last executing test programs: 9.129951416s ago: executing program 0 (id=76): mq_open$auto(0x0, 0x10, 0x80, &(0x7f0000000040)={0xe, 0x1, 0x2, 0xfffffffffffffffa}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf25040000000c000180080001000100000004000a8008000800", @ANYRES32=r2, @ANYBLOB="0c000300090000000000000014000a800800020005000000080001"], 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x14) 8.580185244s ago: executing program 0 (id=78): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r1 = socket(0x2b, 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) (async) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20008800}, 0x1) write$auto(0x3, 0x0, 0xfffffdef) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) connect$auto(0x3, 0x0, 0x55) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_wireguard(0x0, r2) (async) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) (async) sendmsg$auto_WG_CMD_GET_DEVICE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r3, 0x703, 0x70bd27, 0x25dfd9fc}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4) (async) r5 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r5, 0x0, 0x8fb5) (async) ioctl$auto_SW_SYNC_GET_DEADLINE(0xffffffffffffffff, 0xc0105702, &(0x7f0000000000)={0x8000000000000001, 0x0, r0}) (async) dup2$auto(0x0, 0x3) (async) ioctl$auto(0x3, 0x541b, 0x10000000000402) 6.919124939s ago: executing program 0 (id=81): r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) shmctl$auto(0xa0000000, 0x6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_setup$auto(0x7ffe, &(0x7f0000000000)) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) execve$auto(0x0, 0x0, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) ioctl$auto_PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x9, 0xd, 0x7, 0x7, 0x2, 0x7, 0x4, 0x8001, 0x8, 0x9, 0x5, 0x21}) sendfile$auto(r2, r2, 0x0, 0x10000800000003) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 6.34068795s ago: executing program 1 (id=82): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) timerfd_create$auto(0x7, 0x0) socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c804}, 0x51) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0xe0742, 0x0) unshare$auto(0x40000080) mmap$auto(0x80000001, 0x580f, 0x112f4a02, 0x8000000008011, 0x3, 0x1) madvise$auto(0x0, 0x2003f0, 0x15) r0 = fcntl$auto(0xff80000000000000, 0x409, 0x3f) fallocate$auto(r0, 0x1, 0xd, 0x5) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xe0002, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x40, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x4000080) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0x1, 0x44b, 0xa, 0x5, 0x1007181, 0x8a0d, 0x80000004, 0x7, 0x9, 0x1, 0x26, 0x4, 0x200004000001, 0xfffffffffffffff5, 0xfffffffffffffffa, 0x0, 0x80000005, 0x0, 0x0, 0x862, 0xe, 0x22000, 0x200, 0x0, 0x9, 0x2000, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4, 0x200000000, 0x0, 0x829d, 0x7fffffffffffffe, 0x0, 0x2b1, 0x0, 0x0, 0x400000000000000, 0x7953, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0xffffffffd, 0x9, 0x3, 0x0, 0xfffffffffffffffd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x8635, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc]}, 0xb, 0xc) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffff7effffd0d, &(0x7f00000001c0)) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) 6.056773133s ago: executing program 2 (id=83): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x307c00, 0x0) openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, 0x0, 0x80, 0x0) unshare$auto(0x40000080) socket(0xa, 0x3, 0x7) getitimer$auto_ITIMER_VIRTUAL(0x1, 0x0) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) io_uring_register$auto(0x2, 0x19, &(0x7f0000000080), 0xd) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/stat/rt_cache\x00', 0x20000, 0x0) iopl$auto(0x3) clone$auto(0x0, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) 5.416808707s ago: executing program 1 (id=84): socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video53\x00', 0x1c1400, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0) socket(0x21, 0x3, 0x9) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socket(0x11, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18", @ANYRESDEC, @ANYRES32, @ANYRESOCT, @ANYBLOB="eba499f0b6d5133876e009c9fac21f9c38032675478c68a2407b5b45a75e35c2a3cfedfa4521c2d8d190730e1e57fe7c9505e942610827b51686a8f03d1ddb408288a7ea7e69555c0ac550b8c8004faeb63b610f7ff9260c34194a826bf58ba8e4b32d89165b24d5cb8d771851bddbb0d6333462c68f5bab07c33d483fefd88d2d1dbe4535610e", @ANYRES8], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3739aae3, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x1, 0x15f4da0a, 0x1, 0xffffffffd09d8d67, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xa50083, 0x0) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xffffffffffffffff, 0x8001) io_uring_setup$auto(0x6, 0x0) ioctl$auto_RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x8000, 0x0) 5.11939358s ago: executing program 0 (id=85): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x663, 0x5153, 0x2000007, 0xd1, 0xffffffffffffffff, 0xffff) r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r0, 0x0, 0x1) write$auto(0x3, 0x0, 0x1fffffdef) unshare$auto(0x40000080) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy5/netdev:wlan0/stations/08:02:11:00:00:01/vht_capa\x00', 0x40080, 0x0) r1 = socket(0x18, 0x3, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) bind$auto(r1, &(0x7f0000000180)=@can, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@hci={0x1f, 0x2}, 0x55) r2 = socket(0x25, 0x1, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x40800) read$auto(0x3, 0x0, 0xf34) read$auto(0x3, 0x0, 0x80) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101440, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x7, 0x7ffd) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/sctp/assocs\x00', 0x80, 0x0) pread64$auto(r3, 0x0, 0x7, 0xffff) mmap$auto(0x0, 0x92b, 0x8001, 0xffffffffffffffff, 0xffffffffffffffff, 0xc000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20008800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5.050335462s ago: executing program 2 (id=86): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr0\x00', 0x60540, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) (async, rerun: 32) socket(0x22, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket(0x11, 0x2, 0x73) (async, rerun: 64) pipe2$auto(0x0, 0x0) (async) io_uring_setup$auto(0x7e1b, 0x0) (async) socket(0x2, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptya7\x00', 0x101e81, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyde\x00', 0xa0102, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x3, 0x80000541b, 0x38) (async) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$auto_SG_SET_RESERVED_SIZE2(0xffffffffffffffff, 0x2275, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_ENABLE(0xffffffffffffffff, 0x40095505, 0x0) (async, rerun: 64) lstat$auto(&(0x7f0000000300)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) (async, rerun: 64) ioctl$auto(0x3, 0x5420, 0x38) (async) read$auto(r0, 0x0, 0x73) (async) ioctl$auto(0x3, 0x402c542c, 0x38) (async) sendmsg$auto_MACSEC_CMD_ADD_RXSC(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x11c4}, 0x1, 0x0, 0x0, 0x40800}, 0x4000800) (async) madvise$auto(0xffffffffffffff44, 0x1, 0x15) (async, rerun: 64) mknod$auto(&(0x7f0000001040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0xcd, 0x8001) (rerun: 64) 4.19124851s ago: executing program 1 (id=89): ioctl$auto_X86_IOC_WRMSR_REGS(0xffffffffffffffff, 0xc02063a1, &(0x7f0000000100)=[0x7acb, 0x6, 0x9, 0xf7e6, 0x4, 0x7f, 0x3, 0x10000001]) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) (async) openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001e00)='/proc/thread-self/uid_map\x00', 0x20000, 0x0) (async) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000000c0), r0) (async) shmctl$auto_SHM_INFO(0xd, 0xe, &(0x7f0000000300)={{0x7, 0xee01, 0xee00, 0x100, 0x401, 0x8, 0x1}, 0x1, 0xde, 0x12, 0x8, @raw, @raw=0x2, 0x23, 0x0, &(0x7f00000001c0)="c8dd3fc27f6a387fc8e67a675bdb31b1cb5e83c1a78be3c82f3096936a3b9f234b93e702945696abef8f9256eb4b83116f6fb0289fc1b3699acd0de1335591b943135f68f442f1c5b2eb653ee6bcf9baa89d0ba8ab45ba87424b8dc9f07a588a9bbe86c85023f4c82abd858039e4138883dab5f5fca280b723c839e092ef15f46ccaf3d3450b07cea26654050f6b", &(0x7f0000000280)="5ec5bf56482b92e430207b7253f66522f5319334b2d440a89b44bb1b8c25f88eccb1ae107cc64e95868bd44b29474fb1865ded3a78c754290712cf462d148de1546327c75d564c51fd9499d4e936d8ca6ad28e960e1aca6311e27d2dac19c55772413b62f587beed864ef7ef433e77c9a370a2ea"}) sendmsg$auto_IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x38c, r1, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x243, 0x2, 0x0, 0x1, [@nested={0x1bd, 0x4d, 0x0, 0x1, [@nested={0x4, 0xeb}, @generic="7bbe8d28ff08831206a79f341dee28e240794c7034119830b1f557f05568d7bbb48cbf4585e5afa4b99ab099842064db86101566065f948e83d151c0a8747bf2d42ecbeaf02ce749cfb671f6245efecba21773121b2beb692478e1b57584efd824779b6d5dde0e9b3b17842ca8d98042a61c25c7f86409a06cf59717c567ac964d3bf8a7c9cf860b735a26521db971227fd28c63b28027eb3404133c65ba5a6b28a5e37fb116ecac0245dd78ea35a74f0b38c83d6832", @nested={0x4, 0xb6}, @nested={0x4, 0x73}, @generic="e9743bc3db58c69c52390b328794da9200a32b6c37b4bdbe6f1eef7f657d08f63b220d1dbab7c9bfa38b5debd0cecb5b807f3321b63afbeecc9bcf506f0011d1480d8c92cdd2b7309ac535d566f4841f8a4b090189977920053dc9f62dddd7fd919374022ad790798c34940ffbb942ea36caf8bbc0927493fe6b7c5f7e3363d302e0b60958eb8e34530c2a30d65fd89d636303c7501a14c5a07f831d6316974c1609d2880b57b849e159c6d8de56f8209565763a5e6d762a74f3820959dbf9c6f317241cab5f379070886fb8d4f94b04a7100a59d6739df2d59e0789830943f7a242e440c453ed50e7868f06b71f56b053ec4d16d82ae6"]}, @generic="e687e3fb08af52dc489fe9a4b4459a614be15ceb6261c82e07c2eb7433f02fb560f891fa1541d87a0991b05ea66567429d0da43ebeb7b21a2168a466e67437bb01852be2b8ecf96595c73de5a2ba9f77c03953fe1db7964f581990e7a1bd772d3ba2c22998d7b626b5efa6cfd6e2ae89edf5fe6e54983e9c6352a53648e105"]}, @IPVS_CMD_ATTR_SERVICE={0xf4, 0x1, 0x0, 0x1, [@typed={0x8, 0x107, 0x0, 0x0, @uid=r2}, @nested={0xe5, 0xac, 0x0, 0x1, [@nested={0x4, 0x11a}, @nested={0x4, 0x106}, @typed={0x11, 0x8d, 0x0, 0x0, @str='\xc4--:\xdd:,./-${\x00'}, @nested={0x4, 0x131}, @nested={0x4, 0x7a}, @typed={0x8, 0x80, 0x0, 0x0, @fd=r0}, @generic="4aa12e2d1260ca9b6bdb2f99a3a21b61e3d0315d444736aad7c4336dd75c8183fd2d382050564883dca28529020e9ab201689fba2288a50499c8b8a72c7f18fd95d2052b2699e5393622efd82e8c755f0a89dca5cbefb35a6b8b5430b58121ed36736f6b4d873d00a293a3426b9a8161df99271a6567b4691653a0ea866de20434b12b46d5514b4b4abf522dd7704c887e01b2b4940b5b368feb0cb8682b4c1adb37324f01a0b9c63b", @typed={0x8, 0xd5, 0x0, 0x0, @u32=0x8}, @nested={0x4, 0x53}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7a29}]}, 0x38c}, 0x1, 0x0, 0x0, 0x4040050}, 0x1) (async) sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040071}, 0x800) close_range$auto(0x0, 0xfffffffffffff001, 0x2) (async, rerun: 32) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer2\x00', 