last executing test programs: 3m26.799698252s ago: executing program 0 (id=1710): poll$auto(0x0, 0x25, 0x109) prctl$auto(0x2f, 0x4, 0x7fffffffefff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) listen$auto(0x3, 0x81) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) write$auto(r0, &(0x7f00000002c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7kc\x85\xa6|\xb4>\v\xe9\x10p\aE\x81\xed\x00<\xdb\xd8\x9d\xe6\xe1\xa4g\x85\xe0A\xea\x94=\"\x98U\x1d7\x83[[b\b,\xed\x10-d\x02\x00\xb7\x81K\x04\x15\x85O\xa9\x0e\xbd\xe3\xaf.9^\xd9n\xc3\x9f\xc2\x86l\x03\x01\xa1\xe1>P\xee\x00\'\xaad\\v=\f\x9aP\xa5x\xf0\v\xd1\x1c\xfcoR\xd2\x1dEuZy\xa5\xc3\xce\x1aIX\xee\xfb\xb9@\xc7\x82\x84&c\xaf\xd2\x8b \x1a/\xafT\x9f\x96l+$\x8d/\xa6\x19\x97\xdc\xae\r\xbe\xfd\xa7\x9d\xf8\x8c\x96\x9dYf&\x81c\x85\x95-\xaa\xdc\xcd(\xdaZ\x84X:I[\x18\xb7\xa1\xe9\xdf\x17E\x87c\xda\xa5\xad4\x86uM\xd7\xc0H\x00\x16?f\xec\xc5]\xaa]O\xd8\xae.\xad$\xec:\xd9\x9b:\xec\xfe\x8f\x11V\xb82\b\xf8\xb5\x86\x1ej\xda\x04~\xa6Z', 0x81) unshare$auto(0x20000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000000)=@in={0x2, 0x3, @broadcast}, 0x6e) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1b0026bd7000fddbdf2503366258ee2d2c8ee446000000040008e76700038012000100898771f1c19f17070085908286010000040002800c000b"], 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) io_uring_setup$auto(0x6, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xfffffdef) getpid() gettid() recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) 3m23.915761234s ago: executing program 0 (id=1715): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) madvise$auto(0xffffffffff7efc01, 0x2, 0x6) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0x1e, 0x0, 0x0, 0x0, 0x0) io_getevents$auto(0x5, 0xe53, 0x7, &(0x7f0000000040)={0x9, 0x13, 0x80000002, 0x7}, &(0x7f0000000080)={0x1, 0x5}) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) writev$auto(r0, &(0x7f0000000340)={0x0, 0xda7c}, 0x9) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0xfffffcae}) r2 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, 0x0, 0x2000, 0x0) close_range$auto(0xffffffffffffffff, r2, 0x0) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/bus/usb/035/001\x00', 0x20000, 0x0) ioctl$auto_USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f0000000440)={0x9, &(0x7f0000000380)="36045722b71de65a206f89a5159c4d41d2dc670452ac5f7977317acc00b37a6bb3f7b7e2af25b1aeb2b48455453da4195dd4256fa25b9f0e1e87f140660d41d5f3cfe8b9acc6f624d3a5d499f3a6da07beb2435e6454391f3d1a92c93b07d85c661befcf86b486342d4358e6c0f96ad767873c367d8ae99155d072aa2b04222b6d52ec6c264888bd621bbc8e1928a63ed34364d247391f53cd8693afd23c09a8e2c9867cab0b54b6bc57544f334acc665be8"}) r4 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$auto_VHOST_SET_VRING_KICK2(r4, 0x4008af20, &(0x7f00000002c0)={0xbe9, r2}) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 3m21.868468002s ago: executing program 0 (id=1719): io_submit$auto(0x10001, 0x1, &(0x7f0000000200)=&(0x7f0000000100)={0x5480, 0x5d0, 0x6, 0x1, 0x40, 0xffffffffffffffff, 0x8000000000000001, 0x0, 0x6, 0x0, 0xe, 0xffffffffffffffff}) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mouse0\x00', 0x1, 0x0) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x84) write$auto_nsim_dev_trap_fa_cookie_fops_dev(r2, &(0x7f0000000000)="022931fd6c", 0x5) r3 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000001480)='/dev/mixer\x00', 0x80000, 0x0) ioctl$auto_OSS_GETVERSION(r3, 0x80044d76, &(0x7f00000014c0)) close_range$auto(r0, r1, 0xdf9b) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D1\x00', 0x1, 0x0) unshare$auto(0x40000080) acct$auto(&(0x7f0000000140)='/dev/ecryptfs\x00') unshare$auto(0x40000080) unshare$auto(0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0x2ac00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) setrlimit$auto(0x7, 0x0) mq_open$auto(&(0x7f0000000400)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f{\x14S\xc4\xd1\x01gBV\x91\x8f_\xc0.\x84\xfe\x84\xd1s\x05\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9\xdc\x91<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5srQ', 0xa7c, 0xc, 0x0) msgctl$auto_IPC_INFO(0x5, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f00000003c0)=0x1, &(0x7f0000000080)=0x80, 0x7ff, 0x8, 0xffffffff, 0xa, 0xf9eb, 0x4, 0x4003, 0x6, @inferred=0xffffffffffffffff, @raw=0x6}) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram9\x00', 0x800, 0x0) ioctl$auto_BLKGETSIZE(r5, 0x1260, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) setfsuid$auto(0xee00) socket(0x2, 0x3, 0x100) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) 3m20.126780175s ago: executing program 0 (id=1723): r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0x115200, 0x0) shmctl$auto_SHM_LOCK(0x7, 0xb, &(0x7f0000000500)={{0x2, 0xee01, 0x0, 0x4, 0x7, 0x0, 0x8}, 0x0, 0x9, 0x6, 0x1, @raw=0x8004, @raw=0x1, 0xe6, 0x0, &(0x7f0000000440)="5e762ec88e0a69936ce4f80eb0cf4d981ea2dc7788d49b2ce1049bf3862469dc22d5a065b9ae9c88c2eae108ea09065b024c97dccf71eb109af819d362b8f6f3ba0dd5feaf321cb983379fd88b8463b9f843013a9db50bee261416530a3455a8fbe4af2d540dec794fc99139e5dfc8c2f556c39037a6bc6b87ab224b0ef7b9db007b7cfc86a5fb04f10983d7a60b0e69df9f60fe4d61f3cfc15356de916376e6e932886f12990551238cb85c5d32ca507381161988", &(0x7f00000003c0)="29c769ec6de3d4d56f1383fb698aff17ac547a64bd3d70a4bb1cecc0ee4dd22fd95fa035a25f3e2cd128d0e9c91840c5a792e78ed4ba60756b3cfe0800b3200178005f08f6a71da8c0fc66636c4cec85dcd9d65b889d6d8ba80dbdfe7affe551356f778f3fd76319b93d1a55f2"}) bind$auto(r0, 0x0, 0x6) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x37, 0x1, 0x0, 0x5, 0x7) preadv2$auto(0xffffffffffffffff, 0x0, 0x6, 0x3, 0x4, 0x2a) mprotect$auto(0x1000, 0x401000, 0x4) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x9) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) move_pages$auto(0x0, 0x8000, 0x0, 0x0, 0x0, 0x4) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/ip_vs_conn\x00', 0x0, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x189e42, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) pread64$auto(r1, 0x0, 0x2, 0x5) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x82000, 0x0) r2 = socket(0x0, 0x4, 0xfffffffc) bind$auto(r2, 0x0, 0x66) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r3) sendmsg$auto_TIPC_NL_NET_SET(r3, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000180)=ANY=[@ANYBLOB='L!I\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x8001}, 0x4002) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0xe, 0x2, 0x16efae4c, 0x8000005092, 0x61f93bdb) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x8, 0x1, 0xffffffffffffffff, @relative_id=0x8, 0xe600}, 0xf) 3m18.161612737s ago: executing program 0 (id=1727): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r0 = landlock_create_ruleset$auto(&(0x7f0000000280)={0xa, 0x1, 0x9}, 0x9, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = timerfd_create$auto(0x9, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r1, 0xae03, 0x42) landlock_restrict_self$auto(r0, 0xb) ioctl$auto_SNDRV_PCM_IOCTL_WRITEI_FRAMES2(r0, 0x40184150, &(0x7f0000000300)={0x4, &(0x7f00000001c0)="268a", 0x7}) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f00000000c0)={"58f99464", 0x8, 0x6, 0x1, 0x3, 0x5, "4bb69ec4b3f4c14539898e4c5682f5", "347f00", "a630df9d", "a0ed9959", ["cd9196b8fe1a8a7eb90401a9", "2f9c30017721de33c560b95a", "d3fe6c55a78d6932211c9b69", "ea334f1f1e5e27a1320d6edb"]}) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto_SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000180)="6da6b940dfe114cacac8b7cca871a393aaf922f69708e077a3ff54d760f973198c7f") close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0xff9e, 0x9}, 0x9}, 0x3, 0x0) 3m17.888681488s ago: executing program 0 (id=1730): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) open(0x0, 0x1652c2, 0xe1d2b27bdc14aa98) openat$dir(0xffffffffffffff9c, 0x0, 0x40342, 0x22) socket(0xa, 0x2, 0x73) bpf$auto(0x0, &(0x7f0000000600)=@bpf_attr_4={0x1e, 0xffffffffffffffff, 0xffffffff}, 0xa) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x80000002, 0x1d, 0x3000, 0xfffffff8, 0x6, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x6, 0x29c, 0x1, 0x7f, 0x3ff, 0xa, 0x1}, {0x10100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x33, 0x67f, 0xfffdfff8, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1c97, 0x1000, 0x2000, 0x203, 0x8, 0x84, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xadf3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000000000]}, 0x1fe, 0xd) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) r2 = getpid() sched_setaffinity$auto(r2, 0x5, &(0x7f0000000000)=0x7) ioctl$auto(0xc8, 0x400454cb, 0x0) r3 = getpid() sched_setaffinity$auto(r3, 0x8, &(0x7f0000000740)=0x9) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x84, r1, 0x500, 0x70bd2a, 0x25dfdbfe, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'IPVS\x00'}, @NFSD_A_SERVER_SCOPE={0x44, 0x4, '/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/inject\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x7}, @NFSD_A_SERVER_SCOPE={0x7, 0x4, '&\xfc\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x81}]}, 0x84}, 0x1, 0x0, 0x0, 0x40c0}, 0x4080) futex_waitv$auto(&(0x7f0000000000)={0x7, 0x7ffffffff000, 0x6}, 0x1, 0x0, 0x0, 0x623d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x5000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x9, 0x40000000000000) pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffd8ef, 0xea5, &(0x7f0000000080)={@siginfo_0_0={0x0, 0xfffffffb, 0x4, @_timer={0xffffffffffffffff, 0xf, @sival_ptr=&(0x7f0000000000)="7796a8658f713d1b84415c54d6358d5b81dac5878d602d2a6b6dd3788989f0ee4966859134e2a5481c576570270cd216b0a6285e2dd95fba78494437983c7526d0d4972a2699", 0x80000001}}}, 0x2) 3m2.219019937s ago: executing program 32 (id=1730): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) open(0x0, 0x1652c2, 0xe1d2b27bdc14aa98) openat$dir(0xffffffffffffff9c, 0x0, 0x40342, 0x22) socket(0xa, 0x2, 0x73) bpf$auto(0x0, &(0x7f0000000600)=@bpf_attr_4={0x1e, 0xffffffffffffffff, 0xffffffff}, 0xa) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x80000002, 0x1d, 0x3000, 0xfffffff8, 0x6, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x6, 0x29c, 0x1, 0x7f, 0x3ff, 0xa, 0x1}, {0x10100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x734f, 0x33, 0x67f, 0xfffdfff8, 0x7, 0x3, 0x20000002, 0xd, 0x3, 0x1, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x80, 0x4, 0x1c97, 0x1000, 0x2000, 0x203, 0x8, 0x84, 0x0, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xadf3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000000000000]}, 0x1fe, 0xd) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r0) r2 = getpid() sched_setaffinity$auto(r2, 0x5, &(0x7f0000000000)=0x7) ioctl$auto(0xc8, 0x400454cb, 0x0) r3 = getpid() sched_setaffinity$auto(r3, 0x8, &(0x7f0000000740)=0x9) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xeda47ee5ad433e65}, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x84, r1, 0x500, 0x70bd2a, 0x25dfdbfe, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'IPVS\x00'}, @NFSD_A_SERVER_SCOPE={0x44, 0x4, '/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/inject\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x7}, @NFSD_A_SERVER_SCOPE={0x7, 0x4, '&\xfc\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x81}]}, 0x84}, 0x1, 0x0, 0x0, 0x40c0}, 0x4080) futex_waitv$auto(&(0x7f0000000000)={0x7, 0x7ffffffff000, 0x6}, 0x1, 0x0, 0x0, 0x623d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x5000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x9, 0x40000000000000) pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffd8ef, 0xea5, &(0x7f0000000080)={@siginfo_0_0={0x0, 0xfffffffb, 0x4, @_timer={0xffffffffffffffff, 0xf, @sival_ptr=&(0x7f0000000000)="7796a8658f713d1b84415c54d6358d5b81dac5878d602d2a6b6dd3788989f0ee4966859134e2a5481c576570270cd216b0a6285e2dd95fba78494437983c7526d0d4972a2699", 0x80000001}}}, 0x2) 2m34.071539296s ago: executing program 3 (id=1811): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x15, 0x5, 0x0) r1 = io_uring_setup$auto(0x1, 0x0) r2 = socket(0x2d, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) write$auto(0x3, 0x0, 0xfdf3) r3 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000080), r1) ioctl$auto_XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000000180)={0xc, @inferred=r2, @raw=0x9, 0xa, 0x10001, '\x00', {0x6, 0x4, 0x3, 0xee00, 0xee00, 0x7f, 0x5402, 0x1, {0x8, 0x9}, {0xffffffffffff926a, 0x3}, {0xfffffffffffffffa, 0x800}, 0x8, 0x7fffffff, 0x0, 0xffffffff, 0x0, 0x6, 0x1000, 0x4, 0x1000, 0x11e4, '\x00', 0xa03, 0xf3, 0x5, 0x7}}) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000240)="7122a084", 0x40000000001243}, 0x1, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000840)={0x290, r3, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_CDEV_MAX_STATE={0x8, 0x11, 0x8000}, @THERMAL_GENL_ATTR_THRESHOLD={0xc, 0x18, 0x0, 0x1, [@typed={0x8, 0xeb, 0x0, 0x0, @pid=r4}]}, @THERMAL_GENL_ATTR_CDEV_ID={0x8, 0xf, 0x800}, @THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8, 0x10, 0xfffffffa}, @THERMAL_GENL_ATTR_TZ_GOV={0x258, 0xc, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @u32=0x71135c06}, @nested={0x22b, 0x93, 0x0, 0x1, [@nested={0x4, 0xe7}, @generic="eaa4acd04e44557bf387771eb2225963e5bd9739384cb04a1ef41ada777a95879c8b2ff64eb3de7242789e2f40a94e33948abafb105e444b9cfaece3d9e330813b045a63cba10f463f3cf415200073b072c2d252eeaafd81b7b73e5125d5bf4a7c7a0f5f39eda6d9add8188aef5c7896b7a7bd48e1af09696806d6d66cc459133f978a9be1a5fe6bcb4e", @generic="3f1655e2e34741fb6f2cc406d1d82b01877468ca7a407a603c1f315b3a3d0d8b40eb25c4b67d4088cd72a0233f6fa4bf9ef492b55909a4438be2d7d9922a17e695e9095102f8a7731b3a233563babb3889febd71e45df1b3bda351b9ee3da945ca3b9683af3c9266b69372826937a244ed3dda10b48582202507c05677f4b3fcab3236448fffd643ef67ccdf56d5dd938b5a0f1a26a17303d5", @typed={0xff, 0x112, 0x0, 0x0, @binary="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"}]}, @typed={0x14, 0x6a, 0x0, 0x0, @ipv6=@mcast1}, @typed={0xc, 0x9f, 0x0, 0x0, @u64=0x83}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) r5 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r2) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r6, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xf}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x9}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x5}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0xff}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800) write$auto_bm_register_operations_binfmt_misc(r5, &(0x7f0000000140)="426cc285be7dbb45c5f2d4", 0xb) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) 2m33.632053091s ago: executing program 3 (id=1813): keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 2m33.524975581s ago: executing program 3 (id=1814): mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r0 = openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_score_adj\x00', 0x101000, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0xb2, 0x1d, r0, 0xa) r2 = socket(0x26, 0x5, 0x2) bind$auto(0xffffffffffffffff, 0x0, 0x6a) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x109500, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/1:6/max_bytes\x00', 0x802, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r2) pwrite64$auto(r4, &(0x7f0000000180)='\x00', 0x3, 0x8) sendmsg$auto_NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000001200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000011c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="15f604a1e6b9476a7db61a1b3bcbe9267b56a806f61c549fe65f1c501b52a2dfb6dff36c2a9e54a872a472f1f497e46783af6cc12eb084bb8c699dcc0d7e2a64fb2596b6808bf31baaec68ea19ca985fc4a78655539da93c0c2001d4ae8377af8e6b1fe28fea14b226c10a54815ef5da3b33edf366a8ebc0fc629d1fa602314e79a45923826766b5c726b8eb1390365156798011c219d4746307b792006dc592525e72d75af638de9d23f4d11a5b", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001100", @ANYRES32=r1, @ANYBLOB="000600b4007f00000004003c0008003501070000000500f600090000000400bd00"], 0x968}, 0x1, 0x0, 0x0, 0x8000}, 0x4000080) read$auto(r3, 0x0, 0x4b) umount2$auto(0x0, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES8=r5], 0xfffffffffffffd6c}}, 0x14) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(0xffffffffffffffff, 0x80085502, &(0x7f0000000200)=ANY=[]) read$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) bpf$auto(0x0, &(0x7f0000000400)=@bpf_attr_3={0x4, 0x6e7db850, 0x4, 0xa, 0x10, 0x7, 0xe91c, 0x9, 0xff, "e57dd3c4525849b216fa7bf08a779071", 0x0, 0xffff, 0xffffffffffffffff, 0x2, 0xc52e, 0x0, 0x7ff, 0x9, 0x1, 0x7, @attach_prog_fd, 0x7, 0xfae, 0x100000001, 0x400, 0x4}, 0x3e4) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r6, 0x402c542b, &(0x7f0000000440)) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x8802, 0x0) unshare$auto(0x40000080) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') write$auto(r7, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) 2m30.89953575s ago: executing program 3 (id=1817): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, 0x0, 0x0) mmap$auto(0x70, 0x4020006, 0xdb, 0xeb1, 0x401, 0xffffffffffe) close_range$auto(0x0, 0x5, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) acct$auto(&(0x7f00000002c0)='/dev/rfkill\x00') ioctl$auto(0x3, 0x4048aec9, r1) ptrace$auto_PTRACE_SET_SYSCALL_USER_DISPATCH_CONFIG(0x4210, 0xffffffffffffffff, 0xff, 0xffffffff80000001) r2 = socket(0x2, 0x1, 0x106) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x80000541b, 0xffffffffffffffff) setsockopt$auto(r2, 0x1, 0x7, &(0x7f0000000200)='\'\a\xeb\xb6\xc8\vF`\xf6\"8\x06hM\x06K\xa7x\x03\x00.y\xa8\xe5', 0xeb66) select$auto(0x4, &(0x7f00000000c0)={[0x9, 0x0, 0x100, 0x9, 0x0, 0x2, 0x100000001, 0x7, 0xc14b, 0x3, 0x6, 0x10, 0xa0, 0x9, 0xde8, 0x6]}, 0x0, 0x0, &(0x7f00000013c0)={0xfcb9, 0x6}) prctl$auto_PR_GET_TSC(0x19, 0x2, 0x3, 0x1001, 0x0) prctl$auto_PR_GET_TSC(0x19, 0x1, 0x5, 0x3, 0x7) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 2m28.676823052s ago: executing program 3 (id=1823): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0xc0ed0000, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x2001, 0x0) write$auto(r0, &(0x7f0000000200)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\xd4\xda\xa5\x1d\x12\x87M\xdf1\xc6\xa8\x80\x98*\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xc6\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xd2\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) newfstatat$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0, 0x7ff) poll$auto(0x0, 0x401, 0x30b6) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000034c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044400}, 0x4000000) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) getsockopt$auto_SO_BPF_EXTENSIONS(0xffffffffffffffff, 0x1, 0x30, &(0x7f00000000c0)='\x00', &(0x7f0000000100)=0xfffeffff) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x17}, &(0x7f0000000040)=0x1, 0x0, 0x7ff, 0x3ff, 0x5, 0x1, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0x0}) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x6d802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000000040)={@raw=0x5, 0x555c, 0xffff, 0x550, "8f9638544ae4bbff000000dbb5a3760f9b6b2c854e49fac493b9ab034dde3b02000000000000008192f5488f", @inferred=r2}) ioctl$auto(0x3, 0xc018aa3f, 0xf0b) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffffff, &(0x7f0000000340)=""/179, 0xb3) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) keyctl$auto_KEY_REQKEY_DEFL_THREAD_KEYRING(0x7, 0x1, 0x0, r1, 0x800000000000006) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/nbd7/queue/iosched/read_expire\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001300)=""/203, 0xcb) futimesat$auto(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x3}) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ptyd3/power/runtime_status\x00', 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000012c0)=""/4128, 0x1020) timerfd_create$auto_CLOCK_REALTIME(0x0, 0x953) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2m26.900681756s ago: executing program 3 (id=1826): unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/ram3/partscan\x00', 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x5, 0xeb1, 0x401, 0x0) r1 = getsockopt$auto(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000000300)="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", 0x3) capset$auto(0xfffffffffffffffe, 0xfffffffffffffffc) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) lsm_list_modules$auto(&(0x7f0000000140)=0x9, &(0x7f0000000180)=0x2, 0x6) unshare$auto(0x40000080) dup$auto(r1) setsockopt$auto(0xffffffffffffffff, 0x3, 0x12, 0x0, 0x4) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video0\x00', 0x420003, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xfffb}, 0x1) 2m12.602809815s ago: executing program 1 (id=1856): unshare$auto(0x40000080) r0 = fanotify_init$auto(0x5, 0x2000000000002) unshare$auto(0x40000080) ioctl$auto_FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0xffffffffffff8000) ioctl$auto(0xffffffffffffffff, 0x40045108, 0xffffffffffffffff) unshare$auto(0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x420c61, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) socket(0x2, 0x801, 0x106) getsockopt$auto(r1, 0x40000005, 0x1, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xc, 0xffffffffffffffff, 0x6, 0x10, 0x80, 0x801, 0x8000, 0x1, 0x1, 0x202, 0xd, 0xbca7, 0xfffffffffffffff6, 0x400, 0x0, 0x0, 0x6b4, [0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x1fffffffffc, 0x3, 0x4, 0xb, 0x3169b201, 0x0, 0x3, 0xfffffffffffffc01, 0x5, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0xfffffffffffffffe, 0x200000000000000, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x101, 0x0, 0x20000000000000, 0x40000000000000, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0xfffffffffffffffc, 0x6]}, 0x1fe, 0x1) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffffffffffd02, &(0x7f00000001c0)) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev4\x00', 0x0, 0x0) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, &(0x7f0000000040)='/eev/ram7\x00>\xdd\x03|P\x1e\xd1\xaa\x9e\xde\x91\x00d\n\xf7\xb4\xa6\xfb\xda\x92\xfb\xd6\xef\x01\x17\x1f\xb5-\x87t\x92wf\xba\x15\x1e\x00\x00\x00\x00\xdf\xa4}(\x02\x18\xca\xbdk\xd6\xd0\x1ft\xc5\x93\x84\x1dx\xc9\x8c\xfc\xbc\'\xab\xd5)R\xfa\x8e\xf2\xbdV\xfd\x9f\xcc\x9b\xb4\x82\"\v\xb1\x8ca\x9b\xe2)\x1dBW\x94EZ\xad\x96_\xefL\x86\xcc\x9e\x0e\xcar\xfa|\xcdb\xfdf\xf6#\x88\x14d\x00', 0x0) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001f40)=ANY=[@ANYBLOB="e0140000", @ANYBLOB="010027bd7000ffdbdf251e"], 0x14e0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) socket(0xf, 0x3, 0x2) select$auto(0x6, &(0x7f00000000c0)={[0x35cb81de, 0x0, 0x1ee, 0xffffffffffffffff, 0xfffffffffffffffe, 0x801, 0xeb, 0x41e, 0x0, 0x826, 0x2, 0x2, 0x6, 0x400, 0x2, 0x7]}, &(0x7f0000000140)={[0xffffffffffffffff, 0x1000, 0x5, 0x4, 0x24, 0x9, 0x10001, 0xffffffffffffff67, 0x2, 0x10001, 0x978, 0x0, 0x8000000000000001, 0x0, 0xa0, 0x3]}, &(0x7f0000000280)={[0x5, 0x4, 0x9, 0x6, 0x4, 0x3, 0x9, 0x10000000000007, 0x6, 0x3, 0x1, 0x61b, 0x3, 0x0, 0xf, 0x7]}, &(0x7f0000000300)={0x5}) setgroups$auto(0x4, 0xfffffffffffffffc) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) fanotify_mark$auto(r0, 0x9, 0x8, r0, &(0x7f0000000200)='./cgroup\x00') write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) pidfd_open$auto(0x1, 0x0) 2m11.642192075s ago: executing program 33 (id=1826): unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/ram3/partscan\x00', 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x5, 0xeb1, 0x401, 0x0) r1 = getsockopt$auto(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000000300)="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", 0x3) capset$auto(0xfffffffffffffffe, 0xfffffffffffffffc) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) lsm_list_modules$auto(&(0x7f0000000140)=0x9, &(0x7f0000000180)=0x2, 0x6) unshare$auto(0x40000080) dup$auto(r1) setsockopt$auto(0xffffffffffffffff, 0x3, 0x12, 0x0, 0x4) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video0\x00', 0x420003, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xfffb}, 0x1) 2m10.274829705s ago: executing program 1 (id=1860): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0x2, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x76, 0x0, &(0x7f00000002c0)=0x1000c0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000033, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r1 = setfsgid$auto(0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x48000, 0x0) set_mempolicy$auto(0x2, &(0x7f00000003c0)=0xffffffffffffffff, 0x7) prctl$auto(0x1e, 0x1, 0x0, 0x2, 0x1) ioctl$auto(0x3, 0x400442c8, 0x91) mprotect$auto(0x8, 0x0, 0x9) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x2, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_INFO2(r2, 0x81204101, &(0x7f0000000240)={0x8, 0x8, 0x8, 0x10001, "f2a840f77b4e2a8dd181c9fe82d5365f7b83bc57ae401bcce00d51dbfa0de45013a77272b38fe5bf9c204b1e14e480f0fe3f55e4e1f31745ab77450d7b163d93", "899496f05128d267937f838ebd3e24e4d1b055399e6ffba6fc114d34e9fe40bd775a8eab59dd82e306a01a8d05f07011f033c86f9451fcb13d60f55b1a0824d3ddc7de8d1bd96bdd03eafa239e051efa", "22602312866a0e94c03188637cb79b45c04158f1ee9ceffc4e9176f5120a2966", 0x9, 0x0, 0x100, 0x8, '\x00', "a32e940170f48fd22783e2a0be45bf40a578380020a15c92f8233df630f95932f1185a2801042d06d8096dc8e5588a9439a96850043d3100ec484720ad151f68"}) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) open(0x0, 0x22ac2, 0x5d745cb200ae4d7b) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f00000008c0)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', &(0x7f0000000280), 0xf4e9, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x11, 0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0xfffffffffffffffb, 0x7fffffffffffffff, 0x4, 0x100000007ffffffe, 0x7fffffffffff7ffb, 0x5f3, 0x7, 0x4, 0x6}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2m9.216992721s ago: executing program 1 (id=1863): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/mtu\x00', 0xe3102, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000884) lstat$auto(0x0, &(0x7f0000000180)={0xe, 0x0, 0x1000000000018000, 0x1000, 0x0, 0x0, 0x0, 0xfa96, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x8000000002, 0x7, 0x5, 0xfffffffffffffffe, 0x6, 0x8, 0xb}) r0 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x8) write$auto(0x3, 0x0, 0x7fffffff) 2m9.119549831s ago: executing program 1 (id=1864): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, 0x0, 0x0) mmap$auto(0x70, 0x4020006, 0xdb, 0xeb1, 0x401, 0xffffffffffe) close_range$auto(0x0, 0x5, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) acct$auto(&(0x7f00000002c0)='/dev/rfkill\x00') ioctl$auto(0x3, 0x4048aec9, r2) ptrace$auto_PTRACE_SET_SYSCALL_USER_DISPATCH_CONFIG(0x4210, 0xffffffffffffffff, 0xff, 0xffffffff80000001) socket(0x2, 0x1, 0x106) r3 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x80000541b, 