last executing test programs: 2m26.98445704s ago: executing program 0 (id=1010): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r1, 0x8000) ioctl$auto_BLKTRACESETUP32(r1, 0xc0401273, &(0x7f00000000c0)={"e2556681853dbfb09c2a501f44189aff41d58fc436159bf9ed84210c8886ea6b", 0x3, 0x1, 0x0, 0x12, 0x81, 0xffffffffffffffff}) r3 = fcntl$auto_F_GETOWN(r1, 0x9, 0x4) kcmp$auto_KCMP_EPOLL_TFD(r2, r3, 0x7, r0, 0x7) fdatasync$auto(r1) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000140)='/dev/binderfs/binder1\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x9, 0x0, 0x46) ioctl$auto_BINDER_WRITE_READ(r4, 0xc0306201, 0x0) madvise$auto(0x0, 0x400053, 0x9) futex_wait$auto(0x0, 0x80000000, 0x21b1, 0x80, 0x0, 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000003100), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETFAMILY2(r5, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000003140)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '&\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) preadv2$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video2\x00', 0x80000, 0x0) write$auto(r0, 0x0, 0x7ef) 2m26.616539961s ago: executing program 0 (id=1012): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/drivers\x00', 0x100, 0x0) close_range$auto(r0, 0x8, 0x805) socket$nl_generic(0x10, 0x3, 0x10) r1 = timerfd_create$auto(0x9, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x2ff, 0x4, 0x1}]}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0xa2741, 0x0) semctl$auto(0x0, 0x9, 0x1, 0x2) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x1ff) sendmmsg$auto(r4, &(0x7f00000012c0)={{&(0x7f0000000140)="7ff5daf650061fe41256b78d57cd1a295ddb993fa83e72958a30a1c183772b8114abdff5b0251d219062c410ce54dd659f2062b7a2b6dfd9a2f10b7b783c97b10ac6828025538d6edee46d52e201db929c89efacbd19afcef7228ce9f6b4679298671ef23f1c787ccc5b65a74a7b488a356f61385076c1b592c746982e6fb16ebff6de3d73920eacac567b3e4ab0fe22732249d38352cb", 0x5, &(0x7f0000001200)={&(0x7f0000000200)="57db05e8bc2306822399534f60e5021f4f42ee1ea4d73647c1ec022afdf2a6311382bdf2eca3ce22044c237e8f6765cd873d06d062234862686bb81022e193f47dc2dba7db1773d30469090c6ec95341e4dec6b46a07e613a387e2d213b92cd3f7c274f02ba8ffd02b44f21d366435f7b22bf2fc5551bd3fc0552ba9b378e1bdf66dae94737e6f5e94213c7bae0b2556030afa6b5c7a62189edecebeac4af731b1cbec38d61b369853b39b9df225e0d3f7f832aad41a44004ed70ed0d101dab76557df6aa595fdddb04284177bd24e84d73c1f089729bf60594c9dbca4d5836685eb2666da6b2d2e0cbc24d0ad6d5ef99379bbde2b7144c68ac4b15d94e0d7714d3681fd08488b310cc836414ff99719cdf3c58a944a21ad54a9a5e723cd8f8eda7a2bf9006b51e41f3c8d29a116be4f25b3c762a6352060b42aab4b770f23ac078b5ad4656ca8949e76165d76aa779f79dcb088732690b777345bbf862900d9c0d3020b185285a359c26cba1d4c5a941e4657a355ef6cb410a5e54066cc6d47e5c5d4022cb5b3e079b25e71af40082b3e0b113381a928fb1319e4bc42a95b5a332edc5f626b5b30f207f63f938d4dc9f30d82ed413beb74053ac5557671dd7753ecd329fbdb392913a48f9c279f1b031440f01e13e4089268e0e3469af2fecf99821c15b8bc46e1f1bc10ae8bf8b3e906a54ede08904b07d0fec89f49e9050f0459fc3b037effb2a56e32034096bb6a0dd6262dbb21f859282f552038046029b13511b7cab0c29e79b00f4c329f1619c34adb634a772d0677e782255711c72c0e1c9205d63944cd0c0ba6ea95270d46202ad42e57b737883627b75b22fef1cf7b7fc56cab79a9b351ca84bca588484f1caff1a6e34f9a46905bec6aadc37e6d16dc39434624127101332474a7cb99f485eb96362674181c4b32c38152433585ed1ab3ec4af57c2d651c25538596ea3f38fae24766497fffb8d4da0af8c060448c67fead95400b17b9f858fcbaab698fa345e9287bb81bfa7e3f4e4314095c1271c2d4649d82439cb4a55b9251c04901d993ee78901bd5e5bfbf7abdf8832a65b5f3dd24f93f299eba6b9bbac529bdfd083704d155487f4d8ab33e04051a4d20c1ec41ccc3b8ffa89cad47d0f286883865d13da9e189111bea176db322b6069b04e9b0b5cf78a53ac39bb83093b60a5aa6cafabd771affce91bd683aca6d985b7da127dd77e3e844516d690755b917bec2410a5ab6cd26fe5df7b2a789341622ca47a8f2123434b9831e858e806c13a321de3edf796684c79bac7f9b83cb77a17fe0c0fba2ce09b692628f392ccae3af629ea22613dbadf462c0dcac7c856fab123b05fb99ebecd8c1258ff75652547f8ae30b549d01f51cbc9e38bec827f24e55774715de2e9995adddb0fd841c349b1e82f6560ec57e56b699619d3bac1a7c30b5f251e3ec4cc8edb6fe0e4b454c1d7337e01f5fe5b42ed980c1112ca2a010eadb60ffac8f7193f2195066a3201e6261b20b55b0cb4b68897ff3e2c3f15522bb81e7f565286b02d8fbc5f8acd69f0c4052c7b9461a7f75388b3b011a99c50fb3a205fe3c76cca43cc4c1a9d186d7a632a4cee2ff6f3c1174a68da10bb6e3c9f4d3f9d40b796ba0ae6c43e446a04dd96da5abf3693f3baca10543dd9f479822c0b4e31518bd3390d2419714c2911197cb530e17b2da573fde4abdb2381e995f2e270a4e9fbc8efebfe67d8134c5d58b5a04e1e84b33327d34ad8f3cbbd4c06a5bc3265178af72f650e113df89621b783aebae6e8af64ae5c7705e0241b9a222b5d16f404b8bf3e373dcede73326ec537613fc599a62eb049cc7c1f6ceac89d98571e575606bfc6d26317c7bbd95324356d304dbb8c789efd2415d656f00328f253516a8d8f368ff0de41245a30cf22fb5a9f977113b0e2bc152b9be7bd63b54ff1e77c1f86fb93ae1d446002ad796ce46b8735b46bcc457587bc8c6c31fa699937470919bfe18d9bebb77802894ee489a317cda5e1c9556b71b1f669a4c3b51c31d5b7b6b0e7afe485936d793aaa13fecba715b2f178bc54e3b7c61815bed8f38f33186fa9b1fa8ac4752126c4fdd5ba03881c11bc6baebf5728e07b54be89fd303f6f41d80edb59bb93c0fa8cf78e1489aa3a0b8fc770da3cf7c97aa01049a58fae7513c93acdd4857aa8bcd246804c057f7821bf87f55a44f886a6ca3d2fe8e7b0e9644873bad292bbf1749222b14bd90c582765588b90c5ff045a2b0e387bb9ee9e20a525c37cc823ee182a49b51121b8c256e56491e986e824df2be8822e4a8fadd645d03fbe2bf600403c8f4ae8ce03dd6a6ad9d93baa2e672a3cbe881aaa6b820eab84fb671a8e16ce7e281074c9fc9205de667a159b19e3b717db6aaca8227e203c91e6d527d13cc3d3a597ba38ad7a195eb84b28a835a507059b955e1f2b9aed1fcbbc8890fe44de75902203307d630f637ac934f39e95ec94f18d12e990c8d3b876668583956d5a7022555457ef76034582c8ebbdf97db5741f238952cafbb5deb8c494f3ae33f29bc98cfee67129a2c93d38a28050ae2a96783962bcba5973faaf73f3b21d1bc2f422e2d0270645aca77046f5bb9677bec0a8c87d8e4e23d32e84cd89a1f3e7aa7bd281d736a0c74d9543724a72b85809b24c65022815cd8b06139bdfa8655b674de11ff35e101953f4f62a0c3a3b62eb08da2792072559d42a21ac4c4361da307d60f3f54ae8271e774a822f7ce0d506c1a72a63d6248a114c5e674866bf6414763ad6c53c4fa391e11f5dfbf0b3b8fa2798f599a1b4cd0104f266587d08484280727ff0e554d006a9553144451d6a86c8ef29694a499712f0e116b4fc7ba11f3b798b303ab746aa9d0de1e8378a0f122e254e873a0f9636fae5774e7f1b62a85f980dff30787ded3e9b0da85cb9c659b164cd1c31fee0d354b3c80d27b18763186c224cfad8dc15df996ecb1ca28870818e20131f96582dab82da02997c9104a64ecd5217b849a3aaaf6efa716b6e97bab5881175abb480886327f7c51b753a4042887a81a0478d02fb7de0d82f0c25946dca07b4478461c7afd8bcb82bbff50dca25f0ae6f4ccf3ca5c2623b57cbf53eb5dcadd3e918cc344ac75a436b08ff4086b84c2c987b6f85ee47fe308b9e9ffd08692154ea15e96210cd79e1f103f5896281b39d8f1f27daee2e0086d43284f1088d1a6c67638b8ba4cc4bc26bdbd8aee953e355ec4f65896b06a1cee022b8faa6263352a8d7734c73d309b9744dd2c7c5ef8734a428f4ff361e2f8424127843e4e62d1acb659db8fb23aea691883be9d367fd89950e445e2df8cbabbd9e1c64a58f1bddc3ac948c462ee26089fcf8a2d6d2780285999db0747e87fc07220513d9d8202d137e185c7f4452a8b56dfa6147b46e82af4e7dcdb105a85863361ba289a54534eb14322c86ff200de3f20048873df11e09f42be21ea584533fda70add637a43ec2427b53fa2f646622f237d7c08d134eab26ae1fa6853a02ab64bb3bb598e061ea13818321bde0539bf2dc711d0bc7416e4e1adf8c2cf7a554ec1ccfa10488d8f7634959773a71725114afe5f4fdc8028375dad60dc4492c9772ad7fd94d3a17d00d9bc3e0a36d513304a8e3c16b6272f64ab8929a6fd3cd626e656bbd5f813bf1a53de7559e9b37dc7692eab3e5db81fac21ee2ea3f68bc0128512b133cb23720a7ff2564d2f5374cccd995ffd5b9c3247e39927e2e666c6fac1b2de15e1c7798bc848337b2fda36ebf819d21c90898ab00acb36a17910c6f0f1f6f2e53e66d7372a32195ce2d59efd65e77d4c6a02e0100f3db9b520bd29654738e78aa4d9766279fbebc114ef0e44480cf6b385f6c8865ed2ab2f4a0dfc4caacfd5fd202cf033baf0137ae4a5587d5b4fdb4301a80b967267cf102861f5fb1874a3b24b01ec5d005caa848e5235559f9d6e591a2e825b69fff2be965c93e565355c292d1b12b5faa259d5817a42596b324382569d2934f837a0bded3f8efd2f1a14ce2b04c98efacd9600451d4d167e7d7ed70fd105b29701c0556157f6a5177ab67de4232e5865db3bf25f1c497e9c73a8f06829e8696315a2c06a1d559f5b77fcc233862aa97babd7587e7daaa3263d10d7892b0a08dbbcaa1574711c5d6f376834ee3c40e48b997d708ce3294aaf8e2d72bed8b6bb7c0d12a5179eaf80c4af406e0a463ca959d49fa7db285cf9f074a60e0acd33103d8042d440d4622e9686a978b6562ea90c25c6f159d563dcf3be4b1ce64a21d70f96016eff6bd8b93884ea3096505a4eb83bd7c21007a01600a1e783c32ba02f1b214703c9c150dd5f7d01e99d0653aa10a8a2e805f98bb762e13e2d5e17cd7c96f50aad76ab318e0c278cd188753e614d2a527fc327febcc441ead04242e9ab3bf38f667b9b6b0ee2798ec7659f473a482f75686c866841a376ca93fe0c5b8c06c6b77f85299374569a087b92e629c125a11fd9957e4da02e988db2ea63ead533a552d49455a491fae21309ea49465de7501593c9f138868c1b75c5ed0de961d2b93c74fc4df5af5d61c2f99630e335aed25b41f88b6a7c1a23ad9c0b3c8d204380b7850ea1231eabce8a87d68459fc5870fc72ae76c05a4868a239024106387543c73f0120c654d3e6a48a82bd814b0a28f3e4449e693ea1b5d054327760698c71f0f77f3a6de84ee72b8c5c3a8d1a2a07e25bf2d70699e9553086e0658db17cbcd8ecf60145358638df5e5a4e4a886daa70ef52cf298ddde86a8e7a940bb1c91d3a7be0b922173068f336d12f9fe907e6781db8b1f00bac51d3a9f6e8fab1393bee0bc4006cce77ff9ff7ae10c2562e609c39fac883ffa7991c5f18bc1b22f8c65f0d18247b7dbb4266b9b6b4f1e5a3c9a698f2e26b230f79ba23daeffcde5ea8a576eac0964f00439959e91b664e3c0eab9c9146cc922205522b227f9a464a5192c65e4e2bc6f416e6e12235e609cc1ad83503b9454a5bbca514b2e08c34b8028670e3cbd42f91b09d9076422591d2f2b354232b6b75e3005862623978fd591ccd0a82f41e2deee123da9b", 0xe}, 0x527, &(0x7f0000001080), 0x8, 0x81}, 0xc61}, 0x3, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket(0x28, 0x800, 0x4) setsockopt$auto(r5, 0x113, 0x9, 0x0, 0x0) r6 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r7 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000001300), r6) sendmsg$auto_IPVS_CMD_NEW_DEST(r1, &(0x7f0000001480)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001380)={&(0x7f0000001000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000026bd7000fbdbdf2505000000080004000700000008000400800000000800060008000000080004003a6b56ca3a0942cd3c62cfe5f4a2"], 0x34}}, 0x4008000) unshare$auto(0x40000080) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002500)={&(0x7f00000014c0)={0x1018, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_CNTDWN_OFFS_BEACON={0x1004, 0xba, "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"}]}, 0x1018}, 0x1, 0x0, 0x0, 0x4000}, 0x805) setresuid$auto(0x8, 0x8, 0x0) 2m25.782048576s ago: executing program 0 (id=1015): openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x12000000000c004) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x443001f86cbb5105, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x57e) fcntl$auto_F_ADD_SEALS(r1, 0x410, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0x2, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_uring_setup$auto(0x401, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cec27\x00', 0x88c0, 0x0) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3}, 0x6a) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000080)=@link_create={@map_fd=r0, @target_ifindex=r4, 0x1, 0xce9, @tracing={0x0, 0x1}}, 0x6) mlockall$auto(0x7) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r5, 0x4018aee2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_fragmentation_threshold_ops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy2/fragmentation_threshold\x00', 0x40100, 0x0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) io_uring_setup$auto(0x9, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) 2m23.744693438s ago: executing program 0 (id=1018): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf250d00000008000100", @ANYRES32=r2, @ANYBLOB="08c8b04ccdf5acf49200390632de000365", @ANYRES32=r0, @ANYBLOB="04000280"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) mmap$auto(0x1, 0x420009, 0xdf, 0x7fff, 0x401, 0x1000000000008000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x5, 0xffffffffffffffff, 0x40eb2, 0x401, 0x300000000000) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x4d0081, 0x0) ioctl$auto_UI_SET_FFBIT(r3, 0x4004556b, &(0x7f0000000100)=0x208) r4 = memfd_create$auto(0x0, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="13002cbd7000dddbdf250200000008000300", @ANYRES32, @ANYBLOB="0800610001000000"], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmsg$auto_ETHTOOL_MSG_MM_SET(r5, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x24000055}, 0x200408c1) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) unshare$auto(0x40000080) mprotect$auto(0x200000000000, 0x5, 0x4) select$auto(0xd, 0x0, &(0x7f0000000400)={[0x8, 0x200000000005, 0x7, 0x7, 0x0, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x9, 0x3, 0xfffffffffffff954, 0xfffffffffffffff8, 0x4]}, 0x0, &(0x7f0000000080)={0x800000000001ff, 0x401}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/1u\x00', 0x10000, 0x0) ioctl$auto(0xffffffffffffffff, 0x800064bd, 0xffffffffffffffff) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) fallocate$auto(r4, 0x0, 0x9, 0x4cbd5d) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) 2m22.506140085s ago: executing program 0 (id=1020): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xde, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xebf, 0x401, 0x8000) r1 = socket(0x2, 0x2, 0x1ff) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) setsockopt$auto(0x3, 0x1, 0x2d, 0x0, 0x29) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000380), r0) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB="90000000abac1d426ea6ca38bb80b87d6abf0fa777ecfc5adba7cad1739cc0a4b1ab1ebfc992d5d2fba11eeb5bb63c0b4febdd47dd473bef1fbd6003d3d4", @ANYRES16=r2, @ANYBLOB="3eab25bd7000ffdbdf251500000008001600ff03000074002f80a8ef35961ed8cc4caac98d3d6c71a363b2a47dbf81cce31ca2f891a84841e514007d0000000000000000000000ffffe00000026a3ff2996739214558b3b108bc09cfbf166ae88c5f55c8a075a4beceddd395273bca1fda9c1a972571ff5f419763aef55de16cf74003ac692f8aba0949"], 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x8840) sendmsg$auto_NL80211_CMD_SET_STATION(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x400c080}, 0x24000015) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x272981, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$auto_SO_RXQ_OVFL(r3, 0x60000, 0x28, 0x0, &(0x7f0000000140)=0x79) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r4, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r5, 0xc1105511, &(0x7f0000000640)={{@raw=0x202, 0x801, 0xa, 0x8, "26d718b7d3ee69350e4ede7079dcb0c24c8aa1e3c7ee2e00308b8a7d74b0a707f7045e6d0352196ca83379bb"}, 0xfffffffc, 0x3, 0x2, @inferred, @enumerated={0x0, 0x6, "ad75b255b5cdd64a6b7a755de55f8e3b81e6c4e6fbf4f15a5ca5dc29f056113e9b60cd7bd82081ec90b01a6c1ae79b9fd0930da366e011ae30c0a636577776a6", 0x8000000000000003, 0xce9}, "18a801006a0900000000000000c4bd5359eeadc8357752b72fa176254d8797cdffd02555ac83a07983eeddcd24b626f54ad9d763dcdc9120af8b7c848ceb55a7"}) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r1) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(r6, 0x0, 0x800000008) ioctl$auto_SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000180)="dd06d1574c0a1719baadf81f683297e8af14b4dad2728892c747c5e01a1b7165a54b36471475e5b56eef9a6bd918ceb4aef4e8bcdd0f2bd3802806ade24a889ac8e25b") bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xa}, 0xfff}, 0x5, 0x311) 2m22.084090686s ago: executing program 32 (id=977): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xe06, 0x0) setresuid$auto(0x0, 0x8, 0x8000) r0 = setfsuid$auto(0xee00) setresuid$auto(r0, 0x0, r0) ioprio_set$auto(0x3, r0, 0x4b34) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x20342, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) r1 = fspick$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x7fffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'hsr0\x00'}) waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000300)={@siginfo_0_0={0x7fffffff, 0x5, 0x3, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000240)="0cff21a3c7553572fb13ef783963db8ca52c03ca341e66580bce625bef0091ff48a7926387a1a737bd881b54bd4202886a109b1cb5176ba98685ef0740d0b6565280a1edc5588c52fc06f7223f88705e736b1cd8b66e4849bcfb5be8a456cadb32a73b28ad09f94ed36af8fe59769fc734acba292382bdb95508adba781784ae7ea8bd6b7533a79f18287f8f2cec2720ff07d00247ad59c3fed8611cbea085cc338cdad46523c8d0774641d94b1054174fd3"}}}, 0x0, &(0x7f0000000380)={{0x141ca25e, 0x59c}, {0x2, 0xe2f}, 0x100000001, 0x6, 0x8, 0xffff, 0x0, 0x6, 0x0, 0x587c, 0x80, 0x7fffffffffffffff, 0x3ff, 0xfffffffffffff81a, 0x4, 0x6}) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x40801) mmap$auto(0x0, 0x8, 0x8, 0xeb1, 0xffffffffffffffff, 0xa800000000000000) r2 = syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="002f05fe449698deaa05913f468a7eae99989c96801a91725ab9a7216f2f0ce2bad000be712e378cbf55951ebe91c109de8bd588acc4721fed82a8a5a6b2a7bd9f05ab4ab0340b017272bcf6bcae9404761a8a1104323d28072dff8df7fc609ea81ebdc9cbdefe92929fb6b31c9888d3fc56ecb2077b78fc4744ec89133690e217553ba40e11e5249217ece8eb809bd2e5b87fac8254354a9263ca14bf046bfe3c166fc4ec8847746fb71bc73652413e19779b35d585ad6b500d9bb9380d770c0f8e7059da9d2d0cda2f53f7da1626d00a752e9017d4715032b9d4ac7bba58162935162279144284648f886f7a41a32411f7c8051d06bd34659ecfa8e3872afbf6ffbd9e8bb4244044023784f708853f9eb268bf7f9ef8b76c4f3454ce0f0b1a8a9d32aac2a27a8e9be7c907e0b95fa3075e6dc9a8febe376106adb63d92fee9d63b33ef437b855c53cd659a85b0f8ea247249724fd3ae97303600354cf8630961a41bf569606158a519a7dfa5212b578f4d59112b6596690058795443a3b2c7238be625ecdb1845db30affe370fbbfc9be9fe65c114fd9b34b771580ae354180e3184", @ANYRES16=r2, @ANYBLOB="00012cbd7000fddbdf2502000000"], 0xffffffffffffffa9}, 0x1, 0x0, 0x0, 0x24000010}, 0x2400c800) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC2\x00', 0x101802, 0x0) ioctl$auto(0x3, 0x80045530, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2, 0xe2, 0xeb1, 0x405, 0xfffffffffffffff9) r4 = socket(0xa, 0x5, 0x0) setsockopt$auto(r4, 0x10000000084, 0x79, 0x0, 0xd) r5 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r3) sendmsg$auto_NFSD_CMD_LISTENER_SET(r3, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) 2m21.477160783s ago: executing program 0 (id=1025): mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000) mmap$auto(0x1000000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) r0 = prctl$auto(0x1000000003b, 0x7fffffff, 0x0, 0x2, 0x33) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x5}, 0xa) mmap$auto(0xffffffffffffffff, 0x4000002, 0x7, 0x8051, r0, 0x0) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE2(r2, 0x2272, &(0x7f00000001c0)="fe530a59fbae9604f9035c73eb3ba04d29fbda45a7eaa756f07b29caa80ed94839be7dd990b4df9907bc743dec72ae97a7324f29d864682ef38cd63394628e1c5ad57995a54c828bde7f5604f5ea93da13dcd69794f8582b46a18eccc880f2e0400036486a6b67baa0f58ae8cde3ffdfc8ccc80b8baf70001f48cf64a73a26fd3d2d4834048ce53d31c571ae1a") ioctl$auto_SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000040)="6fa669e66d2ea330a77719c212e4ceab00000000000000001f90b26f7403de16") openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x2, 0x2) write$auto(0xffffffffffffffff, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) socket(0x2, 0x1, 0x0) prctl$auto(0x39, 0x1, 0x0, 0x0, 0xffffffffffffffff) fsync$auto(r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0xb, 0xd, 0x808e8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mlockall$auto(0x800000000000005) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000440)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00', &(0x7f0000000140)='nfsd\x00', 0x1010000, 0x0) mmap$auto(0x0, 0x8f8, 0xfffffffffffffffe, 0x200000000000eb1, 0xfffffffffffffffa, 0x7fffffffffffffff) close_range$auto(0x2, 0x8, 0x0) 2m15.882210998s ago: executing program 33 (id=996): mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000) mmap$auto(0x1000000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) r0 = prctl$auto(0x1000000003b, 0x7fffffff, 0x0, 0x0, 0x100000000000033) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x5}, 0xa) mmap$auto(0xffffffffffffffff, 0x4000002, 0x7, 0x8051, r0, 0x0) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE2(r2, 0x2272, &(0x7f00000001c0)="fe530a59fbae9604f9035c73eb3ba04d29fbda45a7eaa756f07b29caa80ed94839be7dd990b4df9907bc743dec72ae97a7324f29d864682ef38cd63394628e1c5ad57995a54c828bde7f5604f5ea93da13dcd69794f8582b46a18eccc880f2e0400036486a6b67baa0f58ae8cde3ffdfc8ccc80b8baf70001f48cf64a73a26fd3d2d4834048ce53d31c571ae1a") ioctl$auto_SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000040)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x2, 0x2) write$auto(0xffffffffffffffff, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) socket(0x2, 0x1, 0x0) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram11/ext_range\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(0x3, 0x0, 0x8080) socketpair$auto(0xb, 0xd, 0x808e8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x400053, 0x9) mlockall$auto(0x800000000000005) msync$auto(0x2, 0x1800000ff000000, 0x400000004) mmap$auto(0x0, 0x8f8, 0xffffffffffffffff, 0x200000000000eb1, 0xfffffffffffffffa, 0x400000000008000) 2m11.680433626s ago: executing program 4 (id=1055): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nbd15\x00', 0x47e082, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="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", 0x238) ioctl$auto_SNDCTL_SEQ_SYNC(r1, 0x5101, 0x0) mmap$auto(0x0, 0x6, 0x2000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/irq/2/affinity_hint\x00', 0x40000, 0x0) pread64$auto(r2, &(0x7f0000000100)='/proc/self/net/arp_tables_targets\x00', 0x8, 0x9) close_range$auto(0xffffffffffffffff, 0x8, 0x8) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) faccessat$auto(0xffffffffffffffff, 0x0, 0x4) socket(0x0, 0x800, 0xa) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0) mmap$auto(0x9, 0xa1, 0x8, 0xeb1, 0xffffffffffffffff, 0x54e1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/options/blk_cgroup\x00', 0x5, 0x0) pwritev$auto(r0, &(0x7f0000001000)={0x0, 0x3ff}, 0xc, 0x8b, 0x200000000000040) socket(0x21, 0x2, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) read$auto_sc_seq_fops_netdebug(r3, &(0x7f0000000280)=""/200, 0xc8) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) 2m9.56497093s ago: executing program 4 (id=1051): r0 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) write$auto(r0, &(0x7f0000000300)='d\n\x1e\x9f\xd0\x92l\x98\x92!Fc\x9c?\xado^\x9b\xf4\x9c\xa8\xd2gn\x1a\xd7\x1c\xe8)\xefA\x7f\xc2x\xd0\x18gS\x1c\xca\xb9\x84\x1ec\xd4>\xc2\xfej\t\x89u\xcb(\x95_3\xdfo\xdc\xa5;t\x05q$zmM\xae\xdb\x1f\xeb\xffe\x91\xd5\xd2[\xa5_F\xc4X\xec\xdb\xdc\x01\xc2d\xa1\x8b\xed=\xb0\x88\xa8tl2\x0e\x13mjH,\xcda\xcab.\x03\xe7\xa4z\xcaA\xe2\x99\xd5n\xa0\x8a\x91K_\xf0~\b\v\xd1W\x97\xd9\x8c}\xff4\xff\tAK\xc4\x16\x13\x06\x00\x00\x00\x00\x00\x00\x00\xfc\x98?\'\xaf\xcc6&n!\x02SH\x12L(\xed9\x90yRou\xa1\x12\x9fwZ\x1c\f\xcck\xdb-\xd7;\xbf\xbf\xbe\x04*L\x1e\x9c\x8fVb\xb8\xb4\xa2|\x88\x1e\bX\xba_O\x87f.\xc2\xfa\x01R\xefB\xe9\xf4Xc\x98\xe7\xd1\x98\xd6\xe6\"9l\nr\xefq\x81k=H\x02\xf9\xddn\x0e\x11:\xea\'\x10@\x99G\xb8\x1a\xcd(\xf7\x03\x96\xcc\x86', 0x5) madvise$auto(0x110c230000, 0x8031ca, 0x9) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x10011, 0xd, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) r1 = socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x0, 0x21, 0x0, 0x28) unshare$auto(0x40000082) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/irq/13/smp_affinity_list\x00', 0x0, 0x0) sendmsg$auto_NFSD_CMD_VERSION_GET(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40080}, 0x48004) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x1000000000, 0x10000040000b, 0x1000000000000df, 0x4000009b73, r3, 0x8003) ioctl$auto_BLKZEROOUT(r3, 0x127f, 0x0) mmap$auto(0x0, 0x95, 0x64cd278e, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/040/001\x00', 0x80600, 0x0) read$auto_usbdev_file_operations_usb(r3, &(0x7f0000000180)=""/38, 0x26) socket(0x2c, 0x80003, 0x0) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec3\x00', 0x0, 0x0) ioctl$auto_CEC_DQEVENT(r4, 0xc0506107, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/gud/bind\x00', 0x80000, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x7fffffffffffffff, 0x2, 0x20000000000000b2, 0xfb, 0x9489, 0x2, 0xa1, 0x6, 0x12, 0xf, 0x1, 0x1000, 0xb, 0x8000000009, 0xd0, 0xffffffff]}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x110c230000, 0x1fffffe, 0x9) close_range$auto(0x2, 0x8, 0x0) 2m8.383354054s ago: executing program 4 (id=1056): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x238) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/arp_tables_targets\x00', 0x0, 0x0) pread64$auto(r1, &(0x7f0000000100)='/proc/self/net/arp_tables_targets\x00', 0x8, 0x9) close_range$auto(0xffffffffffffffff, 0x8, 0x8) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) faccessat$auto(0xffffffffffffffff, 0x0, 0x4) socket(0x2, 0x3, 0xa) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0) mmap$auto(0x9, 0xa1, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x54e1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x9) close_range$auto(0x2, 0x8, 0xbf) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/options/blk_classic\x00', 0x5, 0x0) pwritev$auto(r2, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x400, 0x9) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) 2m5.810277495s ago: executing program 34 (id=1025): mmap$auto(0x0, 0x20009, 0x7, 0xeb1, 0x401, 0x8000) mmap$auto(0x1000000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) r0 = prctl$auto(0x1000000003b, 0x7fffffff, 0x0, 0x2, 0x33) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x5}, 0xa) mmap$auto(0xffffffffffffffff, 0x4000002, 0x7, 0x8051, r0, 0x0) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE2(r2, 0x2272, &(0x7f00000001c0)="fe530a59fbae9604f9035c73eb3ba04d29fbda45a7eaa756f07b29caa80ed94839be7dd990b4df9907bc743dec72ae97a7324f29d864682ef38cd63394628e1c5ad57995a54c828bde7f5604f5ea93da13dcd69794f8582b46a18eccc880f2e0400036486a6b67baa0f58ae8cde3ffdfc8ccc80b8baf70001f48cf64a73a26fd3d2d4834048ce53d31c571ae1a") ioctl$auto_SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000040)="6fa669e66d2ea330a77719c212e4ceab00000000000000001f90b26f7403de16") openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x2, 0x2) write$auto(0xffffffffffffffff, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) socket(0x2, 0x1, 0x0) prctl$auto(0x39, 0x1, 0x0, 0x0, 0xffffffffffffffff) fsync$auto(r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0xb, 0xd, 0x808e8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mlockall$auto(0x800000000000005) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000440)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00', &(0x7f0000000140)='nfsd\x00', 0x1010000, 0x0) mmap$auto(0x0, 0x8f8, 0xfffffffffffffffe, 0x200000000000eb1, 0xfffffffffffffffa, 0x7fffffffffffffff) close_range$auto(0x2, 0x8, 0x0) 2m5.792679567s ago: executing program 4 (id=1062): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x5, 0x2}, 0x10001}, 0x5, 0x20000000) r1 = io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x8) setsockopt$auto(0x3, 0x1, 0x7fff, 0x0, 0xf) read$auto(r1, 0x0, 0x80) write$auto(0x3, 0x0, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r2, 0x0) ioctl$auto(r0, 0x1e, r2) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/memory.force_empty\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) r4 = open(0x0, 0x22240, 0x154) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0004, 0x17) munlock$auto(0x7, 0x7) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.event_control\x00', 0xa001, 0x0) write$auto(r5, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xf5\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) fcntl$auto(r4, 0x400, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mq_getsetattr$auto(0xd, &(0x7f0000000200)={0x100, 0x3, 0x7, 0x10}, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) 2m3.589956763s ago: executing program 4 (id=1069): mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sysvipc/msg\x00', 0x0, 0x0) lseek$auto(r0, 0x7fd, 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.throttle.read_bps_device\x00', 0x2000, 0x0) pread64$auto(r1, 0x0, 0x80, 0x4) mmap$auto(0x40000, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x4013, 0x400008, 0x5, 0x9b72, r0, 0x8000) r2 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x2041, 0x0) write$auto(r2, 0x0, 0x4) mremap$auto(0x200000000000001, 0x0, 0x4, 0x7, 0x100800000) read$auto(0xffffffffffffffff, 0x0, 0x5) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = socket(0x15, 0x5, 0x0) sendmsg$auto(r4, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0xfffffffe) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r3, @ANYBLOB="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"/429], 0x154}, 0x1, 0x0, 0x0, 0x4008801}, 0x24040810) r5 = socket(0x6, 0x5, 0x100000) poll$auto(&(0x7f0000000000)={r5, 0x1963, 0x81}, 0x5, 0x10001) setsockopt$auto(r6, 0x113, 0x3, 0x0, 0x79ad226b) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/kallsyms\x00', 0x20100, 0x0) pread64$auto(r7, 0x0, 0x8, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x8402, 0x0) r8 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r8, 0xc0109207, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) 2m2.739279925s ago: executing program 4 (id=1072): mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x40000000000a5, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) r0 = open(&(0x7f0000000040)='./file0\x00', 0x202041, 0xfa) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf2503000000070003"], 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) getsockopt$auto(r1, 0x84, 0x7b, 0x0, 0x0) pidfd_open$auto(0x1, 0x0) socket(0x28, 0x5, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) write$auto(r0, 0x0, 0xfffffdf1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r2) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x84, r3, 0x500, 0x70bd2a, 0x25dfdbfe, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'IPVS\x00'}, @NFSD_A_SERVER_SCOPE={0x44, 0x4, '/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/inject\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x7}, @NFSD_A_SERVER_SCOPE={0x7, 0x4, '&\xfc\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x81}]}, 0x84}, 0x1, 0x0, 0x0, 0x40c0}, 0x4080) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r3, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x5}, @NFSD_A_SERVER_SCOPE={0xa, 0x4, ']!