last executing test programs: 9m2.10498313s ago: executing program 0 (id=2901): socket(0x28, 0x1, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101040, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/ip_vs_conn\x00', 0xf00, 0x0) write$auto(r0, 0x0, 0x98c7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/eql/queues/tx-0/byte_queue_limits/stall_max\x00', 0x20800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000ec0)=""/4080, 0xff0) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/sound/ctl-led/mic/card0/reset\x00', 0xa001, 0x0) pread64$auto(r1, 0x0, 0x594c, 0x7) fanotify_init$auto(0x5, 0x2000000000002) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/radio28\x00', 0x0, 0x0) ioctl$auto(r3, 0xc02c5625, r3) 9m1.394885136s ago: executing program 0 (id=2902): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x2000000) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/pagemap\x00', 0x20000, 0x0) read$auto(r1, 0x0, 0x39b8) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x80000000000000a, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0x0) r3 = socket(0x2, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dmmidi2\x00', 0x80102, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r3], 0x14}, 0x1, 0x0, 0x0, 0x4060005}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x20940, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sg0\x00', 0x82001, 0x0) write$auto(r4, &(0x7f0000000480)='/de\xf1\xcae\x1b?\xc7r\x10\xb6\xb2\xc6\xc4\x9f\xdaiZ\'\xe79J\xa1\x1aG\xeb\xba\xa8\x99\xd0\xa6\xfa\xfdZ0\xb3\xc8\xfa\xda\xcf\x97\xba\xd6\xdf(\v@\x02\x11X\x14\x84\xbf\xb1f\x17x\xeb\xb4\xd5\xd8k\x12\xf31\xe2\xd0Bf\xc1\"\xdfg\x8fe\xf2H\xfbR\xc6\xbdm5\x06\xb2\x94\xa6o\xe3\x1bBh\xd42\x92\x98\xfa\'\xf8\xd4:\xc9\x01\xd3\x06\xd6\xfe@\xe1l\xc8\"\x1d\xb0@\xd8x\xb8\x8d\xc6\x95\x06\xc4#\xd4\xe0\b\x89\x02\xf7@\xefr\xf2\x04\x00\x00\x00\xe9\xfbY\aT\x018\xa5\x1b@\xffF\x15\xd7\x9c\xe4\xec\xff\xfd\xb1\x9aol\xb8\xc4c\x9a2!\x9f+\xe6\xdcH\x8eU\xbd\x83\x9d\xb3^\xd2\xc4\x1d\xf6\xc2\b\xe8\x85\x97\xa1\xb8\xb6\x8c\xec\xe4Pj\xc6\x9f\xb4\x99\xb3\x94\xd7|\x18\xc9M8[\xf5\x1d3\x94.L\xc1\x80\x13\xce\x02RK\xdb\xd2\x00W\x93\x8b\x89rZ\xf8\x92\xb1\x17\x95Mc,y\x02\x8f\xc7E\x05\xf2\xc7Y', 0x80000000000002) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd, 0x8, 0x948b, 0x8, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x10001, 0x7, 0x0, 0x5, 0x2]}, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002dbd7000fddbdf250200c74db7eb47d6a9d9b500", @ANYRES32=0x0, @ANYBLOB="1400020073697430000000000000000000000000080003000800000008000300ff01000008000100", @ANYRES32=0x0, @ANYBLOB="14000200766574683000"/20], 0x60}, 0x1, 0x0, 0x0, 0x90}, 0x40001) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x70a80, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42dc0, 0x1a0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b71, 0x2, 0x8000) 9m0.266870336s ago: executing program 0 (id=2909): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) shmctl$auto_IPC_STAT(0x1, 0x2, &(0x7f0000000180)={{0x5, 0x0, 0xffffffffffffffff, 0x4, 0x8, 0x80, 0xb}, 0xa, 0x80000000, 0x4, 0x6, @inferred=0xffffffffffffffff, @raw, 0x8, 0x0, &(0x7f0000000040)="b057d39cbca4ac6619c8634604cc5e27a8ae7d637d90b4536e89eaa0efc1084c0ba836b58deade55915176862bbf475882b8ff1c76b4f1009348f6a3ece7aa2944a735f97142986aa4b7a5dd8b6b3146eb2fb37dc3f7a49ebc69c33f4d1ffde17193a514121a251a413a6878df020d7a8040107a9958dc49ab0c70c0eab550049393d2298d38b4c8582f3c7296ac9b1aa208fd684a1ffce1797824bacfd1c55e1588887c1d8bc3373fdf1f4cb41d7d17461441a529bdd22a73e9f42dbb6b7e7fe6c77a586634ad3aa5e93edc7a36d0f6aa2f1527aeb5906ff41b61246c80f6505729954679d1388620cfafbb32cf7998dda85a1503380b4214", &(0x7f0000000140)="d05acb81a38634dea141f57d642daeeaaa1b1cea5a1ef00bf4eafd69fef7cc096f992e85df6af889a88dee8359aa"}) getegid() close_range$auto(0x2, 0x8, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000007480)='/dev/cec12\x00', 0x400, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) setsockopt$auto(0xffffffffffffffff, 0x10000008, 0x8005, 0x0, 0x2) setuid$auto(0xe) get_robust_list$auto(0x1, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) socket(0xa, 0x2, 0x0) unshare$auto(0x40000080) mmap$auto(0x2, 0x4020009, 0x3, 0xeb1, 0x401, 0x4000008000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x10, 0x2, 0xc) socket(0x28, 0x1, 0x0) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) mmap$auto(0x200000000000000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) 8m58.677666063s ago: executing program 0 (id=2915): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x2202, 0x0) write$auto_evm_xattr_ops_evm_secfs(r0, &(0x7f0000000200), 0x0) modify_ldt$auto(0x1, &(0x7f00000001c0), 0x10) 8m58.491469121s ago: executing program 0 (id=2916): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x224, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x20c, 0x1, 0x0, 0x1, [@nested={0x208, 0x133, 0x0, 0x1, [@nested={0x4, 0x3b}, @nested={0x4, 0xfd}, @nested={0x194, 0x82, 0x0, 0x1, [@typed={0xc, 0x12d, 0x0, 0x0, @u64=0xf8}, @typed={0x8, 0x25, 0x0, 0x0, @fd=r0}, @nested={0x77, 0xf4, 0x0, 0x1, [@generic="fbf0e8c38486b8deeeafa0fac2944370ec91bc46bd1876f1b212785836dbc8d0204fd67497d4fe94064281d78a2aed78360a24383e031cb893f422c33775fc5a7bacf8", @typed={0x4, 0x95}, @nested={0x4, 0x92}, @nested={0x4, 0x108}, @typed={0x8, 0x23, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xb}}, @typed={0x11, 0xf2, 0x0, 0x0, @str='ovs_ct_limit\x00'}, @nested={0x4, 0xf1}, @typed={0x4, 0x4a}]}, @typed={0x8, 0x3c, 0x0, 0x0, @fd=r0}, @typed={0x14, 0x98, 0x0, 0x0, @ipv6=@remote}, @generic="937dacfd7116a8a2ea5bcbbfedae6f6ea905518f3ac09fff81d365e0e6f017e31b443d2c7c54e6e6a54d300df9d0700478fd84d86e192d2fd7ea772dab00e37e32655d761a43fd9a4a19c1f59047656da798a155eca66cf3440a46aacfa14e1244f73df95f3378a011205753050cb8795cec5940aed4a9ec4bf451fc326cb02268a2e5391449d6cef23600b990af035ed946a2dd802c502160ca97419bfef4c22ce9684e61329f09b57383a23efed775594a6d9288b7850bf0481706ce712b7409966e94d3af3bc40d78b221072d6e5f24e2b0c9d548ce8d5f1784173115f6f4fd4a37f171205f9a"]}, @typed={0x14, 0xf0, 0x0, 0x0, @ipv6=@mcast1}, @generic="6d3967bdd68a434fa4c072508154d9fba017fddd503e251664e76fc3dcf827b4e613e537b1d21fe527d31b4109ad065a7826a68f3dc672ac8440a117ae23ac7e16df3758be05a242040c9663f6bf3708840f9b4b"]}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x20000000}, 0x200400d0) 8m57.938837367s ago: executing program 0 (id=2921): fchown$auto(0xffffffffffffffff, 0xee01, 0x0) mmap$auto(0x0, 0xa00006, 0x20000006, 0x800000040eb1, 0xffffffffffffffff, 0xf53) mmap$auto(0xfffffffffffffffe, 0x40000000004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3ff, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) io_uring_register$auto(0x2, 0xf, 0x0, 0x20) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon8\x00', 0x0, 0x0) timerfd_create$auto(0x0, 0x0) socket(0x2, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x80001, 0x0) write$auto(0x3, 0x0, 0xfdef) socket(0x25, 0x80001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) eventfd$auto(0x6) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x73) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) 8m42.448556776s ago: executing program 32 (id=2921): fchown$auto(0xffffffffffffffff, 0xee01, 0x0) mmap$auto(0x0, 0xa00006, 0x20000006, 0x800000040eb1, 0xffffffffffffffff, 0xf53) mmap$auto(0xfffffffffffffffe, 0x40000000004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3ff, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) io_uring_register$auto(0x2, 0xf, 0x0, 0x20) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon8\x00', 0x0, 0x0) timerfd_create$auto(0x0, 0x0) socket(0x2, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x80001, 0x0) write$auto(0x3, 0x0, 0xfdef) socket(0x25, 0x80001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) eventfd$auto(0x6) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x73) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) 2m24.579331041s ago: executing program 1 (id=4434): sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002abd7007fbdbdf25030000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000d4) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x4001090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) 2m21.108818588s ago: executing program 1 (id=4449): r0 = socket(0x2b, 0x1, 0x2) ioctl$auto(r0, 0x8941, 0x4) socket(0x2, 0x1, 0x0) socket(0x2, 0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000040)='\xfa\b\x1c\xf3\xc7\x7f\xc1Mfl\x03\xde\xd3\xcbJj\f\x1a\x88\xfe%\x98o\xa5=D0\xc7\x12\x01\x89\xeeC\xfa\x92tU\xb2\x92\xc4\x91\xd6\x8d*\xa9j\xb9Y\x1bU\x12\xa4\x1a:\x021\xc5v8\xbcnYu\x81\xca\x92\xba\x94\\%\x98i\xb3\xc5\xd8\xc42\x8bL\x83\xfc\xf5\xa7\xd1q\x01`\xf6\x8d\xb6\xa1\xc2\xf6\xc4\xa4\xe0\xce\x9f\x91*}\xae\xf0\xd6p\x19\xf8\xfew\\\x0e\xf9\v\xb9\xee\x95^\xb5\xde\xb3A\xc9\x80\t\x03\x91\\\xb1P\xa4\xc1\x0f\x80\xcd\xc0\f\xf3\xe8P\xe2\x03\xe0\x8d\x06\t\xca^\xd1N\xac\x83\x1b\xe1\x1a\xebw\xd02c\x9c\xc3\xfb\xb0\xaaS\x10\x0e\x87h\x1d0\xa1\xed%\xd0\xcarL\x1d\xb1D\xcb\xe3\x05\x89\xc2\x02\xcc{\x00*\xbedm\xd4\xeb`\x89\xb2\xc8\xa2\x00', 0x80000007) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x3c, r2, 0x1b, 0x70bd26, 0x25dfdbfb, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @fd}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 2m20.01622557s ago: executing program 1 (id=4453): socket(0xa, 0x1, 0x0) mmap$auto(0x0, 0x9, 0x3ff57697, 0x9b72, 0x2, 0x8000000000008000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) write$auto(0x3, 0x0, 0x387) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x4) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) 2m18.700623713s ago: executing program 1 (id=4458): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_hsr(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={0x0}, 0x1, 0x0, 0x0, 0x240008c5}, 0x48094) 2m16.417119067s ago: executing program 1 (id=4468): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket(0x2, 0x2, 0x88) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3ff, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, 0x0, 0x54) r0 = socket(0x10, 0x8080b, 0x6) open(&(0x7f0000000000)='./cgroup\x00', 0x68a041, 0x344) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x8000000, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40, 0x0) pread64$auto(r2, 0x0, 0x8, 0x42) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty56\x00', 0x519000, 0x0) socket(0x2, 0x3, 0xa) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0) setsockopt$auto(r3, 0x1, 0x3e, 0x0, 0xc) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) connect$auto(0x3, &(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x2}}}, 0x10000055) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) write$auto(0x3, 0x0, 0x800) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), r0) 2m10.732171603s ago: executing program 1 (id=4482): mmap$auto(0x343, 0x403, 0x8, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) mmap$auto(0x3, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_SET(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="01002dbd7000ffdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x80000) wait4$auto(0x0, 0x0, 0x2, 0x0) getuid() sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x14}, 0x1) readv$auto(0x3, 0x0, 0x1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) syz_genetlink_get_family_id$auto_seg6(0x0, r0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/nbd6/queue/zoned\x00', 0x6a980, 0x0) read$auto(r3, 0x0, 0x6) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x6, 0x1, 0x0, 0x7fffffff, 0xfffffffffffffffe) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) acct$auto(0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x80000000, 0x7000004) getpriority$auto(0x1, 0xee00) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4) socket(0x10, 0x2, 0x0) 1m55.224732735s ago: executing program 33 (id=4482): mmap$auto(0x343, 0x403, 0x8, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) mmap$auto(0x3, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_SET(r1, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYBLOB="01002dbd7000ffdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x80000) wait4$auto(0x0, 0x0, 0x2, 