last executing test programs: 3m29.05423827s ago: executing program 0 (id=1108): r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5b0, &(0x7f0000000100)={&(0x7f0000000040)="0300000000000000a367040082b8554c692a5ba91c111b973d5f4519028b086ec42929b2bf24f014a405a9741736ce02f38021581a8d8a124e27cf546859024483a99df965618b307f28dc4d14dca966f8bc023f7d9b015bb68ab90d316ea020c230c66fb4376285dcac4f6dac59492cfd92ff251307ef42e14dfa9d0ac9d6f4a23529", 0x49}, 0x5, &(0x7f0000000040), 0x5, 0x1}, 0x5}, 0x2, 0x100) 3m27.96862073s ago: executing program 0 (id=1110): r0 = waitid$auto_P_ALL(0x0, 0x4, &(0x7f0000000000)={@_si_pad}, 0x4e0, &(0x7f0000000080)={{0x80000000, 0x7}, {0x3, 0x6}, 0x5, 0x6, 0x100, 0x6, 0x10, 0x7fffffff, 0x100, 0x1, 0x8, 0x8000000000000000, 0x1, 0x3, 0x81, 0x7}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001340)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000001380)={0xa000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), {0x26}, &(0x7f0000000200)=""/249, 0xf9, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=[r0, r0], 0x2, {r1}}, 0x58) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001400)='/dev/ptyx8\x00', 0x80000, 0x0) ioctl$auto_TCSBRK(r2, 0x5409, &(0x7f0000001440)="d1b7a80366605373ab8ba3f6db012720490922a5369690d07ceb20764218b6be0536f1abe854c4ddcf984c43a1714e") ioctl$auto_TIOCGICOUNT(r2, 0x545d, &(0x7f0000001480)="66381daf") readv$auto(r1, &(0x7f0000001540)={&(0x7f00000014c0)="c07a60919aed7c849b041128f82266b993a48b66042029dd2a1c0b76d5c4a58843ced9efbdb92345b93017d9252139c1b3c3e4b6584b1465e7ecd6087d86c5084ebd8b7e2fccab56fa8877d7b1a244774f6fefb372e30c73da997a86402b16b22d37f5ecf021498d551a2573ed", 0x7}, 0xa9) r3 = socket(0x15, 0x2, 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001580), r4) r5 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f00000015c0), 0x4001, 0x0) ioctl$auto_UBI_IOCDET(r5, 0x40046f41, &(0x7f0000001600)) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001640), r4) read$auto_console_fops_tty_io(r2, &(0x7f0000001680)=""/179, 0xb3) r6 = setfsgid$auto(0xffffffffffffffff) fsconfig$auto_FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000001740)='\x00', &(0x7f0000001780)="c79e76aaf5b31e26d205fbeed950002f16cba72a8a700cc202279b314da0b524273b54930b92affbb43e0673f8ad46e9f8da90fe8d57ebe434c7e708309c1fe1909efd5fe29a9d43b2ad6b26f062be2aff2886046fca6a572b988d81f5d990d9b245fd15677f19dd92a83cf28e1065615f28d6c172ae97059f298759a239a0eafcc6ec42b6a64592b23f1484c4a1d20942033b4bc9ab1ebb4ee71037e3757c2a295ccdb011c2a26e5bb7a124cb4e36a588b49849eb4ac95cc218748140080a89d01288753cb6177fab9a456add319851481d06ccaa509f6a93919edf43647958fb0a63e8d46fa6345c2b0784", r6) madvise$auto(0x3e1d8d02, 0x45cf, 0x81) r7 = socket(0x1f, 0x3, 0x8) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r3, &(0x7f0000001a40)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a00)={&(0x7f00000018c0)={0x128, 0x0, 0x5d619a347f97fad6, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x7}, @NFC_ATTR_DEVICE_NAME={0xb, 0x2, 'TIPCv2\x00'}, @NFC_ATTR_SE_APDU={0xef, 0x19, "77970739d92dfcdd197d1bc4e051b4116948d5d0e37d26dbc0b971aeee323209b1527f7c08f3338e872cf163df8470afbeb5ea486a2915d81cf2f904edf0d7ec65c035591d3730ed0d1226fb2627895a32c01faa915684621333c81596a0c4e439f02624857f5af9bfc5fa59482af11925208595f3e4c5883e0af6eef3def485b8058ccd0a564f2868da3dea2923bf6a51e37315a2cfd842d497a9a8da5f7cb50837933b52bbb18d5071defe985b9b3cdb63e99d96674670468537067c4851d8ac1d5f29f04614e8261d989202214b77cd725dc43e6298189afee3c6d684efb634db3c86a4ded3a029d421"}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0xff}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x8}]}, 0x128}, 0x1, 0x0, 0x0, 0x2c000080}, 0x1) r8 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000001a80), r4) sysfs$auto(0x5, 0x7ff, 0x4) write$auto_tomoyo_self_operations_securityfs_if(0xffffffffffffffff, &(0x7f0000001ac0)="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", 0x1000) r9 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000002ac0), 0x0, 0x0) ioctl$auto(r9, 0x3, r2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002b40)={'macvlan1\x00', 0x0}) sendmsg$auto_OVS_VPORT_CMD_GET(r7, &(0x7f0000002c00)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x24, r8, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_PORT_NO={0x8, 0x1, 0x8000}, @OVS_VPORT_ATTR_IFINDEX={0x8, 0x8, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000000}, 0x90) r11 = openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000002c40)='/dev/bsg/1:0:0:0\x00', 0x2, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r11, 0x2272, &(0x7f0000002c80)="d23de97586f39947bfdc0469e39ea8b66aeca3f2e849aed6361b24847742f8f4c90ecc9c11e65426ce0b44d47690100b99fe28201fabe614464c23b67b2ce6752ec0fff26e09459257b3e50de52a0b206a201c85f1ed4e46bff18763b449a1b2765aa2ea4cb25171206e74e5d79c14c0af6d7ff84aa7c8e3aeb00a1c7dee6cf918f0d757cae5219a8146af7710abd06bb9daddb3e0bcf2340ecefead833210da6f5c9d9506c5908e0dce30784cc836ec26a577c4b59048b659a332b59d5343cbb41a844465155c62093395f4607a703bbfe70baef5276093eda2397062f76c048dcfe71ad6012f7e8bae4192c59018db76993ba39bccb46cdb49cdab0ee29a0a5ee7c2b514374eedacf9491d0ed53a3b86424ed25fddf8add1d7c021e4b76e89c9fbf81518ac08b7317ca2943e46df8e71954b7c2801068a2ffb25c959e5169592b9e9b3deda3af4b743a78ededb637d0f1882e51dc9cdda014e62a6a7d0a9927dd51a081b286e06596ce147df66d61b5d0058ebc20b40ac44d028b432c22ff17c1e2e8a054d2cbf9b4018492e4e8f670a3d24922338a2149c67c1ce8727f4335e5b02020eda7a4f46c6de9e220bd454ddf302561935461f7a1d75184900ff15b251da09c898687beee8eafcbb96a3371aabbd41798e6d3e37a03d527337bd8491ed82a0c6b04a141fd9b88b047152a9928bd5d6814584bec4532502faba397e2a02323a007cf21fe7a55d4379bf2f92bad9a6e1ab70a3cd08413eaefc585808627a52558e5589e3651398cea30603ab83eb690c14d8fe13ab2515fca4cd9f6b65a3b38ffd06ced814c0f8c0b9bfb7e06c5cbbac41ae92a2c19ddb840b7d2336bbf98e08d8b6108db606b846445087137e21c80351c9ffa5217ef15989d85a9f2a299d69d116320fb789a49e4543cec9efa53e4d35eb61720bbef6937515c3bd280930929c68cafac78174a6f892475e547ae1f4f05c203940cd2992e7c3bd4aae7fdd4e086aa6668eef024db45dc1af82314924b1907c162bf80568ea288fbb27f20388269b28ee85e6174efd43a2775e6fa1625cb9e458e31e863cbe144cc2062f21db9c12d3928df4cc71cb31a66024a1c6e7ca49324cc2195afb96bd8be4ac3f1e0bf607d2ac009d359f296c9417ef6d28487defe977869f84fac5100b917b6a06400e44578ac2edb7da8cbca81505a0464e5cb173a922e16b07a353c916c72f11cfe38f9c3f9c0abbe95a46b9a97909ccede6d063e26577279dfdb3d9500e7737e0af5a813021c4122f9f6966cc3475a6c56bd7a1620add52fe835cd86082d8581c2870df19b6b34cd56ed993d3d6aaee4d5b6942cc482a281c77a225c4346e83fc1c5f627aa6211509f8bddf1a4b076b9f5a4916ea37b6a3350fe44e3ecdb0bc4e72dd501757444134b77a8f99f94b8426c0c9afc45646b49e75f27701d26171af3dd6082a1fc1bca947926829b508863b10e2314eb0030d1572cb4659b1ffab8f7f33c42135ad16169139f4a68f6a80989964450a4d3ef0a9d7e6f12505720eeff8c70308503e2b886b18b99e1c5041888593031cdee8efb195c63bd31837db47cb4fd15b4e7f25e5c6d3e584f06d10bc3f875ca581dab9b842b24e1b23cc5f5a4370b4c9f6fd45cba3005f5c3c78834bb9ae6e2d5537c0b6fd3ed4cb6fe805a4cc39b0b622039e0cbd3b3c44bc3d8499cbbb13a1b69137585391104fcc65b3c7036cf7f9d200706d6cfeb6a4e6fc71d4c61b0484f8977a9ee1525d0944e8703cb68c59ce74dc54e978dead3ee30bfef23ad34f5cd64ed7b74a7b37b7a329de218e8ac47746cbedad31bd50cb7cb455620b5d1049f84954a36d05dd17a992578fa5b749bf3db350c273347ac98afa235c20fc4aef193b16003f21f51b9892f2a733c253cbf1648dedec795e5094a6d56aa8dc20e726d67be99cb7dac0ce3e2bde9a58259011aa5abbe23c276074df1ea690fd9b9475a97abca252b792c40e7906c312345d42b67ae225d6ca3e894b14dc4a2ce83a687af80adbaf91dac742b8928f1138301a0d114d73a654da6cb636615540e3d2988e0a416087520473cd0c682868fbafac727b919f0c3a895998539a98674f5d70fa9d6d20464fc51b1ddd212f474c26480ac71907481e927febaedc1357ef64abc7dbd845513e2f173b2827631aed050f23244691de4e0e6292763a8bd1560ca16ee765505782843affb072c16ed8b66b0e524c614c20291e1432b2d9bca28076e1e860a6c2724779474996397013a1335b70cd7bcfbaee671db9b371e387a911a60303e0647b30b106551241b1073fa9e37fc37c05e18fc954793cc0cca7d5931ec0cc862995d95f1f6e9ed9541ed1418bbf0cf696f847fd45a6136b091c819b326051c916fccfb1973a0ca44e35387993026323954dae2b09ca3e25922d161809bea614ae796c1148fd01b0279b3252bd73d115460c427183894cf0850d7c8a652abd44ee285e56b8f3960a4d30455bb6c5416e7fa28b3d9f6996cf9d74a25d08c0c458dc148e7a848f7a16c40d116749d398138196fa6d9cd5f4e276bba397477b77d8a12d1b73165a7aa782ca290d12dc546306fc6881acd4768dc6f2d04ee5ac339fbe5665118f50e83f328a165dcaca613e530156537839836a89cce9f00b12bb48b2875e18463f483d355acd74ff5335c0302ff7e40768617051fa0088fd86edc85a1c8a2220e41ff30a8ce488e4e0340101f220d3837c8e9b2344380d588cff2debb291daf0eddad5bed50ee528204ccb276790758701e3e9c4355c0ff57c9f1bfd551bed57e765964a233fc172c5a1e23b0fee4b30ee8eff4cbb10dbcd7a1524cdd8d051eb8a4d5e24e2503304474f930e2cb1a96a953ec3f28798c053c0a1f0005a6acdf631f9a807cd8eaf6f56336bacb68044b1e5e5baf996a59f728b3320668509c87905fe5cdd25671612d91a84132b86b4c6b0f3e1f7e03b23ab7ffc9ab3cc17855ecd03bddaec3bda15ffb37cbe50d550c06c643f2e9636dd38a20fb37c8218927c9f9c9d578fdb0c1451a49997c1e9f18e81ca199442fc3c5c64a48c42b56af695792acf4808650edb4ae739e8833b9f55d2bddb958b02c6714486f774496c671d19b5ffaec578937d2507cee8da1aaf93a35ebd5d67e7b4e92b00b146581997cb994294f004df3f8fb8f8a4fd8d1e6f6693a8313e20b75d823f4bca78146e0ebacfc7e21e1dfd9b9bd970ab1c14d616f8fef5577ba57e83935611658fdede48e3773a8cf92b012bc2b6e3363eae85739834578bd61ee6986e156ae2e419c7c841b3960c562ce8631344a0792ca8f78d52c6f5836a5ab0cd40cf1d08ac71813fa75dbb40113d3bf1e9ecee7c3c3e0ab7eff59ca0327c49449bda5790904dcb59e03a82284d3ffe7fb1d0b6914977efb46771821359fb2623888c2a45c6b235004b09294ce4bd4f0e18b0c8ab88aa3716cb0c07f0c218564bbb0feaa68f4e95caef3d12ef66ace8cc90d382daf8cb9de4a1a0833fcc98b583a6386eba5547f261eedce194172adce6071eec31e03e3d20002c0a948ff18dddc67c8153c187af3f548687b2bd23a89b3eb7414cbc98e8f28a496aeb27572b55279a075c5eaeefc603d2d4b42c898ba7a3e02138cd2053654ac760fec1553af6a861d2e18b599bdd5bfdcba2af15e0595d10f8a6f1d365f8b7cfb2e2c76608b5de28686d52fdf9e3189f241966ba8db5158f632c355d1aebd5e521aec8aafd8eb28addeed6a70c00e9e89da46ec02cb89acf45044611917c3fc5f57cbef3df710ae4f11c17533f69b966cd6039c01138fca3113d704d66fcb13eeb212c1fe1fa8e154a7b77a03095e4cecae1ddfdf36c4b6f8ba9f7649e5536537d40869c8a206fa086fe5d105d19843d3edbcea8a5cad54bd1057b3f3881e2b8f675d61367384bacab2ee74a35d2992afb529cf5006827adb56ad6fc26051211611d3ebfe91adfc5aeb59629ff060c404919b09feba87a2e68ef36785d836a618f311b133d74d3a4916890e6b71fff8d5c5103a195caaea006cf6eaac90271042f09c266736399a9da70bb60e11fc87eb2d100c402a38e4ed485822813f2e10ef7a0bee43d210b26f5f30a14a6fe630f721ad9c9d5c04595c01b9c5c1aa435407374c254599ace04b22a1d0edad32fd5d14ba8a757f2b6ab5e1ec50fe0912faee938bae98d510819acbdaff28d0e5a6c7efd5e6710cae77c9187ba81571f8a806efc5e26418f47a2ff1bf6c2be7e8fb97ccb80851b3bf12632d0764dc5c58a075097d6f5cb2e57009098b8b03f838b0c05da32262180e8135733d91e6100dfa11bbe6bf341bb77125445b86bc616422401c7c9268c79ed61a0a680330da0a7907f15b1662392e0e9e9be3629d94b5f4bf6a75cf8fa4593bfd672a6cd07b74b0921eb43917e5b462ff4c7571ee91d88f8b7ec2c6b02b21adaf69709a3526c693269da282b1a293e95aa323371ef16c4b6c2232a498ce1012d5ec2135e7af0c5c30e347014c07d2217774c75383a76a200e2238aa3aeb6aac7aba3fd830691a3e2b898b1b05c351b1e19b01bbff2f93154c84ff2489ea2e06b46e21bc9dd62f47b1a47a75cf6c355c56a682ec68240072825dcbd8adfdc5f8da7452d883ffd4485353abe5ff7261fe2434923b6b67f2b58678a58e72dc7d1683d01e61fadf0c1762d32fa1421b095338fcfd40ab445cea982f8bc5f608c2a03bb4baa56c1fd6ac06488645346fc1a7360fdb7de4c92dee56b4ebd5730f8ddb2ee64fd6eaabc0455c1cdbbc33045f13eeebebddca0a1e2475cbee143f9a509fc99cac37e23fc2fea16f5ac1685e278c8908cc008a95facb24b1a7a14d49458a785e1ab90f5597854e7de3767be5f869395efa9cb7e797d211512d506de6f1e28e7e5f63e3bab7ad10aa58afd06476085386604dfa3ce0f56b4b95db354eb83efa39bd92fb1d40828f586343069a9c9d65e51f6c1c840716696f4107c1c3b5915e007c5496bb7817b9de8311625aee011b7c553075b6ed315d0dee21652add27e0008580448e62e15912273e63936e17e25ecf3732d075d40738b9a0bde082c27ba49502c293fc63da6e11ffdefa72f291eb20e68d551b6e68ce50d808f37224c43d74a7da3d7992f7d4143888588f96d4ba7153cf235c80930f4f3dd4419584972c7dd1edc7f42fe05c8b222fe71b85d4152368a95662130b2e01b39907244186f11bfcea951ef2cc7fd809da6b57d4165bc0a84dc54a56ffb44d631ad511f5c053cbdb083c9839f0d58a35361249f12ef3f03e05cc4a431be37108cb02022561d4109574b0c017930dce577dd92812e22d70dc846758aca4c1fd0c0116bd6279872b071b18e04809a0608d1fa3e52d0625540ffc00db8649f278bdfcdd0758bb5b5485a98fe518cae828f3e4b6ecbeb2f1cc84bfd793bf664836b11891aa1276040b6d1d5228277871ae790ce33ce9690e910d26c3168eb19636bffd94e34d66f4b3a4e6619d6ec214b4404a7af1a6695678d00fccf3001b9d529714f57f0366f31c6c32db4acf53b2a08158dda4ce81846d29164ab29c4f6c12812ae297473a9eba9f787002685b816346235aae6a51527ef0c6188365a7b8455b19683676ca6622bb540e0aa663cb60807769f8f0d1bc2185d526610e05eee9b9df96a2139ddb3be26dd8baeba266b4d966e28e9b2e2dd4ab3b6f7bf4d93abf0b90c36390710cd670222bfca72a984878e1f97fe6c17423e2eea2faf19926f0de74018673ab559947bab3adfc309292591272d56aef1ba94ec29") socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0xffffffffffffffff, r3, 0x0) 3m26.97687822s ago: executing program 0 (id=1112): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x100, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) shutdown$auto(0x200000003, 0x2) poll$auto(&(0x7f0000000d40)={0x3, 0xc16, 0xa}, 0x5, 0x400) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r6 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) write$auto_console_fops_tty_io(r6, &(0x7f0000001240), 0x0) sendmsg$auto_ILA_CMD_ADD(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010228bd7000ff08000400000000000000002e51852c30c7e9b7230a84caa5f420b9d2018e39a96643e7b6101d723dd5ef3a9f78742af1bfa0923d4c12da6cf867ad3dc71aafeb60147d84813e", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x38) sendmsg$auto_ILA_CMD_ADD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48884}, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 3m26.702007031s ago: executing program 0 (id=1113): close_range$auto(0x2, 0xa, 0x0) prctl$auto(0x2f, 0x3, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/tracing_cpumask\x00', 0x8042, 0x0) socketpair$auto(0x1, 0x2, 0x0, 0x0) socket(0x2, 0x6, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/auth.unix.gid/content\x00', 0x20000, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x20000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1$auto(0x3000000000000) socket(0xa, 0x2, 0x3a) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1c8b40, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x482, 0x0) socketpair$auto(0x8001, 0x9, 0x4, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80106f53, r0) 3m25.628946752s ago: executing program 0 (id=1116): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu1/buffer_size_kb\x00', 0x604001, 0x0) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, 0x0, 0x2, 0x9) recvmmsg$auto(0x4, &(0x7f0000000200)={{0x0, 0x4, &(0x7f0000000140)={0x0, 0x4da}, 0x4, 0x0, 0x8, 0x800}, 0x1000}, 0xffffffff, 0x0, 0x0) ioperm$auto(0x3, 0x5, 0x149) init_module$auto(0x0, 0xffff9, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r1 = openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000001680)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2, 0x0) write$auto_uprobe_events_ops_trace_uprobe(r1, &(0x7f0000000000)="c500000bfc94be9fe6c22ffaf8493a3800ea1ed717e8134889f0135920000000000000bcc037355e5edadafd26f87d9c00055bf4db0566453bad", 0x3a) 3m24.506727878s ago: executing program 0 (id=1119): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r1, 0x1, 0xf0bd29, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x11}]}, 0x24}}, 0x4000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) mq_timedreceive$auto(0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000340)={0x1, 0x80000000}) socket(0x10, 0x2, 0x0) r2 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) lseek$auto(r2, 0x1, 0x1) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/tty9\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f0000000080)="352c8efa618c0bcf838acadb278754e15f334a572cad539da201096bbbc2ce7db19c4299e7137d848ef31b38", 0x2c) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1ac}}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000015c0), r4) sendmsg$auto_NL80211_CMD_GET_STATION(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004001}, 0x8886) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyv5\x00', 0x542, 0x0) ioctl$auto_TIOCSWINSZ(r5, 0x5414, &(0x7f00000000c0)) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r3, 0x0, 0x7, 0x0, 0x0) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000140)='/dev/usbmon6\x00', 0x2302, 0x0) ioctl$auto_MON_IOCQ_URB_LEN(r6, 0x9201, 0x0) ioperm$auto(0x800, 0xffffffff, 0x7) sched_setaffinity$auto(0x0, 0xe10b, &(0x7f0000000000)=0x7d5ff20b) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x401bf, 0x7352, 0x3a, 0x65f, 0x201ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x5, 0x4, 0xb4, 0x6, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x0, 0x2000, 0x203, 0x0, 0x84, 0x6ab5, 0x80, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000000000]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r7 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x9, 0xa503}, 0x800}, 0x7, 0x24008) 3m15.087184053s ago: executing program 32 (id=1105): socket(0x2a, 0x3, 0x6) (async) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xca, 0x0, 0x1ff) (async, rerun: 64) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000340), 0x108800, 0x0) (rerun: 64) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0xa400, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) set_mempolicy$auto(0x1, &(0x7f00000000c0)=0x9, 0x5) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x2, 0x2) (async) r2 = prctl$auto_PR_SCHED_CORE_GET(0x7fffffff, 0x0, 0xffffffffffffffff, 0x5a, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'pimreg\x00'}) (async, rerun: 64) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) (async, rerun: 64) unshare$auto(0x40000080) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x4, 0x0) (async, rerun: 32) mmap$auto(0x1000000000000, 0x9, 0x200000000ffb, 0x8000000008011, 0x3, 0x0) (async, rerun: 32) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) socketpair$auto(0x2000001e, 0x40, 0xcf0a, 0x0) io_uring_enter$auto(r1, 0x0, 0x1, 0x3, 0x0, 0x2) (async) io_uring_enter$auto(r0, 0x3, 0x7, 0x5, 0x0, 0x9) socket(0x15, 0x5, 0x0) (async) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x2, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_RESET2(r3, 0x4141, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 64) mincore$auto(0x750, 0x4000004, 0x0) (rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 3m8.929322275s ago: executing program 33 (id=1119): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r1, 0x1, 0xf0bd29, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x11}]}, 0x24}}, 0x4000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) mq_timedreceive$auto(0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000340)={0x1, 0x80000000}) socket(0x10, 0x2, 0x0) r2 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) lseek$auto(r2, 0x1, 0x1) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/tty9\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f0000000080)="352c8efa618c0bcf838acadb278754e15f334a572cad539da201096bbbc2ce7db19c4299e7137d848ef31b38", 0x2c) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1ac}}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000015c0), r4) sendmsg$auto_NL80211_CMD_GET_STATION(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004001}, 0x8886) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyv5\x00', 0x542, 0x0) ioctl$auto_TIOCSWINSZ(r5, 0x5414, &(0x7f00000000c0)) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r3, 0x0, 0x7, 0x0, 0x0) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000140)='/dev/usbmon6\x00', 0x2302, 0x0) ioctl$auto_MON_IOCQ_URB_LEN(r6, 0x9201, 0x0) ioperm$auto(0x800, 0xffffffff, 0x7) sched_setaffinity$auto(0x0, 0xe10b, &(0x7f0000000000)=0x7d5ff20b) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x401bf, 0x7352, 0x3a, 0x65f, 0x201ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x5, 0x4, 0xb4, 0x6, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x0, 0x2000, 0x203, 0x0, 0x84, 0x6ab5, 0x80, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000000000]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r7 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x9, 0xa503}, 0x800}, 0x7, 0x24008) 2m37.636028143s ago: executing program 5 (id=1192): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyr7\x00', 0x4102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="1f91f2c388274610e18d5fc5e5bfd9800e9b58", 0x13) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = fanotify_init$auto(0x6b1, 0x3) mmap$auto(0xd, 0x2000000000000fb2, 0x1, 0xeb1, r1, 0x8000) r2 = socket(0xa, 0x2, 0x0) sendto$auto(r2, 0x0, 0x402, 0xacf8, &(0x7f0000000200)=@generic={0xa, "fe57bcce28e6f92e3500"}, 0x1b) capget$auto(0x0, 0xfffffffffffffffe) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x24af01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000180)='/dev/usbmon21\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/010/001\x00', 0x20000, 0x0) socket(0x23, 0x2, 0x0) r5 = prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyxb\x00', 0x8dd7526b021736f4, 0x0) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x11, 0x3, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x22002, 0x0) close_range$auto(r5, r4, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_IOC_PR_REGISTER(r6, 0x401870c8, &(0x7f00000000c0)={0xfffffffeffffffff, 0x5}) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/platform/dummy_hcd.7/usb8/power/wakeup_expire_count\x00', 0xa0440, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/59, 0x3b) unshare$auto(0x40000080) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', 0x68200, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyed\x00', 0x181802, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) 2m36.18536358s ago: executing program 5 (id=1195): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x181081, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) clock_adjtime$auto(0x0, &(0x7f0000000240)={0xdbd, 0x0, 0x7, 0xfffffffffffffffe, 0x600, 0x40, 0xb, 0x0, 0x100000000, 0x4, 0x3, {0x403, 0x2000d05}, 0xfffffffffffffff8, 0xa5, 0x9, 0xb87e, 0x0, 0xc7, 0xfff, 0xb, 0x5, 0x5, 0xfffffffd}) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/mmu_pde_zapped\x00', 0x2100, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) prctl$auto(0x35, 0x2, 0x0, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e32, @rand_addr=0x64010101}, 0x51) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) read$auto_stat_fops_per_vm_kvm_main(r1, 0x0, 0x0) socketpair$auto(0x7fffffff, 0xffffffff, 0x2, &(0x7f0000000040)=0x7) 2m34.315428726s ago: executing program 5 (id=1197): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) io_uring_setup$auto(0x59, 0x0) get_mempolicy$auto(0x0, 0x0, 0x400, 0x0, 0x1) process_madvise$auto_MADV_DONTNEED_LOCKED(0xffffffffffffffff, &(0x7f0000000100)={0x0}, 0xc, 0x18, 0x0) r0 = syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0x4018aee1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) timer_create$auto(0x9, 0x0, 0x0) timer_settime$auto(0x0, 0x8, &(0x7f00000000c0)={{0x400000000f, 0x10007}, {0x9}}, 0x0) r4 = socket(0x2b, 0x1, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/sg/def_reserved_size\x00', 0xc8000, 0x0) setsockopt$auto(r4, 0x29, 0x20, 0x0, 0x8002) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r0, 0x301, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_QSTATS_SCOPE={0x4, 0x4, 0x10}, @NETDEV_A_QSTATS_IFINDEX={0x8}]}, 0x28}, 0x1, 0x1c00, 0x0, 0x80}, 0x8000) openat$auto_lsm_ops_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 2m31.200816632s ago: executing program 5 (id=1204): madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/tty53\x00', 0x200, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x109302, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC2\x00', 0x101000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x274100, 0x0) select$auto(0x2, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x0, 0x1, 0x2, 0x3, 0x20095f4da0a, 0xefffffffffffffff, 0x3, 0x8062, 0x80000001, 0x10000000000004, 0x6d40, 0x4, 0x2, 0xfffffffffffffffe]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x1) write$auto(0xffffffffffffffff, &(0x7f0000000440)='/dev/audio1\x00zSy\xda\x84\x1d+\xa8v\x1b)\xf7\xabbg8\xa2\xd1\xd3\xef\xe4\xf7\xa3\xd5\xd9\xab\x04%\xba\xac\xac\x0e\x1a\xbd\xe8ge\xfd\xed\x8cE-\x9b\x9f\xe5\x81\xb5\x8a\xbb\xec`\x9c\xfcu\xc9!\xb6\xbfCe\xf4\x150^^\xe6\r\"\n\xbb\xeb\xe46\xf8\xb3\xd3!\xecagd\xa1\x11l\x7f\x98u4?\xf2\xcf\xd6\xe7\xd62\a\xc3Y\x8a\x8c\x8c\xc0\xb6\xa6\x19\xf9\xd5^.\xfb)\b.