((]\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x4}, @NFSD_A_SERVER_SCOPE={0x9, 0x4, '!@^(\x00'}, @NFSD_A_SERVER_SCOPE={0xd, 0x4, '.\\:\x85\\\xaf.-\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x17}, @NFSD_A_SERVER_SCOPE={0x6, 0x4, '*\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1d"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x89}, 0x7}, 0x4, 0x0) 1m53.928135063s ago: executing program 2 (id=1094): mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) name_to_handle_at$auto(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.bfq.dequeue\x00', &(0x7f0000001100)={0x0, 0xd}, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0x10, 0x2, 0x9) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6b) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/thermal/cooling_device1/type\x00', 0x101000, 0x0) listen$auto(0x3, 0x81) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="21020cbd70c031cd0ce401"], 0x14}}, 0x4000091) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2400c001) r0 = socket(0x10, 0x2, 0x4) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) timer_create$auto_CLOCK_BOOTTIME(0x7, &(0x7f0000000040)={@sival_int=0xfffff801, @raw=0x5, 0xfffffffc}, &(0x7f0000000080)=0x3bd) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x40, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto(0x3, 0x5411, 0x38) ioctl$auto_EVIOCSKEYCODE_V2(r1, 0x40284504, 0x0) 1m53.804772785s ago: executing program 2 (id=1095): r0 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ubifs/chk_index\x00', 0x44280, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x80302, 0x0) sendfile$auto(r1, r1, 0x0, 0x400000000006) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_PEER_GET(r2, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4405}, 0x4c848) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) mmap$auto(0x1, 0x81, 0x4000003, 0x13, r0, 0xd1) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) madvise$auto(0x1000, 0x400050, 0x9) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4085}, 0x4000804) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/dev_snmp6/veth0\x00', 0x88000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f00000000c0)=""/190, 0xbe) 1m53.201011962s ago: executing program 2 (id=1097): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL802154_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x4e094}, 0x20008012) getpid() openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x62002, 0x0) r0 = socket(0x2, 0x5, 0x0) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r2, r2, 0x0) r3 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x5, 0xb}, 0xa}, 0x8, 0x311) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x20003e, 0x1, 0x0, 0x1, 0x0) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x902, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x200000008000) r5 = epoll_create$auto(0x1) epoll_ctl$auto(r5, 0x1, 0x8000000000000000, 0x0) write$auto(r4, 0x0, 0xffffffffffffffff) mprotect$auto(0xc, 0x5, 0x4) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4ff, 0x0) bpf$auto_BPF_LINK_DETACH(0x22, &(0x7f0000000000)=@link_detach, 0x8) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x6, 0x0, 0xffffffffffffffff, 0x0, 0x202) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0xee00, 0x7fffffffffffffff, 0x99a7, 0xc) socket(0xa, 0x3, 0x3a) socket(0xa, 0x3, 0x3a) 1m51.200408382s ago: executing program 2 (id=1104): r0 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.0/usb1/power/wakeup_max_time_ms\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, r0, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xebf, r0, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x2f, 0x0, 0x0) (async) getsockopt$auto(0x3, 0x200000000001, 0x2f, 0x0, 0x0) 1m51.013965059s ago: executing program 2 (id=1105): r0 = eventfd$auto(0x10001) fchown$auto(r0, 0x0, 0x0) r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$auto_BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000300)={@inferred=r1, "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"}) syz_genetlink_get_family_id$auto_seg6(0x0, 0xffffffffffffffff) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x14f402, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x0, 0x300, 0x70bd20, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) sendmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x200084a, 0x0, 0xd, 0x0, 0x1, 0x10b}, 0x4}, 0xffffffff, 0xc5f) getcwd$auto(&(0x7f0000000180)='**,\x00', 0x800) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) lsetxattr$auto(0x0, 0x0, 0x0, 0xf4e9, 0x3) bpf$auto(0x9, &(0x7f00000000c0)=@batch={0xffffffffffff3c77, 0x8000000037, 0x0, 0x5, 0x9, 0xffffffffffffffff, 0x6, 0x5852}, 0x1b) writev$auto(r2, &(0x7f0000000100)={0x0, 0x600}, 0x8) 1m50.920081319s ago: executing program 2 (id=1106): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) read$auto(r0, &(0x7f0000000040)='/dev/kvm\x00', 0xd43) set_mempolicy$auto(0x8, &(0x7f0000000000)=0x3, 0x5) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x29, 0x5, 0x0) r3 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r3, &(0x7f0000000140)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(r2, r2, 0x0, 0x2) syz_genetlink_get_family_id$auto_l2tp(0x0, r3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/notify_on_release\x00', 0x121281, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)="35835e537c55f4575f497a96d44c47e0ec338cb6e4c7bebf5d4acbcaed33cd28e3a9a4857198aa18de571287ab143171ddbca4f6a4f7e94145f727fac9fba4bed807439c4026ff75d04c7f6b", 0x4c) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000180)=""/245, 0xf5) close_range$auto(0x2, 0xffffffffffffffff, 0x20000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_proc_auxv_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/auxv\x00', 0x80, 0x0) read$auto_proc_auxv_operations_base(r5, 0x0, 0x0) r6 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/smaps\x00', 0x100, 0x0) read$auto_proc_pid_smaps_operations_internal(r6, &(0x7f0000000280)=""/237, 0xed) mmap$auto(0x0, 0x9, 0x200, 0x9b72, r4, 0x7) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) 1m47.488964001s ago: executing program 35 (id=1072): mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x40000000000a5, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) r0 = open(&(0x7f0000000040)='./file0\x00', 0x202041, 0xfa) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf2503000000070003"], 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) getsockopt$auto(r1, 0x84, 0x7b, 0x0, 0x0) pidfd_open$auto(0x1, 0x0) socket(0x28, 0x5, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) write$auto(r0, 0x0, 0xfffffdf1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r2) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x84, r3, 0x500, 0x70bd2a, 0x25dfdbfe, {}, [@NFSD_A_SERVER_SCOPE={0x9, 0x4, 'IPVS\x00'}, @NFSD_A_SERVER_SCOPE={0x44, 0x4, '/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/inject\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x7}, @NFSD_A_SERVER_SCOPE={0x7, 0x4, '&\xfc\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x81}]}, 0x84}, 0x1, 0x0, 0x0, 0x40c0}, 0x4080) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r3, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x5}, @NFSD_A_SERVER_SCOPE={0xa, 0x4, ']!((]\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x4}, @NFSD_A_SERVER_SCOPE={0x9, 0x4, '!@^(\x00'}, @NFSD_A_SERVER_SCOPE={0xd, 0x4, '.\\:\x85\\\xaf.-\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x17}, @NFSD_A_SERVER_SCOPE={0x6, 0x4, '*\x00'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1d"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x804) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x89}, 0x7}, 0x4, 0x0) 1m45.949898703s ago: executing program 5 (id=1116): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x200007, 0x19) syz_clone3(&(0x7f00000003c0)={0x383201180, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) mprotect$auto(0x0, 0x806121, 0x6) mmap$auto(0x0, 0x5ecc52ad, 0x7, 0x8000000008011, r0, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x4, 0x9f, 0x8000000008012, r2, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x6, 0x202000b, 0x2000000000005, 0x11, r2, 0x1000) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x0, 0x1, 0x20002) rt_sigsuspend$auto(0x0, 0x8) socket(0xa, 0x2, 0x3a) close_range$auto(r1, r3, 0x1) socketpair$auto(0xffff755c, 0x400, 0xc6, &(0x7f00000002c0)) io_uring_setup$auto(0x1d48, &(0x7f0000000180)={0x7fffefff, 0x5, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x9, 0x8000000400000001}, {0x8, 0x1, 0x7, 0x7, 0x11, 0x101, 0x0, 0x2, 0x3}}) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB="010025bd7040ffdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB='R'], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x85, &(0x7f0000000100)={0x0, 0x100000000000fc2}, 0x2, &(0x7f0000000080)='\x00\x00\x00', 0x7, 0xa505}, 0x800}, 0x9, 0x400c) r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bus/usb/038/001\x00', 0x201, 0x0) ioctl$auto_USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, 0x0) 1m44.986356048s ago: executing program 5 (id=1118): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x81, 0x20005, 0xdf, 0xeb1, r0, 0x8ee) sysfs$auto(0x2, 0x100000000000035, 0x0) fsopen$auto(0x0, 0x1) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) readv$auto(0x3, 0x0, 0x1) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS1\x00', 0x0, 0x0) ioctl$auto_TIOCMGET2(r1, 0x5415, &(0x7f0000002d00)) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) getsockopt$auto_SO_TXREHASH(r0, 0x5, 0x4a, &(0x7f0000000000)='.!![[&-#\'*T\x00', &(0x7f0000000040)=0x3) ioctl$auto_EXT4_IOC_SETVERSION_OLD(0xffffffffffffffff, 0x40087602, &(0x7f0000000100)) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0) close_range$auto(0x2, 0x8, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth0_to_bond\x00'}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/dummy_hcd.0/usb1/bDeviceProtocol\x00', 0x559500, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socket(0xa, 0x80803, 0x6) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x8001, 0x0) socket(0x15, 0x5, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0) 1m44.819865494s ago: executing program 5 (id=1119): unshare$auto(0x40000080) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x807ff0000000000, 0x0, 0x0) prctl$auto(0x3e, 0x2, 0xffffffffffffffff, 0x1, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) mmap$auto(0x0, 0xf40, 0xe1, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x100, 0x0) pread64$auto(r0, 0x0, 0x40000000f42c, 0x80202) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f00000000c0), 0x38240, 0x0) socket(0xa, 0x2, 0x73) msync$auto(0x200000, 0x2000000005, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x50b, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) 1m44.229989832s ago: executing program 5 (id=1120): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba42933ae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d6b046bdeea6adce8626e0def15dd32b0ec16a85d93e1dea980794033f4b46973062c64c0209f9d3efc6ea7704c8e8dfea8cdfbe2cb1e367bf634a1952190e0660994f79f0c622d47ee8f93ce1c2852db907ae68a29bcc960b26e0e634173287fd012c4bb3063c41d35c92e896b44080bc5a98e90907cd1d01cc0708019cc1c93c71f29bfe841c873ad2aa0565dfaeb86c8b8e58ea2075de2a562ba1b5dc4ca452df21f25453b7c7f9a3e31547f4e803cefbac3b94715f2ab1f9fc66570244472f2f29deb9bdf6dc5b18d54e3c2264f9598f2ea749d170a66d351acf003c3f37fe74a09a8a964ce28", 0x238) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/arp_tables_targets\x00', 0x0, 0x0) pread64$auto(r1, &(0x7f0000000100)='/proc/self/net/arp_tables_targets\x00', 0x8, 0x9) close_range$auto(0xffffffffffffffff, 0x8, 0x8) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) faccessat$auto(0xffffffffffffffff, 0x0, 0x4) socket(0x2, 0x3, 0xa) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0) mmap$auto(0x9, 0xa1, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x54e1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x9) close_range$auto(0x2, 0x8, 0xfe) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/options/blk_classic\x00', 0x5, 0x0) pwritev$auto(r2, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x400, 0x9) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) 1m41.411214234s ago: executing program 5 (id=1124): openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x1a000, 0x0) (async) openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x1a000, 0x0) r0 = socket(0x15, 0x5, 0x0) setsockopt$auto(r0, 0x114, 0x1005, 0x0, 0x7) (async) setsockopt$auto(r0, 0x114, 0x1005, 0x0, 0x7) mmap$auto(0x0, 0xe983, 0x252, 0xeb1, 0x401, 0x8000) r1 = io_uring_setup$auto(0x59, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) (async) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x480, 0x0) (async) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x480, 0x0) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x2) (async) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) (async) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) mount$auto(0x0, &(0x7f0000000140)='}[,&*}\x00', 0x0, 0x1fe, 0x0) mmap$auto(0x7, 0x2, 0xa, 0x80000010, r3, 0x101) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x83, 0x966, 0x3, @inferred, @enumerated={0x8, 0x80000000, "033beddd1805dc0a0f9236c0095295603854aabf973f037f0896b19cbe04c0aa95c57dc0788556977828784abe1a8f695f19b28fd798a2fb818b216638fd3266", 0x48, 0x3}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) (async) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x83, 0x966, 0x3, @inferred, @enumerated={0x8, 0x80000000, "033beddd1805dc0a0f9236c0095295603854aabf973f037f0896b19cbe04c0aa95c57dc0788556977828784abe1a8f695f19b28fd798a2fb818b216638fd3266", 0x48, 0x3}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x480, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x18, 0x3, 0x2) accept$auto(r7, 0x0, 0x0) (async) accept$auto(r7, 0x0, 0x0) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r6) r9 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="05082dbd7000fbdbdf257e0000000800", @ANYRES32=r9, @ANYBLOB="0c002e010800000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x200400c0}, 0xc004) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000225bd0400500105003e00f7000000"], 0x20}, 0x1, 0x0, 0x0, 0x24008015}, 0x4) socket(0x10, 0x2, 0xc) (async) socket(0x10, 0x2, 0xc) socket(0xa, 0x3, 0x3a) 1m40.902223961s ago: executing program 5 (id=1125): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x14f402, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0x5a1c, 0xfffffffffffffffa, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) r1 = socket(0x1e, 0x4, 0x0) getsockopt$auto_SO_NOFCS(r1, 0x6, 0x2b, 0x0, &(0x7f0000000b40)=0x4) openat$auto_ima_htable_violations_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0) openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x40) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r2, r2, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x1) bind$auto(0x3, 0x0, 0x6e) syz_clone(0x1846200, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x200084a, 0x0, 0xd, 0x0, 0x1, 0x10b}, 0x4}, 0xffffffff, 0xc5f) writev$auto(r0, &(0x7f0000000100)={0x0, 0x600}, 0x8) 1m39.784298573s ago: executing program 6 (id=1127): r0 = socket(0x10, 0x3, 0x6) futex_wake$auto(&(0x7f00000001c0), 0x5, 0x4, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_THREADS_GET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44848}, 0x4000000) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000019c0), r1) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000000000)={0x18, r2, 0x503, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x1044) fanotify_init$auto(0x10001, 0x9) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) shmctl$auto(0x691, 0x3, 0x0) setsockopt$auto(0x3, 0x0, 0x32, 0x0, 0x4) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0xd4, r3, 0x1, 0x70bd2f, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc0, 0x3, 0x0, 0x1, [@typed={0x8, 0xc2, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x4, 0x2a}, @typed={0x4, 0x11}, @typed={0x8, 0x2e, 0x0, 0x0, @fd=r0}, @generic="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c", @nested={0x4, 0x5}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x2404c810) setsockopt$auto_SO_OOBINLINE(r0, 0x9, 0xa, &(0x7f0000000180)='/}!\x00', 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x22a02, 0x0) setsockopt$auto_SO_ERROR(r4, 0x7ff, 0x4, 0x0, 0x7f) mremap$auto(0x200001000000, 0x4, 0x4, 0x3, 0x100000000) statmount$auto(&(0x7f0000000100)={0x4, @raw=0x7, 0x8, 0x1, 0x3}, &(0x7f0000000280)={0x8, 0x90, 0x9, 0x7, 0x7fff, 0x156a, 0x5, 0xfc6, 0x8, 0x8, 0xffffff00, 0x8, 0x8, 0x8, 0x7, 0x4, 0x1, 0xffffffff, 0x0, 0x1, 0x1, 0x4, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x1ff, 0xfff, 0x1ff, 0x1, [0x28, 0xffff, 0x0, 0x2, 0x2, 0x9, 0x5, 0x3, 0x9, 0x5d, 0x8000, 0xfd, 0x4, 0x100, 0x7fff, 0x3, 0x9, 0x2, 0x10000, 0x7, 0x1, 0x4, 0xfffffffffffffffe, 0x1000, 0x1ff, 0x6, 0x0, 0x1, 0x0, 0x56c, 0x7f, 0x5, 0x0, 0x100, 0x1ce8, 0x2f, 0x8, 0x0, 0xffffffff, 0x8, 0x8, 0x6, 0x6], "86b8ce4a56fcdcf8527ac03c7a023092fbb606fffb4278444c6ef03a7cbb31f2b07eeaa296fb496a7dc036818cf980551a44f36a82149dab2cfddddda509d794dcf03b494e565f670dfff902034ff090b0517b002017687788f177341a6433ef545d98343636d330698b0a636adab5a7f819148150e9cc137eb635e52c27bfde905851f429655210fdfe2605c4935853ee3b1cf871"}, 0x10003, 0x66) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ram2\x00', 0x200000, 0x0) ioctl$auto_BLKPG(r7, 0x1269, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r5, 0x8000) madvise$auto(0x0, 0x400053, 0x9) 1m39.619672067s ago: executing program 6 (id=1128): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x10, 0x401, 0x8000) capset$auto(0x0, 0x0) r0 = socket(0x15, 0x5, 0x0) setsockopt$auto(r0, 0x114, 0x1, 0x0, 0x1c) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8ee46, 0x0) mmap$auto(0xf000, 0x10000, 0x80000de, 0x11, r1, 0x28000) 1m39.510754475s ago: executing program 6 (id=1129): r0 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) pread64$auto(r0, 0x0, 0x100000000, 0x7fff) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) r2 = socket(0x2, 0x1, 0x106) setsockopt$auto(r2, 0x6, 0xd, 0x0, 0x4) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) recvmmsg$auto(r3, &(0x7f00000004c0)={{&(0x7f0000000080)="80e5fcafd33c4b9eecf099ea4457", 0x4, &(0x7f0000000380)={&(0x7f0000000280)="552436bd91705125e772942f834e50d9b0f7a02060ad36fc83e99a9f553024991f223c9d422e80dc67d4c1fe0fe4d2598c773cce8ff8da4e7838e74e4dfe60e8d379790353931ae8054f6570574a7ef1495cc67e09ffdab8fef1d81f6c1e48d822d2d603f64d349e430597dd48d1fde5a87865db6a84aab735fd247ba883e89e0488a59a2bb26413f3f1244f5dc9994fea0bbe84cd9909e7b575b940054e06841afcd52e900cfbd84b119b30e46bb06ce814615173a9e59f67411666da87739c2612f6d6dc8bf9dc9ebbf09eea2bcc4f997e61f76d64fc1e2045b0aa969f7e63565ae18cb2201b7bbebef90d9e7ae4093181", 0x9}, 0x8, &(0x7f00000003c0)="b116abbe21448bb9761cb49cb33cfb45d2233bb01c86fad1d12cfe3737ee383a84cd3713deff952d4b34ba5465a5bd091e3b3e5e50c22089ae9dcf85a53fe8f07abd886b0ceffab6ffa40cc15d6ac226e7e80f13066954df229d95e9f3310e99a68a0967e1351e4e5f5bad57af7c3c9e7a18116164ee14e704c8235632ac5a04b6c47ca873f81925d27284e52790de02c87612cb55feedb9386f886c9c363c69306111acb6aa9b3ec9dabcf8436c37c8b9ccdf9746bd1159da521bab73c3f596630e2ebc7e3d3d2c3c24c106d23ac9985ea8", 0x1c00000000000000, 0xc}, 0x8da6}, 0x1, 0x1ff, &(0x7f0000000500)={0x4040, 0x3}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd5\x00', 0x26000, 0x0) ioctl$auto_BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r5, 0x1276, 0x0) r6 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x121002, 0x0) read$auto_transaction_log_fops_(r6, &(0x7f0000000100)=""/3, 0x3) mmap$auto(0xffffffffffffffff, 0x5, 0x7, 0xbe, 0xffffffffffffffff, 0x7ffe) sysfs$auto(0x2, 0x23, 0x0) r7 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) prctl$auto_PR_SVE_GET_VL(0x33, 0x4, 0x7cf, 0x4, 0x5) write$auto(r7, 0x0, 0x4) mmap$auto(0x0, 0x5, 0xffb, 0x8000000008012, r4, 0x8000) nanosleep$auto(&(0x7f0000000180)={0x3, 0x100000000044d4}, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) getcwd$auto(0x0, 0xff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop13/queue/max_sectors_kb\x00', 0x109206, 0x0) 1m38.502948677s ago: executing program 6 (id=1131): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x238) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/arp_tables_targets\x00', 0x0, 0x0) pread64$auto(r1, &(0x7f0000000100)='/proc/self/net/arp_tables_targets\x00', 0x8, 0x9) close_range$auto(0xffffffffffffffff, 0x8, 0x8) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) faccessat$auto(0xffffffffffffffff, 0x0, 0x4) socket(0x2, 0x3, 0xa) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0) mmap$auto(0x9, 0xa1, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x54e1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x700) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/options/blk_classic\x00', 0x5, 0x0) pwritev$auto(r2, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x400, 0x9) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) 1m35.810504416s ago: executing program 36 (id=1106): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0xffffffffffffffff, 0x300000000000) read$auto(r0, &(0x7f0000000040)='/dev/kvm\x00', 0xd43) set_mempolicy$auto(0x8, &(0x7f0000000000)=0x3, 0x5) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x29, 0x5, 0x0) r3 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r3, &(0x7f0000000140)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(r2, r2, 0x0, 0x2) syz_genetlink_get_family_id$auto_l2tp(0x0, r3) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/notify_on_release\x00', 0x121281, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)="35835e537c55f4575f497a96d44c47e0ec338cb6e4c7bebf5d4acbcaed33cd28e3a9a4857198aa18de571287ab143171ddbca4f6a4f7e94145f727fac9fba4bed807439c4026ff75d04c7f6b", 0x4c) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000180)=""/245, 0xf5) close_range$auto(0x2, 0xffffffffffffffff, 0x20000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_proc_auxv_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/auxv\x00', 0x80, 0x0) read$auto_proc_auxv_operations_base(r5, 0x0, 0x0) r6 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/smaps\x00', 0x100, 0x0) read$auto_proc_pid_smaps_operations_internal(r6, &(0x7f0000000280)=""/237, 0xed) mmap$auto(0x0, 0x9, 0x200, 0x9b72, r4, 0x7) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) 1m35.766134344s ago: executing program 6 (id=1143): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x141302, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)="629467a9", 0x4) mmap$auto(0xa, 0x20009, 0xdf, 0xeb1, 0x401, 0x881e) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r1, 0x0, 0xfffffdf1) linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, 0x0, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010) getcwd$auto(0x0, 0xffffffffffffffff) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) mprotect$auto(0x0, 0x8000000000000001, 0x8) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 1m34.904334027s ago: executing program 6 (id=1137): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x14a) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x410403, 0x0) prctl$auto(0x4b, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x400007, 0x40, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/mm/swap/vma_ra_enabled\x00', 0xb02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) socket(0x23, 0x80805, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x89ed, 0xfffffffffffff4e0) mmap$auto(0x3, 0x400008, 0xdb, 0x80000000009b72, 0x2, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) pkey_free$auto(0x7) prctl$auto(0x23, 0x20000000000000b, 0x7fffffffefff, 0x0, 0x0) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0x0, 0x200}, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) 1m29.535861183s ago: executing program 8 (id=1147): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={0xffffffffffffffff, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = inotify_init1$auto(0x3000000000000) socket$nl_generic(0x11, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) unshare$auto(0x40000080) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0) read$auto(r0, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) io_uring_setup$auto(0x6, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xfdef) 1m28.59591783s ago: executing program 8 (id=1150): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim5/psample/enable\x00', 0x1e9a02, 0x0) write$auto_nsim_psample_enable_fops_psample(r0, &(0x7f00000005c0)='Y', 0x1) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002bbd7008fcdb25060000000800018004000100e2dce5bb2de18547f690c68bf1c59addaff4391ef727c2a97596014dd7718004fad790c6903397eac4812a3c5e981667e00080000080000000a38a5b0afcc19777af6fe6bb6a8f21dc001fc9c196eb0d54e1a2bffb580cb69415d03101ea7211f1c3195494f5bcf84b8bc73466498c2461a290fdeca7724eace953d244a0b189f89ba881a0e68a148398cc3879674fccf2b682ea8542959adafc65041a2a1a0d355c9260d2fd61c8016d69140d2eb22451f960f1817fbb17eb8773fd33622ee9a10c2b7373d60acff57573b0af42385785c3b69aae08a17455dd18e6230e939116c7afa20cacf8cc730bdadfd76d2b85c9809b974b404e206d9a2406e5293f7685e2c4bbe637fda8caa0f1738d935df36c9437ca0a25084a3e65dc3d647cda6324f936fc4d525a3a16aa62e0e358859d7935504000d3a286546e0ad13a69b8b52d2c2f2d5c3a5d4d00e56680278f94eab2d5fdc8c81a40697eeda58ad44c9c82d838a8768d7f233f7c89c924f609e737e2b8"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) r1 = socket(0x10, 0x3, 0x15) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}}, 0x400c001) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) mmap$auto(0x0, 0x2020009, 0x3, 0xeb5, 0xfffffffffffffffa, 0x8000) r2 = socket(0x10, 0x2, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x0, 0x0) r3 = io_uring_setup$auto(0x59, 0x0) getpid() unshare$auto(0x40000080) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r2, 0x7) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r4, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000200)='\x00'/14, 0x2) unshare$auto(0x40000080) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) prctl$auto(0x0, 0x1, 0x0, 0x5, 0xb) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000000)=0x200000000) 1m27.838436751s ago: executing program 8 (id=1151): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x0, 0x9, 0x3, 0xc, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb1, 0x6, 0x5, 0x3, 0x5, 0x7, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6d76]}, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x6, 0x400a) 1m27.544796086s ago: executing program 8 (id=1153): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mmap$auto(0x0, 0x400008, 0x1, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) r1 = socket(0x2b, 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x15, 0x0, 0x0, 0x0, 0x3, 0xfffbfffc}, 0x10003}, 0x41fd, 0x1) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D1c\x00', 0x1, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_SW_PARAMS2(r2, 0xc0884113, &(0x7f0000002700)={0x9, 0x10, 0x7, 0x3, 0x8, 0x8, 0x7fffffff, 0x8, 0x4, 0x6, 0x6, 0x40, "1c53ba84bfaf7141d33b710196043676b2865bc958d79eb96fcb41368253d053a3d93ba90cb309d940b40ba34a371ba20befcd2047d2d95e"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) io_uring_setup$auto(0x401, 0x0) (async) r3 = socket(0xa, 0x801, 0x84) getsockopt$auto(r3, 0x84, 0xc, 0x0, 0x0) socket(0x28, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x1) (async) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC0\x00', 0x0, 0x0) syncfs$auto(0xffffffffffffffff) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) ioctl$auto_UI_DEV_CREATE(r0, 0x5501, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async, rerun: 64) mmap$auto(0x0, 0x6, 0x2, 0x18, 0xffffffffffffffff, 0x308000000000) (async, rerun: 64) socket(0xa, 0x5, 0x0) (async) mmap$auto(0x0, 0x9, 0xfc, 0x1000000eb1, 0x401, 0x8000) 1m27.163925991s ago: executing program 8 (id=1154): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x141302, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)="629467a9", 0x4) mmap$auto(0xa, 0x20009, 0xdf, 0xeb1, 0x401, 0x881e) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r1 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r1, 0x0, 0xfffffdf1) linkat$auto(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xf6\x04W\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xed\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\x9bg\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_GET_DEST(r2, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x1c, 0x0, 0xc0dce8a66cb0a7ff, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x5, 0x2, 0x0, 0x1, [@generic="f1"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010) getcwd$auto(0x0, 0xffffffffffffffff) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) mprotect$auto(0x0, 0x8000000000000001, 0x8) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 1m26.436056825s ago: executing program 8 (id=1156): r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) mmap$auto(0x0, 0x6, 0x2, 0xeb3, r0, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x1, 0x0, 0x80000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mremap$auto(0xfffff000, 0x4, 0x1, 0x7, 0x1ff000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) r1 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) pwrite64$auto(r1, 0x0, 0x400000, 0xc) 1m25.987678186s ago: executing program 37 (id=1125): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x14f402, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0x5a1c, 0xfffffffffffffffa, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) r1 = socket(0x1e, 0x4, 0x0) getsockopt$auto_SO_NOFCS(r1, 0x6, 0x2b, 0x0, &(0x7f0000000b40)=0x4) openat$auto_ima_htable_violations_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0) openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x40) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r2, r2, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x1) bind$auto(0x3, 0x0, 0x6e) syz_clone(0x1846200, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x200084a, 0x0, 0xd, 0x0, 0x1, 0x10b}, 0x4}, 0xffffffff, 0xc5f) writev$auto(r0, &(0x7f0000000100)={0x0, 0x600}, 0x8) 1m19.538819894s ago: executing program 38 (id=1137): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba42933ae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af", 0x14a) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x410403, 0x0) prctl$auto(0x4b, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x400007, 0x40, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/mm/swap/vma_ra_enabled\x00', 0xb02, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) socket(0x23, 0x80805, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(0x3, 0x89ed, 0xfffffffffffff4e0) mmap$auto(0x3, 0x400008, 0xdb, 0x80000000009b72, 0x2, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) pkey_free$auto(0x7) prctl$auto(0x23, 0x20000000000000b, 0x7fffffffefff, 0x0, 0x0) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0x0, 0x200}, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) 1m11.419860878s ago: executing program 39 (id=1156): r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) mmap$auto(0x0, 0x6, 0x2, 0xeb3, r0, 0x2) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x1, 0x0, 0x80000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mremap$auto(0xfffff000, 0x4, 0x1, 0x7, 0x1ff000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) r1 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) pwrite64$auto(r1, 0x0, 0x400000, 0xc) 9.83170208s ago: executing program 7 (id=1347): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim5/psample/enable\x00', 0x1e9a02, 0x0) write$auto_nsim_psample_enable_fops_psample(r0, &(0x7f00000005c0)='Y', 0x1) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) r1 = socket(0x10, 0x3, 0x15) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}}, 0x400c001) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) mmap$auto(0x0, 0x2020009, 0x3, 0xeb5, 0xfffffffffffffffa, 0x8000) r2 = socket(0x10, 0x2, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x0, 0x0) r3 = io_uring_setup$auto(0x59, 0x0) getpid() unshare$auto(0x40000080) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r2, 0x7) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r4, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040026bd7000fddbdf258c00000006009800010000004b0006009a470bee6393c9306fae7848977ab4058374bcf8b783bd2a2725d5d6b06d49a49acc1df371eda2403a999bf56987d079880cfc3f21aae716a2bb64cebc2bea2e765364c5353de6000c000201b9372ec04b6d68c1070123800800df007f0000012bdad01fb4d905d21e0dcc10fa67abc2f44de83c6cf1d2e67cfb8cc8a04ddc069faad656770dc283f38e3035010000003d444c4e8622cdc0b47b9f35d1bd268acd886a063c677ab758115e4f6902f73fdc69096f5cb062af75ce16d05265c8ec533f3b143194d0f0befbcfe6b5bc18d9c4698936e38bfbc18a1131df304b72ba204362c213f924ec1844ddf8aab3c2f24a3ace0e70753520d9446e11de9c11d38c2e846a1cd6478a32b92e1e417120109b2770a392250886e8f95c7cff61757841923558c0ffd2277fe9f665c37e58dc0fb263fe7ce81a1d1a943046f652e87d976e2ac95ac5f5e4d83376aeb9d7d945aa0400ff0000000000000000"], 0x17c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000200)='\x00'/14, 0x2) unshare$auto(0x40000080) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) prctl$auto(0x0, 0x1, 0x0, 0x5, 0xb) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000000)=0x200000000) 8.52192295s ago: executing program 3 (id=1351): socket(0x10, 0x2, 0x0) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0x0, 0x7fffffffffffffff, 0xffffffffffffe6d6, 0x2) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000340)='/proc/fs/cifs/smbd_receive_credit_max\x00', 0x101000, 0x0) pread64$auto(r0, 0x0, 0x8, 0xffff) (async, rerun: 32) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a0005000700000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 8.073981842s ago: executing program 3 (id=1353): mmap$auto(0x101, 0x6, 0xdb, 0x15, 0xffffffffffffffff, 0x7ffc) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) shutdown$auto(r0, 0xda6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0x40fffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1000000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7]}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) socket(0xa, 0x1, 0x84) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200400, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETPAGEFILE(r3, 0x7a9, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffff004, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bond0\x00'}) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x67e) 7.656892312s ago: executing program 3 (id=1354): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x238) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/arp_tables_targets\x00', 0x0, 0x0) pread64$auto(r1, &(0x7f0000000100)='/proc/self/net/arp_tables_targets\x00', 0x8, 0x9) close_range$auto(0xffffffffffffffff, 0x8, 0x8) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) faccessat$auto(0xffffffffffffffff, 0x0, 0x4) socket(0x2, 0x3, 0xa) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0) mmap$auto(0x9, 0xa1, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x54e1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_trace_options_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/options/blk_classic\x00', 0x5, 0x0) pwritev$auto(r2, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x400, 0x9) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) 7.281521845s ago: executing program 7 (id=1356): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x7, 0x0) r0 = socket(0x11, 0x80003, 0x300) r1 = bpf$auto(0x5, &(0x7f0000000000)=@iter_create={0x20, 0x5}, 0x7) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000001c0), r2) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r3, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x72}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc49}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, 'ovs_flow\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x804) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2c, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x14, 0x1, 0x0, 0x1, [@nested={0x8, 0x14, 0x0, 0x1, [@nested={0x4, 0x1d}]}, @typed={0x8, 0x13, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) setsockopt$auto(r0, 0x107, 0x14, 0x0, 0x4) sendmmsg$auto(r0, &(0x7f0000000400)={{&(0x7f0000000000), 0x225aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r6 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000000)=0x200000000) r7 = socket(0x840000000002, 0x3, 0xff) mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) semctl$auto(0x2, 0x5, 0x13, 0x9) fcntl$auto_F_OFD_GETLK(r7, 0x24, 0x2) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.5/usb6/maxchild\x00', 0x8000, 0x0) fgetxattr$auto(r8, &(0x7f00000004c0)='security.capability\x00\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd4.\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x8a\n\xe8\x1c\x88\xd4\xa5\x96!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f', 0x0, 0x96) pwrite64$auto(r8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99+\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t3\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\xfb\xba\xb2.$\'\x1e\x82\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/250, 0x1000000000fdf1, 0x4) lsm_list_modules$auto(0x0, 0x0, 0x0) io_uring_register$auto(0x2, 0xd, 0x0, 0x20) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)='-', 0x1) 6.585962525s ago: executing program 7 (id=1359): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) (async) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) r1 = open(&(0x7f0000000140)='./file1\x00', 0x1b3042, 0x64) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'nr0\x00'}) (async) io_uring_register$auto(0xffffffffffffffff, 0x806, 0x0, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) syz_clone(0x80000980, 0x0, 0x0, 0x0, 0x0, 0x0) (async) open(0x0, 0x0, 0x408) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) (async) r3 = socket(0x2, 0x1, 0x0) (async) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) write$auto(r4, &(0x7f0000000000)='\\1\x04\x13_l', 0x60) (async) getsockopt$auto(r3, 0x6, 0x1d, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_DEL(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000000c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) 6.248762421s ago: executing program 9 (id=1361): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x410000}, 0xa, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/packets_per_slave\x00', 0x2a081, 0x0) write$auto(r1, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram12\x00', 0x0, 0x0) mmap$auto(0xfffffffffffffff8, 0x4, 0xa1, 0x800000000801e, 0xffffffffffffffff, 0x8) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) ioprio_set$auto_IOPRIO_WHO_PROCESS(0x1, 0x0, 0x80) epoll_create$auto(0x15) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb2, 0x602, 0x300000000000) ioprio_set$auto(0x9, 0xee00, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x64040, 0xc0) fcntl$auto(r3, 0x0, 0xa8) 5.48603245s ago: executing program 1 (id=1363): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000100)="c80d1b5d399b3945", 0x8) mmap$auto(0x4, 0x2020006, 0x3, 0x14, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x28000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = socket(0x2b, 0x1, 0x1) sendmsg$auto_IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044010}, 0x4) r2 = getsockopt$auto(r1, 0x0, 0x80, 0x0, 0x0) fsync$auto(r1) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) r4 = socket(0x2a, 0x80802, 0x0) getpeername$auto(r4, 0x0, 0x0) sendmsg$auto_NBD_CMD_CONNECT(r3, 0x0, 0x8880) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x20) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x150102, 0x0) r7 = socket(0x2, 0x8080f, 0x100) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) syz_genetlink_get_family_id$auto_thermal(0x0, r7) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x204980, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) migrate_pages$auto(0x0, 0x4, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x1000000002) 5.475666143s ago: executing program 9 (id=1364): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim5/psample/enable\x00', 0x1e9a02, 0x0) write$auto_nsim_psample_enable_fops_psample(r0, &(0x7f00000005c0)='Y', 0x1) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002bbd7008fcdb25060000000800018004000100e2dce5bb2de18547f690c68bf1c59addaff4391ef727c2a97596014dd7718004fad790c6903397eac4812a3c5e981667e00080000080000000a38a5b0afcc19777af6fe6bb6a8f21dc001fc9c196eb0d54e1a2bffb580cb69415d03101ea7211f1c3195494f5bcf84b8bc73466498c2461a290fdeca7724eace953d244a0b189f89ba881a0e68a148398cc3879674fccf2b682ea8542959adafc65041a2a1a0d355c9260d2fd61c8016d69140d2eb22451f960f1817fbb17eb8773fd33622ee9a10c2b7373d60acff57573b0af42385785c3b69aae08a17455dd18e6230e939116c7afa20cacf8cc730bdadfd76d2b85c9809b974b404e206d9a2406e5293f7685e2c4bbe637fda8caa0f1738d935df36c9437ca0a25084a3e65dc3d647cda6324f936fc4d525a3a16aa62e0e358859d7935504000d3a286546e0ad13a69b8b52d2c2f2d5c3a5d4d00e56680278f94eab2d5fdc8c81a40697eeda58ad44c9c82d838a8768d7f233f7c89c924f609e737e2b8"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) r1 = socket(0x10, 0x3, 0x15) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}}, 0x400c001) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) mmap$auto(0x0, 0x2020009, 0x3, 0xeb5, 0xfffffffffffffffa, 0x8000) r2 = socket(0x10, 0x2, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x0, 0x0) r3 = io_uring_setup$auto(0x59, 0x0) getpid() unshare$auto(0x40000080) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r2, 0x7) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r4, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000200)='\x00'/14, 0x2) unshare$auto(0x40000080) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) prctl$auto(0x0, 0x1, 0x0, 0x5, 0xb) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000000)=0x200000000) 4.562104025s ago: executing program 7 (id=1365): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x10000, 0x1, 0x29f, 0x100, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x40000, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000280)={0x4, 0xfc, 0x6, 0x3, 0x7f, 0x80, 0x0}) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0xfffffffffffffffd, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x40004) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000140)={0x1045100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r1, 0x0, 0x39b8) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(0xffffffffffffffff, 0x0, 0x810) r2 = pidfd_open$auto(0x1, 0x0) setns(r2, 0x60020000) open_tree$auto(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8001) 4.493371944s ago: executing program 9 (id=1366): r0 = openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/1:0:0:0\x00', 0x60000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) bpf$auto(0x18, &(0x7f0000000040)=@link_create={@prog_fd=r1, @target_fd=r1, 0x7fff, 0x40000, @kprobe_multi={0x6, 0x80000004, 0xb70, 0x733, 0x7fffffff}}, 0x92) close_range$auto(r0, r0, 0x0) r2 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) setfsuid$auto(0xee00) read$auto_proc_pid_smaps_operations_internal(r3, &(0x7f0000000040)=""/4096, 0x1000) sendmsg$auto_IPVS_CMD_GET_SERVICE(r2, 0x0, 0x24040000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 4.441729451s ago: executing program 1 (id=1367): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/firmware/acpi/hotplug/force_remove\x00', 0x2062, 0x0) write$auto(r1, &(0x7f0000000440)='o\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) rename$auto(&(0x7f0000000040)='./cgroup\x00', 0x0) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = socket(0xa, 0x3, 0x3b) getsockopt$auto(r3, 0x29, 0x1e, 0x0, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r2, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) chown$auto(&(0x7f0000000080)='.\x00', 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vivid.0/video4linux/video62/name\x00', 0x100, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) r6 = ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(r6, 0x4018aebd, r4) read$auto_proc_iter_file_ops_compat_inode(r6, &(0x7f0000001b80)=""/253, 0xfd) shmctl$auto_SHM_UNLOCK(0xffff7fff, 0xc, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x2, 0x9, 0x5, 0x1}, 0x3, 0x6, 0xfffffffffffffffd, 0x7, @raw=0xf1, @inferred=0xffffffffffffffff, 0xae53, 0x0, &(0x7f0000000200)="361c9ea3e69a1fa88072bb73441e80728cef418aaf66141c6f41f440fbf284dd95082a625f2a843fc3b061e53e9df3aa9a936f69edacfdfcaab9d57cfc4f6702f2ec3d8c5a6865bfbc537e07ae76c5ec7bf48af4b45fa7bef467aa6925e739861078ddb93d7cbe8766605d533a4718cc8d035efb4d849d08df8edb94fd6b11fdf2bb05b833e2fcde06c825f2160571bbea9d1f73ae70e28a2ff400a05ab77ec70ccd70cc87a5e43646c53154a6e97c683dbd2c230c67c65c078d8779dd42bb244447c742e52db1c8f73613", &(0x7f0000000300)}) timer_create$auto_CLOCK_REALTIME(0x0, &(0x7f0000001180)={@sival_ptr=&(0x7f0000001100)="eeb6b6f42be2ad6e1093010133b2cfff275e080f1c60b4471f9935652152b14be6cd0a450060d491fa17856b1a0134fbe2a887585db6", @raw, 0x27, @_tid}, &(0x7f0000001200)=0xfffffff7) shmctl$auto_IPC_STAT(0x6, 0x2, &(0x7f0000000540)={{0xb, 0xee00, 0x0, 0x1000, 0x6, 0x4, 0x1}, 0xffffffff, 0x9, 0x19, 0x2, @raw=0xfff, @raw=0x3ff, 0x3d2a, 0x0, &(0x7f0000000440)="b66ce4a739db58d65427e8692090017c46e63d10645daf844ad303bb5beb4de82d7565526a3e4e1a336d6f7ff2bd5377444d2434c79b4b1ce5f0ad6d30a61e8a3d9df3400a65126358", &(0x7f00000004c0)="9cf34bc8a839504061c16269796d93f19c340b09e6ad8939aa0d3a5b82bf80c6c1c31ce303d017a7e25fd4804ecde6734265c0bf0627c777c9b7b4adea5afc549cb0973b0991d00ef89d1dc1d9c7565d51cc4b956c4de54597b78744b4a034eac3827d02b7462d849976e72cda"}) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001b40), r0) sendmsg$auto_NL80211_CMD_SET_NOACK_MAP(r0, 0x0, 0x80) wait4$auto(0xffffffffffffffff, &(0x7f00000005c0)=0x3, 0x2, &(0x7f0000000600)={{0x4352, 0xfffffffffffffffa}, {0xffffffffffffff49, 0x933e}, 0x9f9, 0x6, 0x1, 0x7fffffffffffffff, 0x5, 0x7b79ec8e, 0x4, 0x80000000, 0x0, 0xc, 0x1ff, 0x2, 0x4}) getuid() sendmsg$auto_NL80211_CMD_ASSOCIATE(r6, &(0x7f0000001ac0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001a80)={&(0x7f0000003880)={0xc2c, 0x0, 0x200, 0x70ad2a, 0x25dfdbfc, {}, [@NL80211_ATTR_HE_OBSS_PD={0x1cc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x2}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x7}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xdb, 0x5, "173847256180e5a53ddf63165e347798540c0767b625c48cbcf427c80e7a67d722468400bbc5127d190b65172302fce68ba0108c7c4be827a037b9ee7ab44ccccce662b3be2fc37a80527444a7a55637e27d083ab1f3f9c8d2b7c5a8035cfbf07fc51b7a8f82e3c9cb6608ecda7fa97d8cb12b8a8096f07278305aa35649ed31ef552346fdf92bb0e3ad10a785189cb5c8b25700296a7d761f994948d75032d029517d005335a182de9d760bccdfa23690c872484bc8f581fe6b2a2d322990a165feea7a2d5cf2419e27eb7b0cd23ffd0c2660d5448a63"}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xda, 0x5, "579366434b9a845de31b80c7b802d473396ea08a7a3dc223550b2bd10b54f2c439f1fb329a2cab0705ed9ef95e19b39cc442ee9851d363c13c0ba49bdb9a20ee225449dcde0fd5e192067e5c1ec520b59e118622b227773cf86aa66a9c1de4c7a3b3deb68c63679d0bbad140d3e8b4fe8dcaa05427a5fed8b1db744dec091af13ccfce422a623417a590838444d34ed03f224b3f982c39e72fc607bbcb2639195a19a002c9690a43a27b0dfff682e7c87960b0ec3c5cf827d827c87d9fce47d723a608a89e495a8378b71a31d477947692874e97036c"}]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x4}, @NL80211_ATTR_REG_RULES={0x122, 0x22, 0x0, 0x1, [@generic="4a675d4e946fe55e61d83c108e7954dbef10dc369bda3eb4d61fbfab8c2fe853aaa48c5ab565b0e0abd93f7c32daaf0cd4c71cf3f7425f376c46fe33c1e7", @nested={0x8, 0xf6, 0x0, 0x1, [@nested={0x4, 0x15e}]}, @typed={0x14, 0x10b, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0xf2, 0x0, 0x0, @uid=r7}, @nested={0xb2, 0x7a, 0x0, 0x1, [@nested={0x4, 0x15}, @generic="3282e1a247bbb7aacea49646c964f27365e1d82f848a1961ce4bb8d21b781d5bd7643606d14d45fd6136a98c162bf6a636b9240b0fc4a2914129cf3c4e171d8fc85cdc73c8cdd30f510247e6463fcc8fe03eef075906", @nested={0x4, 0x16a}, @nested={0x4, 0x4}, @generic, @generic="a5f726d87b10cd56b0bd5fe5a563e331c7a7693dc7dd8f2cae42df2638705bf88b1486a4a4e650f4ea8c3cb2a907ae168a4e452d358c1d769cddcb7edff929299ee3c2973128f5a8c75ba164"]}, @typed={0x8, 0xe0, 0x0, 0x0, @uid=r7}]}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0xc0, 0x125, "de7f9c103c502d38aaa2414211d71706b1958df4a5f3d7fa380e7db3cc07b9c5c9ed18650aeb53fbdc3546622bb28c0354b517e662bc2967690f2211343ce5559fbf6ec3570d73d62b3c557bf030075335a74da0148797e8d362a0cf9e8e383a0a2cd731b5c50d7b9daabeb2a6aa4298ed73814056237c98d503108c0fb992c334e403e758f09c1ed1be2ffc10702581f0be81a4d56049ef66a05088627666f1e3913730b4212e44926b84c93eaa010e7f0c6154a92137d7823e0711"}, @NL80211_ATTR_IE_PROBE_RESP={0x860, 0x7f, "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"}]}, 0xc2c}, 0x1, 0x0, 0x0, 0x9f97d1471faf9678}, 0x0) socket(0x10, 0x2, 0x0) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/system/cpu/cpu0/topology/thread_siblings\x00', 0x20000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r8, &(0x7f0000000100)=""/4096, 0x1000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab83, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) 4.281124506s ago: executing program 9 (id=1368): unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x10000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r0 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x800, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x30}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sg0\x00', 0x80000, 0x0) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000200), r3) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(r6, 0x0, 0x2, 0x0) r7 = clone3$auto(&(0x7f00000002c0)={0x9, 0x7f, 0xb, 0x4, 0x8, 0x9, 0x9, 0xfffffffffffffff9, 0x80, 0x80, 0x7}, 0xe968) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000240)={0xdc5, 0x3, 0x5, 0x5, 0x6, r6}) waitid$auto_P_PGID(0x2, r8, &(0x7f0000000440)={@_si_pad}, 0x0, &(0x7f00000004c0)={{0x40, 0x80000001}, {0x501}, 0x0, 0x6, 0x2b53, 0x6, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x0, 0x401, 0x0, 0x3, 0x3e, 0x4, 0x6}) sendmsg$auto_OVS_DP_CMD_GET(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x7}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x2}, @OVS_DP_ATTR_NAME={0x5, 0x1, '\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r6}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0xb}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x44044}, 0x4) ioctl$auto_BLKTRACETEARDOWN2(r4, 0x1276, 0x0) 3.68641115s ago: executing program 1 (id=1369): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0xa, 0x7, 0x4cbd5d) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) fremovexattr$auto(r1, &(0x7f0000000000)='system.posix_acl_access\x00') mmap$auto(0xea88, 0x810004, 0xd, 0x10, 0x3, 0x8000) unshare$auto(0x40000080) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000) keyctl$auto_KEYCTL_INSTANTIATE_IOV(0x14, 0x80, 0x1, 0x31, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) (async) fallocate$auto(r0, 0xa, 0x7, 0x4cbd5d) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) (async) fremovexattr$auto(r1, &(0x7f0000000000)='system.posix_acl_access\x00') (async) mmap$auto(0xea88, 0x810004, 0xd, 0x10, 0x3, 0x8000) (async) unshare$auto(0x40000080) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000) (async) keyctl$auto_KEYCTL_INSTANTIATE_IOV(0x14, 0x80, 0x1, 0x31, 0x0) (async) 3.511170075s ago: executing program 3 (id=1370): r0 = gettid() close_range$auto(0x2, 0x8, 0x0) add_key$auto_KEY_SPEC_USER_KEYRING(0x0, 0x0, 0x0, 0xffffffff7fffffff, 0xfffffffffffffffc) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) pread64$auto(0xffffffffffffffff, 0x0, 0x7, 0x0) setsockopt$auto(0xffffffffffffffff, 0xc, 0xc570, 0x0, 0x5) unshare$auto(0x40000080) sendfile$auto(r1, r1, 0x0, 0xd8e) prctl$auto(0x2, 0x8, r0, 0x6, 0x55) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0x18bd01, 0x0) ioctl$auto_USBDEVFS_BULK(r3, 0xc0185502, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x1c) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000040)={0x19980330}, 0x0) openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, 0x0, 0x8102, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x1e, 0x800, 0x84) connect$auto(0x3, 0x0, 0x54) read$auto(0x3, 0x0, 0x8080) write$auto(0x3, 0x0, 0xffd8) 2.627323183s ago: executing program 9 (id=1371): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) r1 = socket(0xa, 0x5, 0x84) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) ioctl$auto_XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000000100)={r1, 0x8}) read$auto_snd_pcm_oss_f_reg_pcm_oss(r2, &(0x7f0000000140)=""/4096, 