last executing test programs: 2m47.196586552s ago: executing program 2 (id=2727): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/irq/5/chip_name\x00', 0x40000, 0x0) mmap$auto(0x0, 0x100000001, 0xdf, 0x200000000009b72, r0, 0x101) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400001}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf250a000000100003800c0001000100000000000000df5aa2d20c6dc6ecaf6b8b5276559328735f75486e565bf7d759a0749e5391bb96c022b036e48ae198682b6bb555dbdf441ecb9de45b93c79172096607ced3dd3dbe49c5f2b3ad1bba0b7f836403c37e30d4130245"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r5 = syz_clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="2918758169251555183442853a27ba37074b62633f338d1a7b74c6ff4c91676d9a5e0078ab1db0f30dc404f23fd5820a80ed88704e31ac2c5f3169cb36f22141f45b35a2e04fe71bc918ec46671bf5d28d8d26ce4970c811a8b669c7011c3e9ff8b2109640c07450f5b7b624fde03bb975adc229120a3b8750efcf8a90044854f04b55f429540f9fc390d24df293299b9c4395aed65212fdd9a1597ffcfaf9b3008f77bcc5a593486eb61127560aa974af592514e14d7d") r6 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000003c0)={@_si_pad}, 0x1ecc, &(0x7f0000000440)={{0xffffffff, 0x2}, {0x7, 0x19}, 0x9, 0x80000000, 0x4, 0x5, 0x8000000000000001, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1000, 0x0, 0x4}) r7 = getpgid$auto(0x0) sendmsg$auto_IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000540)=ANY=[@ANYBLOB="3405", @ANYRES16=r4, @ANYBLOB="000226bd7000fbdbdf25020000000800050007000000080006000300000008000400050000001001028075ff83876574dcf7444c53b88992e69a471bfa58053dc94ad66d0953fb1b9cb401c147df5f31671dfc0f9284424129a2c5ce70c649ade9aae6d814619bf71bbd80efe680cd9bc3e7aa59478b4e3e4d0ce05691deebfebdb666888d6f5549d48d92470028f2ccb239e0e683f1107459a18b09a092829949129087a8c782cb94fd36de9315f583a56ceee0e6023fa204fdb92ada8640c18311479406aa31ba39687f786747f4eaef95", @ANYRES32=0x0, @ANYBLOB="19e833e93fdf0b102a18ee6b8436634483ed5729eb26e2267dcf5d3a2eaf51db79c25d370c37cf662d480e08f268f1743cd215589548d9cb71", @ANYRES32=r5, @ANYBLOB="1800fd80040086807290395bf5dd39680400b5800400098021011a800400", @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="490f786928777dc08e0861d26a194926ce9dc2c2fcb0dd40666bd041f1c1ee6c8800c408008000", @ANYBLOB="0800e300", @ANYRES32=r7, @ANYBLOB="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"], 0x534}, 0x1, 0x0, 0x0, 0x28014044}, 0x0) rt_sigqueueinfo$auto(0x0, 0x3ff, &(0x7f0000000280)={@siginfo_0_0={0x809f, 0x7, 0x3, @_timer={r5, 0x20000000, @sival_ptr=&(0x7f0000000180)="0600f1971df7317e9d6cd1b2aa0375ede55f4c2d90a59ef4b7c13f84a399c72fe5465c581e3891ebc224106ea7cb227dcdf3ad8959c4a9c8f2f10b102a59ea3c49b0a66584c358ce952d3d2d46e6722ec2acbd084be2ce582da87b565d7ba9dd86f0e1e5041abd24a8f6f4212d0ca62c6c5e1632bad3d67ee4bd24e377528e76151870959f1f6f0c5567763a1679f9046d53a3447b668bb1b36af5266ce1161696"}}}) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mprotect$auto(0x8000, 0x8, 0x8) wait4$auto(0x0, 0x0, 0x7, 0x0) r8 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(r8, 0x0, 0x80000001, 0x0) msgctl$auto_IPC_STAT(0x1ff, 0x2, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, 0x0, 0x24040080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x4008, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) setsockopt$auto(0x3, 0x10000000084, 0x80000010, 0x0, 0x8000) 2m46.274871504s ago: executing program 2 (id=2728): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) (async) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x5, @empty}, 0x6a) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x4) (async) r0 = socket(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00'}) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/workqueue/cpumask\x00', 0x2, 0x0) write$auto(r1, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5) (async) write$auto(r1, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x189400, 0x0) (async) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x189400, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/error_log\x00', 0x80000, 0x0) (async) r2 = openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/error_log\x00', 0x80000, 0x0) pread64$auto(r2, 0x0, 0x7e91, 0x7fffffff) (async) pread64$auto(r2, 0x0, 0x7e91, 0x7fffffff) readv$auto(0x3, 0x0, 0x1) (async) readv$auto(0x3, 0x0, 0x1) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000000, 0x0) io_uring_setup$auto(0x59, 0x0) clock_adjtime$auto(0x354d, 0x0) syz_clone3(&(0x7f0000000100)={0x2100000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28001) (async) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28001) rt_sigsuspend$auto(0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (async) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000040)='\xee\xff\xff\xff', 0x80000000) 2m44.731613903s ago: executing program 2 (id=2730): syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040801}, 0x44000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x1000000000009489, 0x3, 0x15f4da0a, 0x1, 0x7, 0x7, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) getpid() openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0xa, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) 2m42.816837675s ago: executing program 2 (id=2734): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x1a1000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/cpu/cpu1/hotplug/fail\x00', 0x82942, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, 0x0, 0x861c2, 0x0) write$auto(0x3, 0x0, 0x7) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000040), 0xc694, 0x3, 0x80005, @stream_id=0x80000001, 0x2004b, 0xc, 0x0}) ioctl$auto_USBDEVFS_REAPURB32(r2, 0x4004550c, &(0x7f0000000000)=0x3ff) r3 = epoll_create$auto(0x0) ioctl$auto_SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000040)="7d48c6b5aaba5d660942b6e2230039ab7b2c9a3e759f9d5a17538ac5ae79b0392a0f11fd2c24d1b97b772eb4d78172354516500d54fc27a204edf22ba6716c130806ace38c07dc9ed53a5f67fc8f64f7c4b5a5e86a379431c41d6679abf19db2accfb5cb1bc3875d7007bc36aef468e945d83740c9421c1c07338201aa0e2c039fe9cc6f46be444102b1d74619e42bd09835903eb882fc99dc32fd0b1c11962df2ef584232") r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)=""/9, 0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000000)="7f07d3") close_range$auto(0x2, 0x8, 0x0) 2m41.535748114s ago: executing program 2 (id=2736): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/irq/5/chip_name\x00', 0x40000, 0x0) mmap$auto(0x0, 0x100000001, 0xdf, 0x200000000009b72, r0, 0x101) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400001}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf250a000000100003800c0001000100000000000000df5aa2d20c6dc6ecaf6b8b5276559328735f75486e565bf7d759a0749e5391bb96c022b036e48ae198682b6bb555dbdf441ecb9de45b93c79172096607ced3dd3dbe49c5f2b3ad1bba0b7f836403c37e30d4130245"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r5 = syz_clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="2918758169251555183442853a27ba37074b62633f338d1a7b74c6ff4c91676d9a5e0078ab1db0f30dc404f23fd5820a80ed88704e31ac2c5f3169cb36f22141f45b35a2e04fe71bc918ec46671bf5d28d8d26ce4970c811a8b669c7011c3e9ff8b2109640c07450f5b7b624fde03bb975adc229120a3b8750efcf8a90044854f04b55f429540f9fc390d24df293299b9c4395aed65212fdd9a1597ffcfaf9b3008f77bcc5a593486eb61127560aa974af592514e14d7d") r6 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000003c0)={@_si_pad}, 0x1ecc, &(0x7f0000000440)={{0xffffffff, 0x2}, {0x7, 0x19}, 0x9, 0x80000000, 0x4, 0x5, 0x8000000000000001, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1000, 0x0, 0x4}) r7 = getpgid$auto(0x0) sendmsg$auto_IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000540)=ANY=[@ANYBLOB="3405", @ANYRES16=r4, @ANYBLOB="000226bd7000fbdbdf25020000000800050007000000080006000300000008000400050000001001028075ff83876574dcf7444c53b88992e69a471bfa58053dc94ad66d0953fb1b9cb401c147df5f31671dfc0f9284424129a2c5ce70c649ade9aae6d814619bf71bbd80efe680cd9bc3e7aa59478b4e3e4d0ce05691deebfebdb666888d6f5549d48d92470028f2ccb239e0e683f1107459a18b09a092829949129087a8c782cb94fd36de9315f583a56ceee0e6023fa204fdb92ada8640c18311479406aa31ba39687f786747f4eaef95", @ANYRES32=0x0, @ANYBLOB="19e833e93fdf0b102a18ee6b8436634483ed5729eb26e2267dcf5d3a2eaf51db79c25d370c37cf662d480e08f268f1743cd215589548d9cb71", @ANYRES32=r5, @ANYBLOB="1800fd80040086807290395bf5dd39680400b5800400098021011a800400", @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="490f786928777dc08e0861d26a194926ce9dc2c2fcb0dd40666bd041f1c1ee6c8800c408008000", @ANYBLOB="0800e300", @ANYRES32=r7, @ANYBLOB="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"], 0x534}, 0x1, 0x0, 0x0, 0x28014044}, 0x0) rt_sigqueueinfo$auto(0x0, 0x3ff, &(0x7f0000000280)={@siginfo_0_0={0x809f, 0x7, 0x3, @_timer={r5, 0x20000000, @sival_ptr=&(0x7f0000000180)="0600f1971df7317e9d6cd1b2aa0375ede55f4c2d90a59ef4b7c13f84a399c72fe5465c581e3891ebc224106ea7cb227dcdf3ad8959c4a9c8f2f10b102a59ea3c49b0a66584c358ce952d3d2d46e6722ec2acbd084be2ce582da87b565d7ba9dd86f0e1e5041abd24a8f6f4212d0ca62c6c5e1632bad3d67ee4bd24e377528e76151870959f1f6f0c5567763a1679f9046d53a3447b668bb1b36af5266ce1161696"}}}) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mprotect$auto(0x8000, 0x8, 0x8) wait4$auto(0x0, 0x0, 0x7, 0x0) r8 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(r8, 0x0, 0x80000001, 0x0) msgctl$auto_IPC_STAT(0x1ff, 0x2, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, 0x0, 0x24040080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x4008, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) setsockopt$auto(0x3, 0x10000000084, 0x80000010, 0x0, 0x8000) 2m40.347614031s ago: executing program 2 (id=2741): unshare$auto(0x40000080) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0xb, 0x940, 0x1ffde, 0x3, 0x1, 0x8000001, 0x9, 0x5, 0x2, 0x85b5, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0xfffffffffffffffc, 0x0, 0x100001ad, 0x0, 0x3, [0x0, 0x0, 0x2, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0xfc, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x8, 0x20000001, 0xfffffffffffffffa, 0x0, 0x7, 0x0, 0x0, 0x80800, 0x0, 0x8001, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000001]}, 0xffff, 0x7d) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000002, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = clone3$auto(&(0x7f0000000040)={0x43, 0x4, 0xa5e7, 0x10000, 0x1, 0x8000000000000000, 0x10, 0x5, 0xf, 0x1ff, 0x5185}, 0x1) prctl$auto(0x3e, 0x1, r2, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/mtdblock0/sched/read0_fifo_list\x00', 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) madvise$auto(0x0, 0xffffffffffff0805, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x400000, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x4b72, r5) madvise$auto(0x0, 0x2003f2, 0x15) 2m25.260472066s ago: executing program 32 (id=2741): unshare$auto(0x40000080) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0xb, 0x940, 0x1ffde, 0x3, 0x1, 0x8000001, 0x9, 0x5, 0x2, 0x85b5, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0xfffffffffffffffc, 0x0, 0x100001ad, 0x0, 0x3, [0x0, 0x0, 0x2, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0xfc, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x8, 0x20000001, 0xfffffffffffffffa, 0x0, 0x7, 0x0, 0x0, 0x80800, 0x0, 0x8001, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000001]}, 0xffff, 0x7d) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000002, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = clone3$auto(&(0x7f0000000040)={0x43, 0x4, 0xa5e7, 0x10000, 0x1, 0x8000000000000000, 0x10, 0x5, 0xf, 0x1ff, 0x5185}, 0x1) prctl$auto(0x3e, 0x1, r2, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/mtdblock0/sched/read0_fifo_list\x00', 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) madvise$auto(0x0, 0xffffffffffff0805, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x400000, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x4b72, r5) madvise$auto(0x0, 0x2003f2, 0x15) 2m19.871887266s ago: executing program 0 (id=2804): r0 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0xf, 0x800, 0x5) r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) r2 = syz_genetlink_get_family_id$auto_ioam6(0x0, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000010", @ANYRES16=r2, @ANYBLOB="09002cbd7000fbdbdf25020000000600010003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x808) ioctl$auto(r1, 0x400454d0, r1) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r4, 0x8, 0x7fe) ptrace$auto_PTRACE_DETACH(0x4212, r4, 0x8, 0xd) pread64$auto(0xffffffffffffffff, 0x0, 0xf42c, 0x400) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x54) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r2, @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x200040c0}, 0x20040894) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) waitid$auto(0x9, 0xffffffffffffffff, 0x0, 0x9, 0x0) r7 = socketcall$auto_SYS_GETSOCKOPT(0xf, &(0x7f00000000c0)=0x800) getsockopt$auto_SO_PEERGROUPS(r7, 0x14, 0x3b, &(0x7f0000000100)='/dev/mapper/control\x00', &(0x7f0000000140)=0x4) r8 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000580), 0x2802, 0x0) select$auto(0x3, &(0x7f0000000180)={[0x6, 0x100, 0x0, 0xc6, 0x3, 0x80, 0x1a, 0x6b9, 0x9, 0x4, 0x9, 0x8, 0xffffffff, 0xf00, 0x18fe, 0xe]}, &(0x7f00000002c0)={[0x80000001, 0x5, 0xc5c, 0x2, 0x3ff, 0x2, 0x55, 0x8001, 0x800, 0x7, 0x0, 0x2, 0x7, 0x5, 0x8, 0x5]}, &(0x7f0000000340)={[0x81, 0xa3d2, 0x401, 0x9, 0x4, 0x1, 0x6, 0x3, 0x9, 0x10000, 0x9, 0x5, 0x6, 0xc, 0x9]}, &(0x7f0000000200)={0x9, 0xbc8}) ioctl$auto__ctl_fops_dm_ioctl(r8, 0xfffffff7effffd0a, &(0x7f00000001c0)) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) setsockopt$auto(0x3, 0x7f, 0x7e, 0x0, 0x8) pkey_free$auto(0x20001) 2m19.210681995s ago: executing program 0 (id=2807): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) (async, rerun: 64) socket(0x22, 0x2, 0x24) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) (async, rerun: 64) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) (async, rerun: 64) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000001c0)={0x9, &(0x7f0000000000)={0x9d, 0xf2, 0x9}}) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x101000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000000c0)={"58f99464", 0x8, 0x6, 0x1, 0x3, 0x5, "4bb69ec4b3f4c14539898e4c5682f5", "347f00", "a630df9d", "a0ed9959", ["cd9196b8fe1a8a7eb90401a9", "2f9c30017721de33c560b95a", "d3fe6c55a78d6932211c9b69", "ea334f1f1e5e27a1320d6edb"]}) (async) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) prctl$auto(0x5, 0x10001, 0x0, 0x5, 0x7) getcpu$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000180)="6da6b940dfe114cacac8b7cca871a393aaf922f69708e077a3ff54d760f973198c7f36202c9afdaf7bc2eb57e0") (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket(0x10, 0x2, 0x0) (rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x20, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) (async) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf250300000004000800100003800c000a000700000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) (async) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14900000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) (rerun: 32) select$auto(0x4, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0xfffffffffffffff9, 0x9, 0x7ff, 0x3, 0x6, 0x2, 0x9, 0xffff, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0) 2m17.374277902s ago: executing program 0 (id=2811): r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) io_uring_setup$auto(0x401, 0x0) read$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) lseek$auto(0x3, 0xffffffffff800002, 0x10) write$auto_ftrace_subsystem_filter_fops_trace_events(r0, 0x0, 0x0) prctl$auto(0x9, 0x3, 0x0, 0x6, 0x100000001) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r2 = timerfd_create$auto(0x9, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fallocate$auto(r1, 0x1, 0x820, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4ea02, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)="fc5ea5f1401a03cd7d362456adda0cf384c0e2d7bd3d31e409957ab6bd240c4af9373f9691253b947acf08619bf87d27ebc9b1fff0ce71c342980e157ce4c431437e") mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x103742, 0x0) bpf$auto(0x5, &(0x7f0000000200)=@info={0xffffffffffffffff, 0x9, 0x8}, 0x1) unshare$auto(0x40000080) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) msync$auto(0x1ffff01f, 0x180000000000000, 0x400000004) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 2m17.333971112s ago: executing program 1 (id=2812): r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) io_uring_setup$auto(0x401, 0x0) read$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) lseek$auto(0x3, 0xffffffffff800002, 0x10) write$auto_ftrace_subsystem_filter_fops_trace_events(r0, 0x0, 0x0) prctl$auto(0x9, 0x3, 0x0, 0x6, 0x100000001) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r2 = timerfd_create$auto(0x9, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fallocate$auto(r1, 0x1, 0x820, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4ea02, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)="fc5ea5f1401a03cd7d362456adda0cf384c0e2d7bd3d31e409957ab6bd240c4af9373f9691253b947acf08619bf87d27ebc9b1fff0ce71c342980e157ce4c431437e") mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bpf$auto(0x5, &(0x7f0000000200)=@info={0xffffffffffffffff, 0x9, 0x8}, 0x1) unshare$auto(0x40000080) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) msync$auto(0x1ffff01f, 0x180000000000000, 0x400000004) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 2m15.70382591s ago: executing program 0 (id=2815): setitimer$auto(0x0, &(0x7f0000000080)={{0x2, 0x5}, {0x0, 0x8}}, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143262, 0x0) write$auto(r0, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x85) setitimer$auto(0x2, &(0x7f0000000000)={{0x8000, 0x6}, {0xa4b, 0x6}}, 0x0) io_setup$auto(0x10, &(0x7f0000000140)=0x8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/i8042/serio0/bind_mode\x00', 0xe3102, 0x0) r2 = socket(0xa, 0x5, 0x0) getsockopt$auto(r2, 0x84, 0x7f, &(0x7f0000000000)='\xc8\xfdV%\r\x80\\\xf7\\\x00', &(0x7f0000000040)=0x1004) sendfile$auto(r1, r1, 0x0, 0x3) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x3) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) ioctl$auto_TIOCGWINSZ2(r3, 0x5413, &(0x7f0000000200)) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, r4, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) 2m14.622537055s ago: executing program 0 (id=2819): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x100, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) connect$auto(0x3, 0x0, 0x81) pread64$auto(0xffffffffffffffff, 0x0, 0x400100000001, 0x1ff) io_uring_setup$auto(0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0xd) sysfs$auto(0x2, 0xd, 0x0) r3 = fsopen$auto(0x0, 0x1) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) sendmsg$auto_NL80211_CMD_DEL_PMKSA(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r4, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x9, 0x13, "a0b94a3dc0"}, @NL80211_ATTR_SAE_PASSWORD={0x63, 0x115, "1f701b0d136ea921a5613ebd58d8132caf6170c613fbb0a91ca1d58cb83405f3b0318f9f564524bb47139bb5e93794ae6ffa92ea86329104fce739adc0e4c249cf1665487e31802b61bbdfbebd55ba7df1e21e3d51428fe47808392c01a1dc"}]}, 0x88}, 0x1, 0x0, 0x0, 0x20044004}, 0x40010) fsconfig$auto(r3, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2ab42, 0x0) fsetxattr$auto(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) pread64$auto(r0, 0x0, 0xf429, 0xb) 2m14.563725067s ago: executing program 1 (id=2820): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r0 = signalfd$auto(0xffffffffffffffff, 0x0, 0x8) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001a40)=""/4100, 0x1004) timer_create$auto(0x3, 0x0, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{}, {0x0, 0x83}}, 0x0) (fail_nth: 2) 2m13.560241448s ago: executing program 0 (id=2823): r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) io_uring_setup$auto(0x401, 0x0) read$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) lseek$auto(0x3, 0xffffffffff800002, 0x10) write$auto_ftrace_subsystem_filter_fops_trace_events(r0, 0x0, 0x0) prctl$auto(0x9, 0x3, 0x0, 0x6, 0x100000001) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r2 = timerfd_create$auto(0x9, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fallocate$auto(r1, 0x1, 0x820, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4ea02, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)="fc5ea5f1401a03cd7d362456adda0cf384c0e2d7bd3d31e409957ab6bd240c4af9373f9691253b947acf08619bf87d27ebc9b1fff0ce71c342980e157ce4c431437e") mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x103742, 0x0) bpf$auto(0x5, &(0x7f0000000200)=@info={0xffffffffffffffff, 0x9, 0x8}, 0x1) unshare$auto(0x40000080) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) msync$auto(0x1ffff01f, 0x180000000000000, 0x400000004) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 2m12.671528646s ago: executing program 1 (id=2824): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm1c/sub5/info\x00', 0x18000, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x150, r1, 0x200, 0x5ff61ccb, 0x25dfdbff, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg1\x00'}, @NL80211_ATTR_MAC_ADDRS={0x120, 0xa6, 0x0, 0x1, [@nested={0x104, 0xdb, 0x0, 0x1, [@generic="d2cd5b57dbca36a1fc1548b6559dc831d8d5f28a16e4c5156fc4449f7030179ddd956d00a45ad62e74fe0495899d4115e1e4b001d8b53b7a832b307372a77e9743479a13770d63fb0975fa1f201fedac4baff180a5a58615e96bcfc6d4853f2d19ed11f9e68133f2240998e7601378ddfa1cc7d20dc724901a3eea0c68a00aeee91cb091a808d6c693c69016da7e58ee518b92c67b7b060931df7990f6e745d49773df328cce916b05691ee25f62f5981030dad340c7699ad349c69a176c94513326f470c8c0b0cfbcb972979a17b2d8b6c67f8087e44b62cd00c6586fb027a8", @nested={0x4, 0xa0}, @nested={0x4, 0x105}, @nested={0x4, 0x73}, @typed={0x11, 0xd, 0x0, 0x0, @str='Y/\'+$^\x02#\x87^}/\x00'}]}, @nested={0x18, 0x150, 0x0, 0x1, [@typed={0xc, 0x1c, 0x0, 0x0, @u64=0xb}, @typed={0x8, 0xbb, 0x0, 0x0, @str='\xbc+$\x00'}]}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x2}]}, 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x80) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/usbmon38\x00', 0x105000, 0x0) r2 = dup$auto(r0) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000340), 0xffffffffffffffff) waitid$auto_P_ALL(0x0, 0x4, &(0x7f0000000380)={@siginfo_0_0={0x4, 0x2, 0x75, @_kill={0x0, 0xee01}}}, 0xffffff01, &(0x7f0000000400)={{0x101, 0xffffffffffffffff}, {0xd, 0xfffffffffffffff9}, 0x7398, 0x1ff, 0x80000001, 0x3, 0xffffffffffffff33, 0x80, 0x2, 0x9, 0x6, 0xd7, 0xfffffffffffffff7, 0x2, 0x8, 0xfffffffeffffffff}) r5 = wait4$auto(0x0, &(0x7f00000004c0), 0x4, &(0x7f0000000500)={{0x7f, 0x6}, {0x5, 0x5}, 0x4, 0x5, 0xffffffffffffffff, 0x7128, 0x2, 0xa, 0x0, 0xfffffffffffffffc, 0xfff, 0x0, 0x6, 0xe, 0x7, 0x3}) msgctl$auto_MSG_INFO(0x69b4e490, 0xc, &(0x7f0000000640)={{0x6, 0x0, 0x0, 0x8000, 0xef1, 0x5, 0x9}, &(0x7f00000005c0)=0x6, &(0x7f0000000600)=0x9, 0x6, 0x4, 0x200, 0x3, 0x8, 0x3, 0x899, 0x8, @inferred=0xffffffffffffffff, @raw=0x401}) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r2, &(0x7f0000000c00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f00000006c0)={0x500, r3, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xab, 0x1, 0x0, 0x1, [@nested={0x24, 0x126, 0x0, 0x1, [@typed={0xc, 0x57, 0x0, 0x0, @u64=0xffff}, @typed={0x8, 0x9b, 0x0, 0x0, @pid=r4}, @typed={0x8, 0x92, 0x0, 0x0, @pid=r5}, @nested={0x4, 0xcc}]}, @generic="ad01c2b50379f54c606c6aa389d00476f7bb653394b3d1eb747db45fd773a9e2feeddd3fe52a9ecb03ec7d3f7f716d91fb5b9b8280eaf56689318221dbe40f016be770582182d826d5f08833bca111107ea2cfc0e1183f10399db092a89f99981721ee3cac88c1ba24f2b2a0dcc7bba54e081288623148af37692235ce2e040b478b3b"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x43e, 0x1, 0x0, 0x1, [@generic="3f0e9021f219e7b095a6f68cf8c8ac3183e844fb59d82dfcdeb1ec6b3fc90a8d41f9ece4ee0fc002a8b823865731236d60d14ebe6d6ed739cd95fb8e1b2fbf59df061447e8e0bc41c1af147137025b86e16481f11cd7c0b2ec0615f4bb7da194713cc1add09ebbcfdccdd6caa30e8b2ebb392e839ce145ff9277b141b29318a02ab22db3477c77eb140eceac3b2ef2b42505f39dc2b6d45b4ca08ad25a62044086a9110c4135e341dd1d653fd1f6e419ee6d053b026dee3867234256430ecb5eda8f962977f0d8254f35014ef35d5286e86e72e8febaf9c4ebf7b6dae40ed1f5a2b4a65224a85640c06bc765053262537f8d38f07dd86bdd6b", @typed={0x8, 0xd5, 0x0, 0x0, @u32=0x800}, @generic="ce18905fc0f7e31bd050bf44afce08d0b77b94b0844766022717693303264e672d6606edb82fae652c7da9291e5c7a076eb3634c0129bf623eac9aa17ec0fcc6cf7758d455125c84fe56f788e4c9fb0245ddc0740c9218f82a4752da238a19d9db", @typed={0x8, 0xdb, 0x0, 0x0, @uid=r6}, @nested={0x1fe, 0x21, 0x0, 0x1, [@generic="26ea0a9268f1afa1d3f1fac9ecd974ed5d564d0a5e636b2a90820ba5c938a5104949c2564e52564b4c01d10762bda011a05ceede416d670e3c4f1ddf7e24155416bcc4e07259df07e2b573d5fd6e3f060b5a670bb27190e9317b053406ed7952e079068a0ddec8b766657705766caeec9e7f70c1c4ae7761a8b807ecf126262504c78ecae2e46913748f80f1e309f419faf180019568", @nested={0x4, 0x111}, @nested={0x4, 0x7}, @generic="5230d3e4073c46f7db052f632c3c00fa777fa13da37cea669b5b58cb406468b39675e63894da240874725415c33cdc02e2c2e557d6fad1caf0ef94b984964e64c79cf775677ca015edfa0356369fb4156bcde271230453a24adbdd229fbf355362b38c29dc884d0b9e0fd92dfc36da11db119fac911829c145b926ab8395a25ef4464a97b6b3a0d83fbabee9d0c25b818c085737d2ed13630ac2e3a24287d565d6c0dd21ca13d4ad5f941aa5f1ad684bab5daf2f", @typed={0x6d, 0x6, 0x0, 0x0, @binary="bf15403c10f26859256e28775d4993d6c62bf39b6c8740793f4328e5ef1e0a14088f5a282a15f6f749ea57cba43de51e61b21d38566c886f48cb5a30a475ceb1ed094ddf8e8e7fde2265703305923ce852143d36f9cfe74d19066be798475b578452d59a09ba177f4e"}, @typed={0x38, 0x15c, 0x0, 0x0, @binary="a9ce6f217727ac35cf14980cb660a518f8beeb61f0af19f626ce233a6d3060d77541c25f0b68967e2a2ca2b4b6e1baf62f723868"}]}, @nested={0xd0, 0x155, 0x0, 0x1, [@generic="ff862545f2360665bbde66284af54081fc493087bc719846167b96e8f82da7c98ae188d92bd1f98634b0452f20206df3540d6b8cc0ca708abcc37681508ee492ca2255a901abba8efb60e4b6aff17aa28f0fcf5e8aff6640bbaf70bb294965ab5076d8cc4f894ac9aee04e807803ce9d2f295da616ed0b8850d750cd0c3f793b545d67bd789f621ef90032fcd536d97cbc2b3feac6e5199b5ea7d9cbd5ab0a09a9973eb3bca6bb9396c57bae23ee8438827ea9569d29d39dfbe862da99b6500f1d25efa4", @nested={0x4, 0xda}, @nested={0x4, 0xf2}]}]}]}, 0x500}, 0x1, 0x0, 0x0, 0x20000005}, 0x40004) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000c80), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000cc0)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000d00)={'nr0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000d40)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r2, &(0x7f0000000e80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0xac, r7, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @ETHTOOL_A_RINGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xfffffffd}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x800}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_RINGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x48804}, 0x0) io_setup$auto(0x2, &(0x7f0000000ec0)=0x7) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000f00), 0x1, 0x0) io_setup$auto(0x5, &(0x7f0000000f40)) ioctl$auto_XFS_IOC_FSGEOMETRY_V1(r2, 0x80705864, &(0x7f0000000f80)={0xb, 0xd, 0x4, 0x1, 0x4, 0x9, 0x7, 0x6, 0x81, 0x19f4e6ec, 0x1, 0x8, "dc70597575c1884267cc95777ce85821", 0x4, 0x6, 0x2b, 0x1, 0x4, 0x3, 0x3}) r11 = timerfd_create$auto_CLOCK_REALTIME(0x0, 0x400) mq_timedsend$auto(r11, &(0x7f0000001000)='[\x00', 0x0, 0x7, &(0x7f0000001040)={0x2, 0xce}) r12 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001080), 0x4000, 0x0) r13 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001100), r11) sendmsg$auto_TIPC_NL_NET_GET(r2, &(0x7f0000002b00)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002ac0)={&(0x7f0000001140)={0x197c, r13, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x12e4, 0x7, 0x0, 0x1, [@typed={0x4, 0x69}, @typed={0xc, 0x2a, 0x0, 0x0, @u64=0x1}, @generic="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", @nested={0x9d, 0x54, 0x0, 0x1, [@generic="80d34d7266e31f2206b7814063210547c972d66f5949affb48573c6f265a6c25817e3a8e16eed2e776cfd39f49ac113a5d00fb247620f5186c4cddc8f9993ef139e04eb30e9e2d009720fa04c0078fc145f10f4956228dc09b339294f8", @nested={0x4, 0x134}, @typed={0x35, 0xdb, 0x0, 0x0, @binary="a101b8a11c3689ae85f26dc867e00b1f4f5ab85dd1835ecae84317801a808e6ab06899be9b2e917575e57a740dab684a64"}]}, @generic="6fdb4f49f55bcc8df80d7bc83eed96e3c30077157f31ca156d44822096167acfc11a5aad7db151efe8db3a1001804e3be62d8670c26bfbef9409f3459ca5a44ede31033bbfc548791799a42f0f6d12f5b834ecf74e23d8ff773bf711ec6358b1e10f74c4b89e432e27367bc2c298cb1d64a1686e89ee57a4dca37159e9a8645325b47518f6ebad09ffc79b56", @generic, @generic="148ce600522715f2b46c7593627e7130e5cac96dbc0f05c029467ec990590fbd9a391cd46c7fc395043b0a8f11f167cef03ad7e55223941d9fe088e5cf9e2270518f247f29d8beaf701fb27144ea53a055def3f1eddf8b355913dfa7b8a5b9a170c3f0694b1c961643cb55581575d72e78e5b7e0cd7dc58e843dbfc71bcc1bea78e03d8f3bb840f9a99bfcff66b4e3921ca4932b20fbde0ae17c94fafc3f62c3212c5681e489e5214acf6df2d9aa8077c3526f8738f9eae8c2b25fa813dd181dad9aa06d87df28fb7c061a25c2a31ac7deb71bedf59a1c68", @nested={0xca, 0x10d, 0x0, 0x1, [@nested={0x4, 0x105}, @generic="8f8d4c037e00f80a99f46512402ec24497047432ff6ab564e8fd0de1593df93ca936e05987e458adfe34098b6245f0eb8c7dcfb1b918", @typed={0x14, 