0x0) getuid() sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="000228bd7000fddbdf25160000000400018018000180140061000000000000000000000000000000000038000780b26942e9a791d4af762220febe3a23c786faa9250236d91f8f0ce966e24e5864eaa52427c6b6bb0ea32d75425d24130f26130b9f1800038007002900272b00000c00100006000000000000000400098088286d06f6870297f794a057a70de5226b9ffeb1ba65ac26558ec72596ab71c334a974ba41aea2ad9c094b8c8a0632acf41964f7fbed335d1e48b2496fe9266b014bebab3f53b315003a757d0794b4ca0ee5d9e70f796b8601cd629515d94ced872080c9ddda55147e89ad34724f6a84b7782d7b1233a6b62a80dfc34f774176bf7dda6b21dcaacf48ae61137f2b3d24f4080b358f8f185dc9c0799a00f8d52da9612bda467f899ba7ae0000000000000000000000fc25e5e036000000008bc66faa9830197bec7ccde9688ce728e4e7255f864fc4084312f11311956a36e61470f93c3a7af60544bd7438c50ba2e67b10f31095f6"], 0x84}, 0x1, 0x0, 0x0, 0x14}, 0x1) readv$auto(0x3, 0x0, 0x1) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) syz_genetlink_get_family_id$auto_seg6(0x0, r0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/nbd6/queue/zoned\x00', 0x6a980, 0x0) read$auto(r3, 0x0, 0x6) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x6, 0x1, 0x0, 0x7fffffff, 0xfffffffffffffffe) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) acct$auto(0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x80000000, 0x7000004) getpriority$auto(0x1, 0xee00) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4) socket(0x10, 0x2, 0x0) 7.263614912s ago: executing program 2 (id=4756): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4002015}, 0xc0) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000044}, 0x400c000) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x2}}, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x1a9842, 0x2) r2 = open(&(0x7f0000000080)='./file0\x00', 0xeee00, 0x31) sendfile$auto(r1, r2, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r4 = socket(0x10, 0x2, 0x9) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) read$auto(0x3, 0x0, 0x80) sendmsg$auto_NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000000) setxattr$auto(0x0, &(0x7f00000000c0)='ip_vti0\x00', 0x0, 0x183, 0x2) r5 = socket(0xa, 0x1, 0x84) getsockopt$auto(r5, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x9b) r6 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0xe0400, 0x0) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x1, 0x6, 0x6, "a2b8e85fc56865ba529faa000000000000000000000018f4ffffdeffff0000000000c7692a240000008000"}, 0x6, 0x5, 0x7, @raw=0x1ff, @reserved="fb99d320be0de941ac3f58d7aae0c84cbe332d618e0342771e3ac6e9a9df07cf9b1c017c611ac455c01804d0d3c89bee7005c5affd5ab811fd53443e6cf63a902991b44e48364e8de3f344584996c31f9ae16c6c4f064c38f590125ed26400", "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f4ab606c276852295e00af49090000008034"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r7, 0xc0405519, &(0x7f00000000c0)={@raw=0x81, 0x7, 0xd, 0xa4, "e3eabf11dc7386d4462bc6553245da56e4978e849db4a6e0aa4e000000000000000800", @raw=0xa2cfa1c}) getsockopt$auto_SO_ZEROCOPY(r6, 0x2, 0x3c, &(0x7f0000000080)='\xb9\x00', &(0x7f00000000c0)=0xb) ioctl$auto_USB_RAW_IOCTL_EP_READ(r6, 0xc0085508, &(0x7f0000000040)={0x8, 0x1, 0x2}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x101d0, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 6.788971689s ago: executing program 2 (id=4757): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x1, 0x1000000, 0x36, 0x828, 0x9, 0x8000000000000000, 0x9f, 0x7, 0x9, 0x8, 0x2, 0x9, 0x3, 0x8, 0x0, 0x200000000000f, 0x100, 0x1, 0x10001, 0x2cf8}, 0xe3c, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='N\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES16=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000380), r0) r2 = setfsuid$auto(0xee01) keyctl$auto(0x7, r2, 0x0, 0x0, 0x5) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000840)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f00000003c0)={0x438, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x8}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x3}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x5}, @NFC_ATTR_LLC_SDP={0x35d, 0x13, 0x0, 0x1, [@nested={0x186, 0x3b, 0x0, 0x1, [@typed={0x8, 0xd7, 0x0, 0x0, @u32=0x174c}, @nested={0x4, 0xcd}, @nested={0x4, 0x11e}, @nested={0x4, 0xac}, @typed={0x8, 0xaf, 0x0, 0x0, @ipv4=@remote}, @generic="a80c1cd34c925aa30cba64a217d9b148680f7c8a65973b64b6cf1ba2946bb24e69785da0cfca8d1363ab1b85d97416627ea45ebe25422cdf2fee54ea41dc2087c90624660aa9155057b14db3740a84fde77ee1f374ba872afbacbd115fff99ee42e94fe432b49dbe56e807826741298837026123a17844d7a6db41438fa090c4152761a4775e727b560e4a72fb3b80056d4b446591798decb91e1c7a6f5663a5e3c34266fc8dadca9228e15389b3b0056f6c0b2cd1b9d7b37de23134d2", @typed={0x8, 0x54, 0x0, 0x0, @fd=r0}, @generic="33eec86d0c41045ecee9ad068956e2c942eec17f5f11d47e942847fcde8218ac00c7625d091919d71703c3f97a1e3600c7602ea4871f88613dfda848b1ed365874b8dbbd806acf0ab80942afb93f22c33b7c96c8d979ed0f9f4dba7e921781d2b7b7c2c84c3c9f145a8f1698069c766fcd657f624e1fb18569e6b96f71091f3c7004c4715fa26c7ff5a13ac217bfedd900725c3f80c41be539ce7c6639", @nested={0x4, 0x8b}]}, @typed={0x8, 0x24, 0x0, 0x0, @uid=r2}, @nested={0xe8, 0x5, 0x0, 0x1, [@nested={0x4, 0x2f}, @typed={0xdf, 0x11c, 0x0, 0x0, @binary="0a29def71b8b611506214edba4572633a06f1ea2067084e3ffdb18c4c21190b59af4b038d417035b7ac0c65da0ed6ca2a77ef15f9d81078251a232064de6916bce41e381c0e6968aa6ce5891ba6668d816a277fe36b00da607c3632ea958b0d9cc3bb8dee89c98b6167bf2fc0dad8d0449be346a0c9839d6b9832a5396a765428233e7a3e7cd9605fa2b8cf99c800215a1063ee8313052bed324600825983366aa5be226202e1a336ea042b444acc5028e5d8149fa9ea717ab2d8ad0f738cf7badcaee133ec372e1ab8a414b5976e42790b95aa0124055f8786a79"}]}, @generic="2d3993622ee2d11e29e5c324cb6eff", @generic="3b681d2d6fc7b7f1d0b0ffc9d835b9414e7a427178c013cc22a0c7c301b229b3964b2299f2c29333cf", @generic="5df5465ea58d7229c3ecd58a1e48fea6f5c97568d464a079327391e81e1322249284213c1fb084f7ddec27bb7351cfd8ec60e6ce45830d04b706c0adf5df2464b9df921972fc50872d1538c2aa827aa12c762b847edf82009e6900490022cbd6d8dea6499a3f9e4181d9b4f68e42f52fc71a90fbcf4215c83bc9e70c26148b7ff2468e4ef3fd04c6fde2a9e2007f06e507086269df8698b9edd065ec0b224a1db1c1c115f0bbc3a2d0"]}, @NFC_ATTR_RF_MODE={0x5, 0xb, 0x5}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x3b}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x1}, @NFC_ATTR_VENDOR_DATA={0x50, 0x1f, "726e62d54012e6b3baf3e53a881fa7c97ede0fa068b1b94234fcfc058a31f7fab2e52f4418455de02e625128ef27640ce40a868fd898f80ce8664d43dd751d45fc80243262fdeb04bcc7d9f4"}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, '[}(*^'}, @NFC_ATTR_VENDOR_DATA={0x36, 0x1f, "ea8343a8df7136b048977e7baecf08eb48e44ba55bdf5c5ee6e1964f4307c04f16fd71d8694bf027c97745772ad9018d2fdf"}]}, 0x438}}, 0x20000000) r3 = socket(0x10, 0x2, 0xc) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ppoll$auto(&(0x7f0000000000)={r4, 0x8, 0x6}, 0x7, 0x0, 0x0, 0x8) sendmmsg$auto(r4, &(0x7f0000000140)={{&(0x7f0000000040), 0x84c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x800009}, 0x1, 0x20000000) socket(0xb, 0x1, 0x6) r5 = socket(0x23, 0x2, 0x0) ioctl$auto(0x8000000000000001, 0x89ef, 0x9) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000e3d2bfb10310aa6952b6d71e1dd2ceb6835fe9b894a20a4b8b9ac26b8f062d931c2e114ebffaa558c99247c5eb8c92eeb33d469ac7356db5d59b1f651bf8ea31fddcdf91d5d5fbd8fcd84e", @ANYRES16, @ANYBLOB="10002cbd7000fbdbdf250a00000a"], 0x14}}, 0x0) pipe2$auto(&(0x7f0000000000)=r5, 0x2) 5.668257007s ago: executing program 3 (id=4761): pipe$auto(0x0) r0 = clone$auto(0x4, 0x80000001, 0x0, 0x0, 0xfff) move_pages$auto(r0, 0xd0, 0x0, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/loop13/rqos/wbt/inflight\x00', 0x2040, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) r2 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r2, 0x0, 0x2) sendfile$auto(r1, r1, 0x0, 0x2) 5.524021646s ago: executing program 2 (id=4762): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptyp5\x00', 0x48140, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/irq/2/hwirq\x00', 0x103080, 0x0) read$auto(0x3, 0x0, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nbd0/queue/max_integrity_segments\x00', 0x303000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b75, 0x7, 0x7) socket(0xa, 0x80000, 0x1) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0xb) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = getsockopt$auto(0x3, 0x200000000001, 0x3, 0x0, 0x0) getsockopt$auto_SO_RCVLOWAT(r2, 0x6, 0x12, &(0x7f0000000000)='/dev/ptyp5\x00', &(0x7f00000000c0)=0x8003) r3 = getsockopt$auto(0x4, 0x6, 0x6, 0xfffffffffffffffc, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) read$auto_proc_single_file_operations_base(r3, &(0x7f0000000140)=""/144, 0x90) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/o2cb/logmask/HB_BIO\x00', 0x102, 0x0) sendfile$auto(r4, r4, 0x0, 0x7) listen$auto(0x3, 0x84) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.698714158s ago: executing program 5 (id=4765): r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0) sendmsg$auto_NL80211_CMD_DEL_STATION(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000300)={0x14, r1, 0x10, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4004080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mq_open$auto(&(0x7f0000000700)='\a\\|\n\xea\x87d\xe1c\xa7~', 0x76d0, 0x101, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffffff01, 0x9, 0x9, 0x80000001, 0x7, 0x8, 0x5, 0x5, 0x9, 0x2, 0x8, 0x5, 0xf, 0xffffffffffffffff, 0x9, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x800, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00{', @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf250200000008002700"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.629494712s ago: executing program 3 (id=4766): r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$auto_VHOST_GET_VRING_BASE2(r0, 0xc008af12, &(0x7f0000000100)={0xff, 0x3}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000229bd7000fbdbdf25022000a6"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001d80)=ANY=[], 0x1374}, 0x1, 0x0, 0x0, 0x200480d0}, 0x20040000) r2 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r3 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r3, 0x0, 0x1) write$auto_proc_clear_refs_operations_internal(r2, 0x0, 0xffffff4b) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r4 = socket(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) ioctl$auto(0x3, 0x800005411, 0x38) r5 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x604142, 0x0) r6 = prctl$auto_PR_SET_SECCOMP(0x16, 0x3c1e, 0x0, 0x800, 0x8) ioctl$auto_XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000040)={r6, 0x0, 0x7, 0x7fffffffffffffff, 0x1, 0xdb, [0x6, 0xf9, 0x4, 0x8000, 0x6, 0x2]}) 4.201278415s ago: executing program 5 (id=4768): prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400, 0x3fffffffff) setreuid$auto(0x0, 0x5) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) 3.821274067s ago: executing program 5 (id=4769): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x21, 0x2, 0x2) setsockopt$auto(0x3, 0x1000000110, 0x2, 0x0, 0xdf) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/dev\x00', 0xc0c03, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000085c0)=""/89, 0x59) read$auto(r1, 0x0, 0x1) mmap$auto(0x9, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/tracing_thresh\x00', 0xc0000, 0x0) preadv$auto(r2, 0x0, 0x9, 0x9, 0x14) mmap$auto(0x0, 0x400005, 0x800000000000df, 0x9b72, 0x2, 0x8000) madvise$auto(0x8000000000000001, 0xffffffffffff0000, 0x15) add_key$auto(0x0, 0x0, 0x0, 0x1, 0x8010) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x40000) msgget$auto(0xc, 0x77d9) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x102, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r3, 0x41015500, &(0x7f0000000300)={"5adef7dee7f7018957844cff29ed32b5e06502a30816a7b0342aecf5f00ba22f9f22c23d86776e7d6063852dc51b297d7b2b2c3f6165dd465564daa9a2cca3b9b9c39d9bbb61b295c05500b6fe0b8472ba8186c035fd2688b67c36b68ceca32e2224537de625d65efabc41094dbaf17f9de8de04b004d05ab550d26bfed7346e", "6a1bad4244cddabc5ab8d84a2115e0e70d0facb940aa64b6d9eaff2ae6bd7c5dcfe4787051d626364b7ae8d7ba0abae4889b7d58e1d448845d4af2ae37e050ae399379b385e9baf152e042e71a82d23e1948a0361be893b768934ff405d41b80790ac47f793c6e9bf2a139c3504753c3fc1f121a0e28e4b321ca335318fe4dea", 