0x1000) write$auto(0x3, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) write$auto(0x3, 0x0, 0xfffffdef) setresuid$auto(0x0, 0x0, 0xee01) openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x20002, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) ioctl$auto_SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x8, r1, 0x5, "f35a7145d8b2553116358d2ea5c90bc4"}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a0001"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x440c0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='#\x00\x00\x00', @ANYBLOB='.'], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) pread64$auto(r3, &(0x7f00000000c0)='\x00', 0x2, 0x10001) 2.388753203s ago: executing program 7 (id=1372): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x410000}, 0xa, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/packets_per_slave\x00', 0x2a081, 0x0) write$auto(r1, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram12\x00', 0x0, 0x0) mmap$auto(0xfffffffffffffff8, 0x4, 0xa1, 0x800000000801e, 0xffffffffffffffff, 0x8) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) ioprio_set$auto_IOPRIO_WHO_PROCESS(0x1, 0x0, 0x80) epoll_create$auto(0x15) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb2, 0x602, 0x300000000000) ioprio_set$auto(0x9, 0xee00, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x64040, 0xc0) fcntl$auto(r3, 0x0, 0xa8) 1.927369559s ago: executing program 3 (id=1373): syz_clone(0x10110200, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x5) madvise$auto(0x0, 0x2003f2, 0x15) socket(0x2b, 0x1, 0x0) unshare$auto(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_SOCK_GET(r1, 0x0, 0x8cc) r2 = setfsuid$auto(0x0) setreuid$auto(r2, 0x0) r3 = setfsuid$auto(0xee00) setreuid$auto(r3, 0x0) sendmsg$auto_TIPC_NL_BEARER_GET(r0, 0x0, 0x2008000) close_range$auto(0x2, 0x8, 0x0) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8ef, 0x0, 0x0, 0x9, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendfile$auto(0x1, 0x3, 0x0, 0x400000) write$auto(0x3, 0x0, 0x100000000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0xc00000002, 0x400008, 0x2000000, 0x10, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x400000, 0x0) 1.754190866s ago: executing program 1 (id=1374): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim5/psample/enable\x00', 0x1e9a02, 0x0) write$auto_nsim_psample_enable_fops_psample(r0, &(0x7f00000005c0)='Y', 0x1) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002bbd7008fcdb25060000000800018004000100e2dce5bb2de18547f690c68bf1c59addaff4391ef727c2a97596014dd7718004fad790c6903397eac4812a3c5e981667e00080000080000000a38a5b0afcc19777af6fe6bb6a8f21dc001fc9c196eb0d54e1a2bffb580cb69415d03101ea7211f1c3195494f5bcf84b8bc73466498c2461a290fdeca7724eace953d244a0b189f89ba881a0e68a148398cc3879674fccf2b682ea8542959adafc65041a2a1a0d355c9260d2fd61c8016d69140d2eb22451f960f1817fbb17eb8773fd33622ee9a10c2b7373d60acff57573b0af42385785c3b69aae08a17455dd18e6230e939116c7afa20cacf8cc730bdadfd76d2b85c9809b974b404e206d9a2406e5293f7685e2c4bbe637fda8caa0f1738d935df36c9437ca0a25084a3e65dc3d647cda6324f936fc4d525a3a16aa62e0e358859d7935504000d3a286546e0ad13a69b8b52d2c2f2d5c3a5d4d00e56680278f94eab2d5fdc8c81a40697eeda58ad44c9c82d838a8768d7f233f7c89c924f609e737e2b8"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) r1 = socket(0x10, 0x3, 0x15) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}}, 0x400c001) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) mmap$auto(0x0, 0x2020009, 0x3, 0xeb5, 0xfffffffffffffffa, 0x8000) r2 = socket(0x10, 0x2, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x0, 0x0) r3 = io_uring_setup$auto(0x59, 0x0) getpid() unshare$auto(0x40000080) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r2, 0x7) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r4, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000200)='\x00'/14, 0x2) unshare$auto(0x40000080) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) prctl$auto(0x0, 0x1, 0x0, 0x5, 0xb) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000000)=0x200000000) 1.225931411s ago: executing program 7 (id=1375): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000018c0)={@_si_pad}, 0xe, &(0x7f0000000180)={{0xfff, 0x7}, {0x9, 0x2}, 0x5, 0xfc24, 0x100, 0xc, 0x3, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x3, 0xf54, 0xffffffffffff0001, 0x6}) stat$auto(&(0x7f0000000240)='./file0\x00', &(0x7f00000012c0)={0x8, 0xf1d, 0x8000000000000000, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, 0x8f2, 0xfd3, 0x8, 0x5, 0xffffffff, 0x5e9, 0x9, 0x8}) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000001380), 0x10801, 0x0) sendmsg$auto_NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={0x0, 0x478}, 0x1, 0x0, 0x0, 0x4}, 0x4000054) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x141702, 0x0) write$auto(r5, 0x0, 0x80000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_STOP_NAN(r6, &(0x7f0000002bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20140110}, 0xc, &(0x7f0000002b80)={&(0x7f0000001980)={0x117c, r4, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_TX_RATES={0xba, 0x5a, 0x0, 0x1, [@nested={0x90, 0x10c, 0x0, 0x1, [@nested={0x8b, 0x160, 0x0, 0x1, [@nested={0x4, 0x146}, @nested={0x4, 0x3}, @typed={0xc, 0xcf, 0x0, 0x0, @u64=0xe}, @nested={0x4, 0x101}, @generic="0642f171d2824d7a2b3d199cff25e794cdc89ea0db52f1a52bdc9cc7de47a8a16a236a1f39903b9442e6267fba15714cbfe93a8f20a7e929c1013659a22286518a3d48cec0aba1252908276189b41f018a40010aef7939657f95a53b48d34d331227b31dbf45d6e2e2121263f30b18"]}]}, @typed={0xc, 0x38, 0x0, 0x0, @u64=0x200000000000}, @generic="b62f3a62c4a54fd9cff3bc5a96301ed1815d", @typed={0x8, 0x97, 0x0, 0x0, @fd=r2}]}, @NL80211_ATTR_MLD_ADDR={0x1004, 0x13a, "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"}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_MLO_TTLM_ULINK={0x91, 0x149, "b4a1a414ffb0ee283aa986dd0b6af30b8532abf5cd6287f37517d3ea69ecef9d1dd758931ef484f7ed145e045ed4212a31502d05610884c3b929508db808d0e908e96c95b0420032db3625d35846bd8b1079a4e2ec84b7abdb61a27fcadc7730d32cea2b41c2540e522e9af97e42802826fc95fc797692b9b0de4fd8fd7dec9be1abc197a20553ff770b8d7385"}, @NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0x5}, @NL80211_ATTR_VIF_RADIO_MASK={0x8, 0x14d, 0x2}]}, 0x117c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/teql0/statistics/tx_aborted_errors\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) setsockopt$auto(0x400000000000003, 0x29, 0x3, 0x0, 0x4) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0xffffffffffffffc0) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/wlan1/forwarding\x00', 0x202, 0x0) sendfile$auto(r7, r7, 0x0, 0x7fffe000) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x40, r3, 0x1b, 0x70bd26, 0x25dfdbfb, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x11, 0x0, 0x0, @fd}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000005c80)={&(0x7f0000003540)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50000000}, 0x8000) 847.835895ms ago: executing program 1 (id=1376): close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x214e80, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) setsockopt$auto(0x5, 0x104000000000010e, 0x2, 0x0, 0x16) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0x100000a, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4004ae99, &(0x7f0000000000)={0x75}) 705.57532ms ago: executing program 3 (id=1377): sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000050) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x3, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x2c7, 0x10001, 0xb, 0x2dd, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0xffffffff, 0x52, 0x5, 0x80, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) close_range$auto(r0, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x1, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(r2, &(0x7f0000001a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a00)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="f8ff0040582338b86dd71b2f94ea7e41f324f6107c481950bb46c803858982d2bf48b59fbb68723914eea376fce7866176b3c0337c8df04909e36aefd015440530caa17218db668c770cf544b7adfdf74b08231042bb39d2a8b3d89766df7a2a997b415e666e", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESOCT=r1], 0xcb8}, 0x1, 0x0, 0x0, 0x408c4}, 0x99) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) r4 = prctl$auto(0x4e, 0x1, 0x0, 0x0, 0x0) setsockopt$auto_SO_PASSPIDFD(r4, 0x2, 0x4c, 0x0, 0xa6) futex$auto(0x0, 0x85, 0xa, 0x0, 0x0, 0xa0800002) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x2800, 0x0) ioctl$auto(r5, 0x4bfa, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x11, 0x3, 0x9) mmap$auto(0x3a980000000000, 0x2000009, 0x4, 0xeb1, r2, 0x7ffc) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x0, 0x400}, {0x0, 0x87}}, 0x0) 176.205185ms ago: executing program 1 (id=1378): preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402) unshare$auto(0x40000080) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) write$auto(r1, &(0x7f0000000040)='.G+*@sys\x00', 0x2) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x4a083, 0x0) ioctl$auto_BLKRRPART(r2, 0x125f, 0x0) write$auto(r2, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_FIFREEZE(r0, 0xc0045878, 0x8001) r3 = socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f0000000080)=0xf4d) semget$auto(0x0, 0x33, 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) shmctl$auto_IPC_SET(0x7, 0x1, &(0x7f0000000400)={{0x9a, 0xee01, 0xee01, 0x7, 0x5, 0x4b6, 0x7ff}, 0x80, 0xffffffffffffffff, 0x8001, 0x8, @raw=0xfffff6e4, @raw=0x4, 0xf44c, 0x0, &(0x7f0000000240)="27e7e84fb9a2f03a901dd4f1a4d17120b54f10f656e972bf1032bc875b34d897f10e3ae0731c202454d9898cfc681b4c7034d2c1d941b2ec78eaca1226e304f389448066aa741d79411f08a8630f9a4904a27ba977fa0d3760c5f320e22f7a26a85a67f4f5d3c1498116e133ea7b1e773efe90d696dcff0f8c7997cf21486614a541dc8f93090152ef4d441fefeca5a14f21dc76b6aa0bbea737b248379b8f2689509444b980616ea8606eb90fcdabe44bf658b0c4038b865cecc2e92b4dbe909640763bdb", &(0x7f0000000340)="095b18ac1531956c3f041bd3611f9a2b80516577be64239b720ee7518fcacb9e512c38ff2f7f39e94a7a254a2b335d8a80a9d218ae02af000668ca12a394115f8a2274c50ba789cf33f0c2e4f24840400538328c4cb2ec4b1509465dbd12181e3662341f50637c7e22e0c2c4e85d3756ef70837dfde1760db4a7875374e9c7d0eb0563a2ea7acc6cb869db2ec08c3ad4dfef922ee30f18d7d18100a2b2f15f167a7fcd51276ebaaaad3f7fa077a9f7eac2fc4bf8d0d4517fc1d56b"}) r5 = setfsuid$auto(0xee00) r6 = setfsuid$auto(0xee01) setresuid$auto(r5, r6, r5) shmctl$auto_IPC_INFO(0x9d3, 0x3, &(0x7f0000000600)={{0x6, 0xee01, 0xffffffffffffffff, 0x2, 0x9, 0x40, 0x2}, 0x6, 0x7, 0x10, 0x8, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000480)="d26f9cc3cc65a25ca72018c3f2c8683f6158fd69bbcf811703fcb52a0fd6a4089d7334c7f3d231d50b60abb0c99ff6585e109978dc0ed8f23770b7bad0f65a77d8f65bde9055aa1d9d5d8c757b899097df7840dd065dd05c5e5ccae2ce6f4811427468dbf26f321dfd2d0526ec05aaba4569c571485fc28d0476b5ac9bd492659c38efe09d2498d7a50f911d9da1151ea29439388f92406eba1f1ab32f9f36319aa7e62a24b1a91fed707f3b6f3e09ff2772f6c911ae09151d7d5bcbd4c1c7e7330aab94c3a3b6599da32e42114ec2d7e155cc0279dde247839e37220731a192a5701bdaddd6627cf0e1491ad076312a2da8021d5e", &(0x7f0000000580)="0371f21e810f87625e01368267fcfec125fb8f5e20e60f3958b0293bb503a421f86c0c8d132c7bc08555504c68ac21ec53f2049cd8c5bc6f1ae54ff4586ac0dff7c9aa72616676f044fcd0f00929ee768a3ac5"}) setresuid$auto(r4, r5, r7) epoll_ctl$auto(r3, 0x7fff, r2, &(0x7f00000000c0)={0x6, 0x5}) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r8, 0x0, 0x20) r9 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r9, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) 0s ago: executing program 9 (id=1379): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x410000}, 0xa, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/packets_per_slave\x00', 0x2a081, 0x0) write$auto(r1, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram12\x00', 0x0, 0x0) mmap$auto(0xfffffffffffffff8, 0x4, 0xa1, 0x800000000801e, 0xffffffffffffffff, 0x8) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) ioprio_set$auto_IOPRIO_WHO_PROCESS(0x1, 0x0, 0x80) epoll_create$auto(0x15) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb2, 0x602, 0x300000000000) ioprio_set$auto(0x9, 0xee00, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x64040, 0xc0) fcntl$auto(r3, 0x0, 0xa8) kernel console output (not intermixed with test programs): AGS: 00000246 ORIG_RAX: 00000000000000ca [ 302.599665][ T9913] RAX: fffffffffffffe00 RBX: 00007f8f33426188 RCX: 00007f8f3319de59 [ 302.599675][ T9913] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8f33426188 [ 302.599684][ T9913] RBP: 00007f8f33426180 R08: 0000000000000000 R09: 0000000000000000 [ 302.599693][ T9913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.599701][ T9913] R13: 00007f8f33426218 R14: 00007ffdbd24e730 R15: 00007ffdbd24e818 [ 302.599720][ T9913] [ 306.275862][ T9967] FAULT_INJECTION: forcing a failure. [ 306.275862][ T9967] name fail_futex, interval 1, probability 0, space 0, times 0 [ 306.406937][ T9967] CPU: 0 UID: 0 PID: 9967 Comm: syz.2.765 Tainted: G L syzkaller #0 PREEMPT(full) [ 306.406963][ T9967] Tainted: [L]=SOFTLOCKUP [ 306.406968][ T9967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 306.406977][ T9967] Call Trace: [ 306.406983][ T9967] [ 306.406989][ T9967] dump_stack_lvl+0x100/0x190 [ 306.407011][ T9967] should_fail_ex.cold+0x5/0xa [ 306.407028][ T9967] get_futex_key+0x1d2/0x14f0 [ 306.407054][ T9967] ? __pfx_get_futex_key+0x10/0x10 [ 306.407082][ T9967] futex_wake+0xf4/0x5e0 [ 306.407101][ T9967] ? __pfx_futex_wake+0x10/0x10 [ 306.407120][ T9967] ? __lock_acquire+0x49f/0x1a40 [ 306.407146][ T9967] do_futex+0x2b2/0x440 [ 306.407161][ T9967] ? __pfx_do_futex+0x10/0x10 [ 306.407175][ T9967] ? find_held_lock+0x2b/0x80 [ 306.407190][ T9967] ? setid_policy_lookup+0x10c/0x350 [ 306.407213][ T9967] __x64_sys_futex+0x34f/0x4d0 [ 306.407230][ T9967] ? __pfx___x64_sys_futex+0x10/0x10 [ 306.407252][ T9967] do_syscall_64+0x115/0x840 [ 306.407274][ T9967] ? clear_bhb_loop+0x40/0x90 [ 306.407292][ T9967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.407308][ T9967] RIP: 0033:0x7fb29079de59 [ 306.407321][ T9967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.407337][ T9967] RSP: 002b:00007fb2916010e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 306.407352][ T9967] RAX: ffffffffffffffda RBX: 00007fb290a26188 RCX: 00007fb29079de59 [ 306.407362][ T9967] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb290a2618c [ 306.407371][ T9967] RBP: 00007fb290a26180 R08: 0000000000000001 R09: 0000000000000000 [ 306.407379][ T9967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.407389][ T9967] R13: 00007fb290a26218 R14: 00007ffebeeb2f30 R15: 00007ffebeeb3018 [ 306.407409][ T9967] [ 308.518211][ T9977] Process accounting paused [ 309.225173][ T8450] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 309.693725][T10017] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 309.794005][T10017] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 309.854300][T10017] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 309.945088][T10017] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 309.998047][T10017] page dumped because: unmovable page [ 310.016648][T10017] page_owner tracks the page as allocated [ 310.038113][T10017] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1416967426, free_ts 0 [ 310.080184][T10017] register_early_stack+0x74/0xaf [ 310.097694][T10017] init_page_owner+0x4c/0xa10 [ 310.110985][T10017] page_ext_init+0x71d/0x780 [ 310.121201][T10017] mm_core_init+0x229/0x270 [ 310.136308][T10017] page_owner free stack trace missing [ 311.208498][T10041] FAULT_INJECTION: forcing a failure. [ 311.208498][T10041] name failslab, interval 1, probability 0, space 0, times 0 [ 311.275329][T10041] CPU: 0 UID: 0 PID: 10041 Comm: syz.3.777 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.275354][T10041] Tainted: [L]=SOFTLOCKUP [ 311.275359][T10041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 311.275368][T10041] Call Trace: [ 311.275373][T10041] [ 311.275379][T10041] dump_stack_lvl+0x100/0x190 [ 311.275399][T10041] should_fail_ex.cold+0x5/0xa [ 311.275416][T10041] should_failslab+0xc2/0x120 [ 311.275435][T10041] kmem_cache_alloc_noprof+0x91/0x6a0 [ 311.275451][T10041] ? __pfx_acct_collect+0x10/0x10 [ 311.275468][T10041] ? taskstats_exit+0x6d3/0xca0 [ 311.275490][T10041] taskstats_exit+0x6d3/0xca0 [ 311.275508][T10041] ? __pfx_acct_update_integrals+0x10/0x10 [ 311.275528][T10041] ? __pfx_taskstats_exit+0x10/0x10 [ 311.275548][T10041] ? rcu_read_lock_any_held+0x6a/0xa0 [ 311.275569][T10041] do_exit+0x65c/0x2ae0 [ 311.275591][T10041] ? __pfx_do_exit+0x10/0x10 [ 311.275608][T10041] ? do_raw_spin_lock+0x128/0x260 [ 311.275622][T10041] ? find_held_lock+0x2b/0x80 [ 311.275638][T10041] ? get_signal+0x7e0/0x21e0 [ 311.275655][T10041] do_group_exit+0xd5/0x2a0 [ 311.275675][T10041] get_signal+0x1ec7/0x21e0 [ 311.275695][T10041] ? __pfx_get_signal+0x10/0x10 [ 311.275711][T10041] ? do_futex+0x190/0x440 [ 311.275727][T10041] arch_do_signal_or_restart+0x91/0x7a0 [ 311.275750][T10041] ? find_held_lock+0x2b/0x80 [ 311.275765][T10041] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 311.275798][T10041] exit_to_user_mode_loop+0x139/0x6f0 [ 311.275820][T10041] ? rcu_is_watching+0x12/0xc0 [ 311.275837][T10041] do_syscall_64+0x652/0x840 [ 311.275859][T10041] ? clear_bhb_loop+0x40/0x90 [ 311.275877][T10041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.275891][T10041] RIP: 0033:0x7f8f3319de59 [ 311.275904][T10041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.275918][T10041] RSP: 002b:00007f8f33fe40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 311.275936][T10041] RAX: fffffffffffffe00 RBX: 00007f8f33426188 RCX: 00007f8f3319de59 [ 311.275946][T10041] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8f33426188 [ 311.275955][T10041] RBP: 00007f8f33426180 R08: 0000000000000000 R09: 0000000000000000 [ 311.275964][T10041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.275972][T10041] R13: 00007f8f33426218 R14: 00007ffdbd24e730 R15: 00007ffdbd24e818 [ 311.275991][T10041] [ 312.030076][T10002] Process accounting resumed [ 314.066410][T10083] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 314.100249][T10083] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 314.164512][T10083] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 314.311936][ T187] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 314.470489][ T187] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 314.805282][T10082] ACPI Error: Could not disable RealTimeClock events (20260408/evxfevnt-243) [ 316.443452][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.453297][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.654203][T10153] FAULT_INJECTION: forcing a failure. [ 319.654203][T10153] name failslab, interval 1, probability 0, space 0, times 0 [ 319.722893][T10153] CPU: 0 UID: 0 PID: 10153 Comm: syz.1.795 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.722918][T10153] Tainted: [L]=SOFTLOCKUP [ 319.722924][T10153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 319.722933][T10153] Call Trace: [ 319.722938][T10153] [ 319.722944][T10153] dump_stack_lvl+0x100/0x190 [ 319.722967][T10153] should_fail_ex.cold+0x5/0xa [ 319.722985][T10153] should_failslab+0xc2/0x120 [ 319.723003][T10153] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 319.723021][T10153] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 319.723042][T10153] ? alloc_unbound_pwq+0x3ff/0xdd0 [ 319.723067][T10153] alloc_unbound_pwq+0x3ff/0xdd0 [ 319.723094][T10153] apply_wqattrs_prepare+0x3aa/0xbb0 [ 319.723123][T10153] apply_workqueue_attrs_locked+0x64/0xe0 [ 319.723147][T10153] __alloc_workqueue+0xf55/0x1940 [ 319.723168][T10153] alloc_workqueue_noprof+0xc7/0x130 [ 319.723185][T10153] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 319.723205][T10153] ? lockdep_init_map_type+0x5c/0x250 [ 319.723227][T10153] ? lockdep_init_map_type+0x5c/0x250 [ 319.723251][T10153] __rds_conn_create+0x1234/0x25a0 [ 319.723275][T10153] ? __pfx___rds_conn_create+0x10/0x10 [ 319.723290][T10153] ? __kasan_kmalloc+0xaa/0xb0 [ 319.723306][T10153] ? lockdep_init_map_type+0x5c/0x250 [ 319.723331][T10153] rds_conn_create_outgoing+0x44/0x60 [ 319.723351][T10153] rds_sendmsg+0x10da/0x34a0 [ 319.723379][T10153] ? __pfx_rds_sendmsg+0x10/0x10 [ 319.723399][T10153] ? __pfx_aa_sk_perm+0x10/0x10 [ 319.723415][T10153] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 319.723447][T10153] ? ____sys_sendmsg+0xa4d/0xbe0 [ 319.723467][T10153] ____sys_sendmsg+0xa4d/0xbe0 [ 319.723486][T10153] ? __pfx_rds_sendmsg+0x10/0x10 [ 319.723506][T10153] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.723534][T10153] ___sys_sendmsg+0x190/0x1e0 [ 319.723557][T10153] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.723576][T10153] ? __lock_acquire+0x49f/0x1a40 [ 319.723629][T10153] __sys_sendmsg+0x160/0x210 [ 319.723647][T10153] ? __pfx___sys_sendmsg+0x10/0x10 [ 319.723675][T10153] do_syscall_64+0x115/0x840 [ 319.723696][T10153] ? clear_bhb_loop+0x40/0x90 [ 319.723714][T10153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.723732][T10153] RIP: 0033:0x7f7f7179de59 [ 319.723746][T10153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.723759][T10153] RSP: 002b:00007f7f6f9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.723774][T10153] RAX: ffffffffffffffda RBX: 00007f7f71a25fa0 RCX: 00007f7f7179de59 [ 319.723784][T10153] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000008 [ 319.723793][T10153] RBP: 00007f7f71833e6f R08: 0000000000000000 R09: 0000000000000000 [ 319.723801][T10153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.723810][T10153] R13: 00007f7f71a26038 R14: 00007f7f71a25fa0 R15: 00007ffde4ab44c8 [ 319.723830][T10153] [ 321.252519][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.803'. [ 321.722162][ T9386] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 322.202304][T10216] netlink: 'syz.3.808': attribute type 1 has an invalid length. [ 322.236175][T10216] netlink: 1 bytes leftover after parsing attributes in process `syz.3.808'. [ 322.379832][T10193] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x20000 [ 322.452151][T10193] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 322.530767][T10193] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 322.678963][T10193] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 322.796947][T10193] page dumped because: unmovable page [ 322.846302][T10236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.813'. [ 322.856961][T10193] page_owner tracks the page as allocated [ 322.880246][T10193] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x0(), pid 0, tgid 0 (swapper), ts 1416967426, free_ts 0 [ 322.949688][T10193] register_early_stack+0x74/0xaf [ 322.976842][T10193] init_page_owner+0x4c/0xa10 [ 323.004279][T10193] page_ext_init+0x71d/0x780 [ 323.024496][T10193] mm_core_init+0x229/0x270 [ 323.046425][T10193] page_owner free stack trace missing [ 323.381585][T10249] ubi: mtd0 is already attached to ubi0 [ 323.442837][T10258] ubi0: detaching mtd0 [ 323.666903][T10258] ubi0: mtd0 is detached [ 323.768933][T10277] FAULT_INJECTION: forcing a failure. [ 323.768933][T10277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.854368][T10277] CPU: 0 UID: 0 PID: 10277 Comm: syz.0.817 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.854394][T10277] Tainted: [L]=SOFTLOCKUP [ 323.854399][T10277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 323.854408][T10277] Call Trace: [ 323.854413][T10277] [ 323.854419][T10277] dump_stack_lvl+0x100/0x190 [ 323.854442][T10277] should_fail_ex.cold+0x5/0xa [ 323.854460][T10277] _copy_to_user+0x32/0xd0 [ 323.854482][T10277] poll_select_finish+0x32f/0x670 [ 323.854505][T10277] ? __pfx_poll_select_finish+0x10/0x10 [ 323.854527][T10277] ? ktime_get_ts64+0x306/0x420 [ 323.854550][T10277] ? ktime_get_ts64+0x318/0x420 [ 323.854569][T10277] ? ktime_get_ts64+0x257/0x420 [ 323.854591][T10277] kern_select+0x1df/0x280 [ 323.854613][T10277] ? __pfx_kern_select+0x10/0x10 [ 323.854641][T10277] __x64_sys_select+0xbd/0x160 [ 323.854660][T10277] ? do_syscall_64+0x90/0x840 [ 323.854682][T10277] ? lockdep_hardirqs_on+0x78/0x100 [ 323.854703][T10277] do_syscall_64+0x115/0x840 [ 323.854724][T10277] ? clear_bhb_loop+0x40/0x90 [ 323.854742][T10277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.854757][T10277] RIP: 0033:0x7f2131b9de59 [ 323.854770][T10277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.854784][T10277] RSP: 002b:00007f2132aff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 323.854799][T10277] RAX: ffffffffffffffda RBX: 00007f2131e26090 RCX: 00007f2131b9de59 [ 323.854808][T10277] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000000000000001 [ 323.854817][T10277] RBP: 00007f2131c33e6f R08: 00002000000001c0 R09: 0000000000000000 [ 323.854826][T10277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.854835][T10277] R13: 00007f2131e26128 R14: 00007f2131e26090 R15: 00007ffdf36024f8 [ 323.854862][T10277] [ 324.435060][T10293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.824'. [ 324.915490][T10284] bond0: option lp_interval: invalid value () [ 324.963514][T10284] bond0: option lp_interval: allowed values 1 - 2147483647 [ 325.253766][T10318] hub 1-0:1.0: USB hub found [ 325.295086][T10318] hub 1-0:1.0: 1 port detected [ 327.015786][T10346] NFSD: Failed to start, no listeners configured. [ 329.708406][T10413] vivid-007: ================= START STATUS ================= [ 329.745267][T10413] vivid-007: Generate PTS: true [ 329.770037][T10413] vivid-007: Generate SCR: true [ 329.819776][T10413] tpg source WxH: 320x240 (Y'CbCr) [ 329.866331][T10413] tpg field: 1 [ 329.885230][T10413] tpg crop: (0,0)/320x240 [ 329.905636][T10413] tpg compose: (0,0)/320x240 [ 329.945475][T10413] tpg colorspace: 8 [ 329.969499][T10413] tpg transfer function: 0/0 [ 329.992785][T10413] tpg Y'CbCr encoding: 0/0 [ 330.008236][T10413] tpg quantization: 0/0 [ 330.030261][T10413] tpg RGB range: 0/2 [ 330.061570][T10413] vivid-007: ================== END STATUS ================== [ 330.613863][T10423] zswap: compressor not available [ 332.674318][T10438] Process accounting paused [ 333.033110][ T8450] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 333.033135][ T8450] Bluetooth: hci2: unexpected subevent 0x0e length: 725 > 15 [ 333.048125][ T8450] Bluetooth: hci2: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 335.063290][T10519] FAULT_INJECTION: forcing a failure. [ 335.063290][T10519] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 335.252464][T10519] CPU: 0 UID: 0 PID: 10519 Comm: syz.3.878 Tainted: G L syzkaller #0 PREEMPT(full) [ 335.252491][T10519] Tainted: [L]=SOFTLOCKUP [ 335.252496][T10519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 335.252505][T10519] Call Trace: [ 335.252510][T10519] [ 335.252516][T10519] dump_stack_lvl+0x100/0x190 [ 335.252537][T10519] should_fail_ex.cold+0x5/0xa [ 335.252553][T10519] ? prepare_alloc_pages+0x16d/0x5f0 [ 335.252581][T10519] should_fail_alloc_page+0xeb/0x140 [ 335.252601][T10519] prepare_alloc_pages+0x1f0/0x5f0 [ 335.252623][T10519] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 335.252648][T10519] ? __pfx___might_resched+0x10/0x10 [ 335.252671][T10519] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 335.252687][T10519] ? down_write+0x146/0x1f0 [ 335.252705][T10519] ? up_write+0x2e5/0x5c0 [ 335.252720][T10519] ? process_measurement+0x1f4/0x2350 [ 335.252739][T10519] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 335.252759][T10519] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 335.252780][T10519] ? policy_nodemask+0xed/0x4f0 [ 335.252801][T10519] alloc_pages_mpol+0x1fb/0x540 [ 335.252821][T10519] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 335.252845][T10519] ___kmalloc_large_node+0xe5/0x120 [ 335.252866][T10519] __kmalloc_large_node_noprof+0x1c/0x70 [ 335.252887][T10519] __kmalloc_noprof+0x5a1/0x820 [ 335.252902][T10519] ? bpf_ksym_find+0x124/0x1c0 [ 335.252916][T10519] ? splice_grow_spd+0xad/0x1d0 [ 335.252943][T10519] splice_grow_spd+0xad/0x1d0 [ 335.252964][T10519] ? unwind_get_return_address+0x59/0xa0 [ 335.252986][T10519] tracing_splice_read_pipe+0x161/0xda0 [ 335.253009][T10519] ? __pfx_tracing_splice_read_pipe+0x10/0x10 [ 335.253023][T10519] ? __lock_acquire+0x49f/0x1a40 [ 335.253045][T10519] ? __pfx_tracing_spd_release_pipe+0x10/0x10 [ 335.253071][T10519] ? rcu_is_watching+0x12/0xc0 [ 335.253103][T10519] ? __fget_files+0x215/0x3d0 [ 335.253126][T10519] ? __pfx_tracing_splice_read_pipe+0x10/0x10 [ 335.253141][T10519] do_splice_read+0x285/0x370 [ 335.253166][T10519] splice_file_to_pipe+0x82/0x120 [ 335.253182][T10519] do_sendfile+0x366/0xe20 [ 335.253206][T10519] ? __pfx_do_sendfile+0x10/0x10 [ 335.253225][T10519] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 335.253249][T10519] ? __fget_files+0x21f/0x3d0 [ 335.253274][T10519] __x64_sys_sendfile64+0x1d8/0x220 [ 335.253289][T10519] ? ksys_write+0x1ac/0x250 [ 335.253309][T10519] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 335.253330][T10519] do_syscall_64+0x115/0x840 [ 335.253352][T10519] ? clear_bhb_loop+0x40/0x90 [ 335.253370][T10519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.253385][T10519] RIP: 0033:0x7f8f3319de59 [ 335.253398][T10519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.253412][T10519] RSP: 002b:00007f8f34026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 335.253426][T10519] RAX: ffffffffffffffda RBX: 00007f8f33425fa0 RCX: 00007f8f3319de59 [ 335.253436][T10519] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000001 [ 335.253444][T10519] RBP: 00007f8f34026090 R08: 0000000000000000 R09: 0000000000000000 [ 335.253453][T10519] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 335.253462][T10519] R13: 00007f8f33426038 R14: 00007f8f33425fa0 R15: 00007ffdbd24e818 [ 335.253481][T10519] [ 339.585398][T10566] Process accounting resumed [ 339.948905][T10591] futex_wake_op: syz.2.892 tries to shift op by -2048; fix this program [ 340.006968][T10591] futex_wake_op: syz.2.892 tries to shift op by -2048; fix this program [ 340.346441][T10559] i2c i2c-0: new_device: Can't parse I2C address [ 340.595641][T10606] FAULT_INJECTION: forcing a failure. [ 340.595641][T10606] name failslab, interval 1, probability 0, space 0, times 0 [ 340.595694][T10606] CPU: 0 UID: 0 PID: 10606 Comm: syz.1.895 Tainted: G L syzkaller #0 PREEMPT(full) [ 340.595717][T10606] Tainted: [L]=SOFTLOCKUP [ 340.595722][T10606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 340.595731][T10606] Call Trace: [ 340.595736][T10606] [ 340.595742][T10606] dump_stack_lvl+0x100/0x190 [ 340.595765][T10606] should_fail_ex.cold+0x5/0xa [ 340.595784][T10606] should_failslab+0xc2/0x120 [ 340.595804][T10606] __kmalloc_cache_noprof+0x91/0x6c0 [ 340.595827][T10606] ? __pfx___debug_object_init+0x10/0x10 [ 340.595847][T10606] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 340.595871][T10606] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 340.595892][T10606] vidtv_mux_create_pid_ctx_once+0xe6/0x140 [ 340.595913][T10606] vidtv_mux_init+0x7a9/0xbf0 [ 340.595933][T10606] vidtv_start_feed+0x34e/0x500 [ 340.595956][T10606] ? __pfx_vidtv_start_feed+0x10/0x10 [ 340.595978][T10606] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 340.596011][T10606] dmx_section_feed_start_filtering+0x3a8/0x660 [ 340.596041][T10606] dvb_dmxdev_filter_start+0x767/0xdd0 [ 340.596068][T10606] dvb_demux_do_ioctl+0xe64/0x1200 [ 340.596095][T10606] dvb_usercopy+0x167/0x340 [ 340.596113][T10606] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 340.596135][T10606] ? __pfx_dvb_usercopy+0x10/0x10 [ 340.596161][T10606] ? __x64_sys_openat+0x12d/0x210 [ 340.596180][T10606] ? xfd_validate_state+0x129/0x190 [ 340.596206][T10606] dvb_demux_ioctl+0x29/0x40 [ 340.596226][T10606] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 340.596246][T10606] __x64_sys_ioctl+0x18e/0x210 [ 340.596267][T10606] do_syscall_64+0x115/0x840 [ 340.596288][T10606] ? clear_bhb_loop+0x40/0x90 [ 340.596307][T10606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.596322][T10606] RIP: 0033:0x7f7f7179de59 [ 340.596335][T10606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.596349][T10606] RSP: 002b:00007f7f6f9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.596364][T10606] RAX: ffffffffffffffda RBX: 00007f7f71a25fa0 RCX: 00007f7f7179de59 [ 340.596374][T10606] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 000000000000000a [ 340.596382][T10606] RBP: 00007f7f71833e6f R08: 0000000000000000 R09: 0000000000000000 [ 340.596391][T10606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.596400][T10606] R13: 00007f7f71a26038 R14: 00007f7f71a25fa0 R15: 00007ffde4ab44c8 [ 340.596420][T10606] [ 342.084572][T10602] Process accounting paused [ 343.325668][T10648] futex_wake_op: syz.1.902 tries to shift op by -2048; fix this program [ 343.325796][T10648] futex_wake_op: syz.1.902 tries to shift op by -2048; fix this program [ 344.458181][T10668] hub 1-0:1.0: USB hub found [ 344.536097][T10668] hub 1-0:1.0: 1 port detected [ 346.834904][T10724] bridge0: port 3(veth1) entered blocking state [ 346.941811][T10724] bridge0: port 3(veth1) entered disabled state [ 347.065872][T10724] veth1: entered allmulticast mode [ 347.181818][T10724] veth1: entered promiscuous mode [ 347.260015][T10724] bridge0: port 3(veth1) entered blocking state [ 347.266368][T10724] bridge0: port 3(veth1) entered forwarding state [ 347.297941][T10751] netlink: 28 bytes leftover after parsing attributes in process `syz.1.918'. [ 347.626324][T10751] veth1_macvtap: left promiscuous mode [ 349.506831][T10811] futex_wake_op: syz.0.924 tries to shift op by -2048; fix this program [ 350.366327][T10825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.926'. [ 350.398728][T10828] FAULT_INJECTION: forcing a failure. [ 350.398728][T10828] name failslab, interval 1, probability 0, space 0, times 0 [ 350.456563][T10828] CPU: 0 UID: 0 PID: 10828 Comm: syz.1.928 Tainted: G L syzkaller #0 PREEMPT(full) [ 350.456587][T10828] Tainted: [L]=SOFTLOCKUP [ 350.456593][T10828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 350.456602][T10828] Call Trace: [ 350.456607][T10828] [ 350.456613][T10828] dump_stack_lvl+0x100/0x190 [ 350.456685][T10828] should_fail_ex.cold+0x5/0xa [ 350.456716][T10828] should_failslab+0xc2/0x120 [ 350.456749][T10828] __kmalloc_noprof+0xfc/0x820 [ 350.456768][T10828] ? rcu_is_watching+0x12/0xc0 [ 350.456797][T10828] ? tomoyo_realpath_from_path+0xb6/0x690 [ 350.456902][T10828] tomoyo_realpath_from_path+0xb6/0x690 [ 350.456926][T10828] tomoyo_path_number_perm+0x23c/0x580 [ 350.456954][T10828] ? tomoyo_path_number_perm+0x22e/0x580 [ 350.456974][T10828] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 350.457009][T10828] ? find_held_lock+0x2b/0x80 [ 350.457029][T10828] ? __fget_files+0x215/0x3d0 [ 350.457058][T10828] ? hook_file_ioctl_common+0x140/0x440 [ 350.457093][T10828] ? __fget_files+0x215/0x3d0 [ 350.457117][T10828] ? __fget_files+0x21f/0x3d0 [ 350.457140][T10828] security_file_ioctl+0xd3/0x230 [ 350.457178][T10828] __x64_sys_ioctl+0xb7/0x210 [ 350.457198][T10828] do_syscall_64+0x115/0x840 [ 350.457291][T10828] ? clear_bhb_loop+0x40/0x90 [ 350.457319][T10828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.457334][T10828] RIP: 0033:0x7f7f7179de59 [ 350.457348][T10828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.457362][T10828] RSP: 002b:00007f7f6f9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 350.457376][T10828] RAX: ffffffffffffffda RBX: 00007f7f71a25fa0 RCX: 00007f7f7179de59 [ 350.457386][T10828] RDX: 0000000000000000 RSI: 0000000040284504 RDI: 0000000000000003 [ 350.457395][T10828] RBP: 00007f7f6f9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 350.457403][T10828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.457412][T10828] R13: 00007f7f71a26038 R14: 00007f7f71a25fa0 R15: 00007ffde4ab44c8 [ 350.457431][T10828] [ 350.457447][T10828] ERROR: Out of memory at tomoyo_realpath_from_path. [ 353.756177][T10881] FAULT_INJECTION: forcing a failure. [ 353.756177][T10881] name failslab, interval 1, probability 0, space 0, times 0 [ 353.814776][T10881] CPU: 0 UID: 0 PID: 10881 Comm: syz.1.937 Tainted: G L syzkaller #0 PREEMPT(full) [ 353.814803][T10881] Tainted: [L]=SOFTLOCKUP [ 353.814809][T10881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 353.814817][T10881] Call Trace: [ 353.814823][T10881] [ 353.814829][T10881] dump_stack_lvl+0x100/0x190 [ 353.814851][T10881] should_fail_ex.cold+0x5/0xa [ 353.814869][T10881] should_failslab+0xc2/0x120 [ 353.814891][T10881] kmem_cache_alloc_noprof+0x91/0x6a0 [ 353.814909][T10881] ? __kernfs_new_node+0xd2/0xa10 [ 353.815004][T10881] __kernfs_new_node+0xd2/0xa10 [ 353.815030][T10881] ? __pfx___kernfs_new_node+0x10/0x10 [ 353.815057][T10881] ? find_held_lock+0x2b/0x80 [ 353.815074][T10881] ? kernfs_root+0xee/0x2a0 [ 353.815092][T10881] ? kernfs_root+0xee/0x2a0 [ 353.815115][T10881] kernfs_new_node+0x117/0x150 [ 353.815140][T10881] __kernfs_create_file+0x53/0x350 [ 353.815182][T10881] sysfs_add_file_mode_ns+0x207/0x3c0 [ 353.815206][T10881] sysfs_merge_group+0x194/0x340 [ 353.815228][T10881] ? __pfx_sysfs_merge_group+0x10/0x10 [ 353.815248][T10881] ? bus_add_device+0x2e2/0x6c0 [ 353.815316][T10881] ? __pfx_bus_add_device+0x10/0x10 [ 353.815331][T10881] ? __pfx_dev_add_physical_location+0x10/0x10 [ 353.815407][T10881] dpm_sysfs_add+0x237/0x280 [ 353.815452][T10881] device_add+0x9f4/0x1970 [ 353.815494][T10881] ? __pfx_device_add+0x10/0x10 [ 353.815513][T10881] ? lockdep_init_map_type+0x5c/0x250 [ 353.815536][T10881] ? __init_waitqueue_head+0xca/0x150 [ 353.815565][T10881] rfkill_register+0x1ad/0xb30 [ 353.815635][T10881] nfc_register_device+0x11f/0x3e0 [ 353.815704][T10881] nci_register_device+0x7f1/0xb80 [ 353.815747][T10881] ? __pfx_nci_register_device+0x10/0x10 [ 353.815771][T10881] ? lockdep_init_map_type+0x5c/0x250 [ 353.815796][T10881] virtual_ncidev_open+0x141/0x220 [ 353.815858][T10881] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 353.815878][T10881] misc_open+0x26d/0x450 [ 353.815960][T10881] ? __pfx_misc_open+0x10/0x10 [ 353.815982][T10881] chrdev_open+0x234/0x6a0 [ 353.816010][T10881] ? __pfx_apparmor_file_open+0x10/0x10 [ 353.816077][T10881] ? __pfx_chrdev_open+0x10/0x10 [ 353.816102][T10881] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 353.816146][T10881] do_dentry_open+0x6ab/0x14d0 [ 353.816168][T10881] ? __pfx_chrdev_open+0x10/0x10 [ 353.816196][T10881] vfs_open+0x82/0x3f0 [ 353.816216][T10881] path_openat+0x2873/0x4280 [ 353.816247][T10881] ? __pfx_path_openat+0x10/0x10 [ 353.816274][T10881] do_file_open+0x20e/0x430 [ 353.816311][T10881] ? __pfx_do_file_open+0x10/0x10 [ 353.816349][T10881] ? alloc_fd+0x471/0x7a0 [ 353.816373][T10881] ? do_getname+0x191/0x390 [ 353.816392][T10881] do_sys_openat2+0x10f/0x1e0 [ 353.816410][T10881] ? __pfx_do_sys_openat2+0x10/0x10 [ 353.816430][T10881] ? __fget_files+0x21f/0x3d0 [ 353.816455][T10881] __x64_sys_openat+0x12d/0x210 [ 353.816472][T10881] ? __pfx___x64_sys_openat+0x10/0x10 [ 353.816497][T10881] do_syscall_64+0x115/0x840 [ 353.816520][T10881] ? clear_bhb_loop+0x40/0x90 [ 353.816538][T10881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.816554][T10881] RIP: 0033:0x7f7f7179de59 [ 353.816568][T10881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.816582][T10881] RSP: 002b:00007f7f6f9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 353.816598][T10881] RAX: ffffffffffffffda RBX: 00007f7f71a25fa0 RCX: 00007f7f7179de59 [ 353.816608][T10881] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 353.816617][T10881] RBP: 00007f7f71833e6f R08: 0000000000000000 R09: 0000000000000000 [ 353.816626][T10881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.816635][T10881] R13: 00007f7f71a26038 R14: 00007f7f71a25fa0 R15: 00007ffde4ab44c8 [ 353.816655][T10881] [ 357.391642][T10951] FAULT_INJECTION: forcing a failure. [ 357.391642][T10951] name failslab, interval 1, probability 0, space 0, times 0 [ 357.449394][T10951] CPU: 0 UID: 0 PID: 10951 Comm: syz.2.950 Tainted: G L syzkaller #0 PREEMPT(full) [ 357.449421][T10951] Tainted: [L]=SOFTLOCKUP [ 357.449426][T10951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 357.449435][T10951] Call Trace: [ 357.449441][T10951] [ 357.449446][T10951] dump_stack_lvl+0x100/0x190 [ 357.449469][T10951] should_fail_ex.cold+0x5/0xa [ 357.449487][T10951] should_failslab+0xc2/0x120 [ 357.449507][T10951] __kmalloc_cache_noprof+0x91/0x6c0 [ 357.449530][T10951] ? __do_sys_statmount+0x15f/0x24d0 [ 357.449555][T10951] __do_sys_statmount+0x15f/0x24d0 [ 357.449579][T10951] ? __x64_sys_futex+0x34f/0x4d0 [ 357.449621][T10951] ? __x64_sys_futex+0x358/0x4d0 [ 357.449638][T10951] ? __pfx___do_sys_statmount+0x10/0x10 [ 357.449667][T10951] do_syscall_64+0x115/0x840 [ 357.449689][T10951] ? clear_bhb_loop+0x40/0x90 [ 357.449707][T10951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.449722][T10951] RIP: 0033:0x7fb29079de59 [ 357.449735][T10951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.449749][T10951] RSP: 002b:00007fb291622028 EFLAGS: 00000246 ORIG_RAX: 00000000000001c9 [ 357.449764][T10951] RAX: ffffffffffffffda RBX: 00007fb290a26090 RCX: 00007fb29079de59 [ 357.449773][T10951] RDX: fffffffffffffff9 RSI: 0000000000000000 RDI: 0000000000000000 [ 357.449782][T10951] RBP: 00007fb290833e6f R08: 0000000000000000 R09: 0000000000000000 [ 357.449791][T10951] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 357.449799][T10951] R13: 00007fb290a26128 R14: 00007fb290a26090 R15: 00007ffebeeb3018 [ 357.449818][T10951] [ 360.254006][T10994] netlink: 266 bytes leftover after parsing attributes in process `syz.2.956'. [ 360.287861][T10994] IPv6: NLM_F_CREATE should be specified when creating new route [ 360.791631][ T8450] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 360.807294][ T8450] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 360.816955][ T8450] CPU: 0 UID: 0 PID: 8450 Comm: kworker/u11:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.816979][ T8450] Tainted: [L]=SOFTLOCKUP [ 360.816985][ T8450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 360.817001][ T8450] Workqueue: hci1 hci_rx_work [ 360.817111][ T8450] Call Trace: [ 360.817116][ T8450] [ 360.817122][ T8450] dump_stack_lvl+0x100/0x190 [ 360.817142][ T8450] sysfs_warn_dup.cold+0x1c/0x28 [ 360.817172][ T8450] sysfs_create_dir_ns+0x24b/0x2b0 [ 360.817193][ T8450] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 360.817211][ T8450] ? find_held_lock+0x2b/0x80 [ 360.817228][ T8450] ? kobject_add_internal+0x25f/0x930 [ 360.817277][ T8450] ? kobject_add_internal+0x25f/0x930 [ 360.817297][ T8450] ? do_raw_spin_unlock+0x145/0x1e0 [ 360.817314][ T8450] kobject_add_internal+0x2c8/0x930 [ 360.817336][ T8450] kobject_add+0x16a/0x1e0 [ 360.817353][ T8450] ? __pfx_kobject_add+0x10/0x10 [ 360.817370][ T8450] ? class_to_subsys+0x10f/0x150 [ 360.817421][ T8450] ? kobject_put+0xb9/0x640 [ 360.817436][ T8450] ? _raw_spin_unlock+0x28/0x50 [ 360.817498][ T8450] device_add+0x294/0x1970 [ 360.817519][ T8450] ? __pfx_dev_set_name+0x10/0x10 [ 360.817562][ T8450] ? __pfx_device_add+0x10/0x10 [ 360.817583][ T8450] ? mgmt_send_event_skb+0x2fb/0x460 [ 360.817651][ T8450] hci_conn_add_sysfs+0x1a3/0x260 [ 360.817674][ T8450] le_conn_complete_evt+0x11eb/0x1f60 [ 360.817738][ T8450] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 360.817759][ T8450] ? __pfx_bt_warn+0x10/0x10 [ 360.817780][ T8450] ? hci_event_packet+0x186/0xcd0 [ 360.817806][ T8450] hci_le_conn_complete_evt+0x23c/0x3a0 [ 360.817829][ T8450] ? skb_pull_data+0x15f/0x1e0 [ 360.817916][ T8450] hci_le_meta_evt+0x34a/0x5f0 [ 360.817932][ T8450] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 360.817959][ T8450] hci_event_packet+0x51c/0xcd0 [ 360.817981][ T8450] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 360.817996][ T8450] ? __pfx_hci_event_packet+0x10/0x10 [ 360.818020][ T8450] ? kcov_remote_start+0x384/0x670 [ 360.818044][ T8450] ? lockdep_hardirqs_on+0x78/0x100 [ 360.818071][ T8450] hci_rx_work+0x451/0xfc0 [ 360.818097][ T8450] process_one_work+0xa23/0x1940 [ 360.818131][ T8450] ? __pfx_process_one_work+0x10/0x10 [ 360.818157][ T8450] ? __pfx_hci_rx_work+0x10/0x10 [ 360.818183][ T8450] worker_thread+0x5ef/0xe50 [ 360.818210][ T8450] ? kthread+0x13a/0x450 [ 360.818226][ T8450] ? __pfx_worker_thread+0x10/0x10 [ 360.818244][ T8450] kthread+0x370/0x450 [ 360.818260][ T8450] ? __pfx_kthread+0x10/0x10 [ 360.818279][ T8450] ret_from_fork+0x72b/0xd50 [ 360.818306][ T8450] ? __pfx_ret_from_fork+0x10/0x10 [ 360.818323][ T8450] ? __switch_to+0x800/0x10f0 [ 360.818347][ T8450] ? __switch_to_asm+0x39/0x70 [ 360.818366][ T8450] ? __pfx_kthread+0x10/0x10 [ 360.818385][ T8450] ret_from_fork_asm+0x1a/0x30 [ 360.818414][ T8450] [ 360.818454][ T8450] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 361.119670][ T8450] Bluetooth: hci1: failed to register connection device [ 363.060334][T11031] Process accounting resumed [ 363.152716][ T9386] Bluetooth: hci1: command 0x0c1a tx timeout [ 363.223591][T11047] netlink: 266 bytes leftover after parsing attributes in process `syz.1.968'. [ 363.268147][T11047] IPv6: NLM_F_CREATE should be specified when creating new route [ 364.350868][T11064] netlink: 186 bytes leftover after parsing attributes in process `syz.1.971'. [ 365.219583][ T9386] Bluetooth: hci1: command 0x0c1a tx timeout [ 366.004993][ T9386] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 367.971965][T11145] FAULT_INJECTION: forcing a failure. [ 367.971965][T11145] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 368.034663][T11145] CPU: 0 UID: 0 PID: 11145 Comm: syz.0.986 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.034689][T11145] Tainted: [L]=SOFTLOCKUP [ 368.034695][T11145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 368.034705][T11145] Call Trace: [ 368.034710][T11145] [ 368.034716][T11145] dump_stack_lvl+0x100/0x190 [ 368.034739][T11145] should_fail_ex.cold+0x5/0xa [ 368.034754][T11145] ? prepare_alloc_pages+0x16d/0x5f0 [ 368.034776][T11145] should_fail_alloc_page+0xeb/0x140 [ 368.034797][T11145] prepare_alloc_pages+0x1f0/0x5f0 [ 368.034820][T11145] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 368.034843][T11145] ? vma_set_page_prot+0xb1/0x120 [ 368.034864][T11145] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 368.034886][T11145] ? __pfx___mmap_region+0x10/0x10 [ 368.034907][T11145] ? __pfx___might_resched+0x10/0x10 [ 368.034954][T11145] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 368.034983][T11145] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 368.035004][T11145] ? policy_nodemask+0xed/0x4f0 [ 368.035025][T11145] alloc_pages_mpol+0x1fb/0x540 [ 368.035045][T11145] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 368.035069][T11145] alloc_pages_noprof+0x1a/0x160 [ 368.035090][T11145] __pmd_alloc+0x3b/0x950 [ 368.035111][T11145] __handle_mm_fault+0xa9c/0x2a00 [ 368.035136][T11145] ? mt_find+0x45e/0x8e0 [ 368.035205][T11145] ? __pfx___handle_mm_fault+0x10/0x10 [ 368.035227][T11145] ? __pfx_mt_find+0x10/0x10 [ 368.035242][T11145] ? ktime_get+0x9f/0x320 [ 368.035279][T11145] handle_mm_fault+0x37b/0xa30 [ 368.035305][T11145] __get_user_pages+0x1178/0x32a0 [ 368.035343][T11145] ? __pfx___get_user_pages+0x10/0x10 [ 368.035367][T11145] populate_vma_page_range+0x267/0x3f0 [ 368.035389][T11145] ? __pfx_populate_vma_page_range+0x10/0x10 [ 368.035407][T11145] ? __pfx_find_vma_intersection+0x10/0x10 [ 368.035431][T11145] __mm_populate+0x107/0x3a0 [ 368.035451][T11145] ? __pfx___mm_populate+0x10/0x10 [ 368.035472][T11145] ? up_write+0x4a6/0x5c0 [ 368.035488][T11145] vm_mmap_pgoff+0x37f/0x470 [ 368.035515][T11145] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 368.035537][T11145] ? __pfx_do_futex+0x10/0x10 [ 368.035556][T11145] ksys_mmap_pgoff+0xe4/0x610 [ 368.035576][T11145] ? __x64_sys_futex+0x358/0x4d0 [ 368.035591][T11145] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 368.035609][T11145] ? xfd_validate_state+0x129/0x190 [ 368.035629][T11145] __x64_sys_mmap+0x125/0x190 [ 368.035647][T11145] do_syscall_64+0x115/0x840 [ 368.035668][T11145] ? clear_bhb_loop+0x40/0x90 [ 368.035687][T11145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.035702][T11145] RIP: 0033:0x7f2131b9de59 [ 368.035716][T11145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.035731][T11145] RSP: 002b:00007f2132ade028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 368.035745][T11145] RAX: ffffffffffffffda RBX: 00007f2131e26180 RCX: 00007f2131b9de59 [ 368.035756][T11145] RDX: 0000000000000007 RSI: 0000000000040009 RDI: 0000000000000000 [ 368.035765][T11145] RBP: 00007f2131c33e6f R08: 0000000000000007 R09: 0000000000028000 [ 368.035774][T11145] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 368.035783][T11145] R13: 00007f2131e26218 R14: 00007f2131e26180 R15: 00007ffdf36024f8 [ 368.035804][T11145] [ 368.480047][ T9386] Bluetooth: hci2: command 0x0c1a tx timeout [ 369.122336][T11173] random: crng reseeded on system resumption [ 370.001471][T11187] netlink: 20 bytes leftover after parsing attributes in process `syz.3.992'. [ 370.454261][T11179] Process accounting paused [ 370.551600][ T8432] Bluetooth: hci2: command 0x0c1a tx timeout [ 372.637349][T11202] Process accounting resumed [ 372.847548][T11235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1000'. [ 374.215530][T11256] FAULT_INJECTION: forcing a failure. [ 374.215530][T11256] name failslab, interval 1, probability 0, space 0, times 0 [ 374.281793][T11256] CPU: 0 UID: 0 PID: 11256 Comm: syz.2.1006 Tainted: G L syzkaller #0 PREEMPT(full) [ 374.281818][T11256] Tainted: [L]=SOFTLOCKUP [ 374.281823][T11256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 374.281832][T11256] Call Trace: [ 374.281837][T11256] [ 374.281843][T11256] dump_stack_lvl+0x100/0x190 [ 374.281864][T11256] should_fail_ex.cold+0x5/0xa [ 374.281878][T11256] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 374.282001][T11256] should_failslab+0xc2/0x120 [ 374.282020][T11256] kmem_cache_alloc_noprof+0x91/0x6a0 [ 374.282037][T11256] ? skb_clone+0x190/0x400 [ 374.282057][T11256] skb_clone+0x190/0x400 [ 374.282074][T11256] netlink_deliver_tap+0xaed/0xcc0 [ 374.282156][T11256] netlink_unicast+0x62b/0x850 [ 374.282180][T11256] ? __pfx_netlink_unicast+0x10/0x10 [ 374.282206][T11256] netlink_sendmsg+0x8b0/0xda0 [ 374.282230][T11256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.282255][T11256] ? apparmor_socket_sendmsg+0x15b/0x270 [ 374.282281][T11256] ____sys_sendmsg+0xa4d/0xbe0 [ 374.282324][T11256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.282347][T11256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 374.282377][T11256] ___sys_sendmsg+0x190/0x1e0 [ 374.282399][T11256] ? __pfx____sys_sendmsg+0x10/0x10 [ 374.282419][T11256] ? __lock_acquire+0x49f/0x1a40 [ 374.282463][T11256] __sys_sendmsg+0x160/0x210 [ 374.282480][T11256] ? __pfx___sys_sendmsg+0x10/0x10 [ 374.282507][T11256] do_syscall_64+0x115/0x840 [ 374.282530][T11256] ? clear_bhb_loop+0x40/0x90 [ 374.282547][T11256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.282562][T11256] RIP: 0033:0x7fb29079de59 [ 374.282575][T11256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.282589][T11256] RSP: 002b:00007fb291622028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.282604][T11256] RAX: ffffffffffffffda RBX: 00007fb290a26090 RCX: 00007fb29079de59 [ 374.282614][T11256] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000088 [ 374.282623][T11256] RBP: 00007fb290833e6f R08: 0000000000000000 R09: 0000000000000000 [ 374.282632][T11256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.282640][T11256] R13: 00007fb290a26128 R14: 00007fb290a26090 R15: 00007ffebeeb3018 [ 374.282660][T11256] [ 375.588695][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1009'. [ 377.133445][T11302] FAULT_INJECTION: forcing a failure. [ 377.133445][T11302] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 377.170106][T11302] CPU: 0 UID: 0 PID: 11302 Comm: syz.2.1014 Tainted: G L syzkaller #0 PREEMPT(full) [ 377.170130][T11302] Tainted: [L]=SOFTLOCKUP [ 377.170135][T11302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 377.170144][T11302] Call Trace: [ 377.170148][T11302] [ 377.170154][T11302] dump_stack_lvl+0x100/0x190 [ 377.170176][T11302] should_fail_ex.cold+0x5/0xa [ 377.170190][T11302] ? prepare_alloc_pages+0x16d/0x5f0 [ 377.170211][T11302] should_fail_alloc_page+0xeb/0x140 [ 377.170231][T11302] prepare_alloc_pages+0x1f0/0x5f0 [ 377.170253][T11302] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 377.170269][T11302] ? folio_batch_move_lru+0x37c/0xc00 [ 377.170293][T11302] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 377.170317][T11302] ? folio_batch_move_lru+0x3a9/0xc00 [ 377.170338][T11302] ? __pfx_lru_add+0x10/0x10 [ 377.170361][T11302] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 377.170383][T11302] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 377.170405][T11302] ? __lock_acquire+0x49f/0x1a40 [ 377.170427][T11302] ? __lock_acquire+0x49f/0x1a40 [ 377.170453][T11302] ? lock_acquire+0x1b9/0x370 [ 377.170473][T11302] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 377.170494][T11302] ? policy_nodemask+0xed/0x4f0 [ 377.170515][T11302] alloc_pages_mpol+0x1fb/0x540 [ 377.170534][T11302] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 377.170558][T11302] folio_alloc_mpol_noprof+0x36/0x260 [ 377.170581][T11302] vma_alloc_folio_noprof+0xed/0x1d0 [ 377.170602][T11302] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 377.170629][T11302] do_anonymous_page+0xb2b/0x2080 [ 377.170656][T11302] ? rcu_read_unlock+0x2d/0xb0 [ 377.170673][T11302] __handle_mm_fault+0x1d2c/0x2a00 [ 377.170697][T11302] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 377.170714][T11302] ? __pfx___handle_mm_fault+0x10/0x10 [ 377.170738][T11302] ? pte_offset_map_lock+0x174/0x320 [ 377.170755][T11302] ? find_held_lock+0x2b/0x80 [ 377.170777][T11302] ? follow_page_pte+0x4d0/0x13f0 [ 377.170806][T11302] handle_mm_fault+0x37b/0xa30 [ 377.170831][T11302] __get_user_pages+0x1178/0x32a0 [ 377.170857][T11302] ? __pfx___get_user_pages+0x10/0x10 [ 377.170881][T11302] populate_vma_page_range+0x267/0x3f0 [ 377.170902][T11302] ? __pfx_populate_vma_page_range+0x10/0x10 [ 377.170921][T11302] ? __pfx_find_vma_intersection+0x10/0x10 [ 377.170944][T11302] __mm_populate+0x107/0x3a0 [ 377.170964][T11302] ? __pfx___mm_populate+0x10/0x10 [ 377.170985][T11302] ? up_write+0x4a6/0x5c0 [ 377.171000][T11302] vm_mmap_pgoff+0x37f/0x470 [ 377.171020][T11302] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 377.171041][T11302] ? __pfx_do_futex+0x10/0x10 [ 377.171054][T11302] ? __pfx_do_sys_openat2+0x10/0x10 [ 377.171075][T11302] ksys_mmap_pgoff+0xe4/0x610 [ 377.171094][T11302] ? __x64_sys_futex+0x358/0x4d0 [ 377.171109][T11302] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 377.171127][T11302] ? xfd_validate_state+0x129/0x190 [ 377.171146][T11302] __x64_sys_mmap+0x125/0x190 [ 377.171164][T11302] do_syscall_64+0x115/0x840 [ 377.171186][T11302] ? clear_bhb_loop+0x40/0x90 [ 377.171204][T11302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.171219][T11302] RIP: 0033:0x7fb29079de59 [ 377.171232][T11302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.171245][T11302] RSP: 002b:00007fb291601028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 