last executing test programs: 2m42.030370777s ago: executing program 3 (id=1909): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x60, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@HSR_A_IF2_SEQ={0x6, 0x7, 0x7ffe}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x1}, @HSR_A_IF1_AGE={0x8, 0x3, 0x400}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @remote}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40080) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x48880) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000003000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b60dbc21ae1113b793a4dcf96c2b75dba9458c07600b50384f22e66b7cdbcab68372", @ANYRES16=0x0, @ANYBLOB="0d012cbd7000fbdbdb250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x4020000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/projid_map\x00', 0x62803, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='h'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r0 = socket(0x2c, 0x3, 0x0) bind$auto(r0, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast2}, 0x5) shmctl$auto_IPC_STAT(0x6, 0x2, &(0x7f0000000240)={{0x3, 0x0, 0x0, 0xfffffff5, 0x10, 0x3, 0x6}, 0xfff, 0x3, 0x7fffffff, 0x1, @inferred, @inferred, 0x5, 0x0, &(0x7f0000000040)="78ce57d121adcdb38960", 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x29}, 0x20100007}, 0x3, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) writev$auto(r0, &(0x7f0000000100)={0x0, 0x1}, 0x2) write$auto(0x3, 0x0, 0xfffffdef) setsockopt$auto_SO_DEBUG(r1, 0x6, 0x1, 0x0, 0xda3) 2m41.356910264s ago: executing program 3 (id=1912): r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x4a901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f00000001c0)={0x0, 0x5512, 0x0}) r1 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x100, 0x0) read$auto_proc_pid_attr_operations_base(r1, &(0x7f0000000080)=""/37, 0x25) 2m41.109065947s ago: executing program 3 (id=1913): openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x8, 0xc, 0x0, 0x0, 0x48) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) fsetxattr$auto(r0, &(0x7f0000000180)=':\xbf+<\x8a}\x00\xeb\xfa\xe6\x8d\x02\\VD\x04\x00\x00\x00*\x80\xa4\xf4vql\xa9\x05o\xf7\x9e\xfd\xf7\x00\x00\x00\x00H_/Z>n\xf5F\xbf\xd3\xefi\x91\x88\x1daIu7\xef!\xd0\x04\xdes\xfe`\xf5e;4\xbek\xf9\xec%\xbc\xd4\xfc`\xb9\n\xb5\xa5V\x98\x14]\x8a\x03\xd9', 0x0, 0x7bd, 0x1) socket(0xa, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mprotect$auto(0x0, 0x8000000000000001, 0x8) r1 = socket(0xa, 0x3, 0x3a) ioctl$auto(r1, 0x5, 0x1) unshare$auto(0x40000080) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) socket(0xa, 0x1, 0x84) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) socket(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x40001, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(r2, 0x8, 0x0) socket(0x1d, 0x1, 0x84) 2m38.540177541s ago: executing program 3 (id=1923): r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/oom_adj\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(0x0, 0x0) mount$auto(0x0, 0x0, 0x0, 0x8000, 0x0) mlock$auto(0x3, 0xf) read$auto(r0, 0x0, 0x4) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) init_module$auto(0x0, 0xfffff, 0x0) 2m38.238433789s ago: executing program 3 (id=1925): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/devices/system/cpu/vulnerabilities/spectre_v2\x00', 0x40780, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram3/queue/nr_zones\x00', 0x2881, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000002c0)="dd", 0x1) r2 = memfd_secret$auto(0x0) ftruncate$auto(r2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x24, r4, 0x1, 0x4070bd27, 0x25dfdbf9, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20044040) ftruncate$auto(0x3, 0x700) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0xfc, 0x0) r7 = memfd_create$auto(0x0, 0x4) ioctl$auto_FS_IOC_UNRESVSP(r7, 0x40305829, 0x3) select$auto(0x9, 0x0, &(0x7f0000000080)={[0x209c, 0x1, 0x6, 0x8000, 0xfffffffffffffffc, 0x4, 0x9, 0x800002017d, 0x4, 0xdfdffdff, 0x3ff, 0xd59, 0xfb, 0x1, 0x7f, 0x7]}, 0x0, 0x0) bpf$auto(0x0, &(0x7f0000000200)=@bpf_attr_11={0x5, 0x3ff, 0x2, 0x81, 0x8689, 0x9ef, 0x6c38}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) fchdir$auto(r0) r9 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x40890) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 2m37.922546303s ago: executing program 3 (id=1927): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup$auto(0x82, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) msgctl$auto_MSG_INFO(0x454d, 0xc, &(0x7f0000000240)={{0x3f, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x7f, 0x4}, &(0x7f0000000080)=0x71, &(0x7f00000000c0)=0xc1, 0xb2ae, 0x7ff, 0x7, 0x6, 0x508, 0xfff, 0x3, 0xb, @raw=0x8, @raw=0x80000000}) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r0, &(0x7f0000001780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001740)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9b0e0000", @ANYRES16, @ANYBLOB="920629bd7000fedbdf252400000005000800030000000c001700070000000000000018122f806800478008000600", @ANYRES32=r3, @ANYBLOB="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"], 0x1280}, 0x1, 0x0, 0x0, 0x4880}, 0x800) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x40000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC0\x00', 0x80, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x9, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x50, 0x5, 0x1, 0x7, 0x8, 0x8, 0x100000002}}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000) sched_getattr$auto(0x0, &(0x7f0000000000)={0xcf86, 0x106, 0x6, 0x200, 0x7, 0xb, 0x6, 0xfffffffffffffff8, 0x8, 0x90}, 0x68, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) brk$auto(0x8) socketcall$auto_SYS_GETSOCKOPT(0xf, &(0x7f0000000100)=0x3) 2m27.539127193s ago: executing program 2 (id=1951): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_DELPDP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd2f, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x4000000, 0x0, 0x10}, 0x0) r3 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xe4, r3, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x2}, @IOAM6_ATTR_SC_DATA={0xc7, 0x5, "b5a39bfc83e3ad45d82609f692b9564862031cb7fee892927785765636c9e0ea7ef88f1f158b5db5a3edda0c40b72e9366907fd6d258ae19cef12c1de35db2b30577a75f05a780808c5d15798213335358c488912e40ae9e4d171302d93889cde5405bd3aee1d556e0a761c2a49c9022170f4bf186a7fa836aefee3f9662acef77788f088a9e13c9d5548259daf4259bc2f7a22ccef6e4ced500e5eb31a914f51a361591adfd9ebdd1a806df1ce408dc28ccd2bd6ac7dd7222ed38c48565a070243341"}]}, 0xe4}, 0x1, 0x0, 0x0, 0x60000000}, 0x801) getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', &(0x7f0000000180)=0x40) mmap$auto(0x0, 0x810000, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f) bind$auto(0x3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x4}}, 0x6a) r4 = getpid() process_vm_readv$auto(r4, 0x0, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) setsockopt$auto(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x14) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xfffffffffffffffe, 0x0) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) dup$auto(r6) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ipv6_route\x00', 0x80000, 0x0) setrlimit$auto(0x7, &(0x7f0000000080)={0x0, 0x6}) open_tree$auto(0xffffffffffffffff, 0x0, 0xc369) pread64$auto(r7, 0x0, 0x6000000000, 0x100000004) 2m26.936746761s ago: executing program 2 (id=1953): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r1, 0x0, 0xfffffdf1) linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) sysfs$auto(0x2, 0x23, 0x0) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0x8) r2 = open(0x0, 0x501040, 0x3c) fallocate$auto(r1, 0x9, 0x2, 0xd) utimes$auto(0x0, 0x0) r3 = clone$auto(0x20003b46, 0x7, 0x0, 0x0, 0x2) mprotect$auto(0x0, 0x8000000000000001, 0x8) mmap$auto(0xfffffffffffffffd, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x0, 0x0) readv$auto(r4, &(0x7f0000000140)={0x0, 0x8}, 0x7) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01032cb57000fbdbdf250a00000f0600010018"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r10 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000040), r8) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r8, &(0x7f0000002700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000026c0)={&(0x7f00000011c0)={0xcb8, r10, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NCSI_ATTR_DATA={0x2a9, 0x5, "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"}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x1ff}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x1}, @NCSI_ATTR_PACKAGE_LIST={0x4}, @NCSI_ATTR_PACKAGE_LIST={0x9e3, 0x2, 0x0, 0x1, [@typed={0x8, 0xcb, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x1aa, 0x44, 0x0, 0x1, [@generic="c9a70cc8b0cebffdfcc6269d668f0cfdd12bb62b97fc3be8af70698cb8d7cf73f35b33cf2ff1a7749ea4d28be2de0752a8edbe7b6e4fdac10c5cf090fc208347f3ea6fd5f2f5452f97747448f3b46f2cce7f65db696784ebf8022d4b7ce2de421cef00cb8dac8ff2c4aae5f58a8aac72523a14c92172e1c70b08d7e1dc7bf303a4a5c5520b29babc9ddfc1b3c6f869684b0103b9293f8ccdcd942aa941406120cb6910c1377c6ee5b9105d97f27f56e216047e8a3b4b02dfdec0b1736daf3c3acfc86c12c26041d5987be457889bcd6a", @generic="bf85f1b59be6907c1e589e9fffab301cf5377ff7b4439a51ae7c874ef08ff2dc0ab396a6ef68ef2bcd154aac935fa8cc46a735c84e35abf83aa0cb58eed68f7e88d76f255e5e29c1655d203ad0f1ea43f9b899058366d545b32e41bb51b8dc056c623b1f4078cbea8d9c084e95a2c342afc43b597629a4f801a47fd60475e7e08e2b88fa57f770c816a2ab35c1e27bd6f0e9237815ad1a945c29f93ddec4e0d84b8ebbda4ff061455a63e652a956f2c74f12a459bddd278f9694c739f69b3d75804b6d5ee591dd255b598b02bfef6783480d64356310"]}, @generic="a5820c39c52454907dcc7f0b7dcaf8c28e9c79c25be9f40c8c98649621739ef745abceb2b57d398b99d48db36be08b94af33d741f5fdc6a9f994133f4f90135b8be40cf12be9b0b0f9cd96c74a5c6ecd8114a551198ee8433f7d11664d9f42866d99be420a8bd8dc10aa2f48e611d2bad0882715e38527864ba266ba575f5ef360da6468f7891a1a618f06c9590165", @nested={0x79c, 0x5e, 0x0, 0x1, [@generic="602256ecd2addad48c7b7a1b0108c12d6d41fb873901838e890be5c71b9f8f251e2bb7557b79f881aad4b6f7e81a58d9b19c5ba62e4b7378d644636891ff5aa5051db4ed80e74e0d19cecc2366779cf51ff07924ca8fdb8de4110bebad0aa861730e85ac071c8e9b62fe3e7f866bfd35eb2f258824cb89c464944d9b44ceb30b61d0dd62cf61c504eb17fb4486dce4283ef490bbd463d839ef8fb90cab9f3e3710cbc8a51bdc45a5b99beed991821e6af213b3949a2728d982a392e3e084962076ebee65e95c1afe9e0adcd111422bdd902c8dee9c8fd2784aa372d8b17a40cc3cea", @generic, @generic="b18be3baf048ada1b2d0a8df540348ee226a15c43d976e92ebb250519513ef8c644ecabc0c40add4df48e06c45971138d4d7a66433b4ae226af94fde2f5ff90228df26ccabe5bb68b6387102639f8169b95eabeab7776065c5c61dcfc441274d018c93d59846fc59f0123d141459ef557a652fafdb14f1622dbb7dcbf1c4901f75b95fa8e0d9341e", @generic="a0c7da31c63746ae77b5ecb7fcfe5c9035ab1633b22b4de571b7366f09b922dd0b6491f8624e4671858c1357f32958a01d4c9881eaf142e0531cbd40f16542c631f32da9d6f785c95e858227f469eb313f3356ad85eb", @nested={0x5c2, 0x136, 0x0, 0x1, [@generic="fa9f5d88dc74d1049d1d7f31c2d06848e572c8cd5c31decbd18e2e515906aedbe280eea835cda458fbab209678d2d305506f83f7e17f08b387e25a46f8b4f0263a0b45793f6219f316e98e743e775d57942ebb3843de40fdcea33c473675738dd103f53dff201ce7b4d9725e2a14ea756eef9ff204f687a74ec2c03c2c647b6cca2fc600aa374c3e5c181727a02cd6081f28e25a342e4d5f4296634852375f5bd4da378b4e9708db18c667465eeb24e38b62f46fbca3dbce91d8b4ae03f9bb49230b6e044696425a9b38c1885bac647c3f785d30999c0fb74eb0314e41a4b1213a4c", @nested={0x4cc, 0x16a, 0x0, 0x1, [@typed={0x8, 0x5a, 0x0, 0x0, @u32=0x7}, @nested={0x1c, 0x1b, 0x0, 0x1, [@nested={0x4, 0x74}, @typed={0x8, 0x157, 0x0, 0x0, @uid}, @nested={0x4, 0x143}, @typed={0x8, 0xd1, 0x0, 0x0, @fd=r8}]}, @generic="cdc6415b7f45cce59cf23a1b7649", @nested={0x2ac, 0x113, 0x0, 0x1, [@nested={0x4, 0xb4}, @typed={0x8, 0x119, 0x0, 0x0, @fd=r0}, @generic="e8ce98077de0eaa0bc12d1a16b69fcc846c640dd638973213e8e21448c66c7107469c476e2a1622505f3150a0dff1330bb7c859af8cbee9e814309d5c2754dc1ce78941a22f4b3d13eaab27b5d846eb1016e6052a916276f7bbbb33552c80ed32892016a0b846599240b2d00df029c1e7c2505e5ddd421b6c4fedf23d2f446d1da713fe41c745db4c79539fb4362186da413857726530fb9f22299790c63b238ecfaebfa", @generic="b8b057b0068fd5550b69fb4fab0e4b9795db47be6a1cbd3d02f101f449f9bcd673e8eca58bbb42a3c3493a75c9dee80eb28adf598c5fe1a14644fc712352", @typed={0x8, 0x30, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="8525ea467141c8", @generic="2779ac8841cdb414a3af5ab665a12e4e0d51b7c96bf45cad31f909ec973d929035c4161ef9fd6c93c167c7e8280d9ded82a67de3e45db73dbd620b396631f800bcc5ce0d820bc21d0d27f65b71b3bbfb0b0378b135c456a8d77f769c83d77dcf23a04151c567c43481f3c88a0fc9d0151b8dffba60b2face744f7258792178641700070ead36f99b3f62f04758e8f5d2c8a4379339f9611f19ee58103a42", @typed={0x8, 0x12e, 0x0, 0x0, @fd=r6}, @generic="902e1da3cb626f45abae361c22d4093c07acd23acb450a4707fec3eb41dfc0f585e85476efcc9ca6a0fd9f612cfff6e45c54", @generic="d3f6ee6496ae635cb8b37695c69ca1c357d7760b36f0d035932ad5292bbeb7b760e03e34a45dcdc3107248c56fc4cdce2feb49c1f05d1c1f7e0bc673a1791796fb26b3b4dc13b1286145b4a3fec4bec1074cba9f94e829c7d9ae52b7173461856420d2da8dec399c9371af35293cb30fc4f378309ce5abc08b82d72fbfa59fc53ddc603b074345dfcf7209f42bfc9267314e86ab727740a3f2cf6bc0fae1a40befde14194352b6814a1882f86fe8003069dc720aea8599e3e145b457e68ecbf0c7718cec37659d7b0f5b2e4d8e2f8738f6add0"]}, @generic="203e526ebd8a2fd80ab245b5805d584bfc6edc197a068a5e6e11193b75b97b2ae8509b39c9f28621889e36a9dff71d41b9b053cc9e10a1e1f51f8961141055aaaba3fe247fcf7e50612ede1dee28f8f89534581ba84059a0f8a820e4a916091e5789ce8de52b38865aba0ce6754ac24467e2398a1780c9119041e5fc1f3515a3b8c2482bd7dda25c2a842763c203f69fc79a34e0f1c94f5b14293847ca2ac83ff9193c3f07f98b21e181c569cf5d581b570053baf02f5d688c61020d3f7e42873de23b3b75e608631b0d9abc1ce8b46007c4008c7e51e5d510510351d075328037dc38af9da15edbcc5b27fbde9eae92ee2c7a3d746525c7f60e769a9059", @typed={0x8, 0x11, 0x0, 0x0, @pid=r3}, @nested={0xe4, 0x163, 0x0, 0x1, [@generic="bc6774c23173721a62d979b1ebca05780951dad45ab37f2877f80295f015242e2dd043efa110ff6b0a8456f12a1dea1a01bf684de240a7824a6cf00e", @generic="eb7697456935bf4f6f51c6e4d6b47b28a94e370bf992a7b2b689c078fc9dd4b85a87d59620bd11891aec33725cc325c91f2c", @typed={0xc, 0x13, 0x0, 0x0, @u64=0xcbf}, @nested={0x4, 0x128}, @generic="7ee158dc4874f4ad478e2cc45fce76988290779091b2e7d0efba33346ac592050699f9405755f2455499ef9c0ddaef18c1c721ed6b7abb701299138660b8", @typed={0x8, 0xce, 0x0, 0x0, @u32=0x56}, @generic="34452d98e968074785063a7cc19d1788", @typed={0x8, 0x60, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x145}]}]}, @typed={0x4, 0x77}, @nested={0xc, 0x4, 0x0, 0x1, [@typed={0x8, 0x2c, 0x0, 0x0, @u32=0xd4}]}]}, @generic, @typed={0x14, 0x161, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0xcb8}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$auto_NCSI_CMD_SET_INTERFACE(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r10, @ANYBLOB="00042dbd6aa53cef7cda1d5863fb6a400600"], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x60048880) sendmsg$auto_BATADV_CMD_TP_METER(r0, &(0x7f0000000280)={0x0, 0x60, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, r5, 0x77bed28568c43d3b, 0x70b52a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}]}, 0x30}, 0x1, 0x3f000000}, 0x80) socket(0xf, 0x800, 0x4) 2m26.127435672s ago: executing program 2 (id=1955): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x1d, 0x3, 0x1) getsockopt$auto_SO_ERROR(r1, 0x65, 0x4, 0x0, &(0x7f0000000040)=0x9) setsockopt$auto(0x3, 0x0, 0x2, 0x0, 0x3) write$auto(r0, 0x0, 0x6) write$auto_fops_init_pkru_pkeys(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xfff}, 0x8, 0x311) bpf$auto(0x0, 0x0, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) setreuid$auto(0xee01, 0x0) 2m25.856798354s ago: executing program 2 (id=1957): openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/ns/cgroup\x00', 0xf81e09f4e322f53a, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x820181, 0x0) (async) write$auto(0xca, &(0x7f0000000040)='\x04\x1c\xdc\xec7z\xdf3\xf2\xd3!\v\xb0M\xf8Q\x15\f', 0x2d8) (async) madvise$auto(0x9, 0xadf, 0xa) (async) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x2200, 0x0) fanotify_init$auto(0x605, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) read$auto(r0, 0x0, 0x10001) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2) close_range$auto(0x2, 0x8, 0x0) (async) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyc7\x00', 0x3ed102, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) (async) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x5ff4, 0x1) close_range$auto(0x0, 0x5, 0x0) (async) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8108}, 0x0) (async) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1e"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0000000000000000df4f05000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x240088e4) (async) io_setup$auto(0xffff, &(0x7f0000000580)) (async) write$auto_console_fops_tty_io(r2, 0x0, 0x0) 2m25.132987379s ago: executing program 2 (id=1959): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b7e, r0, 0x8000) r1 = io_uring_setup$auto(0x406, 0x0) io_uring_register$auto_IORING_REGISTER_PBUF_RING(r1, 0x16, 0x0, 0x7) clock_adjtime$auto(0x10, &(0x7f0000000640)={0xb7, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x6, 0x3, 0x0, 0x7, 0x6, 0x8, {0x0, 0x5}, 0xfffffffffffffff8, 0x3, 0x5, 0x7fffffff, 0x0, 0x16, 0x1, 0xaac, 0x5, 0x2, 0x4}) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x7, 0x0, 0x5, 0x3cbb}, 0xfff}, 0x8, 0x311) r2 = pidfd_open$auto(0x1, 0x0) setns(r2, 0x60020000) umount2$auto(&(0x7f0000000000)='.\x00', 0x3) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xb, 0x800, 0x84) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/query\x00', 0x101042, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x181000, 0x0) r3 = io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2, 0x5, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) socket(0x848000000015, 0x5, 0x0) write$auto(0xffffffffffffffff, 0x0, 0xfffffdf1) ioctl$auto(0x3, 0x89ed, 0xfffffffffffff4e0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x0) 2m24.636117865s ago: executing program 1 (id=1961): rseq$auto(0x0, 0x7, 0xffffffff, 0x4006) mmap$auto(0x0, 0x8, 0x9, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x70b801, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000280)=""/250, 0xfa) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r0, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/max_page_sharing\x00', 0x12b141, 0x0) write$auto(r2, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x6) r3 = socket(0x1e, 0x1, 0x0) mmap$auto(0x0, 0xac1, 0xdf, 0x100000009b72, r2, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) r5 = io_uring_setup$auto(0x200, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto(r4, 0x8910, r3) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x381, 0x0) setsockopt$auto_SO_PASSSEC(r0, 0xfff, 0x22, &(0x7f0000000100)='#\x00', 0x394c00) socket(0x10, 0x3, 0x7) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x0, 0x0) r7 = getpgid$auto(0xffffffffffffffff) ioctl$auto_BLKTRACESETUP32(r5, 0xc0401273, &(0x7f0000000180)={"cf054a9fa486390eec606478f4d3b3361a03710bb994c1039a27f5e046329dcc", 0x3, 0x800, 0xfffffffb, 0x62c, 0x9, r7}) write$auto(r6, &(0x7f0000000400)='/de\x05\x00@ucio1\x00', 0x5) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x29b9bc1b, 0x7, 0x0, 0x1, 0x948b, 0x1, 0x15f4da03, 0x6, 0x8, 0x2, 0x597, 0x1000, 0x5, 0x6, 0x2, 0x9]}, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) socket$nl_generic(0x10, 0x3, 0x10) 2m24.441765997s ago: executing program 2 (id=1962): mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000280)={0x1c, r1, 0x9ec6579d452c1f15, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080) socket(0xa, 0x801, 0x84) socket(0x18, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x24004810) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000) r2 = socketcall$auto(0xffe, 0x0) close_range$auto(0x2, 0xa, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0300, 0x0) ioctl$auto_BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000100)={@inferred, 0x0, 0x0, @unused, @subvolid=0x6000}) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) io_uring_setup$auto(0x6, 0x0) ioctl$auto(0x3, 0x4008ae61, r2) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x80000000}, 0x4) sysfs$auto(0x2, 0x23, 0x0) r4 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r5 = clone$auto(0x100000000, 0x8, 0x0, 0x0, 0x8000000000000000) setpriority$auto_PRIO_PGRP(0x1, r5, 0x1) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000440)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00', &(0x7f0000000140)='nfsd\x00', 0x1010000, 0x0) sendmsg$auto_NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, 0x0, 0x4ad, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_FLAGS={0x1f, 0x11, 0x0, 0x1, [@nested={0x8, 0x15b, 0x0, 0x1, [@nested={0x4, 0xb6}]}, @typed={0x8, 0xda, 0x0, 0x0, @u32=0x8}, @generic="96180a0004803ed3a6dbd3"]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_PREV_BSSID={0x42, 0x4f, "9f9280ed1c78479ffd958f90174962132b228acbc993133193ac7e9d0bcc42a65482c33130075848370819b777b80bcda981f53c1b1b193141aaf9fdf99c"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x9a}, @NL80211_ATTR_WDEV={0xc, 0x99, 0x4}, @NL80211_ATTR_MBSSID_CONFIG={0x14, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}]}, @NL80211_ATTR_REG_INDOOR={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x44) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) 2m23.526105224s ago: executing program 1 (id=1964): syz_clone3(0x0, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r0 = socket(0x11, 0x3, 0x9) bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x15, 0x8}, 0x7) sendmmsg$auto(r0, &(0x7f0000000100)={{&(0x7f0000000000), 0x5aa, &(0x7f00000000c0)={&(0x7f0000000040)='f', 0x49}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x4}, 0x2, 0x100) io_uring_setup$auto(0xa, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), r1) read$auto(0x4, 0x0, 0xfdef) mmap$auto(0xfffffffffffffffe, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x100000000000037, 0x0) fsopen$auto(0x0, 0x1) 2m23.241916771s ago: executing program 1 (id=1965): mlockall$auto(0x1) mprotect$auto(0x1ffffffff000, 0x100004, 0x6) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, 0x0, 0x169a02, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) inotify_init1$auto(0x3000000000000) r2 = gettid() rt_sigqueueinfo$auto(r2, 0xb, &(0x7f00000001c0)={@siginfo_0_0={0x3, 0x401, 0xfffffffb, @_timer={r2, 0xd, @sival_ptr=0x0, 0x62}}}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, 0x0, 0x28400, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) unshare$auto(0x20000) setns(0xffffffffffffffff, 0x20000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/mem\x00', 0x20401, 0x0) r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r6, 0xc004743e, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0x40047440, 0x0) socket(0x18, 0x2, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20240, 0x0) socket(0xa, 0x5, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000012c0)={{@inferred, 0x1, 0x2, 0x6, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26f0db7b620200f764f9", @raw=0x1000}, 0x0, @integer64=@value_ptr=0x0, "528d458095d42b72adda0cac2d45bdaacf03000000000000008bf00ab57d5d73b094925aa92857fd2f672f85343275f80841c6cac1ba3023ab4510269ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8133ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c2"}) 2m22.463171395s ago: executing program 32 (id=1927): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup$auto(0x82, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) msgctl$auto_MSG_INFO(0x454d, 0xc, &(0x7f0000000240)={{0x3f, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x7f, 0x4}, &(0x7f0000000080)=0x71, &(0x7f00000000c0)=0xc1, 0xb2ae, 0x7ff, 0x7, 0x6, 0x508, 0xfff, 0x3, 0xb, @raw=0x8, @raw=0x80000000}) sendmsg$auto_NL802154_CMD_ABORT_SCAN(r0, &(0x7f0000001780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001740)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9b0e0000", @ANYRES16, @ANYBLOB="920629bd7000fedbdf252400000005000800030000000c001700070000000000000018122f806800478008000600", @ANYRES32=r3, @ANYBLOB="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"], 0x1280}, 0x1, 0x0, 0x0, 0x4880}, 0x800) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x40000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC0\x00', 0x80, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r4, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x9, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x50, 0x5, 0x1, 0x7, 0x8, 0x8, 0x100000002}}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000) sched_getattr$auto(0x0, &(0x7f0000000000)={0xcf86, 0x106, 0x6, 0x200, 0x7, 0xb, 0x6, 0xfffffffffffffff8, 0x8, 0x90}, 0x68, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) brk$auto(0x8) socketcall$auto_SYS_GETSOCKOPT(0xf, &(0x7f0000000100)=0x3) 2m21.52378113s ago: executing program 1 (id=1969): r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/oom_adj\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(0x0, 0x0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/current_tracer\x00', 0x0, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r1 = socket(0x1e, 0x2, 0x8) getsockopt$auto(r1, 0x6a, 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000001c0), r2) sendmsg$auto_TIPC_NL_PUBL_GET(r2, &(0x7f0000003940)={0x0, 0x0, &(0x7f0000003900)={&(0x7f00000000c0)={0xc4, r3, 0xf01, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@typed={0x9c, 0x13a, 0x0, 0x0, @binary="f814eb2fbadb11d5f7c1779d9775c263486587f2f27db2ed935e33792a396ad4f4dd841bde2ce876c7c666734f9f051cbf1b99c23930f85900b942dd85cfdae21d3f2b849f7c1462ad99a1fefe93c8e719cebd2ef65faad63ed1578353de0e7416c90afe4d908e195c451856a7d9c429790a0b8e6f8a05273f5dd4df07ccfa0a653ad4f8250528ed4324271752b58856606b3a720b42919b"}, @typed={0x4, 0x4c}, @typed={0x4, 0x12f}, @typed={0x8, 0x150, 0x0, 0x0, @u32=0xe}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40800}, 0x840) mount$auto(0x0, 0x0, 0x0, 0x8000, 0x0) openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$auto(r0, 0x0, 0x4) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = fanotify_init$auto(0x5, 0x0) creat$auto(&(0x7f0000000000)='./file0\x00', 0x3ff) fanotify_mark$auto(r5, 0x205, 0xa, 0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = open(&(0x7f0000000000)='./file0\x00', 0x26142, 0x4b) ioctl$auto_FS_IOC_FSGETXATTR(r5, 0x801c581f, 0xff) ioctl$auto_FS_IOC_SETFLAGS2(r6, 0x40086602, 0x0) init_module$auto(0x0, 0xfffff, 0x0) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x10, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x8000000) 2m20.884486314s ago: executing program 1 (id=1971): mmap$auto(0x0, 0x0, 0xc00000072, 0x8b74, 0x1000000002, 0xd) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:03.0/subsystem_vendor\x00', 0x28200, 0x0) socketpair$auto(0x80, 0xfffffff9, 0x380, &(0x7f00000002c0)) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/234, 0xea) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x440042, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0x5d, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x44884}, 0x0) sendmsg$auto_ETHTOOL_MSG_MM_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="61a960cc", @ANYRES16=0x0, @ANYBLOB="050328bd70dbdf25390000000000"], 0x14}, 0x1, 0x0, 0x0, 0x44808}, 0x2404c894) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) r4 = bpf$auto(0x12, 0x0, 0x26) r5 = socket(0xa, 0x1, 0x84) close_range$auto(r5, 0xfffffffffffff000, 0xfff) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x52b7, 0xb9, 0x10f, 0x9, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) sendfile$auto(r5, r4, &(0x7f0000000300)=0x8000000000000001, 0xd) 2m19.225066649s ago: executing program 1 (id=1973): r0 = openat$auto_hwsim_fops_rx_rssi_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy17/hwsim/rx_rssi\x00', 0x140, 0x0) read$auto_hwsim_fops_rx_rssi_(r0, 0x0, 0x0) 2m9.35312564s ago: executing program 0 (id=1991): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x200a40, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x2, 0x0) bind$auto(0x3, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) select$auto(0x1000000d, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x7, 0x0, 0x948b, 0x7, 0x15f4da0a, 0x3, 0x6, 0x62, 0x80000000, 0x0, 0x6d3f, 0x8002, 0xa, 0xfffffffffffffffe]}, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) lsm_list_modules$auto(0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x80002, 