0x40000, 0x0) (rerun: 32) r3 = memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) (async, rerun: 64) mlockall$auto(0x7) (rerun: 64) mmap$auto(0x2003, 0x40000d, 0x0, 0x9b72, r3, 0x8000) mlock$auto(0x1000, 0x6) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002480), 0xffffffffffffffff) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/scsi/sg/version\x00', 0x101000, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) (async) r5 = socket(0x2b, 0x1, 0x1) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) (async) ioctl$auto(r5, 0x8983, 0x4) sendmsg$auto_TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000003680)={0x14, r4, 0x32f, 0x70bd2a, 0x25dfdbff, {0x12, 0x0, 0xf0}}, 0x14}, 0x1, 0x0, 0x0, 0x4801}, 0x8080) writev$auto(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x5}, 0x3) 3.425417109s ago: executing program 2 (id=90): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) keyctl$auto_KEYCTL_ASSUME_AUTHORITY(0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x80) clock_nanosleep$auto(0x9, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, r0, 0x1) semctl$auto(0x7, 0x2, 0x13, 0x1) close_range$auto(0x0, r0, 0x2) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages_mempolicy\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x4b72, r3) 3.147142979s ago: executing program 3 (id=91): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) readv$auto(r0, &(0x7f0000000340)={&(0x7f0000000380), 0x8000}, 0x2) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) socket(0x29, 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) epoll_ctl$auto(0x5, 0x1, 0xffffffffffffffff, 0x0) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0x981082, 0x0) socket(0x6, 0x2, 0x80000000) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040c04}, 0xc0804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, 0x0, 0x2, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_id=0x4, 0x80}, 0x96) r1 = openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) preadv$auto(r1, &(0x7f0000000100)={&(0x7f00000001c0), 0x82}, 0x8, 0x6, 0x5) fstatfs$auto(0x3, 0xfffffffffffffffd) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf25040000000c101a8008000100060000001cfea7df12a03d5b40b131ea361b8e6a678ccbbca4ea23f126c51b91b770f407322999050266daf7d5e9bd2abe3a121ed329f2581d21dd0d522eda65e03659995961b9b5126f87efec61eb6f01224d24695ed6a517dc5ab2a34a10e148"], 0x20}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000800) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000440)="671d2647dd69b6440843b6e6688a2b5ad9df2669e6f9cd2365", 0x19) socket(0x10, 0x2, 0x0) 3.047696837s ago: executing program 2 (id=92): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x201, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/kvm/irq_exits\x00', 0x22002, 0x0) read$auto(0x3, 0x0, 0x1f40) write$auto(0x3, 0x0, 0x3f00) r0 = ioctl$auto_TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) close_range$auto(r0, 0x8, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000894}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x84, 0xac1, 0x2, 0x36242398, 0xfffff5b2, 0x3bb, 0x8000007, 0xffff, 0x6, 0x81, 0x68198}, 0x6f3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x20a301, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x9, 0x0, 0x103, 0xee01, 0x0, 0x0, 0xffffffffffffff91, 0x0, 0x2, 0xec, 0x10004, 0x2, 0x1, 0x4, 0xfffffffffffffff8}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) r2 = socket(0xa, 0x801, 0x84) listen$auto(r2, 0x4) open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x6f) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x4801}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.98940978s ago: executing program 1 (id=93): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r0, 0x0, 0xb4d3) socket(0x10, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d7) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) socket(0x15, 0x5, 0x0) mmap$auto(0x1, 0x32, 0x5, 0x410, r1, 0x6) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendfile$auto(r2, r2, 0x0, 0x10000800000003) (fail_nth: 36) 2.942146079s ago: executing program 0 (id=94): ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) madvise$auto(0x1, 0x8, 0x4a35) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) sysfs$auto(0x2, 0xffffffffffffffff, 0xfffffffffffffffc) lsm_list_modules$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x2000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) write$auto_mousedev_fops_mousedev(r0, &(0x7f00000000c0)="13", 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x80002, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x80002, 0x0) close_range$auto(0x2, 0x8000, 0x0) r3 = timerfd_create$auto(0x0, 0x0) timerfd_settime$auto(r2, 0x3, 0x0, 0x0) ioctl$auto_TCSBRK2(r3, 0x5409, &(0x7f0000000000)="1774cff8fca8443be27378598054d36f461640ee15bd8b616162e69d68806a01e329c029eec6e954e16eef186afd2aa052a3d34a25d33200dfd8d7dd520cda653458ed16317bf78a2cff2ded8e869e168f899bc91a491f283bbfbe41bb2287506bdc0b03509179cd46e0162b6c92bb99808927913a07caedb75532f27ad464608895324b853a0d73af07adbd2bf5107684be8a2dc18d0d") timerfd_settime$auto(r1, 0x3, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x28020000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) mknod$auto(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7, 0x1f247c73) 2.26982807s ago: executing program 0 (id=95): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x382, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) madvise$auto(0xfff, 0x8, 0xab8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) setsockopt$auto(0x3, 0x6, 0x200001, 0xfffffffffffffffc, 0xa) socket(0x2, 0x801, 0x100) mmap$auto(0x8, 0x3, 0xa, 0x1a, r0, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/node/has_memory\x00', 0x22100, 0x0) read$auto_check_wx_fops_(r1, &(0x7f0000000080)=""/228, 0xe4) vmsplice$auto(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000005c0)="62fcdaaecffe3dd0853f3a8a121bf0c52c4c47c4ebe9db3168162b5ec35f3080d4079f514b677fbafabe3dc59d17c87d5d3caae4a9a8d868889a65cd0294600f3eae60f3c2b13c232ba210a1f744c3df76bb259d231af8b17f5f879cf6d7e1fbaf40a27bdcf0b786f7a058ead8eda8053ac2fb747c05c45010515c9a392db085528f8b668eca9da0889a87fec0bad90bb6abf2465232b6f29797e18eb1f2a23e96819c8d3db183e01dac1273ea6203165123b62a03da6a4bfa27612598e1a41da3839fad1233efc34830cabd3cc0a3c304e62d5c09accf692cfaafba121e31fb1108013185b5826d0041b9691b29d7159e697c47f3a90fd92d0a9c2dc66c85bda16918c3595b37b3adf1e79e59ba86a5878cec0047c81f4aca8cf8491d0479bd17df654a3419ce2d1d6abf932ae98d0105fddfcd79b40183c490ce0a0b0f18f03b65e6cc26ac3d2b5e9ebc8a3dfe0a06e0e89a904da8c0993556238248cbd7902837181b343b0bdf3acdb1c4456e8afbb11d8484ba0575feeea272f3007c62539c964ffd0d00887da4c186db43a75a908ce51e2c0391d3e0fe78864fffa014136430c3b29c3629242301fc215d9c8119a7f3322afdbadb4200f6edcc761f390899361a2dd581dbfac3e33cb0cf923b9f4dd34a038b205a3c03f5df53da72d19458df42979e6048b405fd0003c3a7574116230aeb64ccfa7a2500a9f9a8575de316568ff842c604f64b0b40e24c2671f806c4203e7cbf80dd25dc9e499d6d37b514dee011dfd594911a9c51c662d6f09ee794a4d4a7c9cf4707cdb8aa955453e4e30107bec8c908acdb60927452563fefbddec654d352156cdc819f36a921eb6c03ba966a8f8b7946d970e0359d389104dc70fb04050f6d74f6652b742376ef5f03506ed0ec39c070bc2b67100bc8fac090467af9a5e56910180a8f8970a4b6983fedd9e1de40b4ff830e197e94c2808bcf89cde7cc95e8a984ab9ef2f93e973059496e0f1ab440d3e259e1c6b91f2574cb95ab963299d1ec4c207d76de7f178e2ed93ad9ce29c1e3d68bf39f0eb37e883f4b2694ca5552df4ce78bb1f665e5edc3b3b0489ce8ac17263874935bab6dae06cd8192d2ac11ff1dad31d8c3f144157ca57233726b83c90ef09ada0a40303c9b423beabdaf3fc08bca5663e593d102a7e8c62a8a2a37cf89c036d4d36c6af24e5f48fb67d7a335b6778d59e1d714e059d5a21faf0b06c25ec420f8f030c772f9efbbdd32aed543d3d1b9fe3917f6a9e341bb301dd33c8adeb6f9565db178f45ce31ee884eebd84008b36731f23b936257712a1a6e311c7afd495cc877aab9681d97e278a9fd9ea55a69162496b53a9c2e7a50223d8752376356fe461833a484ddece281590b22f75554de1421c72c10a1b93b897bb1776add2fbc11d3810a4734c063e6aa10abf5c5ddaf24022c7e2b802fec3cbf47976e14908e94e777e8ce0f6ddad02782aac0e1405eab395b407e521fa5614ada6d4e35a5e006bff9091e9c6a9fd54cda886beed44744ddbd5891bdedad94a066345be8ccd190a3cd5e825b1d42af684a45cd032badf2b30508048dd578bc16cceef40f65ad97f53cf1aa57a141edf30e92b9ffc0dbd6628e5db51d9019bb3c740f0df24971bd42ab5de3d881663faed1b435897608faab1955bf564a1e6b28d9a98e4930088c95e127614ebcbe6f3bb50ee494f0a3eee73e7ae5117440db203e6b25a36dc2e9adb702f1abeebaa12904c6b89a2a9925a50e33e99bcaebb62d5016f5adc6558aa3ddc02088514399e00cc2f803c5c6b65d3d14f914d2ee57e1fa08dce76db6fb5c0ae966c86e9cb58b39dfd21803c0127e6a7d7d64f05f862434b0d06efdabf0ad80a7f9d90b82defe59af3f461d03c7f828dbf6b23a0772715b07f11b28d5228cb6414d54173a42f9de6b02c493ec37fef2a989bd6fa7013a29ccb9545c6168b99df574dc9702937d26ceb9d72cf1ecbc3684cc017ad868a62faf71c39d717fd9664811e8cc3be4af288ccba35877cafa52d5dc703b2a08e31bda4048f6b34fc14a3e4ba3e5f08be56c3500f71ece260de3f6b4cb70b7bf2f97eaeb26947fb6eb5e6e09e0df577bc8846b9841334164591845471d5ee097e4e1b2b2182f80743d2443f21b7a433a9205a02fa9150847c6473027a1b27bb1cafc87b041509e3e6116a52290f74b8845809f6345fd825db0869707e11880da3cdd6143291649d85622ff5b6a5781b891472c06353d11ddc7c9a159a30494fe8075b47c6f023ee759026010b71610a1931d50ddceca4cd75efae1d17d3043e98a813c7f935338c3afd7c0a8f7984fde83e4fabe09a2f79ac3fa1c579471f84d7dea74f45fb723a1e5c5551136914025332e8b9e460ad24f3d3207f5ff8660ec4ae374658884f91b9848d520e9b2ea925328e8ed6bf6e97654c95ebc112c920758c4504476a4b6c3530f8e4e560d5eaacdb251dabbf26ae23549137ba9fa9a83efc7825dd1c2f0841fb6fc2dd8739e9f6999273c28211a3b9d92d3aa3c29e56c144b83e95fb1a1ae38eda88ed45011b766d9e11cb0f53f757cdbfbc6a6e1d26bb6a0a632c108e73014b38832f6abc9a9df0395fb7dc24beed68a0c8b26560dbf08b84cd9dc8ab7c5ab97fa29aaf69e850b437dc83225b88c146dfb84e3956e029babea483b85b598d23861ba3019e5df236a6354736365a73e2d5535a9472e640334c559bba5a3952b6bf3e5531750f6a71d19bb01638f2bdab1bc075b3e13b1804b1f96b71b2d6f057e7f5c1d29d95abab5f6490974bce81e31d2929090b414bc2fe24d39cd5f93145a4e3b5323c01f2e177e376168817309e7cb8fc93e75f4ca6d2425682d7244587d5afc37d5ef39bc7c8335b6499dfae6e5836c59028c71ab43d97022eb60db85cbde87902cb5cad8494c8b082dd7af823fa273ff9c1f315f41c507b120ac2ac3dae5dc95fe5d9af02238f776126d304869fa9591d733ae9b81b5ae2afe4689132a8c18056980afb4a8d7e5eed4d27e0cebbf9bdc26b869818303cf18c06429a2c9909c7c3f2db3832b0f3045cdd3662f693042c2c0e422bc84bd9c7acd3bcbda2d88bf8d2affbfbb3f4afa96dd836b6edcb5a6e9f815d16c6b9978cd304ad82e3ad2631d7bdfa6ded118de60f3e27c59e74ffc9c611353ebe725999c32386ccfeeeaca2ad06f47f9b6ddebf02168139d20a1d2bd4b714df9930bddfe850a77386f08f2211953a91355fb6a204a6caf7650735a82a8c23a2d20d21bbaaf652643cc167d2f3394efaa942135671c61b5a4d487ffb432340e8f388db32fcef13aaf008e08815e36dce3a12c710a1c02d173e7568fc720824d6272801aba76a68cf74487c3192076ad37c2cdedcf4529d41bf6d4b841fad594eb389227a790730b6bb57a83fbfdde1f3362afb4b45845d1059e80477e4eaad454396dd0392cfde819a7ac36ee9c7ab32642802b5eb6ac1255d6b8af158ada0867f80927754e933ef368f660ad887d1124ea23cb9e85cc6f4629cfc6088b7e6b42c9295454169cc4b4bb918006723036ce4f4ba8fd01e9768a151484114934727ccf00999193c6938f910604fa0e42285b135e1d317da0d538e466542034cad3e422fcb2855da9621df5bc90845bf37ce01379db8077