0x90, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @typed={0x8, 0xcc, 0x0, 0x0, @fd=r11}, @typed={0x6f, 0x127, 0x0, 0x0, @binary="de2844da352ca6ff8c0d8bcd790ee367bf347be662d33ac06eaa57b2775ee951e0f5d4599df6b8b7dd8ef1e66324980d36ff9a5f8c11df90f45a5c30334a82f2d37d4b7328c4e385d859af8e40477c3e13bf7d44af9606e97d48804fdb45e3d8541f8d232b9cd39ff3d19e"}]}]}, @TIPC_NLA_SOCK={0x444, 0x2, 0x0, 0x1, [@generic="eca3c4baf4b00985a392dc5ee8e50263de9f88ba08af4dd58c093ad973b4561f2afd520cdd55c51dbd13bcc5eafce79fa2e7aaafe6d21123c808b0f1c5b22f7c81a23df1c750eff4de23d8a8aabd5824392b1b77c59da2cc9cf2936a575c69fbd6aaea897993dd9153c7c510fb68310959a119c605dbccdb20d3a5475a226ffb", @generic="c3ed1d695953c4eab451dd700c3c8242915060f9dd0f0e0fa4a3e8b6054c36d24b429e3d777cceb403363fba8403af92bc066fdbb8afe60f318249dc4bfb2ed16e48f33730a6512a840b3ab74ea3cb7ce3a48f6c4573d32a6619b1c2100eb2c36ee7ff21f7b42f413519e22380948b4ca5345b59af839873da0b6951658156dc1aad2c7c516d3148a43130253b7a953fc1ba5a65ec18c036708909e1e06ec01b1cb404eeb098ae35915a573e3c4074cdc0ffb700459481652c4d22f5d287659a0a58f9b0294076a2505f4c915778fda95717", @nested={0x35, 0x5c, 0x0, 0x1, [@nested={0x4, 0x45}, @nested={0x4, 0x114}, @nested={0x4, 0x7d}, @generic="6e6be147894a72d15052d20ffdbf0a6d09eaea0fbd29c6a039ad4bcf0dffdba416c7e48882"]}, @generic="28df7788e52d14179a0a6f509bce02dcc58f63f5e943e10c0a36bcdb3845ff5585987e8bd1c78f9c8596766fe68e74a3b5cd02848525c0887a5e106e958a4e08560c193dcf9cdb2cd1524fbf56739b91146fd950cdd74603ab8e853b4f84dc356a93c347e05667b900b3ba637cebccbd5983c2258098aac88a43ac2de2388be9fa530ee23a8ffc016298f317ae2ddc5dcc9844d586bc8f5013a3d70c1fd3b7ad0100ed15c670e24aabba8d7c6991a81897bd5acd7dfb3db89d07200f979c991bc3d99703361315", @typed={0x4, 0xab}, @generic="e546d9cde17d9b1c2fc2efa4a40d191bc8199a6d3bd9004497c12c3c8c1046dcb260ad1ea5c31255f68c652314cf313eaa2624098968402b1f8449725f90179e912de700a3629413d72dc16c4e8a5da711e60397fb0cea46b0a7087a946399538aa200cfc3ab7829f5923d0fc0076851d9db57ed7da49af2ac3fc21e8a066f266e708fc73b25289ec854295d547d6a02091a6a3eea36940eb8b36f0e420e28d601f3eaeb0acd1551c9943a11c94b158d6d19b0f2a1b562f202ac161ff0ed536be962baebccde6e1277afbcc469120934856efd878fb74692b86b5252971d4dfdf7d836dee99ad94c4ac8e39647133b", @nested={0xfa, 0xf5, 0x0, 0x1, [@nested={0x4, 0x5b}, @nested={0x4, 0x52}, @generic="9d471e6162e2c76a52b8c12c0aa72473c1cac4adb17b51a3e45383b48ab99df43c54b7db629e05ea96e3d9b072ed813483377562811c37fcae2f77b0419809b1415151defaa85a1bdc2fe7dbba6ca5315b59d4e74edefa436fb275837e4da910b369a10970f64736f46de12587ecf0d315c8ce9a3e6bc2d224c8a84b9e1e0931dec12a953e01ed2e2b4913a135897438c5f6a283ea8b19a6373e41d6d1abae6d7863d1797e70cb1ecc19c03689d38fec7d87457defbeb8fe1ce9e5bccc1a24bd3821115e6770838150008a9caf15b4c30baa4c0b6cedb0267bb232a9ffd64db0b23bb2cab65833d00ded632ef1dc"]}]}, @TIPC_NLA_LINK={0xb7, 0x4, 0x0, 0x1, [@generic="aff5076ef891cabf419b2123a95dbe6f5371207d9b0cf3c5a966f1190fe4c857677f320f5452de013e335556ca130ffeb1d17ff14256a5144bec54747d62df82991aedc58912807732d4d0f75244e3235c04a23f307d508b0e32cf7916d71d0b81d4f4f5d634bfcbc994aee89276bc70ab3f86ca5bff09bdd20f651bc6edd39b1882b156c69617f71f5137da6a8a461b972738633caf3619df648d2951d81aef98989dfedd9a5a3b5df1af6e303bc0aeb2d2a4"]}, @TIPC_NLA_PUBL={0x187, 0x3, 0x0, 0x1, [@generic="f1a8655d5cdbdac89edbad6a436b05e917e26bf8c13a73eb2bf388954c005d36860538d7abae540706b21fcf2d4994829f7ba664968af541d2d5d8419a9d457fe00722c80b1eb7af437f4adef112c505a8a6447b74d3a0e25ad9e1f485aa0d798f36200c7a34bd8429b2207af04c381e38abc8501aaaff9c800c4c2a", @nested={0xfc, 0x151, 0x0, 0x1, [@generic="e5baefb54e12227444287f223099f90b111cf7563c6e6b7920611c7dc2ce874a4f9b8f1e1a97a97095b241802ad6cdaede9b1949f6898f77462a39365a0ff460c93f684f3c5e75ad710421b183b775c8f49fd8fa1a4e6d81d25412663975934769d06deef1886abe5f36846db549d673530aa40ef6b310453f8d6874ab73243551f21835e9ba0f52967338de5aca3e0062b48faec23212064455d9b48fc06a86120a3424675677959c3773336320be4f8a907aebe4c5d0cd7e0eb921dea2d760c6ec804351a56c17c4f0ab26eee1cb554083d36bc866378fb5c361a560645a8f6dfc7f961a15960974ea13b7710c04d06d9ade762b243c58"]}, @generic="4d54fe", @typed={0x6, 0x157, 0x0, 0x0, @str='[\x00'}]}]}, 0x197c}, 0x1, 0x0, 0x0, 0x2000c815}, 0x80) r14 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000002b40), 0x200, 0x0) read$auto_cpu_latency_qos_fops_qos(r14, &(0x7f0000002b80)=""/224, 0xe0) setsockopt$auto(r12, 0x1, 0x200, &(0x7f0000002c80)='/dev/kvm\x00', 0x1ff) setsockopt$auto_SO_MAX_PACING_RATE(r14, 0x7, 0x2f, &(0x7f0000002cc0)='\x00', 0x6) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x30, r1, 0x9, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, 0x1ff}, @NL80211_ATTR_STA_WME={0x14, 0x81, 0x0, 0x1, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xfa}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000) ioctl$auto_SNDRV_PCM_IOCTL_STATUS_EXT642(r11, 0xc0984124, &(0x7f0000002e00)={0x4, "f88e26d4", 0x4, 0x7, 0xca, 0x6, 0x24000000000000, 0x4732, 0x9, 0xd8, 0xde, 0x4, 0x5, 0xe, 0x2, 0x100, 0xfffffffffffffffd, 0x0, 0x7, "2d29e27f86d4eec7ddc643a096a25ac412e0c9d0"}) 2m12.136322333s ago: executing program 1 (id=2826): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00032c322a4946201ea1315369025caa8abd700000b17d2756451ea4b1134db114354733d4eff800"], 0x1c}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, 0x0, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x7, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x4, 0x8000) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x3, 0x14, 0xffffffffffffffff, 0x8000) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy9/netdev:wlan1/stations/08:02:11:00:00:00/flags\x00', 0x301483, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) sendmsg$auto_NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="10002bbd7000ffdbdf252800000004004a010500180107000000"], 0x20}, 0x1, 0x0, 0x0, 0x4004084}, 0x4000840) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0xca, &(0x7f00000001c0)='\x04\x13\xac\x04\x00\x00\x00\x00\x00\x00\x00\x01\n\xdc\x10\x00\x00\xef\xab\xe1ME:\xab \x87|\xe0Z\x1b\x9eZ\xa8\xff\x92+\xc9\x9fs\xbf\xd8\f\x00\x00\x00\xa5V\b\xf1Ne\xc6l\xd0\xdd7\x96gf\xb2\xa0\xf2cN\x8b\x95\xeb\xf3(\x9eM-\xdc\x84N\xc3\tts%\xe9\xbf<\xf1\xdav\xe0n\x04\xb33\x97\xd5\xb4\x02\x94B\xbb\x995\x1e\xf7@\xd8\xca\x8d\a0 \xfa\x87V\xeb1\xe4M%\xdd\xfd\xf6\x8d\xb4\xc7\x9b\x9d\xf5\xd9^\xcdL@\x0f\xd4\x15F,\xc1\xd1i\xa4f/{\xfa\xd5\n\xe1\x95l[\x91\xbfX\xea2\x1b\x8a\x85\t\x00\x05m\x1e\x9b\xca\xfb\x81\x9d{\x19S\xff\xe4\xd2k\x1b/wJ&\x03+{\x84R\xa8\x92\xad\xec\x1b\xb1\xe9\xa7XUo\x93\xd5\xfb\x94\xc4\xdf\x8e\xdd\x97\xfc\x00\x13\xd6\x80g\x7fR;\x88\xf7bm\x8f\xb5\x89\x1a\xb63\x98\xaa\xcc\xbf\x94\xbf#u\xb9', 0x2b) mmap$auto(0x0, 0x20008, 0x8, 0xeb1, r2, 0x6) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="b044cb5ef58981", @ANYRES16=r1, @ANYBLOB="014a9ebd7000fdcbdf2507dcaf3976000000000000009df520fd274910"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m11.140931905s ago: executing program 1 (id=2831): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r1) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="000426bd7000fedbdf250200000008002700040000000a001800aa0000aa"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram0\x00', 0x67f00, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xa40, 0x0) socket(0x2a, 0x2, 0x1) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="010326bd7000fedb0600080000000400048018a9c058ba09e19a6d161f409fb4b1cefa6d26eab5fe0a4437c1"], 0x18}, 0x1, 0x0, 0x0, 0x24000055}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) 2m10.619693081s ago: executing program 1 (id=2833): unshare$auto(0x40000080) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0xb, 0x940, 0x1ffde, 0x3, 0x1, 0x8000001, 0x9, 0x5, 0x2, 0x85b5, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0xfffffffffffffffc, 0x0, 0x100001ad, 0x0, 0x3, [0x0, 0x0, 0x2, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0xfc, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x8, 0x20000001, 0xfffffffffffffffa, 0x0, 0x7, 0x0, 0x0, 0x80800, 0x0, 0x8001, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000001]}, 0xffff, 0x7d) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000002, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = clone3$auto(&(0x7f0000000040)={0x43, 0x4, 0xa5e7, 0x10000, 0x1, 0x8000000000000000, 0x10, 0x5, 0xf, 0x1ff, 0x5185}, 0x1) prctl$auto(0x3e, 0x1, r2, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/mtdblock0/sched/read0_fifo_list\x00', 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) madvise$auto(0x0, 0xffffffffffff0805, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x400000, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x4b72, r5) madvise$auto(0x0, 0x2003f2, 0x15) 1m58.153861864s ago: executing program 33 (id=2823): r0 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x2, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) io_uring_setup$auto(0x401, 0x0) read$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) lseek$auto(0x3, 0xffffffffff800002, 0x10) write$auto_ftrace_subsystem_filter_fops_trace_events(r0, 0x0, 0x0) prctl$auto(0x9, 0x3, 0x0, 0x6, 0x100000001) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r2 = timerfd_create$auto(0x9, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fallocate$auto(r1, 0x1, 0x820, 0x7fff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4ea02, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000180)="fc5ea5f1401a03cd7d362456adda0cf384c0e2d7bd3d31e409957ab6bd240c4af9373f9691253b947acf08619bf87d27ebc9b1fff0ce71c342980e157ce4c431437e") mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x103742, 0x0) bpf$auto(0x5, &(0x7f0000000200)=@info={0xffffffffffffffff, 0x9, 0x8}, 0x1) unshare$auto(0x40000080) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$auto(0x23, 0x8, 0x2008, 0x0, 0x0) process_vm_writev$auto(0x1, &(0x7f0000002980)={0x0, 0x4}, 0x3, &(0x7f0000002a40)={0x0, 0x7}, 0x4, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) msync$auto(0x1ffff01f, 0x180000000000000, 0x400000004) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 1m55.594862735s ago: executing program 34 (id=2833): unshare$auto(0x40000080) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0xb, 0x940, 0x1ffde, 0x3, 0x1, 0x8000001, 0x9, 0x5, 0x2, 0x85b5, 0xb0, 0x7, 0x200, 0x3, 0x205, 0x7, 0x0, 0x3ffff, 0x0, 0x3, 0x7069, 0x0, 0xfffffffffffffffc, 0x0, 0x100001ad, 0x0, 0x3, [0x0, 0x0, 0x2, 0x8, 0x5, 0x8000004, 0x0, 0x100000000000000, 0xfffffffffffffffb, 0x0, 0x0, 0xfc, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x8, 0x20000001, 0xfffffffffffffffa, 0x0, 0x7, 0x0, 0x0, 0x80800, 0x0, 0x8001, 0x0, 0x8000000000000001, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2000000000000001]}, 0xffff, 0x7d) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000002, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = clone3$auto(&(0x7f0000000040)={0x43, 0x4, 0xa5e7, 0x10000, 0x1, 0x8000000000000000, 0x10, 0x5, 0xf, 0x1ff, 0x5185}, 0x1) prctl$auto(0x3e, 0x1, r2, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x123002, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000000)) mmap$auto(0x0, 0x2020009, 0x3, 0xebf, 0xfffffffffffffffa, 0x80000001) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/block/mtdblock0/sched/read0_fifo_list\x00', 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) madvise$auto(0x0, 0xffffffffffff0805, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x400000, 0x0) r5 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r4, 0x4b72, r5) madvise$auto(0x0, 0x2003f2, 0x15) 1m50.815311793s ago: executing program 4 (id=2898): mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x41400, 0x31) listxattrat$auto(r0, &(0x7f0000000000)='./file0\x00', 0x6afe780d, &(0x7f0000000080)=')&\')\x00', 0x2b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptya6\x00', 0x40001, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r2, 0x80045439, 0x0) ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000280), 0xffffffffffffffff) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) (fail_nth: 5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0x800df, 0x9b72, 0xfffffffffffffffe, 0x8000) r3 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) write$auto(r3, 0x0, 0xfffffdef) fcntl$auto_F_ADD_SEALS(r3, 0x409, 0x0) 1m50.323100075s ago: executing program 4 (id=2899): memfd_secret$auto(0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket(0x1a, 0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x448000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x2}, 0x0, 0xf4240, 0x1) socket(0x1d, 0x1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) bpf$auto(0x9, &(0x7f0000000000)=@link_update={r0, @new_prog_fd=0x4, 0x401}, 0xa3) mlockall$auto(0x800000000000005) madvise$auto(0x500, 0x200007, 0x19) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="4c91f2c388274610e12c861bb2bfd9800e9b394b", 0x14) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) 1m49.710788416s ago: executing program 4 (id=2901): mmap$auto(0x0, 0x200009, 0x2, 0x48eb1, 0xffffffffffffffff, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram8/events_poll_msecs\x00', 0x80302, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_VENDOR(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)=ANY=[@ANYBLOB="14000037", @ANYRES16=r2, @ANYBLOB="050727bd7000fbdbdf2567000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) msgctl$auto_IPC_SET(0x4, 0x1, &(0x7f00000002c0)={{0x4, 0xee00, 0x0, 0x2528, 0x100, 0x9, 0x5}, &(0x7f0000000240)=0x5, &(0x7f0000000280)=0x15, 0x5, 0x4, 0x6, 0x4, 0x2, 0x0, 0x5, 0x9e, @inferred, @raw=0x9}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x2001, 0x8) r5 = getegid() r6 = openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080), 0x270043, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x405, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x1ac}}, 0x801) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fedbdf2503000000040008000c00018008001000040010"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(r0, 0x9, r6) setregid$auto(r5, r5) r8 = clone$auto(0xc9, 0x8, 0x0, 0x0, 0x4) setpriority$auto_PRIO_PGRP(0x1, r8, 0x1) statx$auto(r4, &(0x7f0000001100)='./file0\x00', 0x0, 0x10001, &(0x7f0000001140)={0x3, 0x6, 0x9, 0x8, 0x0, r5, 0x5, 0x1, 0x3, 0xffff, 0xb, 0xb6, {0x10, 0xfffffffa}, {0x1, 0x2}, {0x5, 0x8001}, {0x8, 0x101}, 0x7e05b10d, 0x7, 0x7b6, 0x1, 0xb, 0x7, 0xa, 0x2, 0x5, 0x3, 0x3, 0x1c5, [0x3ff, 0x2, 0x80000001, 0x8, 0x96, 0x0, 0x20, 0x0, 0xffffffffffff0000]}) lchown$auto(&(0x7f0000000200)='./file0\x00', r3, r5) sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f0000000180)={&(0x7f00000017c0)={0x11b0, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x8}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xff}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x3376}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x5a}, @NL80211_ATTR_WIPHY_NAME={0xc, 0x2, 'nl80211\x00'}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xeb3, 0x75, 0x0, 0x1, [@typed={0x21, 0x90, 0x0, 0x0, @binary="d9f4c4edd223847bfa4eb63882f2cfc8f4588cb396390494b61aae7937"}, @generic="50ebb6129b035b2889afc53e34f0a41d5d4b46d2abd7422ec4db2ee26f12510cca7b470584e0307eef891f3458ef00f147e51ef2ddfc81a4cdf648009c93cc3be2337a517866831071654dd081bb1b4d65a72cba7d6ba3a5c41a75cc2fba16c5d6790c430704594f9ea8fc3e199ceef83ae22e4b0e139e54d32c560bf1c4df56a211e652d5cd2e46f653d2d05356de6296225df1b862c77ab4c605cbe7ffff0000b857520e8c1309297c7a2e54a7000000000000000000", @generic="1bb8cb765ee74659e05bd6ce8f192dca825e2daabef12094913b201b6f6e9d49744c4344b4b01e748706c250b01ac9b00459d05b681a4947bf274dc05030905fa653eccf5dc933f4c35369ee68ac70e92291768f0f976d2a0b3be3df9e9bc6a57bb8fe7d2ea6f3826b19667e2ff216dbee3ba2a3b9d3ced016e4aee9e04104fcff6319aff79eae", @generic="dc617aad916e158cf4a17dbcfc17167d0c603c132eedde9c239928f4542d569a40a5b4b0851aa866f79ab86d98fea513161e700728d183960395d82dc42f2944713b178c41773cbae9686537284983a12ee5b1764bb8a07596297d0e94e44980ccffeb8ebdbdabcfff8afe1716a41db8ed1701a78de935bfda42160fb79fb8e02c33aeac08de2482eccf47ab0c1b9565720f1ac970a66cff501d9a6cb46164308ff524f72863515dda0320162718df5bc4c5ee37f765d8d29a854fb98133af7d6c774beb4184e368cdcf2fc54af6497cc4d0e1eca43d6fc257996504d9b61c963149a2fdb082668cb67df8fda09f2da4cbc087d8005fbcbe5b80cf050e13fea84c713c9fac97c64f6d773a4b31a198539015fe9c0fd8546fcf3ea3b83d36eecb4fcc22c132ab86f0bfdae3a1dcbaabf7600f7e89cf2130f03a538515566b867d921641b9c8597a53dd55990841039bfa2f364b8cdf6901fe19b1b0d1ad4de0ea28b0ceabd2168c1b2c14fda33e8996dcdaf8a6e15c92f60ae809aca5b11a298d2bc1b37bdb1a09e5cd7d65d42209dc5dc1a9f24d90a512b2f1701904d4378e25b17ae4133cce5c5358eb881bc4db5883f3baacbe599af2fc7504ed71059a974bdf86c88af76f4ef6137204b0299cd50a2e2daf5d2eb22de8c926511ca063eede0e7f937c38f8519dc456e19d631924478c595e914eb93be59d81f2e846635b8915de61e90dac91ac688291fe59349ce188fbad8e480ad5ec4ab466f78bd79f70e6fc5df36103047ecfa1b359fb4f6c68ba01b25775de3a959ba853d6468358fce35b24dcd91a92737371dfece054ed0586078af1d5109550d8e9dcee8bdff0785baae4dcfbf5f5f6a0966dade8c4cbec4a65c3fc98b1b2afb5550952d19523d7828ea92bfc05f8eda5a17644a3562e40ac9bc8db4c5fb00c7ba6ab2a034b4e4d99d93533c4cc5ffc1a57a7414d57d8bd0a63f12fccdd43f27dd5fa1d000d5b2583df486a7b046af187731b041622528462e02e56732d2e29382a82bb50e27d013edddab83b52341ab710d15d3736c860ee29490323a4f8a1bb5fc295ffc749b33db05086f49f1615e9be981a0025be204e0316594ee67f2b32b83c123108b10858d3e7ee132c72a3bc797ab1eed5536441c8e90130d1c65b1834a68c1017e59eb25dfe62dadb6af01394a6f475732824bd6b34253c96d8eef34376edffdefc3976c3a736899b6003c812350d8f2333818e5a46f4b45064c534434fabe4d78f1ab96d26f6a81fa2728998f6e50d7c8c83e60017784d2cf533412ab6ccb02ad3c057ed559134c6b28d6114aeec2d9f457d84e466159dc6ca78adcb28558f2d42006dd90ec44559f870077b7938a696ea361d2ac1a5fc720f53fa3318cc1e40b07d45155b09707c12fba69dfea4c52c403fab302b6a5d4e05268ad014a694c65b7adbd23d85d27ff8518d437a8770584a3d6ee96faa21e69c8c1ad62f9db497719ea7178d0dc99ddc939e366965af0613e036083115a041143bc90d951a15dcb462e3d44421fa816e8ab2f9d209a6345f71f710ee4d1c15c10872057ced57d0fc3e021f5442d1cd4241708441cf219cc084352451ef405e88aab82f09c0e52f941a7eeb4da7f8b8cf3467e79d4afb503f4a1c6bc49bd4e3b43d1bdd6f3c6965796fde0bddf193e0a069a4201697209d305ac8e1df2aa2ca178a763e0239cc1e17a12769c1620a93bd6b0e1a7911195a1a8c6631d5a775f809adc611cd4acdc96e6cc4c656bdabf560b5f47178bc224c805c190df1a86820888ea151c802ef137ad918e164ef36bc4a207d321262fe6d8366decd010a631672752687617a94cc7dcd1db754eaaf8bd824ff35db45c0061cd37ed56d003af8c614bd20f2b9472c0851bd10c06d68d55bcb4c9a6bcd50dd3da28c2dd868c5f32229e9758fd2d0f0e89c224896e3ec322baac60b1f7d1316f04b411879a32851f974f9ac9772d8d3a418581c12641bb301442332e1f8963893d5e267ed7e79be14e7690d74ad62e0eef1a71ace9e773fd3c8d1c2d1e4af928937da133019876bcf94ac1a0d16761dd6a71d701868c602cddf9cac4c925dff9fa6fc6e5e75b26f58f1ae5dc65de8a875d3fa8c277ec6176b9346bcf6dac75a4d556ddc3fa3eaa128a1dfab3d28e6f60dd84a6e9f266f1baeeaa2503ef5a13590ffbe7ff601b60135f7eca688a28f406ef03fed9147635b877af0a0c007117f029bf7df5c505dbedfd2571701fa85718461e9dadedd7d4df46cb2bcc5b7e5876bb382e87b1dbc6efbe69c61410094ac581974c9b3aae7bd44b06d64fcff2a1a2d568691f3b8ca89be4581f6a9d31584b49762cf26424004e498ab62124678ebb3db208932b3a530eecb52b94cf6d44a9a77aa2788e8ffe749c7e13c161ae1c152e6019668eab4384746ce4eaf29b5acd08c562f5502e6c9ad3f19edea2fb236a10ccb6f6059c74eac850fa66d31c1f21a1e924a15562e81a4bfd94ba8c1ae27f2913fbe28fc617b558670b6f9604041c92b604acdd3848b0acdc1f6425ec51750d6b92a9941f086a52528a58a0a13b9d7b8697fe10194736c431265b7a1fcaacdd421159407406d094d8bbeea8ed080ebc7624d9c0846bd73d344cfd4244606cd9d6edb8347fe06db96be7abeb5ca60618494e6d8b2d9068e7918aec33f6d171337e676d416c15a336b38cedf91cca8e84b0dda7ca244a2adbe7a5c3c69da3158336dd0d0613b0619a1b99d1c5a72803c71ece0f69a8801fb3b65be869dd411ec26a4828f4edb2211333c700ee60ac95e742f9879551ddfe30e51edccc23fa6f711a5d0d27d53e03ea6ecb05fc202574ff928ded37c0cc993cfb8f09e036955c7fc857fc88f1543690dcc4df90aa29c199aac0d5d9f3b35432748419aa9f2c978a43f9163543e531fb6e7cf0db97c9cbe6e47d1935f43bd6642d17538e70ab35fd426c7f49470ed651ba1d9c2a04a727ec76148935a1eab0050098298b2e81ed559a3a2f187a96e5e537f82f8ba1b54de180c0d01f262acf17ee6fd7060ea5b5f1f038be78fb40ffe7a1fa050537fdc07522478bd377248d4230bf8d5f010ce43e02a6a2bd960237505d67c56c2db5f93420e4cae4daf2f73cc5e7e5501e2de34bf5a67feb20884e7989ca6be1a4a2c2a60f0572d770b20d27e98386f39013820e505225144dedc246404fbc1e247f43e5ae0cb1312823778ea09fff6d8aeb6326f835a9279acfb94e68805e6724d03cc72240e67c7775f0a4a4ae368daccf4831b3115f712d8837b1175f86a5055c256cfd394944a1eeb9338a4d2fec0ef1da88adda72a5aaeef4375e83ea6f9d924d2f11e3c1e231514ad3e67499b71c83d04bd868944f4d67331700603e2d9f3b24936a370757612b33b204ac1e1bdd26b2b9842a54ff17908d21a2470078419c214c89fe58c7c03215211e0d7424dfd4db02968b980fea57b955fe1f687a670fc96a62ec7727196d4f7b9d5aaa19dc8a8fd021d9193ac548ac531461c3320614362c9a5331ad7b997feff4760e62c325d6411d7c46deed13e8b0a4d77c93ce1ea842dbf81c495e68c9a9fc040659c13a027ab2ab12d4e189bd9328825596859eb281e507af51a7aa836faa50fa2ba84392a70f4b45c43e9889246ba58ca73a42a68b2b4ab6a15f1bc91cdff42baaaf64dd3fb9fa511e82a5c9280e8049400173e17d168b124372442bffb6586410f4ea1215771e6cc34667f227a8c60533d0ee1d8b1cbe4298029199a7ab2a1acd4a26c5789c806c5b4ca326a23ef577b5d5a90da726ad60592afdf4aa38f5c58123879963b909479fd6a693cf4eba3788cc07c141172fc139faaa5cc9fe17aa870c446553949204f1ce0f528763bcd65bcf2a7c109101e84f6594509ac2eb77c1e7cc16366548dc2cee6b8111ea098b365083ab0888a95fcdf37a56297032367da0b24caae98eb5a25b85b91711c170240fba7e236f7d8ffdc7e8b6738b0dd273c478daa82864e2dfe9f6240d3a1632aede7af9a1ac7212b6863bc072a7f2a91ccacc4106dd505ef48f1162095c8c124029e35a7b4c7b3b89420a3469b7fdedc43b74aae9b2cfa2bd032b82847014cf98f131a134566d9ae439371c96c5df53a203191fd09c6c2f60103a52b10721df20296f93b2b1d5c50e3a05d6a0ef6ed186a7b031bb71a9530b381f25532e2355631360a6bb578aeb78f1217a8a33d861440cac5399b9ab7f0ea12dc16d3a3c4539b220e7cf8aabf9662cf1c1573381c8b37281d3f04af5f0ffdff2c5f2d1c363b96e0908a024be10ac6ef39caf1f5e2e6b1b2b96318410b93a15bcc05448d8bc9d8d6a1cbf9760b5df1faaf15671bbeb4cbe9f8a9ffc88b85536743bdae54e4fe8980aa564fb5a026e7959e62883387905c4a4bc171de3510fda7efc655a2496673b630f2cfef9a9ad5d48cb6e1d62e5d38a2c6e0d166f401d02ff9d5cfc1d947362edf69ff152115a67969b2ce57a4067dc93e8b08fac21d98cc26b784c52768df4a9944b1b430d8e7bd94732b522dc7e94f6af4dbd12f447b4033dd52128aee2fa992d483693ecc54f541eebab92444a5d35761dc9b44e21e0e3491340391c32221a276047fc4371a04ad56c8744f98f6087a9744fe6f7360943a4005cbb37ae5c80390aadab4f1bedd49cfee897448730f77cb1a96c5df742f2b2db5946d6fa62dc7cad61455aa3d46286ce7bf35fb8e1e2bdb1419c5273de623265134807ba772aa02b91e4c82df9870efeb65d1027a4ae310abdd786e0d9fa6bc0220e6ed9897fad34c06db1548a20986ca780a23729881df8bbb4ac0523166fdd3f8d86e58df84fcd8aa65d07f5b973186ace8158ec3d862ef4d421fb508ba3c53318191ed2c6358532a252a8154d45037af57f315a45b0719b6a479c9fede2a3bec772f661ef61fbb8e89c3641e87cf5c31efcda679582d007e940ffe0d1e88ef07b2b358c0e79dc7b64a87758fd8a1ef293eb1f4b31eac3dc776c63bbf2fbec8e567522ff044a5b5a14f5314befe4936f3e31ef5e8e3bbab3f0b6773b1327cb223dfa67f7d7a2c44c94e54f18bd7cf6b3ba8ae3a6b6763658d053fbd195cfb0fab13d11e9d9b2485d3af28f75afc965e6ec0b7a3c5b2aeb1182d49810bf89e0c22a168e30ad4e65c8de73e5e476a98b2e50697a051fa1315579a7c7114a84e145542e2fa13637a5696183bba0247cd1891ada457508884c4642fb838c31946866aaa7195391a2817907429b5536a426fdbc1dedb39eed537883a22d2701b29f38016caaa45972af7b4517a4e55b4bf006949afd22cffc885b09059f35ef45690357925fc85e3574322943a8867bfece0930d2f7c964bef978ad3e2549c475c6716921dfc8ef8d0616d9f5d83d0325a11f6ad50a199e41f76e4e5ca93479b515cc1e212c788bd6724e90c5f5db49fed36d668857ad6df57c888ab6c63261d0cd2fcffcbd0dce26ce229c51f436a6f25705f4309d99835e022f54710bc319a016112e8a57fa6555d886509ec26cbdbe628816a14775bd6ef7d226c5b6e89751f2d2055adc5671cd1286b01d7c399818f0d4951d00125ee78931cbd5522dd289802990c5417025241a211e60f51a9b305ab586c25bb7949c60590ff81c95c106d6356c85a75d60d3adb129e82c5dcf7e5a1fda488622b2522e64174a4abb45388b8d9d8a18e5729d772ea800fb58a907a03784b08e9d4e7d3a585424a4343a4131e6124fb5ce0ef9e19bdb5543628ed7e0bbe0aa7c25796128605e7695c62fa6e478826146e98b9a0ae", @typed={0x8, 0x5, 0x0, 0x0, @str='%[-{{/(&\xf8@))-q\x00'}]}]}, 0x11b0}, 0x1, 0x0, 0x0, 0x4010}, 0x800) 1m49.237643247s ago: executing program 4 (id=2905): mmap$auto(0x0, 0x6, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) prctl$auto(0x1000000003b, 0x100001, 0x4, 0x80a, 0x6) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) ioctl$auto_UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0x130, 0x8, 0x10003}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000080)) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0x400a507}, 0x800}, 0xa, 0x8) write$auto_proc_mem_operations_base(r0, &(0x7f0000000400)="94c5be883ae7ee95e2bff5f990f6f7249475e8960bf6c1ee8796193bfbd249c19c9460ea0c1c18bb983b84aebb8629e8e9e25558c9bfeb22ed79fdab8065d67eec271b56d08971f043224fe7604598e2506e785c6318c1b7696b10324d1e7db02961facdf9fab2640716f07dd1c617dcb6f1bb648821a53f78be14a6dc8f33", 0x7f) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x54) mmap$auto(0xfffffffffffffffe, 0x3, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8040) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x18dd01, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x4c02, 0x0) msync$auto(0x7, 0x180000000000006, 0x400000004) r5 = ioctl$auto_NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$auto_IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000380)={&(0x7f0000000180), 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c000300", @ANYRES16=0x0, @ANYBLOB="000026bd7000fbdbdf250200000008000400ffff000008000500ff7f0000080006009ed8000008000500030000000800040004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20044005) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2900, 0x0) read$auto(r6, 0x0, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r1, 0x80000000, &(0x7f0000000140)='{\x00', &(0x7f0000000280)="3abd169024ecbad20a4a62bc0fe554935e20265dbec0692f5ff860a19086fe68d7512c979c625e60ebec1728a8963180954d79a8db9cb3c602e7539ed18a8d4e8e6c0b07db232eaae22e643276c1eb8ebd842cf7203b99f039e0b1b553c8739e0b619c965aa647cadaecce686dc6be734828af20c5c2c146c3b9004cb0b31c388a3a7e3ecb9cc48468ded7784db94b62fb60e771a175afebaa15cc5df413236d5111d8", 0x4) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) 1m47.801482768s ago: executing program 4 (id=2908): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80802, 0x0) openat$auto_objects_fops_(0xffffffffffffff9c, 0x0, 0x103002, 0x0) r1 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x20040, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000180), r0) readv$auto(r1, 0x0, 0x5) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto(0xffffffffffffffff, 0xc01070ce, 0xffffffffffffffff) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/reset_stats\x00', 0x100, 0x0) pread64$auto(r2, 0x0, 0x40000000f42c, 0x800005) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x6) r3 = socket(0x2, 0x1, 0x0) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c00, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x5}, 0x3, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) close_range$auto(0x2, 0x8, 0x0) 1m47.414058916s ago: executing program 4 (id=2910): setitimer$auto(0x0, &(0x7f0000000080)={{0x2, 0x5}, {0x0, 0x8}}, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143262, 0x0) write$auto(r0, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x85) setitimer$auto(0x2, &(0x7f0000000000)={{0x8000, 0x6}, {0xa4b, 0x6}}, 0x0) io_setup$auto(0x10, &(0x7f0000000140)=0x8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/i8042/serio0/bind_mode\x00', 0xe3102, 0x0) r2 = socket(0xa, 0x5, 0x0) getsockopt$auto(r2, 0x84, 0x7f, &(0x7f0000000000)='\xc8\xfdV%\r\x80\\\xf7\\\x00', &(0x7f0000000040)=0x1004) sendfile$auto(r1, r1, 0x0, 0x3) unshare$auto(0x40000080) r3 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) poll$auto(&(0x7f0000000240)={r3, 0x20, 0x2}, 0x5, 0x104) prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x3) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) ioctl$auto_TIOCGWINSZ2(r4, 0x5413, &(0x7f0000000200)) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, r5, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) 1m32.389167695s ago: executing program 35 (id=2910): setitimer$auto(0x0, &(0x7f0000000080)={{0x2, 0x5}, {0x0, 0x8}}, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143262, 0x0) write$auto(r0, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x85) setitimer$auto(0x2, &(0x7f0000000000)={{0x8000, 0x6}, {0xa4b, 0x6}}, 0x0) io_setup$auto(0x10, &(0x7f0000000140)=0x8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/i8042/serio0/bind_mode\x00', 0xe3102, 0x0) r2 = socket(0xa, 0x5, 0x0) getsockopt$auto(r2, 0x84, 0x7f, &(0x7f0000000000)='\xc8\xfdV%\r\x80\\\xf7\\\x00', &(0x7f0000000040)=0x1004) sendfile$auto(r1, r1, 0x0, 0x3) unshare$auto(0x40000080) r3 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) poll$auto(&(0x7f0000000240)={r3, 0x20, 0x2}, 0x5, 0x104) prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x3) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) ioctl$auto_TIOCGWINSZ2(r4, 0x5413, &(0x7f0000000200)) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, r5, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) 1m29.506893161s ago: executing program 6 (id=2963): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0xfc000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x15, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) waitid$auto_P_PID(0x1, 0x0, 0x0, 