, 0x5a, 0x0, 0x1, [@generic="b5a406e3056aff8fd00e696f0b7aaeca4e6a28d7cc50a5acaf4ebb41e43f5384d3150e354df3847f67d44cbca3dfae5c9e914552003a9a16994dff3fe18c55938e574a9ceeebde24c63c9859872b7a0c9c79b9a946a2cef17de44de4", @nested={0x112, 0xc0, 0x0, 0x1, [@generic="9bd3bda8879c07049c51c4345bfcda00f2f13cfc7b970b199639e1fd8e284f2042cdb5eb7b0a5f5cda36fc50e5", @typed={0x8, 0xb7, 0x0, 0x0, @pid=r9}, @typed={0x8, 0x14c, 0x0, 0x0, @u32=0xfff}, @generic="2333dda8d62cc2460b9de469f826c38fe7c6060f1eb54ae26bbdf8d706f2752903656149a5b91ef5c1cbfa92526f8bf358b015e1c7d5b7dd4888767c0a35a28ccf87455e56eecc0505c27e36fd97119d48454bf47b86c01f721b8d48d840dd89c19cb657ec0fb8e5753897e97bd7cfd0447ecfa466fcc347cb42da109f35b27cc40a5d8bcd8108fba71106108ab905edd6c5cc", @typed={0x8, 0x5, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x14, 0x35, 0x0, 0x0, @ipv6=@private0}, @generic="ec10863b38c205a771e242090a24959c66be37ecc7a73ebb45c44fa5c72bc84a4da8"]}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) read$auto(0x3, 0x0, 0x8) getsockopt$auto_SO_GET_FILTER(r1, 0xa3, 0x1a, &(0x7f0000000000)='/dev/snd/controlC1\x00', &(0x7f0000000180)=0x7) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) 28.341855475s ago: executing program 8 (id=2346): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001080)='/dev/v4l-touch5\x00', 0x2400, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/fs/cifs/DebugData\x00', 0x2000, 0x0) pread64$auto(r1, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x10001, 0x3) ioctl$auto(r1, 0x2, r0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f00000010c0)=""/22, 0x16) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x103000, 0x0) mmap$auto_fb_fops_fb_chrdev(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x10, r2, 0x3) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r3, &(0x7f0000000040)='nbd\x00', 0x4) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r5) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x1c, r6, 0x400, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(0xffffffffffffffff, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c4}, 0x4000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r8, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x250300, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/rpc/auth.rpcsec.init/flush\x00', 0xb4300, 0x0) 27.676220339s ago: executing program 6 (id=2349): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) keyctl$auto(0x2000000000000017, 0x8000, 0x2d, 0xc4, 0x20803) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/firmware/acpi/hotplug/pci_root/enabled\x00', 0x8001, 0x0) write$auto(r0, 0x0, 0x7d) r1 = openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0) poll$auto(&(0x7f0000000000)={r1, 0x2, 0x4}, 0x2, 0x5) socket(0x2b, 0x1, 0x1) unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/neigh/macvlan1/app_solicit\x00', 0xd2000, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x2) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim1/fib/nexthop_bucket_activity\x00', 0x422140, 0x0) getdents$auto(r2, 0x0, 0xfff) 26.759861655s ago: executing program 8 (id=2351): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/fs/btrfs/features/send_stream_version\x00', 0x2800, 0x0) rseq$auto(&(0x7f0000000480)={0xe, 0x402, 0xfb84, 0x3, 0xffffffff, 0xb, "a43a6eca7886deab962823bcff733aaee86cf8e1fda3883c2a11f5a1966a497b5303c05e806e30dd6b67617b4303ea27bc25a2600801aaad1149f28486ab52e04459c0d8c81fdda1fed25231dfed783720b326fbc34f2abdb7ab2d3e73efc033ceba61c95969151eaf"}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) sysfs$auto(0x2, 0x2000000000040, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x0, 0x5, 0x0) r1 = socketpair$auto(0x1a, 0xa, 0x8000000000000000, 0x0) read$auto_drm_connector_fops_drm_debugfs(r1, &(0x7f0000000140)=""/151, 0x97) getpeername$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) setsockopt$auto(r0, 0xfffffffc, 0x80000025, 0x0, 0x6) socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$auto_TCSBRKP2(r0, 0x5425, &(0x7f00000000c0)="c60537ad1f7fef89d4140559e24b6d1a9fb8a62eb49f23b018a1f8fd2a01539fccd0c148def40869f13b514bdaf04a286e335ffb341378734483433531b350bf18bc405b86201c1f9a6f036a37fa258497acf8f128df588a662530e04744f4e0b520d5f2f4aba989c7cc0d4be70b89ad8a4fcc") socket(0x10, 0x2, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRES16=r3, @ANYRES8], 0x51}, 0x1, 0x0, 0x0, 0x2405c893}, 0x10004085) io_uring_setup$auto(0x3, 0x0) socket(0x9, 0x800, 0x81) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) 26.679526098s ago: executing program 6 (id=2352): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/pcmC0D0p\x00', 0x80000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION(r0, 0x80044100, 0x0) r1 = socket(0x2, 0x1, 0x0) setsockopt$auto(r1, 0x6, 0x1f, 0x0, 0x3d) 25.995070919s ago: executing program 6 (id=2354): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2b, 0x1, 0x0) listen$auto(r0, 0x1) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) mmap$auto(0x0, 0xfff, 0x8000000000df, 0x9b72, 0x400, 0x28000) init_module$auto(&(0x7f0000000100)="2d78acf21173ffd4b552a8a92b0fb4d2d045c41b24f60648e550929b228a71cb240f4ca8130f394c8a1ef9eb90124893a0e1317c785a9616474d538cd562cdaf4d6f62a86d94c9ae60160942bad85312de0c8eaa252362230724da03ce1a7a996c7b31798c5a84127937921e281088651df8", 0x6, &(0x7f0000000000)='/proc/self/smaps_rollup\x00') r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_l2cap_debugfs_fops_(r1, &(0x7f0000000240)=""/163, 0xa3) timer_create$auto(0x8, 0x0, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x7fff, 0x30d}, {0x0, 0x4}}, 0x0) rt_sigaction$auto(0x10, &(0x7f0000000580)={&(0x7f00000004c0)=0x0, 0x100000001, 0x0, {0x80000000007}}, 0x0, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r2, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c4}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/192, 0xc0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x1c1282, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000280)=""/65, 0x41) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x40000008000) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) 24.810019867s ago: executing program 6 (id=2359): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x29, 0x5, 0x0) poll$auto(&(0x7f0000000d40)={0x3, 0x500, 0xa}, 0x5, 0x400) ioctl$auto_UBI_IOCDET(r0, 0x40046f41, &(0x7f0000000000)=0x1) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r1 = waitid$auto(0xc6, r0, &(0x7f0000000040)={@_si_pad}, 0x8000, &(0x7f00000000c0)={{0x4, 0x9}, {0x1, 0x9}, 0x9, 0x7, 0x2, 0xa, 0xac, 0x7, 0x1000, 0xc2f, 0x1, 0x7e0, 0x4, 0xf93, 0x8, 0x9}) ptrace$auto(0x2, r1, 0x8, 0x5) mremap$auto(0x200000000000, 0x7, 0x3fd6, 0x3, 0x200000) 24.604005698s ago: executing program 6 (id=2360): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x11, 0x2, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/filter\x00', 0x40001, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x165840, 0x151) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x1aa, 0x0, 0x6, 0x0, 0x0, 0x1002}, 0x5}, 0x2, 0x100) bpf$auto(0xf7fff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x4, 0xfaae, 0x468, 0x9, 0x2, 0x8, 0x3, 0x4, 0x1ff, 0x5, 0xb5, 0x4, 0x806, 0xd9ee}, 0xa3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x200) ioctl$auto(r0, 0x8910, 0x24) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x2008000) socket$nl_generic(0x10, 0x3, 0x10) pipe$auto(0x0) vmsplice$auto(0x4, &(0x7f0000000080)={0x0, 0x80000000002}, 0x3, 0x4) read$auto(0x3, 0x0, 0x1f40) statmount$auto(0x0, &(0x7f0000000040)={0x1, 0x0, 0x36, 0x828, 0x9, 0x8000000000000000, 0x9f, 0x7, 0x9, 0x8, 0x4, 0x9, 0x3, 0x8, 0x8, 0x200000000000f, 0x100, 0x1, 0x10001, 0x2cf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}, 0xe3c, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b47, 0xffffffffffffffff) select$auto(0xb, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x10000000000007, 0x6, 0x6, 0x948b, 0x4, 0xfffffffffffffffe, 0x101, 0x2, 0xfffffffffffffffe, 0x80000000, 0x7fffffff, 0x6d39, 0x5, 0x3, 0x1]}, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='N\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 24.084756839s ago: executing program 6 (id=2362): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYBLOB="000426bd7000fcdbdf2508000000c63d9865e4ee33c582314f86116d291a288cc43d99762fb078e9b0945c103b165daee62c6c221b3f0e3e4918737b648462a3fa38d94b2994b9fc2b35ea765de19b038450d2d5d24b08990459c6fe514ce57880ebdda2340e7374257cae9d5aaf9795d99afc775417d1e10d48c658935cb8ee7e672696318b6fed0e951db60e9914621238d47f1c67c3118dc8308a7a09ab9ba21a6cf5e84205b745b01e2827b7ef9697a4eacf5cf5e54b3be9f341a75ac2280025728a5fe2cd3cd5ddffdf3e43deae0000"], 0xd8}, 0x1, 0x0, 0x0, 0x200040c0}, 0x0) r1 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r2 = socket(0x10, 0x4, 0xffffffc0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) r4 = socket(0x10, 0x2, 0xc) r5 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000280), r1) sendmsg$auto_OVS_METER_CMD_DEL(r2, &(0x7f0000000900)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)={0x44, r5, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@OVS_METER_ATTR_STATS={0x14, 0x3, {0x2, 0x5}}, @OVS_METER_ATTR_CLEAR={0x4}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0x3, 0xd}}, @OVS_METER_ATTR_CLEAR={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008054}, 0x40040040) r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="10002cbd7000fadbdf250a00000a00000200252f00e2a85c41e75a02715b2d0000005cdcdf28fffe65c31770799fdab838aaf6712a82e628c9e6429a4a38320b2d692863927bd744b4f7b409b29862d3257675d4fd09d74a831929b1005bdd28ef3fc5ae2884ef6a78fedbebbc656141771e57124268c37932c90ec99923926a97bb444f6903a41102463c79baf78c35827f46efb37be97277d81130bd43e31c60347610f3e65f3d60d3d1e231c0cc23ad56ff23565d95cfafc7a92a64da18c0c01c0600010006000000"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) write$auto(r3, &(0x7f00000006c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbbw\x8dSN\xb2#\xde\xf6\xfe\n_\x86\xccI{0 \xdb8Mh\x16 `\xc7\xe3\xf1\x9f-\xdd\x9a\xd2f\xca\xb3\x99\x81\xb0\xebt\xbc\xde\x0eH\x8db', 0x52) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xffffffffffffffff, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, 0xffffffffffffffff, 0x8003) unshare$auto(0x40000080) shmctl$auto(0x0, 0x1, 0x0) r7 = socket(0x2a, 0x2, 0x6) connect$auto(r7, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/bank2\x00', 0x0, 0x0) r8 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r8, 0x0, 0xffffff7f) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) 11.634238584s ago: executing program 38 (id=2351): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/fs/btrfs/features/send_stream_version\x00', 0x2800, 0x0) rseq$auto(&(0x7f0000000480)={0xe, 0x402, 0xfb84, 0x3, 0xffffffff, 0xb, "a43a6eca7886deab962823bcff733aaee86cf8e1fda3883c2a11f5a1966a497b5303c05e806e30dd6b67617b4303ea27bc25a2600801aaad1149f28486ab52e04459c0d8c81fdda1fed25231dfed783720b326fbc34f2abdb7ab2d3e73efc033ceba61c95969151eaf"}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) sysfs$auto(0x2, 0x2000000000040, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x0, 0x5, 0x0) r1 = socketpair$auto(0x1a, 0xa, 0x8000000000000000, 0x0) read$auto_drm_connector_fops_drm_debugfs(r1, &(0x7f0000000140)=""/151, 0x97) getpeername$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x4, 0xffffffffffffffff, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) setsockopt$auto(r0, 0xfffffffc, 0x80000025, 0x0, 0x6) socket(0x10, 0x2, 0xc) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$auto_TCSBRKP2(r0, 0x5425, &(0x7f00000000c0)="c60537ad1f7fef89d4140559e24b6d1a9fb8a62eb49f23b018a1f8fd2a01539fccd0c148def40869f13b514bdaf04a286e335ffb341378734483433531b350bf18bc405b86201c1f9a6f036a37fa258497acf8f128df588a662530e04744f4e0b520d5f2f4aba989c7cc0d4be70b89ad8a4fcc") socket(0x10, 0x2, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRES16=r3, @ANYRES8], 0x51}, 0x1, 0x0, 0x0, 0x2405c893}, 0x10004085) io_uring_setup$auto(0x3, 0x0) socket(0x9, 0x800, 0x81) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) 8.873899679s ago: executing program 7 (id=2400): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x50b880, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d7) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x4, 0x4, 0x15f4da0a, 0xffffffff, 0x3, 0xfffffffffffffff9, 0x208000001f, 0x2, 0x6d3c, 0x9, 0xffffffff, 0x6]}, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x109500, 0x0) pread64$auto(r2, 0x0, 0x8, 0xffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x0, 0x2, 0x8, 0xc, 0x66b, 0x4, 0x1}, 0x6f4) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/cmdline\x00', 0x481, 0x0) mmap$auto(0x0, 0x8, 0xdc, 0xeb1, 0x0, 0x8002) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04, 0x0) waitid$auto_P_ALL(0x0, 0x468e, 0x0, 0x20003, &(0x7f0000000340)={{0x8, 0x20000000000005}, {0xa, 0xffe}, 0xfffffffffffff801, 0x1af, 0xfffffffffffffffa, 0x2, 0x7, 0x5, 0x402, 0x2, 0xe6, 0x8, 0x7, 0x200006, 0x2, 0x8}) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/irq/3/smp_affinity_list\x00', 0x51403, 0x0) pread64$auto(r3, 0x0, 0x8, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f00000001c0)) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x100082) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 8.773805489s ago: executing program 39 (id=2362): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYBLOB="000426bd7000fcdbdf2508000000c63d9865e4ee33c582314f86116d291a288cc43d99762fb078e9b0945c103b165daee62c6c221b3f0e3e4918737b648462a3fa38d94b2994b9fc2b35ea765de19b038450d2d5d24b08990459c6fe514ce57880ebdda2340e7374257cae9d5aaf9795d99afc775417d1e10d48c658935cb8ee7e672696318b6fed0e951db60e9914621238d47f1c67c3118dc8308a7a09ab9ba21a6cf5e84205b745b01e2827b7ef9697a4eacf5cf5e54b3be9f341a75ac2280025728a5fe2cd3cd5ddffdf3e43deae0000"], 0xd8}, 0x1, 0x0, 0x0, 0x200040c0}, 0x0) r1 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) r2 = socket(0x10, 0x4, 0xffffffc0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x406, 0x0, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x4000000000005, 0x6, 0x62, 0x8, 0x7, 0x1, 0xb, 0x100, 0x18]}, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) r4 = socket(0x10, 0x2, 0xc) r5 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000280), r1) sendmsg$auto_OVS_METER_CMD_DEL(r2, &(0x7f0000000900)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)={0x44, r5, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@OVS_METER_ATTR_STATS={0x14, 0x3, {0x2, 0x5}}, @OVS_METER_ATTR_CLEAR={0x4}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0x3, 0xd}}, @OVS_METER_ATTR_CLEAR={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008054}, 0x40040040) r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="24000000e410935c87e8ac3b11918970e4ade8dfa7f24d63c351c72aa10c1c4ab4e47fcfde47b4868cbb0329241986fd76612168e8869193da2ecd728a68d66c6036e4ac9c7356ee97167474e7ad9a5ed7c7c2d43f87b909cee6be88cef7ddbc3809c75fc42a9b88aa1d4d4e5612521bd582e297115e2aef615922ba68c2a64b271ac5737f95a70baf86a22e2fdaa93c80d426c72c5d5e8f07e65fe5418bb8b7537bec75bc32d3c689c9f9dd09c1bde09ac2a98d06379ac566661457aa16b101000000631e27427ccef306f33e70b4ee92ee9213afec50fc4c6ddfb2bf48a4f95958af2a8414aa16fe30c46ba333112e813a9af12cf64de7efcd868a8e8669f039ffbc47ef08403a2fee6b3de363", @ANYRES16=r6, @ANYBLOB="10002cbd7000fadbdf250a00000a00000200252f00e2a85c41e75a02715b2d0000005cdcdf28fffe65c31770799fdab838aaf6712a82e628c9e6429a4a38320b2d692863927bd744b4f7b409b29862d3257675d4fd09d74a831929b1005bdd28ef3fc5ae2884ef6a78fedbebbc656141771e57124268c37932c90ec99923926a97bb444f6903a41102463c79baf78c35827f46efb37be97277d81130bd43e31c60347610f3e65f3d60d3d1e231c0cc23ad56ff23565d95cfafc7a92a64da18c0c01c0600010006000000"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) write$auto(r3, &(0x7f00000006c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbbw\x8dSN\xb2#\xde\xf6\xfe\n_\x86\xccI{0 \xdb8Mh\x16 `\xc7\xe3\xf1\x9f-\xdd\x9a\xd2f\xca\xb3\x99\x81\xb0\xebt\xbc\xde\x0eH\x8db', 0x52) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x4, 0x15) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xffffffffffffffff, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3) mmap$auto(0x5, 0x4020008, 0x1001, 0xeb1, 0xffffffffffffffff, 0x8003) unshare$auto(0x40000080) shmctl$auto(0x0, 0x1, 0x0) r7 = socket(0x2a, 0x2, 0x6) connect$auto(r7, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/bank2\x00', 0x0, 0x0) r8 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r8, 0x0, 0xffffff7f) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) 6.607678673s ago: executing program 7 (id=2407): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="810b25bd7080fbdbdf250100"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x6}, 0x803}, 0x10a, 0x6, 0x0) (async) recvmmsg$auto(r2, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x5, 0x6}, 0x803}, 0x10a, 0x6, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) (async) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x101000, 0x0) listen$auto(r5, 0x5) (async) listen$auto(r5, 0x5) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/misc/userfaultfd/power/control\x00', 0x668000, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/misc/userfaultfd/power/control\x00', 0x668000, 0x0) socket(0x2, 0x1, 0x106) (async) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/usbcore/parameters/quirks\x00', 0xc0202, 0x0) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r6, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) (async) write$auto(0x3, 0x0, 0xfdef) shutdown$auto(0xffffffffffffffff, 0x2) (async) shutdown$auto(0xffffffffffffffff, 0x2) read$auto_rng_chrdev_ops_core(r1, 0x0, 0x0) (async) read$auto_rng_chrdev_ops_core(r1, 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x3ff, 0x0) r7 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec22\x00', 0x28000, 0x0) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r0, 0xfffffffc, &(0x7f00000001c0)='/sys/devices/virtual/misc/userfaultfd/power/control\x00', 0x0, 0x4) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, 0x0) setfsgid$auto(0xee00) 5.29046442s ago: executing program 7 (id=2409): socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) prctl$auto_PR_SET_SHADOW_STACK_STATUS(0x4b, 0x3, 0x6, 0x9, 0xfffffffffffffffc) ioctl$auto(0x3, 0xc0045540, 0xb551) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xe983, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r0, r0, 0x4) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi2\x00', 0xa200, 0x0) ioctl$auto(r1, 0xc0585611, r1) open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0x6) kill$auto(0x0, 0x11) mq_open$auto(0x0, 0x61df, 0xb9fb, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001480)='/sys/kernel/irq/12/hwirq\x00', 0x900, 0x0) read$auto(r2, 0x0, 0x380000000000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x800) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) getsockopt$auto(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty26\x00', 0x40002, 0x300) openat$auto_fops_u64_ro_(0xffffffffffffff9c, 0x0, 0x1202, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x73) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x20b42, 0x0) fadvise64$auto(r4, 0x7, 0x3, 0x4) write$auto(0x3, 0x0, 0x100082) 4.071078305s ago: executing program 9 (id=2413): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x200000000202000c, 0x4, 0xeb1, r0, 0x8080) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, 0x0, 0x0) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop13\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) timer_create$auto(0x0, 0x0, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000dd, 0x40eb1, r2, 0x300000000000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000b6625eae6b008e49ba740240d51780cfc532f2fd77259c66b25a2303d245efc597dadd7097daaa9325ec4214f2b5e5c335024d48566d78f71f2123601fb01a6bb8380007cfbfdd81e9904c", @ANYRES16=0x0, @ANYBLOB="000028bd7000fcdbdf256d00000007000a00107c4c000404d1000600b400030000000500020000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) acct$auto(0x0) mlockall$auto(0x2040007) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x14b402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x80802, 0x0) setsockopt$auto(0xffffffffffffffff, 0x14, 0x1, 0x0, 0x2) read$auto(r4, &(0x7f0000000240)='/proc/scsi/sg\x00\x00\x00\x00ices\x00\r\xe2\xc9\x04\x986\xbc\xb0FI\xb9-E\xe3\x87j\xdes1\xa7\xdf\xc4\b\xb3\xeelc\x7f\xfdg\x18*\a:_\xb0\x92\xacwH\x9c\x9dF\xb1\xc47\x85\xc7\x13\xe1\x19UR\x96\xd8\x86\xd3\xe4\xa9R\x1c\xeb\xc8\xe5X\xfcR\xc7\vdU\x8b\xaa^\xfd\x83#\xc1o\x04\xeca\xbf\x8bYz\xd9\r\xcbk\xfd\x9e\x97\xcbOf\x80', 0xffffffff) 3.948221968s ago: executing program 7 (id=2414): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) madvise$auto(0x9, 0x2003f0, 0x15) write$auto(r0, 0x0, 0x4000000000) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80000, 0x0) capget$auto(0x0, 0xfffffffffffffffe) ioctl$auto_BLKPBSZGET(0xffffffffffffffff, 0x127b, 0x0) write$auto(0xca, &(0x7f0000000180)='\x04\x02\x00\r\xfb\xff\xf6\xdd\x90\x806\xc8\xbe\x94\xf2\xa2', 0x2d9) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x141241, 0x0) mmap$auto(0x0, 0x40009, 0x9, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) lseek$auto(r1, 0xffffffffffffffff, 0x1) connect$auto(0x3, 0x0, 0x54) r2 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x40c01, 0x100) sendfile$auto(r2, r2, 0x0, 0x1) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 2.397968515s ago: executing program 7 (id=2415): unshare$auto(0x40000080) mmap$auto(0x0, 