377.171260][T11302] RAX: ffffffffffffffda RBX: 00007fb290a26180 RCX: 00007fb29079de59 [ 377.171270][T11302] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 377.171278][T11302] RBP: 00007fb290833e6f R08: 0000000000000002 R09: 0000000000008000 [ 377.171287][T11302] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 377.171296][T11302] R13: 00007fb290a26218 R14: 00007fb290a26180 R15: 00007ffebeeb3018 [ 377.171315][T11302] [ 378.103269][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.121350][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.510884][T11324] zero sized request [ 379.118741][T11333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1018'. [ 380.369692][ T29] audit: type=1800 audit(4294967343.028:15): pid=11343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1021" name="trace_marker" dev="tracefs" ino=220 res=0 errno=0 [ 380.722341][T11352] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 380.756168][T11352] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 380.794040][T11352] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 381.104058][ T8450] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 381.114289][ T8450] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 381.127634][ T8450] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 381.137741][ T8450] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 381.146624][ T8450] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 382.457064][T11360] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.488953][T11360] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.514096][T11360] bridge_slave_0: entered allmulticast mode [ 382.529372][T11360] bridge_slave_0: entered promiscuous mode [ 382.546689][T11360] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.565735][T11360] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.580988][T11360] bridge_slave_1: entered allmulticast mode [ 382.595093][T11360] bridge_slave_1: entered promiscuous mode [ 382.660021][T11360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.673616][T11360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.731591][T11360] team0: Port device team_slave_0 added [ 382.748300][T11360] team0: Port device team_slave_1 added [ 382.793844][T11360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.809404][T11360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.866607][T11360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.890516][T11360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.907639][T11360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.973698][T11360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.069631][T11360] hsr_slave_0: entered promiscuous mode [ 383.083100][T11360] hsr_slave_1: entered promiscuous mode [ 383.096593][T11360] debugfs: 'hsr0' already exists in 'hsr' [ 383.111108][T11360] Cannot create hsr debugfs directory [ 383.205705][ T8432] Bluetooth: hci4: command tx timeout [ 383.553771][T11360] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 383.577758][T11360] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 383.593950][T11360] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 383.634097][T11360] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 383.652217][T11360] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 383.670626][T11360] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 383.690116][T11360] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 383.710507][T11360] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 383.854190][T11360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.886722][T11360] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.908410][ T8831] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.915543][ T8831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.950214][ T8831] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.957342][ T8831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.550397][T11360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.901107][T11360] veth0_vlan: entered promiscuous mode [ 384.920877][T11360] veth1_vlan: entered promiscuous mode [ 384.970875][T11360] veth0_macvtap: entered promiscuous mode [ 385.001602][T11360] veth1_macvtap: entered promiscuous mode [ 385.035052][T11360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.072290][T11360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.098496][ T8443] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.121665][ T8443] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.150022][ T8443] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.171191][ T8443] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.274418][ T8432] Bluetooth: hci4: command tx timeout [ 385.300218][ T8443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.327105][ T8443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.377894][ T8845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.396461][ T8845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.328446][ T8450] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 387.338678][ T8450] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 387.346077][ T9386] Bluetooth: hci4: command tx timeout [ 387.356699][ T8450] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 387.365244][ T8450] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 387.374550][ T8450] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 387.474742][T11466] openvswitch: netlink: Duplicate key (type 15). [ 387.590837][T11469] binder: 11465:11469 ioctl c018620c 200000000040 returned -22 [ 388.636425][T11490] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 389.248167][T11461] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.278864][T11461] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.302432][T11461] bridge_slave_0: entered allmulticast mode [ 389.331572][T11461] bridge_slave_0: entered promiscuous mode [ 389.365430][T11461] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.396832][T11461] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.413900][ T8450] Bluetooth: hci5: command tx timeout [ 389.420855][ T8432] Bluetooth: hci4: command tx timeout [ 389.438773][T11461] bridge_slave_1: entered allmulticast mode [ 389.457532][T11461] bridge_slave_1: entered promiscuous mode [ 389.538317][T11461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.563295][T11461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.619705][T11461] team0: Port device team_slave_0 added [ 389.641101][T11461] team0: Port device team_slave_1 added [ 389.684952][T11461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.692312][T11461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.719083][T11461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.739589][T11461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.748164][T11461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.782042][T11461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.960528][T11461] hsr_slave_0: entered promiscuous mode [ 389.987648][T11461] hsr_slave_1: entered promiscuous mode [ 390.014729][T11461] debugfs: 'hsr0' already exists in 'hsr' [ 390.033508][T11461] Cannot create hsr debugfs directory [ 390.500669][T11461] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 390.519261][T11461] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 390.539663][T11461] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 390.561208][T11461] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 390.578447][T11461] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 390.601678][T11461] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 390.621290][T11461] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 390.640335][T11461] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 390.796907][T11461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.837717][T11461] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.868362][ T8844] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.875497][ T8844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.912698][ T8844] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.919813][ T8844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.482083][ T8450] Bluetooth: hci5: command tx timeout [ 392.329987][T11461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.558587][T11572] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 392.810591][T11461] veth0_vlan: entered promiscuous mode [ 392.845283][T11461] veth1_vlan: entered promiscuous mode [ 392.915140][T11461] veth0_macvtap: entered promiscuous mode [ 392.942230][T11461] veth1_macvtap: entered promiscuous mode [ 392.988579][T11461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.024825][T11461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.062543][ T8831] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.085223][ T8831] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.124116][ T8831] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.287895][ T8831] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.551114][ T8450] Bluetooth: hci5: command tx timeout [ 393.680436][ T8845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.717478][ T8845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.807448][ T8443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.826615][ T8443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.778467][T11613] futex_wake_op: syz.5.1036 tries to shift op by -1; fix this program [ 395.621313][ T8450] Bluetooth: hci5: command tx timeout [ 397.049778][T11634] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 397.068228][T11634] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 397.088614][T11634] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 397.111461][T11634] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 397.131397][T11634] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 397.147000][T11634] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 397.162459][T11634] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 397.172465][T11634] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 397.189150][T11634] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 397.204173][T11634] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 397.216590][T11634] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 397.238843][T11634] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 397.283779][ T8432] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 397.304483][ T8432] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 397.313852][ T8432] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 397.325996][ T8432] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 397.339232][ T8432] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 397.497822][T11646] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1063'. [ 397.645443][T11662] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1063'. [ 398.327072][ T8432] Bluetooth: hci0: command 0x0c1a tx timeout [ 399.122417][ T8450] Bluetooth: hci1: command 0x0c1a tx timeout [ 399.128478][ T8432] Bluetooth: hci3: command 0x0c1a tx timeout [ 399.203673][ T8432] Bluetooth: hci5: command 0x0c1a tx timeout [ 399.209757][ T9386] Bluetooth: hci2: command 0x0c1a tx timeout [ 399.216032][ T8450] Bluetooth: hci4: command 0x0c1a tx timeout [ 399.328293][T11642] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.360874][ T8432] Bluetooth: hci6: command tx timeout [ 399.375238][T11642] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.403972][T11642] bridge_slave_0: entered allmulticast mode [ 399.447588][T11642] bridge_slave_0: entered promiscuous mode [ 399.611152][T11642] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.658696][T11642] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.684352][T11642] bridge_slave_1: entered allmulticast mode [ 399.708666][T11642] bridge_slave_1: entered promiscuous mode [ 399.848550][T11642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.880565][T11642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.958388][T11642] team0: Port device team_slave_0 added [ 400.041517][T11642] team0: Port device team_slave_1 added [ 400.147853][T11642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.170195][T11642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.198879][T11642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.218161][T11642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.242666][T11642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.318088][T11642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.331190][T11716] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 400.350437][T11715] syz.5.1073: vmalloc error: size 107752139522048, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 400.383579][T11715] CPU: 0 UID: 0 PID: 11715 Comm: syz.5.1073 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.383602][T11715] Tainted: [L]=SOFTLOCKUP [ 400.383607][T11715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 400.383616][T11715] Call Trace: [ 400.383621][T11715] [ 400.383626][T11715] dump_stack_lvl+0x100/0x190 [ 400.383647][T11715] warn_alloc.cold+0x94/0xa8 [ 400.383663][T11715] ? __pfx_warn_alloc+0x10/0x10 [ 400.383686][T11715] ? look_up_lock_class+0x55/0x120 [ 400.383715][T11715] __vmalloc_node_range_noprof+0x136c/0x1630 [ 400.383741][T11715] ? __lock_acquire+0x49f/0x1a40 [ 400.383763][T11715] ? disksize_store+0x11a/0x4d0 [ 400.383846][T11715] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 400.383869][T11715] ? __pfx___might_resched+0x10/0x10 [ 400.383892][T11715] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 400.383916][T11715] ? disksize_store+0x11a/0x4d0 [ 400.383930][T11715] __vmalloc_node_noprof+0xad/0xf0 [ 400.383951][T11715] ? disksize_store+0x11a/0x4d0 [ 400.383967][T11715] disksize_store+0x11a/0x4d0 [ 400.383983][T11715] ? sysfs_file_kobj+0xe4/0x290 [ 400.384001][T11715] ? __pfx_disksize_store+0x10/0x10 [ 400.384015][T11715] dev_attr_store+0x58/0x80 [ 400.384035][T11715] ? __pfx_dev_attr_store+0x10/0x10 [ 400.384054][T11715] sysfs_kf_write+0xf2/0x150 [ 400.384073][T11715] kernfs_fop_write_iter+0x3e0/0x5f0 [ 400.384087][T11715] ? __pfx_sysfs_kf_write+0x10/0x10 [ 400.384107][T11715] vfs_write+0x6ac/0x1050 [ 400.384129][T11715] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 400.384146][T11715] ? __pfx_vfs_write+0x10/0x10 [ 400.384180][T11715] ksys_write+0x12a/0x250 [ 400.384207][T11715] ? __pfx_ksys_write+0x10/0x10 [ 400.384227][T11715] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 400.384251][T11715] ? syscall_user_dispatch+0x76/0x130 [ 400.384268][T11715] do_syscall_64+0x115/0x840 [ 400.384291][T11715] ? clear_bhb_loop+0x40/0x90 [ 400.384309][T11715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.384324][T11715] RIP: 0033:0x7f65beb9de59 [ 400.384337][T11715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.384351][T11715] RSP: 002b:00007f65bf9e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 400.384365][T11715] RAX: ffffffffffffffda RBX: 00007f65bee25fa0 RCX: 00007f65beb9de59 [ 400.384375][T11715] RDX: 0000000000003dec RSI: 00002000000001c0 RDI: 0000000000000008 [ 400.384384][T11715] RBP: 00007f65bec33e6f R08: 0000000000000000 R09: 0000000000000000 [ 400.384393][T11715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.384401][T11715] R13: 00007f65bee26038 R14: 00007f65bee25fa0 R15: 00007fff4a4a3988 [ 400.384421][T11715] [ 400.711709][T11715] Mem-Info: [ 400.714912][T11715] active_anon:20252 inactive_anon:104 isolated_anon:0 [ 400.714912][T11715] active_file:1277 inactive_file:45618 isolated_file:0 [ 400.714912][T11715] unevictable:2042 dirty:642 writeback:0 [ 400.714912][T11715] slab_reclaimable:11918 slab_unreclaimable:100076 [ 400.714912][T11715] mapped:42369 shmem:1819 pagetables:1532 [ 400.714912][T11715] sec_pagetables:0 bounce:0 [ 400.714912][T11715] kernel_misc_reclaimable:0 [ 400.714912][T11715] free:1268699 free_pcp:12248 free_cma:0 [ 400.760595][T11715] Node 0 active_anon:81008kB inactive_anon:416kB active_file:5108kB inactive_file:182336kB unevictable:6632kB isolated(anon):0kB isolated(file):0kB mapped:169476kB dirty:2564kB writeback:0kB shmem:5740kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13056kB pagetables:5992kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 400.797337][T11715] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 400.829902][T11715] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 400.881423][T11715] lowmem_reserve[]: 0 2473 2473 2473 2473 [ 400.887203][T11715] Node 0 DMA32 free:1119152kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:81060kB inactive_anon:416kB active_file:5108kB inactive_file:182336kB unevictable:6632kB writepending:2564kB zspages:420kB present:3129332kB managed:2532584kB mlocked:5096kB bounce:0kB free_pcp:38260kB local_pcp:38260kB free_cma:0kB [ 400.923100][T11715] lowmem_reserve[]: 0 0 0 0 0 [ 400.927808][T11715] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:396kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 400.957321][T11715] lowmem_reserve[]: 0 0 0 0 0 [ 400.962081][T11715] Node 1 Normal free:3940076kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10504kB local_pcp:10504kB free_cma:0kB [ 400.996729][T11715] lowmem_reserve[]: 0 0 0 0 0 [ 401.001467][T11715] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 401.014163][T11715] Node 0 DMA32: 1941*4kB (UME) 1932*8kB (UME) 1205*16kB (ME) 849*32kB (UM) 566*64kB (UME) 316*128kB (ME) 161*256kB (UME) 63*512kB (UME) 26*1024kB (UM) 14*2048kB (UME) 206*4096kB (UM) = 1118884kB [ 401.039344][T11715] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 401.118492][T11715] Node 1 Normal: 6*4kB (UM) 8*8kB (UM) 11*16kB (UM) 7*32kB (UM) 4*64kB (UM) 6*128kB (UM) 0*256kB 1*512kB (M) 0*1024kB 1*2048kB (U) 961*4096kB (M) = 3940328kB [ 401.166836][T11704] Process accounting resumed [ 401.176991][T11715] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 401.201921][T11715] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 401.217777][ T8432] Bluetooth: hci1: command 0x0c1a tx timeout [ 401.228353][T11715] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 401.238652][T11715] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 401.248458][T11715] 49358 total pagecache pages [ 401.253205][T11715] 100 pages in swap cache [ 401.257872][T11715] Free swap = 124488kB [ 401.262204][T11715] Total swap = 124996kB [ 401.266647][T11715] 2097051 pages RAM [ 401.271135][T11715] 0 pages HighMem/MovableOnly [ 401.276836][ T8432] Bluetooth: hci5: command 0x0c1a tx timeout [ 401.282904][ T8432] Bluetooth: hci4: command 0x0c1a tx timeout [ 401.307410][T11715] 432191 pages reserved [ 401.313091][T11715] 0 pages cma reserved [ 401.396535][T11642] hsr_slave_0: entered promiscuous mode [ 401.413138][T11642] hsr_slave_1: entered promiscuous mode [ 401.425043][T11642] debugfs: 'hsr0' already exists in 'hsr' [ 401.431146][ T8450] Bluetooth: hci6: command tx timeout [ 401.448742][T11642] Cannot create hsr debugfs directory [ 401.693023][T11642] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 401.703442][T11642] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 401.712427][T11642] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 401.721537][T11642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 401.730276][T11642] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 401.742652][T11642] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 401.755260][T11642] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 401.767341][T11642] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 401.841028][T11642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.864354][T11642] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.875302][ T8443] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.882430][ T8443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.910845][ T8443] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.917964][ T8443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.941183][T11642] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 401.952701][T11642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.578576][T11642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.938896][T11642] veth0_vlan: entered promiscuous mode [ 402.970863][T11642] veth1_vlan: entered promiscuous mode [ 403.016989][T11642] veth0_macvtap: entered promiscuous mode [ 403.048524][T11642] veth1_macvtap: entered promiscuous mode [ 403.084743][T11642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.114587][T11642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.143384][ T8443] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.187042][ T8443] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.205010][ T8443] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.256984][ T8443] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.266265][ T8450] Bluetooth: hci1: command 0x0c1a tx timeout [ 403.340455][ T8432] Bluetooth: hci5: command 0x0c1a tx timeout [ 403.346523][ T8450] Bluetooth: hci4: command 0x0c1a tx timeout [ 403.415871][ T8443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.455069][ T8443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.499488][ T8450] Bluetooth: hci6: command tx timeout [ 403.531833][ T8846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.541184][ T8846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.107206][ T29] audit: type=1800 audit(4294967367.887:16): pid=11784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1081" name="trace_marker" dev="tracefs" ino=220 res=0 errno=0 [ 405.139651][T11785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1080'. [ 405.570891][ T8450] Bluetooth: hci6: command tx timeout [ 405.671228][T11798] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 405.689940][T11799] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1083'. [ 405.873958][ T8431] failed while handling packet from 1:16384 [ 406.666061][T11816] FAULT_INJECTION: forcing a failure. [ 406.666061][T11816] name failslab, interval 1, probability 0, space 0, times 0 [ 406.736374][T11816] CPU: 0 UID: 0 PID: 11816 Comm: syz.6.1089 Tainted: G L syzkaller #0 PREEMPT(full) [ 406.736398][T11816] Tainted: [L]=SOFTLOCKUP [ 406.736403][T11816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 406.736412][T11816] Call Trace: [ 406.736417][T11816] [ 406.736422][T11816] dump_stack_lvl+0x100/0x190 [ 406.736443][T11816] should_fail_ex.cold+0x5/0xa [ 406.736460][T11816] should_failslab+0xc2/0x120 [ 406.736479][T11816] kmem_cache_alloc_noprof+0x91/0x6a0 [ 406.736496][T11816] ? vm_area_dup+0x27/0x8e0 [ 406.736521][T11816] vm_area_dup+0x27/0x8e0 [ 406.736543][T11816] __split_vma+0x18c/0xda0 [ 406.736568][T11816] ? __pfx___split_vma+0x10/0x10 [ 406.736594][T11816] ? __pfx_mas_prev+0x10/0x10 [ 406.736615][T11816] vms_gather_munmap_vmas+0x3a5/0x1720 [ 406.736642][T11816] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 406.736672][T11816] ? mas_walk+0x6ef/0x9b0 [ 406.736700][T11816] __mmap_region+0x4a7/0x2db0 [ 406.736726][T11816] ? __pfx___mmap_region+0x10/0x10 [ 406.736747][T11816] ? __pfx___might_resched+0x10/0x10 [ 406.736769][T11816] ? find_held_lock+0x2b/0x80 [ 406.736786][T11816] ? process_measurement+0x4c8/0x2350 [ 406.736807][T11816] ? process_measurement+0x4c8/0x2350 [ 406.736822][T11816] ? down_write+0x146/0x1f0 [ 406.736842][T11816] ? process_measurement+0x1f4/0x2350 [ 406.736860][T11816] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 406.736888][T11816] ? __lock_acquire+0x49f/0x1a40 [ 406.736918][T11816] ? find_held_lock+0x2b/0x80 [ 406.736933][T11816] ? is_bpf_text_address+0x8a/0x1a0 [ 406.737006][T11816] mmap_region+0x35d/0x620 [ 406.737023][T11816] ? rcu_is_watching+0x12/0xc0 [ 406.737039][T11816] ? __pfx_mmap_region+0x10/0x10 [ 406.737055][T11816] ? cap_mmap_addr+0x4b/0x120 [ 406.737125][T11816] ? bpf_lsm_mmap_addr+0x9/0x30 [ 406.737152][T11816] ? security_mmap_addr+0x71/0x1e0 [ 406.737211][T11816] ? __get_unmapped_area+0x255/0x3e0 [ 406.737232][T11816] do_mmap+0xc63/0x12f0 [ 406.737254][T11816] ? __pfx_do_mmap+0x10/0x10 [ 406.737272][T11816] ? __pfx_down_write_killable+0x10/0x10 [ 406.737292][T11816] vm_mmap_pgoff+0x29e/0x470 [ 406.737314][T11816] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 406.737334][T11816] ? __mutex_unlock_slowpath+0x35d/0x930 [ 406.737362][T11816] ksys_mmap_pgoff+0xe4/0x610 [ 406.737382][T11816] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 406.737399][T11816] ? fput+0x79/0x100 [ 406.737413][T11816] ? ksys_write+0x1ac/0x250 [ 406.737433][T11816] ? __pfx_ksys_write+0x10/0x10 [ 406.737456][T11816] __x64_sys_mmap+0x125/0x190 [ 406.737475][T11816] do_syscall_64+0x115/0x840 [ 406.737497][T11816] ? clear_bhb_loop+0x40/0x90 [ 406.737516][T11816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.737530][T11816] RIP: 0033:0x7f752999de59 [ 406.737543][T11816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.737557][T11816] RSP: 002b:00007f752a785028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 406.737572][T11816] RAX: ffffffffffffffda RBX: 00007f7529c25fa0 RCX: 00007f752999de59 [ 406.737582][T11816] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 406.737591][T11816] RBP: 00007f752a785090 R08: 0000000000000401 R09: 0000000000008000 [ 406.737599][T11816] R10: 0040000000000eb1 R11: 0000000000000246 R12: 0000000000000001 [ 406.737608][T11816] R13: 00007f7529c26038 R14: 00007f7529c25fa0 R15: 00007ffe3c6eee68 [ 406.737628][T11816] [ 407.511557][T11823] random: crng reseeded on system resumption [ 408.789483][T11836] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1093'. [ 409.401189][T11848] random: crng reseeded on system resumption [ 409.516179][T11849] hub 1-0:1.0: USB hub found [ 409.572845][T11849] hub 1-0:1.0: 1 port detected [ 410.564578][T11863] futex_wake_op: syz.6.1100 tries to shift op by -2048; fix this program [ 414.707730][T11912] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1111'. [ 415.421484][ T8432] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 415.433934][ T8432] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 415.442881][ T8432] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 415.452050][ T8432] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 415.460546][ T8432] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 415.545488][T11918] blktrace: Concurrent blktraces are not allowed on nbd5 [ 416.188644][T11935] Console: switching to colour frame buffer device 128x48 [ 416.618632][T11919] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.640352][T11919] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.665080][T11919] bridge_slave_0: entered allmulticast mode [ 416.687398][T11919] bridge_slave_0: entered promiscuous mode [ 416.716150][T11919] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.739881][T11919] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.769387][T11919] bridge_slave_1: entered allmulticast mode [ 416.787530][T11919] bridge_slave_1: entered promiscuous mode [ 416.903469][T11919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.938487][T11919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.026971][T11919] team0: Port device team_slave_0 added [ 417.054682][T11919] team0: Port device team_slave_1 added [ 417.132232][T11919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.155691][T11919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.241029][T11919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.302484][T11919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.330565][T11919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.454974][T11919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.508205][ T8432] Bluetooth: hci7: command tx timeout [ 