last executing test programs: 12.556966675s ago: executing program 2 (id=221): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400000000000401, 0x80}, 0x8, 0x100000) landlock_restrict_self$auto(r0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x7}, 0x9, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) landlock_restrict_self$auto(r1, 0x0) r2 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x3) madvise$auto(0x0, 0x200007, 0x19) mlockall$auto(0x1) mmap$auto(0x0, 0x4, 0xa, 0x1002000000000eb1, r2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, 0x0) setfsuid$auto(0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/controlC2\x00', 0x408141, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000040)=0x5) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x123801, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r4, 0xc008551c, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x5, 0x0) 10.98822194s ago: executing program 2 (id=229): lchown$auto(&(0x7f0000000000)='.\x00', 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) msync$auto(0x0, 0x200, 0x1) r0 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/snd/pcmC1D1p\x00', 0x1, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) 10.794919267s ago: executing program 2 (id=232): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macsec0\x00'}) clone$auto(0x4, 0x1, &(0x7f0000000000)=0x400, &(0x7f0000000040)=0x4, 0x9) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f0000000080)={0xffad, 0x8, 0x82, 0x401, 0x5}) r1 = gettid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xfffbffff}, 0x6, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket(0x29, 0x2, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r2, 0x8910, 0x24) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r4, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r4, 0x40046f41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0880005cd1d652ba9262425634dc766d7c9f61d54db4f35b1ee27fee5f7db49d6c68768f5ade885a7645a473c8b19a6e507cffd5a8", @ANYRES16=r6, @ANYBLOB="1b0026bd7400fddbdf2503000000040008000c000380080006800400008012000100898771f1c19f17790485908286dd000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) clone$auto(0x1, 0x1, 0x0, 0x0, 0x2) fstat$auto(r0, &(0x7f00000000c0)={0x3, 0x9, 0x3fb3, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x7ff, 0xff, 0x39, 0x401, 0x6, 0x1, 0x8000, 0x10000, 0x8}) 7.613122608s ago: executing program 2 (id=244): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x83) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)=@bpf_attr_1={0xffffffffffffffff, 0x21f, @next_key=0x2f17, 0xff}, 0x6) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)="b2", 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) preadv2$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x80000000009}, 0x6, 0xffffffffffffffff, 0x3ffff, 0x2e) write$auto(0x3, 0x0, 0xfffffdef) 5.073561865s ago: executing program 3 (id=253): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/set_event\x00', 0x48382, 0x0) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0x2a, 0x2, 0x6) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @rand_addr=0x64010102}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) writev$auto(r0, &(0x7f0000001480)={0x0, 0xe}, 0x6) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda\x00', 0xa8440, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x3, 0x4) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon7\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="18000000", @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x40000f0) write$auto(r2, &(0x7f0000000000)='\xde\x00', 0xfded) pwrite64$auto(0xc8, &(0x7f00000011c0)='\vX\xb5n\x91\vI\x1eRN8\x99\x88\xca\xd9\xec\x1epJ\"ds\x1cJr\xde:\x00!\r>\x94\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18\x89\x15\x0e\x1b\x95\xaf\xee\xe69\x8d(<\xc7+\x83\xfcQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9\xb7\x9d\xb6r9\x02\x00\x00\x00\x00\x00\x00\xc3\xc3\xdbS\xdc\xfc\x19\xba\xab\xe4\x8b\xdeT3^\a\xb2\xf3}\t4\xa2^\xe4b?\xb2Q\x8d\x8c\x83\x8e\xfe\x8e\b\x93M\x9e3\xa5`hN\xe36\xc3\x99\xe7L\x12\xaar}\x90\x05>\xab\xc9\xb7^\xcc\r\xb9V\x10\xa5\x81\x96e\x80\'\xc6\x06', 0x10, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu0/trace\x00', 0x1a6b75d6388a8712, 0x0) write$auto(0x3, 0x0, 0x0) 4.709326904s ago: executing program 1 (id=254): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x0) r0 = socket(0x1d, 0x3, 0x1) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) setsockopt$auto(r0, 0x65, 0x1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x9, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x6) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/module/i915/parameters/mitigations\x00', 0x88302, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/smbd_max_fragmented_recv_size\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/184, 0xb8) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/bank6\x00', 0x2101, 0x0) write$auto(r4, &(0x7f0000000240)='802.15.4 MAC\x00', 0x7) r5 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) r6 = eventfd$auto(0x6) copy_file_range$auto(r5, 0x0, r6, 0x0, 0x8000000000000002, 0x0) ioctl$auto_MEMGETINFO(r5, 0x80204d01, &(0x7f0000000140)={0x4, 0x8a0, 0x3, 0xd4, 0x6}) r7 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r7, &(0x7f0000000200)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdM\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss$ \x93\xff\xd9aze\x9a\xa4f5\x7f\xec\xa1\xf4\x85\xc8\x96\xb8\x88\x92@{\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000005) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c804}, 0x240480b0) write$auto(r7, &(0x7f00000000c0)='\xc4\x1dR\x00\x003\x1bO\xbb\x98)\x7fTa1\xa3\xd0\x89\x1e\\\xff', 0x8587) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x103000, 0x12a) 4.605450468s ago: executing program 2 (id=255): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r0, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x5, 0x7, 0x2) unshare$auto(0x40000080) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) r2 = socket(0x11, 0x3, 0x9) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r4 = io_uring_setup$auto(0x9, 0x0) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="812b6ed8f7d8d9e8738a991b9adfefff7f7597304476d6c7c864ca74fb784e13ede606ba22c5069ab344d12707c1dea4c8eeeee4b17aa8dd8269b4a72300093a0e8c40a679d27f871ce30001000000000000ffab2484d1d49af20d4db807521c04698a80c94ad1ae0431063ce601efe10bc07a8c72342407be1cd47737638634421dea89144ef08ef56afaf57a", @ANYRES16=0x0, @ANYBLOB="01002dbd7000fedbdf25070000000500080007000000050012000400000008000c000d00000008001d00", @ANYRES32=r4, @ANYBLOB="0500120006000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4081}, 0x4000084) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video32\x00', 0x40002, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) shmctl$auto(0x7, 0xb, &(0x7f00000004c0)={{0x6000000, 0xffffffffffffffff, 0xee01, 0x4, 0x6, 0x9, 0x2}, 0x59, 0x2, 0x5, 0x5, @raw, @raw=0x7fff, 0xde1, 0x0, &(0x7f0000000340)="516c311edb59033170402fc7bee851422175b7a3492d334db0c01fb7f1e90a432b1db309be6d6c3f7b3f75195d0ae6d2086bbf36b627ae345e7cc2a45d75c6b7ffdc9d8f7220554f3b8077cd74350ad2928af6628cfb6a6d3118ab328cee7aaf867cd4375895c3ae5671ceebdcb7e04320b6ec5bc8487277cc8d9f6b299005a6b28ed42c6e491b5e19e335b4887d712f72490308b1768b21f87ef2af428e8d71a05882b8b6f46ab9fc83d8fde2a50651eb6776f6bea6594ffefb97319141", &(0x7f0000000440)="d78ec6059bb19f1322fdd937dbf3a1f636dc52fe560cfbdbb7766055c4f056bf05223177920c2fc57d305202523644568e163351dc262fc3c2bf4f016dbe86beea4b87a7b5e34b0f6cb8a962"}) waitid$auto_P_PIDFD(0x3, r3, &(0x7f0000000540)={@siginfo_0_0={0x4, 0x10001, 0x55cf, @_sigchld={0x0, r5, 0xfffffff7, 0x0, 0x1}}}, 0x81, &(0x7f00000005c0)={{0xffb, 0x9}, {0xf, 0x6}, 0x55f1cc24, 0x5, 0x7, 0x2, 0x8, 0x1, 0x1000, 0xd239, 0x7fff, 0x9, 0xd09, 0x7, 0x6ff, 0x40f6}) futex$auto(&(0x7f0000000080)=0x1, 0x6, 0x8, &(0x7f0000000100)={0x8000000000000001, 0x8}, &(0x7f0000000200)=0x2, 0x5) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) 4.580242625s ago: executing program 3 (id=256): mmap$auto(0x0, 0x6, 0x9, 0x19b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x0, 0x0) mmap$auto(0x0, 0x202000b, 0x2, 0xeb3, r0, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(r1, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0xd8}, 0x1, 0x0, 0x0, 0x48055}, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto(0xffffffffffffffff, 0x200, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xead7, 0xffffffffffffffff, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x8000000000000002, 0xfd, 0x11, 0xffffffffffffffff, 0x64b3) r2 = socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r3 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xe, 0x5, 0xd}, 0x9, 0x2008) r4 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000280), r3) sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYRES64=r2, @ANYRES16=r4, @ANYRESOCT=r3, @ANYRES64=r2], 0x28}, 0x1, 0x0, 0x0, 0x2000c044}, 0x24040000) r5 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) r6 = open_by_handle_at$auto(r5, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) ioctl$auto_TIOCCONS2(r5, 0x541d, 0x0) unshare$auto(0x40000080) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x800, 0x0) madvise$auto(0x7, 0x7fffffffffffffff, 0xa) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000200)="54007d36c48c1d32d1b5607de266affb8b9af0d92a5c3938eaa99d6a9ce8") 3.992240486s ago: executing program 3 (id=257): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0xb9, 0x44f, 0xa, 0x1, 0x1007181, 0x8a0d, 0x5, 0x10007, 0x7, 0x89, 0x29, 0x4, 0x1ffffffffffe, 0xfffffffffffff340, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffb, 0x6, 0x401, 0x22402, 0x9, 0xfffffffd, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x70e2, 0x0, 0x3, 0xb7, 0x0, 0x0, 0x8, 0x4, 0x9, 0x100000, 0x10004, 0x15b, 0x7, 0x1fc, 0x0, 0x10000000000002, 0x0, 0x0, 0x46, 0x0, 0x3a, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x8, 0x0, 0x0, 0x1, 0x2, 0xfffffffffffffffc, 0x3, 0xe, 0x0, 0x0, 0x0, 0xa53, 0xbd9, 0xfffffffffffffffd]}, 0x7, 0xd) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffff7effffd04, &(0x7f00000001c0)) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) 3.82260891s ago: executing program 1 (id=258): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyr1\x00', 0x80200, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2504000012040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r1, 0x8, 0x0) ioctl$auto_TIOCMGET(r0, 0x5415, &(0x7f0000000240)="8c138e73727869c37e2acac4cbc59e67e0a89f4da083ec710956a8173e9d7143ba1ecb9d37fd8722c3f8c176c1cd150b4f6f866a34e2520e27f58a19e206acd35cb910742d280916f3650bf401e1f2bdd73929a3210e1f216ce5179acff73330045a851373ef9915a21c09ce72ec04c574ca") openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) socket(0x6, 0x1, 0x3ad2dd5) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x22001, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) pread64$auto(0xffffffffffffffff, &(0x7f0000000040)='/dev/tty0\x00', 0x3, 0xe9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) 3.807845692s ago: executing program 3 (id=259): bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0xfff, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee) unshare$auto(0x40000080) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x84) semctl$auto(0x2, 0x5, 0x13, 0x9) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) socket(0x2b, 0x5, 0xfffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_NOTIFY(r1, 0x402, 0x100000001) r3 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r3, &(0x7f0000000440)="11000000000000000000000000000100", 0x10) pwrite64$auto(0xc8, 0x0, 0xe, 0x4) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) fsopen$auto(0x0, 0x1) prctl$auto(0x38, 0x3, r0, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r5, 0x80085502, 0x0) shutdown$auto(0x200000003, 0x2) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) setsockopt$auto(0xffffffffffffffff, 0x100, 0x5, &(0x7f0000000040)='#)@$$:]+)]\x00', 0x8001) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) 3.642579609s ago: executing program 0 (id=260): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001300)='/dev/loop10\x00', 