last executing test programs: 3m4.549163009s ago: executing program 32 (id=1479): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mlockall$auto(0x800000000000005) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x22682, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) gettimeofday$auto(&(0x7f00000000c0)={0x0, 0x4c}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) sendfile$auto(0x1, r1, 0x0, 0x400007ffff000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/nr_hugepages\x00', 0x642, 0x0) write$auto(r2, &(0x7f0000000200)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[`.\xf7~\xd2\xfd\xf3\x95\x1d\xf8\x06\x00\x00\x00\x00\x00\x00\x00\xf8-\x10\xa6\xa0\n\xd1\xff\a\xae=R\x89\x00!\xc6J\x1d\x86J\"\xdd\xf88Y\n\x87\xcc\xb1([\xd1n2\xcd2\x05\x00\x00\x00', 0x40400) ioctl$auto(r0, 0x400454ca, 0x38) ioctl$auto_TUNSETVNETLE2(r0, 0x400454dc, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x340a00, 0x182) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000003680)='/sys/devices/platform/dummy_hcd.5/usb6/6-0:1.0/bInterfaceNumber\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000036c0)=""/4096, 0x1000) read$auto(r3, 0x0, 0x19) write$auto(0x3, 0x0, 0xfdef) getdents$auto(r0, &(0x7f0000000040)={0xd2, 0x7, 0xc, "8f9a1c6889204eda60dca95f17c33c9a17369f14"}, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r5) r6 = semctl$auto(0x1, 0x8, 0xffff7fff, 0x5) kcmp$auto_KCMP_VM(r6, 0xffffffffffffffff, 0x1, 0x2, 0x3) madvise$auto(0x0, 0x200007, 0x19) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x3, 0x2) 2m50.592685681s ago: executing program 33 (id=1513): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x5c1e, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25020000000800010007000000080005"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) 2m41.080069114s ago: executing program 3 (id=1544): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) (rerun: 32) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x10, 0x2, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10700, 0x0, 0x0) (async) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) connect$auto(0x3, 0x0, 0x54) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) mmap$auto(0x0, 0x40000c, 0x45bd, 0x9b72, 0x2, 0x14600000000000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/comedi\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty13\x00', 0x84000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x14, r2, 0xb01, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x240088e4) (async, rerun: 64) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(r0, &(0x7f0000000040)='0\x00\\9(\xba\xea\x99\xfc|U\x1c\xc7k', 0x81) 2m38.70081996s ago: executing program 3 (id=1548): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xf, r0, 0xfffffffffffff57e, 0x7) ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/orangefs/getattr_timeout_msecs\x00', 0x8a82b6a56f18970a, 0x0) sendfile$auto(r2, r4, 0x0, 0x7) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000780)="906f319d493614e6834bb14c5d8ba668ea3fe49b929347b1a2f5cd2d8bbea5a6e4a616ae542f1291fe274b9b559d6f3f0108fbb2b68f1c04d38107f490c44e278f81cb231be4de752bb862cc", 0x100000000}, 0x6, 0x0) r5 = io_uring_setup$auto(0x1, 0x0) statx$auto(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x3, 0x7fffffff, &(0x7f0000000140)={0x9, 0xf, 0xb476, 0x0, 0x0, 0x0, 0xffff, 0xb9, 0x3, 0x7, 0x3, 0x80, {0x7, 0x10000}, {0x2, 0x9}, {0x7378, 0x7}, {0x5, 0x1}, 0x8, 0xfffffffc, 0x1, 0x401, 0x400000000006, 0x7, 0x6, 0x2, 0x8001, 0x6, 0x0, 0x9, [0xff, 0xf, 0x7fffffffffffffff, 0x81, 0xd, 0x8001, 0x5, 0x3, 0x9]}) setresuid$auto(0x0, 0x0, 0x0) shmctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000000480)={{0xa, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x9}, 0x6ab, 0x6, 0x3, 0x8000000000000000, @inferred=0xffffffffffffffff, @raw=0xc1f, 0x3000, 0x0, &(0x7f0000000340)="de029906c9fdbd6e52a9b192e1eda36e11562662d39dee67e118a2ae1300895a41042fcbe1436712ed4619078cbcc52e729415a58d3bb3a460315665c395918e49917e3952f155b12c2e9a363f513d78f420ac395aa964d885d788a41099b7c17d9422cffce8a1ebf89ad42efddee1de0489e7e82fda0f", &(0x7f0000000400)}) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.0/usb1/power/wakeup_active_count\x00', 0x0, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) ioctl$auto_EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000500)={0x6, 0x3, 0x4, 0x0, 0x1, 0x0, [{0xffffffffffff7a7e, 0x6, 0x80000000, '\x00', 0x8}, {0xf, 0x9, 0x5}, {0x7, 0x0, 0xf, '\x00', 0x7}, {0xc, 0xc66f, 0xa, '\x00', 0xa}, {0x2, 0x0, 0x3, '\x00', 0x4f}, {0x1, 0x3, 0x4, '\x00', 0x101}, {0x0, 0x6, 0x10, '\x00', 0x99eb}, {0x3, 0x5, 0x3, '\x00', 0x2}, {0xd14ef1, 0x7, 0x9, '\x00', 0x903}, {0xfffffffffffff01a, 0xba, 0x1}]}) kexec_load$auto(0x6, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) read$auto(r3, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'dvmrp1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001040)={&(0x7f0000000900)=ANY=[@ANYBLOB="9c0600007e244d903bb66ff159dbb2385896affa47705e89b25efea39e919d30667732560a40a9a032430308e7d60e642a4fe2c4e9d2c5f63370ae6b", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="a0cf02442286cb97163d185993881e0488bdd41f90c24c7e1213590ea5547a01da3f6f20237a032e0400c48000000025e4b0d6d35445f1ab6af6d85c610d0aee50b41a61512e9d047c824814debbaf6159d26b2564e8d88012b09e1eda659f2c7cf7f43751fdc76cc2583fdfc13c65427a8c562bb79740e03668e99fe195ffc58fc58028a5245c5e3e2ea80fb5d230d2d017367b3273caaf047642df64e3d34b356f72982afa4b85ff4d7fed5474cd07c11604426d94f67d1d4470fecfcd58c8f94de11daafb1e1400a500ff020000000000000000000000000001dd001a80ec69efa4896f6e88fbec3c58a9b13aca590901476a235b9b97418d9ff2662fcd02fd7db7b7e1a30d4a70423b6b7acbbcdc724df678235df2cd1f0ac088af56214a963916fd056f3f453ed3c20495e434a7e63f9346dcb6129f00e7a6c59693013a71d855c53056add0114bb831fb551288c3607b706967f04ff8c8aa6113ffe7edd3493fd21805a90e69e8e334bafc0e3d669f269b2d8f79ab9ef75c88272788522b6242d1b1949c4d6fffa8b178ae3fc074d2fd3a22d48a2699aaef2920413ae37438b395aae992a4ef46cc01c4f8931764d8294cdd8f8ebc0000003800018008000300000000001400020076657468315f746f5f62726964676500080003001136ffff08000300020000000800030000000100140102800800d100", @ANYRES32=r6, @ANYBLOB="f1003080186de1828acd46e886979becc20664e668d1faeb12b4f180be488d2951686c352df60cd57b1bb9650619afe1415cc82d6a8cdb119c01ea0546ed54b2f9edef997924c87479349ba962f54a55e99ba7c7e8394588f7b39b77dabdba21a43c67d5237f423929241198d485bef67d7926126719cd800ebad57285f5ad0bd85e2680a8337c1c8a74a9d00db39fc9625a21c5019a3e9f57d23b78669e8b7a13a608d9208b15bd9a31c2caab6b2e40f0874fb5d6f1b99fe7cd9c4edcc021b5ae50428b4c2c04b42216eadc30b27e4585f3d506bbf76da57b5ed5db932c27f434482eb768c43e63c94b8ac9f92d801a6300000008002500", @ANYRES32=r7, @ANYBLOB="0c004500fbffffffffffffff3000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f6272696467650008000300ff0f000008000300090000002000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f6d616376746170000000a40002807e0063806af29e63b9b95843cfe01f0ea27c381c89ae4649377b46d88a2aec9cc062020809b25126ba9d366a022fee509ae5d97a9e7367e7ef48ab3991bfcb0419a6ff65673c7e562675510381334b85c4f9d604e8aa07d9b2845cfec1a1029115938ea960be06fac6d340decbf704006d800c004d00040000000000000000001400af00000000000000000000000000000000000400c500080028000a0101001400018008000100", @ANYRES32=r8, @ANYBLOB="08000300f8ffffff"], 0x69c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000000) write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) 2m36.902480991s ago: executing program 3 (id=1552): mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES16, @ANYRES64=r0], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r0) read$auto(r0, &(0x7f0000000040)='nl80211\x00', 0xbe62) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_submit$auto(0x2, 0xfffffffffffff096, &(0x7f0000000040)=0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/smbd_receive_credit_max\x00', 0x641, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x477, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x22, 0x0, 0x1) timerfd_settime$auto(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0xe, 0x3ff}, {0x10, 0xd}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto_SG_EMULATED_HOST2(0xffffffffffffffff, 0x2203, 0x0) r1 = socket(0xa, 0x5, 0x84) sendto$auto(r1, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000001000fe8000"}, 0x1f) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x2003f2, 0x15) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) 2m34.755638822s ago: executing program 3 (id=1554): r0 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffb, 0xd, 0x41, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c47, 0x80000004, 0x100, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x8, 0x1, 0x52, 0x5, 0x2, 0xf44, 0x76c5, 0x8, 0x100000000}}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ocfs2/max_locking_protocol\x00', 0xa2500, 0x0) pread64$auto(r2, 0x0, 0x8, 0x10000000000) r3 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x181080, 0x98) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/kcm_stats\x00', 0x8282, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000180)=""/8, 0x8) r5 = open_by_handle_at$auto(r3, &(0x7f0000000140)={0x8, 0x20002, "0100000000000000"}, 0xc) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x1) io_uring_enter$auto(0xffffffffffffffff, 0x2, 0xffffffff, 0x3, 0x0, 0x6) getsockopt$auto_SO_NO_CHECK(r5, 0x8, 0xb, &(0x7f0000000000)='\x00', &(0x7f0000000180)=0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x10000, 0xa, 0xdf, 0x9b72, 0x2, 0x8000) mprotect$auto(0x0, 0x800000000806125, 0xfffffffffffffffd) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20443, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x181881, 0x0) mkdir$auto(&(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x6) ioctl$auto_XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000004c0)={r0, &(0x7f0000000680)="9935da82938555fd6164b97079eaf7f9ad3f51c673405ee003ba9ab299ec7c89dca09c411a0fc78be7424acfb9e94be18441c4e730ea780f80aa9125be78e56fb43bd4bbe22f37c6c95ba57fa923051bdd2c2a79780d4a0e0aebbf950bdda4b0d97c10bb669b8c60bd2fd1b0dbfee2e7786a038d2607cad869732d6e214b2a0d2c1ac6d091c93decaed0fc6dc841670ac309eb5d846124460643d91f0cce6067a48c39d838e4ec8bcbbb3a9e9dc2c9cf6be289a6c5e3144ecb4967c8de1db06ad6cb6d92ef76b3f1772bdf7bc61d4d5a087b92b83b6366fc6cb24b8b4c1f529c9c1a985b64a692ae5c60bfd045a20e6bf3fb340c3d7a4ca75b0e12d030161199258b553c9507752669e8eb05d6cdb7c225828b1f8ea6bce5c7d1651e6a9b833ea62c58793dac0cf571f767c33ac8e082a9cbeb2f001005b430055caf7d9351687c76ce36031c4f6c1debdf691e24ec77872b8dc21fcd2f8c4c204aabc5466aed82708142299fd4deaa695a6b75212d55805d223a3ba3dbbff94a01a8cd3903fc18fc42a6cce96a5f195081446d145f2d47cfdddadd413f1fa0fbf68af725098a98a77b149ad9268666244e751c9419c1f001571130a857991c67de651f6f809015a5fbefc2dd2ff4746b39ac925b41df6022b300"/481, 0xfffffffd, &(0x7f0000000300)="ea3bafcf2dd456cf910f0ba1f953f0bb4aae9f9278a6a08a72e0d143a79db047c8ae8e37afb3d08dd39b118a18c451132a63bce6c9ee83f170efaf57bb6d5dade71072d45d6a6a9fe1e6fba3c750ae6a851061d7e4e1a073cec70d10280e07d56b34ba8f0215713d9328940358cea3ffcbeafc0573050b3985ab123ebc16dec0b20da532d3841f330388ffa36713f1c26ec0635b798ad10b49e62720160aaaab7048fd41fa33b0", 0x9, &(0x7f00000003c0)="2f7a0ffc98dfacf338f3f02276f398216db9a8a12e51c01eeab37f6145f6480dbb5d50ec57ac2ff19343522b4af243db86a33c9f2f2c7f4e2a43d9194d7163943d579409e94b2eaed238ea87e745ad27e7cbe6c159c97937f88d3e28bdd962c2fd64fd30b0f31a7e8bb9d222283ad773b9596c6d447060ee26fa1e8da359d8996db0fa35bddd54c0104001aebf0e2b6ddde2733756cca10b92ab1ab488db305e7274cdc3239326a63926f77b55192d3095bb7f9273d0e7a01a", &(0x7f0000000480)=0x1}) mmap$auto(0x8, 0x4020009, 0x6, 0xebe, 0x401, 0x20) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x29}, 0x20100007}, 0x3, 0x0) read$auto(0x3, 0x0, 0x200) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x302, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/nbd3/queue/nr_requests\x00', 0x1, 0x0) pwrite64$auto(r5, &(0x7f0000000100)='/dev/sda1\x00', 0xc, 0x7) 2m33.50156059s ago: executing program 3 (id=1556): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0xfff5, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25020000000800010007000000080005"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) 2m32.369950379s ago: executing program 5 (id=1533): msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x200006, 0x9, 0x1df000000000010, 0x401, 0x3) io_uring_setup$auto(0x9, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c001656cb12735f8269102caddb0000", @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf250a0000000400028004000180"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x40) readv$auto(r0, &(0x7f0000000a80)={0x0, 0x3}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/gspca_mr97310a/parameters/force_sensor_type\x00', 0x486580, 0x0) io_uring_setup$auto(0xa9, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/block/nbd0/queue/logical_block_size\x00', 0x140200, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x68b82, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r3, 0x8, 0xa0000) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/009/001\x00', 0x22402, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@raw=0x7, 0x1, 0xfffffffb, 0x480008, "3112d58500a8b47148e22af9ffb683dbede3d0bf828bbf100000e5e2f96ee50484b075ad15e48d00", @raw=0xfffffffe}, 0x2, 0x80, 0x4, @inferred, @integer64={0x5, 0x0, 0xd}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090d70925450ece0bb32777702b07552d000000000000000000ebff0000000000000059a200"}) r4 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r4, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x22}, 0x5, 0x0, 0x5, 0xe}, 0x400005}, 0x2, 0x100) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8a241, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4044001) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/dynamic_debug/control\x00', 0x113402, 0x0) pread64$auto(r5, &(0x7f0000000040)='uete1\x00', 0x200000000006, 0x7) 2m31.963062842s ago: executing program 5 (id=1557): openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x242, 0x0) read$auto_sco_debugfs_fops_(0xffffffffffffffff, &(0x7f00000003c0)=""/229, 0xe5) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x1, 0x2020009, 0x1, 0xebd, 0xffffffffffffffff, 0x8000) r0 = pidfd_open$auto(0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x1cb603, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyr1\x00', 0x80200, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) unshare$auto(0x40000080) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r1, 0x8, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x454502, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x802, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) setns(r0, 0x60020000) mknod$auto(0x0, 0x1081, 0x5) open(0x0, 0xa00, 0x100) socket(0xa, 0x6, 0x83) ioprio_set$auto(0x1, 0xee00, 0x8) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) 2m30.716637805s ago: executing program 5 (id=1558): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x1cb603, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event\x00', 0x48c83, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x4018000) unshare$auto(0x40000080) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x18, 0x1, 0x84) fcntl$auto_F_GETFD(r2, 0x1, 0xffffffff) io_uring_setup$auto(0x4, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS1\x00', 0x101e81, 0x0) epoll_create$auto(0x4) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000000), 0x8802, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000080)={0x1, 0x7, 0x9, 0x4, 0x1}) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x5, 0x105, 0xc, 0xb, 0x800, 0xffffffffffffffff, 0x5, "d81ddef9d4e6d312212bab98f4060bd8", 0x0, 0xffffffffffffffff, 0x7fffffff, 0xa991, 0x7, 0x8001}, 0x7) epoll_create$auto(0x8800001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r4, &(0x7f0000000100)={{0x0, 0x1, &(0x7f0000000080)={&(0x7f0000000440)="5bc581fba7b87d332ed3a945ab8cdaab0be63e937d8860184574d627fb5974eb0a52252e52df1814f46da493d37733d8a40e24896ac734e837af2650d39aa0bffdc27af3e73783a6f858c642d8190ed78abb09ae401f4c69dac3", 0xcb}, 0x6, 0x0, 0x7, 0x7}, 0x80010009}, 0x7, 0x4200, 0x0) 2m30.064951306s ago: executing program 5 (id=1559): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x3f) close_range$auto(0x0, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000014c0), r0) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) shmctl$auto_IPC_SET(0x7ff, 0x1, &(0x7f00000016c0)={{0x0, 0xee01, 0xffffffffffffffff, 0x1, 0x5, 0x6, 0xa000}, 0x4, 0x0, 0x2, 0x10000, @raw=0xba5, @raw=0x4617, 0x7d, 0x0, &(0x7f0000001500)="f33bca355940d7533e0c40427cbebaf1786a504812f146daa2b49daa537a562883139bcfa910c58af8ba016904eaf427c17cc57df095a63adcc9270a04c7553b1bb63dc2723a8b04b5929b13b8aa654d00652ab419050bf37ffb1533e4ad7e3a7a11b2dd0c1d266bbefb2468e665aaec7ab67f5ca685314a3266961d932d5d07c7940f35a57bb003020a1ba6742750449168612d92cd79f77f6f81591ab275755e19a990d62a9a4d6bdc62b2", &(0x7f00000015c0)="82efd0549531118b1e458c757176cbf20f01f4646577ca837e9de6bcd49a037eeef1136e526e57835d18bc4a8833c5c3f9dfc5130d5a4423419a7a90c170c57216bda442ca00699d37377287f678bf42f48977db0280ee9f956edf76ba0bd143ccff59c7e0cd94b6b8618862cc3e4a7f9985cf95caf1ea517be9beb044b38f64d26397b04371d43f44d3d85c8ad32d077176219666f157d4a5075b9b62573238fee5a91866e8654fafb1b299973d7f0a1dac6c0b7f20444b5b7650a7816bb98a55cde3520c9e78931b3494b1f790a8053b4d096df64ad621f37fc29f"}) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r0, &(0x7f0000001980)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001740)={0x1fc, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1e7, 0x1, 0x0, 0x1, [@typed={0x8, 0x6e, 0x0, 0x0, @pid=r2}, @nested={0xc, 0xdb, 0x0, 0x1, [@nested={0x4, 0x112}, @nested={0x4, 0x15d}]}, @typed={0x8, 0x11d, 0x0, 0x0, @uid=r3}, @nested={0x2a, 0x2e, 0x0, 0x1, [@nested={0x4, 0xc1}, @typed={0x8, 0x116, 0x0, 0x0, @u32=0xfffffff7}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r0}, @generic="4fb768ec50d2e9c2d2e9b09e4b1eeb0d123d"]}, @generic="c84bfcd8ec2302f05a7d98bf9b9b0c4b1cb6586881761bc4468f022878326806c9221849362ae75e74e05e02f65fab22a984a6703b9d49b771dad4554221dd610636c1ffbb1e51fd18e581427fd7b8f8846cb99958c727741e2479e769710a02af6d9ad09e19d213bcfd76a4b9131a3469d05e72ff4813fa519d792d1a9964ea18e4f221734ebf293da2eebdf2db13fc39fb9516bc5391", @generic="fe2bee52d4e50fb2d8e07f21b5af3d1d14ef961bfb7a9d2cfdc9ceebe6e07d5bcf48e9a9cb", @generic="4131bc68a688ec9832c426d7d78739e42eb29324cf1de78f3711fc7e84efec2136c9a3a69d61b3148a0db27e9d5be517d74332e0b647449ae9ce826e65161fdab144ad80c467bd1540067d0c931ee80ddc65391ab5d06a52fd0840f5b5bec091157211124d465f93fadf8a2bcb4488b9f26ddf673c737dba6dd4746d2b9d32aa780ad5b367cc350ec1912adc255b4ff7492f522975d55b30a2cccab39c7bf26432cca6b20b4ab6b89e09a8da367c196c12dd9a9f826f4bf370fd9b31d25c29f24739758036b38fbf7cefe7", @typed={0x14, 0x8d, 0x0, 0x0, @ipv6=@mcast2}]}]}, 0x1fc}}, 0x40000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r4 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x20200, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r4, &(0x7f0000000040)=""/4080, 0x1036) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyu6\x00', 0x248000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) r7 = ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), r7) ioctl$auto_KVM_CREATE_VM(r5, 0xc048aeca, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 2m29.823126862s ago: executing program 5 (id=1560): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0xf, r0, 0xfffffffffffff57e, 0x7) ptrace$auto(0xc, r0, 0x9, 0xfffffffffffff6de) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000040)="158f4a2b") r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/orangefs/getattr_timeout_msecs\x00', 0x8a82b6a56f18970a, 0x0) sendfile$auto(0xffffffffffffffff, r3, 0x0, 0x7) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000780)="906f319d493614e6834bb14c5d8ba668ea3fe49b929347b1a2f5cd2d8bbea5a6e4a616ae542f1291fe274b9b559d6f3f0108fbb2b68f1c04d38107f490c44e278f81cb231be4de752bb862cc", 0x100000000}, 0x6, 0x0) r4 = io_uring_setup$auto(0x1, 0x0) statx$auto(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x3, 0x7fffffff, &(0x7f0000000140)={0x9, 0xf, 0xb476, 0x0, 0x0, 0x0, 0xffff, 0xb9, 0x3, 0x7, 0x3, 0x80, {0x7, 0x10000}, {0x2, 0x9}, {0x7378, 0x7}, {0x5, 0x1}, 0x8, 0xfffffffc, 0x1, 0x401, 0x400000000006, 0x7, 0x6, 0x2, 0x8001, 0x6, 0x0, 0x9, [0xff, 0xf, 0x7fffffffffffffff, 0x81, 0xd, 0x8001, 0x5, 0x3, 0x9]}) setresuid$auto(0x0, 0x0, 0x0) shmctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000000480)={{0xa, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x9}, 0x6ab, 0x6, 0x3, 0x8000000000000000, @inferred=0xffffffffffffffff, @raw=0xc1f, 0x3000, 0x0, &(0x7f0000000340)="de029906c9fdbd6e52a9b192e1eda36e11562662d39dee67e118a2ae1300895a41042fcbe1436712ed4619078cbcc52e729415a58d3bb3a460315665c395918e49917e3952f155b12c2e9a363f513d78f420ac395aa964d885d788a41099b7c17d9422cffce8a1ebf89ad42efddee1de0489e7e82fda0f", &(0x7f0000000400)}) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.0/usb1/power/wakeup_active_count\x00', 0x0, 0x0) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b58", 0xfdef) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) ioctl$auto_EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000500)={0x6, 0x3, 0x4, 0x0, 0x1, 0x0, [{0xffffffffffff7a7e, 0x6, 0x80000000, '\x00', 0x8}, {0xf, 0x9, 0x5}, {0x7, 0x0, 0xf, '\x00', 0x7}, {0xc, 0xc66f, 0xa, '\x00', 0xa}, {0x2, 0x0, 0x3, '\x00', 0x4f}, {0x1, 0x3, 0x4, '\x00', 0x101}, {0x0, 0x6, 0x10, '\x00', 0x99eb}, {0x3, 0x5, 0x3, '\x00', 0x2}, {0xd14ef1, 0x7, 0x9, '\x00', 0x903}, {0xfffffffffffff01a, 0xba, 