0xffffffffffffffff) ioctl$auto_BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000340)={@inferred=r3, "77b9fd315781211af3534eeb5b519ef8fd0d21f122bd17c73c6e176768b8cbe52c43e779b0d80140bad0ca59b59a0406d4c378db121a0137112cd40376c9989b3d9c67167d1beaed0a33671db7d7b8e0680fe50f686108baf026a42900176aaa3cd737e93a933fd1135ce6038017f872245964bc507a2c1657837d1626f13c4aaeff017aecacad8cf9f6d4d33b8eea7e553c8da4fc9ebb5d433404b033a1ce53fa063a516cfbbef40494e48f5b66ea7fe7dd1be5e0e0af1b7a98a064fc2cae1666a9ec7feb8dd0cf735f6411e83369e0253d7f3161ecab485060be7d70a1286a7bd8da38afa9f4a924114dc6137b896ed2adbfff84f217ca432b59eabd0b7257d792f876f6d1e8282aeecb14f05134a08a0a2b516f44ffafcfc7cb6eb52aaee58b4d01249fd55698fe0ae3b6b77d0b408fffd616f6827d54bb44868cc8829e373092dfa29d71f21863fae3dc47071e3bfb4e8a4c712e64c34804d49cc927fe108a65a6b6015e738dc933bf1d774b940e3c520573237027cf832ae5a511190619aafd802e19e1c445d525d68b5b1652e9af6037d200cb0a37b66c3fc1d75ab6a7ac6ac6626b8952c3c7153f6dc2ebfde7ddf9bbe9ae982ded76ba3c475ee2345bd971afde3bdd375c67ec8addee2158a002dedff93e18c79a1842e650731bd07369260bb99ba722b035fed3353fa0bb8d032fa4c56bee0a5437ac5e3bec068ca95ef5d2f38b1e79be25e0de1345e6f7a77292e6b37f1afcf2e73d3054e216de3dfa67def971bc0343a0a2490db9f8b26533fac1f0ea78e5d922d324301db9432268c614bc0af301f047c77d3c04d81d5d006b9417c7730dbfd6ceaf50af520995f4f97fe2ce9348581796f030ed681ffc1dac56c8731825affce19a28d54331c05223cbb64c24b0e19f4d839b3f1520dadc23d893481b19d571a9284d55f4b28f861676b4eeebb8146a1d89f698903a1eb692792fc3734442ea6c3e40852c9639be15e3f57ded6940495dbebc5f565459b43e2e005867f38edfe403b0ce2a6c069f0458cca5eba4c090ec1521df5e9a25aff7ca0858560466e539af07d70ef4b6943e8110c029e30fe91c3bb9a2d78673867adab2d43a3af457c544db40f3fc5e515e11d2414fe970524c4f19884bf6037a79993fe51d0554a35e20b9afe1622e3e0e337099de210aea6f9a38aba62715d028c698ae22bd441ca0b13b477730f4eff9e18be9b09c38aea2e29fa2e3f293a01f4aee27ce42171fe205a55a9b4eaa4a1fd0f59dcab123b9df9751a6e183c0bf2939c238c9796c2626da4b1edd4c506cbcc575043b337cd0548570547330addd1063e7e352af00183fba531e96a0c5835c497a8e36010d75aa89b68c193bd28cc4880665a4bded6b2f02cfd56570ff56356c47e11dacc9b3b5705fc720141b66d6d75997af235a2ccfaded7c9505468f76593691aa1acc7b25a671f3d4f5d2b04f282fa9ee165aca25639a9cd63260e5355815900b96a1e1e1a232fd9893ff3c315850ea08ea02b3389dc33458bf602a863235e607ce3a5377945f5a6a6f665ee2d39e5ea43359b648ab863f374f860aa21c51b728e0e324fbb3f7213e1fa287d6ad60a5e6a28475dff7c4b68120ecfb7e19bcab2a11e2ba68f0be9e0d0182a50b0fbb6e83a3d3f6de0fb40ae903ec87d4e544b639bac034a363de233b3b4dbb01d48ce912fa0a4a7fa535c25d0925a65df3317a2babc697096fa7bc3d93be71d924bd93b3e6fdee10d25ef9bdda8ef6577ad42a16865d3befca42e5f53f4c222fc8b563faf21d72dc03c5547aaf9b32dd8bc54450c48d78b6c6467db7b3bcd909a61caad5ed0538b9652c9e890eb3e79344a61c132f60b788e1c2f0f030e79e1335b07c849a7685e491705d699f330495fdfe3c8fc87aeec8597d21ce7e6f58f58e8b8ceb6eb374027e6b6d4e2003a5dff394c842b41d75f2024d5dc5abd600e555f08cf11c37a869d6f3eb1e9d700099a8eeb08f56f4d0c5f87f10ad859b6694bdfedab17eb441da219fa0013c4090d87ba99a8f8e8e439116bb5a32fed4154d6d9466747ed660e5dfaa5653302a479c8cbe3c854aa9ac2d1f4819b5f1a945f14c1a00bd43caa99daeca430ae8dddd42cfc28744d7a0dd8562783f7d7e9ab7301ab29ea383ac84153ae8203145ac09e7a4ccf09777c372f84c583984278dab95c46e18f351ddcc320ae4dc1e7d371922843453abe362afc170f145da5c9a776f99aa4ada019a8fba58b72760f0861c0a5b17cd284d4e2cf543599172850609dbee95ae5feaf54a9cb6d61227150ee5b12b2035a7b8e9d81b7372406220d053cd0e9c82df9c7e42d98c9e249026910b58fae5fc2392fe184a9bd48b7f1dd9a158e993f79a91092c6e882dd8cf0eaf2299c9a406a8ebd22bd53a7c0910689a226377da4dcee945d6ef1755f2aab80976319f24bc4657a3d214dc01e975f5b701f4fd32a4df09c089a3f2d5ca3aa2ed275eaef74511a0fd33995c4cd7458d8ee8ecfe3d462b18ce7eed3a6d624369056e9d74d0ec5863b750e7f45e245b7f01aede748edfeba1c243182e0fb643a9ceeb9ec73f9ac3b9e9e63cdac62270dcee103edf17e739a9d173822069af206852f2f144c3c1d1373c8959fc3dad67ad12b5e5c0bf11c046bf2a2fbb98d3400db8e395a133e572ed62ac10e2348ec6e3ee178bced5f622acf0a33e4712fc4f16076498742bb0b13f5307249c7d8e5477c4a54109766a969918e2aabaf93d2ab2226f9f572622c01480d286eba9fb563e66a4b1245690745b5fd4aa41a7ca2a140d7916f83f1d02eb5f37d83c751b9e80b9eecc212c16d97eff0ca907c81f86e5f650a9e3adc1fbd4da85812303824fd60881e55c88a8c4c6e1d85538fd4e14851d67649698cdd5b95b5f95a8959f61177e53dc31da446a2fc49c2f924ab25486c69e3a9cb01329954eef626148c4a7eceec037b9c7fddd8e638695061dd10b4dba31e001665cbfd98757d5fb60e62dba1f830da4e366447dbb51c4421d6ff314b7fa5ab2b0568984b8b87787f41cfbceb94ea704b926374fb995b6f5bf530bfefc109cc02181d9855bb213308dec58ea8d77fd42be06b14cce0e60dcc4de7fdb94ce0058d69fb7e4c60d26034b6cc331bcfd5e3405850cb55f1d895dfed010652417d0d159fd485d347b481c820aebfb67db88b37a1fb9802d38c4766106412f8b11e9b21e4fa8d79749a87d93473d60874f3a3ddb48530401480daefbd290fff8a24b8a63309496f1b712d1420db6aea781df3fe366b61a8f4a77ea9b3f586a8eaff201ee219b0d01d879307bbfa80b87bb9b6d408f1cea1ef2e2382b826694144c6e2ffed99ddbc1fce2e2de625f9936a72f1d4892748e577592425da44f3329bdf7dd903ccafbcea246236678eef4c2956ee8919cf84bc7d1e7863d37c6c9b95815e79e7de02036f66f7d172f2ff90f3befb3a75a2babf8ddd37cdfad55abdd7fbcc003903dedd6280a9d892b8b9190798fbf6a97e6770ff5c8bed78c797b14519f911a77726f616fffbdebc5b4ff7cb0e5a5c77ca9390172c25a18d120f35fff4fb4632c5e0d8852d44205b67d05d4cd1a601cb4e9c0ba4204a1bbbef95fd026a6615f9b5dd4d78734b7aa5211f6a4a9c6a11ad88cf46a9cf9ba9b6d22c328be791e5ce55115526887ed063abf11595ad11e17c8a09a1aaae0425002a59e5c319e492f3c63f66fa015e5ba7b586f16faa9f6d8c29f7fb41635e030f2e87c019a3dc7ea1d4bcfeded1d27e2bebbce8606eed222fb6c8e98fe3491d5baffb492fc311ffbbb31473a2a322f4ae524b489f011dde47c0b44a7cbfd8d4f227dea2bef3c56106734b203ced834620d68752eea23a027480ef83f9b6a280c7c3f428ceb2b4016f31b9f2f867dbddbd25b32cabc5559b851c72c041864bf10f6c3b10f19700727a10104ec14a2504771bcae6b5d420eba15782d1be92e9820849111d4d526f1ffd399afcee046500d7eefb65d2e5aabe66b50bcf160e53287bbb7360e747a209e6336c16fb2b97bc587698a9fb171f43e16667f4d17dfe9f347694b23420cef6ec0a038e4c22873898d632cee976e79918241643e7d4f11b84b7a501162850d276c589136c6e778eee6a190fee0d9212ea037db1a65d7b9663a294a7e7907ddf4be096e66122eb0517ec6866f2d6a72ae17a54f391d625db1b07a3901f8200fb78158cc4089addbf0aebcb3915a0c84e884f58c27951135d8b240923226c8b4dcf144dc9b86bed1a0fa7001d8fad3bddc0e3fe370160cbbf5a19b158adfa3f4d69971fd2374957cef40f0d2ecffcd1861524cfae2bf9182fd9c1c992e271d469ef8024e552686b7c3ac16228b63959189e54aa8a5979f1ddd87fa0307fcc0742359dbb22cf11ed0f83bba33e7f41a429c489c3733320cd24de57ac88aee66d5209c23efd12259e49f714d3e183da229a458805a7ae964e33282ed335394f8ce14ee5718ec7334f963c9421ffad7049fe5b361c32e308183e510a9ca4e78ff36067fb68943a252def3254c82a550981ea59459231946547fb3f61d22b80e7699ae120e15f04f021dd90a209134abeff8d156010ce3756addced82bbd4dce22f6a13354e27945bcf3f49481c79820f9eaaf487fdcdad017948b9faf02fe0919cf780e557a0da34656a11a5625069cbd8870e2dd18c92002e49e6c2a1bc22955dd7f960550c9baf4f48f66114b8351c8458eacf142e9c04e933303efa20eb6a4ab85a4857a2e23557aef38bac4bf5d5678c6ea86dfca90b12fc7bcedca4d57fb41e39e4c884cd68254430994e525ccfc20ea98c93ed8ffba7969318322133f2fa2fc3d074f3bc039726221394b61ad40df3965aa4879d2a5bcb51a00519475f8a3031b75d175e7ac460a4e9b487bc06c3d4c6dfe04a1228b46265d716fc5b14007de45cc3de641bade0d16230bb92788081bef774d923f61ba69535a31f3bab816642ae837d3caee58c47068299d27ef5097d90e6f4851ff232e1dde00419ffdeda8b9b6e6ef0981681252261f30687bc8e71d5e8f977001f7071c54571d26ab750ac9ae1ea277fcf3935a1fbc75cead3e6175222ce5daf0cda7d0f843714b06a436d2898cc8a891ef8ea405c79ce17380bac487f5913adf4a1b8b4d45a463522d1238e8a9545f0da06fb78ed9c91a705d9430992e48dd5880f060a3c20d43129b18ede71f655fb77e257f540e86a8d0b88847e5ade7dadd16f95c254148212264381417d63a97a29ef86f4ee745aeb795eb9f52a80382baf92c85172537e1958dd9705dcf26fa072bb7739b89ad67dbe45f5fa047264a24ec61fb4a76a0b2f59df6720864c0c738c484ac735509f85a9dcac5ed1668544ed4696e3ab7a19c5ef6cf4d6352119b2ff2487aa08350dabea38102ddcf2d4488345f2f74df2da7022adbf5334edf998eda0127ad89020d1e7dcc0bd591930c54cbcbbe176d8a97c54f71b6589b72a2cee561289791636a36b6edb6af645de03d1d8f3ea704d0b6b1ec8f103e9598d791806571b053e162ebc30fef50b2ca5644ab0c9ad250021ff7f0f3998063e93dd1e8e601ab2614d589a1480a30d1dfb3f3ea82142262c52a53555d0dc114d13c55cc4fb321e59e9e9ae84fbff4e167ebc7695ae5399b3f40f09b3438289e7f86d6fd03c06a3df134028026a3ae36cfe073705c3b95aec9dc09d82267aedc0760bc860e9a46ab24e1912f02a1bb81366683eddf84fd07ca019b5db83f9663fe149b582204b6b5770ed9aa64ce510474"}) select$auto(0x4, &(0x7f00000000c0)={[0x9, 0x0, 0x100, 0x9, 0x0, 0x2, 0x100000001, 0x7, 0xc14b, 0x3, 0x6, 0x10, 0xa0, 0x9, 0xde8, 0x6]}, 0x0, 0x0, &(0x7f00000013c0)={0xfcb9, 0x6}) prctl$auto_PR_GET_TSC(0x19, 0x2, 0x3, 0x1001, 0x0) prctl$auto_PR_GET_TSC(0x19, 0x1, 0x5, 0x3, 0x7) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 2m7.387931346s ago: executing program 1 (id=1867): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0xc0ed0000, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x2001, 0x0) write$auto(r0, &(0x7f0000000200)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\xd4\xda\xa5\x1d\x12\x87M\xdf1\xc6\xa8\x80\x98*\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xc6\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xd2\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) poll$auto(0x0, 0x401, 0x30b6) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000034c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044400}, 0x4000000) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) getsockopt$auto_SO_BPF_EXTENSIONS(r1, 0x1, 0x30, &(0x7f00000000c0)='\x00', &(0x7f0000000100)=0xfffeffff) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x17}, &(0x7f0000000040)=0x1, 0x0, 0x7ff, 0x3ff, 0x5, 0x1, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0x0}) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x6d802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000040)={@raw=0x5, 0x555c, 0xffff, 0x550, "8f9638544ae4bbff000000dbb5a3760f9b6b2c854e49fac493b9ab034dde3b02000000000000008192f5488f", @inferred=r3}) ioctl$auto(0x3, 0xc018aa3f, 0xf0b) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffffff, &(0x7f0000000340)=""/179, 0xb3) keyctl$auto(0x1f, 0x1, 0x6, r2, 0x3ff) keyctl$auto_KEY_REQKEY_DEFL_THREAD_KEYRING(0x7, 0x1, 0x0, r2, 0x800000000000006) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/nbd7/queue/iosched/read_expire\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000001300)=""/203, 0xcb) futimesat$auto(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x3}) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ptyd3/power/runtime_status\x00', 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f00000012c0)=""/4128, 0x1020) timerfd_create$auto_CLOCK_REALTIME(0x0, 0x953) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2m5.579289284s ago: executing program 1 (id=1870): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0x2, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x76, 0x0, &(0x7f00000002c0)=0x1000c0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000033, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r1 = setfsgid$auto(0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) set_mempolicy$auto(0x2, &(0x7f00000003c0)=0xffffffffffffffff, 0x7) prctl$auto(0x1e, 0x1, 0x0, 0x2, 0x1) ioctl$auto(0x3, 0x400442c8, 0x91) mprotect$auto(0x8, 0x0, 0x9) ioctl$auto_SNDRV_PCM_IOCTL_INFO2(0xffffffffffffffff, 0x81204101, &(0x7f0000000240)={0x8, 0x8, 0x8, 0x10001, "f2a840f77b4e2a8dd181c9fe82d5365f7b83bc57ae401bcce00d51dbfa0de45013a77272b38fe5bf9c204b1e14e480f0fe3f55e4e1f31745ab77450d7b163d93", "899496f05128d267937f838ebd3e24e4d1b055399e6ffba6fc114d34e9fe40bd775a8eab59dd82e306a01a8d05f07011f033c86f9451fcb13d60f55b1a0824d3ddc7de8d1bd96bdd03eafa239e051efa", "22602312866a0e94c03188637cb79b45c04158f1ee9ceffc4e9176f5120a2966", 0x9, 0x0, 0x100, 0x8, '\x00', "a32e940170f48fd22783e2a0be45bf40a578380020a15c92f8233df630f95932f1185a2801042d06d8096dc8e5588a9439a96850043d3100ec484720ad151f68"}) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f00000008c0)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', &(0x7f0000000280), 0xf4e9, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x11, 0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0xfffffffffffffffb, 0x7fffffffffffffff, 0x4, 0x100000007ffffffe, 0x7fffffffffff7ffb, 0x5f3, 0x7, 0x4, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2m4.714507696s ago: executing program 2 (id=1873): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, 0x0, 0x0) mmap$auto(0x70, 0x4020006, 0xdb, 0xeb1, 0x401, 0xffffffffffe) close_range$auto(0x0, 0x5, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) openat$auto_ima_measurements_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) acct$auto(&(0x7f00000002c0)='/dev/rfkill\x00') ioctl$auto(0x3, 0x4048aec9, r2) ptrace$auto_PTRACE_SET_SYSCALL_USER_DISPATCH_CONFIG(0x4210, 0xffffffffffffffff, 0xff, 0xffffffff80000001) socket(0x2, 0x1, 0x106) r3 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$auto(0x3, 0x80000541b, 0xffffffffffffffff) ioctl$auto_BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000340)={@inferred=r3, "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"}) select$auto(0x4, &(0x7f00000000c0)={[0x9, 0x0, 0x100, 0x9, 0x0, 0x2, 0x100000001, 0x7, 0xc14b, 0x3, 0x6, 0x10, 0xa0, 0x9, 0xde8, 0x6]}, 0x0, 0x0, &(0x7f00000013c0)={0xfcb9, 0x6}) prctl$auto_PR_GET_TSC(0x19, 0x2, 0x3, 0x1001, 0x0) prctl$auto_PR_GET_TSC(0x19, 0x1, 0x5, 0x3, 0x7) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 2m2.975659662s ago: executing program 2 (id=1875): unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/ram3/partscan\x00', 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x5, 0xeb1, 0x401, 0x0) r1 = getsockopt$auto(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000000300)="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", 0x3) capset$auto(0xfffffffffffffffe, 0xfffffffffffffffc) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) lsm_list_modules$auto(&(0x7f0000000140)=0x9, &(0x7f0000000180)=0x2, 0x6) unshare$auto(0x40000080) dup$auto(r1) setsockopt$auto(0xffffffffffffffff, 0x3, 0x12, 0x0, 0x4) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x181403, 0x0) pipe2$auto(0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video0\x00', 0x420003, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xfffb}, 0x1) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty21\x00', 0xa201, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000180)) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000140)) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000100)="15") keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) unshare$auto(0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/btrfs/features/free_space_tree\x00', 0x40c00, 0x0) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x404020, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x40000010001}, 0x1) 2m1.95362304s ago: executing program 2 (id=1877): unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/ram3/partscan\x00', 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x5, 0xeb1, 0x401, 0x0) getsockopt$auto(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000000300)="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", 0x3) capset$auto(0xfffffffffffffffe, 0xfffffffffffffffc) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) lsm_list_modules$auto(&(0x7f0000000140)=0x9, &(0x7f0000000180)=0x2, 0x6) unshare$auto(0x40000080) setsockopt$auto(0xffffffffffffffff, 0x3, 0x12, 0x0, 0x4) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x181403, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video0\x00', 0x420003, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xfffb}, 0x1) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty21\x00', 0xa201, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000180)) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000140)) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000100)="15") keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/btrfs/features/free_space_tree\x00', 0x40c00, 0x0) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x404020, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x40000010001}, 0x1) 2m0.013606843s ago: executing program 2 (id=1879): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x1a) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x15, 0xffffffffffffffff, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x181000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x40000076, 0x1, 0x8003}]}) r2 = setfsgid$auto(0xee01) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3) set_mempolicy$auto(0x8003, 0x0, 0x4) get_mempolicy$auto(0x0, 0x0, 0x3ff, 0x9, 0xffffffffffffffff) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) kcmp$auto(0x1, 0x1, 0x0, 0x100000004, 0x100000001) setsockopt$auto(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x8002) semget$auto(0x0, 0x2e4a, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, r2, 0x3ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001f00), r4) sendmsg$auto_TIPC_NL_LINK_GET(r3, &(0x7f0000007c00)={0x0, 0x0, &(0x7f0000007bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="ec010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000}, 0x20000040) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 1m58.968496495s ago: executing program 2 (id=1881): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0xc0ed0000, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x2001, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) newfstatat$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0, 0x7ff) r0 = openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) poll$auto(0x0, 0x401, 0x30b6) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000034c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044400}, 0x4000000) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) getsockopt$auto_SO_BPF_EXTENSIONS(r0, 0x1, 0x30, &(0x7f00000000c0)='\x00', &(0x7f0000000100)=0xfffeffff) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x17}, &(0x7f0000000040)=0x1, 0x0, 0x7ff, 0x3ff, 0x5, 0x1, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0x0}) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x6d802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000000040)={@raw=0x5, 0x555c, 0xffff, 0x550, "8f9638544ae4bbff000000dbb5a3760f9b6b2c854e49fac493b9ab034dde3b02000000000000008192f5488f", @inferred=r2}) ioctl$auto(0x3, 0xc018aa3f, 0xf0b) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffffff, &(0x7f0000000340)=""/179, 0xb3) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) keyctl$auto_KEY_REQKEY_DEFL_THREAD_KEYRING(0x7, 0x1, 0x0, r1, 0x800000000000006) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/nbd7/queue/iosched/read_expire\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001300)=""/203, 0xcb) futimesat$auto(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x3}) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ptyd3/power/runtime_status\x00', 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000012c0)=""/4128, 0x1020) timerfd_create$auto_CLOCK_REALTIME(0x0, 0x953) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 1m56.993402975s ago: executing program 2 (id=1883): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0x2, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x76, 0x0, &(0x7f00000002c0)=0x1000c0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000033, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r1 = setfsgid$auto(0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x48000, 0x0) set_mempolicy$auto(0x2, &(0x7f00000003c0)=0xffffffffffffffff, 0x7) prctl$auto(0x1e, 0x1, 0x0, 0x2, 0x1) ioctl$auto(0x3, 0x400442c8, 0x91) mprotect$auto(0x8, 0x0, 0x9) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x2, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_INFO2(r2, 0x81204101, &(0x7f0000000240)={0x8, 0x8, 0x8, 0x10001, "f2a840f77b4e2a8dd181c9fe82d5365f7b83bc57ae401bcce00d51dbfa0de45013a77272b38fe5bf9c204b1e14e480f0fe3f55e4e1f31745ab77450d7b163d93", "899496f05128d267937f838ebd3e24e4d1b055399e6ffba6fc114d34e9fe40bd775a8eab59dd82e306a01a8d05f07011f033c86f9451fcb13d60f55b1a0824d3ddc7de8d1bd96bdd03eafa239e051efa", "22602312866a0e94c03188637cb79b45c04158f1ee9ceffc4e9176f5120a2966", 0x9, 0x0, 0x100, 0x8, '\x00', "a32e940170f48fd22783e2a0be45bf40a578380020a15c92f8233df630f95932f1185a2801042d06d8096dc8e5588a9439a96850043d3100ec484720ad151f68"}) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) open(0x0, 0x22ac2, 0x5d745cb200ae4d7b) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f00000008c0)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', &(0x7f0000000280), 0xf4e9, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x11, 0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0xfffffffffffffffb, 0x7fffffffffffffff, 0x4, 0x100000007ffffffe, 0x7fffffffffff7ffb, 0x5f3, 0x7, 0x4, 0x6}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 1m50.466568282s ago: executing program 34 (id=1870): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0x2, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x76, 0x0, &(0x7f00000002c0)=0x1000c0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000033, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r1 = setfsgid$auto(0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) set_mempolicy$auto(0x2, &(0x7f00000003c0)=0xffffffffffffffff, 0x7) prctl$auto(0x1e, 0x1, 0x0, 0x2, 0x1) ioctl$auto(0x3, 0x400442c8, 0x91) mprotect$auto(0x8, 0x0, 0x9) ioctl$auto_SNDRV_PCM_IOCTL_INFO2(0xffffffffffffffff, 0x81204101, &(0x7f0000000240)={0x8, 0x8, 0x8, 0x10001, "f2a840f77b4e2a8dd181c9fe82d5365f7b83bc57ae401bcce00d51dbfa0de45013a77272b38fe5bf9c204b1e14e480f0fe3f55e4e1f31745ab77450d7b163d93", "899496f05128d267937f838ebd3e24e4d1b055399e6ffba6fc114d34e9fe40bd775a8eab59dd82e306a01a8d05f07011f033c86f9451fcb13d60f55b1a0824d3ddc7de8d1bd96bdd03eafa239e051efa", "22602312866a0e94c03188637cb79b45c04158f1ee9ceffc4e9176f5120a2966", 0x9, 0x0, 0x100, 0x8, '\x00', "a32e940170f48fd22783e2a0be45bf40a578380020a15c92f8233df630f95932f1185a2801042d06d8096dc8e5588a9439a96850043d3100ec484720ad151f68"}) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f00000008c0)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', &(0x7f0000000280), 0xf4e9, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x11, 0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0xfffffffffffffffb, 0x7fffffffffffffff, 0x4, 0x100000007ffffffe, 0x7fffffffffff7ffb, 0x5f3, 0x7, 0x4, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 1m41.902110671s ago: executing program 35 (id=1883): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0x2, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x76, 0x0, &(0x7f00000002c0)=0x1000c0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000033, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r1 = setfsgid$auto(0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x48000, 0x0) set_mempolicy$auto(0x2, &(0x7f00000003c0)=0xffffffffffffffff, 0x7) prctl$auto(0x1e, 0x1, 0x0, 0x2, 0x1) ioctl$auto(0x3, 0x400442c8, 0x91) mprotect$auto(0x8, 0x0, 0x9) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x2, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_INFO2(r2, 0x81204101, &(0x7f0000000240)={0x8, 0x8, 0x8, 0x10001, "f2a840f77b4e2a8dd181c9fe82d5365f7b83bc57ae401bcce00d51dbfa0de45013a77272b38fe5bf9c204b1e14e480f0fe3f55e4e1f31745ab77450d7b163d93", "899496f05128d267937f838ebd3e24e4d1b055399e6ffba6fc114d34e9fe40bd775a8eab59dd82e306a01a8d05f07011f033c86f9451fcb13d60f55b1a0824d3ddc7de8d1bd96bdd03eafa239e051efa", "22602312866a0e94c03188637cb79b45c04158f1ee9ceffc4e9176f5120a2966", 0x9, 0x0, 0x100, 0x8, '\x00', "a32e940170f48fd22783e2a0be45bf40a578380020a15c92f8233df630f95932f1185a2801042d06d8096dc8e5588a9439a96850043d3100ec484720ad151f68"}) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) open(0x0, 0x22ac2, 0x5d745cb200ae4d7b) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f00000008c0)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', &(0x7f0000000280), 0xf4e9, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x11, 0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0xfffffffffffffffb, 0x7fffffffffffffff, 0x4, 0x100000007ffffffe, 0x7fffffffffff7ffb, 0x5f3, 0x7, 0x4, 0x6}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 1m18.384751218s ago: executing program 7 (id=1951): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0x2, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x76, 0x0, &(0x7f00000002c0)=0x1000c0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000033, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) setfsgid$auto(0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x48000, 0x0) set_mempolicy$auto(0x2, &(0x7f00000003c0)=0xffffffffffffffff, 0x7) prctl$auto(0x1e, 0x1, 0x0, 0x2, 0x1) ioctl$auto(0x3, 0x400442c8, 0x91) mprotect$auto(0x8, 0x0, 0x9) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x2, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_INFO2(r1, 0x81204101, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 1m16.166910721s ago: executing program 7 (id=1955): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x4000, 0x0) read$auto_vcs_fops_vc_screen(r1, &(0x7f00000000c0)=""/143, 0x8f) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory4/online\x00', 0x2062, 0x0) write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x8000000000000000) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010025bd7000fedbc4256300000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x90) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)=@bpf_attr_0={0x5, 0x9, 0xf, 0xb4, 0x8, r3, 0x5, "58a60f7e066e343427a1d46fdb0fdeae", r6, r3, 0x4b, 0x66, 0x735, 0x5, r1, r3}, 0x1877) 1m14.013615087s ago: executing program 7 (id=1960): unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/ram3/partscan\x00', 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x5, 0xeb1, 0x401, 0x0) r1 = getsockopt$auto(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000000300)="5c5fefa380784830c7c33113a2fe9128db137cb4a664b58adf7dc908800ce25691fc225fcdcf683170297474105fc8a895841fca8c833672723e81cd8054ffa1bf24563a93a701449085d149ee1229e4694a8f444d3d65b231fda5e60402145edc8515001f1c71c9acdf79ae637e1daf2c53554cf17b80b09cf43a875cec57a95d28e6bfdc443d6fd535bc9aadc48ab036cd3803b6caa54b418bcc0aec948a84a9db478d6569a6e58df6f7e127a611131f6fd157c67e829cfb86c304ef1cb7bdfff9bd7385ac4de8312d9fbe319d2681ccbd0c92ee9fa4af20d387cfe392e71f7c9b85e0237200c864529a8245ddef83fb2f8c6c3f0774e41eae159ce03116e1f1cbfffa5f0865867c23bfdc5c9579a5d2e78f5fe37c5d064dc13e8254a07c5b5cdad806ab6a62084f33c9c67a95ef3fb262571594d66fa5626d9cde654e7d31dbe6d5c5a70daaca61310abf438466d279a164fd25c91f22e5aaa845ae0880b578860f56f0a6d18ea1a8948ef480734c684ff2d13817e7a1a160a49907007478b4d620c9292c0a237e4eb2eb1d166f126b12b8e678bd1aee965737e2f120da4ba623377d2f80b42096bea5", 0x3) capset$auto(0xfffffffffffffffe, 0xfffffffffffffffc) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) lsm_list_modules$auto(&(0x7f0000000140)=0x9, &(0x7f0000000180)=0x2, 0x6) unshare$auto(0x40000080) dup$auto(r1) setsockopt$auto(0xffffffffffffffff, 0x3, 0x12, 0x0, 0x4) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x181403, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video0\x00', 0x420003, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xfffb}, 0x1) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty21\x00', 0xa201, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000180)) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000140)) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000100)="15") keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/btrfs/features/free_space_tree\x00', 0x40c00, 0x0) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x404020, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x40000010001}, 0x1) 1m12.153118517s ago: executing program 7 (id=1964): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0x2, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x76, 0x0, &(0x7f00000002c0)=0x1000c0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000033, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) setfsgid$auto(0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x48000, 0x0) set_mempolicy$auto(0x2, &(0x7f00000003c0)=0xffffffffffffffff, 0x7) prctl$auto(0x1e, 0x1, 0x0, 0x2, 0x1) ioctl$auto(0x3, 0x400442c8, 0x91) mprotect$auto(0x8, 0x0, 0x9) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x2, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_INFO2(r1, 0x81204101, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 1m10.083955476s ago: executing program 7 (id=1971): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0xc0ed0000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x2001, 0x0) write$auto(r0, &(0x7f0000000200)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\xd4\xda\xa5\x1d\x12\x87M\xdf1\xc6\xa8\x80\x98*\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xc6\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xd2\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) newfstatat$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0, 0x7ff) r1 = openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) poll$auto(0x0, 0x401, 0x30b6) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000034c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044400}, 0x4000000) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) getsockopt$auto_SO_BPF_EXTENSIONS(r1, 0x1, 0x30, &(0x7f00000000c0)='\x00', &(0x7f0000000100)=0xfffeffff) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x17}, &(0x7f0000000040)=0x1, 0x0, 0x7ff, 0x3ff, 0x5, 0x1, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0x0}) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x6d802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000040)={@raw=0x5, 0x555c, 0xffff, 0x550, "8f9638544ae4bbff000000dbb5a3760f9b6b2c854e49fac493b9ab034dde3b02000000000000008192f5488f", @inferred=r3}) ioctl$auto(0x3, 0xc018aa3f, 0xf0b) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffffff, &(0x7f0000000340)=""/179, 0xb3) keyctl$auto(0x1f, 0x1, 0x6, r2, 0x3ff) keyctl$auto_KEY_REQKEY_DEFL_THREAD_KEYRING(0x7, 0x1, 0x0, r2, 0x800000000000006) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000012c0)='/sys/devices/virtual/block/nbd7/queue/iosched/read_expire\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000001300)=""/203, 0xcb) futimesat$auto(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x3}) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ptyd3/power/runtime_status\x00', 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f00000012c0)=""/4128, 0x1020) timerfd_create$auto_CLOCK_REALTIME(0x0, 0x953) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 1m8.550869073s ago: executing program 7 (id=1975): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0x2, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x76, 0x0, &(0x7f00000002c0)=0x1000c0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000033, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r1 = setfsgid$auto(0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x48000, 0x0) set_mempolicy$auto(0x2, &(0x7f00000003c0)=0xffffffffffffffff, 0x7) prctl$auto(0x1e, 0x1, 0x0, 0x2, 0x1) ioctl$auto(0x3, 0x400442c8, 0x91) mprotect$auto(0x8, 0x0, 0x9) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x2, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_INFO2(r2, 0x81204101, &(0x7f0000000240)={0x8, 0x8, 0x8, 0x10001, "f2a840f77b4e2a8dd181c9fe82d5365f7b83bc57ae401bcce00d51dbfa0de45013a77272b38fe5bf9c204b1e14e480f0fe3f55e4e1f31745ab77450d7b163d93", "899496f05128d267937f838ebd3e24e4d1b055399e6ffba6fc114d34e9fe40bd775a8eab59dd82e306a01a8d05f07011f033c86f9451fcb13d60f55b1a0824d3ddc7de8d1bd96bdd03eafa239e051efa", "22602312866a0e94c03188637cb79b45c04158f1ee9ceffc4e9176f5120a2966", 0x9, 0x0, 0x100, 0x8, '\x00', "a32e940170f48fd22783e2a0be45bf40a578380020a15c92f8233df630f95932f1185a2801042d06d8096dc8e5588a9439a96850043d3100ec484720ad151f68"}) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', 0x0, &(0x7f0000000280), 0xf4e9, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x11, 0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0xfffffffffffffffb, 0x7fffffffffffffff, 0x4, 0x100000007ffffffe, 0x7fffffffffff7ffb, 0x5f3, 0x7, 0x4, 0x6}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 1m2.165469027s ago: executing program 6 (id=1983): unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/ram3/partscan\x00', 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x5, 0xeb1, 0x401, 0x0) r1 = getsockopt$auto(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) io_uring_register$auto_IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000000300)="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", 0x3) capset$auto(0xfffffffffffffffe, 0xfffffffffffffffc) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) lsm_list_modules$auto(&(0x7f0000000140)=0x9, &(0x7f0000000180)=0x2, 