0x73) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), r2) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="46b568252c82f1bfc140000000", @ANYRES16=r3, @ANYBLOB="00022dbd7000fddbdf250d0000000800270005000000060020000800000005002e00000000001400040070696d36726567000000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x4000050) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xfdef) socket(0x2c, 0x80003, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x8eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x2, 0xffffffffffffffff, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0xa13, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0xff00) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ioctl$auto_KVM_CHECK_EXTENSION(r0, 0xae03, 0x4a) 2m9.282328183s ago: executing program 33 (id=1962): mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000280)={0x1c, r1, 0x9ec6579d452c1f15, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080) socket(0xa, 0x801, 0x84) socket(0x18, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x24004810) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000) r2 = socketcall$auto(0xffe, 0x0) close_range$auto(0x2, 0xa, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0300, 0x0) ioctl$auto_BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000100)={@inferred, 0x0, 0x0, @unused, @subvolid=0x6000}) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) io_uring_setup$auto(0x6, 0x0) ioctl$auto(0x3, 0x4008ae61, r2) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x80000000}, 0x4) sysfs$auto(0x2, 0x23, 0x0) r4 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r5 = clone$auto(0x100000000, 0x8, 0x0, 0x0, 0x8000000000000000) setpriority$auto_PRIO_PGRP(0x1, r5, 0x1) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000440)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00', &(0x7f0000000140)='nfsd\x00', 0x1010000, 0x0) sendmsg$auto_NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, 0x0, 0x4ad, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_FLAGS={0x1f, 0x11, 0x0, 0x1, [@nested={0x8, 0x15b, 0x0, 0x1, [@nested={0x4, 0xb6}]}, @typed={0x8, 0xda, 0x0, 0x0, @u32=0x8}, @generic="96180a0004803ed3a6dbd3"]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_PREV_BSSID={0x42, 0x4f, "9f9280ed1c78479ffd958f90174962132b228acbc993133193ac7e9d0bcc42a65482c33130075848370819b777b80bcda981f53c1b1b193141aaf9fdf99c"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x9a}, @NL80211_ATTR_WDEV={0xc, 0x99, 0x4}, @NL80211_ATTR_MBSSID_CONFIG={0x14, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0x9}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}]}, @NL80211_ATTR_REG_INDOOR={0x4}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x44) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) 2m6.822774378s ago: executing program 0 (id=1994): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) r0 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) io_uring_setup$auto(0x85, 0x0) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x0, 0x487, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x3b71, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x22001, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) capget$auto(&(0x7f0000000080)={0x19980330}, &(0x7f00000001c0)={0x8, 0x7fff, 0x2}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x68102, 0x0) pread64$auto(r2, 0x0, 0x3, 0xe9) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_SERVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004cc0)={0x14, r4, 0x301, 0x70bd27, 0x25dfdc03}, 0x14}, 0x1, 0x0, 0x0, 0x2000001c}, 0x20000800) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/irq/13/actions\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000001280)=""/4124, 0x101c) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) socket(0x11, 0x3, 0x9) 2m5.809123895s ago: executing program 0 (id=1996): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lseek$auto(0x3, 0x2, 0x4) r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000300), 0x2a8c42, 0x0) ioctl$auto_SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000040)={0x100, 0xf}) socket(0x2, 0x3, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x4) bpf$auto(0x6, &(0x7f00000001c0)=@test={r1, 0x10004, 0x0, 0x3e, 0x106, 0x0, 0x0, 0xfff, 0x800, 0x9, 0x0, 0x4, 0x7, 0x2, 0xfffeffff}, 0x1) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0xee00, 0x7fffffffffffffff, 0x99a7, 0xc) socket(0xa, 0x3, 0x3a) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) socket(0x9, 0x5, 0x0) ioctl$auto(r2, 0x5608, 0x0) mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x7ffd, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0xa6) close_range$auto(0x2, 0x8, 0x0) 2m5.214124436s ago: executing program 0 (id=1997): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async, rerun: 32) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) (async, rerun: 32) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000140)='-h\xd2i>\xcef1\xdeF\t\x85^!D\n\xf4~\xc8\xdc\xa5\x94\xc5K=\xaa!\xd9-evO+\xdd\xce!\x8cE\x04\t\xf8\x00\f\xe6\xba\n\xfe\xc5?\a\xa7\x1b\x0e\x13\xa8\xba\x10\xd9\x9b\f\xc9\xc8~\xfb\xd8\x92\x10\x8d\x93f\x836/\xee\xf5\x10\xf3rk\xc1^$\x91\x84\xe3\xa8{+ui\xa7O*\xdd=\xfdr\xb9\t\x005\x00\x00\xbf\x1feX*J\xeb\xf6\xc4\n\xce\xf0\xf4\xc4\xce\xc2=I\\8,\xf4\x9a\x17\xc3t;E\x146\xc3!\x9e\x05\x05\x84\x1f\xe4\x06', 0x80080005, 0x401) (async) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf25050000000c00010002000000000000000c00010004"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0xd0) (async, rerun: 64) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) (rerun: 64) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x48080) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) r2 = socket(0xa, 0x3, 0x3a) close$auto(r2) (async, rerun: 32) r3 = io_uring_setup$auto(0x6, 0x0) (async, rerun: 32) io_uring_register$auto(r2, 0x8, 0x0, 0x0) (async, rerun: 64) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x24, 0x1001, 0x1, 0x717e, 0x0, 0x7, 0xf6b, 0xd, 0x2, 0x4080001, 0x4, 0x1ffffffffffd, 0x224a, 0x2, 0x4, 0x6, 0x7f, 0x0, 0x2, 0xa, 0x4, 0x200, 0x6, 0x84, 0x3, 0x0, 0x0, 0x4, 0xfffffffc, [0x2, 0x0, 0x10000000000000, 0x4000401, 0x0, 0x7, 0x9, 0xffffffff80000000, 0x0, 0x42, 0xfffffffffffffffe, 0x3, 0x0, 0x80000000000000, 0x8, 0x4, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x1, 0x668, 0x0, 0x0, 0x0, 0x5, 0x14, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffffffffffc, 0x83, 0x400, 0x6, 0x0, 0x0, 0x7, 0x6, 0xffffffffffffffff, 0x2]}, 0x1fe, 0xd) (async, rerun: 64) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffffffffffd03, &(0x7f00000001c0)) (async, rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r5 = open(0x0, 0x0, 0x408) getdents$auto(r5, 0x0, 0x400018) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) ioctl$auto_XFS_IOC_FREESP(r3, 0x4030580b, &(0x7f00000000c0)={0x5, 0xff, 0x1ba, 0x8000000000000001}) (async) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) 2m4.132859189s ago: executing program 0 (id=1998): mmap$auto(0x0, 0x0, 0xc00000072, 0x8b74, 0x1000000002, 0xd) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:03.0/subsystem_vendor\x00', 0x28200, 0x0) socketpair$auto(0x80, 0xfffffff9, 0x380, &(0x7f00000002c0)) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/234, 0xea) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x440042, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0x5d, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x44884}, 0x0) sendmsg$auto_ETHTOOL_MSG_MM_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="61a960cc", @ANYRES16=0x0, @ANYBLOB="050328bd70dbdf25390000000000"], 0x14}, 0x1, 0x0, 0x0, 0x44808}, 0x2404c894) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) r4 = bpf$auto(0x12, 0x0, 0x26) r5 = socket(0xa, 0x1, 0x84) close_range$auto(r5, 0xfffffffffffff000, 0xfff) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x52b7, 0xb9, 0x10f, 0x9, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) sendfile$auto(r5, r4, &(0x7f0000000300)=0x8000000000000001, 0xd) 2m4.107184402s ago: executing program 34 (id=1973): r0 = openat$auto_hwsim_fops_rx_rssi_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy17/hwsim/rx_rssi\x00', 0x140, 0x0) read$auto_hwsim_fops_rx_rssi_(r0, 0x0, 0x0) 2m1.754114351s ago: executing program 0 (id=2001): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x8030ae7c, r0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x38, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x2, 0x6, 0x4, 0xb2, 0x9, 0x0, 0xfffd, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1, 0x6, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto(r2, 0x0, 0x20) bpf$auto(0x0, 0x0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 1m46.582789928s ago: executing program 35 (id=2001): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x8030ae7c, r0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x38, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x2, 0x6, 0x4, 0xb2, 0x9, 0x0, 0xfffd, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1, 0x6, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto(r2, 0x0, 0x20) bpf$auto(0x0, 0x0, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 50.700049254s ago: executing program 7 (id=2151): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x1f40) writev$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) ioctl$auto(0xc8, 0x800454e1, r0) syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)=@raw_tracepoint={0x1, 0xffffffffffffffff, 0x0, 0xf8}, 0x6) read$auto(0x3, 0x0, 0x8080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/cifs/LookupCacheEnabled\x00', 0x28102, 0x0) write$auto(r2, &(0x7f0000000180)='N\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7ff) write$auto(r1, &(0x7f0000000080)='\\x7fF&\xb5\x8d\xddEl/trac_notrace_pid\x00\x00\x00\x00', 0x7) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000680)='/dev/loop9\x00', 0x40, 0x0) ioctl$auto_BLKGETNRZONES(r3, 0x80041285, &(0x7f00000006c0)=0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) settimeofday$auto(0x0, 0x0) r4 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000005dc0)='/proc/thread-self/ns/cgroup\x00', 0x800, 0x0) open_by_handle_at$auto(r4, &(0x7f0000005e00)={0x1, 0xf1, "82"}, 0x80000001) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000380)='zG0') 48.638281588s ago: executing program 7 (id=2154): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x8) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x202040, 0x0) renameat2$auto(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x7) read$auto_proc_oom_score_adj_operations_base(0xffffffffffffffff, &(0x7f0000000100)=""/4096, 0x1000) setsockopt$auto(r1, 0x0, 0x9, &(0x7f0000001100)='([/-\x00', 0xa) r2 = set_tid_address$auto(&(0x7f0000001140)=0x5) r3 = prctl$auto(0x9, 0x1, r2, 0x4, 0x800) r4 = bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001180)=@enable_stats, 0xfd0) write$auto_lockdown_ops_lockdown(r4, &(0x7f0000001240)="1f9417a3fc73b700e764b5c97b47fa28ce6fe78681c300869c0b6c8ea09c0305da4f5dd7482dd669bff613c19bdefd59849d648afbd0bf0d571b214f605c615db9ee913cf796726d5ff0c5ffd7161553504676c1844c91be4b9dc132b9bf0e428434f87dcef5253c1a5db1268dc3268eca1be8dfb76963f0b315fe450f76aa0be4e6eba2527a0fc6a525e9afdf7960012e71c28dcbe20f67d743e32d942a951f57a81e5ddd16c3e1ab1a6a22301678d2bf3b4b817422e67fc6b5351f6784baf3e4a695d1c832a250ee9e", 0xca) ioctl$auto_SOUND_PCM_READ_FILTER(r3, 0x80045007, &(0x7f0000001340)="e5afbe43245955f64f335b8ac4f36e76d613c018496b994152ae370f87278af5dcee1a1c8215afbebb55b43a61459a9aca2431ba4c3b17dfe45add539aa59e4b8c5b44c1714042668d905ec1cfcd675052b80baa0694d5c7515040012aee6ba7f13d977e4a0b1ca472b0a67dae0003bc214fdbcd0f50d0a09754820bed8875677944a089ae") write$auto_safesetid_uid_file_fops_securityfs(r4, &(0x7f0000001400)="0df9db2b331781308c4d1febed05310e0ce87ab0618ca35a934411a3be24416915d388223182f1c55fb3046cb58bda63d69e7ea66d0893e9a2af", 0x3a) mmap$auto(0x1, 0x7, 0x400, 0x2bf, r0, 0xfffffffffffffffc) r5 = prctl$auto_PR_SET_MM_START_STACK(0x1, 0x5, r2, 0x5, 0x7fffffff) fcntl$getown(r3, 0x9) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000001440)='/dev/usbmon10\x00', 0x80041, 0x0) read$auto_mon_fops_binary_mon_bin(r6, &(0x7f0000001480)=""/150, 0x96) ioctl$auto_BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000001540)={@raw=0xb, 0x9, 0xffffffffffffff9f, @unused, @subvolid=0x4}) ioctl$auto_MON_IOCT_RING_SIZE(r3, 0x9204, 0x0) set_mempolicy$auto(0x1, &(0x7f0000002540)=0x400, 0x0) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000025c0), r3) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r3, &(0x7f0000002680)={&(0x7f0000002580), 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x38, r7, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'macvlan1\x00'}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7d2}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20040840) ioctl$auto(r1, 0x9, r6) ioctl$auto(r4, 0x7, r4) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000026c0), 0x2, 0x0) ioctl$auto(r1, 0x0, 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000003d80)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003d40)={&(0x7f0000002740)={0x15f8, r7, 0x402, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x6}, @NL802154_ATTR_SEC_DEVKEY={0x15c3, 0x2f, 0x0, 0x1, [@nested={0x118, 0x11d, 0x0, 0x1, [@generic="bf3f613949dc1454e52fc150075f619b32241cc1c8157542b48d87049d2968419aee", @generic="1d58ba86d6f4718a161a5674621fa6fd0d8ecd939a4195d05b629bf79b54f60963a44733b29fba473e50b9cd1ef3b7c830c983fec70ac462acb39274dca5685c134c612169524eb4a70afa94d13d2f7b7443d7a617c019285f45edb4c260a5ca1d45d87a3e204fae198491a00d999a3250efe28d809a32664c6c41d32e4b75e18eb0aaeafeffb9893201614391dcf651a73d594693feb38016c0bc3cbd24de9c06a47f7e64688710dcd120079e05ab1815f6f74b51a040e2b6ac78df6ac16fa24b0a6f59c4730c8f7b5e2f8e39d1d69c5e2d81eadbcf29f84ecf2f8fa9e908a6b17cb3181a8d382c778782fe9d46", @nested={0x4, 0xf0}]}, @generic="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", @nested={0xc5, 0x169, 0x0, 0x1, [@generic="27554d4a56a96a05cce84184e74c5c805f6a1a4c42bbb594d55bb7a33fe42e5f58ae5aee3adedde61acb2d4875bdb84ba7400f7b90c14adc15e4a246b013f799f4dbae2c56c8abfd648908430fef1f10cecfc13e4e46d87d71c23b7c56f38d85a2b51d5eb7a98c5b46c31f6f72dc44952a4bdb54980f0f7529cbc4532700a593597db59c5eb7c8acbc203646788b48397c1ae09e529d465380424d5d78e4278d1e0d5d577da9d98e44c65bcae3b981393069af76018ec8b5a79eb53038", @nested={0x4, 0x3e}]}, @nested={0x12dd, 0xad, 0x0, 0x1, [@generic="a9011b82c7a6c9036988d187ef38c5be0adab0bf2c9a92959e3e2847c9f032f2f0aad9d09b61e204cf081e204d39881713869ffd4251f9971e9d9117bdeda2b4d95e91", @typed={0xf4, 0x140, 0x0, 0x0, @binary="e9a1e8377eb12ae19b8db35eee01986295ec5b90ff34586675ed443b4a4486db4de319d28728e597fa2de54bdac7f79f2c73a30f2f55f0e2c52fa8a74d6c5b7b8cf7b4f7cd26af810c91997e1e70a9019075fb5c5f41f8d32d9bc445426c92bf8b2040c4561f7577ea25c15c25c40b68d31968c42dfb91fbfd47bf29d6b17a091e1589329a8c0e2bd1a711798ad6c7f9550b5c026c1f68dcacddec31c18ef85be12f84e2da407e768513b2867cbde1518cff73c0bae54637ca0c064aa6b7d466ab9e0c1ca510dfbee338523f8ab0d3bc84ee636da58b6b1968e60e3cee105fb94dce5f52858b64dd3f8a1a4200fcc385"}, @nested={0x4, 0x14d}, @nested={0x4, 0xe9}, @generic="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", @generic="dab91b784510533020f908be85841a17e56560fbf2bb2cdc1d04d6e4f400f66303df61317cc266a391f6377a4245f5c279a05050d368c31dc253a6cbb8c6d0e866c14462f12dc95a4c77847d5ae1ae522840a1f14d7604f9b5808cf4b5275fd668ff46f5b3b44642aa2e8f78e75e809d31f71b4a3acf0ef4efa4098019a1703724ee64ae3474f815a3953e7020b3c17711a1273a88619b18f20089ef101848459c189c88f97e1d68e0205345edf677e858a35ab193b0", @generic="38a3573ba6e7d55c8e470072b81b121a88b9997e70318fa2109e926e227b0e36f933d93678802de33ed11404c17eea872f21b944379014e47e5314455ef5c52b7789f49fe421fd3e49f164de5b8d303bf29de3ff495e343dbce2861cdfbf7d60100f43f68bc1fd30b24ddc5deef63cb1d6cf9a635930b071d74c8dee7bbe8dba15983d1c3a449e9299e76334719f8409921024c302b5a657bece09aeee4c7753af959c5f800b933ff75510e6b4b7915a299476a1a027c58f8a4d22c4b324db3e84cdc5c25c8acc60b61817883f406dad5994bea214a12e14ab4b95ac66f882cbd7548bc3"]}]}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xd}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}]}, 0x15f8}, 0x1, 0x0, 0x0, 0x5}, 0x80) ioctl$auto_EVIOCGEFFECTS(r4, 0x80044584, &(0x7f0000003dc0)=0xfffffffa) r8 = socketcall$auto(0x1, &(0x7f0000003e00)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(r8, &(0x7f0000004280)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004240)={&(0x7f0000003ec0)={0x358, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MAC802154_HWSIM_ATTR_RADIO_EDGE={0x33c, 0x2, 0x0, 0x1, [@nested={0xd1, 0x134, 0x0, 0x1, [@generic="bb881d2e0fdc7b67fc31202e59c7c2c41b0e87a3611a2e87e86b6b19a3de87aa544094c7fc3138d83eb88f607237141a021e6c705b6d1b207997f0f89ff347cb1390d595300e887697032aa5f0bbcae42a57b5d175ff0f0ab71f046db107eb804c5c02c153244d8572fc07f0590e3cc375c145fa5054af6c72ed5c097813cba4b105d33fcfc7725b0adb2c2add655325cb2d58df7fedf7f167d39ea799c33be3a02b16aeaeefca2c13c2004fe9d2ef78e87362106d2292b07f11128653189cb35205529597098d97d7", @nested={0x4, 0x106}]}, @generic="dc8a8a25a333034e8855f63a7a4e295a1d969975db35270d1be7b14a1553be9c86cb1e9bd4d53ad2e53d2680594a74a935d69511be47a6104d50c921b2f711169f826e0c21bae039fe2d56ba13a9e5a9b40a08bde338847c8665e030823773f54c43f953f3d97f7f7d809e64", @typed={0x4, 0x94}, @typed={0x8, 0x92, 0x0, 0x0, @pid=r2}, @nested={0x1ec, 0x8, 0x0, 0x1, [@generic="78e74f3a1854c6bf63bc2b10ec14f490ecb32f77052c545e89f97f5c4260fdd346681382cf6ab778ff290749a66bddac44af537c343355c0b14c7b230ed86f436d91dece42d7ac9a7f7f55716b3e3965f9e62ee448e8340481c5a8d111492653cbb3925c0382efac30ef0ed917423da1b52239b5eb0be5de9d1c5dca3da8bd38e099c557aeae7fd89b89d29ab056bf8de46fe41638ea7a9a1dd588336a48ec62bcb5263c3e988a6083dffba6b9750663a28dc6c63041ee327583758b0a92d9fc00bd0e11373542b72d22d2d7cbb393520b02", @typed={0x8, 0x131, 0x0, 0x0, @fd=r5}, @generic="d97c48af43450cbfe07e5188e1316e13c776cfc9b443c5532a5c72e5983a04b5ba6f547cdcbf909db49863c60a502507ca79c6fdd37dbe4a7d5d6f62ab0d2dc768fecc47a6550c0f31d8910c5cbc0016ac755b7342e4545efe78e0dcbc4f677380a2e45cab3198d825d02c93", @nested={0x4, 0x65}, @generic="8d1566581b41526147cf2576aea45119eec626be6d882d60540055ba3b31f7c12a99a78a0c5493a4a81981bd88e0ec57ac030dad8858fd9852c7147145fcc0c4e12094eef529be3e9236d0278e8600e0f5ef548d12bb4c57f484ae464f6f4b984167eac954330ccc795819b678da92e7d0377b0b386b54ccdb2c0858f9e4e69b459c21561d18336a9f14c829ba62", @nested={0x4, 0x7e}, @nested={0x4, 0x30}, @nested={0x4, 0x75}, @nested={0x4, 0x8d}]}]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x10}]}, 0x358}, 0x1, 0x0, 0x0, 0x8000841}, 0x8011) 48.268781481s ago: executing program 7 (id=2157): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xa505}, 0xffffffff}, 0x7, 0x4008) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/timer_source\x00', 0x8002, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x1}, 0x9) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x68b82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto(0x3, 0xae41, r0) r3 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/kvm/insn_emulation_fail\x00', 0xa2540, 0x0) read$auto_stat_fops_per_vm_kvm_main(r3, 0x0, 0x0) listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000002, 0x6, 0xa}, 0x0, 0x9, 0x1) mmap$auto(0x0, 0x2000a, 0xcf, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000083) unshare$auto(0x40000080) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000080)) 47.424552643s ago: executing program 7 (id=2159): socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x440, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0) sendfile$auto(r0, r1, 0x0, 0x800048) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x4611, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) sysfs$auto(0x2, 0x2000000000040, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="030329bd7000fbdbdf250300000004000500"], 0x18}, 0x1, 0x0, 0x0, 0x8804}, 0x4004010) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r5 = openat$auto_proc_auxv_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/auxv\x00', 0x80, 0x0) read$auto_proc_auxv_operations_base(r5, 0x0, 0x0) socket(0xa, 0x5, 0x0) unshare$auto(0x40000080) mmap$auto(0xffffffffffffffff, 0x2020004, 0x203, 0xeb1, 0xffffffffffffffff, 0x208000) bind$auto(0x3, 0x0, 0x6d) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), 0xffffffffffffffff) rseq$auto(0x0, 0x8000, 0x0, 0x6) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) 46.241713647s ago: executing program 7 (id=2161): r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3b, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x9) write$auto(r1, 0x0, 0x100000a3d9) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) setpriority$auto(0x2, 0x0, 0x80000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70090000004a2003000004000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000011) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000080), 0x20802, 0x0) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES16, @ANYBLOB="8b632abd7000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, 0x0, 0x8006, 0x0) msgctl$auto_MSG_STAT(0x8001, 0xb, &(0x7f0000001600)={{0x4, 0xee01, 0x0, 0x3, 0xb, 0x3, 0xcd8e}, &(0x7f0000000280)=0xf8, &(0x7f00000002c0), 0x8, 0x356, 0x3, 0x800000000000000, 0x81, 0x3, 0xffff, 0x1000, @raw=0x389}) write$auto_proc_uid_map_operations_base(r3, 0x0, 0x0) prctl$auto(0x4430, 0x1, 0x4, 0x400000005, 0x400000000007) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) connect$auto(0x3, 0x0, 0x54) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x2}, 0x58) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001100)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/stats/anon_fault_alloc\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000100)=""/4096, 0x1000) pwrite64$auto(r0, &(0x7f0000000340)='\v\f_U\xe0w\xbf\xe3\xb8\x92\xac.X_|\xc8R\x99!\xd2\xfb\xfe\xa7\xe4&#sn\x91p\xe6\x1eRN8\x99C\x05s\x1cJ\x99\x1d[s\x15z\x87\xe1\xb6\xba#7*/\x13\x00:\x00!\rW6\x00\x00\x00\x00\xb4\x1avP\x00\xc5\xc7\xf1\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\x9c\xa2\xa7\xd1\xdd\x85\as*l\x9c\xa1\xf7\x8c\xa1\xfb\xb5\b\x00\x00\x00\x00\x00\x00\x00\xb4\xfb\x99\x00\xed\v\xfa\xaa[\f\xa2\xea40\r\xcd\x86\x9d\xac\xde\xec\x85\x93\x93\xd3G\x8c\x9b\x9d\a\xbf\x1f\x95n\x94\xbc[\xb5\xfa\xe0t\\\xbc\x11\x94\x0fF\xf9\xac\vv\xb5\xc3\xd9j\x05\boe\xa5\xc2l\x05\xbcTu\x18\xda\xf2#\x80\xd5\xb4\xf54\x04M\xc8G\x0e/\xae\xab\x9b\x14\x8f\xeb\x19\xc80Dq\x9f\f\x106\x1b\xa7\xe6jU\x00X\x8e\xe4\v\xbb\x91\a\x14\x8c\xc9z\'a\xdd\x89<\xf5\xeeC\xb4\xa7\x976\xfcO\x17\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd3\xe9\xc31\xd7\xa7T^\x9fs\xec_Nl/+\x9a\xbb\xb3[\xcb\xf8\x87\x18\xe6,\xad_\xfe~M\x80X\x1ak7g\xff\xc8', 0x52, 0x522c) write$auto(r0, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x0) 43.25359671s ago: executing program 7 (id=2165): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x400, 0x2b, 0x940, 0x1ffe0, 0x5a6, 0x3, 0x100002, 0x7f, 0x767, 0xfff, 0x7, 0xb2, 0x9, 0x4, 0x3, 0x1, 0x4, 0x20, 0x0, 0x1, 0x202, 0x62c, 0x40000000, 0x0, 0x9, 0x0, 0x0, 0x2, [0x251, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x200000, 0x1, 0x8000000000000000, 0x1, 0x0, 0x1, 0x0, 0x87ffd, 0x0, 0x6, 0xffffffffffffffff, 0x6, 0xb, 0x0, 0x0, 0x6, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1]}, 0x1fa, 0x81) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="fb178440b64f9c684415d48f5c16ef69343e45c7e0d77f248730ff9cb57de4b5bf05a6625f0fcfd9124b62b3880478bb4f68111f19b002582ce6b4f75107f95f6e3ccdc0f307886264d3ead46694cc8438202ed7a807d5203eac14b45d8c51274b57aa2e64bc8c153f902084c6c6d3ad3fc57153f05fb1e0bf5c887a336ed5df3a3258745cc17fd866b3ea2cf98e4bb66558a72011d4a1fa6b39347d159237e621aeba06de2c0f2334f6691710106ba0bf33f0259bbefadf3e38feee8108eeb92ca969bc9cd67f6f04d15593b9a9c1d8cfc864a6fef20beaa4099b145d42a03dbb", @ANYRESDEC=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) r2 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x4000, 0x0) ioctl$auto_FS_IOC_SETFSLABEL2(r2, 0x41009432, &(0x7f0000000480)="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") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = getpgid$auto(0x0) timer_create$auto(0xfffffffe, &(0x7f0000000000)={@sival_int=0x4, @inferred=r3, 0x4, @_tid=r4}, &(0x7f0000000040)=0x9) migrate_pages$auto(r4, 0x8, &(0x7f0000000040)=0x6, &(0x7f00000000c0)=0x8000000000000000) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x2c, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x40}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20000014) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000000c40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f00000005c0)={0x620, r6, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x44, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x30, 0x2, '/sys/devices/virtual/mac80211_hwsim/hwsim15\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x10, 0x2, '/dev/uinput\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x84, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x39, 0x1, "dc4536c3fdecb59b6507c1d5d7917a28001483b4d4a5a1d4fb13bd07bc7085cdddc7ce6b2e6019895ca97fc2fe4397530904ff15bc"}, @NFSD_A_SOCK_ADDR={0x4}, @NFSD_A_SOCK_TRANSPORT_NAME={0x10, 0x2, '/dev/uinput\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x30, 0x2, '/sys/devices/virtual/mac80211_hwsim/hwsim15\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x240, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0xbb, 0x1, "916c75718e3cc9c9f3ae80dd2a0e2eae1b7b80ac4636347827a72df980d72ae079a2bc3deb23d000310ba9278e387f5c7404afd2f4638981b0907d40cff7fa61ddce7b4600faaeb4ca3f8a761b8c51a6e9ab0c9fc2323994ba040eefda6858888d8d7d8ad669da025ad72d8189fced80650c66e2a9b3dec9d2664bfef6879a869e14a98affb350414acf0eea79de7ec67ec4789f4fec9d7924a74fa1052ce2fd96b13e2340ca1331ff405d46b7fa742fcf1d057eacbd0f"}, @NFSD_A_SOCK_ADDR={0xd7, 0x1, "90fa689ba3791302c03834e782faedba3fccca646c36c5ae569d0d93403b52ed07ecf5752207112cf1267432f4a95408b98df08e26ab191a889fd145f3cad58fe961840acd576beb3a140791fcd3622424eaacfcb6f64701501f3a86106acbc7f02b0a104910adb7a6b764dc66b123e0d5a85a66f277ae0af96827527ed8b962636cbdab43cf5694e1fafa7397b997b3e428f903c7fc8b49b9dee444c0d1dde333d68025d51fd0e20896b1d23422c0b37b773d34e01d1365ca96e03926b715f33e1aa6a11654400f0a37444c05e162fa7c2035"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x10, 0x2, '/dev/uinput\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x10, 0x2, '/dev/uinput\x00'}, @NFSD_A_SOCK_ADDR={0x53, 0x1, "eabc7fc143b4c03f12c75ba75e8c599393b72c54e96fc824b5cfa6d61270246d3b488e1491719003db34b7b3e5fcea4d1530f55ba48ae31533bf0ea8363adff05d575a8440b41380a81c83633ac1a7"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, '-+)^\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x10, 0x2, '/dev/uinput\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x17, 0x2, '&/$\x8d:]^]![&+-&.