0x1}]}) kexec_load$auto(0x6, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) read$auto(r2, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'dvmrp1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001080)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001040)={&(0x7f0000000900)=ANY=[@ANYBLOB="9c0600007e244d903bb66ff159dbb2385896affa47705e89b25efea39e919d30667732560a40a9a032430308e7d60e642a4fe2c4e9d2c5f63370ae6b", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="f1003080186de1828acd46e886979becc20664e668d1faeb12b4f180be488d2951686c352df60cd57b1bb9650619afe1415cc82d6a8cdb119c01ea0546ed54b2f9edef997924c87479349ba962f54a55e99ba7c7e8394588f7b39b77dabdba21a43c67d5237f423929241198d485bef67d7926126719cd800ebad57285f5ad0bd85e2680a8337c1c8a74a9d00db39fc9625a21c5019a3e9f57d23b78669e8b7a13a608d9208b15bd9a31c2caab6b2e40f0874fb5d6f1b99fe7cd9c4edcc021b5ae50428b4c2c04b42216eadc30b27e4585f3d506bbf76da57b5ed5db932c27f434482eb768c43e63c94b8ac9f92d801a6300000008002500", @ANYRES32=r6, @ANYBLOB="0c004500fbffffffffffffff3000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f6272696467650008000300ff0f000008000300090000002000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f6d616376746170000000a40002807e0063806af29e63b9b95843cfe01f0ea27c381c89ae4649377b46d88a2aec9cc062020809b25126ba9d366a022fee509ae5d97a9e7367e7ef48ab3991bfcb0419a6ff65673c7e562675510381334b85c4f9d604e8aa07d9b2845cfec1a1029115938ea960be06fac6d340decbf704006d800c004d00040000000000000000001400af00000000000000000000000000000000000400c500080028000a0101001400018008000100", @ANYRES32=r7, @ANYBLOB="08000300f8ffffff"], 0x69c}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000000) write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) 2m28.909027869s ago: executing program 5 (id=1561): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x801, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000425bd7004fedbdfbb4faebe77"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) prctl$auto_PR_SET_MM_START_STACK(0x9, 0x5, 0x0, 0xd, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf2502000000080001000700000008000300850000e4ee1a3c6264d3db7cf6795158a1ac8560a66f31bdb824887895f5d4fb7d2423782b4e3284b1adc162dc733caebb1be8543b4d54cc4457a6fa7d4c700d37bbb60508007cb42be7d52cc4d7c75d3f0fe46ca9fc01"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getpgid$auto(0x0) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000000040)=""/23, 0x17) 2m23.261120965s ago: executing program 34 (id=1550): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0xfff4, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25020000000800010007000000080005"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) 2m18.703466017s ago: executing program 35 (id=1555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0xff92, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25020000000800010007000000080005"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) 2m17.716220642s ago: executing program 36 (id=1556): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0xfff5, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25020000000800010007000000080005"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) 2m13.222179967s ago: executing program 37 (id=1561): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x801, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000425bd7004fedbdfbb4faebe77"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) prctl$auto_PR_SET_MM_START_STACK(0x9, 0x5, 0x0, 0xd, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf2502000000080001000700000008000300850000e4ee1a3c6264d3db7cf6795158a1ac8560a66f31bdb824887895f5d4fb7d2423782b4e3284b1adc162dc733caebb1be8543b4d54cc4457a6fa7d4c700d37bbb60508007cb42be7d52cc4d7c75d3f0fe46ca9fc01"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getpgid$auto(0x0) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000000040)=""/23, 0x17) 2m5.638926161s ago: executing program 6 (id=1584): mmap$auto(0xfffffffffffffffd, 0xffd, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x7ffe) socket(0x2, 0x1, 0x106) setitimer$auto(0x1, &(0x7f0000000000)={{0x2, 0x4}, {0x5, 0x6}}, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) r0 = socket(0x18, 0x5, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x20100, 0x0) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) ioctl$auto_SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000100)={0x8000000000000000, 0x80000001}) fsconfig$auto_SHMEM_HUGE_NEVER(r0, 0xc4, &(0x7f00000000c0)='\'[*:^&\'$+.\x00', &(0x7f0000000240)="f081c9ac953be397e4e921f6bada31a77045011e129ecdb1714e9825a36de92ce0e39d902eb8a9b476f40460769b6ef1c0997d056e0d4554c287605b0a12d3ecad5961102c8684a96467aa2e2fad2084d128748b", 0x0) ioctl$auto_SNAPSHOT_FREE(r1, 0x3305, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/projid_map\x00', 0x101002, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x7fffffffffffffff, 0x4, 0x1afbde29, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) fstatfs$auto(0x3, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x15be02, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = signalfd4$auto(r0, 0x0, 0xa, 0x0) ppoll$auto(&(0x7f0000000040)={r3, 0x7ff}, 0x7, 0x0, 0x0, 0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x810005, 0xf4, 0x800000000a011, r2, 0x8000) mmap$auto(0x8, 0xe, 0x2000000000000006, 0xeb1, r2, 0x8000) setresuid$auto(0x0, 0x8, 0x8000) mlockall$auto(0x7) waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x6, 0x1, 0x1, @_sigfault={&(0x7f00000002c0)="562a3767bb94932ee9a71563bf9ebffd713e715c6e3edfd335d58a2c03a6381a1b5c6a636f0d987ae6bff47d901adf4b5ed3970f6fc556f19784a121bb969a8905a45f8c194ae2a7b0a9cefb349f75fa4ef9c01f0e2d62728f20d4e94f305b35b30717dae1db180b2b753db2b3bff75167c9de8dcf19e71dcee0e0bbc021c1ae699edb02ec77ae6d0584a9b966965f1b", @_addr_lsb=0x7}}}, 0x2, &(0x7f0000000180)={{0x6, 0x7}, {0x1, 0xdfc9}, 0x8, 0xdeb, 0xb971, 0xcc, 0xd4e, 0xfa, 0x1, 0x1bd, 0x6, 0x8000000000000001, 0x5, 0xf800000000000000, 0x10001, 0x2}) 2m4.581852464s ago: executing program 8 (id=1569): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0xfffd, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25020000000800010007000000080005"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) 2m4.270533515s ago: executing program 6 (id=1586): symlink$auto(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0\x00') creat$auto(&(0x7f0000000680)='./file0\x00', 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) bind$auto(0x4, 0xfffffffffffffffe, 0x0) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci4/force_wakeup\x00', 0x600000, 0x0) fadvise64$auto_POSIX_FADV_SEQUENTIAL(r1, 0x5, 0x50, 0x2) r2 = socket(0x2c, 0x3, 0x0) mmap$auto(0x1, 0x8, 0x1000000004, 0x13, r2, 0x180000000) 2m3.840528299s ago: executing program 6 (id=1587): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x88b02, 0x3f) close_range$auto(0x0, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f00000014c0), r0) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) shmctl$auto_IPC_SET(0x7ff, 0x1, &(0x7f00000016c0)={{0x0, 0xee01, 0xffffffffffffffff, 0x1, 0x5, 0x6, 0xa000}, 0x4, 0x0, 0x2, 0x10000, @raw=0xba5, @raw=0x4617, 0x7d, 0x0, &(0x7f0000001500)="f33bca355940d7533e0c40427cbebaf1786a504812f146daa2b49daa537a562883139bcfa910c58af8ba016904eaf427c17cc57df095a63adcc9270a04c7553b1bb63dc2723a8b04b5929b13b8aa654d00652ab419050bf37ffb1533e4ad7e3a7a11b2dd0c1d266bbefb2468e665aaec7ab67f5ca685314a3266961d932d5d07c7940f35a57bb003020a1ba6742750449168612d92cd79f77f6f81591ab275755e19a990d62a9a4d6bdc62b2", &(0x7f00000015c0)="82efd0549531118b1e458c757176cbf20f01f4646577ca837e9de6bcd49a037eeef1136e526e57835d18bc4a8833c5c3f9dfc5130d5a4423419a7a90c170c57216bda442ca00699d37377287f678bf42f48977db0280ee9f956edf76ba0bd143ccff59c7e0cd94b6b8618862cc3e4a7f9985cf95caf1ea517be9beb044b38f64d26397b04371d43f44d3d85c8ad32d077176219666f157d4a5075b9b62573238fee5a91866e8654fafb1b299973d7f0a1dac6c0b7f20444b5b7650a7816bb98a55cde3520c9e78931b3494b1f790a8053b4d096df64ad621f37fc29f"}) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r0, &(0x7f0000001980)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001740)={0x1fc, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1e7, 0x1, 0x0, 0x1, [@typed={0x8, 0x6e, 0x0, 0x0, @pid=r2}, @nested={0xc, 0xdb, 0x0, 0x1, [@nested={0x4, 0x112}, @nested={0x4, 0x15d}]}, @typed={0x8, 0x11d, 0x0, 0x0, @uid=r3}, @nested={0x2a, 0x2e, 0x0, 0x1, [@nested={0x4, 0xc1}, @typed={0x8, 0x116, 0x0, 0x0, @u32=0xfffffff7}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r0}, @generic="4fb768ec50d2e9c2d2e9b09e4b1eeb0d123d"]}, @generic="c84bfcd8ec2302f05a7d98bf9b9b0c4b1cb6586881761bc4468f022878326806c9221849362ae75e74e05e02f65fab22a984a6703b9d49b771dad4554221dd610636c1ffbb1e51fd18e581427fd7b8f8846cb99958c727741e2479e769710a02af6d9ad09e19d213bcfd76a4b9131a3469d05e72ff4813fa519d792d1a9964ea18e4f221734ebf293da2eebdf2db13fc39fb9516bc5391", @generic="fe2bee52d4e50fb2d8e07f21b5af3d1d14ef961bfb7a9d2cfdc9ceebe6e07d5bcf48e9a9cb", @generic="4131bc68a688ec9832c426d7d78739e42eb29324cf1de78f3711fc7e84efec2136c9a3a69d61b3148a0db27e9d5be517d74332e0b647449ae9ce826e65161fdab144ad80c467bd1540067d0c931ee80ddc65391ab5d06a52fd0840f5b5bec091157211124d465f93fadf8a2bcb4488b9f26ddf673c737dba6dd4746d2b9d32aa780ad5b367cc350ec1912adc255b4ff7492f522975d55b30a2cccab39c7bf26432cca6b20b4ab6b89e09a8da367c196c12dd9a9f826f4bf370fd9b31d25c29f24739758036b38fbf7cefe7", @typed={0x14, 0x8d, 0x0, 0x0, @ipv6=@mcast2}]}]}, 0x1fc}}, 0x40000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r4 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x20200, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r4, &(0x7f0000000040)=""/4080, 0x1036) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyu6\x00', 0x248000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r6) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'pim6reg0\x00'}) ioctl$auto_KVM_CREATE_VM(r5, 0xc048aeca, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 2m3.500669292s ago: executing program 6 (id=1588): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) (async) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x404b03, 0x0) writev$auto(r1, 0x0, 0x6) (async) writev$auto(r1, 0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, 0x0, 0x55) ioctl$auto(0x3, 0x541b, 0x10000000000402) waitid$auto_P_ALL(0x0, 0x3, &(0x7f0000000080)={@siginfo_0_0={0x5, 0xc, 0x0, @_kill={0x0, 0xee00}}}, 0x7, &(0x7f0000000380)={{0x8000000000000001, 0x7}, {0x2, 0x5}, 0x7, 0x4, 0xffffffffffffffff, 0x837, 0x9, 0xfffffffffffffffd, 0x0, 0x293, 0x1, 0x3b8, 0x40, 0x6, 0xcf8, 0x66}) (async) waitid$auto_P_ALL(0x0, 0x3, &(0x7f0000000080)={@siginfo_0_0={0x5, 0xc, 0x0, @_kill={0x0, 0xee00}}}, 0x7, &(0x7f0000000380)={{0x8000000000000001, 0x7}, {0x2, 0x5}, 0x7, 0x4, 0xffffffffffffffff, 0x837, 0x9, 0xfffffffffffffffd, 0x0, 0x293, 0x1, 0x3b8, 0x40, 0x6, 0xcf8, 0x66}) r2 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) (async) ioctl$auto_SNAPSHOT_ALLOC_SWAP_PAGE(r2, 0x80083314, 0x0) mmap$auto(0x8, 0x0, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7fff) (async) mmap$auto(0x8, 0x0, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7fff) unshare$auto(0x40000080) close_range$auto(0x2, 0xa, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media11\x00', 0x40, 0x0) (async) r3 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media11\x00', 0x40, 0x0) ioctl$auto_media_devnode_fops_mc_devnode(r3, 0x80047c05, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) (async) write$auto(r4, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x6, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x5, 0x8000000000000006]}, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x6, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x5, 0x8000000000000006]}, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/msr/parameters/allow_writes\x00', 0xa0302, 0x0) sendfile$auto(r5, r5, 0x0, 0x7ffff000) 2m2.100857763s ago: executing program 6 (id=1591): mmap$auto(0x0, 0x4020009, 0xdb, 0xebe, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) r1 = socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) r3 = prctl$auto(0xbe, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(r3, 0x0, 0x11000, 0x20111, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000100)=0x8000000f) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r1, &(0x7f0000002b00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002ac0)={&(0x7f00000016c0)=ANY=[@ANYBLOB="f4130000", @ANYRES16=0x0, @ANYBLOB="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"/5102], 0x13f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40800) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sysfs$auto(0x2, 0x3c, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x6, 0x24, 0xf, 0x63, 0x400, 0x0, 0xffffffffffffffff, 0x80f0c8, 0x20, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_prog_fd, 0x6, 0xffff, 0x8, 0x0, 0xfffffffd, 0xffffffffffffffff}, 0x47) sendmsg$auto_NETDEV_CMD_DEV_GET(r3, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}, @NETDEV_A_DEV_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0xc8d5}, 0x4040850) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r6 = socket(0x2, 0x1, 0x106) getsockopt$auto_SO_BINDTOIFINDEX(r6, 0x1, 0x3e, 0x0, 0x0) io_uring_register$auto_IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, &(0x7f00000006c0)="6a1ddbf86c92a89d659917fd43e37c31c30fa1e1bac9e9bfaf7014287b3e3a276aeffd15f8c9117550363e794734484edcdc40fcd7f7241c67e08d52d3669f99c034ab185ba046ff3449f9fa271309478b4e62803786e5ee066ae54fbcfda797c442d371d3e6e4c6c5fafa7e0f29daea4043eece6d466a1ed2415ce0ce6e50eb76fac14a2f31e86272022c53a277827535f6bcb291af410e62fcaaa028318efd38b29c75d1f3f563b6f21d9ee26833dfd7ec89528342b812a9345c925631f52e6c457303fc58236c3e70a0db94a94c54f73efb1c0dcdcfab0ffaa922ab6ba0d7792b", 0xd4) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000011c0)={{@raw=0x2, 0x5, 0xf3f, 0x400, "a788436779d5ce37b3f96825e6b362f1510cdb4a08f92b8526e9a12344ff75956f95e267b9f81f077303fca6", @raw=0x1}, 0x1, @integer=@value=[0x7, 0xa, 0x6145, 0x5, 0x8, 0xffffffffffff4caa, 0x40, 0x2, 0xfffffffffffffe00, 0x5, 0x6, 0x2, 0x6, 0x5517, 0x8, 0xa, 0x8000, 0x7b, 0x1, 0x5, 0xd, 0x5, 0x5, 0x7, 0x7, 0x4, 0x3, 0xb56, 0x9, 0x3, 0x929, 0x800, 0x222, 0x100, 0x73, 0x6, 0x2, 0x3, 0x6, 0xa, 0x2, 0x7, 0x53423b0a, 0x7f, 0x1ff, 0x2, 0x3, 0xcfc, 0xffffffff, 0x7, 0x5, 0xffffffffffffffcd, 0x10000, 0x539, 0xc3c, 0x1, 0x3, 0x2, 0x7ff, 0x400, 0x3, 0x5, 0x3, 0x1, 0x800, 0x6, 0xc000000000000000, 0x1, 0x6, 0x6, 0x6, 0x200, 0x2, 0xfffffffffffffffc, 0x8, 0x4, 0xe, 0xfb3, 0x0, 0xffffffffffff63c2, 0x9, 0x0, 0x100000000, 0x1ff, 0x4, 0x5, 0x8, 0xd7a4, 0x8, 0x5d, 0x40, 0x8c, 0x9, 0x0, 0x0, 0x4, 0xc, 0x9, 0x8, 0xfff, 0x7ff, 0xffff, 0x101, 0x6, 0x1, 0x6, 0x9, 0x608, 0x4411, 0xfffffffffffffff7, 0x4000000003, 0x3, 0x8, 0x3, 0x1f, 0xb6, 0xffff, 0x62, 0x1, 0x4, 0x1, 0x8, 0x5, 0x42, 0x6, 0x2, 0xf], "0bedf7e7372049a0b0db9342c58e4bc2ecbbf30f48915cac3fd5babacc53205e3fb838fcee27a6ab6c5cf0889ff7a30c822abe916b7564f7da51d41a17ec60dcc4db9bcb51e8571d71bf29c179b7d9cd317e584bc19603e180b4c4cd4df8a242c1faa4c94740e870b4921c6b0621b94c88d437716a89629bdc73b4180cf4bf35"}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0xf, &(0x7f0000000180)={0xe, 0x2, 0x3, 0x7, 0x4, 0x2, r4, [0x1, 0x6, 0x8c], {0x9, 0x2, 0x4, 0xbfe, 0x6, 0x6, 0xfffffffe, 0x2, 0xfffffffffffffff7}, {0x85, 0x2, 0xfb8, 0x6, 0xfffffff7, 0x0, 0xff, 0x680000, 0x4}}) msync$auto(0x200000, 0x2000000005, 0x6) 2m1.174437358s ago: executing program 6 (id=1592): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x801, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000425bd7004fedbdfbb4faebe77"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) prctl$auto_PR_SET_MM_START_STACK(0x9, 0x5, 0x0, 0xd, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf250200000008000100070000000800030085000000ee1a3c6264d3db7cf6795158a1ac8560a66f31bdb824887895f5d4fb7d2423782b4e3284b1adc162dc733caebb1be8543b4d54cc4457a6fa7d4c700d37bbb60508387cb42be7d52cc4d7c75d3f0fe46ca9fc01"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getpgid$auto(0x0) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000000040)=""/23, 0x17) 2m0.823647043s ago: executing program 9 (id=1576): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x800000000000, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) mmap$auto(0x3, 0xc5cb, 0xdc, 0xeb1, 0x401, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) r1 = socket(0x21, 0xa, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) getsockopt$auto_SO_RCVTIMEO_OLD(r0, 0xffffffff, 0x14, 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000440)="525404711fb2802526b847deeefcf78f51214cd111376edf9a031fa87671f89ed4452ff7e5492e11bdb326b05d8ee9f857751922be351e0905ca2679a03ae9f7e4376be19ac332cc3c411490356cba5076bd6d5e23cfa692523b33272cb38a38b9ec589b32252c0d302a7de48b4b270350bd5d29f864054d2ced33ea0cadd054e0ff148c980acb08d19dd060603123550981ea37fa0b7b078286166c94123f2354bbdf70c7100ff4d785cae6aa04cb466c5986cb196c600916c96b05f6bcd3aa2b7246e0bf437b6a8df544aae2b3427969b5548570c0beab5244b63367b73ce7c9e0d6aaf7eda37c9dc6572373bad482b9", 0x12, 0x0, 0x9, 0x0, 0x7, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(r1, 0x0, 0xbba, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c1) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/tracing_cpumask\x00', 0xf6c5ffb652a2214a, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r2 = socket(0x1d, 0x2, 0x7) r3 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4}, 0x6a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'vcan0\x00'}) 1m59.225899589s ago: executing program 9 (id=1594): mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRES16, @ANYRES64=r0], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r0) read$auto(r0, &(0x7f0000000040)='nl80211\x00', 0xbe62) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) io_submit$auto(0x2, 0xfffffffffffff096, &(0x7f0000000040)=0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/smbd_receive_credit_max\x00', 0x641, 0x0) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x477, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x22, 0x0, 0x1) timerfd_settime$auto(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0xe, 0x3ff}, {0x10, 0xd}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$auto_SG_EMULATED_HOST2(0xffffffffffffffff, 0x2203, 0x0) r1 = socket(0xa, 0x5, 0x84) sendto$auto(r1, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000004800fe8000"}, 0x1f) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x2003f2, 0x15) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) 1m56.437597914s ago: executing program 9 (id=1598): read$auto(0xffffffffffffffff, 0x0, 0x4) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) mmap$auto(0x0, 0x10001, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, r0, 0xc369) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mount$auto(0x0, &(0x7f00000001c0)='&&\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x400007, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) mprotect$auto(0x8000000000000000, 0x8000000000000001, 0xc) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/rpc/auth.rpcsec.context/channel\x00', 0xc8841, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0x5, "0000e100"}, 0x58) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop13\x00', 0x8202, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c08, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000040)={0xd1d, 0x1, 0xff}, 0x0, 0x6) close_range$auto(0x2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) 1m55.728311335s ago: executing program 7 (id=1600): mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) r0 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r0, 0x4400ae8f, &(0x7f0000000040)={0xe1, 0x0, [{0xa4a, 0x1, 0x100}]}) r1 = socket(0x10, 0x3, 0x6) openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x200, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0_to_batadv\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x20044001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x8}, 0x9}, 0x106, 0x300) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) migrate_pages$auto(0x0, 0x99, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) rt_sigsuspend$auto(0x0, 0x8) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/vivid.0/media8/model\x00', 0xca080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000001100)=""/4105, 0x1009) setsockopt$auto(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES64=r3], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01020000"], 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) 1m54.710083902s ago: executing program 9 (id=1601): timer_settime$auto(0xffffffff, 0x9, &(0x7f0000000140)={{0x7, 0x4}, {0x10}}, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x6e642, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/pci/rescan\x00', 0xb81, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000200)='5', 0x1) write$auto(r0, &(0x7f0000000400)='odev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r2 = prctl$auto(0x3e, 0x3, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) mmap$auto(0x0, 0x202000d, 0x6, 0x16, 0xffffffffffffffff, 0x8000) mmap$auto(0x1, 0x6, 0xdb, 0x18, r2, 0x8000000000000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x430740, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b73, r3, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xb, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@can, 0x6) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) fcntl$auto(r4, 0x80000001, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$auto(0x0, 0xfffffffffffffffb, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xfffffffffffffffd, 0x2000b, 0xa169, 0x16, r4, 0x3) mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u50xee01, 0xffffffffffffffff, 0x1, 0x5, 0x6, 0xa000}, 0x4, 0x0, 0x2, 0x10000, @raw=0xba5, @raw=0x4617, 0x7d, 