0x2}) msgrcv$auto(0x0, 0x0, 0xff9, 0x0, 0xb1) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x1}, 0x8, 0x101) socket(0x10, 0x2, 0xc) r4 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/pcmC1D0p\x00', 0x5, 0x0) writev$auto(r4, &(0x7f0000000540)={0x0, 0x9}, 0xff) socket(0x2a, 0x3, 0x93f) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/route\x00', 0x0, 0x0) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) mmap$auto(0x0, 0x48, 0xdf, 0x9b72, r4, 0x20000000008000) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0xc080) 3.382077329s ago: executing program 3 (id=4770): mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x1, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_BULK32(r1, 0xc0105502, &(0x7f00000002c0)={0x6, 0x7fff, 0x4, 0x8000}) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback}, 0x55) ioctl$auto_MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000080)={&(0x7f0000000000)={0x1, 0x4, 0x80, 0xb5, 0x6, 0x7, 0xb, 0x9, 0xffffffffffffffc3, 0x18, 0x81, 0x8, 0x1ff, @setup="0f4c7d42e5947a67", 0x8000, 0x100, 0x9, 0x6}, &(0x7f0000000040)="2d4092152205180fe69f2d3597e3d670424f3072b332f907ee05ceb3c30eb06f", 0x3}) msgctl$auto_IPC_SET(0x979, 0x1, &(0x7f0000000140)={{0x7ff, <r2=>0xffffffffffffffff, 0xee00, 0x100, 0x1, 0x200, 0x7}, &(0x7f00000000c0)=0x9, &(0x7f0000000100)=0x3, 0x1, 0x40, 0xd, 0x4, 0x5, 0x2, 0x4, 0x9, @inferred=0xffffffffffffffff}) fstat$auto(r0, &(0x7f00000001c0)={0x3, 0x3, 0x0, 0x8000, r2, 0xffffffffffffffff, 0x0, 0xa616, 0x5f65, 0x80, 0x5, 0x7, 0x2, 0x7fffffffffffffff, 0x0, 0x6, 0x1}) 2.912069394s ago: executing program 5 (id=4772): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4810}, 0x8811) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) iopl$auto(0x2) iopl$auto(0x1) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x1, 0x800000000df, 0x9b72, 0xffffffffffffffff, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x2) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x5, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000001500)='/proc/kpagecgroup\x00', 0x101000, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf5}, 0x7) read$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x29, 0x0, 0x10001) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r1) socket(0x2, 0x1, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) r3 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$auto_proc_page_owner_operations_page_owner(r3, &(0x7f0000002080)=""/4096, 0x1000) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, 0x0) 2.415308212s ago: executing program 4 (id=4774): pipe$auto(0x0) r0 = clone$auto(0x4, 0x80000001, 0x0, 0x0, 0xfff) move_pages$auto(r0, 0xd0, 0x0, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/loop13/rqos/wbt/inflight\x00', 0x2040, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) r2 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r2, 0x0, 0x2) sendfile$auto(r1, r1, 0x0, 0x2) 1.903697169s ago: executing program 3 (id=4775): r0 = socket(0x2, 0x5, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) utimes$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x8, 0x2}) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xffe0}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 1.83267911s ago: executing program 4 (id=4776): mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x2, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x50bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="ffffe000"]}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200000000006}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880) lsm_list_modules$auto(0x0, 0x0, 0x0) io_uring_register$auto(0x2, 0xd, 0x0, 0x20) io_uring_setup$auto(0x5, 0x0) pwrite64$auto(0xc8, 0x0, 0xfdf2, 0x3a) rseq$auto(0x0, 0x7f, 0x3f22, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x26, 0x80805, 0x0) 1.695295821s ago: executing program 2 (id=4777): r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0) sendmsg$auto_NL80211_CMD_DEL_STATION(r0, &(0x7f00000006c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000300)={0x14, r1, 0x10, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4004080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mq_open$auto(&(0x7f0000000700)='\a\\|\n\xea\x87d\xe1c\xa7~', 0x76d0, 0x101, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffffff01, 0x9, 0x9, 0x80000001, 0x7, 0x8, 0x5, 0x5, 0x9, 0x2, 0x8, 0x5, 0xf, 0xffffffffffffffff, 0x9, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x800, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00{', @ANYBLOB="000326bd7000fedbdf2502000000080027000e"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.518633567s ago: executing program 4 (id=4778): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1ca6ffff", @ANYBLOB='^\x00', @ANYRES32, @ANYRES32, @ANYRES64, @ANYRES32], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 1.467766758s ago: executing program 4 (id=4779): arch_prctl$auto(0x5005, 0x200000000000006) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) writev$auto(r0, &(0x7f0000000100)={&(0x7f0000000000)='e', 0x407116}, 0x8) 1.335014462s ago: executing program 2 (id=4780): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioperm$auto(0x7, 0x6, 0x1) openat$auto_mon_fops_stat_usb_mon(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/16s\x00', 0x40000, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x500, 0x0) mmap$auto(0x0, 0xb, 0x72, 0x8b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(0x6, 0x40000000029, 0x1e, 0xfffffffffffffffe, 0x0) unshare$auto(0x40000080) acct$auto(&(0x7f0000000080)='/proc/sys/kernel/sched_deadline\xdcBH\xc7H\xe2\x1d\b\x00ax_us\x00\xae\xb5\x86\xe9\xf6\xfe\x9b6\x91\x8f\x158\xe7qwI\t0\xc3\xd1\xcd\xf5\x04\xe0B\xe0U<\xb1\x1d\xda\xd2') openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/flags\x00', 0x111142, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) read$auto_tracing_pipe_fops_trace(0xffffffffffffffff, &(0x7f0000000100)=""/70, 0x46) setresuid$auto(0x2, 0x7, 0x8080) ioctl$auto(r1, 0x4b3a, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x8502, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) write$auto(0xffffffffffffffff, 0x0, 0x0) set_mempolicy$auto(0x4005, &(0x7f0000000000)=0x1, 0x4) io_uring_register$auto(r0, 0x80, &(0x7f0000000240)="89cb92b4015e75fcfb76862efb1f38685d5d0906c31f6a23a61374f4071c09b4bfb0bee1c83bb920dc13b470b60b60d664b688eff561ae914e32da4779e0d6c6f1300e158bfcc179fa82dbdfdefebef014217443721b51426045f8405f25f581fdaa2bb52dc0ca73860d6393a74d1a0bb2ff3f6d6f404150f190b22c6000fffbfce06d7bcaf068af5bfba809446e81bd88de11eca4807a7689e9a9", 0x3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) 870.522522ms ago: executing program 5 (id=4781): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000003, 0x7) fanotify_init$auto(0x4f1, 0x1) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x80802, 0x0) ioctl$auto(0xffffffffffffffff, 0x7, r0) getxattr$auto(0x0, 0x0, 0x0, 0x4f) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x200, 0xfffffffffffffff8, 0x1004000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x4) memfd_secret$auto(0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x8, 0xfffffffffffffffa, 0x13, 0x3, 0x0) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r1, 0x7cb, 0x0) socket(0x10, 0x2, 0x0) r2 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x18200, 0x0) read$auto_proc_page_owner_operations_page_owner(r2, 0x0, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, 0x0, 0x82180, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) pipe2$auto(0x0, 0x80) fcntl$auto(0x0, 0x407, 0x100000) 832.092374ms ago: executing program 4 (id=4782): mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x2, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x30, r1, 0x1, 0x50bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200000000006}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8880) lsm_list_modules$auto(0x0, 0x0, 0x0) io_uring_register$auto(0x2, 0xd, 0x0, 0x20) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon8\x00', 0x881, 0x0) ioctl$auto_MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0, 0x4}) io_uring_setup$auto(0x5, 0x0) pwrite64$auto(0xc8, 0x0, 0xfdf2, 0x3a) rseq$auto(0x0, 0x7f, 0x3f22, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x26, 0x80805, 0x0) shmctl$auto_SHM_UNLOCK(0x878, 0xc, &(0x7f0000000100)={{0x175, <r3=>0xee01, 0x0, 0x9, 0xfffffffc, 0x4, 0x8906}, 0x8000, 0x2, 0x5, 0x1, @inferred, @raw=0x81, 0x2, 0x0, &(0x7f0000000000)="4fb5f1df743a291955aff9e35451930f76c723080f7d77eccb242670c91c7b216bb595af1a49af6ca36b2ab3a9dad39f1dca4628168c9f8fbff11fcb97300df3de23b29d9518e17a21c09a95948d18e1ea5612ed6b8930f86196df1e5f741f3ede9bca26df54155acac71529239f58523b851cb3d02794c69d4566faf77da72de8aa3afe7088b57930af2b57cbe47653448f6c892ff12224916f632937f44521d2f7ff8aa41a370a81102624670217e985cff59a660dcb261daea2a0fe6a309893159829ec43ea0fb18686c5b669456feadfd4a6eb3a7ec8", &(0x7f0000000200)="8e854453936535ad24d233df8c5235d90f77dc7c96a5f94409ac6235e7d252efc617a681649149e2d768987d6ec86b62f42e22cca77c006d984fd8a91faaead9243e1e1d14efec031ae811dad2e70a4b7370907cdcde709c7dc3ee9055eede9c6c2f1eebff862148df1a00b612c77fdf951d100db131cd6de2468f6d5990155dd35912425dcb60a69802e8c18aedd229712855744c1a505161d7af1ef6a7ae1b997440a75cd939b6efaf9cdfda386577cf0536606d7736eb1a1953ad89e495e1e9e1d7e775c19d35fb1c22c4e92ecaf9d3622447777c97a1dfc2afdc1033132ca1ab7fe3848b70"}) setreuid$auto(r3, 0x0) 556.413507ms ago: executing program 3 (id=4783): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/lockd/parameters/nlm_grace_period\x00', 0x8001, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 553.17694ms ago: executing program 5 (id=4784): pipe$auto(0x0) r0 = clone$auto(0x4, 0x80000001, 0x0, 0x0, 0xfff) move_pages$auto(r0, 0xd0, 0x0, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/loop13/rqos/wbt/inflight\x00', 0x2040, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) r2 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r2, 0x0, 0x2) sendfile$auto(r1, r1, 0x0, 0x2) 92.522926ms ago: executing program 3 (id=4785): mmap$auto(0x2, 0x8, 0xe91, 0x800000019, 0xffffffffffffffff, 0x8000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) mq_notify$auto(r0, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid}) mmap$auto(0x0, 0x2020009, 0x81, 0xeb1, r1, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/mtd-0/min_bytes\x00', 0xc0002, 0x0) read$auto(0x3, 0x0, 0x80) write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x80) sendmmsg$auto(r1, &(0x7f00000000c0)={{0x0, 0x2, 0x0, 0xa7, &(0x7f0000000140)="346afcc2ec1717dd5f9e30307c80920a3f58e736e759105f87a4225f71d0d03d00"/58, 0x8000, 0x8000}, 0xffffffff}, 0x7, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x200007, 0x8) r3 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mmap$auto(0xd, 0x8a3a, 0x78e, 0xfffffffffffff373, r2, 0x8) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x80202, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x2, 0x9, 0x3, 0xb, 0x5, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x3, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb2, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000001200)={0x6bc582, 0x81, 0x11}, 0x18) acct$auto(&(0x7f0000000000)='/dev/ptyw5\x00') 2.237659ms ago: executing program 2 (id=4786): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) write$auto(0x800000000000c8, 0x0, 0x1a) r0 = socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) getsockopt$auto(r0, 0x29, 0x37, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r1, 0x0, 0x39b8) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000000), 0xffffffffffffffff) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) 0s ago: executing program 4 (id=4787): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bpq5/addr_assign_type\x00', 0x181100, 0x0) r1 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace_options\x00', 0x4c2801, 0x0) write$auto(r1, 0x0, 0x2) (async) lsm_set_self_attr$auto(0x3, 0xfffffffffffffffc, 0x1f, 0x8000000000000000) (async) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), 0xffffffffffffffff) (async) write$auto(r0, &(0x7f0000000900)='j\xa2\xb1\n\xb4\xd3\x00\x00\x00\x00\x8e\xc4\x97\x8a\x10\xd5<\xa7J\xb1\x00$\xd6\xfd\xca}\xa3\v\xfc7\x93S8\x02\x88pmh\x14\x86p\x04\\8\xe1|\xa8s\xa7\xdbLq\x0e\xdb\xa7\xb3\x94R\xb3D0\xf1Uf\a\x9f4\xb0\x957\xa6\xcd\xeb\x87^I\xf4\x0f\x18\x80h\xaau\x94\x1c\xd1\xb1c\xafZ\xb1\xf3\v\xd5\x1f\x14\x8c\x1bi\x90\xc8[\xecE\xfdwm\xb6\xf1Wj\xab\xfcIU\xce9\b\xcc\xfc&G*\xe5\x96\x91x\x93}$\x813*\xd4\x16\'w\xad<\xf6\xb1\xd2\xe5\xc3\x19\xfb\x15\xd5U\x80BL\xd8\x19\'\x19\b8\x96\xfb\x9f\xf9y\xf0:\xa18\xd8s\xf6~\x86\x84\xd6\xc1\xdaGo\xcc\xe1\xedq\x06\xb8\xb5\xaf4\xa3\xf5\xf0\xd1\xc13F\xfa.