0x6) unshare$auto(0x40000080) dup$auto(r1) setsockopt$auto(0xffffffffffffffff, 0x3, 0x12, 0x0, 0x4) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x181403, 0x0) pipe2$auto(0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x420003, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xfffb}, 0x1) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty21\x00', 0xa201, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000180)) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000140)) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000100)="15") keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) unshare$auto(0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/btrfs/features/free_space_tree\x00', 0x40c00, 0x0) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x404020, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x40000010001}, 0x1) 1m1.124432186s ago: executing program 6 (id=1987): unshare$auto(0x3d2c4d54) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)='#', 0x4b47, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0}) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) settimeofday$auto(&(0x7f0000000540)={0x5, 0x5}, &(0x7f0000000580)={0x80000003, 0x3}) shmctl$auto_IPC_RMID(0x6a65, 0x0, &(0x7f0000000300)={{0x6, 0x0, 0x0, 0xfffffffe, 0x80, 0xa, 0x8}, 0xfffffff8, 0x1ff, 0x800, 0x4, @raw=0x3, @inferred=0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="5e96d4c4c9f11b902b31b587288ce68456d3372d700a0df0db", 0x0}) r1 = setfsgid$auto(r0) r2 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendmsg$auto_ETHTOOL_MSG_MODULE_GET(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24004100}, 0x4) shutdown$auto(0x200000003, 0x0) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7c, 0x4) openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/ns/cgroup\x00', 0x440000, 0x0) mseal$auto(0x0, 0x7dda, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000003c0), r2) ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(0xffffffffffffffff, 0x80184153, &(0x7f0000000500)={0x4, &(0x7f00000004c0)=&(0x7f00000003c0), 0x80000000}) sendmsg$auto_OVS_VPORT_CMD_GET(r2, &(0x7f0000003d00)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003cc0)={&(0x7f0000003d40)=ANY=[], 0x2758}, 0x1, 0x0, 0x0, 0x8084}, 0x9b0c31aa1e21cca4) setsockopt$auto(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x8002) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) futex$auto(&(0x7f0000000000)=0x24000, 0x8, 0x4991, &(0x7f0000000040)={0x64, 0x5}, &(0x7f0000000080)=0x2, 0xc826) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 59.397789684s ago: executing program 6 (id=1990): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x100, 0x0) ioctl$auto_EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f00000000c0)={0x3, 0x9, 0xe7d, 0xc1e, "fd000000000000004b946edb9f435bcb5223b07f36dcc2e8b0d2e486bbf74a63"}) r1 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000040), 0x10400, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/bus/usb-serial/drivers/motorola_tetra/uevent\x00', 0xa501, 0x0) write$auto(r2, 0x0, 0x7fffffff) pidfd_open$auto(0x1, 0x0) semtimedop$auto(0xffffff7f, &(0x7f0000000000)={0x4, 0x1, 0x1ef}, 0x29, &(0x7f0000000040)={0x21d, 0xd}) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000100)={0x2, 0x81, 0xffff45ac, 0x5, &(0x7f0000000240), 0xc694, 0x3, 0x80005, @stream_id=0xfffffffb, 0x2004a, 0xc, 0x0}) select$auto(0x4, &(0x7f0000000080)={[0x6, 0xb8, 0x4, 0x1, 0x76361d02, 0x5, 0x4, 0x6, 0x3, 0x667, 0x0, 0x3, 0x8001, 0xb2, 0x2, 0x401]}, &(0x7f0000000140)={[0x7ff, 0xffffffffffffffff, 0x5, 0x7, 0x6, 0x2, 0xcb91, 0xffff, 0x0, 0x6, 0x3, 0x5, 0xfff, 0xbc57, 0x80000000, 0xa80]}, &(0x7f00000001c0)={[0x1, 0x6b, 0x101, 0x80000001, 0x576, 0x10, 0x6729, 0x80000000, 0x8, 0x1, 0x5, 0xcd, 0x3, 0x8000000000000001, 0x6, 0x1]}, &(0x7f0000000240)={0x5, 0x1cbe7d49}) r3 = socket(0x1e, 0x1, 0x0) bind$auto(r3, &(0x7f0000000040)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e21, 0x3}}, 0x66) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x6) getsockopt$auto_SO_BSDCOMPAT(r1, 0x7fff, 0xe, &(0x7f0000000080)='$((%b\x00', &(0x7f0000000100)=0x4) 58.302030289s ago: executing program 6 (id=1993): r0 = seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0xfff, &(0x7f0000000080)="ec40b66f3a453653e94b4ae643714fc2bdc42ca71f1ef5b0952118e5243036336d4bff3dd1db9b49323085a955fd3108b8a5b046d87668ccd89f5f722d8142831912bf5576fe33d71730e7f336da4dfe68bcc8bc1e11239d1a1eda9f8de728ad47c783b9c4cbbefc78ade9b36a478dc31533505b887e639351be312c831ddda4dc7e140012d10708b76047d3d26fb8beca29199d62ecbdaee644373cd2a1d4bb4214cd4dd11cd706659756cf9789318fd2bce4e87709e1d49fc13f2973a615e198acd64dcd251a37108b515cfdcda6ce6c476183850a98c768b599ef406535a4703e5a05190a7373f96ce601ab") unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = socket(0x11, 0xa, 0x300) fanotify_mark$auto(0xffffffffffffffff, 0x209, 0xa, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0x10, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, 0x0, 0x4000085) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, 0x0, 0x810) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x101000, 0x0) r4 = socket(0x2, 0x5, 0x0) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000340)="7188b5e2c80d1b84f16a822919b02477fded0e24184fdbfa06ae821e7a2dfcf4b3d551049bc1010400faff0000d4ad00000000003e0102407cd0bfe24eab65e8c0145b1bda0aeffe39f164695d95a9dc8c45051f0ed756bd89c9a9522ad089068342fc30cc35ddf39fb608009af78cc026feb8a697a48048d107573843636d47ea8cb4d8", 0x84) r6 = fcntl$auto_F_UNLCK(r5, 0x9, 0x2) ioctl$auto(r4, 0x2, r6) ioctl$auto_SNDCTL_TMR_SELECT(r6, 0x40045408, &(0x7f0000000440)="c612af950ee52d90f1ec49502ee8f19a464f9a6c1b06c6505ffc8f24db6c053f665c3a905453123d950fdfa5ea754d97d997a59118c479b04dfdc89e825241782d9579d12369cbfd9d5fd0955adf4486868dac95dac20a2def92bdbee42e90f72ddafe99a18a6cb078f7e7301b491bf018019706acbd2d5a29ddc1d8ed45779129997723d3d41c16a09e72ad7ff8e93b339b1c8496a42b76279d857aa5ee13e68b008654def780f5b99c684a1f27cf54d875") sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r6, @ANYRES16=0x0, @ANYBLOB="8ffdc039f82c00a789c6809172a332000300f7460572a6"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) r7 = setfsuid$auto(0xee00) ioprio_set$auto(0x2, r7, 0x4b34) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000280)={{0x80000000, 0xee01, 0xee00, 0xfff, 0xc, 0x40, 0x4}, 0x0, 0x0, 0x7ff, 0x3ff, 0x1, 0xa, 0x4, 0x4, 0x3, 0x7, @inferred=0xffffffffffffffff}) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) setsockopt$auto(0x400000000000003, 0x28, 0x6, 0x0, 0x56d) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) 56.22247662s ago: executing program 6 (id=1997): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0xc0ed0000, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x2001, 0x0) write$auto(r0, &(0x7f0000000200)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\xd4\xda\xa5\x1d\x12\x87M\xdf1\xc6\xa8\x80\x98*\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xc6\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xd2\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) newfstatat$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0, 0x7ff) r1 = openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) poll$auto(0x0, 0x401, 0x30b6) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000034c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20044400}, 0x4000000) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) getsockopt$auto_SO_BPF_EXTENSIONS(r1, 0x1, 0x30, &(0x7f00000000c0)='\x00', &(0x7f0000000100)=0xfffeffff) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x17}, &(0x7f0000000040)=0x1, 0x0, 0x7ff, 0x3ff, 0x5, 0x1, 0xf9eb, 0x4, 0x3, 0x3ff, @inferred=0x0}) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x6d802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000040)={@raw=0x5, 0x555c, 0xffff, 0x550, "8f9638544ae4bbff000000dbb5a3760f9b6b2c854e49fac493b9ab034dde3b02000000000000008192f5488f", @inferred=r3}) close_range$auto(0x2, 0x8, 0x0) r5 = userfaultfd$auto(0x1) ioctl$auto(0x3, 0xc018aa3f, 0xf0b) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffffff, &(0x7f0000000340)=""/179, 0xb3) keyctl$auto(0x1f, 0x1, 0x6, r2, 0x3ff) keyctl$auto_KEY_REQKEY_DEFL_THREAD_KEYRING(0x7, 0x1, 0x0, r2, 0x800000000000006) futimesat$auto(r5, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x3}) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ptyd3/power/runtime_status\x00', 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f00000012c0)=""/4128, 0x1020) mmap$auto(0x0, 0x3020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x801, 0x84) 54.697017051s ago: executing program 6 (id=2000): ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x82842, 0x85) sync_file_range$auto(r0, 0x1, 0xa31e, 0x7) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x1, 0x106) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm1p/sub1/hw_params\x00', 0x301000, 0x0) pread64$auto(r1, 0x0, 0x2, 0x5) ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(0xffffffffffffffff, 0x80184153, &(0x7f0000000500)={0x9, &(0x7f00000004c0)=&(0x7f00000000c0)="b90da2f9b119000000db24f4e4657b066f8d2c754288e4", 0xfffffffffffff78b}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/jfs/loglevel\x00', 0x1a9701, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r2 = setfsgid$auto(0xee01) unshare$auto(0x10000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dmmidi2\x00', 0x80003, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/midi0\x00', 0x28102, 0x0) lseek$auto(r3, 0x1000000000007, 0x0) msgctl$auto_MSG_STAT_ANY(0x8001, 0xd, &(0x7f00000001c0)={{0x802000, 0xee00, 0x0, 0xfffffffa, 0x2a, 0x6}, &(0x7f0000000080)=0x71, &(0x7f0000000100)=0x4, 0x1ff, 0x0, 0x1, 0xffffffffffffffff, 0x3723, 0x2c6, 0x926d, 0x0, @raw=0xb9}) keyctl$auto(0x1f, 0x1, r4, r2, 0x3ff) r5 = setfsgid$auto(0xee01) keyctl$auto(0x1f, 0x1, 0x6, r5, 0x3ff) setfsgid$auto(r5) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 53.421240422s ago: executing program 36 (id=1975): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0x2, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x76, 0x0, &(0x7f00000002c0)=0x1000c0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000033, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r1 = setfsgid$auto(0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x48000, 0x0) set_mempolicy$auto(0x2, &(0x7f00000003c0)=0xffffffffffffffff, 0x7) prctl$auto(0x1e, 0x1, 0x0, 0x2, 0x1) ioctl$auto(0x3, 0x400442c8, 0x91) mprotect$auto(0x8, 0x0, 0x9) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x2, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_INFO2(r2, 0x81204101, &(0x7f0000000240)={0x8, 0x8, 0x8, 0x10001, "f2a840f77b4e2a8dd181c9fe82d5365f7b83bc57ae401bcce00d51dbfa0de45013a77272b38fe5bf9c204b1e14e480f0fe3f55e4e1f31745ab77450d7b163d93", "899496f05128d267937f838ebd3e24e4d1b055399e6ffba6fc114d34e9fe40bd775a8eab59dd82e306a01a8d05f07011f033c86f9451fcb13d60f55b1a0824d3ddc7de8d1bd96bdd03eafa239e051efa", "22602312866a0e94c03188637cb79b45c04158f1ee9ceffc4e9176f5120a2966", 0x9, 0x0, 0x100, 0x8, '\x00', "a32e940170f48fd22783e2a0be45bf40a578380020a15c92f8233df630f95932f1185a2801042d06d8096dc8e5588a9439a96850043d3100ec484720ad151f68"}) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', 0x0, &(0x7f0000000280), 0xf4e9, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x11, 0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0xfffffffffffffffb, 0x7fffffffffffffff, 0x4, 0x100000007ffffffe, 0x7fffffffffff7ffb, 0x5f3, 0x7, 0x4, 0x6}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 39.446268556s ago: executing program 37 (id=2000): ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x82842, 0x85) sync_file_range$auto(r0, 0x1, 0xa31e, 0x7) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x1, 0x106) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm1p/sub1/hw_params\x00', 0x301000, 0x0) pread64$auto(r1, 0x0, 0x2, 0x5) ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(0xffffffffffffffff, 0x80184153, &(0x7f0000000500)={0x9, &(0x7f00000004c0)=&(0x7f00000000c0)="b90da2f9b119000000db24f4e4657b066f8d2c754288e4", 0xfffffffffffff78b}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/jfs/loglevel\x00', 0x1a9701, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r2 = setfsgid$auto(0xee01) unshare$auto(0x10000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dmmidi2\x00', 0x80003, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/midi0\x00', 0x28102, 0x0) lseek$auto(r3, 0x1000000000007, 0x0) msgctl$auto_MSG_STAT_ANY(0x8001, 0xd, &(0x7f00000001c0)={{0x802000, 0xee00, 0x0, 0xfffffffa, 0x2a, 0x6}, &(0x7f0000000080)=0x71, &(0x7f0000000100)=0x4, 0x1ff, 0x0, 0x1, 0xffffffffffffffff, 0x3723, 0x2c6, 0x926d, 0x0, @raw=0xb9}) keyctl$auto(0x1f, 0x1, r4, r2, 0x3ff) r5 = setfsgid$auto(0xee01) keyctl$auto(0x1f, 0x1, 0x6, r5, 0x3ff) setfsgid$auto(r5) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 11.493607793s ago: executing program 4 (id=2072): openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x82000, 0x0) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x78, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x5, 0x101, 0x4000003, 0x2000}, {0x100, 0x1001, 0x101, 0x5, 0x2, 0x7, 0x8, 0x8, 0x100000002}}) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x1, 0x0) ioctl$auto_FICLONERANGE(r0, 0x4020940d, 0xffffffffffff8000) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x50843, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram15/queue/rotational\x00', 0x420c61, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140), 0x0) write$auto(r0, &(0x7f0000000380)='\xa3\xaa\xb1\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\x89C\xce\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\x9e\x98\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&t9-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00'/149, 0xc65d) unshare$auto(0x40000080) madvise$auto(0x0, 0x2003f0, 0x18) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(r1, 0x0, 0x0, 0x6) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x4, 0x7fffffffffffffff, 0xa) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) futex_wake$auto(0x0, 0xe414, 0x6, 0x3) bpf$auto(0x6, &(0x7f0000000280)=@task_fd_query={0x19, r0, 0x4, 0x1002, 0x8, 0x40d, 0xffffffffffffffff, 0x0, 0x7ff}, 0x9) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf7s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0xe, 0x4) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000000)=""/33, 0x21) getsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x11, 0xa, 0x0, &(0x7f0000000200)=0x20809) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x2, 0x4d, &(0x7f0000000080)='/dev\x00\x00\x00\x12\xb1\xfb', &(0x7f0000000180)=0xc32) r2 = timerfd_create$auto(0x39c0, 0xa394) timerfd_settime$auto(r2, 0x0, &(0x7f0000000080)={{0x8, 0x4}, {0x0, 0x5}}, 0x0) unshare$auto(0x800) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x8000000000000000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x14b902, 0x0) 11.359346977s ago: executing program 8 (id=2073): ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x2404c000) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto_RNDRESEEDCRNG(0xffffffffffffffff, 0x5207, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x1, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x5}, 0x4, 0x966, 0x3, @raw=0x404, @integer64={0xc, 0xeb1e, 0x34}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) lsetxattr$auto(0x0, 0x0, 0x0, 0x2, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x80002, 0x0) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r2, r2, 0x0, 0x1) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x1, 0xd8]}, 0x0) select$auto(0xf, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x4, 0x4, 0x1000000000000bc3, 0x7fd, 0x3, 0xff, 0x10001, 0x3, 0xfffffffffffffffe, 0x7, 0x3, 0x7ffffffe, 0x4, 0xc, 0x1]}, 0x0) 10.328356012s ago: executing program 8 (id=2074): openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace\x00', 0x82000, 0x0) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x78, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x5, 0x101, 0x4000003, 0x2000}, {0x100, 0x1001, 0x101, 0x5, 0x2, 0x7, 0x8, 0x8, 0x100000002}}) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dmmidi2\x00', 0x1, 0x0) ioctl$auto_FICLONERANGE(r0, 0x4020940d, 0xffffffffffff8000) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x50843, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram15/queue/rotational\x00', 0x420c61, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140), 0x0) write$auto(r0, &(0x7f0000000380)='\xa3\xaa\xb1\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\x89C\xce\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\x9e\x98\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&t9-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00'/149, 0xc65d) unshare$auto(0x40000080) madvise$auto(0x0, 0x2003f0, 0x18) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) pwrite64$auto(r1, 0x0, 0x0, 0x6) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x4, 0x7fffffffffffffff, 0xa) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) futex_wake$auto(0x0, 0xe414, 0x6, 0x3) bpf$auto(0x6, &(0x7f0000000280)=@task_fd_query={0x19, r0, 0x4, 0x1002, 0x8, 0x40d, 0xffffffffffffffff, 0x0, 0x7ff}, 0x9) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xf7s\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0xe, 0x4) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000000)=""/33, 0x21) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x2, 0x4d, &(0x7f0000000080)='/dev\x00\x00\x00\x12\xb1\xfb', &(0x7f0000000180)=0xc32) r2 = timerfd_create$auto(0x39c0, 0xa394) timerfd_settime$auto(r2, 0x0, &(0x7f0000000080)={{0x8, 0x4}, {0x0, 0x5}}, 0x0) unshare$auto(0x800) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x8000000000000000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/authorized\x00', 0x14b902, 0x0) 9.753787993s ago: executing program 5 (id=2075): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x1ac}}, 0x40000) r0 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0x4) fallocate$auto(r0, 0x0, 0x8, 0x4cbd5d) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x400000000007) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) mmap$auto(0x0, 0x810004, 0x500000001, 0x8000000008011, 0x3, 0x4) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/dummy0/flags\x00', 0x2c62, 0x0) write$auto(r1, &(0x7f0000000880)='0\x00\xa6\xcc\r\x91QU\x9d\x15\x84\xab`\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04\x7f\x00\x00\x00\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18K\xb0D\x91OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe7\x03\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10)kcsZ^3H\xf1\xdf\x96\xfd)\xf3\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xaeO\x03\x91p6\xa0\xb9g.\xde\xd4`\xfa\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb1\x99\x85\x1d\xc7\xf8\v\x11\v\xbb\x88\xd8\'\xe4\xf8\xe9f{\xf7gl\r\xdf\xc8n)\xa6\x8c\x15%\x89\x12\x82\xb29ir+J\xa2\xfa\x03\xbe%\xf6\xd1\xfb\xbcg\"\a\x03\xdef\x10K\xa1\x80z\xd1Z{\xb0\x91\ft\xf5\xaf:\xc9\x02~`\x11\x15\xa3\xd9y\xb3)m\xb6\xaaB\x16O\x1c\xdeY2\x8f*R\xf6\xb5m\xc6\x91+\x14\x04\xf7*9\x9e\x04\xe3\x03\b\x02kud\xf8j\x95I.\x04\\\x80S\xa5\n\x14\x05\x12\n\xb7\xb8\x1d\xcf\xc6]^\xc9|\xf8.>\x8b\xb1y\xe7\x96\x9asW\x10}(\x9c\xc9\x84\xec\xf68\xb7\xd7\xec\xc9F\xe1v\x9aD\t\xc6f\ay\xafX\t\x81\x8b3\xc6\x1e\xbbwlK\xd2\x9e\xc8\xde\xed\xb6\xbeX\xe4`s\xec\xec]\xb3\xfa\xd8\x86\x1bP\xa3\xc4\xb4\x84\xd2\x94Z\xbeA\x1f,a\a\xf7\x7f\x12\xa9E\xfb\xcd\xa2@\x83<\xe0\xaf\xc5\'\xcf\xa3\xf2KD\x80\x8c\xac\xb1\xd6\r\xf4+\x9cSx\xa3\xf3mE\xbbD\xd3\x1bK\xdc\xc7\x9c\xa6M3\x1f\xac{\xc1\x036\xd16\b\xbe\x98\xb3rQ\xd9G\x00\xa7\xc9&\x92\x0e~\x05LM \xb8\xf6.,\xf8\xa8\a\xa5)\x91\xc4\xe9P\xa6\xda\xef\xe1\xbdu\xa2\xb7\xa3\x0eZ\xdf\xaf\x87\xa10\xa0\xc8\xa4\xa0O\x96\xeb\xb9\x10\xf3]\\8\v\xcc\x16\xca\xadm\xd3\xcc\xa4\\\x192\xc6\xb1i/\x90$\x05Y>soi)\x12\x05@\a\xe9c\x17\x818\x1e\x8fn\\)\x1a\x96\xc0\xf6\xa4\xf1]\xfe\xa7\x1e\x02\xd3\x1f\x97AT\xd5g\xf6\xa9@\xdb\x17\xf6\xaf\x8d\xec2`Q\x12\'\x87\xa9\x19BY\xf1W\x8d\xc5\x93r\xd83\x12VD\x81\xf2t3\x9c[\x86\xeb\x8e6%\xcc\x03X\xb7F*\x1d\x94\xd9\x9b\x19\xd9\xbb\xbcI\xbe\xf3\xe2\x87\x9b\xa7\xd7s\xd1\xb2\xc4\xe2', 0x8000000000a) fallocate$auto(0x8000000000000003, 0x3, 0xf, 0x200000004) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.0/detach\x00', 0x101001, 0x0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0401008a4900", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf2511000000ed0009800b67375fbf55c972698787532a9d587948e45ac491d9022d7080eb367e16cba9a09a8abb835c5d45532d1fe21de8e1c74786ef35bb37c86cef4f6b5a1706350e54b35abb5777550b692c58eade609a3cb34911f06552a5531393a5a45878b16a65c954987ae6e454c6c03eafc31f2a270aefa71a4859b4438c7f6e3357022468a6413bec379d41aa9f6c613b6d24950c38c7ef3889c2292129d8275c28c86902d489af09e9e01d61e5d894d9d33c07f8949d7572793a474966de7c1599a5489aa458a3abb787c4215a2787d94ed7580795a4f6d29c220a97e63b9a1250"], 0x104}, 0x1, 0x0, 0x0, 0x4000010}, 0xc050) write$auto(r2, &(0x7f00000000c0)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c(\xdb', 0x10000000081) modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10) clone$auto(0x1000, 0x1011, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x5) r3 = socket(0x11, 0x3, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/rose3/statistics/rx_crc_errors\x00', 0x40080, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r3, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={&(0x7f0000000080)="4c0300006bba861b000004000000a324578958970716", 0x49}, 0x2, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(0xffffffffffffffff, 0x0, 0x4) ioctl$auto(0xffffffffffffffff, 0x4020565a, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) 9.461351718s ago: executing program 9 (id=2076): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x11, 0xa, 0x300) fanotify_mark$auto(0xffffffffffffffff, 0x209, 0xa, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0x4, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, 0x0, 0x4000085) pread64$auto(r0, &(0x7f0000000700)='/Eev/audio1\x00VI\xa3\xaa\xb1\x02\x00J\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\x00\x00\x00\x006\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D', 0x8, 0x80) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000825bd7000fddbdf250300000008000c060600000008001b000001007c0800090008000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x810) msgctl$auto_MSG_STAT(0xd, 0xb, &(0x7f0000000340)={{0xa2, 0xee01, 0x0, 0x38e, 0x11400, 0x80, 0xf33}, &(0x7f0000000040)=0xfa, &(0x7f0000000200)=0xbc, 0x8, 0x4, 0x0, 0x1, 0x1, 0x2c0b, 0x21a2, 0x5, @raw=0xd91d, @inferred=0xffffffffffffffff}) setfsuid$auto(r3) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x101000, 0x0) r5 = socket(0x2, 0x5, 0x0) r6 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) stat$auto(&(0x7f0000000280)='./file0\x00', &(0x7f0000000580)={0xffffffffffffffff, 0x100, 0x101, 0x6, 0xee01, 0x0, 0x0, 0x5, 0x5, 0x5, 0x5a8d502a, 0xffffffffffffffff, 0x80000006, 0x86f, 0x9ea4, 0x7, 0x800}) r7 = fcntl$auto_F_UNLCK(r6, 0x9, 0x2) ioctl$auto(r5, 0x2, r7) ioctl$auto_SNDCTL_TMR_SELECT(r7, 0x40045408, &(0x7f0000000440)="c612af950ee52d90f1ec49502ee8f19a464f9a6c1b06c6505ffc8f24db6c053f665c3a905453123d950fdfa5ea754d97d997a59118c479b04dfdc89e825241782d9579d12369cbfd9d5fd0955adf4486868dac95dac20a2def92bdbee42e90f72ddafe99a18a6cb078f7e7301b491bf018019706acbd2d5a29ddc1d8ed45779129997723d3d41c16a09e72ad7ff8e93b339b1c8496a42b76279d857aa5ee13e68b008654def780f5b99c684a1f27cf54d875") ioctl$auto_SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000100)) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES16=r2, @ANYRES16=0x0, @ANYBLOB="8ffdc039f82c00a789c6809172a332000300f7460572a6"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) r8 = setfsuid$auto(0xee00) ioprio_set$auto(0x2, r8, 0x4b34) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee00, 0xfff, 0xc, 0x40, 0x4}, 0x0, 0x0, 0x7ff, 0x3ff, 0x1, 0x6, 0xf9eb, 0x4, 0x3, 0x7, @inferred=0xffffffffffffffff}) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 9.274099178s ago: executing program 4 (id=2077): r0 = seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0xfff, &(0x7f0000000080)="ec40b66f3a453653e94b4ae643714fc2bdc42ca71f1ef5b0952118e5243036336d4bff3dd1db9b49323085a955fd3108b8a5b046d87668ccd89f5f722d8142831912bf5576fe33d71730e7f336da4dfe68bcc8bc1e11239d1a1eda9f8de728ad47c783b9c4cbbefc78ade9b36a478dc31533505b887e639351be312c831ddda4dc7e140012d10708b76047d3d26fb8beca29199d62ecbdaee644373cd2a1d4bb4214cd4dd11cd706659756cf9789318fd2bce4e87709e1d49fc13f2973a615e198acd64dcd251a37108b515cfdcda6ce6c476183850a98c768b599ef406535a4703e5a05190a7373f96ce601ab") unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) r2 = socket(0x11, 0xa, 0x300) fanotify_mark$auto(0xffffffffffffffff, 0x209, 0xa, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0x10, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, 0x0, 0x4000085) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(0xffffffffffffffff, 0x0, 0x810) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x101000, 0x0) r4 = socket(0x2, 0x5, 0x0) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000340)="7188b5e2c80d1b84f16a822919b02477fded0e24184fdbfa06ae821e7a2dfcf4b3d551049bc1010400faff0000d4ad00000000003e0102407cd0bfe24eab65e8c0145b1bda0aeffe39f164695d95a9dc8c45051f0ed756bd89c9a9522ad089068342fc30cc35ddf39fb608009af78cc026feb8a697a48048d107573843636d47ea8cb4d8", 0x84) r6 = fcntl$auto_F_UNLCK(r5, 0x9, 0x2) ioctl$auto(r4, 0x2, r6) ioctl$auto_SNDCTL_TMR_SELECT(r6, 0x40045408, &(0x7f0000000440)="c612af950ee52d90f1ec49502ee8f19a464f9a6c1b06c6505ffc8f24db6c053f665c3a905453123d950fdfa5ea754d97d997a59118c479b04dfdc89e825241782d9579d12369cbfd9d5fd0955adf4486868dac95dac20a2def92bdbee42e90f72ddafe99a18a6cb078f7e7301b491bf018019706acbd2d5a29ddc1d8ed45779129997723d3d41c16a09e72ad7ff8e93b339b1c8496a42b76279d857aa5ee13e68b008654def780f5b99c684a1f27cf54d875") sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r6, @ANYRES16=0x0, @ANYBLOB="8ffdc039f82c00a789c6809172a332000300f7460572a6"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) setfsuid$auto(0xee00) msgctl$auto_IPC_INFO(0x6fe97c02, 0x3, &(0x7f0000000280)={{0x80000000, 0xee01, 0xee00, 0xfff, 0xc, 0x40, 0x4}, 0x0, 0x0, 0x7ff, 0x3ff, 0x1, 0xa, 0x4, 0x4, 0x3, 0x7, @inferred=0xffffffffffffffff}) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) socket(0x28, 0x5, 0x0) setsockopt$auto(0x400000000000003, 0x28, 0x6, 0x0, 0x56d) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) 8.079129392s ago: executing program 8 (id=2078): openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x121342, 0x130) socket(0x15, 0x5, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x401, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000002f00)='/dev/input/event0\x00', 0x200, 0x0) setresuid$auto(0x2, 0x7, 0x8080) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240), 0x4b47, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0, [{0xbb, 0x4, 0x800}, {0x4, 0x58dc, 0x101}]}) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2d, 0x2, 0x0) socket(0x1f, 0x3, 0x4) ioctl$auto(0x3, 0x800442d3, 0x91) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) setsockopt$auto(0xffffffffffffffff, 0x0, 0x8, 0xfffffffffffffffc, 0x0) shmctl$auto_IPC_RMID(0x2, 0x0, &(0x7f0000000300)={{0x6, 0x0, 0x0, 0x1, 0x7e, 0x3, 0x88}, 0xfffffff8, 0x6, 0x800, 0x4, @inferred, @raw=0x3, 0xffff, 0x0, 0x0, 0x0}) r1 = socket(0xa, 0x1, 0x84) r2 = getsockopt$auto(r1, 0x0, 0x482, 0x0, &(0x7f0000000040)=0x8) r3 = setfsgid$auto(r0) socket(0x2, 0x1, 0x106) connect$auto(0x3, 0x0, 0x51) keyctl$auto(0x1f, 0x1, 0x6, r3, 0x3ff) futex$auto(&(0x7f0000000000)=0x24000, 0x8, 0x4991, &(0x7f0000000040)={0x64, 0x5}, &(0x7f0000000080)=0x2, 0xc826) bind$auto(r2, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41}, 0x3}}, 0x66) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) 7.716929971s ago: executing program 5 (id=2079): ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000040)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240)='#', 0x4b47, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0, [{0xbb, 0x4, 0x800}, {0x0, 0x9, 0x8}, {0x9, 0x8, 0x3}, {0x3ff, 0x5, 0xffffffff}, {0x3, 0x8001, 0x7}, {0xb1, 0x3, 0xe}, {0x3, 0x4, 0xffff3da3}]}) mmap$auto(0x0, 0x7, 0xffffffbffffffffe, 0x400eb1, 0x401, 0x4000000000008000) keyctl$auto_KEYCTL_INSTANTIATE_IOV(0x14, 0x1000, 0x2, 0x92, 0x3) r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0x115200, 0x0) bind$auto(r0, &(0x7f0000000140)=@l2tp={0x2, 0x0, @remote, 0x4}, 0x6) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x4000007e) sysfs$auto(0x2, 0x100000000000037, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x181800, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) shmctl$auto_IPC_RMID(0x6, 0x0, &(0x7f0000000300)={{0x6, 0xffffffffffffffff, 0x0, 0x1, 0x80, 0x3, 0x8}, 0x9, 0x1ff, 0x9, 0x2, @raw=0x2, @inferred, 0x0, 0x0, &(0x7f0000000000)="27ca310b04a74c3e918d129362b7fdc05001d3180c435128165051a1c2a104ab06a8e6de4c4a74bc2ac8e41183c065fb2993ab1f7fef36f1c8326c0f88046b09e72c3fe1a266b2df9c89e3a475834ff8bd9602d9e08ec518ca6a592220e6", 0x0}) unshare$auto(0xffffffff00000001) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) set_mempolicy$auto(0x8003, &(0x7f0000000280)=0x7c, 0x4) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) mseal$auto(0x0, 0x7dda, 0x0) keyctl$auto(0x5, 0xffffeffffffffffe, 0x107, 0x803, 0x800000000000c) setresuid$auto(0x2, 0x7, 0x8080) keyctl$auto(0x6, 0xfffffbfffffffffe, 0x0, 0x32, 0xfff) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/pcmC1D0c\x00', 0x48000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_READN_FRAMES2(r2, 0x80184153, 0x0) socket(0x1, 0x1, 0x1) 7.384262277s ago: executing program 9 (id=2080): poll$auto(0x0, 0x25, 0x109) prctl$auto(0x2f, 0x4, 0x7fffffffefff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) listen$auto(0x3, 0x81) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) write$auto(r0, &(0x7f00000002c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7kc\x85\xa6|\xb4>\v\xe9\x10p\aE\x81\xed\x00<\xdb\xd8\x9d\xe6\xe1\xa4g\x85\xe0A\xea\x94=\"\x98U\x1d7\x83[[b\b,\xed\x10-d\x02\x00\xb7\x81K\x04\x15\x85O\xa9\x0e\xbd\xe3\xaf.9^\xd9n\xc3\x9f\xc2\x86l\x03\x01\xa1\xe1>P\xee\x00\'\xaad\\v=\f\x9aP\xa5x\xf0\v\xd1\x1c\xfcoR\xd2\x1dEuZy\xa5\xc3\xce\x1aIX\xee\xfb\xb9@\xc7\x82\x84&c\xaf\xd2\x8b \x1a/\xafT\x9f\x96l+$\x8d/\xa6\x19\x97\xdc\xae\r\xbe\xfd\xa7\x9d\xf8\x8c\x96\x9dYf&\x81c\x85\x95-\xaa\xdc\xcd(\xdaZ\x84X:I[\x18\xb7\xa1\xe9\xdf\x17E\x87c\xda\xa5\xad4\x86uM\xd7\xc0H\x00\x16?f\xec\xc5]\xaa]O\xd8\xae.