0x0, &(0x7f0000001500)="f33bca355940d7533e0c40427cbebaf1786a504812f146daa2b49daa537a562883139bcfa910c58af8ba016904eaf427c17cc57df095a63adcc9270a04c7553b1bb63dc2723a8b04b5929b13b8aa654d00652ab419050bf37ffb1533e4ad7e3a7a11b2dd0c1d266bbefb2468e665aaec7ab67f5ca685314a3266961d932d5d07c7940f35a57bb003020a1ba6742750449168612d92cd79f77f6f81591ab275755e19a990d62a9a4d6bdc62b2", &(0x7f00000015c0)="82efd0549531118b1e458c757176cbf20f01f4646577ca837e9de6bcd49a037eeef1136e526e57835d18bc4a8833c5c3f9dfc5130d5a4423419a7a90c170c57216bda442ca00699d37377287f678bf42f48977db0280ee9f956edf76ba0bd143ccff59c7e0cd94b6b8618862cc3e4a7f9985cf95caf1ea517be9beb044b38f64d26397b04371d43f44d3d85c8ad32d077176219666f157d4a5075b9b62573238fee5a91866e8654fafb1b299973d7f0a1dac6c0b7f20444b5b7650a7816bb98a55cde3520c9e78931b3494b1f790a8053b4d096df64ad621f37fc29f"}) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r0, &(0x7f0000001980)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001740)={0x1fc, r1, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1e7, 0x1, 0x0, 0x1, [@typed={0x8, 0x6e, 0x0, 0x0, @pid=r2}, @nested={0xc, 0xdb, 0x0, 0x1, [@nested={0x4, 0x112}, @nested={0x4, 0x15d}]}, @typed={0x8, 0x11d, 0x0, 0x0, @uid=r3}, @nested={0x2a, 0x2e, 0x0, 0x1, [@nested={0x4, 0xc1}, @typed={0x8, 0x116, 0x0, 0x0, @u32=0xfffffff7}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r0}, @generic="4fb768ec50d2e9c2d2e9b09e4b1eeb0d123d"]}, @generic="c84bfcd8ec2302f05a7d98bf9b9b0c4b1cb6586881761bc4468f022878326806c9221849362ae75e74e05e02f65fab22a984a6703b9d49b771dad4554221dd610636c1ffbb1e51fd18e581427fd7b8f8846cb99958c727741e2479e769710a02af6d9ad09e19d213bcfd76a4b9131a3469d05e72ff4813fa519d792d1a9964ea18e4f221734ebf293da2eebdf2db13fc39fb9516bc5391", @generic="fe2bee52d4e50fb2d8e07f21b5af3d1d14ef961bfb7a9d2cfdc9ceebe6e07d5bcf48e9a9cb", @generic="4131bc68a688ec9832c426d7d78739e42eb29324cf1de78f3711fc7e84efec2136c9a3a69d61b3148a0db27e9d5be517d74332e0b647449ae9ce826e65161fdab144ad80c467bd1540067d0c931ee80ddc65391ab5d06a52fd0840f5b5bec091157211124d465f93fadf8a2bcb4488b9f26ddf673c737dba6dd4746d2b9d32aa780ad5b367cc350ec1912adc255b4ff7492f522975d55b30a2cccab39c7bf26432cca6b20b4ab6b89e09a8da367c196c12dd9a9f826f4bf370fd9b31d25c29f24739758036b38fbf7cefe7", @typed={0x14, 0x8d, 0x0, 0x0, @ipv6=@mcast2}]}]}, 0x1fc}}, 0x40000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r4 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x20200, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r4, &(0x7f0000000040)=""/4080, 0x1036) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyu6\x00', 0x248000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r6) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000010c0)={'pim6reg0\x00'}) ioctl$auto_KVM_CREATE_VM(r5, 0xc048aeca, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 1m52.659151756s ago: executing program 7 (id=1605): fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0x0, &(0x7f0000000140)='\\!:\x00', 0x0, 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mremap$auto(0x0, 0xbfffffffffffffff, 0x7ffffffffffffffd, 0x0, 0x7fffffffb000) clock_nanosleep$auto(0x8, 0x0, &(0x7f00000000c0)={0x3, 0x2}, 0x0) adjtimex$auto(&(0x7f0000000480)={0x101, 0x0, 0x1, 0x1, 0x800000000007, 0x7f, 0x860, 0x0, 0x3, 0x45079941, 0xb, {0x47a8, 0x8}, 0x4, 0x3, 0x9, 0xe, 0x0, 0x8, 0x46f7, 0xffffffffffffffff, 0xb4, 0x5, 0xf9}) openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, 0x0, 0x169a02, 0x0) r0 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/loginuid\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000600)='1\x00\\\xa0\x04\x06\x00\x00\x00*\x8d\x14\xfa 3\x00\xad1\xcc\xeb&{q\xe0$\xcd\x81Zm\xeb\xe39LC{\xf8\xa09\xe9\x05\xfc\xddUw4e\xc6\t}k\x14\xcah\xba\x16\xdc\x00\x88\x11\x000\xb3z\xe4\xb9\x97\x90z\xb41&YH\xd6\xa2\x06\xbc \b\xd7\xee\x8a:\xd9\x88\x8f\x06)l\xe4\x83\xbc\xd1wOa\xb6\x93\xe7\xb7\xbb\xdc\x98\xba\\\x15\x0e\xdc1D\x8b@\x9btfi\xaf\xdf\xee\v\x8e\xa2P\x93\x19\xea\x04\x00\x00\x00\x00\x00\x00\x005=\xc0\x9d-\xaf\xfd\xc7\x87\x00\x00\x00\xe6f\x00\xa4q\xec\x82\x95\x01\xfc7\x86\xd0\xd2\x93\xa7?\xc5\xf3\xaf\xe5\x17\x96\xc6\xbd=\x9a=\xe8\xf22\xab\x83\x9f\xc2\xc2\x8f\x1fQ|\x91&\x15\x0f\x18\xbc\xd3\xd6\xd7P\bTb\xfaL\xfcio\xa3\xe1d#-R\x91}\xe4\x88\xf6\xcc\xd5e\xb1Va\xa4Z\'w\xee\x94`>\x99\x00\xef\xe5\x9cs\xaa\x8e<\x96\xafgM\xadY\xae\xf5\xe4\xb3\x9d\x18\x0f\xcc\x80\tGb\xf5\x8c\xf4\xbc\xaf\x7f\x87\'\x9f\x0ff\x03m\xaf+D\xee\xcd\xd9\xfe\xe2)\x830}\xcc\xadC\xdd\xea\xb1\x8d\x06xj^U\xc0<\xfe\xc3U\xf8\x1ff\xe1\xd8\x14\t\xa8l]\xeb\xb6\xef\x04\x8f\xff\xfc\x97\x91\xdbN\x81\xfd\xf2\x9e\x18\x85G\xc7\xef\x86;\xd5\xd9\xd8\x18wq.%\xa9l\xc8\xdaC\x93\xc6\xc6\xd5p8\xa5\xb1\xd78\xcf+n\xf7T6\t0\xdb`\x88\x02\x92t\xabh\x91\xea\xcc\xb8\x0f~\x1f\xf3\\\xcd3\x99\xc57y\xa4\nM\xee \xc1\x81\x80\xf8I9\'\x97\xe9Y\xec\xf4\x05\xac\xe2Q\x15\xec\xc3z)(\xb9 \b\x00\x00\x00|\x852\xc15\x93\x83\xb2\xf4\x87/\xba>\xc2\x9d\xc5\xf9\x19-V\xb8\xc9\x88z\b\xb7\xe3\xad\xdc\xfb\x1eyg\x80\x99\xd9\x88\x1be\xec6\x7f\x15\xf9\xcf2\x9b\xb0\xbf\x00\xb4\x98\x89\xf9\xa6\xf1>b\xd5', 0x4db) mremap$auto(0x7fffffff, 0x54, 0x81, 0x6, 0x257ed5b5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000840)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x40, 0x0) readv$auto(r1, &(0x7f00000008c0)={&(0x7f0000000880), 0x8}, 0x3ff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x0, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) fcntl$auto_F_GETFL(r0, 0x3, 0xdd) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, 0x0, 0x28400, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) setns(0xffffffffffffffff, 0x20000) socket(0x18, 0x2, 0x0) 1m52.414574499s ago: executing program 7 (id=1606): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x801, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000425bd7004fedbdfbb4faebe77"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) prctl$auto_PR_SET_MM_START_STACK(0x9, 0x5, 0x0, 0xd, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf250200000008000100070000000800030085000000ee1a3c6264d3db7cf6795158a1ac8560a66f31bdb824887895f5d4fb7d2423782b4e3284b1adc162dc733caebb1be8543b4d54cc4457a6fa7d4c700d37bbb605083e7cb42be7d52cc4d7c75d3f0fe46ca9fc01"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getpgid$auto(0x0) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000000040)=""/23, 0x17) 1m49.214886977s ago: executing program 38 (id=1569): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0xfffd, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fbdbdf25020000000800010007000000080005"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) 1m45.661128478s ago: executing program 39 (id=1592): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x801, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000425bd7004fedbdfbb4faebe77"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) prctl$auto_PR_SET_MM_START_STACK(0x9, 0x5, 0x0, 0xd, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf250200000008000100070000000800030085000000ee1a3c6264d3db7cf6795158a1ac8560a66f31bdb824887895f5d4fb7d2423782b4e3284b1adc162dc733caebb1be8543b4d54cc4457a6fa7d4c700d37bbb60508387cb42be7d52cc4d7c75d3f0fe46ca9fc01"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getpgid$auto(0x0) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000000040)=""/23, 0x17) 1m39.121286772s ago: executing program 40 (id=1601): timer_settime$auto(0xffffffff, 0x9, &(0x7f0000000140)={{0x7, 0x4}, {0x10}}, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x6e642, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/pci/rescan\x00', 0xb81, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000200)='5', 0x1) write$auto(r0, &(0x7f0000000400)='odev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r2 = prctl$auto(0x3e, 0x3, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) mmap$auto(0x0, 0x202000d, 0x6, 0x16, 0xffffffffffffffff, 0x8000) mmap$auto(0x1, 0x6, 0xdb, 0x18, r2, 0x8000000000000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x430740, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b73, r3, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0xb, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@can, 0x6) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) fcntl$auto(r4, 0x80000001, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$auto(0x0, 0xfffffffffffffffb, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xfffffffffffffffd, 0x2000b, 0xa169, 0x16, r4, 0x3) mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u5\x99\x00\xef\xe5\x9cs\xaa\x8e<\x96\xafgM\xadY\xae\xf5\xe4\xb3\x9d\x18\x0f\xcc\x80\tGb\xf5\x8c\xf4\xbc\xaf\x7f\x87\'\x9f\x0ff\x03m\xaf+D\xee\xcd\xd9\xfe\xe2)\x830}\xcc\xadC\xdd\xea\xb1\x8d\x06xj^U\xc0<\xfe\xc3U\xf8\x1ff\xe1\xd8\x14\t\xa8l]\xeb\xb6\xef\x04\x8f\xff\xfc\x97\x91\xdbN\x81\xfd\xf2\x9e\x18\x85G\xc7\xef\x86;\xd5\xd9\xd8\x18wq.%\xa9l\xc8\xdaC\x93\xc6\xc6\xd5p8\xa5\xb1\xd78\xcf+n\xf7T6\t0\xdb`\x88\x02\x92t\xabh\x91\xea\xcc\xb8\x0f~\x1f\xf3\\\xcd3\x99\xc57y\xa4\nM\xee \xc1\x81\x80\xf8I9\'\x97\xe9Y\xec\xf4\x05\xac\xe2Q\x15\xec\xc3z)(\xb9 \b\x00\x00\x00|\x852\xc15\x93\x83\xb2\xf4\x87/\xba>\xc2\x9d\xc5\xf9\x19-V\xb8\xc9\x88z\b\xb7\xe3\xad\xdc\xfb\x1eyg\x80\x99\xd9\x88\x1be\xec6\x7f\x15\xf9\xcf2\x9b\xb0\xbf\x00\xb4\x98\x89\xf9\xa6\xf1>b\xd5', 0x4db) mremap$auto(0x7fffffff, 0x54, 0x81, 0x6, 0x257ed5b5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000840)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x40, 0x0) readv$auto(r1, &(0x7f00000008c0)={&(0x7f0000000880), 0x8}, 0x3ff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x0, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) socket(0x18, 0x2, 0x0) 54.768357059s ago: executing program 2 (id=1684): mmap$auto(0x0, 0x8, 0x7, 0x4000000100000eb1, 0x40000000000a1, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) adjtimex$auto(&(0x7f0000001580)={0x100, 0x0, 0x2, 0x5, 0xffffffff, 0x8000000000000000, 0x6, 0x0, 0x6, 0x401, 0xb1fa, {0x4, 0x8000000000000001}, 0x7fffffffffffffff, 0x100, 0x5, 0x2, 0x0, 0x2, 0x8, 0x2, 0x7ff, 0xffffffffffff2299, 0xfffffffe}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x2, 0xfffffffffffeffff, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pkey_free$auto(0xa4f4) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x40080, 0x0) read$auto(r1, 0x0, 0x20) ioprio_set$auto(0x3, 0x0, 0x4b34) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x48000, 0x0, 0x6) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) mmap$auto(0x0, 0x4020009, 0x7ff, 0x1000000000ebe, 0x401, 0x8000) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x83, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x0, 0x0) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x4e20, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/arp\x00', 0x101000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000100)=""/92, 0x5c) write$auto(0x3, 0x0, 0x1) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram5\x00', 0x14fa02, 0x0) sendfile$auto(0x3, r4, 0x0, 0x400000000006) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80161, 0x0) 53.16031133s ago: executing program 4 (id=1686): unshare$auto(0x40000080) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000040), r0) sendmsg$auto_KSMBD_EVENT_RPC_REQUEST(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0d5}, 0x4008000) shutdown$auto(r0, 0x8001) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8a241, 0x0) unshare$auto(0x0) bpf$auto(0x5, 0x0, 0x39) mmap$auto(0x8247, 0x4020009, 0xdf, 0x19, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/virtual/block/nbd15/io-timeout-fail\x00', 0x62081, 0x0) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x20000a, 0x4) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='T'], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x2, 0x400007, 0xdf, 0x9b72, r2, 0x0) r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000580)={0x80000006, 0x0, 0xd12b, 0xfffffffd, 0x200a}) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) close_range$auto(0x2, 0x8, 0x0) socket(0x21, 0x800, 0xa) 53.152376272s ago: executing program 2 (id=1688): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0xa, 0x2, 0x3a) r1 = socket(0x2d, 0x2, 0x0) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={0x0, 0xa0}}, 0x20040804) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r2, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e80)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {0x2c, 0x0, 0x300}}, 0x14}, 0x1, 0x1000060}, 0x400c080) write$auto(r2, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) socket(0xa, 0x3, 0x73) socket(0x29, 0x5, 0x0) r3 = openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000a00), 0x80000, 0x0) read$auto(r3, &(0x7f0000000dc0)='!/\x00', 0xf) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D2\x00', 0x200040, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) getsockopt$auto(0x6, 0x10f, 0x4, 0xfffffffffffffffe, 0x0) setsockopt$auto(r0, 0x29, 0x40, 0x0, 0x110) 52.472907579s ago: executing program 2 (id=1690): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x6, 0x4000000000df, 0xeb1, 0x401, 0x8002) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, 0x0, 0x8, 0x311) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) madvise$auto(0xb, 0x7, 0xff12) madvise$auto(0x1000, 0x400050, 0x9) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r1 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(r1, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/timer_source\x00', 0x8002, 0x0) madvise$auto(0x9, 0x6, 0xd) rmdir$auto(&(0x7f00000000c0)='./file0\x00') write$auto_tomoyo_operations_securityfs_if(r2, &(0x7f0000000140)="1e327ef324ed234851c186bc8069ad2b0e7c25f83542dbc0a53dccb1a63487bc60e841d8b173b38587ef7060f50d26dd6a773847d317486806eac40fbf1f25870c71ca53dd39affc8ae5368f574cc1928708de98fe0626a583aa9066", 0x5c) write$auto(r2, 0x0, 0x200c) close_range$auto(0x2, 0xa, 0x0) futex$auto(&(0x7f0000000080)=0xfffffffa, 0xc, 0x1, 0x0, 0x0, 0xfffffffa) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x1, 0x4000c, 0x3, 0x9b72, 0x7, 0x28000) 52.111995855s ago: executing program 2 (id=1692): openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x28242, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/dummy_udc.4/udc/dummy_udc.4/is_a_peripheral\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) epoll_create$auto(0x3e) socketpair$auto(0x9dd6, 0x4, 0x8000000000000000, 0x0) r1 = socket(0x18, 0x3, 0x2) bind$auto(r1, &(0x7f0000000180)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x8, 0x0) fsconfig$auto(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/notify_on_release\x00', 0x20000, 0x0) pread64$auto(r2, 0x0, 0xb, 0x5c8) mq_notify$auto(0xffffffffffffffff, &(0x7f00000000c0)={@sival_int=0x4, @raw=0x3, 0x4002, @_sigev_thread={0x0, 0x0}}) connect$auto(0x3, &(0x7f00000000c0)=@hci={0x1f, 0x1}, 0x55) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/v4l-touch6\x00', 0x8a300, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0x545c, 0xffffffffffffffff) sysfs$auto(0xe, 0x4, 0x7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_udc.5/udc/dummy_udc.5/srp\x00', 0x60301, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)='\x00\a', 0x2) r4 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x20080, 0x0) poll$auto(&(0x7f0000000040)={r4, 0x1000, 0x1c9}, 0x2, 0x7) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) r5 = userfaultfd$auto(0x1) read$auto_rng_chrdev_ops_core(r5, 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x800, 0x0) mmap$auto(0x0, 0x5, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) 51.65888797s ago: executing program 2 (id=1693): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x801, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000425bd7004fedbdfbb4faebe77"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) prctl$auto_PR_SET_MM_START_STACK(0x9, 0x5, 0x0, 0xd, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf250200000008000100070000000800030085000000ee1a3c6264d3db7cf6795158a1ac8560a66f31bdb824887895f5d4fb7d2423782b4e3284b1adc162dc733caebb1be8543b4d54cc4457a6fa7d4c700d37bbb60508007cb42be7d52cc4d7c75d3f0fe46ca9fc01"], 0x24}, 0x1, 0x48, 0x0, 0x20008000}, 0xc840) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getpgid$auto(0x0) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000000040)=""/23, 0x17) 50.4177011s ago: executing program 4 (id=1696): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x40480d0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) ioctl$auto_SG_SET_DEBUG(0xffffffffffffffff, 0x227e, 0x0) clock_gettime$auto(0x2, 0x0) r2 = semctl$auto_GETPID(0x0, 0x2e3, 0xb, 0x10) syz_open_procfs$namespace(r2, &(0x7f0000000480)='ns/pid\x00') 48.617112054s ago: executing program 4 (id=1700): r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x40000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_UNLINK2(r0, 0x4161, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) mmap$auto(0x0, 0xe983, 0x1000000000000df, 0xeb1, 0xffffffffffffffff, 0x7ffd) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0xfffff801, &(0x7f0000000140)="1e86487637949b642083deac3079431b6204acff450c4dd9d65425a4ef517df0059391439dfb6639c6bac05c517b61dee3277273c2c7c96f826519344b21bfa88715a0d715a4564ab8d81098a36723539b327694f3410442f56fe2", 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) mmap$auto(0x0, 0x200000800000008, 0x4000000000df, 0xeb1, 0x401, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffffffffffe11}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1800"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000003c00), 0x1a9901, 0x0) write$auto(r1, &(0x7f0000004240)='\x01', 0x10000000004) 35.827312853s ago: executing program 42 (id=1693): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x801, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000425bd7004fedbdfbb4faebe77"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) prctl$auto_PR_SET_MM_START_STACK(0x9, 0x5, 0x0, 0xd, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf250200000008000100070000000800030085000000ee1a3c6264d3db7cf6795158a1ac8560a66f31bdb824887895f5d4fb7d2423782b4e3284b1adc162dc733caebb1be8543b4d54cc4457a6fa7d4c700d37bbb60508007cb42be7d52cc4d7c75d3f0fe46ca9fc01"], 0x24}, 0x1, 0x48, 0x0, 0x20008000}, 0xc840) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getpgid$auto(0x0) read$auto_rng_chrdev_ops_core(0xffffffffffffffff, &(0x7f0000000040)=""/23, 0x17) 33.424520098s ago: executing program 43 (id=1700): r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x40000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_UNLINK2(r0, 0x4161, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) mmap$auto(0x0, 0xe983, 0x1000000000000df, 0xeb1, 0xffffffffffffffff, 0x7ffd) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0xfffff801, &(0x7f0000000140)="1e86487637949b642083deac3079431b6204acff450c4dd9d65425a4ef517df0059391439dfb6639c6bac05c517b61dee3277273c2c7c96f826519344b21bfa88715a0d715a4564ab8d81098a36723539b327694f3410442f56fe2", 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) mmap$auto(0x0, 0x200000800000008, 0x4000000000df, 0xeb1, 0x401, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffffffffffe11}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1800"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000003c00), 0x1a9901, 0x0) write$auto(r1, &(0x7f0000004240)='\x01', 0x10000000004) 12.578349202s ago: executing program 0 (id=1736): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/cec/cec24/status\x00', 0x2, 0x0) socket(0xa, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x33, 0x0, 0x4) listen$auto(0x3, 0x81) r0 = ioctl$auto_TIOCGPTPEER2(0xffffffffffffffff, 0x5441, 0x0) sendmsg$auto_NL802154_CMD_STOP_BEACONS(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="50f5ff00a461a21936611ac57ecf92d268cf68790a88ee6e8b21fb22290b379295fb279cc80973049c6c9ec546443a45d9d06b7e1d6dde1a859bc8ee05bd7fcd1386bbe4a33a5d460a654e5389ee8428cb824c4e8858b45207d856d08e92ccf1bd94c9a381f7195997dd51dcdbd83bd5cfd32e7234820ef827d170210f02bfe15bb1f8ef097f91c518ed928c65b872ec21c233f690291a5bcca4f7071ba8be847e3167a359b7a4ac508f7ac2c8393a357aace30226c38e09513da354bda061140712f9661971", @ANYRES16=0x0, @ANYBLOB="14022dbd7000fcdbdf252700000008002a000c000000050008000800000005001200d10000000500070001000000050024008100000008000b00000000000c0017000a00000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x20040010}, 0x4004000) mkdir$auto(&(0x7f00000000c0)='./file0\x00', 0x0) rename$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./cgroup\x00') unshare$auto(0x40000080) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x49402, 0x0) read$auto(r2, 0x0, 0x9a28) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000100)={0x0, 0x7}, 0x4000000000007) getsockopt$auto_SO_NOFCS(r1, 0x68c, 0x2b, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty16\x00', 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/lacp_active\x00', 0x80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/17, 0x11) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) socket(0x2000000000000021, 0x2, 0x10000000000002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x45, 0x2, 0x9, 0x3, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) 11.230144153s ago: executing program 1 (id=1738): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x8000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) msgrcv$auto(0x0, 0x0, 0x4, 0x9, 0x3) msgctl$auto(0x0, 0x1, 0x0) socket(0x2b, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_MPP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_HE_CAPABILITY={0x21, 0x10d, "fd5736a95c80db53e7c4aadb2715ac2f8807943d1727244eba33fc42fe"}]}, 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x4000890) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r2, 0x5, 0x0) getdents$auto(r2, &(0x7f00000004c0)={0x600, 0x7fffffffffffffff, 0x4}, 0x62d4) ioctl$auto_SNDRV_PCM_IOCTL_CHANNEL_INFO2(r2, 0x80184132, &(0x7f0000000000)={0x5, 0xfffffffffffffff8, 0x1, 0xff}) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68) r3 = socket(0xa, 0x3, 0x2f) fremovexattr$auto(r3, &(0x7f0000000180)='c\x00') ioctl$auto(0x3, 0x4602, 0x38) 9.37972664s ago: executing program 0 (id=1739): sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x4, 0x0, 0x5, 0x1040}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x128009, 0x9, 0xeb1, 0xffffffffffffffff, 