\xb4\x1f\xceB\xfdUN\xf80\xc8\x0fu\x04G\xc4f\xd6bk;\x9b;ZE\xea\x81d\xbf\n[\xb7\xda4\x88\xff0\xc4]\x83XD\x8dHV1\xf2)\xf0\x99\xab\xf8\xee\r\xb4', 0x100000a3d8) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0xc45d, 0x82, 0x741, 0x3, 0x2, 0x5, 0x3, 0x2, 0x7, 0x7, 0x6d3e, 0x2000000004000009, 0x4, 0x6]}, 0x0) socket(0xa, 0x3, 0x94) mmap$auto(0xf87f, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000240)={0x7ffffffd, 0x0}) r1 = getpgrp(0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x4) madvise$auto(0xfff, 0xffffffffffff0005, 0x19) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x2, 0x4) close_range$auto(r0, 0x8, 0x4) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) ustat$auto(0x9, &(0x7f0000000040)={0x175, 0x9, "fe6786bc6fe2", "528238565fd5"}) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x60282, 0x0) msgctl$auto_IPC_INFO(0x7, 0x3, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x2, 0x57d, 0x1}, 0x0, 0x0, 0x3, 0xc, 0x402, 0x5, 0x2, 0x18, 0x0, 0xfff8, @raw=0xfffffffa, @inferred=r1}) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) 2m30.040081184s ago: executing program 5 (id=1208): r0 = socket(0x2d, 0x2, 0x0) mmap$auto(0x0, 0x2009, 0x4000000020df, 0xeb1, r0, 0x8000) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) semctl$auto(0x7, 0x2, 0x13, 0x1) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0xff00) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd1\x00', 0x159182, 0x0) 2m28.397346699s ago: executing program 5 (id=1210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r1, 0x1, 0xf0bd29, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x11}]}, 0x24}}, 0x4000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) mq_timedreceive$auto(0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000340)={0x1, 0x80000000}) socket(0x10, 0x2, 0x0) r2 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) lseek$auto(r2, 0x1, 0x1) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/tty9\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f0000000080)="352c8efa618c0bcf838acadb278754e15f334a572cad539da201096bbbc2ce7db19c4299e7137d848ef31b38", 0x2c) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1ac}}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000015c0), r4) sendmsg$auto_NL80211_CMD_GET_STATION(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004001}, 0x8886) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyv5\x00', 0x542, 0x0) ioctl$auto_TIOCSWINSZ(r5, 0x5414, &(0x7f00000000c0)) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r3, 0x0, 0x7, 0x0, 0x0) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000140)='/dev/usbmon6\x00', 0x2302, 0x0) ioctl$auto_MON_IOCQ_URB_LEN(r6, 0x9201, 0x0) ioperm$auto(0x800, 0xffffffff, 0x7) sched_setaffinity$auto(0x0, 0xe10b, &(0x7f0000000000)=0x7d5ff20b) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x401bf, 0x7352, 0x3a, 0x65f, 0x201ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x5, 0x4, 0xb4, 0x6, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x0, 0x2000, 0x203, 0x0, 0x84, 0x6ab5, 0x80, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000000000]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r7 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x9, 0xa503}, 0x800}, 0x7, 0x24008) 2m13.270918225s ago: executing program 34 (id=1210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r1, 0x1, 0xf0bd29, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x11}]}, 0x24}}, 0x4000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) mq_timedreceive$auto(0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000340)={0x1, 0x80000000}) socket(0x10, 0x2, 0x0) r2 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) lseek$auto(r2, 0x1, 0x1) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/tty9\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f0000000080)="352c8efa618c0bcf838acadb278754e15f334a572cad539da201096bbbc2ce7db19c4299e7137d848ef31b38", 0x2c) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1ac}}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000015c0), r4) sendmsg$auto_NL80211_CMD_GET_STATION(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004001}, 0x8886) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyv5\x00', 0x542, 0x0) ioctl$auto_TIOCSWINSZ(r5, 0x5414, &(0x7f00000000c0)) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r3, 0x0, 0x7, 0x0, 0x0) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000140)='/dev/usbmon6\x00', 0x2302, 0x0) ioctl$auto_MON_IOCQ_URB_LEN(r6, 0x9201, 0x0) ioperm$auto(0x800, 0xffffffff, 0x7) sched_setaffinity$auto(0x0, 0xe10b, &(0x7f0000000000)=0x7d5ff20b) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x401bf, 0x7352, 0x3a, 0x65f, 0x201ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x5, 0x4, 0xb4, 0x6, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x0, 0x2000, 0x203, 0x0, 0x84, 0x6ab5, 0x80, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000000000]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r7 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x9, 0xa503}, 0x800}, 0x7, 0x24008) 2m1.099791277s ago: executing program 6 (id=1236): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x100, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) shutdown$auto(0x200000003, 0x2) poll$auto(&(0x7f0000000d40)={0x3, 0xc16, 0xa}, 0x5, 0x400) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r6 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) write$auto_console_fops_tty_io(r6, &(0x7f0000001240)='\t', 0x1) sendmsg$auto_ILA_CMD_ADD(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x38) sendmsg$auto_ILA_CMD_ADD(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48884}, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 2m0.547144653s ago: executing program 6 (id=1263): mmap$auto(0x7f, 0x2020009, 0x5, 0xebf, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) execve$auto(0x0, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, 0x0, 0x55) open(&(0x7f0000000040)='./file0\x00', 0x98800, 0x100) r1 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r1, 0x0, 0xffffff7f) r2 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, 0x0, 0xa002, 0x0) writev$auto(r2, &(0x7f0000000300)={0x0, 0x1}, 0x100) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_UBI_IOCDET(0xffffffffffffffff, 0x40046f41, 0x0) unshare$auto(0x40000080) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f0000000500)='/dev/cpu/0/cpuid\x00', 0xad00, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) pread64$auto(0xffffffffffffffff, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6\x00'/62, 0x5, 0x8000400) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x8000000000000001, 0x3, 0x62, 0x8000001f, 0x20000008008, 0x6d3e, 0x9, 0x100000000002, 0x6]}, 0x0) 1m59.278221819s ago: executing program 6 (id=1267): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r0 = socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r1}, 0x18) r2 = socket(0x2, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3ec0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compaction_proactiveness\x00', 0x40001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r4, 0x0, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x8b72, 0x2, 0x8000) r5 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(0x0, 0x7) read$auto(r5, &(0x7f00000000c0)='/proc/sys/vm/compaction_proactiveness\x00', 0xb) r6 = fcntl$auto(0xff80000000000000, 0x409, 0x3f) mmap$auto(0x0, 0x25, 0x6, 0x8012, 0x0, 0x800000000000) fallocate$auto(r6, 0x0, 0x7, 0xb) 1m58.894573915s ago: executing program 6 (id=1269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r1, 0x1, 0xf0bd29, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x11}]}, 0x24}}, 0x4000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) mq_timedreceive$auto(0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000340)={0x1, 0x80000000}) socket(0x10, 0x2, 0x0) r2 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) lseek$auto(r2, 0xf000, 0x1) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/tty9\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f0000000080)="352c8efa618c0bcf838acadb278754e15f334a572cad539da201096bbbc2ce7db19c4299e7137d848ef31b38", 0x2c) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1ac}}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000015c0), r4) sendmsg$auto_NL80211_CMD_GET_STATION(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004001}, 0x8886) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyv5\x00', 0x542, 0x0) ioctl$auto_TIOCSWINSZ(r5, 0x5414, &(0x7f00000000c0)) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r3, 0x0, 0x7, 0x0, 0x0) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000140)='/dev/usbmon6\x00', 0x2302, 0x0) ioctl$auto_MON_IOCQ_URB_LEN(r6, 0x9201, 0x0) ioperm$auto(0x800, 0xffffffff, 0x7) sched_setaffinity$auto(0x0, 0xe10b, &(0x7f0000000000)=0x7d5ff20b) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x401bf, 0x7352, 0x3a, 0x65f, 0x201ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x5, 0x4, 0xb4, 0x6, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x0, 0x2000, 0x203, 0x0, 0x84, 0x6ab5, 0x80, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000000000]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r7 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x9, 0xa503}, 0x800}, 0x7, 0x24008) 1m51.166065441s ago: executing program 3 (id=1284): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000000)='>', 0x8000, 0xff}, 0x2}, 0x1, 0xb) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x200000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x408, 0x3, 0x10101, 0x6fb3, 0x8a, 0xffffd387, 0xffffffffffffffff, [0x100, 0x7, 0x7f], {0x2, 0x7, 0x3034, 0xc, 0x8f, 0x2, 0x5, 0xfffffff9, 0x6}, {0x4000, 0x2, 0x0, 0xfffff000, 0x0, 0xb89, 0xd5, 0x837, 0x8}}) socket(0x28, 0x1, 0x0) socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, 0x0, 0x400c000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f00000038c0), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000003980)={0x0, 0x0, &(0x7f0000003940)={&(0x7f0000003900)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0xba}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008800) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r5, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_to_hsr\x00'}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006400)={0x2e20, r1, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2e07}]}, 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) 1m50.157351407s ago: executing program 3 (id=1287): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:01/status\x00', 0x80840, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000000)=""/46, 0x2e) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r2 = socket(0x1a, 0x5, 0x9) madvise$auto(0x7, 0x9, 0xffffffff) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x5, 0x0, 0x1f, 0x9}, 0x800009}, 0x3, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)={0x30, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IOAM6_ATTR_NS_DATA={0x8, 0x2, 0x2}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x4}, @IOAM6_ATTR_NS_DATA_WIDE={0xc, 0x3, 0x10000}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r4, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@IOAM6_ATTR_NS_DATA={0x8, 0x2, 0x6}, @IOAM6_ATTR_NS_DATA_WIDE={0xc, 0x3, 0x4}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x40}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x6}, @IOAM6_ATTR_NS_DATA={0x8}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x2000}, @IOAM6_ATTR_NS_DATA={0x8, 0x2, 0x4}, @IOAM6_ATTR_NS_ID={0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x48055}, 0x40080c0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/afs/servers\x00', 0x400, 0x0) pread64$auto(r5, &(0x7f0000000080)='\xd5u+~\xa7x\xe0VQ\x1a6\xcf\xce\xfa\xfbN\x19\b\xf64\r\x122i\xd6\x0e\xfa\x96\x9aV:\xe1G\x14\xb2\xd4N\x0e#jX:\xd0\xe4\xa9\xda\xaf\x98\x94G\xa8\xb4\xa7uPc\x1ang\xdb\xb4\xa7\xad\x1b\xcbonh\xd8\x99\x03\x10\xb0\xa5\xfey\xd5F,70\xecG\x8a\fz\x95\x7f\xb0Y{\xdd\xa1\xa3E\x03\xd4\xc67U\x93\xe3A{\n\xfc\xa4\x0e_\xf8\x94\xc3a\x00\xe6\xea4\xa2\x7ft\xeb\x8b$\x16\x0e\xe8j\xcaI\xe0c\x05\x12(\v\xef\xc5Z\xfb\xed\xa3\x01\x001\xa5\x18%\xae/\x1b6\xaa\xf5ysD\xa6\xee\xbf\xc0v\"\x93\x96\"\xcak.\x0e_\xb3\xf7\xac\x9e\xbd/w\xdf\xfc\xe24z\x0f\x8f\b\xbe\xda\xfb\xd0Jj\x97\xfa{\x9d\xfd\xfb\x14\x1f\xb0\xe7\b#\xb9\x01\xf7\xf5\x1c1\xfbNX\xd9\xf0\x97@\xff(\x99\x13M\xadM\b\xf5\xcd\xa3\xe1Q|\r\x18\xd5\xb4\x1c\xa5\xfd\xdf\x98\xd9\xa7\xf3u\xa8ak\xfaHS\xfa\x12\x85\x85\x14\b\x9c\x15\xc10\xb3\xd5.\x13\xc6\xb6\xbak:\xbf\x8f\xcd\x7f\a\xb8', 0x1ff, 0x5) r6 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) read$auto(r6, 0x0, 0x1) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x5) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0xcf}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xb}) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22008004}, 0x40448a0) writev$auto(r0, &(0x7f0000000340)={&(0x7f00000002c0), 0xda7e}, 0x9) 1m49.858129715s ago: executing program 3 (id=1290): r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000001d40), 0x40a40, 0x0) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto_snd_seq_f_ops_seq_clientmgr(r0, 0x8, &(0x7f0000000140)="4f0561ebf7594977bf3b024ade0d975fc3ceee5dddb443197a3d7a6e4a02f5766be667bd19278a9284c2af5d06123b57afb0ead658320810baebd6b3befc6f42b08b28aef3896393c01527bb") readv$auto(r1, &(0x7f00000000c0)={0x0, 0x5}, 0x3) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x1010001, 0x100000003) read$auto(r2, 0x0, 0x20) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r1, @ANYRESHEX, @ANYBLOB="746cb551e830601e0d16aabb95291469d303f663aee02f11c85470d52aad0e1a83597ff7ee28603127a63aa61486d9def84244b955e043f80e4863109603599904e43691d52f8b8db3f762b23603e1aeea28c050892624ce04b9aa085cc103b84b27b4f6399119f1c648753803ada83ef75d2f83473afa338a9363aec6fc7e290c779f559a7721508685a053719936c59213308d23b1d3d1e8555c43793617dd0492ab7c5024ad50f8abd13c2b5ea6b33cb1b1730c67f78ba2a77fcf21948b126604c380be7ebf"], 0x40}, 0x1, 0x0, 0x0, 0x2408c810}, 0x40418c0) mmap$auto(0xff0f200000000000, 0x400008, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x3d, 0xffffffffffff0001, 0x15) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000a40), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3], 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x64) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200006, 0x19) shmctl$auto_IPC_STAT(0x4, 0x2, 0x0) select$auto(0x8, &(0x7f0000000340)={[0x10, 0x8000000000000000, 0x9, 0x0, 0x0, 0xeed, 0x10001, 0x1000, 0x82, 0x9, 0x8, 0x401, 0x7fffffff, 0xa6, 0x8e0]}, &(0x7f00000003c0)={[0x3, 0x9, 0x4, 0x3, 0x2, 0x4720, 0x4, 0x8, 0x1, 0x80, 0xffff, 0xfff, 0x5, 0x7fff, 0xce, 0x1]}, &(0x7f0000000440)={[0x82b760, 0x1fa4658f, 0x8000000000, 0x2, 0x9, 0x7fff, 0x0, 0x9, 0x9, 0x0, 0x9, 0xb5, 0x7fffffff, 0x8, 0x7, 0x5]}, &(0x7f00000004c0)={0x8000000000000001, 0x1}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 1m47.589339101s ago: executing program 3 (id=1292): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x3, 0x6) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf25030000000800030000020000080004000500000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000080002008680f55e6f9c81352c3059eec2cd88be829a8949040bdd95774a604245135885bef414d3", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="0800030000044000"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x9c0a7fc06f585e63) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) (async) mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) (async, rerun: 32) madvise$auto(0x0, 0x200007, 0x8) (rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m47.331747857s ago: executing program 3 (id=1293): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.0/usb1/authorized\x00', 0xe2400, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) (async, rerun: 64) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x3, 0x0, 0xab77, 0x9}, 0x800}, 0x4, 0x4008) (rerun: 64) r1 = socket(0x29, 0x2, 0x0) socket(0x10, 0x2, 0x0) (async, rerun: 64) fcntl$auto_F_SETLKW(r0, 0x7, 0x2) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES16, @ANYRES8, @ANYBLOB="64e6"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40814) ioctl$auto(r1, 0x89fd, 0x24) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mlockall$auto(0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bond0/bonding/slaves\x00', 0x80002, 0x0) (async) preadv$auto(0x3, 0x0, 0x3, 0x10000, 0x10) (async, rerun: 32) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) (rerun: 32) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async, rerun: 64) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x68140, 0x0) (async, rerun: 32) acct$auto(&(0x7f0000000000)='/dev/ptmx\x00') (rerun: 32) 1m46.084583058s ago: executing program 3 (id=1296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r1, 0x1, 0xf0bd29, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x11}]}, 0x24}}, 0x4000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) mq_timedreceive$auto(0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000340)={0x1, 0x80000000}) socket(0x10, 0x2, 0x0) r2 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) lseek$auto(r2, 0x1, 0xfffff000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/tty9\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f0000000080)="352c8efa618c0bcf838acadb278754e15f334a572cad539da201096bbbc2ce7db19c4299e7137d848ef31b38", 0x2c) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1ac}}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000015c0), r4) sendmsg$auto_NL80211_CMD_GET_STATION(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004001}, 0x8886) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyv5\x00', 0x542, 0x0) ioctl$auto_TIOCSWINSZ(r5, 0x5414, &(0x7f00000000c0)) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r3, 0x0, 0x7, 0x0, 0x0) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000140)='/dev/usbmon6\x00', 0x2302, 0x0) ioctl$auto_MON_IOCQ_URB_LEN(r6, 0x9201, 0x0) ioperm$auto(0x800, 0xffffffff, 0x7) sched_setaffinity$auto(0x0, 0xe10b, &(0x7f0000000000)=0x7d5ff20b) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x401bf, 0x7352, 0x3a, 0x65f, 0x201ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x5, 0x4, 0xb4, 0x6, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x0, 0x2000, 0x203, 0x0, 0x84, 0x6ab5, 0x80, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000000000]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r7 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x9, 0xa503}, 0x800}, 0x7, 0x24008) 1m43.794972142s ago: executing program 35 (id=1269): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r1, 0x1, 0xf0bd29, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x11}]}, 0x24}}, 0x4000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) mq_timedreceive$auto(0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000340)={0x1, 0x80000000}) socket(0x10, 0x2, 0x0) r2 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) lseek$auto(r2, 0xf000, 0x1) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/tty9\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f0000000080)="352c8efa618c0bcf838acadb278754e15f334a572cad539da201096bbbc2ce7db19c4299e7137d848ef31b38", 0x2c) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1ac}}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000015c0), r4) sendmsg$auto_NL80211_CMD_GET_STATION(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004001}, 0x8886) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyv5\x00', 0x542, 0x0) ioctl$auto_TIOCSWINSZ(r5, 0x5414, &(0x7f00000000c0)) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r3, 0x0, 0x7, 0x0, 0x0) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000140)='/dev/usbmon6\x00', 0x2302, 0x0) ioctl$auto_MON_IOCQ_URB_LEN(r6, 0x9201, 0x0) ioperm$auto(0x800, 0xffffffff, 0x7) sched_setaffinity$auto(0x0, 0xe10b, &(0x7f0000000000)=0x7d5ff20b) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x401bf, 0x7352, 0x3a, 0x65f, 0x201ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x5, 0x4, 0xb4, 0x6, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x0, 0x2000, 0x203, 0x0, 0x84, 0x6ab5, 0x80, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000000000]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r7 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x9, 0xa503}, 0x800}, 0x7, 0x24008) 1m42.225545056s ago: executing program 1 (id=1311): openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:01/status\x00', 0x80840, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/46, 0x2e) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r1 = socket(0x1a, 0x5, 0x9) madvise$auto(0x7, 0x9, 0xffffffff) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x5, 0x0, 0x1f, 0x9}, 0x800009}, 0x3, 0x20000000) r2 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IOAM6_ATTR_NS_DATA={0x8, 0x2, 0x2}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x4}, @IOAM6_ATTR_NS_DATA_WIDE={0xc, 0x3, 0x10000}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) 1m41.977585558s ago: executing program 1 (id=1312): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000009c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00'}) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/sockstat6\x00', 0x20100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x106) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x32, 0x0, 0x1) ioperm$auto(0x1, 0xfffffffffffffffa, 0x7) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/nbd11/sched/queued\x00', 0xa000, 0x0) signalfd$auto(0xffffffffffffffff, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x0, 0x0) mmap$auto(0xfffffffffffffffe, 0xbe, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x4, 0xed40, 0xe5, 0xeb1, 0x3fd, 0x777) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x440, 0x0) 1m40.544692599s ago: executing program 1 (id=1315): r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000001d40), 0x40a40, 0x0) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto_snd_seq_f_ops_seq_clientmgr(r0, 0x8, &(0x7f0000000140)="4f0561ebf7594977bf3b024ade0d975fc3ceee5dddb443197a3d7a6e4a02f5766be667bd19278a9284c2af5d06123b57afb0ead658320810baebd6b3befc6f42b08b28aef3896393c01527bb") readv$auto(r1, &(0x7f00000000c0)={0x0, 0x5}, 0x3) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x1010001, 0x100000003) read$auto(r2, 0x0, 0x20) sendmsg$auto_NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r1, @ANYRESHEX, @ANYBLOB="746cb551e830601e0d16aabb95291469d303f663aee02f11c85470d52aad0e1a83597ff7ee28603127a63aa61486d9def84244b955e043f80e4863109603599904e43691d52f8b8db3f762b23603e1aeea28c050892624ce04b9aa085cc103b84b27b4f6399119f1c648753803ada83ef75d2f83473afa338a9363aec6fc7e290c779f559a7721508685a053719936c59213308d23b1d3d1e8555c43793617dd0492ab7c5024ad50f8abd13c2b5ea6b33cb1b1730c67f78ba2a77fcf21948b126604c380be7ebf"], 0x40}, 0x1, 0x0, 0x0, 0x2408c810}, 0x40418c0) mmap$auto(0xff0f200000000000, 0x400008, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x1f00, 0xffffffffffff0001, 0x15) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000a40), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3], 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x64) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200006, 0x19) shmctl$auto_IPC_STAT(0x4, 0x2, 0x0) select$auto(0x8, &(0x7f0000000340)={[0x10, 0x8000000000000000, 0x9, 0x0, 0x0, 0xeed, 0x10001, 0x1000, 0x82, 0x9, 0x8, 0x401, 0x7fffffff, 0xa6, 0x8e0]}, &(0x7f00000003c0)={[0x3, 0x9, 0x4, 0x3, 0x2, 0x4720, 0x4, 0x8, 0x1, 0x80, 0xffff, 0xfff, 0x5, 0x7fff, 0xce, 0x1]}, &(0x7f0000000440)={[0x82b760, 0x1fa4658f, 0x8000000000, 0x2, 0x9, 0x7fff, 0x0, 0x9, 0x9, 0x0, 0x9, 0xb5, 0x7fffffff, 0x8, 0x7, 0x5]}, &(0x7f00000004c0)={0x8000000000000001, 0x1}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 1m39.071684236s ago: executing program 1 (id=1317): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video2\x00', 0x80000, 0x0) ppoll$auto(&(0x7f0000000000)={r1, 0x5687, 0x8}, 0x3, 0x0, 0x0, 0x8) (async) ppoll$auto(&(0x7f0000000000)={r1, 0x5687, 0x8}, 0x3, 0x0, 0x0, 0x8) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) ptrace$auto(0x10, r0, 0x100000000004, 0x7ff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.controllers\x00', 0x2, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.controllers\x00', 0x2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000001100)=""/4111, 0x100f) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r0, 0xb, 0xef9) 1m38.71178174s ago: executing program 1 (id=1319): openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x200, 0x0) (async) mmap$auto(0x0, 0x10000002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, &(0x7f0000000080)={0x5, 0xffff3155, 0x3}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x280303, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, 0x0, 0x8010) (async) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x1}, 0x8) (async) connect$auto(0x4, 0x0, 0x10) (async, rerun: 32) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async, rerun: 32) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x0, 0x0) (async, rerun: 32) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (rerun: 32) socket(0x1d, 0x2, 0x2) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) connect$auto(0x3, 0x0, 0x55) (async) socket(0x10, 0x3, 0x6) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) write$auto(0x3, 0x0, 0x5c8) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async, rerun: 32) write$auto(0x3, 0x0, 0x4) (async, rerun: 32) setsockopt$auto(0x3, 0x1, 0x28, 0x0, 0x808) (async) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async) mount$auto(&(0x7f0000000000), &(0x7f0000000080)='}[,&*}\x00', 0x0, 0x339, 0x0) (async) socket(0x2, 0x1, 0x106) pipe$auto(&(0x7f0000000500)) 1m37.50666621s ago: executing program 1 (id=1321): r0 = socket(0x10, 0x801, 0x104) r1 = socket(0xb, 0x2, 0x106) mmap$auto(0x1000000, 0xfffffffffffffff7, 0x81, 0xeb1, r1, 0x200000008004) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0x21, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) setsockopt$auto(r1, 0x3, 0x13, 0x0, 0x8009) getsockopt$auto(r0, 0x0, 0xd550, &(0x7f0000000040)='#/^\x00', &(0x7f00000000c0)=0x8000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) sendfile$auto(r0, 0xffffffffffffffff, 0x0, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x1c1041, 0x0) mmap$auto(0xfffffffffffffffd, 0x4020009, 0xd1, 0xeb2, 0x401, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x6) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x7f, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) pread64$auto(0xffffffffffffffff, 0x0, 0x100000009, 0xa4000000000002) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="9b5dd38f43066d4b8f7dbc8f8343c0700000008000"/32], 0x14}}, 0x0) mmap$auto(0x0, 0x2000a, 0x10000200000df, 0xeb2, 0x401, 0x8000) r5 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1a, 0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) 1m30.634144473s ago: executing program 36 (id=1296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r1, 0x1, 0xf0bd29, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x11}]}, 0x24}}, 0x4000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) mq_timedreceive$auto(0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000340)={0x1, 0x80000000}) socket(0x10, 0x2, 0x0) r2 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) lseek$auto(r2, 0x1, 0xfffff000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/tty9\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f0000000080)="352c8efa618c0bcf838acadb278754e15f334a572cad539da201096bbbc2ce7db19c4299e7137d848ef31b38", 0x2c) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1ac}}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000015c0), r4) sendmsg$auto_NL80211_CMD_GET_STATION(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004001}, 