978368165ea70dd358410f8cd15b02c6bf761fe30fdb23744162160d6fef2bb131fb126a904746f743013a07c6849e7c605b5eced39e65a66a3eb9f5b8366448618d627ab0e0c5a5a211e10142e0c93010afaffa7e64e4f7b5adee37b3aa557f30054b1e396a200b3f2d61086a50e5508309bbeb7b2635cbe99b069d20e3e2a65d4652144d3e0e223b1644dbf0bb29953fcf4cd1febe18a63a8eb13fedf80c47cca02aa2f4d28755e1fea438a94c9bf2af6f28e6b63bf5363ef19651f96f12377cbc2df50e6440ea94eccb7bdbb66638cdb39412d4a1af10f8efa1c7b9a76714ff35604537fffd1fefae83f49c1b5d8c55cf100b5783dfffdba9b50d015db677da03596de248f1a7bfdf5405bd060dc8d4577242e079777d1b5207ed68d18c6aea5c96b1c5bd26a4b24b0521eb6e6426286a5a2b6cb1509aa066573571f6df0b1be6bbd229663727e0976f8c0162e5d97ea55978e7d0245a854cb60246aa0d2af5c58427fa229728f644d66bfae36946b9ef05c926bab856d812de8d79647cf831f6e1027b4256c8195c1d86b7eb5a9923549ad9d7566e74cf62d902b9bff043795bb6119a30b8ee4b15c7536785888f5338659536f0d05575255143fd5d94d1d3a50db92e348a901a933b0422328c102f9653da2bfd00cbadcb2f5b973a6d124b139a4cb1fa3c891960d7baff3ee60a53f29e66a5e5786a211498b7c03a9129eb9bf8dfc1600f4e6b2e62ee516564433c8ecefafde8cb31de8e1eafbeaa07e73f6e7c86d6f1b2abef98110876fa6552fe69edacb6cfcb68cd1d5e534f2cdc050b514ec07f8ce62b7e949953e80744887d39dc7862bdc22a94c0bad96791ea7d5cd6cba82ff5a37cab94c9975d4970bca105b894031da6e88b1c52464b1694ab41cc5996106db20b68122a951217e0ed5390c5c490d0f8b106c341c5bd1c23cc2695cf4bbaad0c1096b0741bf382f000f3195624868f386e9c294d7afdbd04c884ae569f0f56fc0f72d62dcba4e2be27eb8f9078df6400742b11305be814d8e96671aa91082a1f3bd1f2a71006b0dfacd187f5890aca906717daa0b5b2fb76b2aa7ea593492d3b5a68d54d32045c3d40991482bf1bc6964e4001705c4d739ce10f6a73cd6f3ed3601ea9f9ea5624d2c5aad37151388612bb9b816fdabfee1f64886eaf259ca3dfab175101fa7eaca931d41b6c96444f8cc1c533919aa1ae7f2e8bd6a7bec1645581f9f8c667ef656abed4cf29ac219762cedea3823268e9b45b0947b77e5139b25923804e3da4af4ccd05abe7b65771085261bf47ac9bf122fcc41f72ef3ac808d958765f5338a2e5a261700eb72bdf07915d5cc2bac600bde5d6874140572da83eb36285385e6703bea79a677d49b7bdd4124163a73011daf01edc920bbb362c19c04897e83732be0c3df15b81f776aeee9eaaf560dff70448f897a98fc9b3b8db7cdf2e183b4b7ad9fb0013dc941982b08fca193a9fa93e00e5a6cda0e3a656a0d17b05a28ec983cc8763349fca600a713b4df59124c3472de93520334b650f2c2c634c5f0995e8636726d5550b151e00bfa018c2351fd684cdccfb3df6539df7e02811f30015f1abad4ad195a78c96340018a88511e75c9a2d4155f0add4434266efbbf92cce3cb2c4e6e46e3e1c928f7681e39d6a70b4482e547c67334dac76e70b033fa3e07990369087d59cfce29d9a034fb6e5132042793d283eaccf5ba33626e42ff446bd5eeb8f1b446e0e06335b05a8c05ef302558af13087eafbc315e64ce685bf10ff3e90d4a122dca3f732ed020e55046b0ed4a20d4d162f038745af12c6f8e3d00807525ebc301ef22244f4ca4a2bd540040f78519f133380190586ad85ce2d4dc11990861fad04e41a81b211d6edc767b2ea3e22044cc9e9abdc63d26e0c51f47028b5eece3b0ddbdc1706cd28ff5a705882e20cca1e72467f86d60ce21d2e62606f99507c06f49ca1ddf960845f66acf6f116211830d47afcb4de0a02fea9f4bcf77daea29e76b09fded3c6ba6be74c32c511641c81120dc7b9d0788c623a03b298638afab0b6c00f61ba88a5b4ee130ef576de4f4949f27eec96607b2f2c4fc1f511a2d949c61f9e2a56b8594d09b891c6a692fd6c7e2", 0x1}, 0x4, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r3, 0x1b, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0xc800) mlockall$auto(0x5) mmap$auto(0x2, 0x40000a, 0x2bb, 0x14, 0x2, 0x3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv6/conf/sit0/ioam6_id\x00', 0x88800, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) syz_genetlink_get_family_id$auto_nlbl_mgmt(0x0, 0xffffffffffffffff) io_uring_setup$auto(0x8, 0x0) unshare$auto(0x40000080) socket(0x1f, 0x3, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0643, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) 2.003520062s ago: executing program 3 (id=96): mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @private=0xa010102}, 0x54) (async) openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/pids.events.local\x00', 0x103042, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) bind$auto(0x3, 0x0, 0x6a) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(0xffffffffffffffff, &(0x7f0000000200)='/MRD\x9d\x1fwJ\x01^\xdd\xf3\xd7dev/aud\x16v9\x85;J\xb5io1\x00\xf8\xc5\x03\xd3\x13^\x1f\xed\x88\xb9\xd2\x00i\x909\xb1\x00\x00\x00\x00\x00\x00\xf6\x18\xd9\x8d\x19\xe3\xeek\x984lT\xfaO\xf0\x9b\xc4\x98\xd0\xbb\x17X\x9e\xdb\x1b\x1d:]\x17\x1b\xcd\x04\x00k\xe2_\xc3&\xa9\xb5/\xe9', 0x1) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da07, 0x3, 0x3, 0x65, 0x8000001f, 0x1000, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) sendmsg$auto(0xffffffffffffffff, 0x0, 0x10000fff) msync$auto(0x2, 0x9, 0x40) (async) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x1ff, 0x6, 0x3, 0x4, 0x4618ecd2, 0x3, 0x42ff, 0x6, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, &(0x7f0000000280)={0x6, 0xcb}) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) r1 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder1\x00', 0x0, 0x0) dup$auto(r1) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x6) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/tcp6\x00', 0x0, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ceph/parameters/disable_send_metrics\x00', 0xc0202, 0x0) (async) mmap$auto(0x0, 0x200002, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) 1.861349562s ago: executing program 3 (id=97): socketcall$auto(0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video53\x00', 0x1c1400, 0x0) ioctl$auto(0x3, 0x4020565a, 0x38) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder0\x00', 0x800, 0x0) socket(0xa, 0x1, 0x100) socket(0x1e, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x101, 0x0) socket(0x21, 0x3, 0x9) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socket(0x11, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18", @ANYRESDEC, @ANYRES32, @ANYRESOCT, @ANYBLOB="eba499f0b6d5133876e009c9fac21f9c38032675478c68a2407b5b45a75e35c2a3cfedfa4521c2d8d190730e1e57fe7c9505e942610827b51686a8f03d1ddb408288a7ea7e69555c0ac550b8c8004faeb63b610f7ff9260c34194a826bf58ba8e4b32d89165b24d5cb8d771851bddbb0d6333462c68f5bab07c33d483fefd88d2d1dbe4535610e", @ANYRES8], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x3, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x3739aae3, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x3, 0xd, 0x1, 0x948b, 0x1, 0x15f4da0a, 0x1, 0xffffffffd09d8d67, 0x62, 0x80000023, 0x7, 0x6d3e, 0x9, 0x2, 0x2]}, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xa50083, 0x0) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xffffffffffffffff, 0x8001) io_uring_setup$auto(0x6, 0x0) ioctl$auto_RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x8000, 0x0) 1.848861037s ago: executing program 1 (id=98): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socketpair$auto(0x800001e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x51) setsockopt$auto(r0, 0x3045, 0x1e, 0x0, 0x8) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x6) socket(0x10, 0x4, 0xffffffc0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) select$auto(0x800000e, 0x0, 0x0, &(0x7f0000000280)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x200000001, 0x9]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) write$auto(0xffffffffffffffff, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) write$auto(0xffffffffffffffff, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) (async) prctl$auto(0x3e, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0004, 0x1a) setgroups$auto(0xe32, 0x0) (async) madvise$auto(0x0, 0x200007, 0x19) (async) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 1.648656485s ago: executing program 2 (id=99): mmap$auto(0x7, 0x80000000080, 0xdf, 0x9b72, 0xffffffffffffffff, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0101, 0x15) mbind$auto(0xf4000000, 0x2, 0x2, &(0x7f0000002100)=0x4, 0x7, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x4000, 0x0) syz_genetlink_get_family_id$auto_ioam6(0x0, 0xffffffffffffffff) (async, rerun: 32) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x48000, 0x0) (async, rerun: 32) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(0xffffffffffffffff, 0x0, 0x8010) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) mlockall$auto(0x7) r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) (async, rerun: 32) ioctl$auto_UI_SET_SNDBIT(r0, 0x4004556a, 0x0) (async, rerun: 32) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x800, 0x4d, 0x0, 0x0) (async) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) (async) getxattrat$auto(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0, 0x10) (async) madvise$auto(0x91, 0x2, 0x3) syz_clone3(0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xfdef) 746.106373ms ago: executing program 3 (id=100): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x20000081) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x7ff, 0x9, 0x63, 0x0, 0x0, 0x0, 0x8, 0x200, 0x800000000100002, 0x40000406, 0x2, 0xc, 0x2, 0x11, 0x6, 0x7}) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000080)=@test={0xffffffffffffffff, 0x82, 0x1ff, 0x19d2e2e9, 0x5, 0x81, 0xfffffff1, 0x1, 0x1, 0x5, 0x9b9, 0x8, 0x7fffffff, 0x4, 0x2}, 0x66) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000840)="13") ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f00000000c0)) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xee46}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 400.870351ms ago: executing program 3 (id=101): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/loop10/ext_range\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/194, 0xc2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r1, &(0x7f0000000640)={{&(0x7f0000000000), 0x5ab, &(0x7f0000000100)={&(0x7f00000007c0)="4c030000000000002106000000000000005f6bba44181041", 0x4c}, 0x5, 0x0, 0x5, 0x1}, 0x1}, 0x2, 0x100) 225.360329ms ago: executing program 1 (id=102): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd10/queue/nr_requests\x00', 0x82942, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event0\x00', 0x3498c2, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x4b564d06, 0xe3, 0x100000007f}]}) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000002e40), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4048c40}, 0x4) sendmsg$auto_SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) pselect6$auto(0x5, &(0x7f0000000400)={[0x8, 0x5, 0x0, 0x5, 0x8001, 0x6, 0xac, 0x2000009, 0x3, 0xffffffff, 0x7fffffffffffffff, 0x0, 0x1000, 0x2, 0x8, 0x3ff]}, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r7 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) landlock_restrict_self$auto(r6, 0x0) execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=&(0x7f0000000080)=',{\x00', &(0x7f0000000140)=&(0x7f0000000100)='}.