0x7fffffffffffffff) r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000440), 0x20201, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080), 0x10}, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x0, 0xa, 0x3a) ustat$auto(0x801, 0x0) open(0x0, 0x163b40, 0x175) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x11, 0x3, 0x9) close_range$auto(0x2, r1, 0x0) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x14, 0x0, 0x4) sendmmsg$auto(r1, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) ioctl$auto_I2C_RDWR(r0, 0x707, &(0x7f0000000180)) r3 = open(&(0x7f0000000140)='./file0\x00', 0xaa4c0, 0x40) select$auto(0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x18, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@HWSIM_ATTR_MULTI_RADIO={0x4, 0x1e}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x4880) r6 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000540), r3) sendmsg$auto_NCSI_CMD_SET_INTERFACE(r4, &(0x7f0000000800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x218, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x1}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x40}, @NCSI_ATTR_CHANNEL_ID={0x8, 0x4, 0x6}, @NCSI_ATTR_DATA={0x1db, 0x5, "3473b1b69a70d19ead4e1bddaf406bda175fe0474f737fc73c06ceecc610f8a5f88886053ea3424d1a72bb80b452fa84681373cd640821786034cfb38cd79b7a134453716e15626274b5d42b2e8a8281f2f1b5bf9106c570414319ff905344af96a13f9b244d1a5d6e59f9370f618d4bd7ff353689ee2e9aa1f3c1593c6855c810b46ae24d0901d2a76c1c7d93d7d8f43ca35d23b1b0b2fac6041e322c2e727c28ce80df068ac4f42e46afff9349e05a25ae6a455cc25a5f93e1dd1fbb18be90972da3631fd235fa40bbba4b0f5f12d46e2ff9aa2c50d9a3dc77a8f49289312941ef0d5e74ed1ac2d219787cf608699050de0e62035569cca3a328a06bdd545ce6b934b6bb5ba34af73d98c4617694ca9330e515803653aedcc5f75e90eeb168517cfa7a1a11c6e8ad489e2643fb9229ad63df8a2a892bf43d132b5e4c80a1c259b124e902f018af67ad302bf09cbd6e4d17896b5f3f726b0ca23e14c9daab4f0c5eec22ee113dff09b3fec5cf72bfee2cb631e9c7d3248a1bea44aff48ae5ebc4512eac09260cdb51f7db769fc6393c3d4ece87fc9fd17b8a3a6a3e5682fcfa3e70ea65f1277f1bdfdf9f19a1d364dee31e35091143ab0e7be20003ca8afaa0412bb90c0d987be7a6884cbb928a8bca15e8630bb09da8"}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x2}, @NCSI_ATTR_MULTI_FLAG={0x4}]}, 0x218}, 0x1, 0x0, 0x0, 0x240408e0}, 0x8000) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000300)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\xf20/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a0\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5\x94\xd0\xf5\xe7\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00') 8.617390991s ago: executing program 0 (id=1740): mmap$auto(0x0, 0x8, 0x7, 0x4000000100000eb1, 0x40000000000a1, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) adjtimex$auto(&(0x7f0000001580)={0x100, 0x0, 0x2, 0x5, 0xffffffff, 0x8000000000000000, 0x6, 0x0, 0x6, 0x401, 0xb1fa, {0x4, 0x8000000000000001}, 0x7fffffffffffffff, 0x100, 0x5, 0x2, 0x0, 0x2, 0x8, 0x2, 0x7ff, 0xffffffffffff2299, 0xfffffffe}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x2, 0xfffffffffffeffff, 0x15) sendmsg$auto_NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="1cff0020e4c72a89b4d83e6d52b3f0283108ff5f854ae44dfffffeff512b637908236eee748cba16c27f3320efb5eff17e21f38717310161a0a001f3ffdb5aede9f15385c4382808fa39903db66f461c4b576b87f009d8fb7bb68624988d040eb217c9aaa0aaccbd1e4b10370ba5a435b86a448a4f98827a467a04f21381ae64ece2c6072766df36cfd64cbcc2e73dda8e5f197e227ff366438f99140bd18e27", @ANYRES16=0x0, @ANYBLOB="020025bd7000fddbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) pkey_free$auto(0xa4f4) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x40080, 0x0) read$auto(r2, 0x0, 0x20) ioprio_set$auto(0x3, 0x0, 0x4b34) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x48000, 0x0, 0x6) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x3, 0x1, 0x16, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xd, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x8c0, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) rseq$auto(&(0x7f00000004c0)={0x10001, 0x2, 0xa5, 0x7, 0x0, 0xc, "8919411ea650603b7facc5cd8f8fc10c9ae4b21a75aaf2fd0b612e7fd788d28295ae44296e2119edf46ad05b0466aa00b3626f1a2109d1a010fa1d1c855db91b0843c2d7f32ccdcd5d63188ca58db3c60ac7b07b8f82c3c4ea68b304118e9d38b69951cd7134213c1d0d7ae2dcb2de1e213ca01e70c3f53729ce1ab6ce7ac3f84ecbfbd01c51afba658149fd947d7bc7fc7dc8e16e125aee7354bf8495ab8e4e240a59565773e27b9c70eb81e629134db47b5f502ef5f696a660cfaafa72f7ca7e087fc09057d48a938f2b7ad1bc15c73887137b07b91cc3a93556ba5ce3a6a5253263eddd8e92656683df1a57498a66c05df124c6cae4534548683a61963d9dac8e87129aceb724b96dfa65abfe89303e788cb4f00f7b9ff14b20c9897cd83346b697b48658817756ee85a8db2d194a4dafe6464933fa5867856669011b37659cd22fab1f92dcd4f8748935bf5855815ea9cbe5e8f87e8ada3643bc950a8637aa9facc4e4d2d801f981089c37e7bd212ff032f4ccb7f46bf3937fe3674c616b0f772fce6b8447df3c9c62494b7c235d2a9c2284533f7f4fd6f0ee24821269653620ac0047fc72063f4dcc74ee8543d3cf7113b581fd5adec5dc3b069746820491212a722b13789e8281a45a7ef87988d22fd22f2e8263c844e4221490e57b24190d96eb8605a13dece26a8f1af319ea75a7ea74d4ee8dc3a3b69f0bf47c80fc32a8ce1b657224e94d444b707caf8cf410ea8850bdbe61041c7f658f891c7ddde8ed9a0697365e92515e2d075813e843b2ee6821807eddaa24ae4f9345ad0dfb9b15d716ae2df7003d1295002682991771422fe74c73365a9ff1f98e496c96de9aa0c872354834fd369f03d24c5616201b5cba216ed6d0e4632800df240a6a52d07419a115e6a5e9d6c4ef834a124d15cd7e9251d73d2558da59b8e7a605972ba1ed7416b1200cdcb3ee7d94b135d8732ce79b3c820bc05d6ff252de038cbdf96d203f84eaa23a77ec40bf18b97564a341323f9b36204ba16c9d3773d542f0c854cdffef80de3cc8498ee1b7910cac77a1e2ee04fee1f31591ab67003ba9423df4cffe42e8b7692a348f38853408c9357892f9fc115b08cb491cef46e2747a0afc90ab19a89148f59448f9374b9fe3b665fb69a1c0b4fa07c8a8188aebfeb80d7516db46af13e4432e04c9a6dcd013ce598d3a9de093813c49a64df696641f46a5f855cab60397f0c89957a58cd29dd5572754b882b1e8254957698d4e258a5dd7b311407aef4d27d2e9d1db0c3e55b801b6bb62d5103e0d6f3d2df09f8177e9e8fc2ab2e3b3111dcc638e783ffb86f6d56cd25c0e2fabe713f6aa129f376d8313d9ac800f5b0dbade778e89c6c0adede9a0150b3cdf0e2e0b6b2327651ae0741b7000ab1f7d00873ecfe683f0f89f1b647752522eff2e12b938b263c9fa71e3984ee2360170e832625e2055857e7c11af07847f4042952e077096cfcbb70c5b56a304240f8af98a4cee776d3e5cfd4c39cebfda9b0b598cd9b65c8a1cc7c3fdc3fbe7f0a662f1e6ea3237327d04e82eb5608ab0343dd788face0fbd235ccc457727a89f0f057dcf819416c9a6235830312e4912881708b46f2e28e1c20aaf85c2f12eecefe1433a83775fc1a036683d4b3fd491bf579a72d6217c16881a39f1cdd8cd6a90cc117c20043d54723898e82b18e47626190eb00fc6f1d7e4d6da21979ddf08a5422ce18616c9f768b55889dfcdfb1a56e03f70e2de56b39430137e6103412af2e1c9e4f3faef6e39b22fadf3aec2d8e944d5dae0f6b68c8888244008d98d03733bdce10036cd6399a26e9ecb338a6542c1ce5725b43c24e24377ea31ee8c6e227aba816ec6884f44305a4d8d963e3a455a2b662884624caf2f24511939bd3fb8d8d3a31bbb6dee97c93e65dfb200e5d199778392513273dcc042dcfdb4a273679d670b18325344c5ed9245d77023b9fa18d1c6eb70daf93e202d55c0dc48f1a4d10d9cfd69657481a6c014802c92eea1e9e80be29b014abf5844de53278584a5a49bc8779fc858e69ce9937e0776aefd12085a226dfbd4b8927f3ee181e29a7abe0ad64a676b7ea981ac3149eb5661b98e677639f0a4171cf313303cf00e7509a4071159b3ba63f1e9e815341c65163b30ef382120eb8ef0b09c17aa1d60a58cfb62a23e6f6ef6880f7ef9addb369c331e22efd8ab486c9b0625817877b39ac04f7caccfb33e02e59030608a46fac84e30a9c5ed92eded6a24a576be8e425eb845e16a350f0752454f4a89c86c8cec3fe7eb8cdbcd1e37e808acd7b4c2e80256b9ccd9e1b3a7b7f159d1f2e48233e2b5fccc6f7baf011ffbd248e8e8dc953343f4a31db563dd19563b6d66237fb6e4fcfe5de7535af3823b45a38310671c385092d0d33e1ace7f4fa886fa3eded7bac17c2c9696875debb5b3e160ba27a785b47ae18aef3937a1f711c2b06d2a946bb28272790573492d8859066f2377d84642fdc8ebed98b2444e85305f701182cdcda417de33d5ca437e2bdbb6ed0186f6e34cad0f3d5f755dc78899c82f8f9387bf9bab72682f4652cd633015978de3dbde5f00a906a1a3b122f48f054f73910a7a00c05e8b2666d333f80e9263cc71ecaa17159cc0dd0126a099d2982480672ba28e20c260ec9c90da6a905362566fff281cc9ecc3a931b8da56a7770a3e272ac32411f18e1dd78afb684303e070f1565d707e3b3604fe4650561fd67e2617da8d6f5bcba217b08d487a8d869fe1bf6fbcd0a278a2c1488b4b7aaa8335114ceed2c7166225708dab3f918584aee1513e57298845c9eacc22d947f8b9d1dee1a29e8541cdfaca3375c22466828cb61b383cc01f70e26ae8cad3486e869bb566792f2b09ab87eee2729d93638386f6952871696c8f7efc2eb0df67be59be63b08408eca7d07c38332eef46c77a4912290e45c972f6dad4aef0d479957901edee9d6946d5399aaab9c0a43524ccf55de99baf82111912468a58bc1b0d42afc9e3ac1d994f37bdab6bf1d73cb17cb58526f42605305e32cfe3249f59643e2e99f2a21e4a0ca1970b15ccbeffd820eebed9e87940d0e0a5cd20bd1a2bc9cd49db383f8606356bce24f2696af5cdde65c084cf206fd991daaa6af6dc930455f32ccdfe57a85d7e46c1f83194f7515e461e13a2a79ea1f715cd287f0411836906e2c4063b239803f4ca0ac8f5212fe0966611249641a3f630d8e389b02f8b8a01439a18379aa772cad6ec240f77cc7feeb8eeb70cffff47c6556e311a248ea2615db056a49eff0316dbe8e364c1c8788165e964fee9769609b3da2a3fb2f635a5dd7edc90b74377692302364adae8b8f1da33319a3231c2d14cef0845d59495de782bb73fc76045efdc89088398d1fb4435c0c6f9caa88d963209327a7105e10b490ce590d278998e7822b088d06ffbcb1274d1021ef412433bbd38c14e04279380c953e8399e5c070ca053b529bd2d9abbc8e3569ca3f648cf4b92033c8df25fcdeb275d40323a7d763a45606ce667ac622bf51b209420277779d2883b6f5c9d6d48d7c6b88f3015ed5823e7471464daf7382176b95ece08f3115a1f15f8ae07ad419f94f10c450ee1662c043db62b6bc0b357e9d9134a341261389ebafb02903ba6c07f226224b85400aec39fa83d84b39c07802ce4c8eee3fec12a5c7b9957620787e940b771613d289d4fa63482ebc016bb9cb02725e152eed67fb861846e5753635ca3ddb8b1b4be8c9ba9591b8b73a09c20ac56de411e8d697041f28f5ff4bac9b2a09a25c6ca61f97941eb4ef4355751af02c8526d3c69f62a1e4a71e9baafde17d8578ebdfcfb626de61bfa857d1b79d5fa53b1a291645d6fc36c6df77d68e57ca5d360a2b4c122cfb4b9437885c1122d8e9f6409609bda9fc5aa15009e05494027c22b2c3c4438d2605b5d1b7656c217979934fe36aa734fb1155e401336bf28ac252cf2fa5c7c4fecf35e6f8c7c610f6e82e7ef79d742bf0893a95739bf0aff46575a0b2c43f52ff0194120a3de4d5e201a77f2e1d304bf4709af1f48bad82b1830d893f8abf3e25a3d110068879ec98d36e74a44c6d9ccdb3036c685d94e554423f2fcce76fd4e4c374f3c5c0f60635beba30e20e6d9b02a4bbb793bca453b20b06db92901f12b38ba73f54959b8b32837a4d9a0f5a0ab6f76902c7211e809f27932767073b3d113d63b4b1ceb4910499b29dbac044037027bfa73b0345b403640438d2c9ae7f541bfb1a2b74362b025336a93abe73b93d496c58c846b52e4a5282ddd2c1124ab0ec07628746f086735390567e9750587d688efdee5ca3ffcb6f3a0409e89609c0ddeaf1908f68d5bcba36efc3d8c60b8dddf522b5ab4daa142a8005e2abf38afa66f3f0c832fda2a93667fd184ffcb319f4cb7af697aa506ee5130644a05ba4cd3abe3a6576a31928ae738cca453ca08db0845bf41081b8fd5d245c9b070ca1782069bf779ddc228698f57045d0714b7494ec88ae21c8e82c580a3f70fceaa785967d06e15424a711fe89e51b8ea2c4ea7d211d5fcd043f86a9a98e1023d4547dff26251432eae9931185b846446f36c329745939f8048eded024ddd9939a0ea911d066e144c5508971481611b960a29e7d11ea65d80f5034b4af935f4a4607d7f228bfae4d61a54acf7956a47223b42f580a930d75387e0bfc4f701624ce2eba2d10d6dfa5e9f3a50679632a5fcf923087ad52c82ee72332f2b4522bd605b14722157d8ed6de16940a7b261f9055efd5abc6fde12cc6f01edbf93bc16bdd12c8dfd682e062c923ca0234f660fbd546c6231ebf6dd1792ddb7b7da322920a3b7fc3977d23ca2188a12bdc2bfa1f330d2ab2c5dd5b683dd0880c39a8348533704d18b6f6b68307baf9d3d7284ca148ef18208861828ee6e63a2f87c96fcabcd878bb8d27a5c9a9ad02f51e4dda8db0a207716b8e82a9183f3bc23142afa61943fa481d4a1a2ffe4a3d891106dc472e9cb364c964138598875b805ceab630cc142e45ac667ff15331e3bf023992a954fcff40f4ffd0ccde00ccddf6d06ddfbf34e1931cbc61b2163d07ce89fa406a384e5669c45bda1559fd57a93f4c2cc8df23ae3ba1d8d70e49e97669abef10af9f430ab37addc433f5186916e84de721db06dbed0e4e44d1a34a43bf2267d311b44a8b47cdb4df8462848304163eef06f59624a114bf3ed6a725e8125b318bf89d980964f64d28616445a32131bed7ed9a2d642ea39e00491ae716fff951f831484d651883bd9e60d376900cda2bc8a8560619c66afde825980f84adbc421eac7b4a990d1781483782a6fa3751b944e72f38d26130d32c5edb9ed83132872310e19de8e6c0cb6be3082a9247c881f3c6eeb423206baac8483cba75e56568696905b6815f530c338420e9eb8d3d125d770dc2fc25661922bbb6611242963d14dd06726e65ec56a47630e51d2c9c638dda78d15026c0a590af75e36eafcf51059d6b6da0c02607a0e66e7eae25fcfb3956a767353363292b25d93fe7e27d8cb01ae60a5ed6801bc37d4fbf46833f489c91407e77ac2e9d5ab988079afc67309ebe99362dd203ecde15f9da28ac64871781b9e4ca1ee27524068808502e57415f2dcd7fd92b1c94bad73939b3103bbabdc544012d3b9b64105784ad78c5034b179def1c393885c8df5153737af250dee428d7fb1e208a3b4b69c023d2d6635bc877e459eb984e8c3b5a3f639b11d9770c56813ea6afdd874e739e01fe796015334ca5f6d4bb91ee39af2e76ea0daed53326417e621e870"}, 0x9, 0x3, 0x9) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000001680)=ANY=[@ANYBLOB="aa4ced1e4c5672125397ca1050f81c557b21faf6e5c0b11397bab4cceb165a582fffa9236874d1fea203293d8733", @ANYRES16=r3, @ANYBLOB="00032abd7000fbdbdf251d000000b500a6808822100451bd0cd9e0a40864f984e395e4136942553e35969fe933d52e83f73a98a2ff46c04ab7767169846fae8cf156f32e4c1484ea0473932e94aea999314d568982222ea01b8a6dda857eece96f232e38668e60ac50da77b56aef9744804c095b2aa6e6fb4a40cb1a156058f0446caf12dbe482a8ecda448bd3fd079007b0c9af6df10cf3ba5093e81613be0e52d40fd80bfee8202839343860963544d081b8ff313e4f1b2bda253772cce8712940ac000000110007004ef5b6723df9c9aa23924df8c5000000"], 0xe0}, 0x1, 0x0, 0x0, 0x4040000}, 0x40804) r4 = fsopen$auto(0x0, 0x1) fsconfig$auto(r4, 0x8, 0x0, 0x0, 0x0) fsconfig$auto_FSCONFIG_SET_BINARY(r4, 0x2, 0x0, 0x0, 0x5) acct$auto(0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/kernel/parameters/panic_print\x00', 0x80862, 0x0) preadv$auto(r4, &(0x7f00000001c0)={&(0x7f0000000140)="a7ba00686a2b07e7e2e3378a", 0x7}, 0x7, 0x9, 0x8) sendfile$auto(r5, 0x3, 0x0, 0x2) 7.041078256s ago: executing program 0 (id=1741): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x4) unshare$auto(0x40000080) unshare$auto(0x40000080) r0 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x121102, 0x0) read$auto_vhci_fops_hci_vhci(r0, &(0x7f0000000d40)=""/16, 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x17) read$auto(0xffffffffffffffff, 0x0, 0x9a28) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x39, 0x3, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x55) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) close_range$auto(0x2, 0x8, 0x0) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x189880, 0x0) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, r2, 0x0, 0x6c06, 0x7) socketpair$auto(0x1e, 0x5, 0x3, 0x0) r3 = openat$auto_stats_fops_2(0xffffffffffffff9c, 0x0, 0x4001, 0x0) setsockopt$auto_SO_RCVBUF(r3, 0x9, 0x8, 0x0, 0xeb4) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) r4 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec8\x00', 0x0, 0x0) ioctl$auto_CEC_DQEVENT(r4, 0xc0506107, 0x0) 7.03866166s ago: executing program 1 (id=1742): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$auto_TIOCMSET2(r0, 0x5418, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="720100", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\a'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="5e010000", @ANYBLOB="19"], 0x1ac}}, 0x20040080) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 6.716067232s ago: executing program 1 (id=1743): mmap$auto(0xfffffffffffffffd, 0xffd, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffa, 0x7ffe) socket(0x2, 0x1, 0x106) setitimer$auto(0x1, &(0x7f0000000000)={{0x2, 0x4}, {0x5, 0x6}}, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) r0 = socket(0x18, 0x5, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x20100, 0x0) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) ioctl$auto_SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000100)={0x8000000000000000, 0x80000001}) fsconfig$auto_SHMEM_HUGE_NEVER(r0, 0xc4, &(0x7f00000000c0)='\'[*:^&\'$+.\x00', &(0x7f0000000240)="f081c9ac953be397e4e921f6bada31a77045011e129ecdb1714e9825a36de92ce0e39d902eb8a9b476f40460769b6ef1c0997d056e0d4554c287605b0a12d3ecad5961102c8684a96467aa2e2fad2084d128748b", 0x0) ioctl$auto_SNAPSHOT_FREE(r1, 0x3305, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/projid_map\x00', 0x101002, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x7fffffffffffffff, 0x4, 0x1afbde29, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x15be02, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = signalfd4$auto(r0, 0x0, 0xa, 0x0) ppoll$auto(&(0x7f0000000040)={r3, 0x7ff}, 0x7, 0x0, 0x0, 0x8) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b32, 0x1) mmap$auto(0x0, 0x810005, 0xf4, 0x800000000a011, r2, 0x8000) mmap$auto(0x8, 0xe, 0x2000000000000006, 0xeb1, r2, 0x8000) setresuid$auto(0x0, 0x8, 0x8000) mlockall$auto(0x7) waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x6, 0x1, 0x1, @_sigfault={&(0x7f00000002c0)="562a3767bb94932ee9a71563bf9ebffd713e715c6e3edfd335d58a2c03a6381a1b5c6a636f0d987ae6bff47d901adf4b5ed3970f6fc556f19784a121bb969a8905a45f8c194ae2a7b0a9cefb349f75fa4ef9c01f0e2d62728f20d4e94f305b35b30717dae1db180b2b753db2b3bff75167c9de8dcf19e71dcee0e0bbc021c1ae699edb02ec77ae6d0584a9b966965f1b", @_addr_lsb=0x7}}}, 0x2, &(0x7f0000000180)={{0x6, 0x7}, {0x1, 0xdfc9}, 0x8, 0xdeb, 0xb971, 0xcc, 0xd4e, 0xfa, 0x1, 0x1bd, 0x6, 0x8000000000000001, 0x5, 0xf800000000000000, 0x10001, 0x2}) 3.63585186s ago: executing program 1 (id=1744): mmap$auto(0x0, 0x400008, 0xe3, 0x9b72, 0x2, 0x8000) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x2000000006, 0xffffffffffff0005, 0x7ff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) rt_sigtimedwait$auto(0x0, 0x0, 0xffffffffffffffff, 0x8) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r0, @ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x104) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) r2 = socket(0xa, 0x5, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x6, 0xeb1, 0x7f, 0x8000) sysfs$auto(0x2, 0x5e4dae61, 0x8000000000000000) fsopen$auto(0x0, 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) socket(0x11, 0x80003, 0x300) pipe2$auto(&(0x7f00000000c0)=r0, 0x100004) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000380)="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", 0x1}, 0x2000000000000003) close_range$auto(0x2, 0x8, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) fsmount$auto(r3, 0x8, 0x383d0443) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r4 = io_uring_setup$auto(0x4, 0x0) socket(0x2, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) open_tree_attr$auto(r4, &(0x7f00000000c0)='./file0\x00', 0x3, &(0x7f0000000100)={0x4, 0x6, 0x3904, @raw=0xff}, 0x3) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) mlockall$auto(0x6) brk$auto(0x7b5900000000) 3.436847456s ago: executing program 0 (id=1745): mmap$auto(0x0, 0x6, 0x1000df, 0x9b72, 0xffffffffffffffff, 0x7ffc) sysfs$auto(0x2, 0x10000000000002c, 0x8) mmap$auto(0x0, 0x26, 0xdb, 0x9b72, 0x1000, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) epoll_create$auto(0x3e) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = socket(0x18, 0x3, 0x2) setsockopt$auto_SO_LINGER(r1, 0x1, 0xd, &(0x7f0000000180)='(,\x00:\x00\\\xb3\xc7\xaf\x19\x7f\x82S%h*SI', 0x3) bind$auto(r1, &(0x7f0000000180)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x6a) mq_notify$auto(0xffffffffffffffff, &(0x7f00000000c0)={@sival_ptr=0x0, @raw=0x3, 0x2, @_sigev_thread={0x0, 0x0}}) connect$auto(0x3, &(0x7f00000000c0)=@hci={0x1f, 0x2}, 0x55) close_range$auto(r0, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) semctl$auto(0x1ff, 0x2, 0x13, 0x1) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x1, 0x7, 0x0, 0x6) mmap$auto(0x411, 0x400009, 0x9, 0x40000000b5, 0xffffffffffffffff, 0x2) ioctl$auto_media_devnode_fops_mc_devnode(0xffffffffffffffff, 0x80047c05, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x400, 0x0) mmap$auto(0x0, 0x6, 0x4000000000df, 0x40000400000ebe, 0xffffffffffffffff, 0x10001) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/ima/uevent\x00', 0x8001, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/58, 0x3a) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f00000000c0)="8c9700080066ed588271b9ef1dfcdea1bc947c07edf1768a7d9d809e5a7d049e635a05cbd4aead927d5ef84f478400"/62, 0x40000000001243}, 0x0, 0xfffffffffffffffd) getcpu$auto(0x0, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x400454ca, 0x38) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(r4, 0x400454c6, 0x38) r5 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, 0x0, 0x24101, 0x0) close_range$auto(r5, 0xfffffffffffff000, 0x8) 2.967654747s ago: executing program 0 (id=1746): openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/0/msr\x00', 0xf82, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf8\xfe\n\xa7\xfeD\xca\xd9\xb3\xc1\xe4\xf5j\x94\x7f\x00\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xed\x013\x87l\xb9\x1e\x05\x90\xa2', 0x2) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) lseek$auto(r0, 0xffffff7f, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x9, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xfdef) r3 = open(&(0x7f0000000080)='./file0\x00', 0x200000, 0x174) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, r4, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x200}]}, 0x20}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) fcntl$getown(r3, 0x9) sendmsg$auto_OVS_FLOW_CMD_NEW(r3, &(0x7f0000000e00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000dc0)={&(0x7f00000001c0)={0x2a4, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_MASK={0x288, 0x7, 0x0, 0x1, [@nested={0x8, 0x6d, 0x0, 0x1, [@typed={0x4, 0x144}]}, @nested={0x27c, 0xf2, 0x0, 0x1, [@nested={0x4, 0x5c}, @typed={0x4, 0xfb}, @nested={0x4c, 0x3c, 0x0, 0x1, [@typed={0x14, 0x106, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="78878f54f6291fdaa06e44a21d64c57b8973f4b6848cf12ed556269f3fe0a7c72d3b22c275161f2f5488f062951255c40cab5f3b"]}, @generic="a553d82bc1b3a66cb97a7b496a70f17c65bd3dd62ae3a5ae714e9e5431c0937f3bb9c7c415122a8e5bc11189594c3dc12411f4860e618e874c6aa6ac4d5e87aadadc12f73b8bf5c4fc5160a3b99bf1ec1aa7659275e8bea75572c554849cd13a2e3a01b07bb5844507fad76559885fb2ee", @nested={0x4, 0xef}, @nested={0x4, 0x146}, @typed={0xec, 0xdf, 0x0, 0x0, @binary="1565ec0b0fba76b7b26445eae15d6fa8f5e9e68df1baae87e23d8d58c7ea8dd3c68d4f1cb67d8c2c66b175e26ea8da2ed5409814535905064f68d579750c2e360d2c3efd29cbdf2e109293c937034e58d2b584eed608b288c8e2f495c5d2cd54b0114e8a802be7d7f4f545c9d4dde1393c476ba9d85cb85939a370bff9481f48acfdc5ce7732ad59d49c019897c5e3c39d183707c2a601f208ba3c25309ecd63a3dd7b7cf511bb266c0cf5a5d2178925a5587d07f79504e164db32489b6cce84296e0304556f3ef45e5f90ea9f597d769a07375076d1e88644d36744814a53fae9f790d911fb5d27"}, @generic="db06f5f1b1428f293e692dccbc40b528e315cade05aefbdb5c7a5e7217acc6cf725eb47dae5f0d5c4cd46d5ab52fbf36bb8a5efa81fb89f798e2763fcb90f1b80679d8e0d331d80f5ec624fa56e77a1f84350cb4a27e425a77eb0f0795b3c674bacae4ba12ee4ea84f8b5d53a87906afaaaabd2391a67ccb56b431cd79dbe5d79234ce2c01edd46c00293e0df74ac25afc4e869eb35aa598a6dceb631855a649798d0f959118a1b59c4c6c37ccd9bdac323165f3e60f59b8d611340c82b4de"]}]}, @OVS_FLOW_ATTR_UFID={0x5, 0x9, 0x9}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x8000}, 0x40) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/001/001\x00', 0x802, 0x0) 1.435691796s ago: executing program 1 (id=1747): fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0x0, &(0x7f0000000140)='\\!:\x00', 0x0, 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mremap$auto(0x0, 0xbfffffffffffffff, 0x7ffffffffffffffd, 0x0, 0x7fffffffb000) clock_nanosleep$auto(0x8, 0x0, &(0x7f00000000c0)={0x3, 0x2}, 0x0) adjtimex$auto(&(0x7f0000000480)={0x101, 0x0, 0x1, 0x1, 0x800000000007, 0x7f, 0x860, 0x0, 0x3, 0x45079941, 0xb, {0x47a8, 0x8}, 0x4, 0x3, 0x9, 0xe, 0x0, 0x8, 0x46f7, 0xffffffffffffffff, 0xb4, 0x5, 0xf9}) openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, 0x0, 0x169a02, 0x0) r0 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/loginuid\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000600)='1\x00\\\xa0\x04\x06\x00\x00\x00*\x8d\x14\xfa 3\x00\xad1\xcc\xeb&{q\xe0$\xcd\x81Zm\xeb\xe39LC{\xf8\xa09\xe9\x05\xfc\xddUw4e\xc6\t}k\x14\xcah\xba\x16\xdc\x00\x88\x11\x000\xb3z\xe4\xb9\x97\x90z\xb41&YH\xd6\xa2\x06\xbc \b\xd7\xee\x8a:\xd9\x88\x8f\x06)l\xe4\x83\xbc\xd1wOa\xb6\x93\xe7\xb7\xbb\xdc\x98\xba\\\x15\x0e\xdc1D\x8b@\x9btfi\xaf\xdf\xee\v\x8e\xa2P\x93\x19\xea\x04\x00\x00\x00\x00\x00\x00\x005=\xc0\x9d-\xaf\xfd\xc7\x87\x00\x00\x00\xe6f\x00\xa4q\xec\x82\x95\x01\xfc7\x86\xd0\xd2\x93\xa7?