\xad$\xec:\xd9\x9b:\xec\xfe\x8f\x11V\xb82\b\xf8\xb5\x86\x1ej\xda\x04~\xa6Z', 0x81) unshare$auto(0x20000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000000)=@in={0x2, 0x3, @broadcast}, 0x6e) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1b0026bd7000fddbdf2503366258ee2d2c8ee446000000040008e76700038012000100898771f1c19f17070085908286010000040002800c000b"], 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) fcntl$auto(r3, 0x10, 0x2) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) io_uring_setup$auto(0x6, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xfffffdef) getpid() gettid() recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) 6.849130598s ago: executing program 4 (id=2081): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)={0x2, 0x80, 0xffff, 0x5, 0x0, 0x4b47, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0, [{0xbb, 0x4, 0x800}, {0x0, 0x9, 0x5}, {0x4, 0x58dc, 0x101}]}) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) settimeofday$auto(&(0x7f0000000540)={0x5, 0x5}, &(0x7f0000000400)={0x7fffffff, 0x3}) r0 = setfsgid$auto(0x0) r1 = socket(0x2, 0x1, 0x106) sendmsg$auto_TIPC_NL_NET_GET(r1, &(0x7f0000006140)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000006100)={&(0x7f0000001d40)=ANY=[], 0xce8}, 0x1, 0x0, 0x0, 0x4048010}, 0x40000c0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) shutdown$auto(0x200000003, 0x0) r2 = socket(0x1, 0x3, 0x0) quotactl_fd$auto(r2, 0x80000401, 0xfffffffb, 0x0) keyctl$auto(0x1f, 0x1, 0x6, r0, 0x3ff) futex$auto(0x0, 0x9, 0x2, &(0x7f0000000040)={0x64, 0x5}, &(0x7f0000000080)=0xd, 0xc826) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="4d2d107a", @ANYRES16=r3, @ANYBLOB="010627bd700003ccdf2505000000d801018008008e00ac141413f14746788c4d22ead2fe0390f4fc2fbf00d5782a372b375701811332dc1845bd5dd601728d66b3b80e178c6b33d01d30c18ba00d8c2927700c003c00b1bf00000000000086014880c2106508fbaa6914e7a54010d68f5b1e0bfc4cf24532b39481206cf2e9e6d3f0c99ff8eb3e4e42b30d5842a055efeea8aa42f0932eb4d701710627e379403829f4a5741e0a8ecd6327d122392aadfa6fd6df98804cef61acf79c5e0d246bd30b356e0fbe27d736b5126f6e97390cfe48ead2772686de0b8f847e6d3d2555040007800800bd00", @ANYRES32, @ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x40090}, 0x200008d0) r4 = timerfd_create$auto_CLOCK_BOOTTIME(0x7, 0x8000) writev$auto(r4, &(0x7f0000000240)={&(0x7f0000000000)="5a94f78887eb894a4b29e7f48e67", 0x3}, 0x6) getpgid(0xffffffffffffffff) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000075ef248368ea498a0ed3d12c0088a0d56671f4dc536279a4bd32bb818b02912aca1f3c04cdc1d57680a706e0b4f5bb063e23909ed4cf9e88b4eda5bceba027cdb3aa993902606d8130d7cf17c7c77c81c3dd228c560b1ec2f23970abf67e59595966f7850fcd64816afbcc9b8f7f2265a6efe17799e20ee497bdf274f04e879de9632dc19c128590ea5c2f1843b88f0a8fd5cc64b38c68b6bc6e6ae51623ea1812f8a29649911831aa4acdada1006b104b68ab9c939b17fc74ddfd3bb06be2a7678584ed", @ANYRES16=r5, @ANYBLOB="10002bbd7000fcdbdf252d000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004845}, 0x0) 5.723859934s ago: executing program 8 (id=2082): r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0x115200, 0x0) bind$auto(r0, 0x0, 0x6) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000004680)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x502, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000280)="65a90950735e7b19172f", 0xa) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x8faf) unshare$auto(0x9) ioprio_get$auto(0x1, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) move_pages$auto(0x0, 0x8000, 0x0, 0x0, 0x0, 0x4) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/03.0\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x2, 0x5) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x82000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.0/usb1/authorized_default\x00', 0x182b02, 0x0) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r5 = ioctl$auto_TUNSETVNETBE2(r4, 0x400454de, &(0x7f00000000c0)=0xbfffd) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETPAGEFILE(r5, 0x7a9, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) bind$auto(0xffffffffffffffff, 0x0, 0x66) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0xe, 0x2, 0x16efae4c, 0x8000005092, 0x61f93bdb) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/scsi/scsi\x00', 0x28802, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) sendmsg$auto_NETDEV_CMD_BIND_RX(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYRES16, @ANYBLOB="080025bd7000ffdbdf250d000000140002800800010007000000080001f40000000008000300", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="34000280080003000b0000003c898f4d1a171d409b109ab008000300010000000800030082f0000008000100030000000800010001000080080003008d1a3d49363ec3f0bf4b5d77a5a71d0076b026783817f3fad361963cf6a0b3a36539046c725b8e26693e9cde7745a6c95903afa8cdd56e0bdae94ef4733c0b36f69b085477f190d1f7c967ffaf2fe4d258d4e3ac5dd642ac31802832c7ca673cea8fab82efbd0f324fd36162774a47702bb9a45a167d71decd6f54ce360e18f43fc1e53fd858123e3278252f7aac04ee433382470000000000000000", @ANYBLOB="08000300", @ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x40001}, 0x40010) 5.28786937s ago: executing program 5 (id=2083): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0x2, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x76, 0x0, &(0x7f00000002c0)=0x1000c0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000033, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r1 = setfsgid$auto(0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x48000, 0x0) set_mempolicy$auto(0x2, &(0x7f00000003c0)=0xffffffffffffffff, 0x7) prctl$auto(0x1e, 0x1, 0x0, 0x2, 0x1) ioctl$auto(0x3, 0x400442c8, 0x91) mprotect$auto(0x8, 0x0, 0x9) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x2, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_INFO2(r2, 0x81204101, &(0x7f0000000240)={0x8, 0x8, 0x8, 0x10001, "f2a840f77b4e2a8dd181c9fe82d5365f7b83bc57ae401bcce00d51dbfa0de45013a77272b38fe5bf9c204b1e14e480f0fe3f55e4e1f31745ab77450d7b163d93", "899496f05128d267937f838ebd3e24e4d1b055399e6ffba6fc114d34e9fe40bd775a8eab59dd82e306a01a8d05f07011f033c86f9451fcb13d60f55b1a0824d3ddc7de8d1bd96bdd03eafa239e051efa", "22602312866a0e94c03188637cb79b45c04158f1ee9ceffc4e9176f5120a2966", 0x9, 0x0, 0x100, 0x8, '\x00', "a32e940170f48fd22783e2a0be45bf40a578380020a15c92f8233df630f95932f1185a2801042d06d8096dc8e5588a9439a96850043d3100ec484720ad151f68"}) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f00000008c0)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', &(0x7f0000000280), 0xf4e9, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x11, 0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0xfffffffffffffffb, 0x7fffffffffffffff, 0x4, 0x100000007ffffffe, 0x7fffffffffff7ffb, 0x5f3, 0x7, 0x4, 0x6}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 5.047734015s ago: executing program 9 (id=2084): fspick$auto(0xffffffffffffffff, 0x0, 0x7) ioctl$auto_USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)={0xfd, 0x5, 0x10001, 0x4, &(0x7f0000000140)="d16b4e081fdef5", 0x6, 0x10, 0xffffffff, @number_of_packets=0xf7ffffff, 0x2084c, 0x800c, 0x0}) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x10) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) timer_create$auto(0x4, 0x0, &(0x7f0000000280)=0x5) msgctl$auto_IPC_INFO(0xd, 0x3, 0x0) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) select$auto(0x8, &(0x7f0000000040)={[0x4, 0x1, 0x7, 0x82, 0xffffffffffffffff, 0xffffffffffffff94, 0x4, 0x1, 0x9, 0xffffffff, 0x7, 0x7, 0x3, 0x8, 0x40]}, &(0x7f00000000c0)={[0xfffffffffffffff8, 0x100, 0x9, 0x4, 0x4, 0x1, 0x5, 0x1, 0x9, 0x8, 0x6, 0x101, 0x3, 0x800, 0xe3f, 0x5]}, &(0x7f00000001c0)={[0x8, 0x0, 0x2, 0x3, 0x3, 0x9c1a, 0x2, 0x7, 0xffffffffffffff28, 0x0, 0xee, 0xa66, 0x1ff, 0xfffffffffffffff7, 0x1, 0x2]}, &(0x7f0000000240)={0x2, 0x9}) keyctl$auto(0xb, 0xfffffffd, 0x7, 0xfffffffffff00003, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8f3b7a51b816a641, 0x0) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) 4.920243376s ago: executing program 4 (id=2085): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000700)='/ECv/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lDT\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x90\xc8Oj\xd2\xd7\x0f\x1f\xf0\xb57\xfb\x87,P\xfb{\x99\x10\xdc\x80JGs\r\x93\x7f\x11\x0e\xbc\x99\x93M\xfe\xfd\x11\x14\xac]\xc4\xf2\xf4\xef\xde\xac\x1aQ\xdd\xd7[\xd7@\xe7R{\xaar\xfb~\x94\xd2n]\xd2\x15h\x18|2g\xfb\\%\xe6-\xca\xe3\xd9!7r\xf7\xfc\xe4z58\xf0W\xde\xd3\x90\xc5\rT\xbe\x90\xc0\xbc\xd5\xdb\x0e\t\x84X*\xcf\xd3}\x0eR\xae6\xa58\xc8\xac\x1d>t\xbe\xd7\xb3\xfc\xee\xa7jG\xb0\x1cN\xfb\x8c\x80+\xc2\x8f\x7f\xaf&\xbfx\xa4>\x8a\xab\t,i\xf42\xc2\nY\xcd\\\x1fLPP\x19\xe0\x1b-w\x85\xf9\xc3\x11/\\zh\xf7l\xaa?m\xd5.\xc1H\xdc\nq=.\x9f\xb3\x8aLf\x81\x82\x9e\xeb\xa6\x92Vg(pp3\x8c\xc5\xe6U\x1dK]\a\xf7\xd3!u\xb8akQ1\x92\xae\xe0C\xac\x9f\xd28Kg\xa6\xfbO\x84^\xfe\xed\x96\xfa\xa0\xd9\x8e\xa6\x17\xb9\x1c\xd6Z\x9ae\x85\xd1(\xde\xf1du\x12\xa7\xd3\xf2\xd1\xed\xa2\xe6;?\xfe\t|-\\bI\x9e\x02\x9d\xd3\x9a\'Oq\x8a\xcd\xd9\n\xa5\xedQg\xe1b\x93\xa1\xba\xc4\x91\xc8sg\xb5`z\xe8\r\xbeYg\x04E\xeb\x15\x05\x99\xcf7\x92\xcc\xd3^k]\xf6\xf1\x94n\x0f:mN\xa3W%*\xc2+F\x98\xc2[\x82\xed\x11q[\x10\x80\x98\x17C\xa1\x13=\xba\xcb\xa8', 0x100000a3d9) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) keyctl$auto(0x2, 0xfffffffffffffffc, 0xee00, 0x0, 0x1) keyctl$auto(0x1f, 0x0, 0x6, 0x0, 0x80000000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) r1 = io_uring_setup$auto(0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x15, 0x5, 0x0) io_uring_setup$auto(0x1, 0x0) mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u50xffffffffffffffff}) r1 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x84) write$auto_nsim_dev_trap_fa_cookie_fops_dev(r1, &(0x7f0000000000)="022931fd6c", 0x5) r2 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000001480)='/dev/mixer\x00', 0x80000, 0x0) ioctl$auto_OSS_GETVERSION(r2, 0x80044d76, &(0x7f00000014c0)) close_range$auto(r0, 0xffffffffffffffff, 0xdf9b) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) acct$auto(&(0x7f0000000140)='/dev/ecryptfs\x00') unshare$auto(0x40000080) unshare$auto(0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0x2ac00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) setrlimit$auto(0x7, 0x0) mq_open$auto(&(0x7f0000000400)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f{\x14S\xc4\xd1\x01gBV\x91\x8f_\xc0.\x84\xfe\x84\xd1s\x05\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9\xdc\x91<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5srQ', 0xa7c, 0xc, 0x0) msgctl$auto_IPC_INFO(0x5, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f00000003c0)=0x1, &(0x7f0000000080)=0x80, 0x7ff, 0x8, 0xffffffff, 0xa, 0xf9eb, 0x4, 0x4003, 0x6, @inferred=0xffffffffffffffff, @raw=0x6}) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram9\x00', 0x800, 0x0) ioctl$auto_BLKGETSIZE(r5, 0x1260, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) setfsuid$auto(0xee00) socket(0x2, 0x3, 0x100) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) 2.968115527s ago: executing program 5 (id=2087): r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) io_pgetevents$auto(0x4, 0x8, 0xa31f, 0x0, 0x0, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x2, 0x28, 0x40, 0x15, 0xffffffffffffffff, 0xfffffffffffffffd) mmap$auto(0x0, 0x20006, 0x5a, 0xfffffffffffffffc, 0x401, 0x4000005) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x83b) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x20b42, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) r1 = socket(0x2, 0x1, 0x106) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/pci0000:00/0000:00:01.3/enable\x00', 0x20f01, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'geneve1\x00'}) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = setfsgid$auto(0xee01) unshare$auto(0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/amidi2\x00', 0x690000, 0x0) setsockopt$auto(r0, 0x200029, 0x4, 0x0, 0xffff81cc) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7}, 0x8) bind$auto(r1, &(0x7f0000000080)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x1}, 0xcf7c) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa041, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000003c0)='\x8a0\xcdW\xeb\x1b<\xc7.\x97L\xcc\xfaz\x83\xf1y\xf3\\\x86T_\x0f\xa7\xf4\xc1\xa9\x19P\xc7\xe9\xc6\xb8\x10\xbe\xac\n\x9e]>\xb7\"\x12z\xbd\xda\xa3\xa8\xd5W\xd7$]\xd0\xd0\b\xb4\x98\xe5\xdf@\xd4I)z\x88\xea\x00Z\xe6\xbe\'\xd0si\x92\xff\x03\x8d\xe1\x11\xc92\xaa38\xcf\x8c`j\xad\xbb\xbb~\xd7Ij(~\x9e\x14\xb5n\x87\xda\faw\x04\x80\xcc\b\xcd\xee\xd7\xcc\xf7\xc8\xa9\xf53\v\\\xd6\x86j\x81\x85\x0e.\xef\x92\x9eg\xc0\vF\x81&\xfb\xfc\x9f>/\xcd', 0x2fc) r4 = openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000002140), 0x0, 0x0) pread64$auto(r4, 0x0, 0x7, 0x6) keyctl$auto(0x1f, 0x1, 0x6, r3, 0xfff) keyctl$auto(0x1f, 0x0, 0x0, 0x3, 0x3ff) 2.928247066s ago: executing program 9 (id=2088): io_submit$auto(0x10001, 0x1, 0x0) r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mouse0\x00', 0x1, 0x0) r1 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x84) write$auto_nsim_dev_trap_fa_cookie_fops_dev(r1, &(0x7f0000000000)="022931fd6c", 0x5) r2 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000001480)='/dev/mixer\x00', 0x80000, 0x0) ioctl$auto_OSS_GETVERSION(r2, 0x80044d76, &(0x7f00000014c0)) close_range$auto(0xffffffffffffffff, r0, 0xdf9b) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) acct$auto(&(0x7f0000000140)='/dev/ecryptfs\x00') unshare$auto(0x40000080) unshare$auto(0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0x2ac00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) setrlimit$auto(0x7, 0x0) mq_open$auto(&(0x7f0000000400)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f{\x14S\xc4\xd1\x01gBV\x91\x8f_\xc0.\x84\xfe\x84\xd1s\x05\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9\xdc\x91<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5srQ', 0xa7c, 0xc, 0x0) msgctl$auto_IPC_INFO(0x5, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f00000003c0)=0x1, &(0x7f0000000080)=0x80, 0x7ff, 0x8, 0xffffffff, 0xa, 0xf9eb, 0x4, 0x4003, 0x6, @inferred=0xffffffffffffffff, @raw=0x6}) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram9\x00', 0x800, 0x0) ioctl$auto_BLKGETSIZE(r5, 0x1260, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) setfsuid$auto(0xee00) socket(0x2, 0x3, 0x100) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) 2.671475631s ago: executing program 4 (id=2089): pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0x2, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x76, 0x0, &(0x7f00000002c0)=0x1000c0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000033, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) r1 = setfsgid$auto(0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x48000, 0x0) set_mempolicy$auto(0x2, &(0x7f00000003c0)=0xffffffffffffffff, 0x7) prctl$auto(0x1e, 0x1, 0x0, 0x2, 0x1) mprotect$auto(0x8, 0x0, 0x9) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x2, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_INFO2(r2, 0x81204101, 0x0) keyctl$auto(0x1f, 0x1, 0x6, r1, 0x3ff) open(&(0x7f0000000080)='./file0\x00', 0x22ac2, 0x5d745cb200ae4d7b) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 1.295391273s ago: executing program 8 (id=2090): r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0x115200, 0x0) bind$auto(r0, 0x0, 0x6) pselect6$auto(0x1, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000004680)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x502, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000280)="65a90950735e7b19172f", 0xa) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x8faf) unshare$auto(0x9) ioprio_get$auto(0x1, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) move_pages$auto(0x0, 0x8000, 0x0, 0x0, 0x0, 0x4) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) msgctl$auto_IPC_STAT(0x5f, 0x2, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/03.0\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x2, 0x5) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x82000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.0/usb1/authorized_default\x00', 0x182b02, 0x0) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r5 = ioctl$auto_TUNSETVNETBE2(r4, 0x400454de, &(0x7f00000000c0)=0xbfffd) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETPAGEFILE(r5, 0x7a9, 0x0) sendfile$auto(r3, r3, 0x0, 0x3) bind$auto(0xffffffffffffffff, 0x0, 0x66) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0xe, 0x2, 0x16efae4c, 0x8000005092, 0x61f93bdb) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/scsi/scsi\x00', 0x28802, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) sendmsg$auto_NETDEV_CMD_BIND_RX(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYRES16, @ANYBLOB="080025bd7000ffdbdf250d000000140002800800010007000000080001f40000000008000300", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="34000280080003000b0000003c898f4d1a171d409b109ab008000300010000000800030082f0000008000100030000000800010001000080080003008d1a3d49363ec3f0bf4b5d77a5a71d0076b026783817f3fad361963cf6a0b3a36539046c725b8e26693e9cde7745a6c95903afa8cdd56e0bdae94ef4733c0b36f69b085477f190d1f7c967ffaf2fe4d258d4e3ac5dd642ac31802832c7ca673cea8fab82efbd0f324fd36162774a47702bb9a45a167d71decd6f54ce360e18f43fc1e53fd858123e3278252f7aac04ee433382470000000000000000", @ANYRES32=r0, @ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x40001}, 0x40010) 1.044437068s ago: executing program 5 (id=2091): ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x2404c000) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto_RNDRESEEDCRNG(0xffffffffffffffff, 0x5207, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x1, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00", @raw=0x5}, 0x4, 0x966, 0x3, @raw=0x404, @integer64={0xc, 0xeb1e, 0x34}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) lsetxattr$auto(0x0, 0x0, 0x0, 0x2, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x80002, 0x0) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) socket$nl_generic(0x10, 0x3, 0x10) sendfile$auto(r2, r2, 0x0, 0x1) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x1, 0xd8]}, 0x0) select$auto(0xf, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x4, 0x4, 0x1000000000000bc3, 0x7fd, 0x3, 0xff, 0x10001, 0x3, 0xfffffffffffffffe, 0x7, 0x3, 0x7ffffffe, 0x4, 0xc, 0x1]}, 0x0) 1.027301994s ago: executing program 9 (id=2092): socket(0x21, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x24048800}, 0x51) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty12\x00', 0x800, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x804) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f1e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) poll$auto(&(0x7f0000000000)={0x3, 0x1, 0xa}, 0x5, 0x108) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) 886.760166ms ago: executing program 4 (id=2093): r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/input/mouse0\x00', 0x1, 0x0) r1 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x84) write$auto_nsim_dev_trap_fa_cookie_fops_dev(r1, &(0x7f0000000000)="022931fd6c", 0x5) r2 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000001480)='/dev/mixer\x00', 0x80000, 0x0) ioctl$auto_OSS_GETVERSION(r2, 0x80044d76, &(0x7f00000014c0)) close_range$auto(0xffffffffffffffff, r0, 0xdf9b) unshare$auto(0x40000080) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) acct$auto(&(0x7f0000000140)='/dev/ecryptfs\x00') unshare$auto(0x40000080) unshare$auto(0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0x2ac00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, 0x0, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_KSMBD_EVENT_SHARE_CONFIG_REQUEST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x4000085) setrlimit$auto(0x7, 0x0) mq_open$auto(&(0x7f0000000400)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f{\x14S\xc4\xd1\x01gBV\x91\x8f_\xc0.\x84\xfe\x84\xd1s\x05\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9\xdc\x91<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5srQ', 0xa7c, 0xc, 0x0) msgctl$auto_IPC_INFO(0x5, 0x3, &(0x7f0000000180)={{0x80000000, 0xee01, 0xee01, 0xfff, 0xc, 0x40, 0x7}, &(0x7f00000003c0)=0x1, &(0x7f0000000080)=0x80, 0x7ff, 0x8, 0xffffffff, 0xa, 0xf9eb, 0x4, 0x4003, 0x6, @inferred=0xffffffffffffffff, @raw=0x6}) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram9\x00', 0x800, 0x0) ioctl$auto_BLKGETSIZE(r5, 0x1260, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) setfsuid$auto(0xee00) socket(0x2, 0x3, 0x100) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) keyctl$auto(0x1f, 0x0, 0x6, 0x3, 0x3ff) 798.351162ms ago: executing program 9 (id=2094): unshare$auto(0x40000080) r0 = fanotify_init$auto(0x5, 0x2000000000002) unshare$auto(0x40000080) ioctl$auto_FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0xffffffffffff8000) ioctl$auto(0xffffffffffffffff, 0x40045108, 0xffffffffffffffff) unshare$auto(0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x420c61, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) socket(0x2, 0x801, 0x106) getsockopt$auto(r1, 0x40000005, 0x1, 0x0, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xc, 0xffffffffffffffff, 0x6, 0x10, 0x80, 0x801, 0x8000, 0x1, 0x1, 0x202, 0xd, 0xbca7, 0xfffffffffffffff6, 0x400, 0x0, 0x0, 0x6b4, [0x2, 0x6, 0x0, 0xc, 0x0, 0x0, 0x1fffffffffc, 0x3, 0x4, 0xb, 0x3169b201, 0x0, 0x3, 0xfffffffffffffc01, 0x5, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0xfffffffffffffffe, 0x200000000000000, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x101, 0x0, 0x20000000000000, 0x40000000000000, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0xfffffffffffffffc, 0x6]}, 0x1fe, 0x1) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0xfffffffffffffd02, &(0x7f00000001c0)) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev4\x00', 0x0, 0x0) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x0, 0x4d, &(0x7f0000000040)='/eev/ram7\x00>\xdd\x03|P\x1e\xd1\xaa\x9e\xde\x91\x00d\n\xf7\xb4\xa6\xfb\xda\x92\xfb\xd6\xef\x01\x17\x1f\xb5-\x87t\x92wf\xba\x15\x1e\x00\x00\x00\x00\xdf\xa4}(\x02\x18\xca\xbdk\xd6\xd0\x1ft\xc5\x93\x84\x1dx\xc9\x8c\xfc\xbc\'\xab\xd5)R\xfa\x8e\xf2\xbdV\xfd\x9f\xcc\x9b\xb4\x82\"\v\xb1\x8ca\x9b\xe2)\x1dBW\x94EZ\xad\x96_\xefL\x86\xcc\x9e\x0e\xcar\xfa|\xcdb\xfdf\xf6#\x88\x14d\x00', 0x0) setns(0xc9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001f40)=ANY=[@ANYBLOB="e0140000", @ANYBLOB="010027bd7000ffdbdf251e"], 0x14e0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) select$auto(0x6, &(0x7f00000000c0)={[0x35cb81de, 0x0, 0x1ee, 0xffffffffffffffff, 0xfffffffffffffffe, 0x801, 0xeb, 0x41e, 0x0, 0x826, 0x2, 0x2, 0x6, 0x400, 0x2, 0x7]}, &(0x7f0000000140)={[0xffffffffffffffff, 0x1000, 0x5, 0x4, 0x24, 0x9, 0x10001, 0xffffffffffffff67, 0x2, 0x10001, 0x978, 0x0, 0x8000000000000001, 0x0, 0xa0, 0x3]}, &(0x7f0000000280)={[0x5, 0x4, 0x9, 0x6, 0x4, 0x3, 0x9, 0x10000000000007, 0x6, 0x3, 0x1, 0x61b, 0x3, 0x0, 0xf, 0x7]}, &(0x7f0000000300)={0x5}) setgroups$auto(0x4, 0xfffffffffffffffc) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x80000000) fanotify_mark$auto(r0, 0x9, 0x8, r0, &(0x7f0000000200)='./cgroup\x00') write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) unshare$auto(0x40000080) pidfd_open$auto(0x1, 0x0) 0s ago: executing program 5 (id=2095): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000280)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6n\xbe\xa6\x01\xc2B#\xb5\xa7\xee$\x8d\xc4\xe9h5\xf7\xb3\xfdld\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\xdb\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00\x00', 0x100000a3d9) r1 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x4000, 0x0) read$auto_vcs_fops_vc_screen(r1, &(0x7f00000000c0)=""/143, 0x8f) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) recvmmsg$auto(r2, 0x0, 0x7, 0x200, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory4/online\x00', 0x2062, 0x0) write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x8000000000000000) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010025bd7000fedbc4256300000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x90) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)=@bpf_attr_0={0x5, 0x9, 0xf, 0xb4, 0x8, r3, 0x5, "58a60f7e066e343427a1d46fdb0fdeae", r6, r3, 0x4b, 0x66, 0x735, 0x5, r1, r3}, 0x1877) kernel console output (not intermixed with test programs): 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.112764][T17624] RSP: 002b:00007f517ba31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 736.112792][T17624] RAX: ffffffffffffffda RBX: 00007f517ae25fa0 RCX: 00007f517ab9e199 [ 736.112812][T17624] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 736.112829][T17624] RBP: 00007f517ac35888 R08: 0000000000000000 R09: 0000000000000000 [ 736.112848][T17624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.112865][T17624] R13: 00007f517ae26038 R14: 00007f517ae25fa0 R15: 00007ffe91a16558 [ 736.112906][T17624] [ 736.933665][T17650] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1489'. [ 738.844696][T17682] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 739.177528][T17692] FAULT_INJECTION: forcing a failure. [ 739.177528][T17692] name failslab, interval 1, probability 0, space 0, times 0 [ 739.177575][T17692] CPU: 0 UID: 0 PID: 17692 Comm: syz.1.1494 Tainted: G L syzkaller #0 PREEMPT(full) [ 739.177613][T17692] Tainted: [L]=SOFTLOCKUP [ 739.177624][T17692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 739.177649][T17692] Call Trace: [ 739.177660][T17692] [ 739.177675][T17692] dump_stack_lvl+0x100/0x190 [ 739.177720][T17692] should_fail_ex.cold+0x5/0xa [ 739.177756][T17692] should_failslab+0xc2/0x120 [ 739.177797][T17692] __kmalloc_cache_noprof+0x91/0x6d0 [ 739.177828][T17692] ? sget_fc+0x117/0x1f70 [ 739.177859][T17692] ? sget_fc+0x1ba/0x1f70 [ 739.177895][T17692] sget_fc+0x1ba/0x1f70 [ 739.177935][T17692] ? __pfx_set_anon_super_fc+0x10/0x10 [ 739.177966][T17692] ? __pfx_sget_fc+0x10/0x10 [ 739.177996][T17692] ? refcount_dec_not_one+0x136/0x1c0 [ 739.178049][T17692] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 739.178101][T17692] ? __kasan_kmalloc+0xaa/0xb0 [ 739.178143][T17692] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 739.178175][T17692] ? __kasan_kmalloc+0xaa/0xb0 [ 739.178218][T17692] ? __pfx_mqueue_fill_super+0x10/0x10 [ 739.178263][T17692] get_tree_nodev+0x28/0x190 [ 739.178300][T17692] mqueue_get_tree+0xf1/0x130 [ 739.178340][T17692] vfs_get_tree+0x92/0x320 [ 739.178372][T17692] fc_mount_longterm+0x1a/0x270 [ 739.178412][T17692] mq_init_ns+0x482/0x820 [ 739.178444][T17692] copy_ipcs+0x3dd/0x7e0 [ 739.178475][T17692] create_new_namespaces+0x20a/0xac0 [ 739.178515][T17692] ? security_capable+0x80/0x260 [ 739.178559][T17692] unshare_nsproxy_namespaces+0xf2/0x220 [ 739.178603][T17692] ksys_unshare+0x4a2/0xa70 [ 739.178633][T17692] ? __pfx_ksys_unshare+0x10/0x10 [ 739.178677][T17692] __x64_sys_unshare+0x31/0x40 [ 739.178705][T17692] do_syscall_64+0x121/0x770 [ 739.178751][T17692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.178780][T17692] RIP: 0033:0x7f517ab9e199 [ 739.178804][T17692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.178831][T17692] RSP: 002b:00007f5177dee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 739.178857][T17692] RAX: ffffffffffffffda RBX: 00007f517ae26540 RCX: 00007f517ab9e199 [ 739.178876][T17692] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 739.178892][T17692] RBP: 00007f517ac35888 R08: 0000000000000000 R09: 0000000000000000 [ 739.178908][T17692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 739.178925][T17692] R13: 00007f517ae265d8 R14: 00007f517ae26540 R15: 00007ffe91a16558 [ 739.178965][T17692] [ 741.907664][T17732] FAULT_INJECTION: forcing a failure. [ 741.907664][T17732] name failslab, interval 1, probability 0, space 0, times 0 [ 741.907708][T17732] CPU: 1 UID: 0 PID: 17732 Comm: syz.0.1503 Tainted: G L syzkaller #0 PREEMPT(full) [ 741.907758][T17732] Tainted: [L]=SOFTLOCKUP [ 741.907769][T17732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 741.907787][T17732] Call Trace: [ 741.907797][T17732] [ 741.907809][T17732] dump_stack_lvl+0x100/0x190 [ 741.907855][T17732] should_fail_ex.cold+0x5/0xa [ 741.907891][T17732] should_failslab+0xc2/0x120 [ 741.907932][T17732] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 741.907973][T17732] ? lock_acquire+0x1d1/0x380 [ 741.908015][T17732] ? kstrdup_const+0x63/0x80 [ 741.908055][T17732] kstrdup+0x51/0xe0 [ 741.908093][T17732] kstrdup_const+0x63/0x80 [ 741.908125][T17732] alloc_vfsmnt+0xe5/0x710 [ 741.908153][T17732] ? __pfx___might_resched+0x10/0x10 [ 741.908194][T17732] clone_mnt+0x4b/0x930 [ 741.908228][T17732] copy_tree+0xfc/0xbf0 [ 741.908265][T17732] ? __pfx_down_write+0x10/0x10 [ 741.908303][T17732] copy_mnt_ns+0x3fa/0x1180 [ 741.908340][T17732] ? __pfx_copy_mnt_ns+0x10/0x10 [ 741.908374][T17732] ? create_new_namespaces+0x30/0xac0 [ 741.908421][T17732] create_new_namespaces+0xd3/0xac0 [ 741.908458][T17732] ? bpf_lsm_capable+0x9/0x10 [ 741.908486][T17732] ? security_capable+0x80/0x260 [ 741.908531][T17732] unshare_nsproxy_namespaces+0xf2/0x220 [ 