\x00') move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) 123.838583ms ago: executing program 3 (id=103): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f0000000300)='./file0\x00', 0xf801) getcwd$auto(0x0, 0xffffffffffffffff) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r0, 0x541b, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x5608, r2) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe6e) chmod$auto(&(0x7f0000000040)='./file0\x00', 0x10fe) 0s ago: executing program 2 (id=104): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/dummy0/mtu\x00', 0xe3102, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf25030000000400080004000380040008007b1ea38e3fd00d25848412217c8419981c65982535ea6bb7e2dd5ebc7cdd338353f2814299971480841e109049c5d3379231cacfc1e2f724bd7563523108db142ffc8ad79cb8f6dd59c573ff60d577457c8d0143e6684b7e58e71120558a3080d208620e384e35cbc881f613757c3a8938b1b9dde4d44a2e4aae58302c9cc0e2b0e770e80e880a71955d9ef70848cd710edf5482aee07c0929dccb"], 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0x2003f0, 0x18) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0x8000, 0x0) ioctl$auto(0x3, 0xae41, r1) read$auto_fops_u64_ro_(r1, &(0x7f0000000100)=""/16, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x2a) r2 = socket(0x2a, 0x2, 0x1) connect$auto(r2, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1}, 0x57) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) mremap$auto(0x0, 0xda1, 0x3fd6, 0xb, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) timerfd_create$auto(0x9, 0x0) r3 = epoll_create$auto(0x3e) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x3f00) sync_file_range$auto(0x3fe0000000000, 0x7, 0x0, 0x0) read$auto(0x3, 0x0, 0x84) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts. [ 93.735090][ T5838] cgroup: Unknown subsys name 'net' [ 93.862748][ T5838] cgroup: Unknown subsys name 'cpuset' [ 93.872062][ T5838] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.591868][ T5838] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.890712][ T44] cfg80211: failed to load regulatory.db [ 97.851526][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.890536][ T5856] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.909125][ T5856] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.909581][ T5863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.916442][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.924910][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.931359][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.940147][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.952312][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.953519][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.961115][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.967443][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.975338][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.982389][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.995772][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.999389][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.003674][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.019472][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.029545][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.042005][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.573985][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 98.715940][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 98.776837][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 98.844437][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.851757][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.860228][ T5850] bridge_slave_0: entered allmulticast mode [ 98.867582][ T5850] bridge_slave_0: entered promiscuous mode [ 98.884141][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 98.913963][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.921324][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.928486][ T5850] bridge_slave_1: entered allmulticast mode [ 98.936006][ T5850] bridge_slave_1: entered promiscuous mode [ 99.047367][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.060787][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.089686][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.096887][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.104749][ T5849] bridge_slave_0: entered allmulticast mode [ 99.112759][ T5849] bridge_slave_0: entered promiscuous mode [ 99.139359][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.146613][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.153868][ T5851] bridge_slave_0: entered allmulticast mode [ 99.161607][ T5851] bridge_slave_0: entered promiscuous mode [ 99.189722][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.196964][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.204277][ T5849] bridge_slave_1: entered allmulticast mode [ 99.212182][ T5849] bridge_slave_1: entered promiscuous mode [ 99.235026][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.242493][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.250174][ T5851] bridge_slave_1: entered allmulticast mode [ 99.257366][ T5851] bridge_slave_1: entered promiscuous mode [ 99.326697][ T5850] team0: Port device team_slave_0 added [ 99.347665][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.355563][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.363362][ T5852] bridge_slave_0: entered allmulticast mode [ 99.371293][ T5852] bridge_slave_0: entered promiscuous mode [ 99.382412][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.407678][ T5850] team0: Port device team_slave_1 added [ 99.415620][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.422874][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.430213][ T5852] bridge_slave_1: entered allmulticast mode [ 99.437432][ T5852] bridge_slave_1: entered promiscuous mode [ 99.461857][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.487862][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.545194][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.569986][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.576947][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.603325][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.618310][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.631515][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.643096][ T5849] team0: Port device team_slave_0 added [ 99.663189][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.670225][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.696378][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.744598][ T5849] team0: Port device team_slave_1 added [ 99.786964][ T5851] team0: Port device team_slave_0 added [ 99.797519][ T5852] team0: Port device team_slave_0 added [ 99.805921][ T5852] team0: Port device team_slave_1 added [ 99.826020][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.833244][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.859447][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.874061][ T5851] team0: Port device team_slave_1 added [ 99.906185][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.913723][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.940214][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.009543][ T51] Bluetooth: hci1: command tx timeout [ 100.031530][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.038530][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.067013][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.085285][ T5850] hsr_slave_0: entered promiscuous mode [ 100.093106][ T5856] Bluetooth: hci2: command tx timeout [ 100.096993][ T5850] hsr_slave_1: entered promiscuous mode [ 100.098656][ T5171] Bluetooth: hci3: command tx timeout [ 100.099266][ T51] Bluetooth: hci0: command tx timeout [ 100.125180][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.132241][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.159245][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.172592][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.179704][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.205678][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.217983][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.225023][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.251724][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.276623][ T5849] hsr_slave_0: entered promiscuous mode [ 100.283472][ T5849] hsr_slave_1: entered promiscuous mode [ 100.290410][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.298137][ T5849] Cannot create hsr debugfs directory [ 100.406075][ T5852] hsr_slave_0: entered promiscuous mode [ 100.415273][ T5852] hsr_slave_1: entered promiscuous mode [ 100.421669][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.429385][ T5852] Cannot create hsr debugfs directory [ 100.480221][ T5851] hsr_slave_0: entered promiscuous mode [ 100.486541][ T5851] hsr_slave_1: entered promiscuous mode [ 100.493401][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.501632][ T5851] Cannot create hsr debugfs directory [ 100.927813][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.949392][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.969982][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.996327][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.034455][ T5851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.059582][ T5851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.081338][ T5851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.106541][ T5851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.143636][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.154789][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.171128][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.195205][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.287398][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.307795][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.319915][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.352754][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.454400][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.530408][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.554275][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.576478][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.592521][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.599899][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.633496][ T2952] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.640879][ T2952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.663893][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.698016][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.712428][ T2938] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.719624][ T2938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.750840][ T2938] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.757971][ T2938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.776635][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.791926][ T2938] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.799134][ T2938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.833242][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.840439][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.926938][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.967169][ T2952] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.974407][ T2952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.027135][ T2952] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.034448][ T2952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.090543][ T51] Bluetooth: hci1: command tx timeout [ 102.188738][ T51] Bluetooth: hci0: command tx timeout [ 102.194223][ T51] Bluetooth: hci2: command tx timeout [ 102.208836][ T5856] Bluetooth: hci3: command tx timeout [ 102.568110][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.662483][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.707677][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.717705][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.756850][ T5850] veth0_vlan: entered promiscuous mode [ 102.772242][ T5850] veth1_vlan: entered promiscuous mode [ 102.851432][ T5851] veth0_vlan: entered promiscuous mode [ 102.862718][ T5849] veth0_vlan: entered promiscuous mode [ 102.906712][ T5851] veth1_vlan: entered promiscuous mode [ 102.915306][ T5852] veth0_vlan: entered promiscuous mode [ 102.927684][ T5850] veth0_macvtap: entered promiscuous mode [ 102.943818][ T5849] veth1_vlan: entered promiscuous mode [ 102.966458][ T5850] veth1_macvtap: entered promiscuous mode [ 102.977320][ T5852] veth1_vlan: entered promiscuous mode [ 103.027927][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.053601][ T5851] veth0_macvtap: entered promiscuous mode [ 103.065619][ T5851] veth1_macvtap: entered promiscuous mode [ 103.087427][ T5852] veth0_macvtap: entered promiscuous mode [ 103.097838][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.111172][ T5849] veth0_macvtap: entered promiscuous mode [ 103.134392][ T5850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.144987][ T5850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.153930][ T5850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.163669][ T5850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.176705][ T5852] veth1_macvtap: entered promiscuous mode [ 103.186442][ T5849] veth1_macvtap: entered promiscuous mode [ 103.196683][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.234245][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.257730][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.274149][ T5851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.284205][ T5851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.295878][ T5851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.305017][ T5851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.366168][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.392543][ T5852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.402767][ T5852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.414073][ T5852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.422966][ T5852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.440637][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.440814][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.463067][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.525396][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.535802][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.559706][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.597316][ T5849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.610906][ T5849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.620040][ T5849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.629115][ T5849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.672985][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.735650][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.751394][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.846146][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.872482][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.887634][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.912824][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.987277][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.012713][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.101736][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.115576][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.169642][ T5171] Bluetooth: hci1: command tx timeout [ 104.188697][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.196574][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.221375][ T5940] mmap: syz.0.1 (5940) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 104.253278][ T5171] Bluetooth: hci2: command tx timeout [ 104.264381][ T51] Bluetooth: hci3: command tx timeout [ 104.270383][ T51] Bluetooth: hci0: command tx timeout [ 104.760525][ T5947] FAULT_INJECTION: forcing a failure. [ 104.760525][ T5947] name failslab, interval 1, probability 0, space 0, times 1 [ 104.827386][ T5947] CPU: 1 UID: 0 PID: 5947 Comm: syz.3.4 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 104.827424][ T5947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.827444][ T5947] Call Trace: [ 104.827454][ T5947] [ 104.827468][ T5947] dump_stack_lvl+0x16c/0x1f0 [ 104.827535][ T5947] should_fail_ex+0x512/0x640 [ 104.827578][ T5947] ? fs_reclaim_acquire+0xae/0x150 [ 104.827616][ T5947] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 104.827658][ T5947] should_failslab+0xc2/0x120 [ 104.827686][ T5947] __kmalloc_noprof+0xd2/0x510 [ 104.827747][ T5947] tomoyo_realpath_from_path+0xc2/0x6e0 [ 104.827793][ T5947] ? tomoyo_profile+0x47/0x60 [ 104.827844][ T5947] tomoyo_path_number_perm+0x245/0x580 [ 104.827877][ T5947] ? tomoyo_path_number_perm+0x237/0x580 [ 104.827916][ T5947] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 104.827954][ T5947] ? find_held_lock+0x2b/0x80 [ 104.828018][ T5947] ? fd_install+0x244/0x750 [ 104.828057][ T5947] ? hook_file_ioctl_common+0x145/0x410 [ 104.828108][ T5947] security_file_ioctl+0x9b/0x240 [ 104.828147][ T5947] __x64_sys_ioctl+0xb7/0x210 [ 104.828185][ T5947] do_syscall_64+0xcd/0x490 [ 104.828234][ T5947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.828263][ T5947] RIP: 0033:0x7f419ab8e929 [ 104.828286][ T5947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.828313][ T5947] RSP: 002b:00007f419b992038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.828341][ T5947] RAX: ffffffffffffffda RBX: 00007f419adb5fa0 RCX: 00007f419ab8e929 [ 104.828359][ T5947] RDX: 0000000000000000 RSI: 0000000000004b72 RDI: 0000000000000000 [ 104.828376][ T5947] RBP: 00007f419b992090 R08: 0000000000000000 R09: 0000000000000000 [ 104.828394][ T5947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.828414][ T5947] R13: 0000000000000000 R14: 00007f419adb5fa0 R15: 00007ffe870bea68 [ 104.828452][ T5947] [ 105.025916][ T5947] ERROR: Out of memory at tomoyo_realpath_from_path. [ 105.717255][ T5940] syz.0.1 (5940) used greatest stack depth: 19784 bytes left [ 105.822582][ T5964] process 'syz.2.8' launched ':,' with NULL argv: empty string added [ 105.949337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.008798][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 106.011080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 106.248913][ T5856] Bluetooth: hci1: command tx timeout [ 106.329365][ T5171] Bluetooth: hci2: command tx timeout [ 106.329420][ T5171] Bluetooth: hci0: command tx timeout [ 106.329449][ T5171] Bluetooth: hci3: command tx timeout [ 106.980074][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.988913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 106.997442][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.016268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.024847][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.033793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 107.036714][ T5971] nvme_fcloop: unknown parameter or missing value '^/]' [ 107.042938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.416094][ T5980] netlink: 'syz.2.11': attribute type 4 has an invalid length. [ 107.443364][ T5980] netlink: 314 bytes leftover after parsing attributes in process `syz.2.11'. [ 107.502649][ T5980] IPv6: NLM_F_CREATE should be specified when creating new route [ 107.773885][ T5985] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.415537][ T6009] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 112.809372][ T6043] ALSA: mixer_oss: invalid OSS volume '0' [ 112.848693][ T6043] ALSA: mixer_oss: invalid OSS volume '' [ 112.856130][ T6046] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.183986][ T6016] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 113.616123][ T6062] netlink: 20 bytes leftover after parsing attributes in process `syz.3.29'. [ 113.667794][ T30] audit: type=1800 audit(1752289032.465:2): pid=6065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.28" name="dbroot" dev="configfs" ino=7962 res=0 errno=0 [ 113.758220][ T5856] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 113.840652][ T6057] syz.0.27 uses obsolete (PF_INET,SOCK_PACKET) [ 114.029382][ T6076] FAULT_INJECTION: forcing a failure. [ 114.029382][ T6076] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 114.058519][ T6076] CPU: 0 UID: 0 PID: 6076 Comm: syz.3.30 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 114.058569][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.058587][ T6076] Call Trace: [ 114.058597][ T6076] [ 114.058610][ T6076] dump_stack_lvl+0x16c/0x1f0 [ 114.058663][ T6076] should_fail_ex+0x512/0x640 [ 114.058717][ T6076] should_fail_alloc_page+0xe7/0x130 [ 114.058752][ T6076] prepare_alloc_pages+0x3c2/0x610 [ 114.058798][ T6076] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 114.058851][ T6076] ? __pfx_stack_trace_save+0x10/0x10 [ 114.058891][ T6076] ? stack_depot_save_flags+0x28/0xa40 [ 114.058941][ T6076] ? __alloc_frozen_pages_noprof+0x294/0x23f0 [ 114.058995][ T6076] ? kasan_save_stack+0x42/0x60 [ 114.059040][ T6076] ? kasan_save_stack+0x33/0x60 [ 114.059088][ T6076] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 114.059146][ T6076] ? __pmd_alloc+0xbf/0x930 [ 114.059182][ T6076] ? dup_mmap+0xe88/0x21d0 [ 114.059220][ T6076] ? kernel_clone+0xfc/0x960 [ 114.059260][ T6076] ? __do_sys_clone+0xce/0x120 [ 114.059299][ T6076] ? do_syscall_64+0xcd/0x490 [ 114.059346][ T6076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.059399][ T6076] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 114.059450][ T6076] ? policy_nodemask+0xea/0x4e0 [ 114.059486][ T6076] alloc_pages_mpol+0x1fb/0x550 [ 114.059519][ T6076] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 114.059547][ T6076] ? css_rstat_updated+0x9d/0xd30 [ 114.059593][ T6076] alloc_pages_noprof+0x131/0x390 [ 114.059626][ T6076] pte_alloc_one+0x1c/0x3a0 [ 114.059656][ T6076] __pte_alloc+0x6d/0x3c0 [ 114.059687][ T6076] ? __pfx___pte_alloc+0x10/0x10 [ 114.059718][ T6076] ? _raw_spin_unlock+0x28/0x50 [ 114.059759][ T6076] ? __pmd_alloc+0x3fb/0x930 [ 114.059800][ T6076] copy_page_range+0x1aed/0x5740 [ 114.059856][ T6076] ? __lock_acquire+0x622/0x1c90 [ 114.059933][ T6076] ? __pfx_copy_page_range+0x10/0x10 [ 114.059975][ T6076] ? mas_store+0x7a9/0x1160 [ 114.060006][ T6076] ? find_held_lock+0x2b/0x80 [ 114.060040][ T6076] ? __vma_enter_locked+0x163/0x3f0 [ 114.060104][ T6076] dup_mmap+0xe88/0x21d0 [ 114.060166][ T6076] ? __pfx_dup_mmap+0x10/0x10 [ 114.060233][ T6076] copy_process+0x4081/0x7650 [ 114.060275][ T6076] ? __pfx___futex_wait+0x10/0x10 [ 114.060338][ T6076] ? __pfx_copy_process+0x10/0x10 [ 114.060390][ T6076] ? __futex_hash.constprop.0+0x1e9/0x440 [ 114.060435][ T6076] kernel_clone+0xfc/0x960 [ 114.060478][ T6076] ? __pfx_kernel_clone+0x10/0x10 [ 114.060542][ T6076] ? 