\xf0\"\x12\xe4\x1a\xed\xb7\xaeC\xceDwn\xc5C3v&%\xe0\xe7\xc6\x89\xbb\nH\x0fF\xdc\x03\xba\x18Y\x9d\x7f\xc8B\xfai\x8f]\xcf\x11F\xcb4\x90\x84\n\xea\xd0\x1d0\xb5\xcc\x1f\xf8\xf7\xbb\xf6\xb0\xc3D\xffb\xdchM\xeaq`\xc3\x9bfw\x9d|m0:\xd3\xb3$\xabJ\x84b\x1d\x12\xd0\xf7{\x19\x1cu\x94\x85\xd7\xf7\x88\x8a\xb1\x1c\xc3\x8d\x85.\xb3\xebE\xc2\xa5\r\xf7l\xdd~\xfe\a\xd5K\xb0\v}_\x92s\x9a\x06\x06\xa9I\x86\xc4\xdc\x83\x03\r\x93HXz4\xed\xa5\xd2f3E\xc6\xb7)\x1d\xb2^\x8a\x0e\x1bv\x10\xeffv\x95|\xfb+|\b\xf5\xf4\"t\xd5\xf3%\xb0\x12Y\xa4\xbf\xf8\xb8\xeaF\x91\x96\x9dO`\xf0Pv\xb9\xeb\xf7\xc6\xd7\n\x90B\xe9\f\x8c)\x83iYy\xf3\n\xd7\xbb\x19\xe9~\xbc\x8f\xf4\xda\xcc\xfe6nu\xb8\x82l\x1djc\xe9\xce\"\x1a\x19:G\xa3\xb5\xd34\xe3\xf9>\x91*\xb4\xd7M\xa7\xd3\x19\xed\xf3\xbb\xd8\xb6_\xdb\xec\xacM\xb1\xfc\xcd^\xd1\x18\xf6\t\x12\xdd\n\x16VT\xedT\xa2J\xa4\xe4{\x12\x8df\xed\xd9Q.\xd7\x03+?\r\x98J\x9a\x13\x17\x9c1\xe6\xf7\xaf\x99k&\x96w\xa5\x0e \x01\xe5\xeb\x92\xe2\xd5\xc0\x88D\x06tE\xeb~q>T\x0f\xfa\x1e\xea\xb9H\x1a\xf9VHW;D\xc0\x98\ncs\xbf\xe48*\x8b\ry\x9di\xb2=\xeaI\xd6\xec\xd9\xf6\x15\xf9\x02R\xd0\xaeb\xe0\xab\x01\xb6R\xbc\x88\x13r:\x9a\x99\xc0\x81\x01\xd7\xe2\xcd\xe5\x1f9+\xd2hOp\x95\xf0\x18x\xda{\xbe\x82\xa7\xc1\xbdZ\xc1\xa2o\xae\x13w\xd6\xe3\xfe\x91\x81\x9c\xbb\x9d\x9a\x10\xf9\xd7\xcc\'\xdc\xbf\x1b\xd0\x14F\x19\x86\x9b\xeb\xce\xba\xe4*\x8a\x11\x1b=\xa6\x89Y\x1b\xa2\xde\xac\x0e[N\xb4\xd7x!\x95\xbb%\xb3o\x00\xc3\x9f\xaa(\xac\xf7\xcc\xe6\xeb\x97\xab\xabz\xd5\xe8\x15:\xd8Ck\xed.\x81\xa0I:Vs0\xe6\xf5jE\xff\xd1\xd8\x1bHQXd-ifA\xdcO\xfb\xe4\xca\xcb\xc0\xd8~\xf1\xb2u\xb1B-\x90\xfe\xd5\xe7\x85\xea /\xa0\r|\x04\x8fG\x8e\x8e\x8d{\xbd\x9bb\x02\x96d\'\xc7\"_\b\xae\xef\xdb\xa8dqY\xaa\x13]H\xe0\xf9\x8a\xa2\xec\xb0eI\x9f\xc9\x8bhw\xcfTG\xdf\x19\x83\x04\xe7\xa4\xa21\xbd\"\x89\xb9\xc2\xe8\xad\x1aR-\x95\x10\xde(\x01\xbf\xe0\x04b\x84S\au\r\x1d\x8c\x19\x81\xb8\xf2\xcd\a\xe3-\xc6\x82O0\x14\v}^\x00\x00\xca\x1f\x83\x85z\x81\xd9\xa3\xbc\xac\x1e\xf4\xfb\xef9t\')\xe1Q\x03\x80\xcc\x13\xd5\x16\x03\xe7\xab\xf2a\x9a}4]\xbd\xb6\x98\x02\xa2\"$\xb9\x9cb\xfc<\x99\xd1S\x9e=\xd7w66\xf4\x86\v\x00`\x95\x1bT\x0f\"\xe9P\x85UR\xbc\xda\x1fH\x9c\x00\x00\x00\x00\x00\x00\x00\b-LW\xc4\x91\x17\xc5\x86,N6\x9e\xa6\xeb@VA\xf6\xd0\x14\xcc{:', 0x8) (async) mmap$auto(0xfffffffffffffffc, 0x4020008, 0x240, 0xeb1, 0x401, 0x4d4) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x3a88) (async, rerun: 64) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) (async, rerun: 64) memfd_create$auto(0x0, 0xb) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x801, 0x84) (async, rerun: 64) getsockopt$auto(r1, 0x7ff, 0x40004, 0x0, 0x0) (async, rerun: 64) setsockopt$auto(0x400000000000003, 0x29, 0x46, 0x0, 0x3) (async) connect$auto(0x3, 0x0, 0x55) (async, rerun: 64) r2 = pipe$auto(&(0x7f00000000c0)=r1) (rerun: 64) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) fcntl$getown(r2, 0x9) (async) process_vm_readv$auto(0x0, &(0x7f0000000380)={&(0x7f0000000140)="03108b7780a1c8b786546381485cb3e63c94d0292cdd141d5b8df7d022067c2644b43f0cd45dd93b536b4c42d728c1a27c38f483811e543935f7e1e6cb98fede", 0x6e1c}, 0xb, &(0x7f0000000440)={&(0x7f0000000200)="84284183153f7008bc7fc016edf33ac86733fd9fba67df0cfe0d306c09000000fd6306db725195aa528f47d6a72ea3879400000000b95983611c822de8686eda214836bf020ab756185843229c95216bec7a0dd993245087a519e4b44e364c669ac0984f0b7ef9131a393a5c94043b23eeefe341880d52d4f806d6a5b2564722d9cb47d5a4512bdc173c929502f3da8ea0e840fe90356dce007fbce1fbff7be10088f9a4a8e200000000", 0x3}, 0x2, 0x3fffffffc) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3, 0x52109cdd, 0x16, 0x403, 0x8000) (async) r3 = socket(0xa, 0x5, 0x0) getsockopt$auto(r3, 0x84, 0x3, 0x0, 0x0) (async) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x2ca943, 0x0) ioctl$auto_MON_IOCG_STATS(r4, 0x80089203, 0x0) (async) r5 = socket(0x11, 0x6, 0x1) sysfs$auto(0xfffffffe, 0x2, 0x0) (async) setsockopt$auto(r5, 0x107, 0x8, 0x0, 0x6) (async) read$auto(r0, 0x0, 0x2) kernel console output (not intermixed with test programs): ��������������������������������� ������� � �������� ����� �� � �������� �������� �������� ���� ������� �� � ��� � �� ���� � �� ���� � ����� �� ����� �� �������� �� � �� ���� ���� ���� ���� ����� ���� ���� ����� ���� ���� ���� ����� ����� ���� ����� ����� ����� ����� ���� ���� ���� ���� ��� � ������������������������������������������������������������������� ������ �������� ����� �� � �������� �������� �������� ���� ���� ����� ����� ����� ����� ����� ����� ���� ����� ���� ����� ����� ���� ���� ��� � ������������������������������������������������������������������� ������� � �������� ����� �� � �������� �������� �������� ����� ���� ��� � �� ���� � �� ���� � ����� �� ����� �� �������� �� � �� ���� ���� ���� ���� ����� ���� ���� ����� ���� ����� ����� ����� ����� ���� ���� ���� ���� ����� ����� ���� ���� ����� ����� ���� ���� ����� ���� ����� ����� ���� ����� ����� ����� ���� ���� ����� ����� ����� ����� ����� ���� ���� ���� ���� ����� ����� ���� ���� ���� ��� � ������������������������������������������������������������������� ������� � �������� ����� �� � �������� �������� �������� ���� ��� � �� ���� � �� ���� � ����� �� ����� �� �������� �� � �� ���� ���� ���� ���� ���� ���� ����� ���� ���� ���� ����� ����� ����� ���� ����� ���� ����� ����� ����� ���� ����� ����� ���� ����� ����� ����� ����� ����� ���� ����� ���� ���� ��� � ������������������������������������������������������������������� ������� � �������� ����� �� � �������� �������� �������� ���� ��� ����� � � ��� ��� ����� � � ��� ��� ��� �� ��� �� ����� � ��� �� ����� � ��� ����� � � ��� ��� ����� � � ��� ��� � �� ���� � �� ���� � ����� �� ����� �� �������� �� � �� ���� ���� ���� ���� ����� ���� ���� ����� ���� ���� ���� ����� ����� ����� ����� ����� ����� ����� ���� ����� ����� ����� ����� ����� ����� ����� ����� ����� ���� ���� ����� ����� ����� ����� ����� ���� ���� ���� ��� � ������������������������������������������������������������������� ������� � �������� ����� �� � �������� �������� �������� ���� ��� � � �� ��� ����� � � ��� ��� � �� ���� � �� ���� � ����� �� ����� �� �������� �� � �� ���� ���� ���� ���� ���� ���� ���� ����� ����� ����� ���� ����� ����� ����� ����� ���� ����� ���� ���� ��� � ������������������������������������������������������������������� ������� � �������� ����� �� � �������� �������� �������� ���� ��� ����� � � ��� ��� ����� � � ��� ��� � �� ���� � �� ���� � ����� �� ����� �� �������� �� � �� ���� ���� ���� ���� ����� ���� ���� ����� ���� ���� ���� ����� ����� ����� ����� ����� ����� ����� ���� ����� ����� ����� ����� ����� ����� ����� ����� ����� ���� ���� ����� ����� ����� ����� ����� ���� ���� ���� ��� � ������������������������������������������������������������������� ������� � �������� ����� �� � �������� �������� �������� ���� ����� �� �� � ��� � �� ���� � �� ���� � ����� �� ����� �� �������� �� � �� ���� ���� ���� ���� ����� ���� ���� ���� ����� ����� ����� ����� ����� ����� ����� ���� ����� ����� ���� ���� ���� ����� ����� ����� ����� ���� ���� ���� ���� ��� � ������������������������������������������������������������������� ������ �������� ����� �� � �������� �������� �������� ���� ���� ����� ����� ���� ����� ����� ���� ����� ����� ����� ����� ����� ���� ����� ���� ���� ��� � ������������������������������������������������������������������� ������� � �������� ����� �� � �������� �������� �������� ���� ������ �� � � � �� � � �� �� �� ������ �� � � � �� �� �� �� �� ��� �� ����� � ��� ����� � � ��� ��� ����� � � ��� ��� �� ����� � ���� ������� ��� ��� ��� ����� � � ��� ����� �� ��� ��� �� ��� �� ����� � ��� ����� � � ��� ��� �� ����� � ��� ����� � � ��� ��� ��� �� ��� �� ����� � ��� ����� � � ��� ��� � �� ���� � �� ���� � ����� �� ����� �� �������� �� � �� ���� ���� ���� ���� ���� ����� ����� ����� ����� ����� ����� ���� ����� ����� ���� ����� ����� ���� ���� ��� � ������������������������������������������������������������������� ������� � �������� ����� �� � �������� �������� �������� ���� ��� ����� � � ��� ����� �� ��� � � �� �������� ��� �� ����� � ��� ����� � � ��� ����� � ���� � �� ����� ������ ��� ����� � � ��� ��� ����� � � ��� ��� � �� ���� � �� ���� � ����� �� ����� �� �������� �� � �� ���� ���� ���� ���� ����� ����� ���� ���� ���� ���� ����� ����� ����� ����� ���� ����� ���� ����� ����� ����� ����� ����� ���� ����� ���� ���� ��� � ������������������������������������������������������������������� ������� � �������� ����� �� � �������� �������� �������� ���� ���� �� � ���� �� � ����� �� ��� �� ����� � ��� ����� � � ��� ��� � �� ���� � �� ���� � ����� �� ����� �� �������� �� � �� ���� ���� ���� ���� ���� ���� ���� ����� ����� ����� ���� ����� ����� ����� ����� ���� ����� ����� ���� ���� ��� � ������������������������������������������������������������������� ������� � �������� ����� �� � �������� �������� �������� ���� ��� ������� �� �� ����� � �� ����� � � ��� ����� �� � � � �� � ��� ���� � �� ����� � � ��� �� ����� � � ��� ���� ������� �� ����� � � ��� �� �� ����� � �� �� ����� � �� ����� � � ��� �� �� ����� � �� ����� � � ��� �� ����� � � ��� �� �� ����� � �� ����� � � ��� ��� � � �� ���� �� ����� �� ������� �� � �� ��� ��� ��� ��� ��� ��� ���� ���� ���� ��� ���� ���� ��� ���� ���� ���� ���� ���� ��� ��� ��� ���� ���� ���� ��� ���� ���� ��� ���� ���� ���� ��� ��� ��� ���� ���� ���� ��� ��� ���� ���� ���� ���� ���� ��� ���� ���� ��� ���� ���� ���� ��� ���� ���� ���� ���� ���� ���� ���� ���� ���� ���� ���� ���� ���� ���� ��� ���� ���� ���� ���� ���� ���� ���� ���� ���� ���� ���� ���� ���� ��� ���� ���� ��� ���� ���� ���� ��� ��� �� � ������������������������������������������������������������������ ����� ������� ���� �� � ������� ������� ������� ��� ����� �� � ����� �� � ����� �� � ������ ��� ��� ��� ��� �� � �� � �� � �� � �� � ��� ��� �� � ��� ��� �� � �� � �� � �� � �� � �� � �� � �� � ��� ��� ��� ��� �� � �� � �� � �� � �� � �� � � �� ��� ��� �� � ��� ��� �� � �� � �� � �� � �� � �� � ��� �� � �� ������� ��� ��� �� �� �� � �� ��� � �� ���� � ��� � � �� ���� �� ����� �� ������� �� � �� ��� ��� ��� ��� ���� ���� ��� ��� ��� ���� ���� ���� ���� ��� ���� ��� ���� ���� ���� ���� ���� ��� ���� ��� ��� �� � ������������������������������������������������������������������ ������ � ������� ���� �� � ������� ������� ������� ��� ���� �� ����� �� ������� �� � �� ��� ��� ��� ��� ��� ��� ���� ���� ���� ��� ���� ���� ��� ���� ���� ���� ���� ���� ��� ��� ��� ���� ���� ���� ��� ���� ���� ��� ���� ���� ���� ��� ���� ���� ��� ���� ��� ���� ���� ���� ��� ���� ���� ���� ��� ���� ���� ���� ���� ���� ���� ���� ���� ���� ���� ���� ���� ���� ���� ��� ���� ���� ���� ���� ���� ���� ���� ���� ���� ���� ���� ���� ���� ��� ���� ���� ��� ���� ���� ���� ��� ��� �� � ������������������������������������������������������������������ ����� ������� ���� �� � ������� ������� ������� ��� ����� �� � ����� �� � ����� �� � ������ ��� ��� ��� ��� �� � �� � �� � �� � �� � ��� ��� �� � ��� ��� �� � �� � �� � �� � �� � �� � �� � �� � ��� ��� ��� ��� �� � �� � �� � �� � �� � ��� ��� �� � ��� ��� �� � �� � �� � �� � �� � �� � ��� �� � �� ������� ��� ��� �� �� �� � � �� ��� ��� ��� ��� ��� ��� ��� ��� ��� ������� ��� ������� �� � �� ��� � �� ���� � ���� �� ����� �� ������� �� � �� ��� ��� ��� ��� ���� ��� ��� ��� ��� ���� ���� ���� ��� ��� ���� ���� ���� ��� ���� ���� ���� ���� ���� ��� ��� ��� ���� ���� ��� ���� ��� ��� �� � ������������������������������������������������������������������ ������ � ������� ���� �� � ������� ������� ������� ��� �� � �� ��� � �� ���� � ���� �� ����� �� ������� �� � �� ��� ��� ��� ��� ���� ��� ��� ���� ���� ��� ���� ���� ���� ���� ���� ���� ��� ��� ��� ��� ��� ���� ���� ���� ���� ��� ���� ��� ���� ���� ���� ���� ���� ��� ���� ��� ��� �� � ������������������������������������������������������������������ ������ � ������� ���� �� � ������� ������� ������� ��� ��� ������� ��� ������� ��� ������� ��� ������� ��� ������� ��� ������� �� ���� ��� ��� �� �� �� � �� �� �� � �� �� � �� �� � �� �� �� � �� �� �� � �� �� � �� �� � ���� � ��� � � ��� ���� � ��� � � ��� ��� ��� ���� �� ���� �� ���� � � ������� �� ��� ��������� �� � � ����� �� ��� �������� ����� � �� � � �� ���� � � ������� �� ��� ��������� �� � � ����� �� ��� �������� ����� � �� � � �� ����� � � � ������ ����� ����� � � � ������ ����� ���� � ���� � ��� ��� ��� �� ���� ������ ����� � � � ������ ����� ����� � � � ������ ����� ��� ��� ����� �� � ����� �� � ����� �� �� � ����� �� � ����� �� � ����� �� �� � ������ �� � �� ������ �� � �� ������ ��� �� � � ��� �� � � ��� ����� ��� �� � � ��� �� � � ��� ��� ����� �� � �� ����� � � ��� ��� ����� �� � �� �� �� � �� �� �� � �� �� �� � �� �� �� � �� � �� ��� � �� ���� � ���� �� ����� �� ������� �� � �� ��� ��� ��� ��� ���� ��� ��� ���� ��� ��� ���� ���� ���� ��� ��� ���� ���� ���� ���� ��� ���� ��� ���� ���� ���� ���� ���� ��� ���� ��� ��� �� � ������������������������������������������������������������������ ������ � ������� ���� �� � ������� ������� ������� ��� ��� ����� �� � �� � �� ��� � �� ���� � ������� � ���� �� ����� �� ������� �� � �� ��� ��� ��� ��� ���� ���� ��� ��� ���� ���� ��� ��� ��� ��� ���� ���� ���� ��� ���� ���� ���� ���� ���� ���� ���� ��� ��� ���� ���� ���� ���� ���� ��� ��� ��� ��� ���� ���� ��� ��� ��� �� � ������������������������������������������������������������������ ������ � ������� ���� �� � ������� ������� ������� ��� ������� � ������� � � ������� � � ������� � � ������� � � ������� � ������� � ������� � ������� � ������ �� �� ������ �� �� ���� � ���� � ���� � ���� � �������� �� �� ��� � ������� �� � �������� �� �� ��� � ������� �� � �������� �� �� ��� � ������� �� � ���� � � �������� �� �� ��� � ������� �� � �������� �� �� ��� � ������� �� � �������� �� �� ��� � ������� �� � �������� �� �� ��� � ������� �� � ���� � � �� � � ������ ����� �� � � ������ ����� �� � � ������ ����� �� � � ������ ����� ���� � � � � ��� �� �� � ���� � � � � ��� �� �� � �� � �� ��� � �� ���� � ���� �� ����� �� ������� �� � �� ��� ��� ��� ��� ���� ��� ��� ���� ���� ��� ���� ���� ���� ���� ���� ���� ��� ��� ��� ��� ��� ���� ���� ���� ���� ��� ���� ��� ���� ���� ���� ���� ���� ��� ���� ��� ��� �� � ������������������������������������������������������������������ ������ � ������� ���� �� � ������� ������� ������� ��� �� ����� � � ��� ��� �� � ��� ��� �� � �� ��� � �� ���� � ���� �� ����� �� ������� �� � �� ��� ��� ��� ��� ���� ���� ��� ��� ���� ��� ���� ���� ���� ���� ��� ���� ��� ���� ���� ���� ���� ��� ���� ��� ��� �� � ������������������������������������������������������������������ ������ � ������� ���� �� � ������� ������� ������� ��� �� � �� ��� � �� ���� � �� ����� � � ��� ���� �� ����� �� ������� �� � �� ��� ��� ��� ��� ��� ���� ���� ���� ���� ���� ���� ��� ��� ���� ���� ���� ��� ���� ��� ��� �� � ������������������������������������������������������������������ ������ � ������� ���� �� � ������� ������� ������� ��� �� � �� ��� � �� ���� � �� � �� ��� � �� ���� � ���� �� ����� �� ������� �� � �� ��� ��� ��� ��� ���� ���� ��� ��� ���� ��� ��� ��� ���� ���� ���� ���� ��� ���� ��� ���� ���� ���� ���� ��� ���� ��� ��� �� � ������������������������������������������������������������������ ������ � ������� ���� �� � ������� ������� ������� ��� ���� �� ����� �� ������� �� � �� ��� ��� ��� ��� ��� ���� ���� ���� ���� ���� ���� ���� ��� ��� ���� ��� ���� ��� ���� ��� ��� �� � ������������������������������������������������������������������ ������ � ������� ���� �� � ������� ������� ������� ��� ����� �� � � � �� � ��� ���� � �� � �� ��� � �� ���� � ���� �� ����� �� ������� �� � �� ��� ��� ��� ��� ���� ���� ��� ��� ���� ��� ��� ��� ���� ���� ���� ���� ��� ���� ��� ���� ���� ���� ���� ���� ��� ���� ��� ��� �� � ������������������������������������������������������������������ ������ � ������� ���� �� � ������� ������� ������� ��� ������ �� � �� ��� � �� ���� � ���� �� ����� �� ������� �� � �� ��� ��� ��� ��� ���� ���� ��� ��� ���� ���� ��� ��� ���� ���� ���� ���� ���� ��� ���� ���� ��� ���� ���� ���� ���� ���� ��� ��� ���� ���� ���� ��� ���� ��� ���� ���� ��� ���� ���� ���� ���� ��� ���� ��� ��� �� � ������������������������������������������������������������������ ������ � ������� ���� �� � ������� ������� ������� ��� �� ����� � � ��� syzkaller syzkaller login: [ 1082.566264][T23887] Process accounting resumed [ 1083.326085][T23932] FAULT_INJECTION: forcing a failure. [ 1083.326085][T23932] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.439798][T23932] CPU: 1 UID: 0 PID: 23932 Comm: syz.5.4611 Not tainted 6.14.0-rc5-syzkaller-00013-g99fa936e8e4f #0 [ 1083.439834][T23932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1083.439848][T23932] Call Trace: [ 1083.439857][T23932] <TASK> [ 1083.439867][T23932] dump_stack_lvl+0x16c/0x1f0 [ 1083.439904][T23932] should_fail_ex+0x50a/0x650 [ 1083.439942][T23932] ? fs_reclaim_acquire+0xae/0x150 [ 1083.439975][T23932] ? process_preds+0x470/0x1c70 [ 1083.440002][T23932] should_failslab+0xc2/0x120 [ 1083.440026][T23932] __kmalloc_noprof+0xcb/0x510 [ 1083.440068][T23932] process_preds+0x470/0x1c70 [ 1083.440111][T23932] apply_subsystem_event_filter+0x43e/0x1410 [ 1083.440151][T23932] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1083.440190][T23932] ? __might_fault+0xe3/0x190 [ 1083.440216][T23932] ? __might_fault+0xe3/0x190 [ 1083.440246][T23932] ? _copy_from_user+0x59/0xd0 [ 1083.440277][T23932] subsystem_filter_write+0x95/0x120 [ 1083.440310][T23932] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1083.440339][T23932] vfs_write+0x24c/0x1150 [ 1083.440379][T23932] ? __pfx_vfs_write+0x10/0x10 [ 1083.440408][T23932] ? do_futex+0x123/0x350 [ 1083.440436][T23932] ? __pfx_do_futex+0x10/0x10 [ 1083.440475][T23932] ? __x64_sys_futex+0x1e1/0x4c0 [ 1083.440501][T23932] ? __x64_sys_futex+0x1ea/0x4c0 [ 1083.440535][T23932] ksys_write+0x12b/0x250 [ 1083.440565][T23932] ? __pfx_ksys_write+0x10/0x10 [ 1083.440607][T23932] do_syscall_64+0xcd/0x250 [ 1083.440641][T23932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.440674][T23932] RIP: 0033:0x7fd804f8d169 [ 1083.440692][T23932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1083.440715][T23932] RSP: 002b:00007fd805eab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1083.440738][T23932] RAX: ffffffffffffffda RBX: 00007fd8051a5fa0 RCX: 00007fd804f8d169 [ 1083.440755][T23932] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 1083.440769][T23932] RBP: 00007fd80500e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1083.440784][T23932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1083.440803][T23932] R13: 0000000000000000 R14: 00007fd8051a5fa0 R15: 00007ffcc3bc8b68 [ 1083.440836][T23932] </TASK> [ 1084.536000][T23943] page: refcount:6 mapcount:5 mapping:0000000000000000 index:0xffff888000000000 pfn:0x79808 [ 1084.609719][T23945] could not allocate digest TFM handle [ 1084.610992][T23943] flags: 0xfff18000000204(referenced|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1084.663539][T23943] raw: 00fff18000000204 0000000000000000 dead000000000122 0000000000000000 [ 1084.777581][T23943] raw: ffff888000000000 0000000000000000 0000000600000004 0000000000000000 [ 1084.837269][T23943] page dumped because: unmovable page [ 1084.867822][T23943] page_owner tracks the page as allocated [ 1084.889262][T23943] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 23296, tgid 23296 (syz-executor), ts 1035466818424, free_ts 1021791050607 [ 1084.969751][T23943] post_alloc_hook+0x181/0x1b0 [ 1084.975525][T23943] get_page_from_freelist+0xfce/0x2f80 [ 1085.069981][T23943] __alloc_frozen_pages_noprof+0x221/0x2470 [ 1085.076543][T23943] alloc_pages_mpol+0x1fc/0x540 [ 1085.129774][T23943] alloc_pages_noprof+0x131/0x390 [ 1085.135871][T23943] __vmalloc_node_range_noprof+0x721/0x1530 [ 1085.167969][T23943] vmalloc_user_noprof+0x6b/0x90 [ 1085.185410][T23943] kcov_ioctl+0x4c/0x730 [ 1085.205054][T23943] __x64_sys_ioctl+0x190/0x200 [ 1085.210861][T23943] do_syscall_64+0xcd/0x250 [ 1085.215855][T23943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.264581][T23943] page last free pid 52 tgid 52 stack trace: [ 1085.279761][T23943] free_frozen_pages+0x6db/0xfb0 [ 1085.285725][T23943] free_pages_work+0x6a/0x470 [ 1085.319691][T23943] process_one_work+0x9c5/0x1ba0 [ 1085.325176][T23943] worker_thread+0x6c8/0xf00 [ 1085.366790][T23943] kthread+0x3af/0x750 [ 1085.384304][T23943] ret_from_fork+0x45/0x80 [ 1085.389222][T23943] ret_from_fork_asm+0x1a/0x30 [ 1087.537233][T24007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4625'. [ 1087.721551][T24020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4626'. [ 1089.609686][ T29] audit: type=1326 audit(4295000457.953:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24066 comm="syz.2.4634" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe452b8d169 code=0x0 [ 1090.845380][T24084] FAULT_INJECTION: forcing a failure. [ 1090.845380][T24084] name failslab, interval 1, probability 0, space 0, times 0 [ 1091.009475][T24084] CPU: 0 UID: 0 PID: 24084 Comm: syz.3.4636 Not tainted 6.14.0-rc5-syzkaller-00013-g99fa936e8e4f #0 [ 1091.009514][T24084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1091.009530][T24084] Call Trace: [ 1091.009538][T24084] <TASK> [ 1091.009548][T24084] dump_stack_lvl+0x16c/0x1f0 [ 1091.009588][T24084] should_fail_ex+0x50a/0x650 [ 1091.009625][T24084] ? fs_reclaim_acquire+0xae/0x150 [ 1091.009658][T24084] should_failslab+0xc2/0x120 [ 1091.009682][T24084] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 1091.009716][T24084] ? apply_subsystem_event_filter+0x3ec/0x1410 [ 1091.009753][T24084] kstrdup+0x53/0x100 [ 1091.009782][T24084] apply_subsystem_event_filter+0x3ec/0x1410 [ 1091.009819][T24084] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1091.009846][T24084] ? __might_fault+0xe3/0x190 [ 1091.009869][T24084] ? __might_fault+0xe3/0x190 [ 1091.009896][T24084] ? _copy_from_user+0x59/0xd0 [ 1091.009923][T24084] subsystem_filter_write+0x95/0x120 [ 1091.009953][T24084] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1091.009979][T24084] vfs_write+0x24c/0x1150 [ 1091.010012][T24084] ? __pfx_vfs_write+0x10/0x10 [ 1091.010038][T24084] ? do_futex+0x123/0x350 [ 1091.010063][T24084] ? __pfx_do_futex+0x10/0x10 [ 1091.010096][T24084] ? __x64_sys_futex+0x1e1/0x4c0 [ 1091.010120][T24084] ? __x64_sys_futex+0x1ea/0x4c0 [ 1091.010152][T24084] ksys_write+0x12b/0x250 [ 1091.010180][T24084] ? __pfx_ksys_write+0x10/0x10 [ 1091.010220][T24084] do_syscall_64+0xcd/0x250 [ 1091.010250][T24084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.010289][T24084] RIP: 0033:0x7fd83758d169 [ 1091.010308][T24084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1091.010330][T24084] RSP: 002b:00007fd83833e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1091.010353][T24084] RAX: ffffffffffffffda RBX: 00007fd8377a5fa0 RCX: 00007fd83758d169 [ 1091.010370][T24084] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 1091.010384][T24084] RBP: 00007fd83760e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1091.010397][T24084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1091.010409][T24084] R13: 0000000000000000 R14: 00007fd8377a5fa0 R15: 00007fff2cdf4f78 [ 1091.010440][T24084] </TASK> [ 1093.604046][T24122] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4644'. [ 1097.096971][T24155] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4652'. [ 1097.690216][T24155] FAULT_INJECTION: forcing a failure. [ 1097.690216][T24155] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.858339][T24155] CPU: 1 UID: 0 PID: 24155 Comm: syz.5.4652 Not tainted 6.14.0-rc5-syzkaller-00013-g99fa936e8e4f #0 [ 1097.858375][T24155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1097.858390][T24155] Call Trace: [ 1097.858398][T24155] <TASK> [ 1097.858408][T24155] dump_stack_lvl+0x16c/0x1f0 [ 1097.858445][T24155] should_fail_ex+0x50a/0x650 [ 1097.858480][T24155] ? fs_reclaim_acquire+0xae/0x150 [ 1097.858511][T24155] ? alloc_mnt_ns+0xd2/0x520 [ 1097.858538][T24155] should_failslab+0xc2/0x120 [ 1097.858560][T24155] __kmalloc_cache_noprof+0x68/0x410 [ 1097.858599][T24155] alloc_mnt_ns+0xd2/0x520 [ 