0x8886) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyv5\x00', 0x542, 0x0) ioctl$auto_TIOCSWINSZ(r5, 0x5414, &(0x7f00000000c0)) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r3, 0x0, 0x7, 0x0, 0x0) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000140)='/dev/usbmon6\x00', 0x2302, 0x0) ioctl$auto_MON_IOCQ_URB_LEN(r6, 0x9201, 0x0) ioperm$auto(0x800, 0xffffffff, 0x7) sched_setaffinity$auto(0x0, 0xe10b, &(0x7f0000000000)=0x7d5ff20b) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x401bf, 0x7352, 0x3a, 0x65f, 0x201ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x5, 0x4, 0xb4, 0x6, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x0, 0x2000, 0x203, 0x0, 0x84, 0x6ab5, 0x80, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000000000]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r7 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x9, 0xa503}, 0x800}, 0x7, 0x24008) 1m22.11807072s ago: executing program 37 (id=1321): r0 = socket(0x10, 0x801, 0x104) r1 = socket(0xb, 0x2, 0x106) mmap$auto(0x1000000, 0xfffffffffffffff7, 0x81, 0xeb1, r1, 0x200000008004) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0x21, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) setsockopt$auto(r1, 0x3, 0x13, 0x0, 0x8009) getsockopt$auto(r0, 0x0, 0xd550, &(0x7f0000000040)='#/^\x00', &(0x7f00000000c0)=0x8000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) sendfile$auto(r0, 0xffffffffffffffff, 0x0, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x1c1041, 0x0) mmap$auto(0xfffffffffffffffd, 0x4020009, 0xd1, 0xeb2, 0x401, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x6) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x7f, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) pread64$auto(0xffffffffffffffff, 0x0, 0x100000009, 0xa4000000000002) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="9b5dd38f43066d4b8f7dbc8f8343c0700000008000"/32], 0x14}}, 0x0) mmap$auto(0x0, 0x2000a, 0x10000200000df, 0xeb2, 0x401, 0x8000) r5 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1a, 0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) 1m6.379221535s ago: executing program 7 (id=1376): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c804}, 0x14) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) adjtimex$auto(0x0) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), r0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) timerfd_create$auto(0x9, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(0xffffffffffffffff, 0xc1004111, &(0x7f0000000000)={0x8, [0x2, 0xffffffff, 0x80000000], [{0x80, 0x2, 0x1, 0x1, 0x1}, {0x8000, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x5, 0x6, 0x0, 0x1, 0x1}, {0x95, 0x400, 0x1, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x1}, {0x9, 0xfffffffe, 0x1, 0x1}, {0x1, 0xc1f, 0x1, 0x0, 0x1}, {0x2, 0xfe, 0x1, 0x0, 0x0, 0x1}, {0x3ff, 0x1, 0x0, 0x1, 0x1}, {0xc12, 0x5, 0x1, 0x0, 0x1}, {0x7ff, 0x4d3c, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x1, 0x1, 0x1}], 0x7f, 0xfff, 0x3, 0x3, 0x6, 0x9, 0x80000000, "64b91cc75e50f9bfb73422d302bb9262ca4383f3137e87364ff62cfa69013312b39e05e3bb4c990e99e06e310552976c2f5b0732887c3a8873bae9024b524de3"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000000100)="d377ab091f1bbdd7c8a2ee15ead2710417b5033543c488769422c49f61e319508a541421e598db4e990cbc2e76ee898aee98745e4ce8dd2780c1b41aad62f5ecbe35e64475e06aba54e4c490282e97533510f9f2779ee69a4918b1eb1b2f0fcd6e9ca451e74fe365797a1f2f2d0477b761e431a179b031ae9f67d0996572d75afdb05afd8bc6db6eb0e72b95c623a759d20b0aeed76f1287eec0f473458bb71a6ec19cd5ec4f62") r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bus/usb/023/001\x00', 0x201, 0x0) ioctl$auto_USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000540)={0x0, 0x6, "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"}) ioctl$auto(r2, 0x9, r3) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x2, 0x9, 0x2, 0x6]}, 0x0) close_range$auto(0x2, 0xa, 0x0) 1m3.286363414s ago: executing program 7 (id=1380): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r1, 0x301, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0xffffffa6}, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000140)='0[.[\x00', 0xcd04) sysfs$auto(0x2, 0x101000000000007, 0x0) (async) keyctl$auto(0x2000000000000017, 0x8000, 0x2d, 0xc4, 0x20803) r3 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0x20004000010000df, 0xeb2, r3, 0x8000) (async) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) (async) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) (async) io_setup$auto(0x80002, 0x0) (async, rerun: 32) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD2(0xffffffffffffffff, 0x40084149, &(0x7f0000001080)=0x7) (async, rerun: 32) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x500, 0x0) ioctl$auto_AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f00000010c0)=0x7) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0x5f, 0x1b5e, 0x2, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x4, 0x7) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (rerun: 32) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000001040), 0x40, 0x0) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) fcntl$auto(0x2, 0x401, 0x80000001) (async, rerun: 32) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) (rerun: 32) r6 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r6, &(0x7f0000000040)=""/4096, 0xfffffe82) 1m0.939712424s ago: executing program 7 (id=1385): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x2000, 0x0) writev$auto(r0, &(0x7f0000000100)={&(0x7f0000000080)="b587ffc8d8fd54697a21c8900f70aabfc8da98bdba0faa46c210508e1fc5aa94f0221ba183120350430802af3d6280f378748024fb3685bb", 0x700}, 0x200) mmap$auto(0x0, 0x2020006, 0x3, 0xeb2, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x2, 0x801, 0x84) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x14f642, 0x0) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x14f642, 0x0) readahead$auto(r1, 0x7ff, 0x9) (async) readahead$auto(r1, 0x7ff, 0x9) sendmsg$auto(r1, &(0x7f00000003c0)={&(0x7f00000001c0)="3cd09f7c3595cd5a73ec6df6634865e779fc2270e07ac69532474522b1fc3440a46651811563688ab7c64c39a4ede462e76f0e133a95baa9ae40060ead39366308b9764e3aac4c501632991fcf5ef23ee6648692a3f38b5cfa10f6ebf5323e668ea323c371eb5127c0a234ad336ee4b5689e0eecfd6efb1f3750", 0x800, &(0x7f0000000340)={&(0x7f0000000240)="ba8d37d02fae3620579c14390c7e46c179b7278b9197f5371f0b95cd8994c6f3d87b7c80779e6cc72710b857708eef744d55767c2bb2207a88436c33095f42c2709dff5d7a84735660d1a553ddf64d57723d17be887b9d6592459b0cbb140ad8acf8e10f41f2104a1e0b6c74de60f4fc283fe7c988c47913bfaa5381f036bfb01c7c49e2d56ecd84be8dac1bb5f0945bd5e6b6fa3d04d44a8373b1ccddb60e57f3eccc64eb588b6b592f850486d977b5ccdf23bad41cebc103e1e2d883b515fc6d0011222af54d6f670b9540e10af8b66507e5960c07732914735a0b298e073b7da8b50bd5541f11c731bd13a91c825c", 0xfffffffffffffffb}, 0xe, &(0x7f0000000380)="d47857f2360e0800c467d138a92bd000cd", 0xa64, 0xfffff001}, 0x0) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @loopback}, 0x6a) r2 = socket(0x15, 0x5, 0x0) getsockname$auto(r2, &(0x7f0000000040)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, &(0x7f0000000080)=0x400) r3 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/trace_options\x00', 0x501082, 0x0) getsockopt$auto(r3, 0x10001, 0x6d, 0x0, &(0x7f0000000140)) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) (async) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) read$auto(r4, 0x0, 0x1f40) (async) read$auto(r4, 0x0, 0x1f40) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) ioctl$auto_RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) (async) ioctl$auto_RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfd, 0x0, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) 1m0.574759805s ago: executing program 7 (id=1387): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003680)={'wlan0\x00', 0x0}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/ram1/queue/read_ahead_kb\x00', 0x181482, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$auto(r5, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', &(0x7f0000000280), 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fddbdf2501000000050007000b000000e8146a9565473dee4ca2bb08c64799cb9cb7054b9608c6a0023af43a600aa2d705a135f849907fa05957dac0b3e9f99e"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$auto_ILA_CMD_FLUSH(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000802000000fddbdf25040000000c000100005a25000000000008000400", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="0c0003000e000000000000000c000300030000000000000005000800270000000c0001001000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40844) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000013", @ANYRES16=r9, @ANYBLOB="01002abd7000fcdbdf25140000000c00018008000100", @ANYRES32=r10, @ANYBLOB="05000c0006000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$auto_ILA_CMD_ADD(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r7, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@ILA_ATTR_LOCATOR={0xc, 0x1, 0x3}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x20}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0xb2}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x480d4) unshare$auto(0x40000080) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/adsp1\x00', 0x400400, 0x0) write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_NL80211_CMD_NEW_KEY(r2, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f00000003c0)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@typed={0x4, 0x3, 0x0, 0x0, @binary}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x890) mmap$auto(0x0, 0x400008, 0xdf, 0x80009b72, 0x2, 0x8000) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x38f200, 0x0) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) madvise$auto(0x0, 0x2003f0, 0x14) mmap$auto(0x0, 0x10000, 0xdf, 0x9b72, 0xffffffffffffffff, 0xfffffffffffffffc) madvise$auto(0x0, 0xffffffffffff0004, 0x19) openat$auto_full_fops_mem(0xffffffffffffff9c, 0x0, 0x101002, 0x0) swapoff$auto(&(0x7f00000000c0)='/sys/kernel/debug/tracing/printk_formats\x00') 58.253651252s ago: executing program 7 (id=1390): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000000), r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netpci0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NET_SHAPER_CMD_CAP_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x24001004) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x1, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/event2\x00', 0x40000, 0x0) r2 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r2, 0x29, 0xd1, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x200009, 0x2, 0x40eb1, 0x602, 0x300000000000) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) madvise$auto(0x0, 0x20499d, 0x9) setsockopt$auto(r3, 0x6, 0x3, &(0x7f0000000040)='/dev/ram7\x00', 0x8) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r3, 0x8000) ioctl$auto(0xffffffffffffffff, 0x541d, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x4000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 53.906686288s ago: executing program 7 (id=1400): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r1, 0x1, 0xf0bd29, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x11}]}, 0x24}}, 0x4000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) mq_timedreceive$auto(0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000340)={0x1, 0x80000000}) socket(0x10, 0x2, 0x0) r2 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) lseek$auto(r2, 0x1, 0x1) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/tty9\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f0000000080)="352c8efa618c0bcf838acadb278754e15f334a572cad539da201096bbbc2ce7db19c4299e7137d848ef31b38", 0x2c) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1ac}}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000015c0), r4) sendmsg$auto_NL80211_CMD_GET_STATION(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004001}, 0x8886) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyv5\x00', 0x542, 0x0) ioctl$auto_TIOCSWINSZ(r5, 0x5414, &(0x7f00000000c0)) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xfffffffe, &(0x7f00000002c0)={0x0, 0x20000000000000c4}, 0x3, 0x0, 0x3, 0x9}, 0x7}, 0xfeffffff, 0x2) recvmmsg$auto(r3, 0x0, 0x7, 0x0, 0x0) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000140)='/dev/usbmon6\x00', 0x2302, 0x0) ioctl$auto_MON_IOCQ_URB_LEN(r6, 0x9201, 0x0) ioperm$auto(0x800, 0xffffffff, 0x7) sched_setaffinity$auto(0x0, 0xe10b, &(0x7f0000000000)=0x7d5ff20b) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x401bf, 0x7352, 0x3a, 0x65f, 0x201ffde, 0x2007, 0x3, 0x1, 0x9, 0x3, 0x5, 0x4, 0xb4, 0x6, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x0, 0x2000, 0x203, 0x0, 0x84, 0x6ab5, 0x80, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000000000]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x20008800) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 38.645311422s ago: executing program 38 (id=1400): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r1, 0x1, 0xf0bd29, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x11}]}, 0x24}}, 0x4000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) mq_timedreceive$auto(0xffffffffffffffff, 0x0, 0x6, 0x0, &(0x7f0000000340)={0x1, 0x80000000}) socket(0x10, 0x2, 0x0) r2 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) lseek$auto(r2, 0x1, 0x1) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/tty9\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r3, &(0x7f0000000080)="352c8efa618c0bcf838acadb278754e15f334a572cad539da201096bbbc2ce7db19c4299e7137d848ef31b38", 0x2c) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1ac}}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000015c0), r4) sendmsg$auto_NL80211_CMD_GET_STATION(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004001}, 0x8886) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ttyv5\x00', 0x542, 0x0) ioctl$auto_TIOCSWINSZ(r5, 0x5414, &(0x7f00000000c0)) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xfffffffe, &(0x7f00000002c0)={0x0, 0x20000000000000c4}, 0x3, 0x0, 0x3, 0x9}, 0x7}, 0xfeffffff, 0x2) recvmmsg$auto(r3, 0x0, 0x7, 0x0, 0x0) r6 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000140)='/dev/usbmon6\x00', 0x2302, 0x0) ioctl$auto_MON_IOCQ_URB_LEN(r6, 0x9201, 0x0) ioperm$auto(0x800, 0xffffffff, 0x7) sched_setaffinity$auto(0x0, 0xe10b, &(0x7f0000000000)=0x7d5ff20b) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x401bf, 0x7352, 0x3a, 0x65f, 0x201ffde, 0x2007, 0x3, 0x1, 0x9, 0x3, 0x5, 0x4, 0xb4, 0x6, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x0, 0x2000, 0x203, 0x0, 0x84, 0x6ab5, 0x80, 0x0, 0x0, 0x0, [0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000000000]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x20008800) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 18.22090893s ago: executing program 4 (id=1483): openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) r0 = userfaultfd$auto(0x8) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x800, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x24040041) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x66ab80, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x101000, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000000)=""/194, 0xc2) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vkms/graphics/fb0/bits_per_pixel\x00', 0x82942, 0x0) sendfile$auto(r3, r3, 0x0, 0x200) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) timer_delete$auto(0x101) recvfrom$auto(0xffffffffffffffff, &(0x7f00000001c0), 0x100000, 0x1a9a, 0x0, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@info={0xffffffffffffffff, 0x64b4, 0x4}, 0x17) 15.288230503s ago: executing program 2 (id=1486): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x382, 0x0) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x8000000) unshare$auto(0x40000080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40800) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyd1\x00', 0x40, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(0x3, 0x0, 0xffd8) rseq$auto(0x0, 0x8000, 0x0, 0x6) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) process_mrelease$auto(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x7, 0x8) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) 13.178572113s ago: executing program 4 (id=1488): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = getpid() openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dsp\x00', 0x4100, 0x0) process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) r2 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4) setsockopt$auto(0x3, 0x107, 0x16, 0x0, 0x6) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r4 = gettid() readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) process_madvise$auto_MADV_SEQUENTIAL(r0, &(0x7f0000000280)={&(0x7f00000001c0)="0742cc5e84f463ec1ab42539ce025b9ce777489417bd8b08380aa5685f8f22981aff5151495acf7127394b1b01173592785376db05fa4a0d33128b35f64a4c11b3d08d30d0dbbf9505c70b60ccb198112d571b7ba5f27191fb36e93deba3acf117c0e7ea43e76d5faf1018be8c6b6aa2cb152e1c132bc51233f08914a95e382d0b9ec308908829f6b31660274021bbb09f8ca79188b3", 0xffffffffffffd835}, 0x6, 0x2, 0xfffffffe) r5 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002180)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) r6 = socket(0xa, 0x2, 0x0) setsockopt$auto(r6, 0x29, 0x18, 0x0, 0x1) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR64(r5, 0xc0884123, &(0x7f00000021c0)={0xa000, 0x0, @status={0xd, 0x0, {}, 0x0, {}, {0x3, 0xe}, 0x2, 0x0, {0xfffffffffffff1af, 0x5}}, @reserved="f35874c92112449e7fd4fef7e9c5395063bf2b6e655dab345919d402376165b4c9e339e25ae88cc065d57566caddb3756a0726743683be0d7d86660a25738d9f"}) tkill$auto(r4, 0x7) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/udp_hash_entries\x00', 0x8000, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r8, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x1d4, r7, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_BSS_SELECT={0x196, 0xe3, 0x0, 0x1, [@nested={0x0, 0x7b, 0x0, 0x1, [@nested={0x0, 0x69, 0x0, 0x1, [@generic="9916b29891d03b986604a10d52523d5d1f323ebc349812e54836e91d469644cf35dc15da18b1eb4eb826c13e75b43c0bdebfdf98953221113618983d0edb9ef364ff9155ad0f9b049439e4f426887e1060ecbad2b379f45aa39322ca5ab8f04eff7fcaf526f891ea00a0ced96b3e3dc942e05368c7a02dcd862d5bc5064eb213e495aafeabb122bae8a1cfdbf4fc2a53607d9a627834f27f953a8dce2bab146312c5f6b8906b760d4dd8cf5d49674ee6a31c6c72a8b41be461a5a8", @typed={0x0, 0x51, 0x0, 0x0, @fd=r8}, @generic="2d5eccb96a9ef0b37659fcb454a73b30b5bf4a5ba8eb5181c504365c2de8bdb50cad197d72eef4c4960a7b6a08233136710d017b80b1cd1c2fbe072c49b9d3eb35ce59f0670fb2ee4b7c80b27c424e50bc214082493756355825bd7af368868dbdfe64654da5cebeb4898ed7150869286b4c846fd4b0d1d018b47808c726f212ccd56873d964829501d24b69f4dbf4299e249984e38f1bd1c67f589bcae28d4c011fdbbf4e85ddd3d34e6d50c45ff218a9575cdd7a869e99f2260127cc532f9c6d778c9563f4f9a65d5b06051cb4aefd7c2d31b693a096b7c5320a193660859eda42e3ad93865fb5e90117e3c26e7afe9707"]}, @typed={0x0, 0xb5, 0x0, 0x0, @pid=r4}, @typed={0x0, 0x6, 0x0, 0x0, @binary="423e17f44762355838bd72fb5182e3c7f4f07b227e35f7a6b344f5cc800a1dbbdc8fd964e030e2c5e42537b1d91fd82167a3bdf3ed2addf6108cd7f38779cf3374eaebb80a07d5e809cd210ff9e0c3ac560ff569e54b32d408fb45baba1da9fe71860dbeed90e42ab53320402fedbf8a62c9ab"}, @generic="2f49fc791924a927a023b43f70c6fe932c6b6215990c8edadb0cda7a0f31969b", @nested={0x0, 0xd9, 0x0, 0x1, [@nested={0x0, 0xa0}]}, @generic="31b56018b6bf50c97c618912343b2b38a3159bba1b", @typed={0x0, 0x57, 0x0, 0x0, @fd=r3}]}, @generic="ce207f26904fd55ffd3216ce01fc9b1d08b347b796e4e6c26a46ad6a23669173b816a4ed436dad74cdef95a648597c58b888042ee21d129c0f9267fa6178286e121bb561cf9aa7a6853ca54c4f8b0562ddc82c05aa439b2da8de32c018beb688398c148fc59dc196be8ce129e219131275314fad4ac61333d1f5026d61a826ac72eeac983408c5344b2bac65986d08ca8b42a2", @typed={0x41, 0xe2, 0x0, 0x0, @binary="718d8cdee8df085aba82fd2db8063368b5447668b7f94bd2cfaee76a03c2bf1b3bc2c54396e078ce0155d30e6d48bca513c70b6ed1ba0a817c212e858b"}, @nested={0xfffffffffffffe6d, 0x6b}, @generic="7aebd2afc4481604ceb55d7e1baa1a9e5a3dbe1f99532827b15eeea38eed595be922c30fefd038d0994e48c2411427f9e7410a33751bca8b03c7be755ec1d94a5c4f647c9571af4c27ba250d91c9abecd60667ec569098f8c4a46b7b9511b183b13fb87d6df36ca093e923f14df5bd6883be857aa6797c5f3e49", @generic="365eece7f8ab368aabdab61197cd61ae0f13493a27ebd34876a731cdb6e595e1f0820e4a8e29289020"]}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0xf5}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0xfff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x40800}, 0x800) bpf$auto(0x0, 0x0, 0x6f3) close_range$auto(0x2, 0x8, 0x0) 12.222670722s ago: executing program 2 (id=1491): prctl$auto(0x3e, 0x1, 0x0, 0x4, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) r1 = socket(0x10, 0x80002, 0x8) close_range$auto(r1, r1, 0x0) pipe$auto(0x0) splice$auto(r1, 0x0, 0x2, 0x0, 0x3fb, 0x9) write$auto(0x6, 0x0, 0x100000001) dup2$auto(0x5, 0x4) splice$auto(r0, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x9) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x6, 0x7bd6, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) setsockopt$auto(0x3, 0x114, 0x1, 0xffffffffffffffff, 0x3) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0xffffffffffffffff, 0x0) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socketpair$auto(0x2d, 0x7e8b, 0x4, 0x0) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) 10.701002511s ago: executing program 2 (id=1495): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x801, 0x0) connect$auto(0x3, 0x0, 0x51) listen$auto(0x3, 0x83) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) write$auto(0x3, 0x0, 0x81) r0 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000003540)='/proc/thread-self/setgroups\x00', 0x2, 0x0) writev$auto(r0, 0x0, 0x8) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x18, 0x0, 0x9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x2, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) socket(0xa, 0x5, 0x94) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) ioctl$auto(r2, 0xab09, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) 9.426888678s ago: executing program 4 (id=1497): openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:01/status\x00', 0x80840, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/46, 0x2e) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) madvise$auto(0x7, 0x9, 0xffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IOAM6_ATTR_NS_DATA={0x8, 0x2, 0x2}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x4}, @IOAM6_ATTR_NS_DATA_WIDE={0xc, 0x3, 0x10000}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) 8.699668532s ago: executing program 9 (id=1499): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x100, 0x0) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0xa02, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x80000000, 0x0) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x9500, 0x0) pread64$auto(r2, 0x0, 0x1000f42d, 0x100) socket(0xa, 0x5, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x804) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001740)='/sys/devices/virtual/vtconsole/vtcon1/name\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x4, 0x4, 0x2000063, 0x0, 0x0, 0x0, 0x1000, 0xb, 0x2005, 0x40000402, 0x4009, 0x9, 0xffffffff80000000, 0x9, 0x3, 0x200000100103}) socket$nl_generic(0x10, 0x3, 0x10) r4 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) kill$auto(r4, 0x11) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 8.501616243s ago: executing program 4 (id=1500): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x100, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) shutdown$auto(0x200000003, 0x2) poll$auto(&(0x7f0000000d40)={0x3, 0xc16, 0xa}, 0x5, 0x400) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r6 = openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x582, 0x0) write$auto_console_fops_tty_io(r6, &(0x7f0000001240)='\t', 0x1) sendmsg$auto_ILA_CMD_ADD(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010228bd7000ff08000400000000000000002e51852c30c7e9b7230a84caa5f420b9d2018e39a96643e7b6101d723dd5ef3a9f78742af1bfa0923d4c12da6cf867ad3dc71aafeb60147d84813e", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x38) sendmsg$auto_ILA_CMD_ADD(r1, 0x0, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) 7.576008579s ago: executing program 9 (id=1501): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, 0x0, 0x4008000) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0xcf}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xb}) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) writev$auto(r0, &(0x7f0000000340)={&(0x7f00000002c0), 0xda7e}, 0x9) 7.37581322s ago: executing program 8 (id=1502): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r0, 0x2, 0x9) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r1, 0x400c4d04, r1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000400)={0x18, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_MODES={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bpf$auto(0x0, 0x0, 0xf) mlockall$auto(0x7) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) 6.989998478s ago: executing program 2 (id=1503): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003140), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000003580)={0x18, r1, 0x301, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_PHY_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc050}, 0x80) 6.488901882s ago: executing program 9 (id=1504): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:01/status\x00', 0x80840, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/46, 0x2e) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) socket(0x1a, 0x5, 0x9) madvise$auto(0x7, 0x9, 0xffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IOAM6_ATTR_NS_DATA={0x8, 0x2, 0x2}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x4}, @IOAM6_ATTR_NS_DATA_WIDE={0xc, 0x3, 0x10000}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) 6.487546763s ago: executing program 4 (id=1505): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) move_pages$auto(0xffffffffffffffff, 0xf53, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xb5, 0xeb1, r0, 0x167c) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) r1 = epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r2 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0xf82, 0x0) readv$auto(r2, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x3, 0xa, &(0x7f0000000080)='nlctrl\x00', 0x2) mmap$auto(0x1, 0x2020006, 0x3, 0xeb5, r1, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) write$auto(r3, 0x0, 0xfffffde9) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) shutdown$auto(0x200000003, 0x2) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) close_range$auto(0x2, 0xa, 0x0) getsockopt$auto_SO_BROADCAST(0xffffffffffffffff, 0xf7f, 0x6, &(0x7f0000000000)='!.