741.908579][T17732] ksys_unshare+0x4a2/0xa70 [ 741.908609][T17732] ? __pfx_ksys_unshare+0x10/0x10 [ 741.908655][T17732] __x64_sys_unshare+0x31/0x40 [ 741.908684][T17732] do_syscall_64+0x121/0x770 [ 741.908729][T17732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.908767][T17732] RIP: 0033:0x7f506759e199 [ 741.908792][T17732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.908820][T17732] RSP: 002b:00007f50683b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 741.908849][T17732] RAX: ffffffffffffffda RBX: 00007f5067825fa0 RCX: 00007f506759e199 [ 741.908868][T17732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 741.908885][T17732] RBP: 00007f5067635888 R08: 0000000000000000 R09: 0000000000000000 [ 741.908903][T17732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.908920][T17732] R13: 00007f5067826038 R14: 00007f5067825fa0 R15: 00007fff46089af8 [ 741.908961][T17732] [ 742.019250][T17734] FAULT_INJECTION: forcing a failure. [ 742.019250][T17734] name failslab, interval 1, probability 0, space 0, times 0 [ 742.019294][T17734] CPU: 1 UID: 0 PID: 17734 Comm: syz.3.1502 Tainted: G L syzkaller #0 PREEMPT(full) [ 742.019333][T17734] Tainted: [L]=SOFTLOCKUP [ 742.019344][T17734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 742.019361][T17734] Call Trace: [ 742.019371][T17734] [ 742.019382][T17734] dump_stack_lvl+0x100/0x190 [ 742.019425][T17734] should_fail_ex.cold+0x5/0xa [ 742.019463][T17734] should_failslab+0xc2/0x120 [ 742.019507][T17734] __kmalloc_noprof+0xfc/0x840 [ 742.019544][T17734] ? rfkill_alloc+0xb1/0x300 [ 742.019694][T17734] rfkill_alloc+0xb1/0x300 [ 742.019742][T17734] nfc_register_device+0xe8/0x3e0 [ 742.019852][T17734] nci_register_device+0x7f1/0xb80 [ 742.019917][T17734] ? __pfx_nci_register_device+0x10/0x10 [ 742.019960][T17734] ? lockdep_init_map_type+0x5c/0x250 [ 742.020011][T17734] virtual_ncidev_open+0x141/0x220 [ 742.020104][T17734] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 742.020140][T17734] misc_open+0x26d/0x450 [ 742.020238][T17734] ? __pfx_misc_open+0x10/0x10 [ 742.020279][T17734] chrdev_open+0x234/0x6a0 [ 742.020354][T17734] ? __pfx_apparmor_file_open+0x10/0x10 [ 742.020393][T17734] ? __pfx_chrdev_open+0x10/0x10 [ 742.020434][T17734] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 742.020539][T17734] do_dentry_open+0x6ab/0x14d0 [ 742.020616][T17734] ? __pfx_chrdev_open+0x10/0x10 [ 742.020669][T17734] vfs_open+0x82/0x3f0 [ 742.020701][T17734] path_openat+0x19fa/0x2440 [ 742.020755][T17734] ? __pfx_path_openat+0x10/0x10 [ 742.020806][T17734] do_file_open+0x20e/0x430 [ 742.020850][T17734] ? __pfx_do_file_open+0x10/0x10 [ 742.020918][T17734] ? _raw_spin_unlock+0x28/0x50 [ 742.020954][T17734] ? alloc_fd+0x471/0x7a0 [ 742.021003][T17734] do_sys_openat2+0x10f/0x1e0 [ 742.021031][T17734] ? __pfx_do_sys_openat2+0x10/0x10 [ 742.021075][T17734] __x64_sys_openat+0x12d/0x210 [ 742.021104][T17734] ? __pfx___x64_sys_openat+0x10/0x10 [ 742.021148][T17734] do_syscall_64+0x121/0x770 [ 742.021193][T17734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.021222][T17734] RIP: 0033:0x7f76b099e199 [ 742.021246][T17734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.021274][T17734] RSP: 002b:00007f76b18de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 742.021302][T17734] RAX: ffffffffffffffda RBX: 00007f76b0c26090 RCX: 00007f76b099e199 [ 742.021321][T17734] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 742.021339][T17734] RBP: 00007f76b0a35888 R08: 0000000000000000 R09: 0000000000000000 [ 742.021357][T17734] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000000 [ 742.021374][T17734] R13: 00007f76b0c26128 R14: 00007f76b0c26090 R15: 00007ffff032d108 [ 742.021415][T17734] [ 742.602923][T17745] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1503'. [ 743.560900][T17766] kAFS: Invalid Command on /proc/fs/afs/cells file [ 744.663645][T17795] futex_wake_op: syz.1.1509 tries to shift op by -2048; fix this program [ 747.233865][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.233933][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.869536][T17879] Process accounting resumed [ 754.763237][T17964] ima: policy update failed [ 754.763405][ T31] audit: type=1802 audit(2147483743.050:31): pid=17964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1531" res=0 errno=0 [ 754.863888][T17981] FAULT_INJECTION: forcing a failure. [ 754.863888][T17981] name failslab, interval 1, probability 0, space 0, times 0 [ 754.863934][T17981] CPU: 1 UID: 0 PID: 17981 Comm: syz.0.1532 Tainted: G L syzkaller #0 PREEMPT(full) [ 754.863976][T17981] Tainted: [L]=SOFTLOCKUP [ 754.863987][T17981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 754.864004][T17981] Call Trace: [ 754.864015][T17981] [ 754.864026][T17981] dump_stack_lvl+0x100/0x190 [ 754.864071][T17981] should_fail_ex.cold+0x5/0xa [ 754.864110][T17981] should_failslab+0xc2/0x120 [ 754.864155][T17981] __kmalloc_cache_noprof+0x91/0x6d0 [ 754.864190][T17981] ? proc_thread_self_get_link+0x1a6/0x210 [ 754.864241][T17981] proc_thread_self_get_link+0x1a6/0x210 [ 754.864286][T17981] pick_link+0xac2/0x13c0 [ 754.864319][T17981] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 754.864370][T17981] step_into_slowpath+0x9ba/0xf90 [ 754.864414][T17981] ? __pfx_step_into_slowpath+0x10/0x10 [ 754.864456][T17981] ? lookup_fast+0x2da/0x600 [ 754.864485][T17981] ? inode_permission+0x374/0x620 [ 754.864521][T17981] link_path_walk+0xf28/0x1cc0 [ 754.864578][T17981] path_openat+0x1ac/0x2440 [ 754.864625][T17981] ? __pfx_path_openat+0x10/0x10 [ 754.864676][T17981] do_file_open+0x20e/0x430 [ 754.864720][T17981] ? __pfx_do_file_open+0x10/0x10 [ 754.864788][T17981] ? _raw_spin_unlock+0x28/0x50 [ 754.864825][T17981] ? alloc_fd+0x471/0x7a0 [ 754.864875][T17981] do_sys_openat2+0x10f/0x1e0 [ 754.864905][T17981] ? __pfx_do_sys_openat2+0x10/0x10 [ 754.864935][T17981] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 754.864990][T17981] __x64_sys_openat+0x12d/0x210 [ 754.865021][T17981] ? __pfx___x64_sys_openat+0x10/0x10 [ 754.865066][T17981] do_syscall_64+0x121/0x770 [ 754.865111][T17981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.865141][T17981] RIP: 0033:0x7f506759e199 [ 754.865167][T17981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.865193][T17981] RSP: 002b:00007f5064fb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 754.865222][T17981] RAX: ffffffffffffffda RBX: 00007f5067826360 RCX: 00007f506759e199 [ 754.865242][T17981] RDX: 0000000000000400 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 754.865260][T17981] RBP: 00007f5067635888 R08: 0000000000000000 R09: 0000000000000000 [ 754.865278][T17981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.865295][T17981] R13: 00007f50678263f8 R14: 00007f5067826360 R15: 00007fff46089af8 [ 754.865336][T17981] [ 756.961285][T18023] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 756.961351][T18023] pci 0000:00:01.3: PCI INT A: no GSI [ 761.102831][T18099] vhci_hcd: not connected 4 [ 761.220922][T18076] ima: policy update failed [ 761.221082][ T31] audit: type=1802 audit(2147483749.510:32): pid=18076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1544" res=0 errno=0 [ 764.469766][T18161] FAULT_INJECTION: forcing a failure. [ 764.469766][T18161] name failslab, interval 1, probability 0, space 0, times 0 [ 764.469806][T18161] CPU: 0 UID: 0 PID: 18161 Comm: syz.0.1556 Tainted: G L syzkaller #0 PREEMPT(full) [ 764.469845][T18161] Tainted: [L]=SOFTLOCKUP [ 764.469856][T18161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 764.469873][T18161] Call Trace: [ 764.469883][T18161] [ 764.469894][T18161] dump_stack_lvl+0x100/0x190 [ 764.469935][T18161] should_fail_ex.cold+0x5/0xa [ 764.469973][T18161] should_failslab+0xc2/0x120 [ 764.470016][T18161] __kmalloc_cache_noprof+0x91/0x6d0 [ 764.470050][T18161] ? do_eventfd+0x67/0x2b0 [ 764.470279][T18161] do_eventfd+0x67/0x2b0 [ 764.470317][T18161] __x64_sys_eventfd+0x32/0x50 [ 764.470352][T18161] do_syscall_64+0x121/0x770 [ 764.470398][T18161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.470426][T18161] RIP: 0033:0x7f506759e199 [ 764.470449][T18161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.470476][T18161] RSP: 002b:00007f50653d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 764.470505][T18161] RAX: ffffffffffffffda RBX: 00007f5067826270 RCX: 00007f506759e199 [ 764.470524][T18161] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 764.470540][T18161] RBP: 00007f5067635888 R08: 0000000000000000 R09: 0000000000000000 [ 764.470557][T18161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.470572][T18161] R13: 00007f5067826308 R14: 00007f5067826270 R15: 00007fff46089af8 [ 764.470609][T18161] [ 766.315647][T18203] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1561'. [ 766.372130][T18203] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 766.372167][T18203] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 766.372204][T18203] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 766.372231][T18203] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 766.372249][T18203] page dumped because: unmovable page [ 766.372263][T18203] page_owner tracks the page as allocated [ 766.372273][T18203] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1423793381 [ 766.372307][T18203] register_early_stack+0x74/0xaf [ 766.372345][T18203] init_page_owner+0x4c/0xa40 [ 766.372388][T18203] page_ext_init+0x71d/0x780 [ 766.372428][T18203] mm_core_init+0x229/0x270 [ 766.372455][T18203] page_owner free stack trace missing [ 766.631389][T18177] ima: policy update failed [ 766.631575][ T31] audit: type=1802 audit(2147483754.920:33): pid=18177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1559" res=0 errno=0 [ 769.381319][T18243] FAULT_INJECTION: forcing a failure. [ 769.381319][T18243] name failslab, interval 1, probability 0, space 0, times 0 [ 769.381368][T18243] CPU: 0 UID: 0 PID: 18243 Comm: syz.0.1568 Tainted: G L syzkaller #0 PREEMPT(full) [ 769.381409][T18243] Tainted: [L]=SOFTLOCKUP [ 769.381420][T18243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 769.381438][T18243] Call Trace: [ 769.381447][T18243] [ 769.381460][T18243] dump_stack_lvl+0x100/0x190 [ 769.381505][T18243] should_fail_ex.cold+0x5/0xa [ 769.381553][T18243] should_failslab+0xc2/0x120 [ 769.381598][T18243] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 769.381640][T18243] ? lock_acquire+0x1d1/0x380 [ 769.381680][T18243] ? kstrdup_const+0x63/0x80 [ 769.381723][T18243] kstrdup+0x51/0xe0 [ 769.381758][T18243] kstrdup_const+0x63/0x80 [ 769.381791][T18243] alloc_vfsmnt+0xe5/0x710 [ 769.381817][T18243] ? __pfx___might_resched+0x10/0x10 [ 769.381857][T18243] clone_mnt+0x4b/0x930 [ 769.381890][T18243] copy_tree+0xfc/0xbf0 [ 769.381927][T18243] ? __pfx_down_write+0x10/0x10 [ 769.381966][T18243] copy_mnt_ns+0x3fa/0x1180 [ 769.382001][T18243] ? __pfx_copy_mnt_ns+0x10/0x10 [ 769.382035][T18243] ? create_new_namespaces+0x30/0xac0 [ 769.382085][T18243] create_new_namespaces+0xd3/0xac0 [ 769.382125][T18243] ? bpf_lsm_capable+0x9/0x10 [ 769.382155][T18243] ? security_capable+0x80/0x260 [ 769.382203][T18243] unshare_nsproxy_namespaces+0xf2/0x220 [ 769.382250][T18243] ksys_unshare+0x4a2/0xa70 [ 769.382281][T18243] ? __pfx_ksys_unshare+0x10/0x10 [ 769.382311][T18243] ? ksys_write+0x1ac/0x250 [ 769.382359][T18243] __x64_sys_unshare+0x31/0x40 [ 769.382390][T18243] do_syscall_64+0x121/0x770 [ 769.382435][T18243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.382466][T18243] RIP: 0033:0x7f506759e199 [ 769.382490][T18243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.382517][T18243] RSP: 002b:00007f50683b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 769.382553][T18243] RAX: ffffffffffffffda RBX: 00007f5067825fa0 RCX: 00007f506759e199 [ 769.382573][T18243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 769.382591][T18243] RBP: 00007f5067635888 R08: 0000000000000000 R09: 0000000000000000 [ 769.382610][T18243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 769.382628][T18243] R13: 00007f5067826038 R14: 00007f5067825fa0 R15: 00007fff46089af8 [ 769.382670][T18243] [ 770.226233][T18272] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1568'. [ 772.276378][T18286] ima: policy update failed [ 772.276547][ T31] audit: type=1802 audit(2147483760.560:34): pid=18286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1575" res=0 errno=0 [ 775.155670][T18345] vhci_hcd: not connected 4 [ 776.767252][T16268] Bluetooth: hci0: unexpected event 0x2c length: 1022 > 17 [ 781.772897][T18450] Process accounting paused [ 783.642121][T18514] vhci_hcd: not connected 4 [ 786.186715][T18554] FAULT_INJECTION: forcing a failure. [ 786.186715][T18554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 786.186758][T18554] CPU: 0 UID: 0 PID: 18554 Comm: syz.0.1608 Tainted: G L syzkaller #0 PREEMPT(full) [ 786.186796][T18554] Tainted: [L]=SOFTLOCKUP [ 786.186806][T18554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 786.186823][T18554] Call Trace: [ 786.186832][T18554] [ 786.186842][T18554] dump_stack_lvl+0x100/0x190 [ 786.186884][T18554] should_fail_ex.cold+0x5/0xa [ 786.186921][T18554] _copy_to_user+0x32/0xd0 [ 786.186968][T18554] simple_read_from_buffer+0xcb/0x170 [ 786.187009][T18554] proc_fail_nth_read+0x1af/0x230 [ 786.187050][T18554] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 786.187087][T18554] ? rw_verify_area+0xce/0x6d0 [ 786.187117][T18554] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 786.187160][T18554] vfs_read+0x1e4/0xb40 [ 786.187198][T18554] ? __pfx_vfs_read+0x10/0x10 [ 786.187239][T18554] ? lock_acquire+0x1d1/0x380 [ 786.187276][T18554] ? __might_fault+0xc5/0x140 [ 786.187306][T18554] ? find_held_lock+0x2b/0x80 [ 786.187338][T18554] ? __might_fault+0xc5/0x140 [ 786.187366][T18554] ? __might_fault+0xc5/0x140 [ 786.187408][T18554] ksys_read+0x12a/0x250 [ 786.187440][T18554] ? __pfx_ksys_read+0x10/0x10 [ 786.187482][T18554] do_syscall_64+0x121/0x770 [ 786.187527][T18554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.187556][T18554] RIP: 0033:0x7f506755e9ce [ 786.187579][T18554] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 786.187604][T18554] RSP: 002b:00007f5065792fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 786.187631][T18554] RAX: ffffffffffffffda RBX: 00007f50657936c0 RCX: 00007f506755e9ce [ 786.187650][T18554] RDX: 000000000000000f RSI: 00007f50657930a0 RDI: 0000000000000008 [ 786.187667][T18554] RBP: 00007f5065793090 R08: 0000000000000000 R09: 0000000000000000 [ 786.187684][T18554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 786.187701][T18554] R13: 00007f50678264e8 R14: 00007f5067826450 R15: 00007fff46089af8 [ 786.187740][T18554] [ 787.990220][T18571] vivid-007: ================= START STATUS ================= [ 787.990243][T18571] vivid-007: Generate PTS: true [ 787.990271][T18571] vivid-007: Generate SCR: true [ 787.990296][T18571] tpg source WxH: 320x240 (Y'CbCr) [ 787.990312][T18571] tpg field: 1 [ 787.990321][T18571] tpg crop: (0,0)/320x240 [ 787.990338][T18571] tpg compose: (0,0)/320x240 [ 787.990356][T18571] tpg colorspace: 8 [ 787.990367][T18571] tpg transfer function: 0/0 [ 787.990378][T18571] tpg Y'CbCr encoding: 0/0 [ 787.990390][T18571] tpg quantization: 0/0 [ 787.990403][T18571] tpg RGB range: 0/2 [ 787.990416][T18571] vivid-007: ================== END STATUS ================== [ 788.168008][T18588] vivid-007: ================= START STATUS ================= [ 788.168027][T18588] vivid-007: Generate PTS: true [ 788.168056][T18588] vivid-007: Generate SCR: true [ 788.168080][T18588] tpg source WxH: 320x240 (Y'CbCr) [ 788.168095][T18588] tpg field: 1 [ 788.168104][T18588] tpg crop: (0,0)/320x240 [ 788.168121][T18588] tpg compose: (0,0)/320x240 [ 788.168137][T18588] tpg colorspace: 8 [ 788.168147][T18588] tpg transfer function: 0/0 [ 788.168159][T18588] tpg Y'CbCr encoding: 0/0 [ 788.168170][T18588] tpg quantization: 0/0 [ 788.168182][T18588] tpg RGB range: 0/2 [ 788.168193][T18588] vivid-007: ================== END STATUS ================== [ 788.290400][T18592] FAULT_INJECTION: forcing a failure. [ 788.290400][T18592] name failslab, interval 1, probability 0, space 0, times 0 [ 788.290443][T18592] CPU: 0 UID: 0 PID: 18592 Comm: syz.0.1610 Tainted: G L syzkaller #0 PREEMPT(full) [ 788.290481][T18592] Tainted: [L]=SOFTLOCKUP [ 788.290491][T18592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 788.290508][T18592] Call Trace: [ 788.290517][T18592] [ 788.290528][T18592] dump_stack_lvl+0x100/0x190 [ 788.290571][T18592] should_fail_ex.cold+0x5/0xa [ 788.290609][T18592] should_failslab+0xc2/0x120 [ 788.290649][T18592] __kmalloc_noprof+0xfc/0x840 [ 788.290685][T18592] ? vb2_core_allocated_buffers_storage+0x184/0x220 [ 788.290918][T18592] vb2_core_allocated_buffers_storage+0x184/0x220 [ 788.290965][T18592] vb2_core_reqbufs+0x382/0xf30 [ 788.291032][T18592] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 788.291085][T18592] ? __vb2_init_fileio+0x18f/0x1000 [ 788.291116][T18592] __vb2_init_fileio+0x32d/0x1000 [ 788.291153][T18592] __vb2_perform_fileio+0x9ba/0x1380 [ 788.291184][T18592] ? lock_acquire+0x1d1/0x380 [ 788.291227][T18592] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 788.291268][T18592] vb2_fop_write+0x1f8/0x550 [ 788.291360][T18592] v4l2_write+0x229/0x2c0 [ 788.291452][T18592] vfs_write+0x2aa/0x1050 [ 788.291487][T18592] ? __pfx_v4l2_write+0x10/0x10 [ 788.291521][T18592] ? lock_acquire+0x1d1/0x380 [ 788.291558][T18592] ? __fget_files+0x34/0x3d0 [ 788.291593][T18592] ? __pfx_vfs_write+0x10/0x10 [ 788.291623][T18592] ? find_held_lock+0x2b/0x80 [ 788.291654][T18592] ? __fget_files+0x215/0x3d0 [ 788.291695][T18592] ? __fget_files+0x215/0x3d0 [ 788.291772][T18592] ? __fget_files+0x21f/0x3d0 [ 788.291819][T18592] ksys_write+0x12a/0x250 [ 788.291852][T18592] ? __pfx_ksys_write+0x10/0x10 [ 788.291896][T18592] do_syscall_64+0x121/0x770 [ 788.291941][T18592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.291970][T18592] RIP: 0033:0x7f506759e199 [ 788.291994][T18592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.292020][T18592] RSP: 002b:00007f5065772028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 788.292047][T18592] RAX: ffffffffffffffda RBX: 00007f5067826540 RCX: 00007f506759e199 [ 788.292065][T18592] RDX: 00000000ffffffff RSI: 0000200000000100 RDI: 0000000000000005 [ 788.292083][T18592] RBP: 00007f5065772090 R08: 0000000000000000 R09: 0000000000000000 [ 788.292100][T18592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 788.292117][T18592] R13: 00007f50678265d8 R14: 00007f5067826540 R15: 00007fff46089af8 [ 788.292157][T18592] [ 788.798053][T18605] vhci_hcd: not connected 4 [ 794.548766][T18708] Line length is too long: Should be less than 4094 [ 802.956381][T18847] ima: policy update failed [ 802.960604][ T31] audit: type=1802 audit(2147483791.240:35): pid=18847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1649" res=0 errno=0 [ 806.076656][T18917] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1657'. [ 806.090905][T18917] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 806.090954][T18917] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 806.090992][T18917] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 806.091020][T18917] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 806.091037][T18917] page dumped because: unmovable page [ 806.091051][T18917] page_owner tracks the page as allocated [ 806.091061][T18917] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1423793381 [ 806.091095][T18917] register_early_stack+0x74/0xaf [ 806.091133][T18917] init_page_owner+0x4c/0xa40 [ 806.091171][T18917] page_ext_init+0x71d/0x780 [ 806.091210][T18917] mm_core_init+0x229/0x270 [ 806.091238][T18917] page_owner free stack trace missing [ 808.672239][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.672302][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.127275][T19014] FAULT_INJECTION: forcing a failure. [ 812.127275][T19014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.127303][T19014] CPU: 1 UID: 0 PID: 19014 Comm: syz.2.1670 Tainted: G L syzkaller #0 PREEMPT(full) [ 812.127325][T19014] Tainted: [L]=SOFTLOCKUP [ 812.127333][T19014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 812.127343][T19014] Call Trace: [ 812.127348][T19014] [ 812.127354][T19014] dump_stack_lvl+0x100/0x190 [ 812.127379][T19014] should_fail_ex.cold+0x5/0xa [ 812.127399][T19014] _copy_to_user+0x32/0xd0 [ 812.127424][T19014] simple_read_from_buffer+0xcb/0x170 [ 812.127446][T19014] proc_fail_nth_read+0x1af/0x230 [ 812.127466][T19014] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 812.127486][T19014] ? rw_verify_area+0xce/0x6d0 [ 812.127502][T19014] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 812.127520][T19014] vfs_read+0x1e4/0xb40 [ 812.127538][T19014] ? lock_acquire+0x1d1/0x380 [ 812.127559][T19014] ? __fget_files+0x34/0x3d0 [ 812.127577][T19014] ? __pfx_vfs_read+0x10/0x10 [ 812.127592][T19014] ? find_held_lock+0x2b/0x80 [ 812.127610][T19014] ? __fget_files+0x215/0x3d0 [ 812.127632][T19014] ? __fget_files+0x21f/0x3d0 [ 812.127656][T19014] ksys_read+0x12a/0x250 [ 812.127672][T19014] ? __pfx_ksys_read+0x10/0x10 [ 812.127696][T19014] do_syscall_64+0x121/0x770 [ 812.127720][T19014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.127736][T19014] RIP: 0033:0x7f950df5e9ce [ 812.127749][T19014] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 812.127763][T19014] RSP: 002b:00007f950ee46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 812.127778][T19014] RAX: ffffffffffffffda RBX: 00007f950ee476c0 RCX: 00007f950df5e9ce [ 812.127788][T19014] RDX: 000000000000000f RSI: 00007f950ee470a0 RDI: 0000000000000004 [ 812.127797][T19014] RBP: 00007f950ee47090 R08: 0000000000000000 R09: 0000000000000000 [ 812.127805][T19014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 812.127814][T19014] R13: 00007f950e226038 R14: 00007f950e225fa0 R15: 00007fff7cdf1fe8 [ 812.127840][T19014] [ 816.313772][T19085] vhci_hcd: not connected 4 [ 816.707250][T19100] zram: Added device: zram1 [ 822.887240][T19179] Process accounting resumed [ 823.236302][T19209] FAULT_INJECTION: forcing a failure. [ 823.236302][T19209] name failslab, interval 1, probability 0, space 0, times 0 [ 823.236348][T19209] CPU: 0 UID: 0 PID: 19209 Comm: syz.1.1696 Tainted: G L syzkaller #0 PREEMPT(full) [ 823.236390][T19209] Tainted: [L]=SOFTLOCKUP [ 823.236400][T19209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 823.236418][T19209] Call Trace: [ 823.236428][T19209] [ 823.236438][T19209] dump_stack_lvl+0x100/0x190 [ 823.236484][T19209] should_fail_ex.cold+0x5/0xa [ 823.236522][T19209] should_failslab+0xc2/0x120 [ 823.236565][T19209] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 823.236606][T19209] ? lock_acquire+0x1d1/0x380 [ 823.236647][T19209] ? kstrdup_const+0x63/0x80 [ 823.236686][T19209] kstrdup+0x51/0xe0 [ 823.236719][T19209] kstrdup_const+0x63/0x80 [ 823.236750][T19209] alloc_vfsmnt+0xe5/0x710 [ 823.236776][T19209] ? __pfx___might_resched+0x10/0x10 [ 823.236815][T19209] clone_mnt+0x4b/0x930 [ 823.236847][T19209] copy_tree+0xfc/0xbf0 [ 823.236883][T19209] ? __pfx_down_write+0x10/0x10 [ 823.236922][T19209] copy_mnt_ns+0x3fa/0x1180 [ 823.236956][T19209] ? __pfx_copy_mnt_ns+0x10/0x10 [ 823.236989][T19209] ? create_new_namespaces+0x30/0xac0 [ 823.237041][T19209] create_new_namespaces+0xd3/0xac0 [ 823.237082][T19209] ? bpf_lsm_capable+0x9/0x10 [ 823.237111][T19209] ? security_capable+0x80/0x260 [ 823.237160][T19209] unshare_nsproxy_namespaces+0xf2/0x220 [ 823.237200][T19209] ksys_unshare+0x4a2/0xa70 [ 823.237230][T19209] ? __pfx_ksys_unshare+0x10/0x10 [ 823.237277][T19209] __x64_sys_unshare+0x31/0x40 [ 823.237309][T19209] do_syscall_64+0x121/0x770 [ 823.237352][T19209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.237382][T19209] RIP: 0033:0x7f517ab9e199 [ 823.237407][T19209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.237434][T19209] RSP: 002b:00007f517ba31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 823.237463][T19209] RAX: ffffffffffffffda RBX: 00007f517ae25fa0 RCX: 00007f517ab9e199 [ 823.237482][T19209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 823.237500][T19209] RBP: 00007f517ac35888 R08: 0000000000000000 R09: 0000000000000000 [ 823.237518][T19209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.237537][T19209] R13: 00007f517ae26038 R14: 00007f517ae25fa0 R15: 00007ffe91a16558 [ 823.237579][T19209] [ 823.538388][T19214] phram: not enough arguments [ 824.179312][T19229] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1696'. [ 826.805332][T19265] ima: policy update failed [ 826.805601][ T31] audit: type=1802 audit(2147483815.090:36): pid=19265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1704" res=0 errno=0 [ 827.598085][T19294] FAULT_INJECTION: forcing a failure. [ 827.598085][T19294] name failslab, interval 1, probability 0, space 0, times 0 [ 827.598128][T19294] CPU: 0 UID: 0 PID: 19294 Comm: syz.1.1707 Tainted: G L syzkaller #0 PREEMPT(full) [ 827.598168][T19294] Tainted: [L]=SOFTLOCKUP [ 827.598179][T19294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 827.598197][T19294] Call Trace: [ 827.598207][T19294] [ 827.598218][T19294] dump_stack_lvl+0x100/0x190 [ 827.598262][T19294] should_fail_ex.cold+0x5/0xa [ 827.598300][T19294] should_failslab+0xc2/0x120 [ 827.598345][T19294] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 827.598388][T19294] ? lock_acquire+0x1d1/0x380 [ 827.598429][T19294] ? kstrdup_const+0x63/0x80 [ 827.598466][T19294] kstrdup+0x51/0xe0 [ 827.598499][T19294] kstrdup_const+0x63/0x80 [ 827.598531][T19294] alloc_vfsmnt+0xe5/0x710 [ 827.598558][T19294] ? __pfx___might_resched+0x10/0x10 [ 827.598597][T19294] clone_mnt+0x4b/0x930 [ 827.598630][T19294] copy_tree+0xfc/0xbf0 [ 827.598667][T19294] ? __pfx_down_write+0x10/0x10 [ 827.598704][T19294] copy_mnt_ns+0x3fa/0x1180 [ 827.598739][T19294] ? __pfx_copy_mnt_ns+0x10/0x10 [ 827.598778][T19294] ? create_new_namespaces+0x30/0xac0 [ 827.598837][T19294] create_new_namespaces+0xd3/0xac0 [ 827.598879][T19294] ? bpf_lsm_capable+0x9/0x10 [ 827.598908][T19294] ? security_capable+0x80/0x260 [ 827.598957][T19294] unshare_nsproxy_namespaces+0xf2/0x220 [ 827.599003][T19294] ksys_unshare+0x4a2/0xa70 [ 827.599034][T19294] ? __pfx_ksys_unshare+0x10/0x10 [ 827.599079][T19294] __x64_sys_unshare+0x31/0x40 [ 827.599109][T19294] do_syscall_64+0x121/0x770 [ 827.599154][T19294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.599184][T19294] RIP: 0033:0x7f517ab9e199 [ 827.599208][T19294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.599234][T19294] RSP: 002b:00007f517ba31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 827.599263][T19294] RAX: ffffffffffffffda RBX: 00007f517ae25fa0 RCX: 00007f517ab9e199 [ 827.599282][T19294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 827.599300][T19294] RBP: 00007f517ac35888 R08: 0000000000000000 R09: 0000000000000000 [ 827.599316][T19294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.599334][T19294] R13: 00007f517ae26038 R14: 00007f517ae25fa0 R15: 00007ffe91a16558 [ 827.599375][T19294] [ 828.055095][T19300] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1707'. [ 828.734765][T19305] smpboot: CPU 1 is now offline [ 829.223872][T19312] FAULT_INJECTION: forcing a failure. [ 829.223872][T19312] name failslab, interval 1, probability 0, space 0, times 0 [ 829.223903][T19312] CPU: 0 UID: 0 PID: 19312 Comm: syz.0.1710 Tainted: G L syzkaller #0 PREEMPT(full) [ 829.223925][T19312] Tainted: [L]=SOFTLOCKUP [ 829.223930][T19312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 829.223941][T19312] Call Trace: [ 829.223946][T19312] [ 829.223952][T19312] dump_stack_lvl+0x100/0x190 [ 829.223979][T19312] should_fail_ex.cold+0x5/0xa [ 829.224002][T19312] should_failslab+0xc2/0x120 [ 829.224025][T19312] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 829.224048][T19312] ? lock_acquire+0x1d1/0x380 [ 829.224070][T19312] ? kstrdup_const+0x63/0x80 [ 829.224092][T19312] kstrdup+0x51/0xe0 [ 829.224109][T19312] kstrdup_const+0x63/0x80 [ 829.224126][T19312] alloc_vfsmnt+0xe5/0x710 [ 829.224140][T19312] ? __pfx___might_resched+0x10/0x10 [ 829.224161][T19312] clone_mnt+0x4b/0x930 [ 829.224186][T19312] copy_tree+0xfc/0xbf0 [ 829.224206][T19312] ? __pfx_down_write+0x10/0x10 [ 829.224227][T19312] copy_mnt_ns+0x3fa/0x1180 [ 829.224246][T19312] ? __pfx_copy_mnt_ns+0x10/0x10 [ 829.224263][T19312] ? create_new_namespaces+0x30/0xac0 [ 829.224290][T19312] create_new_namespaces+0xd3/0xac0 [ 829.224315][T19312] ? bpf_lsm_capable+0x9/0x10 [ 829.224330][T19312] ? security_capable+0x80/0x260 [ 829.224356][T19312] unshare_nsproxy_namespaces+0xf2/0x220 [ 829.224380][T19312] ksys_unshare+0x4a2/0xa70 [ 829.224397][T19312] ? __pfx_ksys_unshare+0x10/0x10 [ 829.224420][T19312] __x64_sys_unshare+0x31/0x40 [ 829.224436][T19312] do_syscall_64+0x121/0x770 [ 829.224460][T19312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.224476][T19312] RIP: 0033:0x7f506759e199 [ 829.224489][T19312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.224504][T19312] RSP: 002b:00007f50683b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 829.224519][T19312] RAX: ffffffffffffffda RBX: 00007f5067825fa0 RCX: 00007f506759e199 [ 829.224530][T19312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 829.224539][T19312] RBP: 00007f5067635888 R08: 0000000000000000 R09: 0000000000000000 [ 829.224548][T19312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 829.224557][T19312] R13: 00007f5067826038 R14: 00007f5067825fa0 R15: 00007fff46089af8 [ 829.224578][T19312] [ 830.381946][T19340] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1710'. [ 830.751615][T12665] Bluetooth: hci2: command 0x0406 tx timeout [ 832.431502][T19386] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input8 [ 834.873557][T19392] ima: policy update failed [ 834.874558][ T31] audit: type=1802 