\'-+\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x3c, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x30, 0x2, '/sys/devices/virtual/mac80211_hwsim/hwsim15\x00'}, @NFSD_A_SOCK_ADDR={0x8, 0x1, "21e3ed62"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x2c8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x87, 0x1, "d193c49dfceb11e2f2fca58165071780be59002ea298de5bf1dff01e083736cbc7ece24e454d739b8eaa51e848a4998be8d4ca46b15af4defd03fbff23e47c6fbb10fc38590b593aa0a552efacefb856fdb8ce2eed2fb430ec1ad61e692007574447f5a53ecc9356777c8b4fe5fc6cdd64d8db02d1bc5139841093d715e3459cef59f1"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x10, 0x2, '/dev/uinput\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '\'\x00'}, @NFSD_A_SOCK_ADDR={0xd5, 0x1, "72e59828767881f994b398bc278ee3769b65bac8bc0493fdffb13c4d9d05d3ca3cc11bbbcc3f852958d756478d57f09dda97970aeeb90af71c7d946ef7859a2c1c7d50d71b5d88832ad02eb20204d968ce1b3b23d297042d584e30ce56937d9e60badd5b775556a600f4461187c94598705cc03adbe74d09e2fe9064ec171cf23b0d52390cbe7b5c240b230e784139c1e3569f2802a05d1e46c49cb0a8b93047d17aa77c2a9e94fe808e61f99583ede1c5ff8748ddc361b37ce1d91b8de1d95f75c423d2b5866a2832db8fe268a7f164cd"}, @NFSD_A_SOCK_ADDR={0xec, 0x1, "906afe0a997de63af88dd1cb5eef34b1296ab93efc4edd86b93d347da6d0d4170eb1986f07405487b504e8140f6f87acbea46e297d56a6f2b965069cc57d60e8491d4a833e923afe07e3d7ae49dc4e762401dae5f3018202bd1851f1111771c9693e8b9764f0c391cf8d38eef18f2f6d1d78c59918d1324742a20529b52615b1ded42ffd4866a9823aa3ea1a30a3cc283bbfd25b3b39852cc5a61ac7e3acb92c330f8e42d136c037a669cdf5dc373fc38f4c62ee290aa3119232e537894d5cf4a237ce549af851e9a8e3eca1975ce905e1788531cea83c4d93b840b8e9cb3fa3b5e26df04092303d"}, @NFSD_A_SOCK_ADDR={0x5f, 0x1, "6194f47819ddc42d6fd3d604f72a2ae93644c329617e27c0c398d155eb4021baff7dd473b943580c1974e54a76196ff87a1d86f4b06a99f02cdb8ab43c5861223f90270ae9f27a607af42d07f39504c7c585658cd25b593186930c"}]}]}, 0x620}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 27.970655761s ago: executing program 36 (id=2165): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x400, 0x2b, 0x940, 0x1ffe0, 0x5a6, 0x3, 0x100002, 0x7f, 0x767, 0xfff, 0x7, 0xb2, 0x9, 0x4, 0x3, 0x1, 0x4, 0x20, 0x0, 0x1, 0x202, 0x62c, 0x40000000, 0x0, 0x9, 0x0, 0x0, 0x2, [0x251, 0xffffffff, 0x0, 0x4, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x200000, 0x1, 0x8000000000000000, 0x1, 0x0, 0x1, 0x0, 0x87ffd, 0x0, 0x6, 0xffffffffffffffff, 0x6, 0xb, 0x0, 0x0, 0x6, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1]}, 0x1fa, 0x81) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="fb178440b64f9c684415d48f5c16ef69343e45c7e0d77f248730ff9cb57de4b5bf05a6625f0fcfd9124b62b3880478bb4f68111f19b002582ce6b4f75107f95f6e3ccdc0f307886264d3ead46694cc8438202ed7a807d5203eac14b45d8c51274b57aa2e64bc8c153f902084c6c6d3ad3fc57153f05fb1e0bf5c887a336ed5df3a3258745cc17fd866b3ea2cf98e4bb66558a72011d4a1fa6b39347d159237e621aeba06de2c0f2334f6691710106ba0bf33f0259bbefadf3e38feee8108eeb92ca969bc9cd67f6f04d15593b9a9c1d8cfc864a6fef20beaa4099b145d42a03dbb", @ANYRESDEC=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) r2 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x4000, 0x0) ioctl$auto_FS_IOC_SETFSLABEL2(r2, 0x41009432, &(0x7f0000000480)="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") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = getpgid$auto(0x0) timer_create$auto(0xfffffffe, &(0x7f0000000000)={@sival_int=0x4, @inferred=r3, 0x4, @_tid=r4}, &(0x7f0000000040)=0x9) migrate_pages$auto(r4, 0x8, &(0x7f0000000040)=0x6, &(0x7f00000000c0)=0x8000000000000000) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x2c, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x40}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x7}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x20000014) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000000c40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f00000005c0)={0x620, r6, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x44, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x30, 0x2, '/sys/devices/virtual/mac80211_hwsim/hwsim15\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x10, 0x2, '/dev/uinput\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x84, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x39, 0x1, "dc4536c3fdecb59b6507c1d5d7917a28001483b4d4a5a1d4fb13bd07bc7085cdddc7ce6b2e6019895ca97fc2fe4397530904ff15bc"}, @NFSD_A_SOCK_ADDR={0x4}, @NFSD_A_SOCK_TRANSPORT_NAME={0x10, 0x2, '/dev/uinput\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x30, 0x2, '/sys/devices/virtual/mac80211_hwsim/hwsim15\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x240, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0xbb, 0x1, "916c75718e3cc9c9f3ae80dd2a0e2eae1b7b80ac4636347827a72df980d72ae079a2bc3deb23d000310ba9278e387f5c7404afd2f4638981b0907d40cff7fa61ddce7b4600faaeb4ca3f8a761b8c51a6e9ab0c9fc2323994ba040eefda6858888d8d7d8ad669da025ad72d8189fced80650c66e2a9b3dec9d2664bfef6879a869e14a98affb350414acf0eea79de7ec67ec4789f4fec9d7924a74fa1052ce2fd96b13e2340ca1331ff405d46b7fa742fcf1d057eacbd0f"}, @NFSD_A_SOCK_ADDR={0xd7, 0x1, "90fa689ba3791302c03834e782faedba3fccca646c36c5ae569d0d93403b52ed07ecf5752207112cf1267432f4a95408b98df08e26ab191a889fd145f3cad58fe961840acd576beb3a140791fcd3622424eaacfcb6f64701501f3a86106acbc7f02b0a104910adb7a6b764dc66b123e0d5a85a66f277ae0af96827527ed8b962636cbdab43cf5694e1fafa7397b997b3e428f903c7fc8b49b9dee444c0d1dde333d68025d51fd0e20896b1d23422c0b37b773d34e01d1365ca96e03926b715f33e1aa6a11654400f0a37444c05e162fa7c2035"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x10, 0x2, '/dev/uinput\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x10, 0x2, '/dev/uinput\x00'}, @NFSD_A_SOCK_ADDR={0x53, 0x1, "eabc7fc143b4c03f12c75ba75e8c599393b72c54e96fc824b5cfa6d61270246d3b488e1491719003db34b7b3e5fcea4d1530f55ba48ae31533bf0ea8363adff05d575a8440b41380a81c83633ac1a7"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, '-+)^\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x10, 0x2, '/dev/uinput\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x17, 0x2, '&/$\x8d:]^]![&+-&.\'-+\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x3c, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x30, 0x2, '/sys/devices/virtual/mac80211_hwsim/hwsim15\x00'}, @NFSD_A_SOCK_ADDR={0x8, 0x1, "21e3ed62"}]}, @NFSD_A_SERVER_SOCK_ADDR={0x2c8, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x87, 0x1, "d193c49dfceb11e2f2fca58165071780be59002ea298de5bf1dff01e083736cbc7ece24e454d739b8eaa51e848a4998be8d4ca46b15af4defd03fbff23e47c6fbb10fc38590b593aa0a552efacefb856fdb8ce2eed2fb430ec1ad61e692007574447f5a53ecc9356777c8b4fe5fc6cdd64d8db02d1bc5139841093d715e3459cef59f1"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x10, 0x2, '/dev/uinput\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '\'\x00'}, @NFSD_A_SOCK_ADDR={0xd5, 0x1, "72e59828767881f994b398bc278ee3769b65bac8bc0493fdffb13c4d9d05d3ca3cc11bbbcc3f852958d756478d57f09dda97970aeeb90af71c7d946ef7859a2c1c7d50d71b5d88832ad02eb20204d968ce1b3b23d297042d584e30ce56937d9e60badd5b775556a600f4461187c94598705cc03adbe74d09e2fe9064ec171cf23b0d52390cbe7b5c240b230e784139c1e3569f2802a05d1e46c49cb0a8b93047d17aa77c2a9e94fe808e61f99583ede1c5ff8748ddc361b37ce1d91b8de1d95f75c423d2b5866a2832db8fe268a7f164cd"}, @NFSD_A_SOCK_ADDR={0xec, 0x1, "906afe0a997de63af88dd1cb5eef34b1296ab93efc4edd86b93d347da6d0d4170eb1986f07405487b504e8140f6f87acbea46e297d56a6f2b965069cc57d60e8491d4a833e923afe07e3d7ae49dc4e762401dae5f3018202bd1851f1111771c9693e8b9764f0c391cf8d38eef18f2f6d1d78c59918d1324742a20529b52615b1ded42ffd4866a9823aa3ea1a30a3cc283bbfd25b3b39852cc5a61ac7e3acb92c330f8e42d136c037a669cdf5dc373fc38f4c62ee290aa3119232e537894d5cf4a237ce549af851e9a8e3eca1975ce905e1788531cea83c4d93b840b8e9cb3fa3b5e26df04092303d"}, @NFSD_A_SOCK_ADDR={0x5f, 0x1, "6194f47819ddc42d6fd3d604f72a2ae93644c329617e27c0c398d155eb4021baff7dd473b943580c1974e54a76196ff87a1d86f4b06a99f02cdb8ab43c5861223f90270ae9f27a607af42d07f39504c7c585658cd25b593186930c"}]}]}, 0x620}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 9.993371048s ago: executing program 5 (id=2239): r0 = socket(0x2b, 0x1, 0x1000) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x81, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x42802, 0x0) bind$auto(r0, 0x0, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x143e03, 0x0) r1 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, 0x0, 0x4, 0x5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) io_uring_setup$auto(0x1, 0x0) futex$auto(&(0x7f0000000080)=0x1, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000080)=0xfffffffa, 0xc, 0x1, 0x0, 0x0, 0xfffffffa) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, 0x0, 0x9f) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 8.776116577s ago: executing program 4 (id=2242): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x4, 0xb84b, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112dbab029ed13881d2f2c7ba2eb01c3db79f77fdc2bb50c64a925009dff4cd1aca925c57100112d88f73348a54396800ed598a0e5500d7c0cbb6b1e91d", 0x40000000001243}, 0x4, 0x0) (async) ioctl$auto(r0, 0x400454ca, 0x38) r2 = openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim0/ports/3/udp_ports_table0\x00', 0x8000, 0x0) ioctl$auto(r2, 0x3, r0) (async) write$auto(r0, 0x0, 0xc) 8.316962736s ago: executing program 4 (id=2244): setsockopt$auto(0xffffffffffffffff, 0xc, 0xc56e, 0x0, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/current_tracer\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0xffffffffffffffff, 0x0, 0x69) socket(0x2, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6a) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x3020009, 0x3, 0x411, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x15, 0x5, 0x0) bind$auto(0x3, 0x0, 0x6a) r1 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) write$auto(r1, &(0x7f0000000640)='/sys/devices/virtual/bdi/43:352/stric\x06_limit\x00', 0x4) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4, 0x0) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000280)="c316d0e222c2c1c8cd22bd55714981f457cd255c0ada5cc33eb8dfa87ea93f673aa9d9c48fae6d8a8203b0314fe34d5ed2073684df0e24507ed69e4fb4e5c377333a95417f9792394805348a289bc5b4fb31c35ea21d2aaf4b920bd105aee86dcc1e590413b8e6baf60eeac078b44c2e243ffc25c5da4a6a5b7194d531bf54494012c1e295cfb8925b51feb437acbc72899d0b2bd4bb14e42c13f2ab623265113699be153cfb8bff1c2b06d7", 0x7fc, 0x0, 0x8000040000000008, 0x0, 0x200001, 0x4}, 0xfffffffc) bind$auto(0x3, &(0x7f0000000240)=@l2={0x1f, 0x400, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8, 0x9fee651b8ed19f54}, 0x6a) r2 = socket(0xa, 0x1, 0x6) bind$auto(r2, &(0x7f0000000040)=@generic={0xa, "2c551d000000fe8000"}, 0x1b) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x8) unshare$auto(0x40000080) r3 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) readv$auto(r3, &(0x7f0000000680)={0x0, 0x40200}, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x5000) r4 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r4, 0x40103d0b, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setuid$auto(0xe) 7.864246793s ago: executing program 6 (id=2245): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000300)=ANY=[@ANYBLOB="f8060000", @ANYRES16=r2, @ANYBLOB="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"], 0x6f8}}, 0x40080) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) r5 = pidfd_open$auto(0x1, 0x0) setns(r5, 0x60020000) setreuid$auto(0x0, 0x0) setrlimit$auto(0x6, &(0x7f0000000140)={0x0, 0x6}) syz_clone3(&(0x7f0000000280)={0x153326100, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) write$auto_fuse_dev_operations_fuse_i(r4, &(0x7f0000000440)="1100000000000000000000000000010000", 0x11) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x840, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getsockopt$auto_SO_DEBUG(r4, 0x1, 0x1, &(0x7f0000000100)='},:(.!/\x00', &(0x7f00000001c0)) r6 = getpid() setresuid$auto(0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000001f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001f40)={0x1474, r2, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_CQM={0x36d, 0x5e, 0x0, 0x1, [@nested={0xfc, 0x137, 0x0, 0x1, [@typed={0x8, 0xb7, 0x0, 0x0, @ipv4=@empty}, @typed={0xe8, 0x93, 0x0, 0x0, @binary="c7fb6d2aea8a9abb530998d2e3db97ab33b3353c0d213d2cca202662c077b3282e9cd1b82fbdb14d282e7c14d4043e729e848f8d3ff951a016aa52f04eeaf8c7b655a4d5627518fe03f6bcf0eca939a70903115252bec95076f0dba6cf2a6e16a95472472e11fd7a12f7cb23151afc14982e5639e4ba3d51b8e8be0d820c10695b7ebd6504b4ba2565803df940e3514034daca36d4e3aa57863346f28678dbd14238af8e9da77c1b68240f9b18cb785c8d655fb1eaf5ec27b58518d83a3832e6d33a1a4fc4efe0b6ea4adaf26f4e80deb0a95d67e585ecbbe3a3ab28a0c287c350524ba2"}, @typed={0x8, 0xa2, 0x0, 0x0, @pid=r6}]}, @generic="0c7bca135190d9ab29869a42a0b8325aa184c13dcbfd025d00ce8ed964bdba50d3a0f412d7599356c5cc79a20da377aeb1c5b355822032de3d90830dafdf0c7f4785afd7a4ddbc4f102acc38e4e0478378f772678789afbfb2b15a1981a23266e0a0305af035d9a33b727ce5cf6b552ee7c1eda2698bc7bebb3fdc0e1e1e25b3bbd518f759148dc552077bbed05c7f9269886acddc5aec0cdf01bca8b73b7e39383e06b2ffd7172d5dd4f6cc016638e6d69f27b839076e", @typed={0x5, 0xd0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x146, 0x0, 0x1, [@typed={0x8, 0xcb, 0x0, 0x0, @ipv4=@multicast2}]}, @generic="17c3f700f16ac22990636f47f0656f6b6936fc8a1a311cc455d80867b107ee05e7f9cdd618c2e567d7ecf79d31299e454638c353025f02993e34f49f359cae1d1331b7825f8a74589ed21b6bf747a9252fed8098c8060701628dea85a58d8050d1b0db4714d70e61993df7505679e7b251b63920a95758d755aebd9b840fae0921c213776a4b0aac279a66c35342d4d69c2e8d774dec61452cacf3c1091e8e81c0ffed25ea42cf900834b407ddd40572209af6d976d80aef5f2d28f64148ea7d16990f5b5bdddd37", @typed={0x8, 0x81, 0x0, 0x0, @uid}, @generic="a628948c7a1e2e056a527b0dfa36b28f18abe1527d8e6ccfceffff4bcb81b8895328329cbf360938b2dd30306bad7ed61a33bbcda75632fbd8d568c61be4e204369afb563b49f34b897af9c6a6e82fd748c47bd71b6ea3f5797c4859c0c22a1d8f44c97cd017820f005ba1a3088f6debaca719ace433ee08ed36bc8a0ab6a37e7a4527018645c2a135e9a39e924155021d2da840fa0c90bd1d7a4dc883b5dcd3da7ad50b1279c247835ee799b7f72d7b783199985a1fc822c045f662eb7090b5cd947b7b20d2c02f69d61eb2647d6b65facf"]}, @NL80211_ATTR_CSA_IES={0x10b0, 0xb9, 0x0, 0x1, [@nested={0x10a1, 0x1f, 0x0, 0x1, [@generic="83762722cf3353b0cf177f0dacf2316636b2de6efe30116667f43b2d2ef5d4e77bf9d46456813e521ed1d5b66aae0cbee315d7bc133fd792d5d466190dc13abcda0d28221a46b5bedf6bc29b466f5d38ab9d364b26615e7c8dd485c253871192bb377f1c56f0e4cf8ecaba8f76b983e8760d1a4c7cc67bdb744f66e2e23b1afff0af49896d71a69b76ab4f025c41157da0925ee3cf09efdff0", @nested={0x4, 0x149}, @generic="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"]}, @nested={0x4, 0xa6}, @typed={0x4, 0x77}]}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0x29, 0xba, "8a9740d55adcaefe50b1797cb10892da185b79bad7aa34bb51f0dc0fdd6ee03d6375f9a0d8"}, @NL80211_ATTR_KEY_DATA={0x14, 0x7, "9238fbc3514aef7e368d78f2f326c8bd"}]}, 0x1474}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) 6.150150995s ago: executing program 4 (id=2247): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) (async) mmap$auto(0xdc2, 0x4, 0x200000000db, 0x4000013, 0xffffffffffffffff, 0xc1ba) (async) ioctl$auto(0x3, 0xb, 0x38) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram5\x00', 0x147f02, 0x0) socket(0x2, 0x800, 0x2b) (async) connect$auto(r0, &(0x7f0000000200)=@in={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/92, 0x5c) (async) write$auto(0x3, 0x0, 0x1) (async) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80161, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x28, 0x2, 0x7) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000040)=0x5) (async) io_uring_register$auto_IORING_REGISTER_NAPI(r3, 0x1b, &(0x7f00000000c0)="7272a770e054897a279a3c36a7540c84ce9b75349956", 0x4b) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001180)={&(0x7f0000001200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYRES16=r4], 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x8) (async) read$auto(0x3, 0x0, 0x80) (async) ioctl$auto_USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000080)={0x2006, 0x42}) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd14/queue/io_timeout\x00', 0x200b03, 0x0) fcntl$auto(0x3, 0x4, 0xa553) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x6c2a03, 0x0) (async) mmap$auto(0x2, 0x6, 0xdd, 0xeb1, r4, 0x8) (async) msync$auto(0x200000, 0x2000000005, 0x6) write$auto(r3, &(0x7f0000000340)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5\x1a\x9a\x91\xe5\xc1\xdch\xa8$S\xeeF1%i\xc7[\b,\x98\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[~\xfa\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(]\xe9\xd4\x85\xee\a&c\xdac\x95\xcf\xad\xa0\x95\t>\xc7/_`\\\xbe\xd54\xaeAY\x9c\x91\x04g\x8b\x18\xec\x84\xf2d\x1b\xfb(\xd7Z\xf0\xfeV\x97{\xa7\xactY\x87\x1by>\\2\b\x95k\xa6\xde\x14\xd2\x94\xcf)\xaa\x81\xdb\x00\xbema\xc5\xc2\xf4c\x8f\x93\x11\xbe04\a\'\x9b\x813\x8b\xae\xe8\x1c0\x86\xb3\xcbS\xae8\x8ak;\x96\fH;\x96\xf2\xbe\xfd\x807\xbf0\xb5\b\xd3\x02|\xe0c0\xb9\x95\xee|\xf6\x85\xce\x87\xd8Z\xf8\xd6\xd99q\xa4W+y\xb0\xb1C\x87+Q1\xcc}e\x7f{Z\x87fu \xc6m;\x1fg:w\xa8\xbd\x03_\xf3\x95\x84\f\xd5\xe7Es=;\xa6\x9e\xbaGb\xe0\x01\xa6\x99\xe6\xfd\xea,-\\+Yug\xfb\xf1u\xa3\x9d\xaao\x18\x12\xfb\xd9\xfa\xf3\xaa\x02\xf75\xf8g\xd3G\xeex\xf4U\x94M0\xb8\xe0N\r\xb0\x1eV\x1fM\xa4\xc95\x18\x0e\xa0\x14<\xb3\xd1\x04\x02\x02\x9232~^\xdb\xdf\xa5{\xe5\xba\xd4\xc5\xda\xfdLQwFdK]-\x9fdY,\xd7\xe0\x8e\xcb\xc5\x91C\xbb|\x80\xaaJ\xd9\xd4!Y\xd1R\xb6\xd3\xe0F\xe2\xab\x7f3J\x95\xb9s\xbf\xac<\x10\x1e:\x92\v\xfa~\xfare\xcf\xe44\xdc\xc1\xb8\xc8\x16\xdfX\xe4z0C\x04\x9d\x85\xd9xRp\x16\xdb\x13-\xdcG\xe6\xaa\nrw\xfb\xdd[\xc2', 0x6426) 5.785041453s ago: executing program 4 (id=2249): preadv$auto(0xffffffffffffffff, 0x0, 0xc, 0x9, 0x402) madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x110d230000, 0x1, 0x3) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, 0x0, 0xc4142, 0x0) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/netfs/requests\x00', 0x40080, 0x0) pread64$auto(r2, 0x0, 0x8100000041, 0x413e) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000040)={@siginfo_0_0={0x2, 0x8, 0xf8, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000280)="79ca6170c72c9b5affac767c0127e58e38f3f407303ed544651fc514ea2bf3a8d8ec1b5efc99d62cbb8043d4582607afd440f400a4fdcd74a0d6cc759ee437d05a5a149e70f79615cb36ed421aea340b2fe6"}}}, 0x20f5, &(0x7f0000000440)={{0x6, 0x7e}, {0x8, 0x2}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x8000000000000001, 0x1, 0x3, 0x3, 0x501, 0xfff, 0x0, 0x3, 0x3, 0x8, 0xfffffffffffffffb}) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000000)={0x7, 0x3, 0x7, 0x2, 0x3ff, 0x7fffffff, "9b2189083b030000000d933475a77466", 0x7, 0x5, 0x9, 0x4, 0x2, 0xb, 0x2}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) copy_file_range$auto(r2, &(0x7f0000000200)=0xfffffffffffffffa, r3, &(0x7f0000000300)=0x3, 0x7, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x3) write$auto(0xffffffffffffffff, 0x0, 0x0) fcntl$auto_F_UNLCK(r2, 0x7, 0x2) r4 = socket(0x6, 0x5, 0x2) r5 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/exception_policy\x00', 0xc0201, 0x0) write$auto_tomoyo_operations_securityfs_if(r5, &(0x7f00000000c0)="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", 0x119) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) sendfile$auto(r4, r6, 0x0, 0xe5) mmap$auto(0x1, 0xe980, 0x81, 0xebf, 0xffffffffffffffff, 0xffffffffffffffff) 5.726998549s ago: executing program 5 (id=2250): ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0xa, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(r2, 0x66a, 0xffffffffffffffff) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r1, 0x4400ae8f, &(0x7f00000000c0)={0xdd, 0x0, [{0x8, 0x403}, {0x2c42, 0x8}, {0x6, 0x3, 0x143d}, {0x9, 0x400, 0x97}, {0x0, 0xffffffff, 0xc}, {0x1, 0xfffffffc, 0x1ff}, {0x2, 0x5, 0x6}, {0x8000, 0x40000c, 0x6}]}) mmap$auto(0x4, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x4, 0xffffffffffff0005, 0x16) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x8a402, 0x0) ioctl$auto_SOUND_MIXER_READ_STEREODEVS2(r3, 0x80044dfb, &(0x7f0000000300)) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x4, 0x9) mmap$auto(0x1000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) munmap$auto(0x8000, 0xffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = waitid$auto_P_PID(0x1, 0x0, &(0x7f0000000380)={@siginfo_0_0={0x7fffffff, 0x2, 0x5b7b, @_rt={0xffffffffffffffff, 0xffffffffffffffff, @sival_int=0x3ff}}}, 0x6, &(0x7f0000000400)={{0x5, 0x6}, {0x97, 0x6}, 0x3, 0x81, 0x5, 0xa, 0x5, 0x8, 0x0, 0x2, 0x8, 0x40, 0x7fffffff, 0x2, 0xffffffff, 0x35b800}) rt_tgsigqueueinfo$auto(r4, 0xffffffffffffffff, 0x5, &(0x7f00000004c0)={@_si_pad}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1b0026bd7000fddbdf250300000004000800100003800c000c80040009800100000012000100898971f1c19fa1d73d8f90c281dd000004000280"], 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x400c880) prctl$auto(0x4, 0x2, r4, 0x67a, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) 5.060783031s ago: executing program 6 (id=2252): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0xce850517a5aab616, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0002, 0x7) r1 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) ioctl$auto_EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f00000001c0)={0x7ff0000000, 0xfffffffffffffffe, 0x8, 0x7, 0x1, 0x0, [{0xa63, 0x52a2, 0xf, '\x00', 0x5}]}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1b, 0x0) r2 = fsopen$auto(0x0, 0x1) ioctl$auto_FS_IOC_GETFLAGS(r0, 0x80086601, 0x43) mmap$auto(0x3, 0x5f76b251, 0x4000000000df, 0xeb1, r1, 0x7) socket(0x2, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r2, 0x4, &(0x7f0000000000)='bridge_slave_0\x00', &(0x7f0000000100), 0x4) io_setup$auto(0x100, &(0x7f0000000080)=0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x106) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0x1) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x142, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) getcwd$auto(0x0, 0xfffffffffffffffd) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) ioperm$auto(0x3, 0xe, 0x2000000000000149) 4.380224652s ago: executing program 5 (id=2253): close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) (async, rerun: 32) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0xaaa41, 0x0) (async, rerun: 32) socket(0x2, 0x1, 0x0) (rerun: 32) read$auto(0xffffffffffffffff, 0x0, 0x10001) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x20000004) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmmsg$auto(0x3, 0x0, 0x3, 0x1f00) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x4000, 0x0) (async) mmap$auto(0x0, 0x80, 0xdf, 0x10011, 0x401, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f83b2a643399f10dfdb0f4018b401be4db675d0acf8d348c26acf338cbe20fcb76439ca602a3c022f4463a8820f1c6f865d24e058af98f0c48bf552c3f6cc28c09d9054347db3c28701c67fa1e57d81b881638b518dd8e24969b7fd10406fcf6eb9bb66bf56ed7568510c72b380fa6efbca845b") readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) ioctl$auto_SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) (async) read$auto(0xffffffffffffffff, 0x0, 0x1f40) (async, rerun: 32) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x3) (rerun: 32) 3.860287191s ago: executing program 8 (id=2254): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)=@link_detach={0xffffffffffffffff}, 0x90) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x422f00, 0x0) mknod$auto(&(0x7f0000000080)='}[,&*}\x00', 0xe6c, 0x17) llistxattr$auto(&(0x7f0000000040)='}[,&*}\x00', 0x0, 0x7) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x06\x11\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9', 0xfdef, 0x3) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) r3 = socketcall$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x15, 0x24, 0xf, 0x63, 0x400000, 0x0, 0x4, 0x80f0c8, 0x60, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_prog_fd, 0x6, 0xffff, 0x8, 0x0, 0xfffffffe}, 0x47) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(r5, 0x1, 0x1, &(0x7f00000002c0)='.*+%\x00', &(0x7f0000000300)=0xfff) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x10000000, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) r6 = ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) futex$auto(0x0, 0x3b88, 0x40, 0x0, 0x0, 0x0) futex$auto(0x0, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) close_range$auto(0x2, r1, 0x0) r7 = syz_clone3(&(0x7f0000001580)={0x3680c0600, &(0x7f0000000180), &(0x7f0000000240), 0x0, {0x10}, &(0x7f0000000440)=""/4096, 0x1000, &(0x7f0000001440)=""/215, 0x0, 0x0, {r6}}, 0x58) r8 = set_tid_address$auto(&(0x7f0000001600)) kcmp$auto_KCMP_FILE(r7, r8, 0x0, r0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x20048000) mmap$auto(0x0, 0x2000400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x200000, 0x0) 3.595409173s ago: executing program 5 (id=2255): socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x440, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0) sendfile$auto(r0, r1, 0x0, 0x800048) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x4611, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) sysfs$auto(0x2, 0x2000000000040, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="186e6394", @ANYRES16=r3, @ANYBLOB="030329bd7000fbdbdf250300000004000500"], 0x18}, 0x1, 0x0, 0x0, 0x8804}, 0x4004010) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r5 = openat$auto_proc_auxv_operations_base(0xffffffffffffff9c, 0x0, 0x80, 0x0) read$auto_proc_auxv_operations_base(r5, 0x0, 0x0) socket(0xa, 0x5, 0x0) unshare$auto(0x40000080) mmap$auto(0xffffffffffffffff, 0x2020004, 0x203, 0xeb1, 0xffffffffffffffff, 0x208000) bind$auto(0x3, 0x0, 0x6d) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), 0xffffffffffffffff) rseq$auto(0x0, 0x8000, 0x0, 0x6) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) 3.508939341s ago: executing program 4 (id=2256): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x40, 0x0) ioctl$auto(r0, 0x90006442, r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f0000000400)={{&(0x7f0000000000), 0x5a7, &(0x7f0000000180)={&(0x7f0000000300)="669b0c0c4afa2f", 0x28}, 0x1, 0x0, 0x5, 0x3}, 0x3}, 0x2, 0x8) r2 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) write$auto(r2, &(0x7f0000000680)='d\n\x1e\x9f\xd0\x92l\x98\x92!Fc\x9c?\xado^\x9b\xf4\x9c\xa8\xd2gn\x1a\xd7\x1c\xe8)\xefA\x7f\xc2x\xd0\x18gS\x1c\xca\xb9\x84\x1ec\xd4>\xc2\xfej\t\x89u\xcb(\x95_3\xdfo\xdc\xa5;t\x05q$zmM\xae\xdb\x1f\xeb\xffe\x91\xd5\xd2[\xa5_F\xc4X\xec\xdb\xdc\x01\xc2d\xa1\x8b\xed=\xb0\x88\xa8tl2\x0e\x13mjH,\xcda\xcab.\x03\xe7\xa4z\xcaA\xe2\x99\xd5n\xa0\x8a\x91K_\xf0~\b\v\xd1W\x97\xd9\x8c}\xff4\xff\tAK\xc4\x16\x13,9}-_\x00\x80\xd2\xfc\x98?\'\xaf\xccyRou\xa1\x12\x9fwZ\x1c\f\xcck\xdb-\xd7;\xbf\xbf\xbe\x04*L\x1e\x9c\x8fVb\xb8\xb4\xa2|\x88\x1e\bX\xba_O\x87f.