\xc5\xf3\xaf\xe5\x17\x96\xc6\xbd=\x9a=\xe8\xf22\xab\x83\x9f\xc2\xc2\x8f\x1fQ|\x91&\x15\x0f\x18\xbc\xd3\xd6\xd7P\bTb\xfaL\xfcio\xa3\xe1d#-R\x91}\xe4\x88\xf6\xcc\xd5e\xb1Va\xa4Z\'w\xee\x94`>\x99\x00\xef\xe5\x9cs\xaa\x8e<\x96\xafgM\xadY\xae\xf5\xe4\xb3\x9d\x18\x0f\xcc\x80\tGb\xf5\x8c\xf4\xbc\xaf\x7f\x87\'\x9f\x0ff\x03m\xaf+D\xee\xcd\xd9\xfe\xe2)\x830}\xcc\xadC\xdd\xea\xb1\x8d\x06xj^U\xc0<\xfe\xc3U\xf8\x1ff\xe1\xd8\x14\t\xa8l]\xeb\xb6\xef\x04\x8f\xff\xfc\x97\x91\xdbN\x81\xfd\xf2\x9e\x18\x85G\xc7\xef\x86;\xd5\xd9\xd8\x18wq.%\xa9l\xc8\xdaC\x93\xc6\xc6\xd5p8\xa5\xb1\xd78\xcf+n\xf7T6\t0\xdb`\x88\x02\x92t\xabh\x91\xea\xcc\xb8\x0f~\x1f\xf3\\\xcd3\x99\xc57y\xa4\nM\xee \xc1\x81\x80\xf8I9\'\x97\xe9Y\xec\xf4\x05\xac\xe2Q\x15\xec\xc3z)(\xb9 \b\x00\x00\x00|\x852\xc15\x93\x83\xb2\xf4\x87/\xba>\xc2\x9d\xc5\xf9\x19-V\xb8\xc9\x88z\b\xb7\xe3\xad\xdc\xfb\x1eyg\x80\x99\xd9\x88\x1be\xec6\x7f\x15\xf9\xcf2\x9b\xb0\xbf\x00\xb4\x98\x89\xf9\xa6\xf1>b\xd5', 0x4db) mremap$auto(0x7fffffff, 0x54, 0x81, 0x6, 0x257ed5b5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000840)='/sys/kernel/tracing/per_cpu/cpu0/buffer_size_kb\x00', 0x40, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x805, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) socket(0x18, 0x2, 0x0) 579.751821ms ago: executing program 3 (id=1717): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket(0x1d, 0x2, 0x7) (async, rerun: 32) r2 = io_uring_setup$auto(0x3, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0) (async) syz_genetlink_get_family_id$auto_netdev(0xfffffffffffffffd, r0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) (async) write$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(r2, &(0x7f00000004c0), 0x0) ioctl$auto_MEMSETBADBLOCK(r2, 0x40084d0c, 0x0) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3}, 0x6a) (async) mkdir$auto(0x0, 0x2) (async) sendto$auto(r1, 0x0, 0x6fffff9, 0x8, &(0x7f0000000440)=@can={0x1d, r3}, 0x834) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) unshare$auto(0x40000080) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/sound/ctl-led/speaker/card2/reset\x00', 0xa001, 0x0) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="0a1c46cb", @ANYRES16=r6, @ANYBLOB="01032cb57000fbdbdf250a0000000600010017000000"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) (async) r7 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'veth0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r4, &(0x7f0000004100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\b\x00+', @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf650100000008000100", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040801}, 0x4000000) (async, rerun: 32) mmap$auto(0x0, 0x400, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (rerun: 64) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) (async) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 1 (id=1748): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x204880, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101200, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_PSE_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x18, 0x0, 0x1, 0x703d27, 0x25dfdbfc, {}, [@ETHTOOL_A_PSE_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000050}, 0x40d8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB='1'], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44080}, 0x40000) (async) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r2) (async) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae90, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/memory.kmem.tcp.limit_in_bytes\x00', 0xc2481, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0x2000000000eb1, 0x401, 0x8000) (async) r4 = socket(0xa, 0x5, 0x0) setsockopt$auto(r4, 0x0, 0x24, 0x0, 0x9) (async) writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000580)='g', 0x6}, 0x3) kernel console output (not intermixed with test programs): 249 > 2 [ 638.657967][T13464] zram: Added device: zram1 [ 640.208241][T11048] Bluetooth: hci4: command tx timeout [ 641.235310][T13461] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.267190][T13461] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.297568][T13461] bridge_slave_0: entered allmulticast mode [ 641.333663][T13461] bridge_slave_0: entered promiscuous mode [ 641.393498][T13461] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.445031][T13461] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.481384][T13461] bridge_slave_1: entered allmulticast mode [ 641.515410][T13461] bridge_slave_1: entered promiscuous mode [ 641.734904][T13461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.791713][T13461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.959956][T13461] team0: Port device team_slave_0 added [ 642.009441][T13461] team0: Port device team_slave_1 added [ 642.159540][T13461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.190549][T13461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.287655][T11048] Bluetooth: hci4: command tx timeout [ 642.316482][T13461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.379859][T13461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.409814][T13461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.478398][T13479] Process accounting paused [ 642.532684][T13461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.814464][T13461] hsr_slave_0: entered promiscuous mode [ 642.842259][T13461] hsr_slave_1: entered promiscuous mode [ 642.870435][T13461] debugfs: 'hsr0' already exists in 'hsr' [ 642.900896][T13461] Cannot create hsr debugfs directory [ 643.395395][T13504] bridge0: port 3(batadv0) entered blocking state [ 643.417546][T13504] bridge0: port 3(batadv0) entered disabled state [ 643.443302][T13504] batadv0: entered allmulticast mode [ 643.462832][T13504] batadv0: entered promiscuous mode [ 643.480608][T13504] bridge0: port 3(batadv0) entered blocking state [ 643.489043][T13504] bridge0: port 3(batadv0) entered forwarding state [ 643.568796][T11791] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 643.578537][T11791] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 644.368256][T11048] Bluetooth: hci4: command tx timeout [ 645.142143][T13461] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 645.198288][T13461] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 645.271523][T13461] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 645.352443][T13461] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 645.379990][T13461] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 645.424437][T13461] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 645.454131][T13461] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 645.481737][T13461] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 645.841244][T13532] netlink: zone id is out of range [ 645.869828][T13532] netlink: zone id is out of range [ 645.896154][T13532] netlink: zone id is out of range [ 645.919386][T13532] netlink: zone id is out of range [ 645.953968][T13461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.979683][T13532] netlink: zone id is out of range [ 646.033648][T13532] netlink: zone id is out of range [ 646.050384][T13461] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.088709][T13532] netlink: zone id is out of range [ 646.099129][T11793] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.106346][T11793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.141805][T13532] netlink: zone id is out of range [ 646.179761][T11793] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.186998][T11793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.207764][T13532] netlink: zone id is out of range [ 646.247480][T13532] netlink: zone id is out of range [ 646.447659][T11048] Bluetooth: hci4: command tx timeout [ 646.581147][ T30] audit: type=1800 audit(1780266482.901:24): pid=13532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1526" name="lu_gp_id" dev="configfs" ino=48775 res=0 errno=0 [ 648.464879][T13461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.365199][ T9301] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.595107][ T9301] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.695665][ T9301] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.779466][ T9301] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.183589][T13461] veth0_vlan: entered promiscuous mode [ 651.392142][T13461] veth1_vlan: entered promiscuous mode [ 651.494034][ T6177] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 651.506444][ T6177] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 651.517054][ T6177] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 651.531090][ T6177] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 651.541548][ T6177] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 651.925414][T13606] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1535'. [ 652.257847][ T9301] bridge_slave_1: left allmulticast mode [ 652.257950][ T9301] bridge_slave_1: left promiscuous mode [ 652.260810][ T9301] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.286839][ T9301] bridge_slave_0: left allmulticast mode [ 652.289259][ T9301] bridge_slave_0: left promiscuous mode [ 652.289450][ T9301] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.110149][ T9301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.151961][ T9301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.172197][ T9301] bond0 (unregistering): Released all slaves [ 653.325184][T13461] veth0_macvtap: entered promiscuous mode [ 653.454959][T13461] veth1_macvtap: entered promiscuous mode [ 653.581854][ T6177] Bluetooth: hci1: command tx timeout [ 653.966061][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 654.059988][T13461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 654.269278][T13461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 654.622980][T11785] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.670629][T11785] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.754352][ T9301] hsr_slave_0: left promiscuous mode [ 654.782987][ T9301] hsr_slave_1: left promiscuous mode [ 654.808575][ T9301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 654.850960][ T9301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 654.885077][ T9301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 654.928873][ T9301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 654.952594][T13639] sd 0:0:1:0: PR command failed: 1026 [ 654.978032][T13639] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 655.012042][T13639] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 655.071451][ T9301] veth1_macvtap: left promiscuous mode [ 655.093815][ T9301] veth0_macvtap: left promiscuous mode [ 655.106483][ T9301] veth1_vlan: left promiscuous mode [ 655.128368][ T9301] veth0_vlan: left promiscuous mode [ 655.647316][ T6177] Bluetooth: hci1: command tx timeout [ 655.760335][ T9301] team0 (unregistering): Port device team_slave_1 removed [ 655.802868][ T9301] team0 (unregistering): Port device team_slave_0 removed [ 655.978979][T11785] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.004166][T11785] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.072501][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 656.642874][T13624] Process accounting paused [ 656.827449][T11785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 656.883723][T11785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.702971][T11787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.728247][ T6177] Bluetooth: hci1: command tx timeout [ 657.770748][T11787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.941048][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3 [ 659.447149][T13600] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.492891][T13600] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.534290][T13600] bridge_slave_0: entered allmulticast mode [ 659.579075][T13600] bridge_slave_0: entered promiscuous mode [ 659.634515][T13600] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.680981][T13600] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.718650][T13600] bridge_slave_1: entered allmulticast mode [ 659.758855][T13600] bridge_slave_1: entered promiscuous mode [ 659.807146][ T6177] Bluetooth: hci1: command tx timeout [ 660.170376][T13600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.275370][T13600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.531247][T13600] team0: Port device team_slave_0 added [ 660.595700][T13600] team0: Port device team_slave_1 added [ 660.917125][T13600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.976417][T13600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.140533][T13600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.406692][T13600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.437388][T13600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.565879][T13600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.810983][T13746] tc_dump_action: action bad kind [ 661.844083][ T5296] 8021q: adding VLAN 0 to HW filter on device eth4 [ 662.312822][T13600] hsr_slave_0: entered promiscuous mode [ 662.329276][T13600] hsr_slave_1: entered promiscuous mode [ 663.486175][T13770] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 663.544982][T13770] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 663.715722][T13771] smpboot: CPU 1 is now offline [ 663.761161][T13771] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 664.164436][T13600] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 664.215986][T13600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 664.384458][T13600] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 664.402487][T13600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 664.423150][T13600] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 664.457353][T13600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 664.479114][T13600] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 664.512068][T13600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 665.802982][T13600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.331956][T13600] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.510702][T11786] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.517941][T11786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.570491][T11786] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.577760][T11786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.255636][T13600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.575462][T13600] veth0_vlan: entered promiscuous mode [ 668.601476][T13600] veth1_vlan: entered promiscuous mode [ 668.655543][T13600] veth0_macvtap: entered promiscuous mode [ 668.668128][T13600] veth1_macvtap: entered promiscuous mode [ 668.700245][T13600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.718705][T13600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.736006][T11793] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.754243][T11793] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.783257][T11793] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.827733][T11793] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.015030][T11791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.039457][T11791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.068342][ T9301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.076736][ T9301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.940210][T13856] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 670.977719][T13856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1558'. [ 671.926715][T13863] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 671.957919][T13863] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 672.023347][T13867] smpboot: CPU 1 is now offline [ 672.038843][T13867] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 678.452511][T11048] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 678.471220][T11048] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 678.480792][T11048] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 678.491788][T11048] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 678.502566][T11048] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 679.148690][T13928] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.155957][T13928] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.165359][T13928] bridge_slave_0: entered allmulticast mode [ 679.173571][T13928] bridge_slave_0: entered promiscuous mode [ 679.182970][T13928] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.191512][T13928] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.199668][T13928] bridge_slave_1: entered allmulticast mode [ 679.207452][T13928] bridge_slave_1: entered promiscuous mode [ 679.246615][T13928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.260294][T13928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.298965][T13928] team0: Port device team_slave_0 added [ 679.307646][T13928] team0: Port device team_slave_1 added [ 679.342379][T13928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.352160][T13928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.381482][T13928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.394204][T13928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.402703][T13928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.430713][T13928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.485030][T13928] hsr_slave_0: entered promiscuous mode [ 679.495744][T13928] hsr_slave_1: entered promiscuous mode [ 679.502975][T13928] debugfs: 'hsr0' already exists in 'hsr' [ 679.509861][T13928] Cannot create hsr debugfs directory [ 679.748310][T13928] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 679.763640][T13928] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 679.772633][T13928] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 679.783404][T13928] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 679.793772][T13928] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 679.806544][T13928] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 679.815968][T13928] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 679.828577][T13928] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 679.864974][T13928] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.872178][T13928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.879656][T13928] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.886902][T13928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.971871][T13928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.990635][T11785] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.999800][T11785] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.022589][T13928] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.035378][T11785] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.042586][T11785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.082982][T11785] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.090206][T11785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.531641][T11048] Bluetooth: hci5: command tx timeout [ 680.565584][T13928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.852658][T13928] veth0_vlan: entered promiscuous mode [ 680.871712][T13928] veth1_vlan: entered promiscuous mode [ 680.911202][T13928] veth0_macvtap: entered promiscuous mode [ 680.922088][T13928] veth1_macvtap: entered promiscuous mode [ 680.952839][T13928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.971949][T13928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 