0x0, &(0x7f0000000240)={{0x2, 0x34}, {0x9c, 0x3}, 0x779c, 0x3ff, 0x2, 0x0, 0x8, 0x8a, 0x3, 0x1, 0x100, 0x6, 0x5, 0x47, 0x80000000, 0x40000}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0xff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) setgroups$auto(0xe32, 0x0) 1m28.098826975s ago: executing program 6 (id=2966): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x5) capset$auto(0x0, 0x0) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, 0x0, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), r0) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000480)=ANY=[@ANYBLOB="b128000a00ef3cd8b1661fb7901dec5bb1754738bfdb82ec9523cdafdd7143f04c60dc907633fd7350164a0d4c3d", @ANYBLOB="010027bd700000dcdf25010000001400020077673000"/34], 0x28}}, 0xc0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) setrlimit$auto(0x81, 0x0) mbind$auto(0x4, 0x2, 0x41f, &(0x7f0000000000)=0x8, 0x10001, 0x62c9a1e6) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(r2, 0x8, 0x100c) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r4 = io_uring_setup$auto(0xfffddffe, 0x0) r5 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000800)='/dev/snd/pcmC1D1p\x00', 0x200, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS_EXT32(r5, 0xc06c4124, &(0x7f0000000840)={0x7, 0x8, 0x2, 0x1, 0x4, 0x3, 0x1, 0x10001, 0x5, 0xffff473f, 0x80000000, 0x4, 0xb, 0x854, 0x64, 0x3ff, 0x0, 0x8, "547d8f774e7ab98e3ccdbad1e13745f260aa6a6264428625532ee28234827d36031da9ab"}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYBLOB="e0020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x2e0}, 0x1, 0x0, 0x0, 0x40014}, 0x48845) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(r1, 0xae3d, r4) ioctl$auto_KVM_GET_MSRS(r6, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) 1m27.825339885s ago: executing program 6 (id=2968): syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004680), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040801}, 0x44000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x1000000000009489, 0x3, 0x15f4da0a, 0x1, 0x7, 0x7, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0xa, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) 1m25.856821157s ago: executing program 6 (id=2971): r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) io_cancel$auto(0x2, 0x0, 0x0) sendmsg$auto_TIPC_NL_MON_PEER_GET(r1, &(0x7f0000006140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="209918fcfff9e32e18f773dcc32275efd6b19bbddaa3262b867a606c6adf4cea6bf5250dbe4960031548b83c44532cbbabd8a93ec7a998ea4d2b49e1", @ANYRES16=r0, @ANYBLOB="11072cb57000fedbdf25130000000c000980070032005b400000"], 0x20}}, 0x4c848) 1m25.604190384s ago: executing program 6 (id=2973): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/irq/5/chip_name\x00', 0x40000, 0x0) mmap$auto(0x0, 0x100000001, 0xdf, 0x200000000009b72, r0, 0x101) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400001}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf250a000000100003800c0001000100000000000000df5aa2d20c6dc6ecaf6b8b5276559328735f75486e565bf7d759a0749e5391bb96c022b036e48ae198682b6bb555dbdf441ecb9de45b93c79172096607ced3dd3dbe49c5f2b3ad1bba0b7f836403c37e30d4130245"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r4 = syz_clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="2918758169251555183442853a27ba37074b62633f338d1a7b74c6ff4c91676d9a5e0078ab1db0f30dc404f23fd5820a80ed88704e31ac2c5f3169cb36f22141f45b35a2e04fe71bc918ec46671bf5d28d8d26ce4970c811a8b669c7011c3e9ff8b2109640c07450f5b7b624fde03bb975adc229120a3b8750efcf8a90044854f04b55f429540f9fc390d24df293299b9c4395aed65212fdd9a1597ffcfaf9b3008f77bcc5a593486eb61127560aa974af592514e14d7d") r5 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000003c0)={@_si_pad}, 0x1ecc, &(0x7f0000000440)={{0xffffffff, 0x2}, {0x7, 0x19}, 0x9, 0x80000000, 0x4, 0x5, 0x8000000000000001, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1000, 0x0, 0x4}) r6 = getpgid$auto(0x0) sendmsg$auto_IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000540)=ANY=[@ANYBLOB="3405", @ANYRES16=r3, @ANYBLOB="000226bd7000fbdbdf25020000000800050007000000080006000300000008000400050000001001028075ff83876574dcf7444c53b88992e69a471bfa58053dc94ad66d0953fb1b9cb401c147df5f31671dfc0f9284424129a2c5ce70c649ade9aae6d814619bf71bbd80efe680cd9bc3e7aa59478b4e3e4d0ce05691deebfebdb666888d6f5549d48d92470028f2ccb239e0e683f1107459a18b09a092829949129087a8c782cb94fd36de9315f583a56ceee0e6023fa204fdb92ada8640c18311479406aa31ba39687f786747f4eaef95", @ANYRES32=0x0, @ANYBLOB="19e833e93fdf0b102a18ee6b8436634483ed5729eb26e2267dcf5d3a2eaf51db79c25d370c37cf662d480e08f268f1743cd215589548d9cb71", @ANYRES32=r4, @ANYBLOB="1800fd80040086807290395bf5dd39680400b5800400098021011a800400", @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="490f786928777dc08e0861d26a194926ce9dc2c2fcb0dd40666bd041f1c1ee6c8800c408008000", @ANYBLOB="0800e300", @ANYRES32=r6, @ANYBLOB="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"], 0x534}, 0x1, 0x0, 0x0, 0x28014044}, 0x0) rt_sigqueueinfo$auto(0x0, 0x3ff, &(0x7f0000000280)={@siginfo_0_0={0x809f, 0x7, 0x3, @_timer={r4, 0x20000000, @sival_ptr=&(0x7f0000000180)="0600f1971df7317e9d6cd1b2aa0375ede55f4c2d90a59ef4b7c13f84a399c72fe5465c581e3891ebc224106ea7cb227dcdf3ad8959c4a9c8f2f10b102a59ea3c49b0a66584c358ce952d3d2d46e6722ec2acbd084be2ce582da87b565d7ba9dd86f0e1e5041abd24a8f6f4212d0ca62c6c5e1632bad3d67ee4bd24e377528e76151870959f1f6f0c5567763a1679f9046d53a3447b668bb1b36af5266ce1161696"}}}) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mprotect$auto(0x8000, 0x8, 0x8) wait4$auto(0x0, 0x0, 0x7, 0x0) r7 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(r7, 0x0, 0x80000001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x4008, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x80000010, 0x0, 0x8000) 1m24.316615675s ago: executing program 6 (id=2974): mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) write$auto(r3, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x204c0c1}, 0xc0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/user_reserve_kbytes\x00', 0x103142, 0x0) sendfile$auto(r5, r5, 0x0, 0x8) r6 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/environ\x00', 0x2000, 0x0) read$auto_proc_environ_operations_base(r6, &(0x7f0000000240)=""/80, 0x50) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sr0\x00', 0x60742, 0x0) lseek$auto(r7, 0x0, 0x4) mmap$auto(0x1000, 0x6, 0xffffffff, 0xdc, 0xffffffffffffffff, 0x28000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) fstat$auto(r8, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) ioctl$auto(0xffffffffffffffff, 0x8941, 0x8) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x183003, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 1m9.216050648s ago: executing program 36 (id=2974): mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) write$auto(r3, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x204c0c1}, 0xc0) write$auto(0xffffffffffffffff, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0xa) unshare$auto(0x40000080) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/user_reserve_kbytes\x00', 0x103142, 0x0) sendfile$auto(r5, r5, 0x0, 0x8) r6 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/environ\x00', 0x2000, 0x0) read$auto_proc_environ_operations_base(r6, &(0x7f0000000240)=""/80, 0x50) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sr0\x00', 0x60742, 0x0) lseek$auto(r7, 0x0, 0x4) mmap$auto(0x1000, 0x6, 0xffffffff, 0xdc, 0xffffffffffffffff, 0x28000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) fstat$auto(r8, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) ioctl$auto(0xffffffffffffffff, 0x8941, 0x8) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x183003, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 1m5.108533676s ago: executing program 3 (id=3039): mmap$auto(0x0, 0x2020009, 0x10000043, 0xeb1, 0xffffffffffffffff, 0x5c9) socket(0x3, 0xa, 0x0) r0 = pidfd_open$auto(0x0, 0x0) setns(r0, 0x2000000) ioctl$auto_VHOST_SET_VRING_CALL2(r0, 0x4008af21, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={"25e440c215c391dbf65bc7e7e558ff9f1ba7d50321b3c9c7f4d256662e2c0c6d", 0x9, 0x4, 0x5, 0x0, 0x4, 0xffffffffffffffff}) move_pages$auto(r1, 0x200000006, 0x0, 0x0, 0x0, 0x9128) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r4, &(0x7f0000000080)={&(0x7f00000004c0)="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", 0x1000}, 0x3) r5 = socket(0x1d, 0x5, 0x0) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r5, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) connect$auto(0x4, 0x0, 0x10) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r6, 0x4b47, 0x1) mmap$auto(0x0, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000) r7 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x800002, 0xb5d1af1605322ddc) ioctl$auto_SNDCTL_SEQ_GETTIME(r3, 0x80045113, &(0x7f0000000180)="14768875e594b49cf4a2ec4aaa1934903cc8f8fc4df231eba334a9b0a4dc0ba48b7b5954df55c91a5ff71eae2ae6e42a5baa06732060699f8bde35e9904249e4ee797d656496c9a3c3a5ae2cea0cae015651b7d5e63cbd205e658b16bb16e1fddf21525f45380bd0d9677538d0a055f1b84ab70970320f6348530ca1ac814a7ff8cd26387f15d6dfa28d542bf4b6e0ce5137b84cf796bda9ad") r8 = open_by_handle_at$auto(r7, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(r8, r7, 0x0, 0x2) 1m3.862239903s ago: executing program 3 (id=3044): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0xfc000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x15, 0x0) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) waitid$auto_P_PID(0x1, 0x0, 0x0, 0x0, &(0x7f0000000240)={{0x2, 0x34}, {0x9c, 0x3}, 0x779c, 0x3ff, 0x2, 0x0, 0x8, 0x8a, 0x3, 0x1, 0x100, 0x6, 0x5, 0x47, 0x80000000, 0x40000}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) setgroups$auto(0xe32, 0x0) 1m2.869538804s ago: executing program 3 (id=3050): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdf, 0x29b72, 0x2, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="000426bd7000fedbdf250200000008002700040000000a001800aa0000aa"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram0\x00', 0x67f00, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xa40, 0x0) socket(0x2a, 0x2, 0x1) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="010326bd7000fedb0600080000000400048018a9c058ba09e19a6d161f409fb4b1cefa6d26eab5fe0a4437c1"], 0x18}, 0x1, 0x0, 0x0, 0x24000055}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) 1m2.098774856s ago: executing program 3 (id=3054): r0 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r0, 0xf01, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6c}]}, 0x1c}}, 0x40) 1m1.936039116s ago: executing program 3 (id=3055): mmap$auto(0x0, 0x2020009, 0x10000043, 0xeb1, 0xffffffffffffffff, 0x5c9) socket(0x3, 0xa, 0x0) r0 = pidfd_open$auto(0x0, 0x0) setns(r0, 0x2000000) ioctl$auto_VHOST_SET_VRING_CALL2(r0, 0x4008af21, 0x0) ioctl$auto_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={"25e440c215c391dbf65bc7e7e558ff9f1ba7d50321b3c9c7f4d256662e2c0c6d", 0x9, 0x4, 0x5, 0x0, 0x8, 0xffffffffffffffff}) move_pages$auto(r1, 0x200000003, 0x0, 0x0, 0x0, 0x9128) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) r5 = socket(0x1d, 0x5, 0x0) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r5, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) connect$auto(0x4, 0x0, 0x10) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r6, 0x4b47, 0x1) mmap$auto(0x100000001, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000) r7 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x800002, 0xb5d1af1605322ddc) ioctl$auto_SNDCTL_SEQ_GETTIME(r3, 0x80045113, &(0x7f0000000180)="14768875e594b49cf4a2ec4aaa1934903cc8f8fc4df231eba334a9b0a4dc0ba48b7b5954df55c91a5ff71eae2ae6e42a5baa06732060699f8bde35e9904249e4ee797d656496c9a3c3a5ae2cea0cae015651b7d5e63cbd205e658b16bb16e1fddf21525f45380bd0d9677538d0a055f1b84ab70970320f6348530ca1ac814a7ff8cd26387f15d6dfa28d542bf4b6e0ce5137b84cf796bda9ad") r8 = open_by_handle_at$auto(r7, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(r8, r7, 0x0, 0x2) 1m0.880624674s ago: executing program 3 (id=3057): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xa4e00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) socket(0xa, 0x801, 0x84) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace\x00', 0x240100, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) close_range$auto(0x2, 0x8000, 0x0) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000140), 0x60e83, 0x0) ioctl$auto(r1, 0x3b8e, r0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0xffffffffffffffff, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) socket(0x10, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x101400, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x2440, 0x0) read$auto(r2, 0x0, 0x8000000000000000) select$auto(0x9, 0x0, 0x0, 0x0, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card0/pcm0p/sub3/sw_params\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) 45.795823432s ago: executing program 37 (id=3057): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xa4e00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) socket(0xa, 0x801, 0x84) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu1/trace\x00', 0x240100, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) close_range$auto(0x2, 0x8000, 0x0) r1 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000140), 0x60e83, 0x0) ioctl$auto(r1, 0x3b8e, r0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0xffffffffffffffff, 0x300000000000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80000, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) socket(0x10, 0x3, 0xa) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x101400, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x2440, 0x0) read$auto(r2, 0x0, 0x8000000000000000) select$auto(0x9, 0x0, 0x0, 0x0, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card0/pcm0p/sub3/sw_params\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) 18.865824358s ago: executing program 9 (id=3215): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) epoll_create$auto(0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xacc0, 0x0) socket(0x2, 0x1, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x79) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0xe07, 0x8000000000000001, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0x4]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000440)={[0x10000000001ff, 0x4, 0xe, 0xffffffffffffffff, 0x3, 0x10, 0x3, 0x2, 0x3, 0x62, 0x80000026, 0x7, 0x6d3e, 0x8, 0xd, 0x40000000001]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) close_range$auto(0x0, 0xfffffffffffff000, 0x5) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.2/usb3/bmAttributes\x00', 0x2000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/190, 0xbe) r2 = signalfd$auto(0xffffffffffffffff, 0x0, 0x3) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000001a40)=""/4100, 0x1004) timer_create$auto(0x3, 0x0, 0x0) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x41400, 0x31) mknodat$auto(r3, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8) execveat$auto(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) 16.696032063s ago: executing program 9 (id=3219): bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f0000000200)=@raw_tracepoint={0x6, 0xffffffffffffffff, 0x0, 0x81}, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x29, 0x2, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000000040)="03", 0x1) close_range$auto(0x2, 0x8, 0x0) rseq$auto(&(0x7f0000000080)={0x6, 0x6, 0x7ff, 0x7, 0x1ff, 0x8, "3d87b202ea22b3bb7ee3473752150c59815976752189186a63d80f0efbbe6abc660bcb0f07e9208cf3a8f4aab1cc167566224ece10fd4556280191d67aa33808d4ec4f35a549c22452a97c1c0b"}, 0x0, 0x3, 0x7) mmap$auto(0x0, 0x7, 0x10000000000df, 0xeb2, 0x401, 0x80000000) io_uring_setup$auto(0x8, 0x0) r2 = io_uring_setup$auto(0x86, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001280)='/dev/v4l-subdev0\x00', 0x101000, 0x0) ioctl$auto(r3, 0xc0205647, r2) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r4, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x8}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/kernel/parameters/panic_print\x00', 0x80862, 0x0) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) sendfile$auto(r5, 0x3, 0x0, 0x2) eventfd$auto(0x1) 16.226295543s ago: executing program 9 (id=3220): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/irq/5/chip_name\x00', 0x40000, 0x0) mmap$auto(0x0, 0x100000001, 0xdf, 0x200000000009b72, r0, 0x101) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400001}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf250a000000100003800c0001000100000000000000df5aa2d20c6dc6ecaf6b8b5276559328735f75486e565bf7d759a0749e5391bb96c022b036e48ae198682b6bb555dbdf441ecb9de45b93c79172096607ced3dd3dbe49c5f2b3ad1bba0b7f836403c37e30d4130245"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r4 = syz_clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="2918758169251555183442853a27ba37074b62633f338d1a7b74c6ff4c91676d9a5e0078ab1db0f30dc404f23fd5820a80ed88704e31ac2c5f3169cb36f22141f45b35a2e04fe71bc918ec46671bf5d28d8d26ce4970c811a8b669c7011c3e9ff8b2109640c07450f5b7b624fde03bb975adc229120a3b8750efcf8a90044854f04b55f429540f9fc390d24df293299b9c4395aed65212fdd9a1597ffcfaf9b3008f77bcc5a593486eb61127560aa974af592514e14d7d") r5 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000003c0)={@_si_pad}, 0x1ecc, &(0x7f0000000440)={{0xffffffff, 0x2}, {0x7, 0x19}, 0x9, 0x80000000, 0x4, 0x5, 0x8000000000000001, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1000, 0x0, 0x4}) r6 = getpgid$auto(0x0) sendmsg$auto_IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000540)=ANY=[@ANYBLOB="3405", @ANYRES16=r3, @ANYBLOB="000226bd7000fbdbdf25020000000800050007000000080006000300000008000400050000001001028075ff83876574dcf7444c53b88992e69a471bfa58053dc94ad66d0953fb1b9cb401c147df5f31671dfc0f9284424129a2c5ce70c649ade9aae6d814619bf71bbd80efe680cd9bc3e7aa59478b4e3e4d0ce05691deebfebdb666888d6f5549d48d92470028f2ccb239e0e683f1107459a18b09a092829949129087a8c782cb94fd36de9315f583a56ceee0e6023fa204fdb92ada8640c18311479406aa31ba39687f786747f4eaef95", @ANYRES32=0x0, @ANYBLOB="19e833e93fdf0b102a18ee6b8436634483ed5729eb26e2267dcf5d3a2eaf51db79c25d370c37cf662d480e08f268f1743cd215589548d9cb71", @ANYRES32=r4, @ANYBLOB="1800fd80040086807290395bf5dd39680400b5800400098021011a800400", @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="490f786928777dc08e0861d26a194926ce9dc2c2fcb0dd40666bd041f1c1ee6c8800c408008000", @ANYBLOB="0800e300", @ANYRES32=r6, @ANYBLOB="000000ee968d5052b0e0f2196c460f01434708245537f143dc4384af9837fea50bf521c579ff834a5ed1c1e6034df0f5bacbd53be3ce3c3e11151e7e046f1a20b063f556dd605058895c42c61f7cbddbc10b242a5a738ed4925f36651c46e50a10e3065cbfd14c6d680882eea21f09c1fb05e49ebea60fe074be9ff53f2371db538e3b904d4125447b2ec296620ad6f05699789cb40d0d191f5745629ab3ad228cd7c17833cf5fff08fc5fab07e2e8c6e2b0b24eb518001c8014003300ff020000000000000000000000000001d30156801117bdf4445113f39c791ee0c0df9a945c9704ed3564100ded9310d0e1a1a308201c5d5c4bc90e929324ef82db20fbf98ece5e1da4786fc3109cd2a18337ac61083404e8c4cb2dd63f3070ed5802c193b26b8ba4d7730df46f8326578d73f47f26bc6834abab5d54c6281e65f411ce93de1aed2b9ab22fb6e3bc3c"], 0x534}, 0x1, 0x0, 0x0, 0x28014044}, 0x0) rt_sigqueueinfo$auto(0x0, 0x3ff, &(0x7f0000000280)={@siginfo_0_0={0x809f, 0x7, 0x3, @_timer={r4, 0x20000000, @sival_ptr=&(0x7f0000000180)="0600f1971df7317e9d6cd1b2aa0375ede55f4c2d90a59ef4b7c13f84a399c72fe5465c581e3891ebc224106ea7cb227dcdf3ad8959c4a9c8f2f10b102a59ea3c49b0a66584c358ce952d3d2d46e6722ec2acbd084be2ce582da87b565d7ba9dd86f0e1e5041abd24a8f6f4212d0ca62c6c5e1632bad3d67ee4bd24e377528e76151870959f1f6f0c5567763a1679f9046d53a3447b668bb1b36af5266ce1161696"}}}) mprotect$auto(0x8000, 0x8, 0x8) wait4$auto(0x0, 0x0, 0x7, 0x0) r7 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(r7, 0x0, 0x80000001, 0x0) msgctl$auto_IPC_STAT(0x1ff, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x4008, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x80000010, 0x0, 0x8000) 15.486763548s ago: executing program 9 (id=3224): r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x4000, 0x0) fsetxattr$auto(r0, &(0x7f0000000200)='*,{:}{{*\x00', &(0x7f0000000240)="d7f63a0a1536873db32404dbd31639b80bb07fb2046c6b4106d3849e0ef09e349d847569f9cfbcd7621925a4270e9768f7832d8caab2fb3350", 0x100, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x10000, 0x20009, 0xe0, 0xe31, r2, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) sendmmsg$auto(r1, 0x0, 0x20009a6, 0x3) close_range$auto(0x2, 0x8, 0x0) rseq$auto(&(0x7f00000001c0)={0xe, 0xfffffff7, 0x1, 0x9, 0xffffffff, 0x9}, 0x8000, 0x0, 0x6) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r4, 0x454f, 0xfff, 0x0, 0x0, r3, 0x80000000}, 0x6d4) flock$auto(r3, 0xc6) r5 = open(0x0, 0x4242, 0x59) flock$auto(r5, 0x6) r6 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r6, 0x0, 0x3}, 0xc) ioctl$auto_RTC_UIE_ON(r6, 0x7003, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x25, 0x4909b6f5, 0x1ffe0, 0x7, 0x3, 0x20000009, 0x9, 0x3, 0x4, 0x1, 0x68d, 0x9, 0x8, 0x7fffffff, 0x80, 0x3, 0x0, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffff9, 0x0, 0x0, 0x80000, 0x4, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x90, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x8000) r7 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r7, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 10.477105474s ago: executing program 9 (id=3232): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/irq/5/chip_name\x00', 0x40000, 0x0) mmap$auto(0x0, 0x100000001, 0xdf, 0x200000000009b72, r0, 0x101) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400001}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf250a000000100003800c0001000100000000000000df5aa2d20c6dc6ecaf6b8b5276559328735f75486e565bf7d759a0749e5391bb96c022b036e48ae198682b6bb555dbdf441ecb9de45b93c79172096607ced3dd3dbe49c5f2b3ad1bba0b7f836403c37e30d4130245"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r4 = syz_clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="2918758169251555183442853a27ba37074b62633f338d1a7b74c6ff4c91676d9a5e0078ab1db0f30dc404f23fd5820a80ed88704e31ac2c5f3169cb36f22141f45b35a2e04fe71bc918ec46671bf5d28d8d26ce4970c811a8b669c7011c3e9ff8b2109640c07450f5b7b624fde03bb975adc229120a3b8750efcf8a90044854f04b55f429540f9fc390d24df293299b9c4395aed65212fdd9a1597ffcfaf9b3008f77bcc5a593486eb61127560aa974af592514e14d7d") r5 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000003c0)={@_si_pad}, 0x1ecc, &(0x7f0000000440)={{0xffffffff, 0x2}, {0x7, 0x19}, 0x9, 0x80000000, 0x4, 0x5, 0x8000000000000001, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1000, 0x0, 0x4}) r6 = getpgid$auto(0x0) sendmsg$auto_IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000540)=ANY=[@ANYBLOB="3405", @ANYRES16=r3, @ANYBLOB="000226bd7000fbdbdf25020000000800050007000000080006000300000008000400050000001001028075ff83876574dcf7444c53b88992e69a471bfa58053dc94ad66d0953fb1b9cb401c147df5f31671dfc0f9284424129a2c5ce70c649ade9aae6d814619bf71bbd80efe680cd9bc3e7aa59478b4e3e4d0ce05691deebfebdb666888d6f5549d48d92470028f2ccb239e0e683f1107459a18b09a092829949129087a8c782cb94fd36de9315f583a56ceee0e6023fa204fdb92ada8640c18311479406aa31ba39687f786747f4eaef95", @ANYRES32=0x0, @ANYBLOB="19e833e93fdf0b102a18ee6b8436634483ed5729eb26e2267dcf5d3a2eaf51db79c25d370c37cf662d480e08f268f1743cd215589548d9cb71", @ANYRES32=r4, @ANYBLOB="1800fd80040086807290395bf5dd39680400b5800400098021011a800400", @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="490f786928777dc08e0861d26a194926ce9dc2c2fcb0dd40666bd041f1c1ee6c8800c408008000", @ANYBLOB="0800e300", @ANYRES32=r6, @ANYBLOB="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"], 0x534}, 0x1, 0x0, 0x0, 0x28014044}, 0x0) rt_sigqueueinfo$auto(0x0, 0x3ff, &(0x7f0000000280)={@siginfo_0_0={0x809f, 0x7, 0x3, @_timer={r4, 0x20000000, @sival_ptr=&(0x7f0000000180)="0600f1971df7317e9d6cd1b2aa0375ede55f4c2d90a59ef4b7c13f84a399c72fe5465c581e3891ebc224106ea7cb227dcdf3ad8959c4a9c8f2f10b102a59ea3c49b0a66584c358ce952d3d2d46e6722ec2acbd084be2ce582da87b565d7ba9dd86f0e1e5041abd24a8f6f4212d0ca62c6c5e1632bad3d67ee4bd24e377528e76151870959f1f6f0c5567763a1679f9046d53a3447b668bb1b36af5266ce1161696"}}}) mprotect$auto(0x8000, 0x8, 0x8) wait4$auto(0x0, 0x0, 0x7, 0x0) r7 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(r7, 0x0, 0x80000001, 0x0) msgctl$auto_IPC_STAT(0x1ff, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x4008, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x80000010, 0x0, 0x8000) 9.305993273s ago: executing program 9 (id=3240): r0 = openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) getsockopt$auto_SO_NOFCS(r0, 0x5e81, 0x2b, &(0x7f0000000100)='!%$\x00', &(0x7f0000000140)=0x2) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xe0880, 0x0) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:/\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8eX\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xdef\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 32) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x2, 0x7, 0x200000000000003, 0xd, 0x2, 0x80001, 0x4, 0x1ffffffffffd, 0xb5, 0xfffffffffffffffe, 0x7, 0xffff, 0x7f, 0x2a2, 0x5, 0xa, 0x22000, 0x200, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9ef8, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400, 0x0, 0x0, 0x200000000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x80, 0x1, 0x1, 0x0, 0x0, 0x8000000, 0x80000001, 0xffffffffffffffff, 0x3]}, 0x1fe, 0xd) (async) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) (async, rerun: 32) connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x1, @remote}, 0x8) (rerun: 32) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r6 = fsopen$auto(0x0, 0x1) fsconfig$auto(r6, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000040), r5) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x800, 0x0) ioctl$auto_TIOCSWINSZ2(r7, 0x5414, &(0x7f0000000400)="36388d690040e3ad266fc1da89d4ba34678412137487940d200ad53908f1303e03c69b5d48dad8861869e24925eeddb95e6256d631666e8a4f92f37cbe5b71d9c633e0289609fc0e48daa66a15b239") 8.280278285s ago: executing program 5 (id=3243): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) close_range$auto(0x2, 0x8, 0x0) kexec_load$auto(0x200000000007, 0x1, 0x0, 0x4) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, 0x0, 0x109100, 0x0) memfd_secret$auto(0x0) mmap$auto(0x0, 0x1, 0x18e, 0x8000000000000011, 0xffffffffffffffff, 0x9) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_tipcv2(0x0, r0) prctl$auto(0x1, 0x6, 0x0, 0xb117, 0x9) sendmsg$auto_TIPC_NL_BEARER_ADD(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048804}, 0x4000) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x25, 0x5, 0x2) r1 = socket(0x848000000015, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000240)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6b) connect$auto(0x3, &(0x7f00000002c0)=@generic={0xa, "5457c29004e0b991da88f70ef61b"}, 0x55) sendmsg$auto_NL80211_CMD_GET_MPATH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x100000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x103880, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) 7.643482664s ago: executing program 8 (id=3245): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) close_range$auto(0x2, 0x8, 0x0) kexec_load$auto(0x200000000007, 0x1, 0x0, 0x4) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, 0x0, 0x109100, 0x0) memfd_secret$auto(0x0) mmap$auto(0x0, 0x1, 0x18e, 0x8000000000000011, 0xffffffffffffffff, 0x9) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_tipcv2(0x0, r0) prctl$auto(0x1, 0x6, 0x0, 0xb117, 0x9) sendmsg$auto_TIPC_NL_BEARER_ADD(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048804}, 0x4000) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x25, 0x5, 0x2) r1 = socket(0x848000000015, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000240)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6b) connect$auto(0x3, &(0x7f00000002c0)=@generic={0xa, "5457c29004e0b991da88f70ef61b"}, 0x55) sendmsg$auto_NL80211_CMD_GET_MPATH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x100000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x103880, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) 6.703094234s ago: executing program 8 (id=3248): bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) r0 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000040), r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) r2 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) lseek$auto(r2, 0x7ff, 0x1) 6.449679702s ago: executing program 8 (id=3249): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/irq/5/chip_name\x00', 0x40000, 0x0) mmap$auto(0x0, 0x100000001, 0xdf, 0x200000000009b72, r0, 0x101) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400001}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf250a000000100003800c0001000100000000000000df5aa2d20c6dc6ecaf6b8b5276559328735f75486e565bf7d759a0749e5391bb96c022b036e48ae198682b6bb555dbdf441ecb9de45b93c79172096607ced3dd3dbe49c5f2b3ad1bba0b7f836403c37e30d4130245"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r4 = syz_clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="2918758169251555183442853a27ba37074b62633f338d1a7b74c6ff4c91676d9a5e0078ab1db0f30dc404f23fd5820a80ed88704e31ac2c5f3169cb36f22141f45b35a2e04fe71bc918ec46671bf5d28d8d26ce4970c811a8b669c7011c3e9ff8b2109640c07450f5b7b624fde03bb975adc229120a3b8750efcf8a90044854f04b55f429540f9fc390d24df293299b9c4395aed65212fdd9a1597ffcfaf9b3008f77bcc5a593486eb61127560aa974af592514e14d7d") r5 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000003c0)={@_si_pad}, 0x1ecc, &(0x7f0000000440)={{0xffffffff, 0x2}, {0x7, 0x19}, 0x9, 0x80000000, 0x4, 0x5, 0x8000000000000001, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1000, 0x0, 0x4}) r6 = getpgid$auto(0x0) sendmsg$auto_IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000540)=ANY=[@ANYBLOB="3405", @ANYRES16=r3, @ANYBLOB="000226bd7000fbdbdf25020000000800050007000000080006000300000008000400050000001001028075ff83876574dcf7444c53b88992e69a471bfa58053dc94ad66d0953fb1b9cb401c147df5f31671dfc0f9284424129a2c5ce70c649ade9aae6d814619bf71bbd80efe680cd9bc3e7aa59478b4e3e4d0ce05691deebfebdb666888d6f5549d48d92470028f2ccb239e0e683f1107459a18b09a092829949129087a8c782cb94fd36de9315f583a56ceee0e6023fa204fdb92ada8640c18311479406aa31ba39687f786747f4eaef95", @ANYRES32=0x0, @ANYBLOB="19e833e93fdf0b102a18ee6b8436634483ed5729eb26e2267dcf5d3a2eaf51db79c25d370c37cf662d480e08f268f1743cd215589548d9cb71", @ANYRES32=r4, @ANYBLOB="1800fd80040086807290395bf5dd39680400b5800400098021011a800400", @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="490f786928777dc08e0861d26a194926ce9dc2c2fcb0dd40666bd041f1c1ee6c8800c408008000", @ANYBLOB="0800e300", @ANYRES32=r6, @ANYBLOB="000000ee968d5052b0e0f2196c460f01434708245537f143dc4384af9837fea50bf521c579ff834a5ed1c1e6034df0f5bacbd53be3ce3c3e11151e7e046f1a20b063f556dd605058895c42c61f7cbddbc10b242a5a738ed4925f36651c46e50a10e3065cbfd14c6d680882eea21f09c1fb05e49ebea60fe074be9ff53f2371db538e3b904d4125447b2ec296620ad6f05699789cb40d0d191f5745629ab3ad228cd7c17833cf5fff08fc5fab07e2e8c6e2b0b24eb518001c8014003300ff020000000000000000000000000001d30156801117bdf4445113f39c791ee0c0df9a945c9704ed3564100ded9310d0e1a1a308201c5d5c4bc90e929324ef82db20fbf98ece5e1da4786fc3109cd2a18337ac61083404e8c4cb2dd63f3070ed5802c193b26b8ba4d7730df46f8326578d73f47f26bc6834abab5d54c6281e65f411ce93de1aed2b9ab22fb6e3bc3c"], 0x534}, 0x1, 0x0, 0x0, 0x28014044}, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mprotect$auto(0x8000, 0x8, 0x8) wait4$auto(0x0, 0x0, 0x7, 0x0) r7 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(r7, 0x0, 0x80000001, 0x0) msgctl$auto_IPC_STAT(0x1ff, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x4008, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x80000010, 0x0, 0x8000) 6.108192432s ago: executing program 7 (id=3251): socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x700000000000000, 0x200007, 0x19) pwrite64$auto(0xc8, 0x0, 0x400f24, 0xc425) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x2, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) prctl$auto_PR_SYS_DISPATCH_ON(0x9, 0x1, r1, 0x6, 0x7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xe2481, 0x0) writev$auto(r2, &(0x7f0000000080)={0x0, 0x1000}, 0x3) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(0xffffffffffffffff, 0x0, 0x30004850) r3 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x48402, 0x0) preadv$auto(r3, &(0x7f0000000440)={0x0, 0x9}, 0x40000000000003, 0x19d, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r4) sendmsg$auto_NFSD_CMD_VERSION_SET(r4, 0x0, 0x20008844) sendto$auto(r2, &(0x7f0000000180), 0x0, 0x1, &(0x7f0000000040)=@l2={0x1f, 0x0, @any, 0x9, 0x1}, 0x80000001) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x503a02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffffff, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) 6.001379455s ago: executing program 5 (id=3252): socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x700000000000000, 0x200007, 0x19) pwrite64$auto(0xc8, 0x0, 0x400f24, 0xc425) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x2, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) prctl$auto_PR_SYS_DISPATCH_ON(0x9, 0x1, r1, 0x6, 0x7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xe2481, 0x0) writev$auto(r2, &(0x7f0000000080)={0x0, 0x1000}, 0x3) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(0xffffffffffffffff, 0x0, 0x30004850) r3 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x48402, 0x0) preadv$auto(r3, &(0x7f0000000440)={0x0, 0x9}, 0x40000000000003, 0x19d, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r4) sendmsg$auto_NFSD_CMD_VERSION_SET(r4, 0x0, 0x20008844) sendto$auto(r2, &(0x7f0000000180)="33ed694ec423024651b45bb63445e9e27b6c01aa23e1cdc6a2522319136aa8708b6c6fe7aa3f4f41c958322f3ae3704438fd4b", 0x0, 0x1, &(0x7f0000000040)=@l2={0x1f, 0x0, @any, 0x9, 0x1}, 0x80000001) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x503a02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffffff, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) 5.547176252s ago: executing program 8 (id=3253): socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x700000000000000, 0x200007, 0x19) pwrite64$auto(0xc8, 0x0, 0x400f24, 0xc425) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x2, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) prctl$auto_PR_SYS_DISPATCH_ON(0x9, 0x1, r1, 0x6, 0x7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xe2481, 0x0) writev$auto(r2, &(0x7f0000000080)={0x0, 0x1000}, 0x3) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(0xffffffffffffffff, 0x0, 0x30004850) r3 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x48402, 0x0) preadv$auto(r3, &(0x7f0000000440)={0x0, 0x9}, 0x40000000000003, 0x19d, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r4) sendmsg$auto_NFSD_CMD_VERSION_SET(r4, 0x0, 0x20008844) sendto$auto(r2, &(0x7f0000000180)="33ed694ec423024651b45bb63445e9e27b6c01aa23e1cdc6a2522319136aa8708b6c6fe7aa3f4f41c958322f3ae3704438fd4b", 0x0, 0x1, &(0x7f0000000040)=@l2={0x1f, 0x0, @any, 0x9, 0x1}, 0x80000001) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x503a02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffffff, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) 3.844364099s ago: executing program 5 (id=3254): openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyb9\x00', 0x22902, 0x0) r0 = socket(0x10, 0x80002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x8, 0x800) timerfd_settime$auto(r0, 0x2, 0x0, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto(0x3, 0x0, 0xfdef) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) 3.608218765s ago: executing program 5 (id=3255): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x5) capset$auto(0x0, 0x0) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, 0x0, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), r0) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000480)=ANY=[@ANYBLOB="b128000a00ef3cd8b1661fb7901dec5bb1754738bfdb82ec9523cdafdd7143f04c60dc907633fd7350164a0d4c3d", @ANYBLOB="010027bd700000dcdf25010000001400020077673000"/34], 0x28}}, 0xc0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) setrlimit$auto(0x81, 0x0) mbind$auto(0x4, 0x2, 0x41f, &(0x7f0000000000)=0x8, 0x10001, 0x62c9a1e6) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(r2, 0x8, 0x100c) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r4 = io_uring_setup$auto(0xfffddffe, 0x0) r5 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000800)='/dev/snd/pcmC1D1p\x00', 0x200, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS_EXT32(r5, 0xc06c4124, &(0x7f0000000840)={0x7, 0x8, 0x2, 0x1, 0x4, 0x3, 0x1, 0x10001, 0x5, 0xffff473f, 0x80000000, 0x4, 0xb, 0x854, 0x64, 0x3ff, 0x0, 0x8, "547d8f774e7ab98e3ccdbad1e13745f260aa6a6264428625532ee28234827d36031da9ab"}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYBLOB="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"], 0x2e0}, 0x1, 0x0, 0x0, 0x40014}, 0x48845) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(r1, 0xae3d, r4) ioctl$auto_KVM_GET_MSRS(r6, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) 3.193510566s ago: executing program 5 (id=3256): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) kexec_load$auto(0x200000000007, 0x1, &(0x7f0000000040)={@kbuf=0x0, 0x2aaa, 0x6c0000c000, 0xc000}, 0x4) (fail_nth: 6) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) memfd_secret$auto(0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) io_uring_setup$auto(0x6, 0x0) pipe$auto(0x0) ioperm$auto(0x2, 0x7fc, 0x200000) ioperm$auto(0x80, 0x1180, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x11, 0x80003, 0x300) semctl$auto(0x7, 0x2, 0x13, 0x1) setsockopt$auto(r1, 0x107, 0x9, 0x0, 0x20008004) 2.9764405s ago: executing program 7 (id=3257): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x2, 0x1) socket(0x2, 0x801, 0x106) r0 = socket(0x26, 0x80805, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x145) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) readv$auto(0x0, &(0x7f0000000080)={0x0, 0x1e}, 0x2000000000000003) sendmmsg$auto(r0, &(0x7f00000002c0)={{&(0x7f00000000c0)="ec884f21d307bca0fa0eab1883e9b1a8a074cd0eac6e4e6ad4eb2a9c6061b36a12646a982d842b4ed8efbc532a1a29cee1953639845e81506766bca14492386fb3ef185d05674711af25259c9786df1d236f17992efcb32120ae2ce188780f56acf762e481abec3b986d5f32e156fa6be1c8bb50fd0f6a2d5b7492e2a2f434e9b65b04bc89d6ad88fb7bb5045220a1f48bbf2251c788b2cbed01271fb7622367047d48d33a9f4e35e6a13c5d88c6eec7081217e7f581f82cd0afff00facf62baf04d2d99efe08a1f1163", 0xed, &(0x7f0000000040)={&(0x7f00000001c0)="942441208d9658f91bf3803c7d30a9f4809257b5fac13a411ba28fc16d85b3b18c53eacd66cdd330cbdb08cc6c6cf255d776be13ac9fb0345e4ffa04d908260af5c2464aa2f3802c9f53bf5c2e5a1b43dccafbe875bfd1e0d6daa8cc14a2f4bac2b0623ff0e8f03f3c234d75d9ec42808e738e93330c11fdf8d687276ec86482052d872a7e51093b3dab6d64c2313370", 0x9}, 0x72e, &(0x7f0000000280), 0x8}, 0x6}, 0x4, 0x8) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket(0x28, 0x3, 0x1) socket(0x8, 0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) ioctl$auto(0xc8, 0x400454ce, r1) 2.046375903s ago: executing program 7 (id=3258): bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) r0 = prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000040), r0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) r2 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000003640)='/proc/self/numa_maps\x00', 0x40080, 0x0) lseek$auto(r2, 0x7ff, 0x1) 1.580290846s ago: executing program 7 (id=3259): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/nfs/exports\x00', 0x400, 0x0) pread64$auto(r0, 0x0, 0x1ff, 0x8800000000) close_range$auto(0x0, 0x5, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/020/001\x00', 0x209043, 0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0xc0482, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) write$auto_sg_fops_sg(r1, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e) 1.467801841s ago: executing program 7 (id=3260): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) write$auto(r4, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000080)) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) write$auto(r5, &(0x7f0000000100)='d>*\xd2x\xc7\xbf\xff\x9a\xc01(\x00iM\x9c\bAa\x9e\xe98\xee\x15\xd3\xc5v\x99\f|\xe3\xbf\xd9\xf4C\x14A\xe6k\x105\xee\xc5\xaa$\x16\t?g\xb8b\x12\v*\xf9@B\xd0\xd2\x99{\x8b^\xff@\x83\x02Tvt\xc1_\x98\x9f\x16\xd5Is', 0x100000a3da) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) mlockall$auto(0x800000000000005) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r0, 0x1, &(0x7f0000000000)="1404000300000000a5") 366.709342ms ago: executing program 8 (id=3261): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) close_range$auto(0x2, 0x8, 0x0) kexec_load$auto(0x200000000007, 0x1, 0x0, 0x4) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, 0x0, 0x109100, 0x0) memfd_secret$auto(0x0) mmap$auto(0x0, 0x1, 0x18e, 0x8000000000000011, 0xffffffffffffffff, 0x9) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_tipcv2(0x0, r0) prctl$auto(0x1, 0x6, 0x0, 0xb117, 0x9) sendmsg$auto_TIPC_NL_BEARER_ADD(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048804}, 0x4000) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x25, 0x5, 0x2) r1 = socket(0x848000000015, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000240)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, 0x6b) connect$auto(0x3, &(0x7f00000002c0)=@generic={0xa, "5457c29004e0b991da88f70ef61b"}, 0x55) sendmsg$auto_NL80211_CMD_GET_MPATH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x100000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x103880, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) 70.359998ms ago: executing program 5 (id=3262): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card1/pcm0p/sub0/xrun_injection\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) epoll_create$auto(0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xacc0, 0x0) socket(0x2, 0x1, 0x106) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000, 0x79) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0xe07, 0x8000000000000001, 0x80000001, 0x7, 0x6d3f, 0x9, 0x8, 0x4]}, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000440)={[0x10000000001ff, 0x4, 0xe, 0xffffffffffffffff, 0x3, 0x10, 0x3, 0x2, 0x3, 0x62, 0x80000026, 0x7, 0x6d3e, 0x8, 0xd, 0x40000000001]}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) close_range$auto(0x0, 0xfffffffffffff000, 0x5) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.2/usb3/bmAttributes\x00', 0x2000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/190, 0xbe) r2 = signalfd$auto(0xffffffffffffffff, 0x0, 0x3) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000001a40)=""/4100, 0x1004) timer_create$auto(0x3, 0x0, 0x0) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x41400, 0x31) mknodat$auto(r3, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8) execveat$auto(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x0, 0xffffffffffffffff}, {0x0, 0x83}}, 0x0) 0s ago: executing program 7 (id=3263): socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x700000000000000, 0x200007, 0x19) pwrite64$auto(0xc8, 0x0, 0x400f24, 0xc425) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x2, 0x0, 0x0, 0x0, 0x8000000000000000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) prctl$auto_PR_SYS_DISPATCH_ON(0x9, 0x1, r1, 0x6, 0x7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xe2481, 0x0) writev$auto(r2, &(0x7f0000000080)={0x0, 0x1000}, 0x3) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(0xffffffffffffffff, 0x0, 0x30004850) r3 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x48402, 0x0) preadv$auto(r3, &(0x7f0000000440)={0x0, 0x9}, 0x40000000000003, 0x19d, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), r4) sendmsg$auto_NFSD_CMD_VERSION_SET(r4, 0x0, 0x20008844) sendto$auto(r2, &(0x7f0000000180)="33ed694ec423024651b45bb63445e9e27b6c01aa23e1cdc6a2522319136aa8708b6c6fe7aa3f4f41c958322f3ae3704438fd4b", 0x0, 0x1, &(0x7f0000000040)=@l2={0x1f, 0x0, @any, 0x9, 0x1}, 0x80000001) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x503a02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffffff, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) kernel console output (not intermixed with test programs): : ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1342.587534][T21458] RSP: 002b:00007f56865f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1342.587558][T21458] RAX: ffffffffffffffda RBX: 00007f5688616090 RCX: 00007f568839c799 [ 1342.587576][T21458] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1342.587593][T21458] RBP: 00007f56865f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1342.587608][T21458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1342.587625][T21458] R13: 00007f5688616128 R14: 00007f5688616090 R15: 00007fff15237858 [ 1342.587663][T21458] [ 1343.189536][T20761] Bluetooth: hci2: command 0x0406 tx timeout [ 1343.195626][T20761] Bluetooth: hci1: command 0x0406 tx timeout [ 1343.202428][T21043] Bluetooth: hci3: command 0x0406 tx timeout [ 1343.330975][T21455] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1343.342863][T21455] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1343.359427][T21455] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1343.365470][T21455] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1343.372064][T21455] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1343.399919][T21043] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1343.413245][T21043] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1343.424661][T21043] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1343.433290][T21043] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1343.445218][T21043] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1343.573170][T21476] FAULT_INJECTION: forcing a failure. [ 1343.573170][T21476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1343.598998][T21476] CPU: 1 UID: 0 PID: 21476 Comm: syz.4.2876 Tainted: G L syzkaller #0 PREEMPT(full) [ 1343.599040][T21476] Tainted: [L]=SOFTLOCKUP [ 1343.599050][T21476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1343.599066][T21476] Call Trace: [ 1343.599075][T21476] [ 1343.599086][T21476] dump_stack_lvl+0x100/0x190 [ 1343.599130][T21476] should_fail_ex.cold+0x5/0xa [ 1343.599161][T21476] _copy_to_iter+0x5a4/0x1720 [ 1343.599200][T21476] ? __pfx__copy_to_iter+0x10/0x10 [ 1343.599230][T21476] ? single_next+0xd/0x40 [ 1343.599260][T21476] ? single_stop+0x9/0x10 [ 1343.599289][T21476] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 1343.599342][T21476] seq_read_iter+0x691/0x1270 [ 1343.599382][T21476] ? aa_file_perm+0x7f3/0x14d0 [ 1343.599425][T21476] seq_read+0x33b/0x4c0 [ 1343.599461][T21476] ? __pfx_seq_read+0x10/0x10 [ 1343.599505][T21476] ? iovec_from_user+0xda/0x140 [ 1343.599546][T21476] ? __pfx_seq_read+0x10/0x10 [ 1343.599581][T21476] proc_reg_read+0x240/0x330 [ 1343.599620][T21476] ? __pfx_proc_reg_read+0x10/0x10 [ 1343.599655][T21476] vfs_readv+0x5d8/0x8d0 [ 1343.599698][T21476] ? __pfx_vfs_readv+0x10/0x10 [ 1343.599735][T21476] ? find_held_lock+0x2b/0x80 [ 1343.599782][T21476] ? __fget_files+0x21f/0x3d0 [ 1343.599818][T21476] ? do_preadv+0x1ac/0x270 [ 1343.599850][T21476] do_preadv+0x1ac/0x270 [ 1343.599887][T21476] ? __pfx_do_preadv+0x10/0x10 [ 1343.599933][T21476] do_syscall_64+0x106/0xf80 [ 1343.599975][T21476] ? clear_bhb_loop+0x40/0x90 [ 1343.600005][T21476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1343.600032][T21476] RIP: 0033:0x7f568839c799 [ 1343.600055][T21476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1343.600080][T21476] RSP: 002b:00007f5689183028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1343.600105][T21476] RAX: ffffffffffffffda RBX: 00007f5688615fa0 RCX: 00007f568839c799 [ 1343.600123][T21476] RDX: 0000000000000003 RSI: 0000200000000040 RDI: 0000000000000003 [ 1343.600139][T21476] RBP: 00007f5689183090 R08: ffffffffffffffff R09: 0000000000000000 [ 1343.600156][T21476] R10: 00000000000000f8 R11: 0000000000000246 R12: 0000000000000001 [ 1343.600171][T21476] R13: 00007f5688616038 R14: 00007f5688615fa0 R15: 00007fff15237858 [ 1343.600219][T21476] [ 1344.143619][T21464] chnl_net:caif_netlink_parms(): no params data found [ 1344.572794][T21464] bridge0: port 1(bridge_slave_0) entered blocking state [ 1344.580392][T21464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1344.588456][T21464] bridge_slave_0: entered allmulticast mode [ 1344.597861][T21464] bridge_slave_0: entered promiscuous mode [ 1344.607564][T21464] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.615550][T21464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.622887][T21464] bridge_slave_1: entered allmulticast mode [ 1344.630919][T21464] bridge_slave_1: entered promiscuous mode [ 1344.679386][T21464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1344.693086][T21464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1344.739611][T21464] team0: Port device team_slave_0 added [ 1344.748563][T21464] team0: Port device team_slave_1 added [ 1344.785480][T21464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1344.797467][T21464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1344.825677][T21464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1344.841582][T21464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1344.849483][T21464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1344.870223][T21043] Bluetooth: hci4: command 0x0406 tx timeout [ 1344.899370][T21464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1345.006640][T21503] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2881'. [ 1345.043603][T21464] hsr_slave_0: entered promiscuous mode [ 1345.051768][T21464] hsr_slave_1: entered promiscuous mode [ 1345.060499][T21464] debugfs: 'hsr0' already exists in 'hsr' [ 1345.072963][T21464] Cannot create hsr debugfs directory [ 1345.349061][T21043] Bluetooth: hci3: command 0x0406 tx timeout [ 1345.429022][T20761] Bluetooth: hci2: command 0x0406 tx timeout [ 1345.429072][T20761] Bluetooth: hci1: command 0x0406 tx timeout [ 1345.429165][T21043] Bluetooth: hci0: command 0x0c1a tx timeout [ 1345.509138][T21467] Bluetooth: hci5: command tx timeout [ 1345.706544][T21464] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1345.729747][T21464] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1345.741198][T21464] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1345.752899][T21464] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1345.840006][T21464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1345.863744][T21464] 8021q: adding VLAN 0 to HW filter on device team0 [ 1345.875488][T20905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.882653][T20905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1345.900093][T20740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.907227][T20740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1346.193280][T21464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1346.204581][T21512] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1346.220454][T21512] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1346.226570][T21512] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1346.233205][T21512] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1346.242579][T21512] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1346.249469][T21512] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1346.255933][T21512] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1346.271478][T21512] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1346.323259][T21467] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1346.333399][T21467] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1346.341404][T21467] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1346.350141][T21467] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1346.373979][T21467] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1346.685175][T21464] veth0_vlan: entered promiscuous mode [ 1346.788226][T21464] veth1_vlan: entered promiscuous mode [ 1346.804704][T21543] FAULT_INJECTION: forcing a failure. [ 1346.804704][T21543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1346.825849][T21543] CPU: 0 UID: 0 PID: 21543 Comm: syz.4.2887 Tainted: G L syzkaller #0 PREEMPT(full) [ 1346.825890][T21543] Tainted: [L]=SOFTLOCKUP [ 1346.825900][T21543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1346.825915][T21543] Call Trace: [ 1346.825925][T21543] [ 1346.825935][T21543] dump_stack_lvl+0x100/0x190 [ 1346.825975][T21543] should_fail_ex.cold+0x5/0xa [ 1346.826004][T21543] _copy_from_user+0x2e/0xd0 [ 1346.826036][T21543] ____sys_sendmsg+0x1d1/0xb70 [ 1346.826068][T21543] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1346.826101][T21543] ? __pfx__kstrtoull+0x10/0x10 [ 1346.826143][T21543] ___sys_sendmsg+0x190/0x1e0 [ 1346.826175][T21543] ? __pfx____sys_sendmsg+0x10/0x10 [ 1346.826220][T21543] ? find_held_lock+0x2b/0x80 [ 1346.826268][T21543] __sys_sendmmsg+0x205/0x430 [ 1346.826308][T21543] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1346.826355][T21543] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1346.826408][T21543] ? fput+0x79/0x100 [ 1346.826437][T21543] ? ksys_write+0x1ac/0x250 [ 1346.826461][T21543] ? __pfx_ksys_write+0x10/0x10 [ 1346.826491][T21543] __x64_sys_sendmmsg+0x9c/0x100 [ 1346.826525][T21543] ? lockdep_hardirqs_on+0x78/0x100 [ 1346.826567][T21543] do_syscall_64+0x106/0xf80 [ 1346.826599][T21543] ? clear_bhb_loop+0x40/0x90 [ 1346.826631][T21543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.826657][T21543] RIP: 0033:0x7f568839c799 [ 1346.826679][T21543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1346.826702][T21543] RSP: 002b:00007f5689183028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1346.826726][T21543] RAX: ffffffffffffffda RBX: 00007f5688615fa0 RCX: 00007f568839c799 [ 1346.826744][T21543] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000005 [ 1346.826760][T21543] RBP: 00007f5689183090 R08: 0000000000000000 R09: 0000000000000000 [ 1346.826774][T21543] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 1346.826790][T21543] R13: 00007f5688616038 R14: 00007f5688615fa0 R15: 00007fff15237858 [ 1346.826825][T21543] [ 1347.201435][T21515] chnl_net:caif_netlink_parms(): no params data found [ 1347.225988][T21464] veth0_macvtap: entered promiscuous mode [ 1347.285257][T21464] veth1_macvtap: entered promiscuous mode [ 1347.447464][T21464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1347.455072][T21515] bridge0: port 1(bridge_slave_0) entered blocking state [ 1347.463105][T21515] bridge0: port 1(bridge_slave_0) entered disabled state [ 1347.500333][T21515] bridge_slave_0: entered allmulticast mode [ 1347.511555][T21515] bridge_slave_0: entered promiscuous mode [ 1347.520730][T21515] bridge0: port 2(bridge_slave_1) entered blocking state [ 1347.527877][T21515] bridge0: port 2(bridge_slave_1) entered disabled state [ 1347.578452][T21515] bridge_slave_1: entered allmulticast mode [ 1347.596080][T21467] Bluetooth: hci4: command 0x0406 tx timeout [ 1347.599729][T21515] bridge_slave_1: entered promiscuous mode [ 1347.653396][T21464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1347.680888][T20740] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.745818][T20740] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.756993][T20740] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.788232][T21515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1347.864470][T21515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1347.893184][T20740] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1347.978997][T21515] team0: Port device team_slave_0 added [ 1348.019725][T21515] team0: Port device team_slave_1 added [ 1348.048027][T21560] Invalid ELF header magic: != ELF [ 1348.146892][T21515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1348.157591][T21515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1348.183724][T21515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1348.219386][T21515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1348.226356][T21515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1348.229180][T21467] Bluetooth: hci1: command 0x0406 tx timeout [ 1348.266205][T21043] Bluetooth: hci3: command 0x0406 tx timeout [ 1348.310594][T21467] Bluetooth: hci5: command 0x040f tx timeout [ 1348.320145][T21043] Bluetooth: hci0: command 0x0c1a tx timeout [ 1348.326202][T21043] Bluetooth: hci2: command 0x0406 tx timeout [ 1348.328278][T21566] usb usb13: usbfs: process 21566 (syz.3.2893) did not claim interface 10 before use [ 1348.349057][T21515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1348.360038][T21566] FAULT_INJECTION: forcing a failure. [ 1348.360038][T21566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1348.397218][T21022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.410502][T21022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1348.434236][T21566] CPU: 1 UID: 0 PID: 21566 Comm: syz.3.2893 Tainted: G L syzkaller #0 PREEMPT(full) [ 1348.434259][T21566] Tainted: [L]=SOFTLOCKUP [ 1348.434265][T21566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1348.434274][T21566] Call Trace: [ 1348.434279][T21566] [ 1348.434285][T21566] dump_stack_lvl+0x100/0x190 [ 1348.434312][T21566] should_fail_ex.cold+0x5/0xa [ 1348.434329][T21566] _copy_to_user+0x32/0xd0 [ 1348.434348][T21566] simple_read_from_buffer+0xcb/0x170 [ 1348.434371][T21566] proc_fail_nth_read+0x1af/0x230 [ 1348.434390][T21566] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1348.434412][T21566] ? rw_verify_area+0xce/0x6d0 [ 1348.434431][T21566] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1348.434448][T21566] vfs_read+0x1e4/0xb30 [ 1348.434473][T21566] ? __pfx_vfs_read+0x10/0x10 [ 1348.434493][T21566] ? __fget_files+0x215/0x3d0 [ 1348.434510][T21566] ? __fget_files+0x21f/0x3d0 [ 1348.434529][T21566] ksys_read+0x12a/0x250 [ 1348.434541][T21566] ? __pfx_ksys_read+0x10/0x10 [ 1348.434560][T21566] do_syscall_64+0x106/0xf80 [ 1348.434579][T21566] ? clear_bhb_loop+0x40/0x90 [ 1348.434597][T21566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.434612][T21566] RIP: 0033:0x7fa00c55cfce [ 1348.434624][T21566] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1348.434638][T21566] RSP: 002b:00007fa00d398fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1348.434653][T21566] RAX: ffffffffffffffda RBX: 00007fa00d3996c0 RCX: 00007fa00c55cfce [ 1348.434662][T21566] RDX: 000000000000000f RSI: 00007fa00d3990a0 RDI: 0000000000000004 [ 1348.434671][T21566] RBP: 00007fa00d399090 R08: 0000000000000000 R09: 0000000000000000 [ 1348.434680][T21566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1348.434688][T21566] R13: 00007fa00c816038 R14: 00007fa00c815fa0 R15: 00007fff43bd66b8 [ 1348.434708][T21566] [ 1348.469606][T21467] Bluetooth: hci6: command tx timeout [ 1348.646414][T21515] hsr_slave_0: entered promiscuous mode [ 1348.678917][T21515] hsr_slave_1: entered promiscuous mode [ 1348.695463][T21515] debugfs: 'hsr0' already exists in 'hsr' [ 1348.702439][T21515] Cannot create hsr debugfs directory [ 1348.772073][T20740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1348.780609][T20740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1349.268405][T21570] zswap: compressor not available [ 1349.891878][T21515] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1349.963552][T21515] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1350.023935][T21515] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1350.054959][T21515] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1350.389084][T21467] Bluetooth: hci5: command 0x040f tx timeout [ 1350.395721][T21043] Bluetooth: hci0: command 0x0c1a tx timeout [ 1350.453659][T21515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1350.532965][T21515] 8021q: adding VLAN 0 to HW filter on device team0 [ 1350.576854][T20750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1350.584054][T20750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1350.601345][T21591] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2896'. [ 1350.650120][T20750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1350.657314][T20750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1350.709863][T21467] Bluetooth: hci6: command tx timeout [ 1350.783638][T21579] kexec: Could not allocate control_code_buffer [ 1351.147179][T21608] can: request_module (can-proto-0) failed. [ 1351.265429][T21613] netlink: 330 bytes leftover after parsing attributes in process `syz.5.2900'. [ 1351.592869][T21515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1352.227848][T21637] zswap: compressor not available [ 1352.471364][T21467] Bluetooth: hci5: command 0x040f tx timeout [ 1352.789119][T21467] Bluetooth: hci6: command tx timeout [ 1352.872971][T21515] veth0_vlan: entered promiscuous mode [ 1352.989526][T21515] veth1_vlan: entered promiscuous mode [ 1353.261712][T21515] veth0_macvtap: entered promiscuous mode [ 1353.281682][T21515] veth1_macvtap: entered promiscuous mode [ 1353.496503][T21515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1353.532212][T21515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1353.609469][T20750] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.708701][T20750] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.735400][T20750] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.770124][T20750] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1353.987052][T21675] can: request_module (can-proto-0) failed. [ 1354.161086][T20750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1354.180970][T20750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1354.332804][T20750] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1354.358966][T20750] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1354.549162][T21467] Bluetooth: hci5: command 0x040f tx timeout [ 1354.758138][T21689] FAULT_INJECTION: forcing a failure. [ 1354.758138][T21689] name failslab, interval 1, probability 0, space 0, times 0 [ 1354.839851][T21689] CPU: 1 UID: 0 PID: 21689 Comm: syz.5.2912 Tainted: G L syzkaller #0 PREEMPT(full) [ 1354.839892][T21689] Tainted: [L]=SOFTLOCKUP [ 1354.839901][T21689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1354.839915][T21689] Call Trace: [ 1354.839924][T21689] [ 1354.839933][T21689] dump_stack_lvl+0x100/0x190 [ 1354.839973][T21689] should_fail_ex.cold+0x5/0xa [ 1354.840003][T21689] should_failslab+0xc2/0x120 [ 1354.840028][T21689] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1354.840061][T21689] ? alloc_empty_file+0x55/0x1c0 [ 1354.840095][T21689] alloc_empty_file+0x55/0x1c0 [ 1354.840123][T21689] alloc_file_pseudo+0x13a/0x230 [ 1354.840153][T21689] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1354.840193][T21689] __shmem_file_setup+0x221/0x490 [ 1354.840228][T21689] ? __pfx___shmem_file_setup+0x10/0x10 [ 1354.840265][T21689] ? vm_area_alloc+0x1f/0x160 [ 1354.840300][T21689] shmem_zero_setup+0x96/0x1b0 [ 1354.840338][T21689] __mmap_region+0x2198/0x29e0 [ 1354.840378][T21689] ? __pfx___mmap_region+0x10/0x10 [ 1354.840409][T21689] ? process_measurement+0x1f4/0x2350 [ 1354.840452][T21689] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 1354.840481][T21689] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 1354.840567][T21689] ? is_bpf_text_address+0x94/0x1a0 [ 1354.840606][T21689] ? kernel_text_address+0x8d/0x100 [ 1354.840640][T21689] ? __kernel_text_address+0xd/0x30 [ 1354.840712][T21689] ? rcu_is_watching+0x12/0xc0 [ 1354.840746][T21689] ? cap_capable+0x107/0x460 [ 1354.840788][T21689] mmap_region+0x180/0x3e0 [ 1354.840831][T21689] do_mmap+0xc63/0x12f0 [ 1354.840866][T21689] ? __pfx_do_mmap+0x10/0x10 [ 1354.840895][T21689] ? __pfx_down_write_killable+0x10/0x10 [ 1354.840942][T21689] vm_mmap_pgoff+0x29e/0x470 [ 1354.840976][T21689] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1354.841009][T21689] ? __fget_files+0x215/0x3d0 [ 1354.841035][T21689] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1354.841078][T21689] ksys_mmap_pgoff+0xe1/0x650 [ 1354.841110][T21689] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1354.841135][T21689] ? fput+0x79/0x100 [ 1354.841163][T21689] ? ksys_write+0x1ac/0x250 [ 1354.841186][T21689] ? __pfx_ksys_write+0x10/0x10 [ 1354.841214][T21689] __x64_sys_mmap+0x125/0x190 [ 1354.841255][T21689] do_syscall_64+0x106/0xf80 [ 1354.841288][T21689] ? clear_bhb_loop+0x40/0x90 [ 1354.841319][T21689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.841347][T21689] RIP: 0033:0x7f614f59c799 [ 1354.841369][T21689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1354.841395][T21689] RSP: 002b:00007f6150457028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1354.841420][T21689] RAX: ffffffffffffffda RBX: 00007f614f815fa0 RCX: 00007f614f59c799 [ 1354.841438][T21689] RDX: 00004000000000df RSI: 0000000000000101 RDI: 0000000000000000 [ 1354.841455][T21689] RBP: 00007f6150457090 R08: 0000000200000401 R09: 0000000000008000 [ 1354.841471][T21689] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000001 [ 1354.841487][T21689] R13: 00007f614f816038 R14: 00007f614f815fa0 R15: 00007ffd66a947c8 [ 1354.841530][T21689] [ 1354.869251][T21467] Bluetooth: hci6: command tx timeout [ 1355.435892][T21699] zswap: compressor not available [ 1356.346429][T21717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2919'. [ 1356.629812][T21043] Bluetooth: hci5: command 0x040f tx timeout [ 1357.051085][T21729] FAULT_INJECTION: forcing a failure. [ 1357.051085][T21729] name failslab, interval 1, probability 0, space 0, times 0 [ 1357.129930][T21729] CPU: 1 UID: 0 PID: 21729 Comm: syz.5.2920 Tainted: G L syzkaller #0 PREEMPT(full) [ 1357.129970][T21729] Tainted: [L]=SOFTLOCKUP [ 1357.129979][T21729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1357.129991][T21729] Call Trace: [ 1357.129999][T21729] [ 1357.130009][T21729] dump_stack_lvl+0x100/0x190 [ 1357.130047][T21729] should_fail_ex.cold+0x5/0xa [ 1357.130074][T21729] should_failslab+0xc2/0x120 [ 1357.130100][T21729] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1357.130137][T21729] ? alloc_empty_file+0x55/0x1c0 [ 1357.130166][T21729] ? __pfx_stack_trace_save+0x10/0x10 [ 1357.130197][T21729] alloc_empty_file+0x55/0x1c0 [ 1357.130225][T21729] path_openat+0xe8/0x31a0 [ 1357.130248][T21729] ? kasan_save_stack+0x3f/0x50 [ 1357.130285][T21729] ? kasan_save_stack+0x30/0x50 [ 1357.130319][T21729] ? kasan_save_track+0x14/0x30 [ 1357.130353][T21729] ? __kasan_slab_alloc+0x89/0x90 [ 1357.130373][T21729] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1357.130405][T21729] ? do_getname+0x35/0x390 [ 1357.130431][T21729] ? do_sys_openat2+0xc5/0x1e0 [ 1357.130459][T21729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.130488][T21729] ? __pfx_path_openat+0x10/0x10 [ 1357.130522][T21729] do_file_open+0x20e/0x430 [ 1357.130548][T21729] ? __pfx_do_file_open+0x10/0x10 [ 1357.130593][T21729] ? alloc_fd+0x476/0x790 [ 1357.130620][T21729] ? do_getname+0x191/0x390 [ 1357.130649][T21729] do_sys_openat2+0x10d/0x1e0 [ 1357.130678][T21729] ? __pfx_do_sys_openat2+0x10/0x10 [ 1357.130705][T21729] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1357.130742][T21729] ? __fget_files+0x21f/0x3d0 [ 1357.130769][T21729] __x64_sys_openat+0x12d/0x210 [ 1357.130799][T21729] ? __pfx___x64_sys_openat+0x10/0x10 [ 1357.130827][T21729] ? ksys_write+0x1ac/0x250 [ 1357.130859][T21729] do_syscall_64+0x106/0xf80 [ 1357.130888][T21729] ? clear_bhb_loop+0x40/0x90 [ 1357.130916][T21729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.130946][T21729] RIP: 0033:0x7f614f59c799 [ 1357.130965][T21729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1357.130988][T21729] RSP: 002b:00007f6150415028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1357.131011][T21729] RAX: ffffffffffffffda RBX: 00007f614f816180 RCX: 00007f614f59c799 [ 1357.131027][T21729] RDX: 0000000000042000 RSI: 0000200000000b00 RDI: ffffffffffffff9c [ 1357.131041][T21729] RBP: 00007f6150415090 R08: 0000000000000000 R09: 0000000000000000 [ 1357.131056][T21729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1357.131069][T21729] R13: 00007f614f816218 R14: 00007f614f816180 R15: 00007ffd66a947c8 [ 1357.131101][T21729] [ 1357.772732][T21734] FAULT_INJECTION: forcing a failure. [ 1357.772732][T21734] name failslab, interval 1, probability 0, space 0, times 0 [ 1357.786949][T21734] CPU: 1 UID: 0 PID: 21734 Comm: syz.6.2922 Tainted: G L syzkaller #0 PREEMPT(full) [ 1357.786988][T21734] Tainted: [L]=SOFTLOCKUP [ 1357.786997][T21734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1357.787013][T21734] Call Trace: [ 1357.787022][T21734] [ 1357.787031][T21734] dump_stack_lvl+0x100/0x190 [ 1357.787076][T21734] should_fail_ex.cold+0x5/0xa [ 1357.787107][T21734] ? kvm_io_bus_register_dev+0x1d2/0x710 [ 1357.787137][T21734] should_failslab+0xc2/0x120 [ 1357.787164][T21734] __kmalloc_noprof+0xe0/0x850 [ 1357.787209][T21734] kvm_io_bus_register_dev+0x1d2/0x710 [ 1357.787249][T21734] kvm_pic_init+0x25e/0x380 [ 1357.787290][T21734] kvm_arch_vm_ioctl+0xec4/0x18d0 [ 1357.787322][T21734] ? __lock_acquire+0x4a5/0x2630 [ 1357.787354][T21734] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 1357.787393][T21734] ? __lock_acquire+0x4a5/0x2630 [ 1357.787432][T21734] ? __lock_acquire+0x4a5/0x2630 [ 1357.787469][T21734] ? __lock_acquire+0x4a5/0x2630 [ 1357.787508][T21734] ? __lock_acquire+0x4a5/0x2630 [ 1357.787563][T21734] ? is_bpf_text_address+0x8a/0x1a0 [ 1357.787602][T21734] ? bpf_ksym_find+0x124/0x1c0 [ 1357.787632][T21734] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1357.787659][T21734] ? is_bpf_text_address+0x94/0x1a0 [ 1357.787695][T21734] ? kernel_text_address+0x8d/0x100 [ 1357.787729][T21734] ? __kernel_text_address+0xd/0x30 [ 1357.787773][T21734] ? unwind_get_return_address+0x59/0xa0 [ 1357.787800][T21734] ? arch_stack_walk+0xa6/0xf0 [ 1357.787837][T21734] ? tomoyo_path_number_perm+0x46d/0x580 [ 1357.787868][T21734] ? stack_trace_save+0x8e/0xc0 [ 1357.787894][T21734] ? __pfx_stack_trace_save+0x10/0x10 [ 1357.787920][T21734] ? stack_depot_save_flags+0x27/0x9d0 [ 1357.787953][T21734] ? __lock_acquire+0x4a5/0x2630 [ 1357.787985][T21734] ? tomoyo_path_number_perm+0x46d/0x580 [ 1357.788012][T21734] ? kasan_save_stack+0x3f/0x50 [ 1357.788048][T21734] ? kasan_save_stack+0x30/0x50 [ 1357.788083][T21734] ? kasan_save_track+0x14/0x30 [ 1357.788117][T21734] ? kasan_save_free_info+0x3b/0x70 [ 1357.788147][T21734] ? __kasan_slab_free+0x5f/0x80 [ 1357.788176][T21734] kvm_vm_ioctl+0x1564/0x4080 [ 1357.788216][T21734] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1357.788281][T21734] ? tomoyo_path_number_perm+0x46d/0x580 [ 1357.788312][T21734] ? kasan_quarantine_put+0x104/0x240 [ 1357.788346][T21734] ? lockdep_hardirqs_on+0x78/0x100 [ 1357.788382][T21734] ? find_held_lock+0x2b/0x80 [ 1357.788405][T21734] ? tomoyo_path_number_perm+0x28f/0x580 [ 1357.788433][T21734] ? tomoyo_path_number_perm+0x28f/0x580 [ 1357.788467][T21734] ? tomoyo_path_number_perm+0x188/0x580 [ 1357.788497][T21734] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1357.788538][T21734] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1357.788580][T21734] ? do_vfs_ioctl+0x226/0x13e0 [ 1357.788615][T21734] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1357.788661][T21734] ? find_held_lock+0x2b/0x80 [ 1357.788685][T21734] ? __fget_files+0x215/0x3d0 [ 1357.788708][T21734] ? hook_file_ioctl_common+0x146/0x410 [ 1357.788744][T21734] ? __fget_files+0x21f/0x3d0 [ 1357.788780][T21734] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1357.788806][T21734] __x64_sys_ioctl+0x18e/0x210 [ 1357.788845][T21734] do_syscall_64+0x106/0xf80 [ 1357.788874][T21734] ? clear_bhb_loop+0x40/0x90 [ 1357.788903][T21734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.788928][T21734] RIP: 0033:0x7f5b3459c799 [ 1357.788950][T21734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1357.788976][T21734] RSP: 002b:00007f5b35479028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1357.789001][T21734] RAX: ffffffffffffffda RBX: 00007f5b34815fa0 RCX: 00007f5b3459c799 [ 1357.789020][T21734] RDX: ffffffffffffffff RSI: 000000000000ae60 RDI: 0000000000000003 [ 1357.789036][T21734] RBP: 00007f5b35479090 R08: 0000000000000000 R09: 0000000000000000 [ 1357.789053][T21734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1357.789068][T21734] R13: 00007f5b34816038 R14: 00007f5b34815fa0 R15: 00007fff4b8226c8 [ 1357.789107][T21734] [ 1361.069744][T21771] netlink: 'syz.3.2931': attribute type 1 has an invalid length. [ 1361.312258][T21777] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2933'. [ 1361.334770][T21777] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2933'. [ 1361.367745][T21777] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.437842][T21777] bridge_slave_1 (unregistering): left allmulticast mode [ 1361.447654][T21777] bridge_slave_1 (unregistering): left promiscuous mode [ 1361.458980][T21777] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.517610][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.524016][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.229798][T21785] FAULT_INJECTION: forcing a failure. [ 1362.229798][T21785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1362.380619][T21785] CPU: 0 UID: 0 PID: 21785 Comm: syz.6.2935 Tainted: G L syzkaller #0 PREEMPT(full) [ 1362.380644][T21785] Tainted: [L]=SOFTLOCKUP [ 1362.380650][T21785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1362.380659][T21785] Call Trace: [ 1362.380664][T21785] [ 1362.380670][T21785] dump_stack_lvl+0x100/0x190 [ 1362.380696][T21785] should_fail_ex.cold+0x5/0xa [ 1362.380713][T21785] _copy_to_user+0x32/0xd0 [ 1362.380732][T21785] simple_read_from_buffer+0xcb/0x170 [ 1362.380755][T21785] proc_fail_nth_read+0x1af/0x230 [ 1362.380773][T21785] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1362.380792][T21785] ? rw_verify_area+0xce/0x6d0 [ 1362.380812][T21785] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1362.380829][T21785] vfs_read+0x1e4/0xb30 [ 1362.380853][T21785] ? __pfx_vfs_read+0x10/0x10 [ 1362.380873][T21785] ? __fget_files+0x215/0x3d0 [ 1362.380890][T21785] ? __fget_files+0x21f/0x3d0 [ 1362.380909][T21785] ksys_read+0x12a/0x250 [ 1362.380921][T21785] ? __pfx_ksys_read+0x10/0x10 [ 1362.380946][T21785] do_syscall_64+0x106/0xf80 [ 1362.380965][T21785] ? clear_bhb_loop+0x40/0x90 [ 1362.380983][T21785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.380997][T21785] RIP: 0033:0x7f5b3455cfce [ 1362.381009][T21785] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1362.381023][T21785] RSP: 002b:00007f5b35478fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1362.381037][T21785] RAX: ffffffffffffffda RBX: 00007f5b354796c0 RCX: 00007f5b3455cfce [ 1362.381047][T21785] RDX: 000000000000000f RSI: 00007f5b354790a0 RDI: 0000000000000004 [ 1362.381055][T21785] RBP: 00007f5b35479090 R08: 0000000000000000 R09: 0000000000000000 [ 1362.381064][T21785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1362.381073][T21785] R13: 00007f5b34816038 R14: 00007f5b34815fa0 R15: 00007fff4b8226c8 [ 1362.381092][T21785] [ 1362.601126][T21788] netlink: 'syz.5.2936': attribute type 1 has an invalid length. [ 1363.860022][T21808] FAULT_INJECTION: forcing a failure. [ 1363.860022][T21808] name failslab, interval 1, probability 0, space 0, times 0 [ 1363.909107][T21808] CPU: 0 UID: 0 PID: 21808 Comm: syz.5.2941 Tainted: G L syzkaller #0 PREEMPT(full) [ 1363.909133][T21808] Tainted: [L]=SOFTLOCKUP [ 1363.909138][T21808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1363.909147][T21808] Call Trace: [ 1363.909153][T21808] [ 1363.909159][T21808] dump_stack_lvl+0x100/0x190 [ 1363.909186][T21808] should_fail_ex.cold+0x5/0xa [ 1363.909204][T21808] should_failslab+0xc2/0x120 [ 1363.909219][T21808] __kmalloc_cache_node_noprof+0x7d/0x770 [ 1363.909241][T21808] ? __kernel_text_address+0xd/0x30 [ 1363.909260][T21808] ? __get_vm_area_node+0x101/0x330 [ 1363.909275][T21808] ? unwind_get_return_address+0x59/0xa0 [ 1363.909294][T21808] __get_vm_area_node+0x101/0x330 [ 1363.909313][T21808] __vmalloc_node_range_noprof+0x213/0x1530 [ 1363.909331][T21808] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 1363.909352][T21808] ? __pfx_stack_trace_save+0x10/0x10 [ 1363.909368][T21808] ? stack_depot_save_flags+0x27/0x9d0 [ 1363.909388][T21808] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 1363.909408][T21808] ? kasan_save_stack+0x30/0x50 [ 1363.909429][T21808] ? kasan_save_track+0x14/0x30 [ 1363.909448][T21808] ? __kasan_kmalloc+0xaa/0xb0 [ 1363.909467][T21808] ? memdup_user+0x2a/0xe0 [ 1363.909480][T21808] ? __x64_sys_ioctl+0x18e/0x210 [ 1363.909499][T21808] ? do_syscall_64+0x106/0xf80 [ 1363.909519][T21808] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1363.909545][T21808] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 1363.909564][T21808] __vmalloc_node_noprof+0xad/0xf0 [ 1363.909581][T21808] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 1363.909603][T21808] __vmalloc_noprof+0xa3/0x120 [ 1363.909620][T21808] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1363.909643][T21808] bpf_prog_alloc_no_stats+0x58/0x640 [ 1363.909665][T21808] bpf_prog_alloc+0x3b/0x200 [ 1363.909685][T21808] bpf_prog_create+0xa5/0x240 [ 1363.909802][T21808] get_filter.isra.0+0xdd/0x160 [ 1363.909822][T21808] ? __pfx_get_filter.isra.0+0x10/0x10 [ 1363.909845][T21808] ppp_ioctl+0x175b/0x2800 [ 1363.909873][T21808] ? find_held_lock+0x2b/0x80 [ 1363.909887][T21808] ? __pfx_ppp_ioctl+0x10/0x10 [ 1363.909909][T21808] ? __fget_files+0x21f/0x3d0 [ 1363.909925][T21808] ? __pfx_ppp_ioctl+0x10/0x10 [ 1363.909945][T21808] __x64_sys_ioctl+0x18e/0x210 [ 1363.909966][T21808] do_syscall_64+0x106/0xf80 [ 1363.909984][T21808] ? clear_bhb_loop+0x40/0x90 [ 1363.910001][T21808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.910016][T21808] RIP: 0033:0x7f614f59c799 [ 1363.910030][T21808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1363.910046][T21808] RSP: 002b:00007f6150457028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1363.910061][T21808] RAX: ffffffffffffffda RBX: 00007f614f815fa0 RCX: 00007f614f59c799 [ 1363.910070][T21808] RDX: 00002000000000c0 RSI: 0000000040107447 RDI: 0000000000000003 [ 1363.910079][T21808] RBP: 00007f6150457090 R08: 0000000000000000 R09: 0000000000000000 [ 1363.910087][T21808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1363.910096][T21808] R13: 00007f614f816038 R14: 00007f614f815fa0 R15: 00007ffd66a947c8 [ 1363.910115][T21808] [ 1363.911491][T21808] syz.5.2941: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1364.283172][T21808] CPU: 1 UID: 0 PID: 21808 Comm: syz.5.2941 Tainted: G L syzkaller #0 PREEMPT(full) [ 1364.283209][T21808] Tainted: [L]=SOFTLOCKUP [ 1364.283217][T21808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1364.283233][T21808] Call Trace: [ 1364.283241][T21808] [ 1364.283250][T21808] dump_stack_lvl+0x100/0x190 [ 1364.283293][T21808] warn_alloc.cold+0x95/0x1c1 [ 1364.283361][T21808] ? __pfx_warn_alloc+0x10/0x10 [ 1364.283381][T21808] ? trace_kmalloc+0x101/0x130 [ 1364.283397][T21808] ? __kmalloc_cache_node_noprof+0x2d9/0x770 [ 1364.283428][T21808] ? __kasan_kmalloc+0x8a/0xb0 [ 1364.283450][T21808] ? __get_vm_area_node+0x208/0x330 [ 1364.283470][T21808] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1364.283488][T21808] ? __pfx_stack_trace_save+0x10/0x10 [ 1364.283503][T21808] ? stack_depot_save_flags+0x27/0x9d0 [ 1364.283523][T21808] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 1364.283544][T21808] ? kasan_save_stack+0x30/0x50 [ 1364.283564][T21808] ? kasan_save_track+0x14/0x30 [ 1364.283583][T21808] ? __kasan_kmalloc+0xaa/0xb0 [ 1364.283602][T21808] ? memdup_user+0x2a/0xe0 [ 1364.283615][T21808] ? __x64_sys_ioctl+0x18e/0x210 [ 1364.283633][T21808] ? do_syscall_64+0x106/0xf80 [ 1364.283654][T21808] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1364.283680][T21808] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 1364.283699][T21808] __vmalloc_node_noprof+0xad/0xf0 [ 1364.283716][T21808] ? bpf_prog_alloc_no_stats+0x58/0x640 [ 1364.283737][T21808] __vmalloc_noprof+0xa3/0x120 [ 1364.283754][T21808] ? __pfx___vmalloc_noprof+0x10/0x10 [ 1364.283777][T21808] bpf_prog_alloc_no_stats+0x58/0x640 [ 1364.283800][T21808] bpf_prog_alloc+0x3b/0x200 [ 1364.283820][T21808] bpf_prog_create+0xa5/0x240 [ 1364.283844][T21808] get_filter.isra.0+0xdd/0x160 [ 1364.283863][T21808] ? __pfx_get_filter.isra.0+0x10/0x10 [ 1364.283887][T21808] ppp_ioctl+0x175b/0x2800 [ 1364.283907][T21808] ? find_held_lock+0x2b/0x80 [ 1364.283926][T21808] ? __pfx_ppp_ioctl+0x10/0x10 [ 1364.283949][T21808] ? __fget_files+0x21f/0x3d0 [ 1364.283965][T21808] ? __pfx_ppp_ioctl+0x10/0x10 [ 1364.283985][T21808] __x64_sys_ioctl+0x18e/0x210 [ 1364.284006][T21808] do_syscall_64+0x106/0xf80 [ 1364.284024][T21808] ? clear_bhb_loop+0x40/0x90 [ 1364.284042][T21808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.284056][T21808] RIP: 0033:0x7f614f59c799 [ 1364.284069][T21808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1364.284084][T21808] RSP: 002b:00007f6150457028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1364.284098][T21808] RAX: ffffffffffffffda RBX: 00007f614f815fa0 RCX: 00007f614f59c799 [ 1364.284108][T21808] RDX: 00002000000000c0 RSI: 0000000040107447 RDI: 0000000000000003 [ 1364.284117][T21808] RBP: 00007f6150457090 R08: 0000000000000000 R09: 0000000000000000 [ 1364.284126][T21808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1364.284134][T21808] R13: 00007f614f816038 R14: 00007f614f815fa0 R15: 00007ffd66a947c8 [ 1364.284153][T21808] [ 1364.284262][T21808] Mem-Info: [ 1364.688962][T21808] active_anon:21923 inactive_anon:6 isolated_anon:0 [ 1364.688962][T21808] active_file:14659 inactive_file:48573 isolated_file:0 [ 1364.688962][T21808] unevictable:766 dirty:454 writeback:0 [ 1364.688962][T21808] slab_reclaimable:13561 slab_unreclaimable:121600 [ 1364.688962][T21808] mapped:49937 shmem:9126 pagetables:1331 [ 1364.688962][T21808] sec_pagetables:0 bounce:0 [ 1364.688962][T21808] kernel_misc_reclaimable:0 [ 1364.688962][T21808] free:1199270 free_pcp:28601 free_cma:0 [ 1364.788925][T21808] Node 0 active_anon:89620kB inactive_anon:24kB active_file:58440kB inactive_file:193880kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135668kB dirty:1808kB writeback:0kB shmem:36880kB shmem_thp:4096kB shmem_pmdmapped:0kB anon_thp:24576kB kernel_stack:13896kB pagetables:5216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1364.858959][T21808] Node 1 active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:65984kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1364.941691][T21808] Node 0 DMA free:11264kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1365.098931][T21808] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 1365.104757][T21808] Node 0 DMA32 free:1062788kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:102684kB inactive_anon:24kB active_file:58500kB inactive_file:193880kB unevictable:1536kB writepending:1824kB zspages:12kB present:3129332kB managed:2537384kB mlocked:0kB bounce:0kB free_pcp:38020kB local_pcp:33896kB free_cma:0kB [ 1365.248387][T21808] lowmem_reserve[]: 0 0 1 1 1 [ 1365.293013][T21808] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1365.384925][T21805] kexec: Could not allocate control_code_buffer [ 1365.408152][T21808] lowmem_reserve[]: 0 0 0 0 0 [ 1365.428987][T21808] Node 1 Normal free:3761172kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:412kB unevictable:1536kB writepending:12kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:51360kB local_pcp:25056kB free_cma:0kB [ 1365.500782][T21808] lowmem_reserve[]: 0 0 0 0 0 [ 1365.508334][T21808] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (UM) = 11264kB [ 1365.525778][T21808] Node 0 DMA32: 52*4kB (UE) 236*8kB (UE) 3098*16kB (UM) 896*32kB (UME) 758*64kB (UME) 831*128kB (UME) 939*256kB (UME) 585*512kB (UME) 314*1024kB (UME) 0*2048kB 0*4096kB = 1096656kB [ 1365.547937][T21808] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1365.595009][T21808] Node 1 Normal: 11*4kB (U) 13*8kB (U) 22*16kB (U) 5*32kB (U) 6*64kB (U) 10*128kB (UM) 9*256kB (UM) 9*512kB (UM) 8*1024kB (UM) 14*2048kB (UM) 907*4096kB (UM) = 3761172kB [ 1365.868888][T21808] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1365.878483][T21808] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1365.902860][T21808] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1365.918980][T21808] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1365.959339][T21808] 78589 total pagecache pages [ 1365.991403][T21808] 1 pages in swap cache [ 1365.995649][T21808] Free swap = 122936kB [ 1366.029283][T21808] Total swap = 124996kB [ 1366.158956][T21808] 2097051 pages RAM [ 1366.305928][T21808] 0 pages HighMem/MovableOnly [ 1366.317698][T21808] 430825 pages reserved [ 1366.328963][T21808] 0 pages cma reserved [ 1367.303268][T21826] zswap: compressor not available [ 1367.542082][T21813] kexec: Could not allocate control_code_buffer [ 1368.028683][T21844] can: request_module (can-proto-0) failed. [ 1369.331657][T21860] netlink: 'syz.3.2954': attribute type 1 has an invalid length. [ 1369.362830][T21043] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1369.380131][T21043] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1369.388597][T21043] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1369.413681][T21043] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1369.425899][T21043] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1370.025201][T21861] chnl_net:caif_netlink_parms(): no params data found [ 1370.324937][T21861] bridge0: port 1(bridge_slave_0) entered blocking state [ 1370.349940][T21861] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.380768][T21861] bridge_slave_0: entered allmulticast mode [ 1370.407528][T21861] bridge_slave_0: entered promiscuous mode [ 1370.440252][T21861] bridge0: port 2(bridge_slave_1) entered blocking state [ 1370.451971][T21861] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.460396][T21861] bridge_slave_1: entered allmulticast mode [ 1370.481072][T21861] bridge_slave_1: entered promiscuous mode [ 1370.639145][T21861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1370.684980][T21861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1370.849872][T21861] team0: Port device team_slave_0 added [ 1371.525547][T21043] Bluetooth: hci7: command tx timeout [ 1371.615225][T21894] zswap: compressor not available [ 1371.625795][T21861] team0: Port device team_slave_1 added [ 1371.919578][T21861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1371.929576][T21861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1372.004773][T21910] netlink: 'syz.5.2964': attribute type 1 has an invalid length. [ 1372.094367][T21861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1372.159077][T21861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1372.166038][T21861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1372.279641][T21861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1372.376940][T21861] hsr_slave_0: entered promiscuous mode [ 1372.396072][T21861] hsr_slave_1: entered promiscuous mode [ 1372.412728][T21861] debugfs: 'hsr0' already exists in 'hsr' [ 1372.423321][T21861] Cannot create hsr debugfs directory [ 1373.136899][T21861] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1373.246241][T21861] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1373.394477][T21861] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1373.603234][T21043] Bluetooth: hci7: command tx timeout [ 1373.753125][T21861] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1374.040888][T21936] FAULT_INJECTION: forcing a failure. [ 1374.040888][T21936] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1374.075615][T21936] CPU: 1 UID: 0 PID: 21936 Comm: syz.5.2969 Tainted: G L syzkaller #0 