0x4000010, 0x2, 0x12, 0xffffffffffffffff, 0x5) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000001bc0)="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", 0xd4f) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setuid$auto(0xe) setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0xa) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) ioctl$auto_IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) shmctl$auto(0x0, 0xd, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x801, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001680), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="110325bd7000fedbdf2501"], 0x14}}, 0x10040) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), r4) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1) swapon$auto(&(0x7f0000000080)='nfsd\x00', 0x6) 1.128642551s ago: executing program 9 (id=2416): r0 = epoll_create1$auto(0x75d) r1 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_KBPS={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x8811) r2 = semctl$auto_GETPID(0x8, 0x4, 0xb, 0x2fc1) r3 = waitid$auto_P_PID(0x1, r2, &(0x7f0000000140)={@_si_pad}, 0x5, &(0x7f00000001c0)={{0x8, 0x9}, {0x9, 0x3}, 0x8, 0x5, 0x9, 0x6, 0x4, 0x3bdadb7e, 0x43, 0x12000000, 0x8, 0x0, 0x3b, 0xfffffffffffffbff, 0x0, 0x8}) ioprio_set$auto_IOPRIO_WHO_PROCESS(0x1, r3, 0x9) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), r0) sendmsg$auto_NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r4, 0xede83e894742441e, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000003c0), r0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000400)=""/233, 0xe9) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000540), r0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x7c, r5, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x8}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x6}, @ETHTOOL_A_PAUSE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffff696d}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0xb4}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x3}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x8001) r6 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000680)='/dev/bus/usb/036/001\x00', 0x100002, 0x0) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/bus/usb/005/001\x00', 0x10000, 0x0) ioctl$auto_USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000740)={0x4, 0xf, 0x9, 0x8, 0x9, 0x8, &(0x7f0000000700)="70e566e906a76930f61ff8a53b77f2797da7fc0387279685f14d20162c054ee133d555d9e1286fb8d9594a32aa351cbcd30df6b9d30dd2909dc1"}) r8 = io_uring_setup$auto(0x400000, &(0x7f0000000780)={0x8000, 0x80, 0x7, 0x8, 0x6, 0x3, r0, [0x800, 0x3, 0x2], {0xb, 0x3, 0x1, 0x1000, 0x4, 0x400, 0x9, 0x0, 0x9}, {0x7, 0x3, 0x5, 0x7, 0x800, 0x6, 0x7, 0x5, 0xa0a8}}) ioctl$auto(r6, 0x6, r7) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000800)='/dev/snd/pcmC0D0p\x00', 0x8000, 0x0) syz_clone3(&(0x7f0000001a80)={0xb0000000, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)=0x0, {0x2b}, &(0x7f0000000940)=""/241, 0xf1, &(0x7f0000000a40)=""/4096, &(0x7f0000001a40)=[r2, r2], 0x2, {r9}}, 0x58) sendmsg$auto_TASKSTATS_CMD_GET(r9, &(0x7f0000001c00)={&(0x7f0000000840), 0xc, &(0x7f0000001bc0)={&(0x7f0000001b00)={0xa4, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@TASKSTATS_CMD_ATTR_TGID={0x8, 0x2, r2}, @TASKSTATS_CMD_ATTR_TGID={0x8, 0x2, r10}, @TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK={0x4}, @TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK={0x5, 0x4, '['}, @TASKSTATS_CMD_ATTR_REGISTER_CPUMASK={0xc, 0x3, 'ethtool\x00'}, @TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK={0xc, 0x4, '/}$#@!^\xe8'}, @TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK={0x19, 0x4, '/dev/bus/usb/036/001\x00'}, @TASKSTATS_CMD_ATTR_REGISTER_CPUMASK={0x19, 0x3, '/dev/bus/usb/005/001\x00'}, @TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK={0x19, 0x4, '/dev/bus/usb/005/001\x00'}, @TASKSTATS_CMD_ATTR_TGID={0x8, 0x2, r3}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004804) ioctl$auto_IOCTL_STATUS_ACCEL_DEV(r0, 0x40046103, &(0x7f0000001c40)=0xfffffff8) r11 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001cc0), r9) sendmsg$auto_SMC_PNETID_GET(r8, &(0x7f0000001dc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x68, r11, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x16, 0x3, '/dev/snd/pcmC0D0p\x00'}, @SMC_PNETID_IBNAME={0x5, 0x3, '\x00'}, @SMC_PNETID_IBNAME={0x5, 0x3, '\x00'}, @SMC_PNETID_ETHNAME={0xc, 0x2, 'ethtool\x00'}, @SMC_PNETID_ETHNAME={0xc, 0x2, '/}$#@!^\xe8'}, @SMC_PNETID_NAME={0xb, 0x1, '#):\'[O\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004c011) getsockopt$auto_SO_INCOMING_CPU(r0, 0x4, 0x31, &(0x7f0000001e00)='SMC_PNETID\x00', &(0x7f0000001e40)) syz_genetlink_get_family_id$auto_psample(&(0x7f0000001e80), r0) sysfs$auto(0x0, 0xfff, 0x1f3439d9) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001f00)={'netpci0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_MPATH(r8, &(0x7f0000002000)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x40e440}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x6c, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xd}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x5}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_REG_INDOOR={0x4}, @NL80211_ATTR_MBSSID_CONFIG={0x34, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0xd}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r12}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5, 0x2, 0x80}, @NL80211_MBSSID_CONFIG_ATTR_MAX_EMA_PROFILE_PERIODICITY={0x5}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ptrace$auto_PTRACE_GETREGS(0xc, r3, 0x2, 0x4) select$auto(0x7, &(0x7f0000002040)={[0x3, 0x4, 0x3, 0x3ff, 0x4, 0x2, 0x100000000, 0x7, 0x2, 0x400, 0x4, 0x7fffffff, 0x6, 0x5, 0x0, 0x3]}, &(0x7f00000020c0)={[0x2, 0x2, 0x10000, 0x48cf3584, 0x9, 0x7, 0x6, 0x2, 0x3, 0x420, 0x1, 0x8000000000000000, 0x0, 0x8a, 0x0, 0x800]}, &(0x7f0000002140)={[0xffff, 0x7, 0x6, 0x3, 0xfffffffffffffff9, 0x5, 0x7, 0x6, 0x80, 0x2, 0x1000, 0x5, 0x8001, 0x5, 0x8, 0x3]}, &(0x7f00000021c0)={0x54, 0xf04}) 879.881392ms ago: executing program 9 (id=2417): socket(0x2, 0x80002, 0x73) r0 = socket(0x28, 0x5, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000a00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x28040) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) write$auto(0x3, 0x0, 0xfdef) recvmmsg$auto(r0, &(0x7f0000000340)={{0x0, 0x5aa9, &(0x7f00000002c0)={0x0, 0x3b}, 0x7, 0x0, 0xf, 0x2}, 0x9}, 0x6, 0xffff, 0x0) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x72, 0x0, 0xc) 586.038972ms ago: executing program 9 (id=2418): unshare$auto(0x1) (async, rerun: 32) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async, rerun: 32) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x189302, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r1, &(0x7f00000001c0)="cccc0597", 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) (async, rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 32) r3 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r3, 0x0, 0x1, 0x0, 0x1e) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x80, 0x6, 0x3, 0x2, 0x3, 0x3, 0x62, 0x80000022, 0x7, 0x6d3e, 0x2000000004000009, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) (async) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x40000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f0000000080)={0x1, 0x351, 0x10007004, @inferred, &(0x7f0000000040)={@inferred, 0xc9, 0x8001, 0xecbf, "cb57baff2bef86367754100c634faf1db0830132758ad072eac5c9be263fee480b32ca55503133eb2787f869"}, "7203480efe1c89f1c08cdfc6d3580d79ceecdbc6baa8034b225b85b75724c3ce0b3a2a710e1b774b220a14cd8f825f95d8aa"}) (async) ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000005c0)={{r4, &(0x7f0000000140)="7aa3579b27154cd7441a6a143db50e668bb7031850868bb6df3bab3490d7214a14bf173c0e565da952b61c4ab94baf5a09275a50372a61d9d747315f0a63e617bbd03e19f39f0f17905792fd9ba163309e8d7ffc5cd9cbf54ea313b2f7", 0x0, &(0x7f00000001c0)="fcd5fe451a2b06afcc19122aa9c24e6ece5b426171254c4196e38397ab9054b729773fecafa0bdcf2d978383b1b193987bed9f3ca73106ef6b317bf3009c78b011a5aae257c6c7c9384daf37d1ee41ea6c7858a08bfc81f74357611981cc5e2d87fd3eb891a25c97304f1846e903ba353a0572949443032ce0d95708ad4e6b882e60099c0a89af27d85988d2390288cb04ae986fe0bc1a4959c466d865aaa628d93d693aa673d9065fb2f3c3434491df9e8e9eeb1c8045211d220d9f05", 0x9, &(0x7f0000000280)="a42fd49c6a8cd031eed5d0f7420b796d32941fc4ac2e5ed664533c9b099b8ffd8012a168ae7a48050c361be0ce948a5ada1d3d9f224d506a53c6228760446006f4341405f229cdc58f28ea13951c2622a5fab3446d8f7c8fba48d2eafdf16ddf117068cbf90f96c70636a715204bdd1742168590e95dfb8b1b4bb42466052d9a0f44cac8c54e3108a8f78dfbb519870c180fbb353211097de0a3b14cbf", &(0x7f0000000340)=0x4}, 0x1, &(0x7f0000000580)={0x8, 0x5, &(0x7f0000000380)="ffbac2bb9b0603db2f31a05496858cf4059e841b7a7b80f1e6ba575c6b1c0b30937f26dbfc9aeda218af12274b94fecf04e8a114a841d0522e6bc22a849566fae9db3def82d822e9a3b350230b6438ab086dd8f74600c9216e30fa8a68aa85631aa9df5946aa85041c53f8ea9e87c56a0f45dde843d09a7ee6c7610b02c17105351e2488f3b9a78adb6387da727cf5a9d7321f38a7b460035fd0df7d26a0b1caebbdd470c0398200ef10a3e7024fa37284ccf8b1d08e27da2ce9c4702d3a351bceb8e9b7992b04727d", 0x0, 0x3, 0x9}}) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000480)={@raw=0x7, 0x76, 0x7, 0x7, "4c0ab3efc5e15ce40028de7fe5e6fe3f80265f79c9ca329ce15951661373097faffaa3d57ab96ec600", @raw=0x1000}) (async, rerun: 64) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) (rerun: 64) mmap$auto(0x3, 0x2020009, 0x3, 0xeb3, 0xfffffffffffffffa, 0x8000) (async) socket(0x23, 0x5, 0x94) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 64) socket(0x2, 0xa, 0x1) (async, rerun: 64) r6 = bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r2, r5, 0x4, 0x6, r1, @relative_fd=r2, 0x3}, 0x0) mmap$auto(0x0, 0x2009, 0xfffffffffffffffa, 0x8000200008012, r6, 0x8000) (async) r7 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) read$auto_fragmentation_threshold_ops_(r7, &(0x7f0000000200)=""/172, 0xac) (async) io_uring_setup$auto(0x6, 0x0) (async) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r7, &(0x7f00000028c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0210000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3d104e7b08003900", @ANYRES32=0x0, @ANYBLOB="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"], 0x21c0}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) close_range$auto(0x2, 0x8, 0x0) 390.071811ms ago: executing program 9 (id=2419): mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x2) mmap$auto(0x0, 0x400005, 0x40df, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) r2 = openat$auto_component_list_fops_(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0) ioctl$auto_XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000006c0)={r2, &(0x7f0000000480)="8e51521bc4e4a764c7a59010ff79e3bfe4e71032632cb1e91ed663798183efeda350fe2d5c30bb49d63541f2e6bfbc5c14e4110f87885035b2c0fb3665c66c6483d969e73d9e502c6df2d5a8b79d222448c531b4aea2ad0c252a91e9af5a5a21b6d9006183305c5303c1891674747fad005e014416ae7e4d8e7fbf74e3a155c11e99611699c5664f6d90", 0x0, &(0x7f0000000540)="dcf80892d8db3ead83a92cc59e074f6680af99d6a7cf86c468d8465075ed3f335b6be5ec94c25fa910537dba9567fec072eb542582ab3df26dd35b00ebeccea1d2785e6a9e81135fa2f32a30c81f121b940f1984a74a4ba32cb2cde727eaa7a8ef5b44876daf6365939de5ac4d3aaa269ed73146b385caa6b8a0337e67934ae0ed25e42fe22406daba18f04fe8b0119d96b628c2553bc8b0e9f2bc87545f10a5d5ff7de6f7c166720cf289634fda8abfa3b73329fae6e71e31", 0xfffff38b, &(0x7f0000000600)="35ca3b758f9b8b16eb43972e8a660d8f5ad3f7f285a2009c84f7a36a560d62d2e295bf731397253d664e17accf80de5a724ff3d8535747bed725236fd487e0baa53649d5bcb37adf9a8546b1e7b8a06ac4969e4ea02135b546b6359474f5528984fc2df9e68fe0feb3af7512d7a7c53b28a68576", &(0x7f0000000680)=0x6}) ioctl$auto_BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000700)={0x0, [{0x4, 0x100}, {0x9, 0x800}, {0xfffffffffffffffe, 0x7}, {0x2, 0x5}, {0x8, 0xeec}, {0x3a, 0xfffffffffffffffc}, {0xc4e7, 0x8}, {0x3, 0x7}, {0x63247a39, 0x8}, {0x80, 0xffffffffffffffd2}, {0xc51, 0xffff}, {0x10000, 0x1000}, {0x4, 0x6}, {0x3, 0x5}, {0xb5}, {0x3, 0xfff}, {0x7, 0x8}, {0xfffffffffffffff7, 0x4}, {0x0, 0x200000000}, {0x9, 0x7}, {0x6a8, 0x5}, {0xfffffffffffffffa, 0x6}, {0x10001}, {0xf8, 0x10000}, {0x5, 0x5}, {0xb, 0x3}, {0x7, 0x8}, {0x60f6, 0xff}, {0x9b, 0x4}, {0x7ff, 0x3}, {0x8, 0x9}, {0x40, 0x7}, {0x8, 0x9}, {0xffffffff86a601db, 0x2}, {0x4, 0xfffffffffffffff8}, {0x40}, {0x2, 0x7}, {0x0, 0x3}, {0xd, 0x5}, {0x1, 0x3}, {0x2, 0x5}, {0x2, 0xecb}, {0x7, 0x4}, {0xaa, 0x3}, {0x0, 0x1}, {0x1a5, 0xffffffffffffffe6}, {0x1, 0x9}, {0xfffffffffffffff8, 0x6}, {0x1d67, 0x10}, {0x8000000000000000, 0x10}, {0x1, 0x1d25}, {0x3800000, 0x401}, {0x2, 0x9}, {0x560, 0x5c7}, {0x4, 0x1}, {0x7, 0x80}, {0x8, 0x6c8a}, {0x0, 0x9}, {0xffffffffffffffff, 0x8001}, {0x8, 0x7}, {0x8, 0xc}, {0x0, 0x100000000}, {0xe, 0x3}, {0x7fff, 0x800}, {0x2, 0x10}, {0x5, 0x401}, {0x22b7, 0x6}, {0x1}, {0xfffffffffffffff8, 0xfffffffffffffff7}, {0x1000, 0x4608cd3a}, {0x8000000000000000, 0x8001}, {0x8e, 0x5}, {0x2, 0xffffffffffffffff}, {0xc412, 0x8}, {0x401, 0x9}, {0x100000000, 0x9}, {0x2, 0xf}, {0x9, 0x4}, {0x100000000}, {0x3ff, 0x7fffffff}, {0x7fff, 0x3}, {0xffffffff, 0x4}, {0x0, 0x1000}, {0xef, 0x6}, {0x0, 0x100000001}, {0xd4, 0x5}, {0x0, 0x8}, {0x127e, 0x1}, {0x3, 0x6}, {0x7, 0x81ec}, {0x7fffffff}, {0x7, 0xe}, {0x4, 0x6}, {0x9, 0x7}, {0x7, 0x401}, {0x80}, {0x5, 0x85}, {0x4, 0xe843}, {0xe7, 0x7ff}, {0xffff, 0x5}, {0x0, 0xff}, {0x6, 0x5e}, {0x2, 0xe7}, {0x5, 0x7}, {0x9, 0x7}, {0x100000001, 0x2}, {0x6f, 0x6}, {0x6, 0x5}, {0x5, 0xc}, {0x3, 0x4}, {0x5, 0x9}, {0x8, 0x8}, {0x2, 0x400}, {0x2, 0x100000000}, {0x100000001, 0xa}, {0x7, 0xfffffffffffffff3}, {0x8, 0xfffffffffffffffb}, {0x6, 0xcc}, {0xe, 0x3}, {0x2, 0x8}, {0x9}, {0x0, 0x5}, {0x7, 0x5}, {0x8, 0xf35c}, {0xf, 0x8}, {0x9, 0x3}, {0x1, 0x3}, {0xfffffffffffffff8, 0xffff}, {0x64, 0x401}, {0x9, 0x6}, {0x6, 0x7}, {0x0, 0xa9d5}, {0x1, 0x7}, {0x2, 0x4}, {0xb, 0x7}, {0xfff, 0x5859}, {0x0, 0x5}, {0xe, 0x6}, {0x7, 0xf77}, {0x4b99ea20, 0x2}, {0x2, 0x3}, {0xfe06, 0x6}, {0xb, 0x6}, {0x8, 0xb}, {0xb05e, 0x6}, {0x6, 0xef71}, {0x5, 0x401}, {0x80000001, 0x2}, {0x6, 0xb1c}, {0x81, 0x2}, {0xfffffffffffffffe, 0x1}, {0x2, 0x4}, {0x7ff, 0x5}, {0x200000000000}, {0x2}, {0x8, 0x2}, {0xffffffff, 0x7}, {0x2, 0xcbe}, {0x1}, {0x4, 0x7}, {0xe, 0x1}, {0xfffffffffffffffb}, {0x8f}, {0x5c068eb8, 0x2}, {0xffff, 0x100000001}, {0x4, 0x5}, {0x2b05, 0x10001}, {0x3, 0x4}, {0x10000, 0x7}, {0x4, 0x7ff}, {0x6, 0x4}, {0xc, 0x100000001}, {0x10001, 0x1}, {0x8, 0xaf2}, {0x8, 0x10001}, {0xffff, 0x7}, {0x4, 0x8000000000000000}, {0x9, 0xfffffffffffffffd}, {0x9, 0xff}, {0x26, 0xbbb}, {0x4, 0x7f4}, {0x4, 0x9}, {0x1d4b2000000000, 0xe750}, {0x0, 0x9}, {0x10, 0x1000}, {0xfffffffffffffffe, 0x4}, {0x4, 0x40}, {0xfff, 0xfffffffffffffffa}, {0x7, 0x8}, {0x1, 0x2}, {0x6, 0xffffffffffffffff}, {0x7, 0x7}, {0xe2bb, 0x2}, {0x9, 0x3}, {0x0, 0x200}, {0x5, 0xffffffff}, {0xc7b, 0x2}, {0x401, 0x9}, {0x8000000000000000, 0x9}, {0x7, 0x4}, {0x9, 0x9}, {0x1, 0x3}, {0x0, 0x2d7af9df}, {0x6f222ee3, 0xff}, {0x1cd, 0x4}, {0x3, 0xb}, {0x400, 0x1}, {0x1, 0x5}, {0x1, 0x71}, {0x5, 0x8}, {0xff, 0xb}, {0x4, 0x5}, {0x7fff, 0x4}, {0xfffffffffffffff1, 0x200}, {0x200, 0x1}, {0xfffffffffffffff9, 0x4}, {0x80, 0x2}, {0x0, 0xffffffffffff80d1}, {0x2, 0x2}, {0x40, 0x1}, {0x6, 0xff61}, {0xe, 0xe7}, {0xbbc0, 0x46}, {0x4}, {0x4, 0xf}, {0x5, 0x8}, {0x48000000000, 0x9}, {0x3, 0xba}, {0x8, 0x5}, {0x3, 0xea5}, {0x5, 0x19}, {0x0, 0xfffffffffffffff7}, {0xf, 0x5}, {0x7, 0x3}, {0x7, 0xfffffffffffffe00}, {0x6, 0x1c}, {0x7, 0x7}, {0x867e, 0x4efd}, {0x1aaeb2f6, 0x3ba8}, {0x187, 0x3}, {0x4, 0x8e4}, {0x0, 0x1}, {0xf459, 0x1}, {0x7, 0x10000}, {0xa, 0x5}, {0x0, 0x7fffffff}, {0xffffffffffffffff, 0x6}, {0x1800000000000000, 0x8}, {0x9, 0x1000}, {0xfffffffffffffff9, 0x6}, {0x6, 0xdf}, {0x3, 0x7}, {0x2, 0xb}, {0xffff, 0x1e}, {0x98d, 0x9}], 0x4, "101d4b89f9db85"}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) select$auto(0x9, &(0x7f00000000c0)={[0xa4c7, 0x9, 0x1, 0x7, 0x9, 0x2, 0x0, 0x6, 0x0, 0x3, 0xdd2, 0xd, 0x9, 0x11, 0x4]}, &(0x7f0000000240)={[0x2, 0x6, 0x1000, 0xe5, 0xa, 0x1, 0x2, 0x7, 0x101, 0xc, 0x100000001, 0x2, 0x4, 0x80, 0x0, 0x228]}, &(0x7f0000000300)={[0x0, 0x9, 0x3, 0x3, 0x8000000000000000, 0xd000000000000000, 0x5, 0x4, 0x6, 0x80000000, 0x80000001, 0x8, 0x12e90341, 0xffffffffffff8000, 0x1327, 0x8]}, &(0x7f0000000040)={0x1, 0x90000}) modify_ldt$auto(0x11, 0x0, 0x10) r4 = socket(0x2c, 0x3, 0x0) getsockopt$auto_SO_DEBUG(r4, 0x4, 0x1, 0x0, 0x0) r5 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) r6 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000080), 0x2140, 0x0) pread64$auto(r6, &(0x7f0000000140)=']}\x00', 0x101, 0x8) mmap$auto(0x7, 0x2020009, 0x3, 0xeb4, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f00000002c0), 0x8040, 0x0) r7 = epoll_create$auto(0x8) epoll_ctl$auto(r7, 0x1, 0x8000000000000000, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r7, 0x454f, 0x5f, 0x0, 0x0, r5, 0x80000001}, 0x6d4) 254.016307ms ago: executing program 9 (id=2420): r0 = socket(0x15, 0x6, 0x6) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000280)={{0x0, 0x8, 0x0, 0x2, 0x0, 0x9, 0xb52}, 0xf0c}, 0x40, 0x1, 0x0) mmap$auto(0x5, 0x4, 0x1, 0x80000011, r0, 0xb) mmap$auto(0x7, 0x202000b, 0x400000000003, 0x11, 0xfffffffffffffffa, 0x36) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r0, 0x8000) mmap$auto(0x100000040, 0x40000b, 0x80000000000e1, 0x16, r0, 0x20008) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram13\x00', 0x607c2, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto(0x100000004, 0x100000002, 0xfffffffffffffffe, 0x17, 0xfffffffffffffffa, 0x200000000000041) sysfs$auto(0x8, 0x4, 0xffffffffffffffff) lsm_list_modules$auto(0x0, 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, &(0x7f00000002c0)="2d81d3ed5dd46cb7c97725e141385f1f0705f512add2694b67880745c68ca481d34362ecb96c3fcae9ebe40050d66cf1b3419507c8e0edf1d336a9acd49a0e6b5a5fe2d37f85dde31cd99428420d2d89e3de92cf2c7959b21e90cf9497cefb88fbb9fd6dc282b9079b15b45ec379428c810a8ce5b7a78f37af9521e58b19a92e693fddf6f1bb979ee7fd8c5560b376e30cd070379186980b427a8fdf103d5d1f34c0dacd2a6c114302806be4baa34ce4e1ecd7cbaf95652459035aef65267a7822cea298991bfae4e938b12e") getcwd$auto(0x0, 0x5) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x40146f2c, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000003, 0x810, r1, 0x4000000008) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x44854) bpf$auto(0xd, 0x0, 0x6f5) mmap$auto(0x2, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x2300000000003) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x480, 0x0) mprotect$auto(0x0, 0x806121, 0x6) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.0/usb1/power/autosuspend_delay_ms\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000)='-7', 0xfffffc49) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 0s ago: executing program 7 (id=2421): r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x180b03, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b75, r0, 0x9) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) fallocate$auto(r1, 0xc, 0x2, 0x200) prctl$auto(0x4000003e, 0x1, 0x0, 0x8d24, 0x0) select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0xfffffffffffffc00, 0x6, 0xd, 0x3, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0x1]}, 0x0) write$auto(r2, &(0x7f0000000180)='/Eev+?udio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xd4\xe9d\x03\rF\xac\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4|\xbf\xc7\xff\xd7\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) socket(0xa, 0x80000, 0xa4) socket(0xa, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x3, 0x40) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) memfd_create$auto(&(0x7f0000000100)='@\\{.