last executing test programs: 2m16.930840586s ago: executing program 32 (id=637): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/mcfilter\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf250600000020000180140001005e1f970f497f9f23d63e72850177cde9060002002d00000056eb69137a2b50e3f100f50a653207598f4395c685dcad7f3772e8dec00b93dc0fb45c532f2aa52ff8cb965b8eee69706cf4002c51065a50585c"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$auto_proc_pagemap_operations_internal(r0, &(0x7f0000001540)=""/209, 0xd1) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x8, 0x2, 0xcb64, 0xeb1, 0xffffffffffffffff, 0x7ffd) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) socket(0xa, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_hsr(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_LIST(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) socket(0xa, 0x1, 0x84) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vbi28\x00', 0x0, 0x0) r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r5, 0x0, 0x400018) ioctl$auto(0x3, 0x4020565a, 0x38) ioctl$auto(0x3, 0x4020565b, 0x38) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/028/001\x00', 0x86100, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000080)="2d296699eb5df9d24db978ee2ae789f693d6325d33d31c0a16", 0x19) 2m16.495358059s ago: executing program 33 (id=638): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x80000000, 0x7fffffffffffffff, 0xa) timer_create$auto(0x2, 0x0, 0x0) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000140)=0x5) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) write$auto(r0, 0x0, 0x81) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfsd.fh/channel\x00', 0x88400, 0x0) sendfile$auto(r0, r0, 0x0, 0x101) unshare$auto(0x20000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) ustat$auto(0x801, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r1 = socket(0x2, 0x802, 0x1) setsockopt$auto_SO_WIFI_STATUS(r1, 0x0, 0x30, 0x0, 0x1bb) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x48040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x40146f29, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x10040026f34, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto_v4l2_fops_v4l2_dev(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc, 0x10010, r3, 0x0) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_TXSA(0xffffffffffffffff, 0x0, 0x400c8d4) madvise$auto(0x0, 0xffffffffffff0005, 0x19) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) 2m8.340308182s ago: executing program 2 (id=689): mmap$auto(0x0, 0x8, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, 0x0, 0x2a801, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r0, 0x0, 0x1ff) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) clone$auto(0x2, 0xfffffffffffffc4d, 0x0, 0x0, 0xa00) 2m7.625171889s ago: executing program 2 (id=691): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r2) sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, r3, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) open(0x0, 0x4140, 0x0) read$auto(r0, 0x0, 0xa03f) getcwd$auto(0x0, 0xffffffffffffffff) r4 = socket(0x8, 0xa, 0x1) r5 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000001c0), r4) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r5, 0x20, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/hugepages-16kB/stats/nr_anon\x00', 0x0, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r6, 0x1, 0x10, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) 2m5.861384362s ago: executing program 2 (id=694): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.cpu/memory.stat\x00', 0x80200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001080)=""/98, 0x62) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000ec0)=""/4096, 0x1000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/pagemap\x00', 0x440400, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x3, 0x1ff, 0x3d7e, 0x8, 0x1, 0x4, 0x0}}, 0x96) mmap$auto(0xffffffffffffffaf, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0xdf, 0x20ebf, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) dup$auto(0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r4, 0x0, 0x400100000001, 0x1ff) r5 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/loadavg\x00', 0x202, 0x0) write$auto(r5, 0x0, 0x5) unshare$auto(0x40000080) socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) ioctl$auto(r6, 0x5427, 0xffffffffffffffff) shmctl$auto_SHM_LOCK(0x4, 0xb, &(0x7f00000004c0)={{0x5, 0x0, 0xffffffffffffffff, 0x7, 0x6, 0x76c, 0x6}, 0x7, 0x8, 0x6, 0x2, @raw=0xffff, @raw=0x9, 0xef, 0x0, &(0x7f0000000300)="2f161c5b1f3f51021a6f8e06d186a750dd088d5505ba035cda9fe6e082e8a751c0737af62eed3b140db056fa8e578fbcfea0519ba94e7d6b464f9416b5a4b5221ef7f1ba2db7a7496645f4df99c6ce0e535c212f465967cdd77a60e0c9e9e270135635bd2b217eafbd7cddc16c8ed951bb7bc3bc050baddedb90c449a9037d7a258f4cc1c02879dd3e707a2d7d7ef6d3b34634fe035434e43be6e83d686c72ef59e648094f8a3ea22ed4889368059dd8bc79f4fa5da652d8d7d3c444970923", &(0x7f00000003c0)="f6891e39b87920ddefc70589c62a01fa38a18acba2d4a2c06de063e265401bd552d52aa4371fce250506db3ee60eaae47285b518741a4b1d83d97427b08fc944c6d08ac9644bc05ebc13fce336c26f36b3a1cc19d59451249ee587a206615c8f1d4774def39a230698df3d7a3266d97ea0e637a37fd2ce1e03f12d1bd643fafa7d7cdfaf2382edc2adc33d336f72a8f1b6f2fd69a2d4fdc38c8b82f376cfb7af31b998981ee3447e8194af67c4e90fc4c4f20af9a5008208fba021a3e9646efc5336945cc56421d38c04f550e3f327f3cd413bf702a57234"}) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, r7, 0x0, 0x0, 0xac, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0xffffffffffffffff, 0x6, 0x5, 0x200000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES16=r3], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) 1m56.983447051s ago: executing program 5 (id=711): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd=r1}, 0xa3) bpf$auto(0xfffffffd, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec4\x00', 0x800, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r2, 0x28000) madvise$auto(0x0, 0x2000040080000004, 0xe) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x808) getrlimit$auto(0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r3 = ioctl$auto_TUNSETSNDBUF2(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)=0xb) mmap$auto(0x6, 0x2020009, 0x5, 0xeb1, r3, 0x8000) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, 0x0, 0xc800) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff034}}) write$auto(r5, 0x0, 0x6) 1m56.28320356s ago: executing program 5 (id=713): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) mmap$auto(0x0, 0x202000d, 0x6, 0x16, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0xfffffffe, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x430740, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b73, r0, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) fcntl$auto(r1, 0x80000001, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYBLOB="20002bbd7000fbdbdf257a000000060066004e24000004000501040087b7538a4794c2002500430031924ebda1caf58ee53ad1afc276c6e21e7a35768f899344e991e374111f3081ffaba8a74fdc72e1000000060012014eff000008006100ffffffff1300240042e28b6e759cde6edf63616bb99f14ffdfbc4155c7c03d8edd37e614f4c75d5e3a12066f545b1457d54c5612ab03d24272"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$auto(0x0, 0xfffffffffffffffb, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xfffffffffffffffd, 0x2000b, 0xa169, 0x16, r1, 0x3) mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u5f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x440c0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7ffffffff000}, 0xc) mmap$auto(0x2000, 0x80009, 0xb, 0x8000000008011, r0, 0x0) r2 = getpid() process_vm_readv$auto(r2, 0x0, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='.'], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1m53.84173917s ago: executing program 5 (id=719): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), r0) ioctl$auto_BLKTRACESETUP32(r0, 0xc0401273, &(0x7f00000001c0)={"7394d5a3f82abe946c61e74ae26c51643c363c5ebf7ae341ed165f3d041cde02", 0x7, 0x10, 0x8001, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$auto_NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f00000021c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002180)={&(0x7f0000002200)=ANY=[@ANYBLOB="60130000", @ANYRES16=r1, @ANYBLOB="00042cbd7000fddbdf251c0000004c1313804b00008008007200", @ANYRES32=r0, @ANYBLOB="080039006a6ad7646b5ff1cabec2e4891dbb0e9e123743a94e65a4fcb26d9cc7f4857204220cc0f4478b27c6fe693a56217ff5c7b4d8f4ed8f4956a71a7814492c34538e7c74fb412dfa80485dd7702beba4b061bb3ec6eb2ecadb28c77cbab50fbcc871ebd6c7af72e0a59cfbd6a889b9", @ANYRES32=r2, @ANYBLOB="040091800400fc807f29d3348555caea912b350112497d84e9c00950fc4a8d6b647c7ebed6e9a1825fdcaf6bcf23684fde9f8c61395cb200a3002a800900bb002f3a215c00000000332f54ed5b22e23ff3abaf35e7ef1376d5494512a8fc64b0c5c36ee93c2e5d0a7ca941782d7d1579d69a3e5d1ad20a0322603bbb73bebf3baf64e66c2c05715cfaa774b015325a26f069d202b95ae3d1b7ac7991dc269c15bec65831805786a96e9377bce626e50202cd7c5edf9e1beb9ad4b76fb16d5164e3c2b318428c7b3e08547ea287e055b28bab121c804c2fbf5abb34005512358004003300080064000800000008009100", @ANYRES32=r0, @ANYBLOB="c18968ef84d647564ea3799bc7cfa38cf0da1411ead2da9436c1fdb661ae3f23a91a8a8cfd944227925065522ba1eda290b1cdd5d704e36b6906be7b3f916317775483f164f1b06ca09dc774cdc52442f59db13e10b02e32ae1ee45620b5e4520969dcd42a35bf7b9d876349475d7bf385ec5f3f05e84a386629dfb964e0b4e6b3c65cdfbd2a0564d3f38617cc47a495cb2772dbfff9cdf7d0637ff6c87f7572f843ba27dc10281547f33b50966dd3cbe1884ed6e93217a0d7047bf74789ded205a88a845c5b221c258d65ecc3ea66689579d1ee99d2c17053a1c6aad1744dd898b0dae4f6eaa89220cd462218f8bd041f84a9aedb356215980c3070329131d640ca4a10b0c07c09e6fc3ec43a96400989dd769b97e1344b192aa90a2be82961a98fc410e199503d9d30de17759091421ab7b2c3c1516585eaa7f68c7ecdc5b2df1e5588cc2b7356bac6ccfdc894f61359db057410494f099797351402e282feea9bc32e4e2341ab6509438a875f2adcef8698fdee534758f0df1ec2d5587e0b30257e9ceae91176ef7bf813e33ba0217ec1fd1eb11408da762a431deddaddd06e40b0be9065baa0ae53d3fc1fb37071373c55e7c253a40e0e5a999034079dfb0c9625e17b8643308168a3848547b6bebdde824b8cef2746c0d094a213e22756f88baf9087c884221e317ae2e050559601c9f8ed760e7eace53e049292a65d3e7270e98d708e4da4a1144a39c5b133b9b7967cd5bbc2dcfc5615bb987f6e145eb8b05c3893eaf6301c6ed88325996b380170b59279eb852cd79aa4e8628d9ab7aec4760923f8663fb67724d099720629ed6b94b250d37fe2dab426bcbe52fce59830225bc2b3c3ebd0673bc205ddf693e9bd7657641021f80d14486733a2e9b7da83c8bf8f3fb99a8392ccc052862554e33408ea05f0a88db580df108b38be92856f7169bf4edb7ca73b4f86138a8b1ce11f6ee26dae4a10c0633726058890459c6cfcd1844ab6ed556bd68d162066dc01f5e15e47a466fd95611d8a374ca3957ce8e4e71e7f753e130874296d3a540355f158a760ea487beb9da6eddb230a7c7311f20e34694ace425311d0741af43428a5878a64740a45eb2bf21d3e6e3bb81512b898fa4828c8bf417c242ef94003f78a72cc8b35b1a00291bbb11bd574502fec1847b24632a845cf5892d6ef92ba3b5872523f850eff4be6e75662ca4946f3387b4572cddd66de18786052ff5b86c30ecbba3cf7ffdd15797167ab2f3e9f23adcd57f1b44ebe28ec2bbef8c5e5036f8c478910f5c4a342791e4b8e1839057338bcd51679476353827ea7a4814c186d8be382b30e577314dd4f5268958975b7a44dbd06ae5aaf1904eebf8530657fcb346aea24cba2a7cd742dace6942c96018091cc48591a55798e7501c5d86d2256790695fc275aeb69572562044b0bc24305b0e80d1a8bf6cfbe99c6a14b9541b9c8f8b561d9775829dce346d7111601ca4d860311a8a58bae8eaf7764f42cf897985e4587228fe99954e48f06554f388ea71af9941058cfd27c739b01716c751a28d98e5631f218e64a61ea38332e052b25e5e2e18d2ab0139620ac07968300dc700e36084ec9347b9ab1f8cf675d13371f465fa533281c4beefc960116683f10d83f464377e12558ccd58e4b937c93c7e6956b8277347a1a664ab7bd9442277107ea0da9955c2117793e3cf9a167e44890e7a63676f927da50a0552f5e2872322dfcb2ce27a668c4616c22626ee83f0394f4fa29dd662639993480330ce80fca0a6a97bcf0e7d0d6589e003a846bf392c8e3c5e4d7a30227b8dd38ed8f68ede2b1e81e97572b4c5906e59f4e319131aeb5997dff18c7cdc3006af9663dee17f6abaccea777a53bedcb18e7c30889a8e07b807dc5fd61a3f10e7e52ca5a59a429e74e7be4dc8b436c79694fbf0beedf870c360ef8a000346bf81ad6052d6756aab3af4a56ebd216db06b35e1a434e99139508097f31178975f8bedff10f6a559ea9ebd29557d42aad069f186c7566972c281ff28c751f27f4b15fab7ede4db8ec3938d5f19177806101bcad8107db3560ec4d5cda86fb3b3990da913c55272af3134b249d35530fa14bb74b846dfe4c1fff84ed661ce5cf54ef2065e7477258cb4b1d05efed81a8a058e5c3996c115b4787e0801004533b5254ff4282869cd87f764a96d43c4ab8e0760a46cd76051f912f6eefccf207445148c66ad0b4b15d6618a0be49a2c09441f1ac508e93d4ef978877f428c2cd1ec963cddebf312ae021e7117ca420e9cafa1670829dd61d9caadacf5b966fd35a01063f0b9a544da7a780c198e770f829104f3ef1e71b2f32a431b6c0f2fc7781a48b7d1853463ce53171db902b0e1ab1de5988c5354047f9fdb9a280e2ed26a6a621a1a08ad8eb80bf06b775247e8e0671569c97dface478ddd21c19621b418b1781aec4430507b8a56e2355aba4ba77d5eb88aaf89a695e493a73f158c5529efd9ee2b861edad0e245f46c76448413e9b297d6cf864db3a3e61b6a07c24689c0eea0fa358db948363329489166d256ab59191f9e4e96be469671c810ccd64250880cc39a4f6e8374d8de13c16735acba6bd6a28d9b8f3b5f15b12c99cafc9fa2e7672df5c76a29ffa021f34e41092a476686307622a25bca805adf65447231082d84f5d1105c3ff4d93f867b3c1bb2d61e6a58e3c2c86fb5d41fdc1b0af3ebc297b49a52fd53325de50ff5d379738654cbd724120dcef1d61b2eea08e8cb10bbf5cac521f8ee571e04b34865d6d30931f107060ac78b8728df614b01524b3f9ff8b2ca1c547038e2b8d1c730535311d91cae0c808929e1b4eae77a387c32e306f94ca79ba63f00708350c08482cefffa49cb74e2ec884d9374451d23d846f36f0fad5fc4a461dc7747736a731f4a5ca9ecb9791aa3311f56fb08f6f0f12a85ffa9022ce4e0b135ff8b48bb9b760dc0570c0cb51a7a3430737d27b4859fc42afbbc62352704c11bf000f6002b71d57695213390c4c6ed2ea26da833038374be5f976abe58efe03a432f39b81329f0003878d1f1cd31625542fbc82c559ba060c7528517542ee89ed13fdff476471437faed5cbd73803c5cbae5544282004b601c8199b32734bbc1104732e93c07757ac212fde49293d2a8f4cafa7caf630c832995e1c0bb5f9205ff34f8efc200e4dc4493d7d14bdf479a8c0e14d0f6f7db6d6a80fe3330f4478d08d293fa3b1a1740c89f85900b9025cedc0abb6eff56fd29621463c4127194844e0efba7551cc8be18c8c92b4a82ebefb99909099c3737fbc4c4c90db96b2ecb66393063b13ca897e4a823a1b68b86a5d996ba5e37f09fedaa352782d3e54b268667d9ae0909a3bded839321cb64b864f20b7afdd2620b9665361b691e7e0f1351dbb63999d5ea201778a708fcff9e26d0b4f74a84f96c4088453c7c313bb4e73e210f99939b486accadf502b2e36a37b4826c79cf62d6b71f621b5274edba3c0cecd8a2938b3a92c6a2c21fe5c98086516b16983dae388da85718def4fec3c782345175a8cb15d29193fec59373cf47da1f1103fab5ecb773f92e2ace9f11a57f9bf3f85a6a7e203931a500310ff61d9827ccace3063ad3368354a798f9f743c39f531135d2603f2a791a7e9b9df8cd63af49fd09a04c58a6db92d57fbacbdea88b60396cef49010872c15986d34cd3b65db368efe42faf91215fcf57e59bf7393a674ee0f6f09a3765ba1a7f5c32ee9acb850d86500d02bd9ae357d62d412fbc6575fe0d1cbea5831ebf260c5f8d661e6ac2a73ab46bd9c919959be9be358db2197092c082c9b34c84fa56e6756c386455e5952967c634273ee31c1773ff5a48aa8287eb94e96bd84302d019620c6c99a51fec3608499a2a31512affc603d3b58b1329b22dbe70f67a48d600675416b35a60a711592bed2516bb52f47c129087aa13875b0efde794d0a6a1bb0afbcc8ad3ee85f895ca9ab1d2f4dc44fcd10664db10f8a468810cf63467f73b6ba2fc0ece0c0284325589d51c39d5de2d93f8025c9f1c0dee8c90fc7eaceeb4c75547dccd5c5731385ca391f6a6024dce5055a65a57fe82f724e84f16c15b6f7db46801e49966a5de2062aeab39cc8c03e070ed8672ea1a4f0e25db76b62deac21cfac8b57f12254508736a4c1c68913b2af39f5ede73e3d35c4071fccb5c2760541f246c77b883507063f87417de3c319be2a04df3eeaedd15a3c7ba60ae80cfe8f165b3a854e9f73b5ea1e3bc215e28856e384feea9c210285102d13a4e1a9dfcd498acd598231e7e36b632e68a11c54e8237c2e3f44259b3f88b1a296e465eb3d722e413d2fa21b61d59a0232b9f6546f8a9637672013328914d73e2eaa5d57322617b634ea6ece629640f036cf60f2325205033b4cd9a04f71dc3d1cd59ad757e07136099d1fa95f08a2aa97b8dc66cc4d3d0c5b6c1bf6885e54706e70243ebf87d72f73af4cdda6b7ba3ce5a5556b178075505df39060d5adbc929c56a74d1442037837c8a6697a4f17e5c35e8a6a0c58628fedc017e4610e63b95934bee1ed15152c7be680372ed71d1cc1331b3679d499bbb58bf73fab7c9a28e972a7f2026be254b7a3ebbefd33ebb0236dbc1ff9556ebb1a571a89cbe6d5119c880db8e93d90ae7195e2df9f16aa86d240c501baefe193f962aecd1cacbb089dd0f8e0da2d82d581d5c089ddb276e3630e235b8fc71a56c0f77e39d9e606c703c8dabd1d0adb94fbc8a4acd52c29e9ed2a0a9b928bd84a5257c555deca3bcd513c44a15e67f8107550df9773a1dc916d6497c4dfd182a9abb98cfe23ad130cc64867992e7a8c256ce4c9c5a1a58ea134bd3e34a50d39e6bab9375cac09fe39b09b5f842c04603578a019e9fd26715aef7f30e7cd3a0cf53916b06f79423ae5d00fd3dee7d82e28020145e21d8079c3de361ac33b52ba9414ab59cebb204333d2b90e62b6971e2f25136dfd6a952f37f1a9b1ae01dbd210f65b93cd1cb49f4d8fd08f8ccc85ad60de6fa8a1c070a89c9baf3abdf2df2b77ecafcba6e6bfe25f48494606f401b75c1b2f69b40ca3ee38ec60e9b70adf0dc0c06ea71ac6595981cb700db371eb01a0a45f6a3323f821c8dce55130a0a209c6301cca29bc023fceca960ad8e41c5932cd833ea8c142f9a46f6e912dc5db9638549aec1e2024447375d24fd4360d13bfd94ed5edd4bdaf45c5bd9cd723c4b2f3457f1753d978e3bc4b9215715bbdc36ed029889af3ecfa3409108e92d732089c825141685bda638e2f895687c83e70159259c010771bedd29dad759f2c25e489951ef7cd4172f1e7340275d94a13822e446088ff86755c29d8272526e22be77b22b57342ab2628cc8d99f7c5f104540ad99cc50e1d339a63ab193a9be52f159b20f55309b0232902d0599028d3070ba65e6de6f97e04dba493647fbfda8dbc6ce7136e1531a7ccd7aa9352ec22ec33c564ab2ca44eb10a7cee888f0708e0a61cf8bee9361af80abe51ea9e3a6e30517a5c12fb6a406688120e9098c4c7c6b053947b515a557c4b9674674e6c5a47b1170d1424cad19708a881992dde9c5163d3b65787afd4da85b30e9f7abae1ff59adbbea2bec7f0261d1e7552da7fd340716c5957e66642eba4b714eb1edfacf427dec61e9b40a376bd1f3c64d35584ae81ccf1f57e3bd8b27b31b0546a41ab84a516e5ee39973cf1326a572371ae684f93de77cbd340984af0cc538ac512a43615f1b3b9e71691d81174bbd80c4fffef98d208a0c3f5058196a737ff822741357189c66d8718a29e70839ea1ccc7b8d9c1f52b73ca21ac237ad5da1c73656f9bce1805511d8ab61debe815c4253c8f5fd2a20f8794959eeff994d7d155b8cb640848ca060a9a6c395a56d8ba8901999a83e2927b9e22923c5d15b54968dc57e22cc83fe305dfe44b437f75d1f584b68087186b52feb232a18d4188e4c9fc99ef20832218baaa7f5a262985fd01b5deac589c98614e8eebfd12c68f12e12c45667d59a043e40a85dd229b9037b76c890079718d9800ad84eabe1a3429b83426b09c26aa40d2ba16dd0ed70b7dc6969ccac90d086b1bc11578c5eb8bae493d7aaf2c9666f17b12003b8b91c53ca8384b15da4f94bcdabb0a1a145480370138ce6e19b845a3e2ab617e91e2547599dec36943419e37b111c0aafc467dffdbbe180dab7c21876eb0fd583c8a9613e74df97f398bdffd32d6c57792134581c00d7c6e606967df352abb28719fb8aa151607adfaa10cdd0c566fefeb37b97244007ab102138e604c75836da13711a82eb09e0f1136105cb1b5fcb4a4a42457f2d6c1db3597e9d2ea7075da895558070bbeac71c57a6a3b1b3f34d369a3f4bae65229cc5f0544e77d1e0bc01b6f5d875aafc50eb5f93bcf4f346910870d6be7aa815ac3ca351a1e1f62d7bd12137d5a63fbf1af253040044807bfb7231bf732874b4e662e1c7dfc0b75ee5d67bdfdb4f2a07ce41c553c6afcb449b11af31b79e9f77eed69d93ec8ce2ab3ec4580f82f145bc5e8d39dd92aa0b4b192ea7e9f7a2b78f42c9abebd93aa35e3e0fc146c883b04882d5f2ecc29d901b366501da80ea000000"], 0x1360}, 0x1, 0x0, 0x0, 0x4040004}, 0x8850) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x8, r2, 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket(0x28, 0x801, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc40, 0x0) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x208002, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x8000, 0x0) socketpair$auto(0x1e, 0x800003, 0x8000000000000000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x0, 0x0) socket(0x2b, 0x6, 0x0) socket(0xa, 0x80803, 0x6) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) epoll_create$auto(0x8800001) 1m53.823939049s ago: executing program 4 (id=720): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r2) sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, r3, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) open(0x0, 0x4140, 0x0) read$auto(r0, 0x0, 0xa03f) getcwd$auto(0x0, 0xffffffffffffffff) r4 = socket(0x8, 0xa, 0x1) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000001c0), r4) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2a2124c4}, 0xc, 0x0}, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/hugepages-16kB/stats/nr_anon\x00', 0x0, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r5, 0x1, 0x10, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) 1m52.438830483s ago: executing program 5 (id=722): mmap$auto(0x0, 0x1ff, 0xa, 0x1000000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x2000, 0x0) r0 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x2000000006, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x9, 0x0) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) read$auto(r2, &(0x7f0000000000)='\x00', 0x91e2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x201, 0x0) memfd_secret$auto(0x0) close_range$auto(0x2, 0xa, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(r3, &(0x7f0000001800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000017c0)={&(0x7f0000000440)={0x9e4, r4, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x9ce, 0x84, 0x0, 0x1, [@generic="4c5c132ca162fd2b313ca4558e818e2cd2cabbd66b27dcf01a01ab8ca3b542b1b7128118e4cfc0ef16833551e49254f02b5c3bb9e48a05aee9775c086827588c11a3945eebb359763b84abdaa0bfc92ac5a64bf2461b14af7287885f6146ed7b467e5175a82d2f6305af7dbfbc4002b0cbac11aaa1fa9c194286a58f89cf297f312f5ee51a33c5d42056de9079ddc3842b87df6a7a", @nested={0x139, 0x5d, 0x0, 0x1, [@nested={0x4, 0x3f}, @nested={0x4, 0x62}, @generic="84e425ee709322cedccfddefec4759c3433e37d5454743a368ad944ca50a9c0a18f255cbba1a757f467cf5f8bc7ce5ff44ba8d", @generic="99f4fc5278b7d3feaa82d1278c9f59110ea7184a03fff85c8e066a0ccfebb5a0b2eec175db46b268ed6530ee2da40306b0456a324caf9c0eb2370dd7a6fd8cf8e80832c81f43e7a472307c3b2a23dcaafdc5dfff948505e6e9eb105f6d4331769af508632b44da40ab9be0e0ba32f7c3cfff9cc3ff9782e185d20044313334bd5ae347ea013effd60a0963a61b1776c4a75b13254d52cd665430c0186c3a980606f95ce42b10b1cecab64dc5669380b3456881e3319bf0e79154d25998892cec58c19b4d88f7aad8bdfd6383341f1af583d4e9117ed95bef480f9edfac8877d5a2e918e68966", @nested={0x4, 0x24}, @nested={0x4, 0xab}, @typed={0x8, 0x11, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x6d}]}, @generic="f8792951695b56fc4c3f81880cb2f05adea98fc942002d5f866e88bf6e9d81232d8949126e20720f9346897c8d3603a50445e020e98e33453de2ccda6d5205ec616932b2dfd7358584b5be9084fceae428e066521800a4cc694a15e74c00370066020d1536e6c29f7d68589adc3333266a620f6a69e1b4a022607919c54af4a19e30eea5f3428bb66008269f23e1c93d2a31b38ee926c0b0b2b0e9c914e0d5641ccfecbd933f172299f6801af5103e3b46501a038044cee5aff97dd90b76eda6ad22ecb4ca463834e388f9c975542d658943a68e28f5988b3fa14cd8ae036776fede98b3947460bb8e669b72a85ee1d496f4b6206438cbb090781e2bc9202417396918d2d5a8e1a565b443e427c9142206239c06fc662035fce1c4876ff59e01b94becc13fdcf535c2b2b262001a386104e7bb40d63d200fd392de0c5e130803e9367815dd43717b303e20ccb0775b69927d81a977873349abd2078bf6d92daafd951afe581ff901b0945bc6b516b685c5cd958dc97c4f4482af0448826e88057f02ec3c57c1a24feeab5723f282475725d34f099a761674c8dee1828f6bf1671cd7ba2a638c0fd9963b17cfcd4f73b71b537659a26e3955f355693983e9ff43e5eee7891478ec0e0ea18419598b49d906fba89b41e66b0e3dd66b4e5e2d9a3929a899aa81fdd86c851c6ed3eacfe2008c762a95274e61c1f003510fa7cbb1dc23df59856f046bcf35ad07af192b13ba8a534dc5160d39f1e75a2aed8fba2bcb2a3b3b83f76f5bbe83dc3339e87ae7acaeb83faf323af6808a82f123dea4c2fe73214643c61b9b4c7e624d4cfa6775cb1f2f1338ee50e0067a2dc177b0574254e2bcceea04cd837f882d5a133de7330c548d5f5dff867e7f6f3954c9633639e40e0edf03ae3b8ce28a0b2b927f86138d4a5f23d5ca8a07e032ba85c476f86ea9c158852fe1d0fc9b29866e657f79501a488229d22a08587824ac2263cf054fdab92869ac3f650db6bd4cf0466db60f6aa5f559506ac8180f6e87ba4a634d2ce80af4a09bdecc9ccb1664758e30286ac46bdd3683d041ae8a1d6fe683b4bf34fecf7933bdd53e71fbb8701d4720e507f72d3ee2dac93de91ac9b386132506d1c1dc7607170c4f411d79e1249f41bc20b50ed1ca63798ffb9b60cfb5e23d50f0e58b466cd32492f584e726f59981bf7859f32942ab7b92cc2cc59c8d166d1e7eaf343701e8e0cff646babd12e840c47a48777ec2ca51250380604db5c908dbe8ed57414e9e3af4bc4031219b54e39c983ecbc94fb541cf4b5f75691889a6888afdc3c37401183c05371e5287363cd16101264201fcb61419a86d3011653ead244eaf628082f12409090d7f72d879868a15a74fb633298fa99066c29472b4f6bc8f6d9131b0120d1806bac6abadcdaba551bb59fd3a11f54164aaf7e705fa218f869c25079a0fdf1b45c6343eb4d227774f5245d2d52b0e93645021aaa1312028ece614c7f752b54cf8bb4dccdf9e6fe0d8bc841149fe775d7ff3e53082ccdbf64a5da87b4b6151fc81b8cea39fb11f507d5bb5dc93218554e58839369c64329c9b384dafb1afe66101d9cd4ca64181d9080282fc18f61ac1dda0e4aaa1a36c90a484b202b93aade3865d94879d44ef8896a697f081d8307546c3234579f8a69b0b5f120c15d1dc1cc9c1c2b612f01c54a92cd6fb6251f8428064e0c9378d7e2643bef42d06ca3a93a2d5c8444f4c72b978db0ebf800870a479426149d60fb36a99238653656eb571349c915514f9c88307ee9067fc3b19ed4bc1408b21a53c5466a94089de0a0e906aeb195d677f4b3bd708c5f832a2675840f1e8970eb922023078bcf2123b39c551b040681857408acee13f6532c06ac5bb8076982f2cca57eacc5d20f0169b4374e4697460ab37a06127942b4b8d0fdc19f09e52585fe61e20f68f73b1d292800d56a68056826b2acad91a2778ef99012ab45fe072ad1342b67e0a9a086837373bbec583eb5dc3219e754e167b49364843561276c5ee35d514dd126a1414ceb55d6db8bcc63971ff8e35a1bd88a79d08e1664ed823316fcb88e02ebedb32473efc3e76c80afb07c69dc281bf7f2ccebaf4ef8b924c2b356010b92aadfa75c4b1d69bddb62d73a7f13562733c9434ba15e79db41bfb9d83c546ca63927f3841510c9e4877c7f3063d7aa8ab3d3ff324b6fd9afd7e9c14a399eb3a8947ea56ac7165c064c111944437a9802fef1ca1e4c92b1445b21c0e13d0f76012f0783fd97180822b2365dbd11b1244ca9831e557ffed6ccb6f6e823abd3c872f2f3a2ba954a24d2f522480d6357166c9659fbf66f7d02f0047b177ab5810dea1117a2e3c91bc78813f7ee18debff3b90539880c6b72a20ee4850c7540e7f47f09a77cd46b70112fab228e43eb231cabaa68b9a68b43d97a35521f9d60d37dbe4536c6f099fe2aeb3f41aa50a77cd0bdd47b4f6f425dfe1e8176b768bac4a50c53afa2c0f5517887628d63cb4cc06a7aaac862aea0b74f9e057afd30eb250", @generic="a7c55f557e762b19b0b6cb6d0434dc99fd80aaec48519daa81049c29a66fdd1928b6272eb1d6dcd3a7ef0eafbcdaa72042559043033316de92c3155b47a3a21ebe3d9791860120aa5061e41c3195d82e5ca29beccc33c5261ce1357db4ccab266802e86624aeb241ac6609c35e3a0d115f1094b4cc73c5a32730ca3810d7cf0d0d5602283436c8e47a511ccf109dd3925f14c7f42c1cac8bb0bdd12a45262578def70f0f01ee8dd322f6f8575e6fe81aad145c71f2a14ec3f2922d08b5b4b13f3c420fc62a043179c11c25dfd11ca45b197dafe45d835f80e31b27d1511645b514", @typed={0x8, 0xf8, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x105, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x108, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}, 