0xffffffff81000000 [ 114.060564][ T6076] __do_sys_clone+0xce/0x120 [ 114.060606][ T6076] ? __pfx___do_sys_clone+0x10/0x10 [ 114.060645][ T6076] ? __pfx_aa_get_newest_label+0x10/0x10 [ 114.060698][ T6076] ? 0xffffffff81000000 [ 114.060737][ T6076] ? xfd_validate_state+0x61/0x180 [ 114.060779][ T6076] ? bpf_lsm_capable+0x9/0x10 [ 114.060833][ T6076] do_syscall_64+0xcd/0x490 [ 114.060887][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.060921][ T6076] RIP: 0033:0x7f419ab8e929 [ 114.060953][ T6076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.060984][ T6076] RSP: 002b:00007f419b971038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 114.061022][ T6076] RAX: ffffffffffffffda RBX: 00007f419adb6080 RCX: 00007f419ab8e929 [ 114.061045][ T6076] RDX: 9999999999999999 RSI: 0000000000000004 RDI: 0008000000000000 [ 114.061066][ T6076] RBP: 00007f419ac10b39 R08: 0000000000000009 R09: 0000000000000000 [ 114.061086][ T6076] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.061112][ T6076] R13: 0000000000000000 R14: 00007f419adb6080 R15: 00007ffe870bea68 [ 114.061141][ T6076] ? 0xffffffff81000000 [ 114.061178][ T6076] [ 114.453239][ T6053] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 114.485724][ T6053] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 114.631731][ T6053] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 114.702730][ T6083] Device name cannot be null; rc = [-22] [ 114.715704][ T6053] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.721961][ T6053] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.735045][ T6053] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.743003][ T6053] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 114.749562][ T6053] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 114.756718][ T6053] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 114.764719][ T6053] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.771215][ T6053] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.851256][ T6053] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.879935][ T6053] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 115.929932][ T5171] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.096290][ T6100] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 116.272910][ T6108] Zero length message leads to an empty skb [ 116.740440][ T5171] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.808762][ T5171] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.812300][ T5856] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.026586][ T5171] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.061030][ T30] audit: type=1800 audit(1752289036.865:3): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.41" name="features" dev="configfs" ino=8100 res=0 errno=0 [ 118.265619][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'. [ 118.809086][ T5171] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.889114][ T5171] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.889124][ T5856] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.088933][ T5171] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.113725][ T6160] random: crng reseeded on system resumption [ 120.329802][ T6151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.410337][ T6151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.888770][ T5171] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.968811][ T5171] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.974968][ T5171] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.309072][ T6181] random: crng reseeded on system resumption [ 122.650269][ T6191] netlink: 20 bytes leftover after parsing attributes in process `syz.3.54'. [ 123.051390][ T5171] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.488968][ T6208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 123.488968][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 123.510032][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 124.100632][ T6187] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 124.305341][ T6218] netlink: 'syz.3.59': attribute type 11 has an invalid length. [ 125.008041][ T5171] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 125.008085][ T5171] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 125.023218][ T5171] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 125.026266][ T5171] Bluetooth: hci3: adv larger than maximum supported [ 125.034735][ T5171] Bluetooth: hci3: adv larger than maximum supported [ 125.041614][ T5171] Bluetooth: hci3: Malformed LE Event: 0x0d [ 125.490964][ T6238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.65'. [ 125.616330][ T6241] FAULT_INJECTION: forcing a failure. [ 125.616330][ T6241] name failslab, interval 1, probability 0, space 0, times 0 [ 125.656685][ T6238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.664515][ T6238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.673531][ T6241] CPU: 1 UID: 0 PID: 6241 Comm: syz.0.65 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 125.673575][ T6241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.673593][ T6241] Call Trace: [ 125.673601][ T6241] [ 125.673609][ T6241] dump_stack_lvl+0x16c/0x1f0 [ 125.673647][ T6241] should_fail_ex+0x512/0x640 [ 125.673681][ T6241] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 125.673715][ T6241] should_failslab+0xc2/0x120 [ 125.673737][ T6241] __kmalloc_cache_noprof+0x6a/0x3e0 [ 125.673767][ T6241] ? lockdep_init_map_type+0x5c/0x280 [ 125.673799][ T6241] ? snd_seq_prioq_new+0x3f/0x110 [ 125.673833][ T6241] snd_seq_prioq_new+0x3f/0x110 [ 125.673862][ T6241] snd_seq_queue_alloc+0x153/0x550 [ 125.673893][ T6241] snd_seq_ioctl_create_queue+0xa9/0x380 [ 125.673949][ T6241] snd_seq_kernel_client_ctl+0x107/0x1c0 [ 125.673975][ T6241] alloc_seq_queue+0xda/0x180 [ 125.673996][ T6241] ? __pfx_alloc_seq_queue+0x10/0x10 [ 125.674035][ T6241] ? mark_held_locks+0x49/0x80 [ 125.674066][ T6241] ? _raw_spin_unlock_irq+0x23/0x50 [ 125.674101][ T6241] snd_seq_oss_open+0x38c/0xa20 [ 125.674131][ T6241] odev_open+0x6f/0x90 [ 125.674165][ T6241] ? __pfx_odev_open+0x10/0x10 [ 125.674201][ T6241] soundcore_open+0x409/0x580 [ 125.674251][ T6241] ? __pfx_soundcore_open+0x10/0x10 [ 125.674285][ T6241] chrdev_open+0x234/0x6a0 [ 125.674320][ T6241] ? __pfx_apparmor_file_open+0x10/0x10 [ 125.674350][ T6241] ? __pfx_chrdev_open+0x10/0x10 [ 125.674400][ T6241] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 125.674437][ T6241] do_dentry_open+0x741/0x1c10 [ 125.674477][ T6241] ? __pfx_chrdev_open+0x10/0x10 [ 125.674536][ T6241] vfs_open+0x82/0x3f0 [ 125.674575][ T6241] path_openat+0x1de4/0x2cb0 [ 125.674636][ T6241] ? __pfx_path_openat+0x10/0x10 [ 125.674688][ T6241] ? __lock_acquire+0xb8a/0x1c90 [ 125.674740][ T6241] do_filp_open+0x20b/0x470 [ 125.674789][ T6241] ? __pfx_do_filp_open+0x10/0x10 [ 125.674865][ T6241] ? alloc_fd+0x471/0x7d0 [ 125.674920][ T6241] do_sys_openat2+0x11b/0x1d0 [ 125.674955][ T6241] ? __pfx_do_sys_openat2+0x10/0x10 [ 125.675007][ T6241] __x64_sys_openat+0x174/0x210 [ 125.675043][ T6241] ? __pfx___x64_sys_openat+0x10/0x10 [ 125.675097][ T6241] do_syscall_64+0xcd/0x490 [ 125.675148][ T6241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.675180][ T6241] RIP: 0033:0x7f6d9a58e929 [ 125.675205][ T6241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.675245][ T6241] RSP: 002b:00007f6d9b41f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 125.675275][ T6241] RAX: ffffffffffffffda RBX: 00007f6d9a7b6080 RCX: 00007f6d9a58e929 [ 125.675295][ T6241] RDX: 0000000000004000 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 125.675315][ T6241] RBP: 00007f6d9a610b39 R08: 0000000000000000 R09: 0000000000000000 [ 125.675335][ T6241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.675353][ T6241] R13: 0000000000000000 R14: 00007f6d9a7b6080 R15: 00007fff4e6d2d38 [ 125.675399][ T6241] [ 126.138809][ T6238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.305842][ T6238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.784690][ T6242] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 127.397363][ T6261] FAULT_INJECTION: forcing a failure. [ 127.397363][ T6261] name failslab, interval 1, probability 0, space 0, times 0 [ 127.412453][ T6261] CPU: 0 UID: 0 PID: 6261 Comm: syz.1.70 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 127.412491][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.412506][ T6261] Call Trace: [ 127.412515][ T6261] [ 127.412525][ T6261] dump_stack_lvl+0x16c/0x1f0 [ 127.412571][ T6261] should_fail_ex+0x512/0x640 [ 127.412609][ T6261] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 127.412656][ T6261] should_failslab+0xc2/0x120 [ 127.412681][ T6261] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 127.412722][ T6261] ? ptlock_alloc+0x1f/0x70 [ 127.412763][ T6261] ptlock_alloc+0x1f/0x70 [ 127.412796][ T6261] pte_alloc_one+0x82/0x3a0 [ 127.412821][ T6261] __pte_alloc+0x6d/0x3c0 [ 127.412849][ T6261] ? __pfx___pte_alloc+0x10/0x10 [ 127.412874][ T6261] ? __pfx___might_resched+0x10/0x10 [ 127.412904][ T6261] ? copy_page_range+0x13f0/0x5740 [ 127.412947][ T6261] copy_page_range+0x1aed/0x5740 [ 127.412993][ T6261] ? __lock_acquire+0x622/0x1c90 [ 127.413063][ T6261] ? __pfx_copy_page_range+0x10/0x10 [ 127.413119][ T6261] ? __pfx___might_resched+0x10/0x10 [ 127.413154][ T6261] ? __vma_enter_locked+0x163/0x3f0 [ 127.413210][ T6261] ? dup_mmap+0xe38/0x21d0 [ 127.413248][ T6261] ? down_write+0x14d/0x200 [ 127.413284][ T6261] ? up_write+0x1b2/0x520 [ 127.413340][ T6261] dup_mmap+0xe88/0x21d0 [ 127.413409][ T6261] ? __pfx_dup_mmap+0x10/0x10 [ 127.413475][ T6261] copy_process+0x4081/0x7650 [ 127.413517][ T6261] ? __pfx___futex_wait+0x10/0x10 [ 127.413578][ T6261] ? __pfx_copy_process+0x10/0x10 [ 127.413620][ T6261] ? kfree+0x24f/0x4d0 [ 127.413664][ T6261] ? __futex_hash.constprop.0+0x1e9/0x440 [ 127.413709][ T6261] kernel_clone+0xfc/0x960 [ 127.413754][ T6261] ? __pfx_kernel_clone+0x10/0x10 [ 127.413815][ T6261] ? 0xffffffff81000000 [ 127.413836][ T6261] __do_sys_clone+0xce/0x120 [ 127.413875][ T6261] ? __pfx___do_sys_clone+0x10/0x10 [ 127.413914][ T6261] ? __pfx_aa_get_newest_label+0x10/0x10 [ 127.413947][ T6261] ? 0xffffffff81000000 [ 127.413982][ T6261] ? xfd_validate_state+0x61/0x180 [ 127.414022][ T6261] ? bpf_lsm_capable+0x9/0x10 [ 127.414075][ T6261] do_syscall_64+0xcd/0x490 [ 127.414126][ T6261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.414186][ T6261] RIP: 0033:0x7fcc7178e929 [ 127.414211][ T6261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.414241][ T6261] RSP: 002b:00007fcc725f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 127.414272][ T6261] RAX: ffffffffffffffda RBX: 00007fcc719b6080 RCX: 00007fcc7178e929 [ 127.414293][ T6261] RDX: 9999999999999999 RSI: 0000000000000004 RDI: 0000000000000000 [ 127.414313][ T6261] RBP: 00007fcc71810b39 R08: 0000000000000009 R09: 0000000000000000 [ 127.414332][ T6261] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.414352][ T6261] R13: 0000000000000000 R14: 00007fcc719b6080 R15: 00007fff70825b48 [ 127.414380][ T6261] ? 