}\x00', 0x8) socket(0x27, 0x4, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): 9645] ? lsm_blob_alloc+0x68/0x90 [ 744.591664][T19645] lsm_blob_alloc+0x68/0x90 [ 744.591697][T19645] security_prepare_creds+0x30/0x270 [ 744.591733][T19645] prepare_creds+0x56f/0x7d0 [ 744.591785][T19645] lookup_user_key+0xf76/0x1300 [ 744.591840][T19645] ? __pfx_lookup_user_key+0x10/0x10 [ 744.591900][T19645] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 744.591970][T19645] keyctl_restrict_keyring+0x99/0x250 [ 744.592019][T19645] ? __pfx_keyctl_restrict_keyring+0x10/0x10 [ 744.592067][T19645] ? fput+0x9b/0xd0 [ 744.592123][T19645] ? xfd_validate_state+0x61/0x180 [ 744.592169][T19645] ? __pfx_ksys_write+0x10/0x10 [ 744.592213][T19645] __do_sys_keyctl+0x4c1/0x590 [ 744.592266][T19645] do_syscall_64+0xcd/0xfa0 [ 744.592312][T19645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.592346][T19645] RIP: 0033:0x7fea2538eec9 [ 744.592373][T19645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 744.592405][T19645] RSP: 002b:00007fea2622c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 744.592437][T19645] RAX: ffffffffffffffda RBX: 00007fea255e5fa0 RCX: 00007fea2538eec9 [ 744.592460][T19645] RDX: 0000000000000002 RSI: fffffffffffffffd RDI: 000000000000001d [ 744.592481][T19645] RBP: 00007fea25411f91 R08: fffffffffffffffd R09: 0000000000000000 [ 744.592503][T19645] R10: 0000000000000628 R11: 0000000000000246 R12: 0000000000000000 [ 744.592523][T19645] R13: 00007fea255e6038 R14: 00007fea255e5fa0 R15: 00007fff8b56bf68 [ 744.592579][T19645] [ 746.578780][T19700] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1983'. [ 746.778053][T19703] netlink: 'syz.3.1984': attribute type 1 has an invalid length. [ 747.897234][T19723] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1989'. [ 749.941183][T19749] netlink: 'syz.3.1994': attribute type 4 has an invalid length. [ 750.712220][T19777] FAULT_INJECTION: forcing a failure. [ 750.712220][T19777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 750.770628][T19777] CPU: 1 UID: 0 PID: 19777 Comm: syz.1.1998 Not tainted syzkaller #0 PREEMPT(full) [ 750.770670][T19777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 750.770690][T19777] Call Trace: [ 750.770700][T19777] [ 750.770712][T19777] dump_stack_lvl+0x16c/0x1f0 [ 750.770754][T19777] should_fail_ex+0x512/0x640 [ 750.770803][T19777] _copy_from_user+0x2e/0xd0 [ 750.770843][T19777] copy_msghdr_from_user+0x98/0x160 [ 750.770880][T19777] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 750.770926][T19777] ? __pfx__kstrtoull+0x10/0x10 [ 750.770984][T19777] ___sys_sendmsg+0xfe/0x1d0 [ 750.771035][T19777] ? __pfx____sys_sendmsg+0x10/0x10 [ 750.771094][T19777] ? find_held_lock+0x2b/0x80 [ 750.771155][T19777] __sys_sendmmsg+0x200/0x420 [ 750.771201][T19777] ? __pfx___sys_sendmmsg+0x10/0x10 [ 750.771252][T19777] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 750.771306][T19777] ? fput+0x9b/0xd0 [ 750.771349][T19777] ? ksys_write+0x1ac/0x250 [ 750.771382][T19777] ? __pfx_ksys_write+0x10/0x10 [ 750.771422][T19777] __x64_sys_sendmmsg+0x9c/0x100 [ 750.771461][T19777] ? lockdep_hardirqs_on+0x7c/0x110 [ 750.771499][T19777] do_syscall_64+0xcd/0xfa0 [ 750.771539][T19777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.771571][T19777] RIP: 0033:0x7f394818eec9 [ 750.771596][T19777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 750.771626][T19777] RSP: 002b:00007f39490df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 750.771657][T19777] RAX: ffffffffffffffda RBX: 00007f39483e5fa0 RCX: 00007f394818eec9 [ 750.771679][T19777] RDX: 0000000000000006 RSI: 0000200000000200 RDI: 0000000000000003 [ 750.771698][T19777] RBP: 00007f39490df090 R08: 0000000000000000 R09: 0000000000000000 [ 750.771718][T19777] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 750.771737][T19777] R13: 00007f39483e6038 R14: 00007f39483e5fa0 R15: 00007ffdea0c0938 [ 750.771782][T19777] [ 750.784130][T19779] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1997'. [ 751.004767][T19779] hsr0: entered allmulticast mode [ 751.009881][T19779] hsr_slave_0: entered allmulticast mode [ 751.016046][T19779] hsr_slave_1: entered allmulticast mode [ 751.193315][T19787] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 751.309273][T19783] serio: Serial port pty6 [ 752.602575][T19857] FAULT_INJECTION: forcing a failure. [ 752.602575][T19857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 752.621836][T19857] CPU: 1 UID: 0 PID: 19857 Comm: syz.3.2008 Not tainted syzkaller #0 PREEMPT(full) [ 752.621877][T19857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 752.621904][T19857] Call Trace: [ 752.621914][T19857] [ 752.621926][T19857] dump_stack_lvl+0x16c/0x1f0 [ 752.621968][T19857] should_fail_ex+0x512/0x640 [ 752.622014][T19857] _copy_from_user+0x2e/0xd0 [ 752.622058][T19857] ____sys_sendmsg+0x607/0xc70 [ 752.622111][T19857] ? __pfx_____sys_sendmsg+0x10/0x10 [ 752.622167][T19857] ? __pfx__kstrtoull+0x10/0x10 [ 752.622228][T19857] ___sys_sendmsg+0x134/0x1d0 [ 752.622271][T19857] ? __pfx____sys_sendmsg+0x10/0x10 [ 752.622329][T19857] ? find_held_lock+0x2b/0x80 [ 752.622391][T19857] __sys_sendmmsg+0x200/0x420 [ 752.622435][T19857] ? __pfx___sys_sendmmsg+0x10/0x10 [ 752.622485][T19857] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 752.622545][T19857] ? fput+0x9b/0xd0 [ 752.622588][T19857] ? ksys_write+0x1ac/0x250 [ 752.622621][T19857] ? __pfx_ksys_write+0x10/0x10 [ 752.622664][T19857] __x64_sys_sendmmsg+0x9c/0x100 [ 752.622702][T19857] ? lockdep_hardirqs_on+0x7c/0x110 [ 752.622739][T19857] do_syscall_64+0xcd/0xfa0 [ 752.622778][T19857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 752.622811][T19857] RIP: 0033:0x7fea2538eec9 [ 752.622836][T19857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 752.622868][T19857] RSP: 002b:00007fea2622c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 752.622954][T19857] RAX: ffffffffffffffda RBX: 00007fea255e5fa0 RCX: 00007fea2538eec9 [ 752.622975][T19857] RDX: 0000000000000006 RSI: 0000200000000200 RDI: 0000000000000003 [ 752.622994][T19857] RBP: 00007fea2622c090 R08: 0000000000000000 R09: 0000000000000000 [ 752.623013][T19857] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 752.623033][T19857] R13: 00007fea255e6038 R14: 00007fea255e5fa0 R15: 00007fff8b56bf68 [ 752.623078][T19857] [ 752.897717][T19861] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2009'. [ 752.907182][T19861] ipvlan1: entered allmulticast mode [ 752.912539][T19861] veth0_vlan: entered allmulticast mode [ 753.210913][T19886] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2010'. [ 754.884988][T19926] random: crng reseeded on system resumption [ 754.908466][T19925] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2016'. [ 755.024631][T19932] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 755.036046][T19932] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 755.044786][T19932] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 755.053811][T19932] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 755.062571][T19932] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 755.252739][T19949] netlink: 'syz.2.2018': attribute type 1 has an invalid length. [ 755.766460][T20038] FAULT_INJECTION: forcing a failure. [ 755.766460][T20038] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 755.786981][T19927] chnl_net:caif_netlink_parms(): no params data found [ 755.814345][T20038] CPU: 1 UID: 0 PID: 20038 Comm: syz.1.2020 Not tainted syzkaller #0 PREEMPT(full) [ 755.814387][T20038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 755.814406][T20038] Call Trace: [ 755.814417][T20038] [ 755.814429][T20038] dump_stack_lvl+0x16c/0x1f0 [ 755.814481][T20038] should_fail_ex+0x512/0x640 [ 755.814536][T20038] should_fail_alloc_page+0xe7/0x130 [ 755.814585][T20038] prepare_alloc_pages+0x3c2/0x610 [ 755.814636][T20038] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 755.814669][T20038] ? is_bpf_text_address+0x8a/0x1a0 [ 755.814721][T20038] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 755.814761][T20038] ? is_bpf_text_address+0x94/0x1a0 [ 755.814808][T20038] ? kernel_text_address+0x8d/0x100 [ 755.814858][T20038] ? __kernel_text_address+0xd/0x40 [ 755.814887][T20038] ? unwind_get_return_address+0x59/0xa0 [ 755.814919][T20038] ? arch_stack_walk+0xa6/0x100 [ 755.814953][T20038] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 755.814994][T20038] ? __lock_acquire+0x62e/0x1ce0 [ 755.815042][T20038] ? __pfx_stack_trace_save+0x10/0x10 [ 755.815081][T20038] ? stack_depot_save_flags+0x29/0x9c0 [ 755.815126][T20038] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 755.815183][T20038] ? policy_nodemask+0xea/0x4e0 [ 755.815230][T20038] alloc_pages_mpol+0x1fb/0x550 [ 755.815276][T20038] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 755.815333][T20038] alloc_pages_noprof+0x131/0x390 [ 755.815379][T20038] __pmd_alloc+0x3b/0x8b0 [ 755.815427][T20038] __handle_mm_fault+0xada/0x2aa0 [ 755.815482][T20038] ? mt_find+0x3e2/0xa20 [ 755.815530][T20038] ? __pfx___handle_mm_fault+0x10/0x10 [ 755.815577][T20038] ? __pfx_mt_find+0x10/0x10 [ 755.815642][T20038] ? find_vma+0xbf/0x140 [ 755.815680][T20038] ? __pfx_find_vma+0x10/0x10 [ 755.815728][T20038] handle_mm_fault+0x589/0xd10 [ 755.815782][T20038] ? __pkru_allows_pkey+0x11/0xb0 [ 755.815837][T20038] do_user_addr_fault+0x7a6/0x1370 [ 755.815873][T20038] ? rcu_is_watching+0x12/0xc0 [ 755.815913][T20038] exc_page_fault+0x64/0xc0 [ 755.815950][T20038] asm_exc_page_fault+0x26/0x30 [ 755.815981][T20038] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 755.816028][T20038] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 755.816058][T20038] RSP: 0018:ffffc90016f979c0 EFLAGS: 00050202 [ 755.816084][T20038] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000007 [ 755.816102][T20038] RDX: fffff52002df2f4a RSI: 0000000000000000 RDI: ffffc90016f97a48 [ 755.816124][T20038] RBP: 0000000000000007 R08: 0000000000000001 R09: fffff52002df2f49 [ 755.816144][T20038] R10: ffffc90016f97a4e R11: 0000000000000000 R12: 0000000000000000 [ 755.816164][T20038] R13: ffffc90016f97a48 R14: 1ffff92002df2f43 R15: ffffc90016f97d7c [ 755.816209][T20038] _copy_from_user+0x98/0xd0 [ 755.816254][T20038] ____sys_sendmsg+0x607/0xc70 [ 755.816307][T20038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 755.816371][T20038] ? __pfx__kstrtoull+0x10/0x10 [ 755.816433][T20038] ___sys_sendmsg+0x134/0x1d0 [ 755.816474][T20038] ? __pfx____sys_sendmsg+0x10/0x10 [ 755.816540][T20038] ? find_held_lock+0x2b/0x80 [ 755.816602][T20038] __sys_sendmmsg+0x200/0x420 [ 755.816646][T20038] ? __pfx___sys_sendmmsg+0x10/0x10 [ 755.816699][T20038] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 755.816759][T20038] ? fput+0x9b/0xd0 [ 755.816804][T20038] ? ksys_write+0x1ac/0x250 [ 755.816838][T20038] ? __pfx_ksys_write+0x10/0x10 [ 755.816882][T20038] __x64_sys_sendmmsg+0x9c/0x100 [ 755.816919][T20038] ? lockdep_hardirqs_on+0x7c/0x110 [ 755.816956][T20038] do_syscall_64+0xcd/0xfa0 [ 755.816995][T20038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.817028][T20038] RIP: 0033:0x7f394818eec9 [ 755.817053][T20038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 755.817083][T20038] RSP: 002b:00007f39490df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 755.817111][T20038] RAX: ffffffffffffffda RBX: 00007f39483e5fa0 RCX: 00007f394818eec9 [ 755.817132][T20038] RDX: 0000000000000006 RSI: 0000200000000200 RDI: 0000000000000003 [ 755.817151][T20038] RBP: 00007f39490df090 R08: 0000000000000000 R09: 0000000000000000 [ 755.817170][T20038] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 755.817189][T20038] R13: 00007f39483e6038 R14: 00007f39483e5fa0 R15: 00007ffdea0c0938 [ 755.817234][T20038] [ 756.362688][T20066] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2021'. [ 757.003633][T19927] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.030653][T19927] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.046622][T19927] bridge_slave_0: entered allmulticast mode [ 757.062271][T19927] bridge_slave_0: entered promiscuous mode [ 757.073049][T20116] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2022'. [ 757.094118][T19932] Bluetooth: hci4: command tx timeout [ 757.102885][T20115] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2022'. [ 757.112413][T19927] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.129989][T19927] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.179132][T19927] bridge_slave_1: entered allmulticast mode [ 757.199373][T19927] bridge_slave_1: entered promiscuous mode [ 757.432247][T19927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.617806][T19927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.820032][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.826735][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.925036][T19927] team0: Port device team_slave_0 added [ 757.975202][T19927] team0: Port device team_slave_1 added [ 758.271442][T19927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.474460][T19927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.570396][T19927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.609437][T19927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.617433][T19927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.644967][T19927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.773547][T19927] hsr_slave_0: entered promiscuous mode [ 758.797468][T19927] hsr_slave_1: entered promiscuous mode [ 758.812052][T19927] debugfs: 'hsr0' already exists in 'hsr' [ 758.825784][T19927] Cannot create hsr debugfs directory [ 759.046242][T20282] FAULT_INJECTION: forcing a failure. [ 759.046242][T20282] name failslab, interval 1, probability 0, space 0, times 0 [ 759.065093][T20282] CPU: 1 UID: 0 PID: 20282 Comm: syz.1.2030 Not tainted syzkaller #0 PREEMPT(full) [ 759.065130][T20282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 759.065148][T20282] Call Trace: [ 759.065159][T20282] [ 759.065170][T20282] dump_stack_lvl+0x16c/0x1f0 [ 759.065202][T20282] should_fail_ex+0x512/0x640 [ 759.065230][T20282] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 759.065257][T20282] should_failslab+0xc2/0x120 [ 759.065290][T20282] kmem_cache_alloc_noprof+0x75/0x6e0 [ 759.065314][T20282] ? __pmd_alloc+0xbf/0x8b0 [ 759.065351][T20282] ? __pmd_alloc+0xbf/0x8b0 [ 759.065380][T20282] __pmd_alloc+0xbf/0x8b0 [ 759.065414][T20282] __handle_mm_fault+0xada/0x2aa0 [ 759.065454][T20282] ? mt_find+0x3e2/0xa20 [ 759.065485][T20282] ? __pfx___handle_mm_fault+0x10/0x10 [ 759.065525][T20282] ? __pfx_mt_find+0x10/0x10 [ 759.065571][T20282] ? find_vma+0xbf/0x140 [ 759.065597][T20282] ? __pfx_find_vma+0x10/0x10 [ 759.065627][T20282] handle_mm_fault+0x589/0xd10 [ 759.065665][T20282] ? __pkru_allows_pkey+0x11/0xb0 [ 759.065704][T20282] do_user_addr_fault+0x7a6/0x1370 [ 759.065730][T20282] ? rcu_is_watching+0x12/0xc0 [ 759.065759][T20282] exc_page_fault+0x64/0xc0 [ 759.065786][T20282] asm_exc_page_fault+0x26/0x30 [ 759.065808][T20282] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 759.065843][T20282] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 759.065866][T20282] RSP: 0018:ffffc90017c179c0 EFLAGS: 00050202 [ 759.065884][T20282] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000007 [ 759.065898][T20282] RDX: fffff52002f82f4a RSI: 0000000000000000 RDI: ffffc90017c17a48 [ 759.065913][T20282] RBP: 0000000000000007 R08: 0000000000000001 R09: fffff52002f82f49 [ 759.065927][T20282] R10: ffffc90017c17a4e R11: 0000000000000000 R12: 0000000000000000 [ 759.065940][T20282] R13: ffffc90017c17a48 R14: 1ffff92002f82f43 R15: ffffc90017c17d7c [ 759.065971][T20282] _copy_from_user+0x98/0xd0 [ 759.066003][T20282] ____sys_sendmsg+0x607/0xc70 [ 759.066042][T20282] ? __pfx_____sys_sendmsg+0x10/0x10 [ 759.066082][T20282] ? __pfx__kstrtoull+0x10/0x10 [ 759.066125][T20282] ___sys_sendmsg+0x134/0x1d0 [ 759.066155][T20282] ? __pfx____sys_sendmsg+0x10/0x10 [ 759.066197][T20282] ? find_held_lock+0x2b/0x80 [ 759.066242][T20282] __sys_sendmmsg+0x200/0x420 [ 759.066274][T20282] ? __pfx___sys_sendmmsg+0x10/0x10 [ 759.066312][T20282] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 759.066355][T20282] ? fput+0x9b/0xd0 [ 759.066386][T20282] ? ksys_write+0x1ac/0x250 [ 759.066410][T20282] ? __pfx_ksys_write+0x10/0x10 [ 759.066441][T20282] __x64_sys_sendmmsg+0x9c/0x100 [ 759.066468][T20282] ? lockdep_hardirqs_on+0x7c/0x110 [ 759.066496][T20282] do_syscall_64+0xcd/0xfa0 [ 759.066530][T20282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.066553][T20282] RIP: 0033:0x7f394818eec9 [ 759.066571][T20282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.066593][T20282] RSP: 002b:00007f39490df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 759.066613][T20282] RAX: ffffffffffffffda RBX: 00007f39483e5fa0 RCX: 00007f394818eec9 [ 759.066628][T20282] RDX: 0000000000000006 RSI: 0000200000000200 RDI: 0000000000000003 [ 759.066642][T20282] RBP: 00007f39490df090 R08: 0000000000000000 R09: 0000000000000000 [ 759.066655][T20282] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 759.066669][T20282] R13: 00007f39483e6038 R14: 00007f39483e5fa0 R15: 00007ffdea0c0938 [ 759.066701][T20282] [ 759.432699][T19932] Bluetooth: hci4: command tx timeout [ 759.555490][T20291] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2031'. [ 759.899929][T19927] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 759.940148][T20338] sd 0:0:1:0: PR command failed: 1026 [ 759.960116][T19927] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 759.995161][T20338] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 760.010489][T20338] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 760.053930][T19927] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 760.103404][T19927] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 760.440718][T20353] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2037'. [ 760.476395][T20353] geneve1: entered promiscuous mode [ 760.522527][T20353] geneve1: entered allmulticast mode [ 760.915418][T19927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.000920][T19927] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.033881][T19528] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.041174][T19528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.115237][T19883] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.122589][T19883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.497352][T19932] Bluetooth: hci4: command tx timeout [ 761.697615][T20427] FAULT_INJECTION: forcing a failure. [ 761.697615][T20427] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 761.776376][T20427] CPU: 0 UID: 0 PID: 20427 Comm: syz.3.2040 Not tainted syzkaller #0 PREEMPT(full) [ 761.776417][T20427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 761.776434][T20427] Call Trace: [ 761.776443][T20427] [ 761.776454][T20427] dump_stack_lvl+0x16c/0x1f0 [ 761.776495][T20427] should_fail_ex+0x512/0x640 [ 761.776540][T20427] should_fail_alloc_page+0xe7/0x130 [ 761.776588][T20427] prepare_alloc_pages+0x3c2/0x610 [ 761.776637][T20427] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 761.776671][T20427] ? stack_trace_save+0x8e/0xc0 [ 761.776707][T20427] ? __pfx_stack_trace_save+0x10/0x10 [ 761.776745][T20427] ? stack_depot_save_flags+0x29/0x9c0 [ 761.776784][T20427] ? trace_mm_page_alloc+0x11f/0x1a0 [ 761.776834][T20427] ? kasan_save_stack+0x42/0x60 [ 761.776879][T20427] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 761.776911][T20427] ? kmem_cache_alloc_noprof+0x250/0x6e0 [ 761.776942][T20427] ? __handle_mm_fault+0xada/0x2aa0 [ 761.777000][T20427] ? do_user_addr_fault+0x7a6/0x1370 [ 761.777027][T20427] ? exc_page_fault+0x64/0xc0 [ 761.777059][T20427] ? asm_exc_page_fault+0x26/0x30 [ 761.777089][T20427] ? rep_movs_alternative+0xf/0x90 [ 761.777134][T20427] ? _copy_from_user+0x98/0xd0 [ 761.777173][T20427] ? ____sys_sendmsg+0x607/0xc70 [ 761.777218][T20427] ? ___sys_sendmsg+0x134/0x1d0 [ 761.777272][T20427] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 761.777330][T20427] ? policy_nodemask+0xea/0x4e0 [ 761.777377][T20427] alloc_pages_mpol+0x1fb/0x550 [ 761.777423][T20427] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 761.777481][T20427] alloc_pages_noprof+0x131/0x390 [ 761.777527][T20427] pte_alloc_one+0x1e/0x350 [ 761.777566][T20427] do_pte_missing+0x1acf/0x3ba0 [ 761.777618][T20427] ? __thp_vma_allowable_orders+0x1c8/0xcd0 [ 761.777671][T20427] ? __pmd_alloc+0x64f/0x8b0 [ 761.777720][T20427] __handle_mm_fault+0x1556/0x2aa0 [ 761.777777][T20427] ? mt_find+0x3e2/0xa20 [ 761.777821][T20427] ? __pfx___handle_mm_fault+0x10/0x10 [ 761.777868][T20427] ? __pfx_mt_find+0x10/0x10 [ 761.777933][T20427] ? find_vma+0xbf/0x140 [ 761.777970][T20427] ? __pfx_find_vma+0x10/0x10 [ 761.778021][T20427] handle_mm_fault+0x589/0xd10 [ 761.778072][T20427] ? __pkru_allows_pkey+0x11/0xb0 [ 761.778127][T20427] do_user_addr_fault+0x7a6/0x1370 [ 761.778163][T20427] ? rcu_is_watching+0x12/0xc0 [ 761.778204][T20427] exc_page_fault+0x64/0xc0 [ 761.778242][T20427] asm_exc_page_fault+0x26/0x30 [ 761.778273][T20427] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 761.778323][T20427] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 761.778355][T20427] RSP: 0018:ffffc90017d679c0 EFLAGS: 00050202 [ 761.778381][T20427] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000007 [ 761.778401][T20427] RDX: fffff52002facf4a RSI: 0000000000000000 RDI: ffffc90017d67a48 [ 761.778422][T20427] RBP: 0000000000000007 R08: 0000000000000001 R09: fffff52002facf49 [ 761.778442][T20427] R10: ffffc90017d67a4e R11: 0000000000000000 R12: 0000000000000000 [ 761.778462][T20427] R13: ffffc90017d67a48 R14: 1ffff92002facf43 R15: ffffc90017d67d7c [ 761.778507][T20427] _copy_from_user+0x98/0xd0 [ 761.778552][T20427] ____sys_sendmsg+0x607/0xc70 [ 761.778605][T20427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 761.778661][T20427] ? __pfx__kstrtoull+0x10/0x10 [ 761.778723][T20427] ___sys_sendmsg+0x134/0x1d0 [ 761.778765][T20427] ? __pfx____sys_sendmsg+0x10/0x10 [ 761.778825][T20427] ? find_held_lock+0x2b/0x80 [ 761.778889][T20427] __sys_sendmmsg+0x200/0x420 [ 761.778935][T20427] ? __pfx___sys_sendmmsg+0x10/0x10 [ 761.778997][T20427] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 761.779056][T20427] ? fput+0x9b/0xd0 [ 761.779102][T20427] ? ksys_write+0x1ac/0x250 [ 761.779135][T20427] ? __pfx_ksys_write+0x10/0x10 [ 761.779178][T20427] __x64_sys_sendmmsg+0x9c/0x100 [ 761.779218][T20427] ? lockdep_hardirqs_on+0x7c/0x110 [ 761.779254][T20427] do_syscall_64+0xcd/0xfa0 [ 761.779293][T20427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.779326][T20427] RIP: 0033:0x7fea2538eec9 [ 761.779351][T20427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 761.779381][T20427] RSP: 002b:00007fea2622c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 761.779411][T20427] RAX: ffffffffffffffda RBX: 00007fea255e5fa0 RCX: 00007fea2538eec9 [ 761.779431][T20427] RDX: 0000000000000006 RSI: 0000200000000200 RDI: 0000000000000003 [ 761.779450][T20427] RBP: 00007fea2622c090 R08: 0000000000000000 R09: 0000000000000000 [ 761.779469][T20427] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 761.779488][T20427] R13: 