1097.858629][T24155] copy_mnt_ns+0x115/0xa70 [ 1097.858662][T24155] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 1097.858689][T24155] ? kmem_cache_alloc_noprof+0x279/0x3d0 [ 1097.858723][T24155] ? create_new_namespaces+0x30/0xad0 [ 1097.858763][T24155] create_new_namespaces+0xd3/0xad0 [ 1097.858797][T24155] ? bpf_lsm_capable+0x9/0x10 [ 1097.858820][T24155] ? security_capable+0x7e/0x260 [ 1097.858848][T24155] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1097.858886][T24155] ksys_unshare+0x45d/0xa40 [ 1097.858911][T24155] ? __pfx_ksys_unshare+0x10/0x10 [ 1097.858939][T24155] ? xfd_validate_state+0x5d/0x180 [ 1097.858983][T24155] __x64_sys_unshare+0x31/0x40 [ 1097.859008][T24155] do_syscall_64+0xcd/0x250 [ 1097.859047][T24155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.859080][T24155] RIP: 0033:0x7fd804f8d169 [ 1097.859099][T24155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1097.859121][T24155] RSP: 002b:00007fd805eab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1097.859143][T24155] RAX: ffffffffffffffda RBX: 00007fd8051a5fa0 RCX: 00007fd804f8d169 [ 1097.859159][T24155] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1097.859173][T24155] RBP: 00007fd80500e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1097.859188][T24155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1097.859203][T24155] R13: 0000000000000000 R14: 00007fd8051a5fa0 R15: 00007ffcc3bc8b68 [ 1097.859233][T24155] </TASK> [ 1099.110636][T24163] ptrace attach of "./syz-executor exec"[15260] was attempted by ""[24163] [ 1102.188690][T24215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4657'. [ 1102.709851][T24215] mac80211_hwsim hwsim53 wlan1: entered promiscuous mode [ 1104.969727][T24225] FAULT_INJECTION: forcing a failure. [ 1104.969727][T24225] name failslab, interval 1, probability 0, space 0, times 0 [ 1105.149630][T24225] CPU: 1 UID: 0 PID: 24225 Comm: syz.3.4662 Not tainted 6.14.0-rc5-syzkaller-00013-g99fa936e8e4f #0 [ 1105.149664][T24225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1105.149678][T24225] Call Trace: [ 1105.149686][T24225] <TASK> [ 1105.149696][T24225] dump_stack_lvl+0x16c/0x1f0 [ 1105.149744][T24225] should_fail_ex+0x50a/0x650 [ 1105.149780][T24225] ? fs_reclaim_acquire+0xae/0x150 [ 1105.149814][T24225] should_failslab+0xc2/0x120 [ 1105.149837][T24225] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1105.149874][T24225] ? vm_area_dup+0x53/0x2f0 [ 1105.149912][T24225] vm_area_dup+0x53/0x2f0 [ 1105.149945][T24225] __split_vma+0x181/0x1160 [ 1105.149984][T24225] ? __pfx___split_vma+0x10/0x10 [ 1105.150035][T24225] vms_gather_munmap_vmas+0x38b/0x1730 [ 1105.150087][T24225] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1105.150129][T24225] ? mas_walk+0x6a6/0x910 [ 1105.150171][T24225] __mmap_region+0x328/0x2760 [ 1105.150199][T24225] ? __pfx___mmap_region+0x10/0x10 [ 1105.150232][T24225] ? hlock_class+0x4e/0x130 [ 1105.150256][T24225] ? mark_lock+0xb5/0xc60 [ 1105.150290][T24225] ? __pfx_mark_lock+0x10/0x10 [ 1105.150321][T24225] ? __pfx___schedule+0x10/0x10 [ 1105.150349][T24225] ? schedule+0x298/0x350 [ 1105.150418][T24225] ? cap_capable+0xb3/0x250 [ 1105.150449][T24225] mmap_region+0x1ab/0x3f0 [ 1105.150478][T24225] do_mmap+0xd8d/0x11b0 [ 1105.150515][T24225] ? __pfx_do_mmap+0x10/0x10 [ 1105.150546][T24225] ? __pfx_down_write_killable+0x10/0x10 [ 1105.150587][T24225] vm_mmap_pgoff+0x203/0x3a0 [ 1105.150626][T24225] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1105.150663][T24225] ? __x64_sys_futex+0x1e1/0x4c0 [ 1105.150689][T24225] ? __x64_sys_futex+0x1ea/0x4c0 [ 1105.150722][T24225] ksys_mmap_pgoff+0x7d/0x5c0 [ 1105.150751][T24225] ? rcu_is_watching+0x12/0xc0 [ 1105.150779][T24225] __x64_sys_mmap+0x125/0x190 [ 1105.150814][T24225] do_syscall_64+0xcd/0x250 [ 1105.150849][T24225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1105.150881][T24225] RIP: 0033:0x7fd83758d169 [ 1105.150908][T24225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1105.150931][T24225] RSP: 002b:00007fd83833e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1105.150955][T24225] RAX: ffffffffffffffda RBX: 00007fd8377a5fa0 RCX: 00007fd83758d169 [ 1105.150972][T24225] RDX: 00000000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 1105.150986][T24225] RBP: 00007fd83760e2a0 R08: 0000000000000401 R09: 0000000000008000 [ 1105.151001][T24225] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1105.151015][T24225] R13: 0000000000000000 R14: 00007fd8377a5fa0 R15: 00007fff2cdf4f78 [ 1105.151048][T24225] </TASK> [ 1107.884649][T24242] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4668'. [ 1107.980453][T24245] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4669'. [ 1111.799075][ T5146] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1111.813240][ T5146] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1111.822412][ T5146] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1111.834529][ T5146] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1111.846415][ T5146] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1111.856151][ T5146] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1113.982648][T23306] Bluetooth: hci1: command tx timeout [ 1114.180042][T24301] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4684'. [ 1114.447062][T24283] chnl_net:caif_netlink_parms(): no params data found [ 1115.222921][T23849] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1116.057917][T23306] Bluetooth: hci1: command tx timeout [ 1116.166372][T23849] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.152201][T23849] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.284283][T24283] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.333371][T24283] bridge0: port 1(bridge_slave_0) entered disabled state [ 1117.369943][T24283] bridge_slave_0: entered allmulticast mode [ 1117.377584][T24283] bridge_slave_0: entered promiscuous mode [ 1117.581388][T23849] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.670055][T24283] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.677868][T24283] bridge0: port 2(bridge_slave_1) entered disabled state [ 1117.716816][T24283] bridge_slave_1: entered allmulticast mode [ 1117.735335][T24283] bridge_slave_1: entered promiscuous mode [ 1117.910202][T24283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1117.968845][T24283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1118.126729][T23306] Bluetooth: hci1: command tx timeout [ 1118.599259][T24283] team0: Port device team_slave_0 added [ 1119.056038][T24283] team0: Port device team_slave_1 added [ 1119.310525][T23849] gretap0: left allmulticast mode [ 1119.316104][T23849] gretap0: left promiscuous mode [ 1119.346510][T23849] bridge0: port 3(gretap0) entered disabled state [ 1119.579034][T23849] bridge_slave_1: left allmulticast mode [ 1119.585676][T23849] bridge_slave_1: left promiscuous mode [ 1119.619910][T23849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.751473][T24323] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(1) [ 1119.800302][T23849] bridge_slave_0: left allmulticast mode [ 1119.806534][T23849] bridge_slave_0: left promiscuous mode [ 1119.823904][T23849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.200377][T23306] Bluetooth: hci1: command tx timeout [ 1123.830066][T23849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1124.048475][T23849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1124.134366][T23849] bond0 (unregistering): Released all slaves [ 1124.375145][T24283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1124.389668][T24283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1124.480570][T24283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1124.580515][T23849] HfR: left promiscuous mode [ 1124.980123][T24283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1124.987787][T24283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1125.085825][T24283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1126.261642][T24283] hsr_slave_0: entered promiscuous mode [ 1126.268515][T24283] hsr_slave_1: entered promiscuous mode [ 1126.295647][T24283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1126.315434][T24283] Cannot create hsr debugfs directory [ 1127.923581][T24400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4705'. [ 1129.644558][T23849] hsr_slave_0: left promiscuous mode [ 1129.685130][T23849] hsr_slave_1: left promiscuous mode [ 1129.702498][T23849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1129.729781][T23849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1129.791733][T23849] veth1_macvtap: left promiscuous mode [ 1129.797821][T23849] veth0_macvtap: left promiscuous mode [ 1130.702550][T23849] team0 (unregistering): Port device team_slave_0 removed [ 1133.126693][T24283] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1133.147975][T24438] netlink: 'syz.5.4710': attribute type 1 has an invalid length. [ 1133.200361][T24283] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1133.361424][T24449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4712'. [ 1133.392397][T24283] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1133.408274][T24283] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1133.975109][T24283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1134.043534][T24283] 8021q: adding VLAN 0 to HW filter on device team0 [ 1134.095153][T24457] FAULT_INJECTION: forcing a failure. [ 1134.095153][T24457] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1134.175146][T24283] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1134.207229][T24457] CPU: 0 UID: 0 PID: 24457 Comm: syz.4.4713 Not tainted 6.14.0-rc5-syzkaller-00013-g99fa936e8e4f #0 [ 1134.207260][T24457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1134.207274][T24457] Call Trace: [ 1134.207281][T24457] <TASK> [ 1134.207291][T24457] dump_stack_lvl+0x16c/0x1f0 [ 1134.207330][T24457] should_fail_ex+0x50a/0x650 [ 1134.207365][T24457] ? __pfx___might_resched+0x10/0x10 [ 1134.207400][T24457] should_fail_alloc_page+0xe7/0x130 [ 1134.207424][T24457] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1134.207457][T24457] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 1134.207495][T24457] ? __pfx_mark_lock+0x10/0x10 [ 1134.207529][T24457] ? hlock_class+0x4e/0x130 [ 1134.207550][T24457] ? mark_lock+0xb5/0xc60 [ 1134.207579][T24457] ? hlock_class+0x4e/0x130 [ 1134.207598][T24457] ? mark_lock+0xb5/0xc60 [ 1134.207624][T24457] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1134.207660][T24457] ? hlock_class+0x4e/0x130 [ 1134.207684][T24457] ? mark_lock+0xb5/0xc60 [ 1134.207711][T24457] ? __pfx_mark_lock+0x10/0x10 [ 1134.207740][T24457] ? __pfx_mark_lock+0x10/0x10 [ 1134.207783][T24457] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1134.207821][T24457] ? policy_nodemask+0xea/0x4e0 [ 1134.207869][T24457] alloc_pages_mpol+0x1fc/0x540 [ 1134.207895][T24457] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1134.207919][T24457] ? find_held_lock+0x2d/0x110 [ 1134.207951][T24457] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1134.207980][T24457] shmem_alloc_folio+0x135/0x160 [ 1134.208017][T24457] shmem_alloc_and_add_folio+0x48e/0xc10 [ 1134.208050][T24457] ? shmem_huge_global_enabled+0x72/0x6b0 [ 1134.208075][T24457] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1134.208105][T24457] ? shmem_allowable_huge_orders+0xd0/0x410 [ 1134.208139][T24457] shmem_get_folio_gfp+0x689/0x1530 [ 1134.208173][T24457] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1134.208204][T24457] ? filemap_map_pages+0xf92/0x16b0 [ 1134.208236][T24457] shmem_fault+0x200/0xae0 [ 1134.208265][T24457] ? __pfx_shmem_fault+0x10/0x10 [ 1134.208298][T24457] ? do_pte_missing+0xde9/0x3e10 [ 1134.208330][T24457] ? __pfx_lock_release+0x10/0x10 [ 1134.208367][T24457] __do_fault+0x10a/0x490 [ 1134.208396][T24457] do_pte_missing+0xecf/0x3e10 [ 1134.208440][T24457] __handle_mm_fault+0x1166/0x2c60 [ 1134.208481][T24457] ? __pfx___handle_mm_fault+0x10/0x10 [ 1134.208513][T24457] ? follow_page_pte+0x3ac/0x1490 [ 1134.208543][T24457] ? __pfx_lock_release+0x10/0x10 [ 1134.208597][T24457] handle_mm_fault+0x3fa/0xaa0 [ 1134.208636][T24457] __get_user_pages+0x773/0x36f0 [ 1134.208675][T24457] ? hlock_class+0x4e/0x130 [ 