##\x00', &(0x7f0000000180)) ioctl$auto_BTRFS_IOC_FORGET_DEV(0xffffffffffffffff, 0x50009405, &(0x7f00000001c0)={@raw=0xbe, "147f624b05a2b22a62eb108f57b62c1a128c0f4a188dab9dc484db51686adb5a70d52b7f2f66145c31facd1cbb574c587628bd4cd6107b246f8f98fc23c6a864a492955d4c9350848a1d376d48008c8245ef620306a514c0e2f4dccf4932b8161402a453d31f6a2849bd701d53c73b5c87638db257f5ee75b4b2f3050dcd85bdda18e5f6c8f07bcbafc93b528f48baacd00dff67c662817347d58f7e2540061f146deeeb8a8fbea98e59c0ed49ac5898827aaa13b42a504dc9de98747915c70a39df9e7ad1373109c541923589e6364976cd3168fe3d0f085186627bde1577bbf260387eb8ecb5ad8d705de9f1e9b3d50ce454db9cbecf236dffbd3b274b5a7a63d3be027f04c7111ed622df2830ad588ef1d8b6c480b0f0772b5e7f621f8afa59a92859c296e01a7fa3f30f0d0d4337652988adb2b9d680d2c4f9896e1139548670c3598f33ba0f43def8ca1044626e75ca4d2b886f6db26ebb438a587407e59cf70e6cedf804044a4ccbccdcdcfd3e18152f5ac92af75d4deb491679de72f1b13ad5478ed08bb7acfc503580dae5c23583d01fdfecc9207f9e276540cf2328ba7a585937fd6acbda9a3a770277729be4f41177789decd4e0854b9861c08504c89215d7e8ce3473a0ad98f25d1d9e5fe2054a4ba9d3e0a67718ac00f384b74f5c8b24097e30e63af0c374c78f21d0af94486933450a311f8194051592e9e37607542244627393d338575c5a0a51815a01bd5ecf313cadddbb3c6bd4941a5c636b0c884ea266740b25c397ff3ea626070602d43ffbbebc0bddfdc47602432ecedce3bb6b0aba196f0eb714251d210bc979b4518005e41b5b6b0fc0ba793a8e77edd81553ce3a99cf9e7f4a9a41858e1971ac4127fa9995c888259e3436b7366e1344955ec1dd8628581a07056ec537e8196f87ab570af4fb4744f874fb283f8a54cae01cb32f70543eb60b6f65cc5269171d7e5fff4cbe4cc0b76983aaba8d869d8848e496e2c5359251a39e5f9d1c0c6756456dcdd744e82594b2a6bfe3db7877c7fc123c259f8f70b36b3c48ae31875d5cf3eb6b00a32e107f419a079641e51c8233f4c304b4bf7942814ec1eb8166f0b168d76fb3c05cb1d0ccd66fd15cbb399f3730076246721f4d71f5bbcb63d2309c74878bb16ec592873f7514b66118673f808c2cb16b4a7b3be7b560b5183bb231be5829d9de866ecbf23c70779c6f9d37b7d185cdf53a328eeee8ea27931c68c68edad37f2a10fbfcffacbacb80e8c39a0504bddab3156c7c35ab417aee9c979bf14718975e59ec51a37516a71abd59ddc916de121937da400f09b85e96b554a1f5688b20e2df0f814163e46db2ef60268a6c57035008998b834560a7f9a69bcde2110f8d401321db671c7cd28fce473d9dd43d598ef1e576c93281a5a510fb48e7dbfe06451e2e9718ab0b6cd6ec02b6b62ae9d6cc7ec94af64311793125d92ef9ac91b0d99445c4dae30f46ef49f8068950a6a32661094ac22af30e313fc183ebe103e709be8bcb4e657a731ac05e55a5f3b772ec5f89074fce97e565f560d172c6975dd1edde80507a9e442b208fd57520cbbcac16ddcb26fc8ef1d19d2cfb07e80d32aab1769e628303478aff29f0143140478b50d392fb3e53e0d386ea97d901c27ae5911330f337ef7048cb7f5307fb0231066c100177c09722719372aa5dcffbfa6e84469bfa884446d5848d6af5c4a324f0805e5a1c82e97387239ba24e8406edccd92d37c0bafd97160cea312ba3ef96b6982d28e0d5e2b3bba83dcee9f5de3155d635deebc55bc030f9dadc659a0b6f5a84d539077e785ed5ed098115b576a7238c3532cea0fe9f00cfad2112908e57e66be5e86339812b5257a03e735727ea8c4cf5bcf0820dcf87a906bd962806a2767971f6079613acfb781d514111f35ba1fcdecaa15764d9ca817794c536cb4b1d4a2f60cf116520aa1cd2f7ade5d38c195ee6aaa196ceeaad0a3d642b0e4b54a5c9ffe8941e4f661aba9b9d77a0e2af0d1dd8120810f4b4f93bc56a2405b32ec460ccfae654ed07abfbfc3dab30d5e0b77538033ee73833910ecb297be29cf034a1133583e5afd7633e4a1b44c844cd34eb7d5e07d74e695b4abea1a70b5eb902385563e30134ec33ada8dc78433b4eefa2ead19df77dfc71148607e5c708f7692f1645e7a323f175849bd045f0bbed4f6a06169deceb2a4d361493ee6db8c7b0bd18b9782f48f7459c9d9033221dcf6a07464c04df0b11f99a943e12b1b0b6dc71c3bfef7128b2df83f1ee99952e4cc0a51189a21302e998fd2ed37b2ae8bfd96a47d50eb3d196fea3af714157e6a4e0630e0944de57556aa3225b485388faed23a9a9d595a5ff296e8e29452ef5541230954d4d0f916a27781041902f13cf0e962527e1a0f659a95a0c3831bb62841ba3e01c74859818283ad0725e76ed82f695405fffccd90ad1be0ad211891546a2ab3f75b9872c3ad68c2f5f4d8510cf1e087e789c5ab821ef46e197a36986434b1569499ad2717db7b200afd77b7542ba00a46192341aee8fe3bfe3d6e0c2767cafca11ce2beaf97602ef9095e815ab6eaec42399865f724ee9d96217f45a84a0def5d87375c65e0430cdc83422b8d367982f2722e793c6ba37687d34f0e2068c114fae854a3158abba5f5689a40488d095de19071a71d8d7a17f4389f2d20c4c0f9c16760d52d166acc5c201cfaecc0fc54b7143c60aaaac0ae196b36f3e1447e3e0992be2642ca8302b24514bd06cce84279ce361bb8ce245ca5152848ab4cced61c67e4579c0db21efd26efc0780cf4a04b02ddaa54335fa327d57320307e0dc3fe1f6cdb686150e2235e05ddeba10a193d49408ee47f57229a6ff30351dedf61b8789900eb15db5b0069c57984ba31710509d88da1d78b3eface0ad5b2cb7f303e248cb68abfd5a0c3ac672d1f6178fe54ef67e034d38c01e3458d9b64a97eb0cccfae7efbbbc0c8b806e75ae5dbdf641d8daa862f90cac0d460c6f70a7765169cd1e9fe305db403e4e453ce84c35a3573751a93ca7dd478ba547449254f3d7ac7b05f345bf0eec346db042b982c964c81545bf05986d033df8e41e9e19d3561250514ed703444048f44763261a860aa3cf0b539544af9a1fc4ba7f989111e00dcab0e64b538a1019467c3b43641e13c2707a4fdc78648b92302a54a0e7e3de53488e852f0fe658557ad1df2cf12a898515769bcde0f4a3386764d5b2f0eba5eee1e3257215c005b3bad612ff43b4121efc277fe9b80c69eee2c1ffdcb3ef843485d636a0025848254e22cd2f51c1f85202ae22d53969072c1ec4dbb973a157059ed523b8dad9671f6bba68a9d4521564a826b208df019ea32eeaf5b8f973263fdcab4c2519ac0d5ce4c181b12ba71bb3fc02388e72e89a24152e07b264fb00b425633ca2b2aaccd7208d5df00002b7fa4502656593a8e84e4b620bc65a60bf3d3c8b0c1d0ac93bcc711b9cf206b1037d3437e515913badbd7ce52a69b32cd5b828193dac41fe0ff1a869bf086927eff915e422be23f40a54a2384e478f74bb2a397ecd214224294d9300d921afad2f50960e9830dc1ac8ee08ea0ff474d40a23b1f7dbc7761120c889b3354281751342d2429eb2555a8a57063f61c6cb3115d99d41a040c4d9fb3c5ddec980abfef33562607b7ad6fc8ac67c8026d50f2e01d949d065a8ea488b3d0d7ba296c914352b99a6c36aad4c030d1f9bef8696cb6d9dee3835646695b2a43f8682405c118477dd6486699dcd9cb93d911dae691fabfdfcc76ae48bcdf5d5ea87fffdcaf4e14faaa36689da73c9012ff943a787ec0e83f52cf221219f3468bdc010698450a19717e4ed062ab7d682d9e18c4469581bd09cd31aeaf1d17afb02b9cd769f56830d0ad155e4898889b438edfb13fb40d46bfe082ae1cd0f287805e4f2d011f43cd070f883668f45612132b19ff2f406bf80a1e5e69c741c63bc366c102a7a7e78d92e058d1f771031e582094bc7536182ddf2b88ef13d6573d0d34183c5e4dff48654ec1d18a44f6b2c67b17eb06489523bc3e7908b612e5204985cad17ff99b41650e49e469d8d80f3a2e32e93826e02160fbf19d92ab300bee4319b333aa9e96ac46d22ed71cf8394663f62362fe145094d140588c2e6f3eadc0bc16f6f6172aeac1e9ca44d93fa1399c641729e21f97f25ce5b4163419235bb98a218fa9d50b7aaa835d122c0436352b27909dcab907e43630907b23713bb445b93b8ec840b17d3d4618dd38bf58f2a0a6c3272a00aa8704774078f565faa4195ddfc15b33b196e646ebd8ab55e74da11ab4c30d031785c7c168d30ca12d23dcfa4a5a4f883f3b887fb77d822dae0a161d6c3565037a1f36bb1cf1d8601d94e4111b4ee435a98c21577b1e647ba160921881339a00a2d04210e603dcd9dfe2c40d32e5d93d9e94a5c176ca6291d5befa75121ec0abd660e2bac1458bd5609a6d725af0895b0d559ad726f34b50a06fd45f86764508386ab65ade7c76d0ce07330bf0d342216a769c98edb854cad6f6b02e0d09e713bbb7e12c786edd9d1078f3c5d0a87d34d9326e938098d674fb2d1ab1e39e3683a3ef0e00d9b66d56582e9d5f2d61a60226ee2c9cda7d44ef0504d6109fcd7978207df3eb9ed5ac860e0172907362654efb54cd6d04f7a58578fa3853d65e9243730466085905cbf1e1b34ea7a2f9dd268495d49824045074debb4c9140dfdbfc81fc6d371ec49521ddd996fd8761ada5d427348503a57a73a3ac74a540df4c2af59a1ecf644c00ebfbffafbf2990776717a2687889da69fefd0b0cb33c8351d147bcf31f98c8909e554c7ffd2cc9f64e4eb6b9c4b232489a2d912f19f79108b73a38de79fafd4a885de47810bdc4658d6d773c97e523732997392f1e02396875eda8ff955ef0ad75145cc1819df6a53878b9f1c5964146dcd73eabed0df798aea5c533fc263bc8d2533e36cde59e2cdd2ffac12cd7e6bea69ccc14b0b22b7606a6f82e8528f8dc739cd5c0ed0795d49452f257be2068055dcfaa7589ca65820d31583a81834910d8d1327469e370339dce1d87c31a750a02270cdaef457da2d50abac6651357858c391464781009209d79cf4286045773fe247e705a14b162583cd89e850df91b7517bd0a4476ac02fdc1dbd0faa81fa1e829ad0a548236939efcdf63c15b868b8712ca05571d7c0b810cc02cba9d1ae63e987b59ec3281cd706d7571d6b69a92663f11a24a68dbc6b2436b8049986f78fbe8effcf94457d5085dbf8812abb1fd431c6b465203eb67070a936a665fb19273240ed1e3905ea27b996b74b31b1216a77734b106dd9752a5f430ac5aef718c6942379dbd342aa66537e655afa95ec78cadcfc80584045cd07d43911c4d7dc3a37a4cf3cdf6eea9904c441ec02cfe0515c6c360463237aa6b3fafebcb1a59be1bf5ebe4680819f3e78ccc1e517987db6220b45bf840fb8fc9b33757a0e258468a911f2504358981410b6daad15bb0ed81ff971ef3cc89f06dacfa45a37cb37e946f5010d0a308ff760227d439f07401839b7844bd4e5f5d1824c17797c5abfb5a326f6b4626f9789d8d7a074b7f223cc4183f68e14de037a197920a858c310e3602a3c6f319b506bc4c523af495a95b74eb88af2699cbbeecbab62811ed05a0ea5e292e72e565ccbeb3fda2f32ee05ff7bfa40bfead96ace132532026e553bc4438a65ea897d64e9cdec2baa75839f9ea4dba584b81a9b813dc648e3ac31c885ec5dcedda3efc7a3a7"}) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) 6.21188347s ago: executing program 9 (id=1506): unshare$auto(0x40000080) semctl$auto_SETVAL(0x0, 0x7, 0x10, 0xffd) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x2b, 0x0) pivot_root$auto(&(0x7f0000000080)='..\x00', 0x0) fsopen$auto(0x0, 0x1) fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', &(0x7f0000000280), 0x0) r1 = socket(0x2, 0x2, 0x0) setsockopt$auto(r1, 0x88, 0xa, &(0x7f0000000000)='\xba\xba\xd3\xc8[&P\x9c\xe7AJz\'\x91\xce=B}\x95+%\x00I\xf5\xf8+\xd4\xa9\v\xe1\xcc\x18', 0x80000e) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0x10000) 6.105409568s ago: executing program 2 (id=1507): r0 = socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) setrlimit$auto(0x1000000007, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r1, 0x4018bc13, 0x0) socket(0x29, 0x5, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/kcm\x00', 0x480, 0x0) openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) mmap$auto(0x8, 0x0, 0x9, 0xfffffffffffff011, r2, 0x200) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) symlink$auto(&(0x7f0000000080)='\xe6\'\xd4\v{T+\xac', &(0x7f0000000000)='\'--[[\x14+\\\x00') readlink$auto(&(0x7f0000000040)='\'--[[\x14+\\\x00', &(0x7f0000000140)='\x00', 0x8) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x301002, 0x0) ioctl$auto_TUNDETACHFILTER(r3, 0x401054d6, &(0x7f00000000c0)={0xcc, &(0x7f0000000080)={0x7, 0x4, 0x48, @raw=0x100}}) read$auto(r0, &(0x7f0000000300)='2\x06J N\x92e0\xbd\"\x8f\xe5h_b\xde\x19\xa5\x0e\xfa\xe0\xcb\xb7\xaceW\x1a\x1f\xae\xd8\xfe\x01Y\xd6\xba\xde3\xc7\xf8\x91\xda\xf6_%\xf30\xdc\x97<\xf3A\xa7\xb4\x8dj\xbd\x02\xb1}{e\xf64\xec4\x83,\xecp7j\xf8<\xc8x\xd4\xb0\x1d\b\xb0\x18\x01\x9e\x9et\x8aa\xe1\re\xcf\x8e\x02\xeeW\xf0z\vk#_\xdb\x15f8>;zM\xa95\x16\xe9l\xf5\xaa\xaa\x03\x18p\x0e\xde$\xc3\xa9\xac\xc7\x98\x05<\xef\xcd@z\fx}F\x93\xe1\xbd\xb3s\x80\xc1w\x1eP\xd0\xea\xab\x8f\xc7\a\xe6\xad\ni\n~-u)\x88\x97\xed\xa7\x9b\x0f\xef\x99\x13\xdc<\xd1{\br\xd6[\xd3\xa9-(KH\b\xdfJ\xdek\xef\xc9\xd7\n\x83m\x86\xf2\a\x8d\x19\xe0\\\xf0lg?\x98\xc8\x8e\xbd2?C\xa5\x8a\xe3\xc6\xd7\x00\x14n\xb8<\xab\x96\x8d\x81\xf4\x87\xe5\a:z\xea\xcc\xa1\x8d\xae8\x12\xa6\xb9\xd99\xaa\xc5\x10\xad\xdd\x89\xdd\xbb\xf5\xd2Q\x92\xcd\xcc\x9f\x1a\xdbR\xeeL:\x87\xb3#\x00\x1bR\xf2\xe2/\xa3\x0e\x90\x98\x8c\xc0\xa4\xda', 0x8000000000000002) 5.071232334s ago: executing program 9 (id=1508): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x13, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x405, 0x8000) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000004c0), 0x22000, 0x0) prctl$auto(0x1000000003b, 0x6, 0x0, 0x5, 0x10007) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x2, 0x6, 0x3, 0x19, 0xffffffffffffffff, 0x100000001) mmap$auto(0x0, 0x4020009, 0xe1, 0xeb1, 0x401, 0x8003) connect$auto(0x3, 0x0, 0x55) socket(0xa, 0x801, 0x84) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x2, 0x0, 0xd4, 0x200000001, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000002, 0x10000}, 0xfffffffffffff5d6, 0x5, 0xfffffffffffffffa, 0x1008001, 0x0, 0x2, 0x81, 0xffffffffffff628e, 0xa746, 0xdeb4, 0x804}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd14/queue/iosched/prio_aging_expire\x00', 0x207a1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=')7', 0x32) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/pcm1c/sub3/info\x00', 0x48041, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f00000002c0)='/dev/aud\x9a.iW1\x00\xfb\xe9&\x87(\xc7\x87\xa9A&\x8aF[l@\x01\x96IE\xc6\xe6\xe2\t\x1f#\x85\xd2f\xc3/\xa8b\xcb\xd8+\x15Z\x8a\x84\x12\xc2\xce\xd9i\x9eP!\x84\xcc*\xa8\xce+\xed>\x8e+\x1a\xef\xb7\xb7\xe4\xb1\xf8%o\xb0N1}\xceF\xb28\xf9\xdaMA\xc3\x9eFv\x98\x80\xa9\x81\xa6\x98\x1a\xca\xf9\xa9\x02\x97\x03\x9c\xc5\xe7\xcc\xb6O@#O\xb12\xa4\x9f\xfey\xc6\x83GuO\xd3\x80l@\xaf\xd1#u\x81.\xe7\x1ex\xdf\xfd\x7f\x15~\x1a\xae\x17\x99UF\xaa\xe4\x85\x93\x7f\xa6\x99x\xff`\x8c\xa4\x05F?\xecH\xbb\xbdF\xb0p', 0xa3d9) socketpair$auto(0x1, 0x4, 0x9, &(0x7f0000000040)=0x1) adjtimex$auto(&(0x7f00000005c0)={0xffff, 0x0, 0x6, 0x9, 0x7, 0x7f, 0xfff, 0x0, 0xc15, 0x9, 0x592efafe, {0x3, 0xffffffffffffff57}, 0x100000001, 0x3, 0x857e, 0x5, 0x0, 0x3, 0x9, 0x240000000000, 0x400000, 0x10000, 0x7ff}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bond0/bonding/slaves\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, &(0x7f0000000180)="a30100", 0x3) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40100, 0x0) pread64$auto(r5, 0x0, 0x10001, 0x830) write$auto(r0, 0x0, 0x30fe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r6 = socket(0xa, 0x5, 0x0) r7 = socket(0xa, 0x801, 0x84) sendmsg$auto_OVS_VPORT_CMD_DEL(r7, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000003340)=ANY=[@ANYBLOB="40160000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fddbdf250200000008000200e815045e080001000300000034000a8008004e00", @ANYRES32=r6, @ANYBLOB="280044800400f3801b002c002f70726f632f736373692f6465766963655f696e666f00000400e28092150a80a711ec80080059000a010101e010358008001900", @ANYRES32=0x0, @ANYBLOB="d410cf8008004000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRESOCT, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="bc26e0593e0b4ae726fdcc802b38cb1ad70ce2271300a1e908000700", @ANYRES32, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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"], 0x1640}, 0x1, 0x0, 0x0, 0x20004084}, 0x4040080) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) 4.847044593s ago: executing program 8 (id=1509): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) sendmsg$auto_NET_SHAPER_CMD_GROUP(0xffffffffffffffff, 0x0, 0x14) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) adjtimex$auto(0x0) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), r0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) timerfd_create$auto(0x9, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS_OLD2(0xffffffffffffffff, 0xc1004111, &(0x7f0000000000)={0x8, [0x2, 0xffffffff, 0x80000000], [{0x80, 0x2, 0x1, 0x1, 0x1}, {0x8000, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x5, 0x6, 0x0, 0x1, 0x1}, {0x95, 0x400, 0x1, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x1}, {0x9, 0xfffffffe, 0x1, 0x1}, {0x1, 0xc1f, 0x1, 0x0, 0x1}, {0x2, 0xfe, 0x1, 0x0, 0x0, 0x1}, {0x3ff, 0x1, 0x0, 0x1, 0x1}, {0xc12, 0x5, 0x1, 0x0, 0x1}, {0x7ff, 0x4d3c, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x1, 0x1, 0x1}], 0x7f, 0xfff, 0x3, 0x3, 0x6, 0x9, 0x80000000, "64b91cc75e50f9bfb73422d302bb9262ca4383f3137e87364ff62cfa69013312b39e05e3bb4c990e99e06e310552976c2f5b0732887c3a8873bae9024b524de3"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000000100)="d377ab091f1bbdd7c8a2ee15ead2710417b5033543c488769422c49f61e319508a541421e598db4e990cbc2e76ee898aee98745e4ce8dd2780c1b41aad62f5ecbe35e64475e06aba54e4c490282e97533510f9f2779ee69a4918b1eb1b2f0fcd6e9ca451e74fe365797a1f2f2d0477b761e431a179b031ae9f67d0996572d75afdb05afd8bc6db6eb0e72b95c623a759d20b0aeed76f1287eec0f473458bb71a6ec19cd5ec4f62") r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bus/usb/023/001\x00', 0x201, 0x0) ioctl$auto_USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000540)={0x0, 0x6, "7636151d9b02ba4db36efb8adaeb205490055c8160618a793bc0ef02be6b53ab874d163664e76626154e19585266b4280ac77b4953f03208c9d0d81de29f87c95b44caf734b5f2e59f69b0fe4a5494f48d5300607cd488d34e391975e1aa7743568be0d261cfaa4f9b6174c390954234be5d151787f0c9c66dc02b5a5a89a56682d58f67fb6efb456c4569af2df4c3e2fe0f9223c43727d728cc77183d2ceb9a4b6797048cd4d028ae420b7deabcd6b4a367d87ec44bbe2522223a45c3c8c504c1bae057da778451ca39ef604724c73e5f577cda46ab42dd3392401d1c9bf8ba15c8299371980687c12430b63a504592439e0580a6f2a60bed1efbb23b7596b3"}) ioctl$auto(r2, 0x9, r3) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x2, 0x9, 0x2, 0x6]}, 0x0) close_range$auto(0x2, 0xa, 0x0) 4.489693107s ago: executing program 2 (id=1510): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x100, 0x0) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0xa02, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x80000000, 0x0) r2 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x9500, 0x0) pread64$auto(r2, 0x0, 0x1000f42d, 0x100) socket(0xa, 0x5, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x804) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001740)='/sys/devices/virtual/vtconsole/vtcon1/name\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x4, 0x4, 0x2000063, 0x0, 0x0, 0x0, 0x1000, 0xb, 0x2005, 0x40000402, 0x4009, 0x9, 0xffffffff80000000, 0x9, 0x3, 0x200000100103}) socket$nl_generic(0x10, 0x3, 0x10) r4 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) kill$auto(r4, 0x11) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 3.890815189s ago: executing program 9 (id=1511): io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0xd, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x104, 0x6, 0x3}, {0x100, 0x1, 0x2052, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) r0 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x1e10c1, 0x0) read$auto_vhci_fops_hci_vhci(r0, &(0x7f0000000d40)=""/16, 0x10) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) poll$auto(&(0x7f0000000480)={r1, 0xffff, 0x29}, 0x3, 0x8) unshare$auto(0x40000080) mmap$auto(0x5, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) mmap$auto(0x80, 0xfc0000000, 0x10000000003, 0x200004000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttyc7/dev\x00', 0x4000, 0x0) getpid() close_range$auto(0x2, 0x8, 0x0) 2.49683285s ago: executing program 4 (id=1512): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x200000000, 0xfffdfffffffffffa, 0x1, 0x1, 0x6, 0x0, 0x7, 0x4ec4445, 0x2, {0x100000000, 0x5}, 0x5, 0x1, 0x10000000000009, 0x1008000, 0x0, 0x8, 0x81, 0xdfffffffffff6295, 0x10000000000406, 0x4, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ILA_CMD_DEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010021bd7000fbdbd025020000000c0003000d0000ba0a9eecfd8c8a9aca0008b50100000000000c00030000000000000000", @ANYRES32=0x0, @ANYBLOB="0500"/20], 0x50}, 0x1, 0x0, 0x0, 0x4004804}, 0x10) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) madvise$auto(0x110c230000, 0x1, 0x9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) write$auto(r3, &(0x7f00000004c0)='N\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7ff) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000007c0)=""/153, 0x99) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) memfd_secret$auto(0x0) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) socket(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2.336110389s ago: executing program 8 (id=1513): r0 = openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim3/take_snapshot\x00', 0x2001, 0x0) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x41, 0x0, 0x0) write$auto_nsim_dev_take_snapshot_fops_dev(r0, 0x0, 0x0) 1.705684192s ago: executing program 8 (id=1514): r0 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) unshare$auto(0x20000) (async) unshare$auto(0x20000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x0, 0x120) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4) open(0x0, 0x261c2, 0x84) (async) open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) (async) close_range$auto(0x2, 0x8000, 0x0) lseek$auto(0xffffffffffffffff, 0x8001, 0x4) msgrcv$auto(0xff, 0x0, 0x0, 0xffff, 0x6bc2cc7d) (async) msgrcv$auto(0xff, 0x0, 0x0, 0xffff, 0x6bc2cc7d) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) fanotify_init$auto(0x602, 0x1) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x40342, 0x40) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x40342, 0x40) close_range$auto(r0, r0, 0x3) setsockopt$auto(0x3, 0x6b, 0x4, 0x0, 0xfb3) mmap$auto(0x0, 0x2020009, 0x3, 0x13, 0xfffffffffffffffb, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x13, 0xfffffffffffffffb, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) semctl$auto_SETVAL(0x5, 0x5, 0x10, 0xdf2) ioctl$auto_SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000240)) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x80004, 0x0) 308.461792ms ago: executing program 8 (id=1515): openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:01/status\x00', 0x80840, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/46, 0x2e) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) socket(0x1a, 0x5, 0x9) madvise$auto(0x7, 0x9, 0xffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000011c0)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IOAM6_ATTR_NS_DATA={0x8, 0x2, 0x2}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x4}, @IOAM6_ATTR_NS_DATA_WIDE={0xc, 0x3, 0x10000}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) 0s ago: executing program 8 (id=1516): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x13, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0x2}, 0x1002}, 0x739618ce, 0x311) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0x4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) semctl$auto_SEM_INFO(0x0, 0xfffffffd, 0x13, 0x1) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) getrusage$auto_RUSAGE_CHILDREN(0xffffffffffffffff, &(0x7f0000000180)={{0x2, 0x4583}, {0x1, 0x8}, 0x100000007131ad2e, 0x200001b4, 0x100000000004, 0xfffeffffffffdffd, 0x2, 0xcdaa, 0x1, 0x2, 0x1, 0x0, 0x9, 0x72, 0xb3b, 0x1}) ioctl$auto_USBDEVFS_IOCTL(r1, 0xc0105512, 0x0) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): mp_stack_lvl+0x16c/0x1f0 [ 458.723632][T10942] should_fail_ex+0x512/0x640 [ 458.723664][T10942] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 458.723692][T10942] should_failslab+0xc2/0x120 [ 458.723720][T10942] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 458.723745][T10942] ? __alloc_skb+0x2b2/0x380 [ 458.723772][T10942] __alloc_skb+0x2b2/0x380 [ 458.723795][T10942] ? __pfx___alloc_skb+0x10/0x10 [ 458.723822][T10942] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 458.723849][T10942] ? __lock_acquire+0xaa4/0x1ba0 [ 458.723881][T10942] netlink_alloc_large_skb+0x69/0x130 [ 458.723911][T10942] netlink_sendmsg+0x6a1/0xdd0 [ 458.723943][T10942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.723990][T10942] ____sys_sendmsg+0xa95/0xc70 [ 458.724025][T10942] ? copy_msghdr_from_user+0x10a/0x160 [ 458.724051][T10942] ? __pfx_____sys_sendmsg+0x10/0x10 [ 458.724096][T10942] ___sys_sendmsg+0x134/0x1d0 [ 458.724123][T10942] ? __pfx____sys_sendmsg+0x10/0x10 [ 458.724181][T10942] __sys_sendmsg+0x16d/0x220 [ 458.724207][T10942] ? __pfx___sys_sendmsg+0x10/0x10 [ 458.724241][T10942] ? rcu_is_watching+0x12/0xc0 [ 458.724269][T10942] do_syscall_64+0xcd/0x230 [ 458.724304][T10942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.724327][T10942] RIP: 0033:0x7f3038b8e969 [ 458.724344][T10942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.724365][T10942] RSP: 002b:00007f3039936038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 458.724385][T10942] RAX: ffffffffffffffda RBX: 00007f3038db5fa0 RCX: 00007f3038b8e969 [ 458.724400][T10942] RDX: 0000000004000010 RSI: 0000200000001a00 RDI: 0000000000000009 [ 458.724414][T10942] RBP: 00007f3039936090 R08: 0000000000000000 R09: 0000000000000000 [ 458.724427][T10942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.724440][T10942] R13: 0000000000000000 R14: 00007f3038db5fa0 R15: 00007ffe6235d5b8 [ 458.724467][T10942] [ 464.645428][T10800] syz.3.1088 (10800) used greatest stack depth: 20424 bytes left [ 468.298990][T11012] zswap: compressor not available [ 472.107562][T11050] Invalid ELF header magic: != ELF [ 472.477788][T11050] Line length is too long: Should be less than 4094 [ 473.897312][T11058] ima: policy update failed [ 473.943497][ T31] audit: type=1802 audit(4294967323.860:50): pid=11058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1119" res=0 errno=0 [ 476.660335][T10814] syz.1.1090 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 477.071626][T10814] CPU: 0 UID: 0 PID: 10814 Comm: syz.1.1090 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 477.071660][T10814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 477.071674][T10814] Call Trace: [ 477.071681][T10814] [ 477.071690][T10814] dump_stack_lvl+0x16c/0x1f0 [ 477.071727][T10814] dump_header+0x101/0x930 [ 477.071760][T10814] oom_kill_process+0x270/0xa60 [ 477.071793][T10814] out_of_memory+0x350/0x1700 [ 477.071829][T10814] ? __pfx_out_of_memory+0x10/0x10 [ 477.071867][T10814] mem_cgroup_out_of_memory+0x205/0x270 [ 477.071902][T10814] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 477.071944][T10814] ? do_raw_spin_unlock+0x172/0x230 [ 477.071984][T10814] try_charge_memcg+0xa07/0x10c0 [ 477.072018][T10814] ? __pfx_try_charge_memcg+0x10/0x10 [ 477.072045][T10814] ? __print_lock_name+0xb1/0xe0 [ 477.072068][T10814] ? rcu_read_unlock+0x17/0x60 [ 477.072104][T10814] charge_memcg+0x8a/0x230 [ 477.072132][T10814] __mem_cgroup_charge+0x2b/0x1e0 [ 477.072164][T10814] shmem_alloc_and_add_folio+0x514/0xc20 [ 477.072198][T10814] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 477.072234][T10814] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 477.072267][T10814] shmem_get_folio_gfp+0x687/0x1530 [ 477.072298][T10814] ? __lock_acquire+0xaa4/0x1ba0 [ 477.072326][T10814] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 477.072355][T10814] ? __pte_offset_map_lock+0x155/0x2f0 [ 477.072391][T10814] shmem_write_begin+0x160/0x300 [ 477.072421][T10814] ? __pfx_shmem_write_begin+0x10/0x10 [ 477.072449][T10814] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 477.072488][T10814] ? __pfx_timestamp_truncate+0x10/0x10 [ 477.072515][T10814] generic_perform_write+0x3cd/0x930 [ 477.072552][T10814] ? __pfx_generic_perform_write+0x10/0x10 [ 477.072580][T10814] ? inode_needs_update_time.part.0+0x191/0x270 [ 477.072612][T10814] shmem_file_write_iter+0x10e/0x140 [ 477.072646][T10814] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 477.072676][T10814] __kernel_write_iter+0x317/0xa90 [ 477.072701][T10814] ? __pfx___kernel_write_iter+0x10/0x10 [ 477.072723][T10814] ? __up_read+0x1f8/0x750 [ 477.072759][T10814] ? dump_user_range+0x73d/0xb30 [ 477.072796][T10814] dump_user_range+0x418/0xb30 [ 477.072834][T10814] ? __pfx_dump_user_range+0x10/0x10 [ 477.072867][T10814] ? elf_coredump_extra_notes_write+0xbd/0x430 [ 477.072896][T10814] ? __pfx_writenote+0x10/0x10 [ 477.072937][T10814] elf_core_dump+0x288a/0x3a90 [ 477.072986][T10814] ? __pfx_elf_core_dump+0x10/0x10 [ 477.073029][T10814] ? find_held_lock+0x2b/0x80 [ 477.073049][T10814] ? 