\xc2\xfa\x01R\xefB\xe9\xf4Xc\x98\xe7', 0x98) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_clone3(&(0x7f00000017c0)={0x4004000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), {0x1}, &(0x7f0000000100)=""/85, 0x55, &(0x7f0000000780)=""/4096, &(0x7f0000001780)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) process_madvise$auto_MADV_HUGEPAGE(r4, &(0x7f00000018c0)={&(0x7f0000001840)="3861531b246a22d40a1b0b919fe2d0a1b705dd9f676b962e4fc9c2f9202dca1ec7e563d9a99ed3572ca0ceebcfc8f017ccfa94711566d12c48e94f56e2261bcda6a02ca6a2dd5f5b13315662cb02a60306498e30b81a2aca5d6a108cb644c31404d72d735cbec138732cf4", 0x4}, 0x10001, 0xe, 0x6) unshare$auto(0x40000080) r5 = prctl$auto(0x20003e, 0x80000000001, 0x0, 0x5, 0x0) r6 = open(&(0x7f0000000000)='./cgroup\x00', 0x400, 0x64) fchdir$auto(r6) r7 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/lru_gen\x00', 0x4c00, 0x0) close_range$auto(r3, r7, 0x5) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r9) ioctl$auto_KVM_GET_MSRS(r8, 0x4068aea3, &(0x7f0000000080)={0x8f}) socketpair$auto(0x2006, 0x3, 0x1, &(0x7f0000000200)=0x6) listen$auto(0xffffffffffffffff, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PREPARE2(r5, 0x4140, 0x0) 3.418897823s ago: executing program 6 (id=2257): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim3/hwstats/l3/disable_ifindex\x00', 0x1242, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x2000004, 0xffffffffffff0001, 0x11) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) shmctl$auto_SHM_STAT_ANY(0x6, 0xf, &(0x7f0000000100)={{0x341a, 0xffffffffffffffff, 0xee00, 0x40, 0x70e, 0x3, 0x7}, 0x7, 0x0, 0x10000, 0x9, @inferred=0xffffffffffffffff, @raw=0x800000, 0x6, 0x0, &(0x7f0000000040)="2482114b61d12f8ae68ce667b0c84a82c5bc3b57f0edd80461a26994", &(0x7f0000000080)="fff3d191941574e632a84ed650dd222050fdbe08ed8c5f8b0b06ebebe11df4351dbb24f8ed75c18abb238d4481102324b20742f54f031ee6b82f2dca237792056f"}) ioprio_get$auto(0x1, r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x101100, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0xe40, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x0, 0xa}, 0x5, 0x108) read$auto(r0, 0x0, 0x7fffffff) socket(0x2b, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6a) ioctl$auto(0xffffffffffffffff, 0x64ce, 0xffffffffffffffff) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x9c0302, 0x0) inotify_init1$auto(0xffffffff) lseek$auto(r0, 0x4, 0x0) ioctl$auto_FIONREAD(r0, 0x541b, 0x3) close_range$auto(r0, r0, 0x8) r3 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000000000)=ANY=[@ANYBLOB='M\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010029bd7000ffdbdf250300000004000200"], 0x18}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYBLOB="01", @ANYRES8=r2, @ANYRESHEX=r4], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r3, &(0x7f0000000000)='-\x00', 0xfdef) 3.180973799s ago: executing program 8 (id=2258): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async, rerun: 64) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/snd_hda_intel/parameters/power_save\x00', 0x80002, 0x0) write$auto(r0, &(0x7f0000000000)='/sys/module/snd_hda_intel/parameters/power_save\x00', 0x1) (async) r1 = socket(0x2, 0x80002, 0x73) getsockopt$auto(r1, 0x0, 0x2, 0x0, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000080)={0x34, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x24000802) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x12c, r3, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x2}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x7}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0xb4, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5c}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x3b}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4001811}, 0x20000000) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 32) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_BLKPG(r6, 0x1269, 0x300000000000000) (async) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mlockall$auto(0x7) (async) prctl$auto_SECCOMP_MODE_STRICT(0x6, 0x1, 0x0, 0x0, 0x2ff939e8) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) 2.751871125s ago: executing program 5 (id=2259): getsockopt$auto(0xffffffffffffffff, 0x6a, 0x1, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x1f, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x8, 0x0, 0x40) fanotify_init$auto(0x6a1, 0x2000000000002) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/modules\x00', 0x40000, 0x0) syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000000), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x2ffe, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [0x0, 0x35c6], {0x6, 0x6, 0x8c48, 0x29b, 0x3453, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8020c, 0x100000000}}) r0 = socket(0x11, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) 1.748142535s ago: executing program 4 (id=2260): mmap$auto(0x1, 0x2020009, 0x1, 0xebd, 0xffffffffffffffff, 0x8000) r0 = pidfd_open$auto(0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1cb603, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyr1\x00', 0x80200, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) unshare$auto(0x40000080) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000100)={0xf6e, 0x0, 0x1ff, 0x1ff, 0x7, 0xffffffff, 0x0, 0xfff, 0x8, 0xfffffffffffffff9, 0x0, 0xfffffffffffffff8, "01b6e1b139db5d2add99f7e703d9d15d", 0x4, 0x0, 0x1ff, 0x9, 0x5eb4578a, 0x4, 0x6, 0x7}) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r1, 0x8, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) setns(r0, 0x60020000) mknod$auto(0x0, 0x1081, 0x3) open(0x0, 0xa00, 0x100) socket(0xa, 0x6, 0x83) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x0) 1.460724322s ago: executing program 8 (id=2261): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000180)={0xb, 0x2, 0x7, 0x2406a90b, 0x400, 0x5, "064daf57f27eaafc03bbb4aea824e8aef136856b69602919a6053d79278d8647e4793cca29bc4a1593610ff1918aee8416a75a31410415b167da94a628ef"}, 0x20, 0x0, 0x8000006) memfd_secret$auto(0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/nbd15/mq/0/nr_reserved_tags\x00', 0x2280, 0x0) read$auto(r0, 0x0, 0x20) ftruncate$auto(0x3, 0x700) io_uring_setup$auto(0x6, 0x0) sysfs$auto(0x2, 0x23, 0x0) close_range$auto(0x2, 0x8, 0x0) writev$auto(0x8000, &(0x7f0000000040)={0x0, 0x2}, 0x1000002bf) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptydc\x00', 0x40, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0x1eb1, 0xffffffffffffffff, 0x4) r1 = socket(0x2a, 0x2, 0x0) socket(0x1e, 0x1, 0xfffffffe) sendfile$auto(r1, r1, 0x0, 0x7) setfsuid$auto(0xee00) mmap$auto(0x0, 0x400006, 0xdf, 0x100000009b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2a, 0x2, 0x1) connect$auto(r2, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketcall$auto(0xffe, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1643, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) 1.445754964s ago: executing program 6 (id=2262): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r1, &(0x7f0000000040)='Fm_\xbd\xc3!\x00', 0x7) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vidtv.0/i2c-0/new_device\x00', 0x4a001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)="1235015049bf97c3e69367a7e995ea5d93d33e4d72943b6c92bef36e1dda40b820", 0x21) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) swapon$auto(&(0x7f00000000c0)='/proc/bus\x1bpc.3\x00\x999\xf0q\xb8\x00\x00\x00\xb8\x10S\x06\xa6\x8a\x8a\x9f\xd9\x9f\x9ec\xfc\\\x18\x9d\xa3x\x97U(\x99\xa8u\x96\xd0\xe6F\xcb\x1eH\xca\x8e)\xf4\xc0z\xbfo\xc4a`\x8fs\xf6\xb9\xe17\x89\x1b^} \xf1\x83\x12\xb5\x8e\xcd\xb7\x1f\b\xf2\xc7\xd0\x89\xfa\xab9\xa3\xb1<\xe2VC\xe3\xce%\xde=\xd4R\x927\xd9l\xae\xff\a\x00\x00UrY\x12\xd5\x96\xfb\xaf\x89\xa0\x99\x9f\xdeSXD\x80\xbfo\x98\xce\xe5)W\x05xRK\x8d\x85\x9fA\xc3?\x94\xf6\xa2\xa4\xc8n\vTv\xcb[\xb3\xa4\x8a\xda\xe3\xe5\xe7\xfa\x7f\x93\xdc\xba;\x80K\x85]S\x16\xf3\xa4\x99\a\xa7\xfe\x1d\n/\xebng\xacJ\xd3\xa4\x87\x13 |AC\xc8@\x80\xa6\r\xe7\x013O\x04W\x983\xa0u\bbw?.d\xe2\xd4,Z\xb1_ \x11\"\xb1\xb2\xaf3:h\xceu\xb2\x01\xd4Y\x9f\x80\xec\xda+\xd5\x8fa\xf2>4]\x96\x85\xf5\xd7\xfd\xc6}\xcb\x1c\xe5Vb.apA\x83O\x8e*\x00\x00\xd7+\xf2yd\f\xc4\xd6\x8dm\x00\xc5 J\xf3\xb6\rVj9\x8c\xc5S\xd2\x7fT|\xd1\x15\xc7\xc5\x7fu\x86\xe3\b\xbac\xc3\xa6\xdf\xcc P \xdf\xc0\n\xd7\x96\v\xbd=)M\x82\xc0\xd6B\x05\xb1\xccXT\xb4\xa6&\xc1\xad\xa9\"f\xb7\xc5\xd5p\xa46\x11\x81\x0f]I\xc7\x17&D*\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9e\xb5?h\xef*\xcf0x!\xf8\x92!|p\xee\x7fPJ\x9e\xd6W/?\xf5\xf9bV\'\xbf\x9eM\xfb\x99d\x8e\xd9\xa6A\xe6x}5\x1f]\x03\xd1\xc5O\xf5k\x7f\xc8,\xf2\xfd\xb8\\\x9cj7\x01\xff\a\\-\x1f\x9e\xd3\xe7\x05Y\xfao\xfd\xfap\xe0\xc3O\xb6mz\x9fP\xda\xc7\x03\xf9,\xf5\xc33\xdb(kH\xe6\xa0\x9fch\xdc\x02l\x9a\xf2\xb0{|\x9cr\xcfM\x94\x01\xbb\xf5\xb3\xf5f\xa5\f\x8fL\xf9a?\xfc\xaf|\xe9$\x14\x87\x84\x11\x99\x12\x98\xf1\x82\')\xf2j\xbe\x11\xa3\xd4?\x05`u5c9\x91\x1e\xb4\x94Q\xef\x85\xab&w\xea\"\x14\xdf\x90l\xc0M\x05\xac\x9e\x04\xe2I\xa2\x06\b\x10\\\xdcK\x9d\x1a\xc0E\xdfXy\xf6;\x94\x92;\v\xc0T\xcd\x13\x97x10\xe9){\xf9\xb8\xfdi\x8a\xbc1E\x04\x9c3\t\x93\xce\xd2\xfe\x0f\r\x87*\xe3\x1a\'\xce\xafT\xb3\xe7\x7f9B\bo\x9f\xd9\x95\xc38\xa8\xc1\b\x84W\xf5\xd1\x1dKt\'\xbcE\xa5\xbf\x7fR\xac\xb5\xf4+\xd1mv\xab\x14^\xac\xdd\x89?\xdf^q8\r#\x04v_c\xce\xe9\xb5Z$\xfa\xbcY\x9bWK\x93C{\x1f\xae\xa5B\xda@\xaf\x9c=\xd9\xae\xd3Y~V\xa2\xf9\x8c\xeb\xf1?\x86L\xc9\xbdp\xc8S\f\x00,\x9a\xf9\xdb\x88\x8a\xe9\xd5\xac\xe9\r\xe1\xce\x8em\x98LZ\xee%7\x80\xbf\x84\x8c\xael\xbdX9\x04Z\xee\x8c\xd5\xb0\xd75\xf0Y\x11\xe0\xd5\xe5\xc9\x8fX\xdf[\xf0A\xb6MFSHi\xdf-O\xd3\xdf\x15\xf5\xce\xd5\'\x82_l\x9f\xfbW.`*\xa8V\x84O\xcf\x13(\xcd\xc7\x9d\x19u\xa5\x80\x1e$\xe5\xb5\x9c\xd0Wd\xbb^J\xa2+\x15\x84%\xe7\x1b', 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x40400, 0x0) r7 = ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(r5, 0xc038586b, &(0x7f0000000540)={r6, &(0x7f00000002c0)="01f998ea13ad66d31e175ad244eebe2ba0a823686a1feaae2132eddfdc8632e9709e9954737a2329471db0a7f7bd59fbb31eb6621bcfb65ab552544a44206828c4aecaed71a58cfe77d90d13418bbcf956599944dc8c38590d8dc92d1cb869659c2881a20832193c2998fff8bb1cc410b7141e39807c6dcdc5b8c5cae8b40ffc5cc0ca49a8b95c8b14de8beb0fad6f033c346fb5ffed895f90af34010c591ddab8e20a2689d9dff3165400b53ac5cccdb88b5729377ee0a0abad4cc572f8bd6df19c590b5efcb7ffb3e3d666998b57966f1b3040cd4a08fa7eb5993a0eaac59cfab4e3477cb7af489c67f988e5e302b5ad344359ef2b", 0x1, &(0x7f00000003c0)="b3caf323fa44d9e8ed220d4c2f0f71493f17eecc5a95c2079d0c39bdf1df1e812e4a41e22c1679b0447335cdc0c583e6081e29cfec54280879fd135f0d5cde161d885b64a1df4cba4822f6f41a4e3e87e293dcbd0d7538193a9e1838755e8e624c5360d276cb61ea14a1bdf9954117f8bb382e280ac5", 0x5, &(0x7f0000000440)="ca10869a9c798fa457402c2727baec9057f753829f032d3795ebd3b8d19b8e1017e93ae60c0cbb59183d4eeb3f2306966e300a735069d26333de261cf4ce12f74dee9ea30811312e7dd178db7cb926bd1db44518906deb0f4114432cbdb7c25e380d74249159086bfcd4a6799b3b17a736b5fa44c6fd7f58041258e2b5733af333d06b80f66c37957980e9140d", &(0x7f0000000500)=0x4}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r8) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r7, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="08007c81", @ANYRES16=r9], 0x208}}, 0x400d1) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="f7090000", @ANYRES16=r9, @ANYBLOB="01002abd7000ffdbdf25210000001000b000b5cbafa9dc3fbdf23d12c5080600b500ff01000004001601"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r10, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r10, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r4, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000afd003a5394e965231da1bd312e7af6d67d0"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 635.737054ms ago: executing program 8 (id=2263): socket(0xa, 0x2, 0x3a) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r1, r0, 0x8000, 0x2, 0xffffffffffffffff, @relative_id=0x13, 0x6}, 0xf) (async) fanotify_init$auto(0x6a1, 0x2000000000002) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r2, 0x8000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$auto(0x3, 0x400caed0, r3) (async) r5 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon1\x00', 0x1c3880, 0x0) ioctl$auto_MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$auto_I2C_RDWR(r6, 0x707, &(0x7f0000000180)) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto(0x3, 0xae41, r9) (async) ioctl$auto_KVM_GET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [{0x277, 0x3, 0x3}]}) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) (async) r10 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000900), 0x20000, 0x0) ioctl$auto_UI_DEV_DESTROY(r10, 0x5502, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) 632.153418ms ago: executing program 6 (id=2264): r0 = socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statmount$auto(0x0, 0x0, 0x800, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) write$auto(r1, &(0x7f0000000340)=',,2.15.4 ]\x98\x0f7V\xd4l\xf2AC\x04\xecQ=\xa2\xce\nO}\x1d\xd7\xb5\x92\xf7\xb2\xc2\xddm\xfbR\xfb\x92x\xd8\xb2\x8a&\xda\\\xa1}&^\x03\x02\xf28\xfd|\xed~\a\xaf\x14\xb5.\x92\"-6.\xb2$\x88\xeb\xdc\x0f\xba$?c\x8b\xcb\xf4q\r\xf5>}4\x99(\xb8D\x15\xb8\xc9U\x14\xd6r\xc9\x81\xbbI\xc9+^\x00\xf6\xb5\xd9\x1e\x89G?/\xc5\x86\xd0\xab\xb3\xfd\xc9?\xa7B\x1b\xdc\xff\xab\xb6~\x96\xd6\x9f\x1d\xfb\xa1dg\x9d\x8d]\xdek\x9c0\xea\xb3\nV\x1d\x10g\xaa\xf9\xf0\xc9\n\x8c\xf25G\x9c\x19\xe5\xd8\xa3\xee\x11\x12f\xd5o\x00\xeaY\n\xe0\x9f\r\xd4\x8e9G\x01\x04\xb2j\xbfYX\x9a)OQ\xedk\xb9\x85\x03c\xf3\x80\x10eG(\x94m81PL\x8d\xa47\x1a\x16\x11\xcd\xcdf\x15\r\x19\xc3\x90\xbe\x12\x85V\xeb\x8d\x97\xf0\x9c!\x86:\xe8\x8b\xa7@l', 0x3) r2 = socket(0x8, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8955, 0x0) r3 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x14, r3, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfd3f9}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d3daa4eea8a4c661d22579a25d9423ba845e63e4dfe7a102c3d215cbca355f461df3c1025962c2b3e55c414f5ddf82359b2ce666f9cb206f92bc1f902b23c36128bf83c58b143d52968a872a0c2fdab9b11188b452513ef2fd395b7f0f63710e2e61d8ba633dc04cfd902d192e3d700e7297302c6154840c6a09e2d0e90e", @ANYRES16=r3, @ANYBLOB="02002abd7000fbdbdf250100000008000b00e000000114000200fc0000000000"], 0x30}}, 0x40004) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r5, 0x401070cd, 0x5) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r5], 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x2000c095) syz_genetlink_get_family_id$auto_ovs_flow(0x0, r0) r6 = setfsuid$auto(0xee00) r7 = setfsuid$auto(0xee01) setresuid$auto(r6, r7, r6) r8 = setfsuid$auto(r7) setreuid$auto(r8, 0x0) r9 = syz_clone(0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0) ptrace$auto(0x5, r9, 0x0, 0x8) r10 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/amidi2\x00', 0x201, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r10, 0xc0385720, &(0x7f0000000080)={0x0, "aa8c44a1", 0x6, 0x8, 0x3, 0x6e48, "9f929aabd06e2686b720bf916f3fa0df"}) 625.447995ms ago: executing program 5 (id=2265): socket(0x11, 0x3, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) flock$auto(r0, 0x6) r1 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) flock$auto(r1, 0x1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) flock$auto(r2, 0x2) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xfffffffffffffff7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf2503000000790008805b4f2525b2dc3a73ec37e7122e6f0f55382854d419b883b7ed64bd3c7b9fb15273e787030718751e0a22cc6cabcae114aa6448d0356183e1ca7c01536c5c6f37915b26a3e755151e231c001d800400d3800c002000f3000000002b3c0c7e9b"], 0x100}, 0x1, 0x0, 0x0, 0x48000}, 0x8052) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x9, 0x8209c25d4bd731ab, 0x13) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r4 = prctl$auto(0x8, 0x1, 0x0, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x80, 0xdf, 0x17, 0x2, 0x8000) r5 = socket(0x21, 0xa, 0x5) bind$auto(r5, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(r4, 0x400454cc, r3) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) write$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfffffdef) setresuid$auto(0x0, 0x0, 0xee01) syz_genetlink_get_family_id$auto_nfsd(0x0, r4) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r6, 0x8000) 197.035409ms ago: executing program 8 (id=2266): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000001c0), r0) (async) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000001c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0x28, r1, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0xdc}]}]}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1398a0584259c607}, 0x800) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) mmap$auto(0xfffffffffffffffc, 0x4005, 0xa, 0x10, 0x401, 0x300000000000) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mincore$auto(0x7, 0x5, &(0x7f0000000000)='\x00') (async) mincore$auto(0x7, 0x5, &(0x7f0000000000)='\x00') mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 68.477903ms ago: executing program 8 (id=2267): socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x440, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/tunl0/disable_policy\x00', 0xd02, 0x0) sendfile$auto(r0, r1, 0x0, 0x800048) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x4611, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) sysfs$auto(0x2, 0x2000000000040, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="186e6394", @ANYRES16=r3, @ANYBLOB="030329bd7000fbdbdf250300000004000500"], 0x18}, 0x1, 0x0, 0x0, 0x8804}, 0x4004010) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r5 = openat$auto_proc_auxv_operations_base(0xffffffffffffff9c, 0x0, 0x80, 0x0) read$auto_proc_auxv_operations_base(r5, 0x0, 0x0) socket(0xa, 0x5, 0x0) unshare$auto(0x40000080) mmap$auto(0xffffffffffffffff, 0x2020004, 0x203, 0xeb1, 0xffffffffffffffff, 0x208000) bind$auto(0x3, 0x0, 0x6d) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), 0xffffffffffffffff) rseq$auto(0x0, 0x8000, 0x0, 0x6) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) 0s ago: executing program 6 (id=2268): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40802, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x4000000, 0x3, 0xe, 0x3132, 0x4008df3, 0x0) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/ieee80211/phy2/rfkill4/type\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000003c0)=""/20, 0xfffffcc4) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x2, 0x0, 0x28) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) r4 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/environ\x00', 0x410800, 0x0) close_range$auto(r2, r4, 0x1) ioctl$auto_PROCMAP_QUERY(0xffffffffffffffff, 0xc0686611, &(0x7f0000000080)={0x67, 0x47, 0x7fff, 0x1, 0x0, 0x1, 0x20000006, 0xfe, 0x5, 0x7f, 0xfbfffffe, 0xfff, 0x7fb, 0x107, 0x9}) r5 = getsockopt$auto(r1, 0x5, 0x8, 0x0, &(0x7f0000000100)=0x5) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x4, 0x0, 0x4) bpf$auto_BPF_MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)=@link_detach={r5}, 0x6) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) kernel console output (not intermixed with test programs): pfx_nl80211_pre_doit+0x10/0x10 [ 629.452094][T13905] ? nl80211_pre_doit+0x19a/0xae0 [ 629.452135][T13905] genl_family_rcv_msg_doit+0x214/0x300 [ 629.452177][T13905] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 629.452216][T13905] ? genl_get_cmd+0x3e7/0x760 [ 629.452260][T13905] ? bpf_lsm_capable+0x9/0x10 [ 629.452287][T13905] ? security_capable+0x80/0x260 [ 629.452317][T13905] genl_rcv_msg+0x560/0x800 [ 629.452357][T13905] ? __pfx_genl_rcv_msg+0x10/0x10 [ 629.452395][T13905] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 629.452431][T13905] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 629.452460][T13905] ? __pfx_nl80211_post_doit+0x10/0x10 [ 629.452508][T13905] netlink_rcv_skb+0x159/0x420 [ 629.452541][T13905] ? __pfx_genl_rcv_msg+0x10/0x10 [ 629.452580][T13905] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 629.452624][T13905] ? netlink_deliver_tap+0x1ae/0xcc0 [ 629.452660][T13905] genl_rcv+0x28/0x40 [ 629.452693][T13905] netlink_unicast+0x585/0x850 [ 629.452731][T13905] ? __pfx_netlink_unicast+0x10/0x10 [ 629.452772][T13905] netlink_sendmsg+0x8b0/0xda0 [ 629.452810][T13905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.452842][T13905] ? __import_iovec+0x1d2/0x640 [ 629.452885][T13905] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 629.452915][T13905] ____sys_sendmsg+0x9e1/0xb70 [ 629.452947][T13905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.452983][T13905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 629.453015][T13905] ? preempt_schedule_thunk+0x16/0x30 [ 629.453056][T13905] ? try_to_wake_up+0x5f6/0x1900 [ 629.453093][T13905] ___sys_sendmsg+0x190/0x1e0 [ 629.453130][T13905] ? __pfx____sys_sendmsg+0x10/0x10 [ 629.453164][T13905] ? futex_private_hash_put+0x107/0x1c0 [ 629.453236][T13905] __sys_sendmsg+0x170/0x220 [ 629.453263][T13905] ? __pfx___sys_sendmsg+0x10/0x10 [ 629.453288][T13905] ? __x64_sys_futex+0x34f/0x4d0 [ 629.453325][T13905] ? rcu_is_watching+0x12/0xc0 [ 629.453357][T13905] do_syscall_64+0x115/0x840 [ 629.453392][T13905] ? clear_bhb_loop+0x40/0x90 [ 629.453421][T13905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.453446][T13905] RIP: 0033:0x7f783f59ce59 [ 629.453467][T13905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.453492][T13905] RSP: 002b:00007f78404d9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 629.453517][T13905] RAX: ffffffffffffffda RBX: 00007f783f815fa0 RCX: 00007f783f59ce59 [ 629.453533][T13905] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000008 [ 629.453548][T13905] RBP: 00007f783f632d6f R08: 0000000000000000 R09: 0000000000000000 [ 629.453563][T13905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.453577][T13905] R13: 00007f783f816038 R14: 00007f783f815fa0 R15: 00007fff1318d8b8 [ 629.453608][T13905] [ 631.420905][T13904] Process accounting paused [ 631.694173][T13983] Invalid ELF header magic: != ELF [ 632.243125][T13988] netlink: 'syz.2.1605': attribute type 1 has an invalid length. [ 632.582641][T14010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1610'. [ 633.909945][T14024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1611'. [ 633.997008][T14038] Invalid ELF header magic: != ELF [ 635.930579][T14031] random: crng reseeded on system resumption [ 635.943082][T14071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1624'. [ 636.045782][T14031] FAULT_INJECTION: forcing a failure. [ 636.045782][T14031] name failslab, interval 1, probability 0, space 0, times 0 [ 636.155957][T14031] CPU: 0 UID: 0 PID: 14031 Comm: syz.1.1613 Tainted: G U L syzkaller #0 PREEMPT(full) [ 636.156011][T14031] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 636.156021][T14031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 636.156035][T14031] Call Trace: [ 636.156042][T14031] [ 636.156051][T14031] dump_stack_lvl+0x100/0x190 [ 636.156097][T14031] should_fail_ex.cold+0x5/0xa [ 636.156128][T14031] should_failslab+0xc2/0x120 [ 636.156157][T14031] __kmalloc_cache_noprof+0x7a/0x6f0 [ 636.156211][T14031] ? mpi_alloc+0x46/0x230 [ 636.156251][T14031] mpi_alloc+0x46/0x230 [ 636.156289][T14031] ? __virt_addr_valid+0x22a/0x430 [ 636.156327][T14031] rsa_enc+0x88/0x3b0 [ 636.156353][T14031] ? __pfx_rsa_enc+0x10/0x10 [ 636.156378][T14031] ? __virt_addr_valid+0x239/0x430 [ 636.156417][T14031] ? sg_init_one+0xf5/0x1b0 [ 636.156450][T14031] rsassa_pkcs1_verify+0x4eb/0xc20 [ 636.156489][T14031] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 636.156536][T14031] ? rsa_max_size+0xd/0x70 [ 636.156559][T14031] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 636.156594][T14031] public_key_verify_signature+0x5ee/0x910 [ 636.156636][T14031] ? __pfx_public_key_verify_signature+0x10/0x10 [ 636.156692][T14031] ? __pfx_public_key_verify_signature_2+0x10/0x10 [ 636.156730][T14031] verify_signature+0xe2/0x130 [ 636.156765][T14031] pkcs7_validate_trust+0x220/0x7f0 [ 636.156795][T14031] verify_pkcs7_message_sig+0x12c/0x230 [ 636.156825][T14031] ? __pfx_verify_pkcs7_message_sig+0x10/0x10 [ 636.156852][T14031] ? pkcs7_parse_message+0x5b1/0x870 [ 636.156891][T14031] ? kfree+0x223/0x6c0 [ 636.156931][T14031] ? pkcs7_parse_message+0x5b6/0x870 [ 636.156974][T14031] verify_pkcs7_signature+0x6d/0xa0 [ 636.157005][T14031] valid_regdb+0x211/0x590 [ 636.157036][T14031] ? __pfx_valid_regdb+0x10/0x10 [ 636.157070][T14031] reg_reload_regdb+0x11a/0x460 [ 636.157103][T14031] ? __pfx_reg_reload_regdb+0x10/0x10 [ 636.157136][T14031] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 636.157174][T14031] ? nl80211_pre_doit+0x19a/0xae0 [ 636.157217][T14031] genl_family_rcv_msg_doit+0x214/0x300 [ 636.157260][T14031] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 636.157304][T14031] ? genl_get_cmd+0x3e7/0x760 [ 636.157347][T14031] ? bpf_lsm_capable+0x9/0x10 [ 636.157374][T14031] ? security_capable+0x80/0x260 [ 636.157405][T14031] genl_rcv_msg+0x560/0x800 [ 636.157446][T14031] ? __pfx_genl_rcv_msg+0x10/0x10 [ 636.157485][T14031] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 636.157522][T14031] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 636.157552][T14031] ? __pfx_nl80211_post_doit+0x10/0x10 [ 636.157601][T14031] netlink_rcv_skb+0x159/0x420 [ 636.157635][T14031] ? __pfx_genl_rcv_msg+0x10/0x10 [ 636.157674][T14031] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 636.157720][T14031] ? netlink_deliver_tap+0x1ae/0xcc0 [ 636.157756][T14031] genl_rcv+0x28/0x40 [ 636.157790][T14031] netlink_unicast+0x585/0x850 [ 636.157829][T14031] ? __pfx_netlink_unicast+0x10/0x10 [ 636.157871][T14031] netlink_sendmsg+0x8b0/0xda0 [ 636.157910][T14031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.157943][T14031] ? __import_iovec+0x1d2/0x640 [ 636.157981][T14031] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 636.158013][T14031] ____sys_sendmsg+0x9e1/0xb70 [ 636.158046][T14031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.158083][T14031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 636.158115][T14031] ? preempt_schedule_thunk+0x16/0x30 [ 636.158158][T14031] ? try_to_wake_up+0x5f6/0x1900 [ 636.158195][T14031] ___sys_sendmsg+0x190/0x1e0 [ 636.158233][T14031] ? __pfx____sys_sendmsg+0x10/0x10 [ 636.158274][T14031] ? futex_private_hash_put+0x107/0x1c0 [ 636.158348][T14031] __sys_sendmsg+0x170/0x220 [ 636.158376][T14031] ? __pfx___sys_sendmsg+0x10/0x10 [ 636.158402][T14031] ? __x64_sys_futex+0x34f/0x4d0 [ 636.158439][T14031] ? rcu_is_watching+0x12/0xc0 [ 636.158472][T14031] do_syscall_64+0x115/0x840 [ 636.158508][T14031] ? clear_bhb_loop+0x40/0x90 [ 636.158538][T14031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.158564][T14031] RIP: 0033:0x7f998539ce59 [ 636.158586][T14031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.158611][T14031] RSP: 002b:00007f998616e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 636.158634][T14031] RAX: ffffffffffffffda RBX: 00007f9985615fa0 RCX: 00007f998539ce59 [ 636.158651][T14031] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000008 [ 636.158667][T14031] RBP: 00007f9985432d6f R08: 0000000000000000 R09: 0000000000000000 [ 636.158682][T14031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.158697][T14031] R13: 00007f9985616038 R14: 00007f9985615fa0 R15: 00007ffe68b1b388 [ 636.158728][T14031] [ 636.975171][T14092] Invalid ELF header magic: != ELF [ 637.268878][T14099] random: crng reseeded on system resumption [ 639.030696][T14142] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1635'. [ 639.047328][T14132] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 639.082128][T14132] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 639.127437][T14132] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 639.161811][T14132] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 639.370663][T14142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1635'. [ 639.592393][T14160] Invalid ELF header magic: != ELF [ 639.635320][T14151] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 639.657121][T14151] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 639.701163][T14151] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 639.738596][T14151] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 640.251974][T14174] FAULT_INJECTION: forcing a failure. [ 640.251974][T14174] name failslab, interval 1, probability 0, space 0, times 0 [ 640.578899][T14174] CPU: 0 UID: 0 PID: 14174 Comm: syz.2.1641 Tainted: G U L syzkaller #0 PREEMPT(full) [ 640.578941][T14174] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 640.578951][T14174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 640.578967][T14174] Call Trace: [ 640.578976][T14174] [ 640.578986][T14174] dump_stack_lvl+0x100/0x190 [ 640.579035][T14174] should_fail_ex.cold+0x5/0xa [ 640.579066][T14174] should_failslab+0xc2/0x120 [ 640.579097][T14174] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 640.579138][T14174] ? __kernfs_new_node+0xd2/0x9f0 [ 640.579172][T14174] __kernfs_new_node+0xd2/0x9f0 [ 640.579204][T14174] ? __pfx___kernfs_new_node+0x10/0x10 [ 640.579240][T14174] ? find_held_lock+0x2b/0x80 [ 640.579271][T14174] ? kernfs_root+0xee/0x2a0 [ 640.579300][T14174] ? kernfs_root+0xee/0x2a0 [ 640.579334][T14174] kernfs_new_node+0x11b/0x1a0 [ 640.579371][T14174] __kernfs_create_file+0x53/0x350 [ 640.579413][T14174] sysfs_add_file_mode_ns+0x207/0x3c0 [ 640.579446][T14174] sysfs_merge_group+0x194/0x340 [ 640.579477][T14174] ? __pfx_sysfs_merge_group+0x10/0x10 [ 640.579505][T14174] ? bus_add_device+0x368/0x6b0 [ 640.579608][T14174] ? __pfx_bus_add_device+0x10/0x10 [ 640.579641][T14174] ? __pfx_dev_add_physical_location+0x10/0x10 [ 640.579713][T14174] dpm_sysfs_add+0x237/0x280 [ 640.579758][T14174] device_add+0x9ef/0x1950 [ 640.579788][T14174] ? __pfx_device_add+0x10/0x10 [ 640.579815][T14174] ? lockdep_init_map_type+0x5c/0x250 [ 640.579841][T14174] ? __init_waitqueue_head+0xca/0x150 [ 640.579877][T14174] rfkill_register+0x1ad/0xb30 [ 640.579935][T14174] nfc_register_device+0x11f/0x3e0 [ 640.580010][T14174] nci_register_device+0x7f1/0xb80 [ 640.580060][T14174] ? __pfx_nci_register_device+0x10/0x10 [ 640.580093][T14174] ? lockdep_init_map_type+0x5c/0x250 [ 640.580122][T14174] virtual_ncidev_open+0x141/0x220 [ 640.580167][T14174] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 640.580195][T14174] misc_open+0x26d/0x450 [ 640.580250][T14174] ? __pfx_misc_open+0x10/0x10 [ 640.580275][T14174] chrdev_open+0x234/0x6a0 [ 640.580307][T14174] ? __pfx_apparmor_file_open+0x10/0x10 [ 640.580336][T14174] ? __pfx_chrdev_open+0x10/0x10 [ 640.580369][T14174] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 640.580410][T14174] do_dentry_open+0x6ab/0x14d0 [ 640.580441][T14174] ? __pfx_chrdev_open+0x10/0x10 [ 640.580479][T14174] vfs_open+0x82/0x3f0 [ 640.580520][T14174] path_openat+0x208c/0x31a0 [ 640.580566][T14174] ? __pfx_path_openat+0x10/0x10 [ 640.580609][T14174] do_file_open+0x20e/0x430 [ 640.580644][T14174] ? __pfx_do_file_open+0x10/0x10 [ 640.580697][T14174] ? alloc_fd+0x476/0x790 [ 640.580737][T14174] ? do_getname+0x191/0x390 [ 640.580778][T14174] do_sys_openat2+0x10d/0x1e0 [ 640.580818][T14174] ? __pfx_do_sys_openat2+0x10/0x10 [ 640.580860][T14174] ? __fget_files+0x21f/0x3d0 [ 640.580896][T14174] __x64_sys_openat+0x12d/0x210 [ 640.580936][T14174] ? __pfx___x64_sys_openat+0x10/0x10 [ 640.580982][T14174] ? rcu_is_watching+0x12/0xc0 [ 640.581014][T14174] do_syscall_64+0x115/0x840 [ 640.581050][T14174] ? clear_bhb_loop+0x40/0x90 [ 640.581081][T14174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.581106][T14174] RIP: 0033:0x7f4a9cd9ce59 [ 640.581127][T14174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.581153][T14174] RSP: 