0xffffffff81000000 [ 127.414416][ T6261] [ 128.838349][ T6283] FAULT_INJECTION: forcing a failure. [ 128.838349][ T6283] name failslab, interval 1, probability 0, space 0, times 0 [ 128.851917][ T6283] CPU: 1 UID: 0 PID: 6283 Comm: syz.3.72 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 128.851959][ T6283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.851977][ T6283] Call Trace: [ 128.851988][ T6283] [ 128.851999][ T6283] dump_stack_lvl+0x16c/0x1f0 [ 128.852052][ T6283] should_fail_ex+0x512/0x640 [ 128.852112][ T6283] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 128.852164][ T6283] should_failslab+0xc2/0x120 [ 128.852205][ T6283] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 128.852248][ T6283] ? rcu_is_watching+0x12/0xc0 [ 128.852278][ T6283] ? get_random_u64+0x57c/0x7d0 [ 128.852330][ T6283] ? prepare_creds+0x2c/0x7d0 [ 128.852391][ T6283] prepare_creds+0x2c/0x7d0 [ 128.852437][ T6283] copy_creds+0xa7/0xa50 [ 128.852485][ T6283] copy_process+0xff6/0x7650 [ 128.852539][ T6283] ? __pfx_copy_process+0x10/0x10 [ 128.852595][ T6283] kernel_clone+0xfc/0x960 [ 128.852634][ T6283] ? __pfx_kernel_clone+0x10/0x10 [ 128.852686][ T6283] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 128.852735][ T6283] ? 0xffffffff81000000 [ 128.852755][ T6283] __do_sys_clone+0xce/0x120 [ 128.852793][ T6283] ? __pfx___do_sys_clone+0x10/0x10 [ 128.852840][ T6283] ? 0xffffffff81000000 [ 128.852873][ T6283] ? ksys_write+0x1ac/0x250 [ 128.852914][ T6283] ? __pfx_ksys_write+0x10/0x10 [ 128.852968][ T6283] do_syscall_64+0xcd/0x490 [ 128.853015][ T6283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.853044][ T6283] RIP: 0033:0x7f419ab8e929 [ 128.853066][ T6283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.853093][ T6283] RSP: 002b:00007f419b971038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 128.853119][ T6283] RAX: ffffffffffffffda RBX: 00007f419adb6080 RCX: 00007f419ab8e929 [ 128.853138][ T6283] RDX: 9999999999999999 RSI: 0000000000000004 RDI: 0000000000000000 [ 128.853155][ T6283] RBP: 00007f419b971090 R08: 0000000000000009 R09: 0000000000000000 [ 128.853172][ T6283] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.853189][ T6283] R13: 0000000000000000 R14: 00007f419adb6080 R15: 00007ffe870bea68 [ 128.853213][ T6283] ? 0xffffffff81000000 [ 128.853244][ T6283] [ 130.261890][ T6263] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 130.771810][ T6294] vivid-003: ================= START STATUS ================= [ 130.790105][ T6294] vivid-003: Radio HW Seek Mode: Bounded [ 130.811353][ T6294] vivid-003: Radio Programmable HW Seek: false [ 130.824437][ T6294] vivid-003: RDS Rx I/O Mode: Block I/O [ 130.850433][ T6294] vivid-003: Generate RBDS Instead of RDS: false [ 130.871246][ T6294] vivid-003: RDS Reception: true [ 130.876233][ T6294] vivid-003: RDS Program Type: 0 inactive [ 130.892939][ T6294] vivid-003: RDS PS Name: inactive [ 130.902586][ T6294] vivid-003: RDS Radio Text: inactive [ 130.908168][ T6294] vivid-003: RDS Traffic Announcement: false inactive [ 130.929403][ T6294] vivid-003: RDS Traffic Program: false inactive [ 130.935876][ T6294] vivid-003: RDS Music: false inactive [ 130.955171][ T6294] vivid-003: ================== END STATUS ================== [ 130.981217][ T6301] page: refcount:8 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 131.028716][ T6301] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 131.086495][ T6301] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 131.557893][ T6301] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 131.578108][ T6301] raw: ffff888078006000 0000000000000000 00000008ffffffff 0000000000000000 [ 131.608653][ T6301] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 131.617429][ T6301] head: ffff888078006000 0000000000000000 00000008ffffffff 0000000000000000 [ 131.668752][ T6301] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 131.677519][ T6301] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 131.841173][ T6301] page dumped because: unmovable page [ 131.949984][ T6301] page_owner tracks the page as allocated [ 132.032497][ T6301] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5770, tgid 5770 (rm), ts 80541753840, free_ts 80541413458 [ 132.213826][ T6301] post_alloc_hook+0x1c0/0x230 [ 132.223936][ T6301] get_page_from_freelist+0x1321/0x3890 [ 132.243567][ T6301] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 132.290392][ T6301] alloc_pages_mpol+0x1fb/0x550 [ 132.295291][ T6301] alloc_pages_noprof+0x131/0x390 [ 132.304275][ T6301] skb_page_frag_refill+0x186/0x5a0 [ 132.318985][ T6301] try_fill_recv+0x7e4/0x28a0 [ 132.323826][ T6301] virtnet_poll+0x198d/0x3c30 [ 132.435795][ T6301] __napi_poll.constprop.0+0xb7/0x550 [ 132.491847][ T6301] net_rx_action+0xa9f/0xfe0 [ 132.511531][ T6301] handle_softirqs+0x219/0x8e0 [ 132.660543][ T6301] __irq_exit_rcu+0x109/0x170 [ 132.709899][ T6301] irq_exit_rcu+0x9/0x30 [ 132.714247][ T6301] common_interrupt+0xbf/0xe0 [ 132.761070][ T6301] asm_common_interrupt+0x26/0x40 [ 132.798775][ T6301] page last free pid 5770 tgid 5770 stack trace: [ 132.869752][ T6301] __free_frozen_pages+0x7fe/0x1180 [ 132.875064][ T6301] __folio_put+0x329/0x450 [ 132.885202][ T6301] skb_release_data+0x7fb/0x9c0 [ 132.891136][ T6301] napi_consume_skb+0x15a/0x220 [ 132.896461][ T6301] net_rx_action+0x47f/0xfe0 [ 132.904637][ T6301] handle_softirqs+0x219/0x8e0 [ 132.912944][ T6301] __irq_exit_rcu+0x109/0x170 [ 132.921206][ T6301] irq_exit_rcu+0x9/0x30 [ 132.928841][ T6301] common_interrupt+0xbf/0xe0 [ 132.937028][ T6301] asm_common_interrupt+0x26/0x40 [ 133.543294][ T6341] FAULT_INJECTION: forcing a failure. [ 133.543294][ T6341] name failslab, interval 1, probability 0, space 0, times 0 [ 133.589324][ T6341] CPU: 0 UID: 0 PID: 6341 Comm: syz.2.83 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 133.589373][ T6341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.589393][ T6341] Call Trace: [ 133.589403][ T6341] [ 133.589414][ T6341] dump_stack_lvl+0x16c/0x1f0 [ 133.589470][ T6341] should_fail_ex+0x512/0x640 [ 133.589529][ T6341] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 133.589587][ T6341] should_failslab+0xc2/0x120 [ 133.589620][ T6341] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 133.589673][ T6341] ? ptlock_alloc+0x1f/0x70 [ 133.589722][ T6341] ptlock_alloc+0x1f/0x70 [ 133.589765][ T6341] pte_alloc_one+0x82/0x3a0 [ 133.589797][ T6341] __pte_alloc+0x6d/0x3c0 [ 133.589829][ T6341] ? __pfx___pte_alloc+0x10/0x10 [ 133.589861][ T6341] ? __pfx___might_resched+0x10/0x10 [ 133.589898][ T6341] ? copy_page_range+0x13f0/0x5740 [ 133.589947][ T6341] copy_page_range+0x1aed/0x5740 [ 133.590009][ T6341] ? __lock_acquire+0x622/0x1c90 [ 133.590086][ T6341] ? __pfx_copy_page_range+0x10/0x10 [ 133.590143][ T6341] ? __pfx___might_resched+0x10/0x10 [ 133.590184][ T6341] ? __vma_enter_locked+0x163/0x3f0 [ 133.590235][ T6341] ? dup_mmap+0xe38/0x21d0 [ 133.590275][ T6341] ? down_write+0x14d/0x200 [ 133.590310][ T6341] ? up_write+0x1b2/0x520 [ 133.590369][ T6341] dup_mmap+0xe88/0x21d0 [ 133.590427][ T6341] ? __pfx_dup_mmap+0x10/0x10 [ 133.590497][ T6341] copy_process+0x4081/0x7650 [ 133.590552][ T6341] ? __pfx___futex_wait+0x10/0x10 [ 133.590620][ T6341] ? __pfx_copy_process+0x10/0x10 [ 133.590664][ T6341] ? find_held_lock+0x2b/0x80 [ 133.590717][ T6341] kernel_clone+0xfc/0x960 [ 133.590766][ T6341] ? __pfx_kernel_clone+0x10/0x10 [ 133.590834][ T6341] ? 0xffffffff81000000 [ 133.590858][ T6341] __do_sys_clone+0xce/0x120 [ 133.590901][ T6341] ? __pfx___do_sys_clone+0x10/0x10 [ 133.590944][ T6341] ? __pfx_aa_get_newest_label+0x10/0x10 [ 133.590997][ T6341] ? 0xffffffff81000000 [ 133.591037][ T6341] ? xfd_validate_state+0x61/0x180 [ 133.591083][ T6341] ? bpf_lsm_capable+0x9/0x10 [ 133.591141][ T6341] do_syscall_64+0xcd/0x490 [ 133.591198][ T6341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.591233][ T6341] RIP: 0033:0x7f0d1d38e929 [ 133.591259][ T6341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.591291][ T6341] RSP: 002b:00007f0d1e23e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 133.591322][ T6341] RAX: ffffffffffffffda RBX: 00007f0d1d5b6080 RCX: 00007f0d1d38e929 [ 133.591343][ T6341] RDX: 9999999999999999 RSI: 0000000000000004 RDI: 0000000000000000 [ 133.591363][ T6341] RBP: 00007f0d1d410b39 R08: 0000000000000009 R09: 0000000000000000 [ 133.591383][ T6341] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.591403][ T6341] R13: 0000000000000000 R14: 00007f0d1d5b6080 R15: 00007ffeac2d9318 [ 133.591432][ T6341] ? 0xffffffff81000000 [ 133.591469][ T6341] [ 136.563265][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.91'. [ 136.582355][ T6383] FAULT_INJECTION: forcing a failure. [ 136.582355][ T6383] name failslab, interval 1, probability 0, space 0, times 0 [ 136.602848][ T6383] CPU: 0 UID: 0 PID: 6383 Comm: syz.1.93 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 136.602887][ T6383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.602906][ T6383] Call Trace: [ 136.602915][ T6383] [ 136.602926][ T6383] dump_stack_lvl+0x16c/0x1f0 [ 136.602978][ T6383] should_fail_ex+0x512/0x640 [ 136.603021][ T6383] ? __kmalloc_noprof+0xbf/0x510 [ 136.603069][ T6383] ? copy_splice_read+0x1a8/0xba0 [ 136.603096][ T6383] should_failslab+0xc2/0x120 [ 136.603117][ T6383] __kmalloc_noprof+0xd2/0x510 [ 136.603155][ T6383] copy_splice_read+0x1a8/0xba0 [ 136.603183][ T6383] ? __pfx_pipe_to_null+0x10/0x10 [ 136.603207][ T6383] ? __pfx_copy_splice_read+0x10/0x10 [ 136.603232][ T6383] ? pipe_unlock+0x4a/0x70 [ 136.603265][ T6383] ? __pfx_splice_from_pipe+0x10/0x10 [ 136.603301][ T6383] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 136.603333][ T6383] ? __pfx_copy_splice_read+0x10/0x10 [ 136.603362][ T6383] do_splice_read+0x282/0x370 [ 136.603392][ T6383] splice_direct_to_actor+0x2a1/0xa30 [ 136.603423][ T6383] ? __pfx_direct_splice_actor+0x10/0x10 [ 136.603457][ T6383] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 136.603485][ T6383] ? get_pid_task+0xfc/0x250 [ 136.603523][ T6383] do_splice_direct+0x174/0x240 [ 136.603552][ T6383] ? __pfx_do_splice_direct+0x10/0x10 [ 136.603581][ T6383] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 136.603619][ T6383] ? bpf_lsm_file_permission+0x9/0x10 [ 136.603643][ T6383] ? security_file_permission+0x71/0x210 [ 136.603673][ T6383] ? rw_verify_area+0xcf/0x680 [ 136.603704][ T6383] do_sendfile+0xb06/0xe50 [ 136.603742][ T6383] ? __pfx_do_sendfile+0x10/0x10 [ 136.603775][ T6383] ? __fget_files+0x20e/0x3c0 [ 136.603813][ T6383] __x64_sys_sendfile64+0x1d8/0x220 [ 136.603833][ T6383] ? ksys_write+0x1ac/0x250 [ 136.603864][ T6383] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 136.603894][ T6383] do_syscall_64+0xcd/0x490 [ 136.603930][ T6383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.603952][ T6383] RIP: 0033:0x7fcc7178e929 [ 136.603970][ T6383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.603991][ T6383] RSP: 002b:00007fcc725f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 136.604012][ T6383] RAX: ffffffffffffffda RBX: 00007fcc719b6080 RCX: 00007fcc7178e929 [ 136.604026][ T6383] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 136.604039][ T6383] RBP: 00007fcc725f1090 R08: 0000000000000000 R09: 0000000000000000 [ 136.604052][ T6383] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000002 [ 136.604065][ T6383] R13: 0000000000000000 R14: 00007fcc719b6080 R15: 00007fff70825b48 [ 136.604092][ T6383] [ 136.953449][ T6378] netlink: 342 bytes leftover after parsing attributes in process `syz.2.92'. [ 137.324491][ T6378] sctp: failed to load transform for md5: -4 [ 137.857388][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.871369][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.309831][ T6429] [ 139.309844][ T6429] ====================================================== [ 139.309855][ T6429] WARNING: possible circular locking dependency detected [ 139.309866][ T6429] 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 Not tainted [ 139.309884][ T6429] ------------------------------------------------------ [ 139.309895][ T6429] syz.1.102/6429 is trying to acquire lock: [ 139.309910][ T6429] ffff888142f6ad00 (&q->elevator_lock){+.