0x9e4}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) socket(0x2, 0x801, 0x106) 1m52.389118585s ago: executing program 4 (id=723): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\xf6\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r1) sendmsg$auto_IPVS_CMD_GET_DEST(r1, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, r2, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010) getcwd$auto(0x0, 0xffffffffffffffff) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) mprotect$auto(0x0, 0x8000000000000001, 0x8) 1m49.918221701s ago: executing program 34 (id=694): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.cpu/memory.stat\x00', 0x80200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001080)=""/98, 0x62) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000ec0)=""/4096, 0x1000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/pagemap\x00', 0x440400, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x3, 0x1ff, 0x3d7e, 0x8, 0x1, 0x4, 0x0}}, 0x96) mmap$auto(0xffffffffffffffaf, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0xdf, 0x20ebf, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) dup$auto(0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r4, 0x0, 0x400100000001, 0x1ff) r5 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/loadavg\x00', 0x202, 0x0) write$auto(r5, 0x0, 0x5) unshare$auto(0x40000080) socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) ioctl$auto(r6, 0x5427, 0xffffffffffffffff) shmctl$auto_SHM_LOCK(0x4, 0xb, &(0x7f00000004c0)={{0x5, 0x0, 0xffffffffffffffff, 0x7, 0x6, 0x76c, 0x6}, 0x7, 0x8, 0x6, 0x2, @raw=0xffff, @raw=0x9, 0xef, 0x0, &(0x7f0000000300)="2f161c5b1f3f51021a6f8e06d186a750dd088d5505ba035cda9fe6e082e8a751c0737af62eed3b140db056fa8e578fbcfea0519ba94e7d6b464f9416b5a4b5221ef7f1ba2db7a7496645f4df99c6ce0e535c212f465967cdd77a60e0c9e9e270135635bd2b217eafbd7cddc16c8ed951bb7bc3bc050baddedb90c449a9037d7a258f4cc1c02879dd3e707a2d7d7ef6d3b34634fe035434e43be6e83d686c72ef59e648094f8a3ea22ed4889368059dd8bc79f4fa5da652d8d7d3c444970923", &(0x7f00000003c0)="f6891e39b87920ddefc70589c62a01fa38a18acba2d4a2c06de063e265401bd552d52aa4371fce250506db3ee60eaae47285b518741a4b1d83d97427b08fc944c6d08ac9644bc05ebc13fce336c26f36b3a1cc19d59451249ee587a206615c8f1d4774def39a230698df3d7a3266d97ea0e637a37fd2ce1e03f12d1bd643fafa7d7cdfaf2382edc2adc33d336f72a8f1b6f2fd69a2d4fdc38c8b82f376cfb7af31b998981ee3447e8194af67c4e90fc4c4f20af9a5008208fba021a3e9646efc5336945cc56421d38c04f550e3f327f3cd413bf702a57234"}) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x6, 0x63, r7, 0x0, 0x0, 0xac, 0x200, 0x2, 0x40000402, 0x9, 0x9, 0xffffffffffffffff, 0x6, 0x5, 0x200000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES16=r3], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) 1m47.264099428s ago: executing program 6 (id=725): r0 = getpid() r1 = gettid() mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x0) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) ptrace$auto_ARCH_SHSTK_ENABLE(0x3ff, r0, 0x4, 0x5001) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) sendfile$auto(0x1, 0x3, 0x0, 0x74c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) r3 = socket(0xa, 0x801, 0x84) getsockopt$auto(r3, 0x84, 0x71, 0x0, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xcd, 0x0, 0x567) rt_tgsigqueueinfo$auto(r0, r1, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffe, @_kill={r0}}}) 1m46.336296056s ago: executing program 6 (id=726): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) mmap$auto(0x0, 0x202000d, 0x6, 0x16, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0xfffffffe, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x430740, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b73, r0, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) fcntl$auto(r1, 0x80000001, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYBLOB="20002bbd7000fbdbdf257a000000060066004e24000004000501040087b7538a4794c2002500430031924ebda1caf58ee53ad1afc276c6e21e7a35768f899344e991e374111f3081ffaba8a74fdc72e1000000060012014eff000008006100ffffffff1300240042e28b6e759cde6edf63616bb99f14ffdfbc4155c7c03d8edd37e614f4c75d5e3a12066f545b1457d54c5612ab03d24272"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$auto(0x0, 0xfffffffffffffffb, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xfffffffffffffffd, 0x2000b, 0xa169, 0x16, r1, 0x3) mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u5\x01\xd4\x14', 0x7, 0x0) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r2) sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, r3, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) open(0x0, 0x4140, 0x0) read$auto(r0, 0x0, 0xa03f) getcwd$auto(0x0, 0xffffffffffffffff) r4 = socket(0x8, 0xa, 0x1) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000001c0), r4) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2a2124c4}, 0xc, &(0x7f0000000240)={0x0}}, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/hugepages-16kB/stats/nr_anon\x00', 0x0, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r5, 0x1, 0x10, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) 1m42.910703849s ago: executing program 6 (id=729): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x600347, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000140)='/dev/binderfs/binder1\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x608080, 0x0) io_uring_setup$auto(0x9, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0) read$auto(0x3, 0x0, 0x80) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) readv$auto(0x3, &(0x7f0000000040)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/meminfo\x00', 0x682, 0x0) close_range$auto(0x0, 0x5, 0x0) r1 = eventfd$auto(0x0) readv$auto(r1, &(0x7f0000000380)={0x0, 0x8}, 0x100) write$auto(r1, &(0x7f0000000040)='\xa5\x99\x94\xf7\x87~\x1c\x00\x00\x00\x86', 0x8) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/oss\x00', 0x60c80, 0x0) pread64$auto(r2, &(0x7f0000000300)='vet\x06\x00\x00\xe0,.\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb*\xfe\x90\xb1\xa9O\xa5?\xaa\x8fTi\xd6\x88Q\xda\xca\xea-l\r^+\xc3\x82~\x065\xa9=p\xda\xc3\x8a\x0eF\b\xc5z\x11\xc9\x96.\xed\x8a\x96\xd7\xc05\xd9\xc8\xb2l\xb8~\xb9y[\x91\xb4\x8c\x8bw8D\x1a\x9e\x05\xf9bx', 0x200004000046, 0x6) sysfs$auto(0x2, 0x1f, 0x2) r3 = epoll_create$auto(0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/afs/addr_prefs\x00', 0x10000, 0x0) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0x8, 0x0) 1m36.901133074s ago: executing program 35 (id=724): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd=r1}, 0xa3) bpf$auto(0xfffffffd, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec4\x00', 0x800, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r2, 0x28000) madvise$auto(0x0, 0x2000040080000004, 0xe) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x808) getrlimit$auto(0x3, 0x0) ioctl$auto_BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r3 = ioctl$auto_TUNSETSNDBUF2(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)=0xb) mmap$auto(0x6, 0x2020009, 0x5, 0xeb1, r3, 0x8000) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, 0x0, 0xc800) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r5, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff034}}) write$auto(r5, 0x0, 0x6) 1m36.856787478s ago: executing program 36 (id=722): mmap$auto(0x0, 0x1ff, 0xa, 0x1000000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x2000, 0x0) r0 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x2000000006, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x9, 0x0) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) read$auto(r2, &(0x7f0000000000)='\x00', 0x91e2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x201, 0x0) memfd_secret$auto(0x0) close_range$auto(0x2, 0xa, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(r3, &(0x7f0000001800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000017c0)={&(0x7f0000000440)={0x9e4, r4, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x9ce, 0x84, 0x0, 0x1, [@generic="4c5c132ca162fd2b313ca4558e818e2cd2cabbd66b27dcf01a01ab8ca3b542b1b7128118e4cfc0ef16833551e49254f02b5c3bb9e48a05aee9775c086827588c11a3945eebb359763b84abdaa0bfc92ac5a64bf2461b14af7287885f6146ed7b467e5175a82d2f6305af7dbfbc4002b0cbac11aaa1fa9c194286a58f89cf297f312f5ee51a33c5d42056de9079ddc3842b87df6a7a", @nested={0x139, 0x5d, 0x0, 0x1, [@nested={0x4, 0x3f}, @nested={0x4, 0x62}, @generic="84e425ee709322cedccfddefec4759c3433e37d5454743a368ad944ca50a9c0a18f255cbba1a757f467cf5f8bc7ce5ff44ba8d", @generic="99f4fc5278b7d3feaa82d1278c9f59110ea7184a03fff85c8e066a0ccfebb5a0b2eec175db46b268ed6530ee2da40306b0456a324caf9c0eb2370dd7a6fd8cf8e80832c81f43e7a472307c3b2a23dcaafdc5dfff948505e6e9eb105f6d4331769af508632b44da40ab9be0e0ba32f7c3cfff9cc3ff9782e185d20044313334bd5ae347ea013effd60a0963a61b1776c4a75b13254d52cd665430c0186c3a980606f95ce42b10b1cecab64dc5669380b3456881e3319bf0e79154d25998892cec58c19b4d88f7aad8bdfd6383341f1af583d4e9117ed95bef480f9edfac8877d5a2e918e68966", @nested={0x4, 0x24}, @nested={0x4, 0xab}, @typed={0x8, 0x11, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x6d}]}, @generic="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", @generic="a7c55f557e762b19b0b6cb6d0434dc99fd80aaec48519daa81049c29a66fdd1928b6272eb1d6dcd3a7ef0eafbcdaa72042559043033316de92c3155b47a3a21ebe3d9791860120aa5061e41c3195d82e5ca29beccc33c5261ce1357db4ccab266802e86624aeb241ac6609c35e3a0d115f1094b4cc73c5a32730ca3810d7cf0d0d5602283436c8e47a511ccf109dd3925f14c7f42c1cac8bb0bdd12a45262578def70f0f01ee8dd322f6f8575e6fe81aad145c71f2a14ec3f2922d08b5b4b13f3c420fc62a043179c11c25dfd11ca45b197dafe45d835f80e31b27d1511645b514", @typed={0x8, 0xf8, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x105, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x108, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}, 0x9e4}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) socket(0x2, 0x801, 0x106) 1m36.756960391s ago: executing program 37 (id=723): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\xf6\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r1) sendmsg$auto_IPVS_CMD_GET_DEST(r1, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, r2, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010) getcwd$auto(0x0, 0xffffffffffffffff) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) mprotect$auto(0x0, 0x8000000000000001, 0x8) 1m28.898645572s ago: executing program 9 (id=735): r0 = getpid() r1 = gettid() mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x0) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) ptrace$auto_ARCH_SHSTK_ENABLE(0x3ff, r0, 0x4, 0x5001) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) sendfile$auto(0x1, 0x3, 0x0, 0x74c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) r3 = socket(0xa, 0x801, 0x84) getsockopt$auto(r3, 0x84, 0x71, 0x0, 0x0) io_uring_register$auto(0x2, 0xf, 0x0, 0x20) rt_tgsigqueueinfo$auto(r0, r1, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffe, @_kill={r0}}}) 1m27.792188602s ago: executing program 38 (id=729): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x600347, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000140)='/dev/binderfs/binder1\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x608080, 0x0) io_uring_setup$auto(0x9, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0) read$auto(0x3, 0x0, 0x80) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) readv$auto(0x3, &(0x7f0000000040)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/meminfo\x00', 0x682, 0x0) close_range$auto(0x0, 0x5, 0x0) r1 = eventfd$auto(0x0) readv$auto(r1, &(0x7f0000000380)={0x0, 0x8}, 0x100) write$auto(r1, &(0x7f0000000040)='\xa5\x99\x94\xf7\x87~\x1c\x00\x00\x00\x86', 0x8) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/oss\x00', 0x60c80, 0x0) pread64$auto(r2, &(0x7f0000000300)='vet\x06\x00\x00\xe0,.\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb*\xfe\x90\xb1\xa9O\xa5?\xaa\x8fTi\xd6\x88Q\xda\xca\xea-l\r^+\xc3\x82~\x065\xa9=p\xda\xc3\x8a\x0eF\b\xc5z\x11\xc9\x96.\xed\x8a\x96\xd7\xc05\xd9\xc8\xb2l\xb8~\xb9y[\x91\xb4\x8c\x8bw8D\x1a\x9e\x05\xf9bx', 0x200004000046, 0x6) sysfs$auto(0x2, 0x1f, 0x2) r3 = epoll_create$auto(0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/afs/addr_prefs\x00', 0x10000, 0x0) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0x8, 0x0) 1m27.759338272s ago: executing program 9 (id=739): preadv$auto(0xffffffffffffffff, 0x0, 0xc, 0x9, 0x402) madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x110d230000, 0x1, 0x3) r0 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/trace_marker\x00', 0x43, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x240000000000, 0x40, 0x896, 0x11, r0, 0x0) listmount$auto(&(0x7f0000000100)={0x20, @raw, 0xffffffffffffffff}, 0x0, 0xbc23c, 0x0) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, 0x0, 0xc4142, 0x0) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/netfs/requests\x00', 0x40080, 0x0) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) waitid$auto_P_PIDFD(0x3, r3, &(0x7f0000000040)={@_si_pad}, 0xf, &(0x7f0000000440)={{0x0, 0x7e}, {0x8, 0x800000002}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x5, 0x8, 0x3, 0x10000, 0x501, 0xfff, 0x9, 0x2, 0x3, 0xc, 0xfffffffffffffffb}) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000000)={0x4, 0x3, 0x7, 0x2, 0x3ff, 0x7fffffff, "9b2189083b030000000d933475a77466", 0x7, 0x5, 0x9, 0x9b, 0x2, 0xb, 0x2}) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x121302, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b294b", 0x5) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0xa4, 0x4000000000df, 0xdc5e, 0x4, 0x2ffffffffffd) r6 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) copy_file_range$auto(r4, &(0x7f0000000200)=0xfffffffffffffffa, r6, &(0x7f0000000300)=0x3, 0x7, 0x0) 1m23.320120768s ago: executing program 9 (id=745): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x202000d, 0x6, 0x16, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0xfffffffe, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x430740, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b73, r0, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) fcntl$auto(r1, 0x80000001, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002bbd7000fbdbdf257a000000060066004e24000004000501040087b7538a4794c2002500430031924ebda1caf58ee53ad1afc276c6e21e7a35768f899344e991e374111f3081ffaba8a74fdc72e1000000060012014eff000008006100ffffffff1300240042e28b6e759cde6edf63616bb99f14ffdfbc4155c7c03d8edd37e614f4c75d5e3a12066f545b1457d54c5612ab"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$auto(0x0, 0xfffffffffffffffb, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xfffffffffffffffd, 0x2000b, 0xa169, 0x16, r1, 0x3) mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u5f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040)={@_si_pad}, 0xf, &(0x7f0000000440)={{0x0, 0x7e}, {0x8, 0x800000002}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x5, 0x8, 0x3, 0x10000, 0x501, 0xfff, 0x9, 0x2, 0x3, 0xc, 0xfffffffffffffffb}) copy_file_range$auto(0xffffffffffffffff, &(0x7f0000000200)=0xfffffffffffffffa, 0xffffffffffffffff, &(0x7f0000000300)=0x3, 0x7, 0x0) 1m18.904185102s ago: executing program 9 (id=752): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r2) sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, r3, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) open(0x0, 0x4140, 0x0) read$auto(r0, 0x0, 0xa03f) getcwd$auto(0x0, 0xffffffffffffffff) r4 = socket(0x8, 0xa, 0x1) r5 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000001c0), r4) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2a2124c4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r5, 0x20, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/hugepages-16kB/stats/nr_anon\x00', 0x0, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r6, 0x1, 0x10, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) 1m17.800857749s ago: executing program 8 (id=753): write$auto(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/loop8/queue/scheduler\x00', 0x808040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) fsopen$auto(0x0, 0x1) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, 0x0, 0x40) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) r1 = open(0x0, 0x662c2, 0xe1d2b27bdc14aa0c) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r1, 0x0) mmap$auto(0x9, 0x20009, 0x4000000000df, 0xfffffffffffffff7, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) r2 = socket(0x2b, 0x1, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r2, 0x2, &(0x7f00000000c0), 0x1) io_uring_register$auto(0x2, 0x3, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) r3 = prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000cc, 0xeb1, 0xffffffffffffffff, 0x8000) timerfd_settime$auto(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x5, 0x84) sendto$auto(r4, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000fe8000"}, 0x1f) ioctl$auto(r3, 0x541b, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m16.691106908s ago: executing program 9 (id=755): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x103e81, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8081, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) kexec_load$auto(0x0, 0x2, 0x0, 0x1000000000004) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDCTL_SEQ_PANIC(r0, 0x5111, &(0x7f0000000180)="ccc0f645283b00a8b78630b7b81a0677dffe327a958d2089dcd23b041d98e6dc9e7cf0b5e6bd6356e8b9cf7f39a7cb5728cd3d9dd441720371cd75db361f4a3b0e6401967132baea74211a304e300f99a417316785e9fb4a5d3d43e6675eeff476e32c17aa790f20135004914bf9167d36f9bbbf01cd428917ee0968d3391e23126ddf1d4e7ae4281596b82058e0015dfb386630bb4aeebde0671f3ada8f437df1c8df6edd3c8778dd5f647fa799ed0ffe8fe75adb95c1e21ee0a1e463da02ebb8f9faae3e64fbdec507c1ce3cef8009ebf7ada3bc7d27d0a164c06999f52d5fff1cf662073236") move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r1 = epoll_create$auto(0x1) capset$auto(0x0, 0x0) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) read$auto(r2, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) 1m16.589628785s ago: executing program 8 (id=756): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x440c0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7ffffffff000}, 0xc) r0 = getpid() process_vm_readv$auto(r0, 0x0, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='.'], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1m16.354981716s ago: executing program 8 (id=757): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', &(0x7f0000000180)=0x40) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyua\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r1, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r1, 0x80204d01, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) mmap$auto(0x0, 0x402000b, 0x4af, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x50, 0x0, 0x9) open(&(0x7f0000000000)='./file0\x00', 0x621c2, 0x84) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.4/usb5/interface_authorized_default\x00', 0x10b002, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) read$auto(0x3, 0x0, 0xfffffdef) syz_clone3(&(0x7f0000000700)={0x100, 0x0, 0x0, 0x0, {0x1}, &(0x7f0000000640), 0x0, 0x0, 0x0}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000005bc0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ABORT_SCAN(r3, 0x0, 0x20000080) syz_genetlink_get_family_id$auto_seg6(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 1m14.976907853s ago: executing program 8 (id=760): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) mmap$auto(0x0, 0x202000d, 0x6, 0x16, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0xfffffffe, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x430740, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b73, r0, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) fcntl$auto(r1, 0x80000001, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="20002bbd7000fbdbdf257a000000060066004e24000004000501040087b7538a4794c2002500430031924ebda1caf58ee53ad1afc276c6e21e7a35768f899344e991e374111f3081ffaba8a74fdc72e1000000060012014eff000008006100ffffffff1300240042e28b6e759cde6edf63616bb99f14ffdfbc4155c7c03d8edd37e614f4c75d5e3a12066f545b1457d54c5612ab03d24272"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$auto(0x0, 0xfffffffffffffffb, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xfffffffffffffffd, 0x2000b, 0xa169, 0x16, r1, 0x3) mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u5\x01\xd4\x14', 0x7, 0x0) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r2) sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, r3, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) open(0x0, 0x4140, 0x0) read$auto(r0, 0x0, 0xa03f) getcwd$auto(0x0, 0xffffffffffffffff) r4 = socket(0x8, 0xa, 0x1) r5 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000001c0), r4) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2a2124c4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r5, 0x20, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r6, 0x1, 0x10, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) 1m10.385679235s ago: executing program 8 (id=768): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r2) sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, r3, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) open(0x0, 0x4140, 0x0) read$auto(r0, 0x0, 0xa03f) getcwd$auto(0x0, 0xffffffffffffffff) r4 = socket(0x8, 0xa, 0x1) r5 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000001c0), r4) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2a2124c4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r5, 0x20, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r6, 0x1, 0x10, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) 1m1.323812509s ago: executing program 39 (id=755): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x103e81, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8081, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) kexec_load$auto(0x0, 0x2, 0x0, 0x1000000000004) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDCTL_SEQ_PANIC(r0, 0x5111, &(0x7f0000000180)="ccc0f645283b00a8b78630b7b81a0677dffe327a958d2089dcd23b041d98e6dc9e7cf0b5e6bd6356e8b9cf7f39a7cb5728cd3d9dd441720371cd75db361f4a3b0e6401967132baea74211a304e300f99a417316785e9fb4a5d3d43e6675eeff476e32c17aa790f20135004914bf9167d36f9bbbf01cd428917ee0968d3391e23126ddf1d4e7ae4281596b82058e0015dfb386630bb4aeebde0671f3ada8f437df1c8df6edd3c8778dd5f647fa799ed0ffe8fe75adb95c1e21ee0a1e463da02ebb8f9faae3e64fbdec507c1ce3cef8009ebf7ada3bc7d27d0a164c06999f52d5fff1cf662073236") move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r1 = epoll_create$auto(0x1) capset$auto(0x0, 0x0) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) read$auto(r2, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) 56.320864572s ago: executing program 3 (id=795): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x202000d, 0x6, 0x16, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0xfffffffe, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x430740, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b73, r0, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) fcntl$auto(r1, 0x80000001, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002bbd7000fbdbdf257a000000060066004e24000004000501040087b7538a4794c2002500430031924ebda1caf58ee53ad1afc276c6e21e7a35768f899344e991e374111f3081ffaba8a74fdc72e1000000060012014eff000008006100ffffffff1300240042e28b6e759cde6edf63616bb99f14ffdfbc4155c7c03d8edd37e614f4c75d5e3a12066f545b1457d54c5612ab"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$auto(0x0, 0xfffffffffffffffb, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xfffffffffffffffd, 0x2000b, 0xa169, 0x16, r1, 0x3) mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u5\x01\xd4\x14', 0x7, 0x0) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r2) sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, r3, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) open(0x0, 0x4140, 0x0) read$auto(r0, 0x0, 0xa03f) getcwd$auto(0x0, 0xffffffffffffffff) r4 = socket(0x8, 0xa, 0x1) r5 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000001c0), r4) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2a2124c4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r5, 0x20, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r6, 0x1, 0x10, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) 52.999284004s ago: executing program 3 (id=799): write$auto(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/loop8/queue/scheduler\x00', 0x808040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) fsopen$auto(0x0, 0x1) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, 0x0, 0x40) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) r1 = open(&(0x7f0000000080)='./file0\x00', 0x662c2, 0xe1d2b27bdc14aa0c) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r1, 0x0) mmap$auto(0x9, 0x20009, 0x4000000000df, 0xfffffffffffffff7, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) r2 = socket(0x2b, 0x1, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r2, 0x2, &(0x7f00000000c0), 0x1) io_uring_register$auto(0x2, 0x3, 0x0, 0x0) open(0x0, 0x12ba7e, 0x45) r3 = prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000cc, 0xeb1, 0xffffffffffffffff, 0x8000) timerfd_settime$auto(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x5, 0x84) sendto$auto(r4, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000fe8000"}, 0x1f) ioctl$auto(r3, 0x541b, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) 51.322281618s ago: executing program 3 (id=801): mmap$auto(0x0, 0x1ff, 0xa, 0x1000000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x2000, 0x0) r0 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x2000000006, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x9, 