002b:00007f4a9db9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 640.581178][T14174] RAX: ffffffffffffffda RBX: 00007f4a9d016180 RCX: 00007f4a9cd9ce59 [ 640.581195][T14174] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 640.581211][T14174] RBP: 00007f4a9ce32d6f R08: 0000000000000000 R09: 0000000000000000 [ 640.581227][T14174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.581242][T14174] R13: 00007f4a9d016218 R14: 00007f4a9d016180 R15: 00007ffeeeb8c1a8 [ 640.581273][T14174] [ 641.806530][T12509] Bluetooth: hci1: command 0x0c1a tx timeout [ 641.812686][T12509] Bluetooth: hci3: command 0x0c1a tx timeout [ 641.820586][T12509] Bluetooth: hci0: command 0x0c1a tx timeout [ 641.828333][T12509] Bluetooth: hci2: command 0x0c1a tx timeout [ 642.441341][T14171] random: crng reseeded on system resumption [ 642.490025][T14171] FAULT_INJECTION: forcing a failure. [ 642.490025][T14171] name failslab, interval 1, probability 0, space 0, times 0 [ 642.611907][T14171] CPU: 0 UID: 0 PID: 14171 Comm: syz.1.1642 Tainted: G U L syzkaller #0 PREEMPT(full) [ 642.611948][T14171] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 642.611958][T14171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 642.611974][T14171] Call Trace: [ 642.611983][T14171] [ 642.611993][T14171] dump_stack_lvl+0x100/0x190 [ 642.612042][T14171] should_fail_ex.cold+0x5/0xa [ 642.612072][T14171] ? mpi_resize+0x1ac/0x250 [ 642.612106][T14171] should_failslab+0xc2/0x120 [ 642.612137][T14171] __kmalloc_noprof+0xe0/0x850 [ 642.612160][T14171] ? __kasan_kmalloc+0xaa/0xb0 [ 642.612190][T14171] mpi_resize+0x1ac/0x250 [ 642.612228][T14171] mpi_powm+0x9ff/0x1e50 [ 642.612274][T14171] ? __pfx_mpi_powm+0x10/0x10 [ 642.612308][T14171] ? mpi_free+0xa0/0x150 [ 642.612340][T14171] ? mpi_free+0xe1/0x150 [ 642.612371][T14171] ? kfree+0x223/0x6c0 [ 642.612411][T14171] ? mpi_free+0xe6/0x150 [ 642.612448][T14171] rsa_enc+0x1fe/0x3b0 [ 642.612475][T14171] ? __pfx_rsa_enc+0x10/0x10 [ 642.612501][T14171] ? __virt_addr_valid+0x239/0x430 [ 642.612540][T14171] ? sg_init_one+0xf5/0x1b0 [ 642.612571][T14171] rsassa_pkcs1_verify+0x4eb/0xc20 [ 642.612610][T14171] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 642.612664][T14171] ? rsa_max_size+0xd/0x70 [ 642.612687][T14171] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 642.612723][T14171] public_key_verify_signature+0x5ee/0x910 [ 642.612773][T14171] ? __pfx_public_key_verify_signature+0x10/0x10 [ 642.612831][T14171] ? __pfx_public_key_verify_signature_2+0x10/0x10 [ 642.612870][T14171] verify_signature+0xe2/0x130 [ 642.612904][T14171] pkcs7_validate_trust+0x220/0x7f0 [ 642.612935][T14171] verify_pkcs7_message_sig+0x12c/0x230 [ 642.612965][T14171] ? __pfx_verify_pkcs7_message_sig+0x10/0x10 [ 642.612993][T14171] ? pkcs7_parse_message+0x5b1/0x870 [ 642.613032][T14171] ? kfree+0x223/0x6c0 [ 642.613071][T14171] ? pkcs7_parse_message+0x5b6/0x870 [ 642.613115][T14171] verify_pkcs7_signature+0x6d/0xa0 [ 642.613145][T14171] valid_regdb+0x211/0x590 [ 642.613177][T14171] ? __pfx_valid_regdb+0x10/0x10 [ 642.613210][T14171] reg_reload_regdb+0x11a/0x460 [ 642.613242][T14171] ? __pfx_reg_reload_regdb+0x10/0x10 [ 642.613275][T14171] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 642.613313][T14171] ? nl80211_pre_doit+0x19a/0xae0 [ 642.613356][T14171] genl_family_rcv_msg_doit+0x214/0x300 [ 642.613398][T14171] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 642.613437][T14171] ? genl_get_cmd+0x3e7/0x760 [ 642.613480][T14171] ? bpf_lsm_capable+0x9/0x10 [ 642.613507][T14171] ? security_capable+0x80/0x260 [ 642.613537][T14171] genl_rcv_msg+0x560/0x800 [ 642.613578][T14171] ? __pfx_genl_rcv_msg+0x10/0x10 [ 642.613620][T14171] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 642.613665][T14171] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 642.613695][T14171] ? __pfx_nl80211_post_doit+0x10/0x10 [ 642.613745][T14171] netlink_rcv_skb+0x159/0x420 [ 642.613780][T14171] ? __pfx_genl_rcv_msg+0x10/0x10 [ 642.613820][T14171] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 642.613865][T14171] ? netlink_deliver_tap+0x1ae/0xcc0 [ 642.613902][T14171] genl_rcv+0x28/0x40 [ 642.613935][T14171] netlink_unicast+0x585/0x850 [ 642.613974][T14171] ? __pfx_netlink_unicast+0x10/0x10 [ 642.614015][T14171] netlink_sendmsg+0x8b0/0xda0 [ 642.614054][T14171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.614086][T14171] ? __import_iovec+0x1d2/0x640 [ 642.614125][T14171] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 642.614156][T14171] ____sys_sendmsg+0x9e1/0xb70 [ 642.614188][T14171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.614224][T14171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 642.614256][T14171] ? preempt_schedule_thunk+0x16/0x30 [ 642.614300][T14171] ? try_to_wake_up+0x5f6/0x1900 [ 642.614337][T14171] ___sys_sendmsg+0x190/0x1e0 [ 642.614374][T14171] ? __pfx____sys_sendmsg+0x10/0x10 [ 642.614410][T14171] ? futex_private_hash_put+0x107/0x1c0 [ 642.614483][T14171] __sys_sendmsg+0x170/0x220 [ 642.614524][T14171] ? __pfx___sys_sendmsg+0x10/0x10 [ 642.614551][T14171] ? __x64_sys_futex+0x34f/0x4d0 [ 642.614589][T14171] ? rcu_is_watching+0x12/0xc0 [ 642.614622][T14171] do_syscall_64+0x115/0x840 [ 642.614664][T14171] ? clear_bhb_loop+0x40/0x90 [ 642.614696][T14171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.614722][T14171] RIP: 0033:0x7f998539ce59 [ 642.614743][T14171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.614768][T14171] RSP: 002b:00007f998616e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 642.614793][T14171] RAX: ffffffffffffffda RBX: 00007f9985615fa0 RCX: 00007f998539ce59 [ 642.614810][T14171] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 642.614826][T14171] RBP: 00007f9985432d6f R08: 0000000000000000 R09: 0000000000000000 [ 642.614841][T14171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.614857][T14171] R13: 00007f9985616038 R14: 00007f9985615fa0 R15: 00007ffe68b1b388 [ 642.614888][T14171] [ 644.454154][T14228] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 644.565521][T14222] Invalid ELF header magic: != ELF [ 646.428246][ T9951] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 646.453143][T14268] vivid-008: ================= START STATUS ================= [ 646.596730][T14268] vivid-008: ================== END STATUS ================== [ 646.761893][T14278] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 647.963877][T14264] random: crng reseeded on system resumption [ 648.522631][T12509] Bluetooth: hci2: command 0x0c1a tx timeout [ 650.420144][T14340] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 650.600725][T14332] Bluetooth: hci2: command 0x0c1a tx timeout [ 652.041518][ T9951] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 652.416043][T14392] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 652.651452][T14394] Invalid ELF header magic: != ELF [ 653.534976][T14388] kexec: Could not allocate control_code_buffer [ 655.025745][T14389] random: crng reseeded on system resumption [ 655.280904][T14389] FAULT_INJECTION: forcing a failure. [ 655.280904][T14389] name failslab, interval 1, probability 0, space 0, times 0 [ 655.461950][T14389] CPU: 0 UID: 0 PID: 14389 Comm: syz.1.1680 Tainted: G U L syzkaller #0 PREEMPT(full) [ 655.462004][T14389] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 655.462018][T14389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 655.462038][T14389] Call Trace: [ 655.462046][T14389] [ 655.462057][T14389] dump_stack_lvl+0x100/0x190 [ 655.462105][T14389] should_fail_ex.cold+0x5/0xa [ 655.462136][T14389] ? mpi_alloc_limb_space+0x31/0x60 [ 655.462172][T14389] should_failslab+0xc2/0x120 [ 655.462202][T14389] __kmalloc_noprof+0xe0/0x850 [ 655.462232][T14389] mpi_alloc_limb_space+0x31/0x60 [ 655.462268][T14389] mpi_alloc+0x199/0x230 [ 655.462305][T14389] mpi_read_raw_from_sgl+0x251/0x620 [ 655.462342][T14389] ? __pfx_mpi_read_raw_from_sgl+0x10/0x10 [ 655.462389][T14389] ? kasan_save_track+0x14/0x30 [ 655.462415][T14389] ? __kasan_kmalloc+0xaa/0xb0 [ 655.462444][T14389] rsa_enc+0x15d/0x3b0 [ 655.462471][T14389] ? __pfx_rsa_enc+0x10/0x10 [ 655.462497][T14389] ? __virt_addr_valid+0x239/0x430 [ 655.462536][T14389] ? sg_init_one+0xf5/0x1b0 [ 655.462567][T14389] rsassa_pkcs1_verify+0x4eb/0xc20 [ 655.462606][T14389] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 655.462653][T14389] ? rsa_max_size+0xd/0x70 [ 655.462676][T14389] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 655.462712][T14389] public_key_verify_signature+0x5ee/0x910 [ 655.462754][T14389] ? __pfx_public_key_verify_signature+0x10/0x10 [ 655.462809][T14389] ? __pfx_public_key_verify_signature_2+0x10/0x10 [ 655.462848][T14389] verify_signature+0xe2/0x130 [ 655.462882][T14389] pkcs7_validate_trust+0x220/0x7f0 [ 655.462913][T14389] verify_pkcs7_message_sig+0x12c/0x230 [ 655.462943][T14389] ? __pfx_verify_pkcs7_message_sig+0x10/0x10 [ 655.462970][T14389] ? pkcs7_parse_message+0x5b1/0x870 [ 655.463010][T14389] ? kfree+0x223/0x6c0 [ 655.463049][T14389] ? pkcs7_parse_message+0x5b6/0x870 [ 655.463099][T14389] verify_pkcs7_signature+0x6d/0xa0 [ 655.463131][T14389] valid_regdb+0x211/0x590 [ 655.463164][T14389] ? __pfx_valid_regdb+0x10/0x10 [ 655.463198][T14389] reg_reload_regdb+0x11a/0x460 [ 655.463231][T14389] ? __pfx_reg_reload_regdb+0x10/0x10 [ 655.463264][T14389] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 655.463303][T14389] ? nl80211_pre_doit+0x19a/0xae0 [ 655.463345][T14389] genl_family_rcv_msg_doit+0x214/0x300 [ 655.463396][T14389] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 655.463436][T14389] ? genl_get_cmd+0x3e7/0x760 [ 655.463480][T14389] ? bpf_lsm_capable+0x9/0x10 [ 655.463507][T14389] ? security_capable+0x80/0x260 [ 655.463537][T14389] genl_rcv_msg+0x560/0x800 [ 655.463579][T14389] ? __pfx_genl_rcv_msg+0x10/0x10 [ 655.463617][T14389] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 655.463655][T14389] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 655.463685][T14389] ? __pfx_nl80211_post_doit+0x10/0x10 [ 655.463734][T14389] netlink_rcv_skb+0x159/0x420 [ 655.463768][T14389] ? __pfx_genl_rcv_msg+0x10/0x10 [ 655.463807][T14389] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 655.463853][T14389] ? netlink_deliver_tap+0x1ae/0xcc0 [ 655.463889][T14389] genl_rcv+0x28/0x40 [ 655.463923][T14389] netlink_unicast+0x585/0x850 [ 655.463961][T14389] ? __pfx_netlink_unicast+0x10/0x10 [ 655.464004][T14389] netlink_sendmsg+0x8b0/0xda0 [ 655.464043][T14389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 655.464075][T14389] ? __import_iovec+0x1d2/0x640 [ 655.464114][T14389] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 655.464145][T14389] ____sys_sendmsg+0x9e1/0xb70 [ 655.464182][T14389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 655.464225][T14389] ? __pfx_____sys_sendmsg+0x10/0x10 [ 655.464257][T14389] ? preempt_schedule_thunk+0x16/0x30 [ 655.464301][T14389] ? try_to_wake_up+0x5f6/0x1900 [ 655.464338][T14389] ___sys_sendmsg+0x190/0x1e0 [ 655.464380][T14389] ? __pfx____sys_sendmsg+0x10/0x10 [ 655.464416][T14389] ? futex_private_hash_put+0x107/0x1c0 [ 655.464490][T14389] __sys_sendmsg+0x170/0x220 [ 655.464517][T14389] ? __pfx___sys_sendmsg+0x10/0x10 [ 655.464543][T14389] ? __x64_sys_futex+0x34f/0x4d0 [ 655.464580][T14389] ? rcu_is_watching+0x12/0xc0 [ 655.464613][T14389] do_syscall_64+0x115/0x840 [ 655.464649][T14389] ? clear_bhb_loop+0x40/0x90 [ 655.464680][T14389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.464705][T14389] RIP: 0033:0x7f998539ce59 [ 655.464727][T14389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.464752][T14389] RSP: 002b:00007f998616e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 655.464776][T14389] RAX: ffffffffffffffda RBX: 00007f9985615fa0 RCX: 00007f998539ce59 [ 655.464794][T14389] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 655.464810][T14389] RBP: 00007f9985432d6f R08: 0000000000000000 R09: 0000000000000000 [ 655.464825][T14389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.464840][T14389] R13: 00007f9985616038 R14: 00007f9985615fa0 R15: 00007ffe68b1b388 [ 655.464871][T14389] [ 658.036744][T14384] Process accounting resumed [ 658.133910][T14468] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 658.164923][T14468] Invalid ELF header magic: != ELF [ 658.536853][T14471] FAULT_INJECTION: forcing a failure. [ 658.536853][T14471] name fail_futex, interval 1, probability 0, space 0, times 0 [ 658.536895][T14471] CPU: 0 UID: 0 PID: 14471 Comm: syz.1.1695 Tainted: G U L syzkaller #0 PREEMPT(full) [ 658.536933][T14471] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 658.536943][T14471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 658.536959][T14471] Call Trace: [ 658.536967][T14471] [ 658.536976][T14471] dump_stack_lvl+0x100/0x190 [ 658.537025][T14471] should_fail_ex.cold+0x5/0xa [ 658.537057][T14471] get_futex_key+0x1d2/0x1510 [ 658.537101][T14471] ? __pfx_get_futex_key+0x10/0x10 [ 658.537153][T14471] ? __pfx____sys_sendmsg+0x10/0x10 [ 658.537194][T14471] futex_wake+0xea/0x530 [ 658.537228][T14471] ? __pfx_futex_wake+0x10/0x10 [ 658.537271][T14471] do_futex+0x32b/0x350 [ 658.537300][T14471] ? __pfx_do_futex+0x10/0x10 [ 658.537328][T14471] ? fput+0x79/0x100 [ 658.537372][T14471] ? __sys_sendmsg+0x18f/0x220 [ 658.537407][T14471] __x64_sys_futex+0x34f/0x4d0 [ 658.537442][T14471] ? __pfx___x64_sys_futex+0x10/0x10 [ 658.537474][T14471] ? rcu_is_watching+0x12/0xc0 [ 658.537513][T14471] do_syscall_64+0x115/0x840 [ 658.537549][T14471] ? clear_bhb_loop+0x40/0x90 [ 658.537579][T14471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.537605][T14471] RIP: 0033:0x7f998539ce59 [ 658.537625][T14471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.537650][T14471] RSP: 002b:00007f99835f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 658.537679][T14471] RAX: ffffffffffffffda RBX: 00007f9985616098 RCX: 00007f998539ce59 [ 658.537696][T14471] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f998561609c [ 658.537711][T14471] RBP: 00007f9985616090 R08: 0000000000000001 R09: 0000000000000000 [ 658.537727][T14471] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000 [ 658.537742][T14471] R13: 00007f9985616128 R14: 00007ffe68b1b2a0 R15: 00007ffe68b1b388 [ 658.537772][T14471] [ 660.274767][T14509] FAULT_INJECTION: forcing a failure. [ 660.274767][T14509] name failslab, interval 1, probability 0, space 0, times 0 [ 660.377104][T14509] CPU: 0 UID: 0 PID: 14509 Comm: syz.3.1702 Tainted: G U L syzkaller #0 PREEMPT(full) [ 660.377147][T14509] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 660.377157][T14509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 660.377173][T14509] Call Trace: [ 660.377182][T14509] [ 660.377192][T14509] dump_stack_lvl+0x100/0x190 [ 660.377243][T14509] should_fail_ex.cold+0x5/0xa [ 660.377276][T14509] should_failslab+0xc2/0x120 [ 660.377308][T14509] __kmalloc_cache_noprof+0x7a/0x6f0 [ 660.377345][T14509] ? snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 660.377392][T14509] snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 660.377432][T14509] ? rcu_is_watching+0x12/0xc0 [ 660.377462][T14509] ? trace_contention_end+0x122/0x170 [ 660.377492][T14509] ? snd_pcm_oss_sync+0x243/0x840 [ 660.377528][T14509] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 660.377570][T14509] ? __pfx___mutex_lock+0x10/0x10 [ 660.377615][T14509] ? __fsnotify_parent+0x2b4/0xca0 [ 660.377658][T14509] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 660.377697][T14509] snd_pcm_oss_sync+0x265/0x840 [ 660.377738][T14509] snd_pcm_oss_release+0x238/0x300 [ 660.377776][T14509] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 660.377813][T14509] __fput+0x3ff/0xb50 [ 660.377855][T14509] task_work_run+0x150/0x240 [ 660.377881][T14509] ? __pfx_task_work_run+0x10/0x10 [ 660.377915][T14509] ? rcu_is_watching+0x12/0xc0 [ 660.377948][T14509] exit_to_user_mode_loop+0x157/0x670 [ 660.377989][T14509] ? rcu_is_watching+0x12/0xc0 [ 660.378021][T14509] do_syscall_64+0x652/0x840 [ 660.378057][T14509] ? clear_bhb_loop+0x40/0x90 [ 660.378087][T14509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.378114][T14509] RIP: 0033:0x7f783f59ce59 [ 660.378136][T14509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.378161][T14509] RSP: 002b:00007f78404d9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 660.378185][T14509] RAX: 0000000000000000 RBX: 00007f783f815fa0 RCX: 00007f783f59ce59 [ 660.378201][T14509] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 660.378215][T14509] RBP: 00007f783f632d6f R08: 0000000000000000 R09: 0000000000000000 [ 660.378231][T14509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 660.378246][T14509] R13: 00007f783f816038 R14: 00007f783f815fa0 R15: 00007fff1318d8b8 [ 660.378277][T14509] [ 660.880980][T14519] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 660.921541][T14519] Invalid ELF header magic: != ELF [ 661.587414][T14534] random: crng reseeded on system resumption [ 662.851401][T14551] usb usb15: usbfs: process 14551 (syz.1.1712) did not claim interface 0 before use [ 663.551664][T14517] Process accounting resumed [ 663.664849][T14571] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 664.044413][T14579] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 664.505568][T14583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 664.931391][T14593] random: crng reseeded on system resumption [ 665.467981][T14612] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 665.558035][T14612] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 665.610944][T14612] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 665.737676][T14612] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 666.384613][T14631] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 667.488356][ T9951] Bluetooth: hci0: command 0x0c1a tx timeout [ 667.567979][ T9951] Bluetooth: hci3: command 0x0c1a tx timeout [ 667.647974][ T9951] Bluetooth: hci1: command 0x0c1a tx timeout [ 667.808674][ T9951] Bluetooth: hci2: command 0x0c1a tx timeout [ 667.819385][T14615] random: crng reseeded on system resumption [ 668.215161][T14660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1735'. [ 668.333001][T14662] warning: `syz.2.1735' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 668.548299][ T9951] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 668.859308][T14672] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 669.973359][T14693] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1743'. [ 671.316608][T14680] FAULT_INJECTION: forcing a failure. [ 671.316608][T14680] name failslab, interval 1, probability 0, space 0, times 0 [ 671.488731][T14719] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 671.516396][T14680] CPU: 0 UID: 0 PID: 14680 Comm: syz.0.1739 Tainted: G U L syzkaller #0 PREEMPT(full) [ 671.516438][T14680] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 671.516448][T14680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 671.516463][T14680] Call Trace: [ 671.516471][T14680] [ 671.516481][T14680] dump_stack_lvl+0x100/0x190 [ 671.516528][T14680] should_fail_ex.cold+0x5/0xa [ 671.516559][T14680] should_failslab+0xc2/0x120 [ 671.516591][T14680] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 671.516619][T14680] ? key_alloc+0x423/0x1310 [ 671.516654][T14680] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 671.516699][T14680] kmemdup_noprof+0x29/0x60 [ 671.516726][T14680] key_alloc+0x423/0x1310 [ 671.516769][T14680] ? __pfx_key_alloc+0x10/0x10 [ 671.516801][T14680] ? __pfx_key_default_cmp+0x10/0x10 [ 671.516839][T14680] ? __pfx_keyring_search_iterator+0x10/0x10 [ 671.516887][T14680] keyring_alloc+0x44/0xc0 [ 671.516926][T14680] look_up_user_keyrings+0x465/0x790 [ 671.516962][T14680] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 671.517007][T14680] lookup_user_key+0xbb1/0x1300 [ 671.517040][T14680] ? __pfx_lookup_user_key+0x10/0x10 [ 671.517071][T14680] ? __pfx_do_futex+0x10/0x10 [ 671.517102][T14680] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 671.517139][T14680] ? xfd_validate_state+0x129/0x190 [ 671.517164][T14680] ? ksys_write+0x1ac/0x250 [ 671.517197][T14680] keyctl_keyring_unlink+0x1f/0x1b0 [ 671.517223][T14680] __do_sys_keyctl+0x3dd/0x5a0 [ 671.517253][T14680] do_syscall_64+0x115/0x840 [ 671.517289][T14680] ? clear_bhb_loop+0x40/0x90 [ 671.517319][T14680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.517345][T14680] RIP: 0033:0x7fb914b9ce59 [ 671.517366][T14680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.517390][T14680] RSP: 002b:00007fb9159ea028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 671.517414][T14680] RAX: ffffffffffffffda RBX: 00007fb914e16090 RCX: 00007fb914b9ce59 [ 671.517431][T14680] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000009 [ 671.517447][T14680] RBP: 00007fb914c32d6f R08: 0000000000000008 R09: 0000000000000000 [ 671.517462][T14680] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 671.517478][T14680] R13: 00007fb914e16128 R14: 00007fb914e16090 R15: 00007ffea6b77118 [ 671.517509][T14680] [ 672.300000][T14726] random: crng reseeded on system resumption [ 674.354111][T14752] random: crng reseeded on system resumption [ 674.995423][T14762] random: crng reseeded on system resumption [ 676.093645][T14772] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 676.169255][T14772] Invalid ELF header magic: != ELF [ 676.907911][T14783] futex_wake_op: syz.1.1762 tries to shift op by -2048; fix this program [ 676.939188][T14783] futex_wake_op: syz.1.1762 tries to shift op by -2048; fix this program [ 679.710852][T14830] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 679.780354][T14830] Invalid ELF header magic: != ELF [ 682.067836][T14854] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 682.164035][T14854] Invalid ELF header magic: != ELF [ 682.368390][T14836] random: crng reseeded on system resumption [ 682.562549][T14857] FAULT_INJECTION: forcing a failure. [ 682.562549][T14857] name failslab, interval 1, probability 0, space 0, times 0 [ 682.608358][T14857] CPU: 0 UID: 0 PID: 14857 Comm: syz.2.1776 Tainted: G U L syzkaller #0 PREEMPT(full) [ 682.608401][T14857] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 682.608411][T14857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 682.608427][T14857] Call Trace: [ 682.608436][T14857] [ 682.608446][T14857] dump_stack_lvl+0x100/0x190 [ 682.608494][T14857] should_fail_ex.cold+0x5/0xa [ 682.608525][T14857] ? public_key_verify_signature+0x2ab/0x910 [ 682.608562][T14857] should_failslab+0xc2/0x120 [ 682.608592][T14857] __kmalloc_noprof+0xe0/0x850 [ 682.608622][T14857] public_key_verify_signature+0x2ab/0x910 [ 682.608663][T14857] ? __pfx_public_key_verify_signature+0x10/0x10 [ 682.608719][T14857] ? __pfx_public_key_verify_signature_2+0x10/0x10 [ 682.608758][T14857] verify_signature+0xe2/0x130 [ 682.608791][T14857] pkcs7_validate_trust+0x220/0x7f0 [ 682.608822][T14857] verify_pkcs7_message_sig+0x12c/0x230 [ 682.608851][T14857] ? __pfx_verify_pkcs7_message_sig+0x10/0x10 [ 682.608879][T14857] ? pkcs7_parse_message+0x5b1/0x870 [ 682.608924][T14857] ? kfree+0x223/0x6c0 [ 682.608964][T14857] ? pkcs7_parse_message+0x5b6/0x870 [ 682.609008][T14857] verify_pkcs7_signature+0x6d/0xa0 [ 682.609039][T14857] valid_regdb+0x211/0x590 [ 682.609073][T14857] ? __pfx_valid_regdb+0x10/0x10 [ 682.609107][T14857] reg_reload_regdb+0x11a/0x460 [ 682.609139][T14857] ? __pfx_reg_reload_regdb+0x10/0x10 [ 682.609173][T14857] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 682.609211][T14857] ? nl80211_pre_doit+0x19a/0xae0 [ 682.609253][T14857] genl_family_rcv_msg_doit+0x214/0x300 [ 682.609297][T14857] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 682.609336][T14857] ? genl_get_cmd+0x3e7/0x760 [ 682.609378][T14857] ? bpf_lsm_capable+0x9/0x10 [ 682.609406][T14857] ? security_capable+0x80/0x260 [ 682.609437][T14857] genl_rcv_msg+0x560/0x800 [ 682.609478][T14857] ? __pfx_genl_rcv_msg+0x10/0x10 [ 682.609516][T14857] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 682.609554][T14857] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 682.609586][T14857] ? __pfx_nl80211_post_doit+0x10/0x10 [ 682.609636][T14857] netlink_rcv_skb+0x159/0x420 [ 682.609670][T14857] ? __pfx_genl_rcv_msg+0x10/0x10 [ 682.609709][T14857] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 682.609755][T14857] ? netlink_deliver_tap+0x1ae/0xcc0 [ 682.609792][T14857] genl_rcv+0x28/0x40 [ 682.609826][T14857] netlink_unicast+0x585/0x850 [ 682.609865][T14857] ? __pfx_netlink_unicast+0x10/0x10 [ 682.609907][T14857] netlink_sendmsg+0x8b0/0xda0 [ 682.609951][T14857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.609983][T14857] ? __import_iovec+0x1d2/0x640 [ 682.610023][T14857] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 682.610055][T14857] ____sys_sendmsg+0x9e1/0xb70 [ 682.610088][T14857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 682.610125][T14857] ? __pfx_____sys_sendmsg+0x10/0x10 [ 682.610157][T14857] ? preempt_schedule_thunk+0x16/0x30 [ 682.610200][T14857] ? try_to_wake_up+0x5f6/0x1900 [ 682.610238][T14857] ___sys_sendmsg+0x190/0x1e0 [ 682.610275][T14857] ? __pfx____sys_sendmsg+0x10/0x10 [ 682.610311][T14857] ? futex_private_hash_put+0x107/0x1c0 [ 682.610384][T14857] __sys_sendmsg+0x170/0x220 [ 682.610411][T14857] ? __pfx___sys_sendmsg+0x10/0x10 [ 682.610437][T14857] ? __x64_sys_futex+0x34f/0x4d0 [ 682.610474][T14857] ? rcu_is_watching+0x12/0xc0 [ 682.610508][T14857] do_syscall_64+0x115/0x840 [ 682.610543][T14857] ? clear_bhb_loop+0x40/0x90 [ 682.610573][T14857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.610605][T14857] RIP: 0033:0x7f4a9cd9ce59 [ 682.610627][T14857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.610651][T14857] RSP: 002b:00007f4a9dbbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.610676][T14857] RAX: ffffffffffffffda RBX: 00007f4a9d016090 RCX: 00007f4a9cd9ce59 [ 682.610693][T14857] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 682.610709][T14857] RBP: 00007f4a9ce32d6f R08: 0000000000000000 R09: 0000000000000000 [ 682.610725][T14857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 682.610740][T14857] R13: 00007f4a9d016128 R14: 00007f4a9d016090 R15: 00007ffeeeb8c1a8 [ 682.610771][T14857] [ 683.600602][T14863] bond0: no command found in slaves file - use +ifname or -ifname [ 683.699124][T14864] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1786'. [ 684.635670][T14874] FAULT_INJECTION: forcing a failure. [ 684.635670][T14874] name fail_futex, interval 1, probability 0, space 0, times 0 [ 684.687929][T14874] CPU: 0 UID: 0 PID: 14874 Comm: syz.3.1781 Tainted: G U L syzkaller #0 PREEMPT(full) [ 684.687973][T14874] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 684.687983][T14874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 684.687999][T14874] Call Trace: [ 684.688008][T14874] [ 684.688018][T14874] dump_stack_lvl+0x100/0x190 [ 684.688066][T14874] should_fail_ex.cold+0x5/0xa [ 684.688098][T14874] get_futex_key+0x1d2/0x1510 [ 684.688142][T14874] ? __pfx_get_futex_key+0x10/0x10 [ 684.688193][T14874] futex_wake+0xea/0x530 [ 684.688227][T14874] ? __pfx_futex_wake+0x10/0x10 [ 684.688262][T14874] ? errseq_sample+0x51/0x70 [ 684.688297][T14874] ? file_init_path+0x48e/0x670 [ 684.688338][T14874] do_futex+0x32b/0x350 [ 684.688364][T14874] ? __pfx_do_futex+0x10/0x10 [ 684.688390][T14874] ? fd_install+0x223/0x580 [ 684.688424][T14874] __x64_sys_futex+0x34f/0x4d0 [ 684.688452][T14874] ? __sys_socket+0xac/0x260 [ 684.688489][T14874] ? __pfx___x64_sys_futex+0x10/0x10 [ 684.688514][T14874] ? exit_to_user_mode_loop+0xf3/0x670 [ 684.688559][T14874] ? rcu_is_watching+0x12/0xc0 [ 684.688592][T14874] do_syscall_64+0x115/0x840 [ 684.688629][T14874] ? clear_bhb_loop+0x40/0x90 [ 684.688669][T14874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.688698][T14874] RIP: 0033:0x7f783f59ce59 [ 684.688719][T14874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.688743][T14874] RSP: 002b:00007f78404d90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 684.688767][T14874] RAX: ffffffffffffffda RBX: 00007f783f815fa8 RCX: 00007f783f59ce59 [ 684.688784][T14874] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f783f815fac [ 684.688800][T14874] RBP: 00007f783f815fa0 R08: 0000000000000001 R09: 0000000000000000 [ 684.688815][T14874] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 684.688830][T14874] R13: 00007f783f816038 R14: 00007fff1318d7d0 R15: 00007fff1318d8b8 [ 684.688861][T14874] [ 685.867116][T14891] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 