00007fea255e6038 R14: 00007fea255e5fa0 R15: 00007fff8b56bf68 [ 761.779535][T20427] [ 762.492290][T19927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.880224][T19927] veth0_vlan: entered promiscuous mode [ 762.894834][T19927] veth1_vlan: entered promiscuous mode [ 762.970753][T19927] veth0_macvtap: entered promiscuous mode [ 762.986592][T19927] veth1_macvtap: entered promiscuous mode [ 763.014532][T19927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 763.039670][T19927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.064298][T19570] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.086069][T19570] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.109072][T19570] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.119627][T19570] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.577506][T19932] Bluetooth: hci4: command tx timeout [ 763.591428][T19570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.625197][T19570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.781082][T19570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.805130][T19570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.272216][T20464] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 764.384123][T20438] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 764.916362][ T31] audit: type=1804 audit(4294967342.668:24): pid=20492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2047" name="/newroot/505/file0" dev="tmpfs" ino=2653 res=1 errno=0 [ 765.241148][T20521] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 765.611479][T20534] FAULT_INJECTION: forcing a failure. [ 765.611479][T20534] name failslab, interval 1, probability 0, space 0, times 0 [ 765.626700][T20534] CPU: 1 UID: 0 PID: 20534 Comm: syz.3.2050 Not tainted syzkaller #0 PREEMPT(full) [ 765.626741][T20534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 765.626759][T20534] Call Trace: [ 765.626769][T20534] [ 765.626780][T20534] dump_stack_lvl+0x16c/0x1f0 [ 765.626822][T20534] should_fail_ex+0x512/0x640 [ 765.626870][T20534] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 765.626906][T20534] should_failslab+0xc2/0x120 [ 765.626948][T20534] kmem_cache_alloc_noprof+0x75/0x6e0 [ 765.626980][T20534] ? ptlock_alloc+0x1f/0x70 [ 765.627032][T20534] ? ptlock_alloc+0x1f/0x70 [ 765.627079][T20534] ptlock_alloc+0x1f/0x70 [ 765.627127][T20534] pte_alloc_one+0x84/0x350 [ 765.627165][T20534] do_pte_missing+0x1acf/0x3ba0 [ 765.627216][T20534] ? __thp_vma_allowable_orders+0x1c8/0xcd0 [ 765.627266][T20534] ? __pmd_alloc+0x64f/0x8b0 [ 765.627310][T20534] __handle_mm_fault+0x1556/0x2aa0 [ 765.627366][T20534] ? mt_find+0x3e2/0xa20 [ 765.627408][T20534] ? __pfx___handle_mm_fault+0x10/0x10 [ 765.627456][T20534] ? __pfx_mt_find+0x10/0x10 [ 765.627521][T20534] ? find_vma+0xbf/0x140 [ 765.627558][T20534] ? __pfx_find_vma+0x10/0x10 [ 765.627602][T20534] handle_mm_fault+0x589/0xd10 [ 765.627655][T20534] ? __pkru_allows_pkey+0x11/0xb0 [ 765.627711][T20534] do_user_addr_fault+0x7a6/0x1370 [ 765.627746][T20534] ? rcu_is_watching+0x12/0xc0 [ 765.627786][T20534] exc_page_fault+0x64/0xc0 [ 765.627825][T20534] asm_exc_page_fault+0x26/0x30 [ 765.627856][T20534] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 765.627916][T20534] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 [ 765.627948][T20534] RSP: 0018:ffffc9000b0d79c0 EFLAGS: 00050202 [ 765.627973][T20534] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000007 [ 765.627992][T20534] RDX: fffff5200161af4a RSI: 0000000000000000 RDI: ffffc9000b0d7a48 [ 765.628013][T20534] RBP: 0000000000000007 R08: 0000000000000001 R09: fffff5200161af49 [ 765.628034][T20534] R10: ffffc9000b0d7a4e R11: 0000000000000000 R12: 0000000000000000 [ 765.628054][T20534] R13: ffffc9000b0d7a48 R14: 1ffff9200161af43 R15: ffffc9000b0d7d7c [ 765.628100][T20534] _copy_from_user+0x98/0xd0 [ 765.628146][T20534] ____sys_sendmsg+0x607/0xc70 [ 765.628203][T20534] ? __pfx_____sys_sendmsg+0x10/0x10 [ 765.628256][T20534] ? __pfx__kstrtoull+0x10/0x10 [ 765.628314][T20534] ___sys_sendmsg+0x134/0x1d0 [ 765.628352][T20534] ? __pfx____sys_sendmsg+0x10/0x10 [ 765.628410][T20534] ? find_held_lock+0x2b/0x80 [ 765.628469][T20534] __sys_sendmmsg+0x200/0x420 [ 765.628509][T20534] ? __pfx___sys_sendmmsg+0x10/0x10 [ 765.628560][T20534] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 765.628617][T20534] ? fput+0x9b/0xd0 [ 765.628661][T20534] ? ksys_write+0x1ac/0x250 [ 765.628693][T20534] ? __pfx_ksys_write+0x10/0x10 [ 765.628734][T20534] __x64_sys_sendmmsg+0x9c/0x100 [ 765.628769][T20534] ? lockdep_hardirqs_on+0x7c/0x110 [ 765.628804][T20534] do_syscall_64+0xcd/0xfa0 [ 765.628842][T20534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.628880][T20534] RIP: 0033:0x7fea2538eec9 [ 765.628903][T20534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 765.628934][T20534] RSP: 002b:00007fea2622c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 765.628963][T20534] RAX: ffffffffffffffda RBX: 00007fea255e5fa0 RCX: 00007fea2538eec9 [ 765.628984][T20534] RDX: 0000000000000006 RSI: 0000200000000200 RDI: 0000000000000003 [ 765.629004][T20534] RBP: 00007fea2622c090 R08: 0000000000000000 R09: 0000000000000000 [ 765.629023][T20534] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 765.629043][T20534] R13: 00007fea255e6038 R14: 00007fea255e5fa0 R15: 00007fff8b56bf68 [ 765.629089][T20534] [ 767.668207][T20565] bond0: option all_slaves_active: invalid value () [ 768.036862][T20565] bond0: option all_slaves_active: invalid value () [ 768.094842][T20591] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2060'. [ 768.137863][T20589] sysfs: cannot create duplicate filename '/class/ieee80211/!PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„L̓÷ÓÄ]' [ 768.178680][T20589] CPU: 0 UID: 0 PID: 20589 Comm: syz.3.2061 Not tainted syzkaller #0 PREEMPT(full) [ 768.178722][T20589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 768.178742][T20589] Call Trace: [ 768.178753][T20589] [ 768.178765][T20589] dump_stack_lvl+0x16c/0x1f0 [ 768.178807][T20589] sysfs_warn_dup+0x7f/0xa0 [ 768.178846][T20589] sysfs_do_create_link_sd+0x124/0x140 [ 768.178892][T20589] sysfs_create_link+0x61/0xc0 [ 768.178933][T20589] device_add+0x62c/0x1aa0 [ 768.178980][T20589] ? __pfx_device_add+0x10/0x10 [ 768.179018][T20589] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 768.179084][T20589] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 768.179134][T20589] wiphy_register+0x1eb0/0x2b20 [ 768.179178][T20589] ? netdev_run_todo+0x864/0x1320 [ 768.179233][T20589] ? __pfx_wiphy_register+0x10/0x10 [ 768.179303][T20589] ieee80211_register_hw+0x253d/0x4120 [ 768.179366][T20589] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 768.179420][T20589] ? __pfx___debug_object_init+0x10/0x10 [ 768.179464][T20589] ? find_held_lock+0x2b/0x80 [ 768.179497][T20589] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 768.179551][T20589] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 768.179586][T20589] ? __hrtimer_setup+0x176/0x280 [ 768.179642][T20589] mac80211_hwsim_new_radio+0x32d8/0x50b0 [ 768.179716][T20589] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 768.179784][T20589] hwsim_new_radio_nl+0xba2/0x1330 [ 768.179834][T20589] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 768.179895][T20589] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 768.179945][T20589] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 768.180003][T20589] genl_family_rcv_msg_doit+0x209/0x2f0 [ 768.180052][T20589] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 768.180117][T20589] ? bpf_lsm_capable+0x9/0x10 [ 768.180158][T20589] ? security_capable+0x7e/0x260 [ 768.180203][T20589] ? ns_capable+0xd7/0x110 [ 768.180241][T20589] genl_rcv_msg+0x55c/0x800 [ 768.180293][T20589] ? __pfx_genl_rcv_msg+0x10/0x10 [ 768.180341][T20589] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 768.180415][T20589] netlink_rcv_skb+0x158/0x420 [ 768.180456][T20589] ? __pfx_genl_rcv_msg+0x10/0x10 [ 768.180505][T20589] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 768.180564][T20589] ? netlink_deliver_tap+0x1ae/0xd30 [ 768.180609][T20589] genl_rcv+0x28/0x40 [ 768.180649][T20589] netlink_unicast+0x5a7/0x870 [ 768.180697][T20589] ? __pfx_netlink_unicast+0x10/0x10 [ 768.180737][T20589] ? __pfx___might_resched+0x10/0x10 [ 768.180771][T20589] ? __lock_acquire+0xb97/0x1ce0 [ 768.180833][T20589] netlink_sendmsg+0x8c8/0xdd0 [ 768.180882][T20589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 768.180928][T20589] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 768.180981][T20589] ____sys_sendmsg+0xa98/0xc70 [ 768.181029][T20589] ? copy_msghdr_from_user+0x10a/0x160 [ 768.181067][T20589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 768.181126][T20589] ? __pfx_futex_wake_mark+0x10/0x10 [ 768.181184][T20589] ___sys_sendmsg+0x134/0x1d0 [ 768.181224][T20589] ? __pfx____sys_sendmsg+0x10/0x10 [ 768.181321][T20589] __sys_sendmsg+0x16d/0x220 [ 768.181362][T20589] ? __pfx___sys_sendmsg+0x10/0x10 [ 768.181409][T20589] ? __x64_sys_futex+0x1e0/0x4c0 [ 768.181484][T20589] do_syscall_64+0xcd/0xfa0 [ 768.181526][T20589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.181559][T20589] RIP: 0033:0x7fea2538eec9 [ 768.181584][T20589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 768.181613][T20589] RSP: 002b:00007fea2622c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 768.181643][T20589] RAX: ffffffffffffffda RBX: 00007fea255e5fa0 RCX: 00007fea2538eec9 [ 768.181663][T20589] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 768.181682][T20589] RBP: 00007fea25411f91 R08: 0000000000000000 R09: 0000000000000000 [ 768.181701][T20589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 768.181720][T20589] R13: 00007fea255e6038 R14: 00007fea255e5fa0 R15: 00007fff8b56bf68 [ 768.181766][T20589] [ 769.218968][T20664] syz.1.2066 (20664): attempted to duplicate a private mapping with mremap. This is not supported. [ 770.147742][T20717] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2073'. [ 770.195031][T20717] hsr0: entered allmulticast mode [ 770.215873][T20717] hsr_slave_0: entered allmulticast mode [ 770.339991][T20717] hsr_slave_1: entered allmulticast mode [ 771.883819][T20756] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 771.901563][T20757] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2079'. [ 772.490863][T20802] MTRR 1 not used [ 772.596798][T20802] FAULT_INJECTION: forcing a failure. [ 772.596798][T20802] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 772.657413][T20802] CPU: 1 UID: 0 PID: 20802 Comm: syz.4.2082 Not tainted syzkaller #0 PREEMPT(full) [ 772.657457][T20802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 772.657476][T20802] Call Trace: [ 772.657486][T20802] [ 772.657498][T20802] dump_stack_lvl+0x16c/0x1f0 [ 772.657539][T20802] should_fail_ex+0x512/0x640 [ 772.657583][T20802] should_fail_alloc_page+0xe7/0x130 [ 772.657630][T20802] prepare_alloc_pages+0x3c2/0x610 [ 772.657672][T20802] ? rcu_is_watching+0x12/0xc0 [ 772.657708][T20802] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 772.657749][T20802] ? rcu_is_watching+0x12/0xc0 [ 772.657784][T20802] ? trace_mm_page_alloc+0x11f/0x1a0 [ 772.657833][T20802] ? __alloc_frozen_pages_noprof+0x292/0x2470 [ 772.657876][T20802] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 772.657918][T20802] ? is_bpf_text_address+0x8a/0x1a0 [ 772.657977][T20802] ? bpf_ksym_find+0x124/0x1c0 [ 772.658018][T20802] ? is_bpf_text_address+0x94/0x1a0 [ 772.658066][T20802] ? kernel_text_address+0x8d/0x100 [ 772.658121][T20802] ? __kernel_text_address+0xd/0x40 [ 772.658150][T20802] ? unwind_get_return_address+0x59/0xa0 [ 772.658202][T20802] alloc_pages_bulk_noprof+0x71c/0x1410 [ 772.658236][T20802] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 772.658295][T20802] ? policy_nodemask+0xea/0x4e0 [ 772.658343][T20802] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 772.658380][T20802] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 772.658445][T20802] kasan_populate_vmalloc+0x112/0x2d0 [ 772.658482][T20802] ? alloc_vmap_area+0x8b5/0x29e0 [ 772.658533][T20802] alloc_vmap_area+0x960/0x29e0 [ 772.658593][T20802] ? __pfx_alloc_vmap_area+0x10/0x10 [ 772.658649][T20802] __get_vm_area_node+0x1ca/0x330 [ 772.658699][T20802] ? ringbuf_map_alloc+0x3da/0x7f0 [ 772.658753][T20802] get_vm_area_caller+0x71/0xa0 [ 772.658798][T20802] ? ringbuf_map_alloc+0x3da/0x7f0 [ 772.658853][T20802] vmap+0x135/0x320 [ 772.658897][T20802] ? __pfx_vmap+0x10/0x10 [ 772.658960][T20802] ringbuf_map_alloc+0x3da/0x7f0 [ 772.659023][T20802] ? __pfx_ringbuf_map_mem_usage+0x10/0x10 [ 772.659076][T20802] map_create+0x659/0x27e0 [ 772.659145][T20802] ? __pfx_map_create+0x10/0x10 [ 772.659195][T20802] ? __might_fault+0xe3/0x190 [ 772.659227][T20802] ? __might_fault+0xe3/0x190 [ 772.659256][T20802] ? __might_fault+0x13b/0x190 [ 772.659305][T20802] __sys_bpf+0x3d9d/0x4980 [ 772.659337][T20802] ? futex_private_hash_put+0x18a/0x300 [ 772.659385][T20802] ? __pfx___sys_bpf+0x10/0x10 [ 772.659423][T20802] ? __pfx_futex_wake+0x10/0x10 [ 772.659482][T20802] ? errseq_sample+0x53/0x70 [ 772.659537][T20802] ? do_futex+0x122/0x350 [ 772.659605][T20802] ? __sys_socket+0xac/0x260 [ 772.659660][T20802] ? xfd_validate_state+0x61/0x180 [ 772.659706][T20802] ? __pfx___do_sys_close_range+0x10/0x10 [ 772.659751][T20802] __x64_sys_bpf+0x78/0xc0 [ 772.659785][T20802] ? lockdep_hardirqs_on+0x7c/0x110 [ 772.659823][T20802] do_syscall_64+0xcd/0xfa0 [ 772.659866][T20802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.659900][T20802] RIP: 0033:0x7fe9ce18eec9 [ 772.659927][T20802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 772.659967][T20802] RSP: 002b:00007fe9cc3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 772.660011][T20802] RAX: ffffffffffffffda RBX: 00007fe9ce3e5fa0 RCX: 00007fe9ce18eec9 [ 772.660033][T20802] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000000 [ 772.660055][T20802] RBP: 00007fe9ce211f91 R08: 0000000000000000 R09: 0000000000000000 [ 772.660076][T20802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 772.660096][T20802] R13: 00007fe9ce3e6038 R14: 00007fe9ce3e5fa0 R15: 00007ffc445f32c8 [ 772.660142][T20802] [ 773.739574][T20836] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81646c1a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 773.755908][T20836] Call Trace: [ 773.759231][T20836] [ 773.762191][T20836] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 773.768923][T20836] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 773.774769][T20836] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 773.781316][T20836] mce_cpu_restart+0xd9/0x1f0 [ 773.786042][T20836] ? __pfx_mce_cpu_restart+0x10/0x10 [ 773.791727][T20836] smp_call_function_many_cond+0x122a/0x1600 [ 773.797750][T20836] ? __pfx_mce_cpu_restart+0x10/0x10 [ 773.803098][T20836] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 773.808966][T20836] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 773.815345][T20836] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 773.821472][T20836] ? __pfx_mce_cpu_restart+0x10/0x10 [ 773.826806][T20836] on_each_cpu_cond_mask+0x40/0x90 [ 773.831959][T20836] set_bank+0x240/0x3a0 [ 773.836154][T20836] ? __pfx_set_bank+0x10/0x10 [ 773.840875][T20836] ? find_held_lock+0x2b/0x80 [ 773.845590][T20836] ? __pfx_set_bank+0x10/0x10 [ 773.850309][T20836] dev_attr_store+0x58/0x80 [ 773.854851][T20836] ? __pfx_dev_attr_store+0x10/0x10 [ 773.860093][T20836] sysfs_kf_write+0xf2/0x150 [ 773.864720][T20836] kernfs_fop_write_iter+0x3af/0x570 [ 773.870054][T20836] ? __pfx_sysfs_kf_write+0x10/0x10 [ 773.875301][T20836] vfs_write+0x7d3/0x11d0 [ 773.879681][T20836] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 773.885556][T20836] ? __pfx___mutex_lock+0x10/0x10 [ 773.890642][T20836] ? __pfx_vfs_write+0x10/0x10 [ 773.895485][T20836] ksys_write+0x12a/0x250 [ 773.899856][T20836] ? __pfx_ksys_write+0x10/0x10 [ 773.904762][T20836] do_syscall_64+0xcd/0xfa0 [ 773.909313][T20836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.915237][T20836] RIP: 0033:0x7fea2538eec9 [ 773.919783][T20836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.939447][T20836] RSP: 002b:00007fea261ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 773.947913][T20836] RAX: ffffffffffffffda RBX: 00007fea255e6180 RCX: 00007fea2538eec9 [ 773.955928][T20836] RDX: 0000000000000003 RSI: 0000200000000280 RDI: 0000000000000006 [ 773.963939][T20836] RBP: 00007fea25411f91 R08: 0000000000000000 R09: 0000000000000000 [ 773.971962][T20836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.979966][T20836] R13: 00007fea255e6218 R14: 00007fea255e6180 R15: 00007fff8b56bf68 [ 773.987996][T20836] [ 773.991341][ C0] vkms_vblank_simulate: vblank timer overrun [ 774.363460][T20848] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2086'. [ 775.013631][T20891] zero sized request [ 775.282766][T20729] cgroup: fork rejected by pids controller in /syz2 [ 777.568108][T21037] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2096'. [ 778.171080][T21050] Unable to find swap-space signature [ 778.964991][T19530] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 778.979214][T19530] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 778.989937][T19530] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 779.136806][T19530] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 779.219174][T19530] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 780.870075][T21069] chnl_net:caif_netlink_parms(): no params data found [ 781.333765][T21069] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.346734][T19932] Bluetooth: hci2: command tx timeout [ 781.367971][T21069] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.375310][T21069] bridge_slave_0: entered allmulticast mode [ 781.404963][T21069] bridge_slave_0: entered promiscuous mode [ 781.414440][T21069] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.432573][T21069] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.442088][T21069] bridge_slave_1: entered allmulticast mode [ 781.450361][T21069] bridge_slave_1: entered promiscuous mode [ 781.633270][T21069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.675598][T21069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.839634][T21069] team0: Port device team_slave_0 added [ 781.881281][T21069] team0: Port device team_slave_1 added [ 782.035810][T21069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.059537][T21069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.127997][T21069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.168234][T21069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.175278][T21069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.236579][T21069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.587430][T21069] hsr_slave_0: entered promiscuous mode [ 782.601674][T21069] hsr_slave_1: entered promiscuous mode [ 782.642051][T21069] debugfs: 'hsr0' already exists in 'hsr' [ 782.711408][T21069] Cannot create hsr debugfs directory [ 782.843264][T21384] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2110'. [ 783.112731][T21384] binder: 21381:21384 ioctl 400c620e 0 returned -22 [ 783.427772][T19932] Bluetooth: hci2: command tx timeout [ 783.993966][T21069] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.190629][T21069] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.322609][T21069] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.510970][T19932] Bluetooth: hci2: command tx timeout [ 786.007099][T21069] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.723993][T21069] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 786.799135][T21069] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 786.823811][T21069] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 786.869497][T21069] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 787.188487][T21069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.259750][T21069] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.285568][T19883] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.292840][T19883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.349848][T19883] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.357126][T19883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.594818][T19932] Bluetooth: hci2: command tx timeout [ 787.975480][T21069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.164915][T21069] veth0_vlan: entered promiscuous mode [ 788.212202][T21069] veth1_vlan: entered promiscuous mode [ 788.351416][T21069] veth0_macvtap: entered promiscuous mode [ 788.382005][T21069] veth1_macvtap: entered promiscuous mode [ 788.447588][T21069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.482650][T21069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.624962][T19634] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.642328][T19634] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.775197][T19634] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.797322][T19634] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.032055][T19634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.070376][T19634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.198481][T19883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 789.230147][T19883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 789.278000][T19530] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 789.300537][T19530] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 789.333979][T19530] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 