0x0) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) read$auto(r2, &(0x7f0000000000)='\x00', 0x91e2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x201, 0x0) memfd_secret$auto(0x0) close_range$auto(0x2, 0xa, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(r3, &(0x7f0000001800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000017c0)={&(0x7f0000000440)={0xa5c, r4, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0xa46, 0x84, 0x0, 0x1, [@generic="4c5c132ca162fd2b313ca4558e818e2cd2cabbd66b27dcf01a01ab8ca3b542b1b7128118e4cfc0ef16833551e49254f02b5c3bb9e48a05aee9775c086827588c11a3945eebb359763b84abdaa0bfc92ac5a64bf2461b14af7287885f6146ed7b467e5175a82d2f6305af7dbfbc4002b0cbac11aaa1fa9c194286a58f89cf297f312f5ee51a33c5d42056de9079ddc3842b87df6a7a", @nested={0x139, 0x5d, 0x0, 0x1, [@nested={0x4, 0x3f}, @nested={0x4, 0x62}, @generic="84e425ee709322cedccfddefec4759c3433e37d5454743a368ad944ca50a9c0a18f255cbba1a757f467cf5f8bc7ce5ff44ba8d", @generic="99f4fc5278b7d3feaa82d1278c9f59110ea7184a03fff85c8e066a0ccfebb5a0b2eec175db46b268ed6530ee2da40306b0456a324caf9c0eb2370dd7a6fd8cf8e80832c81f43e7a472307c3b2a23dcaafdc5dfff948505e6e9eb105f6d4331769af508632b44da40ab9be0e0ba32f7c3cfff9cc3ff9782e185d20044313334bd5ae347ea013effd60a0963a61b1776c4a75b13254d52cd665430c0186c3a980606f95ce42b10b1cecab64dc5669380b3456881e3319bf0e79154d25998892cec58c19b4d88f7aad8bdfd6383341f1af583d4e9117ed95bef480f9edfac8877d5a2e918e68966", @nested={0x4, 0x24}, @nested={0x4, 0xab}, @typed={0x8, 0x11, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x6d}]}, @nested={0x76, 0xd5, 0x0, 0x1, [@typed={0x14, 0x102, 0x0, 0x0, @ipv6=@empty}, @generic="3475ea74342253fb4f4865cf4e9f3203851c8f91ee61f395731ae4ad4437910f41f576a9aa9362b7073517e7f073f49e4de05275610bf20eacfef3c271fa198b55bf3f707ba3a8c6111d5e8885455d2c6e8eba6eed0962c21b45dcbfd872"]}, @generic="f8792951695b56fc4c3f81880cb2f05adea98fc942002d5f866e88bf6e9d81232d8949126e20720f9346897c8d3603a50445e020e98e33453de2ccda6d5205ec616932b2dfd7358584b5be9084fceae428e066521800a4cc694a15e74c00370066020d1536e6c29f7d68589adc3333266a620f6a69e1b4a022607919c54af4a19e30eea5f3428bb66008269f23e1c93d2a31b38ee926c0b0b2b0e9c914e0d5641ccfecbd933f172299f6801af5103e3b46501a038044cee5aff97dd90b76eda6ad22ecb4ca463834e388f9c975542d658943a68e28f5988b3fa14cd8ae036776fede98b3947460bb8e669b72a85ee1d496f4b6206438cbb090781e2bc9202417396918d2d5a8e1a565b443e427c9142206239c06fc662035fce1c4876ff59e01b94becc13fdcf535c2b2b262001a386104e7bb40d63d200fd392de0c5e130803e9367815dd43717b303e20ccb0775b69927d81a977873349abd2078bf6d92daafd951afe581ff901b0945bc6b516b685c5cd958dc97c4f4482af0448826e88057f02ec3c57c1a24feeab5723f282475725d34f099a761674c8dee1828f6bf1671cd7ba2a638c0fd9963b17cfcd4f73b71b537659a26e3955f355693983e9ff43e5eee7891478ec0e0ea18419598b49d906fba89b41e66b0e3dd66b4e5e2d9a3929a899aa81fdd86c851c6ed3eacfe2008c762a95274e61c1f003510fa7cbb1dc23df59856f046bcf35ad07af192b13ba8a534dc5160d39f1e75a2aed8fba2bcb2a3b3b83f76f5bbe83dc3339e87ae7acaeb83faf323af6808a82f123dea4c2fe73214643c61b9b4c7e624d4cfa6775cb1f2f1338ee50e0067a2dc177b0574254e2bcceea04cd837f882d5a133de7330c548d5f5dff867e7f6f3954c9633639e40e0edf03ae3b8ce28a0b2b927f86138d4a5f23d5ca8a07e032ba85c476f86ea9c158852fe1d0fc9b29866e657f79501a488229d22a08587824ac2263cf054fdab92869ac3f650db6bd4cf0466db60f6aa5f559506ac8180f6e87ba4a634d2ce80af4a09bdecc9ccb1664758e30286ac46bdd3683d041ae8a1d6fe683b4bf34fecf7933bdd53e71fbb8701d4720e507f72d3ee2dac93de91ac9b386132506d1c1dc7607170c4f411d79e1249f41bc20b50ed1ca63798ffb9b60cfb5e23d50f0e58b466cd32492f584e726f59981bf7859f32942ab7b92cc2cc59c8d166d1e7eaf343701e8e0cff646babd12e840c47a48777ec2ca51250380604db5c908dbe8ed57414e9e3af4bc4031219b54e39c983ecbc94fb541cf4b5f75691889a6888afdc3c37401183c05371e5287363cd16101264201fcb61419a86d3011653ead244eaf628082f12409090d7f72d879868a15a74fb633298fa99066c29472b4f6bc8f6d9131b0120d1806bac6abadcdaba551bb59fd3a11f54164aaf7e705fa218f869c25079a0fdf1b45c6343eb4d227774f5245d2d52b0e93645021aaa1312028ece614c7f752b54cf8bb4dccdf9e6fe0d8bc841149fe775d7ff3e53082ccdbf64a5da87b4b6151fc81b8cea39fb11f507d5bb5dc93218554e58839369c64329c9b384dafb1afe66101d9cd4ca64181d9080282fc18f61ac1dda0e4aaa1a36c90a484b202b93aade3865d94879d44ef8896a697f081d8307546c3234579f8a69b0b5f120c15d1dc1cc9c1c2b612f01c54a92cd6fb6251f8428064e0c9378d7e2643bef42d06ca3a93a2d5c8444f4c72b978db0ebf800870a479426149d60fb36a99238653656eb571349c915514f9c88307ee9067fc3b19ed4bc1408b21a53c5466a94089de0a0e906aeb195d677f4b3bd708c5f832a2675840f1e8970eb922023078bcf2123b39c551b040681857408acee13f6532c06ac5bb8076982f2cca57eacc5d20f0169b4374e4697460ab37a06127942b4b8d0fdc19f09e52585fe61e20f68f73b1d292800d56a68056826b2acad91a2778ef99012ab45fe072ad1342b67e0a9a086837373bbec583eb5dc3219e754e167b49364843561276c5ee35d514dd126a1414ceb55d6db8bcc63971ff8e35a1bd88a79d08e1664ed823316fcb88e02ebedb32473efc3e76c80afb07c69dc281bf7f2ccebaf4ef8b924c2b356010b92aadfa75c4b1d69bddb62d73a7f13562733c9434ba15e79db41bfb9d83c546ca63927f3841510c9e4877c7f3063d7aa8ab3d3ff324b6fd9afd7e9c14a399eb3a8947ea56ac7165c064c111944437a9802fef1ca1e4c92b1445b21c0e13d0f76012f0783fd97180822b2365dbd11b1244ca9831e557ffed6ccb6f6e823abd3c872f2f3a2ba954a24d2f522480d6357166c9659fbf66f7d02f0047b177ab5810dea1117a2e3c91bc78813f7ee18debff3b90539880c6b72a20ee4850c7540e7f47f09a77cd46b70112fab228e43eb231cabaa68b9a68b43d97a35521f9d60d37dbe4536c6f099fe2aeb3f41aa50a77cd0bdd47b4f6f425dfe1e8176b768bac4a50c53afa2c0f5517887628d63cb4cc06a7aaac862aea0b74f9e057afd30eb250", @generic="a7c55f557e762b19b0b6cb6d0434dc99fd80aaec48519daa81049c29a66fdd1928b6272eb1d6dcd3a7ef0eafbcdaa72042559043033316de92c3155b47a3a21ebe3d9791860120aa5061e41c3195d82e5ca29beccc33c5261ce1357db4ccab266802e86624aeb241ac6609c35e3a0d115f1094b4cc73c5a32730ca3810d7cf0d0d5602283436c8e47a511ccf109dd3925f14c7f42c1cac8bb0bdd12a45262578def70f0f01ee8dd322f6f8575e6fe81aad145c71f2a14ec3f2922d08b5b4b13f3c420fc62a043179c11c25dfd11ca45b197dafe45d835f80e31b27d1511645b514", @typed={0x8, 0xf8, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x105, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x108, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}, 0xa5c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) socket(0x2, 0x801, 0x106) 49.609713053s ago: executing program 3 (id=803): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x202000d, 0x6, 0x16, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0xfffffffe, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x430740, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b73, r0, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) fcntl$auto(r1, 0x80000001, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="20002bbd7000fbdbdf257a000000060066004e24000004000501040087b7538a4794c2002500430031924ebda1caf58ee53ad1afc276c6e21e7a35768f899344e991e374111f3081ffaba8a74fdc72e1000000060012014eff000008006100ffffffff1300240042e28b6e759cde6edf63616bb99f14ffdfbc4155c7c03d8edd37e614f4c75d5e3a12066f545b1457d54c5612ab03d24272"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$auto(0x0, 0xfffffffffffffffb, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xfffffffffffffffd, 0x2000b, 0xa169, 0x16, r1, 0x3) mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u5\x01\xd4\x14', 0x7, 0x0) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r2) sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, r3, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) open(0x0, 0x4140, 0x0) read$auto(r0, 0x0, 0xa03f) getcwd$auto(0x0, 0xffffffffffffffff) r4 = socket(0x8, 0xa, 0x1) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000001c0), r4) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2a2124c4}, 0xc, &(0x7f0000000240)={0x0}}, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/hugepages-16kB/stats/nr_anon\x00', 0x0, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r5, 0x1, 0x10, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) 43.909278207s ago: executing program 3 (id=811): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x202000d, 0x6, 0x16, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0xfffffffe, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x430740, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b73, r0, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) fcntl$auto(r1, 0x80000001, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYBLOB="20002bbd7000fbdbdf257a000000060066004e24000004000501040087b7538a4794c2002500430031924ebda1caf58ee53ad1afc276c6e21e7a35768f899344e991e374111f3081ffaba8a74fdc72e1000000060012014eff000008006100ffffffff1300240042e28b6e759cde6edf63616bb99f14ffdfbc4155c7c03d8edd37e614f4c75d5e3a12066f545b1457d54c5612ab03d24272"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$auto(0x0, 0xfffffffffffffffb, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xfffffffffffffffd, 0x2000b, 0xa169, 0x16, r1, 0x3) mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u5f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000ec0)=""/4096, 0x1000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/pagemap\x00', 0x440400, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb8, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x3, 0x1ff, 0x3d7e, 0x8, 0x1, 0x4, 0x0}}, 0x96) mmap$auto(0xffffffffffffffaf, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0xdf, 0x20ebf, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) dup$auto(0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/interrupts\x00', 0x18b202, 0x0) pread64$auto(r4, 0x0, 0x400100000001, 0x1ff) r5 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/loadavg\x00', 0x202, 0x0) write$auto(r5, 0x0, 0x5) unshare$auto(0x40000080) socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) ioctl$auto(r6, 0x5427, 0xffffffffffffffff) shmctl$auto_SHM_LOCK(0x4, 0xb, &(0x7f00000004c0)={{0x5, 0x0, 0xffffffffffffffff, 0x7, 0x6, 0x76c, 0x6}, 0x7, 0x8, 0x6, 0x2, @raw=0xffff, @raw=0x9, 0xef, 0x0, &(0x7f0000000300)="2f161c5b1f3f51021a6f8e06d186a750dd088d5505ba035cda9fe6e082e8a751c0737af62eed3b140db056fa8e578fbcfea0519ba94e7d6b464f9416b5a4b5221ef7f1ba2db7a7496645f4df99c6ce0e535c212f465967cdd77a60e0c9e9e270135635bd2b217eafbd7cddc16c8ed951bb7bc3bc050baddedb90c449a9037d7a258f4cc1c02879dd3e707a2d7d7ef6d3b34634fe035434e43be6e83d686c72ef59e648094f8a3ea22ed4889368059dd8bc79f4fa5da652d8d7d3c444970923", &(0x7f00000003c0)="f6891e39b87920ddefc70589c62a01fa38a18acba2d4a2c06de063e265401bd552d52aa4371fce250506db3ee60eaae47285b518741a4b1d83d97427b08fc944c6d08ac9644bc05ebc13fce336c26f36b3a1cc19d59451249ee587a206615c8f1d4774def39a230698df3d7a3266d97ea0e637a37fd2ce1e03f12d1bd643fafa7d7cdfaf2382edc2adc33d336f72a8f1b6f2fd69a2d4fdc38c8b82f376cfb7af31b998981ee3447e8194af67c4e90fc4c4f20af9a5008208fba021a3e9646efc5336945cc56421d38c04f550e3f327f3cd413bf702a57234"}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYRES16=r3], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) 39.99713295s ago: executing program 2 (id=797): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x600347, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_BINDER_WRITE_READ(r0, 0x541b, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x608080, 0x0) io_uring_setup$auto(0x9, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x403c6f2b, 0x0) read$auto(0x3, 0x0, 0x80) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) readv$auto(0x3, &(0x7f0000000040)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/meminfo\x00', 0x682, 0x0) close_range$auto(0x0, 0x5, 0x0) r2 = eventfd$auto(0x0) readv$auto(r2, &(0x7f0000000380)={0x0, 0x8}, 0x100) write$auto(r2, &(0x7f0000000040)='\xa5\x99\x94\xf7\x87~\x1c\x00\x00\x00\x86', 0x8) io_uring_setup$auto(0x1, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/oss\x00', 0x60c80, 0x0) pread64$auto(r3, &(0x7f0000000300)='vet\x06\x00\x00\xe0,.\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb*\xfe\x90\xb1\xa9O\xa5?\xaa\x8fTi\xd6\x88Q\xda\xca\xea-l\r^+\xc3\x82~\x065\xa9=p\xda\xc3\x8a\x0eF\b\xc5z\x11\xc9\x96.\xed\x8a\x96\xd7\xc05\xd9\xc8\xb2l\xb8~\xb9y[\x91\xb4\x8c\x8bw8D\x1a\x9e\x05\xf9bx', 0x200004000046, 0x6) sysfs$auto(0x2, 0x1f, 0x2) r4 = epoll_create$auto(0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/afs/addr_prefs\x00', 0x10000, 0x0) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0x8, 0x0) 39.560731465s ago: executing program 7 (id=819): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x600347, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_BINDER_WRITE_READ(0xffffffffffffffff, 0x541b, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x608080, 0x0) io_uring_setup$auto(0x9, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x403c6f2b, 0x0) read$auto(0x3, 0x0, 0x80) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) readv$auto(0x3, &(0x7f0000000040)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080)='/proc/meminfo\x00', 0x682, 0x0) close_range$auto(0x0, 0x5, 0x0) r1 = eventfd$auto(0x0) readv$auto(r1, &(0x7f0000000380)={0x0, 0x8}, 0x100) write$auto(r1, &(0x7f0000000040)='\xa5\x99\x94\xf7\x87~\x1c\x00\x00\x00\x86', 0x8) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/oss\x00', 0x60c80, 0x0) pread64$auto(r2, &(0x7f0000000300)='vet\x06\x00\x00\xe0,.\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb*\xfe\x90\xb1\xa9O\xa5?\xaa\x8fTi\xd6\x88Q\xda\xca\xea-l\r^+\xc3\x82~\x065\xa9=p\xda\xc3\x8a\x0eF\b\xc5z\x11\xc9\x96.\xed\x8a\x96\xd7\xc05\xd9\xc8\xb2l\xb8~\xb9y[\x91\xb4\x8c\x8bw8D\x1a\x9e\x05\xf9bx', 0x200004000046, 0x6) sysfs$auto(0x2, 0x1f, 0x2) r3 = epoll_create$auto(0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/afs/addr_prefs\x00', 0x10000, 0x0) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0x8, 0x0) 39.346624109s ago: executing program 2 (id=820): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r2) sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, r3, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) open(0x0, 0x4140, 0x0) read$auto(r0, 0x0, 0xa03f) getcwd$auto(0x0, 0xffffffffffffffff) r4 = socket(0x8, 0xa, 0x1) r5 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000001c0), r4) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2a2124c4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r5, 0x20, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/hugepages-16kB/stats/nr_anon\x00', 0x0, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r6, 0x1, 0x10, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) 38.771611225s ago: executing program 7 (id=821): mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/loop8/queue/scheduler\x00', 0x808040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) fsopen$auto(0x0, 0x1) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, 0x0, 0x40) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) r1 = open(&(0x7f0000000080)='./file0\x00', 0x662c2, 0xe1d2b27bdc14aa0c) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r1, 0x0) mmap$auto(0x9, 0x20009, 0x4000000000df, 0xfffffffffffffff7, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) r2 = socket(0x2b, 0x1, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r2, 0x2, &(0x7f00000000c0), 0x1) io_uring_register$auto(0x2, 0x3, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) r3 = prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000cc, 0xeb1, 0xffffffffffffffff, 0x8000) timerfd_settime$auto(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x5, 0x84) sendto$auto(r4, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000fe8000"}, 0x1f) ioctl$auto(r3, 0x541b, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) 37.462100989s ago: executing program 7 (id=823): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x202000d, 0x6, 0x16, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0xfffffffe, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x430740, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b73, r0, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) fcntl$auto(r1, 0x80000001, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002bbd7000fbdbdf257a000000060066004e24000004000501040087b7538a4794c2002500430031924ebda1caf58ee53ad1afc276c6e21e7a35768f899344e991e374111f3081ffaba8a74fdc72e1000000060012014eff000008006100ffffffff1300240042e28b6e759cde6edf63616bb99f14ffdfbc4155c7c03d8edd37e614f4c75d5e3a12066f545b1457d54c5612ab"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$auto(0x0, 0xfffffffffffffffb, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xfffffffffffffffd, 0x2000b, 0xa169, 0x16, r1, 0x3) mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u5\x01\xd4\x14', 0x7, 0x0) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r2) sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, r3, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) open(0x0, 0x4140, 0x0) read$auto(r0, 0x0, 0xa03f) getcwd$auto(0x0, 0xffffffffffffffff) r4 = socket(0x8, 0xa, 0x1) r5 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000001c0), r4) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2a2124c4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r5, 0x20, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/hugepages-16kB/stats/nr_anon\x00', 0x0, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r6, 0x1, 0x10, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) 33.389592319s ago: executing program 7 (id=828): preadv$auto(0xffffffffffffffff, 0x0, 0xc, 0x9, 0x402) madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x110d230000, 0x1, 0x3) r0 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/trace_marker\x00', 0x43, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x240000000000, 0x40, 0x896, 0x11, r0, 0x0) listmount$auto(&(0x7f0000000100)={0x20, @raw, 0xffffffffffffffff}, 0x0, 0xbc23c, 0x0) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, 0x0, 0xc4142, 0x0) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/netfs/requests\x00', 0x40080, 0x0) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) waitid$auto_P_PIDFD(0x3, r3, &(0x7f0000000040)={@_si_pad}, 0xf, &(0x7f0000000440)={{0x0, 0x7e}, {0x8, 0x800000002}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x5, 0x8, 0x3, 0x10000, 0x501, 0xfff, 0x9, 0x2, 0x3, 0xc, 0xfffffffffffffffb}) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000000)={0x4, 0x3, 0x7, 0x2, 0x3ff, 0x7fffffff, "9b2189083b030000000d933475a77466", 0x7, 0x5, 0x9, 0x9b, 0x2, 0xb, 0x2}) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x121302, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b", 0x3) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0xa4, 0x4000000000df, 0xdc5e, 0x4, 0x2ffffffffffd) r6 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) copy_file_range$auto(r4, &(0x7f0000000200)=0xfffffffffffffffa, r6, &(0x7f0000000300)=0x3, 0x7, 0x0) 33.051903303s ago: executing program 1 (id=829): write$auto(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/loop8/queue/scheduler\x00', 0x808040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) fsopen$auto(0x0, 0x1) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, 0x0, 0x40) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) r1 = open(&(0x7f0000000080)='./file0\x00', 0x662c2, 0xe1d2b27bdc14aa0c) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r1, 0x0) mmap$auto(0x9, 0x20009, 0x4000000000df, 0xfffffffffffffff7, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) r2 = socket(0x2b, 0x1, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r2, 0x2, 0x0, 0x1) io_uring_register$auto(0x2, 0x3, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) r3 = prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000cc, 0xeb1, 0xffffffffffffffff, 0x8000) timerfd_settime$auto(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x5, 0x84) sendto$auto(r4, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000fe8000"}, 0x1f) ioctl$auto(r3, 0x541b, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) 32.732061468s ago: executing program 1 (id=830): preadv$auto(0xffffffffffffffff, 0x0, 0xc, 0x9, 0x402) madvise$auto(0x110c230000, 0x8031ca, 0x9) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) listmount$auto(&(0x7f0000000100)={0x20, @raw, 0xffffffffffffffff}, 0x0, 0xbc23c, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040)={@_si_pad}, 0xf, &(0x7f0000000440)={{0x0, 0x7e}, {0x8, 0x800000002}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x5, 0x8, 0x3, 0x10000, 0x501, 0xfff, 0x9, 0x2, 0x3, 0xc, 0xfffffffffffffffb}) copy_file_range$auto(0xffffffffffffffff, &(0x7f0000000200)=0xfffffffffffffffa, 0xffffffffffffffff, &(0x7f0000000300)=0x3, 0x7, 0x0) 31.203894974s ago: executing program 1 (id=831): mmap$auto(0x0, 0x1ff, 0xa, 0x1000000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x2000, 0x0) r0 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x2000000006, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x9, 0x0) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) read$auto(r2, &(0x7f0000000000)='\x00', 0x91e2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x201, 0x0) memfd_secret$auto(0x0) close_range$auto(0x2, 0xa, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(r3, &(0x7f0000001800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000017c0)={&(0x7f0000000440)={0x9fc, r4, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x9e6, 0x84, 0x0, 0x1, [@generic="4c5c132ca162fd2b313ca4558e818e2cd2cabbd66b27dcf01a01ab8ca3b542b1b7128118e4cfc0ef16833551e49254f02b5c3bb9e48a05aee9775c086827588c11a3945eebb359763b84abdaa0bfc92ac5a64bf2461b14af7287885f6146ed7b467e5175a82d2f6305af7dbfbc4002b0cbac11aaa1fa9c194286a58f89cf297f312f5ee51a33c5d42056de9079ddc3842b87df6a7a", @nested={0x139, 0x5d, 0x0, 0x1, [@nested={0x4, 0x3f}, @nested={0x4, 0x62}, @generic="84e425ee709322cedccfddefec4759c3433e37d5454743a368ad944ca50a9c0a18f255cbba1a757f467cf5f8bc7ce5ff44ba8d", @generic="99f4fc5278b7d3feaa82d1278c9f59110ea7184a03fff85c8e066a0ccfebb5a0b2eec175db46b268ed6530ee2da40306b0456a324caf9c0eb2370dd7a6fd8cf8e80832c81f43e7a472307c3b2a23dcaafdc5dfff948505e6e9eb105f6d4331769af508632b44da40ab9be0e0ba32f7c3cfff9cc3ff9782e185d20044313334bd5ae347ea013effd60a0963a61b1776c4a75b13254d52cd665430c0186c3a980606f95ce42b10b1cecab64dc5669380b3456881e3319bf0e79154d25998892cec58c19b4d88f7aad8bdfd6383341f1af583d4e9117ed95bef480f9edfac8877d5a2e918e68966", @nested={0x4, 0x24}, @nested={0x4, 0xab}, @typed={0x8, 0x11, 0x0, 0x0, @fd=r1}, @nested={0x4, 0x6d}]}, @nested={0x18, 0xd5, 0x0, 0x1, [@typed={0x14, 0x102, 0x0, 0x0, @ipv6=@empty}, @generic]}, @generic="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", @generic="a7c55f557e762b19b0b6cb6d0434dc99fd80aaec48519daa81049c29a66fdd1928b6272eb1d6dcd3a7ef0eafbcdaa72042559043033316de92c3155b47a3a21ebe3d9791860120aa5061e41c3195d82e5ca29beccc33c5261ce1357db4ccab266802e86624aeb241ac6609c35e3a0d115f1094b4cc73c5a32730ca3810d7cf0d0d5602283436c8e47a511ccf109dd3925f14c7f42c1cac8bb0bdd12a45262578def70f0f01ee8dd322f6f8575e6fe81aad145c71f2a14ec3f2922d08b5b4b13f3c420fc62a043179c11c25dfd11ca45b197dafe45d835f80e31b27d1511645b514", @typed={0x8, 0xf8, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x105, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x108, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}, 0x9fc}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) socket(0x2, 0x801, 0x106) 30.264613971s ago: executing program 1 (id=832): preadv$auto(0xffffffffffffffff, 0x0, 0xc, 0x9, 0x402) madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x110d230000, 0x1, 0x3) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/trace_marker\x00', 0x43, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) listmount$auto(&(0x7f0000000100)={0x20, @raw, 0xffffffffffffffff}, 0x0, 0xbc23c, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040)={@_si_pad}, 0xf, &(0x7f0000000440)={{0x0, 0x7e}, {0x8, 0x800000002}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x5, 0x8, 0x3, 0x10000, 0x501, 0xfff, 0x9, 0x2, 0x3, 0xc, 0xfffffffffffffffb}) copy_file_range$auto(0xffffffffffffffff, &(0x7f0000000200)=0xfffffffffffffffa, 0xffffffffffffffff, &(0x7f0000000300)=0x3, 0x7, 0x0) 30.129112434s ago: executing program 1 (id=833): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r2) sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, r3, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) open(0x0, 0x4140, 0x0) read$auto(r0, 0x0, 0xa03f) getcwd$auto(0x0, 0xffffffffffffffff) r4 = socket(0x8, 0xa, 0x1) r5 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000001c0), r4) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2a2124c4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r5, 0x20, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/hugepages-16kB/stats/nr_anon\x00', 0x0, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r6, 0x1, 0x10, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) 28.984589755s ago: executing program 1 (id=834): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) mmap$auto(0x0, 0x202000d, 0x6, 0x16, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0xfffffffe, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x430740, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b73, r0, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) fcntl$auto(r1, 0x80000001, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="20002bbd7000fbdbdf257a000000060066004e24000004000501040087b7538a4794c2002500430031924ebda1caf58ee53ad1afc276c6e21e7a35768f899344e991e374111f3081ffaba8a74fdc72e1000000060012014eff000008006100ffffffff1300240042e28b6e759cde6edf63616bb99f14ffdfbc4155c7c03d8edd37e614f4c75d5e3a12066f545b1457d54c5612ab03d24272"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$auto(0x0, 0xfffffffffffffffb, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xfffffffffffffffd, 0x2000b, 0xa169, 0x16, r1, 0x3) mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u5f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/netfs/requests\x00', 0x40080, 0x0) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) waitid$auto_P_PIDFD(0x3, r3, &(0x7f0000000040)={@_si_pad}, 0xf, &(0x7f0000000440)={{0x0, 0x7e}, {0x8, 0x800000002}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x5, 0x8, 0x3, 0x10000, 0x501, 0xfff, 0x9, 0x2, 0x3, 0xc, 0xfffffffffffffffb}) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000000)={0x4, 0x3, 0x7, 0x2, 0x3ff, 0x7fffffff, "9b2189083b030000000d933475a77466", 0x7, 0x5, 0x9, 0x9b, 0x2, 0xb, 0x2}) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x121302, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b", 0x3) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0xa4, 0x4000000000df, 0xdc5e, 0x4, 0x2ffffffffffd) r6 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) copy_file_range$auto(r4, &(0x7f0000000200)=0xfffffffffffffffa, r6, &(0x7f0000000300)=0x3, 0x7, 0x0) 13.759415843s ago: executing program 44 (id=834): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) mmap$auto(0x0, 0x202000d, 0x6, 0x16, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0xfffffffe, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x430740, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b73, r0, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) fcntl$auto(r1, 0x80000001, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="20002bbd7000fbdbdf257a000000060066004e24000004000501040087b7538a4794c2002500430031924ebda1caf58ee53ad1afc276c6e21e7a35768f899344e991e374111f3081ffaba8a74fdc72e1000000060012014eff000008006100ffffffff1300240042e28b6e759cde6edf63616bb99f14ffdfbc4155c7c03d8edd37e614f4c75d5e3a12066f545b1457d54c5612ab03d24272"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$auto(0x0, 0xfffffffffffffffb, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xfffffffffffffffd, 0x2000b, 0xa169, 0x16, r1, 0x3) mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u5\x01\xd4\x14', 0x7, 0x0) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff0000000000fffffffe00a7ed73de11691c13403c82be", 0x7b) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r2) sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, r3, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) open(0x0, 0x4140, 0x0) read$auto(r0, 0x0, 0xa03f) getcwd$auto(0x0, 0xffffffffffffffff) r4 = socket(0x8, 0xa, 0x1) r5 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000001c0), r4) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2a2124c4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r5, 0x20, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptya1\x00', 0x20080, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r6, 0x1, 0x10, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) 8.359479414s ago: executing program 5 (id=849): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x600347, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000140)='/dev/binderfs/binder1\x00', 0x0, 0x0) ioctl$auto_BINDER_WRITE_READ(r0, 0x541b, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x608080, 0x0) io_uring_setup$auto(0x9, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x403c6f2b, 0x0) read$auto(0x3, 0x0, 0x80) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) readv$auto(0x3, &(0x7f0000000040)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x682, 0x0) close_range$auto(0x0, 0x5, 0x0) r2 = eventfd$auto(0x0) readv$auto(r2, &(0x7f0000000380)={0x0, 0x8}, 0x100) write$auto(r2, &(0x7f0000000040)='\xa5\x99\x94\xf7\x87~\x1c\x00\x00\x00\x86', 0x8) io_uring_setup$auto(0x1, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/seq/oss\x00', 0x60c80, 0x0) pread64$auto(r3, &(0x7f0000000300)='vet\x06\x00\x00\xe0,.