1134.208699][T24457] ? __lock_acquire+0x15a9/0x3c40 [ 1134.208729][T24457] ? __pfx___get_user_pages+0x10/0x10 [ 1134.208773][T24457] __gup_longterm_locked+0x212/0x1870 [ 1134.208807][T24457] ? __pfx___lock_acquire+0x10/0x10 [ 1134.208850][T24457] ? __pfx___gup_longterm_locked+0x10/0x10 [ 1134.208886][T24457] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1134.208920][T24457] ? rwsem_read_trylock+0x12d/0x250 [ 1134.208959][T24457] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 1134.208995][T24457] ? process_vm_rw_core.constprop.0+0x3ff/0x9c0 [ 1134.209026][T24457] pin_user_pages_remote+0xee/0x150 [ 1134.209061][T24457] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 1134.209092][T24457] ? down_read+0xc9/0x330 [ 1134.209136][T24457] process_vm_rw_core.constprop.0+0x42b/0x9c0 [ 1134.209175][T24457] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 1134.209227][T24457] process_vm_rw+0x301/0x360 [ 1134.209253][T24457] ? __pfx_process_vm_rw+0x10/0x10 [ 1134.209276][T24457] ? __pfx_futex_wake+0x10/0x10 [ 1134.209343][T24457] ? xfd_validate_state+0x5d/0x180 [ 1134.209376][T24457] ? rcu_is_watching+0x12/0xc0 [ 1134.209404][T24457] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 1134.209430][T24457] ? do_syscall_64+0x91/0x250 [ 1134.209459][T24457] ? lockdep_hardirqs_on+0x7c/0x110 [ 1134.209487][T24457] do_syscall_64+0xcd/0x250 [ 1134.209519][T24457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1134.209551][T24457] RIP: 0033:0x7fc04678d169 [ 1134.209571][T24457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1134.209592][T24457] RSP: 002b:00007fc0476a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 1134.209614][T24457] RAX: ffffffffffffffda RBX: 00007fc0469a5fa0 RCX: 00007fc04678d169 [ 1134.209630][T24457] RDX: 0000000000000001 RSI: 0000400000000000 RDI: 00000000000005f7 [ 1134.209646][T24457] RBP: 00007fc04680e2a0 R08: 0000000000000006 R09: 0000000000000000 [ 1134.209661][T24457] R10: 0000400000000280 R11: 0000000000000246 R12: 0000000000000000 [ 1134.209676][T24457] R13: 0000000000000000 R14: 00007fc0469a5fa0 R15: 00007ffd0f0b7f18 [ 1134.209707][T24457] </TASK> [ 1134.223687][T24283] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1134.280070][T12038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1134.280211][T12038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1134.281614][T12038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.281686][T12038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1134.912676][T24283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1135.012361][T24283] veth0_vlan: entered promiscuous mode [ 1135.032374][T24283] veth1_vlan: entered promiscuous mode [ 1135.104005][T24283] veth0_macvtap: entered promiscuous mode [ 1135.119242][T24283] veth1_macvtap: entered promiscuous mode [ 1135.167824][T24283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1135.167849][T24283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.167863][T24283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1135.167879][T24283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.167893][T24283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1135.167909][T24283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.167923][T24283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1135.167941][T24283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.168894][T24283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1135.196389][T24283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1135.196413][T24283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.196427][T24283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1135.196445][T24283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.196458][T24283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1135.196475][T24283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.196490][T24283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1135.196507][T24283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1135.199267][T24283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1135.223834][T24283] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.223896][T24283] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.223927][T24283] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.223959][T24283] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1136.112112][ T7123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.112137][ T7123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.268625][T22510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1136.268651][T22510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1136.717367][T24533] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4680'. [ 1136.884379][T24531] netlink: 338 bytes leftover after parsing attributes in process `syz.4.4724'. [ 1138.361177][T24571] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4734'. [ 1138.578559][T24576] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(5) [ 1140.463479][T24608] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1140.536090][T24608] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1140.542770][T24608] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1140.548128][T24621] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4745'. [ 1140.644343][T24608] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1140.651058][T24608] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1140.814800][T24608] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1140.909812][T24608] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1140.994533][T24608] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1141.170105][T24608] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1141.877521][T23306] Bluetooth: hci0: command 0x0406 tx timeout [ 1142.593301][T23306] Bluetooth: hci3: command 0x0c1a tx timeout [ 1142.673009][T23306] Bluetooth: hci4: command 0x0c1a tx timeout [ 1142.913011][T23306] Bluetooth: hci1: command 0x0c1a tx timeout [ 1142.978115][T24652] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4755'. [ 1143.373208][T24656] snd_aloop snd_aloop.0: control 1:6:6:���_�he�R��:0 is already present [ 1143.952384][T23306] Bluetooth: hci0: command 0x0406 tx timeout [ 1144.755724][T23306] Bluetooth: hci4: command 0x0c1a tx timeout [ 1144.992485][T23306] Bluetooth: hci1: command 0x0c1a tx timeout [ 1145.971398][T24690] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4765'. [ 1146.830954][T23306] Bluetooth: hci4: command 0x0c1a tx timeout [ 1147.071097][T23306] Bluetooth: hci1: command 0x0c1a tx timeout [ 1147.685051][T24720] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4772'. [ 1150.089448][T24750] nbd2: detected capacity change from 0 to 68719476736 [ 1150.101548][T24169] block nbd2: Send control failed (result -22) [ 1150.108355][T24169] block nbd2: Request send failed, requeueing [ 1150.130020][T19865] block nbd2: Dead connection, failed to find a fallback [ 1150.132237][T23306] block nbd2: Receive control failed (result -32) [ 1150.137980][T19865] block nbd2: shutting down sockets [ 1150.138001][T19865] blk_print_req_error: 24 callbacks suppressed [ 1150.138013][T19865] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1150.169694][T19865] buffer_io_error: 23 callbacks suppressed [ 1150.169709][T19865] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1150.185195][T24169] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1150.195700][T24169] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1150.205952][T24169] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1150.216225][T24169] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1150.225177][T24169] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1150.235436][T24169] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1150.244611][T24169] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1150.254887][T24169] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1150.263787][T24169] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1150.274421][T24169] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1150.283996][T24169] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1150.294301][T24169] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1150.304359][T24169] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1150.314736][T24169] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1150.323560][T24169] ldm_validate_partition_table(): Disk read failed. [ 1150.353406][T24169] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1150.399105][T24169] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1150.407791][T24169] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1150.476209][T24169] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1150.513288][T24169] Dev nbd2: unable to read RDB block 0 [ 1150.529383][T24169] nbd2: unable to read partition table [ 1150.570013][T24169] ldm_validate_partition_table(): Disk read failed. [ 1150.601780][T24169] Dev nbd2: unable to read RDB block 0 [ 1150.608290][T24169] nbd2: unable to read partition table [ 1150.681150][T24169] [ 1150.683729][T24169] ====================================================== [ 1150.691432][T24169] WARNING: possible circular locking dependency detected [ 1150.699131][T24169] 6.14.0-rc5-syzkaller-00013-g99fa936e8e4f #0 Not tainted [ 1150.706925][T24169] ------------------------------------------------------ [ 1150.714624][T24169] udevd/24169 is trying to acquire lock: [ 1150.720792][T24169] ffff888025c0dc88 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: __submit_bio+0x3d1/0x690 [ 1150.731697][T24169] [ 1150.731697][T24169] but task is already holding lock: [ 1150.739772][T24169] ffff888023944e40 (mapping.invalidate_lock#2){++++}-{4:4}, at: page_cache_ra_unbounded+0x173/0x7d0 [ 1150.751630][T24169] [ 1150.751630][T24169] which lock already depends on the new lock. [ 1150.751630][T24169] [ 1150.763056][T24169] [ 1150.763056][T24169] the existing dependency chain (in reverse order) is: [ 1150.772951][T24169] [ 1150.772951][T24169] -> #6 (mapping.invalidate_lock#2){++++}-{4:4}: [ 1150.782309][T24169] down_read+0x9a/0x330 [ 1150.787453][T24169] filemap_fault+0x2e7/0x2ca0 [ 1150.793166][T24169] __do_fault+0x10a/0x490 [ 1150.798488][T24169] do_pte_missing+0xecf/0x3e10 [ 1150.804293][T24169] __handle_mm_fault+0x1166/0x2c60 [ 1150.810480][T24169] handle_mm_fault+0x3fa/0xaa0 [ 1150.816286][T24169] __get_user_pages+0x773/0x36f0 [ 1150.822282][T24169] __gup_longterm_locked+0x212/0x1870 [ 1150.828757][T24169] gup_fast_fallback+0x1802/0x2690 [ 1150.834944][T24169] pin_user_pages_fast+0xa8/0x100 [ 1150.841041][T24169] iov_iter_extract_pages+0x3a5/0x2010 [ 1150.847616][T24169] bio_iov_iter_get_pages+0x37c/0x1100 [ 1150.854182][T24169] blkdev_direct_IO+0x110e/0x1c40 [ 1150.860274][T24169] blkdev_write_iter+0x6f9/0xdd0 [ 1150.866264][T24169] vfs_write+0x5ae/0x1150 [ 1150.871588][T24169] ksys_write+0x12b/0x250 [ 1150.876911][T24169] do_syscall_64+0xcd/0x250 [ 1150.882428][T24169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.889476][T24169] [ 1150.889476][T24169] -> #5 (&mm->mmap_lock){++++}-{4:4}: [ 1150.897777][T24169] __might_fault+0x11b/0x190 [ 1150.903387][T24169] _copy_from_user+0x29/0xd0 [ 1150.908998][T24169] csum_and_copy_from_iter_full+0x218/0x1e20 [ 1150.916148][T24169] ip_generic_getfrag+0x175/0x260 [ 1150.922242][T24169] raw6_getfrag+0x22d/0x2a0 [ 1150.927754][T24169] __ip6_append_data.isra.0+0x3dca/0x4650 [ 1150.934605][T24169] ip6_append_data+0x1e6/0x500 [ 1150.940409][T24169] rawv6_sendmsg+0x15c9/0x4610 [ 1150.946211][T24169] inet_sendmsg+0x119/0x140 [ 1150.951727][T24169] ____sys_sendmsg+0x98c/0xc90 [ 1150.957526][T24169] ___sys_sendmsg+0x135/0x1e0 [ 1150.963235][T24169] __sys_sendmsg+0x16e/0x220 [ 1150.968851][T24169] do_syscall_64+0xcd/0x250 [ 1150.974366][T24169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1150.981412][T24169] [ 1150.981412][T24169] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1150.989906][T24169] lock_sock_nested+0x3a/0xf0 [ 1150.995613][T24169] inet_autobind+0x1a/0x1a0 [ 1151.001133][T24169] inet_send_prepare+0x317/0x530 [ 1151.007139][T24169] inet_sendmsg+0x43/0x140 [ 1151.012572][T24169] sock_sendmsg+0x389/0x490 [ 1151.018086][T24169] __sock_xmit+0x1e8/0x4f0 [ 1151.023516][T24169] nbd_send_cmd+0x8ec/0x1c90 [ 1151.029124][T24169] nbd_queue_rq+0x941/0x1220 [ 1151.034730][T24169] blk_mq_dispatch_rq_list+0x443/0x1dc0 [ 1151.041388][T24169] __blk_mq_sched_dispatch_requests+0xcdf/0x1620 [ 1151.048913][T24169] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 1151.056046][T24169] blk_mq_run_hw_queue+0x239/0x670 [ 1151.062223][T24169] blk_mq_flush_plug_list+0x673/0x1c60 [ 1151.068790][T24169] __blk_flush_plug+0x2c5/0x4b0 [ 1151.074685][T24169] __submit_bio+0x547/0x690 [ 1151.080193][T24169] submit_bio_noacct_nocheck+0x698/0xd70 [ 1151.086945][T24169] submit_bio_noacct+0x50d/0x1ec0 [ 1151.093030][T24169] block_read_full_folio+0x812/0xa50 [ 1151.099423][T24169] filemap_read_folio+0xc6/0x2a0 [ 1151.105412][T24169] do_read_cache_folio+0x263/0x5c0 [ 1151.111594][T24169] read_part_sector+0xd4/0x310 [ 1151.117397][T24169] adfspart_check_ICS+0x94/0x940 [ 1151.123393][T24169] bdev_disk_changed+0x71f/0x1520 [ 1151.129483][T24169] blkdev_get_whole+0x187/0x290 [ 1151.135375][T24169] bdev_open+0x2c7/0xe20 [ 1151.140611][T24169] blkdev_open+0x27b/0x3f0 [ 1151.146035][T24169] do_dentry_open+0x735/0x1c40 [ 1151.151838][T24169] vfs_open+0x82/0x3f0 [ 1151.156869][T24169] path_openat+0x1e88/0x2d80 [ 1151.162480][T24169] do_filp_open+0x20c/0x470 [ 1151.167996][T24169] do_sys_openat2+0x17a/0x1e0 [ 1151.173697][T24169] __x64_sys_openat+0x175/0x210 [ 1151.179592][T24169] do_syscall_64+0xcd/0x250 [ 1151.185105][T24169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.192148][T24169] [ 1151.192148][T24169] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 1151.200550][T24169] __mutex_lock+0x19b/0xb10 [ 1151.206066][T24169] nbd_queue_rq+0x424/0x1220 [ 1151.211675][T24169] blk_mq_dispatch_rq_list+0x443/0x1dc0 [ 1151.218334][T24169] __blk_mq_sched_dispatch_requests+0xcdf/0x1620 [ 1151.225863][T24169] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 1151.233003][T24169] blk_mq_run_hw_queue+0x239/0x670 [ 1151.239194][T24169] blk_mq_flush_plug_list+0x673/0x1c60 [ 1151.245756][T24169] __blk_flush_plug+0x2c5/0x4b0 [ 1151.251649][T24169] __submit_bio+0x547/0x690 [ 1151.257158][T24169] submit_bio_noacct_nocheck+0x698/0xd70 [ 1151.263920][T24169] submit_bio_noacct+0x50d/0x1ec0 [ 1151.270018][T24169] block_read_full_folio+0x812/0xa50 [ 1151.276410][T24169] filemap_read_folio+0xc6/0x2a0 [ 1151.282408][T24169] do_read_cache_folio+0x263/0x5c0 [ 1151.288596][T24169] read_part_sector+0xd4/0x310 [ 1151.294407][T24169] adfspart_check_ICS+0x94/0x940 [ 1151.300408][T24169] bdev_disk_changed+0x71f/0x1520 [ 1151.306502][T24169] blkdev_get_whole+0x187/0x290 [ 1151.312396][T24169] bdev_open+0x2c7/0xe20 [ 1151.317625][T24169] blkdev_open+0x27b/0x3f0 [ 1151.323046][T24169] do_dentry_open+0x735/0x1c40 [ 1151.328850][T24169] vfs_open+0x82/0x3f0 [ 1151.333884][T24169] path_openat+0x1e88/0x2d80 [ 1151.339497][T24169] do_filp_open+0x20c/0x470 [ 1151.345013][T24169] do_sys_openat2+0x17a/0x1e0 [ 1151.350719][T24169] __x64_sys_openat+0x175/0x210 [ 1151.356618][T24169] do_syscall_64+0xcd/0x250 [ 1151.362141][T24169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.369193][T24169] [ 1151.369193][T24169] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 1151.377115][T24169] __mutex_lock+0x19b/0xb10 [ 1151.382638][T24169] nbd_queue_rq+0xbe/0x1220 [ 1151.388151][T24169] blk_mq_dispatch_rq_list+0x443/0x1dc0 [ 1151.394812][T24169] __blk_mq_sched_dispatch_requests+0xcdf/0x1620 [ 1151.402338][T24169] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 1151.409475][T24169] blk_mq_run_hw_queue+0x239/0x670 [ 1151.415654][T24169] blk_mq_flush_plug_list+0x673/0x1c60 [ 1151.422219][T24169] __blk_flush_plug+0x2c5/0x4b0 [ 1151.428114][T24169] __submit_bio+0x547/0x690 [ 1151.433629][T24169] submit_bio_noacct_nocheck+0x698/0xd70 [ 1151.440383][T24169] submit_bio_noacct+0x50d/0x1ec0 [ 1151.446471][T24169] block_read_full_folio+0x812/0xa50 [ 1151.452849][T24169] filemap_read_folio+0xc6/0x2a0 [ 1151.458839][T24169] do_read_cache_folio+0x263/0x5c0 [ 1151.465024][T24169] read_part_sector+0xd4/0x310 [ 1151.470829][T24169] adfspart_check_ICS+0x94/0x940 [ 1151.476824][T24169] bdev_disk_changed+0x71f/0x1520 [ 1151.482914][T24169] blkdev_get_whole+0x187/0x290 [ 1151.488806][T24169] bdev_open+0x2c7/0xe20 [ 1151.494028][T24169] blkdev_open+0x27b/0x3f0 [ 1151.499443][T24169] do_dentry_open+0x735/0x1c40 [ 1151.505248][T24169] vfs_open+0x82/0x3f0 [ 1151.510277][T24169] path_openat+0x1e88/0x2d80 [ 1151.515890][T24169] do_filp_open+0x20c/0x470 [ 1151.521405][T24169] do_sys_openat2+0x17a/0x1e0 [ 1151.527114][T24169] __x64_sys_openat+0x175/0x210 [ 1151.533032][T24169] do_syscall_64+0xcd/0x250 [ 1151.538555][T24169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.545603][T24169] [ 1151.545603][T24169] -> #1 (set->srcu){.+.+}-{0:0}: [ 1151.553424][T24169] __synchronize_srcu+0xa9/0x2a0 [ 1151.559421][T24169] blk_mq_update_nr_requests+0x288/0x670 [ 1151.566177][T24169] queue_requests_store+0x161/0x210 [ 1151.572458][T24169] queue_attr_store+0x370/0x510 [ 1151.578360][T24169] sysfs_kf_write+0x117/0x170 [ 1151.584078][T24169] kernfs_fop_write_iter+0x33d/0x500 [ 1151.590455][T24169] vfs_write+0x5ae/0x1150 [ 1151.595776][T24169] ksys_write+0x12b/0x250 [ 1151.601099][T24169] do_syscall_64+0xcd/0x250 [ 1151.606618][T24169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.613664][T24169] [ 1151.613664][T24169] -> #0 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 1151.623116][T24169] __lock_acquire+0x249e/0x3c40 [ 1151.629018][T24169] lock_acquire.part.0+0x11b/0x380 [ 1151.635206][T24169] blk_mq_submit_bio+0x20f5/0x2610 [ 1151.641391][T24169] __submit_bio+0x3d1/0x690 [ 1151.646902][T24169] submit_bio_noacct_nocheck+0x698/0xd70 [ 1151.653654][T24169] submit_bio_noacct+0x50d/0x1ec0 [ 1151.659737][T24169] mpage_readahead+0x41d/0x590 [ 1151.665533][T24169] read_pages+0x1a7/0xc60 [ 1151.670850][T24169] page_cache_ra_unbounded+0x426/0x7d0 [ 1151.677411][T24169] force_page_cache_ra+0x24b/0x340 [ 1151.683592][T24169] page_cache_sync_ra+0x158/0xa30 [ 1151.689677][T24169] filemap_get_pages+0xb62/0x1c30 [ 1151.695771][T24169] filemap_read+0x3c5/0xe70 [ 1151.701285][T24169] blkdev_read_iter+0x187/0x4b0 [ 1151.707182][T24169] vfs_read+0x886/0xbf0 [ 1151.712318][T24169] ksys_read+0x12b/0x250 [ 1151.717551][T24169] do_syscall_64+0xcd/0x250 [ 1151.723074][T24169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.730126][T24169] [ 1151.730126][T24169] other info that might help us debug this: [ 1151.730126][T24169] [ 1151.741353][T24169] Chain exists of: [ 1151.741353][T24169] &q->q_usage_counter(io)#51 --> &mm->mmap_lock --> mapping.invalidate_lock#2 [ 1151.741353][T24169] [ 1151.757603][T24169] Possible unsafe locking scenario: [ 1151.757603][T24169] [ 1151.765773][T24169] CPU0 CPU1 [ 1151.771650][T24169] ---- ---- [ 1151.777529][T24169] rlock(mapping.invalidate_lock#2); [ 1151.783426][T24169] lock(&mm->mmap_lock); [ 1151.790945][T24169] lock(mapping.invalidate_lock#2); [ 1151.799520][T24169] rlock(&q->q_usage_counter(io)#51); [ 1151.805512][T24169] [ 1151.805512][T24169] *** DEADLOCK *** [ 1151.805512][T24169] [ 1151.814448][T24169] 1 lock held by udevd/24169: [ 1151.819568][T24169] #0: ffff888023944e40 (mapping.invalidate_lock#2){++++}-{4:4}, at: page_cache_ra_unbounded+0x173/0x7d0 [ 1151.831911][T24169] [ 1151.831911][T24169] stack backtrace: [ 1151.838385][T24169] CPU: 1 UID: 0 PID: 24169 Comm: udevd Not tainted 6.14.0-rc5-syzkaller-00013-g99fa936e8e4f #0 [ 1151.838412][T24169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1151.838425][T24169] Call Trace: [ 1151.838432][T24169] <TASK> [ 1151.838441][T24169] dump_stack_lvl+0x116/0x1f0 [ 1151.838472][T24169] print_circular_bug+0x490/0x760 [ 1151.838498][T24169] check_noncircular+0x31a/0x400 [ 1151.838522][T24169] ? __pfx_check_noncircular+0x10/0x10 [ 1151.838544][T24169] ? __kernel_text_address+0xd/0x40 [ 1151.838568][T24169] ? unwind_get_return_address+0x59/0xa0 [ 1151.838597][T24169] ? lockdep_lock+0xc6/0x200 [ 1151.838616][T24169] ? __pfx_lockdep_lock+0x10/0x10 [ 1151.838636][T24169] __lock_acquire+0x249e/0x3c40 [ 1151.838664][T24169] ? __pfx___lock_acquire+0x10/0x10 [ 1151.838686][T24169] ? hlock_class+0x4e/0x130 [ 1151.838704][T24169] ? mark_lock+0xb5/0xc60 [ 1151.838726][T24169] ? mark_lock+0xb5/0xc60 [ 1151.838747][T24169] ? page_cache_ra_unbounded+0x426/0x7d0 [ 1151.838768][T24169] ? page_cache_sync_ra+0x158/0xa30 [ 1151.838789][T24169] lock_acquire.part.0+0x11b/0x380 [ 1151.838814][T24169] ? __submit_bio+0x3d1/0x690 [ 1151.838834][T24169] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1151.838858][T24169] ? rcu_is_watching+0x12/0xc0 [ 1151.838877][T24169] ? trace_lock_acquire+0x14e/0x1f0 [ 1151.838897][T24169] ? __submit_bio+0x3d1/0x690 [ 1151.838916][T24169] ? lock_acquire+0x2f/0xb0 [ 1151.838939][T24169] ? __submit_bio+0x3d1/0x690 [ 1151.838958][T24169] blk_mq_submit_bio+0x20f5/0x2610 [ 1151.838979][T24169] ? __submit_bio+0x3d1/0x690 [ 1151.838999][T24169] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 1151.839019][T24169] ? mark_lock+0xb5/0xc60 [ 1151.839041][T24169] ? __pfx___lock_acquire+0x10/0x10 [ 1151.839063][T24169] ? __pfx___lock_acquire+0x10/0x10 [ 1151.839086][T24169] ? trace_lock_acquire+0x14e/0x1f0 [ 1151.839105][T24169] ? __pfx_mark_lock+0x10/0x10 [ 1151.839137][T24169] __submit_bio+0x3d1/0x690 [ 1151.839156][T24169] ? __pfx___submit_bio+0x10/0x10 [ 1151.839175][T24169] ? trace_lock_acquire+0x14e/0x1f0 [ 1151.839200][T24169] ? submit_bio_noacct_nocheck+0x698/0xd70 [ 1151.839220][T24169] submit_bio_noacct_nocheck+0x698/0xd70 [ 1151.839241][T24169] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 1151.839263][T24169] ? __pfx___might_resched+0x10/0x10 [ 1151.839293][T24169] submit_bio_noacct+0x50d/0x1ec0 [ 1151.839314][T24169] mpage_readahead+0x41d/0x590 [ 1151.839335][T24169] ? __pfx_mpage_readahead+0x10/0x10 [ 1151.839359][T24169] ? __pfx_blkdev_get_block+0x10/0x10 [ 1151.839382][T24169] ? __folio_batch_add_and_move+0x5f3/0xc60 [ 1151.839406][T24169] ? __pfx_lock_release+0x10/0x10 [ 1151.839429][T24169] ? trace_lock_acquire+0x14e/0x1f0 [ 1151.839449][T24169] ? __pfx_blkdev_readahead+0x10/0x10 [ 1151.839471][T24169] read_pages+0x1a7/0xc60 [ 1151.839489][T24169] ? __folio_batch_add_and_move+0x689/0xc60 [ 1151.839515][T24169] ? __pfx_read_pages+0x10/0x10 [ 1151.839539][T24169] page_cache_ra_unbounded+0x426/0x7d0 [ 1151.839563][T24169] force_page_cache_ra+0x24b/0x340 [ 1151.839585][T24169] page_cache_sync_ra+0x158/0xa30 [ 1151.839605][T24169] ? __lock_acquire+0xcc5/0x3c40 [ 1151.839629][T24169] filemap_get_pages+0xb62/0x1c30 [ 1151.839656][T24169] ? __pfx_filemap_get_pages+0x10/0x10 [ 1151.839681][T24169] ? __pfx___might_resched+0x10/0x10 [ 1151.839709][T24169] filemap_read+0x3c5/0xe70 [ 1151.839731][T24169] ? trace_lock_acquire+0x14e/0x1f0 [ 1151.839754][T24169] ? __pfx_filemap_read+0x10/0x10 [ 1151.839786][T24169] ? apparmor_file_permission+0x251/0x400 [ 1151.839808][T24169] blkdev_read_iter+0x187/0x4b0 [ 1151.839831][T24169] vfs_read+0x886/0xbf0 [ 1151.839856][T24169] ? __pfx_vfs_read+0x10/0x10 [ 1151.839879][T24169] ? blkdev_llseek+0x9b/0xd0 [ 1151.839899][T24169] ? __pfx_lock_release+0x10/0x10 [ 1151.839924][T24169] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1151.839953][T24169] ksys_read+0x12b/0x250 [ 1151.839975][T24169] ? __pfx_ksys_read+0x10/0x10 [ 1151.840000][T24169] do_syscall_64+0xcd/0x250 [ 1151.840024][T24169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.840049][T24169] RIP: 0033:0x7f80b6716b6a [ 1151.840064][T24169] Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83 [ 1151.840081][T24169] RSP: 002b:00007ffd0684bb88 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1151.840098][T24169] RAX: ffffffffffffffda RBX: 00001fffffff0000 RCX: 00007f80b6716b6a [ 1151.840111][T24169] RDX: 0000000000000040 RSI: 00005598138dfd08 RDI: 0000000000000009 [ 1151.840129][T24169] RBP: 0000000000000040 R08: 00005598138dfce0 R09: 0000000000001000 [ 1151.840140][T24169] R10: 0000000000000015 R11: 0000000000000246 R12: 00005598138dfce0 [ 1151.840152][T24169] R13: 00005598138dfcf8 R14: 00005598138f5ad8 R15: 00005598138f5a80 [ 1151.840170][T24169] </TASK> [ 1152.910111][T24770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4785'.