789.344911][T19530] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 789.356506][T19530] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 789.977808][T21589] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 790.166057][T21548] chnl_net:caif_netlink_parms(): no params data found [ 790.779228][T21548] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.810537][T21548] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.831188][T21548] bridge_slave_0: entered allmulticast mode [ 790.847714][T21548] bridge_slave_0: entered promiscuous mode [ 790.864730][T21548] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.891208][T21548] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.898536][T21548] bridge_slave_1: entered allmulticast mode [ 790.927607][T21548] bridge_slave_1: entered promiscuous mode [ 791.156510][T21548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.219280][T21548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.434822][T19530] Bluetooth: hci5: command tx timeout [ 791.545503][T21548] team0: Port device team_slave_0 added [ 791.575231][T21548] team0: Port device team_slave_1 added [ 791.761187][T21548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.778409][T21548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.837475][T21548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.868051][T21548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.887756][T21548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.915649][T21548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.078356][T21548] hsr_slave_0: entered promiscuous mode [ 792.103701][T21548] hsr_slave_1: entered promiscuous mode [ 792.118081][T21548] debugfs: 'hsr0' already exists in 'hsr' [ 792.141552][T21548] Cannot create hsr debugfs directory [ 792.316513][T21857] netlink: 93 bytes leftover after parsing attributes in process `syz.4.2127'. [ 793.268077][T21548] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 793.303398][T21548] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 793.420216][T21548] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 793.448545][T21548] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 793.513965][T19530] Bluetooth: hci5: command tx timeout [ 793.714977][T21957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2131'. [ 793.734216][T21957] hsr0: entered allmulticast mode [ 793.739452][T21957] hsr_slave_0: entered allmulticast mode [ 793.753392][T21957] hsr_slave_1: entered allmulticast mode [ 793.798673][T21548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.870728][T21548] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.916257][T19549] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.923540][T19549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.958725][T19549] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.963656][T21959] netlink: 2468 bytes leftover after parsing attributes in process `syz.2.2132'. [ 793.966032][T19549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 794.912731][T21548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.528808][T21986] kvm: kvm [21985]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc1) = 0x2 [ 795.595047][T19530] Bluetooth: hci5: command tx timeout [ 796.071541][T21548] veth0_vlan: entered promiscuous mode [ 796.103194][T21548] veth1_vlan: entered promiscuous mode [ 796.279251][T21548] veth0_macvtap: entered promiscuous mode [ 796.355435][T21548] veth1_macvtap: entered promiscuous mode [ 796.431327][T21548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.447598][T21548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.546483][T21654] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.566798][T19549] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.588256][T19549] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.625258][T19549] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.807491][T22022] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2138'. [ 796.829850][T22022] netlink: 93 bytes leftover after parsing attributes in process `syz.4.2138'. [ 796.849244][T19528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.869959][T19528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.046885][T21654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.069356][T21654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.674691][T19530] Bluetooth: hci5: command tx timeout [ 798.766147][T22125] FAULT_INJECTION: forcing a failure. [ 798.766147][T22125] name failslab, interval 1, probability 0, space 0, times 0 [ 798.779200][T22125] CPU: 1 UID: 0 PID: 22125 Comm: syz.2.2144 Not tainted syzkaller #0 PREEMPT(full) [ 798.779245][T22125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 798.779266][T22125] Call Trace: [ 798.779276][T22125] [ 798.779290][T22125] dump_stack_lvl+0x16c/0x1f0 [ 798.779335][T22125] should_fail_ex+0x512/0x640 [ 798.779377][T22125] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 798.779419][T22125] should_failslab+0xc2/0x120 [ 798.779485][T22125] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 798.779524][T22125] ? __d_alloc+0x32/0xae0 [ 798.779571][T22125] ? __d_alloc+0x32/0xae0 [ 798.779605][T22125] ? trace_kmem_cache_alloc+0x28/0xc0 [ 798.779652][T22125] __d_alloc+0x32/0xae0 [ 798.779687][T22125] ? __pfx_map_id_range_down+0x10/0x10 [ 798.779755][T22125] d_alloc_pseudo+0x1c/0xc0 [ 798.779804][T22125] alloc_file_pseudo+0xcf/0x230 [ 798.779857][T22125] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 798.779920][T22125] sock_alloc_file+0x50/0x210 [ 798.779967][T22125] do_accept+0x240/0x530 [ 798.779998][T22125] ? do_raw_spin_lock+0x12c/0x2b0 [ 798.780054][T22125] ? __pfx_do_accept+0x10/0x10 [ 798.780110][T22125] __sys_accept4+0x100/0x1c0 [ 798.780140][T22125] ? __pfx___sys_accept4+0x10/0x10 [ 798.780186][T22125] __x64_sys_accept+0x74/0xb0 [ 798.780215][T22125] ? lockdep_hardirqs_on+0x7c/0x110 [ 798.780255][T22125] do_syscall_64+0xcd/0xfa0 [ 798.780298][T22125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.780330][T22125] RIP: 0033:0x7fc648f8eec9 [ 798.780356][T22125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 798.780390][T22125] RSP: 002b:00007fc649da6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 798.780422][T22125] RAX: ffffffffffffffda RBX: 00007fc6491e5fa0 RCX: 00007fc648f8eec9 [ 798.780443][T22125] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 798.780462][T22125] RBP: 00007fc649011f91 R08: 0000000000000000 R09: 0000000000000000 [ 798.780481][T22125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 798.780500][T22125] R13: 00007fc6491e6038 R14: 00007fc6491e5fa0 R15: 00007ffef87e6048 [ 798.780543][T22125] [ 801.121424][T22174] random: crng reseeded on system resumption [ 801.238710][T19932] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 801.258173][T19932] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 801.269914][T19932] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 801.279734][T19932] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 801.290027][T19932] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 801.941275][T22214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2152'. [ 801.954239][T22214] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2152'. [ 802.329217][T22282] can0: slcan on ttyS2. [ 802.444930][T22177] chnl_net:caif_netlink_parms(): no params data found [ 802.457168][T22266] can0 (unregistered): slcan off ttyS2. [ 802.572923][T22315] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2155'. [ 802.979174][T22177] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.992388][T22177] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.007368][T22177] bridge_slave_0: entered allmulticast mode [ 803.031627][T22177] bridge_slave_0: entered promiscuous mode [ 803.057962][T22177] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.074239][T22177] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.090859][T22177] bridge_slave_1: entered allmulticast mode [ 803.112458][T22177] bridge_slave_1: entered promiscuous mode [ 803.272879][T22177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.290204][T22385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2158'. [ 803.324858][T22177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.361060][T19932] Bluetooth: hci6: command tx timeout [ 803.503081][T22177] team0: Port device team_slave_0 added [ 803.522264][T22177] team0: Port device team_slave_1 added [ 803.642690][T22177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.651448][T22177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.680537][T22177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 803.705628][T22177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 803.723183][T22177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.749210][ C1] vkms_vblank_simulate: vblank timer overrun [ 803.780194][T22177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.883245][T22177] hsr_slave_0: entered promiscuous mode [ 803.891573][T22177] hsr_slave_1: entered promiscuous mode [ 803.899795][T22177] debugfs: 'hsr0' already exists in 'hsr' [ 803.905664][T22177] Cannot create hsr debugfs directory [ 804.530170][T22177] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 804.567051][T22177] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 804.629960][T22177] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 804.688428][T22177] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 805.260389][T22177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.417170][T22177] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.438151][T19932] Bluetooth: hci6: command tx timeout [ 805.547716][T19542] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.555048][T19542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.641492][T19542] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.649272][T19542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.754234][T22653] warn_alloc: 1 callbacks suppressed [ 805.754258][T22653] syz.2.2165: vmalloc error: size 8192, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 805.839548][T22653] CPU: 0 UID: 0 PID: 22653 Comm: syz.2.2165 Not tainted syzkaller #0 PREEMPT(full) [ 805.839592][T22653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 805.839612][T22653] Call Trace: [ 805.839622][T22653] [ 805.839635][T22653] dump_stack_lvl+0x16c/0x1f0 [ 805.839679][T22653] warn_alloc+0x248/0x3a0 [ 805.839715][T22653] ? __pfx_warn_alloc+0x10/0x10 [ 805.839752][T22653] ? alloc_pages_mpol+0x25a/0x550 [ 805.839800][T22653] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 805.839842][T22653] ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10 [ 805.839897][T22653] ? trace_kmalloc+0x2b/0xd0 [ 805.839936][T22653] ? __get_vm_area_node+0x1dc/0x330 [ 805.839979][T22653] ? __vmalloc_node_range_noprof+0x3e5/0x1480 [ 805.840038][T22653] __vmalloc_node_range_noprof+0x119b/0x1480 [ 805.840111][T22653] ? n_tty_open+0x1a/0x170 [ 805.840158][T22653] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 805.840207][T22653] ? look_up_lock_class+0x59/0x150 [ 805.840253][T22653] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 805.840294][T22653] ? n_tty_open+0x1a/0x170 [ 805.840325][T22653] __vmalloc_node_noprof+0xad/0xf0 [ 805.840371][T22653] ? n_tty_open+0x1a/0x170 [ 805.840403][T22653] ? __pfx_n_tty_open+0x10/0x10 [ 805.840438][T22653] n_tty_open+0x1a/0x170 [ 805.840470][T22653] ? __pfx_n_tty_open+0x10/0x10 [ 805.840501][T22653] tty_ldisc_open+0x9c/0x120 [ 805.840546][T22653] tty_ldisc_setup+0x40/0x100 [ 805.840594][T22653] tty_init_dev.part.0+0x1ec/0x500 [ 805.840652][T22653] tty_init_dev+0x60/0x80 [ 805.840704][T22653] ? __pfx_ptmx_open+0x10/0x10 [ 805.840742][T22653] ptmx_open+0x10d/0x360 [ 805.840783][T22653] ? __pfx_ptmx_open+0x10/0x10 [ 805.840825][T22653] chrdev_open+0x234/0x6a0 [ 805.840863][T22653] ? __pfx_apparmor_file_open+0x10/0x10 [ 805.840912][T22653] ? __pfx_chrdev_open+0x10/0x10 [ 805.840954][T22653] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 805.841000][T22653] do_dentry_open+0x982/0x1530 [ 805.841040][T22653] ? __pfx_chrdev_open+0x10/0x10 [ 805.841090][T22653] vfs_open+0x82/0x3f0 [ 805.841151][T22653] path_openat+0x1de4/0x2cb0 [ 805.841204][T22653] ? __pfx_path_openat+0x10/0x10 [ 805.841254][T22653] do_filp_open+0x20b/0x470 [ 805.841291][T22653] ? __pfx_do_filp_open+0x10/0x10 [ 805.841362][T22653] ? alloc_fd+0x471/0x7d0 [ 805.841408][T22653] do_sys_openat2+0x11b/0x1d0 [ 805.841457][T22653] ? __pfx_do_sys_openat2+0x10/0x10 [ 805.841509][T22653] ? __sys_sendmsg+0x18c/0x220 [ 805.841558][T22653] __x64_sys_openat+0x174/0x210 [ 805.841609][T22653] ? __pfx___x64_sys_openat+0x10/0x10 [ 805.841678][T22653] do_syscall_64+0xcd/0xfa0 [ 805.841720][T22653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.841755][T22653] RIP: 0033:0x7fc648f8eec9 [ 805.841781][T22653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 805.841814][T22653] RSP: 002b:00007fc649da6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 805.841846][T22653] RAX: ffffffffffffffda RBX: 00007fc6491e5fa0 RCX: 00007fc648f8eec9 [ 805.841868][T22653] RDX: 0000000000040001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 805.841889][T22653] RBP: 00007fc649011f91 R08: 0000000000000000 R09: 0000000000000000 [ 805.841909][T22653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 805.841928][T22653] R13: 00007fc6491e6038 R14: 00007fc6491e5fa0 R15: 00007ffef87e6048 [ 805.841975][T22653] [ 805.841988][T22653] Mem-Info: [ 806.198554][T22653] active_anon:21796 inactive_anon:1 isolated_anon:0 [ 806.198554][T22653] active_file:15967 inactive_file:45993 isolated_file:0 [ 806.198554][T22653] unevictable:790 dirty:124 writeback:512 [ 806.198554][T22653] slab_reclaimable:14483 slab_unreclaimable:115365 [ 806.198554][T22653] mapped:46086 shmem:3334 pagetables:1226 [ 806.198554][T22653] sec_pagetables:0 bounce:0 [ 806.198554][T22653] kernel_misc_reclaimable:0 [ 806.198554][T22653] free:1241165 free_pcp:16918 free_cma:0 [ 806.244342][ C1] vkms_vblank_simulate: vblank timer overrun [ 806.285544][T22653] Node 0 active_anon:87116kB inactive_anon:4kB active_file:63860kB inactive_file:179656kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:184396kB dirty:100kB writeback:400kB shmem:11828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:51200kB kernel_stack:13840kB pagetables:4856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 806.339189][T22653] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4240kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:96kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 806.463091][T22653] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 806.493034][ C1] vkms_vblank_simulate: vblank timer overrun [ 806.545418][T22653] lowmem_reserve[]: 0 2484 2485 2485 2485 [ 806.573342][T22653] Node 0 DMA32 free:1049696kB boost:0kB min:34352kB low:42940kB high:51528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:85112kB inactive_anon:4kB active_file:63860kB inactive_file:179656kB unevictable:1536kB writepending:500kB zspages:0kB present:3129332kB managed:2543664kB mlocked:0kB bounce:0kB free_pcp:60572kB local_pcp:31628kB free_cma:0kB [ 806.606827][ C1] vkms_vblank_simulate: vblank timer overrun [ 806.668640][T22653] lowmem_reserve[]: 0 0 1 1 1 [ 806.673471][T22653] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 806.703254][ C1] vkms_vblank_simulate: vblank timer overrun [ 806.748871][T22653] lowmem_reserve[]: 0 0 0 0 0 [ 806.753763][T22653] Node 1 Normal free:3908856kB boost:0kB min:55524kB low:69404kB high:83284kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:144kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:6792kB local_pcp:6792kB free_cma:0kB [ 806.786172][ C1] vkms_vblank_simulate: vblank timer overrun [ 806.873489][T22177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 806.900971][T22653] lowmem_reserve[]: 0 0 0 0 0 [ 806.905803][T22653] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 806.979845][T22653] Node 0 DMA32: 4192*4kB (M) 2349*8kB (UME) 1345*16kB (UM) 1439*32kB (UM) 731*64kB (UME) 325*128kB (UM) 334*256kB (UM) 161*512kB (UME) 41*1024kB (M) 4*2048kB (M) 156*4096kB (M) = 1048600kB [ 807.035763][T22653] Node 0 Normal: 1*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 807.068796][T22653] Node 1 Normal: 198*4kB (UME) 26*8kB (UME) 31*16kB (UME) 213*32kB (UME) 88*64kB (UME) 29*128kB (UME) 16*256kB (UME) 4*512kB (UM) 2*1024kB (UM) 4*2048kB (UME) 946*4096kB (M) = 3908856kB [ 807.108247][T22653] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 807.128580][T22653] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=0 hugepages_size=2048kB [ 807.160238][T22653] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 807.204929][T22653] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 807.230328][T22653] 64278 total pagecache pages [ 807.235079][T22653] 32 pages in swap cache [ 807.259519][T22653] Free swap = 124592kB [ 807.263750][T22653] Total swap = 124996kB [ 807.267943][T22653] 2097051 pages RAM [ 807.281640][T22653] 0 pages HighMem/MovableOnly [ 807.291778][T22653] 429045 pages reserved [ 807.296169][T22653] 0 pages cma reserved [ 807.310051][T22653] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 807.493579][T22177] veth0_vlan: entered promiscuous mode [ 807.519900][T19932] Bluetooth: hci6: command tx timeout [ 807.539770][T22177] veth1_vlan: entered promiscuous mode [ 807.788237][T22177] veth0_macvtap: entered promiscuous mode [ 807.806371][T22177] veth1_macvtap: entered promiscuous mode [ 808.072226][T22177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 808.111135][T22177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 808.139069][T22084] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.156235][T22084] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.202990][T22084] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.296354][T22084] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.579546][T22084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.587448][T22084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.660655][T22720] FAULT_INJECTION: forcing a failure. [ 808.660655][T22720] name failslab, interval 1, probability 0, space 0, times 0 [ 808.675881][T22715] netlink: 'syz.2.2169': attribute type 19 has an invalid length. [ 808.675915][T22715] netlink: 226 bytes leftover after parsing attributes in process `syz.2.2169'. [ 808.702353][T22094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.720093][T22720] CPU: 1 UID: 0 PID: 22720 Comm: syz.4.2170 Not tainted syzkaller #0 PREEMPT(full) [ 808.720134][T22720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 808.720154][T22720] Call Trace: [ 808.720164][T22720] [ 808.720177][T22720] dump_stack_lvl+0x16c/0x1f0 [ 808.720222][T22720] should_fail_ex+0x512/0x640 [ 808.720264][T22720] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 808.720301][T22720] should_failslab+0xc2/0x120 [ 808.720346][T22720] kmem_cache_alloc_noprof+0x75/0x6e0 [ 808.720380][T22720] ? __kernfs_iattrs+0x124/0x3e0 [ 808.720429][T22720] ? __kernfs_iattrs+0x124/0x3e0 [ 808.720465][T22720] ? __pfx___might_resched+0x10/0x10 [ 808.720499][T22720] __kernfs_iattrs+0x124/0x3e0 [ 808.720540][T22720] ? __pfx___kernfs_iattrs+0x10/0x10 [ 808.720595][T22720] ? down_write+0x14d/0x200 [ 808.720640][T22720] ? inode_newsize_ok+0x13b/0x200 [ 808.720695][T22720] __kernfs_setattr+0x4d/0x3c0 [ 808.720741][T22720] kernfs_iop_setattr+0xda/0x120 [ 808.720785][T22720] ? __pfx_kernfs_iop_setattr+0x10/0x10 [ 808.720825][T22720] notify_change+0x6cf/0x12a0 [ 808.720888][T22720] do_truncate+0x1d7/0x230 [ 808.720928][T22720] ? __pfx_do_truncate+0x10/0x10 [ 808.720981][T22720] ? mnt_get_write_access+0x1e9/0x2f0 [ 808.721035][T22720] vfs_truncate+0x5d6/0x6e0 [ 808.721077][T22720] ? __pfx_vfs_truncate+0x10/0x10 [ 808.721118][T22720] ? putname+0x154/0x1a0 [ 808.721156][T22720] ? putname+0x154/0x1a0 [ 808.721204][T22720] __x64_sys_truncate+0x172/0x1e0 [ 808.721246][T22720] ? __pfx___x64_sys_truncate+0x10/0x10 [ 808.721301][T22720] do_syscall_64+0xcd/0xfa0 [ 808.721344][T22720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.721377][T22720] RIP: 0033:0x7fe9ce18eec9 [ 808.721404][T22720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.721437][T22720] RSP: 002b:00007fe9cc3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 808.721476][T22720] RAX: ffffffffffffffda RBX: 00007fe9ce3e5fa0 RCX: 00007fe9ce18eec9 [ 808.721498][T22720] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000040 [ 808.721519][T22720] RBP: 00007fe9ce211f91 R08: 0000000000000000 R09: 0000000000000000 [ 808.721540][T22720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 808.721569][T22720] R13: 00007fe9ce3e6038 R14: 00007fe9ce3e5fa0 R15: 00007ffc445f32c8 [ 808.721617][T22720] [ 808.727161][T22094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.621961][T19932] Bluetooth: hci6: command tx timeout [ 810.591667][T22814] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2175'. [ 810.600913][T22814] hsr0: entered promiscuous mode [ 810.605919][T22814] hsr0: entered allmulticast mode [ 810.611138][T22814] hsr_slave_0: entered allmulticast mode [ 810.617257][T22814] hsr_slave_1: entered allmulticast mode [ 811.454609][T22828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2180'. [ 811.661188][T22824] netlink: 268 bytes leftover after parsing attributes in process `syz.6.2178'. [ 812.997835][T22882] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2187'. [ 813.027718][T22882] hsr0: left promiscuous mode [ 813.585825][T22898] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2189'. [ 813.601083][T22898] macvtap0: entered promiscuous mode [ 814.894010][T22949] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 815.892522][T22961] FAULT_INJECTION: forcing a failure. [ 815.892522][T22961] name failslab, interval 1, probability 0, space 0, times 0 [ 815.921618][T22961] CPU: 0 UID: 0 PID: 22961 Comm: syz.6.2196 Not tainted syzkaller #0 PREEMPT(full) [ 815.921664][T22961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 815.921685][T22961] Call Trace: [ 815.921696][T22961] [ 815.921708][T22961] dump_stack_lvl+0x16c/0x1f0 [ 815.921753][T22961] should_fail_ex+0x512/0x640 [ 815.921794][T22961] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 815.921843][T22961] should_failslab+0xc2/0x120 [ 815.921888][T22961] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 815.921932][T22961] ? kstrdup_const+0x63/0x80 [ 815.921976][T22961] ? kstrdup+0x53/0x100 [ 815.922008][T22961] kstrdup+0x53/0x100 [ 815.922044][T22961] kstrdup_const+0x63/0x80 [ 815.922078][T22961] __kmem_cache_create_args+0x16c/0x3c0 [ 815.922146][T22961] mon_text_open+0x333/0x510 [ 815.922196][T22961] ? __pfx_mon_text_open+0x10/0x10 [ 815.922249][T22961] ? __pfx_mon_text_ctor+0x10/0x10 [ 815.922299][T22961] ? __pfx_apparmor_file_open+0x10/0x10 [ 815.922345][T22961] ? lockdown_is_locked_down+0x3f/0x130 [ 815.922389][T22961] ? bpf_lsm_locked_down+0x9/0x10 [ 815.922440][T22961] ? __pfx_mon_text_open+0x10/0x10 [ 815.922485][T22961] full_proxy_open_regular+0x1b9/0x360 [ 815.922536][T22961] do_dentry_open+0x982/0x1530 [ 815.922576][T22961] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 815.922635][T22961] vfs_open+0x82/0x3f0 [ 815.922686][T22961] path_openat+0x1de4/0x2cb0 [ 815.922736][T22961] ? __pfx_path_openat+0x10/0x10 [ 815.922786][T22961] do_filp_open+0x20b/0x470 [ 815.922823][T22961] ? __pfx_do_filp_open+0x10/0x10 [ 815.922892][T22961] ? alloc_fd+0x471/0x7d0 [ 815.922938][T22961] do_sys_openat2+0x11b/0x1d0 [ 815.922986][T22961] ? __pfx_do_sys_openat2+0x10/0x10 [ 815.923052][T22961] __x64_sys_openat+0x174/0x210 [ 815.923103][T22961] ? __pfx___x64_sys_openat+0x10/0x10 [ 815.923181][T22961] do_syscall_64+0xcd/0xfa0 [ 815.923224][T22961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.923258][T22961] RIP: 0033:0x7f5e6d38eec9 [ 815.923285][T22961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 815.923319][T22961] RSP: 002b:00007f5e6e14f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 815.923351][T22961] RAX: ffffffffffffffda RBX: 00007f5e6d5e6090 RCX: 00007f5e6d38eec9 [ 815.923373][T22961] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 815.923393][T22961] RBP: 00007f5e6d411f91 R08: 0000000000000000 R09: 0000000000000000 [ 815.923413][T22961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.923434][T22961] R13: 00007f5e6d5e6128 R14: 00007f5e6d5e6090 R15: 00007ffd302efa28 [ 815.923482][T22961] [ 816.249247][T22961] __kmem_cache_create_args(mon_text_ffff888044ab4000) failed with error -12 [ 816.331246][T22984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2197'. [ 816.344498][T22961] CPU: 1 UID: 0 PID: 22961 Comm: syz.6.2196 Not tainted syzkaller #0 PREEMPT(full) [ 816.344548][T22961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 816.344569][T22961] Call Trace: [ 816.344580][T22961] [ 816.344592][T22961] dump_stack_lvl+0x16c/0x1f0 [ 816.344642][T22961] __kmem_cache_create_args+0x128/0x3c0 [ 816.344703][T22961] mon_text_open+0x333/0x510 [ 816.344761][T22961] ? __pfx_mon_text_open+0x10/0x10 [ 816.344815][T22961] ? __pfx_mon_text_ctor+0x10/0x10 [ 816.344893][T22961] ? __pfx_apparmor_file_open+0x10/0x10 [ 816.344944][T22961] ? lockdown_is_locked_down+0x3f/0x130 [ 816.344988][T22961] ? bpf_lsm_locked_down+0x9/0x10 [ 816.345043][T22961] ? __pfx_mon_text_open+0x10/0x10 [ 816.345088][T22961] full_proxy_open_regular+0x1b9/0x360 [ 816.345142][T22961] do_dentry_open+0x982/0x1530 [ 816.345182][T22961] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 816.345244][T22961] vfs_open+0x82/0x3f0 [ 816.345296][T22961] path_openat+0x1de4/0x2cb0 [ 816.345348][T22961] ? __pfx_path_openat+0x10/0x10 [ 816.345401][T22961] do_filp_open+0x20b/0x470 [ 816.345440][T22961] ? __pfx_do_filp_open+0x10/0x10 [ 816.345514][T22961] ? alloc_fd+0x471/0x7d0 [ 816.345565][T22961] do_sys_openat2+0x11b/0x1d0 [ 816.345615][T22961] ? __pfx_do_sys_openat2+0x10/0x10 [ 816.345686][T22961] __x64_sys_openat+0x174/0x210 [ 816.345743][T22961] ? __pfx___x64_sys_openat+0x10/0x10 [ 816.345818][T22961] do_syscall_64+0xcd/0xfa0 [ 816.345868][T22961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.345907][T22961] RIP: 0033:0x7f5e6d38eec9 [ 816.345935][T22961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 816.345969][T22961] RSP: 002b:00007f5e6e14f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 816.346004][T22961] RAX: ffffffffffffffda RBX: 00007f5e6d5e6090 RCX: 00007f5e6d38eec9 [ 816.346026][T22961] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 816.346048][T22961] RBP: 00007f5e6d411f91 R08: 0000000000000000 R09: 0000000000000000 [ 816.346073][T22961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 816.346094][T22961] R13: 00007f5e6d5e6128 R14: 00007f5e6d5e6090 R15: 00007ffd302efa28 [ 816.346143][T22961] [ 818.976397][T19530] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 818.988345][T19530] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 818.996901][T19530] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 819.022442][T19530] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 819.035453][T19530] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 819.295124][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 819.301596][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.560302][T23019] chnl_net:caif_netlink_parms(): no params data found [ 819.771253][T23019] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.778778][T23019] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.786778][T23019] bridge_slave_0: entered allmulticast mode [ 819.795906][T23019] bridge_slave_0: entered promiscuous mode [ 819.806307][T23019] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.813869][T23019] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.821645][T23019] bridge_slave_1: entered allmulticast mode [ 819.831574][T23019] bridge_slave_1: entered promiscuous mode [ 819.953396][T23019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.972816][T23019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.111665][T23019] team0: Port device team_slave_0 added [ 820.170082][T23019] team0: Port device team_slave_1 added [ 820.334613][T23019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 820.365193][T23019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.433458][T23019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.465198][T23019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 820.473849][T23019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.515072][T23019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.938614][T23019] hsr_slave_0: entered promiscuous mode [ 821.007484][T23019] hsr_slave_1: entered promiscuous mode [ 821.035915][T23019] debugfs: 'hsr0' already exists in 'hsr' [ 821.064460][T23019] Cannot create hsr debugfs directory [ 821.129262][T19530] Bluetooth: hci7: command tx timeout [ 822.464373][T23416] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 822.507373][T23411] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2212'. [ 822.625178][T23019] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 822.754345][T23019] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 822.858205][T23019] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 822.909134][T23019] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 823.206972][T19530] Bluetooth: hci7: command tx timeout [ 823.350331][T23019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.438527][T23019] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.579544][T23019] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 823.617297][T23019] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 823.850080][T19634] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.857331][T19634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.909904][T19634] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.917209][T19634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 824.517857][T23019] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 825.071113][T23019] veth0_vlan: entered promiscuous mode [ 825.116327][T23019] veth1_vlan: entered promiscuous mode [ 825.245775][T23019] veth0_macvtap: entered promiscuous mode [ 825.287714][T23019] veth1_macvtap: entered promiscuous mode [ 825.288401][T19530] Bluetooth: hci7: command tx timeout [ 825.340678][T23019] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 825.360765][T23019] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.390002][T22095] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.409775][T22095] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.460066][T22095] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.490269][T22095] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.505624][T23527] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 825.539554][T23527] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2219'. [ 825.798201][T23540] sg_read: process 165 (syz.2.2221) changed security contexts after opening file descriptor, this is not allowed. [ 825.826621][T19634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.860004][T19634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.870091][T23540] program syz.2.2221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 825.957855][T22085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.987581][T22085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.570609][T23571] random: crng reseeded on system resumption [ 826.610025][T23571] Restarting kernel threads ... [ 826.626116][T23571] Done restarting kernel threads. [ 826.645472][T23571] FAULT_INJECTION: forcing a failure. [ 826.645472][T23571] name failslab, interval 1, probability 0, space 0, times 0 [ 826.680994][T23571] CPU: 1 UID: 0 PID: 23571 Comm: syz.7.2224 Not tainted syzkaller #0 PREEMPT(full) [ 826.681027][T23571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 826.681042][T23571] Call Trace: [ 826.681049][T23571] [ 826.681059][T23571] dump_stack_lvl+0x16c/0x1f0 [ 826.681092][T23571] should_fail_ex+0x512/0x640 [ 826.681122][T23571] ? kmem_cache_alloc_lru_noprof+0x66/0x6e0 [ 826.681150][T23571] should_failslab+0xc2/0x120 [ 826.681189][T23571] kmem_cache_alloc_lru_noprof+0x79/0x6e0 [ 826.681213][T23571] ? __pfx___might_resched+0x10/0x10 [ 826.681239][T23571] ? sock_alloc_inode+0x25/0x1c0 [ 826.681279][T23571] ? __pfx_sock_alloc_inode+0x10/0x10 [ 826.681310][T23571] ? sock_alloc_inode+0x25/0x1c0 [ 826.681341][T23571] sock_alloc_inode+0x25/0x1c0 [ 826.681373][T23571] alloc_inode+0x61/0x240 [ 826.681406][T23571] sock_alloc+0x40/0x280 [ 826.681437][T23571] __sock_create+0xc1/0x8d0 [ 826.681478][T23571] __sys_socket+0x14d/0x260 [ 826.681515][T23571] ? __pfx___sys_socket+0x10/0x10 [ 826.681554][T23571] ? do_user_addr_fault+0x843/0x1370 [ 826.681582][T23571] __x64_sys_socket+0x72/0xb0 [ 826.681617][T23571] ? lockdep_hardirqs_on+0x7c/0x110 [ 826.681644][T23571] do_syscall_64+0xcd/0xfa0 [ 826.681673][T23571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.681698][T23571] RIP: 0033:0x7fcc41790de7 [ 826.681716][T23571] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.681740][T23571] RSP: 002b:00007fcc4270ffa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 826.681762][T23571] RAX: ffffffffffffffda RBX: 00007fcc419e5fa0 RCX: 00007fcc41790de7 [ 826.681778][T23571] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 826.681791][T23571] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 826.681805][T23571] R10: 0000200000000140 R11: 0000000000000286 R12: 0000000000000000 [ 826.681819][T23571] R13: 00007fcc419e6038 R14: 00007fcc419e5fa0 R15: 00007ffc7226e358 [ 826.681851][T23571] [ 826.681861][T23571] socket: no more sockets [ 827.224737][T23527] random: crng reseeded on system resumption [ 827.369318][T19530] Bluetooth: hci7: command tx timeout [ 829.559714][T19932] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 829.578476][T19932] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 829.604665][T19932] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 829.616800][T19932] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 829.625658][T19932] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 830.959833][T23664] chnl_net:caif_netlink_parms(): no params data found [ 831.406038][T23664] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.421476][T23664] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.431461][T23664] bridge_slave_0: entered allmulticast mode [ 831.439844][T23664] bridge_slave_0: entered promiscuous mode [ 831.532482][T23664] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.539697][T23664] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.561423][T23664] bridge_slave_1: entered allmulticast mode [ 831.573588][T23664] bridge_slave_1: entered promiscuous mode [ 831.691964][T19932] Bluetooth: hci8: command tx timeout [ 831.693990][T23664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 831.724062][T23664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 831.739791][T23898] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2238'. [ 831.867586][T23664] team0: Port device team_slave_0 added [ 831.893155][T23664] team0: Port device team_slave_1 added [ 832.147143][T23664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.184953][T23664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.286225][T23664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.316294][T23664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.334919][T23664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.373604][T23664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.563043][T23664] hsr_slave_0: entered promiscuous mode [ 832.570371][T23664] hsr_slave_1: entered promiscuous mode [ 832.584089][T23664] debugfs: 'hsr0' already exists in 'hsr' [ 832.591631][T23664] Cannot create hsr debugfs directory [ 833.343748][T23664] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 833.423041][T23664] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 833.466595][T23664] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 833.525821][T23664] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 833.774874][T19932] Bluetooth: hci8: command tx timeout [ 833.912997][T23664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.006317][T23664] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.131097][T21639] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.131241][T21639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.135260][T21639] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.135453][T21639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.424185][T24093] random: crng reseeded on system resumption [ 835.775714][T23664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.853578][T19932] Bluetooth: hci8: command tx timeout [ 836.758615][T23664] veth0_vlan: entered promiscuous mode [ 836.801650][T23664] veth1_vlan: entered promiscuous mode [ 836.869819][T23664] veth0_macvtap: entered promiscuous mode [ 836.934921][T23664] veth1_macvtap: entered promiscuous mode [ 837.029330][T23664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 837.078627][T23664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 837.121631][T22095] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.276207][T22095] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.352152][T22095] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.431422][T22095] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 837.516386][T22095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.536662][T22095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.612077][T22087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.647483][T22087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.935350][T19932] Bluetooth: hci8: command tx timeout [ 838.615730][T24216] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2253'. [ 838.716987][T24222] netlink: 286 bytes leftover after parsing attributes in process `syz.8.2253'. [ 839.002831][T24235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2252'. [ 840.083399][T24262] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2257'. [ 840.329862][T24274] netlink: 21 bytes leftover after parsing attributes in process `syz.8.2258'. [ 841.044399][T24298] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 841.091169][T24298] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2262'. [ 841.112294][T24298] hsr0: entered allmulticast mode [ 841.118218][T24298] hsr_slave_0: entered allmulticast mode [ 841.124224][T24298] hsr_slave_1: entered allmulticast mode [ 841.489435][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888042a35c00: 0x00000: (2) System resources were needed for another task so this connection managed session was terminated. [ 842.578700][T24352] __vm_enough_memory: pid: 24352, comm: syz.8.2269, bytes: 4398046511104 not enough memory for the allocation [ 843.767481][T24381] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 843.818019][T24381] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 843.832542][T24381] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 843.849984][T24381] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 843.868071][T24381] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 843.880038][T24381] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 844.022767][T24381] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 844.067948][T24381] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 844.206694][T24381] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 844.279863][T24381] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 844.301134][T24381] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 844.380726][T24381] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 844.442118][T24381] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 844.464394][T24381] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 844.668639][T24381] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 844.797125][T24381] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 844.825913][T24381] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 844.928531][T24381] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 844.960071][T24381] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 844.968717][T24381] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 844.988228][T24381] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 845.389923][T24429] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078000000 pfn:0x78000 [ 845.448023][T24429] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 845.455284][T24429] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 845.543822][T24429] raw: ffff888078000000 0000000000000000 00000001ffffffff 0000000000000000 [ 845.578017][T24429] page dumped because: unmovable page [ 845.583469][T24429] page_owner tracks the page as allocated [ 845.638307][T24429] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 11595, tgid 11587 (syz.1.1152), ts 483662916735, free_ts 481854531585 [ 845.704495][T19932] Bluetooth: hci0: command 0x0406 tx timeout [ 845.708628][T24429] post_alloc_hook+0x1c0/0x230 [ 845.715656][T24429] get_page_from_freelist+0x10a3/0x3a30 [ 845.751283][T24429] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 845.776604][T19530] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 845.785232][T24429] alloc_pages_mpol+0x1fb/0x550 [ 845.798018][T24429] alloc_pages_noprof+0x131/0x390 [ 845.823863][T19530] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 845.833913][T19530] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 845.842639][T19530] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 845.848504][T24429] __vmalloc_node_range_noprof+0x6f8/0x1480 [ 845.852416][T19530] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 845.866265][T19530] Bluetooth: hci4: command 0x0c1a tx timeout [ 845.874521][T19530] Bluetooth: hci3: command 0x0406 tx timeout [ 845.876263][T24429] __vmalloc_node_noprof+0xad/0xf0 [ 845.880704][T19550] Bluetooth: hci1: command 0x0406 tx timeout [ 845.908348][T24429] pcpu_mem_zalloc+0x54/0xb0 [ 845.928295][T24429] pcpu_create_chunk+0x432/0x730 [ 845.948322][T24429] pcpu_alloc_noprof+0x128f/0x14c0 [ 845.976072][T24429] bpf_map_alloc_percpu+0x9a/0x4b0 [ 845.991663][T24429] htab_map_alloc+0x10ca/0x1570 [ 846.018513][T24429] map_create+0x659/0x27e0 [ 846.028580][T24429] __sys_bpf+0x3d9d/0x4980 [ 846.048382][T24429] __x64_sys_bpf+0x78/0xc0 [ 846.059021][T24429] do_syscall_64+0xcd/0xfa0 [ 846.074368][T24429] page last free pid 11571 tgid 11569 stack trace: [ 846.099118][T24429] __free_frozen_pages+0x7df/0x1160 [ 846.112242][T24429] tlb_finish_mmu+0x237/0x7c0 [ 846.117154][T24429] exit_mmap+0x3fc/0xb90 [ 846.138469][T24429] __mmput+0x12a/0x410 [ 846.147579][T24429] mmput+0x62/0x70 [ 846.153242][T24429] do_exit+0x7c7/0x2bf0 [ 846.157501][T24429] do_group_exit+0xd3/0x2a0 [ 846.189741][T24429] get_signal+0x2671/0x26d0 [ 846.203860][T24429] arch_do_signal_or_restart+0x8f/0x790 [ 846.217055][T24429] exit_to_user_mode_loop+0x85/0x130 [ 