\xa0\xf7\x89Pl\x84K?\x01\x84\xa1i\xe00\x81p\xa0U \f\xdbP`:\xe2\'\xa7\xbf\xbd\x04\x18\xad\x90I^\x99M\xe0W\x14\x11\xf4\xeb*\xfe\x90\xb1\xa9O\xa5?\xaa\x8fTi\xd6\x88Q\xda\xca\xea-l\r^+\xc3\x82~\x065\xa9=p\xda\xc3\x8a\x0eF\b\xc5z\x11\xc9\x96.\xed\x8a\x96\xd7\xc05\xd9\xc8\xb2l\xb8~\xb9y[\x91\xb4\x8c\x8bw8D\x1a\x9e\x05\xf9bx', 0x200004000046, 0x6) sysfs$auto(0x2, 0x1f, 0x2) r4 = epoll_create$auto(0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/afs/addr_prefs\x00', 0x10000, 0x0) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) write$auto(0x1, 0x0, 0x80000000) close_range$auto(0x2, 0x8, 0x0) 7.414388783s ago: executing program 0 (id=850): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000880)='/dev/input/event0\x00', 0x40100, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) open(&(0x7f0000000040)='./file0\x00', 0xaf8dbca5ecd58346, 0x9) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xf6, 0xdf, 0xeb1, 0x401, 0x0) r0 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000b40), r0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x22001, 0x0) connect$auto(0x3, 0x0, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x68102, 0x0) pread64$auto(r2, 0x0, 0x3, 0xe9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = timerfd_create$auto(0x1, 0x0) timerfd_settime$auto(r3, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) 6.061774615s ago: executing program 0 (id=851): write$auto(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/loop8/queue/scheduler\x00', 0x808040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) fsopen$auto(0x0, 0x1) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, 0x0, 0x40) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) r1 = open(&(0x7f0000000080)='./file0\x00', 0x662c2, 0xe1d2b27bdc14aa0c) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r1, 0x0) mmap$auto(0x9, 0x20009, 0x4000000000df, 0xfffffffffffffff7, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) r2 = socket(0x2b, 0x1, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r2, 0x2, &(0x7f00000000c0), 0x1) io_uring_register$auto(0x2, 0x3, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) r3 = prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000cc, 0xeb1, 0xffffffffffffffff, 0x8000) timerfd_settime$auto(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x5, 0x84) sendto$auto(r4, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000fe8000"}, 0x1f) ioctl$auto(r3, 0x541b, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) 4.948728014s ago: executing program 0 (id=852): write$auto(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/loop8/queue/scheduler\x00', 0x808040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) fsopen$auto(0x0, 0x1) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, 0x0, 0x40) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x602, 0x1) r1 = open(&(0x7f0000000080)='./file0\x00', 0x662c2, 0xe1d2b27bdc14aa0c) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r1, 0x0) close_range$auto(0x2, 0xa, 0x0) r2 = socket(0x2b, 0x1, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r2, 0x2, &(0x7f00000000c0), 0x1) io_uring_register$auto(0x2, 0x3, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) r3 = prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000cc, 0xeb1, 0xffffffffffffffff, 0x8000) timerfd_settime$auto(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x5, 0x84) sendto$auto(r4, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000fe8000"}, 0x1f) ioctl$auto(r3, 0x541b, 0xffffffffffffffff) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) 3.837637193s ago: executing program 0 (id=853): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000880)='/dev/input/event0\x00', 0x40100, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) open(&(0x7f0000000040)='./file0\x00', 0xaf8dbca5ecd58346, 0x9) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0xf6, 0xdf, 0xeb1, 0x401, 0x0) r0 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) r1 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) read$auto_rng_chrdev_ops_core(r1, &(0x7f0000000040)=""/4096, 0xfffffe82) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000b40), r0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x22001, 0x0) connect$auto(0x3, 0x0, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x68102, 0x0) pread64$auto(r2, 0x0, 0x3, 0xe9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r3 = timerfd_create$auto(0x1, 0x0) timerfd_settime$auto(r3, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) 2.809946004s ago: executing program 4 (id=842): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) mmap$auto(0x0, 0x202000d, 0x6, 0x16, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0xfffffffe, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x430740, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b73, r0, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) fcntl$auto(r1, 0x80000001, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="20002bbd7000fbdbdf257a000000060066004e24000004000501040087b7538a4794c2002500430031924ebda1caf58ee53ad1afc276c6e21e7a35768f899344e991e374111f3081ffaba8a74fdc72e1000000060012014eff000008006100ffffffff1300240042e28b6e759cde6edf63616bb99f14ffdfbc4155c7c03d8edd37e614f4c75d5e3a12066f545b1457d54c5612ab03d24272"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$auto(0x0, 0xfffffffffffffffb, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xfffffffffffffffd, 0x2000b, 0xa169, 0x16, r1, 0x3) mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u5f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/netfs/requests\x00', 0x40080, 0x0) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) waitid$auto_P_PIDFD(0x3, r3, &(0x7f0000000040)={@_si_pad}, 0xf, &(0x7f0000000440)={{0x0, 0x7e}, {0x8, 0x800000002}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x5, 0x8, 0x3, 0x10000, 0x501, 0xfff, 0x9, 0x2, 0x3, 0xc, 0xfffffffffffffffb}) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000000)={0x4, 0x3, 0x7, 0x2, 0x3ff, 0x7fffffff, "9b2189083b030000000d933475a77466", 0x7, 0x5, 0x9, 0x9b, 0x2, 0xb, 0x2}) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x121302, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b294b", 0x5) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x0, 0xa4, 0x4000000000df, 0xdc5e, 0x4, 0x2ffffffffffd) r6 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) copy_file_range$auto(r4, &(0x7f0000000200)=0xfffffffffffffffa, r6, 0x0, 0x7, 0x0) 0s ago: executing program 4 (id=856): mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x202000d, 0x6, 0x16, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0xfffffffe, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x430740, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b73, r0, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) fcntl$auto(r1, 0x80000001, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='p\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002bbd7000fbdbdf257a000000060066004e24000004000501040087b7538a4794c2002500430031924ebda1caf58ee53ad1afc276c6e21e7a35768f899344e991e374111f3081ffaba8a74fdc72e1000000060012014eff000008006100ffffffff1300240042e28b6e759cde6edf63616bb99f14ffdfbc4155c7c03d8edd37e614f4c75d5e3a12066f545b1457d54c5612ab03d24272"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$auto(0x0, 0xfffffffffffffffb, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xfffffffffffffffd, 0x2000b, 0xa169, 0x16, r1, 0x3) mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u5 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.094455][ T9783] RSP: 002b:00007f06dba0a028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 406.094488][ T9783] RAX: ffffffffffffffda RBX: 00007f06dae15fa0 RCX: 00007f06dab9ce59 [ 406.094510][ T9783] RDX: 00000000000bc23c RSI: 0000000000000000 RDI: 0000200000000100 [ 406.094529][ T9783] RBP: 00007f06dac32d6f R08: 0000000000000000 R09: 0000000000000000 [ 406.094549][ T9783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.094568][ T9783] R13: 00007f06dae16038 R14: 00007f06dae15fa0 R15: 00007ffe5c1eab28 [ 406.094610][ T9783] [ 408.323548][ T9813] zram: Added device: zram5 [ 410.269161][ T9830] netlink: 206 bytes leftover after parsing attributes in process `syz.4.717'. [ 414.357059][ T5646] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 414.365476][ T5646] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 414.377316][ T5646] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 414.387719][ T5646] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 414.400364][ T5646] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 414.969351][ T9867] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.976837][ T9867] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.984603][ T9867] bridge_slave_0: entered allmulticast mode [ 414.992641][ T9867] bridge_slave_0: entered promiscuous mode [ 415.001040][ T9867] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.008416][ T9867] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.016920][ T9867] bridge_slave_1: entered allmulticast mode [ 415.024525][ T9867] bridge_slave_1: entered promiscuous mode [ 415.067872][ T9867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.080129][ T9867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.114417][ T9867] team0: Port device team_slave_0 added [ 415.122909][ T9867] team0: Port device team_slave_1 added [ 415.151691][ T9867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.159723][ T9867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.185966][ T9867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.199485][ T9867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.206532][ T9867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.234036][ T9867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.284439][ T9867] hsr_slave_0: entered promiscuous mode [ 415.290948][ T9867] hsr_slave_1: entered promiscuous mode [ 415.297403][ T9867] debugfs: 'hsr0' already exists in 'hsr' [ 415.303663][ T9867] Cannot create hsr debugfs directory [ 415.488928][ T9867] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 415.499855][ T9867] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 415.507992][ T9867] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 415.518214][ T9867] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 415.529207][ T9867] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 415.540940][ T9867] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 415.550499][ T9867] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 415.560483][ T9867] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 415.597694][ T9867] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.604891][ T9867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.612573][ T9867] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.619744][ T9867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.692925][ T9867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.714579][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.723564][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.744443][ T9867] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.760858][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.768048][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.784041][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.791235][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.246998][ T9867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.422178][ T7206] Bluetooth: hci6: command tx timeout [ 416.519231][ T9867] veth0_vlan: entered promiscuous mode [ 416.536597][ T9867] veth1_vlan: entered promiscuous mode [ 416.569598][ T9867] veth0_macvtap: entered promiscuous mode [ 416.581053][ T9867] veth1_macvtap: entered promiscuous mode [ 416.606823][ T9867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.621375][ T9867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.639427][ T48] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.651441][ T48] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.661146][ T48] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.675997][ T48] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.783841][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.799517][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.834254][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.842148][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 418.503304][ T7206] Bluetooth: hci6: command tx timeout [ 420.585032][ T7206] Bluetooth: hci6: command tx timeout [ 422.665378][ T7206] Bluetooth: hci6: command tx timeout [ 427.456898][ T5646] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 427.476758][ T5646] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 427.489097][ T5646] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 427.501143][ T5646] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 427.514713][ T5646] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 427.617415][ T7206] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 427.633416][ T7206] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 427.641559][ T7206] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 427.656572][ T7206] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 427.664458][ T7206] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 427.801106][ T5646] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 427.819386][ T5646] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 427.830295][ T5646] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 427.844048][ T5646] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 427.851988][ T5646] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 428.846327][ T9935] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.854077][ T9935] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.862036][ T9935] bridge_slave_0: entered allmulticast mode [ 428.869764][ T9935] bridge_slave_0: entered promiscuous mode [ 428.891854][ T9935] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.899492][ T9935] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.907124][ T9935] bridge_slave_1: entered allmulticast mode [ 428.915200][ T9935] bridge_slave_1: entered promiscuous mode [ 428.994717][ T9935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.036518][ T9935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.112887][ T9935] team0: Port device team_slave_0 added [ 429.122941][ T9935] team0: Port device team_slave_1 added [ 429.164295][ T9935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.171398][ T9935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.198483][ T9935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.211760][ T9935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.219110][ T9935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.246005][ T9935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.371296][ T9935] hsr_slave_0: entered promiscuous mode [ 429.377881][ T9935] hsr_slave_1: entered promiscuous mode [ 429.384627][ T9935] debugfs: 'hsr0' already exists in 'hsr' [ 429.395275][ T9935] Cannot create hsr debugfs directory [ 429.541692][ T9939] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.548969][ T7206] Bluetooth: hci7: command tx timeout [ 429.555892][ T9939] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.564268][ T9939] bridge_slave_0: entered allmulticast mode [ 429.572351][ T9939] bridge_slave_0: entered promiscuous mode [ 429.603103][ T9939] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.610496][ T9939] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.621325][ T9939] bridge_slave_1: entered allmulticast mode [ 429.629245][ T9939] bridge_slave_1: entered promiscuous mode [ 429.652519][ T9944] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.659929][ T9944] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.667529][ T9944] bridge_slave_0: entered allmulticast mode [ 429.675385][ T9944] bridge_slave_0: entered promiscuous mode [ 429.707403][ T9944] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.715448][ T9944] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.723007][ T7206] Bluetooth: hci8: command tx timeout [ 429.735620][ T9944] bridge_slave_1: entered allmulticast mode [ 429.743611][ T9944] bridge_slave_1: entered promiscuous mode [ 429.787709][ T9939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.803502][ T9939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.855839][ T9944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.896894][ T9944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.910496][ T9939] team0: Port device team_slave_0 added [ 429.938662][ T9939] team0: Port device team_slave_1 added [ 429.949478][ T7206] Bluetooth: hci9: command tx timeout [ 429.994466][ T9944] team0: Port device team_slave_0 added [ 430.023899][ T9944] team0: Port device team_slave_1 added [ 430.057432][ T9939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.064724][ T9939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.091279][ T9939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.126554][ T9939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.133616][ T9939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.160150][ T9939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.181972][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.189298][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.217814][ T9944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.235363][ T9944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.242604][ T9944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 430.270658][ T9944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.373708][ T9939] hsr_slave_0: entered promiscuous mode [ 430.382681][ T9939] hsr_slave_1: entered promiscuous mode [ 430.389179][ T9939] debugfs: 'hsr0' already exists in 'hsr' [ 430.395011][ T9939] Cannot create hsr debugfs directory [ 430.450974][ T9944] hsr_slave_0: entered promiscuous mode [ 430.457591][ T9944] hsr_slave_1: entered promiscuous mode [ 430.464207][ T9944] debugfs: 'hsr0' already exists in 'hsr' [ 430.470010][ T9944] Cannot create hsr debugfs directory [ 430.547863][ T9935] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 430.560340][ T9935] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 430.592178][ T9935] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 430.603300][ T9935] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 430.644548][ T9935] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 430.655163][ T9935] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 430.703894][ T9935] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 430.714375][ T9935] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 430.953717][ T9939] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 430.977301][ T9939] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 430.987577][ T9939] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 431.004623][ T9939] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.013831][ T9939] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 431.031929][ T9939] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 431.041578][ T9939] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 431.052549][ T9939] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 431.188647][ T9944] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 431.204063][ T9944] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 431.214622][ T9944] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 431.225651][ T9944] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 431.242922][ T9944] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 431.258418][ T9944] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 431.274229][ T9944] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 431.284344][ T9944] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 431.307140][ T9935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.371337][ T9935] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.408321][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.415540][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.427255][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.434523][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.502018][ T9939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.572541][ T9935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 431.594084][ T9939] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.614773][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.622035][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.631386][ T7206] Bluetooth: hci7: command tx timeout [ 431.663248][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.670505][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.746938][ T9944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.789907][ T7206] Bluetooth: hci8: command tx timeout [ 431.849649][ T9944] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.901161][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.908430][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.941009][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.948249][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.033023][ T7206] Bluetooth: hci9: command tx timeout [ 432.621695][ T9935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.968907][ T9944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.016765][ T9939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.317149][ T9935] veth0_vlan: entered promiscuous mode [ 433.366195][ T9935] veth1_vlan: entered promiscuous mode [ 433.462495][ T9935] veth0_macvtap: entered promiscuous mode [ 433.479812][ T9935] veth1_macvtap: entered promiscuous mode [ 433.512544][ T9935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.531509][ T9935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.568058][ T1126] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.589086][ T1126] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.639634][ T1126] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.666000][ T1126] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.715006][ T7206] Bluetooth: hci7: command tx timeout [ 433.805950][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.827631][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.872685][ T7206] Bluetooth: hci8: command tx timeout [ 433.904480][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.912929][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.920451][ T9944] veth0_vlan: entered promiscuous mode [ 433.943620][ T9944] veth1_vlan: entered promiscuous mode [ 433.980630][ T9939] veth0_vlan: entered promiscuous mode [ 434.018543][ T9939] veth1_vlan: entered promiscuous mode [ 434.069285][ T9944] veth0_macvtap: entered promiscuous mode [ 434.098416][ T9944] veth1_macvtap: entered promiscuous mode [ 434.111978][ T7206] Bluetooth: hci9: command tx timeout [ 434.161379][ T9944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.202153][ T9944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.228986][ T9939] veth0_macvtap: entered promiscuous mode [ 434.248328][ T7368] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.259277][ T7368] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.278064][ T9939] veth1_macvtap: entered promiscuous mode [ 434.285617][ T7368] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.296329][ T7368] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.340709][ T9939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.434853][ T9939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.492468][ T48] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.515923][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.567334][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.583372][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.593579][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.608365][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.762829][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.771654][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.803506][ T7368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.816554][ T7368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.893134][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.901134][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.447593][T10073] zram: Added device: zram6 [ 435.792432][ T7206] Bluetooth: hci7: command tx timeout [ 435.952772][ T7206] Bluetooth: hci8: command tx timeout [ 436.192706][ T7206] Bluetooth: hci9: command tx timeout [ 436.494696][T10086] FAULT_INJECTION: forcing a failure. [ 436.494696][T10086] name failslab, interval 1, probability 0, space 0, times 0 [ 436.510558][T10086] CPU: 1 UID: 0 PID: 10086 Comm: syz.9.739 Tainted: G L syzkaller #0 PREEMPT(full) [ 436.510612][T10086] Tainted: [L]=SOFTLOCKUP [ 436.510627][T10086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 436.510651][T10086] Call Trace: [ 436.510661][T10086] [ 436.510674][T10086] dump_stack_lvl+0x100/0x190 [ 436.510717][T10086] should_fail_ex.cold+0x5/0xa [ 436.510770][T10086] should_failslab+0xc2/0x120 [ 436.510812][T10086] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 436.510870][T10086] ? alloc_vmap_area+0x640/0x2b70 [ 436.510916][T10086] alloc_vmap_area+0x640/0x2b70 [ 436.510972][T10086] ? __pfx_alloc_vmap_area+0x10/0x10 [ 436.511022][T10086] __get_vm_area_node+0x1ca/0x330 [ 436.511071][T10086] __vmalloc_node_range_noprof+0x228/0x1630 [ 436.511119][T10086] ? __do_sys_listmount+0x289/0xee0 [ 436.511171][T10086] ? __do_sys_listmount+0x289/0xee0 [ 436.511213][T10086] ? alloc_pages_mpol+0x25a/0x540 [ 436.511255][T10086] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 436.511310][T10086] ? rcu_is_watching+0x12/0xc0 [ 436.511358][T10086] __kvmalloc_node_noprof+0x3de/0xa00 [ 436.511392][T10086] ? __do_sys_listmount+0x289/0xee0 [ 436.511427][T10086] ? __do_sys_listmount+0x289/0xee0 [ 436.511462][T10086] ? _copy_from_user+0x59/0xd0 [ 436.511508][T10086] ? copy_mnt_id_req+0x1b1/0x350 [ 436.511578][T10086] __do_sys_listmount+0x289/0xee0 [ 436.511627][T10086] ? irqentry_exit+0x24d/0x970 [ 436.511678][T10086] ? lockdep_hardirqs_on+0x78/0x100 [ 436.511735][T10086] ? __pfx___do_sys_listmount+0x10/0x10 [ 436.511799][T10086] do_syscall_64+0x115/0x840 [ 436.511844][T10086] ? clear_bhb_loop+0x40/0x90 [ 436.511885][T10086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.511918][T10086] RIP: 0033:0x7f161619ce59 [ 436.511945][T10086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.511979][T10086] RSP: 002b:00007f1617018028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 436.512019][T10086] RAX: ffffffffffffffda RBX: 00007f1616415fa0 RCX: 00007f161619ce59 [ 436.512043][T10086] RDX: 00000000000bc23c RSI: 0000000000000000 RDI: 0000200000000100 [ 436.512063][T10086] RBP: 00007f1616232d6f R08: 0000000000000000 R09: 0000000000000000 [ 436.512083][T10086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.512101][T10086] R13: 00007f1616416038 R14: 00007f1616415fa0 R15: 00007fff0b56b498 [ 436.512141][T10086] [ 436.762087][T10088] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 436.827297][T10086] warn_alloc: 1 callbacks suppressed [ 436.827322][T10086] syz.9.739: vmalloc error: size 6164960, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 436.949138][T10086] CPU: 0 UID: 0 PID: 10086 Comm: syz.9.739 Tainted: G L syzkaller #0 PREEMPT(full) [ 436.949188][T10086] Tainted: [L]=SOFTLOCKUP [ 436.949199][T10086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 436.949230][T10086] Call Trace: [ 436.949241][T10086] [ 436.949254][T10086] dump_stack_lvl+0x100/0x190 [ 436.949292][T10086] warn_alloc.cold+0x95/0x1c1 [ 436.949325][T10086] ? __pfx_warn_alloc+0x10/0x10 [ 436.949370][T10086] ? lockdep_hardirqs_on+0x78/0x100 [ 436.949415][T10086] ? __get_vm_area_node+0x2cd/0x330 [ 436.949459][T10086] ? __get_vm_area_node+0x208/0x330 [ 436.949502][T10086] __vmalloc_node_range_noprof+0xccd/0x1630 [ 436.949556][T10086] ? __do_sys_listmount+0x289/0xee0 [ 436.949593][T10086] ? alloc_pages_mpol+0x25a/0x540 [ 436.949631][T10086] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 436.949680][T10086] ? rcu_is_watching+0x12/0xc0 [ 436.949721][T10086] __kvmalloc_node_noprof+0x3de/0xa00 [ 436.949753][T10086] ? __do_sys_listmount+0x289/0xee0 [ 436.949783][T10086] ? __do_sys_listmount+0x289/0xee0 [ 436.949812][T10086] ? _copy_from_user+0x59/0xd0 [ 436.949853][T10086] ? copy_mnt_id_req+0x1b1/0x350 [ 436.949901][T10086] __do_sys_listmount+0x289/0xee0 [ 436.949938][T10086] ? irqentry_exit+0x24d/0x970 [ 436.949978][T10086] ? lockdep_hardirqs_on+0x78/0x100 [ 436.950019][T10086] ? __pfx___do_sys_listmount+0x10/0x10 [ 436.950082][T10086] do_syscall_64+0x115/0x840 [ 436.950123][T10086] ? clear_bhb_loop+0x40/0x90 [ 436.950159][T10086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.950190][T10086] RIP: 0033:0x7f161619ce59 [ 436.950222][T10086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.950252][T10086] RSP: 002b:00007f1617018028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 436.950281][T10086] RAX: ffffffffffffffda RBX: 00007f1616415fa0 RCX: 00007f161619ce59 [ 436.950301][T10086] RDX: 00000000000bc23c RSI: 0000000000000000 RDI: 0000200000000100 [ 436.950320][T10086] RBP: 00007f1616232d6f R08: 0000000000000000 R09: 0000000000000000 [ 436.950342][T10086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.950361][T10086] R13: 00007f1616416038 R14: 00007f1616415fa0 R15: 00007fff0b56b498 [ 436.950403][T10086] [ 436.950444][T10086] Mem-Info: [ 437.305822][T10086] active_anon:25660 inactive_anon:13 isolated_anon:0 [ 437.305822][T10086] active_file:12798 inactive_file:42888 isolated_file:0 [ 437.305822][T10086] unevictable:787 dirty:473 writeback:0 [ 437.305822][T10086] slab_reclaimable:11659 slab_unreclaimable:109787 [ 437.305822][T10086] mapped:60594 shmem:17606 pagetables:1326 [ 437.305822][T10086] sec_pagetables:0 bounce:0 [ 437.305822][T10086] kernel_misc_reclaimable:0 [ 437.305822][T10086] free:1208804 free_pcp:13508 free_cma:0 [ 437.459598][T10094] FAULT_INJECTION: forcing a failure. [ 437.459598][T10094] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 437.528011][ T5646] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 437.539493][ T5646] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 437.552481][ T5646] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 437.562047][T10086] Node 0 active_anon:102940kB inactive_anon:52kB active_file:51092kB inactive_file:171348kB unevictable:1612kB isolated(anon):0kB isolated(file):0kB mapped:258576kB dirty:1792kB writeback:0kB shmem:68888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13824kB pagetables:5404kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 437.602479][T10094] CPU: 1 UID: 0 PID: 10094 Comm: syz.8.740 Tainted: G L syzkaller #0 PREEMPT(full) [ 437.602530][T10094] Tainted: [L]=SOFTLOCKUP [ 437.602554][T10094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 437.602582][T10094] Call Trace: [ 437.602592][T10094] [ 437.602608][T10094] dump_stack_lvl+0x100/0x190 [ 437.602638][T10094] should_fail_ex.cold+0x5/0xa [ 437.602666][T10094] ? prepare_alloc_pages+0x16d/0x5f0 [ 437.602702][T10094] should_fail_alloc_page+0xeb/0x140 [ 437.602734][T10094] prepare_alloc_pages+0x1f0/0x5f0 [ 437.602769][T10094] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 437.602817][T10094] ? rcu_is_watching+0x12/0xc0 [ 437.602845][T10094] ? trace_mm_page_alloc+0x163/0x1d0 [ 437.602876][T10094] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 437.602920][T10094] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 437.602964][T10094] ? __pfx_stack_trace_save+0x10/0x10 [ 437.602997][T10094] ? stack_depot_save_flags+0x27/0x9d0 [ 437.603073][T10094] ? is_bpf_text_address+0x8a/0x1a0 [ 437.603107][T10094] ? is_bpf_text_address+0x8a/0x1a0 [ 437.603141][T10094] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 437.603181][T10094] ? kasan_save_stack+0x3f/0x50 [ 437.603205][T10094] ? kasan_save_stack+0x30/0x50 [ 437.603227][T10094] ? kasan_save_track+0x14/0x30 [ 437.603250][T10094] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 437.603291][T10094] ? __get_vm_area_node+0x1ca/0x330 [ 437.603319][T10094] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 437.603352][T10094] ? __kvmalloc_node_noprof+0x3de/0xa00 [ 437.603375][T10094] ? __do_sys_listmount+0x289/0xee0 [ 437.603400][T10094] ? do_syscall_64+0x115/0x840 [ 437.603434][T10094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.603468][T10094] alloc_pages_bulk_noprof+0x649/0x1360 [ 437.603515][T10094] ? policy_nodemask+0xed/0x4f0 [ 437.603546][T10094] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 437.603609][T10094] __kasan_populate_vmalloc+0xf0/0x210 [ 437.603657][T10094] alloc_vmap_area+0x95d/0x2b70 [ 437.603698][T10094] ? __pfx_alloc_vmap_area+0x10/0x10 [ 437.603734][T10094] __get_vm_area_node+0x1ca/0x330 [ 437.603772][T10094] __vmalloc_node_range_noprof+0x228/0x1630 [ 437.603808][T10094] ? __do_sys_listmount+0x289/0xee0 [ 437.603843][T10094] ? __do_sys_listmount+0x289/0xee0 [ 437.603893][T10094] ? alloc_pages_mpol+0x25a/0x540 [ 437.603939][T10094] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 437.603979][T10094] ? rcu_is_watching+0x12/0xc0 [ 437.604012][T10094] __kvmalloc_node_noprof+0x3de/0xa00 [ 437.604037][T10094] ? __do_sys_listmount+0x289/0xee0 [ 437.604062][T10094] ? __do_sys_listmount+0x289/0xee0 [ 437.604089][T10094] ? _copy_from_user+0x59/0xd0 [ 437.604124][T10094] ? copy_mnt_id_req+0x1b1/0x350 [ 437.604164][T10094] __do_sys_listmount+0x289/0xee0 [ 437.604190][T10094] ? __pfx_do_futex+0x10/0x10 [ 437.604221][T10094] ? __pfx___do_sys_listmount+0x10/0x10 [ 437.604260][T10094] ? rcu_is_watching+0x12/0xc0 [ 437.604292][T10094] do_syscall_64+0x115/0x840 [ 437.604325][T10094] ? clear_bhb_loop+0x40/0x90 [ 437.604355][T10094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.604379][T10094] RIP: 0033:0x7f0caaf9ce59 [ 437.604399][T10094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.604422][T10094] RSP: 002b:00007f0ca91f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 437.604445][T10094] RAX: ffffffffffffffda RBX: 00007f0cab215fa0 RCX: 00007f0caaf9ce59 [ 437.604461][T10094] RDX: 00000000000bc23c RSI: 0000000000000000 RDI: 0000200000000100 [ 437.604476][T10094] RBP: 00007f0cab032d6f R08: 0000000000000000 R09: 0000000000000000 [ 437.604491][T10094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.604506][T10094] R13: 00007f0cab216038 R14: 00007f0cab215fa0 R15: 00007ffe0f9cf3e8 [ 437.604536][T10094] [ 437.983356][ T5646] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 437.998971][ T5646] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 438.245259][T10086] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 438.280243][T10086] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 438.312291][T10086] lowmem_reserve[]: 0 2478 2479 2479 2479 [ 438.318676][T10086] Node 0 DMA32 free:881388kB boost:0kB min:34060kB low:42572kB high:51084kB reserved_highatomic:0KB free_highatomic:0KB active_anon:103484kB inactive_anon:52kB active_file:51192kB inactive_file:171352kB unevictable:1612kB writepending:1792kB zspages:0kB present:3129332kB managed:2537500kB mlocked:76kB bounce:0kB free_pcp:35912kB local_pcp:20056kB free_cma:0kB [ 438.352543][T10086] lowmem_reserve[]: 0 0 1 1 1 [ 438.357737][T10086] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1108kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 438.389172][T10086] lowmem_reserve[]: 0 0 0 0 0 [ 438.395148][T10086] Node 1 Normal free:3923508kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17004kB local_pcp:16756kB free_cma:0kB [ 438.428185][T10086] lowmem_reserve[]: 0 0 0 0 0 [ 438.433743][T10086] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 438.509087][T10086] Node 0 DMA32: 2254*4kB (UME) 27*8kB (M) 627*16kB (UM) 31*32kB (UME) 5*64kB (UM) 5*128kB (UM) 80*256kB (UME) 98*512kB (UM) 47*1024kB (UME) 4*2048kB (UM) 179*4096kB (M) = 881376kB [ 438.692334][T10105] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 438.733308][T10086] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 438.776415][T10086] Node 1 Normal: 5*4kB (UM) 10*8kB (UM) 5*16kB (UM) 8*32kB (UM) 6*64kB (UM) 8*128kB (UM) 9*256kB (UM) 3*512kB (UM) 2*1024kB (M) 2*2048kB (UM) 955*4096kB (UM) = 3923508kB [ 438.847109][T10086] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 438.889326][T10086] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 438.899141][T10086] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 438.919716][T10086] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 438.966343][T10086] 73320 total pagecache pages [ 438.977329][T10086] 2 pages in swap cache [ 439.035322][T10086] Free swap = 124988kB [ 439.041292][T10086] Total swap = 124996kB [ 439.125034][T10086] 2097051 pages RAM [ 439.156569][T10086] 0 pages HighMem/MovableOnly [ 439.211648][T10086] 430784 pages reserved [ 439.216101][T10086] 0 pages cma reserved [ 439.938572][T10119] binder: 10118:10119 ioctl 541b 0 returned -22 [ 440.276216][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.282616][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.515186][ T7206] Bluetooth: hci10: command tx timeout [ 440.613608][T10096] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.648996][T10096] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.673340][T10096] bridge_slave_0: entered allmulticast mode [ 440.700525][T10096] bridge_slave_0: entered promiscuous mode [ 440.951192][T10135] binder: 10132:10135 ioctl 541b 0 returned -22 [ 440.970386][T10096] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.002158][T10096] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.030006][T10096] bridge_slave_1: entered allmulticast mode [ 441.070145][T10096] bridge_slave_1: entered promiscuous mode [ 441.282009][T10096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.322152][T10096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.477903][T10096] team0: Port device team_slave_0 added [ 441.488159][T10096] team0: Port device team_slave_1 added [ 441.535523][T10096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.552423][T10096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.584979][T10096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.599957][T10096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.607611][T10096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.642412][T10096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.899856][T10096] hsr_slave_0: entered promiscuous mode [ 441.941235][T10096] hsr_slave_1: entered promiscuous mode [ 441.953639][T10096] debugfs: 'hsr0' already exists in 'hsr' [ 441.966952][T10096] Cannot create hsr debugfs directory [ 442.595263][ T7206] Bluetooth: hci10: command tx timeout [ 443.074443][T10096] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.573579][T10096] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.914365][T10096] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.132608][T10096] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.431392][T10163] FAULT_INJECTION: forcing a failure. [ 444.431392][T10163] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 444.491639][T10163] CPU: 0 UID: 0 PID: 10163 Comm: syz.9.750 Tainted: G L syzkaller #0 PREEMPT(full) [ 444.491690][T10163] Tainted: [L]=SOFTLOCKUP [ 444.491701][T10163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 444.491722][T10163] Call Trace: [ 444.491733][T10163] [ 444.491745][T10163] dump_stack_lvl+0x100/0x190 [ 444.491786][T10163] should_fail_ex.cold+0x5/0xa [ 444.491824][T10163] ? prepare_alloc_pages+0x16d/0x5f0 [ 444.491871][T10163] should_fail_alloc_page+0xeb/0x140 [ 444.491915][T10163] prepare_alloc_pages+0x1f0/0x5f0 [ 444.491966][T10163] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 444.492029][T10163] ? rcu_is_watching+0x12/0xc0 [ 444.492068][T10163] ? trace_mm_page_alloc+0x163/0x1d0 [ 444.492113][T10163] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 444.492171][T10163] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 444.492228][T10163] ? __pfx_stack_trace_save+0x10/0x10 [ 444.492268][T10163] ? stack_depot_save_flags+0x27/0x9d0 [ 444.492322][T10163] ? is_bpf_text_address+0x8a/0x1a0 [ 444.492369][T10163] ? is_bpf_text_address+0x8a/0x1a0 [ 444.492415][T10163] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 444.492472][T10163] ? kasan_save_stack+0x3f/0x50 [ 444.492504][T10163] ? kasan_save_stack+0x30/0x50 [ 444.492537][T10163] ? kasan_save_track+0x14/0x30 [ 444.492580][T10163] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 444.492635][T10163] ? __get_vm_area_node+0x1ca/0x330 [ 444.492673][T10163] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 444.492717][T10163] ? __kvmalloc_node_noprof+0x3de/0xa00 [ 444.492747][T10163] ? __do_sys_listmount+0x289/0xee0 [ 444.492777][T10163] ? do_syscall_64+0x115/0x840 [ 444.492818][T10163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.492861][T10163] alloc_pages_bulk_noprof+0x649/0x1360 [ 444.492927][T10163] ? policy_nodemask+0xed/0x4f0 [ 444.492966][T10163] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 444.493042][T10163] __kasan_populate_vmalloc+0xf0/0x210 [ 444.493106][T10163] alloc_vmap_area+0x95d/0x2b70 [ 444.493161][T10163] ? __pfx_alloc_vmap_area+0x10/0x10 [ 444.493211][T10163] __get_vm_area_node+0x1ca/0x330 [ 444.493259][T10163] __vmalloc_node_range_noprof+0x228/0x1630 [ 444.493306][T10163] ? __do_sys_listmount+0x289/0xee0 [ 444.493340][T10163] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 444.493402][T10163] ? __do_sys_listmount+0x289/0xee0 [ 444.493445][T10163] ? alloc_pages_mpol+0x25a/0x540 [ 444.493487][T10163] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 444.493542][T10163] ? rcu_is_watching+0x12/0xc0 [ 444.493601][T10163] __kvmalloc_node_noprof+0x3de/0xa00 [ 444.493643][T10163] ? __do_sys_listmount+0x289/0xee0 [ 444.493678][T10163] ? __do_sys_listmount+0x289/0xee0 [ 444.493714][T10163] ? _copy_from_user+0x59/0xd0 [ 444.493762][T10163] ? copy_mnt_id_req+0x1b1/0x350 [ 444.493829][T10163] __do_sys_listmount+0x289/0xee0 [ 444.493865][T10163] ? __pfx_do_futex+0x10/0x10 [ 444.493908][T10163] ? __pfx___do_sys_listmount+0x10/0x10 [ 444.493970][T10163] ? rcu_is_watching+0x12/0xc0 [ 444.494014][T10163] do_syscall_64+0x115/0x840 [ 444.494059][T10163] ? clear_bhb_loop+0x40/0x90 [ 444.494100][T10163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.494134][T10163] RIP: 0033:0x7f161619ce59 [ 444.494162][T10163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.494195][T10163] RSP: 002b:00007f1617018028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 444.494229][T10163] RAX: ffffffffffffffda RBX: 00007f1616415fa0 RCX: 00007f161619ce59 [ 444.494251][T10163] RDX: 00000000000bc23c RSI: 0000000000000000 RDI: 0000200000000100 [ 444.494279][T10163] RBP: 00007f1616232d6f R08: 0000000000000000 R09: 0000000000000000 [ 444.494299][T10163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.494319][T10163] R13: 00007f1616416038 R14: 00007f1616415fa0 R15: 00007fff0b56b498 [ 444.494361][T10163] [ 444.676955][ T7206] Bluetooth: hci10: command tx timeout [ 445.225058][T10096] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 445.270406][T10096] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 445.283726][T10096] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 445.312992][T10096] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 445.343080][T10096] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 445.423612][T10096] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 445.495452][T10096] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 445.571713][T10096] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 446.000098][T10096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.086711][T10096] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.116719][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.123933][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.180682][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.187883][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.997566][ T7206] Bluetooth: hci10: command tx timeout [ 447.694678][T10211] netlink: 206 bytes leftover after parsing attributes in process `syz.8.756'. [ 447.752648][T10096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.927001][T10096] veth0_vlan: entered promiscuous mode [ 447.961947][T10214] futex_wake_op: syz.8.757 tries to shift op by -2048; fix this program [ 447.982668][T10096] veth1_vlan: entered promiscuous mode [ 447.999231][T10214] futex_wake_op: syz.8.757 tries to shift op by -2048; fix this program [ 448.023057][T10214] 0x000000000001-0x000000020000 : "" [ 448.233445][T10096] veth0_macvtap: entered promiscuous mode [ 448.283278][T10214] ftl_cs: FTL header corrupt! [ 448.356025][T10096] veth1_macvtap: entered promiscuous mode [ 448.445059][T10096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.548779][T10096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.592930][ T151] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.621746][ T151] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.633497][ T54] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.691354][ T54] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.936283][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.974343][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.097351][ T7368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.116383][ T7368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.229185][T10242] FAULT_INJECTION: forcing a failure. [ 450.229185][T10242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.265053][T10242] CPU: 1 UID: 0 PID: 10242 Comm: syz.7.761 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.265113][T10242] Tainted: [L]=SOFTLOCKUP [ 450.265126][T10242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 450.265145][T10242] Call Trace: [ 450.265156][T10242] [ 450.265168][T10242] dump_stack_lvl+0x100/0x190 [ 450.265211][T10242] should_fail_ex.cold+0x5/0xa [ 450.265254][T10242] _copy_from_user+0x2e/0xd0 [ 450.265303][T10242] copy_mnt_id_req+0x108/0x350 [ 450.265360][T10242] __do_sys_listmount+0x184/0xee0 [ 450.265397][T10242] ? __pfx_do_futex+0x10/0x10 [ 450.265437][T10242] ? fput+0x79/0x100 [ 450.265484][T10242] ? __pfx___do_sys_listmount+0x10/0x10 [ 450.265541][T10242] ? rcu_is_watching+0x12/0xc0 [ 450.265587][T10242] do_syscall_64+0x115/0x840 [ 450.265635][T10242] ? clear_bhb_loop+0x40/0x90 [ 450.265677][T10242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.265711][T10242] RIP: 0033:0x7ff9dc79ce59 [ 450.265738][T10242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.265771][T10242] RSP: 002b:00007ff9dd67e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 450.265804][T10242] RAX: ffffffffffffffda RBX: 00007ff9dca15fa0 RCX: 00007ff9dc79ce59 [ 450.265827][T10242] RDX: 00000000000bc23c RSI: 0000000000000000 RDI: 0000200000000100 [ 450.265847][T10242] RBP: 00007ff9dc832d6f R08: 0000000000000000 R09: 0000000000000000 [ 450.265868][T10242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.265887][T10242] R13: 00007ff9dca16038 R14: 00007ff9dca15fa0 R15: 00007ffd26bd5d68 [ 450.265929][T10242] [ 451.887014][T10255] binder: 10254:10255 ioctl 541b 0 returned -22 [ 453.189061][T10276] FAULT_INJECTION: forcing a failure. [ 453.189061][T10276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.214305][T10276] CPU: 0 UID: 0 PID: 10276 Comm: syz.3.767 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.214359][T10276] Tainted: [L]=SOFTLOCKUP [ 453.214372][T10276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 453.214393][T10276] Call Trace: [ 453.214404][T10276] [ 453.214417][T10276] dump_stack_lvl+0x100/0x190 [ 453.214460][T10276] should_fail_ex.cold+0x5/0xa [ 453.214505][T10276] _copy_from_user+0x2e/0xd0 [ 453.214555][T10276] copy_mnt_id_req+0x108/0x350 [ 453.214612][T10276] __do_sys_listmount+0x184/0xee0 [ 453.214649][T10276] ? __pfx_do_futex+0x10/0x10 [ 453.214689][T10276] ? fput+0x79/0x100 [ 453.214735][T10276] ? __pfx___do_sys_listmount+0x10/0x10 [ 453.214792][T10276] ? rcu_is_watching+0x12/0xc0 [ 453.214839][T10276] do_syscall_64+0x115/0x840 [ 453.214888][T10276] ? clear_bhb_loop+0x40/0x90 [ 453.214930][T10276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.214975][T10276] RIP: 0033:0x7f2d1df9ce59 [ 453.215023][T10276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.215058][T10276] RSP: 002b:00007f2d1c1f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 453.215091][T10276] RAX: ffffffffffffffda RBX: 00007f2d1e215fa0 RCX: 00007f2d1df9ce59 [ 453.215116][T10276] RDX: 00000000000bc23c RSI: 0000000000000000 RDI: 0000200000000100 [ 453.215138][T10276] RBP: 00007f2d1e032d6f R08: 0000000000000000 R09: 0000000000000000 [ 453.215158][T10276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.215178][T10276] R13: 00007f2d1e216038 R14: 00007f2d1e215fa0 R15: 00007ffcea17d9b8 [ 453.215222][T10276] [ 453.947731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 454.218646][T10285] FAULT_INJECTION: forcing a failure. [ 454.218646][T10285] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 454.242702][T10285] CPU: 0 UID: 0 PID: 10285 Comm: syz.7.770 Tainted: G L syzkaller #0 PREEMPT(full) [ 454.242750][T10285] Tainted: [L]=SOFTLOCKUP [ 454.242759][T10285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 454.242780][T10285] Call Trace: [ 454.242788][T10285] [ 454.242797][T10285] dump_stack_lvl+0x100/0x190 [ 454.242827][T10285] should_fail_ex.cold+0x5/0xa [ 454.242876][T10285] ? prepare_alloc_pages+0x16d/0x5f0 [ 454.242923][T10285] should_fail_alloc_page+0xeb/0x140 [ 454.242967][T10285] prepare_alloc_pages+0x1f0/0x5f0 [ 454.243011][T10285] ? arch_stack_walk+0xa6/0xf0 [ 454.243043][T10285] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 454.243090][T10285] ? stack_trace_save+0x8e/0xc0 [ 454.243122][T10285] ? __pfx_stack_trace_save+0x10/0x10 [ 454.243155][T10285] ? stack_depot_save_flags+0x27/0x9d0 [ 454.243194][T10285] ? is_bpf_text_address+0x8a/0x1a0 [ 454.243227][T10285] ? is_bpf_text_address+0x8a/0x1a0 [ 454.243262][T10285] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 454.243304][T10285] ? kasan_save_stack+0x3f/0x50 [ 454.243327][T10285] ? kasan_save_stack+0x30/0x50 [ 454.243350][T10285] ? kasan_save_track+0x14/0x30 [ 454.243373][T10285] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 454.243414][T10285] ? __get_vm_area_node+0x1ca/0x330 [ 454.243443][T10285] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 454.243487][T10285] ? __kvmalloc_node_noprof+0x3de/0xa00 [ 454.243510][T10285] ? __do_sys_listmount+0x289/0xee0 [ 454.243546][T10285] ? do_syscall_64+0x115/0x840 [ 454.243580][T10285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.243618][T10285] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 454.243655][T10285] ? policy_nodemask+0xed/0x4f0 [ 454.243686][T10285] alloc_pages_mpol+0x1fb/0x540 [ 454.243716][T10285] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 454.243753][T10285] alloc_pages_noprof+0x1a/0x160 [ 454.243793][T10285] get_free_pages_noprof+0x10/0xb0 [ 454.243820][T10285] __kasan_populate_vmalloc+0xa0/0x210 [ 454.243867][T10285] alloc_vmap_area+0x95d/0x2b70 [ 454.243906][T10285] ? __pfx_alloc_vmap_area+0x10/0x10 [ 454.243941][T10285] __get_vm_area_node+0x1ca/0x330 [ 454.243976][T10285] __vmalloc_node_range_noprof+0x228/0x1630 [ 454.244011][T10285] ? __do_sys_listmount+0x289/0xee0 [ 454.244046][T10285] ? __do_sys_listmount+0x289/0xee0 [ 454.244074][T10285] ? alloc_pages_mpol+0x25a/0x540 [ 454.244105][T10285] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 454.244176][T10285] ? rcu_is_watching+0x12/0xc0 [ 454.244219][T10285] __kvmalloc_node_noprof+0x3de/0xa00 [ 454.244244][T10285] ? __do_sys_listmount+0x289/0xee0 [ 454.244269][T10285] ? __do_sys_listmount+0x289/0xee0 [ 454.244296][T10285] ? _copy_from_user+0x59/0xd0 [ 454.244329][T10285] ? copy_mnt_id_req+0x1b1/0x350 [ 454.244385][T10285] __do_sys_listmount+0x289/0xee0 [ 454.244427][T10285] ? __pfx_do_futex+0x10/0x10 [ 454.244458][T10285] ? __pfx___do_sys_listmount+0x10/0x10 [ 454.244497][T10285] ? rcu_is_watching+0x12/0xc0 [ 454.244528][T10285] do_syscall_64+0x115/0x840 [ 454.244561][T10285] ? clear_bhb_loop+0x40/0x90 [ 454.244590][T10285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.244615][T10285] RIP: 0033:0x7ff9dc79ce59 [ 454.244636][T10285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.244659][T10285] RSP: 002b:00007ff9dd67e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 454.244682][T10285] RAX: ffffffffffffffda RBX: 00007ff9dca15fa0 RCX: 00007ff9dc79ce59 [ 454.244699][T10285] RDX: 00000000000bc23c RSI: 0000000000000000 RDI: 0000200000000100 [ 454.244713][T10285] RBP: 00007ff9dc832d6f R08: 0000000000000000 R09: 0000000000000000 [ 454.244728][T10285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.244743][T10285] R13: 00007ff9dca16038 R14: 00007ff9dca15fa0 R15: 00007ffd26bd5d68 [ 454.244779][T10285] [ 454.246490][T10285] warn_alloc: 2 callbacks suppressed [ 454.246515][T10285] syz.7.770: vmalloc error: size 6164960, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 454.724106][T10285] CPU: 0 UID: 0 PID: 10285 Comm: syz.7.770 Tainted: G L syzkaller #0 PREEMPT(full) [ 454.724179][T10285] Tainted: [L]=SOFTLOCKUP [ 454.724187][T10285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 454.724202][T10285] Call Trace: [ 454.724209][T10285] [ 454.724218][T10285] dump_stack_lvl+0x100/0x190 [ 454.724247][T10285] warn_alloc.cold+0x95/0x1c1 [ 454.724298][T10285] ? __pfx_warn_alloc+0x10/0x10 [ 454.724348][T10285] ? lockdep_hardirqs_on+0x78/0x100 [ 454.724385][T10285] ? __get_vm_area_node+0x2cd/0x330 [ 454.724421][T10285] ? __get_vm_area_node+0x208/0x330 [ 454.724456][T10285] __vmalloc_node_range_noprof+0xccd/0x1630 [ 454.724499][T10285] ? __do_sys_listmount+0x289/0xee0 [ 454.724534][T10285] ? alloc_pages_mpol+0x25a/0x540 [ 454.724566][T10285] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 454.724613][T10285] ? rcu_is_watching+0x12/0xc0 [ 454.724646][T10285] __kvmalloc_node_noprof+0x3de/0xa00 [ 454.724677][T10285] ? __do_sys_listmount+0x289/0xee0 [ 454.724702][T10285] ? __do_sys_listmount+0x289/0xee0 [ 454.724726][T10285] ? _copy_from_user+0x59/0xd0 [ 454.724760][T10285] ? copy_mnt_id_req+0x1b1/0x350 [ 454.724799][T10285] __do_sys_listmount+0x289/0xee0 [ 454.724824][T10285] ? __pfx_do_futex+0x10/0x10 [ 454.724855][T10285] ? __pfx___do_sys_listmount+0x10/0x10 [ 454.724894][T10285] ? rcu_is_watching+0x12/0xc0 [ 454.724924][T10285] do_syscall_64+0x115/0x840 [ 454.724957][T10285] ? clear_bhb_loop+0x40/0x90 [ 454.724986][T10285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.725010][T10285] RIP: 0033:0x7ff9dc79ce59 [ 454.725029][T10285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.725053][T10285] RSP: 002b:00007ff9dd67e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 454.725075][T10285] RAX: ffffffffffffffda RBX: 00007ff9dca15fa0 RCX: 00007ff9dc79ce59 [ 454.725091][T10285] RDX: 00000000000bc23c RSI: 0000000000000000 RDI: 0000200000000100 [ 454.725106][T10285] RBP: 00007ff9dc832d6f R08: 0000000000000000 R09: 0000000000000000 [ 454.725119][T10285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.725133][T10285] R13: 00007ff9dca16038 R14: 00007ff9dca15fa0 R15: 00007ffd26bd5d68 [ 454.725167][T10285] [ 454.725176][T10285] Mem-Info: [ 454.972854][T10285] active_anon:29139 inactive_anon:13 isolated_anon:0 [ 454.972854][T10285] active_file:12776 inactive_file:42904 isolated_file:0 [ 454.972854][T10285] unevictable:787 dirty:583 writeback:0 [ 454.972854][T10285] slab_reclaimable:12018 slab_unreclaimable:114174 [ 454.972854][T10285] mapped:63766 shmem:21518 pagetables:1341 [ 454.972854][T10285] sec_pagetables:0 bounce:0 [ 454.972854][T10285] kernel_misc_reclaimable:0 [ 454.972854][T10285] free:1193594 free_pcp:16834 free_cma:0 [ 455.041440][T10285] Node 0 active_anon:116556kB inactive_anon:52kB active_file:51104kB inactive_file:171412kB unevictable:1612kB isolated(anon):0kB isolated(file):0kB mapped:255064kB dirty:2332kB writeback:0kB shmem:84536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14092kB pagetables:5264kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 455.134755][T10285] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 455.175871][T10285] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 455.222172][T10285] lowmem_reserve[]: 0 2478 2479 2479 2479 [ 455.233138][T10285] Node 0 DMA32 free:841712kB boost:0kB min:34060kB low:42572kB high:51084kB reserved_highatomic:0KB free_highatomic:0KB active_anon:116848kB inactive_anon:52kB active_file:51132kB inactive_file:171412kB unevictable:1612kB writepending:2356kB zspages:0kB present:3129332kB managed:2537500kB mlocked:76kB bounce:0kB free_pcp:44744kB local_pcp:21256kB free_cma:0kB [ 455.282873][T10285] lowmem_reserve[]: 0 0 1 1 1 [ 455.289460][T10285] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1108kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 455.325634][T10285] lowmem_reserve[]: 0 0 0 0 0 [ 455.331120][T10285] Node 1 Normal free:3924764kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15744kB local_pcp:504kB free_cma:0kB [ 455.366667][T10285] lowmem_reserve[]: 0 0 0 0 0 [ 455.373297][T10285] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 455.393129][T10285] Node 0 DMA32: 624*4kB (UME) 37*8kB (UME) 457*16kB (UME) 42*32kB (UME) 19*64kB (UME) 7*128kB (UE) 22*256kB (UM) 99*512kB (UME) 48*1024kB (UME) 5*2048kB (UME) 174*4096kB (M) = 841976kB [ 455.413643][T10285] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 455.451341][T10285] Node 1 Normal: 7*4kB (U) 6*8kB (U) 5*16kB (U) 6*32kB (U) 5*64kB (UM) 9*128kB (UM) 10*256kB (UM) 5*512kB (UM) 2*1024kB (M) 2*2048kB (UM) 955*4096kB (UM) = 3924764kB [ 455.485380][T10285] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 455.503824][T10285] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 455.536276][T10285] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 455.567364][T10285] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 455.614119][T10285] 77223 total pagecache pages [ 455.634320][T10285] 3 pages in swap cache [ 455.656191][T10285] Free swap = 124988kB [ 455.671665][T10285] Total swap = 124996kB [ 455.694325][T10285] 2097051 pages RAM [ 455.703508][T10285] 0 pages HighMem/MovableOnly [ 455.708465][T10285] 430784 pages reserved [ 455.713014][T10285] 0 pages cma reserved [ 455.967771][T10292] binder: 10291:10292 ioctl 541b 0 returned -22 [ 456.439956][T10298] FAULT_INJECTION: forcing a failure. [ 456.439956][T10298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.455193][T10298] CPU: 1 UID: 0 PID: 10298 Comm: syz.3.774 Tainted: G L syzkaller #0 PREEMPT(full) [ 456.455232][T10298] Tainted: [L]=SOFTLOCKUP [ 456.455241][T10298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 456.455256][T10298] Call Trace: [ 456.455264][T10298] [ 456.455273][T10298] dump_stack_lvl+0x100/0x190 [ 456.455303][T10298] should_fail_ex.cold+0x5/0xa [ 456.455334][T10298] _copy_from_user+0x2e/0xd0 [ 456.455373][T10298] copy_mnt_id_req+0x108/0x350 [ 456.455415][T10298] __do_sys_listmount+0x184/0xee0 [ 456.455441][T10298] ? __pfx_do_futex+0x10/0x10 [ 456.455470][T10298] ? fput+0x79/0x100 [ 456.455504][T10298] ? __pfx___do_sys_listmount+0x10/0x10 [ 456.455544][T10298] ? rcu_is_watching+0x12/0xc0 [ 456.455576][T10298] do_syscall_64+0x115/0x840 [ 456.455621][T10298] ? clear_bhb_loop+0x40/0x90 [ 456.455652][T10298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.455677][T10298] RIP: 0033:0x7f2d1df9ce59 [ 456.455696][T10298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.455720][T10298] RSP: 002b:00007f2d1c1f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 456.455742][T10298] RAX: ffffffffffffffda RBX: 00007f2d1e215fa0 RCX: 00007f2d1df9ce59 [ 456.455758][T10298] RDX: 00000000000bc23c RSI: 0000000000000000 RDI: 0000200000000100 [ 456.455773][T10298] RBP: 00007f2d1e032d6f R08: 0000000000000000 R09: 0000000000000000 [ 456.455787][T10298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.455801][T10298] R13: 00007f2d1e216038 R14: 00007f2d1e215fa0 R15: 00007ffcea17d9b8 [ 456.455831][T10298] [ 457.074017][T10305] FAULT_INJECTION: forcing a failure. [ 457.074017][T10305] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 457.088376][T10305] CPU: 0 UID: 0 PID: 10305 Comm: syz.7.775 Tainted: G L syzkaller #0 PREEMPT(full) [ 457.088438][T10305] Tainted: [L]=SOFTLOCKUP [ 457.088449][T10305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 457.088479][T10305] Call Trace: [ 457.088490][T10305] [ 457.088502][T10305] dump_stack_lvl+0x100/0x190 [ 457.088541][T10305] should_fail_ex.cold+0x5/0xa [ 457.088574][T10305] ? prepare_alloc_pages+0x16d/0x5f0 [ 457.088615][T10305] should_fail_alloc_page+0xeb/0x140 [ 457.088653][T10305] prepare_alloc_pages+0x1f0/0x5f0 [ 457.088696][T10305] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 457.088753][T10305] ? rcu_is_watching+0x12/0xc0 [ 457.088786][T10305] ? trace_mm_page_alloc+0x163/0x1d0 [ 457.088824][T10305] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 457.088875][T10305] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 457.088930][T10305] ? __pfx_stack_trace_save+0x10/0x10 [ 457.088970][T10305] ? stack_depot_save_flags+0x27/0x9d0 [ 457.089016][T10305] ? is_bpf_text_address+0x8a/0x1a0 [ 457.089054][T10305] ? is_bpf_text_address+0x8a/0x1a0 [ 457.089095][T10305] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 457.089142][T10305] ? kasan_save_stack+0x3f/0x50 [ 457.089170][T10305] ? kasan_save_stack+0x30/0x50 [ 457.089196][T10305] ? kasan_save_track+0x14/0x30 [ 457.089225][T10305] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 457.089273][T10305] ? __get_vm_area_node+0x1ca/0x330 [ 457.089307][T10305] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 457.089345][T10305] ? __kvmalloc_node_noprof+0x3de/0xa00 [ 457.089372][T10305] ? __do_sys_listmount+0x289/0xee0 [ 457.089403][T10305] ? do_syscall_64+0x115/0x840 [ 457.089443][T10305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.089498][T10305] alloc_pages_bulk_noprof+0x649/0x1360 [ 457.089557][T10305] ? policy_nodemask+0xed/0x4f0 [ 457.089595][T10305] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 457.089663][T10305] __kasan_populate_vmalloc+0xf0/0x210 [ 457.089719][T10305] alloc_vmap_area+0x95d/0x2b70 [ 457.089773][T10305] ? __pfx_alloc_vmap_area+0x10/0x10 [ 457.089818][T10305] __get_vm_area_node+0x1ca/0x330 [ 457.089863][T10305] __vmalloc_node_range_noprof+0x228/0x1630 [ 457.089908][T10305] ? __do_sys_listmount+0x289/0xee0 [ 457.089971][T10305] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 457.090014][T10305] ? __do_sys_listmount+0x289/0xee0 [ 457.090043][T10305] ? alloc_pages_mpol+0x25a/0x540 [ 457.090074][T10305] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 457.090115][T10305] ? rcu_is_watching+0x12/0xc0 [ 457.090149][T10305] __kvmalloc_node_noprof+0x3de/0xa00 [ 457.090174][T10305] ? __do_sys_listmount+0x289/0xee0 [ 457.090199][T10305] ? __do_sys_listmount+0x289/0xee0 [ 457.090224][T10305] ? _copy_from_user+0x59/0xd0 [ 457.090259][T10305] ? copy_mnt_id_req+0x1b1/0x350 [ 457.090300][T10305] __do_sys_listmount+0x289/0xee0 [ 457.090326][T10305] ? __pfx_do_futex+0x10/0x10 [ 457.090357][T10305] ? __pfx___do_sys_listmount+0x10/0x10 [ 457.090388][T10305] ? fput+0x79/0x100 [ 457.090427][T10305] ? rcu_is_watching+0x12/0xc0 [ 457.090468][T10305] do_syscall_64+0x115/0x840 [ 457.090502][T10305] ? clear_bhb_loop+0x40/0x90 [ 457.090532][T10305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.090557][T10305] RIP: 0033:0x7ff9dc79ce59 [ 457.090578][T10305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.090602][T10305] RSP: 002b:00007ff9dd67e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 457.090626][T10305] RAX: ffffffffffffffda RBX: 00007ff9dca15fa0 RCX: 00007ff9dc79ce59 [ 457.090642][T10305] RDX: 00000000000bc23c RSI: 0000000000000000 RDI: 0000200000000100 [ 457.090657][T10305] RBP: 00007ff9dc832d6f R08: 0000000000000000 R09: 0000000000000000 [ 457.090672][T10305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.090687][T10305] R13: 00007ff9dca16038 R14: 00007ff9dca15fa0 R15: 00007ffd26bd5d68 [ 457.090717][T10305] [ 457.741941][T10308] FAULT_INJECTION: forcing a failure. [ 457.741941][T10308] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 457.755574][T10308] CPU: 0 UID: 0 PID: 10308 Comm: syz.3.776 Tainted: G L syzkaller #0 PREEMPT(full) [ 457.755626][T10308] Tainted: [L]=SOFTLOCKUP [ 457.755638][T10308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 457.755656][T10308] Call Trace: [ 457.755666][T10308] [ 457.755678][T10308] dump_stack_lvl+0x100/0x190 [ 457.755718][T10308] should_fail_ex.cold+0x5/0xa [ 457.755753][T10308] ? prepare_alloc_pages+0x16d/0x5f0 [ 457.755801][T10308] should_fail_alloc_page+0xeb/0x140 [ 457.755844][T10308] prepare_alloc_pages+0x1f0/0x5f0 [ 457.755894][T10308] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 457.755958][T10308] ? rcu_is_watching+0x12/0xc0 [ 457.756008][T10308] ? trace_mm_page_alloc+0x163/0x1d0 [ 457.756052][T10308] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 457.756111][T10308] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 457.756173][T10308] ? __pfx_stack_trace_save+0x10/0x10 [ 457.756217][T10308] ? stack_depot_save_flags+0x27/0x9d0 [ 457.756271][T10308] ? is_bpf_text_address+0x8a/0x1a0 [ 457.756314][T10308] ? is_bpf_text_address+0x8a/0x1a0 [ 457.756362][T10308] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 457.756416][T10308] ? kasan_save_stack+0x3f/0x50 [ 457.756449][T10308] ? kasan_save_stack+0x30/0x50 [ 457.756480][T10308] ? kasan_save_track+0x14/0x30 [ 457.756513][T10308] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 457.756567][T10308] ? __get_vm_area_node+0x1ca/0x330 [ 457.756607][T10308] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 457.756653][T10308] ? __kvmalloc_node_noprof+0x3de/0xa00 [ 457.756685][T10308] ? __do_sys_listmount+0x289/0xee0 [ 457.756720][T10308] ? do_syscall_64+0x115/0x840 [ 457.756767][T10308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.756814][T10308] alloc_pages_bulk_noprof+0x649/0x1360 [ 457.756876][T10308] ? policy_nodemask+0xed/0x4f0 [ 457.756914][T10308] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 457.756990][T10308] __kasan_populate_vmalloc+0xf0/0x210 [ 457.757056][T10308] alloc_vmap_area+0x95d/0x2b70 [ 457.757112][T10308] ? __pfx_alloc_vmap_area+0x10/0x10 [ 457.757163][T10308] __get_vm_area_node+0x1ca/0x330 [ 457.757212][T10308] __vmalloc_node_range_noprof+0x228/0x1630 [ 457.757261][T10308] ? __do_sys_listmount+0x289/0xee0 [ 457.757295][T10308] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 457.757354][T10308] ? __do_sys_listmount+0x289/0xee0 [ 457.757399][T10308] ? alloc_pages_mpol+0x25a/0x540 [ 457.757443][T10308] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 457.757499][T10308] ? rcu_is_watching+0x12/0xc0 [ 457.757549][T10308] __kvmalloc_node_noprof+0x3de/0xa00 [ 457.757583][T10308] ? __do_sys_listmount+0x289/0xee0 [ 457.757617][T10308] ? __do_sys_listmount+0x289/0xee0 [ 457.757651][T10308] ? _copy_from_user+0x59/0xd0 [ 457.757696][T10308] ? copy_mnt_id_req+0x1b1/0x350 [ 457.757752][T10308] __do_sys_listmount+0x289/0xee0 [ 457.757788][T10308] ? __pfx_do_futex+0x10/0x10 [ 457.757832][T10308] ? __pfx___do_sys_listmount+0x10/0x10 [ 457.757874][T10308] ? fput+0x79/0x100 [ 457.757930][T10308] ? rcu_is_watching+0x12/0xc0 [ 457.757973][T10308] do_syscall_64+0x115/0x840 [ 457.758027][T10308] ? clear_bhb_loop+0x40/0x90 [ 457.758067][T10308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.758101][T10308] RIP: 0033:0x7f2d1df9ce59 [ 457.758130][T10308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.758164][T10308] RSP: 002b:00007f2d1c1f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 457.758196][T10308] RAX: ffffffffffffffda RBX: 00007f2d1e215fa0 RCX: 00007f2d1df9ce59 [ 457.758217][T10308] RDX: 00000000000bc23c RSI: 0000000000000000 RDI: 0000200000000100 [ 457.758237][T10308] RBP: 00007f2d1e032d6f R08: 0000000000000000 R09: 0000000000000000 [ 457.758257][T10308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.758276][T10308] R13: 00007f2d1e216038 R14: 00007f2d1e215fa0 R15: 00007ffcea17d9b8 [ 457.758317][T10308] [ 459.128930][T10326] zram: Added device: zram7 [ 459.717226][T10337] binder: 10336:10337 ioctl 541b 0 returned -22 [ 460.469526][T10352] FAULT_INJECTION: forcing a failure. [ 460.469526][T10352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.494106][T10352] CPU: 0 UID: 0 PID: 10352 Comm: syz.7.783 Tainted: G L syzkaller #0 PREEMPT(full) [ 460.494158][T10352] Tainted: [L]=SOFTLOCKUP [ 460.494169][T10352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 460.494189][T10352] Call Trace: [ 460.494200][T10352] [ 460.494211][T10352] dump_stack_lvl+0x100/0x190 [ 460.494251][T10352] should_fail_ex.cold+0x5/0xa [ 460.494302][T10352] _copy_from_user+0x2e/0xd0 [ 460.494350][T10352] copy_mnt_id_req+0x108/0x350 [ 460.494429][T10352] __do_sys_listmount+0x184/0xee0 [ 460.494465][T10352] ? __pfx_do_futex+0x10/0x10 [ 460.494504][T10352] ? fput+0x79/0x100 [ 460.494550][T10352] ? __pfx___do_sys_listmount+0x10/0x10 [ 460.494607][T10352] ? rcu_is_watching+0x12/0xc0 [ 460.494652][T10352] do_syscall_64+0x115/0x840 [ 460.494699][T10352] ? clear_bhb_loop+0x40/0x90 [ 460.494738][T10352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.494772][T10352] RIP: 0033:0x7ff9dc79ce59 [ 460.494799][T10352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.494833][T10352] RSP: 002b:00007ff9dd67e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 460.494864][T10352] RAX: ffffffffffffffda RBX: 00007ff9dca15fa0 RCX: 00007ff9dc79ce59 [ 460.494885][T10352] RDX: 00000000000bc23c RSI: 0000000000000000 RDI: 0000200000000100 [ 460.494904][T10352] RBP: 00007ff9dc832d6f R08: 0000000000000000 R09: 0000000000000000 [ 460.494923][T10352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.494942][T10352] R13: 00007ff9dca16038 R14: 00007ff9dca15fa0 R15: 00007ffd26bd5d68 [ 460.494988][T10352] [ 461.476238][T10370] FAULT_INJECTION: forcing a failure. [ 461.476238][T10370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.540407][T10370] CPU: 1 UID: 0 PID: 10370 Comm: syz.3.784 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.540446][T10370] Tainted: [L]=SOFTLOCKUP [ 461.540454][T10370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 461.540469][T10370] Call Trace: [ 461.540477][T10370] [ 461.540486][T10370] dump_stack_lvl+0x100/0x190 [ 461.540515][T10370] should_fail_ex.cold+0x5/0xa [ 461.540546][T10370] _copy_from_user+0x2e/0xd0 [ 461.540584][T10370] copy_mnt_id_req+0x108/0x350 [ 461.540627][T10370] __do_sys_listmount+0x184/0xee0 [ 461.540653][T10370] ? __pfx_do_futex+0x10/0x10 [ 461.540688][T10370] ? fput+0x79/0x100 [ 461.540722][T10370] ? __pfx___do_sys_listmount+0x10/0x10 [ 461.540762][T10370] ? rcu_is_watching+0x12/0xc0 [ 461.540794][T10370] do_syscall_64+0x115/0x840 [ 461.540828][T10370] ? clear_bhb_loop+0x40/0x90 [ 461.540858][T10370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.540883][T10370] RIP: 0033:0x7f2d1df9ce59 [ 461.540903][T10370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.540927][T10370] RSP: 002b:00007f2d1c1f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 461.540949][T10370] RAX: ffffffffffffffda RBX: 00007f2d1e215fa0 RCX: 00007f2d1df9ce59 [ 461.540966][T10370] RDX: 00000000000bc23c RSI: 0000000000000000 RDI: 0000200000000100 [ 461.540981][T10370] RBP: 00007f2d1e032d6f R08: 0000000000000000 R09: 0000000000000000 [ 461.540995][T10370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.541010][T10370] R13: 00007f2d1e216038 R14: 00007f2d1e215fa0 R15: 00007ffcea17d9b8 [ 461.541040][T10370] [ 463.256264][ T5646] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 463.275783][ T5646] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 463.286930][ T5646] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 463.298186][ T5646] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 463.308899][ T5646] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 463.360686][T10388] netlink: 206 bytes leftover after parsing attributes in process `syz.3.787'. [ 465.112410][T10387] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.122954][T10387] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.136630][T10387] bridge_slave_0: entered allmulticast mode [ 465.164936][T10387] bridge_slave_0: entered promiscuous mode [ 465.195254][T10387] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.232040][T10387] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.271163][T10387] bridge_slave_1: entered allmulticast mode [ 465.303061][T10387] bridge_slave_1: entered promiscuous mode [ 465.380910][T10387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.407558][ T7206] Bluetooth: hci11: command tx timeout [ 465.415443][T10387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.563154][T10387] team0: Port device team_slave_0 added [ 465.590145][T10387] team0: Port device team_slave_1 added [ 465.714960][T10387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.729507][T10387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.764094][T10387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.802273][T10387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.811745][T10387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.867009][T10387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.040762][T10387] hsr_slave_0: entered promiscuous mode [ 466.049288][T10387] hsr_slave_1: entered promiscuous mode [ 466.071019][T10387] debugfs: 'hsr0' already exists in 'hsr' [ 466.085879][T10387] Cannot create hsr debugfs directory [ 466.500261][T10432] vhci_hcd vhci_hcd.2: invalid port number 194 [ 466.514928][T10432] vhci_hcd vhci_hcd.2: invalid port number 194 [ 466.941239][T10387] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.136073][T10387] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.491274][ T7206] Bluetooth: hci11: command tx timeout [ 