0x8000, 0x0) ioctl$auto_BLKGETSIZE64(r0, 0x80081272, &(0x7f0000001340)=0x2e72) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) (async) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000001040)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000001080)="7a47301037954c081c9a0bb04ef84993eab91abe1686f43e43d786e91365f04455bd620de9f3fb6d25e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc3756ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba259b12a0db9acf178c9182899f8360960a04ab85d23de405dad1c35058e30a98cc936ec82e442659cbfa3d11ff0a4e108dcfd7cec18e4f0c89ece6879d06808e003d602efa44c84360582e36aac42dab90d72") (async) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x103342, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) read$auto(0x3, 0x0, 0x8080) readv$auto(r2, &(0x7f0000000240)={0x0, 0x9}, 0x3) (async) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x6d8e40, 0x0) (rerun: 32) 2.85574506s ago: executing program 3 (id=261): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fda, 0x3, 0x7fffffffb000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1ac}}, 0x4004) r0 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9}, 0x3) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) mmap$auto(0x0, 0x202000a, 0x4005, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0x4000007, 0x3fd7, 0x0, 0x20000020000000) io_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000040)={0x4, 0x2, [0x1, 0xfffffffa]}) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/machinecheck/machinecheck0/monarch_timeout\x00', 0x2, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000140)="33aa0d7191af", 0x6) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/002/001\x00', 0x4a901, 0x0) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x40, 0x0) ioctl$auto_USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000000040)=0x1) 2.77947524s ago: executing program 0 (id=262): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000002c0)={{@raw=0x5, 0x7aabb7ea, 0x0, 0xa2, "c6e47a44a36664a5e709f0e4c97056bc9fa32c617bb88dc98fa7591aefc4647f5af349f8e1e79c823b22958f"}, 0x1, @enumerated=@item=[0x5, 0x1, 0x400001, 0xc, 0x4, 0x6, 0x0, 0x8, 0x4, 0x3, 0x7, 0x0, 0x3, 0x40, 0x9, 0x40, 0x5, 0x4, 0x8, 0x7, 0x8, 0x3, 0x6820, 0x6ef, 0x9efe, 0x6, 0x72, 0x8, 0x5, 0x931c, 0x2f, 0x3, 0xff, 0xfffffffb, 0x80000000, 0x74814ca1, 0x0, 0xd0, 0x20, 0x3, 0x6, 0x10001, 0x5, 0x0, 0xffffffd9, 0x9, 0x3, 0x10, 0x3, 0x12, 0x6578, 0xfffffff9, 0x2, 0x1b, 0xa9, 0x1006, 0x7, 0x3, 0xca92, 0x82, 0x9, 0x2, 0xa, 0xb4b3, 0x2, 0x7, 0x3ff, 0x6, 0x5, 0x9, 0x63a4183b, 0x0, 0x4d84, 0x3bc, 0x2, 0x0, 0x8, 0x10, 0x10000, 0x30f5, 0x8000, 0x56f, 0x7, 0x4, 0x1ff, 0x10001, 0x3, 0xffff, 0x40, 0x17, 0x8, 0x6, 0x6, 0x5, 0x1ff, 0x65bb, 0x29, 0x7, 0xfffffffe, 0x3, 0x5, 0x2, 0x3, 0xf2, 0xe, 0x0, 0x6, 0xffffffff, 0x0, 0xa896, 0x2, 0x1, 0x200, 0x7, 0x2, 0x8, 0x4, 0xf04, 0x6, 0x3, 0xe9b, 0x12d, 0x9, 0x4, 0x5, 0x3, 0x8, 0x40000000], "4570dcfd140074f863fc1385c4fd7abe6fce96c0b442897f58fd7d975d164deff4eef5b9f9173fa400163669eae95125d4bd68ca00000000000000008d501b1329af8d4108ac0400000000040000a1b2dfae0f309c6ea588833d7d134b13d8cb3ef95bf5ed43801c280c02a5a853512e6f730d43226f00af1c5ac268ecc1d18f"}) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x1d, 0x3, 0x1) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x2710, 0xfffffffffffffffc, 0x0) getsockopt$auto(r1, 0x65, 0x7, 0x0, 0x0) msgctl$auto_IPC_INFO(0x10000, 0x3, 0x0) keyctl$auto(0x40021, 0x0, 0x5, 0x0, 0x7) socket(0x18, 0x3, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') open(&(0x7f0000000140)='./file0\x00', 0x100880, 0x1c5) io_uring_setup$auto(0x6, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x1, 0x2, 0x10, 0x0, 0xf2a7214) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x8fb5) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a4, 0x0) r3 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/dri/vkms/internal_clients\x00', 0xa8201, 0x0) lseek$auto(r3, 0x9, 0x0) 2.751242819s ago: executing program 1 (id=263): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000002c0)={{@raw=0x5, 0x7aabb7ea, 0x0, 0xa2, "c6e47a44a36664a5e709f0e4c97056bc9fa32c617bb88dc98fa7591aefc4647f5af349f8e1e79c823b22958f"}, 0x1, @enumerated=@item=[0x5, 0x1, 0x400001, 0xc, 0x4, 0x6, 0x0, 0x8, 0x4, 0x3, 0x7, 0x0, 0x3, 0x40, 0x9, 0x40, 0x5, 0x4, 0x8, 0x7, 0x8, 0x3, 0x6820, 0x6ef, 0x9efe, 0x6, 0x72, 0x8, 0x5, 0x931c, 0x2f, 0x3, 0xff, 0xfffffffb, 0x80000000, 0x74814ca1, 0x0, 0xd0, 0x20, 0x3, 0x6, 0x10001, 0x5, 0x0, 0xffffffd9, 0x9, 0x3, 0x10, 0x3, 0x12, 0x6578, 0xfffffff9, 0x2, 0x1b, 0xa9, 0x1006, 0x7, 0x3, 0xca92, 0x82, 0x9, 0x2, 0xa, 0xb4b3, 0x2, 0x7, 0x3ff, 0x6, 0x5, 0x9, 0x63a4183b, 0x0, 0x4d84, 0x3bc, 0x2, 0x0, 0x8, 0x10, 0x10000, 0x30f5, 0x8000, 0x56f, 0x7, 0x4, 0x1ff, 0x10001, 0x3, 0xffff, 0x40, 0x17, 0x8, 0x6, 0x6, 0x5, 0x1ff, 0x65bb, 0x29, 0x7, 0xfffffffe, 0x3, 0x5, 0x2, 0x3, 0xf2, 0xe, 0x0, 0x6, 0xffffffff, 0x0, 0xa896, 0x2, 0x1, 0x200, 0x7, 0x2, 0x8, 0x4, 0xf04, 0x6, 0x3, 0xe9b, 0x12d, 0x9, 0x4, 0x5, 0x3, 0x8, 0x40000000], "4570dcfd140074f863fc1385c4fd7abe6fce96c0b442897f58fd7d975d164deff4eef5b9f9173fa400163669eae95125d4bd68ca00000000000000008d501b1329af8d4108ac0400000000040000a1b2dfae0f309c6ea588833d7d134b13d8cb3ef95bf5ed43801c280c02a5a853512e6f730d43226f00af1c5ac268ecc1d18f"}) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x1d, 0x3, 0x1) r2 = socket(0x15, 0x5, 0x0) getsockopt$auto(r2, 0x114, 0x2710, 0xfffffffffffffffc, 0x0) getsockopt$auto(r1, 0x65, 0x7, 0x0, 0x0) msgctl$auto_IPC_INFO(0x10000, 0x3, 0x0) keyctl$auto(0x40021, 0x0, 0x5, 0x0, 0x7) socket(0x18, 0x3, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) symlink$auto(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') open(&(0x7f0000000140)='./file0\x00', 0x100880, 0x1c5) io_uring_setup$auto(0x6, 0x0) io_uring_enter$auto(0xffffffffffffffff, 0x1, 0x2, 0x10, 0x0, 0xf2a7214) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x8fb5) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a4, 0x0) r3 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/dri/vkms/internal_clients\x00', 0xa8201, 0x0) lseek$auto(r3, 0x9, 0x0) 1.999979645s ago: executing program 0 (id=264): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x83) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)=@bpf_attr_1={0xffffffffffffffff, 0x21f, @next_key=0x2f17, 0xff}, 0x6) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)="b2", 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) write$auto(0x3, 0x0, 0xfffffdef) 1.724893407s ago: executing program 1 (id=265): socket(0xa, 0x1, 0x84) futex$auto(&(0x7f0000000080)=0x2948, 0x9, 0x2948, 0x0, 0x0, 0x5) futex$auto(&(0x7f0000000000)=0xf0fe, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x4000000) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r0) sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, r1, 0xa01, 0x70bd2b, 0x25dfdbfb, {}, [@TASKSTATS_CMD_ATTR_DEREGISTER_CPUMASK={0xe, 0x4, 'N,SKSTATS\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x109801, 0x0) ioctl$auto(r2, 0x9210640b, 0xffffffffffffffff) prctl$auto_PR_SET_MM_ARG_START(0xfffffffb, 0x8, 0xffffffffffffffff, 0x2, 0x51d) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto(r3, 0x1000, 0x1e2) socket(0xa, 0x3, 0xff) r4 = socket(0xa, 0x3, 0xff) setsockopt$auto(0x400000000000003, 0x29, 0x16, 0x0, 0x20056b) close_range$auto(0x2, 0x8, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="200026bd7000fe0000"], 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000380), r4) sendmsg$auto_NFSD_CMD_VERSION_SET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NFSD_A_SERVER_PROTO_VERSION={0x4}, @NFSD_A_SERVER_PROTO_VERSION={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000001}, 0x200040d0) r7 = socket(0x1d, 0x2, 0x7) r8 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x14, r8, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfd3f9}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r8, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @dev={0xac, 0x14, 0x14, 0x41}}, @TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @multicast1}, @TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @rand_addr=0x64010102}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @private=0xa010100}, @TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @private0}, @TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @empty}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x40048c0) bind$auto(r7, &(0x7f0000000000)=@can, 0x6a) 1.627843018s ago: executing program 3 (id=266): unshare$auto(0x40000080) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000040), r0) sendmsg$auto_KSMBD_EVENT_RPC_REQUEST(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r1, 0x10, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0c1}, 0x4000000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0x9eb3, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) mmap$auto(0x4, 0x7, 0x3, 0x1d, 0xffffffffffffffff, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyr5\x00', 0x0, 0x0) ioctl$auto_TIOCSWINSZ2(r5, 0x5414, 0x0) ioctl$auto(r3, 0x1265, r2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8a241, 0x0) bpf$auto(0x5, 0x0, 0x39) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/memory.max_usage_in_bytes\x00', 0x62181, 0x0) writev$auto(r6, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) 1.222979527s ago: executing program 1 (id=267): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000004c0)='}[,&*}\x00', &(0x7f0000000340)='n\x00L\xea\xb1\xc6\x00\x00\x00', 0x1, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/234, 0xea) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1a, 0x6, 0xa) r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/uprobe_events\x00', 0x2881, 0x0) open(&(0x7f0000000800)='}[,&*}\x00', 0x22240, 0x154) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x40000, 0x0) msgctl$auto_IPC_INFO(0x8, 0x3, 0x0) ioctl$auto(r3, 0x560a, r3) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) getsockopt$auto_SO_SNDBUF(r2, 0x3, 0x7, &(0x7f00000002c0)='/sys/kernel/debug/tracing/uprobe_events\x00', &(0x7f0000000300)=0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x20) 791.38872ms ago: executing program 0 (id=268): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xb2, 0x2, 0x6, 0x10, 0x5, 0x7ff, 0x8000, 0x1, 0x1, 0x202, 0xd, 0xbca7, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x6b4, [0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x20000000000, 0x0, 0x4, 0x2, 0x3169b201, 0x0, 0x3, 0xfffffffffffffc01, 0x5, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x200000000000000, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x101, 0x0, 0x20000000000000, 0x40000000000000, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1) r0 = socket(0x10, 0x3, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0x1002}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0xfe, 0x0) r2 = socket(0xa, 0x2, 0x0) setsockopt$auto(r2, 0x29, 0x30, 0x0, 0x56b) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x84) keyctl$auto(0x6, 0xfffffbfffffffffe, 0x0, 0x32, 0xfff) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="bfcd4738b564a2ff3b160bbe43260aec9633"], 0x1ac}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) rename$auto(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mkdir$auto(&(0x7f0000000000)='./file1\x00', 0x4) renameat2$auto(r3, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r4 = socket(0x10, 0x2, 0xf) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r4, 0xffffffff}, 0xd) 538.934449ms ago: executing program 2 (id=269): bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x10001, 0xfff, 0xc, 0xffffffffffffffff, 0x9, 0x7ff}, 0xee) unshare$auto(0x40000080) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x84) semctl$auto(0x2, 0x5, 0x13, 0x9) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) socket(0x2b, 0x5, 0xfffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_NOTIFY(r1, 0x402, 0x100000001) r3 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r3, &(0x7f0000000440)="11000000000000000000000000000100", 0x10) pwrite64$auto(0xc8, 0x0, 0xe, 0x4) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0x5, 0x2000000000000002, 0x9, 0x8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) fsopen$auto(0x0, 0x1) prctl$auto(0x38, 