680.986702][T11787] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.012404][T11787] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.045169][T11787] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.117203][T11787] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.214793][T11785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.237991][T11785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.283382][T11793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.294463][T11793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.018131][T13977] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 682.163684][T13980] nfs4: Unknown parameter '/dev/audio' [ 682.171395][T13980] capability: warning: `syz.6.1564' uses 32-bit capabilities (legacy support in use) [ 682.187331][T13980] blktrace: Concurrent blktraces are not allowed on loop2 [ 682.607407][T11048] Bluetooth: hci5: command tx timeout [ 683.182701][ T6177] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 683.200471][ T6177] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 683.210690][ T6177] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 683.226622][ T6177] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 683.234453][ T6177] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 683.892184][ T5638] Process accounting resumed [ 684.463716][ T6177] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 684.476437][ T6177] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 684.491328][ T6177] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 684.501942][ T6177] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 684.514515][ T6177] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 684.688337][ T6177] Bluetooth: hci5: command tx timeout [ 684.846575][T14015] net_ratelimit: 47 callbacks suppressed [ 684.846596][T14015] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 685.328074][ T6177] Bluetooth: hci6: command tx timeout [ 685.365176][T13990] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.393934][T13990] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.422841][T13990] bridge_slave_0: entered allmulticast mode [ 685.454058][T13990] bridge_slave_0: entered promiscuous mode [ 685.482938][T13990] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.512468][T13990] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.536040][T13990] bridge_slave_1: entered allmulticast mode [ 685.562051][T13990] bridge_slave_1: entered promiscuous mode [ 685.698833][T13990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 685.725850][T13990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 685.836644][T13990] team0: Port device team_slave_0 added [ 685.859947][T13990] team0: Port device team_slave_1 added [ 685.900827][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.909125][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.993108][T13990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.008662][T13990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.068687][T13990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.115584][T13990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.140657][T13990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 686.200061][T13990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.406767][T13990] hsr_slave_0: entered promiscuous mode [ 686.426291][T13990] hsr_slave_1: entered promiscuous mode [ 686.445618][T13990] debugfs: 'hsr0' already exists in 'hsr' [ 686.454370][T13990] Cannot create hsr debugfs directory [ 686.518061][T14022] kexec: Could not allocate control_code_buffer [ 686.608132][ T6177] Bluetooth: hci7: command tx timeout [ 686.768595][ T6177] Bluetooth: hci5: command tx timeout [ 687.100649][T14006] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.117255][T14006] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.128835][T14044] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1574'. [ 687.141411][T14006] bridge_slave_0: entered allmulticast mode [ 687.160199][T14006] bridge_slave_0: entered promiscuous mode [ 687.174531][T14042] netlink: 274 bytes leftover after parsing attributes in process `syz.6.1574'. [ 687.194327][T14006] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.215313][T14006] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.233266][T14006] bridge_slave_1: entered allmulticast mode [ 687.245499][T14006] bridge_slave_1: entered promiscuous mode [ 687.330177][T14006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 687.403817][T14006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 687.414585][ T6177] Bluetooth: hci6: command tx timeout [ 687.544744][T14006] team0: Port device team_slave_0 added [ 687.561829][T14006] team0: Port device team_slave_1 added [ 687.794260][T13990] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 687.813944][T13990] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 687.824219][T14006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.835237][T14006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.870920][T14006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.893244][T13990] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 687.905407][T13990] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 687.914137][T14006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.923471][T14006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.953657][T14006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.981980][T13990] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 687.994690][T13990] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 688.020253][T13990] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 688.036618][T13990] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 688.126284][T14006] hsr_slave_0: entered promiscuous mode [ 688.143714][T14006] hsr_slave_1: entered promiscuous mode [ 688.157811][T14006] debugfs: 'hsr0' already exists in 'hsr' [ 688.174315][T14006] Cannot create hsr debugfs directory [ 688.687915][ T6177] Bluetooth: hci7: command tx timeout [ 688.813124][T11048] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 688.832707][T11048] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 688.845764][T11048] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 688.858463][T11048] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 688.869736][T11048] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 689.487966][T11048] Bluetooth: hci6: command tx timeout [ 689.592573][T13990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.731691][T14006] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 689.775892][T14006] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 689.804301][T13990] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.834561][T14006] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 689.894097][T14006] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 689.919936][T14006] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 689.945773][T14006] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 689.966808][T11785] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.974072][T11785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.013077][T14006] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 690.034104][T14006] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 690.056366][T11785] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.063599][T11785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.582536][T14006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.685438][T14006] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.730718][T11786] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.737956][T11786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.772969][T11048] Bluetooth: hci7: command tx timeout [ 690.834987][T11786] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.842231][T11786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.927579][T11048] Bluetooth: hci8: command tx timeout [ 691.168838][T14062] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.200066][T14062] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.235860][T14062] bridge_slave_0: entered allmulticast mode [ 691.266766][T14062] bridge_slave_0: entered promiscuous mode [ 691.291961][T14062] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.319822][T14062] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.360949][T14062] bridge_slave_1: entered allmulticast mode [ 691.386815][T14062] bridge_slave_1: entered promiscuous mode [ 691.567154][T11048] Bluetooth: hci6: command tx timeout [ 691.596134][T14062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.656781][T14062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.804030][T14062] team0: Port device team_slave_0 added [ 691.846380][T14062] team0: Port device team_slave_1 added [ 691.970030][T14062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.993313][T14062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.079436][T14062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.117762][T13990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.161732][T14062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.180997][T14062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.311965][T14062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.609635][T14062] hsr_slave_0: entered promiscuous mode [ 692.644102][T14062] hsr_slave_1: entered promiscuous mode [ 692.675124][T14062] debugfs: 'hsr0' already exists in 'hsr' [ 692.717734][T14062] Cannot create hsr debugfs directory [ 692.848895][T11048] Bluetooth: hci7: command tx timeout [ 693.008941][T11048] Bluetooth: hci8: command tx timeout [ 693.597484][T13990] veth0_vlan: entered promiscuous mode [ 693.661778][T13990] veth1_vlan: entered promiscuous mode [ 694.029450][T14006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.085971][T14131] FAULT_INJECTION: forcing a failure. [ 694.085971][T14131] name failslab, interval 1, probability 0, space 0, times 0 [ 694.135909][T13990] veth0_macvtap: entered promiscuous mode [ 694.145563][T14131] CPU: 0 UID: 0 PID: 14131 Comm: syz.6.1582 Tainted: G L syzkaller #0 PREEMPT(full) [ 694.145601][T14131] Tainted: [L]=SOFTLOCKUP [ 694.145610][T14131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 694.145624][T14131] Call Trace: [ 694.145632][T14131] [ 694.145642][T14131] dump_stack_lvl+0x100/0x190 [ 694.145689][T14131] should_fail_ex.cold+0x5/0xa [ 694.145719][T14131] ? tomoyo_realpath_from_path+0xb6/0x690 [ 694.145836][T14131] should_failslab+0xc2/0x120 [ 694.145866][T14131] __kmalloc_noprof+0xe0/0x850 [ 694.145910][T14131] ? kfree+0x1dd/0x6c0 [ 694.145948][T14131] tomoyo_realpath_from_path+0xb6/0x690 [ 694.145990][T14131] tomoyo_path_number_perm+0x23c/0x580 [ 694.146019][T14131] ? tomoyo_path_number_perm+0x22e/0x580 [ 694.146050][T14131] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 694.146108][T14131] ? find_held_lock+0x2b/0x80 [ 694.146139][T14131] ? __fget_files+0x215/0x3d0 [ 694.146166][T14131] ? hook_file_ioctl_common+0x149/0x410 [ 694.146196][T14131] ? __fget_files+0x215/0x3d0 [ 694.146229][T14131] ? __fget_files+0x21f/0x3d0 [ 694.146261][T14131] security_file_ioctl+0xd3/0x230 [ 694.146293][T14131] __x64_sys_ioctl+0xb7/0x210 [ 694.146319][T14131] do_syscall_64+0x115/0x840 [ 694.146353][T14131] ? clear_bhb_loop+0x40/0x90 [ 694.146382][T14131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.146406][T14131] RIP: 0033:0x7f35f759ce59 [ 694.146426][T14131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.146449][T14131] RSP: 002b:00007f35f839e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 694.146473][T14131] RAX: ffffffffffffffda RBX: 00007f35f7815fa0 RCX: 00007f35f759ce59 [ 694.146496][T14131] RDX: 0000000000000000 RSI: 00000000c0686611 RDI: 0000000000000003 [ 694.146510][T14131] RBP: 00007f35f839e090 R08: 0000000000000000 R09: 0000000000000000 [ 694.146525][T14131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.146540][T14131] R13: 00007f35f7816038 R14: 00007f35f7815fa0 R15: 00007ffec42e7fe8 [ 694.146570][T14131] [ 694.146580][T14131] ERROR: Out of memory at tomoyo_realpath_from_path. [ 694.435077][T14062] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 694.489524][T14062] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 694.504132][T13990] veth1_macvtap: entered promiscuous mode [ 694.521218][T14062] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 694.535194][T14062] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 694.549774][T14062] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 694.570402][T14062] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 694.606542][T13990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.634232][T14062] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 694.652128][T14062] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 694.683607][T13990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.765741][T11787] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.778620][T11787] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.819430][T11787] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.853918][T11787] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 695.088098][T11048] Bluetooth: hci8: command tx timeout [ 695.190278][ T6366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.224280][ T6366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.345504][ T9301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.361567][T14006] veth0_vlan: entered promiscuous mode [ 695.368514][ T9301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.404571][T14006] veth1_vlan: entered promiscuous mode [ 695.450321][T14062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 695.556768][T14062] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.595750][ T9301] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.603008][ T9301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.634137][T14006] veth0_macvtap: entered promiscuous mode [ 695.688685][T14006] veth1_macvtap: entered promiscuous mode [ 695.749704][ T9301] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.758492][ T9301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.924782][T14006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.960607][T14006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.005925][T11792] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.006018][T11792] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.006058][T11792] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.006096][T11792] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.430547][T11786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.430573][T11786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 696.621480][ T9301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 696.686684][ T9301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 697.169648][T11048] Bluetooth: hci8: command tx timeout [ 698.222896][T14161] Process accounting resumed [ 698.267581][T14062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.334114][T14180] random: crng reseeded on system resumption [ 699.461009][T14062] veth0_vlan: entered promiscuous mode [ 699.512202][T14062] veth1_vlan: entered promiscuous mode [ 699.643551][T14062] veth0_macvtap: entered promiscuous mode [ 699.694229][T14062] veth1_macvtap: entered promiscuous mode [ 699.778963][T14062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.863612][T14062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 699.895248][T14203] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 699.926109][T11792] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.963683][T11792] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.020683][T11792] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.055589][T11792] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.329228][T11787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.386584][T11787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.493679][T11787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 700.537819][T11787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.755839][T14221] FAULT_INJECTION: forcing a failure. [ 702.755839][T14221] name failslab, interval 1, probability 0, space 0, times 0 [ 702.800500][T14221] CPU: 0 UID: 0 PID: 14221 Comm: syz.7.1593 Tainted: G L syzkaller #0 PREEMPT(full) [ 702.800540][T14221] Tainted: [L]=SOFTLOCKUP [ 702.800549][T14221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 702.800564][T14221] Call Trace: [ 702.800572][T14221] [ 702.800582][T14221] dump_stack_lvl+0x100/0x190 [ 702.800629][T14221] should_fail_ex.cold+0x5/0xa [ 702.800661][T14221] should_failslab+0xc2/0x120 [ 702.800692][T14221] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 702.800731][T14221] ? security_file_alloc+0x34/0x2c0 [ 702.800765][T14221] ? trace_kmem_cache_alloc+0xd5/0x100 [ 702.800800][T14221] security_file_alloc+0x34/0x2c0 [ 702.800833][T14221] init_file+0x95/0x480 [ 702.800869][T14221] alloc_empty_file+0x79/0x1c0 [ 702.800907][T14221] path_openat+0xe8/0x31a0 [ 702.800937][T14221] ? kasan_save_stack+0x3f/0x50 [ 702.800960][T14221] ? kasan_save_stack+0x30/0x50 [ 702.800984][T14221] ? kasan_save_track+0x14/0x30 [ 702.801007][T14221] ? __kasan_slab_alloc+0x89/0x90 [ 702.801032][T14221] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 702.801080][T14221] ? do_getname+0x35/0x390 [ 702.801115][T14221] ? do_sys_openat2+0xc5/0x1e0 [ 702.801153][T14221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.801184][T14221] ? __pfx_path_openat+0x10/0x10 [ 702.801226][T14221] do_file_open+0x20e/0x430 [ 702.801260][T14221] ? __pfx_do_file_open+0x10/0x10 [ 702.801313][T14221] ? alloc_fd+0x476/0x790 [ 702.801345][T14221] ? do_getname+0x191/0x390 [ 702.801385][T14221] do_sys_openat2+0x10d/0x1e0 [ 702.801424][T14221] ? __pfx_do_sys_openat2+0x10/0x10 [ 702.801473][T14221] __x64_sys_openat+0x12d/0x210 [ 702.801513][T14221] ? __pfx___x64_sys_openat+0x10/0x10 [ 702.801560][T14221] ? rcu_is_watching+0x12/0xc0 [ 702.801592][T14221] do_syscall_64+0x115/0x840 [ 702.801628][T14221] ? clear_bhb_loop+0x40/0x90 [ 702.801658][T14221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.801684][T14221] RIP: 0033:0x7f54f635d68e [ 702.801704][T14221] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 702.801730][T14221] RSP: 002b:00007f54f725cec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 702.801754][T14221] RAX: ffffffffffffffda RBX: 00007f54f725d6c0 RCX: 00007f54f635d68e [ 702.801770][T14221] RDX: 0000000000000002 RSI: 00007f54f725cf90 RDI: ffffffffffffff9c [ 702.801786][T14221] RBP: 00007f54f6432d6f R08: 0000000000000000 R09: 0000000000000000 [ 702.801802][T14221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 702.801817][T14221] R13: 00007f54f6616038 R14: 00007f54f6615fa0 R15: 00007ffc4d7f1958 [ 702.801848][T14221] [ 703.075758][T14221] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 703.273204][T14235] bond0: invalid ARP target specified [ 703.344812][T14236] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1596'. [ 704.145880][T14235] nbd: socks must be embedded in a SOCK_ITEM attr [ 704.195395][T14235] block nbd0: shutting down sockets [ 706.074765][T14258] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1600'. [ 706.114580][T14258] unsupported nlmsg_type 40 [ 712.479395][ T6177] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 712.501844][ T6177] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 712.513650][ T6177] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 712.524958][ T6177] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 712.539378][ T6177] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 713.230466][T14291] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.237896][T14291] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.245228][T14291] bridge_slave_0: entered allmulticast mode [ 713.254475][T14291] bridge_slave_0: entered promiscuous mode [ 713.269495][T14291] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.276715][T14291] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.286474][T14291] bridge_slave_1: entered allmulticast mode [ 713.294465][T14291] bridge_slave_1: entered promiscuous mode [ 713.337929][T14291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.350737][T14291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.391957][T14291] team0: Port device team_slave_0 added [ 713.400503][T14291] team0: Port device team_slave_1 added [ 713.440845][T14291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.448093][T14291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.478579][T14291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.494349][T14291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.502680][T14291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.532826][T14291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.591276][T14291] hsr_slave_0: entered promiscuous mode [ 713.600626][T14291] hsr_slave_1: entered promiscuous mode [ 713.608577][T14291] debugfs: 'hsr0' already exists in 'hsr' [ 713.614405][T14291] Cannot create hsr debugfs directory [ 714.610671][ T6177] Bluetooth: hci9: command tx timeout [ 714.965803][T14291] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 714.999791][T14291] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 715.029532][T14291] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 715.049843][T14291] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 715.072207][T14291] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 715.111501][T14291] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 715.130391][T14291] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 715.156244][T14291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 715.382133][T14291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.448411][T14291] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.485502][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.492754][ T6366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.535235][ T6366] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.542443][ T6366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 716.405220][T11048] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 