467.502743][T10387] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.622391][T10387] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.004536][T10387] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 468.037526][T10387] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 468.064311][T10387] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 468.088926][T10387] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 468.104137][T10387] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 468.129427][T10387] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 468.157069][T10387] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 468.196517][T10387] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 468.576279][T10387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.896125][T10387] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.974584][T10457] zram: Added device: zram8 [ 468.990092][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.997300][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.083860][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.091079][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.462946][ T5646] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 469.478084][ T5646] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 469.491612][ T5646] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 469.512913][ T5646] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 469.524496][ T5646] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 469.576093][ T5646] Bluetooth: hci11: command tx timeout [ 470.238595][T10463] smpboot: CPU 1 is now offline [ 470.824357][T10387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.571938][ T5646] Bluetooth: hci12: command tx timeout [ 471.650727][ T5646] Bluetooth: hci11: command tx timeout [ 471.974443][T10387] veth0_vlan: entered promiscuous mode [ 472.418500][T10387] veth1_vlan: entered promiscuous mode [ 472.748078][T10387] veth0_macvtap: entered promiscuous mode [ 472.918225][T10387] veth1_macvtap: entered promiscuous mode [ 473.125220][T10465] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.151917][T10465] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.185721][T10465] bridge_slave_0: entered allmulticast mode [ 473.223175][T10465] bridge_slave_0: entered promiscuous mode [ 473.265260][T10465] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.295315][T10465] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.334854][T10465] bridge_slave_1: entered allmulticast mode [ 473.366554][T10465] bridge_slave_1: entered promiscuous mode [ 473.391819][T10387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.531374][T10465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.581515][T10387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.628603][T10465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.652836][ T5646] Bluetooth: hci12: command tx timeout [ 473.779847][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.803554][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.839315][T10465] team0: Port device team_slave_0 added [ 473.870057][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.908166][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.947349][T10465] team0: Port device team_slave_1 added [ 474.152554][T10465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.185356][T10465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.252696][T10517] zram: Added device: zram9 [ 474.306546][T10465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.366894][T10465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.397019][T10465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.500465][T10465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.887887][T10465] hsr_slave_0: entered promiscuous mode [ 474.916212][T10465] hsr_slave_1: entered promiscuous mode [ 474.950481][T10465] debugfs: 'hsr0' already exists in 'hsr' [ 474.969681][T10465] Cannot create hsr debugfs directory [ 475.025646][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.064975][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.376093][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.423501][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.732566][ T5646] Bluetooth: hci12: command tx timeout [ 475.840797][T10528] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 476.165217][T10465] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.676885][T10465] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.998292][T10465] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.421559][T10465] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.739468][T10544] binder: 10543:10544 ioctl 541b 0 returned -22 [ 477.817586][ T5646] Bluetooth: hci12: command tx timeout [ 479.203671][T10465] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 479.257314][T10465] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 479.283094][T10465] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 479.337021][T10465] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 479.379765][T10465] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 479.427890][T10465] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 479.477583][T10465] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 479.562827][T10465] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 480.002680][T10465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.098200][T10465] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.148434][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.155664][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.259770][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.267001][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.009828][T10465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.189139][T10465] veth0_vlan: entered promiscuous mode [ 482.234390][T10465] veth1_vlan: entered promiscuous mode [ 482.369801][T10465] veth0_macvtap: entered promiscuous mode [ 482.430605][T10465] veth1_macvtap: entered promiscuous mode [ 482.518994][T10465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.599976][T10465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.740851][ T151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.777432][ T151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.825632][ T151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.931131][ T151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.307337][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.376419][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.671885][T10609] FAULT_INJECTION: forcing a failure. [ 483.671885][T10609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.747225][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.779654][T10609] CPU: 0 UID: 0 PID: 10609 Comm: syz.1.817 Tainted: G L syzkaller #0 PREEMPT(full) [ 483.779693][T10609] Tainted: [L]=SOFTLOCKUP [ 483.779702][T10609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 483.779721][T10609] Call Trace: [ 483.779729][T10609] [ 483.779738][T10609] dump_stack_lvl+0x100/0x190 [ 483.779768][T10609] should_fail_ex.cold+0x5/0xa [ 483.779800][T10609] _copy_from_user+0x2e/0xd0 [ 483.779845][T10609] copy_mnt_id_req+0x108/0x350 [ 483.779887][T10609] __do_sys_listmount+0x184/0xee0 [ 483.779913][T10609] ? __pfx_do_futex+0x10/0x10 [ 483.779941][T10609] ? fput+0x79/0x100 [ 483.779975][T10609] ? __pfx___do_sys_listmount+0x10/0x10 [ 483.780014][T10609] ? rcu_is_watching+0x12/0xc0 [ 483.780045][T10609] do_syscall_64+0x115/0x840 [ 483.780080][T10609] ? clear_bhb_loop+0x40/0x90 [ 483.780109][T10609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.780134][T10609] RIP: 0033:0x7eff12d9ce59 [ 483.780154][T10609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.780178][T10609] RSP: 002b:00007eff13cb3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 483.780205][T10609] RAX: ffffffffffffffda RBX: 00007eff13015fa0 RCX: 00007eff12d9ce59 [ 483.780223][T10609] RDX: 00000000000bc23c RSI: 0000000000000000 RDI: 0000200000000100 [ 483.780239][T10609] RBP: 00007eff12e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 483.780254][T10609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.780268][T10609] R13: 00007eff13016038 R14: 00007eff13015fa0 R15: 00007fff3eb62df8 [ 483.780299][T10609] [ 483.955745][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.205126][T10613] zram: Added device: zram10 [ 488.628921][T10656] FAULT_INJECTION: forcing a failure. [ 488.628921][T10656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.660666][T10656] CPU: 0 UID: 0 PID: 10656 Comm: syz.1.825 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.660705][T10656] Tainted: [L]=SOFTLOCKUP [ 488.660713][T10656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 488.660728][T10656] Call Trace: [ 488.660736][T10656] [ 488.660745][T10656] dump_stack_lvl+0x100/0x190 [ 488.660775][T10656] should_fail_ex.cold+0x5/0xa [ 488.660807][T10656] _copy_from_user+0x2e/0xd0 [ 488.660843][T10656] copy_mnt_id_req+0x108/0x350 [ 488.660886][T10656] __do_sys_listmount+0x184/0xee0 [ 488.660914][T10656] ? __pfx_do_futex+0x10/0x10 [ 488.660942][T10656] ? fput+0x79/0x100 [ 488.660977][T10656] ? __pfx___do_sys_listmount+0x10/0x10 [ 488.661017][T10656] ? rcu_is_watching+0x12/0xc0 [ 488.661048][T10656] do_syscall_64+0x115/0x840 [ 488.661083][T10656] ? clear_bhb_loop+0x40/0x90 [ 488.661113][T10656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.661138][T10656] RIP: 0033:0x7eff12d9ce59 [ 488.661157][T10656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.661181][T10656] RSP: 002b:00007eff13cb3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 488.661204][T10656] RAX: ffffffffffffffda RBX: 00007eff13015fa0 RCX: 00007eff12d9ce59 [ 488.661220][T10656] RDX: 00000000000bc23c RSI: 0000000000000000 RDI: 0000200000000100 [ 488.661235][T10656] RBP: 00007eff12e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 488.661249][T10656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.661263][T10656] R13: 00007eff13016038 R14: 00007eff13015fa0 R15: 00007fff3eb62df8 [ 488.661294][T10656] [ 491.625741][T10685] FAULT_INJECTION: forcing a failure. [ 491.625741][T10685] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 491.651701][T10685] CPU: 0 UID: 0 PID: 10685 Comm: syz.1.830 Tainted: G L syzkaller #0 PREEMPT(full) [ 491.651741][T10685] Tainted: [L]=SOFTLOCKUP [ 491.651750][T10685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 491.651765][T10685] Call Trace: [ 491.651772][T10685] [ 491.651781][T10685] dump_stack_lvl+0x100/0x190 [ 491.651835][T10685] should_fail_ex.cold+0x5/0xa [ 491.651863][T10685] ? prepare_alloc_pages+0x16d/0x5f0 [ 491.651898][T10685] should_fail_alloc_page+0xeb/0x140 [ 491.651929][T10685] prepare_alloc_pages+0x1f0/0x5f0 [ 491.651960][T10685] ? arch_stack_walk+0xa6/0xf0 [ 491.651993][T10685] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 491.652041][T10685] ? stack_trace_save+0x8e/0xc0 [ 491.652081][T10685] ? __pfx_stack_trace_save+0x10/0x10 [ 491.652114][T10685] ? stack_depot_save_flags+0x27/0x9d0 [ 491.652154][T10685] ? is_bpf_text_address+0x8a/0x1a0 [ 491.652187][T10685] ? is_bpf_text_address+0x8a/0x1a0 [ 491.652221][T10685] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 491.652262][T10685] ? kasan_save_stack+0x3f/0x50 [ 491.652285][T10685] ? kasan_save_stack+0x30/0x50 [ 491.652307][T10685] ? kasan_save_track+0x14/0x30 [ 491.652331][T10685] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 491.652372][T10685] ? __get_vm_area_node+0x1ca/0x330 [ 491.652401][T10685] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 491.652434][T10685] ? __kvmalloc_node_noprof+0x3de/0xa00 [ 491.652457][T10685] ? __do_sys_listmount+0x289/0xee0 [ 491.652482][T10685] ? do_syscall_64+0x115/0x840 [ 491.652516][T10685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.652554][T10685] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 491.652595][T10685] ? policy_nodemask+0xed/0x4f0 [ 491.652626][T10685] alloc_pages_mpol+0x1fb/0x540 [ 491.652656][T10685] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 491.652692][T10685] alloc_pages_noprof+0x1a/0x160 [ 491.652726][T10685] get_free_pages_noprof+0x10/0xb0 [ 491.652754][T10685] __kasan_populate_vmalloc+0xa0/0x210 [ 491.652800][T10685] alloc_vmap_area+0x95d/0x2b70 [ 491.652840][T10685] ? __pfx_alloc_vmap_area+0x10/0x10 [ 491.652876][T10685] __get_vm_area_node+0x1ca/0x330 [ 491.652912][T10685] __vmalloc_node_range_noprof+0x228/0x1630 [ 491.652947][T10685] ? __do_sys_listmount+0x289/0xee0 [ 491.652982][T10685] ? __do_sys_listmount+0x289/0xee0 [ 491.653011][T10685] ? alloc_pages_mpol+0x25a/0x540 [ 491.653043][T10685] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 491.653088][T10685] ? rcu_is_watching+0x12/0xc0 [ 491.653124][T10685] __kvmalloc_node_noprof+0x3de/0xa00 [ 491.653150][T10685] ? __do_sys_listmount+0x289/0xee0 [ 491.653175][T10685] ? __do_sys_listmount+0x289/0xee0 [ 491.653200][T10685] ? _copy_from_user+0x59/0xd0 [ 491.653233][T10685] ? copy_mnt_id_req+0x1b1/0x350 [ 491.653274][T10685] __do_sys_listmount+0x289/0xee0 [ 491.653301][T10685] ? __pfx_do_futex+0x10/0x10 [ 491.653333][T10685] ? __pfx___do_sys_listmount+0x10/0x10 [ 491.653373][T10685] ? rcu_is_watching+0x12/0xc0 [ 491.653404][T10685] do_syscall_64+0x115/0x840 [ 491.653438][T10685] ? clear_bhb_loop+0x40/0x90 [ 491.653468][T10685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.653494][T10685] RIP: 0033:0x7eff12d9ce59 [ 491.653515][T10685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.653540][T10685] RSP: 002b:00007eff13cb3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 491.653564][T10685] RAX: ffffffffffffffda RBX: 00007eff13015fa0 RCX: 00007eff12d9ce59 [ 491.653581][T10685] RDX: 00000000000bc23c RSI: 0000000000000000 RDI: 0000200000000100 [ 491.653597][T10685] RBP: 00007eff12e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 491.653613][T10685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.653628][T10685] R13: 00007eff13016038 R14: 00007eff13015fa0 R15: 00007fff3eb62df8 [ 491.653659][T10685] [ 491.653825][T10685] warn_alloc: 2 callbacks suppressed [ 491.653845][T10685] syz.1.830: vmalloc error: size 6164960, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 492.121956][T10685] CPU: 0 UID: 0 PID: 10685 Comm: syz.1.830 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.121993][T10685] Tainted: [L]=SOFTLOCKUP [ 492.122002][T10685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 492.122017][T10685] Call Trace: [ 492.122026][T10685] [ 492.122035][T10685] dump_stack_lvl+0x100/0x190 [ 492.122066][T10685] warn_alloc.cold+0x95/0x1c1 [ 492.122093][T10685] ? __pfx_warn_alloc+0x10/0x10 [ 492.122142][T10685] ? lockdep_hardirqs_on+0x78/0x100 [ 492.122181][T10685] ? __get_vm_area_node+0x2cd/0x330 [ 492.122218][T10685] ? __get_vm_area_node+0x208/0x330 [ 492.122254][T10685] __vmalloc_node_range_noprof+0xccd/0x1630 [ 492.122298][T10685] ? __do_sys_listmount+0x289/0xee0 [ 492.122335][T10685] ? alloc_pages_mpol+0x25a/0x540 [ 492.122374][T10685] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 492.122415][T10685] ? rcu_is_watching+0x12/0xc0 [ 492.122449][T10685] __kvmalloc_node_noprof+0x3de/0xa00 [ 492.122475][T10685] ? __do_sys_listmount+0x289/0xee0 [ 492.122500][T10685] ? __do_sys_listmount+0x289/0xee0 [ 492.122525][T10685] ? _copy_from_user+0x59/0xd0 [ 492.122561][T10685] ? copy_mnt_id_req+0x1b1/0x350 [ 492.122603][T10685] __do_sys_listmount+0x289/0xee0 [ 492.122632][T10685] ? __pfx_do_futex+0x10/0x10 [ 492.122665][T10685] ? __pfx___do_sys_listmount+0x10/0x10 [ 492.122705][T10685] ? rcu_is_watching+0x12/0xc0 [ 492.122736][T10685] do_syscall_64+0x115/0x840 [ 492.122770][T10685] ? clear_bhb_loop+0x40/0x90 [ 492.122800][T10685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.122825][T10685] RIP: 0033:0x7eff12d9ce59 [ 492.122845][T10685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.122869][T10685] RSP: 002b:00007eff13cb3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 492.122893][T10685] RAX: ffffffffffffffda RBX: 00007eff13015fa0 RCX: 00007eff12d9ce59 [ 492.122909][T10685] RDX: 00000000000bc23c RSI: 0000000000000000 RDI: 0000200000000100 [ 492.122924][T10685] RBP: 00007eff12e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 492.122938][T10685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.122952][T10685] R13: 00007eff13016038 R14: 00007eff13015fa0 R15: 00007fff3eb62df8 [ 492.122983][T10685] [ 492.123137][T10685] Mem-Info: [ 492.418458][T10685] active_anon:34277 inactive_anon:13 isolated_anon:0 [ 492.418458][T10685] active_file:12782 inactive_file:43056 isolated_file:0 [ 492.418458][T10685] unevictable:787 dirty:419 writeback:0 [ 492.418458][T10685] slab_reclaimable:12362 slab_unreclaimable:120157 [ 492.418458][T10685] mapped:73237 shmem:26446 pagetables:1425 [ 492.418458][T10685] sec_pagetables:0 bounce:0 [ 492.418458][T10685] kernel_misc_reclaimable:0 [ 492.418458][T10685] free:1165205 free_pcp:11167 free_cma:0 [ 492.473468][T10685] Node 0 active_anon:137108kB inactive_anon:52kB active_file:51128kB inactive_file:172020kB unevictable:1612kB isolated(anon):0kB isolated(file):0kB mapped:292948kB dirty:1676kB writeback:0kB shmem:104248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14624kB pagetables:5600kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 492.519881][T10685] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 492.554541][T10685] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 492.590861][T10685] lowmem_reserve[]: 0 2478 2479 2479 2479 [ 492.596706][T10685] Node 0 DMA32 free:717428kB boost:0kB min:34060kB low:42572kB high:51084kB reserved_highatomic:0KB free_highatomic:0KB active_anon:137108kB inactive_anon:52kB active_file:51128kB inactive_file:172020kB unevictable:1612kB writepending:1676kB zspages:0kB present:3129332kB managed:2537500kB mlocked:76kB bounce:0kB free_pcp:32524kB local_pcp:32524kB free_cma:0kB [ 492.642991][T10685] lowmem_reserve[]: 0 0 1 1 1 [ 492.647792][T10685] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1108kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 492.683985][T10685] lowmem_reserve[]: 0 0 0 0 0 [ 492.688836][T10685] Node 1 Normal free:3928032kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:12476kB local_pcp:12476kB free_cma:0kB [ 492.724045][T10685] lowmem_reserve[]: 0 0 0 0 0 [ 492.728849][T10685] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 492.749063][T10685] Node 0 DMA32: 41*4kB (UE) 20*8kB (UE) 277*16kB (U) 3*32kB (UME) 2*64kB (UM) 2*128kB (UE) 2*256kB (ME) 60*512kB (UE) 43*1024kB (UM) 9*2048kB (UME) 151*4096kB (M) = 717428kB [ 492.768699][T10685] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 492.789843][T10685] Node 1 Normal: 6*4kB (UM) 15*8kB (UM) 9*16kB (UM) 14*32kB (UM) 8*64kB (UM) 10*128kB (UM) 12*256kB (UM) 5*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 955*4096kB (UM) = 3928032kB [ 492.808862][T10685] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 492.821219][T10685] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 492.830828][T10685] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 492.840718][T10685] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 492.850056][T10685] 82309 total pagecache pages [ 492.862013][T10685] 2 pages in swap cache [ 492.866226][T10685] Free swap = 124988kB [ 492.878398][T10685] Total swap = 124996kB [ 492.882961][T10685] 2097051 pages RAM [ 492.886816][T10685] 0 pages HighMem/MovableOnly [ 492.891945][T10685] 430784 pages reserved [ 492.896144][T10685] 0 pages cma reserved [ 495.484256][ T7206] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 495.505063][ T7206] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 495.516762][ T7206] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 495.527475][ T7206] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 495.542733][ T7206] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 496.206956][T10707] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.214740][T10707] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.234392][T10707] bridge_slave_0: entered allmulticast mode [ 496.242674][T10707] bridge_slave_0: entered promiscuous mode [ 496.251006][T10707] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.267412][T10707] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.276428][T10707] bridge_slave_1: entered allmulticast mode [ 496.286619][T10707] bridge_slave_1: entered promiscuous mode [ 496.330263][T10707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.343221][T10707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.387632][T10707] team0: Port device team_slave_0 added [ 496.401304][T10707] team0: Port device team_slave_1 added [ 496.434557][T10707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.441601][T10707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.473787][T10707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.490040][T10707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.498521][T10707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.531708][T10707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.596890][T10707] hsr_slave_0: entered promiscuous mode [ 496.606623][T10707] hsr_slave_1: entered promiscuous mode [ 496.613312][T10707] debugfs: 'hsr0' already exists in 'hsr' [ 496.619097][T10707] Cannot create hsr debugfs directory [ 496.819089][T10707] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.889108][T10707] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.955130][T10707] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.019735][T10707] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.199566][T10707] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 497.209825][T10707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 497.220755][T10707] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 497.231422][T10707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 497.240364][T10707] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 497.250665][T10707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 497.283961][T10707] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 497.297565][T10707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 497.408190][T10707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.436580][T10707] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.455242][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.462499][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.490573][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.497804][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.585256][ T7206] Bluetooth: hci13: command tx timeout [ 498.026359][T10707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.096883][T10707] veth0_vlan: entered promiscuous mode [ 498.118255][T10707] veth1_vlan: entered promiscuous mode [ 498.162523][T10707] veth0_macvtap: entered promiscuous mode [ 498.176915][T10707] veth1_macvtap: entered promiscuous mode [ 498.199070][T10707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.222077][T10707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.237902][ T1126] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.259528][ T1126] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.281638][ T1126] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.332749][ T1126] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.439843][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.467262][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.526305][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.535510][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.750828][T10741] FAULT_INJECTION: forcing a failure. [ 498.750828][T10741] name failslab, interval 1, probability 0, space 0, times 0 [ 498.766983][T10741] CPU: 0 UID: 0 PID: 10741 Comm: syz.0.835 Tainted: G L syzkaller #0 PREEMPT(full) [ 498.767024][T10741] Tainted: [L]=SOFTLOCKUP [ 498.767033][T10741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 498.767048][T10741] Call Trace: [ 498.767057][T10741] [ 498.767066][T10741] dump_stack_lvl+0x100/0x190 [ 498.767097][T10741] should_fail_ex.cold+0x5/0xa [ 498.767128][T10741] should_failslab+0xc2/0x120 [ 498.767158][T10741] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 498.767200][T10741] ? alloc_vmap_area+0x640/0x2b70 [ 498.767234][T10741] alloc_vmap_area+0x640/0x2b70 [ 498.767274][T10741] ? __pfx_alloc_vmap_area+0x10/0x10 [ 498.767311][T10741] __get_vm_area_node+0x1ca/0x330 [ 498.767348][T10741] __vmalloc_node_range_noprof+0x228/0x1630 [ 498.767383][T10741] ? __do_sys_listmount+0x289/0xee0 [ 498.767420][T10741] ? __do_sys_listmount+0x289/0xee0 [ 498.767450][T10741] ? alloc_pages_mpol+0x25a/0x540 [ 498.767482][T10741] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 498.767522][T10741] ? rcu_is_watching+0x12/0xc0 [ 498.767557][T10741] __kvmalloc_node_noprof+0x3de/0xa00 [ 498.767591][T10741] ? __do_sys_listmount+0x289/0xee0 [ 498.767617][T10741] ? __do_sys_listmount+0x289/0xee0 [ 498.767643][T10741] ? _copy_from_user+0x59/0xd0 [ 498.767678][T10741] ? copy_mnt_id_req+0x1b1/0x350 [ 498.767719][T10741] __do_sys_listmount+0x289/0xee0 [ 498.767747][T10741] ? __pfx_do_futex+0x10/0x10 [ 498.767775][T10741] ? fput+0x79/0x100 [ 498.767809][T10741] ? __pfx___do_sys_listmount+0x10/0x10 [ 498.767850][T10741] ? rcu_is_watching+0x12/0xc0 [ 498.767881][T10741] do_syscall_64+0x115/0x840 [ 498.767916][T10741] ? clear_bhb_loop+0x40/0x90 [ 498.767946][T10741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.767972][T10741] RIP: 0033:0x7feda119ce59 [ 498.767992][T10741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.768018][T10741] RSP: 002b:00007feda20b5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 498.768042][T10741] RAX: ffffffffffffffda RBX: 00007feda1415fa0 RCX: 00007feda119ce59 [ 498.768059][T10741] RDX: 00000000000bc23c RSI: 0000000000000000 RDI: 0000200000000100 [ 498.768075][T10741] RBP: 00007feda1232d6f R08: 0000000000000000 R09: 