0xffffffffff600000 [ 477.073068][T10814] ? rcu_is_watching+0x12/0xc0 [ 477.073087][T10814] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 477.073117][T10814] ? lockdep_hardirqs_on+0x7c/0x110 [ 477.073192][T10814] ? do_coredump+0x3183/0x4480 [ 477.073220][T10814] do_coredump+0x3183/0x4480 [ 477.073266][T10814] ? __pfx_do_coredump+0x10/0x10 [ 477.073299][T10814] ? stack_trace_save+0x8e/0xc0 [ 477.073321][T10814] ? __pfx_stack_trace_save+0x10/0x10 [ 477.073343][T10814] ? stack_depot_save_flags+0x28/0xa50 [ 477.073378][T10814] ? __lock_acquire+0xaa4/0x1ba0 [ 477.073420][T10814] ? __kasan_slab_free+0x51/0x70 [ 477.073444][T10814] ? kmem_cache_free+0x2d4/0x4d0 [ 477.073465][T10814] ? __sigqueue_free+0xba/0x2a0 [ 477.073497][T10814] ? get_signal+0xcba/0x26d0 [ 477.073519][T10814] ? arch_do_signal_or_restart+0x8f/0x7a0 [ 477.073592][T10814] ? proc_coredump_connector+0x2d1/0x4f0 [ 477.073627][T10814] ? __pfx_proc_coredump_connector+0x10/0x10 [ 477.073668][T10814] ? rcu_is_watching+0x12/0xc0 [ 477.073692][T10814] get_signal+0x22e3/0x26d0 [ 477.073729][T10814] ? __pfx_get_signal+0x10/0x10 [ 477.073754][T10814] ? __pfx_force_sig+0x10/0x10 [ 477.073783][T10814] arch_do_signal_or_restart+0x8f/0x7a0 [ 477.073816][T10814] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 477.073855][T10814] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 477.073887][T10814] ? do_error_trap+0x214/0x240 [ 477.073924][T10814] irqentry_exit_to_user_mode+0x13f/0x280 [ 477.073958][T10814] asm_exc_stack_segment+0x26/0x30 [ 477.073979][T10814] RIP: 0033:0x7f8a42b8e971 [ 477.073997][T10814] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 477.074018][T10814] RSP: 002b:8000000000000000 EFLAGS: 00010217 [ 477.074036][T10814] RAX: 0000000000000000 RBX: 00007f8a42db6240 RCX: 00007f8a42b8e969 [ 477.074050][T10814] RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000020003b4b [ 477.074064][T10814] RBP: 00007f8a42c10ab1 R08: 00000000000001b0 R09: 0000000000000000 [ 477.074078][T10814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.074091][T10814] R13: 0000000000000001 R14: 00007f8a42db6240 R15: 00007ffe4513b188 [ 477.074120][T10814] [ 477.074128][T10814] memory: usage 307200kB, limit 307200kB, failcnt 9102 [ 478.344410][T10814] memory+swap: usage 353776kB, limit 9007199254740988kB, failcnt 0 [ 478.424282][T10814] kmem: usage 3512kB, limit 9007199254740988kB, failcnt 0 [ 478.478743][T10814] Memory cgroup stats for /syz1: [ 478.479001][T10814] cache 310517760 [ 478.512486][T10814] rss 352256 [ 478.515823][T10814] rss_huge 0 [ 478.519024][T10814] shmem 310517760 [ 478.562842][T10814] mapped_file 4939776 [ 478.566878][T10814] dirty 0 [ 478.569824][T10814] writeback 0 [ 478.618006][T10814] workingset_refault_anon 7738 [ 478.640825][T10814] workingset_refault_file 147 [ 478.645589][T10814] swap 47693824 [ 478.675564][T10814] swapcached 61440 [ 478.786466][T10814] pgpgin 678893 [ 478.790022][T10814] pgpgout 607059 [ 478.986520][T10814] pgfault 354430 [ 478.990129][T10814] pgmajfault 4802 [ 479.094322][T10814] inactive_anon 245121024 [ 479.115907][T10814] active_anon 64012288 [ 479.120052][T10814] inactive_file 0 [ 479.137707][T10814] active_file 0 [ 479.146073][T10814] unevictable 0 [ 479.149579][T10814] hierarchical_memory_limit 314572800 [ 479.182651][T10814] hierarchical_memsw_limit 9223372036854771712 [ 479.199085][T10814] total_cache 310517760 [ 479.211417][T10814] total_rss 352256 [ 479.215189][T10814] total_rss_huge 0 [ 479.232227][T10814] total_shmem 310517760 [ 479.249425][T10814] total_mapped_file 4939776 [ 479.259691][T10814] total_dirty 0 [ 479.271360][T10814] total_writeback 0 [ 479.275230][T10814] total_workingset_refault_anon 7738 [ 479.296114][T10814] total_workingset_refault_file 147 [ 479.313011][T10814] total_swap 47693824 [ 479.323700][T10814] total_swapcached 61440 [ 479.338144][T10814] total_pgpgin 678893 [ 479.350965][T10814] total_pgpgout 607059 [ 479.357297][T10814] total_pgfault 354430 [ 479.374304][T10814] total_pgmajfault 4802 [ 479.378501][T10814] total_inactive_anon 245121024 [ 479.393325][T10814] total_active_anon 64012288 [ 479.408780][T10814] total_inactive_file 0 [ 479.421264][T10814] total_active_file 0 [ 479.425283][T10814] total_unevictable 0 [ 479.442719][T10814] anon_cost 0 [ 479.446064][T10814] file_cost 0 [ 479.449355][T10814] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1111,pid=11060,uid=0 [ 479.504426][T10814] Memory cgroup out of memory: OOM victim 11060 (syz.1.1111) is already exiting. Skip killing the task [ 479.556442][T10835] syz.1.1090 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 479.723569][T10835] CPU: 0 UID: 0 PID: 10835 Comm: syz.1.1090 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 479.723603][T10835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 479.723616][T10835] Call Trace: [ 479.723623][T10835] [ 479.723632][T10835] dump_stack_lvl+0x16c/0x1f0 [ 479.723669][T10835] dump_header+0x101/0x930 [ 479.723701][T10835] oom_kill_process+0x270/0xa60 [ 479.723733][T10835] out_of_memory+0x350/0x1700 [ 479.723767][T10835] ? __pfx_out_of_memory+0x10/0x10 [ 479.723803][T10835] mem_cgroup_out_of_memory+0x205/0x270 [ 479.723837][T10835] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 479.723877][T10835] ? do_raw_spin_unlock+0x172/0x230 [ 479.723916][T10835] try_charge_memcg+0xa07/0x10c0 [ 479.723960][T10835] ? __pfx_try_charge_memcg+0x10/0x10 [ 479.723988][T10835] ? __print_lock_name+0xb0/0xe0 [ 479.724010][T10835] ? rcu_read_unlock+0x17/0x60 [ 479.724046][T10835] charge_memcg+0x8a/0x230 [ 479.724074][T10835] __mem_cgroup_charge+0x2b/0x1e0 [ 479.724106][T10835] shmem_alloc_and_add_folio+0x514/0xc20 [ 479.724140][T10835] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 479.724169][T10835] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 479.724202][T10835] shmem_get_folio_gfp+0x687/0x1530 [ 479.724235][T10835] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 479.724263][T10835] ? timestamp_truncate+0x21e/0x2d0 [ 479.724291][T10835] shmem_write_begin+0x160/0x300 [ 479.724321][T10835] ? __pfx_shmem_write_begin+0x10/0x10 [ 479.724349][T10835] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 479.724394][T10835] generic_perform_write+0x3cd/0x930 [ 479.724431][T10835] ? __pfx_generic_perform_write+0x10/0x10 [ 479.724462][T10835] ? generic_update_time+0xcf/0xf0 [ 479.724485][T10835] ? mnt_put_write_access_file+0x45/0xf0 [ 479.724524][T10835] shmem_file_write_iter+0x10e/0x140 [ 479.724557][T10835] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 479.724588][T10835] __kernel_write_iter+0x317/0xa90 [ 479.724612][T10835] ? __pfx___kernel_write_iter+0x10/0x10 [ 479.724633][T10835] ? __up_read+0x1f8/0x750 [ 479.724670][T10835] ? dump_user_range+0x73d/0xb30 [ 479.724707][T10835] dump_user_range+0x418/0xb30 [ 479.724745][T10835] ? __pfx_dump_user_range+0x10/0x10 [ 479.724777][T10835] ? elf_coredump_extra_notes_write+0xbd/0x430 [ 479.724806][T10835] ? __pfx_writenote+0x10/0x10 [ 479.724848][T10835] elf_core_dump+0x288a/0x3a90 [ 479.724897][T10835] ? __pfx_elf_core_dump+0x10/0x10 [ 479.724945][T10835] ? find_held_lock+0x2b/0x80 [ 479.724966][T10835] ? 0xffffffffff600000 [ 479.724984][T10835] ? rcu_is_watching+0x12/0xc0 [ 479.725004][T10835] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 479.725033][T10835] ? lockdep_hardirqs_on+0x7c/0x110 [ 479.725108][T10835] ? do_coredump+0x3183/0x4480 [ 479.725136][T10835] do_coredump+0x3183/0x4480 [ 479.725177][T10835] ? __pfx_do_coredump+0x10/0x10 [ 479.725209][T10835] ? stack_trace_save+0x8e/0xc0 [ 479.725232][T10835] ? __pfx_stack_trace_save+0x10/0x10 [ 479.725254][T10835] ? stack_depot_save_flags+0x28/0xa50 [ 479.725288][T10835] ? __lock_acquire+0xaa4/0x1ba0 [ 479.725323][T10835] ? __kasan_slab_free+0x51/0x70 [ 479.725347][T10835] ? kmem_cache_free+0x2d4/0x4d0 [ 479.725368][T10835] ? __sigqueue_free+0xba/0x2a0 [ 479.725398][T10835] ? get_signal+0xcba/0x26d0 [ 479.725421][T10835] ? arch_do_signal_or_restart+0x8f/0x7a0 [ 479.725493][T10835] ? proc_coredump_connector+0x2d1/0x4f0 [ 479.725527][T10835] ? __pfx_proc_coredump_connector+0x10/0x10 [ 479.725569][T10835] ? rcu_is_watching+0x12/0xc0 [ 479.725593][T10835] get_signal+0x22e3/0x26d0 [ 479.725629][T10835] ? __pfx_get_signal+0x10/0x10 [ 479.725654][T10835] ? __pfx_force_sig+0x10/0x10 [ 479.725689][T10835] arch_do_signal_or_restart+0x8f/0x7a0 [ 479.725721][T10835] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 479.725761][T10835] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 479.725793][T10835] ? do_error_trap+0x214/0x240 [ 479.725830][T10835] irqentry_exit_to_user_mode+0x13f/0x280 [ 479.725864][T10835] asm_exc_stack_segment+0x26/0x30 [ 479.725886][T10835] RIP: 0033:0x7f8a42b8e971 [ 479.725904][T10835] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 479.725926][T10835] RSP: 002b:8000000000000000 EFLAGS: 00010217 [ 479.725949][T10835] RAX: 0000000000000000 RBX: 00007f8a42db6240 RCX: 00007f8a42b8e969 [ 479.725963][T10835] RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000020003b4b [ 479.725977][T10835] RBP: 00007f8a42c10ab1 R08: 00000000000001b0 R09: 0000000000000000 [ 479.725991][T10835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.726004][T10835] R13: 0000000000000001 R14: 00007f8a42db6240 R15: 00007ffe4513b188 [ 479.726033][T10835] [ 479.726041][T10835] memory: usage 307200kB, limit 307200kB, failcnt 9558 [ 480.418206][T10835] memory+swap: usage 353776kB, limit 9007199254740988kB, failcnt 0 [ 480.452978][T10835] kmem: usage 3276kB, limit 9007199254740988kB, failcnt 0 [ 480.469230][T10835] Memory cgroup stats for /syz1: [ 480.469481][T10835] cache 310980608 [ 480.483796][T10835] rss 180224 [ 480.487089][T10835] rss_huge 0 [ 480.490334][T10835] shmem 310980608 [ 480.496751][T10835] mapped_file 4849664 [ 480.501052][T10835] dirty 0 [ 480.504058][T10835] writeback 0 [ 480.507452][T10835] workingset_refault_anon 7738 [ 480.514999][T10835] workingset_refault_file 148 [ 480.519864][T10835] swap 47693824 [ 480.523713][T10835] swapcached 61440 [ 480.527507][T10835] pgpgin 679029 [ 480.533637][T10835] pgpgout 607136 [ 480.537251][T10835] pgfault 354435 [ 480.541165][T10835] pgmajfault 4802 [ 480.544900][T10835] inactive_anon 245125120 [ 480.549290][T10835] active_anon 66093056 [ 480.556206][T10835] inactive_file 0 [ 480.559975][T10835] active_file 0 [ 480.563976][T10835] unevictable 0 [ 480.568957][T10835] hierarchical_memory_limit 314572800 [ 480.579458][T10835] hierarchical_memsw_limit 9223372036854771712 [ 480.586035][T10835] total_cache 310980608 [ 480.590377][T10835] total_rss 180224 [ 480.599914][T10835] total_rss_huge 0 [ 480.604154][T10835] total_shmem 310980608 [ 480.608516][T10835] total_mapped_file 4849664 [ 480.615817][T10835] total_dirty 0 [ 480.619416][T10835] total_writeback 0 [ 480.623802][T10835] total_workingset_refault_anon 7738 [ 480.629379][T10835] total_workingset_refault_file 148 [ 480.637675][T10835] total_swap 47693824 [ 480.642239][T10835] total_swapcached 61440 [ 480.646589][T10835] total_pgpgin 679029 [ 480.653422][T10835] total_pgpgout 607136 [ 480.657658][T10835] total_pgfault 354435 [ 480.662232][T10835] total_pgmajfault 4802 [ 480.666546][T10835] total_inactive_anon 245125120 [ 480.675206][T10835] total_active_anon 66093056 [ 480.680048][T10835] total_inactive_file 0 [ 480.685614][T10835] total_active_file 0 [ 480.690346][T10835] total_unevictable 0 [ 480.697249][T10835] anon_cost 0 [ 480.703801][T10835] file_cost 0 [ 480.707247][T10835] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1090,pid=10839,uid=0 [ 480.727231][T10835] Memory cgroup out of memory: Killed process 10839 (syz.1.1090) total-vm:164168kB, anon-rss:1072kB, file-rss:21668kB, shmem-rss:4736kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 481.025284][T10432] syz.2.1035 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 481.071417][T10432] CPU: 0 UID: 0 PID: 10432 Comm: syz.2.1035 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 481.071450][T10432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 481.071464][T10432] Call Trace: [ 481.071471][T10432] [ 481.071479][T10432] dump_stack_lvl+0x16c/0x1f0 [ 481.071516][T10432] dump_header+0x101/0x930 [ 481.071548][T10432] oom_kill_process+0x270/0xa60 [ 481.071579][T10432] out_of_memory+0x350/0x1700 [ 481.071613][T10432] ? __pfx_out_of_memory+0x10/0x10 [ 481.071649][T10432] mem_cgroup_out_of_memory+0x205/0x270 [ 481.071683][T10432] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 481.071723][T10432] ? do_raw_spin_unlock+0x172/0x230 [ 481.071761][T10432] try_charge_memcg+0xa07/0x10c0 [ 481.071800][T10432] ? __pfx_try_charge_memcg+0x10/0x10 [ 481.071828][T10432] ? __print_lock_name+0xb0/0xe0 [ 481.071850][T10432] ? rcu_read_unlock+0x17/0x60 [ 481.071887][T10432] charge_memcg+0x8a/0x230 [ 481.071914][T10432] __mem_cgroup_charge+0x2b/0x1e0 [ 481.071947][T10432] shmem_alloc_and_add_folio+0x514/0xc20 [ 481.071980][T10432] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 481.072010][T10432] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 481.072042][T10432] shmem_get_folio_gfp+0x687/0x1530 [ 481.072073][T10432] ? __lock_acquire+0xaa4/0x1ba0 [ 481.072101][T10432] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 481.072130][T10432] ? __pte_offset_map_lock+0x155/0x2f0 [ 481.072166][T10432] shmem_write_begin+0x160/0x300 [ 481.072196][T10432] ? __pfx_shmem_write_begin+0x10/0x10 [ 481.072225][T10432] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 481.072262][T10432] ? __pfx_timestamp_truncate+0x10/0x10 [ 481.072289][T10432] generic_perform_write+0x3cd/0x930 [ 481.072325][T10432] ? __pfx_generic_perform_write+0x10/0x10 [ 481.072353][T10432] ? inode_needs_update_time.part.0+0x191/0x270 [ 481.072385][T10432] shmem_file_write_iter+0x10e/0x140 [ 481.072418][T10432] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 481.072453][T10432] __kernel_write_iter+0x317/0xa90 [ 481.072478][T10432] ? __pfx___kernel_write_iter+0x10/0x10 [ 481.072499][T10432] ? __up_read+0x1f8/0x750 [ 481.072537][T10432] ? dump_user_range+0x73d/0xb30 [ 481.072575][T10432] dump_user_range+0x418/0xb30 [ 481.072612][T10432] ? __pfx_dump_user_range+0x10/0x10 [ 481.072645][T10432] ? elf_coredump_extra_notes_write+0xbd/0x430 [ 481.072674][T10432] ? __pfx_writenote+0x10/0x10 [ 481.072715][T10432] elf_core_dump+0x288a/0x3a90 [ 481.072764][T10432] ? __pfx_elf_core_dump+0x10/0x10 [ 481.072810][T10432] ? find_held_lock+0x2b/0x80 [ 481.072830][T10432] ? 0xffffffffff600000 [ 481.072849][T10432] ? rcu_is_watching+0x12/0xc0 [ 481.072869][T10432] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 481.072897][T10432] ? lockdep_hardirqs_on+0x7c/0x110 [ 481.072971][T10432] ? do_coredump+0x3183/0x4480 [ 481.072999][T10432] do_coredump+0x3183/0x4480 [ 481.073040][T10432] ? __pfx_do_coredump+0x10/0x10 [ 481.073072][T10432] ? stack_trace_save+0x8e/0xc0 [ 481.073095][T10432] ? __pfx_stack_trace_save+0x10/0x10 [ 481.073117][T10432] ? stack_depot_save_flags+0x28/0xa50 [ 481.073151][T10432] ? __lock_acquire+0xaa4/0x1ba0 [ 481.073186][T10432] ? __kasan_slab_free+0x51/0x70 [ 481.073210][T10432] ? kmem_cache_free+0x2d4/0x4d0 [ 481.073230][T10432] ? __sigqueue_free+0xba/0x2a0 [ 481.073259][T10432] ? get_signal+0xcba/0x26d0 [ 481.073280][T10432] ? arch_do_signal_or_restart+0x8f/0x7a0 [ 481.073350][T10432] ? proc_coredump_connector+0x2d1/0x4f0 [ 481.073386][T10432] ? __pfx_proc_coredump_connector+0x10/0x10 [ 481.073427][T10432] ? rcu_is_watching+0x12/0xc0 [ 481.073452][T10432] get_signal+0x22e3/0x26d0 [ 481.073483][T10432] ? force_sig_fault+0xc4/0x100 [ 481.073511][T10432] ? __pfx_get_signal+0x10/0x10 [ 481.073544][T10432] arch_do_signal_or_restart+0x8f/0x7a0 [ 481.073575][T10432] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 481.073606][T10432] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 481.073656][T10432] irqentry_exit_to_user_mode+0x13f/0x280 [ 481.073690][T10432] asm_exc_page_fault+0x26/0x30 [ 481.073712][T10432] RIP: 0033:0x4000000 [ 481.073733][T10432] Code: Unable to access opcode bytes at 0x3ffffd6. [ 481.073742][T10432] RSP: 002b:000000000000000a EFLAGS: 00010217 [ 481.073760][T10432] RAX: 0000000000000000 RBX: 00007f5f729b6080 RCX: 00007f5f7278e969 [ 481.073774][T10432] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 481.073787][T10432] RBP: 00007f5f72810ab1 R08: 0000000000000002 R09: 0000000000000000 [ 481.073806][T10432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.073819][T10432] R13: 0000000000000001 R14: 00007f5f729b6080 R15: 00007fff5f767f88 [ 481.073849][T10432] [ 481.836466][T10820] syz.1.1090 (10820) used greatest stack depth: 20120 bytes left [ 482.496628][T11118] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1134'. [ 482.518849][T11118] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.663336][T10432] memory: usage 307136kB, limit 307200kB, failcnt 11206 [ 482.670334][T10432] memory+swap: usage 385064kB, limit 9007199254740988kB, failcnt 0 [ 482.719009][T10432] kmem: usage 5584kB, limit 9007199254740988kB, failcnt 0 [ 482.750801][T10432] Memory cgroup stats for /syz2: [ 482.750962][T10432] cache 308228096 [ 482.759594][T10432] rss 57344 [ 482.790777][T10432] rss_huge 0 [ 482.794048][T10432] shmem 308228096 [ 482.797689][T10432] mapped_file 0 [ 482.831646][T10432] dirty 0 [ 482.843103][T10432] writeback 0 [ 482.850761][T10432] workingset_refault_anon 4780 [ 482.855570][T10432] workingset_refault_file 26 [ 482.882412][T10432] swap 79798272 [ 482.886062][T10432] swapcached 503808 [ 482.889915][T10432] pgpgin 600124 [ 482.924970][T10432] pgpgout 526780 [ 482.928566][T10432] pgfault 271172 [ 482.951483][T10432] pgmajfault 1869 [ 482.962758][T10432] inactive_anon 82010112 [ 482.977240][T10432] active_anon 226574336 [ 482.987547][T10432] inactive_file 0 [ 483.005830][T10432] active_file 0 [ 483.019543][T10432] unevictable 0 [ 483.034541][T10432] hierarchical_memory_limit 314572800 [ 483.063336][T10432] hierarchical_memsw_limit 9223372036854771712 [ 483.069534][T10432] total_cache 308228096 [ 483.090766][T10432] total_rss 57344 [ 483.103119][T10432] total_rss_huge 0 [ 483.117067][T10432] total_shmem 308228096 [ 483.147444][T10432] total_mapped_file 0 [ 483.161455][T10432] total_dirty 0 [ 483.164959][T10432] total_writeback 0 [ 483.189285][T10432] total_workingset_refault_anon 4780 [ 483.216061][T10432] total_workingset_refault_file 26 [ 483.246480][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 483.255675][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 483.268484][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 483.277512][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 483.292235][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 483.301481][T10432] total_swap 79798272 [ 483.305494][T10432] total_swapcached 503808 [ 483.343162][T10432] total_pgpgin 600124 [ 483.347193][T10432] total_pgpgout 526780 [ 483.363355][T10432] total_pgfault 271172 [ 483.367461][T10432] total_pgmajfault 1869 [ 483.382013][T10432] total_inactive_anon 82010112 [ 483.390788][T10432] total_active_anon 226574336 [ 483.395494][T10432] total_inactive_file 0 [ 483.413013][T10432] total_active_file 0 [ 483.417075][T10432] total_unevictable 0 [ 483.432500][T10432] anon_cost 0 [ 483.442126][T10432] file_cost 0 [ 483.461342][T10432] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1035,pid=10440,uid=0 [ 483.502022][T10432] Memory cgroup out of memory: Killed process 10440 (syz.2.1035) total-vm:102732kB, anon-rss:964kB, file-rss:37736kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 483.743507][T11118] bridge_slave_1 (unregistering): left allmulticast mode [ 483.763527][T11118] bridge_slave_1 (unregistering): left promiscuous mode [ 483.771580][T11118] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.782797][T10432] syz.2.1035 (10432) used greatest stack depth: 19480 bytes left [ 484.184362][T10817] syz.1.1090 (10817) used greatest stack depth: 18728 bytes left [ 485.367880][ T5844] Bluetooth: hci4: command tx timeout [ 485.626518][ T33] oom_reaper: reaped process 10440 (syz.2.1035), now anon-rss:28kB, file-rss:36676kB, shmem-rss:0kB [ 485.674513][T11137] zswap: compressor not available [ 486.542530][T11153] FAULT_INJECTION: forcing a failure. [ 486.542530][T11153] name failslab, interval 1, probability 0, space 0, times 0 [ 486.649157][T11153] CPU: 0 UID: 0 PID: 11153 Comm: syz.1.1139 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 486.649192][T11153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 486.649206][T11153] Call Trace: [ 486.649214][T11153] [ 486.649223][T11153] dump_stack_lvl+0x16c/0x1f0 [ 486.649260][T11153] should_fail_ex+0x512/0x640 [ 486.649294][T11153] ? __kmalloc_noprof+0xbf/0x510 [ 486.649321][T11153] ? copy_splice_read+0x1a8/0xba0 [ 486.649362][T11153] should_failslab+0xc2/0x120 [ 486.649390][T11153] __kmalloc_noprof+0xd2/0x510 [ 486.649421][T11153] copy_splice_read+0x1a8/0xba0 [ 486.649455][T11153] ? __pfx_pipe_to_null+0x10/0x10 [ 486.649487][T11153] ? __pfx_copy_splice_read+0x10/0x10 [ 486.649519][T11153] ? pipe_unlock+0x4a/0x70 [ 486.649541][T11153] ? __pfx_splice_from_pipe+0x10/0x10 [ 486.649584][T11153] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 486.649606][T11153] ? __pfx_copy_splice_read+0x10/0x10 [ 486.649639][T11153] do_splice_read+0x282/0x370 [ 486.649674][T11153] splice_direct_to_actor+0x2a1/0xa30 [ 486.649710][T11153] ? __pfx_direct_splice_actor+0x10/0x10 [ 486.649750][T11153] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 486.649792][T11153] do_splice_direct+0x174/0x240 [ 486.649826][T11153] ? __pfx_do_splice_direct+0x10/0x10 [ 486.649860][T11153] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 486.649895][T11153] ? bpf_lsm_file_permission+0x9/0x10 [ 486.649930][T11153] ? security_file_permission+0x71/0x210 [ 486.649962][T11153] ? rw_verify_area+0xcf/0x680 [ 486.649999][T11153] do_sendfile+0xafd/0xe50 [ 486.650039][T11153] ? __pfx_do_sendfile+0x10/0x10 [ 486.650078][T11153] ? __x64_sys_futex+0x1e0/0x4c0 [ 486.650103][T11153] ? __x64_sys_futex+0x1e9/0x4c0 [ 486.650130][T11153] __x64_sys_sendfile64+0x1d8/0x220 [ 486.650158][T11153] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 486.650183][T11153] ? rcu_is_watching+0x12/0xc0 [ 486.650212][T11153] do_syscall_64+0xcd/0x230 [ 486.650248][T11153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.650272][T11153] RIP: 0033:0x7f8a42b8e969 [ 486.650289][T11153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.650313][T11153] RSP: 002b:00007f8a43a73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 486.650334][T11153] RAX: ffffffffffffffda RBX: 00007f8a42db5fa0 RCX: 00007f8a42b8e969 [ 486.650359][T11153] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 486.650372][T11153] RBP: 00007f8a42c10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 486.650386][T11153] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000000 [ 486.650400][T11153] R13: 0000000000000000 R14: 00007f8a42db5fa0 R15: 00007ffe4513b188 [ 486.650429][T11153] [ 486.982534][T10426] syz.2.1035 (10426) used greatest stack depth: 17784 bytes left [ 487.415402][T11121] chnl_net:caif_netlink_parms(): no params data found [ 487.504273][ T5844] Bluetooth: hci4: command tx timeout [ 488.258646][T11121] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.309793][T11121] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.366271][T11121] bridge_slave_0: entered allmulticast mode [ 488.403116][T11121] bridge_slave_0: entered promiscuous mode [ 488.483136][T11121] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.551042][T11121] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.593049][T11121] bridge_slave_1: entered allmulticast mode [ 488.673132][T11121] bridge_slave_1: entered promiscuous mode [ 489.084763][T11121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.139287][T11121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.521496][ T5844] Bluetooth: hci4: command tx timeout [ 489.597324][ T1164] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.824416][T10676] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 489.833288][T10676] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 489.841788][T10676] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 489.850621][T10676] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 489.858591][T10676] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 489.940368][T11121] team0: Port device team_slave_0 added [ 489.979660][T11121] team0: Port device team_slave_1 added [ 490.106860][ T1164] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.505941][ T1164] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.635730][T11121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.683429][T11121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.789075][T11121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.933378][T11121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.940434][T11121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.073645][T11121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.183572][ T1164] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.601134][T10676] Bluetooth: hci4: command tx timeout [ 491.654069][T11121] hsr_slave_0: entered promiscuous mode [ 