686.144317][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.152134][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.604885][T14882] Process accounting resumed [ 690.041328][T14922] random: crng reseeded on system resumption [ 690.944253][T14950] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 691.023134][T14950] Invalid ELF header magic: != ELF [ 691.499858][ T9951] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 691.554739][T14958] ubi31: attaching mtd0 [ 691.796059][T14958] ubi31: scanning is finished [ 691.796107][T14958] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 692.357642][T14977] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1803'. [ 692.404690][T14977] nbd: couldn't find device at index 33904 [ 692.632955][T14958] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 693.814266][T14998] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 693.884988][T14998] Invalid ELF header magic: != ELF [ 695.126883][T15022] MTRR 1 not used [ 695.866281][T15035] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 695.961672][T15035] Invalid ELF header magic: != ELF [ 697.432994][T15063] random: crng reseeded on system resumption [ 701.280328][T15117] ICMPv6: process `syz.3.1834' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 701.828448][T15117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1834'. [ 702.965897][ T9951] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 703.272863][T15137] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1838'. [ 703.530343][T15124] random: crng reseeded on system resumption [ 707.013784][T15197] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1848'. [ 708.169223][T15209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1853'. [ 709.870201][T15246] random: crng reseeded on system resumption [ 709.887250][T15237] hub 1-0:1.0: USB hub found [ 709.923849][T15237] hub 1-0:1.0: 1 port detected [ 709.999590][T15247] hub 1-0:1.0: USB hub found [ 710.018776][T15247] hub 1-0:1.0: 1 port detected [ 712.258409][T15289] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 713.260686][T15311] Invalid ELF header magic: != ELF [ 715.677318][T15364] Invalid ELF header magic: != ELF [ 718.576455][T15370] Process accounting paused [ 718.753262][T15415] Invalid ELF header magic: != ELF [ 719.186326][T15425] FAULT_INJECTION: forcing a failure. [ 719.186326][T15425] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 719.246814][T15425] CPU: 0 UID: 0 PID: 15425 Comm: syz.3.1896 Tainted: G U L syzkaller #0 PREEMPT(full) [ 719.246856][T15425] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 719.246866][T15425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 719.246882][T15425] Call Trace: [ 719.246890][T15425] [ 719.246900][T15425] dump_stack_lvl+0x100/0x190 [ 719.246955][T15425] should_fail_ex.cold+0x5/0xa [ 719.246988][T15425] _copy_from_user+0x2e/0xd0 [ 719.247025][T15425] move_addr_to_kernel+0x65/0x170 [ 719.247063][T15425] copy_msghdr_from_user+0x417/0x4f0 [ 719.247100][T15425] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 719.247145][T15425] ? rcu_is_watching+0x12/0xc0 [ 719.247173][T15425] ? ___sys_sendmsg+0x19d/0x1e0 [ 719.247206][T15425] ? kfree+0x1dd/0x6c0 [ 719.247246][T15425] ___sys_sendmsg+0x106/0x1e0 [ 719.247283][T15425] ? __pfx____sys_sendmsg+0x10/0x10 [ 719.247343][T15425] ? __pfx___might_resched+0x10/0x10 [ 719.247376][T15425] __sys_sendmmsg+0x205/0x430 [ 719.247406][T15425] ? __pfx___sys_sendmmsg+0x10/0x10 [ 719.247445][T15425] ? file_init_path+0x48e/0x670 [ 719.247488][T15425] ? __pfx_do_futex+0x10/0x10 [ 719.247534][T15425] ? xfd_validate_state+0x129/0x190 [ 719.247568][T15425] __x64_sys_sendmmsg+0x9c/0x100 [ 719.247595][T15425] ? lockdep_hardirqs_on+0x78/0x100 [ 719.247632][T15425] do_syscall_64+0x115/0x840 [ 719.247667][T15425] ? clear_bhb_loop+0x40/0x90 [ 719.247698][T15425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.247724][T15425] RIP: 0033:0x7f783f59ce59 [ 719.247744][T15425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.247770][T15425] RSP: 002b:00007f78404d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 719.247794][T15425] RAX: ffffffffffffffda RBX: 00007f783f815fa0 RCX: 00007f783f59ce59 [ 719.247811][T15425] RDX: 000000003f7ffffe RSI: 0000200000000180 RDI: 0000000000000009 [ 719.247827][T15425] RBP: 00007f783f632d6f R08: 0000000000000000 R09: 0000000000000000 [ 719.247842][T15425] R10: 00000000000000d9 R11: 0000000000000246 R12: 0000000000000000 [ 719.247857][T15425] R13: 00007f783f816038 R14: 00007f783f815fa0 R15: 00007fff1318d8b8 [ 719.247888][T15425] [ 720.890428][T15448] Invalid ELF header magic: != ELF [ 720.948512][T15452] FAULT_INJECTION: forcing a failure. [ 720.948512][T15452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 720.991797][T15451] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 721.028266][T15452] CPU: 0 UID: 0 PID: 15452 Comm: syz.1.1904 Tainted: G U L syzkaller #0 PREEMPT(full) [ 721.028312][T15452] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 721.028322][T15452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 721.028336][T15452] Call Trace: [ 721.028345][T15452] [ 721.028354][T15452] dump_stack_lvl+0x100/0x190 [ 721.028400][T15452] should_fail_ex.cold+0x5/0xa [ 721.028431][T15452] _copy_to_user+0x32/0xd0 [ 721.028467][T15452] simple_read_from_buffer+0xcb/0x170 [ 721.028499][T15452] proc_fail_nth_read+0x1af/0x230 [ 721.028541][T15452] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 721.028582][T15452] ? rw_verify_area+0xce/0x6d0 [ 721.028606][T15452] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 721.028644][T15452] vfs_read+0x1e4/0xb30 [ 721.028674][T15452] ? __pfx_vfs_read+0x10/0x10 [ 721.028700][T15452] ? __fget_files+0x215/0x3d0 [ 721.028736][T15452] ? __fget_files+0x21f/0x3d0 [ 721.028771][T15452] ksys_read+0x12a/0x250 [ 721.028798][T15452] ? __pfx_ksys_read+0x10/0x10 [ 721.028827][T15452] ? rcu_is_watching+0x12/0xc0 [ 721.028859][T15452] do_syscall_64+0x115/0x840 [ 721.028894][T15452] ? clear_bhb_loop+0x40/0x90 [ 721.028923][T15452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.028948][T15452] RIP: 0033:0x7f998535d68e [ 721.028967][T15452] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 721.028991][T15452] RSP: 002b:00007f998616dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 721.029013][T15452] RAX: ffffffffffffffda RBX: 00007f998616e6c0 RCX: 00007f998535d68e [ 721.029029][T15452] RDX: 000000000000000f RSI: 00007f998616e0a0 RDI: 0000000000000004 [ 721.029043][T15452] RBP: 00007f998616e090 R08: 0000000000000000 R09: 0000000000000000 [ 721.029058][T15452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.029071][T15452] R13: 00007f9985616038 R14: 00007f9985615fa0 R15: 00007ffe68b1b388 [ 721.029102][T15452] [ 721.246778][T15456] random: crng reseeded on system resumption [ 721.452026][T15451] ima: policy update failed [ 721.579463][ T30] audit: type=1802 audit(2147483939.673:30): pid=15451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1903" res=0 errno=0 [ 723.769479][T15497] random: crng reseeded on system resumption [ 724.387811][T15508] random: crng reseeded on system resumption [ 726.107556][ T9951] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 726.414527][T15539] random: crng reseeded on system resumption [ 730.900779][T15586] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1935'. [ 730.951196][T15586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.974836][T15586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.006265][T15586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.029677][T15586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 734.045673][T15590] random: crng reseeded on system resumption [ 736.707505][T15651] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1950'. [ 737.468061][T15660] random: crng reseeded on system resumption [ 738.630697][ T9951] Bluetooth: hci2: unexpected event 0x1c length: 725 > 5 [ 738.967903][T15687] random: crng reseeded on system resumption [ 739.118411][T15688] hub 1-0:1.0: USB hub found [ 739.118723][T15688] hub 1-0:1.0: 1 port detected [ 739.708271][T15701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1960'. [ 739.855012][T15701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 739.882895][T15701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.920746][T15701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 739.964718][T15701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.632978][T15733] random: crng reseeded on system resumption [ 741.860808][T15709] kexec: Could not allocate control_code_buffer [ 742.678283][T12509] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 742.692211][T12509] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 742.700699][T12509] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 742.713194][T12509] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 742.721996][T12509] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 743.110055][T15748] FAULT_INJECTION: forcing a failure. [ 743.110055][T15748] name failslab, interval 1, probability 0, space 0, times 0 [ 743.205031][T15748] CPU: 0 UID: 0 PID: 15748 Comm: syz.1.1969 Tainted: G U L syzkaller #0 PREEMPT(full) [ 743.205073][T15748] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 743.205089][T15748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 743.205104][T15748] Call Trace: [ 743.205113][T15748] [ 743.205123][T15748] dump_stack_lvl+0x100/0x190 [ 743.205172][T15748] should_fail_ex.cold+0x5/0xa [ 743.205203][T15748] should_failslab+0xc2/0x120 [ 743.205255][T15748] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 743.205297][T15748] ? __d_alloc+0x34/0xa40 [ 743.205334][T15748] ? __pfx_stack_trace_save+0x10/0x10 [ 743.205374][T15748] __d_alloc+0x34/0xa40 [ 743.205411][T15748] d_alloc_parallel+0x111/0x14e0 [ 743.205444][T15748] ? find_held_lock+0x2b/0x80 [ 743.205475][T15748] ? __d_lookup+0x25c/0x4a0 [ 743.205500][T15748] ? __pfx_d_alloc_parallel+0x10/0x10 [ 743.205529][T15748] ? __d_lookup+0x266/0x4a0 [ 743.205560][T15748] lookup_open.isra.0+0x57c/0x11b0 [ 743.205593][T15748] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 743.205626][T15748] ? __pfx___might_resched+0x10/0x10 [ 743.205654][T15748] ? mnt_get_write_access+0x52/0x2f0 [ 743.205700][T15748] ? __pfx_down_write+0x10/0x10 [ 743.205722][T15748] ? mnt_get_write_access+0x1e9/0x2f0 [ 743.205767][T15748] path_openat+0x2291/0x31a0 [ 743.205809][T15748] ? __pfx_path_openat+0x10/0x10 [ 743.205852][T15748] do_file_open+0x20e/0x430 [ 743.205887][T15748] ? __pfx_do_file_open+0x10/0x10 [ 743.205940][T15748] ? alloc_fd+0x476/0x790 [ 743.205974][T15748] ? do_getname+0x191/0x390 [ 743.206014][T15748] do_sys_openat2+0x10d/0x1e0 [ 743.206054][T15748] ? __pfx_do_sys_openat2+0x10/0x10 [ 743.206098][T15748] ? __x64_sys_futex+0x34f/0x4d0 [ 743.206124][T15748] ? __x64_sys_futex+0x358/0x4d0 [ 743.206153][T15748] __x64_sys_creat+0xcc/0x120 [ 743.206177][T15748] ? __pfx___x64_sys_creat+0x10/0x10 [ 743.206221][T15748] ? rcu_is_watching+0x12/0xc0 [ 743.206257][T15748] ? do_syscall_64+0x90/0x840 [ 743.206294][T15748] do_syscall_64+0x115/0x840 [ 743.206329][T15748] ? clear_bhb_loop+0x40/0x90 [ 743.206360][T15748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.206386][T15748] RIP: 0033:0x7f998539ce59 [ 743.206407][T15748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.206432][T15748] RSP: 002b:00007f998616e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 743.206456][T15748] RAX: ffffffffffffffda RBX: 00007f9985615fa0 RCX: 00007f998539ce59 [ 743.206473][T15748] RDX: 0000000000000000 RSI: 00000000000003ff RDI: 0000200000000000 [ 743.206489][T15748] RBP: 00007f9985432d6f R08: 0000000000000000 R09: 0000000000000000 [ 743.206504][T15748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.206519][T15748] R13: 00007f9985616038 R14: 00007f9985615fa0 R15: 00007ffe68b1b388 [ 743.206551][T15748] [ 743.357205][T15748] Invalid ELF header magic: != ELF [ 744.806878][T12509] Bluetooth: hci4: command tx timeout [ 745.192362][T15742] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.208524][T15742] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.215910][T15742] bridge_slave_0: entered allmulticast mode [ 745.226041][T15742] bridge_slave_0: entered promiscuous mode [ 745.236133][T15742] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.244237][T15742] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.252300][T15742] bridge_slave_1: entered allmulticast mode [ 745.260013][T15742] bridge_slave_1: entered promiscuous mode [ 745.300657][T15742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.314520][T15742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.352417][T15742] team0: Port device team_slave_0 added [ 745.361138][T15742] team0: Port device team_slave_1 added [ 745.392287][T15742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.399448][T15742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.426147][T15742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.441697][T15742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.449072][T15742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.476452][T15742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.530447][T15742] hsr_slave_0: entered promiscuous mode [ 745.537596][T15742] hsr_slave_1: entered promiscuous mode [ 745.546672][T15742] debugfs: 'hsr0' already exists in 'hsr' [ 745.554723][T15742] Cannot create hsr debugfs directory [ 745.782161][T15742] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 745.808380][T15742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 745.844882][T15742] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 745.870541][T15742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 745.889817][T15742] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 745.920577][T15742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 745.944843][T15742] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 745.973109][T15742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 746.173759][T15742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.215725][T15742] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.270200][T11033] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.277393][T11033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.301445][T11033] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.308629][T11033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.889300][T12509] Bluetooth: hci4: command tx timeout [ 747.166114][T15742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.612082][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.618457][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.690342][T15742] veth0_vlan: entered promiscuous mode [ 747.725803][T15742] veth1_vlan: entered promiscuous mode [ 747.810201][T15742] veth0_macvtap: entered promiscuous mode [ 747.831901][T15742] veth1_macvtap: entered promiscuous mode [ 747.874842][T15742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.909549][T15742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.951032][T11035] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.981989][T11035] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.014313][T11035] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.041204][T11035] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 748.268969][T11030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.300418][T11030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.462791][T11034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.516928][T11034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.808267][T15818] random: crng reseeded on system resumption [ 748.871822][T15818] FAULT_INJECTION: forcing a failure. [ 748.871822][T15818] name failslab, interval 1, probability 0, space 0, times 0 [ 748.871863][T15818] CPU: 0 UID: 0 PID: 15818 Comm: syz.0.1977 Tainted: G U L syzkaller #0 PREEMPT(full) [ 748.871901][T15818] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 748.871910][T15818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 748.871928][T15818] Call Trace: [ 748.871936][T15818] [ 748.871945][T15818] dump_stack_lvl+0x100/0x190 [ 748.871995][T15818] should_fail_ex.cold+0x5/0xa [ 748.872026][T15818] ? find_asymmetric_key+0x84/0x610 [ 748.872057][T15818] should_failslab+0xc2/0x120 [ 748.872088][T15818] __kmalloc_noprof+0xe0/0x850 [ 748.872118][T15818] find_asymmetric_key+0x84/0x610 [ 748.872153][T15818] pkcs7_validate_trust+0x1f0/0x7f0 [ 748.872184][T15818] verify_pkcs7_message_sig+0x12c/0x230 [ 748.872213][T15818] ? __pfx_verify_pkcs7_message_sig+0x10/0x10 [ 748.872242][T15818] ? pkcs7_parse_message+0x5b1/0x870 [ 748.872281][T15818] ? kfree+0x223/0x6c0 [ 748.872321][T15818] ? pkcs7_parse_message+0x5b6/0x870 [ 748.872364][T15818] verify_pkcs7_signature+0x6d/0xa0 [ 748.872395][T15818] valid_regdb+0x211/0x590 [ 748.872427][T15818] ? __pfx_valid_regdb+0x10/0x10 [ 748.872461][T15818] reg_reload_regdb+0x11a/0x460 [ 748.872493][T15818] ? __pfx_reg_reload_regdb+0x10/0x10 [ 748.872527][T15818] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 748.872566][T15818] ? nl80211_pre_doit+0x19a/0xae0 [ 748.872609][T15818] genl_family_rcv_msg_doit+0x214/0x300 [ 748.872652][T15818] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 748.872691][T15818] ? genl_get_cmd+0x3e7/0x760 [ 748.872740][T15818] ? bpf_lsm_capable+0x9/0x10 [ 748.872767][T15818] ? security_capable+0x80/0x260 [ 748.872799][T15818] genl_rcv_msg+0x560/0x800 [ 748.872840][T15818] ? __pfx_genl_rcv_msg+0x10/0x10 [ 748.872879][T15818] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 748.872917][T15818] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 748.872947][T15818] ? __pfx_nl80211_post_doit+0x10/0x10 [ 748.872996][T15818] netlink_rcv_skb+0x159/0x420 [ 748.873030][T15818] ? __pfx_genl_rcv_msg+0x10/0x10 [ 748.873070][T15818] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 748.873116][T15818] ? netlink_deliver_tap+0x1ae/0xcc0 [ 748.873152][T15818] genl_rcv+0x28/0x40 [ 748.873187][T15818] netlink_unicast+0x585/0x850 [ 748.873224][T15818] ? __pfx_netlink_unicast+0x10/0x10 [ 748.873267][T15818] netlink_sendmsg+0x8b0/0xda0 [ 748.873308][T15818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.873341][T15818] ? __import_iovec+0x1d2/0x640 [ 748.873380][T15818] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 748.873411][T15818] ____sys_sendmsg+0x9e1/0xb70 [ 748.873443][T15818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 748.873480][T15818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 748.873520][T15818] ? __pfx_futex_wake_mark+0x10/0x10 [ 748.873558][T15818] ___sys_sendmsg+0x190/0x1e0 [ 748.873595][T15818] ? __pfx____sys_sendmsg+0x10/0x10 [ 748.873665][T15818] __sys_sendmsg+0x170/0x220 [ 748.873692][T15818] ? __pfx___sys_sendmsg+0x10/0x10 [ 748.873723][T15818] ? __x64_sys_futex+0x34f/0x4d0 [ 748.873760][T15818] ? rcu_is_watching+0x12/0xc0 [ 748.873792][T15818] do_syscall_64+0x115/0x840 [ 748.873829][T15818] ? clear_bhb_loop+0x40/0x90 [ 748.873859][T15818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.873885][T15818] RIP: 0033:0x7fb914b9ce59 [ 748.873907][T15818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.873932][T15818] RSP: 002b:00007fb9159ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 748.873957][T15818] RAX: ffffffffffffffda RBX: 00007fb914e16090 RCX: 00007fb914b9ce59 [ 748.873974][T15818] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000008 [ 748.873990][T15818] RBP: 00007fb914c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 748.874005][T15818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.874020][T15818] R13: 00007fb914e16128 R14: 00007fb914e16090 R15: 00007ffea6b77118 [ 748.874051][T15818] [ 748.972795][T12509] Bluetooth: hci4: command tx timeout [ 750.263971][T15820] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 751.049958][T12509] Bluetooth: hci4: command tx timeout [ 751.465662][T15843] sysfs_service_op_store: Client not running :-5: [ 754.196931][T15869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1988'. [ 755.502245][ T9951] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 755.519938][ T9951] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 755.528322][ T9951] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 755.537940][ T9951] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 755.547753][ T9951] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 757.612845][ T9951] Bluetooth: hci5: command tx timeout [ 757.700576][T15889] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.719556][T15889] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.739693][T15889] bridge_slave_0: entered allmulticast mode [ 757.757586][T15889] bridge_slave_0: entered promiscuous mode [ 757.775260][T15889] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.799388][T15889] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.821143][T15889] bridge_slave_1: entered allmulticast mode [ 757.846153][T15889] bridge_slave_1: entered promiscuous mode [ 757.955549][T15889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.984642][T15889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.056328][T15889] team0: Port device team_slave_0 added [ 758.088346][T15889] team0: Port device team_slave_1 added [ 758.237361][T15889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.261542][T15889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.311259][T15889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.339366][T15889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.355598][T15889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.384689][T15889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.497238][T15889] hsr_slave_0: entered promiscuous mode [ 758.535005][T15889] hsr_slave_1: entered promiscuous mode [ 758.567937][T15889] debugfs: 'hsr0' already exists in 'hsr' [ 758.595691][T15889] Cannot create hsr debugfs directory [ 759.421732][T15930] device-mapper: ioctl: name not supplied when creating device [ 759.525752][T15930] device-mapper: ioctl: name not supplied when creating device [ 759.634701][T15930] device-mapper: ioctl: name not supplied when creating device [ 759.695467][ T9951] Bluetooth: hci5: command tx timeout [ 759.706234][T15930] device-mapper: ioctl: name not supplied when creating device [ 759.740445][T15889] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 759.759882][T15889] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 759.770815][T15930] device-mapper: ioctl: name not supplied when creating device [ 759.785429][T15889] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 759.800909][T15889] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 759.814023][T15930] device-mapper: ioctl: name not supplied when creating device [ 759.824731][T15889] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 759.847538][T15889] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 759.855566][T15930] device-mapper: ioctl: name not supplied when creating device [ 759.864638][T15889] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 759.886285][T15930] device-mapper: ioctl: name not supplied when creating device [ 759.895423][T15889] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 759.921558][T15930] device-mapper: ioctl: name not supplied when creating device [ 759.967661][T15930] device-mapper: ioctl: name not supplied when creating device [ 760.003872][T15930] device-mapper: ioctl: name not supplied when creating device [ 760.051534][T15930] device-mapper: ioctl: name not supplied when creating device [ 760.073916][T15889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.088539][T15930] device-mapper: ioctl: name not supplied when creating device [ 760.127385][T15889] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.163404][T11017] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.170609][T11017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.221475][T11017] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.228827][T11017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 760.719189][T12509] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 760.737126][T12509] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 760.747338][T12509] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 760.758955][T12509] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 760.769842][T12509] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 761.776255][T12509] Bluetooth: hci5: command tx timeout [ 761.852993][T15889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.093410][T15968] FAULT_INJECTION: forcing a failure. [ 762.093410][T15968] name failslab, interval 1, probability 0, space 0, times 0 [ 762.153156][T15968] CPU: 0 UID: 0 PID: 15968 Comm: syz.4.2000 Tainted: G U L syzkaller #0 PREEMPT(full) [ 762.153199][T15968] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 762.153209][T15968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 762.153224][T15968] Call Trace: [ 762.153233][T15968] [ 762.153243][T15968] dump_stack_lvl+0x100/0x190 [ 762.153292][T15968] should_fail_ex.cold+0x5/0xa [ 762.153323][T15968] ? public_key_verify_signature+0x2ab/0x910 [ 762.153360][T15968] should_failslab+0xc2/0x120 [ 762.153390][T15968] __kmalloc_noprof+0xe0/0x850 [ 762.153420][T15968] public_key_verify_signature+0x2ab/0x910 [ 762.153461][T15968] ? __pfx_public_key_verify_signature+0x10/0x10 [ 762.153510][T15968] ? __kmalloc_noprof+0x320/0x850 [ 762.153541][T15968] x509_check_for_self_signed+0x325/0x510 [ 762.153584][T15968] x509_cert_parse+0x60c/0x910 [ 762.153625][T15968] ? kasan_save_stack+0x3f/0x50 [ 762.153649][T15968] ? kasan_save_stack+0x30/0x50 [ 762.153673][T15968] ? kasan_save_track+0x14/0x30 [ 762.153701][T15968] pkcs7_extract_cert+0xa4/0x380 [ 762.153729][T15968] asn1_ber_decoder+0x12b3/0x2170 [ 762.153769][T15968] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 762.153815][T15968] pkcs7_parse_message+0x289/0x870 [ 762.153860][T15968] verify_pkcs7_signature+0x30/0xa0 [ 762.153891][T15968] valid_regdb+0x211/0x590 [ 762.153923][T15968] ? __pfx_valid_regdb+0x10/0x10 [ 762.153957][T15968] reg_reload_regdb+0x11a/0x460 [ 762.153989][T15968] ? __pfx_reg_reload_regdb+0x10/0x10 [ 762.154023][T15968] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 762.154061][T15968] ? nl80211_pre_doit+0x19a/0xae0 [ 762.154105][T15968] genl_family_rcv_msg_doit+0x214/0x300 [ 762.154150][T15968] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 762.154189][T15968] ? genl_get_cmd+0x3e7/0x760 [ 762.154232][T15968] ? bpf_lsm_capable+0x9/0x10 [ 762.154258][T15968] ? security_capable+0x80/0x260 [ 762.154289][T15968] genl_rcv_msg+0x560/0x800 [ 762.154330][T15968] ? __pfx_genl_rcv_msg+0x10/0x10 [ 762.154368][T15968] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 762.154406][T15968] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 762.154435][T15968] ? __pfx_nl80211_post_doit+0x10/0x10 [ 762.154485][T15968] netlink_rcv_skb+0x159/0x420 [ 762.154519][T15968] ? __pfx_genl_rcv_msg+0x10/0x10 [ 762.154558][T15968] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 762.154608][T15968] ? netlink_deliver_tap+0x1ae/0xcc0 [ 762.154645][T15968] genl_rcv+0x28/0x40 [ 762.154679][T15968] netlink_unicast+0x585/0x850 [ 762.154718][T15968] ? __pfx_netlink_unicast+0x10/0x10 [ 762.154761][T15968] netlink_sendmsg+0x8b0/0xda0 [ 762.154800][T15968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 762.154833][T15968] ? __import_iovec+0x1d2/0x640 [ 762.154872][T15968] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 762.154903][T15968] ____sys_sendmsg+0x9e1/0xb70 [ 762.154935][T15968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 762.154972][T15968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 762.155012][T15968] ? __pfx_futex_wake_mark+0x10/0x10 [ 762.155049][T15968] ___sys_sendmsg+0x190/0x1e0 [ 762.155086][T15968] ? __pfx____sys_sendmsg+0x10/0x10 [ 762.155156][T15968] __sys_sendmsg+0x170/0x220 [ 762.155183][T15968] ? __pfx___sys_sendmsg+0x10/0x10 [ 762.155209][T15968] ? __x64_sys_futex+0x34f/0x4d0 [ 762.155246][T15968] ? rcu_is_watching+0x12/0xc0 [ 762.155279][T15968] do_syscall_64+0x115/0x840 [ 762.155315][T15968] ? clear_bhb_loop+0x40/0x90 [ 762.155345][T15968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.155371][T15968] RIP: 0033:0x7fd1b539ce59 [ 762.155392][T15968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.155418][T15968] RSP: 002b:00007fd1b61d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 762.155442][T15968] RAX: ffffffffffffffda RBX: 00007fd1b5615fa0 