audit(2147483823.160:37): pid=19392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1717" res=0 errno=0 [ 838.227764][T19480] FAULT_INJECTION: forcing a failure. [ 838.227764][T19480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 838.227791][T19480] CPU: 0 UID: 0 PID: 19480 Comm: syz.2.1728 Tainted: G L syzkaller #0 PREEMPT(full) [ 838.227812][T19480] Tainted: [L]=SOFTLOCKUP [ 838.227817][T19480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 838.227827][T19480] Call Trace: [ 838.227832][T19480] [ 838.227838][T19480] dump_stack_lvl+0x100/0x190 [ 838.227864][T19480] should_fail_ex.cold+0x5/0xa [ 838.227884][T19480] _copy_to_user+0x32/0xd0 [ 838.227908][T19480] simple_read_from_buffer+0xcb/0x170 [ 838.227929][T19480] proc_fail_nth_read+0x1af/0x230 [ 838.227949][T19480] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 838.227971][T19480] ? rw_verify_area+0xce/0x6d0 [ 838.227994][T19480] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 838.228012][T19480] vfs_read+0x1e4/0xb40 [ 838.228032][T19480] ? __pfx_vfs_read+0x10/0x10 [ 838.228053][T19480] ? lock_acquire+0x1d1/0x380 [ 838.228074][T19480] ? __might_fault+0xc5/0x140 [ 838.228090][T19480] ? find_held_lock+0x2b/0x80 [ 838.228106][T19480] ? __might_fault+0xc5/0x140 [ 838.228121][T19480] ? __might_fault+0xc5/0x140 [ 838.228143][T19480] ksys_read+0x12a/0x250 [ 838.228160][T19480] ? __pfx_ksys_read+0x10/0x10 [ 838.228183][T19480] do_syscall_64+0x121/0x770 [ 838.228207][T19480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.228223][T19480] RIP: 0033:0x7f950df5e9ce [ 838.228235][T19480] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 838.228250][T19480] RSP: 002b:00007f950edc2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 838.228264][T19480] RAX: ffffffffffffffda RBX: 00007f950edc36c0 RCX: 00007f950df5e9ce [ 838.228274][T19480] RDX: 000000000000000f RSI: 00007f950edc30a0 RDI: 0000000000000008 [ 838.228283][T19480] RBP: 00007f950edc3090 R08: 0000000000000000 R09: 0000000000000000 [ 838.228292][T19480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.228300][T19480] R13: 00007f950e2263f8 R14: 00007f950e226360 R15: 00007fff7cdf1fe8 [ 838.228320][T19480] [ 838.455201][T19487] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1730'. [ 838.545100][T19487] virt_wifi0: entered allmulticast mode [ 840.062267][T19524] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1734'. [ 840.095486][T19524] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 840.095509][T19524] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 840.095529][T19524] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 840.095544][T19524] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 840.095553][T19524] page dumped because: unmovable page [ 840.095561][T19524] page_owner tracks the page as allocated [ 840.095566][T19524] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1423793381 [ 840.095586][T19524] register_early_stack+0x74/0xaf [ 840.095614][T19524] init_page_owner+0x4c/0xa40 [ 840.095634][T19524] page_ext_init+0x71d/0x780 [ 840.095654][T19524] mm_core_init+0x229/0x270 [ 840.095669][T19524] page_owner free stack trace missing [ 844.551654][T19584] ICMPv6: process `syz.3.1743' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 845.717827][T19616] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1746'. [ 845.717844][T19616] FAULT_INJECTION: forcing a failure. [ 845.717844][T19616] name failslab, interval 1, probability 0, space 0, times 0 [ 845.717866][T19616] CPU: 0 UID: 0 PID: 19616 Comm: syz.2.1746 Tainted: G L syzkaller #0 PREEMPT(full) [ 845.717887][T19616] Tainted: [L]=SOFTLOCKUP [ 845.717892][T19616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 845.717901][T19616] Call Trace: [ 845.717906][T19616] [ 845.717912][T19616] dump_stack_lvl+0x100/0x190 [ 845.717937][T19616] should_fail_ex.cold+0x5/0xa [ 845.717958][T19616] should_failslab+0xc2/0x120 [ 845.717980][T19616] __kmalloc_noprof+0xfc/0x840 [ 845.717998][T19616] ? netlink_sendmsg+0x8b0/0xda0 [ 845.718013][T19616] ? ____sys_sendmsg+0xa4d/0xbe0 [ 845.718033][T19616] ? fib_nl2rule.constprop.0+0x315/0x1c50 [ 845.718169][T19616] fib_nl2rule.constprop.0+0x315/0x1c50 [ 845.718192][T19616] ? __pfx_fib_nl2rule.constprop.0+0x10/0x10 [ 845.718214][T19616] ? __nla_parse+0x40/0x60 [ 845.718237][T19616] fib_newrule+0x246/0x1e50 [ 845.718259][T19616] ? rcu_is_watching+0x13/0xc0 [ 845.718277][T19616] ? kasan_quarantine_put+0x104/0x240 [ 845.718295][T19616] ? lockdep_hardirqs_on+0x7d/0x110 [ 845.718318][T19616] ? __pfx_fib_newrule+0x10/0x10 [ 845.718337][T19616] ? kfree_skbmem+0x150/0x210 [ 845.718357][T19616] ? kmem_cache_free+0x127/0x6c0 [ 845.718373][T19616] ? skb_release_data+0x65e/0x860 [ 845.718404][T19616] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 845.718449][T19616] ? find_held_lock+0x2b/0x80 [ 845.718466][T19616] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 845.718483][T19616] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 845.718502][T19616] ? __pfx_fib_nl_newrule+0x10/0x10 [ 845.718522][T19616] rtnetlink_rcv_msg+0x95e/0xe90 [ 845.718541][T19616] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 845.718565][T19616] ? ref_tracker_free+0x37e/0x6c0 [ 845.718590][T19616] netlink_rcv_skb+0x159/0x420 [ 845.718605][T19616] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 845.718624][T19616] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 845.718645][T19616] ? netlink_deliver_tap+0x1ae/0xcc0 [ 845.718671][T19616] netlink_unicast+0x585/0x850 [ 845.718687][T19616] ? __pfx_netlink_unicast+0x10/0x10 [ 845.718701][T19616] ? aa_sk_perm+0x389/0xab0 [ 845.718722][T19616] netlink_sendmsg+0x8b0/0xda0 [ 845.718740][T19616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 845.718756][T19616] ? apparmor_socket_sendmsg+0x165/0x280 [ 845.718782][T19616] ____sys_sendmsg+0xa4d/0xbe0 [ 845.718800][T19616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 845.718816][T19616] ? __pfx_____sys_sendmsg+0x10/0x10 [ 845.718838][T19616] ? rcu_is_watching+0x13/0xc0 [ 845.718854][T19616] ? ___sys_sendmsg+0x19d/0x1e0 [ 845.718872][T19616] ? kfree+0x1e5/0x6d0 [ 845.718890][T19616] ___sys_sendmsg+0x190/0x1e0 [ 845.718911][T19616] ? __pfx____sys_sendmsg+0x10/0x10 [ 845.718939][T19616] ? __fget_files+0x34/0x3d0 [ 845.718966][T19616] ? __pfx___might_resched+0x10/0x10 [ 845.718989][T19616] __sys_sendmmsg+0x20c/0x440 [ 845.719008][T19616] ? __pfx___sys_sendmmsg+0x10/0x10 [ 845.719023][T19616] ? ksys_write+0x190/0x250 [ 845.719056][T19616] ? fput+0x7c/0x100 [ 845.719075][T19616] ? ksys_write+0x1ac/0x250 [ 845.719098][T19616] ? __pfx_ksys_write+0x10/0x10 [ 845.719119][T19616] __x64_sys_sendmmsg+0x9c/0x100 [ 845.719135][T19616] ? lockdep_hardirqs_on+0x7d/0x110 [ 845.719155][T19616] do_syscall_64+0x121/0x770 [ 845.719178][T19616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.719193][T19616] RIP: 0033:0x7f950df9e199 [ 845.719206][T19616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.719220][T19616] RSP: 002b:00007f950ee26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 845.719235][T19616] RAX: ffffffffffffffda RBX: 00007f950e226090 RCX: 00007f950df9e199 [ 845.719245][T19616] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 845.719254][T19616] RBP: 00007f950ee26090 R08: 0000000000000000 R09: 0000000000000000 [ 845.719263][T19616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 845.719271][T19616] R13: 00007f950e226128 R14: 00007f950e226090 R15: 00007fff7cdf1fe8 [ 845.719291][T19616] [ 854.066110][T12665] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 854.079140][T12665] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 854.079801][T12665] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 854.084971][T12665] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 854.085721][T12665] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 854.647896][T19704] Process accounting paused [ 856.073511][T19749] FAULT_INJECTION: forcing a failure. [ 856.073511][T19749] name failslab, interval 1, probability 0, space 0, times 0 [ 856.073542][T19749] CPU: 0 UID: 0 PID: 19749 Comm: syz.2.1763 Tainted: G L syzkaller #0 PREEMPT(full) [ 856.073564][T19749] Tainted: [L]=SOFTLOCKUP [ 856.073570][T19749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 856.073580][T19749] Call Trace: [ 856.073585][T19749] [ 856.073592][T19749] dump_stack_lvl+0x100/0x190 [ 856.073621][T19749] should_fail_ex.cold+0x5/0xa [ 856.073644][T19749] should_failslab+0xc2/0x120 [ 856.073669][T19749] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 856.073691][T19749] ? lock_acquire+0x1d1/0x380 [ 856.073715][T19749] ? kstrdup_const+0x63/0x80 [ 856.073736][T19749] kstrdup+0x51/0xe0 [ 856.073753][T19749] kstrdup_const+0x63/0x80 [ 856.073770][T19749] alloc_vfsmnt+0xe5/0x710 [ 856.073785][T19749] ? __pfx___might_resched+0x10/0x10 [ 856.073808][T19749] clone_mnt+0x4b/0x930 [ 856.073825][T19749] copy_tree+0xfc/0xbf0 [ 856.073844][T19749] ? __pfx_down_write+0x10/0x10 [ 856.073865][T19749] copy_mnt_ns+0x3fa/0x1180 [ 856.073883][T19749] ? __pfx_copy_mnt_ns+0x10/0x10 [ 856.073900][T19749] ? create_new_namespaces+0x30/0xac0 [ 856.073927][T19749] create_new_namespaces+0xd3/0xac0 [ 856.073948][T19749] ? bpf_lsm_capable+0x9/0x10 [ 856.073964][T19749] ? security_capable+0x80/0x260 [ 856.073991][T19749] unshare_nsproxy_namespaces+0xf2/0x220 [ 856.074020][T19749] ksys_unshare+0x4a2/0xa70 [ 856.074044][T19749] ? __pfx_ksys_unshare+0x10/0x10 [ 856.074068][T19749] __x64_sys_unshare+0x31/0x40 [ 856.074084][T19749] do_syscall_64+0x121/0x770 [ 856.074108][T19749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.074125][T19749] RIP: 0033:0x7f950df9e199 [ 856.074139][T19749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.074153][T19749] RSP: 002b:00007f950ee47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 856.074169][T19749] RAX: ffffffffffffffda RBX: 00007f950e225fa0 RCX: 00007f950df9e199 [ 856.074179][T19749] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 856.074188][T19749] RBP: 00007f950e035888 R08: 0000000000000000 R09: 0000000000000000 [ 856.074197][T19749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 856.074206][T19749] R13: 00007f950e226038 R14: 00007f950e225fa0 R15: 00007fff7cdf1fe8 [ 856.074227][T19749] [ 856.195954][T16268] Bluetooth: hci3: command tx timeout [ 857.853148][T19715] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.853212][T19715] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.853314][T19715] bridge_slave_0: entered allmulticast mode [ 857.854340][T19715] bridge_slave_0: entered promiscuous mode [ 857.994654][T19715] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.994722][T19715] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.994832][T19715] bridge_slave_1: entered allmulticast mode [ 857.995862][T19715] bridge_slave_1: entered promiscuous mode [ 858.215009][T19715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.230575][T19715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.269121][T16268] Bluetooth: hci3: command tx timeout [ 858.732105][T19715] team0: Port device team_slave_0 added [ 858.746317][T19715] team0: Port device team_slave_1 added [ 859.172120][T19715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.172134][T19715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.172152][T19715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.322517][T19715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.322532][T19715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.322550][T19715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.660414][T19715] hsr_slave_0: entered promiscuous mode [ 859.662695][T19715] hsr_slave_1: entered promiscuous mode [ 859.663128][T19715] debugfs: 'hsr0' already exists in 'hsr' [ 859.663143][T19715] Cannot create hsr debugfs directory [ 860.348676][T16268] Bluetooth: hci3: command tx timeout [ 861.880489][T19715] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 861.884648][T19715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 861.885209][T19715] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 861.929459][T19715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 861.934772][T19715] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 861.958334][T19715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 862.073692][T19715] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 862.078188][T19715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 862.428804][T16268] Bluetooth: hci3: command tx timeout [ 863.527998][T19715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.791917][T19715] 8021q: adding VLAN 0 to HW filter on device team0 [ 864.147846][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.147915][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 864.276093][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.276162][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.894842][T19715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 865.630747][T19896] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1777'. [ 865.676315][T19896] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 865.676338][T19896] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 865.676357][T19896] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 865.676372][T19896] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 865.676381][T19896] page dumped because: unmovable page [ 865.676389][T19896] page_owner tracks the page as allocated [ 865.676395][T19896] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1423793381 [ 865.676413][T19896] register_early_stack+0x74/0xaf [ 865.676436][T19896] init_page_owner+0x4c/0xa40 [ 865.676455][T19896] page_ext_init+0x71d/0x780 [ 865.676475][T19896] mm_core_init+0x229/0x270 [ 865.676489][T19896] page_owner free stack trace missing [ 867.063331][T19715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.561287][T19715] veth0_vlan: entered promiscuous mode [ 868.586709][T19715] veth1_vlan: entered promiscuous mode [ 868.702937][T19715] veth0_macvtap: entered promiscuous mode [ 868.721331][T19715] veth1_macvtap: entered promiscuous mode [ 868.793637][T19715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 868.815771][T19715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 868.830026][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 868.830064][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 868.852081][ T271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.853693][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.853720][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.853744][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.216787][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.216805][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 869.513930][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 869.513947][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.477480][T19996] FAULT_INJECTION: forcing a failure. [ 872.477480][T19996] name failslab, interval 1, probability 0, space 0, times 0 [ 872.477510][T19996] CPU: 0 UID: 0 PID: 19996 Comm: syz.1.1789 Tainted: G L syzkaller #0 PREEMPT(full) [ 872.477532][T19996] Tainted: [L]=SOFTLOCKUP [ 872.477537][T19996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 872.477547][T19996] Call Trace: [ 872.477552][T19996] [ 872.477559][T19996] dump_stack_lvl+0x100/0x190 [ 872.477586][T19996] should_fail_ex.cold+0x5/0xa [ 872.477608][T19996] should_failslab+0xc2/0x120 [ 872.477631][T19996] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 872.477653][T19996] ? lock_acquire+0x1d1/0x380 [ 872.477676][T19996] ? kstrdup_const+0x63/0x80 [ 872.477697][T19996] kstrdup+0x51/0xe0 [ 872.477715][T19996] kstrdup_const+0x63/0x80 [ 872.477732][T19996] alloc_vfsmnt+0xe5/0x710 [ 872.477747][T19996] ? __pfx___might_resched+0x10/0x10 [ 872.477768][T19996] clone_mnt+0x4b/0x930 [ 872.477785][T19996] copy_tree+0xfc/0xbf0 [ 872.477805][T19996] ? __pfx_down_write+0x10/0x10 [ 872.477825][T19996] copy_mnt_ns+0x3fa/0x1180 [ 872.477843][T19996] ? __pfx_copy_mnt_ns+0x10/0x10 [ 872.477869][T19996] ? create_new_namespaces+0x30/0xac0 [ 872.477897][T19996] create_new_namespaces+0xd3/0xac0 [ 872.477919][T19996] ? bpf_lsm_capable+0x9/0x10 [ 872.477935][T19996] ? security_capable+0x80/0x260 [ 872.477961][T19996] unshare_nsproxy_namespaces+0xf2/0x220 [ 872.477985][T19996] ksys_unshare+0x4a2/0xa70 [ 872.478002][T19996] ? __pfx_ksys_unshare+0x10/0x10 [ 872.478027][T19996] __x64_sys_unshare+0x31/0x40 [ 872.478043][T19996] do_syscall_64+0x121/0x770 [ 872.478067][T19996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.478082][T19996] RIP: 0033:0x7f517ab9e199 [ 872.478096][T19996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.478110][T19996] RSP: 002b:00007f517ba31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 872.478141][T19996] RAX: ffffffffffffffda RBX: 00007f517ae25fa0 RCX: 00007f517ab9e199 [ 872.478152][T19996] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 872.478162][T19996] RBP: 00007f517ac35888 R08: 0000000000000000 R09: 0000000000000000 [ 872.478171][T19996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 872.478180][T19996] R13: 00007f517ae26038 R14: 00007f517ae25fa0 R15: 00007ffe91a16558 [ 872.478201][T19996] [ 881.517323][T20137] vhci_hcd: not connected 4 [ 883.961162][T20176] FAULT_INJECTION: forcing a failure. [ 883.961162][T20176] name failslab, interval 1, probability 0, space 0, times 0 [ 883.961190][T20176] CPU: 0 UID: 0 PID: 20176 Comm: syz.1.1815 Tainted: G L syzkaller #0 PREEMPT(full) [ 883.961211][T20176] Tainted: [L]=SOFTLOCKUP [ 883.961217][T20176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 883.961226][T20176] Call Trace: [ 883.961232][T20176] [ 883.961238][T20176] dump_stack_lvl+0x100/0x190 [ 883.961265][T20176] should_fail_ex.cold+0x5/0xa [ 883.961286][T20176] should_failslab+0xc2/0x120 [ 883.961310][T20176] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 883.961332][T20176] ? lock_acquire+0x1d1/0x380 [ 883.961355][T20176] ? kstrdup_const+0x63/0x80 [ 883.961376][T20176] kstrdup+0x51/0xe0 [ 883.961403][T20176] kstrdup_const+0x63/0x80 [ 883.961420][T20176] alloc_vfsmnt+0xe5/0x710 [ 883.961437][T20176] ? __pfx___might_resched+0x10/0x10 [ 883.961459][T20176] clone_mnt+0x4b/0x930 [ 883.961476][T20176] copy_tree+0xfc/0xbf0 [ 883.961496][T20176] ? __pfx_down_write+0x10/0x10 [ 883.961518][T20176] copy_mnt_ns+0x3fa/0x1180 [ 883.961536][T20176] ? __pfx_copy_mnt_ns+0x10/0x10 [ 883.961553][T20176] ? create_new_namespaces+0x30/0xac0 [ 883.961583][T20176] create_new_namespaces+0xd3/0xac0 [ 883.961605][T20176] ? bpf_lsm_capable+0x9/0x10 [ 883.961620][T20176] ? security_capable+0x80/0x260 [ 883.961646][T20176] unshare_nsproxy_namespaces+0xf2/0x220 [ 883.961670][T20176] ksys_unshare+0x4a2/0xa70 [ 883.961686][T20176] ? __pfx_ksys_unshare+0x10/0x10 [ 883.961711][T20176] __x64_sys_unshare+0x31/0x40 [ 883.961727][T20176] do_syscall_64+0x121/0x770 [ 883.961751][T20176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.961767][T20176] RIP: 0033:0x7f517ab9e199 [ 883.961781][T20176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.961795][T20176] RSP: 002b:00007f517ba31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 883.961810][T20176] RAX: ffffffffffffffda RBX: 00007f517ae25fa0 RCX: 00007f517ab9e199 [ 883.961821][T20176] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 883.961830][T20176] RBP: 00007f517ac35888 R08: 0000000000000000 R09: 0000000000000000 [ 883.961839][T20176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 883.961848][T20176] R13: 00007f517ae26038 R14: 00007f517ae25fa0 R15: 00007ffe91a16558 [ 883.961870][T20176] [ 884.945774][T20172] Process accounting resumed [ 886.191582][T20213] vhci_hcd: not connected 4 [ 886.698100][T20188] Process accounting resumed [ 886.855207][T20221] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1820'. [ 886.896119][T20221] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 886.896140][T20221] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 886.896160][T20221] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 886.896175][T20221] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 886.896184][T20221] page dumped because: unmovable page [ 886.896192][T20221] page_owner tracks the page as allocated [ 886.896198][T20221] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1423793381 [ 886.896216][T20221] register_early_stack+0x74/0xaf [ 886.896238][T20221] init_page_owner+0x4c/0xa40 [ 886.896257][T20221] page_ext_init+0x71d/0x780 [ 886.896278][T20221] mm_core_init+0x229/0x270 [ 886.896293][T20221] page_owner free stack trace missing [ 888.243581][T20233] ima: policy update failed [ 888.244078][ T31] audit: type=1802 audit(2147483876.530:38): pid=20233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1823" res=0 errno=0 [ 893.048689][T20318] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 893.912997][T20327] netlink: 206 bytes leftover after parsing attributes in process `syz.1.1836'. [ 904.492908][T12665] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 904.496249][T12665] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 904.496787][T12665] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 904.498368][T12665] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 904.537325][T12665] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 906.588789][T16268] Bluetooth: hci4: command tx timeout [ 908.202476][T20497] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.202546][T20497] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.202655][T20497] bridge_slave_0: entered allmulticast mode [ 908.203685][T20497] bridge_slave_0: entered promiscuous mode [ 908.239613][T20497] bridge0: port 2(bridge_slave_1) entered blocking state [ 908.239676][T20497] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.239803][T20497] bridge_slave_1: entered allmulticast mode [ 908.246930][T20497] bridge_slave_1: entered promiscuous mode [ 908.371900][T20497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.391617][T20497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 908.580657][T20497] team0: Port device team_slave_0 added [ 908.584073][T20497] team0: Port device team_slave_1 added [ 908.668647][T16268] Bluetooth: hci4: command tx timeout [ 909.034826][T20497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.034847][T20497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.034865][T20497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 909.075857][T20497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 909.075872][T20497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.075890][T20497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 909.552251][T20565] ima: policy update failed [ 909.552759][ T31] audit: type=1802 audit(2147483897.840:39): pid=20565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1867" res=0 errno=0 [ 909.757757][T20497] hsr_slave_0: entered promiscuous mode [ 909.768002][T20497] hsr_slave_1: entered promiscuous mode [ 909.774391][T20497] debugfs: 'hsr0' already exists in 'hsr' [ 909.774408][T20497] Cannot create hsr debugfs directory [ 910.748977][T16268] Bluetooth: hci4: command tx timeout [ 910.933708][T20497] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 910.935979][T20497] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 910.980270][T20497] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 911.004228][T20497] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 911.106773][T20497] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 911.119109][T20497] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 911.280339][T20497] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 911.308199][T20497] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 912.826105][T20497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 912.836091][T16268] Bluetooth: hci4: command tx timeout [ 912.954474][T20497] 8021q: adding VLAN 0 to HW filter on device team0 [ 912.982602][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 912.982671][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 912.987908][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 912.987975][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 913.303426][T20497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 915.345698][T20497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.934871][T20497] veth0_vlan: entered promiscuous mode [ 915.962181][T20497] veth1_vlan: entered promiscuous mode [ 916.034510][T20497] veth0_macvtap: entered promiscuous mode [ 916.059936][T20497] veth1_macvtap: entered promiscuous mode [ 916.183378][T20497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 916.284717][T20497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 916.579049][ T1177] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.579584][ T1177] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.579615][ T1177] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.579640][ T1177] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 916.777871][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.777889][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 916.975516][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 916.975534][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 917.854452][T20696] ima: policy update failed [ 917.855905][ T31] audit: type=1802 audit(2147483906.140:40): pid=20696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1881" res=0 errno=0 [ 922.275844][T20778] FAULT_INJECTION: forcing a failure. [ 922.275844][T20778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 922.275871][T20778] CPU: 0 UID: 0 PID: 20778 Comm: syz.4.1890 Tainted: G L syzkaller #0 PREEMPT(full) [ 922.275892][T20778] Tainted: [L]=SOFTLOCKUP [ 922.275897][T20778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 922.275906][T20778] Call Trace: [ 922.275912][T20778] [ 922.275918][T20778] dump_stack_lvl+0x100/0x190 [ 922.275943][T20778] should_fail_ex.cold+0x5/0xa [ 922.275964][T20778] _copy_to_user+0x32/0xd0 [ 922.275994][T20778] simple_read_from_buffer+0xcb/0x170 [ 922.276016][T20778] proc_fail_nth_read+0x1af/0x230 [ 922.276036][T20778] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 922.276055][T20778] ? rw_verify_area+0xce/0x6d0 [ 922.276075][T20778] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 922.276093][T20778] vfs_read+0x1e4/0xb40 [ 922.276113][T20778] ? __pfx_vfs_read+0x10/0x10 [ 922.276134][T20778] ? lock_acquire+0x1d1/0x380 [ 922.276155][T20778] ? __might_fault+0xc5/0x140 [ 922.276171][T20778] ? find_held_lock+0x2b/0x80 [ 922.276188][T20778] ? __might_fault+0xc5/0x140 [ 922.276202][T20778] ? __might_fault+0xc5/0x140 [ 922.276219][T20778] ksys_read+0x12a/0x250 [ 922.276236][T20778] ? __pfx_ksys_read+0x10/0x10 [ 922.276259][T20778] do_syscall_64+0x121/0x770 [ 922.276285][T20778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.276300][T20778] RIP: 0033:0x7fb15275e9ce [ 922.276313][T20778] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 922.276327][T20778] RSP: 002b:00007fb153673fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 922.276342][T20778] RAX: ffffffffffffffda RBX: 00007fb1536746c0 RCX: 00007fb15275e9ce [ 922.276351][T20778] RDX: 000000000000000f RSI: 00007fb1536740a0 RDI: 0000000000000001 [ 922.276360][T20778] RBP: 00007fb153674090 R08: 0000000000000000 R09: 0000000000000000 [ 922.276369][T20778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 922.276377][T20778] R13: 00007fb152a264e8 R14: 00007fb152a26450 R15: 00007ffe5e2fa778 [ 922.276397][T20778] [ 925.859327][T12665] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 925.862147][T12665] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 925.863675][T12665] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 925.864261][T12665] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 925.864634][T12665] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 927.948669][T16268] Bluetooth: hci5: command tx timeout [ 929.255694][T20828] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.255819][T20828] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.255939][T20828] bridge_slave_0: entered allmulticast mode [ 929.283689][T20828] bridge_slave_0: entered promiscuous mode [ 929.363536][T20828] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.363606][T20828] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.363706][T20828] bridge_slave_1: entered allmulticast mode [ 929.366274][T20828] bridge_slave_1: entered promiscuous mode [ 929.483327][T20828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 929.486903][T20828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 929.565400][T20828] team0: Port device team_slave_0 added [ 929.576312][T20828] team0: Port device team_slave_1 added [ 929.632580][T20828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 929.632594][T20828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 929.632611][T20828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 929.633749][T20828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 929.633759][T20828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 929.633776][T20828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 929.857280][T20828] hsr_slave_0: entered promiscuous mode [ 929.865280][T20828] hsr_slave_1: entered promiscuous mode [ 929.867366][T20828] debugfs: 'hsr0' already exists in 'hsr' [ 929.867382][T20828] Cannot create hsr debugfs directory [ 930.028610][T16268] Bluetooth: hci5: command tx timeout [ 930.416307][T20889] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 930.416328][T20889] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 930.416348][T20889] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 930.416362][T20889] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 930.416371][T20889] page dumped because: unmovable page [ 930.416378][T20889] page_owner tracks the page as allocated [ 930.416384][T20889] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1423793381 [ 930.416403][T20889] register_early_stack+0x74/0xaf [ 930.416425][T20889] init_page_owner+0x4c/0xa40 [ 930.416445][T20889] page_ext_init+0x71d/0x780 [ 930.416465][T20889] mm_core_init+0x229/0x270 [ 930.416480][T20889] page_owner free stack trace missing [ 931.151170][T20828] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 931.160711][T20828] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 931.161260][T20828] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 931.198344][T20828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 931.325453][T20828] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 931.340043][T20828] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 931.343869][T20828] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 931.395073][T20828] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 931.553818][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.553859][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.715439][T20911] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1904'. [ 932.108713][T16268] Bluetooth: hci5: command tx timeout [ 932.636851][T20828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 932.697130][T20828] 8021q: adding VLAN 0 to HW filter on device team0 [ 932.720032][ T271] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.720102][ T271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 932.756014][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.756083][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 933.852064][T20828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 934.188643][T16268] Bluetooth: hci5: command tx timeout [ 934.320361][T12665] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 934.321607][T12665] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 934.323748][T12665] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 934.324307][T12665] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 934.325241][T12665] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 936.023449][T20828] veth0_vlan: entered promiscuous mode [ 936.066750][T20828] veth1_vlan: entered promiscuous mode [ 936.202368][T20828] veth0_macvtap: entered promiscuous mode [ 936.250328][T20828] veth1_macvtap: entered promiscuous mode [ 936.347691][T20828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 936.407611][T20828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 936.428987][T12665] Bluetooth: hci6: command tx timeout [ 937.070807][T20961] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.070911][T20961] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.076039][T20961] bridge_slave_0: entered allmulticast mode [ 937.099804][T20961] bridge_slave_0: entered promiscuous mode [ 937.111814][T20961] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.111874][T20961] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.111963][T20961] bridge_slave_1: entered allmulticast mode [ 937.114436][T20961] bridge_slave_1: entered promiscuous mode [ 937.251650][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.380321][ T35] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.381837][ T35] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.381866][ T35] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.596435][T20961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 937.608818][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.608835][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.653536][T20961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 937.851820][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.851837][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.891404][T20961] team0: Port device team_slave_0 added [ 937.907298][T20961] team0: Port device team_slave_1 added [ 938.074334][T20961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 938.074348][T20961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.074367][T20961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 938.131156][T20961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 938.131169][T20961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.131187][T20961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 938.286359][T20961] hsr_slave_0: entered promiscuous mode [ 938.296392][T20961] hsr_slave_1: entered promiscuous mode [ 938.297195][T20961] debugfs: 'hsr0' already exists in 'hsr' [ 938.297210][T20961] Cannot create hsr debugfs directory [ 938.509006][T12665] Bluetooth: hci6: command tx timeout [ 940.553641][T20961] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 940.568667][T20961] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 940.569244][T20961] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 940.589309][T12665] Bluetooth: hci6: command tx timeout [ 940.614879][T20961] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 940.762670][T20961] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 940.767954][T20961] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 940.871168][T20961] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 940.874163][T20961] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 941.924749][T21062] vhci_hcd: not connected 4 [ 942.565267][T20961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.670689][T12665] Bluetooth: hci6: command tx timeout [ 943.186308][T20961] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.298254][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.298326][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.508135][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.508218][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.661829][T21097] netlink: 338 bytes leftover after parsing attributes in process `syz.5.1923'. [ 946.486940][T20961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 948.428096][T20961] veth0_vlan: entered promiscuous mode [ 948.984253][T20961] veth1_vlan: entered promiscuous mode [ 949.446607][T20961] veth0_macvtap: entered promiscuous mode [ 949.466645][T20961] veth1_macvtap: entered promiscuous mode [ 949.570135][T20961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 949.634496][T20961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 949.738708][ T271] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.739241][ T271] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.739266][ T271] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.739290][ T271] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.315140][ T271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.315158][ T271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.275858][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.275876][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.682328][T21243] vhci_hcd: not connected 4 [ 960.126679][T21352] netlink: 338 bytes leftover after parsing attributes in process `syz.7.1955'. [ 960.165728][T21352] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 960.165750][T21352] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 960.165770][T21352] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 960.165784][T21352] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 960.165793][T21352] page dumped because: unmovable page [ 960.165885][T21352] page_owner tracks the page as allocated [ 960.165891][T21352] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1423793381 [ 960.165911][T21352] register_early_stack+0x74/0xaf [ 960.165933][T21352] init_page_owner+0x4c/0xa40 [ 960.165952][T21352] page_ext_init+0x71d/0x780 [ 960.165972][T21352] mm_core_init+0x229/0x270 [ 960.165987][T21352] page_owner free stack trace missing [ 963.723918][T21405] vhci_hcd: not connected 4 [ 965.126650][T21432] FAULT_INJECTION: forcing a failure. [ 965.126650][T21432] name failslab, interval 1, probability 0, space 0, times 0 [ 965.126678][T21432] CPU: 0 UID: 0 PID: 21432 Comm: syz.5.1968 Tainted: G L syzkaller #0 PREEMPT(full) [ 965.126698][T21432] Tainted: [L]=SOFTLOCKUP [ 965.126704][T21432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 965.126713][T21432] Call Trace: [ 965.126718][T21432] [ 965.126724][T21432] dump_stack_lvl+0x100/0x190 [ 965.126750][T21432] should_fail_ex.cold+0x5/0xa [ 965.126770][T21432] should_failslab+0xc2/0x120 [ 965.126792][T21432] __kmalloc_cache_noprof+0x91/0x6d0 [ 965.126810][T21432] ? proc_thread_self_get_link+0x1a6/0x210 [ 965.126836][T21432] proc_thread_self_get_link+0x1a6/0x210 [ 965.126858][T21432] pick_link+0xac2/0x13c0 [ 965.126876][T21432] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 965.126899][T21432] step_into_slowpath+0x9ba/0xf90 [ 965.126923][T21432] ? __pfx_step_into_slowpath+0x10/0x10 [ 965.126945][T21432] ? lookup_fast+0x2da/0x600 [ 965.126959][T21432] ? inode_permission+0x374/0x620 [ 965.126977][T21432] link_path_walk+0xf28/0x1cc0 [ 965.127002][T21432] path_openat+0x1ac/0x2440 [ 965.127025][T21432] ? __pfx_path_openat+0x10/0x10 [ 965.127050][T21432] do_file_open+0x20e/0x430 [ 965.127072][T21432] ? __pfx_do_file_open+0x10/0x10 [ 965.127105][T21432] ? _raw_spin_unlock+0x28/0x50 [ 965.127124][T21432] ? alloc_fd+0x471/0x7a0 [ 965.127150][T21432] do_sys_openat2+0x10f/0x1e0 [ 965.127164][T21432] ? __pfx_do_sys_openat2+0x10/0x10 [ 965.127180][T21432] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 965.127208][T21432] __x64_sys_openat+0x12d/0x210 [ 965.127223][T21432] ? __pfx___x64_sys_openat+0x10/0x10 [ 965.127246][T21432] do_syscall_64+0x121/0x770 [ 965.127269][T21432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.127284][T21432] RIP: 0033:0x7ffafd15e9ce [ 965.127297][T21432] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 965.127311][T21432] RSP: 002b:00007ffafe12cf98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 965.127325][T21432] RAX: ffffffffffffffda RBX: 00007ffafe12d6c0 RCX: 00007ffafd15e9ce [ 965.127335][T21432] RDX: 0000000000000002 RSI: 00007ffafd235182 RDI: ffffffffffffff9c [ 965.127351][T21432] RBP: 00007ffafd235888 R08: 0000000000000000 R09: 0000000000000000 [ 965.127360][T21432] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001b [ 965.127369][T21432] R13: 00007ffafd426038 R14: 00007ffafd425fa0 R15: 00007ffc8dec89a8 [ 965.127389][T21432] [ 966.692358][T21448] ima: policy update failed [ 966.692814][ T31] audit: type=1802 audit(2147483954.980:41): pid=21448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.1971" res=0 errno=0 [ 969.238905][T21494] FAULT_INJECTION: forcing a failure. [ 969.238905][T21494] name failslab, interval 1, probability 0, space 0, times 0 [ 969.238942][T21494] CPU: 0 UID: 0 PID: 21494 Comm: syz.5.1978 Tainted: G L syzkaller #0 PREEMPT(full) [ 969.238964][T21494] Tainted: [L]=SOFTLOCKUP [ 969.238970][T21494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 969.238980][T21494] Call Trace: [ 969.238987][T21494] [ 969.238993][T21494] dump_stack_lvl+0x100/0x190 [ 969.239021][T21494] should_fail_ex.cold+0x5/0xa [ 969.239043][T21494] should_failslab+0xc2/0x120 [ 969.239066][T21494] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 969.239088][T21494] ? lock_acquire+0x1d1/0x380 [ 969.239111][T21494] ? kstrdup_const+0x63/0x80 [ 969.239132][T21494] kstrdup+0x51/0xe0 [ 969.239150][T21494] kstrdup_const+0x63/0x80 [ 969.239166][T21494] alloc_vfsmnt+0xe5/0x710 [ 969.239181][T21494] ? __pfx___might_resched+0x10/0x10 [ 969.239203][T21494] clone_mnt+0x4b/0x930 [ 969.239220][T21494] copy_tree+0xfc/0xbf0 [ 969.239239][T21494] ? __pfx_down_write+0x10/0x10 [ 969.239260][T21494] copy_mnt_ns+0x3fa/0x1180 [ 969.239278][T21494] ? __pfx_copy_mnt_ns+0x10/0x10 [ 969.239295][T21494] ? create_new_namespaces+0x30/0xac0 [ 969.239322][T21494] create_new_namespaces+0xd3/0xac0 [ 969.239344][T21494] ? bpf_lsm_capable+0x9/0x10 [ 969.239360][T21494] ? security_capable+0x80/0x260 [ 969.239387][T21494] unshare_nsproxy_namespaces+0xf2/0x220 [ 969.239412][T21494] ksys_unshare+0x4a2/0xa70 [ 969.239428][T21494] ? __pfx_ksys_unshare+0x10/0x10 [ 969.239452][T21494] __x64_sys_unshare+0x31/0x40 [ 969.239468][T21494] do_syscall_64+0x121/0x770 [ 969.239493][T21494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.239509][T21494] RIP: 0033:0x7ffafd19e199 [ 969.239523][T21494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.239537][T21494] RSP: 002b:00007ffafe12d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 969.239556][T21494] RAX: ffffffffffffffda RBX: 00007ffafd425fa0 RCX: 00007ffafd19e199 [ 969.239566][T21494] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 969.239575][T21494] RBP: 00007ffafd235888 R08: 0000000000000000 R09: 0000000000000000 [ 969.239585][T21494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 969.239594][T21494] R13: 00007ffafd426038 R14: 00007ffafd425fa0 R15: 00007ffc8dec89a8 [ 969.239615][T21494] [ 969.819785][T21504] FAULT_INJECTION: forcing a failure. [ 969.819785][T21504] name failslab, interval 1, probability 0, space 0, times 0 [ 969.819815][T21504] CPU: 0 UID: 0 PID: 21504 Comm: syz.4.1979 Tainted: G L syzkaller #0 PREEMPT(full) [ 969.819836][T21504] Tainted: [L]=SOFTLOCKUP [ 969.819841][T21504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 969.819851][T21504] Call Trace: [ 969.819856][T21504] [ 969.819863][T21504] dump_stack_lvl+0x100/0x190 [ 969.819899][T21504] should_fail_ex.cold+0x5/0xa [ 969.819920][T21504] should_failslab+0xc2/0x120 [ 969.819944][T21504] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 969.819966][T21504] ? lock_acquire+0x1d1/0x380 [ 969.819988][T21504] ? kstrdup_const+0x63/0x80 [ 969.820008][T21504] kstrdup+0x51/0xe0 [ 969.820026][T21504] kstrdup_const+0x63/0x80 [ 969.820042][T21504] alloc_vfsmnt+0xe5/0x710 [ 969.820057][T21504] ? __pfx___might_resched+0x10/0x10 [ 969.820078][T21504] clone_mnt+0x4b/0x930 [ 969.820095][T21504] copy_tree+0xfc/0xbf0 [ 969.820115][T21504] ? __pfx_down_write+0x10/0x10 [ 969.820135][T21504] copy_mnt_ns+0x3fa/0x1180 [ 969.820153][T21504] ? __pfx_copy_mnt_ns+0x10/0x10 [ 969.820170][T21504] ? create_new_namespaces+0x30/0xac0 [ 969.820196][T21504] create_new_namespaces+0xd3/0xac0 [ 969.820217][T21504] ? bpf_lsm_capable+0x9/0x10 [ 969.820233][T21504] ? security_capable+0x80/0x260 [ 969.820258][T21504] unshare_nsproxy_namespaces+0xf2/0x220 [ 969.820283][T21504] ksys_unshare+0x4a2/0xa70 [ 969.820302][T21504] ? __pfx_ksys_unshare+0x10/0x10 [ 969.820326][T21504] __x64_sys_unshare+0x31/0x40 [ 969.820341][T21504] do_syscall_64+0x121/0x770 [ 969.820365][T21504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.820381][T21504] RIP: 0033:0x7fb15279e199 [ 969.820394][T21504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.820408][T21504] RSP: 002b:00007fb153719028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 969.820424][T21504] RAX: ffffffffffffffda RBX: 00007fb152a25fa0 RCX: 00007fb15279e199 [ 969.820434][T21504] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 969.820443][T21504] RBP: 00007fb152835888 R08: 0000000000000000 R09: 0000000000000000 [ 969.820452][T21504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 969.820461][T21504] R13: 00007fb152a26038 R14: 00007fb152a25fa0 R15: 00007ffe5e2fa778 [ 969.820482][T21504] [ 970.364092][T21508] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1978'. [ 970.797586][T21514] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1979'. [ 975.774956][T21587] vhci_hcd: not connected 4 [ 976.995103][T21598] synth uevent: /bus/usb-serial/drivers/motorola_tetra: unknown uevent action string [ 979.708890][T21621] Bluetooth: hci3: command 0x0406 tx timeout [ 980.176393][T21652] ima: policy update failed [ 980.176597][ T31] audit: type=1802 audit(2147483968.460:42): pid=21652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.1997" res=0 errno=0 [ 980.209903][T21653] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 980.364648][T21658] vhci_hcd: not connected 4 [ 980.454258][T21661] FAULT_INJECTION: forcing a failure. [ 980.454258][T21661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.454286][T21661] CPU: 0 UID: 0 PID: 21661 Comm: syz.5.1998 Tainted: G L syzkaller #0 PREEMPT(full) [ 980.454306][T21661] Tainted: [L]=SOFTLOCKUP [ 980.454312][T21661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 980.454320][T21661] Call Trace: [ 980.454326][T21661] [ 980.454332][T21661] dump_stack_lvl+0x100/0x190 [ 980.454358][T21661] should_fail_ex.cold+0x5/0xa [ 980.454380][T21661] _copy_to_user+0x32/0xd0 [ 980.454405][T21661] keyctl_capabilities+0x5a/0x160 [ 980.454423][T21661] __do_sys_keyctl+0x427/0x5a0 [ 980.454441][T21661] do_syscall_64+0x121/0x770 [ 980.454465][T21661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.454480][T21661] RIP: 0033:0x7ffafd19e199 [ 980.454493][T21661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.454506][T21661] RSP: 002b:00007ffafe088028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 980.454520][T21661] RAX: ffffffffffffffda RBX: 00007ffafd426450 RCX: 00007ffafd19e199 [ 980.454530][T21661] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 000000000000001f [ 980.454539][T21661] RBP: 00007ffafe088090 R08: 00000000000003ff R09: 0000000000000000 [ 980.454547][T21661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.454556][T21661] R13: 00007ffafd4264e8 R14: 00007ffafd426450 R15: 00007ffc8dec89a8 [ 980.454575][T21661] [ 982.683753][T16268] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 982.687494][T16268] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 982.688089][T16268] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 982.712498][T16268] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 982.714017][T16268] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 984.342639][T21723] ecryptfs_parse_packet_length: Error parsing packet length [ 984.342657][T21723] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 984.748819][T16268] Bluetooth: hci7: command tx timeout [ 985.579915][T21696] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.580010][T21696] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.580091][T21696] bridge_slave_0: entered allmulticast mode [ 985.581320][T21696] bridge_slave_0: entered promiscuous mode [ 985.614112][T21696] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.614669][T21696] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.614759][T21696] bridge_slave_1: entered allmulticast mode [ 985.616208][T21696] bridge_slave_1: entered promiscuous mode [ 985.702879][T21696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 985.760679][T21696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 985.920842][T21696] team0: Port device team_slave_0 added [ 985.991096][T21696] team0: Port device team_slave_1 added [ 986.220387][T21696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 986.220402][T21696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 986.220419][T21696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 986.355083][T21696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 986.355098][T21696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 986.355116][T21696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 986.828835][T16268] Bluetooth: hci7: command tx timeout [ 986.834872][T21696] hsr_slave_0: entered promiscuous mode [ 986.836599][T21696] hsr_slave_1: entered promiscuous mode [ 986.837095][T21696] debugfs: 'hsr0' already exists in 'hsr' [ 986.837109][T21696] Cannot create hsr debugfs directory [ 987.385781][T21757] FAULT_INJECTION: forcing a failure. [ 987.385781][T21757] name failslab, interval 1, probability 0, space 0, times 0 [ 987.385809][T21757] CPU: 0 UID: 0 PID: 21757 Comm: syz.5.2010 Tainted: G L syzkaller #0 PREEMPT(full) [ 987.385833][T21757] Tainted: [L]=SOFTLOCKUP [ 987.385839][T21757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 987.385849][T21757] Call Trace: [ 987.385854][T21757] [ 987.385861][T21757] dump_stack_lvl+0x100/0x190 [ 987.385887][T21757] should_fail_ex.cold+0x5/0xa [ 987.385909][T21757] should_failslab+0xc2/0x120 [ 987.385934][T21757] kmem_cache_alloc_noprof+0x92/0x6a0 [ 987.385955][T21757] ? __anon_vma_prepare+0xae/0x690 [ 987.386050][T21757] __anon_vma_prepare+0xae/0x690 [ 987.386075][T21757] __vmf_anon_prepare+0x11f/0x250 [ 987.386100][T21757] do_anonymous_page+0x47d/0x2050 [ 987.386122][T21757] ? __pfx_do_anonymous_page+0x10/0x10 [ 987.386138][T21757] ? rcu_read_unlock+0x2d/0xb0 [ 987.386154][T21757] ? rcu_read_unlock+0x2d/0xb0 [ 987.386171][T21757] ? __pte_offset_map+0x179/0x310 [ 987.386231][T21757] __handle_mm_fault+0x1ff3/0x2f60 [ 987.386253][T21757] ? __pfx___handle_mm_fault+0x10/0x10 [ 987.386270][T21757] ? pte_offset_map_lock+0x174/0x320 [ 987.386291][T21757] ? find_held_lock+0x2b/0x80 [ 987.386310][T21757] ? find_held_lock+0x2b/0x80 [ 987.386327][T21757] ? follow_page_pte+0x536/0x1050 [ 987.386360][T21757] handle_mm_fault+0x363/0xa20 [ 987.386380][T21757] __get_user_pages+0x8ae/0x2c30 [ 987.386406][T21757] ? __pfx_mt_find+0x10/0x10 [ 987.386423][T21757] ? __pfx___get_user_pages+0x10/0x10 [ 987.386451][T21757] populate_vma_page_range+0x267/0x3f0 [ 987.386474][T21757] ? __pfx_populate_vma_page_range+0x10/0x10 [ 987.386496][T21757] ? __pfx_find_vma_intersection+0x10/0x10 [ 987.386524][T21757] __mm_populate+0x107/0x3a0 [ 987.386546][T21757] ? __pfx___mm_populate+0x10/0x10 [ 987.386570][T21757] ? up_write+0x2dc/0x5b0 [ 987.386587][T21757] vm_mmap_pgoff+0x441/0x470 [ 987.386610][T21757] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 987.386634][T21757] ? __pfx_do_futex+0x10/0x10 [ 987.386664][T21757] ? lock_acquire+0x1d1/0x380 [ 987.386685][T21757] ? __fget_files+0x34/0x3d0 [ 987.386710][T21757] ksys_mmap_pgoff+0xe4/0x610 [ 987.386732][T21757] ? __x64_sys_futex+0x358/0x4d0 [ 987.386749][T21757] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 987.386770][T21757] ? xfd_validate_state+0x129/0x190 [ 987.386805][T21757] __x64_sys_mmap+0x125/0x190 [ 987.386828][T21757] do_syscall_64+0x121/0x770 [ 987.386866][T21757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.386883][T21757] RIP: 0033:0x7ffafd19e199 [ 987.386898][T21757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.386914][T21757] RSP: 002b:00007ffafe10c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 987.386930][T21757] RAX: ffffffffffffffda RBX: 00007ffafd426090 RCX: 00007ffafd19e199 [ 987.386941][T21757] RDX: 0000000c00000072 RSI: 0000000000000004 RDI: 0000000000000000 [ 987.386951][T21757] RBP: 00007ffafd235888 R08: 0000001000000002 R09: 0000000000008000 [ 987.386960][T21757] R10: 0000000000008b72 R11: 0000000000000246 R12: 0000000000000000 [ 987.386970][T21757] R13: 00007ffafd426128 R14: 00007ffafd426090 R15: 00007ffc8dec89a8 [ 987.386992][T21757] [ 987.947982][T21696] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 987.953039][T21696] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 988.034160][T21696] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 988.038251][T21696] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 988.053055][T21696] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 988.067499][T21696] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 988.108267][T21696] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 988.118968][T21696] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 988.909428][T16268] Bluetooth: hci7: command tx timeout [ 989.605584][T21696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.121792][T21696] 8021q: adding VLAN 0 to HW filter on device team0 [ 990.371161][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.371243][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.473082][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.473153][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 990.990482][T16268] Bluetooth: hci7: command tx timeout [ 991.195373][T21818] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2015'. [ 991.195846][T21817] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 991.195865][T21817] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 991.195884][T21817] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 991.195899][T21817] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 991.195909][T21817] page dumped because: unmovable page [ 991.195917][T21817] page_owner tracks the page as allocated [ 991.195923][T21817] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1423793381 [ 991.195942][T21817] register_early_stack+0x74/0xaf [ 991.195963][T21817] init_page_owner+0x4c/0xa40 [ 991.195982][T21817] page_ext_init+0x71d/0x780 [ 991.305299][T21817] mm_core_init+0x229/0x270 [ 991.305325][T21817] page_owner free stack trace missing [ 991.346371][T21818] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 991.346394][T21818] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 991.346414][T21818] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 991.346429][T21818] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 991.346438][T21818] page dumped because: unmovable page [ 991.346445][T21818] page_owner tracks the page as allocated [ 991.346466][T21818] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1423793381 [ 991.346486][T21818] register_early_stack+0x74/0xaf [ 991.346508][T21818] init_page_owner+0x4c/0xa40 [ 991.346527][T21818] page_ext_init+0x71d/0x780 [ 991.346547][T21818] mm_core_init+0x229/0x270 [ 991.346561][T21818] page_owner free stack trace missing [ 992.405997][T21696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.996543][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.996583][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.083368][T21696] veth0_vlan: entered promiscuous mode [ 994.116330][T21696] veth1_vlan: entered promiscuous mode [ 994.281358][T21696] veth0_macvtap: entered promiscuous mode [ 994.310866][T21696] veth1_macvtap: entered promiscuous mode [ 994.370034][T21696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 994.400634][T21696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 994.479813][ T271] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.479851][ T271] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.479877][ T271] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.479902][ T271] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.559697][T21851] FAULT_INJECTION: forcing a failure. [ 994.559697][T21851] name failslab, interval 1, probability 0, space 0, times 0 [ 994.559729][T21851] CPU: 0 UID: 0 PID: 21851 Comm: syz.5.2019 Tainted: G L syzkaller #0 PREEMPT(full) [ 994.559752][T21851] Tainted: [L]=SOFTLOCKUP [ 994.559758][T21851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 994.559768][T21851] Call Trace: [ 994.559773][T21851] [ 994.559780][T21851] dump_stack_lvl+0x100/0x190 [ 994.559806][T21851] should_fail_ex.cold+0x5/0xa [ 994.559829][T21851] should_failslab+0xc2/0x120 [ 994.559852][T21851] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 994.559875][T21851] ? lock_acquire+0x1d1/0x380 [ 994.559897][T21851] ? kstrdup_const+0x63/0x80 [ 994.559932][T21851] kstrdup+0x51/0xe0 [ 994.559951][T21851] kstrdup_const+0x63/0x80 [ 994.559969][T21851] alloc_vfsmnt+0xe5/0x710 [ 994.559985][T21851] ? __pfx___might_resched+0x10/0x10 [ 994.560006][T21851] clone_mnt+0x4b/0x930 [ 994.560024][T21851] copy_tree+0xfc/0xbf0 [ 994.560043][T21851] ? __pfx_down_write+0x10/0x10 [ 994.560064][T21851] copy_mnt_ns+0x3fa/0x1180 [ 994.560082][T21851] ? __pfx_copy_mnt_ns+0x10/0x10 [ 994.560099][T21851] ? create_new_namespaces+0x30/0xac0 [ 994.560125][T21851] create_new_namespaces+0xd3/0xac0 [ 994.560148][T21851] ? bpf_lsm_capable+0x9/0x10 [ 994.560166][T21851] ? security_capable+0x80/0x260 [ 994.560191][T21851] unshare_nsproxy_namespaces+0xf2/0x220 [ 994.560216][T21851] ksys_unshare+0x4a2/0xa70 [ 994.560232][T21851] ? __pfx_ksys_unshare+0x10/0x10 [ 994.560257][T21851] __x64_sys_unshare+0x31/0x40 [ 994.560274][T21851] do_syscall_64+0x121/0x770 [ 994.560298][T21851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.560314][T21851] RIP: 0033:0x7ffafd19e199 [ 994.560328][T21851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 994.560342][T21851] RSP: 002b:00007ffafe12d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 994.560358][T21851] RAX: ffffffffffffffda RBX: 00007ffafd425fa0 RCX: 00007ffafd19e199 [ 994.560368][T21851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 994.560377][T21851] RBP: 00007ffafd235888 R08: 0000000000000000 R09: 0000000000000000 [ 994.560387][T21851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 994.560396][T21851] R13: 00007ffafd426038 R14: 00007ffafd425fa0 R15: 00007ffc8dec89a8 [ 994.560418][T21851] [ 994.953531][ T271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.953549][ T271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.037273][ T271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 995.037291][ T271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 995.117705][T21855] FAULT_INJECTION: forcing a failure. [ 995.117705][T21855] name failslab, interval 1, probability 0, space 0, times 0 [ 995.117734][T21855] CPU: 0 UID: 0 PID: 21855 Comm: syz.4.2020 Tainted: G L syzkaller #0 PREEMPT(full) [ 995.117757][T21855] Tainted: [L]=SOFTLOCKUP [ 995.117763][T21855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 995.117772][T21855] Call Trace: [ 995.117778][T21855] [ 995.117785][T21855] dump_stack_lvl+0x100/0x190 [ 995.117810][T21855] should_fail_ex.cold+0x5/0xa [ 995.117832][T21855] should_failslab+0xc2/0x120 [ 995.117856][T21855] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 995.117878][T21855] ? lock_acquire+0x1d1/0x380 [ 995.117900][T21855] ? kstrdup_const+0x63/0x80 [ 995.117922][T21855] kstrdup+0x51/0xe0 [ 995.117941][T21855] kstrdup_const+0x63/0x80 [ 995.117958][T21855] alloc_vfsmnt+0xe5/0x710 [ 995.117973][T21855] ? __pfx___might_resched+0x10/0x10 [ 995.117994][T21855] clone_mnt+0x4b/0x930 [ 995.118011][T21855] copy_tree+0xfc/0xbf0 [ 995.118030][T21855] ? __pfx_down_write+0x10/0x10 [ 995.118051][T21855] copy_mnt_ns+0x3fa/0x1180 [ 995.118073][T21855] ? __pfx_copy_mnt_ns+0x10/0x10 [ 995.118092][T21855] ? create_new_namespaces+0x30/0xac0 [ 