PREEMPT(full) [ 1374.075650][T21936] Tainted: [L]=SOFTLOCKUP [ 1374.075656][T21936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1374.075665][T21936] Call Trace: [ 1374.075670][T21936] [ 1374.075677][T21936] dump_stack_lvl+0x100/0x190 [ 1374.075706][T21936] should_fail_ex.cold+0x5/0xa [ 1374.075720][T21936] ? prepare_alloc_pages+0x16d/0x5f0 [ 1374.075738][T21936] should_fail_alloc_page+0xeb/0x140 [ 1374.075755][T21936] prepare_alloc_pages+0x1f0/0x5f0 [ 1374.075780][T21936] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1374.075805][T21936] ? __lock_acquire+0x4a5/0x2630 [ 1374.075829][T21936] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1374.075851][T21936] ? do_raw_spin_lock+0x128/0x260 [ 1374.075871][T21936] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1374.075891][T21936] ? find_held_lock+0x2b/0x80 [ 1374.075909][T21936] ? __lock_acquire+0x4a5/0x2630 [ 1374.075927][T21936] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1374.075950][T21936] ? policy_nodemask+0xed/0x4f0 [ 1374.075967][T21936] alloc_pages_mpol+0x1fb/0x550 [ 1374.075983][T21936] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1374.075998][T21936] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 1374.076019][T21936] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 1374.076043][T21936] folio_alloc_mpol_noprof+0x36/0x340 [ 1374.076061][T21936] shmem_alloc_folio+0x135/0x160 [ 1374.076080][T21936] shmem_alloc_and_add_folio+0x371/0xd40 [ 1374.076105][T21936] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1374.076127][T21936] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1374.076151][T21936] shmem_get_folio_gfp+0x6ab/0x1900 [ 1374.076176][T21936] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1374.076198][T21936] ? filemap_map_pages+0xe69/0x2020 [ 1374.076221][T21936] shmem_fault+0x1f9/0xa20 [ 1374.076240][T21936] ? __lock_acquire+0x4a5/0x2630 [ 1374.076258][T21936] ? __pfx_shmem_fault+0x10/0x10 [ 1374.076281][T21936] ? __pfx_filemap_map_pages+0x10/0x10 [ 1374.076306][T21936] __do_fault+0x10d/0x550 [ 1374.076322][T21936] do_fault+0xabb/0x1990 [ 1374.076341][T21936] __handle_mm_fault+0x180f/0x2b60 [ 1374.076363][T21936] ? mt_find+0x45e/0x8e0 [ 1374.076384][T21936] ? __pfx___handle_mm_fault+0x10/0x10 [ 1374.076401][T21936] ? __pfx_mt_find+0x10/0x10 [ 1374.076431][T21936] ? find_vma+0xbf/0x140 [ 1374.076444][T21936] ? __pfx_find_vma+0x10/0x10 [ 1374.076459][T21936] handle_mm_fault+0x36d/0xa20 [ 1374.076482][T21936] do_user_addr_fault+0x74c/0x12f0 [ 1374.076509][T21936] exc_page_fault+0x6f/0xd0 [ 1374.076529][T21936] asm_exc_page_fault+0x26/0x30 [ 1374.076543][T21936] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1374.076559][T21936] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1374.076573][T21936] RSP: 0018:ffffc90004517888 EFLAGS: 00050202 [ 1374.076586][T21936] RAX: 0000000000000001 RBX: ffff888056ed85c8 RCX: 0000000000003a38 [ 1374.076595][T21936] RDX: 0000000000000001 RSI: 0000000000004000 RDI: ffff888056edc5c8 [ 1374.076604][T21936] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100addbfff [ 1374.076613][T21936] R10: ffff888056edffff R11: 0000000000000000 R12: ffffc90004517c40 [ 1374.076622][T21936] R13: 0000000000000000 R14: 0000000000007a38 R15: 0000000000000000 [ 1374.076641][T21936] _copy_from_iter+0x355/0x1690 [ 1374.076661][T21936] ? __pfx_tcp_leave_memory_pressure+0x10/0x10 [ 1374.076677][T21936] ? sk_leave_memory_pressure+0x81/0x140 [ 1374.076694][T21936] ? __pfx__copy_from_iter+0x10/0x10 [ 1374.076709][T21936] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1374.076727][T21936] ? __sk_mem_schedule+0xd0/0x100 [ 1374.076751][T21936] tcp_sendmsg_locked+0xc8f/0x45e0 [ 1374.076782][T21936] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1374.076799][T21936] ? do_raw_spin_lock+0x128/0x260 [ 1374.076819][T21936] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1374.076843][T21936] ? __local_bh_enable_ip+0x9e/0x120 [ 1374.076861][T21936] tcp_sendmsg+0x2e/0x50 [ 1374.076874][T21936] ? __pfx_tcp_sendmsg+0x10/0x10 [ 1374.076888][T21936] inet_sendmsg+0xb9/0x140 [ 1374.076905][T21936] sock_write_iter+0x4ea/0x5a0 [ 1374.076919][T21936] ? __pfx_inet_sendmsg+0x10/0x10 [ 1374.076934][T21936] ? __pfx_sock_write_iter+0x10/0x10 [ 1374.076955][T21936] ? bpf_lsm_file_permission+0x9/0x10 [ 1374.076976][T21936] ? security_file_permission+0x76/0x210 [ 1374.076995][T21936] ? rw_verify_area+0xce/0x6d0 [ 1374.077016][T21936] vfs_write+0x6ac/0x1070 [ 1374.077030][T21936] ? __pfx_sock_write_iter+0x10/0x10 [ 1374.077046][T21936] ? __pfx_vfs_write+0x10/0x10 [ 1374.077066][T21936] ? find_held_lock+0x2b/0x80 [ 1374.077091][T21936] ksys_write+0x1f8/0x250 [ 1374.077104][T21936] ? __pfx_ksys_write+0x10/0x10 [ 1374.077123][T21936] do_syscall_64+0x106/0xf80 [ 1374.077142][T21936] ? clear_bhb_loop+0x40/0x90 [ 1374.077158][T21936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.077173][T21936] RIP: 0033:0x7f614f59c799 [ 1374.077186][T21936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1374.077199][T21936] RSP: 002b:00007f6150457028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1374.077212][T21936] RAX: ffffffffffffffda RBX: 00007f614f815fa0 RCX: 00007f614f59c799 [ 1374.077221][T21936] RDX: 0000000000100085 RSI: 0000000000000000 RDI: 0000000000000003 [ 1374.077229][T21936] RBP: 00007f6150457090 R08: 0000000000000000 R09: 0000000000000000 [ 1374.077238][T21936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1374.077246][T21936] R13: 00007f614f816038 R14: 00007f614f815fa0 R15: 00007ffd66a947c8 [ 1374.077265][T21936] [ 1374.650569][T21861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1374.672743][T21861] 8021q: adding VLAN 0 to HW filter on device team0 [ 1374.742204][T20749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.749493][T20749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1374.779401][T20749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.786494][T20749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1375.437474][T21861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1375.653153][T21955] netlink: 'syz.6.2973': attribute type 1 has an invalid length. [ 1375.673869][T21043] Bluetooth: hci7: command tx timeout [ 1376.415394][T21861] veth0_vlan: entered promiscuous mode [ 1376.434792][T21861] veth1_vlan: entered promiscuous mode [ 1376.481423][T21861] veth0_macvtap: entered promiscuous mode [ 1376.492785][T21861] veth1_macvtap: entered promiscuous mode [ 1376.551857][T21861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1376.577207][T21861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1376.627904][T20749] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.714685][T20749] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.822934][T20749] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1376.849307][T20749] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1377.081620][T21022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.122089][T21022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1377.287236][T21022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1377.318993][T21022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1377.442054][T21968] zswap: compressor not available [ 1377.757443][T21043] Bluetooth: hci7: command tx timeout [ 1378.094759][T21963] kexec: Could not allocate control_code_buffer [ 1380.306461][T22001] can: request_module (can-proto-0) failed. [ 1380.730819][T22008] program syz.5.2981 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1381.058385][T21995] kexec: Could not allocate control_code_buffer [ 1381.180148][T22007] can: request_module (can-proto-0) failed. [ 1381.418870][T22018] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2984'. [ 1381.447117][T22017] delete_channel: no stack [ 1381.640777][T22022] zswap: compressor not available [ 1383.660704][T22056] can: request_module (can-proto-0) failed. [ 1383.765677][T22060] binder_alloc: binder_alloc_mmap_handler: 22059 0-1000 already mapped failed -16 [ 1383.799497][T22060] FAULT_INJECTION: forcing a failure. [ 1383.799497][T22060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1383.819426][T22060] CPU: 0 UID: 0 PID: 22060 Comm: syz.7.2992 Tainted: G L syzkaller #0 PREEMPT(full) [ 1383.819453][T22060] Tainted: [L]=SOFTLOCKUP [ 1383.819462][T22060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1383.819477][T22060] Call Trace: [ 1383.819486][T22060] [ 1383.819497][T22060] dump_stack_lvl+0x100/0x190 [ 1383.819543][T22060] should_fail_ex.cold+0x5/0xa [ 1383.819570][T22060] _copy_to_user+0x32/0xd0 [ 1383.819589][T22060] simple_read_from_buffer+0xcb/0x170 [ 1383.819612][T22060] proc_fail_nth_read+0x1af/0x230 [ 1383.819631][T22060] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1383.819650][T22060] ? rw_verify_area+0xce/0x6d0 [ 1383.819669][T22060] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1383.819686][T22060] vfs_read+0x1e4/0xb30 [ 1383.819710][T22060] ? __pfx_vfs_read+0x10/0x10 [ 1383.819730][T22060] ? __fget_files+0x215/0x3d0 [ 1383.819749][T22060] ? __fget_files+0x21f/0x3d0 [ 1383.819767][T22060] ksys_read+0x12a/0x250 [ 1383.819780][T22060] ? __pfx_ksys_read+0x10/0x10 [ 1383.819799][T22060] do_syscall_64+0x106/0xf80 [ 1383.819818][T22060] ? clear_bhb_loop+0x40/0x90 [ 1383.819835][T22060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1383.819850][T22060] RIP: 0033:0x7f8dcfd5cfce [ 1383.819862][T22060] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1383.819876][T22060] RSP: 002b:00007f8dd0d12fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1383.819891][T22060] RAX: ffffffffffffffda RBX: 00007f8dd0d136c0 RCX: 00007f8dcfd5cfce [ 1383.819900][T22060] RDX: 000000000000000f RSI: 00007f8dd0d130a0 RDI: 0000000000000004 [ 1383.819909][T22060] RBP: 00007f8dd0d13090 R08: 0000000000000000 R09: 0000000000000000 [ 1383.819918][T22060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1383.819926][T22060] R13: 00007f8dd0016038 R14: 00007f8dd0015fa0 R15: 00007fffcf4e7568 [ 1383.819945][T22060] [ 1384.454764][T22068] can: request_module (can-proto-0) failed. [ 1385.471277][T21043] Bluetooth: hci7: unexpected event 0x1d length: 6 > 5 [ 1385.594599][T22088] can: request_module (can-proto-0) failed. [ 1386.065820][T22098] can: request_module (can-proto-0) failed. [ 1386.801429][T22111] netlink: 'syz.3.3006': attribute type 1 has an invalid length. [ 1387.610881][T22125] zswap: compressor not available [ 1389.617267][T22155] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1390.579867][T22171] FAULT_INJECTION: forcing a failure. [ 1390.579867][T22171] name failslab, interval 1, probability 0, space 0, times 0 [ 1390.645987][T22171] CPU: 1 UID: 0 PID: 22171 Comm: syz.7.3018 Tainted: G L syzkaller #0 PREEMPT(full) [ 1390.646029][T22171] Tainted: [L]=SOFTLOCKUP [ 1390.646039][T22171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1390.646056][T22171] Call Trace: [ 1390.646065][T22171] [ 1390.646076][T22171] dump_stack_lvl+0x100/0x190 [ 1390.646122][T22171] should_fail_ex.cold+0x5/0xa [ 1390.646153][T22171] should_failslab+0xc2/0x120 [ 1390.646181][T22171] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1390.646216][T22171] ? security_file_alloc+0x34/0x2c0 [ 1390.646246][T22171] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1390.646276][T22171] security_file_alloc+0x34/0x2c0 [ 1390.646304][T22171] init_file+0x95/0x480 [ 1390.646333][T22171] alloc_empty_file+0x73/0x1c0 [ 1390.646364][T22171] alloc_file_pseudo+0x13a/0x230 [ 1390.646396][T22171] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1390.646425][T22171] ? alloc_fd+0x476/0x790 [ 1390.646453][T22171] sock_alloc_file+0x50/0x210 [ 1390.646491][T22171] __sys_socket+0x1c0/0x260 [ 1390.646518][T22171] ? __pfx___sys_socket+0x10/0x10 [ 1390.646556][T22171] __x64_sys_socket+0x72/0xb0 [ 1390.646581][T22171] ? lockdep_hardirqs_on+0x78/0x100 [ 1390.646616][T22171] do_syscall_64+0x106/0xf80 [ 1390.646646][T22171] ? clear_bhb_loop+0x40/0x90 [ 1390.646676][T22171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1390.646700][T22171] RIP: 0033:0x7f8dcfd9c799 [ 1390.646714][T22171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1390.646729][T22171] RSP: 002b:00007f8dd0cf2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1390.646743][T22171] RAX: ffffffffffffffda RBX: 00007f8dd0016090 RCX: 00007f8dcfd9c799 [ 1390.646753][T22171] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000011 [ 1390.646762][T22171] RBP: 00007f8dcfe32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1390.646771][T22171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1390.646779][T22171] R13: 00007f8dd0016128 R14: 00007f8dd0016090 R15: 00007fffcf4e7568 [ 1390.646798][T22171] [ 1391.134871][T22178] can: request_module (can-proto-0) failed. [ 1391.170193][T22183] can: request_module (can-proto-0) failed. [ 1392.261121][T21467] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1392.273357][T21467] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1392.285612][T21467] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1392.302459][T21467] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1392.324148][T21467] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1392.356045][T22202] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3028'. [ 1393.079876][T22222] can: request_module (can-proto-0) failed. [ 1393.105665][T22204] chnl_net:caif_netlink_parms(): no params data found [ 1393.337124][T22228] FAULT_INJECTION: forcing a failure. [ 1393.337124][T22228] name failslab, interval 1, probability 0, space 0, times 0 [ 1393.382122][T22228] CPU: 0 UID: 0 PID: 22228 Comm: syz.7.3033 Tainted: G L syzkaller #0 PREEMPT(full) [ 1393.382160][T22228] Tainted: [L]=SOFTLOCKUP [ 1393.382169][T22228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1393.382184][T22228] Call Trace: [ 1393.382192][T22228] [ 1393.382202][T22228] dump_stack_lvl+0x100/0x190 [ 1393.382242][T22228] should_fail_ex.cold+0x5/0xa [ 1393.382272][T22228] should_failslab+0xc2/0x120 [ 1393.382298][T22228] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1393.382341][T22228] ? madvise_collapse+0x1b5/0xbe0 [ 1393.382379][T22228] madvise_collapse+0x1b5/0xbe0 [ 1393.382419][T22228] ? __pfx_madvise_collapse+0x10/0x10 [ 1393.382444][T22228] ? find_held_lock+0x1/0x80 [ 1393.382471][T22228] ? is_bpf_text_address+0x8a/0x1a0 [ 1393.382514][T22228] madvise_vma_behavior+0x1987/0x3050 [ 1393.382548][T22228] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1393.382576][T22228] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 1393.382616][T22228] ? mas_prev+0x9b/0xf0 [ 1393.382649][T22228] ? __pfx_mas_prev+0x10/0x10 [ 1393.382693][T22228] ? find_vma_prev+0xd8/0x150 [ 1393.382718][T22228] ? _kstrtoull+0x13c/0x1f0 [ 1393.382751][T22228] ? __pfx_find_vma_prev+0x10/0x10 [ 1393.382799][T22228] madvise_walk_vmas+0x2fe/0xa90 [ 1393.382834][T22228] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1393.382867][T22228] madvise_do_behavior+0x1ea/0x510 [ 1393.382899][T22228] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1393.382928][T22228] ? down_read+0x13b/0x460 [ 1393.382980][T22228] do_madvise+0x195/0x240 [ 1393.383005][T22228] ? __pfx_do_madvise+0x10/0x10 [ 1393.383032][T22228] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1393.383089][T22228] ? ksys_write+0x1ac/0x250 [ 1393.383113][T22228] ? __pfx_ksys_write+0x10/0x10 [ 1393.383146][T22228] __x64_sys_madvise+0xa9/0x110 [ 1393.383173][T22228] ? lockdep_hardirqs_on+0x78/0x100 [ 1393.383207][T22228] do_syscall_64+0x106/0xf80 [ 1393.383240][T22228] ? clear_bhb_loop+0x40/0x90 [ 1393.383271][T22228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.383296][T22228] RIP: 0033:0x7f8dcfd9c799 [ 1393.383318][T22228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1393.383345][T22228] RSP: 002b:00007f8dd0cf2028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1393.383370][T22228] RAX: ffffffffffffffda RBX: 00007f8dd0016090 RCX: 00007f8dcfd9c799 [ 1393.383387][T22228] RDX: 0000000000000019 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 1393.383403][T22228] RBP: 00007f8dd0cf2090 R08: 0000000000000000 R09: 0000000000000000 [ 1393.383419][T22228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1393.383436][T22228] R13: 00007f8dd0016128 R14: 00007f8dd0016090 R15: 00007fffcf4e7568 [ 1393.383474][T22228] [ 1393.699186][T22204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.736973][T22204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.754978][T22204] bridge_slave_0: entered allmulticast mode [ 1393.773485][T22204] bridge_slave_0: entered promiscuous mode [ 1393.831008][T22204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.869178][T22204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.876593][T22204] bridge_slave_1: entered allmulticast mode [ 1393.958014][T22204] bridge_slave_1: entered promiscuous mode [ 1394.050553][T22204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1394.140287][T22204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1394.354511][T22204] team0: Port device team_slave_0 added [ 1394.373420][T22204] team0: Port device team_slave_1 added [ 1394.399698][T21467] Bluetooth: hci8: command tx timeout [ 1394.505301][T22247] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3036'. [ 1394.570469][T22204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1394.598032][T22204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1394.640812][T22204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1394.676510][T22204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1394.735057][T22204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1394.829545][T22204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1394.941173][T22204] hsr_slave_0: entered promiscuous mode [ 1394.952201][T22204] hsr_slave_1: entered promiscuous mode [ 1394.962439][T22204] debugfs: 'hsr0' already exists in 'hsr' [ 1394.968291][T22204] Cannot create hsr debugfs directory [ 1395.035511][T22259] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3037'. [ 1395.161642][T22259] FAULT_INJECTION: forcing a failure. [ 1395.161642][T22259] name failslab, interval 1, probability 0, space 0, times 0 [ 1395.174396][T22259] CPU: 0 UID: 0 PID: 22259 Comm: syz.3.3037 Tainted: G L syzkaller #0 PREEMPT(full) [ 1395.174420][T22259] Tainted: [L]=SOFTLOCKUP [ 1395.174425][T22259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1395.174434][T22259] Call Trace: [ 1395.174440][T22259] [ 1395.174446][T22259] dump_stack_lvl+0x100/0x190 [ 1395.174472][T22259] should_fail_ex.cold+0x5/0xa [ 1395.174490][T22259] should_failslab+0xc2/0x120 [ 1395.174505][T22259] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1395.174526][T22259] ? vm_area_dup+0x27/0x8e0 [ 1395.174544][T22259] ? __kernel_text_address+0xd/0x30 [ 1395.174567][T22259] vm_area_dup+0x27/0x8e0 [ 1395.174586][T22259] __split_vma+0x18c/0xd90 [ 1395.174607][T22259] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 1395.174624][T22259] ? __pfx___split_vma+0x10/0x10 [ 1395.174647][T22259] ? find_held_lock+0x2b/0x80 [ 1395.174663][T22259] ? ima_match_policy+0x8c4/0x2350 [ 1395.174752][T22259] vms_gather_munmap_vmas+0x1c6/0x1500 [ 1395.174777][T22259] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1395.174799][T22259] ? mas_walk+0x6ef/0x9b0 [ 1395.174824][T22259] __mmap_region+0x492/0x29e0 [ 1395.174847][T22259] ? __pfx___mmap_region+0x10/0x10 [ 1395.174864][T22259] ? process_measurement+0x1f4/0x2350 [ 1395.174887][T22259] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 1395.174903][T22259] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 1395.174928][T22259] ? __lock_acquire+0x4a5/0x2630 [ 1395.174961][T22259] ? is_bpf_text_address+0x94/0x1a0 [ 1395.174982][T22259] ? kernel_text_address+0x8d/0x100 [ 1395.175002][T22259] ? __kernel_text_address+0xd/0x30 [ 1395.175050][T22259] mmap_region+0x180/0x3e0 [ 1395.175074][T22259] do_mmap+0xc63/0x12f0 [ 1395.175094][T22259] ? __pfx_do_mmap+0x10/0x10 [ 1395.175110][T22259] ? __pfx_down_write_killable+0x10/0x10 [ 1395.175136][T22259] vm_mmap_pgoff+0x29e/0x470 [ 1395.175161][T22259] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1395.175176][T22259] ? __fget_files+0x215/0x3d0 [ 1395.175193][T22259] ? __fget_files+0x21f/0x3d0 [ 1395.175210][T22259] ksys_mmap_pgoff+0x3c8/0x650 [ 1395.175228][T22259] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1395.175242][T22259] ? fput+0x79/0x100 [ 1395.175258][T22259] ? ksys_write+0x1ac/0x250 [ 1395.175271][T22259] ? __pfx_ksys_write+0x10/0x10 [ 1395.175286][T22259] __x64_sys_mmap+0x125/0x190 [ 1395.175309][T22259] do_syscall_64+0x106/0xf80 [ 1395.175328][T22259] ? clear_bhb_loop+0x40/0x90 [ 1395.175346][T22259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.175360][T22259] RIP: 0033:0x7fa00c59c799 [ 1395.175374][T22259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1395.175388][T22259] RSP: 002b:00007fa00a7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1395.175403][T22259] RAX: ffffffffffffffda RBX: 00007fa00c816180 RCX: 00007fa00c59c799 [ 1395.175413][T22259] RDX: 0000000000000001 RSI: 0000000000004000 RDI: 0000200000ffc000 [ 1395.175422][T22259] RBP: 00007fa00a7f6090 R08: 0000000000000005 R09: 0000000000000000 [ 1395.175431][T22259] R10: 000000000008e051 R11: 0000000000000246 R12: 0000000000000001 [ 1395.175439][T22259] R13: 00007fa00c816218 R14: 00007fa00c816180 R15: 00007fff43bd66b8 [ 1395.175459][T22259] [ 1396.055828][T22204] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1396.155172][T22204] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1396.238605][T22204] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1396.324869][T22204] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1396.469222][T21467] Bluetooth: hci8: command tx timeout [ 1396.481263][T22267] can: request_module (can-proto-0) failed. [ 1396.839567][T22204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1396.950665][T22204] 8021q: adding VLAN 0 to HW filter on device team0 [ 1396.986771][T21190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.993946][T21190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1397.070523][T21190] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.077657][T21190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1397.252657][T22290] can: request_module (can-proto-0) failed. [ 1397.787524][T22204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1397.915951][T22313] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3049'. [ 1398.405606][T22324] FAULT_INJECTION: forcing a failure. [ 1398.405606][T22324] name failslab, interval 1, probability 0, space 0, times 0 [ 1398.439002][T22324] CPU: 1 UID: 0 PID: 22324 Comm: syz.7.3051 Tainted: G L syzkaller #0 PREEMPT(full) [ 1398.439044][T22324] Tainted: [L]=SOFTLOCKUP [ 1398.439054][T22324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1398.439070][T22324] Call Trace: [ 1398.439079][T22324] [ 1398.439090][T22324] dump_stack_lvl+0x100/0x190 [ 1398.439134][T22324] should_fail_ex.cold+0x5/0xa [ 1398.439165][T22324] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1398.439199][T22324] should_failslab+0xc2/0x120 [ 1398.439227][T22324] __kmalloc_noprof+0xe0/0x850 [ 1398.439272][T22324] tomoyo_realpath_from_path+0xb6/0x690 [ 1398.439315][T22324] tomoyo_path_number_perm+0x23c/0x580 [ 1398.439343][T22324] ? tomoyo_path_number_perm+0x22e/0x580 [ 1398.439375][T22324] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1398.439440][T22324] ? find_held_lock+0x2b/0x80 [ 1398.439466][T22324] ? __fget_files+0x215/0x3d0 [ 1398.439488][T22324] ? hook_file_ioctl_common+0x146/0x410 [ 1398.439526][T22324] ? __fget_files+0x21f/0x3d0 [ 1398.439557][T22324] security_file_ioctl+0xd3/0x230 [ 1398.439589][T22324] __x64_sys_ioctl+0xb7/0x210 [ 1398.439629][T22324] do_syscall_64+0x106/0xf80 [ 1398.439663][T22324] ? clear_bhb_loop+0x40/0x90 [ 1398.439696][T22324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1398.439723][T22324] RIP: 0033:0x7f8dcfd9c799 [ 1398.439746][T22324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1398.439772][T22324] RSP: 002b:00007f8dd0d13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1398.439798][T22324] RAX: ffffffffffffffda RBX: 00007f8dd0015fa0 RCX: 00007f8dcfd9c799 [ 1398.439816][T22324] RDX: ffffffffffffffff RSI: 000000004008550c RDI: 0000000000000004 [ 1398.439833][T22324] RBP: 00007f8dd0d13090 R08: 0000000000000000 R09: 0000000000000000 [ 1398.439849][T22324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1398.439865][T22324] R13: 00007f8dd0016038 R14: 00007f8dd0015fa0 R15: 00007fffcf4e7568 [ 1398.439903][T22324] [ 1398.439914][T22324] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1398.549568][T21467] Bluetooth: hci8: command tx timeout [ 1398.715120][T22204] veth0_vlan: entered promiscuous mode [ 1398.820068][T22204] veth1_vlan: entered promiscuous mode [ 1398.887282][T22204] veth0_macvtap: entered promiscuous mode [ 1398.908154][T22204] veth1_macvtap: entered promiscuous mode [ 1399.048222][T22204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1399.114663][T22204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1399.181508][T21022] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.181612][T21022] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.181659][T21022] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.181704][T21022] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1399.460629][T20740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1399.468490][T20740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1399.510647][T22352] can: request_module (can-proto-0) failed. [ 1399.632678][T20740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1399.672846][T20740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1400.280109][T22364] can: request_module (can-proto-0) failed. [ 1400.709340][T21467] Bluetooth: hci8: command tx timeout [ 1400.840235][T22384] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1402.398495][T22423] can: request_module (can-proto-0) failed. [ 1405.511768][T22483] can: request_module (can-proto-0) failed. [ 1405.527845][T22486] FAULT_INJECTION: forcing a failure. [ 1405.527845][T22486] name failslab, interval 1, probability 0, space 0, times 0 [ 1405.583038][T22486] CPU: 1 UID: 0 PID: 22486 Comm: syz.7.3082 Tainted: G L syzkaller #0 PREEMPT(full) [ 1405.583080][T22486] Tainted: [L]=SOFTLOCKUP [ 1405.583090][T22486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1405.583106][T22486] Call Trace: [ 1405.583116][T22486] [ 1405.583127][T22486] dump_stack_lvl+0x100/0x190 [ 1405.583170][T22486] should_fail_ex.cold+0x5/0xa [ 1405.583202][T22486] should_failslab+0xc2/0x120 [ 1405.583230][T22486] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1405.583266][T22486] ? ptlock_alloc+0x1f/0x70 [ 1405.583306][T22486] ptlock_alloc+0x1f/0x70 [ 1405.583338][T22486] pte_alloc_one+0x82/0x3d0 [ 1405.583368][T22486] do_fault+0x88e/0x1990 [ 1405.583397][T22486] ? __pmd_alloc+0x3fb/0x950 [ 1405.583436][T22486] __handle_mm_fault+0x180f/0x2b60 [ 1405.583477][T22486] ? mt_find+0x45e/0x8e0 [ 1405.583512][T22486] ? __pfx___handle_mm_fault+0x10/0x10 [ 1405.583530][T22486] ? __pfx_mt_find+0x10/0x10 [ 1405.583560][T22486] ? find_vma+0xbf/0x140 [ 1405.583574][T22486] ? __pfx_find_vma+0x10/0x10 [ 1405.583590][T22486] handle_mm_fault+0x36d/0xa20 [ 1405.583612][T22486] do_user_addr_fault+0x74c/0x12f0 [ 1405.583639][T22486] exc_page_fault+0x6f/0xd0 [ 1405.583660][T22486] asm_exc_page_fault+0x26/0x30 [ 1405.583675][T22486] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1405.583691][T22486] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1405.583705][T22486] RSP: 0018:ffffc90004d5fb98 EFLAGS: 00050206 [ 1405.583720][T22486] RAX: 0000000000000001 RBX: ffff88805bd47000 RCX: 0000000000000081 [ 1405.583730][T22486] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88805bd47000 [ 1405.583739][T22486] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100b7a8e10 [ 1405.583748][T22486] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90004d5fd80 [ 1405.583756][T22486] R13: 0000000000000000 R14: 0000000000000081 R15: 0000000000000000 [ 1405.583775][T22486] _copy_from_iter+0x355/0x1690 [ 1405.583798][T22486] ? __pfx__copy_from_iter+0x10/0x10 [ 1405.583814][T22486] ? rcu_is_watching+0x12/0xc0 [ 1405.583834][T22486] ? trace_kmalloc+0x101/0x130 [ 1405.583848][T22486] ? __kasan_kmalloc+0xaa/0xb0 [ 1405.583870][T22486] ? __kmalloc_noprof+0x320/0x850 [ 1405.583893][T22486] kernfs_fop_write_iter+0x186/0x5f0 [ 1405.583912][T22486] vfs_write+0x6ac/0x1070 [ 1405.583926][T22486] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1405.583946][T22486] ? __pfx_vfs_write+0x10/0x10 [ 1405.583980][T22486] ksys_write+0x12a/0x250 [ 1405.583993][T22486] ? __pfx_ksys_write+0x10/0x10 [ 1405.584012][T22486] do_syscall_64+0x106/0xf80 [ 1405.584029][T22486] ? clear_bhb_loop+0x40/0x90 [ 1405.584047][T22486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.584065][T22486] RIP: 0033:0x7f8dcfd9c799 [ 1405.584077][T22486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1405.584091][T22486] RSP: 002b:00007f8dd0d13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1405.584103][T22486] RAX: ffffffffffffffda RBX: 00007f8dd0015fa0 RCX: 00007f8dcfd9c799 [ 1405.584112][T22486] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000003 [ 1405.584121][T22486] RBP: 00007f8dd0d13090 R08: 0000000000000000 R09: 0000000000000000 [ 