417.648250][T11919] hsr_slave_0: entered promiscuous mode [ 417.671064][T11919] hsr_slave_1: entered promiscuous mode [ 417.701887][T11919] debugfs: 'hsr0' already exists in 'hsr' [ 417.729364][T11919] Cannot create hsr debugfs directory [ 418.814148][T11919] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 418.885736][T11919] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 418.917065][T11919] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 418.954320][T11919] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 419.006132][T11919] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 419.047312][T11919] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 419.070901][T11919] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 419.075541][T11976] Console: switching to colour VGA+ 80x5 [ 419.087428][T11919] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 419.562249][T11919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.578133][ T8432] Bluetooth: hci7: command tx timeout [ 419.743017][T11919] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.806299][ T8831] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.813474][ T8831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.918398][ T8431] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.925626][ T8431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.000778][T11919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.604120][T12014] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1124'. [ 421.646831][ T8432] Bluetooth: hci7: command tx timeout [ 421.913102][T11919] veth0_vlan: entered promiscuous mode [ 421.949877][T11919] veth1_vlan: entered promiscuous mode [ 422.030008][T11919] veth0_macvtap: entered promiscuous mode [ 422.058033][T11919] veth1_macvtap: entered promiscuous mode [ 422.104017][T11919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.131678][T11919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.159604][ T8846] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.181212][ T8846] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.288139][ T8846] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.315932][ T8846] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.428303][ T8443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.450384][ T8443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.499276][ T8431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.516180][ T8431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.714685][ T8432] Bluetooth: hci7: command tx timeout [ 427.200275][ T8450] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 427.210934][ T8450] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 427.224817][ T8450] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 427.236065][ T8450] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 427.243487][ T8450] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 428.396332][T12100] FAULT_INJECTION: forcing a failure. [ 428.396332][T12100] name failslab, interval 1, probability 0, space 0, times 0 [ 428.409964][T12081] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.419296][T12081] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.427323][T12100] CPU: 0 UID: 0 PID: 12100 Comm: syz.7.1138 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.427346][T12100] Tainted: [L]=SOFTLOCKUP [ 428.427351][T12100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 428.427362][T12100] Call Trace: [ 428.427367][T12100] [ 428.427373][T12100] dump_stack_lvl+0x100/0x190 [ 428.427395][T12100] should_fail_ex.cold+0x5/0xa [ 428.427412][T12100] should_failslab+0xc2/0x120 [ 428.427431][T12100] __kmalloc_noprof+0xfc/0x820 [ 428.427446][T12100] ? lockdep_init_map_type+0x5c/0x250 [ 428.427469][T12100] ? udpv6_init_sock+0x24e/0x450 [ 428.427558][T12100] udpv6_init_sock+0x24e/0x450 [ 428.427575][T12100] ? __pfx_udpv6_init_sock+0x10/0x10 [ 428.427593][T12100] inet6_create+0xb1a/0x12b0 [ 428.427644][T12100] ? inet6_create+0x7f/0x12b0 [ 428.427667][T12100] __sock_create+0x339/0x860 [ 428.427692][T12100] __sys_socket+0x14d/0x260 [ 428.427714][T12100] ? __pfx___sys_socket+0x10/0x10 [ 428.427741][T12100] __x64_sys_socket+0x72/0xb0 [ 428.427761][T12100] ? lockdep_hardirqs_on+0x78/0x100 [ 428.427783][T12100] do_syscall_64+0x115/0x840 [ 428.427807][T12100] ? clear_bhb_loop+0x40/0x90 [ 428.427825][T12100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.427840][T12100] RIP: 0033:0x7f52bc79de59 [ 428.427854][T12100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.427868][T12100] RSP: 002b:00007f52bd6fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 428.427885][T12100] RAX: ffffffffffffffda RBX: 00007f52bca25fa0 RCX: 00007f52bc79de59 [ 428.427895][T12100] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 428.427903][T12100] RBP: 00007f52bc833e6f R08: 0000000000000000 R09: 0000000000000000 [ 428.427912][T12100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 428.427921][T12100] R13: 00007f52bca26038 R14: 00007f52bca25fa0 R15: 00007ffce6143218 [ 428.427940][T12100] [ 428.626408][T12081] bridge_slave_0: entered allmulticast mode [ 428.633801][T12081] bridge_slave_0: entered promiscuous mode [ 428.641343][T12081] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.648510][T12081] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.655619][T12081] bridge_slave_1: entered allmulticast mode [ 428.662633][T12081] bridge_slave_1: entered promiscuous mode [ 428.688412][T12081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.699616][T12081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.725742][T12081] team0: Port device team_slave_0 added [ 428.733893][T12081] team0: Port device team_slave_1 added [ 428.755478][T12081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.762436][T12081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.789951][T12081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.801704][T12081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.808854][T12081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.834778][T12081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.872386][T12081] hsr_slave_0: entered promiscuous mode [ 428.880215][T12081] hsr_slave_1: entered promiscuous mode [ 428.886431][T12081] debugfs: 'hsr0' already exists in 'hsr' [ 428.892304][T12081] Cannot create hsr debugfs directory [ 429.167241][T12081] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 429.182159][T12081] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 429.185263][T12081] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 429.188157][T12081] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 429.188890][T12081] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 429.191663][T12081] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 429.192518][T12081] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 429.194913][T12081] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 429.219682][T12108] Console: switching to colour frame buffer device 128x48 [ 429.288082][ T8450] Bluetooth: hci8: command tx timeout [ 429.353203][T12081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.376540][T12081] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.392173][ T8846] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.392292][ T8846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.398428][ T8443] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.398494][ T8443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.978306][T12081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.421472][T12081] veth0_vlan: entered promiscuous mode [ 430.465684][T12081] veth1_vlan: entered promiscuous mode [ 430.552799][T12081] veth0_macvtap: entered promiscuous mode [ 430.591632][T12081] veth1_macvtap: entered promiscuous mode [ 430.645561][T12081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.685286][T12081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.724315][ T8846] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.742695][ T8846] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.763462][ T8846] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.783334][ T8846] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.924967][ T8443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.942260][ T8443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.010948][ T8845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.031632][ T8845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.354924][ T8450] Bluetooth: hci8: command tx timeout [ 432.522724][T12155] Console: switching to colour VGA+ 80x5 [ 433.424073][ T8450] Bluetooth: hci8: command tx timeout [ 435.021101][T12193] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1151'. [ 435.496091][ T8450] Bluetooth: hci8: command tx timeout [ 436.857473][ T8432] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 436.871561][ T8432] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 436.879623][ T8432] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 436.889009][ T8432] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 436.896401][ T8432] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 438.156845][T12218] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.186892][T12218] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.209142][T12218] bridge_slave_0: entered allmulticast mode [ 438.226315][T12218] bridge_slave_0: entered promiscuous mode [ 438.253704][T12218] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.274109][T12218] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.285314][T12218] bridge_slave_1: entered allmulticast mode [ 438.301433][T12218] bridge_slave_1: entered promiscuous mode [ 438.367033][T12218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.388794][T12218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 438.458249][T12218] team0: Port device team_slave_0 added [ 438.477544][T12218] team0: Port device team_slave_1 added [ 438.537184][T12218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.556264][T12218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.613789][T12218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.692504][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.698815][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.758370][T12218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.770002][T12218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.852861][T12218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.915282][ T8432] Bluetooth: hci9: command tx timeout [ 439.017507][T12218] hsr_slave_0: entered promiscuous mode [ 439.023820][T12218] hsr_slave_1: entered promiscuous mode [ 439.032755][T12218] debugfs: 'hsr0' already exists in 'hsr' [ 439.041554][T12218] Cannot create hsr debugfs directory [ 439.405764][T12218] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.921033][T12218] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 439.942160][T12218] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 439.960302][T12218] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 439.983930][T12218] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 440.000832][T12218] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 440.018882][T12218] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 440.111351][T12218] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 440.128273][T12218] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 440.348057][T12218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.398407][T12218] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.417578][ T8845] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.424670][ T8845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.461225][ T8845] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.468370][ T8845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.985583][ T8432] Bluetooth: hci9: command tx timeout [ 441.162592][T12218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.407010][T12302] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 441.644553][T12218] veth0_vlan: entered promiscuous mode [ 441.673226][T12218] veth1_vlan: entered promiscuous mode [ 441.723855][T12218] veth0_macvtap: entered promiscuous mode [ 441.745770][T12218] veth1_macvtap: entered promiscuous mode [ 441.784087][T12218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.829434][T12218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.858047][ T8844] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.897641][ T8844] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.929817][ T8844] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.970393][ T8844] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.090696][ T8846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.112697][ T8846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.165603][ T8846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.181333][ T8846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.054001][ T8432] Bluetooth: hci9: command tx timeout [ 443.613609][ T8450] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 443.626297][ T8450] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 443.640823][ T8450] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 443.651994][ T8450] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 443.661027][ T8450] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 444.938087][T12364] futex_wake_op: syz.7.1173 tries to shift op by -2048; fix this program [ 444.958674][T12364] futex_wake_op: syz.7.1173 tries to shift op by -2048; fix this program [ 444.988002][T12364] 0x000000000001-0x000000020000 : "" [ 445.031655][T12364] ftl_cs: FTL header corrupt! [ 445.123569][ T8450] Bluetooth: hci9: command tx timeout [ 445.501875][T12379] ubi0: attaching mtd0 [ 445.516297][T12379] ubi0: scanning is finished [ 445.533149][T12379] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 445.615985][T12336] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.637818][T12336] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.653370][T12379] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 445.677590][T12336] bridge_slave_0: entered allmulticast mode [ 445.713267][T12336] bridge_slave_0: entered promiscuous mode [ 445.766417][ T8450] Bluetooth: hci10: command tx timeout [ 445.883189][T12336] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.931913][T12336] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.956580][T12336] bridge_slave_1: entered allmulticast mode [ 445.994948][T12336] bridge_slave_1: entered promiscuous mode [ 446.141448][T12336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.180505][T12336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.288363][T12336] team0: Port device team_slave_0 added [ 446.325167][T12336] team0: Port device team_slave_1 added [ 446.428637][T12336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.445788][T12336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.509135][T12336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.539037][T12336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.564982][T12336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.598626][T12336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.773452][T12336] hsr_slave_0: entered promiscuous mode [ 446.785039][T12336] hsr_slave_1: entered promiscuous mode [ 446.791168][T12336] debugfs: 'hsr0' already exists in 'hsr' [ 446.804248][T12336] Cannot create hsr debugfs directory [ 447.059769][T12399] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 447.619442][T12336] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.812512][T12336] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.828933][ T8450] Bluetooth: hci10: command tx timeout [ 447.941798][T12336] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.054789][T12336] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.531263][T12336] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 448.568632][T12336] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 448.585433][T12336] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 448.613589][T12336] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 448.637575][T12336] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 448.681342][T12336] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 448.711205][T12336] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 448.728580][T12336] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 449.075711][T12336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.147487][T12336] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.280531][ T8846] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.287666][ T8846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.392318][ T8844] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.399447][ T8844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.898484][ T8450] Bluetooth: hci10: command tx timeout [ 449.906509][T12437] random: crng reseeded on system resumption [ 450.740135][T12462] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1187'. [ 451.144276][T12336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.738116][T12336] veth0_vlan: entered promiscuous mode [ 451.747402][ T8432] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 451.762187][ T8432] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 451.774285][ T8432] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 451.782111][ T8432] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 451.792042][ T8432] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 451.971291][ T8450] Bluetooth: hci10: command tx timeout [ 452.191487][T12336] veth1_vlan: entered promiscuous mode [ 452.478031][T12336] veth0_macvtap: entered promiscuous mode [ 452.529919][T12336] veth1_macvtap: entered promiscuous mode [ 452.597620][T12336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.639451][T12336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.679001][ T8431] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.877011][ T8431] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.877073][ T8431] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.877100][ T8431] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.066891][T12493] zram: Removed device: zram0 [ 453.208205][ T8844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.261350][ T8844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.347555][ T8844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.380332][ T8844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.877619][ T8450] Bluetooth: hci11: command tx timeout [ 454.751388][T12534] can: request_module (can-proto-0) failed. [ 454.768009][T12480] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.791256][T12480] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.808459][T12480] bridge_slave_0: entered allmulticast mode [ 454.826997][T12480] bridge_slave_0: entered promiscuous mode [ 454.899231][T12480] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.916251][T12480] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.934123][T12480] bridge_slave_1: entered allmulticast mode [ 454.947715][T12480] bridge_slave_1: entered promiscuous mode [ 455.183514][T12480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.208862][T12480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.415273][T12480] team0: Port device team_slave_0 added [ 455.444292][T12480] team0: Port device team_slave_1 added [ 455.843361][T12480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.891238][T12480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.951102][ T8450] Bluetooth: hci11: command tx timeout [ 456.013505][T12480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.203102][T12480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.229091][T12480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.323825][T12480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.527694][T12480] hsr_slave_0: entered promiscuous mode [ 456.546077][T12480] hsr_slave_1: entered promiscuous mode [ 456.573916][T12480] debugfs: 'hsr0' already exists in 'hsr' [ 456.602272][T12480] Cannot create hsr debugfs directory [ 457.600754][T12480] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.822826][T12480] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.984434][T12480] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.015774][ T8450] Bluetooth: hci11: command tx timeout [ 458.130249][T12480] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.430240][T12480] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 458.449327][T12480] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 458.466518][T12480] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 458.487679][T12480] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 458.506582][T12480] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 458.536534][T12480] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 458.551981][T12480] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 458.570636][T12480] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 458.714952][T12480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.754191][T12480] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.774840][ T8438] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.781964][ T8438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.818660][ T8438] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.825789][ T8438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.124688][T12592] kfence: disabled [ 460.085120][ T8450] Bluetooth: hci11: command tx timeout [ 460.218056][T12480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.391720][T12480] veth0_vlan: entered promiscuous mode [ 460.455724][T12480] veth1_vlan: entered promiscuous mode [ 460.575987][T12480] veth0_macvtap: entered promiscuous mode [ 460.627527][T12480] veth1_macvtap: entered promiscuous mode [ 460.725977][T12480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.796314][T12480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.851564][ T8844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.887701][ T8844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.930216][ T8844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.977608][ T8844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.258492][ T8846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.312802][ T8846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.451400][ T8847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.492901][ T8847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.883204][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1208'. [ 464.432582][ T29] audit: type=1800 audit(4294967427.505:17): pid=12662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1215" name="lu_gp_id" dev="configfs" ino=63528 res=0 errno=0 [ 465.576107][T12658] bond0: option packets_per_slave: invalid value () [ 465.645069][T12663] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 465.674023][T12658] bond0: option packets_per_slave: allowed values 0 - 65535 [ 465.692747][T12663] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 465.722061][T12663] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 465.750382][T12663] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 465.787576][T12663] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 465.799203][T12663] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 465.808492][T12663] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 465.814519][T12663] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 465.824060][T12663] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 465.832372][T12663] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 465.842249][T12663] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 465.864887][T12663] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 465.878875][T12663] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 465.892063][T12663] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 465.900636][T12663] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 465.911593][T12663] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 465.919255][T12663] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 465.928422][T12663] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 465.936441][T12663] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 465.942582][T12663] Bluetooth: hci10: Opcode 0x0406 failed: -4 [ 465.951625][T12663] Bluetooth: hci10: Opcode 0x0406 failed: -4 [ 465.963296][T12663] Bluetooth: hci11: Opcode 0x0c1a failed: -4 [ 465.971046][T12663] Bluetooth: hci11: Opcode 0x0406 failed: -4 [ 465.981175][T12663] Bluetooth: hci11: Opcode 0x0406 failed: -4 [ 466.611760][ T8450] Bluetooth: hci0: command 0x0c1a tx timeout [ 467.725266][ T8450] Bluetooth: hci3: command 0x0c1a tx timeout [ 467.731330][ T8450] Bluetooth: hci1: command 0x0c1a tx timeout [ 467.805154][ T8432] Bluetooth: hci5: command 0x0c1a tx timeout [ 467.811270][ T9386] Bluetooth: hci4: command 0x0c1a tx timeout [ 467.817433][ T9386] Bluetooth: hci2: command 0x0c1a tx timeout [ 467.824760][ T8450] Bluetooth: hci6: command 0x0c1a tx timeout [ 467.884464][T12715] Bluetooth: hci8: command 0x0c1a tx timeout [ 467.890522][ T9329] Bluetooth: hci7: command 0x0c1a tx timeout [ 467.965387][T12715] Bluetooth: hci10: command 0x0c1a tx timeout [ 467.971719][ T8450] Bluetooth: hci9: command 0x0c1a tx timeout [ 467.978696][ T9329] Bluetooth: hci11: command 0x0c1a tx timeout [ 469.876650][ T9329] Bluetooth: hci6: command 0x0c1a tx timeout [ 469.953656][ T8450] Bluetooth: hci8: command 0x0c1a tx timeout [ 469.959688][ T9329] Bluetooth: hci7: command 0x0c1a tx timeout [ 470.036661][ T9329] Bluetooth: hci11: command 0x0c1a tx timeout [ 470.042789][ T8450] Bluetooth: hci9: command 0x0c1a tx timeout [ 470.048894][T12715] Bluetooth: hci10: command 0x0c1a tx timeout [ 470.166858][T12728] Line length is too long: Should be less than 4094 [ 471.943701][ T8450] Bluetooth: hci6: command 0x0c1a tx timeout [ 472.023212][ T8450] Bluetooth: hci7: command 0x0c1a tx timeout [ 472.029241][T12715] Bluetooth: hci8: command 0x0c1a tx timeout [ 472.102919][ T8450] Bluetooth: hci10: command 0x0c1a tx timeout [ 472.109216][ T9329] Bluetooth: hci11: command 0x0c1a tx timeout [ 472.115443][T12715] Bluetooth: hci9: command 0x0c1a tx timeout [ 472.738678][T12774] blktrace: Concurrent blktraces are not allowed on nbd5 [ 473.241570][T12770] bond0: option packets_per_slave: invalid value () [ 473.301818][T12770] bond0: option packets_per_slave: allowed values 0 - 65535 [ 473.503503][T12767] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 473.532756][T12767] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 473.591246][T12767] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 473.629158][T12767] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 473.657858][T12767] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 473.686506][T12767] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 473.726436][T12767] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 473.752023][T12767] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 473.786909][T12767] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 473.815706][T12767] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 473.830684][T12767] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 473.847390][T12767] Bluetooth: hci11: Opcode 0x0c1a failed: -4 [ 474.570067][T12715] Bluetooth: hci0: command 0x0c1a tx timeout [ 475.524971][T12715] Bluetooth: hci1: command 0x0c1a tx timeout [ 475.605462][T12715] Bluetooth: hci3: command 0x0c1a tx timeout [ 475.683871][ T9329] Bluetooth: hci4: command 0x0c1a tx timeout [ 