491.692343][T11121] hsr_slave_1: entered promiscuous mode [ 491.703147][T11121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 491.737618][T11121] Cannot create hsr debugfs directory [ 491.921148][T10676] Bluetooth: hci1: command tx timeout [ 492.457445][ T1164] bridge_slave_1: left allmulticast mode [ 492.480066][ T1164] bridge_slave_1: left promiscuous mode [ 492.520489][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.573396][ T1164] bridge_slave_0: left allmulticast mode [ 492.579072][ T1164] bridge_slave_0: left promiscuous mode [ 492.641882][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.000995][T10676] Bluetooth: hci1: command tx timeout [ 494.405593][ T1164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.447668][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.469920][ T1164] bond0 (unregistering): Released all slaves [ 495.254552][T11175] chnl_net:caif_netlink_parms(): no params data found [ 495.488636][T11121] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 495.684521][T11121] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 495.812277][T11121] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 495.896114][ T1164] hsr_slave_0: left promiscuous mode [ 495.941275][ T1164] hsr_slave_1: left promiscuous mode [ 495.967669][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.017380][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.080887][T10676] Bluetooth: hci1: command tx timeout [ 496.136920][ T1164] veth1_macvtap: left promiscuous mode [ 496.191303][ T1164] veth0_macvtap: left promiscuous mode [ 496.221090][ T1164] veth1_vlan: left promiscuous mode [ 496.226574][ T1164] veth0_vlan: left promiscuous mode [ 496.710255][T11246] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1152'. [ 497.522029][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 498.160911][T10676] Bluetooth: hci1: command tx timeout [ 498.444543][T11121] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 498.977333][T11175] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.001780][T11175] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.009007][T11175] bridge_slave_0: entered allmulticast mode [ 499.097758][T11175] bridge_slave_0: entered promiscuous mode [ 499.124488][T11175] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.158722][T11175] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.184411][T11175] bridge_slave_1: entered allmulticast mode [ 499.218462][T11175] bridge_slave_1: entered promiscuous mode [ 499.437358][T11175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.515321][T11175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.704305][T11175] team0: Port device team_slave_0 added [ 499.777190][T11175] team0: Port device team_slave_1 added [ 499.965131][T11175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.997401][T11175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.144155][T11175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.305023][T11175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.358042][T11175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.506545][T11175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.749535][T11175] hsr_slave_0: entered promiscuous mode [ 500.769241][T11175] hsr_slave_1: entered promiscuous mode [ 500.785842][T11175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 500.817739][T11175] Cannot create hsr debugfs directory [ 501.104381][T11121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.373380][T11121] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.502281][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.510286][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.616127][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.623334][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.102211][T11175] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 502.185054][T11175] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 502.271329][T11175] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 502.369088][T11175] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 502.988124][T11175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.088005][T11121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.184746][T11175] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.275338][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.282552][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.382369][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.389531][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.895877][T11175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.055202][T11121] veth0_vlan: entered promiscuous mode [ 505.129892][T11121] veth1_vlan: entered promiscuous mode [ 505.776370][T11121] veth0_macvtap: entered promiscuous mode [ 505.914350][T11121] veth1_macvtap: entered promiscuous mode [ 506.070062][T11121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.190812][T11121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.251205][T11121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.330822][T11121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.391468][T11121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.430761][T11121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.476313][T11121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.573795][T11121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.621314][T11121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.660785][T11121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.694585][T11121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.741015][T11121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.776955][T11121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.813875][T11121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.863140][T11121] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.914115][T11121] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.953015][T11121] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.981942][T11121] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.233666][T11175] veth0_vlan: entered promiscuous mode [ 507.437519][T11175] veth1_vlan: entered promiscuous mode [ 507.796897][T11124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.817488][T11175] veth0_macvtap: entered promiscuous mode [ 507.858646][T11124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.945005][T11175] veth1_macvtap: entered promiscuous mode [ 507.987510][T11126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.033985][T11126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.047052][T11175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.128455][T11175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.168676][T11175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.246017][T11175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.321235][T11175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.350415][T11175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.394686][T11175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.488636][T11175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.552067][T11175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.610071][T11175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.705026][T11175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.760916][T11175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.801742][T11175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.849882][T11175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.901609][T11175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.949524][T11175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.001793][T11175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.043251][T11175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.212851][T11175] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.268101][T11175] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.303939][T11175] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.343340][T11175] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.030927][T11124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.038783][T11124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.255709][ T6043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.329967][ T6043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.850436][T11416] FAULT_INJECTION: forcing a failure. [ 510.850436][T11416] name failslab, interval 1, probability 0, space 0, times 0 [ 511.017083][T11416] CPU: 0 UID: 0 PID: 11416 Comm: syz.4.1171 Not tainted 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 511.017119][T11416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 511.017133][T11416] Call Trace: [ 511.017141][T11416] [ 511.017149][T11416] dump_stack_lvl+0x16c/0x1f0 [ 511.017189][T11416] should_fail_ex+0x512/0x640 [ 511.017221][T11416] ? __kmalloc_noprof+0xbf/0x510 [ 511.017248][T11416] ? lsm_blob_alloc+0x68/0x90 [ 511.017290][T11416] should_failslab+0xc2/0x120 [ 511.017319][T11416] __kmalloc_noprof+0xd2/0x510 [ 511.017351][T11416] lsm_blob_alloc+0x68/0x90 [ 511.017387][T11416] security_sk_alloc+0x30/0x270 [ 511.017418][T11416] sk_prot_alloc+0xfb/0x2a0 [ 511.017454][T11416] sk_alloc+0x36/0xc20 [ 511.017478][T11416] inet6_create+0x381/0x1300 [ 511.017506][T11416] ? inet6_create+0x7f/0x1300 [ 511.017533][T11416] __sock_create+0x335/0x8d0 [ 511.017573][T11416] inet_ctl_sock_create+0x94/0x230 [ 511.017606][T11416] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 511.017642][T11416] ? lockdep_init_map_type+0x5c/0x280 [ 511.017675][T11416] ? do_init_timer+0xc9/0x110 [ 511.017702][T11416] ? __pfx_sctp_ctrlsock_init+0x10/0x10 [ 511.017737][T11416] sctp_ctrlsock_init+0x40/0xf0 [ 511.017771][T11416] ops_init+0x1df/0x5f0 [ 511.017803][T11416] setup_net+0x21e/0x850 [ 511.017834][T11416] ? __pfx_setup_net+0x10/0x10 [ 511.017861][T11416] ? lockdep_init_map_type+0x5c/0x280 [ 511.017898][T11416] ? __pfx_down_read_killable+0x10/0x10 [ 511.017924][T11416] ? debug_mutex_init+0x37/0x70 [ 511.017949][T11416] copy_net_ns+0x2a6/0x5f0 [ 511.017985][T11416] create_new_namespaces+0x3ea/0xad0 [ 511.018018][T11416] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 511.018047][T11416] ksys_unshare+0x45b/0xa40 [ 511.018080][T11416] ? __pfx_ksys_unshare+0x10/0x10 [ 511.018115][T11416] ? xfd_validate_state+0x5d/0x180 [ 511.018155][T11416] ? rcu_is_watching+0x12/0xc0 [ 511.018184][T11416] __x64_sys_unshare+0x31/0x40 [ 511.018216][T11416] do_syscall_64+0xcd/0x230 [ 511.018252][T11416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.018276][T11416] RIP: 0033:0x7f96a698e969 [ 511.018293][T11416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.018320][T11416] RSP: 002b:00007f96a784a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 511.018342][T11416] RAX: ffffffffffffffda RBX: 00007f96a6bb5fa0 RCX: 00007f96a698e969 [ 511.018363][T11416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 511.018377][T11416] RBP: 00007f96a6a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 511.018392][T11416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.018405][T11416] R13: 0000000000000000 R14: 00007f96a6bb5fa0 R15: 00007ffc4ee50468 [ 511.018435][T11416] [ 512.303145][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.322038][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 514.425908][T11485] random: crng reseeded on system resumption syzkaller syzkaller login: [ 519.853703][T11538] Setting dangerous option i915.mitigations - tainting kernel [ 530.857600][T11717] ima: policy update failed [ 530.967517][ T31] audit: type=1802 audit(4294967380.890:51): pid=11717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1210" res=0 errno=0 [ 541.780729][ T31] audit: type=1800 audit(4294967391.690:52): pid=11859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1230" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 syzkaller syzkaller login: [ 545.946205][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 545.965827][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 545.974637][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 545.983842][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 545.994124][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 syzkaller syzkaller login: [ 547.118557][T11942] chnl_net:caif_netlink_parms(): no params data found [ 547.515002][T11942] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.540320][T11942] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.561439][T11942] bridge_slave_0: entered allmulticast mode [ 547.581224][T11942] bridge_slave_0: entered promiscuous mode [ 547.654392][T11942] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.680270][T11942] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.713725][T11942] bridge_slave_1: entered allmulticast mode [ 547.749521][T11942] bridge_slave_1: entered promiscuous mode [ 548.020487][T11942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.083135][T10676] Bluetooth: hci5: command tx timeout [ 548.228007][T11942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.489306][T11942] team0: Port device team_slave_0 added [ 548.694303][T11942] team0: Port device team_slave_1 added [ 548.906831][T11942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.934208][T11942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.040488][T11942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.300387][T11942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.336735][T11942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.460772][T11942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.704284][T11942] hsr_slave_0: entered promiscuous mode [ 549.741393][T11942] hsr_slave_1: entered promiscuous mode [ 549.771642][T11942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 549.801573][T11942] Cannot create hsr debugfs directory [ 550.164895][T10676] Bluetooth: hci5: command tx timeout [ 550.858174][T11942] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 550.889608][T11942] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 550.934029][T11942] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 551.004796][T11942] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 551.416848][T11942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.543692][T11942] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.626500][T11124] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.633722][T11124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.722542][T11124] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.729723][T11124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.241762][T10676] Bluetooth: hci5: command tx timeout [ 553.151886][T11942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.321548][T10676] Bluetooth: hci5: command tx timeout [ 555.155598][T11942] veth0_vlan: entered promiscuous mode [ 555.259958][T11942] veth1_vlan: entered promiscuous mode [ 555.401619][T11942] veth0_macvtap: entered promiscuous mode [ 555.437703][T11942] veth1_macvtap: entered promiscuous mode [ 555.516263][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.516290][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.516301][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.516317][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.516328][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.516344][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.516358][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.516373][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.516385][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.516401][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.523470][T11942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.542589][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.542615][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.542626][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.542643][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.542654][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.542678][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.542691][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.542707][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.542719][T11942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.542735][T11942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.543797][T11942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 555.546241][T11942] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.546280][T11942] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.546312][T11942] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.546344][T11942] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.898017][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.898044][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.075733][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 556.075758][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.077356][T12057] erspan0: entered allmulticast mode [ 559.524780][T12106] ima: policy update failed [ 559.529804][ T31] audit: type=1802 audit(4294967409.450:53): pid=12106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.1269" res=0 errno=0 syzkaller syzkaller login: syzkaller syzkaller login: [ 566.608803][T12187] netlink: set zone limit has 8 unknown bytes [ 568.088775][T12210] FAULT_INJECTION: forcing a failure. [ 568.088775][T12210] name failslab, interval 1, probability 0, space 0, times 0 [ 568.139451][T12210] CPU: 0 UID: 0 PID: 12210 Comm: syz.4.1291 Tainted: G U 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 568.139491][T12210] Tainted: [U]=USER [ 568.139498][T12210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 568.139511][T12210] Call Trace: [ 568.139518][T12210] [ 568.139527][T12210] dump_stack_lvl+0x16c/0x1f0 [ 568.139564][T12210] should_fail_ex+0x512/0x640 [ 568.139597][T12210] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 568.139636][T12210] should_failslab+0xc2/0x120 [ 568.139664][T12210] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 568.139693][T12210] ? kstrdup_const+0x63/0x80 [ 568.139725][T12210] kstrdup+0x53/0x100 [ 568.139754][T12210] kstrdup_const+0x63/0x80 [ 568.139782][T12210] __kernfs_new_node+0x9b/0x8a0 [ 568.139822][T12210] ? __pfx___kernfs_new_node+0x10/0x10 [ 568.139866][T12210] ? find_held_lock+0x2b/0x80 [ 568.139888][T12210] ? kernfs_root+0xee/0x2a0 [ 568.139914][T12210] kernfs_new_node+0x13c/0x1e0 [ 568.139944][T12210] kernfs_create_link+0xcc/0x240 [ 568.139976][T12210] sysfs_do_create_link_sd+0x90/0x140 [ 568.140014][T12210] sysfs_create_link+0x61/0xc0 [ 568.140049][T12210] device_add+0x62c/0x1a70 [ 568.140083][T12210] ? __pfx_device_add+0x10/0x10 [ 568.140113][T12210] ? lockdep_init_map_type+0x5c/0x280 [ 568.140144][T12210] ? __init_waitqueue_head+0xca/0x150 [ 568.140187][T12210] netdev_register_kobject+0x182/0x3a0 [ 568.140222][T12210] register_netdevice+0x13dc/0x2270 [ 568.140257][T12210] ? __pfx_register_netdevice+0x10/0x10 [ 568.140288][T12210] ? alloc_netdev_mqs+0xe7e/0x1570 [ 568.140319][T12210] ? __pfx_loopback_net_init+0x10/0x10 [ 568.140348][T12210] register_netdev+0x34/0x50 [ 568.140376][T12210] loopback_net_init+0x7a/0x170 [ 568.140405][T12210] ? __pfx_loopback_net_init+0x10/0x10 [ 568.140432][T12210] ops_init+0x1df/0x5f0 [ 568.140468][T12210] setup_net+0x21e/0x850 [ 568.140498][T12210] ? __pfx_setup_net+0x10/0x10 [ 568.140525][T12210] ? lockdep_init_map_type+0x5c/0x280 [ 568.140555][T12210] ? __pfx_down_read_killable+0x10/0x10 [ 568.140578][T12210] ? debug_mutex_init+0x37/0x70 [ 568.140606][T12210] copy_net_ns+0x2a6/0x5f0 [ 568.140647][T12210] create_new_namespaces+0x3ea/0xad0 [ 568.140682][T12210] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 568.140710][T12210] ksys_unshare+0x45b/0xa40 [ 568.140741][T12210] ? __pfx_ksys_unshare+0x10/0x10 [ 568.140768][T12210] ? xfd_validate_state+0x5d/0x180 [ 568.140805][T12210] ? rcu_is_watching+0x12/0xc0 [ 568.140832][T12210] __x64_sys_unshare+0x31/0x40 [ 568.140860][T12210] do_syscall_64+0xcd/0x230 [ 568.140894][T12210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.140916][T12210] RIP: 0033:0x7f96a698e969 [ 568.140933][T12210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.140953][T12210] RSP: 002b:00007f96a784a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 568.140974][T12210] RAX: ffffffffffffffda RBX: 00007f96a6bb5fa0 RCX: 00007f96a698e969 [ 568.140988][T12210] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 568.141001][T12210] RBP: 00007f96a6a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 568.141014][T12210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.141026][T12210] R13: 0000000000000000 R14: 00007f96a6bb5fa0 R15: 00007ffc4ee50468 [ 568.141055][T12210] [ 570.726671][T11262] Process accounting resumed [ 570.778462][T11262] Process accounting resumed [ 570.805432][T11262] Process accounting resumed [ 570.836601][T11383] Process accounting resumed [ 570.848718][T11383] Process accounting resumed [ 570.899144][T11383] Process accounting resumed [ 570.927464][T11383] Process accounting resumed [ 570.961065][T11383] Process accounting resumed [ 570.977269][ T5818] Process accounting resumed [ 570.989919][ T5818] Process accounting resumed [ 571.092018][T12232] Process accounting resumed [ 573.265087][T12267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1302'. [ 573.686783][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.693332][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.802391][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 574.815295][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 574.823910][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 574.832939][ T5844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 574.842113][ T5844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 575.774860][T12296] chnl_net:caif_netlink_parms(): no params data found [ 576.101557][T12296] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.119133][T12296] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.144732][T12296] bridge_slave_0: entered allmulticast mode [ 576.177293][T12296] bridge_slave_0: entered promiscuous mode [ 576.219131][T12296] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.238730][T12296] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.260325][T12296] bridge_slave_1: entered allmulticast mode [ 576.287090][T12296] bridge_slave_1: entered promiscuous mode [ 576.384041][T12307] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 576.411642][T12307] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 576.417983][T12307] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 576.450540][T12296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.472832][T12307] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 576.493013][T12307] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 576.513038][T12296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.536544][T12307] Bluetooth: hci4: Opcode 0x0406 failed: -4                                                                                                                                   syzkaller syzkaller login: [ 578.482686][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 578.488783][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 578.494917][T10676] Bluetooth: hci2: command 0x0c1a tx timeout [ 578.590392][T12296] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 578.635573][T12296] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 578.642829][T12336] Bluetooth: hci1: command 0x0c1a tx timeout [ 578.725506][T12336] Bluetooth: hci6: command 0x041b tx timeout [ 578.731884][ T5139] Bluetooth: hci5: command 0x0c1a tx timeout [ 578.739217][T12341] FAULT_INJECTION: forcing a failure. [ 578.739217][T12341] name failslab, interval 1, probability 0, space 0, times 0 [ 578.755167][T12296] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 578.793845][T12296] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 578.825862][T12341] CPU: 0 UID: 0 PID: 12341 Comm: syz.4.1318 Tainted: G U 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 578.825902][T12341] Tainted: [U]=USER [ 578.825910][T12341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 578.825924][T12341] Call Trace: [ 578.825932][T12341] [ 578.825941][T12341] dump_stack_lvl+0x16c/0x1f0 [ 578.825979][T12341] should_fail_ex+0x512/0x640 [ 578.826013][T12341] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 578.826043][T12341] should_failslab+0xc2/0x120 [ 578.826073][T12341] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 578.826099][T12341] ? acpi_ut_create_integer_object+0x64/0x180 [ 578.826138][T12341] ? acpi_ds_init_aml_walk+0x2d3/0x590 [ 578.826171][T12341] acpi_ut_create_integer_object+0x64/0x180 [ 578.826209][T12341] acpi_ps_execute_method+0x516/0xb30 [ 578.826242][T12341] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 578.826280][T12341] acpi_ns_evaluate+0x76c/0xca0 [ 578.826313][T12341] ? kasan_save_track+0x14/0x30 [ 578.826342][T12341] acpi_evaluate_object+0x1fa/0xa90 [ 578.826369][T12341] ? do_syscall_64+0xcd/0x230 [ 578.826409][T12341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.826435][T12341] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 578.826462][T12341] ? __mutex_trylock_common+0xe9/0x250 [ 578.826499][T12341] acpi_evaluate_integer+0xdd/0x200 [ 578.826538][T12341] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 578.826589][T12341] ? __pfx_status_show+0x10/0x10 [ 578.826614][T12341] status_show+0xa0/0x120 [ 578.826640][T12341] ? __pfx_status_show+0x10/0x10 [ 578.826674][T12341] dev_attr_show+0x53/0xe0 [ 578.826706][T12341] ? __pfx_dev_attr_show+0x10/0x10 [ 578.826734][T12341] sysfs_kf_seq_show+0x213/0x3e0 [ 578.826774][T12341] seq_read_iter+0x506/0x12c0 [ 578.826822][T12341] kernfs_fop_read_iter+0x40f/0x5a0 [ 578.826850][T12341] ? rw_verify_area+0xcf/0x680 [ 578.826888][T12341] vfs_read+0x8c8/0xc70 [ 578.826913][T12341] ? __pfx___mutex_lock+0x10/0x10 [ 578.826946][T12341] ? __pfx_vfs_read+0x10/0x10 [ 578.826988][T12341] ksys_read+0x12a/0x240 [ 578.827008][T12341] ? __pfx_ksys_read+0x10/0x10 [ 578.827028][T12341] ? rcu_is_watching+0x12/0xc0 [ 578.827058][T12341] do_syscall_64+0xcd/0x230 [ 578.827093][T12341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.827116][T12341] RIP: 