1405.584129][T22486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1405.584138][T22486] R13: 00007f8dd0016038 R14: 00007f8dd0015fa0 R15: 00007fffcf4e7568 [ 1405.584157][T22486] [ 1406.211689][T22491] random: crng reseeded on system resumption [ 1406.389272][T22497] can: request_module (can-proto-0) failed. [ 1406.724259][T22476] kexec: Could not allocate control_code_buffer [ 1406.821801][T22506] FAULT_INJECTION: forcing a failure. [ 1406.821801][T22506] name failslab, interval 1, probability 0, space 0, times 0 [ 1406.834554][T22506] CPU: 1 UID: 0 PID: 22506 Comm: syz.5.3087 Tainted: G L syzkaller #0 PREEMPT(full) [ 1406.834593][T22506] Tainted: [L]=SOFTLOCKUP [ 1406.834602][T22506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1406.834615][T22506] Call Trace: [ 1406.834621][T22506] [ 1406.834627][T22506] dump_stack_lvl+0x100/0x190 [ 1406.834655][T22506] should_fail_ex.cold+0x5/0xa [ 1406.834672][T22506] should_failslab+0xc2/0x120 [ 1406.834688][T22506] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1406.834708][T22506] ? ptlock_alloc+0x1f/0x70 [ 1406.834729][T22506] ptlock_alloc+0x1f/0x70 [ 1406.834747][T22506] pte_alloc_one+0x82/0x3d0 [ 1406.834764][T22506] do_fault+0x88e/0x1990 [ 1406.834779][T22506] ? __pmd_alloc+0x3fb/0x950 [ 1406.834797][T22506] __handle_mm_fault+0x180f/0x2b60 [ 1406.834818][T22506] ? mt_find+0x45e/0x8e0 [ 1406.834840][T22506] ? __pfx___handle_mm_fault+0x10/0x10 [ 1406.834858][T22506] ? __pfx_mt_find+0x10/0x10 [ 1406.834905][T22506] ? find_vma+0xbf/0x140 [ 1406.834928][T22506] ? __pfx_find_vma+0x10/0x10 [ 1406.834957][T22506] handle_mm_fault+0x36d/0xa20 [ 1406.834981][T22506] do_user_addr_fault+0x74c/0x12f0 [ 1406.835008][T22506] exc_page_fault+0x6f/0xd0 [ 1406.835042][T22506] asm_exc_page_fault+0x26/0x30 [ 1406.835066][T22506] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1406.835103][T22506] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1406.835122][T22506] RSP: 0018:ffffc900047b7b98 EFLAGS: 00050206 [ 1406.835135][T22506] RAX: 0000000000000001 RBX: ffff88803efb0000 RCX: 0000000000001000 [ 1406.835144][T22506] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88803efb0000 [ 1406.835153][T22506] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1007df61ff [ 1406.835162][T22506] R10: ffff88803efb0fff R11: 0000000000000000 R12: ffffc900047b7d80 [ 1406.835171][T22506] R13: 0000000000000000 R14: 0000000000001000 R15: 0000000000000000 [ 1406.835190][T22506] _copy_from_iter+0x355/0x1690 [ 1406.835212][T22506] ? __pfx__copy_from_iter+0x10/0x10 [ 1406.835228][T22506] ? rcu_is_watching+0x12/0xc0 [ 1406.835248][T22506] ? trace_kmalloc+0x101/0x130 [ 1406.835262][T22506] ? __kasan_kmalloc+0xaa/0xb0 [ 1406.835284][T22506] ? __kmalloc_noprof+0x320/0x850 [ 1406.835308][T22506] kernfs_fop_write_iter+0x186/0x5f0 [ 1406.835327][T22506] vfs_write+0x6ac/0x1070 [ 1406.835341][T22506] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1406.835358][T22506] ? __pfx_vfs_write+0x10/0x10 [ 1406.835392][T22506] ksys_write+0x12a/0x250 [ 1406.835406][T22506] ? __pfx_ksys_write+0x10/0x10 [ 1406.835424][T22506] do_syscall_64+0x106/0xf80 [ 1406.835443][T22506] ? clear_bhb_loop+0x40/0x90 [ 1406.835461][T22506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.835475][T22506] RIP: 0033:0x7f614f59c799 [ 1406.835487][T22506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1406.835501][T22506] RSP: 002b:00007f6150457028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1406.835513][T22506] RAX: ffffffffffffffda RBX: 00007f614f815fa0 RCX: 00007f614f59c799 [ 1406.835523][T22506] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1406.835531][T22506] RBP: 00007f6150457090 R08: 0000000000000000 R09: 0000000000000000 [ 1406.835540][T22506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1406.835548][T22506] R13: 00007f614f816038 R14: 00007f614f815fa0 R15: 00007ffd66a947c8 [ 1406.835567][T22506] [ 1409.305613][T22536] can: request_module (can-proto-0) failed. [ 1410.629900][T22563] FAULT_INJECTION: forcing a failure. [ 1410.629900][T22563] name failslab, interval 1, probability 0, space 0, times 0 [ 1410.642830][T22563] CPU: 0 UID: 0 PID: 22563 Comm: syz.5.3101 Tainted: G L syzkaller #0 PREEMPT(full) [ 1410.642876][T22563] Tainted: [L]=SOFTLOCKUP [ 1410.642886][T22563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1410.642903][T22563] Call Trace: [ 1410.642913][T22563] [ 1410.642924][T22563] dump_stack_lvl+0x100/0x190 [ 1410.642971][T22563] should_fail_ex.cold+0x5/0xa [ 1410.643006][T22563] should_failslab+0xc2/0x120 [ 1410.643036][T22563] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1410.643073][T22563] ? security_inode_alloc+0x3b/0x2c0 [ 1410.643102][T22563] ? lockdep_init_map_type+0x5c/0x250 [ 1410.643143][T22563] security_inode_alloc+0x3b/0x2c0 [ 1410.643170][T22563] inode_init_always_gfp+0xced/0x1040 [ 1410.643203][T22563] alloc_inode+0x8e/0x250 [ 1410.643237][T22563] new_inode+0x22/0x1c0 [ 1410.643277][T22563] shmem_get_inode+0x212/0x1040 [ 1410.643315][T22563] ? __pfx_shmem_get_inode+0x10/0x10 [ 1410.643352][T22563] ? rcu_is_watching+0x12/0xc0 [ 1410.643386][T22563] ? percpu_counter_add_batch+0xb9/0x230 [ 1410.643427][T22563] __shmem_file_setup+0x3ac/0x490 [ 1410.643465][T22563] ? __pfx___shmem_file_setup+0x10/0x10 [ 1410.643509][T22563] ? vm_area_alloc+0x1f/0x160 [ 1410.643548][T22563] shmem_zero_setup+0x96/0x1b0 [ 1410.643592][T22563] __mmap_region+0x2198/0x29e0 [ 1410.643640][T22563] ? __pfx___mmap_region+0x10/0x10 [ 1410.643706][T22563] ? __lock_acquire+0x4a5/0x2630 [ 1410.643754][T22563] ? lock_acquire+0x1cf/0x380 [ 1410.643787][T22563] ? find_held_lock+0x2b/0x80 [ 1410.643832][T22563] ? trace_sched_exit_tp+0x13a/0x180 [ 1410.643908][T22563] ? rcu_is_watching+0x12/0xc0 [ 1410.643948][T22563] ? cap_capable+0x107/0x460 [ 1410.643996][T22563] mmap_region+0x180/0x3e0 [ 1410.644041][T22563] do_mmap+0xc63/0x12f0 [ 1410.644076][T22563] ? __pfx_do_mmap+0x10/0x10 [ 1410.644108][T22563] ? __pfx_down_write_killable+0x10/0x10 [ 1410.644160][T22563] vm_mmap_pgoff+0x29e/0x470 [ 1410.644200][T22563] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1410.644237][T22563] ? do_futex+0x192/0x350 [ 1410.644274][T22563] ? __pfx_do_futex+0x10/0x10 [ 1410.644315][T22563] ksys_mmap_pgoff+0xe1/0x650 [ 1410.644351][T22563] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1410.644383][T22563] ? xfd_validate_state+0x129/0x190 [ 1410.644430][T22563] __x64_sys_mmap+0x125/0x190 [ 1410.644475][T22563] do_syscall_64+0x106/0xf80 [ 1410.644514][T22563] ? clear_bhb_loop+0x40/0x90 [ 1410.644551][T22563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.644604][T22563] RIP: 0033:0x7f614f59c799 [ 1410.644631][T22563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1410.644661][T22563] RSP: 002b:00007f6150457028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1410.644697][T22563] RAX: ffffffffffffffda RBX: 00007f614f815fa0 RCX: 00007f614f59c799 [ 1410.644718][T22563] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 1410.644737][T22563] RBP: 00007f614f632c99 R08: fffffffffffffffa R09: 0000000000008000 [ 1410.644757][T22563] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1410.644776][T22563] R13: 00007f614f816038 R14: 00007f614f815fa0 R15: 00007ffd66a947c8 [ 1410.644817][T22563] [ 1411.269231][T22572] can: request_module (can-proto-0) failed. [ 1411.610766][T22580] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1411.629820][T22580] FAULT_INJECTION: forcing a failure. [ 1411.629820][T22580] name failslab, interval 1, probability 0, space 0, times 0 [ 1411.645319][T22580] CPU: 0 UID: 0 PID: 22580 Comm: syz.8.3106 Tainted: G L syzkaller #0 PREEMPT(full) [ 1411.645344][T22580] Tainted: [L]=SOFTLOCKUP [ 1411.645349][T22580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1411.645358][T22580] Call Trace: [ 1411.645364][T22580] [ 1411.645370][T22580] dump_stack_lvl+0x100/0x190 [ 1411.645396][T22580] should_fail_ex.cold+0x5/0xa [ 1411.645413][T22580] should_failslab+0xc2/0x120 [ 1411.645429][T22580] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1411.645449][T22580] ? alloc_empty_file+0x55/0x1c0 [ 1411.645470][T22580] alloc_empty_file+0x55/0x1c0 [ 1411.645487][T22580] alloc_file_pseudo+0x13a/0x230 [ 1411.645506][T22580] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1411.645529][T22580] __shmem_file_setup+0x221/0x490 [ 1411.645548][T22580] ? __pfx___shmem_file_setup+0x10/0x10 [ 1411.645570][T22580] ? vm_area_alloc+0x1f/0x160 [ 1411.645591][T22580] shmem_zero_setup+0x96/0x1b0 [ 1411.645613][T22580] __mmap_region+0x2198/0x29e0 [ 1411.645639][T22580] ? __pfx___mmap_region+0x10/0x10 [ 1411.645657][T22580] ? process_measurement+0x1f4/0x2350 [ 1411.645710][T22580] ? lockdep_hardirqs_on+0x78/0x100 [ 1411.645730][T22580] ? finish_task_switch.isra.0+0x205/0xb80 [ 1411.645747][T22580] ? rcu_is_watching+0x12/0xc0 [ 1411.645791][T22580] ? rcu_is_watching+0x12/0xc0 [ 1411.645810][T22580] ? cap_capable+0x107/0x460 [ 1411.645835][T22580] mmap_region+0x180/0x3e0 [ 1411.645858][T22580] do_mmap+0xc63/0x12f0 [ 1411.645877][T22580] ? __pfx_do_mmap+0x10/0x10 [ 1411.645893][T22580] ? __pfx_down_write_killable+0x10/0x10 [ 1411.645919][T22580] vm_mmap_pgoff+0x29e/0x470 [ 1411.645938][T22580] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1411.645955][T22580] ? do_futex+0x192/0x350 [ 1411.645974][T22580] ? __pfx_do_futex+0x10/0x10 [ 1411.645995][T22580] ksys_mmap_pgoff+0xe1/0x650 [ 1411.646012][T22580] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1411.646027][T22580] ? xfd_validate_state+0x129/0x190 [ 1411.646051][T22580] __x64_sys_mmap+0x125/0x190 [ 1411.646073][T22580] do_syscall_64+0x106/0xf80 [ 1411.646092][T22580] ? clear_bhb_loop+0x40/0x90 [ 1411.646110][T22580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1411.646131][T22580] RIP: 0033:0x7f5d0af9c799 [ 1411.646148][T22580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1411.646171][T22580] RSP: 002b:00007f5d0be7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1411.646201][T22580] RAX: ffffffffffffffda RBX: 00007f5d0b215fa0 RCX: 00007f5d0af9c799 [ 1411.646217][T22580] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 1411.646232][T22580] RBP: 00007f5d0b032c99 R08: fffffffffffffffa R09: 0000000000008000 [ 1411.646249][T22580] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1411.646261][T22580] R13: 00007f5d0b216038 R14: 00007f5d0b215fa0 R15: 00007ffc2c16c9e8 [ 1411.646286][T22580] [ 1412.446147][T22586] netlink: 'syz.7.3108': attribute type 1 has an invalid length. [ 1412.810395][T22591] netlink: 'syz.8.3109': attribute type 1 has an invalid length. [ 1414.227715][T22601] zswap: compressor not available [ 1415.771928][T21467] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1415.791541][T21467] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1415.818279][T21467] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1415.826622][T21467] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1415.837138][T21467] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1417.298486][T22619] chnl_net:caif_netlink_parms(): no params data found [ 1417.603863][T22619] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.615585][T22619] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.634684][T22619] bridge_slave_0: entered allmulticast mode [ 1417.662887][T22619] bridge_slave_0: entered promiscuous mode [ 1417.723446][T22619] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.744422][T22619] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.770616][T22619] bridge_slave_1: entered allmulticast mode [ 1417.807591][T22619] bridge_slave_1: entered promiscuous mode [ 1417.910286][T21467] Bluetooth: hci1: command tx timeout [ 1417.918909][T22619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1418.049825][T22619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1418.201651][T22619] team0: Port device team_slave_0 added [ 1418.232696][T22619] team0: Port device team_slave_1 added [ 1418.352939][T22619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1418.380115][T22619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1418.460606][T22619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1418.492676][T22619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1418.499686][T22619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1418.618046][T22619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1419.033611][T22619] hsr_slave_0: entered promiscuous mode [ 1419.051891][T22619] hsr_slave_1: entered promiscuous mode [ 1419.068316][T22619] debugfs: 'hsr0' already exists in 'hsr' [ 1419.082199][T22631] kexec: Could not allocate control_code_buffer [ 1419.088552][T22619] Cannot create hsr debugfs directory [ 1419.997264][T21467] Bluetooth: hci1: command tx timeout [ 1420.303672][T22619] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1420.386265][T22619] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1420.455352][T22619] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1420.479896][T22681] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 1420.617893][T22619] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1420.918339][T22619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1420.993684][T22619] 8021q: adding VLAN 0 to HW filter on device team0 [ 1421.032715][T21190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.039888][T21190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1421.087990][T21697] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.095235][T21697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1421.855599][T22619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1422.075235][T21467] Bluetooth: hci1: command tx timeout [ 1422.965662][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.973490][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.223998][T22734] FAULT_INJECTION: forcing a failure. [ 1423.223998][T22734] name failslab, interval 1, probability 0, space 0, times 0 [ 1423.236814][T22734] CPU: 1 UID: 0 PID: 22734 Comm: syz.5.3136 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1423.236853][T22734] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1423.236862][T22734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1423.236872][T22734] Call Trace: [ 1423.236879][T22734] [ 1423.236885][T22734] dump_stack_lvl+0x100/0x190 [ 1423.236916][T22734] should_fail_ex.cold+0x5/0xa [ 1423.236936][T22734] should_failslab+0xc2/0x120 [ 1423.236953][T22734] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1423.236976][T22734] ? security_inode_alloc+0x3b/0x2c0 [ 1423.236993][T22734] ? lockdep_init_map_type+0x5c/0x250 [ 1423.237017][T22734] security_inode_alloc+0x3b/0x2c0 [ 1423.237033][T22734] inode_init_always_gfp+0xced/0x1040 [ 1423.237052][T22734] alloc_inode+0x8e/0x250 [ 1423.237072][T22734] new_inode+0x22/0x1c0 [ 1423.237092][T22734] shmem_get_inode+0x212/0x1040 [ 1423.237114][T22734] ? __pfx_shmem_get_inode+0x10/0x10 [ 1423.237132][T22734] ? d_add+0x443/0x850 [ 1423.237151][T22734] ? do_raw_spin_unlock+0x145/0x1e0 [ 1423.237176][T22734] shmem_mknod+0x20c/0x470 [ 1423.237197][T22734] ? __pfx_shmem_mknod+0x10/0x10 [ 1423.237214][T22734] ? bpf_lsm_inode_create+0x9/0x10 [ 1423.237238][T22734] ? __pfx_shmem_create+0x10/0x10 [ 1423.237266][T22734] lookup_open.isra.0+0xc47/0x11b0 [ 1423.237293][T22734] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1423.237319][T22734] ? __pfx___might_resched+0x10/0x10 [ 1423.237341][T22734] ? mnt_get_write_access+0x52/0x2f0 [ 1423.237365][T22734] ? __pfx_down_write+0x10/0x10 [ 1423.237388][T22734] ? mnt_get_write_access+0x1e9/0x2f0 [ 1423.237411][T22734] path_openat+0x2291/0x31a0 [ 1423.237433][T22734] ? __pfx_path_openat+0x10/0x10 [ 1423.237456][T22734] do_file_open+0x20e/0x430 [ 1423.237473][T22734] ? __pfx_do_file_open+0x10/0x10 [ 1423.237503][T22734] ? alloc_fd+0x476/0x790 [ 1423.237520][T22734] ? do_getname+0x191/0x390 [ 1423.237540][T22734] do_sys_openat2+0x10d/0x1e0 [ 1423.237560][T22734] ? __pfx_do_sys_openat2+0x10/0x10 [ 1423.237580][T22734] ? __fget_files+0x21f/0x3d0 [ 1423.237598][T22734] __x64_sys_openat+0x12d/0x210 [ 1423.237618][T22734] ? __pfx___x64_sys_openat+0x10/0x10 [ 1423.237645][T22734] do_syscall_64+0x106/0xf80 [ 1423.237664][T22734] ? clear_bhb_loop+0x40/0x90 [ 1423.237683][T22734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.237698][T22734] RIP: 0033:0x7f614f59c799 [ 1423.237712][T22734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1423.237727][T22734] RSP: 002b:00007f6150457028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1423.237743][T22734] RAX: ffffffffffffffda RBX: 00007f614f815fa0 RCX: 00007f614f59c799 [ 1423.237754][T22734] RDX: 00000000000861c2 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 1423.237763][T22734] RBP: 00007f614f632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1423.237773][T22734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1423.237782][T22734] R13: 00007f614f816038 R14: 00007f614f815fa0 R15: 00007ffd66a947c8 [ 1423.237802][T22734] [ 1423.240168][T22734] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1423.540578][T22619] veth0_vlan: entered promiscuous mode [ 1423.830712][T22619] veth1_vlan: entered promiscuous mode [ 1423.898018][T22619] veth0_macvtap: entered promiscuous mode [ 1423.919566][T22619] veth1_macvtap: entered promiscuous mode [ 1423.970845][T22619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1424.100819][T22619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1424.153436][T21467] Bluetooth: hci1: command tx timeout [ 1424.210708][T21022] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.246273][T21022] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.273067][T21022] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.282941][T21022] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1424.673709][T21697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.691744][T21697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.780616][T21697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.789720][T21697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1425.229022][T22761] can: request_module (can-proto-0) failed. [ 1426.920421][T22797] FAULT_INJECTION: forcing a failure. [ 1426.920421][T22797] name failslab, interval 1, probability 0, space 0, times 0 [ 1426.968909][T22797] CPU: 0 UID: 0 PID: 22797 Comm: syz.7.3153 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1426.968965][T22797] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1426.968980][T22797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1426.968996][T22797] Call Trace: [ 1426.969005][T22797] [ 1426.969015][T22797] dump_stack_lvl+0x100/0x190 [ 1426.969058][T22797] should_fail_ex.cold+0x5/0xa [ 1426.969090][T22797] should_failslab+0xc2/0x120 [ 1426.969119][T22797] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1426.969156][T22797] ? __d_alloc+0x34/0xa80 [ 1426.969192][T22797] __d_alloc+0x34/0xa80 [ 1426.969224][T22797] d_alloc+0x4a/0x1e0 [ 1426.969255][T22797] lookup_one_qstr_excl+0x175/0x250 [ 1426.969291][T22797] start_dirop+0x59/0xb0 [ 1426.969330][T22797] simple_start_creating+0xf9/0x110 [ 1426.969369][T22797] ? __pfx_simple_start_creating+0x10/0x10 [ 1426.969408][T22797] ? mntput+0x70/0xa0 [ 1426.969443][T22797] ? simple_pin_fs+0xa3/0x190 [ 1426.969479][T22797] debugfs_start_creating.part.0+0x82/0x170 [ 1426.969620][T22797] __debugfs_create_file+0xb3/0x4f0 [ 1426.969652][T22797] debugfs_create_file_full+0x41/0x60 [ 1426.969683][T22797] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1426.969718][T22797] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1426.969749][T22797] ? rcu_is_watching+0x12/0xc0 [ 1426.969820][T22797] ? lockdep_init_map_type+0x5c/0x250 [ 1426.969859][T22797] preinit_net.part.0+0x24e/0x8f0 [ 1426.969900][T22797] copy_net_ns+0x339/0x7c0 [ 1426.969929][T22797] create_new_namespaces+0x3ea/0xac0 [ 1426.969966][T22797] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1426.969998][T22797] ksys_unshare+0x473/0xad0 [ 1426.970033][T22797] ? __pfx_ksys_unshare+0x10/0x10 [ 1426.970065][T22797] ? ksys_write+0x1ac/0x250 [ 1426.970101][T22797] __x64_sys_unshare+0x31/0x40 [ 1426.970131][T22797] do_syscall_64+0x106/0xf80 [ 1426.970162][T22797] ? clear_bhb_loop+0x40/0x90 [ 1426.970191][T22797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1426.970213][T22797] RIP: 0033:0x7f8dcfd9c799 [ 1426.970233][T22797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1426.970258][T22797] RSP: 002b:00007f8dd0d13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1426.970280][T22797] RAX: ffffffffffffffda RBX: 00007f8dd0015fa0 RCX: 00007f8dcfd9c799 [ 1426.970297][T22797] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1426.970313][T22797] RBP: 00007f8dd0d13090 R08: 0000000000000000 R09: 0000000000000000 [ 1426.970330][T22797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1426.970344][T22797] R13: 00007f8dd0016038 R14: 00007f8dd0015fa0 R15: 00007fffcf4e7568 [ 1426.970381][T22797] [ 1428.007092][T22806] FAULT_INJECTION: forcing a failure. [ 1428.007092][T22806] name failslab, interval 1, probability 0, space 0, times 0 [ 1428.041332][T22806] CPU: 0 UID: 0 PID: 22806 Comm: syz.7.3155 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1428.041392][T22806] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1428.041408][T22806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1428.041422][T22806] Call Trace: [ 1428.041432][T22806] [ 1428.041443][T22806] dump_stack_lvl+0x100/0x190 [ 1428.041490][T22806] should_fail_ex.cold+0x5/0xa [ 1428.041532][T22806] should_failslab+0xc2/0x120 [ 1428.041563][T22806] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1428.041601][T22806] ? percpu_ref_init+0xec/0x3f0 [ 1428.041648][T22806] ? __pfx_css_release+0x10/0x10 [ 1428.041687][T22806] percpu_ref_init+0xec/0x3f0 [ 1428.041725][T22806] ? init_and_link_css+0x33a/0x710 [ 1428.041762][T22806] cgroup_apply_control_enable+0x51e/0xbd0 [ 1428.041820][T22806] cgroup_mkdir+0x57f/0x1330 [ 1428.041869][T22806] ? __pfx_cgroup_mkdir+0x10/0x10 [ 1428.041913][T22806] kernfs_iop_mkdir+0x111/0x190 [ 1428.041956][T22806] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 1428.041997][T22806] vfs_mkdir+0x361/0x850 [ 1428.042040][T22806] filename_mkdirat+0x48b/0x5e0 [ 1428.042076][T22806] ? __pfx_filename_mkdirat+0x10/0x10 [ 1428.042108][T22806] ? strncpy_from_user+0x19d/0x2d0 [ 1428.042143][T22806] ? do_getname+0x191/0x390 [ 1428.042177][T22806] __x64_sys_mkdir+0x6b/0x90 [ 1428.042206][T22806] do_syscall_64+0x106/0xf80 [ 1428.042242][T22806] ? clear_bhb_loop+0x40/0x90 [ 1428.042274][T22806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.042303][T22806] RIP: 0033:0x7f8dcfd9c799 [ 1428.042330][T22806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1428.042359][T22806] RSP: 002b:00007f8dd0d13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1428.042389][T22806] RAX: ffffffffffffffda RBX: 00007f8dd0015fa0 RCX: 00007f8dcfd9c799 [ 1428.042409][T22806] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 1428.042428][T22806] RBP: 00007f8dcfe32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1428.042446][T22806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1428.042465][T22806] R13: 00007f8dd0016038 R14: 00007f8dd0015fa0 R15: 00007fffcf4e7568 [ 1428.042506][T22806] [ 1428.808022][T22815] netlink: 330 bytes leftover after parsing attributes in process `syz.7.3159'. [ 1428.855015][T22785] kexec: Could not allocate control_code_buffer [ 1429.180935][T22810] can: request_module (can-proto-0) failed. [ 1430.782321][T21467] Bluetooth: hci8: unexpected subevent 0x01 length: 123 > 18 [ 1432.627208][T22869] bond0: invalid ARP target specified [ 1432.676387][T22870] netlink: 330 bytes leftover after parsing attributes in process `syz.9.3170'. [ 1435.032941][T22894] random: crng reseeded on system resumption [ 1435.211389][T22904] ubi0: attaching mtd0 [ 1435.234838][T22904] ubi0: scanning is finished [ 1435.283670][T22904] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1435.308075][T22906] netlink: 342 bytes leftover after parsing attributes in process `syz.5.3179'. [ 1435.501363][T22904] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1435.910613][T22890] kexec: Could not allocate control_code_buffer [ 1437.715965][T22960] FAULT_INJECTION: forcing a failure. [ 1437.715965][T22960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1437.739896][T22960] CPU: 0 UID: 0 PID: 22960 Comm: syz.7.3192 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1437.739944][T22960] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1437.739953][T22960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1437.739963][T22960] Call Trace: [ 1437.739969][T22960] [ 1437.739976][T22960] dump_stack_lvl+0x100/0x190 [ 1437.740003][T22960] should_fail_ex.cold+0x5/0xa [ 1437.740023][T22960] _copy_to_iter+0x5a4/0x1720 [ 1437.740042][T22960] ? traverse.part.0.constprop.0+0x2c0/0x650 [ 1437.740068][T22960] ? __pfx__copy_to_iter+0x10/0x10 [ 1437.740085][T22960] ? do_raw_read_unlock+0x3f/0x70 [ 1437.740107][T22960] ? _raw_read_unlock+0x28/0x50 [ 1437.740202][T22960] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 1437.740232][T22960] seq_read_iter+0x691/0x1270 [ 1437.740256][T22960] ? aa_file_perm+0x7f3/0x14d0 [ 1437.740282][T22960] seq_read+0x33b/0x4c0 [ 1437.740307][T22960] ? __pfx_seq_read+0x10/0x10 [ 1437.740341][T22960] ? __pfx_seq_read+0x10/0x10 [ 1437.740362][T22960] proc_reg_read+0x240/0x330 [ 1437.740384][T22960] ? __pfx_proc_reg_read+0x10/0x10 [ 1437.740405][T22960] vfs_read+0x1e4/0xb30 [ 1437.740431][T22960] ? __pfx_vfs_read+0x10/0x10 [ 1437.740451][T22960] ? find_held_lock+0x2b/0x80 [ 1437.740465][T22960] ? __fget_files+0x215/0x3d0 [ 1437.740478][T22960] ? __fget_files+0x215/0x3d0 [ 1437.740496][T22960] ? __fget_files+0x21f/0x3d0 [ 1437.740515][T22960] __x64_sys_pread64+0x1eb/0x250 [ 1437.740530][T22960] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1437.740551][T22960] do_syscall_64+0x106/0xf80 [ 1437.740571][T22960] ? clear_bhb_loop+0x40/0x90 [ 1437.740589][T22960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.740605][T22960] RIP: 0033:0x7f8dcfd9c799 [ 1437.740619][T22960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1437.740634][T22960] RSP: 002b:00007f8dd0d13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1437.740649][T22960] RAX: ffffffffffffffda RBX: 00007f8dd0015fa0 RCX: 00007f8dcfd9c799 [ 1437.740660][T22960] RDX: 0000200000000006 RSI: 0000200000000040 RDI: 0000000000000003 [ 1437.740670][T22960] RBP: 00007f8dcfe32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1437.740679][T22960] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1437.740688][T22960] R13: 00007f8dd0016038 R14: 00007f8dd0015fa0 R15: 00007fffcf4e7568 [ 1437.740709][T22960] [ 1439.195810][T22986] FAULT_INJECTION: forcing a failure. [ 1439.195810][T22986] name failslab, interval 1, probability 0, space 0, times 0 [ 1439.261021][T22986] CPU: 0 UID: 0 PID: 22986 Comm: syz.7.3200 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1439.261082][T22986] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1439.261098][T22986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1439.261115][T22986] Call Trace: [ 1439.261124][T22986] [ 1439.261136][T22986] dump_stack_lvl+0x100/0x190 [ 1439.261186][T22986] should_fail_ex.cold+0x5/0xa [ 1439.261205][T22986] should_failslab+0xc2/0x120 [ 1439.261223][T22986] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1439.261245][T22986] ? __d_alloc+0x34/0xa80 [ 1439.261266][T22986] __d_alloc+0x34/0xa80 [ 1439.261285][T22986] d_alloc_pseudo+0x1c/0xc0 [ 1439.261304][T22986] alloc_file_pseudo+0xcf/0x230 [ 1439.261324][T22986] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1439.261348][T22986] __shmem_file_setup+0x221/0x490 [ 1439.261368][T22986] ? __pfx___shmem_file_setup+0x10/0x10 [ 1439.261391][T22986] ? vm_area_alloc+0x1f/0x160 [ 1439.261413][T22986] shmem_zero_setup+0x96/0x1b0 [ 1439.261436][T22986] __mmap_region+0x2198/0x29e0 [ 1439.261460][T22986] ? __pfx___mmap_region+0x10/0x10 [ 1439.261492][T22986] ? __lock_acquire+0x4a5/0x2630 [ 1439.261510][T22986] ? find_held_lock+0x2b/0x80 [ 1439.261532][T22986] ? find_held_lock+0x2b/0x80 [ 1439.261545][T22986] ? finish_task_switch.isra.0+0x200/0xb80 [ 1439.261561][T22986] ? finish_task_switch.isra.0+0x200/0xb80 [ 1439.261585][T22986] ? trace_sched_exit_tp+0x13a/0x180 [ 1439.261602][T22986] ? __schedule+0x1000/0x6120 [ 1439.261645][T22986] ? rcu_is_watching+0x12/0xc0 [ 1439.261667][T22986] ? cap_capable+0x107/0x460 [ 1439.261699][T22986] mmap_region+0x180/0x3e0 [ 1439.261725][T22986] do_mmap+0xc63/0x12f0 [ 1439.261745][T22986] ? __pfx_do_mmap+0x10/0x10 [ 1439.261763][T22986] ? __pfx_down_write_killable+0x10/0x10 [ 1439.261790][T22986] vm_mmap_pgoff+0x29e/0x470 [ 1439.261810][T22986] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1439.261828][T22986] ? do_futex+0x192/0x350 [ 1439.261848][T22986] ? __pfx_do_futex+0x10/0x10 [ 1439.261870][T22986] ksys_mmap_pgoff+0xe1/0x650 [ 1439.261888][T22986] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1439.261904][T22986] ? xfd_validate_state+0x129/0x190 [ 1439.261929][T22986] __x64_sys_mmap+0x125/0x190 [ 1439.261952][T22986] do_syscall_64+0x106/0xf80 [ 1439.261971][T22986] ? clear_bhb_loop+0x40/0x90 [ 1439.261989][T22986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.262005][T22986] RIP: 0033:0x7f8dcfd9c799 [ 