0000000000000000 [ 498.768090][T10741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 498.768106][T10741] R13: 00007feda1416038 R14: 00007feda1415fa0 R15: 00007ffc5ef3e728 [ 498.768137][T10741] [ 499.664164][ T7206] Bluetooth: hci13: command tx timeout [ 500.076189][T10748] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 500.469702][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.480518][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.747298][ T7206] Bluetooth: hci13: command tx timeout [ 502.481190][ T5646] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 502.495519][ T5646] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 502.513254][ T5646] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 502.524716][ T5646] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 502.532805][ T5646] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 503.826871][ T5646] Bluetooth: hci13: command tx timeout [ 503.962859][T10766] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.976456][T10766] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.997176][T10766] bridge_slave_0: entered allmulticast mode [ 504.019752][T10766] bridge_slave_0: entered promiscuous mode [ 504.061223][T10766] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.089126][T10766] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.109869][T10766] bridge_slave_1: entered allmulticast mode [ 504.121384][T10766] bridge_slave_1: entered promiscuous mode [ 504.201765][T10766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.232875][T10766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.344716][T10766] team0: Port device team_slave_0 added [ 504.381133][T10766] team0: Port device team_slave_1 added [ 504.445905][T10766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.472412][T10766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.541321][T10766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.579407][T10766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.596611][T10766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.639033][ T5646] Bluetooth: hci14: command tx timeout [ 504.675639][T10766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.808271][T10766] hsr_slave_0: entered promiscuous mode [ 504.822644][T10766] hsr_slave_1: entered promiscuous mode [ 504.836357][T10766] debugfs: 'hsr0' already exists in 'hsr' [ 504.849518][T10766] Cannot create hsr debugfs directory [ 505.319548][T10766] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.481338][T10766] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.570031][T10766] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.780546][T10766] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.365368][ T7206] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 506.382250][ T7206] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 506.394471][ T7206] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 506.413591][ T7206] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 506.424252][ T7206] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 506.532144][T10766] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 506.563235][T10766] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 506.583345][T10766] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 506.611676][T10766] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 506.630278][T10766] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 506.656693][T10766] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 506.690481][T10766] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 506.710452][ T7206] Bluetooth: hci14: command tx timeout [ 506.734475][T10766] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 507.091337][T10766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.174355][T10766] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.228750][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.235943][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.298455][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.305638][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.468392][ T7206] Bluetooth: hci15: command tx timeout [ 508.750301][T10796] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.790406][ T7206] Bluetooth: hci14: command tx timeout [ 508.807917][T10796] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.836589][T10796] bridge_slave_0: entered allmulticast mode [ 508.883146][T10796] bridge_slave_0: entered promiscuous mode [ 508.919762][T10796] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.945617][T10796] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.984927][T10796] bridge_slave_1: entered allmulticast mode [ 509.016158][T10796] bridge_slave_1: entered promiscuous mode [ 509.046556][T10766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.187371][T10796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.260944][T10796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.395113][T10796] team0: Port device team_slave_0 added [ 509.424680][T10796] team0: Port device team_slave_1 added [ 509.582045][T10796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.606128][T10796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.705310][T10796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.739801][T10796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.764021][T10796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.871456][T10796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.110206][T10796] hsr_slave_0: entered promiscuous mode [ 510.134137][T10796] hsr_slave_1: entered promiscuous mode [ 510.159663][T10796] debugfs: 'hsr0' already exists in 'hsr' [ 510.168863][T10796] Cannot create hsr debugfs directory [ 510.238216][ T7206] Bluetooth: hci4: command 0x0406 tx timeout [ 510.438363][T10766] veth0_vlan: entered promiscuous mode [ 510.549411][ T5646] Bluetooth: hci15: command tx timeout [ 510.787192][T10766] veth1_vlan: entered promiscuous mode [ 510.870686][ T5646] Bluetooth: hci14: command tx timeout [ 510.970212][ T7206] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 510.986346][ T7206] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 510.994621][ T7206] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 511.022817][ T7206] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 511.038309][ T7206] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 511.368731][T10796] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.556344][T10766] veth0_macvtap: entered promiscuous mode [ 511.659227][T10796] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.781929][T10766] veth1_macvtap: entered promiscuous mode [ 511.862386][T10796] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.007940][T10796] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.096733][T10766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 512.198924][T10766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 512.399416][ T1126] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.430185][ T1126] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.457033][ T1126] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.515469][ T1126] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.633492][ T5646] Bluetooth: hci15: command tx timeout [ 513.112384][ T5646] Bluetooth: hci16: command tx timeout [ 513.128607][T10796] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 513.166087][T10796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 513.203350][T10796] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 513.228539][T10796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 513.250670][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.295798][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.324348][T10796] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 513.374787][T10796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 513.403759][T10796] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 513.451613][T10796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 513.654639][ T112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.695658][ T112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.071503][ T5646] Bluetooth: hci5: command 0x0406 tx timeout [ 514.276196][T10853] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.315239][T10853] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.337686][T10853] bridge_slave_0: entered allmulticast mode [ 514.372902][T10853] bridge_slave_0: entered promiscuous mode [ 514.439858][T10853] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.466319][T10853] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.505862][T10853] bridge_slave_1: entered allmulticast mode [ 514.538236][T10853] bridge_slave_1: entered promiscuous mode [ 514.711400][ T7206] Bluetooth: hci15: command tx timeout [ 514.724965][T10853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.783840][T10853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.928407][T10853] team0: Port device team_slave_0 added [ 514.966716][T10853] team0: Port device team_slave_1 added [ 515.102805][T10853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.138830][T10853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.214814][ T7206] Bluetooth: hci16: command tx timeout [ 515.291315][T10853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.344938][T10853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.384530][T10853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.487257][T10853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.602558][T10796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.737409][T10853] hsr_slave_0: entered promiscuous mode [ 515.768742][T10853] hsr_slave_1: entered promiscuous mode [ 515.793661][T10853] debugfs: 'hsr0' already exists in 'hsr' [ 515.809649][T10853] Cannot create hsr debugfs directory [ 515.884089][T10796] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.937822][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.945024][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.048731][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.055951][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.565735][T10853] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.878393][T10853] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.025183][T10853] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.230363][T10853] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.275219][ T5646] Bluetooth: hci16: command tx timeout [ 518.176056][T10853] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 518.239175][T10853] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 518.278530][T10853] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 518.345340][T10853] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 518.403667][T10853] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 518.450128][T10853] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 518.505174][T10853] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 518.534586][T10853] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 518.551885][T10796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.815207][T10853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.866719][T10853] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.909922][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.917131][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.966370][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.973592][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.355634][ T5646] Bluetooth: hci16: command tx timeout [ 519.467172][T10796] veth0_vlan: entered promiscuous mode [ 519.551063][T10796] veth1_vlan: entered promiscuous mode [ 519.905476][T10796] veth0_macvtap: entered promiscuous mode [ 519.960364][T10796] veth1_macvtap: entered promiscuous mode [ 520.067652][T10796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.104825][T10796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.147807][ T112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.182110][ T112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.242497][ T112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.287698][ T112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.912391][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.979412][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.038365][T10853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.121901][ T112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.158492][ T112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.145889][T10853] veth0_vlan: entered promiscuous mode [ 522.202130][T10853] veth1_vlan: entered promiscuous mode [ 522.324809][T10853] veth0_macvtap: entered promiscuous mode [ 522.351730][T10853] veth1_macvtap: entered promiscuous mode [ 522.454537][T10853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.531639][T10853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.602168][ T112] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.658659][ T112] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.680110][ T112] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.730636][ T112] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.006521][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.056860][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.209357][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.237841][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.282871][T10978] FAULT_INJECTION: forcing a failure. [ 523.282871][T10978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.340769][T10978] CPU: 0 UID: 0 PID: 10978 Comm: syz.0.855 Tainted: G L syzkaller #0 PREEMPT(full) [ 523.340809][T10978] Tainted: [L]=SOFTLOCKUP [ 523.340818][T10978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 523.340834][T10978] Call Trace: [ 523.340842][T10978] [ 523.340852][T10978] dump_stack_lvl+0x100/0x190 [ 523.340884][T10978] should_fail_ex.cold+0x5/0xa [ 523.340916][T10978] _copy_from_user+0x2e/0xd0 [ 523.340953][T10978] copy_mnt_id_req+0x108/0x350 [ 523.340995][T10978] __do_sys_listmount+0x184/0xee0 [ 523.341022][T10978] ? __pfx_do_futex+0x10/0x10 [ 523.341052][T10978] ? fput+0x79/0x100 [ 523.341086][T10978] ? __pfx___do_sys_listmount+0x10/0x10 [ 523.341127][T10978] ? rcu_is_watching+0x12/0xc0 [ 523.341159][T10978] do_syscall_64+0x115/0x840 [ 523.341193][T10978] ? clear_bhb_loop+0x40/0x90 [ 523.341223][T10978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.341249][T10978] RIP: 0033:0x7feda119ce59 [ 523.341269][T10978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.341294][T10978] RSP: 002b:00007feda20b5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 523.341318][T10978] RAX: ffffffffffffffda RBX: 00007feda1415fa0 RCX: 00007feda119ce59 [ 523.341335][T10978] RDX: 00000000000bc23c RSI: 0000000000000000 RDI: 0000200000000100 [ 523.341350][T10978] RBP: 00007feda1232d6f R08: 0000000000000000 R09: 0000000000000000 [ 523.341366][T10978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.341381][T10978] R13: 00007feda1416038 R14: 00007feda1415fa0 R15: 00007ffc5ef3e728 [ 523.341411][T10978] [ 524.165969][ T31] INFO: task syz-executor:5639 blocked for more than 143 seconds. [ 524.183741][ T31] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 524.213763][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 524.281647][ T31] task:syz-executor state:D stack:22728 pid:5639 tgid:5639 ppid:1 task_flags:0x400140 flags:0x00080002 [ 524.345992][ T31] Call Trace: [ 524.365839][ T31] [ 524.385125][ T31] __schedule+0x1295/0x67a0 [ 524.419076][ T31] ? __pfx___schedule+0x10/0x10 [ 524.481605][ T31] ? find_held_lock+0x2b/0x80 [ 524.525040][ T31] ? schedule+0x2bf/0x390 [ 524.575066][ T31] schedule+0xdd/0x390 [ 524.601632][ T31] schedule_preempt_disabled+0x13/0x30 [ 524.626148][ T31] __mutex_lock+0xced/0x1b10 [ 524.651133][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 524.673535][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 524.696201][ T31] ? net_generic+0xea/0x2a0 [ 524.713732][ T31] ? net_generic+0xea/0x2a0 [ 524.730502][ T31] ? nfsd_shutdown_threads+0x5b/0xf0 [ 524.757632][ T31] nfsd_shutdown_threads+0x5b/0xf0 [ 524.781716][ T31] nfsd_umount+0x3b/0x60 [ 524.896941][ T31] deactivate_locked_super+0xc1/0x1b0 [ 524.918852][ T31] deactivate_super+0xe7/0x110 [ 524.932136][ T31] cleanup_mnt+0x21f/0x450 [ 524.957354][ T31] task_work_run+0x150/0x240 [ 524.971299][ T31] ? __pfx_task_work_run+0x10/0x10 [ 524.998888][ T31] ? rcu_is_watching+0x12/0xc0 [ 525.013341][ T31] exit_to_user_mode_loop+0x157/0x670 [ 525.025388][ T31] ? rcu_is_watching+0x12/0xc0 [ 525.035923][ T31] do_syscall_64+0x652/0x840 [ 525.055562][ T31] ? clear_bhb_loop+0x40/0x90 [ 525.065970][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.078756][ T31] RIP: 0033:0x7f4c3819e097 [ 525.096486][ T31] RSP: 002b:00007ffcef353fd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 525.118068][ T31] RAX: 0000000000000000 RBX: 00007f4c382321ca RCX: 00007f4c3819e097 [ 525.132159][ T31] RDX: 0000000000000004 RSI: 0000000000000009 RDI: 00007ffcef355120 [ 525.166391][ T31] RBP: 00007ffcef35510c R08: 0000000000000000 R09: 0000000000000000 [ 525.174501][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcef355120 [ 525.198584][ T31] R13: 00007f4c382321ca R14: 000000000005ae5b R15: 00007ffcef355160 [ 525.216719][ T31] [ 525.237221][ T31] [ 525.237221][ T31] Showing all locks held in the system: [ 525.358943][ T31] 4 locks held by kworker/0:0/9: [ 525.387007][ T31] #0: ffff8880b843b420 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 525.441401][ T31] #1: ffff8880b8424648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2f15/0x67a0 [ 525.473760][ T31] #2: ffff88803671d0a0 (&r->consumer_lock#2){+.+.}-{3:3}, at: wg_packet_decrypt_worker+0x2b2/0x540 [ 525.509039][ T31] #3: ffff8880b843b420 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 525.536544][ T31] 1 lock held by khungtaskd/31: [ 525.543014][ T31] #0: ffffffff8e7e5360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 525.578355][ T31] 3 locks held by kworker/u8:5/112: [ 525.588628][ T31] #0: ffff888033ebf140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 525.626629][ T31] #1: ffffc9000270fd08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 525.656217][ T31] #2: ffffffff90606420 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 [ 525.696634][ T31] 4 locks held by kworker/u8:6/151: [ 525.709830][ T31] #0: ffff88801c6a6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 525.736660][ T31] #1: ffffc90002f7fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 525.757397][ T31] #2: ffffffff905ed6c8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 525.780699][ T31] #3: ffffffff90606420 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 525.799581][ T31] 2 locks held by syz-executor/5639: [ 525.807806][ T31] #0: ffff888023afe0d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 525.819338][ T31] #1: ffffffff8ec621e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 525.829653][ T31] 2 locks held by syz-executor/5643: [ 525.834978][ T31] #0: ffff8880377680d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 525.847801][ T31] #1: ffffffff8ec621e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 525.857834][ T31] 2 locks held by syz-executor/5650: [ 525.870626][ T31] #0: ffff888037a5a0d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 525.881240][ T31] #1: ffffffff8ec621e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 525.891208][ T31] 3 locks held by kworker/0:6/5782: [ 525.896438][ T31] #0: ffff88813fe57140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 525.916104][ T31] #1: ffffc900048ffd08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 525.940370][ T31] #2: ffffffff8e7f0ea8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 525.953635][ T31] 2 locks held by syz.3.637/9376: [ 525.958923][ T31] #0: ffffffff906b4888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 525.976171][ T31] #1: ffffffff8ec621e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 525.986653][ T31] 2 locks held by syz-executor/9560: [ 525.992352][ T31] #0: ffff88804848a0d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 526.011277][ T31] #1: ffffffff8ec621e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 526.034066][ T31] 2 locks held by syz-executor/9575: [ 526.040367][ T31] #0: ffff888047ec40d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 526.051354][ T31] #1: ffffffff8ec621e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 526.061295][ T31] 2 locks held by syz-executor/9867: [ 526.066656][ T31] #0: ffff88803478c0d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 526.100655][ T31] #1: ffffffff8ec621e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 526.113578][ T31] 2 locks held by syz-executor/9935: [ 526.119120][ T31] #0: ffff888088a5e0d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 526.135910][ T31] #1: ffffffff8ec621e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 526.147545][ T31] 2 locks held by syz-executor/9939: [ 526.152906][ T31] #0: ffff88807d1620d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 526.165261][ T31] #1: ffffffff8ec621e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 526.182340][ T31] 2 locks held by syz-executor/9944: [ 526.187910][ T31] #0: ffff88806ae240d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 526.198616][ T31] #1: ffffffff8ec621e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 526.208558][ T31] 2 locks held by syz-executor/10096: [ 526.216253][ T31] #0: ffff88807f9cc0d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 526.227071][ T31] #1: ffffffff8ec621e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 526.236726][ T31] 2 locks held by syz-executor/10387: [ 526.249869][ T31] #0: ffff888044dc60d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 526.261211][ T31] #1: ffffffff8ec621e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 526.271558][ T31] 2 locks held by syz-executor/10465: [ 526.284701][ T31] #0: ffff888059bc80d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 526.295416][ T31] #1: ffffffff8ec621e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 526.305311][ T31] 2 locks held by syz-executor/10766: [ 526.311053][ T31] #0: ffff88802a7380d8 (&type->s_umount_key#52){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 526.324249][ T31] #1: ffffffff8ec621e0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 526.334217][ T31] 1 lock held by syz.0.855/10982: [ 526.339514][ T31] #0: ffff888047fd0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 526.353606][ T31] 1 lock held by syz.4.856/10984: [ 526.361124][ T31] #0: ffffffff8e7f0ea8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 526.466732][ T31] [ 526.498148][ T31] ============================================= [ 526.498148][ T31] [ 526.540691][ T31] NMI backtrace for cpu 0 [ 526.540715][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 526.540748][ T31] Tainted: [L]=SOFTLOCKUP [ 526.540757][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 526.540771][ T31] Call Trace: [ 526.540780][ T31] [ 526.540789][ T31] dump_stack_lvl+0x100/0x190 [ 526.540818][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 526.540847][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 526.540872][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 526.540903][ T31] sys_info+0x141/0x190 [ 526.540923][ T31] watchdog+0xcb1/0x1030 [ 526.540962][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 526.540995][ T31] ? __pfx_watchdog+0x10/0x10 [ 526.541029][ T31] ? __kthread_parkme+0x18c/0x230 [ 526.541063][ T31] ? kthread+0x13a/0x450 [ 526.541097][ T31] ? __pfx_watchdog+0x10/0x10 [ 526.541128][ T31] kthread+0x370/0x450 [ 526.541162][ T31] ? __pfx_kthread+0x10/0x10 [ 526.541200][ T31] ret_from_fork+0x72b/0xd50 [ 526.541227][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 526.541259][ T31] ? __switch_to+0x800/0x1100 [ 526.541291][ T31] ? __switch_to_asm+0x39/0x70 [ 526.541321][ T31] ? __pfx_kthread+0x10/0x10 [ 526.541359][ T31] ret_from_fork_asm+0x1a/0x30 [ 526.541403][ T31] [ 527.325544][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 527.332469][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 527.343170][ T31] Tainted: [L]=SOFTLOCKUP [ 527.347507][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 527.357597][ T31] Call Trace: [ 527.360886][ T31] [ 527.363828][ T31] dump_stack_lvl+0x100/0x190 [ 527.368549][ T31] vpanic+0x552/0x970 [ 527.372551][ T31] ? __pfx_vpanic+0x10/0x10 [ 527.377072][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 527.383250][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 527.389430][ T31] panic+0xd1/0xe0 [ 527.393166][ T31] ? __pfx_panic+0x10/0x10 [ 527.397604][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 527.403778][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 527.409955][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 527.416129][ T31] ? watchdog.cold+0x1ec/0x234 [ 527.420915][ T31] ? watchdog+0xcc1/0x1030 [ 527.425362][ T31] watchdog.cold+0x1fd/0x234 [ 527.429981][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 527.435811][ T31] ? __pfx_watchdog+0x10/0x10 [ 527.440536][ T31] ? __kthread_parkme+0x18c/0x230 [ 527.445606][ T31] ? kthread+0x13a/0x450 [ 527.449896][ T31] ? __pfx_watchdog+0x10/0x10 [ 527.454607][ T31] kthread+0x370/0x450 [ 527.458708][ T31] ? __pfx_kthread+0x10/0x10 [ 527.463331][ T31] ret_from_fork+0x72b/0xd50 [ 527.467955][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 527.473082][ T31] ? __switch_to+0x800/0x1100 [ 527.477783][ T31] ? __switch_to_asm+0x39/0x70 [ 527.482570][ T31] ? __pfx_kthread+0x10/0x10 [ 527.487194][ T31] ret_from_fork_asm+0x1a/0x30 [ 527.492008][ T31] [ 527.495125][ T31] Kernel Offset: disabled [ 527.499464][ T31] Rebooting in 86400 seconds..