+.}-{4:4}, at: queue_requests_store+0x1c7/0x310 [ 139.309998][ T6429] [ 139.309998][ T6429] but task is already holding lock: [ 139.310007][ T6429] ffff888142f6a7c8 (&q->q_usage_counter(io)#59){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 139.310087][ T6429] [ 139.310087][ T6429] which lock already depends on the new lock. [ 139.310087][ T6429] [ 139.310096][ T6429] [ 139.310096][ T6429] the existing dependency chain (in reverse order) is: [ 139.310106][ T6429] [ 139.310106][ T6429] -> #3 (&q->q_usage_counter(io)#59){++++}-{0:0}: [ 139.310166][ T6429] blk_alloc_queue+0x619/0x760 [ 139.310199][ T6429] blk_mq_alloc_queue+0x175/0x290 [ 139.310239][ T6429] __blk_mq_alloc_disk+0x29/0x120 [ 139.310280][ T6429] nbd_dev_add+0x4a0/0xbc0 [ 139.310321][ T6429] nbd_init+0x181/0x320 [ 139.310358][ T6429] do_one_initcall+0x120/0x6e0 [ 139.310389][ T6429] kernel_init_freeable+0x5c2/0x900 [ 139.310429][ T6429] kernel_init+0x1c/0x2b0 [ 139.310476][ T6429] ret_from_fork+0x5d7/0x6f0 [ 139.310520][ T6429] ret_from_fork_asm+0x1a/0x30 [ 139.310554][ T6429] [ 139.310554][ T6429] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 139.310600][ T6429] fs_reclaim_acquire+0x102/0x150 [ 139.310636][ T6429] prepare_alloc_pages+0x162/0x610 [ 139.310671][ T6429] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 139.310718][ T6429] __alloc_pages_noprof+0xb/0x1b0 [ 139.310773][ T6429] pcpu_populate_chunk+0x110/0xb00 [ 139.310810][ T6429] pcpu_alloc_noprof+0x86a/0x1470 [ 139.310850][ T6429] xt_percpu_counter_alloc+0x13e/0x1b0 [ 139.310885][ T6429] find_check_entry.constprop.0+0xbf/0xa20 [ 139.310921][ T6429] translate_table+0xd0b/0x17b0 [ 139.310954][ T6429] ip6t_register_table+0x102/0x430 [ 139.311006][ T6429] ip6table_mangle_table_init+0x40/0x60 [ 139.311048][ T6429] xt_find_table_lock+0x2e1/0x520 [ 139.311087][ T6429] xt_request_find_table_lock+0x28/0xf0 [ 139.311138][ T6429] get_info+0x190/0x620 [ 139.311170][ T6429] do_ip6t_get_ctl+0x169/0xa50 [ 139.311205][ T6429] nf_getsockopt+0x7c/0xe0 [ 139.311234][ T6429] ipv6_getsockopt+0x1f7/0x280 [ 139.311268][ T6429] tcp_getsockopt+0x9e/0x100 [ 139.311315][ T6429] do_sock_getsockopt+0x3fc/0x800 [ 139.311347][ T6429] __sys_getsockopt+0x123/0x1b0 [ 139.311391][ T6429] __x64_sys_getsockopt+0xbd/0x160 [ 139.311436][ T6429] do_syscall_64+0xcd/0x490 [ 139.311484][ T6429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.311516][ T6429] [ 139.311516][ T6429] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 139.311563][ T6429] __mutex_lock+0x199/0xb90 [ 139.311609][ T6429] pcpu_alloc_noprof+0xb4c/0x1470 [ 139.311653][ T6429] sbitmap_init_node+0x2fd/0x770 [ 139.311685][ T6429] sbitmap_queue_init_node+0x41/0x560 [ 139.311718][ T6429] blk_mq_init_tags+0x12d/0x2b0 [ 139.311766][ T6429] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 139.311810][ T6429] blk_mq_init_sched+0x30c/0x610 [ 139.311843][ T6429] elevator_switch+0x1e1/0x7f0 [ 139.311878][ T6429] elevator_change+0x2ac/0x400 [ 139.311912][ T6429] elevator_set_default+0x292/0x320 [ 139.311950][ T6429] blk_register_queue+0x393/0x4f0 [ 139.311977][ T6429] __add_disk+0x74a/0xf00 [ 139.312018][ T6429] add_disk_fwnode+0x13f/0x5d0 [ 139.312060][ T6429] nbd_dev_add+0x791/0xbc0 [ 139.312105][ T6429] nbd_init+0x181/0x320 [ 139.312153][ T6429] do_one_initcall+0x120/0x6e0 [ 139.312197][ T6429] kernel_init_freeable+0x5c2/0x900 [ 139.312236][ T6429] kernel_init+0x1c/0x2b0 [ 139.312264][ T6429] ret_from_fork+0x5d7/0x6f0 [ 139.312303][ T6429] ret_from_fork_asm+0x1a/0x30 [ 139.312334][ T6429] [ 139.312334][ T6429] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 139.312374][ T6429] __lock_acquire+0x126f/0x1c90 [ 139.312413][ T6429] lock_acquire+0x179/0x350 [ 139.312450][ T6429] __mutex_lock+0x199/0xb90 [ 139.312491][ T6429] queue_requests_store+0x1c7/0x310 [ 139.312536][ T6429] queue_attr_store+0x276/0x320 [ 139.312578][ T6429] sysfs_kf_write+0xef/0x150 [ 139.312611][ T6429] kernfs_fop_write_iter+0x354/0x510 [ 139.312640][ T6429] iter_file_splice_write+0x91f/0x1150 [ 139.312678][ T6429] direct_splice_actor+0x192/0x6c0 [ 139.312714][ T6429] splice_direct_to_actor+0x342/0xa30 [ 139.312750][ T6429] do_splice_direct+0x174/0x240 [ 139.312784][ T6429] do_sendfile+0xb06/0xe50 [ 139.312841][ T6429] __x64_sys_sendfile64+0x1d8/0x220 [ 139.312869][ T6429] do_syscall_64+0xcd/0x490 [ 139.312915][ T6429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.312945][ T6429] [ 139.312945][ T6429] other info that might help us debug this: [ 139.312945][ T6429] [ 139.312955][ T6429] Chain exists of: [ 139.312955][ T6429] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#59 [ 139.312955][ T6429] [ 139.313016][ T6429] Possible unsafe locking scenario: [ 139.313016][ T6429] [ 139.313025][ T6429] CPU0 CPU1 [ 139.313034][ T6429] ---- ---- [ 139.313043][ T6429] lock(&q->q_usage_counter(io)#59); [ 139.313073][ T6429] lock(fs_reclaim); [ 139.313095][ T6429] lock(&q->q_usage_counter(io)#59); [ 139.313133][ T6429] lock(&q->elevator_lock); [ 139.313155][ T6429] [ 139.313155][ T6429] *** DEADLOCK *** [ 139.313155][ T6429] [ 139.313163][ T6429] 5 locks held by syz.1.102/6429: [ 139.313181][ T6429] #0: ffff888036d10428 (sb_writers#7){.+.+}-{0:0}, at: splice_direct_to_actor+0x342/0xa30 [ 139.313287][ T6429] #1: ffff88805bd4bc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 139.313360][ T6429] #2: ffff888026b004b8 (kn->active#83){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 139.313439][ T6429] #3: ffff888142f6a7c8 (&q->q_usage_counter(io)#59){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 139.313526][ T6429] #4: ffff888142f6a800 (&q->q_usage_counter(queue)#11){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 139.313611][ T6429] [ 139.313611][ T6429] stack backtrace: [ 139.313624][ T6429] CPU: 1 UID: 0 PID: 6429 Comm: syz.1.102 Not tainted 6.16.0-rc5-syzkaller-00193-g40f92e79b0aa #0 PREEMPT(full) [ 139.313659][ T6429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 139.313675][ T6429] Call Trace: [ 139.313685][ T6429] [ 139.313696][ T6429] dump_stack_lvl+0x116/0x1f0 [ 139.313740][ T6429] print_circular_bug+0x275/0x350 [ 139.313781][ T6429] check_noncircular+0x14c/0x170 [ 139.313843][ T6429] __lock_acquire+0x126f/0x1c90 [ 139.313890][ T6429] ? __lock_acquire+0xb8a/0x1c90 [ 139.313935][ T6429] lock_acquire+0x179/0x350 [ 139.313977][ T6429] ? queue_requests_store+0x1c7/0x310 [ 139.314030][ T6429] ? __pfx___might_resched+0x10/0x10 [ 139.314064][ T6429] ? do_raw_spin_lock+0x12c/0x2b0 [ 139.314133][ T6429] __mutex_lock+0x199/0xb90 [ 139.314176][ T6429] ? queue_requests_store+0x1c7/0x310 [ 139.314225][ T6429] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 139.314265][ T6429] ? queue_requests_store+0x1c7/0x310 [ 139.314313][ T6429] ? lockdep_hardirqs_on+0x7c/0x110 [ 139.314354][ T6429] ? __pfx___mutex_lock+0x10/0x10 [ 139.314404][ T6429] ? __pfx_autoremove_wake_function+0x10/0x10 [ 139.314447][ T6429] ? queue_requests_store+0x1c7/0x310 [ 139.314493][ T6429] queue_requests_store+0x1c7/0x310 [ 139.314541][ T6429] ? __pfx_queue_requests_store+0x10/0x10 [ 139.314591][ T6429] ? __mutex_trylock_common+0xe9/0x250 [ 139.314633][ T6429] ? __pfx_queue_requests_store+0x10/0x10 [ 139.314681][ T6429] queue_attr_store+0x276/0x320 [ 139.314726][ T6429] ? __pfx_queue_attr_store+0x10/0x10 [ 139.314769][ T6429] ? __lock_acquire+0x622/0x1c90 [ 139.314818][ T6429] ? find_held_lock+0x2b/0x80 [ 139.314848][ T6429] ? sysfs_file_kobj+0xe4/0x290 [ 139.314884][ T6429] ? __pfx_queue_attr_store+0x10/0x10 [ 139.314930][ T6429] sysfs_kf_write+0xef/0x150 [ 139.314965][ T6429] kernfs_fop_write_iter+0x354/0x510 [ 139.314995][ T6429] ? __pfx_sysfs_kf_write+0x10/0x10 [ 139.315030][ T6429] iter_file_splice_write+0x91f/0x1150 [ 139.315081][ T6429] ? __pfx_iter_file_splice_write+0x10/0x10 [ 139.315131][ T6429] ? __pfx_copy_splice_read+0x10/0x10 [ 139.315179][ T6429] ? __pfx_iter_file_splice_write+0x10/0x10 [ 139.315221][ T6429] direct_splice_actor+0x192/0x6c0 [ 139.315262][ T6429] splice_direct_to_actor+0x342/0xa30 [ 139.315301][ T6429] ? __pfx_direct_splice_actor+0x10/0x10 [ 139.315344][ T6429] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 139.315388][ T6429] do_splice_direct+0x174/0x240 [ 139.315425][ T6429] ? __pfx_do_splice_direct+0x10/0x10 [ 139.315463][ T6429] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 139.315503][ T6429] ? rw_verify_area+0xcf/0x680 [ 139.315541][ T6429] do_sendfile+0xb06/0xe50 [ 139.315583][ T6429] ? __pfx_do_sendfile+0x10/0x10 [ 139.315622][ T6429] ? handle_mm_fault+0x2ab/0xd10 [ 139.315662][ T6429] ? __x64_sys_futex+0x1e0/0x4c0 [ 139.315698][ T6429] ? __x64_sys_futex+0x1e9/0x4c0 [ 139.315736][ T6429] __x64_sys_sendfile64+0x1d8/0x220 [ 139.315764][ T6429] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 139.315798][ T6429] do_syscall_64+0xcd/0x490 [ 139.315843][ T6429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.315872][ T6429] RIP: 0033:0x7fcc7178e929 [ 139.315894][ T6429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.315923][ T6429] RSP: 002b:00007fcc72612038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 139.315953][ T6429] RAX: ffffffffffffffda RBX: 00007fcc719b5fa0 RCX: 00007fcc7178e929 [ 139.315986][ T6429] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 139.316004][ T6429] RBP: 00007fcc71810b39 R08: 0000000000000000 R09: 0000000000000000 [ 139.316039][ T6429] R10: 0000000000000200 R11: 0000000000000246 R12: 0000000000000000 [ 139.316058][ T6429] R13: 0000000000000000 R14: 00007fcc719b5fa0 R15: 00007fff70825b48 [ 139.316089][ T6429] [ 139.494919][ T6394] x86/mm: Checked W+X mappings: passed, no W+X pages found.