716.424688][T11048] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 716.440668][T11048] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 716.453225][T11048] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 716.469365][T11048] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 716.688581][T11048] Bluetooth: hci9: command tx timeout [ 717.142793][T14291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 717.334851][T14291] veth0_vlan: entered promiscuous mode [ 717.384996][T14291] veth1_vlan: entered promiscuous mode [ 717.530759][T14291] veth0_macvtap: entered promiscuous mode [ 717.576248][T14291] veth1_macvtap: entered promiscuous mode [ 717.651804][T14291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.703511][T14291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.773062][ T9301] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.794365][ T9301] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.834296][ T9301] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.858776][ T9301] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.225414][T11792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.268063][T11792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.412480][T11786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.441822][T11786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.530408][T11048] Bluetooth: hci10: command tx timeout [ 718.767398][T11048] Bluetooth: hci9: command tx timeout [ 719.015231][T14356] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.046728][T14356] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.077976][T14356] bridge_slave_0: entered allmulticast mode [ 719.103674][T14356] bridge_slave_0: entered promiscuous mode [ 719.132523][T14356] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.154809][T14356] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.183633][T14356] bridge_slave_1: entered allmulticast mode [ 719.211558][T14356] bridge_slave_1: entered promiscuous mode [ 719.349864][T14356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.402851][T14356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.555879][T14356] team0: Port device team_slave_0 added [ 719.589745][T14356] team0: Port device team_slave_1 added [ 719.730869][T14356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.760961][T14356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.865272][T14356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.924352][T14356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.952716][T14356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.054811][T14356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.253171][T14356] hsr_slave_0: entered promiscuous mode [ 720.281981][T14356] hsr_slave_1: entered promiscuous mode [ 720.305670][T14356] debugfs: 'hsr0' already exists in 'hsr' [ 720.325507][T14356] Cannot create hsr debugfs directory [ 720.446080][T14421] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 720.607906][T11048] Bluetooth: hci10: command tx timeout [ 720.848250][T11048] Bluetooth: hci9: command tx timeout [ 721.651887][T14356] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.086613][T14356] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.362360][T14356] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.687882][T11048] Bluetooth: hci10: command tx timeout [ 723.072249][ T6177] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 723.083588][ T6177] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 723.099785][ T6177] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 723.119210][ T6177] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 723.128697][ T6177] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 723.786715][T14356] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 723.846210][T14356] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 723.893131][T14356] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 723.923995][T14356] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 723.950261][T14356] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 724.004228][T14356] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 724.037499][T14356] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 724.094350][T14356] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 724.767576][ T6177] Bluetooth: hci10: command tx timeout [ 725.003586][T14356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.247516][ T6177] Bluetooth: hci11: command tx timeout [ 725.341125][T14356] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.442288][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.449547][ T6366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.498551][T11048] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 725.515145][T11048] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 725.527386][T11048] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 725.554183][T11048] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 725.563533][ T6567] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 725.719570][T14499] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 725.783670][ T6366] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.790911][ T6366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.841559][T14499] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 725.983439][T14502] smpboot: CPU 1 is now offline [ 726.035221][T14502] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 727.329364][ T6567] Bluetooth: hci11: command tx timeout [ 727.648887][ T6567] Bluetooth: hci12: command tx timeout [ 728.179217][T14452] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.206066][T14452] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.245065][T14452] bridge_slave_0: entered allmulticast mode [ 728.270375][T14452] bridge_slave_0: entered promiscuous mode [ 728.398636][T14452] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.437155][T14452] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.465509][T14452] bridge_slave_1: entered allmulticast mode [ 728.500983][T14452] bridge_slave_1: entered promiscuous mode [ 728.808350][T14553] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 728.921190][T14452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.981244][T14452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.384919][T14452] team0: Port device team_slave_0 added [ 729.414481][ T6567] Bluetooth: hci11: command tx timeout [ 729.443228][T14452] team0: Port device team_slave_1 added [ 729.728219][ T6567] Bluetooth: hci12: command tx timeout [ 729.761752][T14494] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.786654][T14494] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.815316][T14494] bridge_slave_0: entered allmulticast mode [ 729.833237][T14494] bridge_slave_0: entered promiscuous mode [ 729.852375][T14452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.880102][T14452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.979782][T14452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 730.169061][T14494] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.227663][T14494] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.241354][T14494] bridge_slave_1: entered allmulticast mode [ 730.293538][T14494] bridge_slave_1: entered promiscuous mode [ 730.350380][T14356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.381946][T14452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 730.399906][T14452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.509667][T14452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 730.908765][T14494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.002979][T14452] hsr_slave_0: entered promiscuous mode [ 731.032742][T14452] hsr_slave_1: entered promiscuous mode [ 731.059687][T14452] debugfs: 'hsr0' already exists in 'hsr' [ 731.088608][T14452] Cannot create hsr debugfs directory [ 731.110571][T14494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.305564][T14494] team0: Port device team_slave_0 added [ 731.345762][T14494] team0: Port device team_slave_1 added [ 731.487663][ T6567] Bluetooth: hci11: command tx timeout [ 731.620820][T14494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.643824][T14494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.734268][T14494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.808429][ T6567] Bluetooth: hci12: command tx timeout [ 731.866388][T14494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.901854][T14494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.004612][T14494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.446512][T14494] hsr_slave_0: entered promiscuous mode [ 732.471725][T14494] hsr_slave_1: entered promiscuous mode [ 732.489903][T14494] debugfs: 'hsr0' already exists in 'hsr' [ 732.508196][T14494] Cannot create hsr debugfs directory [ 732.562309][T14356] veth0_vlan: entered promiscuous mode [ 732.759455][T14356] veth1_vlan: entered promiscuous mode [ 733.039818][T14452] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.462975][T14356] veth0_macvtap: entered promiscuous mode [ 733.503413][T14610] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 733.665936][T14452] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.781340][T14356] veth1_macvtap: entered promiscuous mode [ 733.888279][ T6567] Bluetooth: hci12: command tx timeout [ 733.999664][T14452] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.186545][T14452] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.346177][T14356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.456678][T14356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.536610][ T9301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.564873][ T9301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.599482][ T9301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.643351][ T9301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.810030][T14622] FAULT_INJECTION: forcing a failure. [ 734.810030][T14622] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 734.858146][T14622] CPU: 0 UID: 0 PID: 14622 Comm: syz.1.1621 Tainted: G L syzkaller #0 PREEMPT(full) [ 734.858185][T14622] Tainted: [L]=SOFTLOCKUP [ 734.858199][T14622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 734.858215][T14622] Call Trace: [ 734.858223][T14622] [ 734.858232][T14622] dump_stack_lvl+0x100/0x190 [ 734.858283][T14622] should_fail_ex.cold+0x5/0xa [ 734.858311][T14622] ? prepare_alloc_pages+0x16d/0x5f0 [ 734.858347][T14622] should_fail_alloc_page+0xeb/0x140 [ 734.858379][T14622] prepare_alloc_pages+0x1f0/0x5f0 [ 734.858411][T14622] ? __pfx___css_rstat_updated+0x10/0x10 [ 734.858455][T14622] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 734.858529][T14622] ? rcu_is_watching+0x12/0xc0 [ 734.858560][T14622] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 734.858603][T14622] ? find_held_lock+0x2b/0x80 [ 734.858632][T14622] ? rcu_read_unlock+0x17/0x60 [ 734.858663][T14622] ? rcu_read_unlock+0x17/0x60 [ 734.858695][T14622] ? __mod_zone_page_state+0xe2/0x190 [ 734.858734][T14622] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 734.858776][T14622] ? lru_gen_add_folio+0x20f/0x13d0 [ 734.858807][T14622] ? folios_put_refs+0x716/0xa90 [ 734.858834][T14622] ? __pfx_folios_put_refs+0x10/0x10 [ 734.858859][T14622] ? find_held_lock+0x2b/0x80 [ 734.858888][T14622] ? folio_batch_move_lru+0x32b/0x7d0 [ 734.858912][T14622] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 734.858948][T14622] ? policy_nodemask+0xed/0x4f0 [ 734.858980][T14622] alloc_pages_mpol+0x1fb/0x540 [ 734.859011][T14622] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 734.859040][T14622] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 734.859065][T14622] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 734.859120][T14622] folio_alloc_mpol_noprof+0x36/0x260 [ 734.859163][T14622] shmem_alloc_folio+0x135/0x160 [ 734.859199][T14622] shmem_alloc_and_add_folio+0x371/0xd40 [ 734.859247][T14622] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 734.859291][T14622] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 734.859348][T14622] shmem_get_folio_gfp+0x6ab/0x1900 [ 734.859379][T14622] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 734.859414][T14622] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 734.859441][T14622] ? lockdep_hardirqs_on+0x78/0x100 [ 734.859481][T14622] shmem_fault+0x1f9/0xa20 [ 734.859508][T14622] ? __lock_acquire+0x4a5/0x2630 [ 734.859547][T14622] ? __pfx_shmem_fault+0x10/0x10 [ 734.859571][T14622] ? __up_read+0x2c1/0x6e0 [ 734.859612][T14622] ? __pfx_filemap_map_pages+0x10/0x10 [ 734.859654][T14622] __do_fault+0x10b/0x440 [ 734.859677][T14622] ? find_held_lock+0x2b/0x80 [ 734.859712][T14622] do_fault+0x2db/0x1750 [ 734.859755][T14622] __handle_mm_fault+0x187d/0x2a00 [ 734.859795][T14622] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 734.859829][T14622] ? __pfx___handle_mm_fault+0x10/0x10 [ 734.859868][T14622] ? pte_offset_map_lock+0x174/0x320 [ 734.859897][T14622] ? find_held_lock+0x2b/0x80 [ 734.859939][T14622] ? follow_page_pte+0x4d0/0x13f0 [ 734.859974][T14622] handle_mm_fault+0x37b/0xa30 [ 734.860016][T14622] __get_user_pages+0x1178/0x32a0 [ 734.860061][T14622] ? down_read_killable+0x307/0x4b0 [ 734.860091][T14622] ? __pfx___get_user_pages+0x10/0x10 [ 734.860130][T14622] faultin_page_range+0x1f1/0x9e0 [ 734.860172][T14622] madvise_do_behavior+0x354/0x510 [ 734.860210][T14622] ? __pfx_madvise_do_behavior+0x10/0x10 [ 734.860265][T14622] do_madvise+0x195/0x240 [ 734.860302][T14622] ? __pfx_do_madvise+0x10/0x10 [ 734.860334][T14622] ? do_futex+0x192/0x350 [ 734.860389][T14622] __x64_sys_madvise+0xa9/0x110 [ 734.860422][T14622] ? lockdep_hardirqs_on+0x78/0x100 [ 734.860457][T14622] do_syscall_64+0x115/0x840 [ 734.860492][T14622] ? clear_bhb_loop+0x40/0x90 [ 734.860527][T14622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.860553][T14622] RIP: 0033:0x7fe79d19ce59 [ 734.860573][T14622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.860598][T14622] RSP: 002b:00007fe79e063028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 734.860624][T14622] RAX: ffffffffffffffda RBX: 00007fe79d415fa0 RCX: 00007fe79d19ce59 [ 734.860640][T14622] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 734.860656][T14622] RBP: 00007fe79d232d6f R08: 0000000000000000 R09: 0000000000000000 [ 734.860671][T14622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 734.860686][T14622] R13: 00007fe79d416038 R14: 00007fe79d415fa0 R15: 00007ffe3adf8438 [ 734.860719][T14622] [ 736.135815][ T6366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.159034][ T6366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.411747][T14494] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.533498][T14452] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 736.574736][T14452] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 736.602378][T14452] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 736.634112][T14452] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 736.660893][T11793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.675765][T11793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.765482][T14494] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.833924][T14452] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 736.864642][T14452] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 736.967565][T14494] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.035540][T14452] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 737.100104][T14452] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 737.219180][T14494] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.723962][T14452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.050852][T14647] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 738.100587][T14452] 8021q: adding VLAN 0 to HW filter on device team0 [ 738.133738][T14647] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 738.270112][T14652] smpboot: CPU 1 is now offline [ 738.278555][T11785] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.285762][T11785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.366329][T14652] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 738.512463][T11786] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.519712][T11786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.730287][T14494] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 738.770171][T14494] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 738.804145][T14494] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 738.841452][T14494] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 738.902341][T14494] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 738.954046][T14494] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 738.994242][T14494] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 739.046587][T14494] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 739.789935][T14494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.895427][T14494] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.953134][T11786] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.960394][T11786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.046424][ T6366] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.053629][ T6366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.479091][T14681] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1628'. [ 740.574817][T14681] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1628'. [ 740.661920][T14673] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 741.609438][T14452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.901658][ T30] audit: type=1800 audit(1780321610.229:25): pid=14704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1629" name="dbroot" dev="configfs" ino=58846 res=0 errno=0 [ 742.609180][T14494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.699249][T14452] veth0_vlan: entered promiscuous mode [ 742.812874][T14452] veth1_vlan: entered promiscuous mode [ 742.943407][T14494] veth0_vlan: entered promiscuous mode [ 743.015799][T14494] veth1_vlan: entered promiscuous mode [ 743.048813][T14452] veth0_macvtap: entered promiscuous mode [ 743.109572][T14452] veth1_macvtap: entered promiscuous mode [ 743.239626][T14722] FAULT_INJECTION: forcing a failure. [ 743.239626][T14722] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 743.305005][T14452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.350333][T14494] veth0_macvtap: entered promiscuous mode [ 743.358450][T14722] CPU: 0 UID: 0 PID: 14722 Comm: syz.1.1633 Tainted: G L syzkaller #0 PREEMPT(full) [ 743.358496][T14722] Tainted: [L]=SOFTLOCKUP [ 743.358505][T14722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 743.358520][T14722] Call Trace: [ 743.358529][T14722] [ 743.358539][T14722] dump_stack_lvl+0x100/0x190 [ 743.358586][T14722] should_fail_ex.cold+0x5/0xa [ 743.358612][T14722] ? prepare_alloc_pages+0x16d/0x5f0 [ 743.358646][T14722] should_fail_alloc_page+0xeb/0x140 [ 743.358678][T14722] prepare_alloc_pages+0x1f0/0x5f0 [ 743.358714][T14722] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 743.358761][T14722] ? __lock_acquire+0x4a5/0x2630 [ 743.358804][T14722] ? __lock_acquire+0x4a5/0x2630 [ 743.358841][T14722] ? __css_rstat_updated+0x1ce/0x5a0 [ 743.358881][T14722] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 743.358925][T14722] ? do_raw_spin_lock+0x128/0x260 [ 743.358952][T14722] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 743.358979][T14722] ? find_held_lock+0x2b/0x80 [ 743.359020][T14722] ? __lock_acquire+0x4a5/0x2630 [ 743.359058][T14722] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 743.359094][T14722] ? policy_nodemask+0xed/0x4f0 [ 743.359126][T14722] alloc_pages_mpol+0x1fb/0x540 [ 743.359156][T14722] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 743.359186][T14722] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 743.359211][T14722] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 743.359241][T14722] folio_alloc_mpol_noprof+0x36/0x260 [ 743.359277][T14722] shmem_alloc_folio+0x135/0x160 [ 743.359314][T14722] shmem_alloc_and_add_folio+0x371/0xd40 [ 743.359361][T14722] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 743.359405][T14722] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 743.359436][T14722] shmem_get_folio_gfp+0x6ab/0x1900 [ 743.359472][T14722] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 743.359497][T14722] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 743.359522][T14722] ? lockdep_hardirqs_on+0x78/0x100 [ 743.359562][T14722] shmem_fault+0x1f9/0xa20 [ 743.359585][T14722] ? __lock_acquire+0x4a5/0x2630 [ 743.359623][T14722] ? __pfx_shmem_fault+0x10/0x10 [ 743.359647][T14722] ? __up_read+0x2c1/0x6e0 [ 743.359684][T14722] ? __pfx_filemap_map_pages+0x10/0x10 [ 743.359723][T14722] __do_fault+0x10b/0x440 [ 743.359747][T14722] ? find_held_lock+0x2b/0x80 [ 743.359778][T14722] do_fault+0x2db/0x1750 [ 743.359814][T14722] __handle_mm_fault+0x187d/0x2a00 [ 743.359854][T14722] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 743.359885][T14722] ? __pfx___handle_mm_fault+0x10/0x10 [ 743.359924][T14722] ? pte_offset_map_lock+0x174/0x320 [ 743.359952][T14722] ? find_held_lock+0x2b/0x80 [ 743.359991][T14722] ? follow_page_pte+0x4d0/0x13f0 [ 743.360026][T14722] handle_mm_fault+0x37b/0xa30 [ 743.360068][T14722] __get_user_pages+0x1178/0x32a0 [ 743.360105][T14722] ? down_read_killable+0x307/0x4b0 [ 743.360131][T14722] ? __pfx___get_user_pages+0x10/0x10 [ 743.360169][T14722] faultin_page_range+0x1f1/0x9e0 [ 743.360207][T14722] madvise_do_behavior+0x354/0x510 [ 743.360243][T14722] ? __pfx_madvise_do_behavior+0x10/0x10 [ 743.360292][T14722] do_madvise+0x195/0x240 [ 743.360323][T14722] ? __pfx_do_madvise+0x10/0x10 [ 743.360355][T14722] ? do_futex+0x192/0x350 [ 743.360406][T14722] __x64_sys_madvise+0xa9/0x110 [ 743.360438][T14722] ? lockdep_hardirqs_on+0x78/0x100 [ 