475.689930][ T8450] Bluetooth: hci2: command 0x0c1a tx timeout [ 475.696036][T12715] Bluetooth: hci5: command 0x0c1a tx timeout [ 475.765227][ T8450] Bluetooth: hci6: command 0x0c1a tx timeout [ 475.771282][T12715] Bluetooth: hci7: command 0x0c1a tx timeout [ 475.843808][ T8450] Bluetooth: hci10: command 0x0c1a tx timeout [ 475.849961][ T9329] Bluetooth: hci9: command 0x0c1a tx timeout [ 475.856208][ T9386] Bluetooth: hci8: command 0x0c1a tx timeout [ 475.862216][T12715] Bluetooth: hci11: command 0x0c1a tx timeout [ 477.772249][T12854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1248'. [ 477.970182][T12838] bond0: option packets_per_slave: invalid value () [ 478.004708][T12838] bond0: option packets_per_slave: allowed values 0 - 65535 [ 478.103406][T12841] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 478.137615][T12841] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 478.175651][T12841] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 478.207350][T12841] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 478.232438][T12841] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 478.248298][T12841] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 478.265281][T12841] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 478.283198][T12841] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 478.312326][T12841] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 478.328372][T12841] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 478.340785][T12841] Bluetooth: hci10: Opcode 0x0c1a failed: -4 [ 478.353788][T12841] Bluetooth: hci11: Opcode 0x0c1a failed: -4 [ 478.640270][T12868] random: crng reseeded on system resumption [ 479.045754][T12879] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1253'. [ 479.106126][T12715] Bluetooth: hci0: command 0x0c1a tx timeout [ 479.997035][T12892] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 480.146896][T12715] Bluetooth: hci1: command 0x0c1a tx timeout [ 480.222429][T12715] Bluetooth: hci2: command 0x0c1a tx timeout [ 480.228460][ T9329] Bluetooth: hci3: command 0x0c1a tx timeout [ 480.300509][T12715] Bluetooth: hci7: command 0x0c1a tx timeout [ 480.306545][ T9329] Bluetooth: hci6: command 0x0c1a tx timeout [ 480.312583][ T9386] Bluetooth: hci5: command 0x0c1a tx timeout [ 480.318572][ T8450] Bluetooth: hci4: command 0x0c1a tx timeout [ 480.381226][ T9386] Bluetooth: hci10: command 0x0c1a tx timeout [ 480.387336][T12715] Bluetooth: hci9: command 0x0c1a tx timeout [ 480.393397][ T9329] Bluetooth: hci8: command 0x0c1a tx timeout [ 480.399464][ T8450] Bluetooth: hci11: command 0x0c1a tx timeout [ 480.514721][T12901] phram: parameter too long [ 482.892315][T12946] Line length is too long: Should be less than 4094 [ 488.033491][T13022] can0: slcan on ttyS2. [ 488.930719][T13020] can0 (unregistered): slcan off ttyS2. [ 489.762920][T13056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1284'. [ 491.078896][T13100] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1291'. [ 492.595719][T13125] FAULT_INJECTION: forcing a failure. [ 492.595719][T13125] name failslab, interval 1, probability 0, space 0, times 0 [ 492.749719][T13125] CPU: 0 UID: 0 PID: 13125 Comm: syz.3.1294 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.749745][T13125] Tainted: [L]=SOFTLOCKUP [ 492.749750][T13125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 492.749759][T13125] Call Trace: [ 492.749764][T13125] [ 492.749770][T13125] dump_stack_lvl+0x100/0x190 [ 492.749796][T13125] should_fail_ex.cold+0x5/0xa [ 492.749814][T13125] should_failslab+0xc2/0x120 [ 492.749833][T13125] kmem_cache_alloc_noprof+0x91/0x6a0 [ 492.749851][T13125] ? do_getname+0x35/0x390 [ 492.749874][T13125] do_getname+0x35/0x390 [ 492.749893][T13125] do_utimes_path+0xc9/0x1b0 [ 492.749984][T13125] ? __pfx_do_utimes_path+0x10/0x10 [ 492.750001][T13125] ? __pfx_get_timespec64+0x10/0x10 [ 492.750031][T13125] do_utimes+0x34/0x100 [ 492.750047][T13125] __x64_sys_utimensat+0x1c6/0x290 [ 492.750064][T13125] ? exc_page_fault+0x6f/0xd0 [ 492.750088][T13125] ? __pfx___x64_sys_utimensat+0x10/0x10 [ 492.750112][T13125] do_syscall_64+0x115/0x840 [ 492.750133][T13125] ? clear_bhb_loop+0x40/0x90 [ 492.750151][T13125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.750166][T13125] RIP: 0033:0x7fba3099de59 [ 492.750179][T13125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.750194][T13125] RSP: 002b:00007fba2ebd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 492.750208][T13125] RAX: ffffffffffffffda RBX: 00007fba30c26180 RCX: 00007fba3099de59 [ 492.750218][T13125] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: ffffffffffffffff [ 492.750227][T13125] RBP: 00007fba30a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 492.750236][T13125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.750244][T13125] R13: 00007fba30c26218 R14: 00007fba30c26180 R15: 00007fff9f116488 [ 492.750263][T13125] [ 499.337370][T13220] ICMPv6: process `syz.3.1310' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 499.804488][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.810877][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.736169][T13256] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1317'. [ 502.789418][T13256] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1317'. [ 503.163922][T13247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.305454][T13247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.482352][T13269] FAULT_INJECTION: forcing a failure. [ 503.482352][T13269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.564390][T13269] CPU: 0 UID: 0 PID: 13269 Comm: syz.3.1320 Tainted: G L syzkaller #0 PREEMPT(full) [ 503.564419][T13269] Tainted: [L]=SOFTLOCKUP [ 503.564432][T13269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 503.564441][T13269] Call Trace: [ 503.564447][T13269] [ 503.564453][T13269] dump_stack_lvl+0x100/0x190 [ 503.564476][T13269] should_fail_ex.cold+0x5/0xa [ 503.564494][T13269] _copy_from_user+0x2e/0xd0 [ 503.564601][T13269] copy_msghdr_from_user+0x9f/0x4c0 [ 503.564627][T13269] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 503.564652][T13269] ? rcu_is_watching+0x12/0xc0 [ 503.564670][T13269] ? ___sys_sendmsg+0x19d/0x1e0 [ 503.564689][T13269] ? kfree+0x1e5/0x6c0 [ 503.564709][T13269] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 503.564729][T13269] ___sys_sendmsg+0x106/0x1e0 [ 503.564751][T13269] ? __pfx____sys_sendmsg+0x10/0x10 [ 503.564771][T13269] ? do_user_addr_fault+0x7de/0x12f0 [ 503.564803][T13269] ? lockdep_hardirqs_on+0x78/0x100 [ 503.564834][T13269] ? __pfx___might_resched+0x10/0x10 [ 503.564858][T13269] __sys_sendmmsg+0x20c/0x440 [ 503.564877][T13269] ? __pfx___sys_sendmmsg+0x10/0x10 [ 503.564900][T13269] ? __pfx_do_futex+0x10/0x10 [ 503.564922][T13269] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 503.564941][T13269] ? xfd_validate_state+0x129/0x190 [ 503.564962][T13269] __x64_sys_sendmmsg+0x9c/0x100 [ 503.564978][T13269] ? lockdep_hardirqs_on+0x78/0x100 [ 503.565000][T13269] do_syscall_64+0x115/0x840 [ 503.565021][T13269] ? clear_bhb_loop+0x40/0x90 [ 503.565039][T13269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.565054][T13269] RIP: 0033:0x7fba3099de59 [ 503.565069][T13269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.565082][T13269] RSP: 002b:00007fba2ebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 503.565097][T13269] RAX: ffffffffffffffda RBX: 00007fba30c26090 RCX: 00007fba3099de59 [ 503.565107][T13269] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 503.565115][T13269] RBP: 00007fba30a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 503.565124][T13269] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.565133][T13269] R13: 00007fba30c26128 R14: 00007fba30c26090 R15: 00007fff9f116488 [ 503.565153][T13269] [ 504.778025][T13282] usb usb20: check_ctrlrecip: process 13282 (syz.7.1323) requesting ep 01 but needs 81 [ 504.864526][T13282] usb usb20: usbfs: process 13282 (syz.7.1323) did not claim interface 0 before use [ 505.504722][ T29] audit: type=1800 audit(4294967468.811:18): pid=13295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 507.597618][ T29] audit: type=1806 audit(4294967470.912:19): xattr="" res=-22 [ 507.864064][T13336] FAULT_INJECTION: forcing a failure. [ 507.864064][T13336] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 507.948106][T13336] CPU: 0 UID: 0 PID: 13336 Comm: syz.9.1333 Tainted: G L syzkaller #0 PREEMPT(full) [ 507.948132][T13336] Tainted: [L]=SOFTLOCKUP [ 507.948138][T13336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 507.948147][T13336] Call Trace: [ 507.948152][T13336] [ 507.948158][T13336] dump_stack_lvl+0x100/0x190 [ 507.948183][T13336] should_fail_ex.cold+0x5/0xa [ 507.948198][T13336] ? prepare_alloc_pages+0x16d/0x5f0 [ 507.948220][T13336] should_fail_alloc_page+0xeb/0x140 [ 507.948241][T13336] prepare_alloc_pages+0x1f0/0x5f0 [ 507.948264][T13336] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 507.948280][T13336] ? folio_batch_move_lru+0x37c/0xc00 [ 507.948304][T13336] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 507.948328][T13336] ? folio_batch_move_lru+0x3a9/0xc00 [ 507.948350][T13336] ? __pfx_lru_add+0x10/0x10 [ 507.948372][T13336] ? __pfx_folio_batch_move_lru+0x10/0x10 [ 507.948395][T13336] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 507.948418][T13336] ? __lock_acquire+0x49f/0x1a40 [ 507.948440][T13336] ? __lock_acquire+0x49f/0x1a40 [ 507.948466][T13336] ? lock_acquire+0x1b9/0x370 [ 507.948486][T13336] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 507.948507][T13336] ? policy_nodemask+0xed/0x4f0 [ 507.948527][T13336] alloc_pages_mpol+0x1fb/0x540 [ 507.948547][T13336] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 507.948571][T13336] folio_alloc_mpol_noprof+0x36/0x260 [ 507.948594][T13336] vma_alloc_folio_noprof+0xed/0x1d0 [ 507.948615][T13336] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 507.948642][T13336] do_anonymous_page+0xb2b/0x2080 [ 507.948664][T13336] ? rcu_read_unlock+0x2d/0xb0 [ 507.948682][T13336] __handle_mm_fault+0x1d2c/0x2a00 [ 507.948707][T13336] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 507.948724][T13336] ? __pfx___handle_mm_fault+0x10/0x10 [ 507.948747][T13336] ? pte_offset_map_lock+0x174/0x320 [ 507.948764][T13336] ? find_held_lock+0x2b/0x80 [ 507.948787][T13336] ? follow_page_pte+0x4d0/0x13f0 [ 507.948809][T13336] handle_mm_fault+0x37b/0xa30 [ 507.948834][T13336] __get_user_pages+0x1178/0x32a0 [ 507.948860][T13336] ? __pfx___get_user_pages+0x10/0x10 [ 507.948884][T13336] populate_vma_page_range+0x267/0x3f0 [ 507.948905][T13336] ? __pfx_populate_vma_page_range+0x10/0x10 [ 507.948924][T13336] ? __pfx_find_vma_intersection+0x10/0x10 [ 507.948947][T13336] __mm_populate+0x107/0x3a0 [ 507.948975][T13336] ? __pfx___mm_populate+0x10/0x10 [ 507.948998][T13336] ? up_write+0x2e5/0x5c0 [ 507.949013][T13336] vm_mmap_pgoff+0x37f/0x470 [ 507.949034][T13336] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 507.949056][T13336] ? __pfx_do_futex+0x10/0x10 [ 507.949069][T13336] ? __do_sys_clone+0xd9/0x120 [ 507.949088][T13336] ksys_mmap_pgoff+0xe4/0x610 [ 507.949107][T13336] ? __x64_sys_futex+0x358/0x4d0 [ 507.949121][T13336] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 507.949139][T13336] ? xfd_validate_state+0x129/0x190 [ 507.949159][T13336] __x64_sys_mmap+0x125/0x190 [ 507.949178][T13336] do_syscall_64+0x115/0x840 [ 507.949200][T13336] ? clear_bhb_loop+0x40/0x90 [ 507.949219][T13336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.949234][T13336] RIP: 0033:0x7f758b59de59 [ 507.949249][T13336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.949263][T13336] RSP: 002b:00007f758c541028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 507.949277][T13336] RAX: ffffffffffffffda RBX: 00007f758b825fa0 RCX: 00007f758b59de59 [ 507.949287][T13336] RDX: 00000000000000df RSI: 0000000000400007 RDI: 0000000000000000 [ 507.949296][T13336] RBP: 00007f758b633e6f R08: ffffffffffffffff R09: 0000000000000000 [ 507.949306][T13336] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 507.949315][T13336] R13: 00007f758b826038 R14: 00007f758b825fa0 R15: 00007ffdfce941a8 [ 507.949336][T13336] [ 508.596317][T13345] input: jJǸ-9%vJ86 as /devices/virtual/input/input11 [ 509.038719][T13347] openvswitch: netlink: Message has 4 unknown bytes. [ 509.689452][T13366] netlink: 504 bytes leftover after parsing attributes in process `syz.9.1338'. [ 509.725553][T13365] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 510.608536][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1342'. [ 511.224859][T13381] FAULT_INJECTION: forcing a failure. [ 511.224859][T13381] name failslab, interval 1, probability 0, space 0, times 0 [ 511.380298][T13381] CPU: 0 UID: 0 PID: 13381 Comm: syz.3.1342 Tainted: G L syzkaller #0 PREEMPT(full) [ 511.380325][T13381] Tainted: [L]=SOFTLOCKUP [ 511.380331][T13381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 511.380340][T13381] Call Trace: [ 511.380345][T13381] [ 511.380351][T13381] dump_stack_lvl+0x100/0x190 [ 511.380372][T13381] should_fail_ex.cold+0x5/0xa [ 511.380391][T13381] should_failslab+0xc2/0x120 [ 511.380412][T13381] kmem_cache_alloc_noprof+0x91/0x6a0 [ 511.380431][T13381] ? do_getname+0x35/0x390 [ 511.380451][T13381] do_getname+0x35/0x390 [ 511.380478][T13381] do_sys_openat2+0xc7/0x1e0 [ 511.380496][T13381] ? __pfx_do_sys_openat2+0x10/0x10 [ 511.380520][T13381] __x64_sys_openat+0x12d/0x210 [ 511.380539][T13381] ? __pfx___x64_sys_openat+0x10/0x10 [ 511.380563][T13381] do_syscall_64+0x115/0x840 [ 511.380585][T13381] ? clear_bhb_loop+0x40/0x90 [ 511.380603][T13381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.380618][T13381] RIP: 0033:0x7fba3099de59 [ 511.380632][T13381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.380646][T13381] RSP: 002b:00007fba2ebd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 511.380660][T13381] RAX: ffffffffffffffda RBX: 00007fba30c26180 RCX: 00007fba3099de59 [ 511.380670][T13381] RDX: 0000000000048c83 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 511.380679][T13381] RBP: 00007fba30a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 511.380688][T13381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.380696][T13381] R13: 00007fba30c26218 R14: 00007fba30c26180 R15: 00007fff9f116488 [ 511.380725][T13381] [ 511.820282][T13362] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [88] [ 512.986336][T13377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1342'. [ 513.347460][T13410] input: jJǸ-9%vJ86 as /devices/virtual/input/input12 [ 514.519478][T13426] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1351'. [ 515.737477][T13448] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 516.817369][T13473] TCP: TCP_TX_DELAY enabled [ 519.256808][ T29] audit: type=1800 audit(4294967482.624:20): pid=13511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1369" name="file0" dev="tmpfs" ino=258 res=0 errno=0 [ 519.408869][ T29] audit: type=1800 audit(4294967482.785:21): pid=13516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1369" name="file0" dev="tmpfs" ino=258 res=0 errno=0 [ 519.781935][T13525] capability: warning: `syz.3.1370' uses 32-bit capabilities (legacy support in use) [ 522.490231][T13558] futex_wake_op: syz.3.1377 tries to shift op by -2048; fix this program [ 522.635457][T13558] futex_wake_op: syz.3.1377 tries to shift op by -2048; fix this program [ 523.353156][ T30] INFO: task syz.3.996:11220 blocked for more than 143 seconds. [ 523.366933][ T30] Tainted: G L syzkaller #0 [ 523.388568][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 523.434704][ T30] task:syz.3.996 state:D stack:26872 pid:11220 tgid:11219 ppid:5625 task_flags:0x400140 flags:0x00080002 [ 523.493732][ T30] Call Trace: [ 523.508261][ T30] [ 523.528764][ T30] __schedule+0x125c/0x6730 [ 523.548713][ T30] ? do_raw_spin_lock+0x128/0x260 [ 523.569510][ T30] ? __pfx___schedule+0x10/0x10 [ 523.594632][ T30] ? find_held_lock+0x2b/0x80 [ 523.617553][ T30] ? schedule+0x225/0x2c0 [ 523.636115][ T30] schedule+0xdd/0x2c0 [ 523.652109][ T30] schedule_preempt_disabled+0x13/0x30 [ 523.681359][ T30] __mutex_lock+0xccc/0x1bd0 [ 523.695033][ T30] ? expkey_flush+0x18/0x90 [ 523.713368][ T30] ? do_raw_spin_lock+0x128/0x260 [ 523.744159][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 523.763743][ T30] ? do_raw_spin_unlock+0x145/0x1e0 [ 523.786467][ T30] ? _raw_spin_unlock+0x28/0x50 [ 523.809570][ T30] ? __pfx_cache_clean+0x10/0x10 [ 523.833960][ T30] ? __pfx___might_resched+0x10/0x10 [ 523.858256][ T30] ? __pfx_expkey_flush+0x10/0x10 [ 523.880489][ T30] ? expkey_flush+0x18/0x90 [ 523.898588][ T30] expkey_flush+0x18/0x90 [ 523.917671][ T30] write_flush.isra.0+0x2af/0x3d0 [ 523.946429][ T30] ? __pfx_write_flush.isra.0+0x10/0x10 [ 523.974914][ T30] ? __pfx___might_resched+0x10/0x10 [ 523.997960][ T30] ? iovec_from_user+0xda/0x140 [ 524.017428][ T30] ? __pfx_write_flush_procfs+0x10/0x10 [ 524.045630][ T30] proc_reg_write+0x240/0x330 [ 524.070247][ T30] ? __pfx_proc_reg_write+0x10/0x10 [ 524.095871][ T30] vfs_writev+0x5ed/0xdd0 [ 524.112293][ T30] ? __pfx_vfs_writev+0x10/0x10 [ 524.134571][ T30] ? __fget_files+0x21f/0x3d0 [ 524.160559][ T30] ? do_writev+0x13e/0x340 [ 524.179597][ T30] do_writev+0x13e/0x340 [ 524.219994][ T30] ? __pfx_do_writev+0x10/0x10 [ 524.280643][ T30] do_syscall_64+0x115/0x840 [ 524.346235][ T30] ? clear_bhb_loop+0x40/0x90 [ 524.366104][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.385645][ T30] RIP: 0033:0x7f8f3319de59 [ 524.408692][ T30] RSP: 002b:00007f8f34026028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 524.447073][ T30] RAX: ffffffffffffffda RBX: 00007f8f33425fa0 RCX: 00007f8f3319de59 [ 524.478804][ T30] RDX: 000000000000000a RSI: 0000200000000240 RDI: 0000000000000003 [ 524.513536][ T30] RBP: 00007f8f33233e6f R08: 0000000000000000 R09: 0000000000000000 [ 524.535388][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.559277][ T30] R13: 00007f8f33426038 R14: 00007f8f33425fa0 R15: 00007ffdbd24e818 [ 524.586092][ T30] [ 524.595358][ T30] INFO: task syz.3.996:11221 blocked for more than 144 seconds. [ 524.673951][ T30] Tainted: G L syzkaller #0 [ 524.710301][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 524.744196][ T30] task:syz.3.996 state:D stack:26056 pid:11221 tgid:11219 ppid:5625 task_flags:0x580140 flags:0x00080002 [ 524.784523][ T30] Call Trace: [ 524.791810][ T30] [ 524.803905][ T30] __schedule+0x125c/0x6730 [ 524.808993][ T30] ? do_raw_spin_lock+0x128/0x260 [ 524.823788][ T30] ? __pfx___schedule+0x10/0x10 [ 524.828683][ T30] ? find_held_lock+0x2b/0x80 [ 524.833349][ T30] ? schedule+0x225/0x2c0 [ 524.858774][ T30] schedule+0xdd/0x2c0 [ 524.874030][ T30] schedule_preempt_disabled+0x13/0x30 [ 524.880969][ T30] __mutex_lock+0xccc/0x1bd0 [ 524.893397][ T30] ? fdget_pos+0x2aa/0x380 [ 524.899298][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 524.913284][ T30] ? __fget_files+0x215/0x3d0 [ 524.923369][ T30] ? __fget_files+0x21f/0x3d0 [ 524.933286][ T30] ? fdget_pos+0x2aa/0x380 [ 524.943857][ T30] fdget_pos+0x2aa/0x380 [ 524.953173][ T30] ksys_read+0x71/0x250 [ 524.963405][ T30] ? __pfx_ksys_read+0x10/0x10 [ 524.975923][ T30] do_syscall_64+0x115/0x840 [ 524.983596][ T30] ? clear_bhb_loop+0x40/0x90 [ 524.993869][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.012765][ T30] RIP: 0033:0x7f8f3319de59 [ 525.018089][ T30] RSP: 002b:00007f8f34005028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 525.034251][ T30] RAX: ffffffffffffffda RBX: 00007f8f33426090 RCX: 00007f8f3319de59 [ 525.062597][ T30] RDX: 0000000000008080 RSI: 0000000000000000 RDI: 0000000000000003 [ 525.073098][ T30] RBP: 00007f8f33233e6f R08: 0000000000000000 R09: 0000000000000000 [ 525.088482][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.097198][ T30] R13: 00007f8f33426128 R14: 00007f8f33426090 R15: 00007ffdbd24e818 [ 525.106516][ T30] [ 525.149706][ T30] [ 525.149706][ T30] Showing all locks held in the system: [ 525.180330][ T30] 1 lock held by khungtaskd/30: [ 525.188775][ T30] #0: ffffffff8ebe5f00 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 525.202260][ T30] 2 locks held by getty/5383: [ 525.206944][ T30] #0: ffff8880377110a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 525.218129][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 525.231269][ T30] 2 locks held by syz-executor/5626: [ 525.237641][ T30] #0: ffff888026cbe0d8 (&type->s_umount_key#57){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 525.251331][ T30] #1: ffffffff8f06f220 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 525.260929][ T30] 4 locks held by kworker/u10:20/8844: [ 525.276000][ T30] #0: ffff88801caf6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 525.286554][ T30] #1: ffffc9000327fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 525.296929][ T30] #2: ffffffff90a857a8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 525.309781][ T30] #3: ffffffff90a9e3c0 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x17/0x120 [ 525.320236][ T30] 3 locks held by kworker/u10:23/8847: [ 525.326552][ T30] #0: ffff888033aac140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 525.337821][ T30] #1: ffffc9000339fd08 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 525.360515][ T30] #2: ffffffff90a9e3c0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 525.370308][ T30] 2 locks held by syz.1.977/11093: [ 525.375661][ T30] #0: ffffffff90b4cfc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 525.384081][ T30] #1: ffffffff8f06f220 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 525.394429][ T30] 3 locks held by syz.3.996/11220: [ 525.399577][ T30] #0: ffff888037da07f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 525.409232][ T30] #1: ffff88802ae8e450 (sb_writers#3){.+.+}-{0:0}, at: do_writev+0x13e/0x340 [ 525.425205][ T30] #2: ffffffff8f06f220 (nfsd_mutex){+.+.}-{4:4}, at: expkey_flush+0x18/0x90 [ 525.436676][ T30] 1 lock held by syz.3.996/11221: [ 525.441877][ T30] #0: ffff888037da07f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 525.454971][ T30] 3 locks held by syz.0.1025/11368: [ 525.461275][ T30] #0: ffff888077492d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 525.470563][ T30] #1: ffff88807887a450 (sb_writers#3){.+.+}-{0:0}, at: do_writev+0x13e/0x340 [ 525.479467][ T30] #2: ffffffff8f06f220 (nfsd_mutex){+.+.}-{4:4}, at: expkey_flush+0x18/0x90 [ 525.488541][ T30] 2 locks held by syz-executor/11461: [ 525.494128][ T30] #0: ffff88807905c0d8 (&type->s_umount_key#57){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 525.506461][ T30] #1: ffffffff8f06f220 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 525.516536][ T30] 2 locks held by syz-executor/11642: [ 525.523644][ T30] #0: ffff88805b65c0d8 (&type->s_umount_key#57){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 525.536370][ T30] #1: ffffffff8f06f220 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 525.546662][ T30] 2 locks held by syz.4.1072/11712: [ 525.555265][ T30] #0: ffffffff90b4cfc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 525.563620][ T30] #1: ffffffff8f06f220 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0xd5/0x1a80 [ 525.575595][ T30] 2 locks held by syz-executor/12081: [ 525.581155][ T30] #0: ffff8880462fa0d8 (&type->s_umount_key#57){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 525.591620][ T30] #1: ffffffff8f06f220 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 525.601363][ T30] 1 lock held by syz-executor/12218: [ 525.606646][ T30] #0: ffffffff90a9e3c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 525.616010][ T30] 3 locks held by syz.7.1375/13548: [ 525.621667][ T30] #0: ffffffff90a857a8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 525.633898][ T30] #1: ffffffff90a9e3c0 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x90/0xc10 [ 525.645896][ T30] #2: ffffffff8ebf19a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 525.661012][ T30] 2 locks held by syz.7.1375/13550: [ 525.666219][ T30] #0: ffffffff90a857a8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 525.675893][ T30] #1: ffffffff8ebf1878 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 525.687005][ T30] 2 locks held by syz.3.1377/13556: [ 525.692363][ T30] #0: ffffffff90a857a8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 525.701961][ T30] #1: ffffffff90a9e3c0 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 525.711738][ T30] 2 locks held by syz.1.1378/13564: [ 525.716942][ T30] #0: ffffffff90a857a8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 525.726614][ T30] #1: ffffffff90a9e3c0 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x21e/0x780 [ 525.740730][ T30] [ 525.760279][ T30] ============================================= [ 525.760279][ T30] [ 525.791098][ T30] NMI backtrace for cpu 0 [ 525.791114][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 525.791134][ T30] Tainted: [L]=SOFTLOCKUP [ 525.791139][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 525.791149][ T30] Call Trace: [ 525.791154][ T30] [ 525.791159][ T30] dump_stack_lvl+0x100/0x190 [ 525.791179][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 525.791198][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 525.791230][ T30] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 525.791253][ T30] sys_info+0x141/0x190 [ 525.791269][ T30] watchdog+0xcb1/0x1030 [ 525.791293][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 525.791314][ T30] ? __pfx_watchdog+0x10/0x10 [ 525.791333][ T30] ? __kthread_parkme+0x18c/0x230 [ 525.791350][ T30] ? kthread+0x13a/0x450 [ 525.791366][ T30] ? __pfx_watchdog+0x10/0x10 [ 525.791383][ T30] kthread+0x370/0x450 [ 525.791400][ T30] ? __pfx_kthread+0x10/0x10 [ 525.791418][ T30] ret_from_fork+0x72b/0xd50 [ 525.791435][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 525.791451][ T30] ? __switch_to+0x800/0x10f0 [ 525.791471][ T30] ? __switch_to_asm+0x39/0x70 [ 525.791490][ T30] ? __pfx_kthread+0x10/0x10 [ 525.791508][ T30] ret_from_fork_asm+0x1a/0x30 [ 525.791535][ T30] [ 526.035311][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 526.042184][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 526.052845][ T30] Tainted: [L]=SOFTLOCKUP [ 526.057147][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 526.067183][ T30] Call Trace: [ 526.070445][ T30] [ 526.073369][ T30] dump_stack_lvl+0x100/0x190 [ 526.078033][ T30] vpanic+0x552/0x970 [ 526.081995][ T30] ? __pfx_vpanic+0x10/0x10 [ 526.086483][ T30] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 526.092626][ T30] panic+0xd1/0xe0 [ 526.096332][ T30] ? __pfx_panic+0x10/0x10 [ 526.100735][ T30] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 526.106875][ T30] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 526.113013][ T30] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 526.119150][ T30] ? watchdog.cold+0x1ec/0x234 [ 526.123895][ T30] ? watchdog+0xcc1/0x1030 [ 526.128299][ T30] watchdog.cold+0x1fd/0x234 [ 526.132879][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 526.138676][ T30] ? __pfx_watchdog+0x10/0x10 [ 526.143340][ T30] ? __kthread_parkme+0x18c/0x230 [ 526.148358][ T30] ? kthread+0x13a/0x450 [ 526.152597][ T30] ? __pfx_watchdog+0x10/0x10 [ 526.157264][ T30] kthread+0x370/0x450 [ 526.161345][ T30] ? __pfx_kthread+0x10/0x10 [ 526.165927][ T30] ret_from_fork+0x72b/0xd50 [ 526.170512][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 526.175612][ T30] ? __switch_to+0x800/0x10f0 [ 526.180360][ T30] ? __switch_to_asm+0x39/0x70 [ 526.185117][ T30] ? __pfx_kthread+0x10/0x10 [ 526.189695][ T30] ret_from_fork_asm+0x1a/0x30 [ 526.194459][ T30] [ 526.197532][ T30] Kernel Offset: disabled [ 526.201861][ T30] Rebooting in 86400 seconds..