RCX: 00007fd1b539ce59 [ 762.155459][T15968] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000008 [ 762.155475][T15968] RBP: 00007fd1b5432d6f R08: 0000000000000000 R09: 0000000000000000 [ 762.155490][T15968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.155506][T15968] R13: 00007fd1b5616038 R14: 00007fd1b5615fa0 R15: 00007ffe82d255d8 [ 762.155537][T15968] [ 762.897030][T12509] Bluetooth: hci6: command tx timeout [ 762.980571][T15889] veth0_vlan: entered promiscuous mode [ 762.992352][T15889] veth1_vlan: entered promiscuous mode [ 763.016406][T15889] veth0_macvtap: entered promiscuous mode [ 763.061494][T15889] veth1_macvtap: entered promiscuous mode [ 763.149649][T15889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 763.220208][T15889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.270341][T15948] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.296065][T15948] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.315078][T15948] bridge_slave_0: entered allmulticast mode [ 763.346232][T15948] bridge_slave_0: entered promiscuous mode [ 763.385004][T11023] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.417813][T11023] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.447327][T15948] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.469509][T15948] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.497874][T15948] bridge_slave_1: entered allmulticast mode [ 763.522083][T15948] bridge_slave_1: entered promiscuous mode [ 763.554828][T11023] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.593090][T11023] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.822234][T15948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.856301][T12509] Bluetooth: hci5: command tx timeout [ 763.925472][T15948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 764.112799][T15948] team0: Port device team_slave_0 added [ 764.131179][T11023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.154871][T11023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.194168][T15948] team0: Port device team_slave_1 added [ 764.337482][T15948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 764.355114][T15948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.417500][T15948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 764.443395][T15948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 764.461535][T15948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 764.521301][T15948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.571441][T11023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.590254][T11023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.762914][T15948] hsr_slave_0: entered promiscuous mode [ 764.793491][T15948] hsr_slave_1: entered promiscuous mode [ 764.818322][T15948] debugfs: 'hsr0' already exists in 'hsr' [ 764.834111][T15948] Cannot create hsr debugfs directory [ 764.977074][T12509] Bluetooth: hci6: command tx timeout [ 766.098570][T15948] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 766.150166][T15948] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 766.189657][T15948] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 766.251278][T15948] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 766.299614][T15948] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 766.343576][T15948] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 766.382433][T15948] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 766.416997][T15948] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 766.772066][T15948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.882703][T15948] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.951135][T11017] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.958371][T11017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.015715][T11023] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.022926][T11023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.061161][T12509] Bluetooth: hci6: command tx timeout [ 768.675704][T15948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 769.139674][T12509] Bluetooth: hci6: command tx timeout [ 769.795919][T15948] veth0_vlan: entered promiscuous mode [ 770.173375][T15948] veth1_vlan: entered promiscuous mode [ 770.437757][T15948] veth0_macvtap: entered promiscuous mode [ 770.573597][T15948] veth1_macvtap: entered promiscuous mode [ 770.831249][T15948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 770.887995][T15948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 770.977846][T16069] random: crng reseeded on system resumption [ 771.053488][T10008] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.080992][T10008] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.123984][T10008] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.169204][T10008] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.482736][T11025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.542075][T11025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.690430][T11017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.744050][T11017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.547172][T16080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2016'. [ 773.053663][T16085] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 syzkaller syzkaller login: [ 775.888866][T16137] Invalid ELF header magic: != ELF [ 777.756325][T12509] Bluetooth: hci6: unexpected subevent 0x01 length: 123 > 18 [ 777.764009][T12509] Bluetooth: hci6: Invalid handle: 0x3a4a > 0x0eff [ 778.575051][T12509] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 778.600541][T12509] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 778.616829][T12509] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 778.630146][T12509] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 778.646934][T12509] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 779.116152][ T809] Process accounting resumed [ 779.359244][T16164] Process accounting resumed [ 779.532343][T16186] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[15889] was attempted by "-qЮڌ\x0cSxʿӰz\x22vED|Ge|$SŽ?n|\x09s98#7{(MeYJE2paژJ. Ȗf;LȹU1X.poA1\x0b灤hCQ'J;]Hv*6BYOx3\x22u)XUw18}n4\x0dHs\x0d7_N\x0c&deFkIU@^gNVb\x1b AFj\x0d7?|\x0d?nko)ōS-ɫW璚&aj$[`x [Ph\x09[.G}B\x5c<nۈGq]NYBU\x22׺<0RNPi'zyT%\x5c\x0bT4Lmɮty%쒹\x0b1 ߃T3c'xw2\x1bzk!7WX󙺗%hm_)ak@i4nj [0u:B';˓}\x0ba\x09`‡M, GNl|7Kd\x5cT(gpdDva?vC퇁\x1bnsbG~*!v\x0aʶ$B8>ynȒI/Ax_;Xs݆@FbT-Xp?`)XPx`]پVƵdfs߄tk)9aL!]<_[˩`DX}uS*x0i))m wD=g\x0aB^-}1B\x22(_DfHd%(ڡ)d* [ 780.744754][T12509] Bluetooth: hci7: command tx timeout [ 782.222343][T16229] bond0: no command found in slaves file - use +ifname or -ifname [ 782.417897][T16224] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 782.826870][T12509] Bluetooth: hci7: command tx timeout [ 783.953854][T16181] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.989797][T16181] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.026762][T16181] bridge_slave_0: entered allmulticast mode [ 784.061368][T16181] bridge_slave_0: entered promiscuous mode [ 784.094397][T16181] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.140130][T16181] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.173179][T16181] bridge_slave_1: entered allmulticast mode [ 784.211837][T16181] bridge_slave_1: entered promiscuous mode [ 784.485085][T16181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.674737][T16181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.831977][T16181] team0: Port device team_slave_0 added [ 784.862965][T16181] team0: Port device team_slave_1 added [ 784.863692][T16250] blktrace: Concurrent blktraces are not allowed on loop2 [ 784.907285][T14332] Bluetooth: hci7: command tx timeout [ 785.155238][T16181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.198869][T16181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.322833][T16181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.385755][T16181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.428746][T16181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.566436][T16181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.894692][T16181] hsr_slave_0: entered promiscuous mode [ 785.937510][T16181] hsr_slave_1: entered promiscuous mode [ 785.967732][T16181] debugfs: 'hsr0' already exists in 'hsr' [ 785.993709][T16181] Cannot create hsr debugfs directory [ 786.987726][T14332] Bluetooth: hci7: command tx timeout [ 788.545105][T16181] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 788.618008][T16181] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 788.831694][T16181] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 788.892073][T16181] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 788.926450][T16181] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 788.985782][T16181] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 789.095989][T16181] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 789.144171][T16181] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 789.920799][T16181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.032242][T16181] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.094370][T11017] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.101589][T11017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.185885][T11017] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.193117][T11017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.698882][T16305] Process accounting resumed [ 792.555678][T16181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.616465][T16181] veth0_vlan: entered promiscuous mode [ 795.747025][T16181] veth1_vlan: entered promiscuous mode [ 795.944185][T16181] veth0_macvtap: entered promiscuous mode [ 796.038370][T16181] veth1_macvtap: entered promiscuous mode [ 796.196463][T16181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.313295][T16181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.427685][T11023] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.495608][T11023] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.642710][T11023] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.694187][T11023] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.876161][T10006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.928656][T10006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.051231][T11023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.092713][T11023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.391807][T16426] FAULT_INJECTION: forcing a failure. [ 798.391807][T16426] name failslab, interval 1, probability 0, space 0, times 0 [ 798.494710][T16426] CPU: 0 UID: 0 PID: 16426 Comm: syz.4.2068 Tainted: G U L syzkaller #0 PREEMPT(full) [ 798.494752][T16426] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 798.494763][T16426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 798.494778][T16426] Call Trace: [ 798.494787][T16426] [ 798.494797][T16426] dump_stack_lvl+0x100/0x190 [ 798.494847][T16426] should_fail_ex.cold+0x5/0xa [ 798.494878][T16426] ? snd_pcm_plugin_build+0x64/0x650 [ 798.494919][T16426] should_failslab+0xc2/0x120 [ 798.494951][T16426] __kmalloc_noprof+0xe0/0x850 [ 798.494981][T16426] snd_pcm_plugin_build+0x64/0x650 [ 798.495028][T16426] snd_pcm_plugin_build_mulaw+0x280/0x760 [ 798.495054][T16426] ? __pfx_mulaw_encode+0x10/0x10 [ 798.495077][T16426] ? __pfx_snd_pcm_plugin_build_mulaw+0x10/0x10 [ 798.495106][T16426] ? snd_pcm_hw_params+0x241/0x1bf0 [ 798.495199][T16426] snd_pcm_plug_format_plugins+0xbdd/0x1430 [ 798.495244][T16426] ? __pfx_snd_pcm_plug_format_plugins+0x10/0x10 [ 798.495289][T16426] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 798.495336][T16426] snd_pcm_oss_change_params_locked+0x2e3c/0x39f0 [ 798.495388][T16426] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 798.495425][T16426] ? __pfx___mutex_lock+0x10/0x10 [ 798.495464][T16426] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 798.495521][T16426] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 798.495564][T16426] snd_pcm_oss_set_channels+0x23a/0x370 [ 798.495602][T16426] ? __pfx_snd_pcm_oss_set_channels+0x10/0x10 [ 798.495648][T16426] snd_pcm_oss_ioctl+0x1d8a/0x37c0 [ 798.495685][T16426] ? find_held_lock+0x2b/0x80 [ 798.495717][T16426] ? __fget_files+0x215/0x3d0 [ 798.495747][T16426] ? hook_file_ioctl_common+0x149/0x410 [ 798.495782][T16426] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 798.495822][T16426] ? __fget_files+0x21f/0x3d0 [ 798.495856][T16426] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 798.495895][T16426] __x64_sys_ioctl+0x18e/0x210 [ 798.495923][T16426] do_syscall_64+0x115/0x840 [ 798.495958][T16426] ? clear_bhb_loop+0x40/0x90 [ 798.495988][T16426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.496015][T16426] RIP: 0033:0x7fd1b539ce59 [ 798.496035][T16426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.496061][T16426] RSP: 002b:00007fd1b61d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 798.496086][T16426] RAX: ffffffffffffffda RBX: 00007fd1b5615fa0 RCX: 00007fd1b539ce59 [ 798.496103][T16426] RDX: 0000000000000000 RSI: 00000000c0045003 RDI: 000000000000000d [ 798.496118][T16426] RBP: 00007fd1b5432d6f R08: 0000000000000000 R09: 0000000000000000 [ 798.496139][T16426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 798.496154][T16426] R13: 00007fd1b5616038 R14: 00007fd1b5615fa0 R15: 00007ffe82d255d8 [ 798.496185][T16426] [ 798.851120][T16434] blktrace: Concurrent blktraces are not allowed on loop2 [ 803.877497][T16481] nbd: socks must be embedded in a SOCK_ITEM attr [ 803.962605][T16480] bond0: invalid ARP target specified [ 804.005207][T16482] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2077'. [ 804.052387][T16481] block nbd1: shutting down sockets [ 805.334031][T16499] FAULT_INJECTION: forcing a failure. [ 805.334031][T16499] name failslab, interval 1, probability 0, space 0, times 0 [ 805.542779][T16499] CPU: 0 UID: 0 PID: 16499 Comm: syz.6.2079 Tainted: G U L syzkaller #0 PREEMPT(full) [ 805.542821][T16499] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 805.542831][T16499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 805.542847][T16499] Call Trace: [ 805.542855][T16499] [ 805.542865][T16499] dump_stack_lvl+0x100/0x190 [ 805.542915][T16499] should_fail_ex.cold+0x5/0xa [ 805.542946][T16499] ? public_key_verify_signature+0x2ab/0x910 [ 805.542983][T16499] should_failslab+0xc2/0x120 [ 805.543014][T16499] __kmalloc_noprof+0xe0/0x850 [ 805.543043][T16499] public_key_verify_signature+0x2ab/0x910 [ 805.543085][T16499] ? __pfx_public_key_verify_signature+0x10/0x10 [ 805.543134][T16499] ? __kmalloc_noprof+0x320/0x850 [ 805.543165][T16499] x509_check_for_self_signed+0x325/0x510 [ 805.543208][T16499] x509_cert_parse+0x60c/0x910 [ 805.543242][T16499] ? kasan_save_stack+0x3f/0x50 [ 805.543266][T16499] ? kasan_save_stack+0x30/0x50 [ 805.543290][T16499] ? kasan_save_track+0x14/0x30 [ 805.543317][T16499] pkcs7_extract_cert+0xa4/0x380 [ 805.543344][T16499] asn1_ber_decoder+0x12b3/0x2170 [ 805.543384][T16499] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 805.543431][T16499] pkcs7_parse_message+0x289/0x870 [ 805.543475][T16499] verify_pkcs7_signature+0x30/0xa0 [ 805.543515][T16499] valid_regdb+0x211/0x590 [ 805.543548][T16499] ? __pfx_valid_regdb+0x10/0x10 [ 805.543582][T16499] reg_reload_regdb+0x11a/0x460 [ 805.543615][T16499] ? __pfx_reg_reload_regdb+0x10/0x10 [ 805.543649][T16499] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 805.543688][T16499] ? nl80211_pre_doit+0x19a/0xae0 [ 805.543731][T16499] genl_family_rcv_msg_doit+0x214/0x300 [ 805.543775][T16499] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 805.543813][T16499] ? genl_get_cmd+0x3e7/0x760 [ 805.543857][T16499] ? bpf_lsm_capable+0x9/0x10 [ 805.543885][T16499] ? security_capable+0x80/0x260 [ 805.543916][T16499] genl_rcv_msg+0x560/0x800 [ 805.543958][T16499] ? __pfx_genl_rcv_msg+0x10/0x10 [ 805.543996][T16499] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 805.544035][T16499] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 805.544065][T16499] ? __pfx_nl80211_post_doit+0x10/0x10 [ 805.544114][T16499] netlink_rcv_skb+0x159/0x420 [ 805.544148][T16499] ? __pfx_genl_rcv_msg+0x10/0x10 [ 805.544188][T16499] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 805.544234][T16499] ? netlink_deliver_tap+0x1ae/0xcc0 [ 805.544275][T16499] genl_rcv+0x28/0x40 [ 805.544309][T16499] netlink_unicast+0x585/0x850 [ 805.544348][T16499] ? __pfx_netlink_unicast+0x10/0x10 [ 805.544390][T16499] netlink_sendmsg+0x8b0/0xda0 [ 805.544429][T16499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 805.544462][T16499] ? __import_iovec+0x1d2/0x640 [ 805.544507][T16499] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 805.544538][T16499] ____sys_sendmsg+0x9e1/0xb70 [ 805.544572][T16499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 805.544609][T16499] ? __pfx_____sys_sendmsg+0x10/0x10 [ 805.544649][T16499] ? __pfx_futex_wake_mark+0x10/0x10 [ 805.544686][T16499] ___sys_sendmsg+0x190/0x1e0 [ 805.544724][T16499] ? __pfx____sys_sendmsg+0x10/0x10 [ 805.544793][T16499] __sys_sendmsg+0x170/0x220 [ 805.544821][T16499] ? __pfx___sys_sendmsg+0x10/0x10 [ 805.544846][T16499] ? __x64_sys_futex+0x34f/0x4d0 [ 805.544884][T16499] ? rcu_is_watching+0x12/0xc0 [ 805.544917][T16499] do_syscall_64+0x115/0x840 [ 805.544953][T16499] ? clear_bhb_loop+0x40/0x90 [ 805.544983][T16499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.545010][T16499] RIP: 0033:0x7f0e00d9ce59 [ 805.545030][T16499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 805.545055][T16499] RSP: 002b:00007f0e01cd0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 805.545079][T16499] RAX: ffffffffffffffda RBX: 00007f0e01016090 RCX: 00007f0e00d9ce59 [ 805.545096][T16499] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 000000000000000a [ 805.545112][T16499] RBP: 00007f0e00e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 805.545127][T16499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 805.545142][T16499] R13: 00007f0e01016128 R14: 00007f0e01016090 R15: 00007ffda43f4218 [ 805.545174][T16499] [ 809.081800][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.093787][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.585433][T16560] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 809.844209][T16564] random: crng reseeded on system resumption [ 811.817192][T16586] random: crng reseeded on system resumption [ 815.428590][T16635] __vm_enough_memory: pid: 16635, comm: syz.7.2106, bytes: 4398046511104 not enough memory for the allocation [ 815.923026][T16646] ACPI Error: Could not disable RealTimeClock events (20251212/evxfevnt-243) [ 817.814987][T16668] Process accounting resumed [ 819.798199][T16700] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2120'. [ 820.201586][T16705] ubi0: attaching mtd0 [ 820.264686][T16705] ubi0: scanning is finished [ 820.302215][T16705] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 820.688566][T16705] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 822.148742][T16736] FAULT_INJECTION: forcing a failure. [ 822.148742][T16736] name failslab, interval 1, probability 0, space 0, times 0 [ 822.271830][T16736] CPU: 0 UID: 0 PID: 16736 Comm: syz.4.2128 Tainted: G U L syzkaller #0 PREEMPT(full) [ 822.271872][T16736] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 822.271882][T16736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 822.271898][T16736] Call Trace: [ 822.271907][T16736] [ 822.271917][T16736] dump_stack_lvl+0x100/0x190 [ 822.271966][T16736] should_fail_ex.cold+0x5/0xa [ 822.271997][T16736] ? find_asymmetric_key+0x84/0x610 [ 822.272027][T16736] should_failslab+0xc2/0x120 [ 822.272058][T16736] __kmalloc_noprof+0xe0/0x850 [ 822.272087][T16736] find_asymmetric_key+0x84/0x610 [ 822.272129][T16736] pkcs7_validate_trust+0x1f0/0x7f0 [ 822.272160][T16736] verify_pkcs7_message_sig+0x12c/0x230 [ 822.272189][T16736] ? __pfx_verify_pkcs7_message_sig+0x10/0x10 [ 822.272217][T16736] ? pkcs7_parse_message+0x5b1/0x870 [ 822.272257][T16736] ? kfree+0x223/0x6c0 [ 822.272297][T16736] ? pkcs7_parse_message+0x5b6/0x870 [ 822.272341][T16736] verify_pkcs7_signature+0x6d/0xa0 [ 822.272372][T16736] valid_regdb+0x211/0x590 [ 822.272404][T16736] ? __pfx_valid_regdb+0x10/0x10 [ 822.272438][T16736] reg_reload_regdb+0x11a/0x460 [ 822.272471][T16736] ? __pfx_reg_reload_regdb+0x10/0x10 [ 822.272504][T16736] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 822.272543][T16736] ? nl80211_pre_doit+0x19a/0xae0 [ 822.272585][T16736] genl_family_rcv_msg_doit+0x214/0x300 [ 822.272629][T16736] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 822.272668][T16736] ? genl_get_cmd+0x3e7/0x760 [ 822.272712][T16736] ? bpf_lsm_capable+0x9/0x10 [ 822.272738][T16736] ? security_capable+0x80/0x260 [ 822.272769][T16736] genl_rcv_msg+0x560/0x800 [ 822.272810][T16736] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.272849][T16736] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 822.272887][T16736] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 822.272917][T16736] ? __pfx_nl80211_post_doit+0x10/0x10 [ 822.272967][T16736] netlink_rcv_skb+0x159/0x420 [ 822.273001][T16736] ? __pfx_genl_rcv_msg+0x10/0x10 [ 822.273040][T16736] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 822.273086][T16736] ? netlink_deliver_tap+0x1ae/0xcc0 [ 822.273128][T16736] genl_rcv+0x28/0x40 [ 822.273161][T16736] netlink_unicast+0x585/0x850 [ 822.273200][T16736] ? __pfx_netlink_unicast+0x10/0x10 [ 822.273243][T16736] netlink_sendmsg+0x8b0/0xda0 [ 822.273282][T16736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.273315][T16736] ? __import_iovec+0x1d2/0x640 [ 822.273358][T16736] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 822.273389][T16736] ____sys_sendmsg+0x9e1/0xb70 [ 822.273422][T16736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.273459][T16736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 822.273491][T16736] ? preempt_schedule_thunk+0x16/0x30 [ 822.273534][T16736] ? try_to_wake_up+0x5f6/0x1900 [ 822.273572][T16736] ___sys_sendmsg+0x190/0x1e0 [ 822.273609][T16736] ? __pfx____sys_sendmsg+0x10/0x10 [ 822.273645][T16736] ? futex_private_hash_put+0x107/0x1c0 [ 822.273718][T16736] __sys_sendmsg+0x170/0x220 [ 822.273745][T16736] ? __pfx___sys_sendmsg+0x10/0x10 [ 822.273771][T16736] ? __x64_sys_futex+0x34f/0x4d0 [ 822.273808][T16736] ? rcu_is_watching+0x12/0xc0 [ 822.273841][T16736] do_syscall_64+0x115/0x840 [ 822.273877][T16736] ? clear_bhb_loop+0x40/0x90 [ 822.273907][T16736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.273933][T16736] RIP: 0033:0x7fd1b539ce59 [ 822.273955][T16736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.273980][T16736] RSP: 002b:00007fd1b61b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 822.274004][T16736] RAX: ffffffffffffffda RBX: 00007fd1b5616090 RCX: 00007fd1b539ce59 [ 822.274021][T16736] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 822.274037][T16736] RBP: 00007fd1b5432d6f R08: 0000000000000000 R09: 0000000000000000 [ 822.274053][T16736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.274068][T16736] R13: 00007fd1b5616128 R14: 00007fd1b5616090 R15: 00007ffe82d255d8 [ 822.274100][T16736] [ 824.360549][T16725] Process accounting paused [ 824.889606][T16748] vivid-007: ================= START STATUS ================= [ 825.018762][T16748] vivid-007: Generate PTS: true [ 825.050770][T16748] vivid-007: Generate SCR: true [ 825.075960][T16748] tpg source WxH: 320x240 (Y'CbCr) [ 825.114218][T16748] tpg field: 1 [ 825.166586][T16748] tpg crop: (0,0)/320x240 [ 825.255699][T16748] tpg compose: (0,0)/320x240 [ 825.303473][T16748] tpg colorspace: 8 [ 825.326441][T16748] tpg transfer function: 0/0 [ 825.373878][T16748] tpg Y'CbCr encoding: 0/0 [ 825.399925][T16748] tpg quantization: 0/0 [ 825.418423][T16747] Format for adding new port is "id [perm_addr]" (uint MAC). [ 825.430612][T16748] tpg RGB range: 0/2 [ 825.444578][T16748] vivid-007: ================== END STATUS ================== [ 825.616402][T16749] input: jJǸ-9%vJ86 as /devices/virtual/input/input17 [ 829.637013][T16795] FAULT_INJECTION: forcing a failure. [ 829.637013][T16795] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 829.838464][T16795] CPU: 0 UID: 0 PID: 16795 Comm: syz.4.2141 Tainted: G U L syzkaller #0 PREEMPT(full) [ 829.838505][T16795] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 829.838514][T16795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 829.838528][T16795] Call Trace: [ 829.838536][T16795] [ 829.838545][T16795] dump_stack_lvl+0x100/0x190 [ 829.838592][T16795] should_fail_ex.cold+0x5/0xa [ 829.838617][T16795] ? prepare_alloc_pages+0x16d/0x5f0 [ 829.838652][T16795] should_fail_alloc_page+0xeb/0x140 [ 829.838684][T16795] prepare_alloc_pages+0x1f0/0x5f0 [ 829.838722][T16795] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 829.838770][T16795] ? mt_validate_nulls+0x1b3/0xa10 [ 829.838813][T16795] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 829.838860][T16795] ? mas_prev_node+0x1da/0xf00 [ 829.838902][T16795] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 829.838938][T16795] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 829.838973][T16795] ? policy_nodemask+0xed/0x4f0 [ 829.839028][T16795] alloc_pages_mpol+0x1fb/0x540 [ 829.839058][T16795] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 829.839087][T16795] ? __lock_acquire+0x4a5/0x2630 [ 829.839131][T16795] folio_alloc_mpol_noprof+0x36/0x260 [ 829.839166][T16795] alloc_migration_target_by_mpol+0x2c1/0x650 [ 829.839204][T16795] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 829.839239][T16795] ? __pfx___might_resched+0x10/0x10 [ 829.839265][T16795] ? rcu_is_watching+0x12/0xc0 [ 829.839303][T16795] migrate_pages_batch+0x5dc/0x45c0 [ 829.839337][T16795] ? do_raw_spin_lock+0x70/0x260 [ 829.839363][T16795] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 829.839405][T16795] ? do_raw_spin_unlock+0x145/0x1e0 [ 829.839434][T16795] ? __pfx_migrate_pages_batch+0x10/0x10 [ 829.839465][T16795] ? debug_object_assert_init+0x1c4/0x300 [ 829.839548][T16795] ? do_raw_spin_lock+0x128/0x260 [ 829.839575][T16795] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 829.839602][T16795] ? __lock_acquire+0x4a5/0x2630 [ 829.839641][T16795] ? rcu_is_watching+0x12/0xc0 [ 829.839669][T16795] ? trace_hrtimer_start+0x79/0x230 [ 829.839700][T16795] migrate_pages_sync+0x12c/0x880 [ 829.839733][T16795] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 829.839763][T16795] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 829.839802][T16795] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 829.839832][T16795] ? lockdep_hardirqs_on+0x78/0x100 [ 829.839868][T16795] ? __pfx_migrate_pages_sync+0x10/0x10 [ 829.839905][T16795] ? __schedule+0x12a7/0x67a0 [ 829.839936][T16795] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 829.839973][T16795] migrate_pages+0x1aa5/0x2880 [ 829.840008][T16795] ? __pfx_try_to_wake_up+0x10/0x10 [ 829.840037][T16795] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 829.840080][T16795] ? __pfx_migrate_pages+0x10/0x10 [ 829.840113][T16795] ? preempt_schedule_thunk+0x16/0x30 [ 829.840150][T16795] ? preempt_schedule_common+0x42/0xc0 [ 829.840184][T16795] ? preempt_schedule_thunk+0x16/0x30 [ 829.840224][T16795] ? up_write+0x3fd/0x4f0 [ 829.840251][T16795] do_mbind+0x5a4/0xfd0 [ 829.840298][T16795] ? __pfx_do_mbind+0x10/0x10 [ 829.840332][T16795] ? ksys_write+0x190/0x250 [ 829.840373][T16795] ? __pfx_get_nodes+0x10/0x10 [ 829.840405][T16795] kernel_mbind+0x1b7/0x200 [ 829.840441][T16795] ? __pfx_kernel_mbind+0x10/0x10 [ 829.840477][T16795] ? rcu_is_watching+0x12/0xc0 [ 829.840508][T16795] do_syscall_64+0x115/0x840 [ 829.840541][T16795] ? clear_bhb_loop+0x40/0x90 [ 829.840571][T16795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.840596][T16795] RIP: 0033:0x7fd1b539ce59 [ 829.840616][T16795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.840640][T16795] RSP: 002b:00007fd1b6195028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 829.840668][T16795] RAX: ffffffffffffffda RBX: 00007fd1b5616180 RCX: 00007fd1b539ce59 [ 829.840684][T16795] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 829.840699][T16795] RBP: 00007fd1b5432d6f R08: 0000000000000006 R09: 0000000000000002 [ 829.840714][T16795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 829.840728][T16795] R13: 00007fd1b5616218 R14: 00007fd1b5616180 R15: 00007ffe82d255d8 [ 829.840758][T16795] [ 832.167862][T16836] FAULT_INJECTION: forcing a failure. [ 832.167862][T16836] name