0x3, r0, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x123000, 0x0) ioctl$auto_USB_RAW_IOCTL_EVENT_FETCH(r5, 0x80085502, 0x0) shutdown$auto(0x200000003, 0x2) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) setsockopt$auto(0xffffffffffffffff, 0x100, 0x5, &(0x7f0000000040)='#)@$$:]+)]\x00', 0x8001) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) 225.28364ms ago: executing program 0 (id=270): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000040), 0x30000, 0x0) shmctl$auto_SHM_STAT_ANY(0x161635ae, 0xf, &(0x7f0000000200)={{0xae0, 0xee01, 0xee01, 0xb, 0x8, 0x9, 0xfff5}, 0x0, 0x0, 0x100000001, 0xc, @inferred=0x0, @inferred=0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000080)="c687ed26c5dc0a2892359b0b473d29c8e2fe9a91853426205f0e987aa9dbbf0ff4d37b94522664651ad69423b4b2581abce20fd1e7772709cd95decec357036ebe321c74fc424af6e76bf28e6f788aeaec96600e88431881c2a4637c03e5a7408bc55fafd92d04dc30596e066a72f929aeb1872615ca420771c08f785a6ddc1ada67e90e76d7ab33f641ed8bd2b0eeb8185339f0c22edd19317ad7c65f0e9a924c964e793502b0262629b8d0b67ed7c39280485a6fae80b207bb1ffc8fe8eb5dfb449b6e17924d68ca13ad1757f08a13a7730c4ea805b4", &(0x7f0000000180)="16e286d9cfd0dd567fb3334d2ebe2fde521103da24bfd91ee05e42907e5590aac11a034bd13a70b23dce3a004ab52ea3ba239538c854009c454eb85ca05f8aa9debc697776a44e6bc7788ff860b088823a0f568acc07349f6b3eeb08633e22bcabab4efbf71ab6111c7fda6397"}) r6 = waitid$auto_P_PGID(0x2, 0x0, &(0x7f0000000280)={@_si_pad}, 0x4, &(0x7f0000000300)={{0x3, 0x5}, {0x6e5c3c3b, 0x7fff}, 0x4, 0x8, 0x4, 0x4, 0x7fffffff, 0x6c, 0x6, 0x8, 0x9, 0x7, 0xb, 0x3, 0x8000, 0x1a}) r7 = prctl$auto_PR_SET_SECCOMP(0x16, 0x4, 0x3, 0x10001, 0x8000) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000018c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001880)={&(0x7f00000003c0)={0x1498, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_UNSPEC={0x69, 0x0, "f9f6964fb8bce27cfbfae61271cafde06f1a85b47c7be41c7b837e410da9a474a64650e1f56135e896de69b3e0f268c7730db97641aa48619ce751e95c4128d6f57dc2b2b4b3be28c767844e13fa5b52a0ab37d5fd24d5f2d74294b1d87f471742ac45d670"}, @TIPC_NLA_NODE={0x31e, 0x6, 0x0, 0x1, [@nested={0x6a, 0x35, 0x0, 0x1, [@generic="c11c6b7aea5fcfc6186991b82c1f0fa08a3867b9036446dda3a6989402f91a2f470e7437aa1a31fa74ddcbc4f4efa995b75590170982392e57b6789376428de181062067a90333675b435d307ce783a6281400e23d8efa1233c7851fe5c729d3c763", @nested={0x4, 0x7d}]}, @nested={0x28, 0xa1, 0x0, 0x1, [@typed={0x8, 0x105, 0x0, 0x0, @u32=0x6}, @typed={0x14, 0x4b, 0x0, 0x0, @ipv6=@private0}, @nested={0x4, 0x157}, @typed={0x4, 0x146}]}, @typed={0x8, 0xbf, 0x0, 0x0, @fd=r1}, @generic="22b455612e295f232642930fb6ff10d3e457bc7662eddc64d162b886f978f37ec4471665ce6ac109e0c1c476d1808caa58eeb5bf95fc10acc5d5362d6d99a703f405876651c3d0cc0fa91cb6d2886c457b2c5ce9422b59249c884e26c5e1389086803efbb368c73754175a78a5cca3fced4b632f2883f91a83cea877c80089092b78d353d7302dca0ca0781d4e3f05fe5895f52bb4da04f289e819fcc8f3ca", @typed={0x8, 0x34, 0x0, 0x0, @uid=r2}, @nested={0x150, 0xc2, 0x0, 0x1, [@generic="95421a98fc1ce0fe7b780c8a843582c3dda446aa21c789bf97f45e409b99440696a366ca0dbd3f6923f8f2a2a12f4b6d2c2f107232ca70391ee3ad9a671142fc2c96402f06edb26109dd", @typed={0x8, 0x61, 0x0, 0x0, @pid=r6}, @typed={0xa4, 0x13b, 0x0, 0x0, @binary="f7e90b15decbfa42a5aa98a5732bf95c9e82741e26a81bb9af32cc5ab95cc07eeb3446cbda9865f2e420edd2ff1c4bb078447b88bb7ce5876afbd4e8c5635e205d23055a1a55bdd44f3407641d28445a0a2416bbb7e9fd0455439b70647ea7e931bb30eb6b6bfcbe3c5f3072f2c23eb5d4b17317c39435fca651018dc73d8da1e0b6db0e8447237eac22945d2becf3caf2b1cddf720fca56d3407f4acc17bb50"}, @nested={0x4, 0x120}, @generic="4e2bf126991db61bf4aa474de0ef033bf813adb66064adb9b6d94f00e0d4b87fa64d213f65a4958906716140fec0e438b66ad4b30f7869809cc2b2fc19c2b6b3081543a8b1c0bb5e74172a4c75987ae840a1"]}, @generic="8244743987c2db72130438b31b933567598830727444084fdb51b5c14de4d7fa0cc135a67f7836df5f4976d64930290fb4ff2339a4398cfeee477f7cd271aa88428e900cb01a63fb66acdb61fa7adf66b20b9d7edbc276af2283b40e1b6872803e659a263d6bb346546fa7384ea98eb96ae8ad2c690d78", @nested={0xc, 0xde, 0x0, 0x1, [@typed={0x8, 0xd1, 0x0, 0x0, @u32=0xcb}]}, @typed={0x4, 0xbf}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@typed={0x8, 0x73, 0x0, 0x0, @fd=r7}, @typed={0x8, 0x76, 0x0, 0x0, @fd}, @typed={0x8, 0x145, 0x0, 0x0, @u32=0x7}]}, @TIPC_NLA_MEDIA={0x10db, 0x5, 0x0, 0x1, [@typed={0x14, 0x152, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @generic="8129277e0c468a3caf755a39ef15eea3903bff30731fcf023a7757c4616425aa595e7e04a757e1dc525c209aa00103c7984cb7dfa0e9213d728bd055903591fedbfe02b27fe042e62425c9d47bba5be571c2ba2df5bd85114bb110aad41e143196a1dab7372221b20bc05382fee99e7a9a3a81d1b49c72d957baac48b5bdf0934ddc48549434ac", @typed={0x8, 0xde, 0x0, 0x0, @u32=0x8}, @generic="bb1dfe03a264e3ec7ab91babb9140c2ebd88aaa6b71cb629d948594d985b7af1", @generic, @nested={0x10, 0xa9, 0x0, 0x1, [@typed={0x4, 0xa2}, @nested={0x4, 0x2}, @nested={0x4, 0xf8}]}, @generic="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", @typed={0x4, 0x8e}]}]}, 0x1498}, 0x1, 0x0, 0x0, 0x4010}, 0x5) ptrace$auto_ARCH_SHSTK_ENABLE(0x8000, r5, 0x7, 0x5001) r8 = landlock_create_ruleset$auto(&(0x7f0000001900)={0xa3, 0x4, 0xfffffffffffffffd}, 0x558, 0xfffffff9) ioctl$auto_SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000001940)="6082afe26a0ebfda9ed821d27e0271128ba1e79f964454a33e0adfbaa15bfbca1fc25304bbacbc0c34de164c09c297bbd0767958ca80f0f75823eb6d") sendmsg$auto_NL80211_CMD_ADD_LINK(r7, &(0x7f0000001bc0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001b80)={&(0x7f00000019c0)={0x188, 0x0, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x9}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x7}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_SAE_PASSWORD={0x44, 0x115, "cc707f194fa627743b6238a9f681f72a8584b4ea24aedb0a148a91652828ea4feeb61b847c7eefefc6a329a92ec33c03d78fe06b2dbc41d7d86856ebc7d93847"}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xb}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xf4, 0xac, "29a8804e75ed71bbd3fe0c5066f5a47b3680a726ece90e22dc175e12df6c048a98299028c1fd775bf4c021c22244abd8d5f2504e0d49ed5a745b89153c9de02aa30c34c429caab5dced52e072b8f8ea71d73a3a6cdb128cdac971f4def05c4d999b2f320d37abd1d4757c629adeb3eec35b8a6255571ac2c3162cd5cf79a17ccbcad6403f2ff6e83aa1932429829b1a752b1f1d3018281b370dc5cf0a9939e43966989db93acc2f42225e03a3823533111249757fe22ada6f62fa85aad72685204d28da2e3e01d7e81d93ea31c95d9a66c965ec923eb96267181974af21c969fbab0e0169a765936315f3738ae57665a"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x1b, 0xbd, "0df8333499ceeada410afd13e1b9de9a12e48f1aea9ca9"}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sendmsg$auto_NLBL_UNLABEL_C_STATICADDDEF(r7, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x80) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001d40), r8) sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000001e40)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d80)={0x78, r9, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, '!D'}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x9}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xc}, @NL80211_ATTR_EHT_CAPABILITY={0x4b, 0x136, "3f9e72f82084f9ffbe41c033bcb77031ab92ddef8ee13852e68c031e1537e146d172b2ff1a4b48650a4e2943fd76589ef1852b33cdc48c58d8f7b18fb44e463c265b578d674526"}]}, 0x78}, 0x1, 0x0, 0x0, 0x40040}, 0x4042) sendmsg$auto_HANDSHAKE_CMD_DONE(r0, &(0x7f0000001f40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x1c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@HANDSHAKE_A_DONE_REMOTE_AUTH={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4040400) r10 = getpgid(r4) r11 = prctl$auto_PR_SET_MM_START_DATA(0x6d, 0x3, r10, 0xbff, 0x78d363d2) unshare$auto(0x80) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r8, 0xc008551c, &(0x7f0000001f80)={0x0, 0x6, [0x39e8, 0x1, 0x5]}) ioctl$auto(r11, 0x10000, r0) sendmsg$auto_NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000003a00)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000039c0)={&(0x7f0000002000)={0x1990, r9, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_TX_RATES={0x181e, 0x5a, 0x0, 0x1, [@typed={0x8, 0x11a, 0x0, 0x0, @pid=r10}, @nested={0x1324, 0xba, 0x0, 0x1, [@generic="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", @generic="40dbef8c122601de61446aabbb53ad37893000f647ef1c2556af2209fa1a3e693662bcb539d3a8c2ecd15ce3004a0b0ea584027c055fbbd80acc422492b19c87de55b5d9a6da050cf37ed20dd65af90c508e8291bbbb2e5053e6524dc94491c01a5279e9b61933b784aaf1164a6c5c9d94e8dae98e191eb6dc79064635047f43a3924e2ce2925e33a3c41687a0feb20e7903d37fec5d3f2eec373e76f29bd8f6638928ee2d918fff54db18e9edf822cdbe2897bf3867fbc933ae0a40f222be22d37f264e4d84eae22ff6b7e3f043a29ad970b1b1abd494e4e1c3c32c05c30134aee2760b4d36ecab15031133436ae48436227361754aad", @nested={0x4, 0xd1}, @generic="851e7ddb659dae2e0908d418d4c64eeb70bf3c23dadaa53105441bc201f89bf8ce3c67c38318e40852a5682317cd32d5256fd3966a4494e45a52b8127ea4c5710b6e4fb87fe1c480b993", @generic="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", @nested={0x4, 0x43}, @generic="de7478f96fb39d0fc89869b3e798efdf", @generic="a47636a9bc7446f88512a2740f64ae1c4b9a43d4ae08124088e2c251eaa3c108c26119bdb57e84b62f280157c0448c3d9ae0f182f98cb324c22e8e89483bae6dc35a61fc2d23953e0de757fc1c8e47cb0f25cf5a0cdd669e60fc52cedba2ac531a97ecb2b019abd9da6b4b0bb2544461984bd80917115edac19b5ed836db131cd51f0b8920a97a3530b56a25ed462d0fd95d99098713396abd5881823725f927968d35dc35290ee03b83e15b1fe42a740ffa2e255268760e1e4ffc57ed5b5db94ada6289191e5ba8322b6d"]}, @generic="c6637bcffec81c6dc4ad3a4008f455e6b414cc69998c1603b78fb7c7d48c13cbfb361645bed2214d7047348d3fe77c4c124379ecfb3858a5d6c27294110d2be766782e44b542825f4995", @nested={0x123, 0xf8, 0x0, 0x1, [@typed={0x7, 0xca, 0x0, 0x0, @str='\xc1}\x00'}, @nested={0x4, 0x123}, @typed={0xa6, 0xe5, 0x0, 0x0, @binary="76cee5250053f9be77fca16ccea37f522f9a04c489787705cee6ab84d5bf896a5b470b7b8e3d07970d99dffa6910cf9e419e8ab72fe10f963d0e3f8d974fdffb409174f10e637b3adf08b4daf83cff6449b35d3c6ef08aca76e9b7d3edaba8395faf346a58270025ff0032203ed8e3feec2fad25fa874d556fe4dab8fbb77af1550eaec41f63d9d4e026188c650210c76420e6253b684586070eda119ae058f304b1"}, @nested={0x4, 0x99}, @typed={0x4, 0x77}, @generic="a001b01e8baeb6adf01858e93f0bb50d031e664633cb29c849f5ef6200ef9f4dcfd2e0e8f1c5bfa4826db373540a86f71ed49cc7b8c191b9f88eb449ec5bb1ee923eeaf6324aaaa8fb6ad8", @typed={0x14, 0x63, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3e}}, @nested={0x4, 0x3e}]}, @generic, @nested={0x78, 0x116, 0x0, 0x1, [@nested={0x4, 0x69}, @nested={0x4, 0x108}, @typed={0x6, 0xe8, 0x0, 0x0, @str='\xff\xff'}, @nested={0x4, 0x131}, @generic="4d1631026b700ab286659f702ed6f547bf84d448e9b4471bb6cc178c99fdde2f583f55938f3f06135eb974db6d606da8fa5fa5259e078a45ff0bc276e628e1e601ed61dce4cf7a05354c8e200249c85383187fcc7964185abb4d66fb2c90ae9a"]}, @nested={0x308, 0x7a, 0x0, 0x1, [@generic="d3b93ed3d27ac8cba0873cbf7faefd09bbcc9a7cb651866297afc551d3707ea4cab913dda8448e1bd054f8a90d050bd22d35e794099469005c8b4457d58f62e30764409cee5822a11c4424be6e6f5dcaa60bcc3a59dd20a6d0069f4e599f56ca409c2313f34a54d67b819a22a7a7578d22dd1cf6c2a5aa90678933", @typed={0x8, 0x137, 0x0, 0x0, @uid=r2}, @generic="6849b41a121f6cc8c9991808ab2287308cee8b1dc90f044f051b97353eb1cc60ad76a0936b86f8f3d5b205ac13cd2b71cf3dbcba8f7297f3e0", @generic="d92521beaa17eaea709c87bf5d32abb4fcd6965d4c3f28ed86dce4019b430d2f8c0c31f7ed4d0a65d53b5e3ed15672c858503a3f72ba0f742b5ef28673cf1bfdd35cd862f9f4a6195881d7a5b2221c1872b3aee19a4c3bdda4706cb3bac9d659ee137fbe6c2ac1080f05fb7bc001a9fb3b2a8b606de532340b45878c0b41f148eee74c23121a4da00cbe68d4e76dec07635ec0cb96ab1a0a2cbd089795c644d0c752c91f4b221a31c7e61c8f3d12531b365ba17a7e8f0a8800", @generic="b133dcce9b80a8939bcfb8c48b6cd46b3a62ddd4baac7f08463f12b573db3f3d180f779af32e3b84ba8d32f84d62755e748cc243e6cd75637718ca44d1904d4f6f11b618e56f0aea09568a2d1d214ebb3602d1e6de0dc9e0f94c243a708de14c18dc7371f521e7f6ab62712a59f7e7978801e37e5e620278b67122534f898379f59e6eff61552f6a97b20fa2036b6406e52d44f66b34ca805c599accb7600b1ca5bee493fe9a9495e287ad18c173eb71e80757f65b37dbd24284aa8e81731d56360e67", @generic="d8250c083cb0017a2cf2a4f74de9ff69bb0661e5ecc769d85ff010a7ec9a056d1a8c6512616c918f55b85de69ab44e6b1d823328ca5fbfe3b67187e62059260988d66212999ef101ec2b0709096b317e870cd338be11e62c88198ff8d04d3184538ad58199f0d519ab46dd666816f0be6fd7a8cd807d4d23def7f89734699a74f053806edb70ef62f8d68342425ea1eeb16ea9f5d795167c5496ae1ba3e7619e463229ae663759dd56aae531e41e947d5274e436803a3a5e47ecb2203721302ac3afef56058eda477d592cfb"]}, @generic]}, @NL80211_ATTR_MESH_CONFIG={0xf4, 