846.228551][T24429] do_syscall_64+0x426/0xfa0 [ 846.240665][T24429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.347441][T19932] Bluetooth: hci5: command 0x0c1a tx timeout [ 846.499384][T19932] Bluetooth: hci6: command 0x0c1a tx timeout [ 846.566101][T24455] chnl_net:caif_netlink_parms(): no params data found [ 846.824976][T19932] Bluetooth: hci7: command 0x0c1a tx timeout [ 846.978854][T19932] Bluetooth: hci8: command 0x0c1a tx timeout [ 847.172956][T24455] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.197563][T24455] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.207206][T24455] bridge_slave_0: entered allmulticast mode [ 847.223548][T24455] bridge_slave_0: entered promiscuous mode [ 847.306154][T24455] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.346663][T24455] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.368468][T24455] bridge_slave_1: entered allmulticast mode [ 847.381743][T24455] bridge_slave_1: entered promiscuous mode [ 847.741477][T24455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.766324][T24455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.940924][T19932] Bluetooth: hci2: command tx timeout [ 847.948075][T19550] Bluetooth: hci4: command 0x0c1a tx timeout [ 848.165216][T24455] team0: Port device team_slave_0 added [ 848.325579][T24455] team0: Port device team_slave_1 added [ 848.420443][T19550] Bluetooth: hci5: command 0x0c1a tx timeout [ 848.575892][T24455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.579818][T19550] Bluetooth: hci6: command 0x0c1a tx timeout [ 848.713812][T24455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.814070][T24455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.900575][T19550] Bluetooth: hci7: command 0x0c1a tx timeout [ 848.923210][T24455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 848.956951][T24455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.994136][T24455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 849.059898][T19550] Bluetooth: hci8: command 0x0c1a tx timeout [ 849.203440][T24660] kexec: Could not allocate control_code_buffer [ 849.210676][T24455] hsr_slave_0: entered promiscuous mode [ 849.217841][T24455] hsr_slave_1: entered promiscuous mode [ 849.236970][T24455] debugfs: 'hsr0' already exists in 'hsr' [ 849.249950][T24455] Cannot create hsr debugfs directory [ 849.465964][T24846] sd 0:0:1:0: PR command failed: 1026 [ 849.485961][T24846] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 849.500136][T24846] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 849.542862][T24846] sd 0:0:1:0: PR command failed: 1026 [ 849.548351][T24846] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 849.632045][T24846] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 849.675438][T24846] sd 0:0:1:0: PR command failed: 1026 [ 849.707951][T24846] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 849.722607][T24846] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 849.737194][T24846] sd 0:0:1:0: PR command failed: 1026 [ 849.759112][T24846] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 849.770891][T24846] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 849.778668][T24846] sd 0:0:1:0: PR command failed: 1026 [ 849.785598][T24846] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 849.800563][T24846] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 849.843403][T24846] sd 0:0:1:0: PR command failed: 1026 [ 849.862502][T24846] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 849.901264][T24846] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 849.922463][T24846] sd 0:0:1:0: PR command failed: 1026 [ 849.936438][T24846] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 849.944966][T24846] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 849.979666][T24846] sd 0:0:1:0: PR command failed: 1026 [ 849.990405][T24846] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 849.999446][T24846] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 850.024867][T24846] sd 0:0:1:0: PR command failed: 1026 [ 850.024986][T19550] Bluetooth: hci4: command 0x0c1a tx timeout [ 850.034569][T24846] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 850.036546][T19932] Bluetooth: hci2: command tx timeout [ 850.050409][T24846] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 850.071555][T24846] sd 0:0:1:0: PR command failed: 1026 [ 850.081441][T24846] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 850.088454][T24846] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 850.130872][T24846] sd 0:0:1:0: PR command failed: 1026 [ 850.153527][T24846] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 850.177380][T24455] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 850.194553][T24846] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 850.215851][T24846] sd 0:0:1:0: PR command failed: 1026 [ 850.239806][T24455] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 850.248008][T24846] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 850.267995][T24846] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 850.293983][T24455] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 850.337662][T24455] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 850.504180][T19932] Bluetooth: hci5: command 0x0c1a tx timeout [ 850.598236][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.608410][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.642396][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.649876][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.657539][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.670168][T19550] Bluetooth: hci6: command 0x0c1a tx timeout [ 850.678021][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.687478][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.695996][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.704186][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.711806][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.720119][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.727793][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.736123][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.743803][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.751593][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.759051][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.766621][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.774171][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.779112][T24455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.784084][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.797959][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.806352][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.813864][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.822498][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.830011][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.840845][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.848293][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.858507][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.871199][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.878620][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.888431][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.896467][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.904632][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.912054][T19932] Bluetooth: hci7: unexpected subevent 0x0c length: 118 > 5 [ 850.986516][T19932] Bluetooth: hci7: command 0x0c1a tx timeout [ 851.144916][T19932] Bluetooth: hci8: command 0x0c1a tx timeout [ 851.173408][T24455] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.455180][T19634] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.462373][T19634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.479247][T19634] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.487018][T19634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.697656][T24992] nbd: socks must be embedded in a SOCK_ITEM attr [ 852.101633][T19932] Bluetooth: hci2: command tx timeout [ 852.266058][T25034] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2298'. [ 852.338165][T24455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 853.664849][T24455] veth0_vlan: entered promiscuous mode [ 853.766086][T25069] sd 0:0:1:0: PR command failed: 1026 [ 853.771567][T25069] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 853.873920][T25069] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 853.932892][T24455] veth1_vlan: entered promiscuous mode [ 854.188419][T19932] Bluetooth: hci2: command tx timeout [ 854.258486][T24455] veth0_macvtap: entered promiscuous mode [ 854.280532][T24455] veth1_macvtap: entered promiscuous mode [ 854.315948][T24455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.336097][T24455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.377586][T22095] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.388495][T22095] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.398502][T22095] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.416084][T22095] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.838204][T25153] netlink: 342 bytes leftover after parsing attributes in process `syz.8.2305'. [ 855.387717][T22095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.420652][T22095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.569772][T19634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.659112][T19634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.233349][T25216] block nbd7: not configured, cannot reconfigure [ 857.873757][T25267] FAULT_INJECTION: forcing a failure. [ 857.873757][T25267] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 857.894882][T25267] CPU: 0 UID: 0 PID: 25267 Comm: syz.9.2313 Not tainted syzkaller #0 PREEMPT(full) [ 857.894931][T25267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 857.894952][T25267] Call Trace: [ 857.894963][T25267] [ 857.894976][T25267] dump_stack_lvl+0x16c/0x1f0 [ 857.895022][T25267] should_fail_ex+0x512/0x640 [ 857.895071][T25267] should_fail_alloc_page+0xe7/0x130 [ 857.895133][T25267] prepare_alloc_pages+0x3c2/0x610 [ 857.895184][T25267] __alloc_frozen_pages_noprof+0x18b/0x2470 [ 857.895232][T25267] ? stack_trace_save+0x8e/0xc0 [ 857.895271][T25267] ? __pfx_stack_trace_save+0x10/0x10 [ 857.895309][T25267] ? stack_depot_save_flags+0x29/0x9c0 [ 857.895360][T25267] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 857.895393][T25267] ? __lock_acquire+0x62e/0x1ce0 [ 857.895440][T25267] ? css_rstat_updated+0x1c2/0x510 [ 857.895483][T25267] ? __lock_acquire+0x62e/0x1ce0 [ 857.895532][T25267] ? rcu_is_watching+0x12/0xc0 [ 857.895568][T25267] ? mod_memcg_lruvec_state+0x389/0x5f0 [ 857.895621][T25267] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 857.895678][T25267] ? policy_nodemask+0xea/0x4e0 [ 857.895724][T25267] alloc_pages_mpol+0x1fb/0x550 [ 857.895769][T25267] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 857.895815][T25267] ? __memcg_slab_post_alloc_hook+0x47c/0x940 [ 857.895863][T25267] alloc_pages_noprof+0x131/0x390 [ 857.895909][T25267] pgd_alloc+0x4b/0x600 [ 857.895952][T25267] mm_init+0x726/0x1380 [ 857.895995][T25267] mm_alloc+0x9f/0xc0 [ 857.896031][T25267] alloc_bprm+0x2af/0x710 [ 857.896067][T25267] do_execveat_common.isra.0+0x1ce/0x610 [ 857.896111][T25267] __x64_sys_execve+0x8e/0xb0 [ 857.896147][T25267] do_syscall_64+0xcd/0xfa0 [ 857.896188][T25267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.896229][T25267] RIP: 0033:0x7f537cd8eec9 [ 857.896254][T25267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 857.896288][T25267] RSP: 002b:00007f537dcec038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 857.896320][T25267] RAX: ffffffffffffffda RBX: 00007f537cfe5fa0 RCX: 00007f537cd8eec9 [ 857.896342][T25267] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 857.896363][T25267] RBP: 00007f537ce11f91 R08: 0000000000000000 R09: 0000000000000000 [ 857.896383][T25267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 857.896403][T25267] R13: 00007f537cfe6038 R14: 00007f537cfe5fa0 R15: 00007ffded9646c8 [ 857.896448][T25267] [ 859.486168][T25305] random: crng reseeded on system resumption [ 860.271182][T25324] netlink: 'syz.6.2319': attribute type 11 has an invalid length. [ 860.280777][T25324] netlink: 'syz.6.2319': attribute type 11 has an invalid length. [ 860.288785][T25324] netlink: 'syz.6.2319': attribute type 11 has an invalid length. [ 860.297079][T25324] netlink: 'syz.6.2319': attribute type 11 has an invalid length. [ 860.424461][T25324] netlink: 'syz.6.2319': attribute type 11 has an invalid length. [ 860.432775][T25324] netlink: 'syz.6.2319': attribute type 11 has an invalid length. [ 860.441171][T25324] netlink: 'syz.6.2319': attribute type 11 has an invalid length. [ 860.449179][T25324] netlink: 'syz.6.2319': attribute type 11 has an invalid length. [ 860.667656][T25324] netlink: 'syz.6.2319': attribute type 11 has an invalid length. [ 860.695754][T25324] netlink: 'syz.6.2319': attribute type 11 has an invalid length. [ 861.366960][T25353] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 862.286558][T25407] ICMPv6: process `syz.7.2326' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 863.550132][T25470] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input20 [ 863.837910][T25463] zswap: compressor not available [ 865.046636][T25515] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 865.759857][T25527] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2336'. [ 865.863673][T25530] FAULT_INJECTION: forcing a failure. [ 865.863673][T25530] name failslab, interval 1, probability 0, space 0, times 0 [ 865.922935][T25530] CPU: 0 UID: 0 PID: 25530 Comm: syz.9.2337 Not tainted syzkaller #0 PREEMPT(full) [ 865.922967][T25530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 865.922982][T25530] Call Trace: [ 865.922989][T25530] [ 865.922998][T25530] dump_stack_lvl+0x16c/0x1f0 [ 865.923031][T25530] should_fail_ex+0x512/0x640 [ 865.923060][T25530] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 865.923087][T25530] should_failslab+0xc2/0x120 [ 865.923119][T25530] kmem_cache_alloc_noprof+0x75/0x6e0 [ 865.923143][T25530] ? getname_flags.part.0+0x4c/0x550 [ 865.923185][T25530] ? getname_flags.part.0+0x4c/0x550 [ 865.923218][T25530] getname_flags.part.0+0x4c/0x550 [ 865.923264][T25530] getname_flags+0x93/0xf0 [ 865.923288][T25530] do_sys_openat2+0xb8/0x1d0 [ 865.923323][T25530] ? __pfx_do_sys_openat2+0x10/0x10 [ 865.923356][T25530] ? find_held_lock+0x2b/0x80 [ 865.923382][T25530] ? handle_mm_fault+0x2ab/0xd10 [ 865.923426][T25530] __x64_sys_openat+0x174/0x210 [ 865.923462][T25530] ? __pfx___x64_sys_openat+0x10/0x10 [ 865.923511][T25530] do_syscall_64+0xcd/0xfa0 [ 865.923540][T25530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.923564][T25530] RIP: 0033:0x7f537cd8eec9 [ 865.923582][T25530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 865.923606][T25530] RSP: 002b:00007f537dcec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 865.923628][T25530] RAX: ffffffffffffffda RBX: 00007f537cfe5fa0 RCX: 00007f537cd8eec9 [ 865.923644][T25530] RDX: 0000000000088080 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 865.923659][T25530] RBP: 00007f537ce11f91 R08: 0000000000000000 R09: 0000000000000000 [ 865.923673][T25530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 865.923687][T25530] R13: 00007f537cfe6038 R14: 00007f537cfe5fa0 R15: 00007ffded9646c8 [ 865.923719][T25530] [ 867.520609][T25556] zswap: compressor not available [ 867.526111][T25559] Setting dangerous option i915.mitigations - tainting kernel [ 868.217932][T25621] misc userio: No port type given on /dev/userio [ 868.321774][T25621] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 868.358036][T25621] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 868.694673][T25636] HfR: entered promiscuous mode [ 869.577250][T25676] could not allocate digest TFM handle [ 870.598950][T25729] nla_validate_range_unsigned: 2 callbacks suppressed [ 870.598980][T25729] netlink: 'syz.9.2353': attribute type 11 has an invalid length. [ 870.780183][T25729] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2353'. [ 870.831247][T25729] netlink: 172 bytes leftover after parsing attributes in process `syz.9.2353'. [ 870.869998][T25741] snd_aloop snd_aloop.0: control 7:-2147483391:4:ª¸èßÿÿ:2 is already present [ 872.094290][T19932] Bluetooth: hci6: unexpected event 0x09 length: 435 > 3 [ 872.435527][T25794] input: f¬ as /devices/virtual/input/input22 [ 874.997142][T25881] netlink: 'syz.9.2368': attribute type 11 has an invalid length. [ 876.858478][T25898] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2371'. [ 877.774600][T25904] netlink: 4408 bytes leftover after parsing attributes in process `syz.7.2372'. [ 877.829641][T25904] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 878.812105][T25911] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input23 [ 879.697063][T25946] __vm_enough_memory: pid: 25946, comm: syz.7.2375, bytes: 4398046511104 not enough memory for the allocation [ 880.772833][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 880.785441][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 884.412002][T26186] netlink: 206 bytes leftover after parsing attributes in process `syz.9.2389'. [ 885.707146][T19550] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 885.738667][T19550] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 885.749674][T19550] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 885.759666][T19550] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 885.773993][T19550] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 886.618136][T26217] chnl_net:caif_netlink_parms(): no params data found [ 887.351865][T26217] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.364644][T26217] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.373571][T26217] bridge_slave_0: entered allmulticast mode [ 887.382110][T26217] bridge_slave_0: entered promiscuous mode [ 887.393971][T26217] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.403728][T26217] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.411425][T26217] bridge_slave_1: entered allmulticast mode [ 887.420329][T26217] bridge_slave_1: entered promiscuous mode [ 887.610310][T26217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 887.636137][T26217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 887.879441][T19550] Bluetooth: hci9: command tx timeout [ 888.045097][T26217] team0: Port device team_slave_0 added [ 888.124192][T26217] team0: Port device team_slave_1 added [ 888.835361][T26217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.872328][T26217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.959825][T26217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.988213][T26217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 889.024693][T26217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.077195][T19932] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 889.090327][T19932] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 889.109333][T26217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.120410][T19932] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 889.134945][T19932] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 889.143937][T19932] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 889.485620][T26217] hsr_slave_0: entered promiscuous mode [ 889.518999][T26217] hsr_slave_1: entered promiscuous mode [ 889.526350][T26217] debugfs: 'hsr0' already exists in 'hsr' [ 889.540785][T26217] Cannot create hsr debugfs directory [ 889.960606][T19932] Bluetooth: hci9: command tx timeout [ 890.136223][T26613] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2407'. [ 890.690194][T26217] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.133959][T26217] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.242778][T19932] Bluetooth: hci6: command tx timeout [ 891.443198][T26217] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.477549][T26732] FAULT_INJECTION: forcing a failure. [ 891.477549][T26732] name failslab, interval 1, probability 0, space 0, times 0 [ 891.477626][T26732] CPU: 0 UID: 0 PID: 26732 Comm: syz.7.2409 Tainted: G U syzkaller #0 PREEMPT(full) [ 891.477674][T26732] Tainted: [U]=USER [ 891.477686][T26732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 891.477708][T26732] Call Trace: [ 891.477718][T26732] [ 891.477731][T26732] dump_stack_lvl+0x16c/0x1f0 [ 891.477776][T26732] should_fail_ex+0x512/0x640 [ 891.477829][T26732] ? __kmalloc_cache_noprof+0x5f/0x780 [ 891.477890][T26732] should_failslab+0xc2/0x120 [ 891.477938][T26732] __kmalloc_cache_noprof+0x72/0x780 [ 891.477994][T26732] ? vc_allocate+0x16c/0x880 [ 891.478052][T26732] ? vc_allocate+0x16c/0x880 [ 891.478100][T26732] vc_allocate+0x16c/0x880 [ 891.478150][T26732] ? __pfx_vc_allocate+0x10/0x10 [ 891.478213][T26732] con_install+0xa1/0x600 [ 891.478266][T26732] ? __pfx_con_install+0x10/0x10 [ 891.478325][T26732] ? __pfx_con_install+0x10/0x10 [ 891.478375][T26732] tty_init_dev.part.0+0x9c/0x500 [ 891.478434][T26732] tty_open+0xa4f/0xf90 [ 891.478541][T26732] ? __pfx_tty_open+0x10/0x10 [ 891.478597][T26732] ? chrdev_open+0x10b/0x6a0 [ 891.478679][T26732] ? __pfx_tty_open+0x10/0x10 [ 891.478735][T26732] chrdev_open+0x234/0x6a0 [ 891.478776][T26732] ? __pfx_apparmor_file_open+0x10/0x10 [ 891.478834][T26732] ? __pfx_chrdev_open+0x10/0x10 [ 891.478880][T26732] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 