failslab, interval 1, probability 0, space 0, times 0 [ 832.312911][T16836] CPU: 0 UID: 0 PID: 16836 Comm: syz.4.2146 Tainted: G U L syzkaller #0 PREEMPT(full) [ 832.312955][T16836] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 832.312965][T16836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 832.312981][T16836] Call Trace: [ 832.312989][T16836] [ 832.312999][T16836] dump_stack_lvl+0x100/0x190 [ 832.313053][T16836] should_fail_ex.cold+0x5/0xa [ 832.313086][T16836] should_failslab+0xc2/0x120 [ 832.313116][T16836] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 832.313144][T16836] ? __addrconf_sysctl_register+0xbb/0x360 [ 832.313272][T16836] kmemdup_noprof+0x29/0x60 [ 832.313299][T16836] __addrconf_sysctl_register+0xbb/0x360 [ 832.313335][T16836] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 832.313375][T16836] ? __asan_memcpy+0x3c/0x60 [ 832.313416][T16836] addrconf_init_net+0x5dd/0x8e0 [ 832.313450][T16836] ? __pfx_addrconf_init_net+0x10/0x10 [ 832.313482][T16836] ops_init+0x1e2/0x5f0 [ 832.313513][T16836] setup_net+0x118/0x3a0 [ 832.313542][T16836] ? __pfx_setup_net+0x10/0x10 [ 832.313569][T16836] ? mutex_init_lockdep+0xf1/0x120 [ 832.313600][T16836] copy_net_ns+0x46f/0x7c0 [ 832.313633][T16836] create_new_namespaces+0x3ea/0xac0 [ 832.313672][T16836] unshare_nsproxy_namespaces+0xf2/0x220 [ 832.313706][T16836] ksys_unshare+0x438/0xab0 [ 832.313745][T16836] ? __pfx_ksys_unshare+0x10/0x10 [ 832.313779][T16836] ? xfd_validate_state+0x129/0x190 [ 832.313806][T16836] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 832.313845][T16836] ? syscall_user_dispatch+0x76/0x130 [ 832.313874][T16836] __x64_sys_unshare+0x31/0x40 [ 832.313910][T16836] do_syscall_64+0x115/0x840 [ 832.313945][T16836] ? clear_bhb_loop+0x40/0x90 [ 832.313975][T16836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.314001][T16836] RIP: 0033:0x7fd1b539ce59 [ 832.314028][T16836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.314053][T16836] RSP: 002b:00007fd1b61d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 832.314078][T16836] RAX: ffffffffffffffda RBX: 00007fd1b5615fa0 RCX: 00007fd1b539ce59 [ 832.314095][T16836] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 832.314111][T16836] RBP: 00007fd1b5432d6f R08: 0000000000000000 R09: 0000000000000000 [ 832.314126][T16836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 832.314142][T16836] R13: 00007fd1b5616038 R14: 00007fd1b5615fa0 R15: 00007ffe82d255d8 [ 832.314174][T16836] [ 832.692778][T16846] random: crng reseeded on system resumption [ 836.656708][T16882] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 836.963735][T16882] File: /dev/nullb0 PID: 16882 Comm: syz.6.2153 [ 839.815412][T14332] Bluetooth: hci0: command 0x0c1a tx timeout [ 839.826131][T16903] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 840.428089][T16903] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 840.475198][T16903] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 840.506596][T16903] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 840.532032][T16903] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 840.560307][T16903] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 840.631060][T16903] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 840.656900][T16903] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 840.686294][T16903] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 840.771487][T16903] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 840.815576][T16903] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 840.842479][T16903] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 840.890086][T16903] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 840.929624][T16903] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 840.949447][T16903] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 840.996763][T16903] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 841.503173][T16936] FAULT_INJECTION: forcing a failure. [ 841.503173][T16936] name failslab, interval 1, probability 0, space 0, times 0 [ 841.601647][T16936] CPU: 0 UID: 0 PID: 16936 Comm: syz.5.2166 Tainted: G U L syzkaller #0 PREEMPT(full) [ 841.601689][T16936] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 841.601700][T16936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 841.601715][T16936] Call Trace: [ 841.601724][T16936] [ 841.601734][T16936] dump_stack_lvl+0x100/0x190 [ 841.601782][T16936] should_fail_ex.cold+0x5/0xa [ 841.601815][T16936] should_failslab+0xc2/0x120 [ 841.601846][T16936] __kmalloc_cache_noprof+0x7a/0x6f0 [ 841.601883][T16936] ? snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 841.601928][T16936] snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 841.601969][T16936] ? rcu_is_watching+0x12/0xc0 [ 841.601998][T16936] ? trace_contention_end+0x122/0x170 [ 841.602028][T16936] ? snd_pcm_oss_sync+0x243/0x840 [ 841.602064][T16936] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 841.602106][T16936] ? __pfx___mutex_lock+0x10/0x10 [ 841.602152][T16936] ? __fsnotify_parent+0x2b4/0xca0 [ 841.602208][T16936] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 841.602248][T16936] snd_pcm_oss_sync+0x265/0x840 [ 841.602289][T16936] snd_pcm_oss_release+0x238/0x300 [ 841.602326][T16936] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 841.602364][T16936] __fput+0x3ff/0xb50 [ 841.602409][T16936] task_work_run+0x150/0x240 [ 841.602435][T16936] ? __pfx_task_work_run+0x10/0x10 [ 841.602461][T16936] ? rcu_is_watching+0x12/0xc0 [ 841.602494][T16936] exit_to_user_mode_loop+0x157/0x670 [ 841.602534][T16936] ? rcu_is_watching+0x12/0xc0 [ 841.602565][T16936] do_syscall_64+0x652/0x840 [ 841.602600][T16936] ? clear_bhb_loop+0x40/0x90 [ 841.602631][T16936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.602657][T16936] RIP: 0033:0x7fe9e899ce59 [ 841.602678][T16936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.602703][T16936] RSP: 002b:00007fe9e984f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 841.602727][T16936] RAX: 0000000000000000 RBX: 00007fe9e8c15fa0 RCX: 00007fe9e899ce59 [ 841.602743][T16936] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 841.602758][T16936] RBP: 00007fe9e8a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 841.602774][T16936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.602789][T16936] R13: 00007fe9e8c16038 R14: 00007fe9e8c15fa0 R15: 00007fffe03c7e48 [ 841.602821][T16936] [ 842.170956][T14332] Bluetooth: hci3: command 0x0c1a tx timeout [ 842.538169][T14332] Bluetooth: hci4: command 0x0c1a tx timeout [ 842.546570][T14332] Bluetooth: hci2: command 0x0c1a tx timeout [ 842.552630][T12509] Bluetooth: hci1: command 0x0c1a tx timeout [ 842.701820][ T9951] Bluetooth: hci5: command 0x0c1a tx timeout [ 842.855685][ T9951] Bluetooth: hci6: command 0x0c1a tx timeout [ 842.936245][ T9951] Bluetooth: hci7: command 0x0c1a tx timeout [ 844.616891][ T9951] Bluetooth: hci4: command 0x0c1a tx timeout [ 844.778224][ T9951] Bluetooth: hci5: command 0x0c1a tx timeout [ 844.941349][ T9951] Bluetooth: hci6: command 0x0c1a tx timeout [ 845.016580][ T9951] Bluetooth: hci7: command 0x0c1a tx timeout [ 845.810162][T16973] can: request_module (can-proto-3) failed. [ 846.697592][ T9951] Bluetooth: hci4: command 0x0c1a tx timeout [ 846.860825][T12509] Bluetooth: hci5: command 0x0c1a tx timeout [ 847.017596][ T9951] Bluetooth: hci6: command 0x0c1a tx timeout [ 847.099531][ T9951] Bluetooth: hci7: command 0x0c1a tx timeout [ 848.830791][T16965] Process accounting paused [ 849.066909][T17015] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2178'. [ 851.397728][T17057] random: crng reseeded on system resumption [ 851.615860][T17058] hub 1-0:1.0: USB hub found [ 851.672597][T17058] hub 1-0:1.0: 1 port detected [ 854.020013][T17089] : Can't lookup blockdev [ 854.636009][T17102] netlink: ct family unspecified [ 855.202240][T17101] Process accounting resumed [ 855.513665][T17105] Process accounting resumed [ 856.843956][T17131] netlink: 'syz.4.2200': attribute type 33 has an invalid length. [ 857.002132][T12509] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 857.018617][T12509] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 857.030291][T12509] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 857.040766][T12509] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 857.056897][T12509] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 859.183855][T12509] Bluetooth: hci8: command tx timeout [ 859.869311][T17133] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.922904][T17133] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.975950][T17133] bridge_slave_0: entered allmulticast mode [ 860.040947][T17133] bridge_slave_0: entered promiscuous mode [ 860.098748][T17133] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.145575][T17133] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.186129][T17133] bridge_slave_1: entered allmulticast mode [ 860.228908][T17133] bridge_slave_1: entered promiscuous mode [ 860.410242][T17133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 860.499115][T17133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 860.607543][T12509] Bluetooth: hci4: unexpected event 0x3e length: 508 > 260 [ 860.607583][T12509] Bluetooth: hci4: unexpected subevent 0x02 length: 507 > 260 [ 860.626078][T12509] Bluetooth: hci4: Dropping invalid advertising data [ 860.635438][T12509] Bluetooth: hci4: unknown advertising packet type: 0xe9 [ 860.635493][T12509] Bluetooth: hci4: Dropping invalid advertising data [ 860.654328][T12509] Bluetooth: hci4: Dropping invalid advertising data [ 860.661086][T12509] Bluetooth: hci4: Malformed LE Event: 0x02 [ 860.667662][T12509] Bluetooth: hci4: unexpected event 0x3e length: 508 > 260 [ 860.667689][T12509] Bluetooth: hci4: unexpected subevent 0x02 length: 507 > 260 [ 860.682681][T12509] Bluetooth: hci4: Dropping invalid advertising data [ 860.689461][T12509] Bluetooth: hci4: unknown advertising packet type: 0xe9 [ 860.689491][T12509] Bluetooth: hci4: Dropping invalid advertising data [ 860.706720][T12509] Bluetooth: hci4: Dropping invalid advertising data [ 860.716620][T12509] Bluetooth: hci4: Malformed LE Event: 0x02 [ 860.786247][T17133] team0: Port device team_slave_0 added [ 860.841711][T17133] team0: Port device team_slave_1 added [ 861.019161][T17133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.065875][T17133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.200002][T17198] random: crng reseeded on system resumption [ 861.212084][T17133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 861.270848][T12509] Bluetooth: hci8: command tx timeout [ 861.321595][T17198] hub 1-0:1.0: USB hub found [ 861.340091][T17133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 861.360144][T17198] hub 1-0:1.0: 1 port detected [ 861.373562][T17133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.402689][T17204] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2209'. [ 861.492359][T17133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 861.638510][T17204] ipvlan1: entered promiscuous mode [ 861.652726][T17204] ipvlan1: entered allmulticast mode [ 861.664910][T17204] veth0_vlan: entered allmulticast mode [ 861.774429][T17208] PM: Enabling pm_trace changes system date and time during resume. [ 861.774429][T17208] PM: Correct system time has to be restored manually after resume. [ 861.816755][T17133] hsr_slave_0: entered promiscuous mode [ 861.833024][T17133] hsr_slave_1: entered promiscuous mode [ 861.856344][T17133] debugfs: 'hsr0' already exists in 'hsr' [ 861.881948][T17133] Cannot create hsr debugfs directory [ 863.348612][T12509] Bluetooth: hci8: command tx timeout [ 863.919074][T17241] netlink: 342 bytes leftover after parsing attributes in process `syz.6.2219'. [ 864.050252][T17133] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 864.102387][T17133] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 864.132428][T17133] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 864.250255][T17133] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 864.325253][T17133] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 864.353610][T17133] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 864.378118][T17248] Line length is too long: Should be less than 4094 [ 864.460926][T17133] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 864.499173][T17133] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 865.429057][T12509] Bluetooth: hci8: command tx timeout [ 866.335779][T17133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.494513][T17133] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.575849][T16831] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.583089][T16831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.650580][T16831] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.657829][T16831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.771336][T17248] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2220'. [ 869.091452][T17313] netlink: 5056 bytes leftover after parsing attributes in process `syz.4.2230'. [ 870.028575][T17133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.555471][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.562585][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.745757][T17339] bond0: invalid ARP target specified [ 870.848964][T17343] random: crng reseeded on system resumption [ 871.703862][T17133] veth0_vlan: entered promiscuous mode [ 871.914609][T17133] veth1_vlan: entered promiscuous mode [ 872.200223][T17133] veth0_macvtap: entered promiscuous mode [ 872.238475][T17349] FAULT_INJECTION: forcing a failure. [ 872.238475][T17349] name failslab, interval 1, probability 0, space 0, times 0 [ 872.265123][T17133] veth1_macvtap: entered promiscuous mode [ 872.329744][T17349] CPU: 0 UID: 0 PID: 17349 Comm: syz.6.2235 Tainted: G U L syzkaller #0 PREEMPT(full) [ 872.329790][T17349] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 872.329800][T17349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 872.329817][T17349] Call Trace: [ 872.329825][T17349] [ 872.329835][T17349] dump_stack_lvl+0x100/0x190 [ 872.329884][T17349] should_fail_ex.cold+0x5/0xa [ 872.329916][T17349] should_failslab+0xc2/0x120 [ 872.329947][T17349] __kvmalloc_node_noprof+0xfa/0xa00 [ 872.329972][T17349] ? __do_sys_add_key+0x244/0x460 [ 872.330015][T17349] ? strncpy_from_user+0x19d/0x2d0 [ 872.330056][T17349] __do_sys_add_key+0x244/0x460 [ 872.330098][T17349] ? __pfx___do_sys_add_key+0x10/0x10 [ 872.330137][T17349] ? ksys_write+0x1ac/0x250 [ 872.330170][T17349] ? rcu_is_watching+0x12/0xc0 [ 872.330203][T17349] do_syscall_64+0x115/0x840 [ 872.330240][T17349] ? clear_bhb_loop+0x40/0x90 [ 872.330270][T17349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.330296][T17349] RIP: 0033:0x7f0e00d9ce59 [ 872.330317][T17349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.330341][T17349] RSP: 002b:00007f0e01cd0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 872.330366][T17349] RAX: ffffffffffffffda RBX: 00007f0e01016090 RCX: 00007f0e00d9ce59 [ 872.330383][T17349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440 [ 872.330399][T17349] RBP: 00007f0e00e32d6f R08: fffffffffffffffd R09: 0000000000000000 [ 872.330422][T17349] R10: 00000000000000ff R11: 0000000000000246 R12: 0000000000000000 [ 872.330437][T17349] R13: 00007f0e01016128 R14: 00007f0e01016090 R15: 00007ffda43f4218 [ 872.330469][T17349] [ 872.517312][T17133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 872.527883][T17133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 872.705818][T11034] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.823574][ T9944] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.894811][T11034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.906089][T11016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.954222][T16830] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.972532][T11016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.986871][T11034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.125243][T16830] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.309888][ T30] audit: type=1800 audit(4294967355.108:31): pid=17396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2244" name="dbroot" dev="configfs" ino=73477 res=0 errno=0 [ 876.449756][T17391] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2243'. [ 878.470160][T17416] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 878.478508][T17416] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 879.795455][T17423] netlink: ct family unspecified [ 879.948576][T17425] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 880.802540][T17419] Process accounting resumed [ 881.612802][T17468] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2257'. [ 882.772587][T17479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2260'. [ 883.105718][T17485] i2c i2c-0: new_device: Invalid device name [ 883.197086][T17486] FAULT_INJECTION: forcing a failure. [ 883.197086][T17486] name failslab, interval 1, probability 0, space 0, times 0 [ 883.290809][T17486] CPU: 0 UID: 0 PID: 17486 Comm: syz.4.2260 Tainted: G U L syzkaller #0 PREEMPT(full) [ 883.290852][T17486] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 883.290862][T17486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 883.290878][T17486] Call Trace: [ 883.290886][T17486] [ 883.290896][T17486] dump_stack_lvl+0x100/0x190 [ 883.290945][T17486] should_fail_ex.cold+0x5/0xa [ 883.290982][T17486] should_failslab+0xc2/0x120 [ 883.291029][T17486] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 883.291092][T17486] ? alloc_inode+0x68/0x250 [ 883.291133][T17486] ? simple_start_creating+0xb0/0x110 [ 883.291165][T17486] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 883.291194][T17486] alloc_inode+0x68/0x250 [ 883.291233][T17486] new_inode+0x22/0x1c0 [ 883.291275][T17486] __debugfs_create_file+0x105/0x4f0 [ 883.291306][T17486] debugfs_create_file_full+0x41/0x60 [ 883.291335][T17486] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 883.291362][T17486] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 883.291411][T17486] ? lockdep_init_map_type+0x5c/0x250 [ 883.291441][T17486] preinit_net.part.0+0x43b/0x920 [ 883.291472][T17486] copy_net_ns+0x339/0x7c0 [ 883.291505][T17486] create_new_namespaces+0x3ea/0xac0 [ 883.291544][T17486] unshare_nsproxy_namespaces+0xf2/0x220 [ 883.291579][T17486] ksys_unshare+0x438/0xab0 [ 883.291617][T17486] ? __pfx_ksys_unshare+0x10/0x10 [ 883.291651][T17486] ? xfd_validate_state+0x129/0x190 [ 883.291675][T17486] ? ksys_write+0x1ac/0x250 [ 883.291713][T17486] __x64_sys_unshare+0x31/0x40 [ 883.291749][T17486] do_syscall_64+0x115/0x840 [ 883.291785][T17486] ? clear_bhb_loop+0x40/0x90 [ 883.291817][T17486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.291843][T17486] RIP: 0033:0x7fd1b539ce59 [ 883.291863][T17486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.291888][T17486] RSP: 002b:00007fd1b6195028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 883.291912][T17486] RAX: ffffffffffffffda RBX: 00007fd1b5616180 RCX: 00007fd1b539ce59 [ 883.291928][T17486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 883.291944][T17486] RBP: 00007fd1b5432d6f R08: 0000000000000000 R09: 0000000000000000 [ 883.291959][T17486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 883.291980][T17486] R13: 00007fd1b5616218 R14: 00007fd1b5616180 R15: 00007ffe82d255d8 [ 883.292011][T17486] [ 883.292021][T17486] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff888037cea9b8' [ 883.566019][T17487] netlink: 338 bytes leftover after parsing attributes in process `syz.6.2262'. [ 884.083504][T17492] sd 0:0:1:0: PR command failed: 1026 [ 884.114478][T17492] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 884.143129][T17492] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 884.637974][ T31] INFO: task syz.2.1962:15711 blocked for more than 143 seconds. [ 884.638005][ T31] Tainted: G U L syzkaller #0 [ 884.638021][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 884.638032][ T31] task:syz.2.1962 state:D stack:26104 pid:15711 tgid:15708 ppid:5638 task_flags:0x400140 flags:0x00080002 [ 884.638118][ T31] Call Trace: [ 884.638127][ T31] [ 884.638141][ T31] __schedule+0x1295/0x67a0 [ 884.638197][ T31] ? __pfx___schedule+0x10/0x10 [ 884.638237][ T31] ? find_held_lock+0x2b/0x80 [ 884.638271][ T31] ? schedule+0x2bf/0x390 [ 884.638308][ T31] schedule+0xdd/0x390 [ 884.638340][ T31] schedule_preempt_disabled+0x13/0x30 [ 884.638375][ T31] __mutex_lock+0xced/0x1b10 [ 884.638412][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 884.638490][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 884.638537][ T31] ? net_generic+0xea/0x2a0 [ 884.638567][ T31] ? net_generic+0xea/0x2a0 [ 884.638605][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 884.638640][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 884.638677][ T31] nfsd_umount+0x3b/0x60 [ 884.638713][ T31] deactivate_locked_super+0xc1/0x1b0 [ 884.638742][ T31] deactivate_super+0xe7/0x110 [ 884.638770][ T31] cleanup_mnt+0x21f/0x450 [ 884.638802][ T31] task_work_run+0x150/0x240 [ 884.638828][ T31] ? __pfx_task_work_run+0x10/0x10 [ 884.638856][ T31] ? rcu_is_watching+0x12/0xc0 [ 884.638889][ T31] exit_to_user_mode_loop+0x157/0x670 [ 884.638929][ T31] ? rcu_is_watching+0x12/0xc0 [ 884.638962][ T31] do_syscall_64+0x652/0x840 [ 884.638997][ T31] ? clear_bhb_loop+0x40/0x90 [ 884.639030][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.639056][ T31] RIP: 0033:0x7f4a9cd9ce59 [ 884.639078][ T31] RSP: 002b:00007f4a9dbbe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 884.639103][ T31] RAX: fffffffffffffffe RBX: 00007f4a9d016090 RCX: 00007f4a9cd9ce59 [ 884.639121][ T31] RDX: 0000200000000140 RSI: 0000200000000440 RDI: 0000000000000000 [ 884.639138][ T31] RBP: 00007f4a9ce32d6f R08: 0000000000000000 R09: 0000000000000000 [ 884.639154][ T31] R10: 0000000001010000 R11: 0000000000000246 R12: 0000000000000000 [ 884.639191][ T31] R13: 00007f4a9d016128 R14: 00007f4a9d016090 R15: 00007ffeeeb8c1a8 [ 884.639229][ T31] [ 884.639270][ T31] [ 884.639270][ T31] Showing all locks held in the system: [ 884.639291][ T31] 1 lock held by khungtaskd/31: [ 884.639306][ T31] #0: ffffffff8e7e5420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 884.639404][ T31] 2 locks held by udevd/5002: [ 884.639421][ T31] 2 locks held by syz-executor/5636: [ 884.639435][ T31] #0: ffff8880547420d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 884.639504][ T31] #1: ffffffff8ec622a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 884.639575][ T31] 2 locks held by syz-executor/5637: [ 884.639589][ T31] #0: ffff88802c51a0d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 884.639657][ T31] #1: ffffffff8ec622a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 884.639737][ T31] 2 locks held by syz.3.1927/15549: [ 884.639752][ T31] #0: ffffffff906b40c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 884.639822][ T31] #1: ffffffff8ec622a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 884.639884][ T31] 2 locks held by syz.2.1962/15711: [ 884.639898][ T31] #0: ffff88807cfe20d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 884.639965][ T31] #1: ffffffff8ec622a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 884.640040][ T31] 3 locks held by kworker/0:7/16073: [ 884.640054][ T31] #0: ffff88813fe57140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 884.640115][ T31] #1: ffffc90004a8fd08 ((work_completion)(&debugfs_reap_worker)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 884.640177][ T31] #2: ffff888036000fb0 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 884.640265][ T31] 2 locks held by getty/16131: [ 884.640279][ T31] #0: ffff8880385960a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 884.640409][ T31] #1: ffffc900043332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 884.640488][ T31] 2 locks held by kworker/u11:45/16831: [ 884.640503][ T31] 2 locks held by syz.7.2165/16934: [ 884.640518][ T31] #0: ffffffff906b40c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 884.640587][ T31] #1: ffffffff8ec622a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 884.640650][ T31] 1 lock held by syz.4.2260/17478: [ 884.640664][ T31] #0: ffff88807d0f4cb8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 884.640736][ T31] 1 lock held by syz.4.2260/17479: [ 884.640752][ T31] 7 locks held by syz.4.2260/17481: [ 884.640767][ T31] 1 lock held by syz.4.2260/17486: [ 884.640781][ T31] 1 lock held by syz.5.2265/17491: [ 884.640797][ T31] 1 lock held by syz.5.2265/17498: [ 884.640812][ T31] 7 locks held by syz.8.2267/17506: [ 884.640826][ T31] #0: ffffffff8e7d19a0 (console_lock){+.+.}-{0:0}, at: do_fb_ioctl+0x524/0x7e0 [ 884.640922][ T31] #1: ffff8880271a5070 (&fb_info->lock){+.+.}-{4:4}, at: do_fb_ioctl+0x52e/0x7e0 [ 884.640987][ T31] #2: ffff88802718aa70 (&helper->lock){+.+.}-{4:4}, at: drm_fb_helper_blank+0x1fe/0x270 [ 884.641057][ T31] #3: ffff888027186128 (&dev->master_mutex){+.+.}-{4:4}, at: drm_master_internal_acquire+0x21/0x80 [ 884.641129][ T31] #4: ffff88802718a890 (&client->modeset_mutex){+.+.}-{4:4}, at: drm_client_modeset_dpms+0x66/0x210 [ 884.641202][ T31] #5: ffffc9000355fa88 (crtc_ww_class_acquire){+.+.}-{0:0}, at: drm_client_modeset_commit_atomic+0xc4/0x7e0 [ 884.641281][ T31] #6: ffffc9000355fab0 (crtc_ww_class_mutex){+.+.}-{4:4}, at: drm_client_modeset_commit_atomic+0xc4/0x7e0 [ 884.641356][ T31] [ 884.641363][ T31] ============================================= [ 884.641363][ T31] [ 884.641374][ T31] NMI backtrace for cpu 0 [ 884.641391][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 884.641425][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 884.641434][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 884.641448][ T31] Call Trace: [ 884.641462][ T31] [ 884.641471][ T31] dump_stack_lvl+0x100/0x190 [ 884.641513][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 884.641541][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 884.641567][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 884.641631][ T31] sys_info+0x141/0x190 [ 884.641652][ T31] watchdog+0xcb1/0x1030 [ 884.641692][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 884.641725][ T31] ? __pfx_watchdog+0x10/0x10 [ 884.641760][ T31] ? __kthread_parkme+0x18c/0x230 [ 884.641795][ T31] ? kthread+0x13a/0x450 [ 884.641829][ T31] ? __pfx_watchdog+0x10/0x10 [ 884.641861][ T31] kthread+0x370/0x450 [ 884.641896][ T31] ? __pfx_kthread+0x10/0x10 [ 884.641934][ T31] ret_from_fork+0x72b/0xd50 [ 884.641960][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 884.641987][ T31] ? __switch_to+0x800/0x1100 [ 884.642025][ T31] ? __switch_to_asm+0x39/0x70 [ 884.642055][ T31] ? __pfx_kthread+0x10/0x10 [ 884.642094][ T31] ret_from_fork_asm+0x1a/0x30 [ 884.642138][ T31] [ 884.642158][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 884.642176][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 884.642215][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 884.642225][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 884.642240][ T31] Call Trace: [ 884.642248][ T31] [ 884.642257][ T31] dump_stack_lvl+0x100/0x190 [ 884.642302][ T31] vpanic+0x552/0x970 [ 884.642325][ T31] ? __pfx_vpanic+0x10/0x10 [ 884.642349][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 884.642377][ T31] ? rcu_is_watching+0x12/0xc0 [ 884.642405][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 884.642437][ T31] panic+0xd1/0xe0 [ 884.642460][ T31] ? __pfx_panic+0x10/0x10 [ 884.642485][ T31] ? nmi_cpu_backtrace+0x79/0x200 [ 884.642514][ T31] ? nmi_trigger_cpumask_backtrace+0x1be/0x230 [ 884.642541][ T31] ? watchdog.cold+0x1ec/0x234 [ 884.642569][ T31] ? watchdog+0xcc1/0x1030 [ 884.642605][ T31] watchdog.cold+0x1fd/0x234 [ 884.642638][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 884.642672][ T31] ? __pfx_watchdog+0x10/0x10 [ 884.642707][ T31] ? __kthread_parkme+0x18c/0x230 [ 884.642743][ T31] ? kthread+0x13a/0x450 [ 884.642778][ T31] ? __pfx_watchdog+0x10/0x10 [ 884.642811][ T31] kthread+0x370/0x450 [ 884.642846][ T31] ? __pfx_kthread+0x10/0x10 [ 884.642885][ T31] ret_from_fork+0x72b/0xd50 [ 884.642912][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 884.642940][ T31] ? __switch_to+0x800/0x1100 [ 884.642972][ T31] ? __switch_to_asm+0x39/0x70 [ 884.643003][ T31] ? __pfx_kthread+0x10/0x10 [ 884.643042][ T31] ret_from_fork_asm+0x1a/0x30 [ 884.643087][ T31] [ 884.643152][ T31] Kernel Offset: disabled