0x23, 0x0, 0x1, [@typed={0xc, 0xf3, 0x0, 0x0, @u64=0xffffffffffffff00}, @generic="6994f8e0d40b7534f4a67586b4f636e4038d2fc8204dea80cae0b2efaca9d6bff5620b4bdf1b7d680ef301a0c2c0f42146d7ccb5fa07ff4549407e12122dbf5e4db44eb4d8a1f005dcfd420f82343f88c7cd2a89adf530da64bb5e767231e15c83b269f6bb9547a4e3798df76df951f7537da1992620d8cbcf4f0170867b0034abf250e935f08bc6addeb1400d21363069baddbafac3fe476369b31b094bb26ac43bef6ee28af6dc008f25aa0a5f11ddde49814c3d62b96201ebe88ff98cef5d94e0a78c713c63da12991b6eb95dcbd84dcf010c01172fcd9dafbcbb7975641d", @typed={0x4, 0xce, 0x0, 0x0, @binary}]}, @NL80211_ATTR_MAC={0x5a, 0x6, "31818ac064569447e567c42ae56cecc0bc81b498498b3845c3c26702518aa3424635ce2bdb3dfe88987594460506e53a43a0390a4e5aa78d1ba8381524cca2fdefbe80d372fae6cd06b65f551057280e94d3b7a6555d"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xac}]}, 0x1990}, 0x1, 0x0, 0x0, 0x28000}, 0x0) setsockopt$auto(r1, 0x5, 0x1, &(0x7f0000003a40)='}\x00', 0x10001) r12 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000003ac0), r11) sendmsg$auto_NFC_CMD_DISABLE_SE(r11, &(0x7f0000003c80)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003c40)={&(0x7f0000003b00)={0x10c, r12, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_VENDOR_DATA={0x58, 0x1f, "84fc739f8f8a047788cad921e2e76b7c0e0b2c39f4bddff8d42274bc96bca7aada81947df17ca6b452addeff92e0f90ea9a32a8a3817fe1a2fad41b41ea14521c62dc7980715fa05b0ebccc8627118969a27f4db"}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0xe9}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x5}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x5}, @NFC_ATTR_SE_APDU={0x7e, 0x19, "8187a786a2d79c75c5dc2374f66a8dd41b32b70e67b423d3ec4884ef6e519f3bf7c6bead7442d72a51f2c21e3bb1bbae57ef4e23204dbd2d28ef6bc1baf7d84e93ff71bf3e5b99cb6b34a7b8917c61543c20b12ef2e4dc29272dc47e0a7e5931812141523fd6d164b9ef7b5757ec9c381a9712194367309c52c7"}, @NFC_ATTR_LLC_PARAM_RW={0x5}]}, 0x10c}}, 0xc0) newfstatat$auto(r7, &(0x7f0000003cc0)='./file0\x00', &(0x7f0000003d00)={0xebf, 0x3, 0xbe, 0x4, r2, r3, 0x0, 0xec70, 0xf69, 0xde1, 0x77, 0xb, 0xfffffffffffffffd, 0x8000000000000000, 0x8, 0x6, 0xb}, 0x319) msgctl$auto(0x12, 0x1, &(0x7f0000003e40)={{0x80, r13, r3, 0xa, 0x9, 0x80, 0x1}, &(0x7f0000003dc0)=0x2, &(0x7f0000003e00)=0x8, 0xffffffffffffffff, 0x6, 0x10, 0x8, 0x0, 0x7fff, 0xdd, 0x6, @inferred=r10, @raw=0x6}) r14 = prctl$auto_PR_SET_MM_END_CODE(0x4, 0x2, r10, 0x5, 0x2) sendmmsg$auto(r14, &(0x7f0000004100)={{&(0x7f0000003ec0)="5d9e6a722fa212fe0a8e9f4b92e9ce38c8b626dcafb42594ee8fef65b4855b668f97f511c2df99dba5de8cf04dd2d057c2885d17d58c761d4583e68454f4727ff6201f5388672cbd6bc22c4914860c95fe38f6c454a531cf43f198edcd903c481b86819ac79d80f043837089465cef21da614f09a033a5bfab6a262e935d74a76d10fb63327777ebc096dbc0d1efd06d", 0x200, &(0x7f0000004040)={&(0x7f0000003f80)="8f2e414b6fc8e5e2ad5952840e96763ba10fe82411e6d7d5b26a437449d6765c588b13acce0e352418677e456e33587c307abe6fc424b2192dc5468bb854202ae5bd09225b6999bff6054eace276b19b2ae0abb3ee151cd85aec7b4b5d71c00d58e52b1de4c0287f4c5fcffb90b8c1347d9af1c309fcea8f208bb481e1e9d06f488fc7e940bad501d0beefc9f8", 0x1ff}, 0x5, &(0x7f0000004080)="a20f4c7d63ce6a68341cb99876d0eac8fcffb47b296344e383d169d0463a0faf4e145bb4bcf0d65f1ab6f3a667d8509cc241be3c2221680c646ffe1512136d2532779e8508e6bef1d822f68fa1047baecbaaaee64acb68c61c16e0f4363694ea07260917342140e5bf5bc1ce6fa73f448325c39d3083b3769008d278580302", 0xa, 0x6}, 0x3}, 0x4, 0x4) ioctl$auto_VHOST_SET_VRING_NUM(r7, 0x4008af10, &(0x7f0000004140)={0x3, 0x5}) r15 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000004180)='/proc/self/clear_refs\x00', 0x1000, 0x0) mmap$auto(0xf9c, 0x2, 0x0, 0x8010, r15, 0x3) 119.688776ms ago: executing program 1 (id=271): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) (async, rerun: 32) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (rerun: 32) write$auto(r0, &(0x7f0000000440)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xe7k\xc9\xb7\x80T\xd0\xc2\xa0\a\xf6*:\xb7_\xf1\xb1yx\xc8\x00\xf1\xf9\x87\xa4D\xf4S\xda\xa9Y4*\x1a[\xcdv\x83q\xab\x1aK8 \xe9\xf7TU\xc6\xe3~\x92S\xef\x9c\xc0\xc9\x04/\x18\xf1\xe2\xe4_\xfa{\xe0DB\x1d\x83e\x12*\xa0K\xc0`\nt\xf5\xac$\x94\xf0>\xceXs\xb5\xd8dV\xc4lG\b~\x1cn\x80\xde?\xed~\xcfV\xcd\xdc\xdd\'\xc4^.=\xc4\x86\xce*\xba<\xbf\x19N\xc5~zFY\xc6\x90\xf6o>\xf7\x1a$\xfd\xc7\xf1[-9\xf5v/\x10\x87@\'1\xf3\xd7\xcd\xbf\xac\x84\xe2\x98\x96>\xff1\x8a\x1d\xdalWU\x1c\xc7N\xdf\xcbR\xf6\xea\x89\x01\x04\x00[\x1eP3\xec\x13\x1eh\xab#\x1do\xa1?s\n\xb6\xcc{\x9e\xbb\x06\xe4>J\xbew\xc2K\x1c\x97_=\xe6]\x06)`\xad*\x88k\x1d\x87&\n\xdf#?\x03\x06(\xef;\x7f\x1d\x7f\xb8\xd5\xe9\xfe`M\xe7\x95\xb2\xa6\v\x190\xce\xc4\x15`\xa5C\x9ar\ta\xec\x17\x16\xc6\xf0\x03\xc6\x85U).\xf5\xc5\a\x94\xc5\x86\xb6\xce\r,M\xd2]r\xe5m\x83X\xa82&\x01r3\x8dW\xb0\xf8/\xbf6\xee\x88\xf9LD\r\n\x17\x901\xa1\x10K\x85Yk\x99{\x88\x94\x13rp\xbb\xe18\xbdK\x92\xd8i\x89!l\xad\x1e\xf3M/W3E\xebZ\x92\x1c\xa34\xd2\x84vkf\n6z\x10!\x85\xd9(\xa17\xeb\x82\x97\xd2\x94Nu\x86\xac\x12a\xedp\xa3D\xf7_\x11\x96|V>\xbdj\xb6\x85/\xa6\x17\x11n%\xbe~\x15\x91\xe6\xa9z\xd4\x91\x8f\xac\xc5}\xe4\a\x9an\xa8\xf0\xda\xa1\xb2\xee\xef\xed+S\x1b&X\x82{\x8d\xe3m\xc7\xe8x\xe8V\xf7\xec\xcaH\tQ\xaehU+\x87@\x9b\xe3\xbc\x8e\x99\x8e\x8e\x06/\x0f\ax\xcc\xb0\x88*\xffsuV', 0x2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000580)={0x80000006, 0x0, 0xd12b, 0xfffffffd, 0x200a}) (async) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0xc200, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) unshare$auto(0x40000080) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) (async) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) setsockopt$auto(0x3, 0x6, 0x5, 0x0, 0x8) statmount$auto(0x0, 0x0, 0x202, 0x2000000) (async) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x8000000000000001, 0x15) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x20200, 0x0) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a2a725bd7000a0c582043c197d65022e3375ad01b3b7244ae60bf5958da29bd4790936000a00ffffffff42cad213b10cb2370776141ec3365ded5c771c3371f18848dc406ad35832495abe071d74d7542995af2349f9a7e7c55911d95176eac013972f815c0bb4e513a8a91406877e7fef73194ff4c4aa0a8a"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/valid_links\x00', 0x88000, 0x0) 0s ago: executing program 0 (id=272): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) (async) mmap$auto(0x0, 0x1, 0x40006, 0x9b72, 0x2, 0x8000) (async) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/nfs4.nametoid/content\x00', 0x2000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/135, 0x87) (async, rerun: 32) fallocate$auto(r0, 0x0, 0x9, 0x2) (rerun: 32) cachestat$auto(r0, 0x0, 0x0, 0x0) (async) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf25280000000c00288008009e00", @ANYRES32=0xee00, @ANYBLOB="fda20dda802bb4a555f0087ea90c97d9b822d7728fd0e72ceb56ad9173d362817a0295c67fece0b5b9dd45353f899918f69e961be9ae40a897ff8dd3f987ff5bfb90e7a0877e9567a89c171a4631df728a4550861c717a397e7436506ebe917955dcd181bb7c93dcaca82e0e094ae2378c1805c96cdf4b2ab5ed9ba541b58ed19c4e8ecf960153fbd620ec6958e77d40ee1067e164154b5f1f414afc2d5e96a362969ece4ed18daaa1aa0bd338200569b91b8d4ac579ac22a16f38dcb262fe26268fb28f33c571c30b72f06c30b441fc01be"], 0x20}, 0x1, 0x0, 0x0, 0xc080}, 0x800) (async) ioctl$auto_TUNSETNOCSUM(r0, 0x400454c8, &(0x7f0000000080)=0x9e) (async) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xda5c}, 0x800}, 0x7, 0x4008) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vhci_hcd.0/detach\x00', 0x101001, 0x0) socket(0x21, 0x5, 0x2) (async) write$auto(r5, &(0x7f0000000000)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) pwrite64$auto(r4, &(0x7f0000000040)='/sys/kernel/debug/block/loop9/hctx0/sched_tags_bitmap\x00', 0x400000000001, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts. [ 66.431442][ T5611] cgroup: Unknown subsys name 'net' [ 66.537854][ T5611] cgroup: Unknown subsys name 'cpuset' [ 66.546662][ T5611] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.942763][ T5611] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.673518][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.683351][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.691624][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.702372][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.711663][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.854313][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.864008][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.874339][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.884570][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.892083][ T5635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.892393][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.906866][ T5639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.915299][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.915397][ T5637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.925237][ T5633] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.936120][ T5637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.946451][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.946633][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.954172][ T5637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.970913][ T5637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.028753][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.036633][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.044143][ T5622] bridge_slave_0: entered allmulticast mode [ 71.051751][ T5622] bridge_slave_0: entered promiscuous mode [ 71.106469][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.113637][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.121015][ T5622] bridge_slave_1: entered allmulticast mode [ 71.128201][ T5622] bridge_slave_1: entered promiscuous mode [ 71.211633][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.228153][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.308298][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.315236][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.334389][ T5622] team0: Port device team_slave_0 added [ 71.368514][ T5622] team0: Port device team_slave_1 added [ 71.453605][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.460641][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.486735][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.509170][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.516463][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.523575][ T5629] bridge_slave_0: entered allmulticast mode [ 71.530770][ T5629] bridge_slave_0: entered promiscuous mode [ 71.538655][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.545743][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.571670][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.596354][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.603507][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.610792][ T5629] bridge_slave_1: entered allmulticast mode [ 71.617715][ T5629] bridge_slave_1: entered promiscuous mode [ 71.671579][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.678964][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.686492][ T5630] bridge_slave_0: entered allmulticast mode [ 71.693410][ T5630] bridge_slave_0: entered promiscuous mode [ 71.701944][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.709588][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.717124][ T5630] bridge_slave_1: entered allmulticast mode [ 71.724921][ T5630] bridge_slave_1: entered promiscuous mode [ 71.734116][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.773022][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.782298][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.789800][ T4944] Bluetooth: hci0: command tx timeout [ 71.796088][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.803293][ T5627] bridge_slave_0: entered allmulticast mode [ 71.810403][ T5627] bridge_slave_0: entered promiscuous mode [ 71.844619][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.851863][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.859077][ T5627] bridge_slave_1: entered allmulticast mode [ 71.866127][ T5627] bridge_slave_1: entered promiscuous mode [ 71.877459][ T5622] hsr_slave_0: entered promiscuous mode [ 71.883789][ T5622] hsr_slave_1: entered promiscuous mode [ 71.892891][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.929618][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.940190][ T5629] team0: Port device team_slave_0 added [ 71.962740][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.982220][ T5629] team0: Port device team_slave_1 added [ 72.006758][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.025792][ T4944] Bluetooth: hci2: command tx timeout [ 72.031796][ T5637] Bluetooth: hci3: command tx timeout [ 72.031816][ T5624] Bluetooth: hci1: command tx timeout [ 72.064791][ T5630] team0: Port device team_slave_0 added [ 72.070985][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.077983][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.104190][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.133561][ T5630] team0: Port device team_slave_1 added [ 72.139813][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.146892][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.173420][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.191443][ T5627] team0: Port device team_slave_0 added [ 72.219002][ T5627] team0: Port device team_slave_1 added [ 72.234247][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.241286][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.267624][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.296742][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.303773][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.329715][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.382661][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.389749][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.416652][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.443164][ T5629] hsr_slave_0: entered promiscuous mode [ 72.449690][ T5629] hsr_slave_1: entered promiscuous mode [ 72.456075][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 72.461861][ T5629] Cannot create hsr debugfs directory [ 72.478370][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.485559][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.511578][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.589608][ T5630] hsr_slave_0: entered promiscuous mode [ 72.595881][ T5630] hsr_slave_1: entered promiscuous mode [ 72.601851][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 72.607807][ T5630] Cannot create hsr debugfs directory [ 72.688147][ T5627] hsr_slave_0: entered promiscuous mode [ 72.694324][ T5627] hsr_slave_1: entered promiscuous mode [ 72.700782][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 72.706586][ T5627] Cannot create hsr debugfs directory [ 72.902665][ T5622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.914780][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.945495][ T5622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.955659][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.963463][ T5622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.973427][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.010397][ T5622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.019642][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.102375][ T5629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.111501][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.119977][ T5629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.130578][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.138499][ T5629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.148105][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.156451][ T5629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.166043][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.251637][ T5627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.262787][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.270793][ T5627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.279795][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.294299][ T5627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.305929][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.319147][ T5627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.329032][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.414995][ T5630] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.426199][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.442682][ T5630] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.453289][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.461731][ T5630] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.471919][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.480077][ T5630] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.489171][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.505860][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.561079][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.597427][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.604884][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.636112][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.643239][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.658867][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.730880][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.764299][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.771427][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.799555][ T98] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.806756][ T98] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.820563][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.865729][ T5637] Bluetooth: hci0: command tx timeout [ 73.883184][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.923846][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.944944][ T98] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.952114][ T98] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.990509][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.997622][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.013585][ T5629] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.038333][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.070724][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.077918][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.105897][ T5637] Bluetooth: hci3: command tx timeout [ 74.109298][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.111752][ T5637] Bluetooth: hci1: command tx timeout [ 74.118455][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.135859][ T4944] Bluetooth: hci2: command tx timeout [ 74.662134][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.819597][ T5622] veth0_vlan: entered promiscuous mode [ 74.870580][ T5622] veth1_vlan: entered promiscuous mode [ 74.977784][ T5622] veth0_macvtap: entered promiscuous mode [ 75.015221][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.038484][ T5622] veth1_macvtap: entered promiscuous mode [ 75.128207][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.156652][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.171150][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.181332][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.204150][ T1130] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.214537][ T1130] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.236659][ T1130] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.245686][ T1130] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.286425][ T5629] veth0_vlan: entered promiscuous mode [ 75.337240][ T5629] veth1_vlan: entered promiscuous mode [ 75.405508][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.415604][ T5630] veth0_vlan: entered promiscuous mode [ 75.428156][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.444522][ T5627] veth0_vlan: entered promiscuous mode [ 75.460026][ T5629] veth0_macvtap: entered promiscuous mode [ 75.481714][ T5629] veth1_macvtap: entered promiscuous mode [ 75.504275][ T5630] veth1_vlan: entered promiscuous mode [ 75.515972][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.524855][ T5627] veth1_vlan: entered promiscuous mode [ 75.525845][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.535787][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.571856][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.598166][ T152] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.607505][ T152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.632705][ T152] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.642350][ T152] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.661246][ T5622] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.686348][ T5630] veth0_macvtap: entered promiscuous mode [ 75.700084][ T5630] veth1_macvtap: entered promiscuous mode [ 75.803666][ T5627] veth0_macvtap: entered promiscuous mode [ 75.831724][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.879085][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.890410][ T5627] veth1_macvtap: entered promiscuous mode [ 75.898940][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.898964][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.925309][ T34] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.941569][ T34] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.941641][ T34] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.941687][ T34] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.956875][ T5637] Bluetooth: hci0: command tx timeout [ 76.013777][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.033338][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.042105][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.084465][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.157928][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.180061][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.189341][ T5637] Bluetooth: hci3: command tx timeout [ 76.195439][ T4944] Bluetooth: hci2: command tx timeout [ 76.200939][ T5637] Bluetooth: hci1: command tx timeout [ 76.201779][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.243569][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.254382][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.275315][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.300902][ T5773] FAULT_INJECTION: forcing a failure. [ 76.300902][ T5773] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 76.322792][ T5773] CPU: 1 UID: 0 PID: 5773 Comm: syz.1.5 Not tainted syzkaller #0 PREEMPT(full) [ 76.322827][ T5773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 76.322851][ T5773] Call Trace: [ 76.322860][ T5773] [ 76.322870][ T5773] dump_stack_lvl+0x100/0x190 [ 76.322909][ T5773] should_fail_ex.cold+0x5/0xa [ 76.322940][ T5773] ? prepare_alloc_pages+0x16d/0x5f0 [ 76.322980][ T5773] should_fail_alloc_page+0xeb/0x140 [ 76.323015][ T5773] prepare_alloc_pages+0x1f0/0x5f0 [ 76.323058][ T5773] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 76.323110][ T5773] ? mark_held_locks+0x40/0x70 [ 76.323136][ T5773] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 76.323177][ T5773] ? lockdep_hardirqs_on+0x78/0x100 [ 76.323217][ T5773] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 76.323252][ T5773] ? stack_depot_save_flags+0x479/0x9d0 [ 76.323286][ T5773] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 76.323337][ T5773] ? kasan_save_stack+0x3f/0x50 [ 76.323365][ T5773] ? kasan_save_track+0x14/0x30 [ 76.323391][ T5773] ? snd_pcm_attach_substream+0x436/0xd20 [ 76.323427][ T5773] ? __lock_acquire+0x4a5/0x2630 [ 76.323464][ T5773] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 76.323506][ T5773] ? policy_nodemask+0xed/0x4f0 [ 76.323543][ T5773] alloc_pages_mpol+0x1fb/0x540 [ 76.323577][ T5773] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 76.323604][ T5773] ? __split_page_owner+0x1fe/0x350 [ 76.323639][ T5773] ? split_page_memcg+0x1e/0x1a0 [ 76.323678][ T5773] alloc_pages_noprof+0x1a/0x160 [ 76.323712][ T5773] alloc_pages_exact_noprof+0x32/0xf0 [ 76.323748][ T5773] snd_pcm_attach_substream+0x4b0/0xd20 [ 76.323790][ T5773] snd_pcm_open_substream+0x90/0x1850 [ 76.323825][ T5773] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 76.323856][ T5773] ? rcu_is_watching+0x12/0xc0 [ 76.323894][ T5773] snd_pcm_open+0x2a3/0x710 [ 76.323929][ T5773] ? __pfx_snd_pcm_open+0x10/0x10 [ 76.323962][ T5773] ? __pfx_default_wake_function+0x10/0x10 [ 76.324010][ T5773] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 76.324042][ T5773] snd_pcm_playback_open+0x86/0xe0 [ 76.324074][ T5773] snd_open+0x201/0x450 [ 76.324112][ T5773] ? __pfx_snd_open+0x10/0x10 [ 76.324150][ T5773] chrdev_open+0x234/0x6a0 [ 76.324184][ T5773] ? __pfx_chrdev_open+0x10/0x10 [ 76.324221][ T5773] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 76.324266][ T5773] do_dentry_open+0x6d8/0x1660 [ 76.324298][ T5773] ? __pfx_chrdev_open+0x10/0x10 [ 76.324351][ T5773] vfs_open+0x82/0x3f0 [ 76.324395][ T5773] path_openat+0x208c/0x31a0 [ 76.324442][ T5773] ? __pfx_path_openat+0x10/0x10 [ 76.324488][ T5773] do_file_open+0x20e/0x430 [ 76.324526][ T5773] ? __pfx_do_file_open+0x10/0x10 [ 76.324586][ T5773] ? alloc_fd+0x476/0x790 [ 76.324622][ T5773] ? do_getname+0x191/0x390 [ 76.324662][ T5773] do_sys_openat2+0x10d/0x1e0 [ 76.324699][ T5773] ? __pfx_do_sys_openat2+0x10/0x10 [ 76.324749][ T5773] __x64_sys_openat+0x12d/0x210 [ 76.324791][ T5773] ? __pfx___x64_sys_openat+0x10/0x10 [ 76.324830][ T5773] ? ksys_write+0x1ac/0x250 [ 76.324860][ T5773] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 76.324901][ T5773] ? syscall_user_dispatch+0x76/0x130 [ 76.324936][ T5773] do_syscall_64+0x10b/0xf80 [ 76.324978][ T5773] ? clear_bhb_loop+0x40/0x90 [ 76.325010][ T5773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.325036][ T5773] RIP: 0033:0x7f162d79ce59 [ 76.325058][ T5773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.325084][ T5773] RSP: 002b:00007f162e64e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 76.325118][ T5773] RAX: ffffffffffffffda RBX: 00007f162da15fa0 RCX: 00007f162d79ce59 [ 76.325136][ T5773] RDX: 0000000000040000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 76.325155][ T5773] RBP: 00007f162d832d6f R08: 0000000000000000 R09: 0000000000000000 [ 76.325171][ T5773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.325187][ T5773] R13: 00007f162da16038 R14: 00007f162da15fa0 R15: 00007ffcbe9f4a08 [ 76.325220][ T5773] [ 76.900341][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.910138][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.925917][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.942604][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.000917][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.034629][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.311812][ T5788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 77.324635][ T5791] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 78.025105][ T5637] Bluetooth: hci0: command tx timeout [ 78.265704][ T5637] Bluetooth: hci1: command tx timeout [ 78.266983][ T4944] Bluetooth: hci2: command tx timeout [ 78.271691][ T5624] Bluetooth: hci3: command tx timeout [ 78.396223][ T5807] [U] 0="/ [ 78.411740][ T5807] [U] [ 78.423502][ T5807] [U] EeQ@ [ 78.784047][ T5816] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.031020][ T5814] [U]  [ 79.218965][ T5832] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 81.432290][ T5871] mmap: syz.3.18 (5871) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 81.824478][ T5880] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 82.030924][ T5881] smpboot: CPU 1 is now offline [ 82.129202][ T10] cfg80211: failed to load regulatory.db [ 84.496986][ T5914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 86.354983][ T5637] block nbd0: Receive control failed (result -32) [ 86.798981][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 88.840608][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 90.205274][ T5988] syz.0.43 (5988) used obsolete PPPIOCDETACH ioctl [ 90.560791][ T5994] Zero length message leads to an empty skb [ 90.872652][ T6000] netlink: 'syz.1.45': attribute type 11 has an invalid length. [ 91.114017][ T6002] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 92.242712][ T6025] syz.3.50 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 93.041745][ T6026] bridge0: port 3(team0) entered blocking state [ 93.175340][ T6026] bridge0: port 3(team0) entered disabled state [ 93.315160][ T6038] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 93.325390][ T6026] team0: entered allmulticast mode [ 93.382718][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.51'. [ 93.401928][ T6026] team_slave_0: entered allmulticast mode [ 93.415283][ T30] audit: type=1800 audit(1779380704.534:2): pid=6037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.52" name="lu_gp_id" dev="configfs" ino=9621 res=0 errno=0 [ 93.519095][ T6026] team_slave_1: entered allmulticast mode [ 93.633993][ T6026] team0: entered promiscuous mode [ 93.700694][ T6026] team_slave_0: entered promiscuous mode [ 93.800663][ T6026] team_slave_1: entered promiscuous mode [ 93.890615][ T6026] bridge0: port 3(team0) entered blocking state [ 93.897789][ T6026] bridge0: port 3(team0) entered forwarding state [ 95.194519][ T6049] Process accounting resumed [ 96.295770][ T6075] openvswitch: netlink: IPv6 tunnel dst address is zero [ 96.921241][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.60'. [ 98.946871][ T6104] zswap: compressor not available [ 99.280789][ T6117] FAULT_INJECTION: forcing a failure. [ 99.280789][ T6117] name failslab, interval 1, probability 0, space 0, times 1 [ 99.474017][ T6117] CPU: 0 UID: 0 PID: 6117 Comm: syz.0.64 Not tainted syzkaller #0 PREEMPT(full) [ 99.474054][ T6117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 99.474063][ T6117] Call Trace: [ 99.474068][ T6117] [ 99.474074][ T6117] dump_stack_lvl+0x100/0x190 [ 99.474095][ T6117] should_fail_ex.cold+0x5/0xa [ 99.474114][ T6117] should_failslab+0xc2/0x120 [ 99.474132][ T6117] __kmalloc_cache_noprof+0x7a/0x6f0 [ 99.474152][ T6117] ? kernfs_fop_open+0x23d/0xd50 [ 99.474176][ T6117] kernfs_fop_open+0x23d/0xd50 [ 99.474207][ T6117] do_dentry_open+0x6d8/0x1660 [ 99.474224][ T6117] ? __pfx_kernfs_fop_open+0x10/0x10 [ 99.474252][ T6117] vfs_open+0x82/0x3f0 [ 99.474275][ T6117] path_openat+0x208c/0x31a0 [ 99.474296][ T6117] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.474313][ T6117] ? __pfx_path_openat+0x10/0x10 [ 99.474337][ T6117] do_file_open+0x20e/0x430 [ 99.474355][ T6117] ? __pfx_do_file_open+0x10/0x10 [ 99.474385][ T6117] ? _raw_spin_unlock+0x28/0x50 [ 99.474405][ T6117] ? alloc_fd+0x476/0x790 [ 99.474427][ T6117] do_sys_openat2+0x10d/0x1e0 [ 99.474448][ T6117] ? __pfx_do_sys_openat2+0x10/0x10 [ 99.474475][ T6117] __x64_sys_open+0xfe/0x1d0 [ 99.474496][ T6117] ? __pfx___x64_sys_open+0x10/0x10 [ 99.474516][ T6117] ? ksys_write+0x1ac/0x250 [ 99.474534][ T6117] ? rcu_is_watching+0x12/0xc0 [ 99.474553][ T6117] do_syscall_64+0x10b/0xf80 [ 99.474573][ T6117] ? clear_bhb_loop+0x40/0x90 [ 99.474590][ T6117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.474604][ T6117] RIP: 0033:0x7ff43d79ce59 [ 99.474616][ T6117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.474629][ T6117] RSP: 002b:00007ff43e5bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 99.474643][ T6117] RAX: ffffffffffffffda RBX: 00007ff43da16270 RCX: 00007ff43d79ce59 [ 99.474652][ T6117] RDX: b5d1af1605322c37 RSI: 0000000000000000 RDI: 0000200000000100 [ 99.474661][ T6117] RBP: 00007ff43d832d6f R08: 0000000000000000 R09: 0000000000000000 [ 99.474669][ T6117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.474676][ T6117] R13: 00007ff43da16308 R14: 00007ff43da16270 R15: 00007ffcf0a75a08 [ 99.474695][ T6117] [ 102.193539][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.70'. [ 102.259439][ T6146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.70'. [ 102.306001][ T6138] [U] ^@ [ 102.942442][ T6143] hub 1-0:1.0: USB hub found [ 103.108873][ T6143] hub 1-0:1.0: 1 port detected [ 105.700443][ T6180] FAULT_INJECTION: forcing a failure. [ 105.700443][ T6180] name failslab, interval 1, probability 0, space 0, times 0 [ 105.769899][ T6182] random: crng reseeded on system resumption [ 105.821800][ T6180] CPU: 0 UID: 0 PID: 6180 Comm: syz.3.77 Not tainted syzkaller #0 PREEMPT(full) [ 105.821821][ T6180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 105.821831][ T6180] Call Trace: [ 105.821836][ T6180] [ 105.821842][ T6180] dump_stack_lvl+0x100/0x190 [ 105.821872][ T6180] should_fail_ex.cold+0x5/0xa [ 105.821892][ T6180] should_failslab+0xc2/0x120 [ 105.821909][ T6180] __kmalloc_cache_noprof+0x7a/0x6f0 [ 105.821929][ T6180] ? vidtv_channel_si_init+0xa43/0x18f0 [ 105.821948][ T6180] vidtv_channel_si_init+0xa43/0x18f0 [ 105.821969][ T6180] vidtv_mux_init+0x526/0xbf0 [ 105.821986][ T6180] vidtv_start_feed+0x34e/0x500 [ 105.822010][ T6180] ? __pfx_vidtv_start_feed+0x10/0x10 [ 105.822028][ T6180] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 105.822055][ T6180] ? __pfx_vidtv_start_feed+0x10/0x10 [ 105.822075][ T6180] dmx_ts_feed_start_filtering+0xf6/0x220 [ 105.822097][ T6180] dvb_dmxdev_start_feed+0x273/0x3f0 [ 105.822117][ T6180] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 105.822136][ T6180] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 105.822155][ T6180] dvb_demux_do_ioctl+0xe64/0x1200 [ 105.822178][ T6180] dvb_usercopy+0x167/0x340 [ 105.822193][ T6180] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 105.822211][ T6180] ? __pfx_dvb_usercopy+0x10/0x10 [ 105.822233][ T6180] ? __fget_files+0x21f/0x3d0 [ 105.822254][ T6180] dvb_demux_ioctl+0x29/0x40 [ 105.822269][ T6180] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 105.822284][ T6180] __x64_sys_ioctl+0x18e/0x210 [ 105.822301][ T6180] do_syscall_64+0x10b/0xf80 [ 105.822322][ T6180] ? clear_bhb_loop+0x40/0x90 [ 105.822339][ T6180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.822354][ T6180] RIP: 0033:0x7f05e6f9ce59 [ 105.822367][ T6180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.822380][ T6180] RSP: 002b:00007f05e7e3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.822395][ T6180] RAX: ffffffffffffffda RBX: 00007f05e7215fa0 RCX: 00007f05e6f9ce59 [ 105.822404][ T6180] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000006 [ 105.822412][ T6180] RBP: 00007f05e7032d6f R08: 0000000000000000 R09: 0000000000000000 [ 105.822421][ T6180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.822429][ T6180] R13: 00007f05e7216038 R14: 00007f05e7215fa0 R15: 00007fff5304b878 [ 105.822449][ T6180] [ 106.661406][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.80'. [ 107.234451][ T6183] hub 1-0:1.0: USB hub found [ 107.262153][ T6183] hub 1-0:1.0: 1 port detected [ 108.293758][ T6202] netlink: 2468 bytes leftover after parsing attributes in process `syz.2.81'. [ 109.861672][ T30] audit: type=1800 audit(1779380720.974:3): pid=6230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.87" name="dbroot" dev="configfs" ino=10573 res=0 errno=0 [ 110.261690][ T6239] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 110.424756][ T6220] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5622] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[6220] [ 114.596852][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'. [ 114.672459][ T6279] FAULT_INJECTION: forcing a failure. [ 114.672459][ T6279] name failslab, interval 1, probability 0, space 0, times 0 [ 114.807102][ T6279] CPU: 0 UID: 0 PID: 6279 Comm: syz.0.96 Not tainted syzkaller #0 PREEMPT(full) [ 114.807124][ T6279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 114.807133][ T6279] Call Trace: [ 114.807138][ T6279] [ 114.807144][ T6279] dump_stack_lvl+0x100/0x190 [ 114.807164][ T6279] should_fail_ex.cold+0x5/0xa [ 114.807184][ T6279] should_failslab+0xc2/0x120 [ 114.807201][ T6279] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 114.807222][ T6279] ? vm_area_alloc+0x1f/0x160 [ 114.807242][ T6279] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 114.807265][ T6279] vm_area_alloc+0x1f/0x160 [ 114.807285][ T6279] __mmap_region+0x104d/0x2da0 [ 114.807309][ T6279] ? __pfx___mmap_region+0x10/0x10 [ 114.807335][ T6279] ? __lock_acquire+0x4a5/0x2630 [ 114.807357][ T6279] ? __lock_acquire+0x4a5/0x2630 [ 114.807370][ T6279] ? do_raw_spin_unlock+0x145/0x1e0 [ 114.807387][ T6279] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 114.807416][ T6279] ? rcu_is_watching+0x12/0xc0 [ 114.807441][ T6279] ? rcu_is_watching+0x12/0xc0 [ 114.807457][ T6279] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 114.807475][ T6279] ? lockdep_hardirqs_on+0x78/0x100 [ 114.807524][ T6279] mmap_region+0x35d/0x620 [ 114.807538][ T6279] ? rcu_is_watching+0x12/0xc0 [ 114.807554][ T6279] ? __pfx_mmap_region+0x10/0x10 [ 114.807569][ T6279] ? cap_mmap_addr+0x4b/0x120 [ 114.807590][ T6279] ? bpf_lsm_mmap_addr+0x9/0x30 [ 114.807603][ T6279] ? security_mmap_addr+0x71/0x1e0 [ 114.807620][ T6279] ? __get_unmapped_area+0x255/0x3e0 [ 114.807640][ T6279] do_mmap+0xc63/0x12f0 [ 114.807660][ T6279] ? __pfx_do_mmap+0x10/0x10 [ 114.807677][ T6279] ? __pfx_down_write_killable+0x10/0x10 [ 114.807696][ T6279] vm_mmap_pgoff+0x29e/0x470 [ 114.807717][ T6279] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 114.807735][ T6279] ? do_futex+0x192/0x350 [ 114.807750][ T6279] ? __pfx_do_futex+0x10/0x10 [ 114.807769][ T6279] ksys_mmap_pgoff+0xe4/0x610 [ 114.807786][ T6279] ? __x64_sys_futex+0x358/0x4d0 [ 114.807801][ T6279] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 114.807818][ T6279] ? xfd_validate_state+0x129/0x190 [ 114.807832][ T6279] ? ksys_write+0x1ac/0x250 [ 114.807851][ T6279] __x64_sys_mmap+0x125/0x190 [ 114.807869][ T6279] do_syscall_64+0x10b/0xf80 [ 114.807889][ T6279] ? clear_bhb_loop+0x40/0x90 [ 114.807906][ T6279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.807921][ T6279] RIP: 0033:0x7ff43d79ce59 [ 114.807934][ T6279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.807947][ T6279] RSP: 002b:00007ff43e5fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 114.807961][ T6279] RAX: ffffffffffffffda RBX: 00007ff43da16090 RCX: 00007ff43d79ce59 [ 114.807970][ T6279] RDX: 00000000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 114.807978][ T6279] RBP: 00007ff43d832d6f R08: 0000000000000401 R09: 0000000000008000 [ 114.807987][ T6279] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 114.807996][ T6279] R13: 00007ff43da16128 R14: 00007ff43da16090 R15: 00007ffcf0a75a08 [ 114.808014][ T6279] [ 116.118204][ T6295] netlink: 28 bytes leftover after parsing attributes in process `syz.0.100'. [ 118.965280][ T6312] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 119.032107][ T6312] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 119.199401][ T6312] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 119.335730][ T6312] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 119.414474][ T6312] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 119.544961][ T5637] Bluetooth: hci0: command 0x0c1a tx timeout [ 119.564612][ T6312] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 119.696148][ T6312] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 119.747884][ T6312] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 119.882524][ T6312] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 119.959282][ T6312] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 119.986014][ T6312] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.061046][ T6312] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.464479][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'. [ 121.053399][ T30] audit: type=1800 audit(1779380732.164:4): pid=6356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.113" name="dbroot" dev="configfs" ino=11253 res=0 errno=0 [ 121.386230][ T5637] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.624724][ T5637] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.705731][ T5637] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.734127][ T6359] random: crng reseeded on system resumption [ 122.024845][ T5637] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.464708][ T5637] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.704737][ T5637] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.785014][ T5637] Bluetooth: hci3: command 0x0c1a tx timeout [ 124.104721][ T5637] Bluetooth: hci2: command 0x0c1a tx timeout [ 124.152654][ T6400] netlink: 12 bytes leftover after parsing attributes in process `syz.3.120'. [ 125.545207][ T5637] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.796140][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.124'. [ 125.864971][ T5637] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.184776][ T5637] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.392842][ T5637] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 127.601133][ T6463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.128'. [ 128.000163][ T6402] Process accounting paused [ 128.793914][ T6478] netlink: 218 bytes leftover after parsing attributes in process `syz.3.132'. [ 131.003069][ T5624] Bluetooth: hci0: ACL packet too small [ 131.087258][ T6511] netlink: 346 bytes leftover after parsing attributes in process `syz.2.139'. [ 131.846068][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.144'. [ 132.549284][ T6531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.752809][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.764203][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.341303][ T6523] process 'syz.3.142' launched './file0' with NULL argv: empty string added [ 133.988006][ T6554] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 134.018906][ T6554] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 134.057854][ T6554] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 134.084210][ T6554] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 134.138523][ T6554] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 134.410535][ T6569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'. [ 134.494606][ T6569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.149'. [ 135.386070][ T5624] Bluetooth: hci0: command 0x0c1a tx timeout [ 135.770057][ T6596] netlink: 342 bytes leftover after parsing attributes in process `syz.2.154'. [ 135.818149][ T6596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'. [ 136.106662][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout [ 136.112693][ T5637] Bluetooth: hci1: command 0x0c1a tx timeout [ 136.131050][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.156'. [ 136.185819][ T5637] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.384846][ T6608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.158'. [ 136.540571][ T6605] block nbd2: not configured, cannot reconfigure [ 138.185572][ T5637] Bluetooth: hci3: command 0x0c1a tx timeout [ 140.079971][ T6672] FAULT_INJECTION: forcing a failure. [ 140.079971][ T6672] name failslab, interval 1, probability 0, space 0, times 0 [ 140.141877][ T6672] CPU: 0 UID: 0 PID: 6672 Comm: syz.1.171 Not tainted syzkaller #0 PREEMPT(full) [ 140.141899][ T6672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 140.141912][ T6672] Call Trace: [ 140.141917][ T6672] [ 140.141922][ T6672] dump_stack_lvl+0x100/0x190 [ 140.141952][ T6672] should_fail_ex.cold+0x5/0xa [ 140.141971][ T6672] should_failslab+0xc2/0x120 [ 140.141991][ T6672] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 140.142017][ T6672] ? vm_area_alloc+0x1f/0x160 [ 140.142037][ T6672] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 140.142062][ T6672] vm_area_alloc+0x1f/0x160 [ 140.142081][ T6672] __mmap_region+0x104d/0x2da0 [ 140.142104][ T6672] ? __lock_acquire+0x4a5/0x2630 [ 140.142118][ T6672] ? __pfx___mmap_region+0x10/0x10 [ 140.142157][ T6672] ? lock_acquire+0x1b1/0x370 [ 140.142179][ T6672] ? lapic_next_event+0x10/0x20 [ 140.142193][ T6672] ? clockevents_program_event+0x1ef/0x820 [ 140.142217][ T6672] ? __hrtimer_rearm_deferred+0x24d/0x740 [ 140.142235][ T6672] ? find_held_lock+0x2b/0x80 [ 140.142252][ T6672] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 140.142299][ T6672] mmap_region+0x35d/0x620 [ 140.142313][ T6672] ? rcu_is_watching+0x12/0xc0 [ 140.142330][ T6672] ? __pfx_mmap_region+0x10/0x10 [ 140.142345][ T6672] ? cap_mmap_addr+0x4b/0x120 [ 140.142372][ T6672] ? bpf_lsm_mmap_addr+0x9/0x30 [ 140.142386][ T6672] ? security_mmap_addr+0x71/0x1e0 [ 140.142404][ T6672] ? __get_unmapped_area+0x255/0x3e0 [ 140.142423][ T6672] do_mmap+0xc63/0x12f0 [ 140.142444][ T6672] ? __pfx_do_mmap+0x10/0x10 [ 140.142461][ T6672] ? __pfx_down_write_killable+0x10/0x10 [ 140.142481][ T6672] vm_mmap_pgoff+0x29e/0x470 [ 140.142502][ T6672] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 140.142521][ T6672] ? do_futex+0x192/0x350 [ 140.142537][ T6672] ? __pfx_do_futex+0x10/0x10 [ 140.142556][ T6672] ksys_mmap_pgoff+0xe4/0x610 [ 140.142574][ T6672] ? __x64_sys_futex+0x358/0x4d0 [ 140.142590][ T6672] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 140.142606][ T6672] ? xfd_validate_state+0x129/0x190 [ 140.142620][ T6672] ? ksys_write+0x1ac/0x250 [ 140.142639][ T6672] __x64_sys_mmap+0x125/0x190 [ 140.142657][ T6672] do_syscall_64+0x10b/0xf80 [ 140.142678][ T6672] ? clear_bhb_loop+0x40/0x90 [ 140.142695][ T6672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.142709][ T6672] RIP: 0033:0x7f162d79ce59 [ 140.142728][ T6672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.142745][ T6672] RSP: 002b:00007f162e64e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 140.142759][ T6672] RAX: ffffffffffffffda RBX: 00007f162da15fa0 RCX: 00007f162d79ce59 [ 140.142769][ T6672] RDX: 00000000000000df RSI: 0000000004020009 RDI: 0000000000000000 [ 140.142778][ T6672] RBP: 00007f162d832d6f R08: 0000000000000401 R09: 0000000000008000 [ 140.142786][ T6672] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 140.142795][ T6672] R13: 00007f162da16038 R14: 00007f162da15fa0 R15: 00007ffcbe9f4a08 [ 140.142814][ T6672] [ 141.992021][ T6678] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 142.028943][ T6678] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 142.072088][ T6678] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 142.120272][ T6678] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 143.384817][ T5637] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.025317][ T5637] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.104847][ T5637] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.184974][ T5637] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.397436][ T30] audit: type=1326 audit(1779380755.504:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6744 comm="syz.2.186" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd45e79ce59 code=0x0 [ 145.620596][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.193'. [ 148.040205][ T6813] FAULT_INJECTION: forcing a failure. [ 148.040205][ T6813] name failslab, interval 1, probability 0, space 0, times 0 [ 148.130783][ T6813] CPU: 0 UID: 0 PID: 6813 Comm: syz.2.205 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.130810][ T6813] Tainted: [L]=SOFTLOCKUP [ 148.130815][ T6813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 148.130823][ T6813] Call Trace: [ 148.130829][ T6813] [ 148.130834][ T6813] dump_stack_lvl+0x100/0x190 [ 148.130855][ T6813] should_fail_ex.cold+0x5/0xa [ 148.130874][ T6813] should_failslab+0xc2/0x120 [ 148.130891][ T6813] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 148.130912][ T6813] ? __proc_create+0x2cb/0x8c0 [ 148.130935][ T6813] __proc_create+0x2cb/0x8c0 [ 148.130953][ T6813] ? __pfx___proc_create+0x10/0x10 [ 148.130973][ T6813] ? _raw_write_unlock+0x28/0x50 [ 148.130994][ T6813] ? proc_register+0x559/0x8a0 [ 148.131014][ T6813] proc_create_reg+0x75/0x170 [ 148.131032][ T6813] ? __pfx_rt_acct_proc_show+0x10/0x10 [ 148.131048][ T6813] proc_create_single_data+0x86/0x130 [ 148.131067][ T6813] ? __pfx_proc_create_single_data+0x10/0x10 [ 148.131087][ T6813] ? timer_init_key+0x155/0x330 [ 148.131108][ T6813] ? __pfx_nl_fib_input+0x10/0x10 [ 148.131132][ T6813] ip_rt_do_proc_init+0xf9/0x1d0 [ 148.131147][ T6813] ? __pfx_ip_rt_do_proc_init+0x10/0x10 [ 148.131161][ T6813] ops_init+0x1e2/0x5f0 [ 148.131180][ T6813] setup_net+0x118/0x3a0 [ 148.131198][ T6813] ? __pfx_setup_net+0x10/0x10 [ 148.131214][ T6813] ? mutex_init_lockdep+0xf1/0x120 [ 148.131233][ T6813] copy_net_ns+0x46f/0x7c0 [ 148.131253][ T6813] create_new_namespaces+0x3ea/0xac0 [ 148.131276][ T6813] unshare_nsproxy_namespaces+0xf2/0x220 [ 148.131296][ T6813] ksys_unshare+0x438/0xab0 [ 148.131318][ T6813] ? __pfx_ksys_unshare+0x10/0x10 [ 148.131337][ T6813] ? xfd_validate_state+0x129/0x190 [ 148.131358][ T6813] __x64_sys_unshare+0x31/0x40 [ 148.131378][ T6813] do_syscall_64+0x10b/0xf80 [ 148.131398][ T6813] ? clear_bhb_loop+0x40/0x90 [ 148.131415][ T6813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.131429][ T6813] RIP: 0033:0x7fd45e79ce59 [ 148.131442][ T6813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.131455][ T6813] RSP: 002b:00007fd45f67a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 148.131469][ T6813] RAX: ffffffffffffffda RBX: 00007fd45ea15fa0 RCX: 00007fd45e79ce59 [ 148.131478][ T6813] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 148.131486][ T6813] RBP: 00007fd45e832d6f R08: 0000000000000000 R09: 0000000000000000 [ 148.131494][ T6813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.131503][ T6813] R13: 00007fd45ea16038 R14: 00007fd45ea15fa0 R15: 00007fff2d76ccd8 [ 148.131521][ T6813] [ 148.409111][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 148.691579][ T6824] random: crng reseeded on system resumption [ 151.413678][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'. [ 153.179583][ T6927] netlink: 968 bytes leftover after parsing attributes in process `syz.3.231'. [ 153.222443][ T6927] tc_dump_action: action bad kind [ 153.517531][ T6934] netlink: 338 bytes leftover after parsing attributes in process `syz.3.233'. [ 153.563350][ T6934] netlink: 338 bytes leftover after parsing attributes in process `syz.3.233'. [ 153.576177][ T6926] ubi0: attaching mtd0 [ 153.636093][ T6926] ubi0: scanning is finished [ 153.679149][ T6934] netlink: 338 bytes leftover after parsing attributes in process `syz.3.233'. [ 153.700415][ T6926] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 153.798014][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'. [ 154.237220][ T6926] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 156.373949][ T5637] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 156.700225][ T6995] tipc: Started in network mode [ 156.712675][ T6995] tipc: Node identity ee00, cluster identity 4711 [ 156.766685][ T6995] tipc: Node number set to 60928 [ 157.348757][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.246'. [ 158.425378][ T5624] Bluetooth: hci3: command 0x0c1a tx timeout [ 159.161764][ T6996] Process accounting resumed [ 160.173420][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.258'. [ 160.507460][ T5637] Bluetooth: hci3: command 0x0c1a tx timeout [ 163.982201][ T7130] ================================================================== [ 163.990286][ T7130] BUG: KASAN: slab-out-of-bounds in cache_seq_start_rcu+0x3fe/0x420 [ 163.998257][ T7130] Read of size 8 at addr ffff88807ae12800 by task syz.0.272/7130 [ 164.005950][ T7130] [ 164.008256][ T7130] CPU: 0 UID: 0 PID: 7130 Comm: syz.0.272 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.008276][ T7130] Tainted: [L]=SOFTLOCKUP [ 164.008281][ T7130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 164.008290][ T7130] Call Trace: [ 164.008295][ T7130] [ 164.008300][ T7130] dump_stack_lvl+0x100/0x190 [ 164.008316][ T7130] print_report+0x13d/0x4b0 [ 164.008342][ T7130] ? __virt_addr_valid+0x239/0x430 [ 164.008364][ T7130] ? cache_seq_start_rcu+0x3fe/0x420 [ 164.008378][ T7130] kasan_report+0xdf/0x1d0 [ 164.008394][ T7130] ? cache_seq_start_rcu+0x3fe/0x420 [ 164.008409][ T7130] cache_seq_start_rcu+0x3fe/0x420 [ 164.008425][ T7130] seq_read_iter+0x2c1/0x1270 [ 164.008444][ T7130] seq_read+0x33b/0x4c0 [ 164.008458][ T7130] ? __pfx_seq_read+0x10/0x10 [ 164.008473][ T7130] ? lock_acquire+0x1b1/0x370 [ 164.008489][ T7130] ? __pfx_seq_read+0x10/0x10 [ 164.008503][ T7130] proc_reg_read+0x240/0x330 [ 164.008519][ T7130] ? __pfx_proc_reg_read+0x10/0x10 [ 164.008535][ T7130] vfs_read+0x1e4/0xb30 [ 164.008551][ T7130] ? __pfx_vfs_read+0x10/0x10 [ 164.008565][ T7130] ? __fget_files+0x215/0x3d0 [ 164.008582][ T7130] ? __fget_files+0x21f/0x3d0 [ 164.008599][ T7130] ksys_read+0x12a/0x250 [ 164.008620][ T7130] ? __pfx_ksys_read+0x10/0x10 [ 164.008635][ T7130] ? rcu_is_watching+0x12/0xc0 [ 164.008652][ T7130] do_syscall_64+0x10b/0xf80 [ 164.008673][ T7130] ? clear_bhb_loop+0x40/0x90 [ 164.008689][ T7130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.008703][ T7130] RIP: 0033:0x7ff43d79ce59 [ 164.008715][ T7130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.008729][ T7130] RSP: 002b:00007ff43e61e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 164.008743][ T7130] RAX: ffffffffffffffda RBX: 00007ff43da15fa0 RCX: 00007ff43d79ce59 [ 164.008752][ T7130] RDX: 0000000000000087 RSI: 0000200000000100 RDI: 0000000000000004 [ 164.008760][ T7130] RBP: 00007ff43d832d6f R08: 0000000000000000 R09: 0000000000000000 [ 164.008768][ T7130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.008777][ T7130] R13: 00007ff43da16038 R14: 00007ff43da15fa0 R15: 00007ffcf0a75a08 [ 164.008790][ T7130] [ 164.008794][ T7130] [ 164.230634][ T7130] Allocated by task 5630: [ 164.234951][ T7130] kasan_save_stack+0x30/0x50 [ 164.239616][ T7130] kasan_save_track+0x14/0x30 [ 164.244271][ T7130] __kasan_kmalloc+0xaa/0xb0 [ 164.248841][ T7130] __kmalloc_noprof+0x301/0x850 [ 164.253678][ T7130] cache_create_net+0xa2/0x1f0 [ 164.258421][ T7130] nfsd_idmap_init+0x11f/0x250 [ 164.263166][ T7130] nfsd_net_init+0x85/0x3e0 [ 164.267656][ T7130] ops_init+0x1e2/0x5f0 [ 164.271793][ T7130] setup_net+0x118/0x3a0 [ 164.276018][ T7130] copy_net_ns+0x46f/0x7c0 [ 164.280418][ T7130] create_new_namespaces+0x3ea/0xac0 [ 164.285687][ T7130] unshare_nsproxy_namespaces+0xf2/0x220 [ 164.291304][ T7130] ksys_unshare+0x438/0xab0 [ 164.295794][ T7130] __x64_sys_unshare+0x31/0x40 [ 164.300544][ T7130] do_syscall_64+0x10b/0xf80 [ 164.305120][ T7130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.310993][ T7130] [ 164.313295][ T7130] The buggy address belongs to the object at ffff88807ae12000 [ 164.313295][ T7130] which belongs to the cache kmalloc-2k of size 2048 [ 164.327325][ T7130] The buggy address is located 0 bytes to the right of [ 164.327325][ T7130] allocated 2048-byte region [ffff88807ae12000, ffff88807ae12800) [ 164.341886][ T7130] [ 164.344197][ T7130] The buggy address belongs to the physical page: [ 164.350584][ T7130] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807ae11000 pfn:0x7ae10 [ 164.360629][ T7130] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 164.369104][ T7130] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 164.377595][ T7130] page_type: f5(slab) [ 164.381558][ T7130] raw: 00fff00000000240 ffff88813fe34000 ffffea00008eb410 ffffea000089ac10 [ 164.390132][ T7130] raw: ffff88807ae11000 0000000800080007 00000000f5000000 0000000000000000 [ 164.398697][ T7130] head: 00fff00000000240 ffff88813fe34000 ffffea00008eb410 ffffea000089ac10 [ 164.407346][ T7130] head: ffff88807ae11000 0000000800080007 00000000f5000000 0000000000000000 [ 164.415996][ T7130] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 164.424641][ T7130] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 164.433283][ T7130] page dumped because: kasan: bad access detected [ 164.439701][ T7130] page_owner tracks the page as allocated [ 164.445390][ T7130] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5630, tgid 5630 (syz-executor), ts 70731693481, free_ts 70369863784 [ 164.466729][ T7130] post_alloc_hook+0xfd/0x120 [ 164.471397][ T7130] get_page_from_freelist+0x11a6/0x33b0 [ 164.476932][ T7130] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 164.482813][ T7130] new_slab+0xa6/0x6c0 [ 164.486868][ T7130] refill_objects+0x277/0x420 [ 164.491530][ T7130] __pcs_replace_empty_main+0x375/0x650 [ 164.497063][ T7130] __kmalloc_noprof+0x688/0x850 [ 164.501893][ T7130] cache_create_net+0xa2/0x1f0 [ 164.506636][ T7130] nfsd_idmap_init+0x11f/0x250 [ 164.511382][ T7130] nfsd_net_init+0x85/0x3e0 [ 164.516306][ T7130] ops_init+0x1e2/0x5f0 [ 164.520444][ T7130] setup_net+0x118/0x3a0 [ 164.524665][ T7130] copy_net_ns+0x46f/0x7c0 [ 164.529063][ T7130] create_new_namespaces+0x3ea/0xac0 [ 164.534331][ T7130] unshare_nsproxy_namespaces+0xf2/0x220 [ 164.539946][ T7130] ksys_unshare+0x438/0xab0 [ 164.544438][ T7130] page last free pid 5655 tgid 5655 stack trace: [ 164.550741][ T7130] __free_frozen_pages+0x747/0x1040 [ 164.555925][ T7130] qlist_free_all+0x47/0xf0 [ 164.560406][ T7130] kasan_quarantine_reduce+0x1a0/0x1f0 [ 164.565841][ T7130] __kasan_slab_alloc+0x69/0x90 [ 164.570672][ T7130] __kvmalloc_node_noprof+0x316/0xa00 [ 164.576024][ T7130] seq_read_iter+0x819/0x1270 [ 164.580682][ T7130] proc_reg_read_iter+0x220/0x310 [ 164.585693][ T7130] vfs_read+0x825/0xb30 [ 164.589834][ T7130] ksys_read+0x12a/0x250 [ 164.594056][ T7130] do_syscall_64+0x10b/0xf80 [ 164.598634][ T7130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.604506][ T7130] [ 164.606807][ T7130] Memory state around the buggy address: [ 164.612413][ T7130] ffff88807ae12700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 164.620453][ T7130] ffff88807ae12780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 164.628492][ T7130] >ffff88807ae12800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 164.636530][ T7130] ^ [ 164.640575][ T7130] ffff88807ae12880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 164.648638][ T7130] ffff88807ae12900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 164.656674][ T7130] ================================================================== [ 166.098976][ T7132] vhci_hcd: not connected 4 [ 166.114930][ T7130] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 166.122133][ T7130] CPU: 0 UID: 0 PID: 7130 Comm: syz.0.272 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.132879][ T7130] Tainted: [L]=SOFTLOCKUP [ 166.137179][ T7130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 166.147212][ T7130] Call Trace: [ 166.150471][ T7130] [ 166.153388][ T7130] dump_stack_lvl+0x100/0x190 [ 166.158075][ T7130] vpanic+0x552/0x970 [ 166.162038][ T7130] ? __pfx_vpanic+0x10/0x10 [ 166.166519][ T7130] ? mark_held_locks+0x40/0x70 [ 166.171268][ T7130] ? cache_seq_start_rcu+0x3fe/0x420 [ 166.176535][ T7130] panic+0xd1/0xe0 [ 166.180238][ T7130] ? __pfx_panic+0x10/0x10 [ 166.184636][ T7130] ? cache_seq_start_rcu+0x3fe/0x420 [ 166.189901][ T7130] ? preempt_schedule_common+0x42/0xc0 [ 166.195349][ T7130] ? check_panic_on_warn+0x1f/0x90 [ 166.200443][ T7130] check_panic_on_warn.cold+0x19/0x34 [ 166.205806][ T7130] end_report.part.0+0x3a/0x90 [ 166.210556][ T7130] kasan_report.cold+0xe/0x18 [ 166.215219][ T7130] ? cache_seq_start_rcu+0x3fe/0x420 [ 166.220489][ T7130] cache_seq_start_rcu+0x3fe/0x420 [ 166.225589][ T7130] seq_read_iter+0x2c1/0x1270 [ 166.230254][ T7130] seq_read+0x33b/0x4c0 [ 166.234391][ T7130] ? __pfx_seq_read+0x10/0x10 [ 166.239052][ T7130] ? lock_acquire+0x1b1/0x370 [ 166.243711][ T7130] ? __pfx_seq_read+0x10/0x10 [ 166.248370][ T7130] proc_reg_read+0x240/0x330 [ 166.252944][ T7130] ? __pfx_proc_reg_read+0x10/0x10 [ 166.258043][ T7130] vfs_read+0x1e4/0xb30 [ 166.262186][ T7130] ? __pfx_vfs_read+0x10/0x10 [ 166.266843][ T7130] ? __fget_files+0x215/0x3d0 [ 166.271506][ T7130] ? __fget_files+0x21f/0x3d0 [ 166.276182][ T7130] ksys_read+0x12a/0x250 [ 166.280408][ T7130] ? __pfx_ksys_read+0x10/0x10 [ 166.285156][ T7130] ? rcu_is_watching+0x12/0xc0 [ 166.289905][ T7130] do_syscall_64+0x10b/0xf80 [ 166.294484][ T7130] ? clear_bhb_loop+0x40/0x90 [ 166.299146][ T7130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.305023][ T7130] RIP: 0033:0x7ff43d79ce59 [ 166.309418][ T7130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.329017][ T7130] RSP: 002b:00007ff43e61e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 166.337413][ T7130] RAX: ffffffffffffffda RBX: 00007ff43da15fa0 RCX: 00007ff43d79ce59 [ 166.345364][ T7130] RDX: 0000000000000087 RSI: 0000200000000100 RDI: 0000000000000004 [ 166.353312][ T7130] RBP: 00007ff43d832d6f R08: 0000000000000000 R09: 0000000000000000 [ 166.361264][ T7130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.369214][ T7130] R13: 00007ff43da16038 R14: 00007ff43da15fa0 R15: 00007ffcf0a75a08 [ 166.377171][ T7130] [ 166.380235][ T7130] Kernel Offset: disabled [ 166.384548][ T7130] Rebooting in 86400 seconds..