0033:0x7f96a698e969 [ 578.827134][T12341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.827157][T12341] RSP: 002b:00007f96a784a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 578.827178][T12341] RAX: ffffffffffffffda RBX: 00007f96a6bb5fa0 RCX: 00007f96a698e969 [ 578.827194][T12341] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 578.827208][T12341] RBP: 00007f96a6a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 578.827222][T12341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.827236][T12341] R13: 0000000000000000 R14: 00007f96a6bb5fa0 R15: 00007ffc4ee50468 [ 578.827265][T12341] [ 578.827289][T12341] ACPI Error: [ 579.297937][T12296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.371503][T12296] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.422024][T11125] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.429213][T11125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.482271][T11125] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.489443][T11125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.649305][T12341] Could not allocate an object descriptor (20240827/utobject-180) [ 579.701441][T12341] ACPI Error: ffff888087055000 walk still has a scope list (20240827/dswstate-694) [ 580.246378][T12296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.562396][T12336] Bluetooth: hci2: command 0x0c1a tx timeout [ 580.568651][ T5139] Bluetooth: hci4: command 0x0c1a tx timeout [ 580.722038][T12336] Bluetooth: hci1: command 0x0c1a tx timeout [ 580.802433][T12336] Bluetooth: hci6: command 0x041b tx timeout [ 580.808505][T12336] Bluetooth: hci5: command 0x0c1a tx timeout [ 581.062506][T12296] veth0_vlan: entered promiscuous mode [ 581.114157][T12296] veth1_vlan: entered promiscuous mode [ 581.208590][T12296] veth0_macvtap: entered promiscuous mode [ 581.266851][T12296] veth1_macvtap: entered promiscuous mode [ 581.376501][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.445775][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.501433][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.548811][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.585273][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.622763][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.665793][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.714258][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.748085][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.777980][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.805296][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.833586][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.867572][T12296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.919720][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.955205][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.985343][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.029835][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.064300][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.092401][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.116423][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.148171][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.184342][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.217800][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.255073][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.290277][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.325902][T12296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.381479][T12296] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.396108][T12296] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.422294][T12296] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.444812][T12296] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.642316][T12336] Bluetooth: hci4: command 0x0c1a tx timeout [ 582.679245][ T6043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.719634][ T6043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.790098][ T6043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.809497][T12336] Bluetooth: hci1: command 0x0c1a tx timeout [ 582.830886][ T6043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.881030][T12336] Bluetooth: hci5: command 0x0c1a tx timeout [ 582.887120][T12336] Bluetooth: hci6: command 0x041b tx timeout [ 583.838131][T12387] bond0: option all_slaves_active: invalid value () [ 584.428154][T12394] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input24 [ 584.961422][T12336] Bluetooth: hci6: command 0x041b tx timeout [ 587.042217][T12336] Bluetooth: hci6: command 0x041b tx timeout [ 588.232988][ T5139] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 588.244530][ T5139] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 588.253790][ T5139] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 588.262983][ T5139] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 588.271249][ T5139] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 589.000076][ T5139] Bluetooth: hci4: unexpected event 0x35 length: 13 > 6 [ 589.085530][T12421] chnl_net:caif_netlink_parms(): no params data found [ 589.124078][ T5139] Bluetooth: hci6: command 0x041b tx timeout [ 589.982369][T12421] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.989515][T12421] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.045184][T12421] bridge_slave_0: entered allmulticast mode [ 590.072686][T12421] bridge_slave_0: entered promiscuous mode [ 590.125460][T12421] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.166460][T12421] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.192595][T12421] bridge_slave_1: entered allmulticast mode [ 590.220353][T12421] bridge_slave_1: entered promiscuous mode [ 590.321169][ T5139] Bluetooth: hci7: command tx timeout [ 590.408785][T12421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.457346][T12421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.729761][T12421] team0: Port device team_slave_0 added [ 590.762584][T12421] team0: Port device team_slave_1 added [ 590.973450][T12421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.980440][T12421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.128575][T12421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.196764][T12421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.235377][T12421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.351623][T12421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.546035][T12421] hsr_slave_0: entered promiscuous mode [ 591.563866][T12421] hsr_slave_1: entered promiscuous mode [ 591.582215][T12421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 591.589882][T12421] Cannot create hsr debugfs directory [ 592.102320][T12474] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1338'. [ 592.140262][T12475] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1338'. [ 592.199428][T12474] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.282620][T12474] bridge_slave_1 (unregistering): left allmulticast mode [ 592.316650][T12474] bridge_slave_1 (unregistering): left promiscuous mode [ 592.325913][T12474] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.405213][T12336] Bluetooth: hci7: command tx timeout [ 592.465979][T12421] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 592.507730][T12421] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 592.529845][T12421] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 592.558119][T12421] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 592.829412][T12421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.885940][T12421] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.918926][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.926127][ T6033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.982459][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.989706][ T6033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.388231][T12421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.073551][T12421] veth0_vlan: entered promiscuous mode [ 594.117676][T12421] veth1_vlan: entered promiscuous mode [ 594.231922][T12421] veth0_macvtap: entered promiscuous mode [ 594.266754][T12421] veth1_macvtap: entered promiscuous mode [ 594.320451][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.351762][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.378659][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.420817][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.445967][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.486686][T12336] Bluetooth: hci7: command tx timeout [ 594.511269][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.566496][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.636814][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.678419][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.729827][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.768816][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.832951][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.897716][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.941389][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.992370][T12421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.087478][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.130908][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.175930][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.256099][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.298496][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.351390][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.404894][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.470746][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.480608][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.564329][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.625994][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.679030][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.726747][T12421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.770908][T12421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.841872][T12421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.914453][T12421] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.975518][T12421] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.050846][T12421] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.059622][T12421] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.505244][T11125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.558899][T11125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.568672][T12336] Bluetooth: hci7: command tx timeout [ 596.657737][ T5139] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 596.671677][ T5139] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 596.681132][ T5139] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 596.690073][ T5139] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 596.699673][ T5139] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 596.813891][T11125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.871187][T11125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.893270][T12514] chnl_net:caif_netlink_parms(): no params data found [ 598.323020][T12514] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.355050][T12514] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.420521][T12514] bridge_slave_0: entered allmulticast mode [ 598.460831][T12514] bridge_slave_0: entered promiscuous mode [ 598.503773][T12514] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.568917][T12514] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.623599][T12514] bridge_slave_1: entered allmulticast mode [ 598.662258][T12514] bridge_slave_1: entered promiscuous mode [ 598.722982][ T5139] Bluetooth: hci8: command tx timeout [ 599.058975][T12514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.117517][T12514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.724062][T12514] team0: Port device team_slave_0 added [ 599.801426][T12514] team0: Port device team_slave_1 added syzkaller syzkaller login: [ 600.164724][T12514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.193654][T12514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.362992][T12514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.441032][T12514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.448046][T12514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.618379][T12514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 600.802465][ T5139] Bluetooth: hci8: command tx timeout [ 601.037536][T12514] hsr_slave_0: entered promiscuous mode [ 601.090182][T12514] hsr_slave_1: entered promiscuous mode [ 601.141060][T12514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 601.192320][T12514] Cannot create hsr debugfs directory [ 601.322352][T12555] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input25 [ 602.277235][T12560] binder: 12559:12560 ioctl 40046210 0 returned -14 [ 602.357667][T12514] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 602.420439][T12514] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 602.475262][T12514] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 602.551079][T12514] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 602.881382][ T5139] Bluetooth: hci8: command tx timeout [ 603.015655][T12514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.135585][T12514] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.297084][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.304348][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.406745][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.413976][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.961512][ T5139] Bluetooth: hci8: command tx timeout [ 605.078157][T12514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.485448][T12625] Invalid ELF header magic: != ELF [ 607.098724][T12514] veth0_vlan: entered promiscuous mode [ 607.173792][T12514] veth1_vlan: entered promiscuous mode [ 607.453557][T12514] veth0_macvtap: entered promiscuous mode [ 607.512816][T12514] veth1_macvtap: entered promiscuous mode [ 607.665787][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.737531][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.792905][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 syzkaller syzkaller login: [ 607.872019][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.939326][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.013257][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.013288][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.013307][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.013324][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.013340][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.013356][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.013372][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.013390][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.013405][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.013423][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 608.013438][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.031595][T12514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.046269][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.046293][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.046305][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.046321][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.046332][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.046348][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.046361][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.046377][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.046389][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.046405][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.046417][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.046433][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.046445][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.046460][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.046473][T12514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.046497][T12514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.047676][T12514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.123109][T12514] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.123152][T12514] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.123185][T12514] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.123216][T12514] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.861812][T12649] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input26 [ 608.978786][T11125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.978809][T11125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.146358][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.146381][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.149431][T12659] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1371'. [ 613.392150][ T5139] Bluetooth: hci4: unexpected subevent 0x01 length: 4 < 18 [ 613.597815][ T31] audit: type=1800 audit(4294967471.450:54): pid=12693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1378" name="dbroot" dev="configfs" ino=43150 res=0 errno=0 [ 613.970754][T12696] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input27 [ 614.423425][T12701] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 614.502691][T12701] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 614.607784][T12701] memcg:ffff8880292efa01 [ 614.905087][T12701] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 614.993051][T12703] could not allocate digest TFM handle binfmt_misc [ 615.176727][T12701] page_type: f5(slab) [ 615.225109][T12701] raw: 00fff00000000240 ffff88801faad000 ffffea0001680e10 ffffea0001e0de10 [ 615.429861][T12701] raw: ffff888078006000 0000000000150014 00000000f5000000 ffff8880292efa01 [ 615.490986][T12701] head: 00fff00000000240 ffff88801faad000 ffffea0001680e10 ffffea0001e0de10 [ 615.535050][T12701] head: ffff888078006000 0000000000150014 00000000f5000000 ffff8880292efa01 [ 615.603587][T12701] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 615.644661][T12701] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 615.687880][T12701] page dumped because: unmovable page [ 615.714506][T12701] page_owner tracks the page as allocated [ 615.743553][T12701] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5648, tgid 5648 (dhcpcd), ts 84489194725, free_ts 41117243320 [ 615.850330][T12701] post_alloc_hook+0x181/0x1b0 [ 615.868552][T12701] get_page_from_freelist+0x135c/0x3920 [ 615.880472][T12701] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 615.899624][T12701] alloc_pages_mpol+0x1fb/0x550 [ 615.906242][T12701] new_slab+0x244/0x340 [ 615.915252][T12701] ___slab_alloc+0xd9c/0x1940 [ 615.919979][T12701] __slab_alloc.constprop.0+0x56/0xb0 [ 615.940948][T12701] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 615.970107][T12701] sock_alloc_inode+0x25/0x1c0 [ 615.980223][T12701] alloc_inode+0x61/0x240 [ 616.000244][T12701] sock_alloc+0x40/0x280 [ 616.014795][T12701] __sock_create+0xc1/0x8d0 [ 616.026253][T12701] __sys_socket+0x14d/0x260 [ 616.040866][T12701] __x64_sys_socket+0x72/0xb0 [ 616.060793][T12701] do_syscall_64+0xcd/0x230 [ 616.065365][T12701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.079192][T12701] page last free pid 1 tgid 1 stack trace: [ 616.087079][T12701] __free_frozen_pages+0x69d/0xff0 [ 616.097900][T12701] free_contig_range+0x135/0x3f0 [ 616.105957][T12701] destroy_args+0x66f/0x830 [ 616.119588][T12701] debug_vm_pgtable+0x130e/0x2d50 [ 616.139167][T12701] do_one_initcall+0x120/0x6e0 [ 616.156565][T12701] kernel_init_freeable+0x5c2/0x900 [ 616.174377][T12701] kernel_init+0x1c/0x2b0 [ 616.187122][T12701] ret_from_fork+0x45/0x80 [ 616.199631][T12701] ret_from_fork_asm+0x1a/0x30 [ 616.321642][ T5139] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 617.197458][T12747] netlink: 'syz.7.1387': attribute type 3 has an invalid length. [ 617.488989][ T5139] Bluetooth: hci7: unexpected subevent 0x01 length: 123 > 18 [ 619.528786][T12767] netlink: 326 bytes leftover after parsing attributes in process `syz.8.1391'. [ 620.027335][T12775] random: crng reseeded on system resumption [ 621.330265][ T5139] Bluetooth: hci8: Malformed LE Event: 0x1d [ 623.811443][T12802] syz.8.1399: vmalloc error: size 20480, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 623.892699][ C0] vkms_vblank_simulate: vblank timer overrun [ 623.939347][T12802] CPU: 0 UID: 0 PID: 12802 Comm: syz.8.1399 Tainted: G U 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 623.939388][T12802] Tainted: [U]=USER [ 623.939396][T12802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 623.939410][T12802] Call Trace: [ 623.939418][T12802] [ 623.939426][T12802] dump_stack_lvl+0x16c/0x1f0 [ 623.939464][T12802] warn_alloc+0x248/0x3a0 [ 623.939492][T12802] ? __pfx_warn_alloc+0x10/0x10 [ 623.939519][T12802] ? alloc_pages_mpol+0x25a/0x550 [ 623.939549][T12802] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 623.939579][T12802] ? trace_kmalloc+0x2b/0xd0 [ 623.939618][T12802] __vmalloc_node_range_noprof+0x12d2/0x1540 [ 623.939668][T12802] ? kernel_clone+0xfc/0x960 [ 623.939703][T12802] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 623.939747][T12802] ? __memcg_slab_post_alloc_hook+0x4d0/0x940 [ 623.939784][T12802] ? rcu_is_watching+0x12/0xc0 [ 623.939808][T12802] ? kernel_clone+0xfc/0x960 [ 623.939836][T12802] __vmalloc_node_noprof+0x74/0xa0 [ 623.939858][T12802] ? kernel_clone+0xfc/0x960 [ 623.939887][T12802] copy_process+0x2ead/0x91a0 [ 623.939914][T12802] ? find_held_lock+0x2b/0x80 [ 623.939937][T12802] ? schedule+0x2d7/0x3a0 [ 623.939968][T12802] ? futex_wait_queue+0x24/0x220 [ 623.940004][T12802] ? schedule+0xf1/0x3a0 [ 623.940033][T12802] ? futex_wait_queue+0x14c/0x220 [ 623.940068][T12802] ? __pfx_copy_process+0x10/0x10 [ 623.940095][T12802] ? __pfx___futex_wait+0x10/0x10 [ 623.940131][T12802] ? __pfx_futex_wake_mark+0x10/0x10 [ 623.940177][T12802] kernel_clone+0xfc/0x960 [ 623.940208][T12802] ? __pfx_kernel_clone+0x10/0x10 [ 623.940254][T12802] __do_sys_clone+0xce/0x120 [ 623.940284][T12802] ? __pfx___do_sys_clone+0x10/0x10 [ 623.940328][T12802] ? rcu_is_watching+0x12/0xc0 [ 623.940357][T12802] do_syscall_64+0xcd/0x230 [ 623.940393][T12802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.940417][T12802] RIP: 0033:0x7f8d6618e969 [ 623.940435][T12802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 623.940458][T12802] RSP: 002b:00007f8d66f13fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 623.940479][T12802] RAX: ffffffffffffffda RBX: 00007f8d663b5fa0 RCX: 00007f8d6618e969 [ 623.940495][T12802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000040011 [ 623.940509][T12802] RBP: 00007f8d66210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 623.940523][T12802] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 623.940537][T12802] R13: 0000000000000000 R14: 00007f8d663b5fa0 R15: 00007ffecbe92798 [ 623.940566][T12802] [ 624.198398][ C0] vkms_vblank_simulate: vblank timer overrun [ 624.204410][ C0] hrtimer: interrupt took 263827291 ns [ 624.304474][ C0] vkms_vblank_simulate: vblank timer overrun [ 624.593645][T12806] ima: policy update failed [ 624.632391][ T31] audit: type=1802 audit(4294967482.560:55): pid=12806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.7.1400" res=0 errno=0 [ 624.708418][T12818] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1404'. [ 625.319869][T12802] Mem-Info: [ 625.319902][T12802] active_anon:14707 inactive_anon:2 isolated_anon:0 [ 625.319902][T12802] active_file:16773 inactive_file:42319 isolated_file:0 [ 625.319902][T12802] unevictable:772 dirty:723 writeback:0 [ 625.319902][T12802] slab_reclaimable:11529 slab_unreclaimable:111549 [ 625.319902][T12802] mapped:53038 shmem:3435 pagetables:1143 [ 625.319902][T12802] sec_pagetables:0 bounce:0 [ 625.319902][T12802] kernel_misc_reclaimable:0 [ 625.319902][T12802] free:1247341 free_pcp:2698 free_cma:0 [ 625.319966][T12802] Node 0 active_anon:58828kB inactive_anon:8kB active_file:67092kB inactive_file:169144kB unevictable:1552kB isolated(anon):0kB isolated(file):0kB mapped:212152kB dirty:2892kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12912kB pagetables:4572kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 625.320029][T12802] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:30068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 625.320094][T12802] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 625.320158][T12802] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 625.327084][T12802] Node 0 DMA32 free:1076516kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:58776kB inactive_anon:8kB active_file:67092kB inactive_file:167316kB unevictable:1552kB writepending:2892kB present:3129332kB managed:2544172kB mlocked:28kB bounce:0kB free_pcp:688kB local_pcp:688kB free_cma:0kB [ 625.327153][T12802] lowmem_reserve[]: 0 0 1 1 1 [ 625.327194][T12802] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1828kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 625.327256][T12802] lowmem_reserve[]: 0 0 0 0 0 [ 625.327297][T12802] Node 1 Normal free:3897212kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:9976kB local_pcp:9976kB free_cma:0kB [ 625.327361][T12802] lowmem_reserve[]: 0 0 0 0 0 [ 625.327402][T12802] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 625.327542][T12802] Node 0 DMA32: 391*4kB (UME) 809*8kB (ME) 1068*16kB (UM) 1344*32kB (UME) 1296*64kB (UME) 722*128kB (UME) 284*256kB (UME) 145*512kB (M) 58*1024kB (UME) 24*2048kB (UM) 141*4096kB (M) = 1076516kB [ 625.327740][T12802] Node 0 Normal: 3*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 625.327874][T12802] Node 1 Normal: 235*4kB (UME) 70*8kB (UME) 36*16kB (UM) 211*32kB (UME) 104*64kB (UME) 44*128kB (UME) 25*256kB (UM) 10*512kB (UME) 4*1024kB (UM) 3*2048kB (UE) 941*4096kB (M) = 3897212kB [ 625.334300][T12802] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 625.334323][T12802] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 625.334342][T12802] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 625.334361][T12802] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 625.334380][T12802] 62523 total pagecache