995.118120][T21855] create_new_namespaces+0xd3/0xac0 [ 995.118142][T21855] ? bpf_lsm_capable+0x9/0x10 [ 995.118158][T21855] ? security_capable+0x80/0x260 [ 995.118184][T21855] unshare_nsproxy_namespaces+0xf2/0x220 [ 995.118208][T21855] ksys_unshare+0x4a2/0xa70 [ 995.118225][T21855] ? __pfx_ksys_unshare+0x10/0x10 [ 995.118248][T21855] __x64_sys_unshare+0x31/0x40 [ 995.118265][T21855] do_syscall_64+0x121/0x770 [ 995.118288][T21855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.118304][T21855] RIP: 0033:0x7fb15279e199 [ 995.118318][T21855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 995.118332][T21855] RSP: 002b:00007fb153719028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 995.118347][T21855] RAX: ffffffffffffffda RBX: 00007fb152a25fa0 RCX: 00007fb15279e199 [ 995.118358][T21855] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 995.118367][T21855] RBP: 00007fb152835888 R08: 0000000000000000 R09: 0000000000000000 [ 995.118379][T21855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 995.118388][T21855] R13: 00007fb152a26038 R14: 00007fb152a25fa0 R15: 00007ffe5e2fa778 [ 995.118409][T21855] [ 995.685872][T21863] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2019'. [ 996.039717][T21872] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2020'. [ 996.661166][T12665] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 996.665974][T12665] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 996.666587][T12665] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 996.667157][T12665] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 996.668117][T12665] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 998.091412][T21911] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 998.091434][T21911] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 998.091454][T21911] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 998.091468][T21911] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 998.091478][T21911] page dumped because: unmovable page [ 998.091486][T21911] page_owner tracks the page as allocated [ 998.091492][T21911] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1423793381 [ 998.091511][T21911] register_early_stack+0x74/0xaf [ 998.091532][T21911] init_page_owner+0x4c/0xa40 [ 998.091551][T21911] page_ext_init+0x71d/0x780 [ 998.091582][T21911] mm_core_init+0x229/0x270 [ 998.094255][T21911] page_owner free stack trace missing [ 998.749158][T12665] Bluetooth: hci8: command tx timeout [ 999.545360][T21925] vhci_hcd: not connected 4 [ 1000.041479][T21878] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.041584][T21878] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.041917][T21878] bridge_slave_0: entered allmulticast mode [ 1000.043130][T21878] bridge_slave_0: entered promiscuous mode [ 1000.104571][T21878] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.104663][T21878] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.104738][T21878] bridge_slave_1: entered allmulticast mode [ 1000.106016][T21878] bridge_slave_1: entered promiscuous mode [ 1000.289871][T21878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.297587][T21878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.576334][T21878] team0: Port device team_slave_0 added [ 1000.662556][T21878] team0: Port device team_slave_1 added [ 1000.767308][T21878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.767323][T21878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.767341][T21878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.820847][T21878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.820860][T21878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.820878][T21878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1000.831408][T12665] Bluetooth: hci8: command tx timeout [ 1001.188182][T21951] FAULT_INJECTION: forcing a failure. [ 1001.188182][T21951] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.188989][T21951] CPU: 0 UID: 0 PID: 21951 Comm: syz.4.2030 Tainted: G L syzkaller #0 PREEMPT(full) [ 1001.189013][T21951] Tainted: [L]=SOFTLOCKUP [ 1001.189019][T21951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1001.189030][T21951] Call Trace: [ 1001.189036][T21951] [ 1001.189042][T21951] dump_stack_lvl+0x100/0x190 [ 1001.189070][T21951] should_fail_ex.cold+0x5/0xa [ 1001.189092][T21951] should_failslab+0xc2/0x120 [ 1001.189115][T21951] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1001.189141][T21951] ? lock_acquire+0x1d1/0x380 [ 1001.189163][T21951] ? kstrdup_const+0x63/0x80 [ 1001.189185][T21951] kstrdup+0x51/0xe0 [ 1001.189203][T21951] kstrdup_const+0x63/0x80 [ 1001.189226][T21951] alloc_vfsmnt+0xe5/0x710 [ 1001.189242][T21951] ? __pfx___might_resched+0x10/0x10 [ 1001.189264][T21951] clone_mnt+0x4b/0x930 [ 1001.189282][T21951] copy_tree+0xfc/0xbf0 [ 1001.189302][T21951] ? __pfx_down_write+0x10/0x10 [ 1001.189322][T21951] copy_mnt_ns+0x3fa/0x1180 [ 1001.189341][T21951] ? __pfx_copy_mnt_ns+0x10/0x10 [ 1001.189358][T21951] ? create_new_namespaces+0x30/0xac0 [ 1001.189385][T21951] create_new_namespaces+0xd3/0xac0 [ 1001.189407][T21951] ? bpf_lsm_capable+0x9/0x10 [ 1001.189423][T21951] ? security_capable+0x80/0x260 [ 1001.189449][T21951] unshare_nsproxy_namespaces+0xf2/0x220 [ 1001.189473][T21951] ksys_unshare+0x4a2/0xa70 [ 1001.189489][T21951] ? __pfx_ksys_unshare+0x10/0x10 [ 1001.189513][T21951] __x64_sys_unshare+0x31/0x40 [ 1001.189529][T21951] do_syscall_64+0x121/0x770 [ 1001.189556][T21951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.189572][T21951] RIP: 0033:0x7fb15279e199 [ 1001.189585][T21951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.189600][T21951] RSP: 002b:00007fb153719028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1001.189615][T21951] RAX: ffffffffffffffda RBX: 00007fb152a25fa0 RCX: 00007fb15279e199 [ 1001.189625][T21951] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1001.189634][T21951] RBP: 00007fb152835888 R08: 0000000000000000 R09: 0000000000000000 [ 1001.189643][T21951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1001.189652][T21951] R13: 00007fb152a26038 R14: 00007fb152a25fa0 R15: 00007ffe5e2fa778 [ 1001.189674][T21951] [ 1001.812686][T21878] hsr_slave_0: entered promiscuous mode [ 1001.817227][T21878] hsr_slave_1: entered promiscuous mode [ 1001.840634][T21878] debugfs: 'hsr0' already exists in 'hsr' [ 1001.840652][T21878] Cannot create hsr debugfs directory [ 1002.038188][T21963] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2030'. [ 1002.909007][T12665] Bluetooth: hci8: command tx timeout [ 1004.077544][T21993] usb usb3: usbfs: process 21993 (syz.4.2034) did not claim interface 3 before use [ 1004.989611][T12665] Bluetooth: hci8: command tx timeout [ 1005.072268][T21878] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1005.077371][T21878] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1005.077969][T21878] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1005.118291][T21878] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1005.283984][T21878] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1005.286412][T21878] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1005.385936][T21878] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1005.397754][T21878] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1006.059650][T22023] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2038'. [ 1006.568179][T22023] syz.5.2038 (22023) used greatest stack depth: 19896 bytes left [ 1006.818964][T21878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1007.200795][T21878] 8021q: adding VLAN 0 to HW filter on device team0 [ 1007.227434][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.227503][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1007.282347][T21433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.282415][T21433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1007.666612][T22046] FAULT_INJECTION: forcing a failure. [ 1007.666612][T22046] name failslab, interval 1, probability 0, space 0, times 0 [ 1007.666642][T22046] CPU: 0 UID: 0 PID: 22046 Comm: syz.8.2041 Tainted: G L syzkaller #0 PREEMPT(full) [ 1007.666664][T22046] Tainted: [L]=SOFTLOCKUP [ 1007.666669][T22046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1007.666679][T22046] Call Trace: [ 1007.666684][T22046] [ 1007.666691][T22046] dump_stack_lvl+0x100/0x190 [ 1007.666717][T22046] should_fail_ex.cold+0x5/0xa [ 1007.666738][T22046] should_failslab+0xc2/0x120 [ 1007.666762][T22046] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1007.666784][T22046] ? lock_acquire+0x1d1/0x380 [ 1007.666806][T22046] ? kstrdup_const+0x63/0x80 [ 1007.666827][T22046] kstrdup+0x51/0xe0 [ 1007.666845][T22046] kstrdup_const+0x63/0x80 [ 1007.666862][T22046] alloc_vfsmnt+0xe5/0x710 [ 1007.666876][T22046] ? __pfx___might_resched+0x10/0x10 [ 1007.666897][T22046] clone_mnt+0x4b/0x930 [ 1007.666918][T22046] copy_tree+0xfc/0xbf0 [ 1007.666938][T22046] ? __pfx_down_write+0x10/0x10 [ 1007.666959][T22046] copy_mnt_ns+0x3fa/0x1180 [ 1007.666978][T22046] ? __pfx_copy_mnt_ns+0x10/0x10 [ 1007.666995][T22046] ? create_new_namespaces+0x30/0xac0 [ 1007.667022][T22046] create_new_namespaces+0xd3/0xac0 [ 1007.667043][T22046] ? bpf_lsm_capable+0x9/0x10 [ 1007.667059][T22046] ? security_capable+0x80/0x260 [ 1007.667085][T22046] unshare_nsproxy_namespaces+0xf2/0x220 [ 1007.667109][T22046] ksys_unshare+0x4a2/0xa70 [ 1007.667125][T22046] ? __pfx_ksys_unshare+0x10/0x10 [ 1007.667149][T22046] __x64_sys_unshare+0x31/0x40 [ 1007.667173][T22046] do_syscall_64+0x121/0x770 [ 1007.667199][T22046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1007.667215][T22046] RIP: 0033:0x7f88d379e199 [ 1007.667229][T22046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1007.667244][T22046] RSP: 002b:00007f88d4692028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1007.667259][T22046] RAX: ffffffffffffffda RBX: 00007f88d3a25fa0 RCX: 00007f88d379e199 [ 1007.667269][T22046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1007.667278][T22046] RBP: 00007f88d3835888 R08: 0000000000000000 R09: 0000000000000000 [ 1007.667287][T22046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1007.667297][T22046] R13: 00007f88d3a26038 R14: 00007f88d3a25fa0 R15: 00007ffdbf0b7398 [ 1007.667318][T22046] [ 1008.496201][T22061] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2041'. [ 1010.361698][T22099] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1010.674597][T21878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1011.942891][T21878] veth0_vlan: entered promiscuous mode [ 1011.966732][T21878] veth1_vlan: entered promiscuous mode [ 1012.081706][T21878] veth0_macvtap: entered promiscuous mode [ 1012.118362][T21878] veth1_macvtap: entered promiscuous mode [ 1012.283922][T21878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1012.396261][T21878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1013.711447][ T49] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.711990][ T49] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.712028][ T49] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.712054][ T49] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.243799][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.243818][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.872610][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.872628][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.432799][T22167] FAULT_INJECTION: forcing a failure. [ 1015.432799][T22167] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.432827][T22167] CPU: 0 UID: 0 PID: 22167 Comm: syz.8.2053 Tainted: G L syzkaller #0 PREEMPT(full) [ 1015.432849][T22167] Tainted: [L]=SOFTLOCKUP [ 1015.432854][T22167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1015.432864][T22167] Call Trace: [ 1015.432870][T22167] [ 1015.432876][T22167] dump_stack_lvl+0x100/0x190 [ 1015.432906][T22167] should_fail_ex.cold+0x5/0xa [ 1015.432928][T22167] should_failslab+0xc2/0x120 [ 1015.432952][T22167] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1015.432975][T22167] ? lock_acquire+0x1d1/0x380 [ 1015.432997][T22167] ? kstrdup_const+0x63/0x80 [ 1015.433018][T22167] kstrdup+0x51/0xe0 [ 1015.433035][T22167] kstrdup_const+0x63/0x80 [ 1015.433053][T22167] alloc_vfsmnt+0xe5/0x710 [ 1015.433067][T22167] ? __pfx___might_resched+0x10/0x10 [ 1015.433088][T22167] clone_mnt+0x4b/0x930 [ 1015.433106][T22167] copy_tree+0xfc/0xbf0 [ 1015.433125][T22167] ? __pfx_down_write+0x10/0x10 [ 1015.433148][T22167] copy_mnt_ns+0x3fa/0x1180 [ 1015.433166][T22167] ? __pfx_copy_mnt_ns+0x10/0x10 [ 1015.433183][T22167] ? create_new_namespaces+0x30/0xac0 [ 1015.433210][T22167] create_new_namespaces+0xd3/0xac0 [ 1015.433232][T22167] ? bpf_lsm_capable+0x9/0x10 [ 1015.433248][T22167] ? security_capable+0x80/0x260 [ 1015.433275][T22167] unshare_nsproxy_namespaces+0xf2/0x220 [ 1015.433299][T22167] ksys_unshare+0x4a2/0xa70 [ 1015.433316][T22167] ? __pfx_ksys_unshare+0x10/0x10 [ 1015.433341][T22167] __x64_sys_unshare+0x31/0x40 [ 1015.433357][T22167] do_syscall_64+0x121/0x770 [ 1015.433381][T22167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.433397][T22167] RIP: 0033:0x7f88d379e199 [ 1015.433433][T22167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.433449][T22167] RSP: 002b:00007f88d4692028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1015.433465][T22167] RAX: ffffffffffffffda RBX: 00007f88d3a25fa0 RCX: 00007f88d379e199 [ 1015.433476][T22167] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1015.433485][T22167] RBP: 00007f88d3835888 R08: 0000000000000000 R09: 0000000000000000 [ 1015.433495][T22167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1015.433504][T22167] R13: 00007f88d3a26038 R14: 00007f88d3a25fa0 R15: 00007ffdbf0b7398 [ 1015.433525][T22167] [ 1016.454682][T22185] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2053'. [ 1021.875721][T22271] FAULT_INJECTION: forcing a failure. [ 1021.875721][T22271] name failslab, interval 1, probability 0, space 0, times 0 [ 1021.875758][T22271] CPU: 0 UID: 0 PID: 22271 Comm: syz.9.2068 Tainted: G L syzkaller #0 PREEMPT(full) [ 1021.875780][T22271] Tainted: [L]=SOFTLOCKUP [ 1021.875785][T22271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1021.875795][T22271] Call Trace: [ 1021.875801][T22271] [ 1021.875808][T22271] dump_stack_lvl+0x100/0x190 [ 1021.875835][T22271] should_fail_ex.cold+0x5/0xa [ 1021.875857][T22271] should_failslab+0xc2/0x120 [ 1021.875880][T22271] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1021.875902][T22271] ? lock_acquire+0x1d1/0x380 [ 1021.875926][T22271] ? kstrdup_const+0x63/0x80 [ 1021.875947][T22271] kstrdup+0x51/0xe0 [ 1021.875964][T22271] kstrdup_const+0x63/0x80 [ 1021.875981][T22271] alloc_vfsmnt+0xe5/0x710 [ 1021.876000][T22271] ? __pfx___might_resched+0x10/0x10 [ 1021.876021][T22271] clone_mnt+0x4b/0x930 [ 1021.876038][T22271] copy_tree+0xfc/0xbf0 [ 1021.876058][T22271] ? __pfx_down_write+0x10/0x10 [ 1021.876079][T22271] copy_mnt_ns+0x3fa/0x1180 [ 1021.876097][T22271] ? __pfx_copy_mnt_ns+0x10/0x10 [ 1021.876114][T22271] ? create_new_namespaces+0x30/0xac0 [ 1021.876141][T22271] create_new_namespaces+0xd3/0xac0 [ 1021.876163][T22271] ? bpf_lsm_capable+0x9/0x10 [ 1021.876179][T22271] ? security_capable+0x80/0x260 [ 1021.876205][T22271] unshare_nsproxy_namespaces+0xf2/0x220 [ 1021.876230][T22271] ksys_unshare+0x4a2/0xa70 [ 1021.876246][T22271] ? __pfx_ksys_unshare+0x10/0x10 [ 1021.876270][T22271] __x64_sys_unshare+0x31/0x40 [ 1021.876285][T22271] do_syscall_64+0x121/0x770 [ 1021.876309][T22271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.876325][T22271] RIP: 0033:0x7f9e4899e199 [ 1021.876339][T22271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1021.876353][T22271] RSP: 002b:00007f9e4985b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1021.876368][T22271] RAX: ffffffffffffffda RBX: 00007f9e48c25fa0 RCX: 00007f9e4899e199 [ 1021.876378][T22271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1021.876387][T22271] RBP: 00007f9e48a35888 R08: 0000000000000000 R09: 0000000000000000 [ 1021.876397][T22271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1021.876406][T22271] R13: 00007f9e48c26038 R14: 00007f9e48c25fa0 R15: 00007ffee11c66e8 [ 1021.876432][T22271] [ 1022.814745][T22285] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2068'. [ 1026.287075][T22328] vhci_hcd: not connected 4 [ 1028.267726][T22356] IPVS: length: 8 != 21224 [ 1028.592990][T22361] FAULT_INJECTION: forcing a failure. [ 1028.592990][T22361] name failslab, interval 1, probability 0, space 0, times 0 [ 1028.593019][T22361] CPU: 0 UID: 0 PID: 22361 Comm: syz.9.2080 Tainted: G L syzkaller #0 PREEMPT(full) [ 1028.593042][T22361] Tainted: [L]=SOFTLOCKUP [ 1028.593048][T22361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1028.593058][T22361] Call Trace: [ 1028.593063][T22361] [ 1028.593070][T22361] dump_stack_lvl+0x100/0x190 [ 1028.593097][T22361] should_fail_ex.cold+0x5/0xa [ 1028.593122][T22361] should_failslab+0xc2/0x120 [ 1028.593146][T22361] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 1028.593168][T22361] ? lock_acquire+0x1d1/0x380 [ 1028.593191][T22361] ? kstrdup_const+0x63/0x80 [ 1028.593213][T22361] kstrdup+0x51/0xe0 [ 1028.593231][T22361] kstrdup_const+0x63/0x80 [ 1028.593247][T22361] alloc_vfsmnt+0xe5/0x710 [ 1028.593262][T22361] ? __pfx___might_resched+0x10/0x10 [ 1028.593283][T22361] clone_mnt+0x4b/0x930 [ 1028.593301][T22361] copy_tree+0xfc/0xbf0 [ 1028.593321][T22361] ? __pfx_down_write+0x10/0x10 [ 1028.593341][T22361] copy_mnt_ns+0x3fa/0x1180 [ 1028.593360][T22361] ? __pfx_copy_mnt_ns+0x10/0x10 [ 1028.593377][T22361] ? create_new_namespaces+0x30/0xac0 [ 1028.593403][T22361] create_new_namespaces+0xd3/0xac0 [ 1028.593425][T22361] ? bpf_lsm_capable+0x9/0x10 [ 1028.593442][T22361] ? security_capable+0x80/0x260 [ 1028.593467][T22361] unshare_nsproxy_namespaces+0xf2/0x220 [ 1028.593492][T22361] ksys_unshare+0x4a2/0xa70 [ 1028.593508][T22361] ? __pfx_ksys_unshare+0x10/0x10 [ 1028.593532][T22361] __x64_sys_unshare+0x31/0x40 [ 1028.593547][T22361] do_syscall_64+0x121/0x770 [ 1028.593571][T22361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.593587][T22361] RIP: 0033:0x7f9e4899e199 [ 1028.593601][T22361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1028.593616][T22361] RSP: 002b:00007f9e4985b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1028.593631][T22361] RAX: ffffffffffffffda RBX: 00007f9e48c25fa0 RCX: 00007f9e4899e199 [ 1028.593641][T22361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1028.593650][T22361] RBP: 00007f9e48a35888 R08: 0000000000000000 R09: 0000000000000000 [ 1028.593659][T22361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1028.593668][T22361] R13: 00007f9e48c26038 R14: 00007f9e48c25fa0 R15: 00007ffee11c66e8 [ 1028.593689][T22361] [ 1029.502977][T22375] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2080'. [ 1030.215788][T22383] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1030.915066][T16268] Bluetooth: hci4: command 0x0406 tx timeout [ 1035.869896][ T32] INFO: task syz-executor:17007 blocked for more than 143 seconds. [ 1035.869919][ T32] Tainted: G L syzkaller #0 [ 1035.869928][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1035.869934][ T32] task:syz-executor state:D stack:24424 pid:17007 tgid:17007 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1035.869979][ T32] Call Trace: [ 1035.869984][ T32] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1035.869993][ T32] __schedule+0x1259/0x6920 [ 1035.870018][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1035.870045][ T32] ? irqentry_exit+0x24d/0xa10 [ 1035.870069][ T32] ? lock_acquire+0x1d1/0x380 [ 1035.870091][ T32] ? __pfx___schedule+0x10/0x10 [ 1035.870109][ T32] ? find_held_lock+0x2b/0x80 [ 1035.870127][ T32] ? schedule+0x225/0x2c0 [ 1035.870148][ T32] schedule+0xdd/0x2c0 [ 1035.870168][ T32] schedule_preempt_disabled+0x13/0x30 [ 1035.870187][ T32] __mutex_lock+0xccb/0x1bd0 [ 1035.870209][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1035.870234][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 1035.870259][ T32] ? net_generic+0x25/0x2a0 [ 1035.870275][ T32] ? net_generic+0xea/0x2a0 [ 1035.870290][ T32] ? net_generic+0xea/0x2a0 [ 1035.870310][ T32] ? nfsd_shutdown_threads+0x5b/0xf0 [ 1035.870326][ T32] nfsd_shutdown_threads+0x5b/0xf0 [ 1035.870344][ T32] nfsd_umount+0x3b/0x60 [ 1035.870362][ T32] deactivate_locked_super+0xbd/0x130 [ 1035.870381][ T32] deactivate_super+0xea/0x110 [ 1035.870399][ T32] cleanup_mnt+0x21f/0x450 [ 1035.870421][ T32] task_work_run+0x150/0x240 [ 1035.870446][ T32] ? __pfx_task_work_run+0x10/0x10 [ 1035.870470][ T32] exit_to_user_mode_loop+0x1d8/0x700 [ 1035.870486][ T32] ? rcu_is_watching+0x13/0xc0 [ 1035.870506][ T32] do_syscall_64+0x603/0x770 [ 1035.870529][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.870545][ T32] RIP: 0033:0x7f76b099f3d7 [ 1035.870558][ T32] RSP: 002b:00007ffff032c378 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1035.870573][ T32] RAX: 0000000000000000 RBX: 00007f76b0a34ccb RCX: 00007f76b099f3d7 [ 1035.870582][ T32] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffff032c430 [ 1035.870592][ T32] RBP: 00007ffff032c430 R08: 00007ffff032d430 R09: 00000000ffffffff [ 1035.870602][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffff032d4c0 [ 1035.870611][ T32] R13: 00007f76b0a34ccb R14: 00000000000d8d97 R15: 00007ffff032d500 [ 1035.870631][ T32] [ 1035.870759][ T32] [ 1035.870759][ T32] Showing all locks held in the system: [ 1035.870831][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 1035.870890][ T32] #0: ffffffff8fdec3a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1035.870963][ T32] locks held by kworker/u8:2/35: 4, on CPU#0: [ 1035.870975][ T32] #0: ffff88801e2c6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1035.871014][ T32] #1: ffffc90000ab7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1035.871051][ T32] #2: ffffffff91cbfc88 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1035.871113][ T32] #3: ffffffff91cd87c0 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 1035.871167][ T32] locks held by getty/5376: 2, on CPU#1: [ 1035.871177][ T32] #0: ffff8880388da0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1035.871283][ T32] #1: ffffc900032432e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1035.871324][ T32] locks held by syz-executor/5615: 2, on CPU#0: [ 1035.871334][ T32] #0: ffff88802d30c0e8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110 [ 1035.871374][ T32] #1: ffffffff90288840 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1035.871414][ T32] locks held by syz-executor/14462: 2, on CPU#0: [ 1035.871424][ T32] #0: ffff8880740440e8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110 [ 1035.871471][ T32] #1: ffffffff90288840 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1035.871508][ T32] locks held by syz-executor/17007: 2, on CPU#0: [ 1035.871518][ T32] #0: ffff88807df800e8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110 [ 1035.871557][ T32] #1: ffffffff90288840 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1035.871595][ T32] locks held by syz.0.1730/19484: 2, on CPU#0: [ 1035.871605][ T32] #0: ffffffff91d875c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1035.871640][ T32] #1: ffffffff90288840 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x1a3/0x1dc0 [ 1035.871682][ T32] locks held by syz-executor/20497: 4, last CPU#0: [ 1035.871693][ T32] #0: ffffffff8ff3cc50 (dup_mmap_sem){.+.+}-{0:0}, at: copy_process+0x4816/0x8380 [ 1035.871727][ T32] #1: ffff88807e738340 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x127/0x2370 [ 1035.871767][ T32] #2: ffff88803467b440 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x1c9/0x2370 [ 1035.871811][ T32] #3: ffffffff8fdec3a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 1035.871849][ T32] locks held by syz-executor/20828: 2, on CPU#0: [ 1035.871860][ T32] #0: ffff88807cc500e8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110 [ 1035.874364][ T32] #1: ffffffff90288840 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1035.874406][ T32] locks held by syz-executor/20961: 2, on CPU#0: [ 1035.874417][ T32] #0: ffff8880468940e8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xe2/0x110 [ 1035.874464][ T32] #1: ffffffff90288840 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 1035.874504][ T32] locks held by syz.8.2090/22445: 2, on CPU#0: [ 1035.874514][ T32] #0: ffffffff91cbfc88 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1035.874553][ T32] #1: ffffffff91cd87c0 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 1035.874761][ T32] locks held by syz.8.2090/22446: 2, on CPU#0: [ 1035.874772][ T32] #0: ffffffff91cbfc88 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1035.874809][ T32] #1: ffffffff91cd87c0 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 1035.874846][ T32] locks held by syz.4.2093/22456: 2, on CPU#0: [ 1035.874856][ T32] #0: ffffffff91cbfc88 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1035.874893][ T32] #1: ffffffff91cd87c0 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 1035.874987][ T32] locks held by syz.4.2093/22461: 2, on CPU#0: [ 1035.874997][ T32] #0: ffffffff91cbfc88 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1035.875035][ T32] #1: ffffffff91cd87c0 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 1035.875074][ T32] locks held by syz.4.2093/22464: 2, on CPU#0: [ 1035.875084][ T32] #0: ffffffff91cbfc88 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1035.875121][ T32] #1: ffffffff91cd87c0 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 1035.875160][ T32] locks held by syz.9.2094/22460: 2, on CPU#0: [ 1035.875170][ T32] #0: ffffffff91cbfc88 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1035.875207][ T32] #1: ffffffff91cd87c0 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 1035.875245][ T32] locks held by syz.9.2094/22463: 3, last CPU#0: [ 1035.875256][ T32] #0: ffffffff91cbfc88 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1035.875293][ T32] #1: ffffffff91cd87c0 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 1035.875331][ T32] #2: ffffffff8fdec3a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1035.875378][ T32] locks held by syz.9.2094/22465: 2, on CPU#0: [ 1035.875388][ T32] #0: ffffffff91cbfc88 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1035.875425][ T32] #1: ffffffff91cd87c0 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 1035.875471][ T32] locks held by syz.9.2094/22467: 2, on CPU#0: [ 1035.875481][ T32] #0: ffffffff91cbfc88 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1035.875518][ T32] #1: ffffffff91cd87c0 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 1035.875557][ T32] locks held by syz.9.2094/22469: 2, on CPU#0: [ 1035.875567][ T32] #0: ffffffff91cbfc88 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x323/0x7a0 [ 1035.875603][ T32] #1: ffffffff91cd87c0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x23/0xb0 [ 1035.875708][ T32] [ 1035.875712][ T32] ============================================= [ 1035.875712][ T32] [ 1035.875729][ T32] NMI backtrace for cpu 0 [ 1035.875742][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1035.875783][ T32] Tainted: [L]=SOFTLOCKUP [ 1035.875793][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1035.875810][ T32] Call Trace: [ 1035.875820][ T32] [ 1035.875832][ T32] dump_stack_lvl+0x100/0x190 [ 1035.875857][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1035.875879][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1035.875902][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1035.875952][ T32] sys_info+0x141/0x190 [ 1035.875967][ T32] watchdog+0xcb1/0x1030 [ 1035.875998][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1035.876020][ T32] ? __pfx_watchdog+0x10/0x10 [ 1035.876041][ T32] ? __kthread_parkme+0x18f/0x230 [ 1035.876066][ T32] ? kthread+0x13a/0x450 [ 1035.876080][ T32] ? __pfx_watchdog+0x10/0x10 [ 1035.876100][ T32] kthread+0x373/0x450 [ 1035.876115][ T32] ? __pfx_kthread+0x10/0x10 [ 1035.876132][ T32] ret_from_fork+0x730/0xd60 [ 1035.876147][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1035.876162][ T32] ? __switch_to+0x800/0x10f0 [ 1035.876180][ T32] ? __switch_to_asm+0x39/0x70 [ 1035.876194][ T32] ? __pfx_kthread+0x10/0x10 [ 1035.876211][ T32] ret_from_fork_asm+0x1a/0x30 [ 1035.876233][ T32] [ 1036.014545][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1036.821138][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1036.831884][ T32] Tainted: [L]=SOFTLOCKUP [ 1036.836188][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1036.846224][ T32] Call Trace: [ 1036.849490][ T32] [ 1036.852419][ T32] dump_stack_lvl+0x100/0x190 [ 1036.857102][ T32] vpanic+0x553/0x970 [ 1036.861082][ T32] ? __pfx_vpanic+0x10/0x10 [ 1036.865576][ T32] panic+0xd1/0xe0 [ 1036.869280][ T32] ? __pfx_panic+0x10/0x10 [ 1036.873681][ T32] ? nmi_trigger_cpumask_backtrace+0x263/0x2a0 [ 1036.879822][ T32] ? nmi_trigger_cpumask_backtrace+0x26d/0x2a0 [ 1036.885957][ T32] ? watchdog.cold+0x1ec/0x234 [ 1036.890708][ T32] watchdog.cold+0x1fd/0x234 [ 1036.895285][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1036.901080][ T32] ? __pfx_watchdog+0x10/0x10 [ 1036.905745][ T32] ? __kthread_parkme+0x18f/0x230 [ 1036.910761][ T32] ? kthread+0x13a/0x450 [ 1036.914985][ T32] ? __pfx_watchdog+0x10/0x10 [ 1036.919649][ T32] kthread+0x373/0x450 [ 1036.923700][ T32] ? __pfx_kthread+0x10/0x10 [ 1036.928272][ T32] ret_from_fork+0x730/0xd60 [ 1036.932847][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1036.937940][ T32] ? __switch_to+0x800/0x10f0 [ 1036.942603][ T32] ? __switch_to_asm+0x39/0x70 [ 1036.947381][ T32] ? __pfx_kthread+0x10/0x10 [ 1036.951957][ T32] ret_from_fork_asm+0x1a/0x30 [ 1036.956712][ T32] [ 1036.959774][ T32] Kernel Offset: disabled [ 1036.964093][ T32] Rebooting in 86400 seconds..