1439.262019][T22986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1439.262034][T22986] RSP: 002b:00007f8dd0cf2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1439.262049][T22986] RAX: ffffffffffffffda RBX: 00007f8dd0016090 RCX: 00007f8dcfd9c799 [ 1439.262059][T22986] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 1439.262068][T22986] RBP: 00007f8dcfe32c99 R08: fffffffffffffffa R09: 0000000000008000 [ 1439.262079][T22986] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1439.262088][T22986] R13: 00007f8dd0016128 R14: 00007f8dd0016090 R15: 00007fffcf4e7568 [ 1439.262109][T22986] [ 1440.544693][T23006] netlink: 'syz.8.3208': attribute type 1 has an invalid length. [ 1443.451573][T23049] netlink: 330 bytes leftover after parsing attributes in process `syz.8.3214'. [ 1444.768186][T23059] zswap: compressor  not available [ 1445.091653][T23064] netlink: 'syz.9.3220': attribute type 1 has an invalid length. [ 1445.663270][T23070] can: request_module (can-proto-0) failed. [ 1445.892088][T23079] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3224'. [ 1446.195525][T23079] team0: Port device team_slave_0 removed [ 1446.628066][T21043] Bluetooth: hci8: hcon ffff888035950000 sent 0 < count 256 [ 1448.680997][T23098] FAULT_INJECTION: forcing a failure. [ 1448.680997][T23098] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1448.788606][T23098] CPU: 1 UID: 0 PID: 23098 Comm: syz.8.3227 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1448.788667][T23098] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1448.788681][T23098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1448.788695][T23098] Call Trace: [ 1448.788705][T23098] [ 1448.788716][T23098] dump_stack_lvl+0x100/0x190 [ 1448.788764][T23098] should_fail_ex.cold+0x5/0xa [ 1448.788800][T23098] get_futex_key+0x1d2/0x1620 [ 1448.788842][T23098] ? __pfx_get_futex_key+0x10/0x10 [ 1448.788879][T23098] ? trace_pid_list_is_set+0x11a/0x390 [ 1448.788920][T23098] ? trace_pid_list_is_set+0x22c/0x390 [ 1448.788969][T23098] futex_wait_setup+0x83/0x510 [ 1448.789030][T23098] __futex_wait+0x19f/0x300 [ 1448.789076][T23098] ? __pfx___futex_wait+0x10/0x10 [ 1448.789115][T23098] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1448.789151][T23098] ? lockdep_hardirqs_on+0x78/0x100 [ 1448.789193][T23098] ? __pfx_futex_wake_mark+0x10/0x10 [ 1448.789240][T23098] ? find_held_lock+0x2b/0x80 [ 1448.789267][T23098] ? futex_wake+0x456/0x530 [ 1448.789314][T23098] futex_wait+0xed/0x380 [ 1448.789354][T23098] ? __pfx_futex_wait+0x10/0x10 [ 1448.789403][T23098] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1448.789456][T23098] do_futex+0x1ef/0x350 [ 1448.789492][T23098] ? __pfx_do_futex+0x10/0x10 [ 1448.789529][T23098] ? read_tsc+0x9/0x20 [ 1448.789558][T23098] ? ktime_get_ts64+0x256/0x3f0 [ 1448.789593][T23098] __x64_sys_futex+0x34f/0x4d0 [ 1448.789635][T23098] ? __pfx___x64_sys_futex+0x10/0x10 [ 1448.789686][T23098] do_syscall_64+0x106/0xf80 [ 1448.789723][T23098] ? clear_bhb_loop+0x40/0x90 [ 1448.789759][T23098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.789788][T23098] RIP: 0033:0x7f5d0af9c799 [ 1448.789813][T23098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1448.789842][T23098] RSP: 002b:00007f5d0be7f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1448.789869][T23098] RAX: ffffffffffffffda RBX: 00007f5d0b215fa8 RCX: 00007f5d0af9c799 [ 1448.789889][T23098] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5d0b215fa8 [ 1448.789907][T23098] RBP: 00007f5d0b215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1448.789925][T23098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1448.789942][T23098] R13: 00007f5d0b216038 R14: 00007ffc2c16c900 R15: 00007ffc2c16c9e8 [ 1448.789977][T23098] [ 1449.305939][T23113] netlink: 330 bytes leftover after parsing attributes in process `syz.5.3230'. [ 1450.818788][T23103] kexec: Could not allocate control_code_buffer [ 1450.892673][T23124] netlink: 'syz.9.3232': attribute type 1 has an invalid length. [ 1451.058569][T23130] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1451.324654][T21043] Bluetooth: hci8: hcon ffff888035950000 sent 0 < count 256 [ 1451.351773][T23136] FAULT_INJECTION: forcing a failure. [ 1451.351773][T23136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1451.408168][T23136] CPU: 0 UID: 0 PID: 23136 Comm: syz.5.3237 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1451.408202][T23136] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1451.408210][T23136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1451.408219][T23136] Call Trace: [ 1451.408225][T23136] [ 1451.408231][T23136] dump_stack_lvl+0x100/0x190 [ 1451.408258][T23136] should_fail_ex.cold+0x5/0xa [ 1451.408275][T23136] _copy_from_user+0x2e/0xd0 [ 1451.408293][T23136] copy_msghdr_from_user+0x9f/0x4f0 [ 1451.408311][T23136] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1451.408342][T23136] ___sys_sendmsg+0x106/0x1e0 [ 1451.408359][T23136] ? __pfx____sys_sendmsg+0x10/0x10 [ 1451.408396][T23136] __sys_sendmsg+0x170/0x220 [ 1451.408417][T23136] ? __pfx___sys_sendmsg+0x10/0x10 [ 1451.408447][T23136] do_syscall_64+0x106/0xf80 [ 1451.408467][T23136] ? clear_bhb_loop+0x40/0x90 [ 1451.408484][T23136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.408498][T23136] RIP: 0033:0x7f614f59c799 [ 1451.408510][T23136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1451.408524][T23136] RSP: 002b:00007f6150457028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1451.408538][T23136] RAX: ffffffffffffffda RBX: 00007f614f815fa0 RCX: 00007f614f59c799 [ 1451.408548][T23136] RDX: 0000000020008080 RSI: 00002000000012c0 RDI: 0000000000000003 [ 1451.408557][T23136] RBP: 00007f6150457090 R08: 0000000000000000 R09: 0000000000000000 [ 1451.408565][T23136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1451.408574][T23136] R13: 00007f614f816038 R14: 00007f614f815fa0 R15: 00007ffd66a947c8 [ 1451.408595][T23136] [ 1452.004858][T21043] Bluetooth: hci5: unexpected event for opcode 0x7c89 [ 1452.106960][T23145] nbd: must specify at least one socket [ 1453.149018][T23159] FAULT_INJECTION: forcing a failure. [ 1453.149018][T23159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1453.194905][T23159] CPU: 1 UID: 0 PID: 23159 Comm: syz.7.3242 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1453.194939][T23159] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1453.194947][T23159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1453.194956][T23159] Call Trace: [ 1453.194962][T23159] [ 1453.194967][T23159] dump_stack_lvl+0x100/0x190 [ 1453.194994][T23159] should_fail_ex.cold+0x5/0xa [ 1453.195011][T23159] core_sys_select+0x5d1/0xbb0 [ 1453.195038][T23159] ? __pfx_core_sys_select+0x10/0x10 [ 1453.195058][T23159] ? get_pid_task+0xfc/0x250 [ 1453.195079][T23159] ? get_pid_task+0x106/0x250 [ 1453.195110][T23159] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1453.195143][T23159] ? __fget_files+0x215/0x3d0 [ 1453.195176][T23159] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1453.195213][T23159] kern_select+0x20c/0x270 [ 1453.195253][T23159] ? __pfx_kern_select+0x10/0x10 [ 1453.195277][T23159] ? __pfx_ksys_write+0x10/0x10 [ 1453.195293][T23159] __x64_sys_select+0xbd/0x160 [ 1453.195305][T23159] ? do_syscall_64+0x95/0xf80 [ 1453.195324][T23159] ? lockdep_hardirqs_on+0x78/0x100 [ 1453.195343][T23159] do_syscall_64+0x106/0xf80 [ 1453.195360][T23159] ? clear_bhb_loop+0x40/0x90 [ 1453.195378][T23159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.195392][T23159] RIP: 0033:0x7f8dcfd9c799 [ 1453.195405][T23159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1453.195420][T23159] RSP: 002b:00007f8dd0d13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1453.195434][T23159] RAX: ffffffffffffffda RBX: 00007f8dd0015fa0 RCX: 00007f8dcfd9c799 [ 1453.195443][T23159] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 1453.195451][T23159] RBP: 00007f8dd0d13090 R08: 0000000000000000 R09: 0000000000000000 [ 1453.195460][T23159] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1453.195469][T23159] R13: 00007f8dd0016038 R14: 00007f8dd0015fa0 R15: 00007fffcf4e7568 [ 1453.195488][T23159] [ 1454.892485][T23187] netlink: 'syz.8.3249': attribute type 1 has an invalid length. [ 1454.986144][T23165] kexec: Could not allocate control_code_buffer [ 1458.211472][T23222] FAULT_INJECTION: forcing a failure. [ 1458.211472][T23222] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1458.269664][T23222] CPU: 0 UID: 0 PID: 23222 Comm: syz.5.3256 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1458.269721][T23222] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1458.269735][T23222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1458.269751][T23222] Call Trace: [ 1458.269760][T23222] [ 1458.269770][T23222] dump_stack_lvl+0x100/0x190 [ 1458.269813][T23222] should_fail_ex.cold+0x5/0xa [ 1458.269847][T23222] ? prepare_alloc_pages+0x16d/0x5f0 [ 1458.269880][T23222] should_fail_alloc_page+0xeb/0x140 [ 1458.269910][T23222] prepare_alloc_pages+0x1f0/0x5f0 [ 1458.269945][T23222] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1458.269986][T23222] ? get_page_from_freelist+0x111d/0x3140 [ 1458.270031][T23222] ? __pfx___might_resched+0x10/0x10 [ 1458.270066][T23222] ? prepare_alloc_pages+0x16d/0x5f0 [ 1458.270096][T23222] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1458.270138][T23222] ? rcu_is_watching+0x12/0xc0 [ 1458.270176][T23222] ? trace_mm_page_alloc+0x17a/0x1d0 [ 1458.270210][T23222] ? is_bpf_text_address+0x8a/0x1a0 [ 1458.270247][T23222] ? is_bpf_text_address+0x8a/0x1a0 [ 1458.270284][T23222] ? bpf_ksym_find+0x124/0x1c0 [ 1458.270314][T23222] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1458.270342][T23222] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1458.270385][T23222] ? policy_nodemask+0xed/0x4f0 [ 1458.270416][T23222] alloc_pages_mpol+0x1fb/0x550 [ 1458.270445][T23222] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1458.270483][T23222] alloc_pages_noprof+0x131/0x390 [ 1458.270513][T23222] kimage_alloc_pages+0x72/0x380 [ 1458.270544][T23222] kimage_alloc_control_pages+0x157/0xa20 [ 1458.270570][T23222] ? policy_nodemask+0x20/0x4f0 [ 1458.270604][T23222] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 1458.270631][T23222] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1458.270668][T23222] alloc_pgt_page+0x17/0xb0 [ 1458.270705][T23222] machine_kexec_prepare+0x1a7/0x14d0 [ 1458.270749][T23222] ? __pfx_machine_kexec_prepare+0x10/0x10 [ 1458.270785][T23222] ? __pfx_alloc_pgt_page+0x10/0x10 [ 1458.270820][T23222] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 1458.270856][T23222] ? kasan_save_track+0x14/0x30 [ 1458.270900][T23222] do_kexec_load+0x32c/0x810 [ 1458.270930][T23222] ? __pfx_do_kexec_load+0x10/0x10 [ 1458.270961][T23222] ? _copy_from_user+0x59/0xd0 [ 1458.270995][T23222] __x64_sys_kexec_load+0x1bf/0x230 [ 1458.271027][T23222] do_syscall_64+0x106/0xf80 [ 1458.271061][T23222] ? clear_bhb_loop+0x40/0x90 [ 1458.271093][T23222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.271120][T23222] RIP: 0033:0x7f614f59c799 [ 1458.271142][T23222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1458.271167][T23222] RSP: 002b:00007f61503f4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 1458.271192][T23222] RAX: ffffffffffffffda RBX: 00007f614f816270 RCX: 00007f614f59c799 [ 1458.271210][T23222] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000200000000007 [ 1458.271227][T23222] RBP: 00007f61503f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1458.271243][T23222] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 1458.271259][T23222] R13: 00007f614f816308 R14: 00007f614f816270 R15: 00007ffd66a947c8 [ 1458.271293][T23222] [ 1458.671043][T23226] FAULT_INJECTION: forcing a failure. [ 1458.671043][T23226] name failslab, interval 1, probability 0, space 0, times 0 [ 1458.701279][T23226] CPU: 0 UID: 0 PID: 23226 Comm: syz.5.3256 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1458.701336][T23226] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1458.701348][T23226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1458.701363][T23226] Call Trace: [ 1458.701373][T23226] [ 1458.701383][T23226] dump_stack_lvl+0x100/0x190 [ 1458.701423][T23226] should_fail_ex.cold+0x5/0xa [ 1458.701452][T23226] should_failslab+0xc2/0x120 [ 1458.701479][T23226] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1458.701515][T23226] ? security_inode_alloc+0x3b/0x2c0 [ 1458.701543][T23226] ? lockdep_init_map_type+0x5c/0x250 [ 1458.701578][T23226] security_inode_alloc+0x3b/0x2c0 [ 1458.701603][T23226] inode_init_always_gfp+0xced/0x1040 [ 1458.701633][T23226] alloc_inode+0x8e/0x250 [ 1458.701665][T23226] new_inode+0x22/0x1c0 [ 1458.701700][T23226] shmem_get_inode+0x212/0x1040 [ 1458.701739][T23226] ? __pfx_shmem_get_inode+0x10/0x10 [ 1458.701770][T23226] ? rcu_is_watching+0x12/0xc0 [ 1458.701805][T23226] ? percpu_counter_add_batch+0xb9/0x230 [ 1458.701854][T23226] __shmem_file_setup+0x3ac/0x490 [ 1458.701889][T23226] ? __pfx___shmem_file_setup+0x10/0x10 [ 1458.701929][T23226] ? vm_area_alloc+0x1f/0x160 [ 1458.701966][T23226] shmem_zero_setup+0x96/0x1b0 [ 1458.702007][T23226] __mmap_region+0x2198/0x29e0 [ 1458.702045][T23226] ? __pfx___mmap_region+0x10/0x10 [ 1458.702094][T23226] ? __lock_acquire+0x4a5/0x2630 [ 1458.702122][T23226] ? find_held_lock+0x2b/0x80 [ 1458.702156][T23226] ? find_held_lock+0x2b/0x80 [ 1458.702177][T23226] ? finish_task_switch.isra.0+0x200/0xb80 [ 1458.702202][T23226] ? finish_task_switch.isra.0+0x200/0xb80 [ 1458.702240][T23226] ? trace_sched_exit_tp+0x13a/0x180 [ 1458.702267][T23226] ? __schedule+0x1000/0x6120 [ 1458.702343][T23226] ? rcu_is_watching+0x12/0xc0 [ 1458.702375][T23226] ? cap_capable+0x107/0x460 [ 1458.702413][T23226] mmap_region+0x180/0x3e0 [ 1458.702451][T23226] do_mmap+0xc63/0x12f0 [ 1458.702483][T23226] ? __pfx_do_mmap+0x10/0x10 [ 1458.702508][T23226] ? __pfx_down_write_killable+0x10/0x10 [ 1458.702549][T23226] vm_mmap_pgoff+0x29e/0x470 [ 1458.702580][T23226] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1458.702608][T23226] ? do_futex+0x192/0x350 [ 1458.702638][T23226] ? __pfx_do_futex+0x10/0x10 [ 1458.702672][T23226] ksys_mmap_pgoff+0xe1/0x650 [ 1458.702696][T23226] ? __x64_sys_futex+0x34f/0x4d0 [ 1458.702723][T23226] ? __x64_sys_futex+0x358/0x4d0 [ 1458.702751][T23226] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1458.702776][T23226] ? xfd_validate_state+0x129/0x190 [ 1458.702813][T23226] __x64_sys_mmap+0x125/0x190 [ 1458.702856][T23226] do_syscall_64+0x106/0xf80 [ 1458.702885][T23226] ? clear_bhb_loop+0x40/0x90 [ 1458.702913][T23226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1458.702937][T23226] RIP: 0033:0x7f614f59c799 [ 1458.702956][T23226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1458.702979][T23226] RSP: 002b:00007f61503d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1458.703001][T23226] RAX: ffffffffffffffda RBX: 00007f614f816360 RCX: 00007f614f59c799 [ 1458.703017][T23226] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 1458.703031][T23226] RBP: 00007f614f632c99 R08: fffffffffffffffa R09: 0000000000008000 [ 1458.703046][T23226] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1458.703060][T23226] R13: 00007f614f8163f8 R14: 00007f614f816360 R15: 00007ffd66a947c8 [ 1458.703093][T23226] [ 1460.518085][T23237] program syz.7.3260 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1462.011682][ T30] INFO: task kworker/u10:4:20773 blocked for more than 143 seconds. [ 1462.037825][ T30] Tainted: G U W L XTNJ syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1462.077820][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1462.137823][ T30] task:kworker/u10:4 state:D stack:26136 pid:20773 tgid:20773 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1462.200853][ T30] Workqueue: netns cleanup_net [ 1462.228086][ T30] Call Trace: [ 1462.232830][ T30] [ 1462.235759][ T30] __schedule+0xfee/0x6120 [ 1462.252429][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1462.257424][ T30] ? __pfx___schedule+0x10/0x10 [ 1462.272153][ T30] ? find_held_lock+0x2b/0x80 [ 1462.279128][ T30] ? schedule+0x2bf/0x390 [ 1462.296968][ T30] schedule+0xdd/0x390 [ 1462.310359][ T30] schedule_timeout+0x1b2/0x280 [ 1462.324091][T23243] kexec: Could not allocate control_code_buffer [ 1462.379713][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1462.385125][ T30] ? mark_held_locks+0x40/0x70 [ 1462.399343][ T30] __wait_for_common+0x2e7/0x4c0 [ 1462.410166][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1462.415597][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 1462.448284][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1462.453547][ T30] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 1462.460202][ T30] __flush_workqueue+0x3f7/0x1200 [ 1462.465276][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1462.470690][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1462.500919][ T30] ? __pfx___flush_workqueue+0x10/0x10 [ 1462.527877][ T30] ? reacquire_held_locks+0xce/0x1e0 [ 1462.533244][ T30] ? __pfx_sock_def_readable+0x10/0x10 [ 1462.554970][ T30] ? __pfx_sock_def_readable+0x10/0x10 [ 1462.561558][ T30] rds_tcp_listen_stop+0x104/0x160 [ 1462.566829][ T30] rds_tcp_exit_net+0xe0/0x870 [ 1462.572074][ T30] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 1462.577895][ T30] ? __pfx___might_resched+0x10/0x10 [ 1462.583223][ T30] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 1462.657848][ T30] ops_undo_list+0x2ee/0xab0 [ 1462.662531][ T30] ? __pfx_ops_undo_list+0x10/0x10 [ 1462.667673][ T30] ? cleanup_net+0x332/0x920 [ 1462.704858][ T30] ? idr_destroy+0x62/0x2e0 [ 1462.717073][ T30] cleanup_net+0x499/0x920 [ 1462.737875][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 1462.746902][ T30] ? rcu_is_watching+0x12/0xc0 [ 1462.751875][ T30] process_one_work+0xa23/0x19a0 [ 1462.756862][ T30] ? __pfx_process_one_work+0x10/0x10 [ 1462.767885][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 1462.772884][ T30] worker_thread+0x5ef/0xe50 [ 1462.777521][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1462.807238][ T30] ? kthread+0x13a/0x450 [ 1462.816669][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1462.828946][ T30] kthread+0x370/0x450 [ 1462.833072][ T30] ? __pfx_kthread+0x10/0x10 [ 1462.837693][ T30] ret_from_fork+0x754/0xd80 [ 1462.878270][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1462.883444][ T30] ? __switch_to+0x7b4/0x1120 [ 1462.898183][ T30] ? __pfx_kthread+0x10/0x10 [ 1462.902800][ T30] ret_from_fork_asm+0x1a/0x30 [ 1462.907611][ T30] [ 1462.938489][ T30] INFO: task syz.2.2741:20814 blocked for more than 144 seconds. [ 1462.957911][ T30] Tainted: G U W L XTNJ syzkaller #0 [ 1462.964452][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1463.008318][ T30] task:syz.2.2741 state:D stack:25752 pid:20814 tgid:20813 ppid:18446 task_flags:0x400140 flags:0x00080002 [ 1463.024498][ T30] Call Trace: [ 1463.039540][ T30] [ 1463.042491][ T30] __schedule+0xfee/0x6120 [ 1463.046898][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1463.077851][ T30] ? __pfx___schedule+0x10/0x10 [ 1463.082761][ T30] ? find_held_lock+0x2b/0x80 [ 1463.087461][ T30] ? schedule+0x2bf/0x390 [ 1463.098138][ T30] schedule+0xdd/0x390 [ 1463.102230][ T30] schedule_timeout+0x1b2/0x280 [ 1463.107070][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1463.128055][ T30] ? mark_held_locks+0x40/0x70 [ 1463.132845][ T30] __wait_for_common+0x2e7/0x4c0 [ 1463.155287][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1463.187823][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 1463.193346][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1463.217862][ T30] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 1463.225459][ T30] __flush_workqueue+0x3f7/0x1200 [ 1463.238164][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1463.243119][ T30] ? __pfx___flush_workqueue+0x10/0x10 [ 1463.268414][ T30] ? reacquire_held_locks+0xce/0x1e0 [ 1463.273729][ T30] ? release_sock+0x21/0x220 [ 1463.281368][ T30] ? __pfx_sock_def_readable+0x10/0x10 [ 1463.286836][ T30] ? __local_bh_enable_ip+0x9e/0x120 [ 1463.292735][ T30] ? __pfx_sock_def_readable+0x10/0x10 [ 1463.323200][ T30] rds_tcp_listen_stop+0x104/0x160 [ 1463.343099][ T30] rds_tcp_exit_net+0xe0/0x870 [ 1463.358236][ T30] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 1463.363633][ T30] ? __pfx___might_resched+0x10/0x10 [ 1463.386226][ T30] ? __pfx_rds_tcp_exit_net+0x10/0x10 [ 1463.417845][ T30] ops_undo_list+0x2ee/0xab0 [ 1463.422502][ T30] ? kfree+0x1c0/0x6b0 [ 1463.428408][ T30] ? __pfx_ops_undo_list+0x10/0x10 [ 1463.434498][ T30] ? ops_init+0x2fa/0x5f0 [ 1463.439026][ T30] setup_net+0x1fa/0x3a0 [ 1463.443303][ T30] ? __pfx_setup_net+0x10/0x10 [ 1463.448641][ T30] ? lockdep_init_map_type+0x5c/0x250 [ 1463.454059][ T30] ? mutex_init_lockep+0x110/0x150 [ 1463.463415][ T30] copy_net_ns+0x46f/0x7c0 [ 1463.467947][ T30] create_new_namespaces+0x3ea/0xac0 [ 1463.473266][ T30] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1463.489246][ T30] ksys_unshare+0x473/0xad0 [ 1463.493801][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 1463.498938][ T30] __x64_sys_unshare+0x31/0x40 [ 1463.503723][ T30] do_syscall_64+0x106/0xf80 [ 1463.508416][ T30] ? clear_bhb_loop+0x40/0x90 [ 1463.513123][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.519250][ T30] RIP: 0033:0x7f3a4e39c799 [ 1463.523682][ T30] RSP: 002b:00007f3a4f2a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1463.533838][ T30] RAX: ffffffffffffffda RBX: 00007f3a4e615fa0 RCX: 00007f3a4e39c799 [ 1463.542570][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1463.550634][ T30] RBP: 00007f3a4e432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1463.558933][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1463.569809][ T30] R13: 00007f3a4e616038 R14: 00007f3a4e615fa0 R15: 00007ffdb95d8288 [ 1463.577882][ T30] [ 1463.581025][ T30] [ 1463.581025][ T30] Showing all locks held in the system: [ 1463.597365][ T30] 1 lock held by khungtaskd/30: [ 1463.606101][ T30] #0: ffffffff8e7e74e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1463.616088][ T30] 2 locks held by kworker/1:1/47: [ 1463.621168][ T30] #0: ffff88813fe63148 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1463.633449][ T30] #1: ffffc90000b77d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1463.645230][ T30] 2 locks held by kworker/u10:3/20755: [ 1463.651003][ T30] #0: ffff88801f305948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1463.666080][ T30] #1: ffffc90003767d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1463.678884][ T30] 3 locks held by kworker/u10:4/20773: [ 1463.684370][ T30] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1463.695093][ T30] #1: ffffc900038e7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1463.716188][ T30] #2: ffffffff905fb950 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1463.725912][ T30] 1 lock held by syz.2.2741/20814: [ 1463.732140][ T30] #0: ffffffff905fb950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1463.743659][ T30] 1 lock held by syz.0.2823/21237: [ 1463.749099][ T30] #0: ffffffff905fb950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1463.760382][ T30] 1 lock held by syz.1.2833/21283: [ 1463.769693][ T30] #0: ffffffff905fb950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1463.779473][ T30] 1 lock held by syz-executor/21464: [ 1463.784772][ T30] 1 lock held by syz.4.2910/21679: [ 1463.791224][ T30] #0: ffffffff905fb950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1463.801019][ T30] 1 lock held by syz.6.2974/21971: [ 1463.806145][ T30] #0: ffffffff905fb950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1463.829518][ T30] 4 locks held by syz-executor/22204: [ 1463.836579][ T30] #0: ffff88807a0d8ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 1463.856635][ T30] #1: ffff88807a0d80c0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 1463.870457][ T30] #2: ffffffff908ac548 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 1463.880939][ T30] #3: ffff8880b2b5faf8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x770 [ 1463.890541][ T30] 1 lock held by syz.3.3057/22374: [ 1463.904989][ T30] #0: ffffffff905fb950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1463.914570][ T30] 1 lock held by syz.9.3240/23145: [ 1463.924429][ T30] #0: ffffffff905fb950 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1463.937902][ T30] 1 lock held by syz.7.3263/23248: [ 1463.943034][ T30] #0: ffffffff8e7f30f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1463.976629][ T30] [ 1463.995986][ T30] ============================================= [ 1463.995986][ T30] [ 1464.010970][ T30] NMI backtrace for cpu 1 [ 1464.010993][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1464.011040][ T30] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1464.011048][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1464.011057][ T30] Call Trace: [ 1464.011062][ T30] [ 1464.011068][ T30] dump_stack_lvl+0x100/0x190 [ 1464.011094][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1464.011116][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1464.011136][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1464.011155][ T30] sys_info+0x141/0x190 [ 1464.011249][ T30] watchdog+0xd25/0x1050 [ 1464.011268][ T30] ? __pfx_watchdog+0x10/0x10 [ 1464.011282][ T30] ? __kthread_parkme+0x18c/0x230 [ 1464.011300][ T30] ? kthread+0x13a/0x450 [ 1464.011316][ T30] ? __pfx_watchdog+0x10/0x10 [ 1464.011328][ T30] kthread+0x370/0x450 [ 1464.011345][ T30] ? __pfx_kthread+0x10/0x10 [ 1464.011364][ T30] ret_from_fork+0x754/0xd80 [ 1464.011384][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1464.011405][ T30] ? __switch_to+0x7b4/0x1120 [ 1464.011426][ T30] ? __pfx_kthread+0x10/0x10 [ 1464.011445][ T30] ret_from_fork_asm+0x1a/0x30 [ 1464.011469][ T30] [ 1464.011476][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1464.143894][ C0] NMI backtrace for cpu 0 [ 1464.143916][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1464.143963][ C0] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1464.143976][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1464.143991][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1464.144029][ C0] Code: 88 85 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 20 1e 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1464.144052][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000246 [ 1464.144071][ C0] RAX: 0000000000b38503 RBX: ffffffff8e4975c0 RCX: ffffffff8b8d6c75 [ 1464.144087][ C0] RDX: 0000000000000000 RSI: ffffffff8de7f6dc RDI: ffffffff8c1b06a0 [ 1464.144103][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 1464.144118][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 1464.144133][ C0] R13: 0000000000000000 R14: ffffffff90d9bd10 R15: 0000000000000000 [ 1464.144148][ C0] FS: 0000000000000000(0000) GS:ffff88812434a000(0000) knlGS:0000000000000000 [ 1464.144171][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1464.144187][ C0] CR2: 00005649ff264ee8 CR3: 0000000033de0000 CR4: 00000000003526f0 [ 1464.144202][ C0] Call Trace: [ 1464.144210][ C0] [ 1464.144218][ C0] default_idle+0x9/0x10 [ 1464.144251][ C0] default_idle_call+0x6c/0xb0 [ 1464.144271][ C0] do_idle+0x43a/0x550 [ 1464.144294][ C0] ? __pfx_do_idle+0x10/0x10 [ 1464.144316][ C0] ? do_idle+0x2ff/0x550 [ 1464.144338][ C0] cpu_startup_entry+0x4f/0x60 [ 1464.144359][ C0] rest_init+0x251/0x260 [ 1464.144381][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1464.144518][ C0] start_kernel+0x47f/0x480 [ 1464.144566][ C0] x86_64_start_reservations+0x24/0x30 [ 1464.144590][ C0] x86_64_start_kernel+0x12b/0x130 [ 1464.144613][ C0] common_startup_64+0x13e/0x148 [ 1464.144646][ C0] [ 1464.431637][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1464.438520][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1464.449208][ T30] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1464.459305][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1464.469367][ T30] Call Trace: [ 1464.472633][ T30] [ 1464.475547][ T30] dump_stack_lvl+0x100/0x190 [ 1464.480219][ T30] vpanic+0x552/0x970 [ 1464.484188][ T30] ? __pfx_vpanic+0x10/0x10 [ 1464.488675][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1464.494818][ T30] panic+0xd1/0xe0 [ 1464.498567][ T30] ? __pfx_panic+0x10/0x10 [ 1464.502979][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1464.509123][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1464.515258][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1464.521398][ T30] ? watchdog.cold+0x198/0x1ca [ 1464.526148][ T30] ? watchdog+0xd35/0x1050 [ 1464.530548][ T30] watchdog.cold+0x1a9/0x1ca [ 1464.535134][ T30] ? __pfx_watchdog+0x10/0x10 [ 1464.539797][ T30] ? __kthread_parkme+0x18c/0x230 [ 1464.544810][ T30] ? kthread+0x13a/0x450 [ 1464.549037][ T30] ? __pfx_watchdog+0x10/0x10 [ 1464.553697][ T30] kthread+0x370/0x450 [ 1464.557759][ T30] ? __pfx_kthread+0x10/0x10 [ 1464.562357][ T30] ret_from_fork+0x754/0xd80 [ 1464.566942][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1464.572042][ T30] ? __switch_to+0x7b4/0x1120 [ 1464.576706][ T30] ? __pfx_kthread+0x10/0x10 [ 1464.581285][ T30] ret_from_fork_asm+0x1a/0x30 [ 1464.586045][ T30] [ 1464.589319][ T30] Kernel Offset: disabled [ 1464.593642][ T30] Rebooting in 86400 seconds..