pages [ 625.334389][T12802] 0 pages in swap cache [ 625.334396][T12802] Free swap = 124996kB [ 625.334405][T12802] Total swap = 124996kB [ 625.334415][T12802] 2097051 pages RAM [ 625.334423][T12802] 0 pages HighMem/MovableOnly [ 625.334431][T12802] 428902 pages reserved [ 625.334438][T12802] 0 pages cma reserved [ 625.535737][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.612571][T12829] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input28 [ 625.770608][ C0] vkms_vblank_simulate: vblank timer overrun [ 627.500550][ C0] vkms_vblank_simulate: vblank timer overrun [ 630.711699][T12885] can: request_module (can-proto-3) failed. [ 632.934175][T12908] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input29 [ 635.138881][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 635.145296][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.282977][T12945] FAULT_INJECTION: forcing a failure. [ 635.282977][T12945] name failslab, interval 1, probability 0, space 0, times 0 [ 635.379257][T12945] CPU: 0 UID: 0 PID: 12945 Comm: syz.4.1432 Tainted: G U 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 635.379308][T12945] Tainted: [U]=USER [ 635.379315][T12945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 635.379329][T12945] Call Trace: [ 635.379336][T12945] [ 635.379345][T12945] dump_stack_lvl+0x16c/0x1f0 [ 635.379384][T12945] should_fail_ex+0x512/0x640 [ 635.379417][T12945] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 635.379443][T12945] should_failslab+0xc2/0x120 [ 635.379472][T12945] __kmalloc_cache_noprof+0x6a/0x3e0 [ 635.379493][T12945] ? trace_kmem_cache_alloc+0x28/0xc0 [ 635.379526][T12945] ? kmem_cache_alloc_node_noprof+0x225/0x3b0 [ 635.379552][T12945] ? blk_alloc_queue_stats+0x3f/0x110 [ 635.379580][T12945] blk_alloc_queue_stats+0x3f/0x110 [ 635.379603][T12945] blk_alloc_queue+0xda/0x760 [ 635.379634][T12945] blk_mq_alloc_queue+0x179/0x290 [ 635.379668][T12945] ? __pfx_blk_mq_alloc_queue+0x10/0x10 [ 635.379701][T12945] ? find_held_lock+0x2b/0x80 [ 635.379741][T12945] ? idr_alloc+0xdd/0x130 [ 635.379770][T12945] ? __pfx_idr_alloc+0x10/0x10 [ 635.379805][T12945] __blk_mq_alloc_disk+0x29/0x120 [ 635.379840][T12945] nbd_dev_add+0x49d/0xbb0 [ 635.379866][T12945] ? __pfx_nbd_dev_add+0x10/0x10 [ 635.379888][T12945] ? nbd_genl_connect+0x98e/0x1c20 [ 635.379938][T12945] ? bpf_lsm_capable+0x9/0x10 [ 635.379963][T12945] ? __radix_tree_lookup+0x21f/0x2c0 [ 635.379999][T12945] nbd_genl_connect+0x8b0/0x1c20 [ 635.380030][T12945] ? __pfx_nbd_genl_connect+0x10/0x10 [ 635.380057][T12945] ? __nla_parse+0x40/0x60 [ 635.380083][T12945] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 635.380120][T12945] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 635.380162][T12945] genl_family_rcv_msg_doit+0x206/0x2f0 [ 635.380199][T12945] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 635.380235][T12945] ? genl_get_cmd+0x194/0x580 [ 635.380274][T12945] ? __local_bh_enable_ip+0xa4/0x120 [ 635.380302][T12945] ? __dev_queue_xmit+0x896/0x43e0 [ 635.380322][T12945] ? __radix_tree_lookup+0x21f/0x2c0 [ 635.380357][T12945] genl_rcv_msg+0x55c/0x800 [ 635.380394][T12945] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.380426][T12945] ? __pfx___dev_queue_xmit+0x10/0x10 [ 635.380463][T12945] ? __pfx_nbd_genl_connect+0x10/0x10 [ 635.380491][T12945] ? __lock_acquire+0xaa4/0x1ba0 [ 635.380528][T12945] netlink_rcv_skb+0x16a/0x440 [ 635.380557][T12945] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.380592][T12945] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 635.380636][T12945] ? __pfx_down_read+0x10/0x10 [ 635.380673][T12945] ? netlink_deliver_tap+0x1ae/0xd30 [ 635.380705][T12945] genl_rcv+0x28/0x40 [ 635.380734][T12945] netlink_unicast+0x53a/0x7f0 [ 635.380767][T12945] ? __pfx_netlink_unicast+0x10/0x10 [ 635.380794][T12945] ? __lock_acquire+0xaa4/0x1ba0 [ 635.380831][T12945] netlink_sendmsg+0x8d1/0xdd0 [ 635.380865][T12945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.380911][T12945] ____sys_sendmsg+0xa95/0xc70 [ 635.380947][T12945] ? copy_msghdr_from_user+0x10a/0x160 [ 635.380973][T12945] ? __pfx_____sys_sendmsg+0x10/0x10 [ 635.381014][T12945] ? try_to_wake_up+0xa2f/0x1680 [ 635.381041][T12945] ___sys_sendmsg+0x134/0x1d0 [ 635.381069][T12945] ? __pfx____sys_sendmsg+0x10/0x10 [ 635.381132][T12945] __sys_sendmsg+0x16d/0x220 [ 635.381159][T12945] ? __pfx___sys_sendmsg+0x10/0x10 [ 635.381184][T12945] ? __x64_sys_futex+0x1e0/0x4c0 [ 635.381217][T12945] ? rcu_is_watching+0x12/0xc0 [ 635.381248][T12945] do_syscall_64+0xcd/0x230 [ 635.381285][T12945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.381307][T12945] RIP: 0033:0x7f96a698e969 [ 635.381326][T12945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 635.381349][T12945] RSP: 002b:00007f96a7808038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 635.381370][T12945] RAX: ffffffffffffffda RBX: 00007f96a6bb6160 RCX: 00007f96a698e969 [ 635.381385][T12945] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000006 [ 635.381399][T12945] RBP: 00007f96a6a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 635.381413][T12945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.381427][T12945] R13: 0000000000000000 R14: 00007f96a6bb6160 R15: 00007ffc4ee50468 [ 635.381457][T12945] [ 635.796509][ C0] vkms_vblank_simulate: vblank timer overrun [ 636.752843][T12945] nbd: failed to add new device [ 637.117629][T12967] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input30 [ 640.218655][T12996] can: request_module (can-proto-3) failed. [ 640.821509][T12336] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 640.835425][T12336] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 640.843673][T12336] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 640.858832][T12336] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 640.867597][T12336] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 642.492397][T13015] random: crng reseeded on system resumption [ 642.795463][T12999] chnl_net:caif_netlink_parms(): no params data found [ 642.960793][ T5139] Bluetooth: hci9: command tx timeout                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                  syzkaller syzkaller login: [ 660.743579][T11059] svc: failed to register nfsdv3 RPC service (errno 512). [ 660.777831][T11059] svc: failed to register nfsaclv3 RPC service (errno 512). [ 664.655834][T12336] Bluetooth: hci8: unexpected event 0x3e length: 728 > 260 [ 664.655866][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 664.671613][T12336] Bluetooth: hci8: unexpected event 0x3e length: 728 > 260 [ 664.671649][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 664.687186][T12336] Bluetooth: hci8: unexpected event 0x3e length: 728 > 260 [ 664.687213][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 664.705364][T12336] Bluetooth: hci8: unexpected event 0x3e length: 728 > 260 [ 664.705392][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 664.751912][T12336] Bluetooth: hci8: unexpected event 0x3e length: 728 > 260 [ 664.751945][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 664.767155][T12336] Bluetooth: hci8: unexpected event 0x3e length: 728 > 260 [ 664.767184][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 664.783856][T12336] Bluetooth: hci8: unexpected event 0x3e length: 728 > 260 [ 664.783886][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 664.802952][T12336] Bluetooth: hci8: unexpected event 0x3e length: 728 > 260 [ 664.802981][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 664.820819][T12336] Bluetooth: hci8: unexpected event 0x3e length: 728 > 260 [ 664.820847][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 664.835929][T12336] Bluetooth: hci8: unexpected event 0x3e length: 728 > 260 [ 664.835957][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 664.858789][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 664.866540][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 664.874795][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 664.883064][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 664.890960][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 664.899835][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 664.916945][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 664.924731][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 664.932193][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 664.939552][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 664.947425][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 664.955656][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 664.963456][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 664.970965][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 664.978842][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 664.986745][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 664.994782][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 665.010814][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 665.018241][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 665.025701][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 665.043631][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 665.051231][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 [ 665.058666][T12336] Bluetooth: hci8: unexpected subevent 0x0c length: 727 > 5 syzkaller syzkaller login: [ 668.342410][T13424] tipc: Started in network mode [ 668.347393][T13424] tipc: Node identity ee00, cluster identity 4711 [ 668.489190][T13424] tipc: Node number set to 60928 [ 669.003861][T13436] FAULT_INJECTION: forcing a failure. [ 669.003861][T13436] name fail_futex, interval 1, probability 0, space 0, times 1 [ 669.141021][T13436] CPU: 0 UID: 0 PID: 13436 Comm: syz.9.1499 Tainted: G U 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 669.141062][T13436] Tainted: [U]=USER [ 669.141070][T13436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 669.141085][T13436] Call Trace: [ 669.141092][T13436] [ 669.141101][T13436] dump_stack_lvl+0x16c/0x1f0 [ 669.141143][T13436] should_fail_ex+0x512/0x640 [ 669.141181][T13436] get_futex_key+0x49e/0x1000 [ 669.141209][T13436] ? __pfx_get_futex_key+0x10/0x10 [ 669.141232][T13436] ? __might_fault+0xe3/0x190 [ 669.141257][T13436] ? __might_fault+0x13b/0x190 [ 669.141288][T13436] futex_wake+0xe7/0x4e0 [ 669.141319][T13436] ? __pfx_futex_wake+0x10/0x10 [ 669.141361][T13436] do_futex+0x1e3/0x350 [ 669.141385][T13436] ? __pfx_do_futex+0x10/0x10 [ 669.141417][T13436] __x64_sys_futex+0x1e0/0x4c0 [ 669.141442][T13436] ? restore_signal_shadow_stack+0x63/0x420 [ 669.141473][T13436] ? __pfx___x64_sys_futex+0x10/0x10 [ 669.141497][T13436] ? __do_sys_rt_sigreturn+0x16b/0x230 [ 669.141529][T13436] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 669.141583][T13436] do_syscall_64+0xcd/0x230 [ 669.141619][T13436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.141643][T13436] RIP: 0033:0x7f92f138e969 [ 669.141661][T13436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.141684][T13436] RSP: 002b:00007f92f22a00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 669.141705][T13436] RAX: ffffffffffffffda RBX: 00007f92f15b5fa8 RCX: 00007f92f138e969 [ 669.141720][T13436] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f92f15b5fac [ 669.141734][T13436] RBP: 00007f92f15b5fa0 R08: 00007f92f22a1000 R09: 0000000000000000 [ 669.141748][T13436] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f92f15b5fac [ 669.141762][T13436] R13: 0000000000000000 R14: 00007ffedb45ccd0 R15: 00007ffedb45cdb8 [ 669.141789][T13436] [ 670.046086][T13447] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input31 [ 670.494491][T13451] size and base must be multiples of 4 kiB [ 670.500349][T13451] CPU: 0 UID: 0 PID: 13451 Comm: syz.8.1502 Tainted: G U 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 670.500386][T13451] Tainted: [U]=USER [ 670.500393][T13451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 670.500408][T13451] Call Trace: [ 670.500415][T13451] [ 670.500424][T13451] dump_stack_lvl+0x16c/0x1f0 [ 670.500466][T13451] mtrr_del+0xd1/0x110 [ 670.500501][T13451] mtrr_ioctl+0x922/0xcf0 [ 670.500536][T13451] ? __pfx_mtrr_ioctl+0x10/0x10 [ 670.500576][T13451] ? find_held_lock+0x2b/0x80 [ 670.500610][T13451] ? __fget_files+0x20e/0x3c0 [ 670.500648][T13451] ? __pfx_mtrr_ioctl+0x10/0x10 [ 670.500683][T13451] proc_reg_unlocked_ioctl+0x226/0x320 [ 670.500706][T13451] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 670.500733][T13451] __x64_sys_ioctl+0x190/0x200 [ 670.500766][T13451] do_syscall_64+0xcd/0x230 [ 670.500802][T13451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.500826][T13451] RIP: 0033:0x7f8d6618e969 [ 670.500845][T13451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.500868][T13451] RSP: 002b:00007f8d66f14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 670.500889][T13451] RAX: ffffffffffffffda RBX: 00007f8d663b5fa0 RCX: 00007f8d6618e969 [ 670.500904][T13451] RDX: 0000000000000009 RSI: 00000000400c4d04 RDI: 0000000000000009 [ 670.500918][T13451] RBP: 00007f8d66210ab1 R08: 0000000000000000 R09: 0000000000000000 [ 670.500932][T13451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.500945][T13451] R13: 0000000000000000 R14: 00007f8d663b5fa0 R15: 00007ffecbe92798 [ 670.500974][T13451] [ 672.836042][T13487] bond0: no command found in slaves file - use +ifname or -ifname [ 673.707515][T13495] FAULT_INJECTION: forcing a failure. [ 673.707515][T13495] name failslab, interval 1, probability 0, space 0, times 0 [ 673.899509][T13495] CPU: 0 UID: 0 PID: 13495 Comm: syz.2.1510 Tainted: G U 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 673.899551][T13495] Tainted: [U]=USER [ 673.899559][T13495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 673.899572][T13495] Call Trace: [ 673.899580][T13495] [ 673.899588][T13495] dump_stack_lvl+0x16c/0x1f0 [ 673.899625][T13495] should_fail_ex+0x512/0x640 [ 673.899663][T13495] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 673.899690][T13495] should_failslab+0xc2/0x120 [ 673.899718][T13495] __kmalloc_cache_noprof+0x6a/0x3e0 [ 673.899739][T13495] ? vhost_net_open+0x28/0x8a0 [ 673.899765][T13495] ? vhost_net_open+0x6e/0x8a0 [ 673.899793][T13495] ? __pfx_vhost_net_open+0x10/0x10 [ 673.899817][T13495] vhost_net_open+0x6e/0x8a0 [ 673.899841][T13495] ? __pfx_vhost_net_open+0x10/0x10 [ 673.899870][T13495] misc_open+0x35a/0x420 [ 673.899914][T13495] ? __pfx_misc_open+0x10/0x10 [ 673.899949][T13495] chrdev_open+0x231/0x6a0 [ 673.899976][T13495] ? __pfx_apparmor_file_open+0x10/0x10 [ 673.900010][T13495] ? __pfx_chrdev_open+0x10/0x10 [ 673.900038][T13495] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 673.900079][T13495] do_dentry_open+0x741/0x1c10 [ 673.900111][T13495] ? __pfx_chrdev_open+0x10/0x10 [ 673.900141][T13495] vfs_open+0x82/0x3f0 [ 673.900174][T13495] path_openat+0x1e5e/0x2d40 [ 673.900207][T13495] ? __pfx_path_openat+0x10/0x10 [ 673.900237][T13495] do_filp_open+0x20b/0x470 [ 673.900259][T13495] ? __pfx_do_filp_open+0x10/0x10 [ 673.900302][T13495] ? alloc_fd+0x471/0x7d0 [ 673.900345][T13495] do_sys_openat2+0x11b/0x1d0 [ 673.900376][T13495] ? __pfx_do_sys_openat2+0x10/0x10 [ 673.900418][T13495] __x64_sys_openat+0x174/0x210 [ 673.900450][T13495] ? __pfx___x64_sys_openat+0x10/0x10 [ 673.900483][T13495] ? rcu_is_watching+0x12/0xc0 [ 673.900518][T13495] do_syscall_64+0xcd/0x230 [ 673.900554][T13495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.900577][T13495] RIP: 0033:0x7f30aa38e969 [ 673.900595][T13495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.900618][T13495] RSP: 002b:00007f30ab114038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 673.900639][T13495] RAX: ffffffffffffffda RBX: 00007f30aa5b5fa0 RCX: 00007f30aa38e969 [ 673.900654][T13495] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 673.900669][T13495] RBP: 00007f30aa410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 673.900683][T13495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.900696][T13495] R13: 0000000000000000 R14: 00007f30aa5b5fa0 R15: 00007ffd5807d5a8 [ 673.900725][T13495] [ 675.114525][T13511] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1512'. [ 677.361216][ T32] INFO: task syz.5.1210:11718 blocked for more than 144 seconds. [ 677.369570][ T32] Tainted: G U 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 677.455994][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 677.528706][ T32] task:syz.5.1210 state:D stack:27704 pid:11718 tgid:11717 ppid:11175 task_flags:0x400140 flags:0x00000004 [ 677.620161][ T32] Call Trace: [ 677.650529][ T32] [ 677.683072][ T32] __schedule+0x116f/0x5de0 [ 677.687907][ T32] ? __pfx_stack_trace_save+0x10/0x10 [ 677.780733][ T32] ? stack_depot_save_flags+0x28/0xa50 [ 677.786279][ T32] ? __lock_acquire+0x5ca/0x1ba0 [ 677.882322][ T32] ? __pfx___schedule+0x10/0x10 [ 677.921770][ T32] ? find_held_lock+0x2b/0x80 [ 677.926542][ T32] ? schedule+0x2d7/0x3a0 [ 677.975334][ T32] schedule+0xe7/0x3a0 [ 677.979479][ T32] schedule_preempt_disabled+0x13/0x30 [ 678.052958][ T32] __mutex_lock+0x6c7/0xb90 [ 678.057556][ T32] ? nfsd_nl_threads_set_doit+0x698/0xbf0 [ 678.127429][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 678.167625][ T32] ? net_generic+0xea/0x2a0 [ 678.199949][ T32] ? nfsd_nl_threads_set_doit+0x698/0xbf0 [ 678.298150][ T32] nfsd_nl_threads_set_doit+0x698/0xbf0 [ 678.411802][ T32] genl_family_rcv_msg_doit+0x206/0x2f0 [ 678.417436][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 678.500864][ T32] ? rcu_is_watching+0x12/0xc0 [ 678.505701][ T32] ? bpf_lsm_capable+0x9/0x10 [ 678.561051][ T32] ? security_capable+0x7e/0x260 [ 678.566066][ T32] genl_rcv_msg+0x55c/0x800 [ 678.626453][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 678.658278][ T32] ? __pfx___dev_queue_xmit+0x10/0x10 [ 678.690791][ T32] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 678.696931][ T32] ? __lock_acquire+0xaa4/0x1ba0 [ 678.750044][ T32] netlink_rcv_skb+0x16a/0x440 [ 678.760382][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 678.777861][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 678.796439][ T32] ? __pfx_down_read+0x10/0x10 [ 678.840917][ T32] ? netlink_deliver_tap+0x1ae/0xd30 [ 678.846277][ T32] genl_rcv+0x28/0x40 [ 678.850283][ T32] netlink_unicast+0x53a/0x7f0 [ 678.876638][ T32] ? __pfx_netlink_unicast+0x10/0x10 [ 678.900386][ T32] ? __lock_acquire+0xaa4/0x1ba0 [ 678.916624][ T32] netlink_sendmsg+0x8d1/0xdd0 [ 678.936466][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 678.961651][ T32] ____sys_sendmsg+0xa95/0xc70 [ 678.966497][ T32] ? copy_msghdr_from_user+0x10a/0x160 [ 678.990815][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 678.996181][ T32] ___sys_sendmsg+0x134/0x1d0 [ 679.027505][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 679.041010][ T32] __sys_sendmsg+0x16d/0x220 [ 679.045664][ T32] ? __pfx___sys_sendmsg+0x10/0x10 [ 679.080691][ T32] ? __x64_sys_futex+0x1e0/0x4c0 [ 679.085703][ T32] ? rcu_is_watching+0x12/0xc0 [ 679.090492][ T32] do_syscall_64+0xcd/0x230 [ 679.131231][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.137187][ T32] RIP: 0033:0x7f825878e969 [ 679.156473][ T32] RSP: 002b:00007f825959c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 679.180493][ T32] RAX: ffffffffffffffda RBX: 00007f82589b5fa0 RCX: 00007f825878e969 [ 679.209960][ T32] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003 [ 679.237734][ T32] RBP: 00007f8258810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 679.265182][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.291843][ T32] R13: 0000000000000000 R14: 00007f82589b5fa0 R15: 00007ffcf9187e78 [ 679.299900][ T32] [ 679.490833][ T32] [ 679.490833][ T32] Showing all locks held in the system: [ 679.498601][ T32] 1 lock held by khungtaskd/32: [ 679.636218][ T32] #0: ffffffff8e3bf440 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 679.710715][ T32] 2 locks held by syz-executor/5835: [ 679.716041][ T32] #0: ffff8880252060e0 (&type->s_umount_key#50){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 679.851002][ T32] #1: ffffffff8e7cc168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 679.910862][ T32] 2 locks held by syz.0.1119/11059: [ 679.916105][ T32] #0: ffffffff901c8e50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 680.040701][ T32] #1: ffffffff8e7cc168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x698/0xbf0 [ 680.136720][ T32] 2 locks held by kworker/0:4/11262: [ 680.170927][ T32] #0: ffff88801b480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 680.250862][ T32] #1: ffffc9000434fd18 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 680.330791][ T32] 2 locks held by syz.5.1210/11718: [ 680.368847][ T32] #0: ffffffff901c8e50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 680.438483][ T32] #1: ffffffff8e7cc168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x698/0xbf0 [ 680.496379][ T32] 2 locks held by syz.6.1269/12107: [ 680.520721][ T32] #0: ffffffff901c8e50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 680.529174][ T32] #1: ffffffff8e7cc168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x698/0xbf0 [ 680.580959][ T32] 2 locks held by syz.3.1296/12239: [ 680.586212][ T32] #0: ffffffff901c8e50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 680.619014][ T32] #1: ffffffff8e7cc168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x698/0xbf0 [ 680.640726][ T32] 2 locks held by syz.7.1400/12807: [ 680.646432][ T32] #0: ffffffff901c8e50 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 680.700813][ T32] #1: ffffffff8e7cc168 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x698/0xbf0 [ 680.726297][ T32] 4 locks held by kworker/u8:54/13235: [ 680.745976][ T32] #0: ffff88801c2f6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 680.781024][ T32] #1: ffffc9000bc0fd18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 680.816137][ T32] #2: ffffffff90110f10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xc9/0xb30 [ 680.848048][ T32] #3: ffffffff8e3ca978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 680.890887][ T32] 3 locks held by kworker/u8:55/13236: [ 680.896429][ T32] 3 locks held by syz.2.1486/13356: [ 680.920867][ T32] #0: ffff88808c5a0d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 680.930534][ T32] #1: ffff88808c5a0078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 680.996663][ T32] #2: ffffffff90394808 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 681.036301][ T32] 2 locks held by getty/13414: [ 681.050851][ T32] #0: ffff88803199d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 681.080579][ T32] #1: ffffc90003ef92f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 681.119541][ T32] 1 lock held by syz.9.1511/13501: [ 681.145867][ T32] #0: ffffffff8e3ca978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 681.171302][ T32] 4 locks held by syz.8.1516/13538: [ 681.210214][ T32] #0: ffff8880492b4d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 681.230701][ T32] #1: ffff8880492b4078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 681.240434][ T32] #2: ffffffff90394808 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 681.280058][ T32] #3: ffff88807bf40338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 681.316042][ T32] 1 lock held by cmp/13567: [ 681.324169][ T32] [ 681.326532][ T32] ============================================= [ 681.326532][ T32] [ 681.461399][ T32] NMI backtrace for cpu 0 [ 681.461469][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G U 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 681.461504][ T32] Tainted: [U]=USER [ 681.461511][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 681.461524][ T32] Call Trace: [ 681.461531][ T32] [ 681.461540][ T32] dump_stack_lvl+0x116/0x1f0 [ 681.461577][ T32] nmi_cpu_backtrace+0x27b/0x390 [ 681.461601][ T32] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 681.461632][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 681.461669][ T32] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 681.461697][ T32] watchdog+0xf70/0x12c0 [ 681.461732][ T32] ? __pfx_watchdog+0x10/0x10 [ 681.461759][ T32] ? lockdep_hardirqs_on+0x7c/0x110 [ 681.461792][ T32] ? __kthread_parkme+0x19e/0x250 [ 681.461821][ T32] ? __pfx_watchdog+0x10/0x10 [ 681.461850][ T32] kthread+0x3c2/0x780 [ 681.461886][ T32] ? __pfx_kthread+0x10/0x10 [ 681.461915][ T32] ? __pfx_kthread+0x10/0x10 [ 681.461946][ T32] ? __pfx_kthread+0x10/0x10 [ 681.461976][ T32] ? __pfx_kthread+0x10/0x10 [ 681.462007][ T32] ? rcu_is_watching+0x12/0xc0 [ 681.462028][ T32] ? __pfx_kthread+0x10/0x10 [ 681.462060][ T32] ret_from_fork+0x45/0x80 [ 681.462079][ T32] ? __pfx_kthread+0x10/0x10 [ 681.462111][ T32] ret_from_fork_asm+0x1a/0x30 [ 681.462156][ T32] [ 681.619755][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 681.626646][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G U 6.15.0-rc5-syzkaller-00300-g3ce9925823c7 #0 PREEMPT(full) [ 681.640043][ T32] Tainted: [U]=USER [ 681.643861][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 681.653939][ T32] Call Trace: [ 681.657221][ T32] [ 681.660155][ T32] dump_stack_lvl+0x3d/0x1f0 [ 681.664774][ T32] panic+0x71c/0x800 [ 681.668772][ T32] ? __pfx_panic+0x10/0x10 [ 681.673209][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 681.678609][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 681.684611][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 681.690005][ T32] ? watchdog+0xdda/0x12c0 [ 681.694438][ T32] ? watchdog+0xdcd/0x12c0 [ 681.698875][ T32] watchdog+0xdeb/0x12c0 [ 681.703138][ T32] ? __pfx_watchdog+0x10/0x10 [ 681.707828][ T32] ? lockdep_hardirqs_on+0x7c/0x110 [ 681.713043][ T32] ? __kthread_parkme+0x19e/0x250 [ 681.718084][ T32] ? __pfx_watchdog+0x10/0x10 [ 681.722777][ T32] kthread+0x3c2/0x780 [ 681.726868][ T32] ? __pfx_kthread+0x10/0x10 [ 681.731476][ T32] ? __pfx_kthread+0x10/0x10 [ 681.736102][ T32] ? __pfx_kthread+0x10/0x10 [ 681.740715][ T32] ? __pfx_kthread+0x10/0x10 [ 681.745322][ T32] ? rcu_is_watching+0x12/0xc0 [ 681.750111][ T32] ? __pfx_kthread+0x10/0x10 [ 681.754719][ T32] ret_from_fork+0x45/0x80 [ 681.759146][ T32] ? __pfx_kthread+0x10/0x10 [ 681.763763][ T32] ret_from_fork_asm+0x1a/0x30 [ 681.768562][ T32] [ 681.771645][ T32] Kernel Offset: disabled [ 681.775995][ T32] Rebooting in 86400 seconds..