891.478926][T26732] do_dentry_open+0x982/0x1530 [ 891.478967][T26732] ? __pfx_chrdev_open+0x10/0x10 [ 891.479018][T26732] vfs_open+0x82/0x3f0 [ 891.479071][T26732] path_openat+0x1de4/0x2cb0 [ 891.479122][T26732] ? __pfx_path_openat+0x10/0x10 [ 891.479170][T26732] do_filp_open+0x20b/0x470 [ 891.479205][T26732] ? __pfx_do_filp_open+0x10/0x10 [ 891.479272][T26732] ? alloc_fd+0x471/0x7d0 [ 891.479314][T26732] do_sys_openat2+0x11b/0x1d0 [ 891.479359][T26732] ? __pfx_do_sys_openat2+0x10/0x10 [ 891.479424][T26732] __x64_sys_openat+0x174/0x210 [ 891.479470][T26732] ? __pfx___x64_sys_openat+0x10/0x10 [ 891.479539][T26732] do_syscall_64+0xcd/0xfa0 [ 891.479581][T26732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.479615][T26732] RIP: 0033:0x7fcc4178eec9 [ 891.479641][T26732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 891.479673][T26732] RSP: 002b:00007fcc42711038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 891.479704][T26732] RAX: ffffffffffffffda RBX: 00007fcc419e5fa0 RCX: 00007fcc4178eec9 [ 891.479725][T26732] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 891.479746][T26732] RBP: 00007fcc41811f91 R08: 0000000000000000 R09: 0000000000000000 [ 891.479766][T26732] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 891.479785][T26732] R13: 00007fcc419e6038 R14: 00007fcc419e5fa0 R15: 00007ffc7226e358 [ 891.479847][T26732] [ 891.514805][T26515] chnl_net:caif_netlink_parms(): no params data found [ 891.989066][T26515] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.990781][T26515] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.046304][T19932] Bluetooth: hci9: command tx timeout [ 892.292954][T26515] bridge_slave_0: entered allmulticast mode [ 892.304037][T26515] bridge_slave_0: entered promiscuous mode [ 892.316345][T26515] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.323715][T26515] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.331238][T26515] bridge_slave_1: entered allmulticast mode [ 892.339763][T26515] bridge_slave_1: entered promiscuous mode [ 892.510654][T26515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.573519][T26515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.863037][T26515] team0: Port device team_slave_0 added [ 892.909170][T26515] team0: Port device team_slave_1 added [ 892.959605][T26217] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 893.319502][T19932] Bluetooth: hci7: unexpected event 0x02 length: 726 > 260 [ 893.322427][T19932] Bluetooth: hci6: command tx timeout [ 893.358175][T26217] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 893.497440][T26515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.504562][T26515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 893.617684][T26515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.839373][T26217] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 893.899653][T26515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.932815][T26515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 894.002312][T26515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.089273][T26217] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 894.282684][T19932] Bluetooth: hci9: command tx timeout [ 894.358902][T26515] hsr_slave_0: entered promiscuous mode [ 894.360411][T26515] hsr_slave_1: entered promiscuous mode [ 894.361422][T26515] debugfs: 'hsr0' already exists in 'hsr' [ 894.361450][T26515] Cannot create hsr debugfs directory [ 895.403665][T19932] Bluetooth: hci6: command tx timeout [ 895.511619][T26515] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.797995][T26515] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.862095][T26217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 895.997020][T26515] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.090943][T26217] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.231581][T26515] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.287318][T22092] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.294562][T22092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.350908][T22091] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.358179][T22091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.765630][ T32] INFO: task syz.0.1949:19430 blocked for more than 143 seconds. [ 896.773436][ T32] Tainted: G U syzkaller #0 [ 896.794475][T27090] caif:caif_disconnect_client(): nothing to disconnect [ 896.832153][T26515] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 896.842767][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 896.860959][ T32] task:syz.0.1949 state:D stack:27240 pid:19430 tgid:19428 ppid:5825 task_flags:0x400140 flags:0x00080003 [ 896.893501][ T32] Call Trace: [ 896.903657][ T32] [ 896.906666][ T32] __schedule+0x1190/0x5de0 [ 896.992743][ T32] ? __lock_acquire+0x62e/0x1ce0 [ 897.000498][ T32] ? __pfx___schedule+0x10/0x10 [ 897.018397][ T32] ? find_held_lock+0x2b/0x80 [ 897.038063][ T32] ? schedule+0x2d7/0x3a0 [ 897.057146][ T32] schedule+0xe7/0x3a0 [ 897.108880][ T32] schedule_timeout+0x257/0x290 [ 897.128723][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 897.163929][ T32] ? mark_held_locks+0x49/0x80 [ 897.168810][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 897.232722][ T32] __wait_for_common+0x2f9/0x4e0 [ 897.253850][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 897.325180][ T32] ? __pfx___wait_for_common+0x10/0x10 [ 897.330745][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 897.363995][ T32] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 897.398471][ T32] __flush_workqueue+0x3e2/0x1230 [ 897.433960][ T32] ? __pfx___flush_workqueue+0x10/0x10 [ 897.460354][ T32] ? lockdep_hardirqs_on+0x7c/0x110 [ 897.470831][ T32] ? rxrpc_destroy_all_peers+0x139/0x1c0 [ 897.488444][T19932] Bluetooth: hci6: command tx timeout [ 897.507842][ T32] rxrpc_destroy_all_locals+0x40/0x180 [ 897.513421][ T32] rxrpc_exit_net+0x8b/0xc0 [ 897.548878][ T32] ? __pfx_rxrpc_exit_net+0x10/0x10 [ 897.564163][ T32] ops_undo_list+0x2eb/0xab0 [ 897.568858][ T32] ? __pfx_ops_undo_list+0x10/0x10 [ 897.584033][ T32] ? ops_init+0x2f0/0x5f0 [ 897.588451][ T32] ? ops_init+0x2fa/0x5f0 [ 897.592837][ T32] setup_net+0x1e2/0x390 [ 897.604042][ T32] ? __pfx_setup_net+0x10/0x10 [ 897.610515][ T32] ? debug_mutex_init+0x37/0x70 [ 897.624098][ T32] copy_net_ns+0x2f8/0x690 [ 897.628610][ T32] create_new_namespaces+0x3ea/0xa90 [ 897.644549][ T32] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 897.650292][ T32] ksys_unshare+0x45b/0xa40 [ 897.664085][ T32] ? __pfx_ksys_unshare+0x10/0x10 [ 897.669214][ T32] ? xfd_validate_state+0x61/0x180 [ 897.684512][ T32] __x64_sys_unshare+0x31/0x40 [ 897.689368][ T32] do_syscall_64+0xcd/0xfa0 [ 897.693928][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.704608][ T32] RIP: 0033:0x7f6fb4f8eec9 [ 897.710792][ T32] RSP: 002b:00007f6fb5d6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 897.726164][ T32] RAX: ffffffffffffffda RBX: 00007f6fb51e5fa0 RCX: 00007f6fb4f8eec9 [ 897.744337][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 897.752383][ T32] RBP: 00007f6fb5011f91 R08: 0000000000000000 R09: 0000000000000000 [ 897.774269][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 897.782330][ T32] R13: 00007f6fb51e6038 R14: 00007f6fb51e5fa0 R15: 00007ffcb7e1daf8 [ 897.812654][ T32] [ 897.816707][ T32] INFO: task kworker/u10:2:19545 blocked for more than 144 seconds. [ 897.844134][ T32] Tainted: G U syzkaller #0 [ 897.850716][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 897.885259][ T32] task:kworker/u10:2 state:D stack:26488 pid:19545 tgid:19545 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 897.904163][ T32] Workqueue: netns cleanup_net [ 897.909041][ T32] Call Trace: [ 897.913952][ T32] [ 897.934201][ T32] __schedule+0x1190/0x5de0 [ 897.938812][ T32] ? __lock_acquire+0x62e/0x1ce0 [ 897.943825][ T32] ? __pfx___schedule+0x10/0x10 [ 897.964385][ T32] ? find_held_lock+0x2b/0x80 [ 897.969181][ T32] ? schedule+0x2d7/0x3a0 [ 897.983915][ T32] schedule+0xe7/0x3a0 [ 897.988192][ T32] schedule_timeout+0x257/0x290 [ 897.993110][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 898.012902][ T32] ? mark_held_locks+0x49/0x80 [ 898.032030][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 898.042186][ T32] __wait_for_common+0x2f9/0x4e0 [ 898.067907][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 898.083738][ T32] ? __pfx___wait_for_common+0x10/0x10 [ 898.093899][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 898.104065][ T32] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 898.114588][ T32] __flush_workqueue+0x3e2/0x1230 [ 898.121330][ T32] ? __pfx___flush_workqueue+0x10/0x10 [ 898.134701][ T32] ? rxrpc_discard_prealloc+0xb6/0x9c0 [ 898.140255][ T32] ? rxrpc_release+0x595/0x6a0 [ 898.154741][ T32] ? rxrpc_release_calls_on_socket+0x237/0x4e0 [ 898.161008][ T32] rxrpc_release+0x2a7/0x6a0 [ 898.174681][ T32] sock_release+0x8e/0x1d0 [ 898.179215][ T32] afs_close_socket+0x21b/0x3e0 [ 898.184136][ T32] ? afs_wait_for_servers+0xec/0x220 [ 898.204684][ T32] ? __pfx_afs_close_socket+0x10/0x10 [ 898.210188][ T32] ? __timer_delete_sync+0x108/0x1b0 [ 898.234376][ T32] ? __pfx_afs_net_exit+0x10/0x10 [ 898.239645][ T32] afs_net_exit+0x93/0x140 [ 898.244151][ T32] ops_undo_list+0x2eb/0xab0 [ 898.264355][ T32] ? __pfx_ops_undo_list+0x10/0x10 [ 898.269579][ T32] ? cleanup_net+0x347/0x8b0 [ 898.274245][ T32] ? idr_destroy+0x62/0x2e0 [ 898.289299][ T32] cleanup_net+0x41b/0x8b0 [ 898.293787][ T32] ? __pfx_cleanup_net+0x10/0x10 [ 898.299370][ T32] ? rcu_is_watching+0x12/0xc0 [ 898.304241][ T32] process_one_work+0x9cf/0x1b70 [ 898.309733][ T32] ? __pfx_process_one_work+0x10/0x10 [ 898.315586][ T32] ? assign_work+0x1a0/0x250 [ 898.320258][ T32] worker_thread+0x6c8/0xf10 [ 898.326879][ T32] ? __kthread_parkme+0x19e/0x250 [ 898.331987][ T32] ? __pfx_worker_thread+0x10/0x10 [ 898.337918][ T32] kthread+0x3c2/0x780 [ 898.342066][ T32] ? __pfx_kthread+0x10/0x10 [ 898.347230][ T32] ? rcu_is_watching+0x12/0xc0 [ 898.352058][ T32] ? __pfx_kthread+0x10/0x10 [ 898.357234][ T32] ret_from_fork+0x675/0x7d0 [ 898.361897][ T32] ? __pfx_kthread+0x10/0x10 [ 898.367728][ T32] ret_from_fork_asm+0x1a/0x30 [ 898.372741][ T32] [ 898.381088][T26515] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 898.388142][ T32] [ 898.388142][ T32] Showing all locks held in the system: [ 898.404526][ T32] 1 lock held by ksoftirqd/0/15: [ 898.409626][ T32] 1 lock held by khungtaskd/32: [ 898.424493][ T32] #0: ffffffff8e3c4320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 898.436451][ T32] 1 lock held by syz-executor/5815: [ 898.441704][ T32] #0: ffff88803106d868 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_read+0x13f/0x1210 [ 898.464461][ T32] 1 lock held by syz.0.1949/19430: [ 898.469640][ T32] #0: ffffffff900e8130 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 898.494489][ T32] 3 locks held by kworker/u10:2/19545: [ 898.521604][ T32] #0: ffff88801ba9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 898.554568][ T32] #1: ffffc9000b207d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 898.594592][ T32] #2: ffffffff900e8130 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x8b0 [ 898.604081][ T32] 1 lock held by syz.1.2083/20813: SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 898.634590][ T32] #0: ffffffff900e8130 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 898.644128][ T32] 1 lock held by syz.3.2115/21470: [ 898.674894][ T32] #0: ffffffff900e8130 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 898.684444][ T32] 3 locks held by kworker/u10:14/22087: [ 898.710553][ T32] #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 898.734621][ T32] #1: ffffc9000418fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 898.754630][ T32] #2: ffffffff900fe548 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 898.763821][ T32] 3 locks held by kworker/u10:18/22091: [ 898.789337][ T32] #0: ffff8880304e7948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 898.854684][ T32] #1: ffffc9000408fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 898.912827][ T32] #2: ffffffff900fe548 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x120/0x14e0 [ 898.954704][ T32] 1 lock held by syz.5.2156/22331: [ 898.959891][ T32] #0: ffff88807d9c5848 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 899.015912][ T32] 1 lock held by syz.4.2189/22890: [ 899.021190][ T32] #0: ffff8880819a0208 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 899.068038][ T32] 1 lock held by syz-executor/23001: [ 899.073409][ T32] 1 lock held by syz.2.2233/23662: [ 899.094818][ T32] #0: ffffffff900e8130 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 899.104369][ T32] 2 locks held by syz-executor/24455: [ 899.125946][ T32] 1 lock held by syz.8.2351/25715: [ 899.131164][ T32] #0: ffffffff900e8130 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 899.168741][ T32] 1 lock held by syz.6.2362/25804: [ 899.173934][ T32] #0: ffffffff900e8130 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x2d6/0x690 [ 899.225128][ T32] 1 lock held by syz-executor/26217: [ 899.230500][ T32] #0: ffffffff900fe548 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x1540 [ 899.255533][ T32] 3 locks held by syz-executor/26515: [ 899.260979][ T32] #0: ffffffff900fe548 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x600/0x2000 [ 899.294877][ T32] #1: ffff8880a6088d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: do_setlink.constprop.0+0x2e9/0x4380 [ 899.325827][ T32] #2: ffffffff8e3cf8b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 899.347719][ T32] 2 locks held by dhcpcd/27104: [ 899.353923][ T32] #0: ffff88808b644258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 899.384181][ T32] #1: ffffffff8e3cf8b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 899.411301][ T32] [ 899.413698][ T32] ============================================= [ 899.413698][ T32] [ 899.435438][ T32] NMI backtrace for cpu 0 [ 899.435468][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G U syzkaller #0 PREEMPT(full) [ 899.435513][ T32] Tainted: [U]=USER [ 899.435525][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 899.435544][ T32] Call Trace: [ 899.435555][ T32] [ 899.435567][ T32] dump_stack_lvl+0x116/0x1f0 [ 899.435617][ T32] nmi_cpu_backtrace+0x27b/0x390 [ 899.435664][ T32] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 899.435702][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 899.435757][ T32] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 899.435811][ T32] watchdog+0xf3f/0x1170 [ 899.435851][ T32] ? rcu_is_watching+0x12/0xc0 [ 899.435888][ T32] ? __pfx_watchdog+0x10/0x10 [ 899.435917][ T32] ? lockdep_hardirqs_on+0x7c/0x110 [ 899.435958][ T32] ? __kthread_parkme+0x19e/0x250 [ 899.436002][ T32] ? __pfx_watchdog+0x10/0x10 [ 899.436044][ T32] kthread+0x3c2/0x780 [ 899.436094][ T32] ? __pfx_kthread+0x10/0x10 [ 899.436145][ T32] ? rcu_is_watching+0x12/0xc0 [ 899.436185][ T32] ? __pfx_kthread+0x10/0x10 [ 899.436231][ T32] ret_from_fork+0x675/0x7d0 [ 899.436280][ T32] ? __pfx_kthread+0x10/0x10 [ 899.436331][ T32] ret_from_fork_asm+0x1a/0x30 [ 899.436390][ T32] [ 899.436402][ T32] Sending NMI from CPU 0 to CPUs 1: [ 899.586098][ C1] NMI backtrace for cpu 1 [ 899.586123][ C1] CPU: 1 UID: 0 PID: 24455 Comm: syz-executor Tainted: G U syzkaller #0 PREEMPT(full) [ 899.586162][ C1] Tainted: [U]=USER [ 899.586171][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 899.586187][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 899.586220][ C1] Code: 66 73 56 00 48 89 df 5b e9 ad 20 5c 00 be 03 00 00 00 5b e9 a2 43 ec 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 34 24 65 48 8b 15 a8 cb e7 11 65 8b 05 b9 cb e7 [ 899.586247][ C1] RSP: 0018:ffffc90026807240 EFLAGS: 00000286 [ 899.586268][ C1] RAX: 0000000000000000 RBX: ffffea00016a6a00 RCX: ffffffff81f365ec [ 899.586292][ C1] RDX: ffff88802b093c80 RSI: 0000000000001000 RDI: 0000000000000007 [ 899.586309][ C1] RBP: ffff8880339fa3f8 R08: 0000000000000007 R09: 0000000000001000 [ 899.586325][ C1] R10: ffff88808daafc82 R11: 0000000000000000 R12: ffff88808daafc82 [ 899.586342][ C1] R13: 0000000000000002 R14: ffffc90026807568 R15: 000000000000001d [ 899.586359][ C1] FS: 0000000000000000(0000) GS:ffff888124ae6000(0000) knlGS:0000000000000000 [ 899.586384][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 899.586402][ C1] CR2: 00005644825d54b0 CR3: 00000000a39e6000 CR4: 00000000003526f0 [ 899.586419][ C1] Call Trace: [ 899.586427][ C1] [ 899.586436][ C1] filemap_remove_folio+0x16e/0x250 [ 899.586465][ C1] truncate_inode_folio+0x49/0x70 [ 899.586500][ C1] shmem_undo_range+0x376/0x1150 [ 899.586534][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 899.586580][ C1] ? __lock_acquire+0x62e/0x1ce0 [ 899.586632][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 899.586661][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 899.586691][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 899.586723][ C1] shmem_evict_inode+0x3a1/0xbe0 [ 899.586751][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 899.586794][ C1] ? __call_rcu_common.constprop.0+0xa5/0xa10 [ 899.586839][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 899.586866][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 899.586910][ C1] ? find_held_lock+0x2b/0x80 [ 899.586937][ C1] ? evict+0x3a2/0x920 [ 899.586972][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 899.586999][ C1] evict+0x3e6/0x920 [ 899.587033][ C1] ? __pfx_evict+0x10/0x10 [ 899.587069][ C1] ? iput.part.0+0x6a1/0xb00 [ 899.587107][ C1] iput.part.0+0x6a9/0xb00 [ 899.587138][ C1] ? __pfx_inode_just_drop+0x10/0x10 [ 899.587183][ C1] iput+0x35/0x40 [ 899.587213][ C1] dentry_unlink_inode+0x29c/0x480 [ 899.587246][ C1] __dentry_kill+0x1d0/0x600 [ 899.587283][ C1] ? shrink_dentry_list+0x11a/0x5d0 [ 899.587321][ C1] shrink_dentry_list+0x140/0x5d0 [ 899.587360][ C1] ? shrink_dcache_parent+0x22/0x530 [ 899.587397][ C1] shrink_dcache_parent+0xe1/0x530 [ 899.587435][ C1] ? __pfx_shrink_dcache_parent+0x10/0x10 [ 899.587473][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 899.587516][ C1] ? d_walk+0x44c/0xa60 [ 899.587553][ C1] shrink_dcache_for_umount+0xa5/0x3e0 [ 899.587595][ C1] generic_shutdown_super+0x6c/0x390 [ 899.587636][ C1] kill_litter_super+0x70/0xa0 [ 899.587677][ C1] deactivate_locked_super+0xc1/0x1a0 [ 899.587702][ C1] deactivate_super+0xde/0x100 [ 899.587727][ C1] cleanup_mnt+0x225/0x450 [ 899.587769][ C1] task_work_run+0x150/0x240 [ 899.587815][ C1] ? __pfx_task_work_run+0x10/0x10 [ 899.587869][ C1] do_exit+0x86f/0x2bf0 [ 899.587910][ C1] ? rcu_is_watching+0x12/0xc0 [ 899.587945][ C1] ? __pfx_do_exit+0x10/0x10 [ 899.587988][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 899.588036][ C1] ? find_held_lock+0x2b/0x80 [ 899.588071][ C1] do_group_exit+0xd3/0x2a0 [ 899.588117][ C1] get_signal+0x2671/0x26d0 [ 899.588154][ C1] ? __hrtimer_setup+0x176/0x280 [ 899.588205][ C1] ? hrtimer_nanosleep+0x187/0x380 [ 899.588240][ C1] ? __pfx_get_signal+0x10/0x10 [ 899.588283][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 899.588336][ C1] arch_do_signal_or_restart+0x8f/0x790 [ 899.588377][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 899.588425][ C1] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 899.588466][ C1] exit_to_user_mode_loop+0x85/0x130 [ 899.588515][ C1] do_syscall_64+0x426/0xfa0 [ 899.588553][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.588585][ C1] RIP: 0033:0x7f537cdc1785 [ 899.588617][ C1] Code: Unable to access opcode bytes at 0x7f537cdc175b. [ 899.588630][ C1] RSP: 002b:00007ffded9649e0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 899.588654][ C1] RAX: fffffffffffffdfc RBX: 00000000000000ca RCX: 00007f537cdc1785 [ 899.588672][ C1] RDX: 00007ffded964a20 RSI: 0000000000000000 RDI: 0000000000000000 [ 899.588688][ C1] RBP: 00007ffded964a8c R08: 0000000000000000 R09: 0000000000000000 [ 899.588704][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 899.588721][ C1] R13: 00000000000927c0 R14: 00000000000daf84 R15: 00007ffded964ae0 [ 899.588758][ C1] [ 899.999082][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 899.999119][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G U syzkaller #0 PREEMPT(full) [ 899.999170][ T32] Tainted: [U]=USER [ 899.999185][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 899.999207][ T32] Call Trace: [ 899.999220][ T32] [ 899.999236][ T32] dump_stack_lvl+0x3d/0x1f0 [ 899.999318][ T32] vpanic+0x640/0x6f0 [ 899.999374][ T32] panic+0xca/0xd0 [ 899.999426][ T32] ? __pfx_panic+0x10/0x10 [ 899.999473][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 899.999522][ T32] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 899.999580][ T32] ? watchdog+0xe48/0x1170 [ 899.999615][ T32] ? watchdog+0xe3b/0x1170 [ 899.999652][ T32] watchdog+0xe59/0x1170 [ 899.999694][ T32] ? rcu_is_watching+0x12/0xc0 [ 899.999734][ T32] ? __pfx_watchdog+0x10/0x10 [ 899.999767][ T32] ? lockdep_hardirqs_on+0x7c/0x110 [ 899.999814][ T32] ? __kthread_parkme+0x19e/0x250 [ 899.999863][ T32] ? __pfx_watchdog+0x10/0x10 [ 899.999899][ T32] kthread+0x3c2/0x780 [ 899.999955][ T32] ? __pfx_kthread+0x10/0x10 [ 900.000013][ T32] ? rcu_is_watching+0x12/0xc0 [ 900.000053][ T32] ? __pfx_kthread+0x10/0x10 [ 900.000113][ T32] ret_from_fork+0x675/0x7d0 [ 900.000169][ T32] ? __pfx_kthread+0x10/0x10 [ 900.000224][ T32] ret_from_fork_asm+0x1a/0x30 [ 900.000299][ T32] [ 900.208699][ T32] Kernel Offset: disabled [ 900.213047][ T32] Rebooting in 86400 seconds..