743.360478][T14722] do_syscall_64+0x115/0x840 [ 743.360513][T14722] ? clear_bhb_loop+0x40/0x90 [ 743.360542][T14722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.360568][T14722] RIP: 0033:0x7fe79d19ce59 [ 743.360587][T14722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.360611][T14722] RSP: 002b:00007fe79e063028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 743.360633][T14722] RAX: ffffffffffffffda RBX: 00007fe79d415fa0 RCX: 00007fe79d19ce59 [ 743.360649][T14722] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 743.360665][T14722] RBP: 00007fe79d232d6f R08: 0000000000000000 R09: 0000000000000000 [ 743.360679][T14722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 743.360694][T14722] R13: 00007fe79d416038 R14: 00007fe79d415fa0 R15: 00007ffe3adf8438 [ 743.360724][T14722] [ 744.318660][T14452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 744.340119][T14494] veth1_macvtap: entered promiscuous mode [ 744.374849][ T9301] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.385543][ T9301] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.507107][ T9301] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.536808][ T9301] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.879069][T14494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 745.095217][T14494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 745.367794][T11791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.393955][T11791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 745.443108][ T6366] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.468266][ T6366] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.539549][ T6366] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.607242][ T6366] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.669461][T11792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 745.718712][T11792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.335594][T11791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.413007][T11791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.738513][T11785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.796761][T11785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.828812][T14748] FAULT_INJECTION: forcing a failure. [ 746.828812][T14748] name failslab, interval 1, probability 0, space 0, times 0 [ 746.900605][T14748] CPU: 0 UID: 0 PID: 14748 Comm: syz.4.1613 Tainted: G L syzkaller #0 PREEMPT(full) [ 746.900644][T14748] Tainted: [L]=SOFTLOCKUP [ 746.900654][T14748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 746.900669][T14748] Call Trace: [ 746.900679][T14748] [ 746.900688][T14748] dump_stack_lvl+0x100/0x190 [ 746.900737][T14748] should_fail_ex.cold+0x5/0xa [ 746.900768][T14748] should_failslab+0xc2/0x120 [ 746.900799][T14748] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 746.900840][T14748] ? security_file_alloc+0x34/0x2c0 [ 746.900875][T14748] ? trace_kmem_cache_alloc+0xd5/0x100 [ 746.900910][T14748] security_file_alloc+0x34/0x2c0 [ 746.900943][T14748] init_file+0x95/0x480 [ 746.900979][T14748] alloc_empty_file+0x79/0x1c0 [ 746.901018][T14748] path_openat+0xe8/0x31a0 [ 746.901048][T14748] ? kasan_save_stack+0x3f/0x50 [ 746.901072][T14748] ? kasan_save_stack+0x30/0x50 [ 746.901095][T14748] ? kasan_save_track+0x14/0x30 [ 746.901118][T14748] ? __kasan_slab_alloc+0x89/0x90 [ 746.901151][T14748] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 746.901191][T14748] ? do_getname+0x35/0x390 [ 746.901226][T14748] ? do_sys_openat2+0xc5/0x1e0 [ 746.901264][T14748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.901294][T14748] ? __pfx_path_openat+0x10/0x10 [ 746.901337][T14748] do_file_open+0x20e/0x430 [ 746.901371][T14748] ? __pfx_do_file_open+0x10/0x10 [ 746.901422][T14748] ? alloc_fd+0x476/0x790 [ 746.901458][T14748] ? do_getname+0x191/0x390 [ 746.901497][T14748] do_sys_openat2+0x10d/0x1e0 [ 746.901536][T14748] ? __pfx_do_sys_openat2+0x10/0x10 [ 746.901586][T14748] __x64_sys_openat+0x12d/0x210 [ 746.901626][T14748] ? __pfx___x64_sys_openat+0x10/0x10 [ 746.901671][T14748] ? rcu_is_watching+0x12/0xc0 [ 746.901703][T14748] do_syscall_64+0x115/0x840 [ 746.901741][T14748] ? clear_bhb_loop+0x40/0x90 [ 746.901771][T14748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.901797][T14748] RIP: 0033:0x7f995ad5d68e [ 746.901818][T14748] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 746.901843][T14748] RSP: 002b:00007f9958fedec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 746.901867][T14748] RAX: ffffffffffffffda RBX: 00007f9958fee6c0 RCX: 00007f995ad5d68e [ 746.901884][T14748] RDX: 0000000000000002 RSI: 00007f9958fedf90 RDI: ffffffffffffff9c [ 746.901900][T14748] RBP: 00007f995ae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 746.901915][T14748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 746.901930][T14748] R13: 00007f995b016038 R14: 00007f995b015fa0 R15: 00007fffca9a4298 [ 746.901961][T14748] [ 747.517434][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.531176][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.829306][T14756] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 747.862304][T14756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1639'. [ 748.404943][T14759] FAULT_INJECTION: forcing a failure. [ 748.404943][T14759] name failslab, interval 1, probability 0, space 0, times 0 [ 748.422386][T14769] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 748.471552][T14759] CPU: 0 UID: 0 PID: 14759 Comm: syz.0.1640 Tainted: G L syzkaller #0 PREEMPT(full) [ 748.471592][T14759] Tainted: [L]=SOFTLOCKUP [ 748.471601][T14759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 748.471616][T14759] Call Trace: [ 748.471625][T14759] [ 748.471634][T14759] dump_stack_lvl+0x100/0x190 [ 748.471687][T14759] should_fail_ex.cold+0x5/0xa [ 748.471719][T14759] should_failslab+0xc2/0x120 [ 748.471750][T14759] __kmalloc_cache_node_noprof+0x7d/0x770 [ 748.471778][T14759] ? alloc_shrinker_info+0x192/0x470 [ 748.471811][T14759] alloc_shrinker_info+0x192/0x470 [ 748.471843][T14759] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 748.471886][T14759] mem_cgroup_css_online+0xa4/0xbf0 [ 748.471930][T14759] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 748.471972][T14759] online_css+0xb2/0x350 [ 748.472008][T14759] cgroup_apply_control_enable+0xa8d/0xdd0 [ 748.472053][T14759] cgroup_mkdir+0x59c/0x1310 [ 748.472093][T14759] ? __pfx_cgroup_mkdir+0x10/0x10 [ 748.472154][T14759] kernfs_iop_mkdir+0x111/0x190 [ 748.472186][T14759] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 748.472225][T14759] vfs_mkdir+0x361/0x850 [ 748.472269][T14759] filename_mkdirat+0x48b/0x5e0 [ 748.472306][T14759] ? __pfx_filename_mkdirat+0x10/0x10 [ 748.472340][T14759] ? strncpy_from_user+0x19d/0x2d0 [ 748.472460][T14759] ? do_getname+0x191/0x390 [ 748.472499][T14759] __x64_sys_mkdir+0x6b/0x90 [ 748.472534][T14759] do_syscall_64+0x115/0x840 [ 748.472570][T14759] ? clear_bhb_loop+0x40/0x90 [ 748.472601][T14759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.472627][T14759] RIP: 0033:0x7ff79ad9ce59 [ 748.472648][T14759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.472673][T14759] RSP: 002b:00007ff79bc29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 748.472697][T14759] RAX: ffffffffffffffda RBX: 00007ff79b015fa0 RCX: 00007ff79ad9ce59 [ 748.472714][T14759] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 748.472730][T14759] RBP: 00007ff79ae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 748.472745][T14759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.472760][T14759] R13: 00007ff79b016038 R14: 00007ff79b015fa0 R15: 00007ffc198b2ea8 [ 748.472792][T14759] [ 750.171568][T14791] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 750.253564][T14791] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 750.422915][T14789] smpboot: CPU 1 is now offline [ 750.442600][T14790] FAULT_INJECTION: forcing a failure. [ 750.442600][T14790] name failslab, interval 1, probability 0, space 0, times 0 [ 750.500544][T14789] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 750.592338][T14790] CPU: 0 UID: 0 PID: 14790 Comm: syz.2.1645 Tainted: G L syzkaller #0 PREEMPT(full) [ 750.592379][T14790] Tainted: [L]=SOFTLOCKUP [ 750.592389][T14790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 750.592404][T14790] Call Trace: [ 750.592413][T14790] [ 750.592422][T14790] dump_stack_lvl+0x100/0x190 [ 750.592470][T14790] should_fail_ex.cold+0x5/0xa [ 750.592502][T14790] should_failslab+0xc2/0x120 [ 750.592532][T14790] __kmalloc_cache_noprof+0x7a/0x6f0 [ 750.592569][T14790] ? dm_open+0x6b/0x150 [ 750.592715][T14790] dm_open+0x6b/0x150 [ 750.592749][T14790] ? __pfx_dm_open+0x10/0x10 [ 750.592782][T14790] misc_open+0x26d/0x450 [ 750.592817][T14790] ? __pfx_misc_open+0x10/0x10 [ 750.592842][T14790] chrdev_open+0x234/0x6a0 [ 750.592874][T14790] ? __pfx_apparmor_file_open+0x10/0x10 [ 750.592904][T14790] ? __pfx_chrdev_open+0x10/0x10 [ 750.592937][T14790] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 750.592977][T14790] do_dentry_open+0x6ab/0x14d0 [ 750.593008][T14790] ? __pfx_chrdev_open+0x10/0x10 [ 750.593046][T14790] vfs_open+0x82/0x3f0 [ 750.593086][T14790] path_openat+0x208c/0x31a0 [ 750.593128][T14790] ? __pfx_path_openat+0x10/0x10 [ 750.593170][T14790] do_file_open+0x20e/0x430 [ 750.593206][T14790] ? __pfx_do_file_open+0x10/0x10 [ 750.593261][T14790] ? alloc_fd+0x476/0x790 [ 750.593293][T14790] ? do_getname+0x191/0x390 [ 750.593332][T14790] do_sys_openat2+0x10d/0x1e0 [ 750.593371][T14790] ? __pfx_do_sys_openat2+0x10/0x10 [ 750.593411][T14790] ? __fget_files+0x21f/0x3d0 [ 750.593446][T14790] __x64_sys_openat+0x12d/0x210 [ 750.593485][T14790] ? __pfx___x64_sys_openat+0x10/0x10 [ 750.593526][T14790] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 750.593564][T14790] ? syscall_user_dispatch+0x76/0x130 [ 750.593593][T14790] do_syscall_64+0x115/0x840 [ 750.593628][T14790] ? clear_bhb_loop+0x40/0x90 [ 750.593661][T14790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.593687][T14790] RIP: 0033:0x7fdef3f9ce59 [ 750.593707][T14790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.593731][T14790] RSP: 002b:00007fdef4dac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 750.593755][T14790] RAX: ffffffffffffffda RBX: 00007fdef4215fa0 RCX: 00007fdef3f9ce59 [ 750.593771][T14790] RDX: 0000000000001541 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 750.593787][T14790] RBP: 00007fdef4032d6f R08: 0000000000000000 R09: 0000000000000000 [ 750.593802][T14790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 750.593824][T14790] R13: 00007fdef4216038 R14: 00007fdef4215fa0 R15: 00007ffc4df44cf8 [ 750.593855][T14790] [ 754.002475][T14825] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b0dfda (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 754.018254][T14825] Call Trace: [ 754.021579][T14825] [ 754.024528][T14825] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 754.031234][T14825] mce_cpu_restart+0xd5/0x1f0 [ 754.035932][T14825] ? __pfx_mce_cpu_restart+0x10/0x10 [ 754.041268][T14825] smp_call_function_many_cond+0x13d4/0x1700 [ 754.047286][T14825] ? __pfx_mce_cpu_restart+0x10/0x10 [ 754.052594][T14825] ? mark_held_locks+0x40/0x70 [ 754.057392][T14825] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 754.063229][T14825] ? lockdep_hardirqs_on+0x78/0x100 [ 754.068473][T14825] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 754.074305][T14825] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 754.080666][T14825] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 754.086682][T14825] ? __timer_delete_sync+0x151/0x1c0 [ 754.091993][T14825] ? __pfx_mce_cpu_restart+0x10/0x10 [ 754.097297][T14825] on_each_cpu_cond_mask+0x40/0x90 [ 754.102442][T14825] set_bank+0x240/0x3a0 [ 754.106612][T14825] ? __pfx_set_bank+0x10/0x10 [ 754.111319][T14825] ? find_held_lock+0x2b/0x80 [ 754.116235][T14825] ? sysfs_file_kobj+0xe4/0x290 [ 754.121131][T14825] ? sysfs_file_kobj+0xe4/0x290 [ 754.126027][T14825] ? __pfx_set_bank+0x10/0x10 [ 754.130722][T14825] dev_attr_store+0x58/0x80 [ 754.135252][T14825] ? __pfx_dev_attr_store+0x10/0x10 [ 754.140507][T14825] sysfs_kf_write+0xf2/0x150 [ 754.145147][T14825] kernfs_fop_write_iter+0x3e0/0x5f0 [ 754.150460][T14825] ? __pfx_sysfs_kf_write+0x10/0x10 [ 754.155704][T14825] vfs_write+0x6ac/0x1070 [ 754.160059][T14825] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 754.165987][T14825] ? __pfx_vfs_write+0x10/0x10 [ 754.170967][T14825] ksys_write+0x12a/0x250 [ 754.175321][T14825] ? __pfx_ksys_write+0x10/0x10 [ 754.180196][T14825] ? rcu_is_watching+0x12/0xc0 [ 754.184995][T14825] do_syscall_64+0x115/0x840 [ 754.189616][T14825] ? clear_bhb_loop+0x40/0x90 [ 754.194335][T14825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.200275][T14825] RIP: 0033:0x7fdef3f9ce59 [ 754.204716][T14825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.224432][T14825] RSP: 002b:00007fdef4dac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 754.232881][T14825] RAX: ffffffffffffffda RBX: 00007fdef4215fa0 RCX: 00007fdef3f9ce59 [ 754.240890][T14825] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 754.248878][T14825] RBP: 00007fdef4032d6f R08: 0000000000000000 R09: 0000000000000000 [ 754.256887][T14825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.264891][T14825] R13: 00007fdef4216038 R14: 00007fdef4215fa0 R15: 00007ffc4df44cf8 [ 754.272893][T14825] [ 754.876358][T14830] block nbd0: NBD_DISCONNECT [ 754.945937][T14830] sysfs_service_op_show: Client not running :-5: [ 755.001789][T14832] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 761.224475][T14914] udc dummy_udc.0: soft-connect without a gadget driver [ 762.157178][T14926] random: crng reseeded on system resumption [ 762.924934][T14929] FAULT_INJECTION: forcing a failure. [ 762.924934][T14929] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 763.080351][T14929] CPU: 0 UID: 0 PID: 14929 Comm: syz.1.1672 Tainted: G L syzkaller #0 PREEMPT(full) [ 763.080390][T14929] Tainted: [L]=SOFTLOCKUP [ 763.080399][T14929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 763.080414][T14929] Call Trace: [ 763.080422][T14929] [ 763.080431][T14929] dump_stack_lvl+0x100/0x190 [ 763.080482][T14929] should_fail_ex.cold+0x5/0xa [ 763.080509][T14929] ? prepare_alloc_pages+0x16d/0x5f0 [ 763.080542][T14929] should_fail_alloc_page+0xeb/0x140 [ 763.080574][T14929] prepare_alloc_pages+0x1f0/0x5f0 [ 763.080609][T14929] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 763.080649][T14929] ? __lock_acquire+0x3c1/0x2630 [ 763.080691][T14929] ? __lock_acquire+0x4a5/0x2630 [ 763.080732][T14929] ? __lock_acquire+0x4a5/0x2630 [ 763.080768][T14929] ? __css_rstat_updated+0x1ce/0x5a0 [ 763.080806][T14929] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 763.080850][T14929] ? do_raw_spin_lock+0x128/0x260 [ 763.080880][T14929] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 763.080906][T14929] ? find_held_lock+0x2b/0x80 [ 763.080944][T14929] ? __lock_acquire+0x4a5/0x2630 [ 763.080982][T14929] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 763.081018][T14929] ? policy_nodemask+0xed/0x4f0 [ 763.081051][T14929] alloc_pages_mpol+0x1fb/0x540 [ 763.081082][T14929] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 763.081111][T14929] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 763.081136][T14929] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 763.081166][T14929] folio_alloc_mpol_noprof+0x36/0x260 [ 763.081202][T14929] shmem_alloc_folio+0x135/0x160 [ 763.081245][T14929] shmem_alloc_and_add_folio+0x371/0xd40 [ 763.081293][T14929] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 763.081336][T14929] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 763.081371][T14929] shmem_get_folio_gfp+0x6ab/0x1900 [ 763.081401][T14929] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 763.081426][T14929] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 763.081451][T14929] ? lockdep_hardirqs_on+0x78/0x100 [ 763.081491][T14929] shmem_fault+0x1f9/0xa20 [ 763.081513][T14929] ? __lock_acquire+0x4a5/0x2630 [ 763.081551][T14929] ? __pfx_shmem_fault+0x10/0x10 [ 763.081575][T14929] ? __up_read+0x2c1/0x6e0 [ 763.081611][T14929] ? __pfx_filemap_map_pages+0x10/0x10 [ 763.081649][T14929] __do_fault+0x10b/0x440 [ 763.081673][T14929] ? find_held_lock+0x2b/0x80 [ 763.081704][T14929] do_fault+0x2db/0x1750 [ 763.081740][T14929] __handle_mm_fault+0x187d/0x2a00 [ 763.081780][T14929] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 763.081811][T14929] ? __pfx___handle_mm_fault+0x10/0x10 [ 763.081849][T14929] ? pte_offset_map_lock+0x174/0x320 [ 763.081878][T14929] ? find_held_lock+0x2b/0x80 [ 763.081916][T14929] ? follow_page_pte+0x4d0/0x13f0 [ 763.081951][T14929] handle_mm_fault+0x37b/0xa30 [ 763.081996][T14929] __get_user_pages+0x1178/0x32a0 [ 763.082034][T14929] ? down_read_killable+0x307/0x4b0 [ 763.082059][T14929] ? __pfx___get_user_pages+0x10/0x10 [ 763.082097][T14929] faultin_page_range+0x1f1/0x9e0 [ 763.082135][T14929] madvise_do_behavior+0x354/0x510 [ 763.082171][T14929] ? __pfx_madvise_do_behavior+0x10/0x10 [ 763.082225][T14929] do_madvise+0x195/0x240 [ 763.082257][T14929] ? __pfx_do_madvise+0x10/0x10 [ 763.082289][T14929] ? do_futex+0x192/0x350 [ 763.082340][T14929] __x64_sys_madvise+0xa9/0x110 [ 763.082372][T14929] ? lockdep_hardirqs_on+0x78/0x100 [ 763.082406][T14929] do_syscall_64+0x115/0x840 [ 763.082440][T14929] ? clear_bhb_loop+0x40/0x90 [ 763.082470][T14929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.082495][T14929] RIP: 0033:0x7fe79d19ce59 [ 763.082515][T14929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.082540][T14929] RSP: 002b:00007fe79e063028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 763.082563][T14929] RAX: ffffffffffffffda RBX: 00007fe79d415fa0 RCX: 00007fe79d19ce59 [ 763.082579][T14929] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 763.082594][T14929] RBP: 00007fe79d232d6f R08: 0000000000000000 R09: 0000000000000000 [ 763.082608][T14929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 763.082623][T14929] R13: 00007fe79d416038 R14: 00007fe79d415fa0 R15: 00007ffe3adf8438 [ 763.082653][T14929] [ 764.838168][ T6177] Bluetooth: hci4: command 0x0406 tx timeout [ 767.123471][T14979] FAULT_INJECTION: forcing a failure. [ 767.123471][T14979] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 767.212701][T14979] CPU: 0 UID: 0 PID: 14979 Comm: syz.2.1684 Tainted: G L syzkaller #0 PREEMPT(full) [ 767.212742][T14979] Tainted: [L]=SOFTLOCKUP [ 767.212751][T14979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 767.212767][T14979] Call Trace: [ 767.212775][T14979] [ 767.212785][T14979] dump_stack_lvl+0x100/0x190 [ 767.212834][T14979] should_fail_ex.cold+0x5/0xa [ 767.212868][T14979] ? prepare_alloc_pages+0x16d/0x5f0 [ 767.212903][T14979] should_fail_alloc_page+0xeb/0x140 [ 767.212936][T14979] prepare_alloc_pages+0x1f0/0x5f0 [ 767.212973][T14979] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 767.213021][T14979] ? __lock_acquire+0x4a5/0x2630 [ 767.213065][T14979] ? __lock_acquire+0x4a5/0x2630 [ 767.213102][T14979] ? __css_rstat_updated+0x1ce/0x5a0 [ 767.213142][T14979] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 767.213187][T14979] ? do_raw_spin_lock+0x128/0x260 [ 767.213218][T14979] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 767.213246][T14979] ? find_held_lock+0x2b/0x80 [ 767.213285][T14979] ? __lock_acquire+0x4a5/0x2630 [ 767.213324][T14979] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 767.213362][T14979] ? policy_nodemask+0xed/0x4f0 [ 767.213394][T14979] alloc_pages_mpol+0x1fb/0x540 [ 767.213426][T14979] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 767.213456][T14979] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 767.213488][T14979] folio_alloc_mpol_noprof+0x36/0x260 [ 767.213525][T14979] shmem_alloc_folio+0x135/0x160 [ 767.213562][T14979] shmem_alloc_and_add_folio+0x371/0xd40 [ 767.213611][T14979] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 767.213656][T14979] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 767.213688][T14979] shmem_get_folio_gfp+0x6ab/0x1900 [ 767.213719][T14979] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 767.213746][T14979] ? wake_up_q+0xae/0x130 [ 767.213781][T14979] shmem_fault+0x1f9/0xa20 [ 767.213804][T14979] ? __lock_acquire+0x4a5/0x2630 [ 767.213848][T14979] ? __pfx_shmem_fault+0x10/0x10 [ 767.213891][T14979] ? __up_read+0x2c1/0x6e0 [ 767.213929][T14979] ? __pfx_filemap_map_pages+0x10/0x10 [ 767.213969][T14979] __do_fault+0x10b/0x440 [ 767.213993][T14979] ? find_held_lock+0x2b/0x80 [ 767.214026][T14979] do_fault+0x2db/0x1750 [ 767.214063][T14979] __handle_mm_fault+0x187d/0x2a00 [ 767.214105][T14979] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 767.214136][T14979] ? __pfx___handle_mm_fault+0x10/0x10 [ 767.214177][T14979] ? pte_offset_map_lock+0x174/0x320 [ 767.214206][T14979] ? find_held_lock+0x2b/0x80 [ 767.214245][T14979] ? follow_page_pte+0x4d0/0x13f0 [ 767.214281][T14979] handle_mm_fault+0x37b/0xa30 [ 767.214324][T14979] __get_user_pages+0x1178/0x32a0 [ 767.214363][T14979] ? down_read_killable+0x307/0x4b0 [ 767.214389][T14979] ? __pfx___get_user_pages+0x10/0x10 [ 767.214428][T14979] faultin_page_range+0x1f1/0x9e0 [ 767.214467][T14979] madvise_do_behavior+0x354/0x510 [ 767.214504][T14979] ? __pfx_madvise_do_behavior+0x10/0x10 [ 767.214555][T14979] do_madvise+0x195/0x240 [ 767.214588][T14979] ? __pfx_do_madvise+0x10/0x10 [ 767.214620][T14979] ? do_futex+0x192/0x350 [ 767.214672][T14979] __x64_sys_madvise+0xa9/0x110 [ 767.214705][T14979] ? lockdep_hardirqs_on+0x78/0x100 [ 767.214741][T14979] do_syscall_64+0x115/0x840 [ 767.214775][T14979] ? clear_bhb_loop+0x40/0x90 [ 767.214806][T14979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.214832][T14979] RIP: 0033:0x7fdef3f9ce59 [ 767.214861][T14979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.214886][T14979] RSP: 002b:00007fdef4dac028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 767.214909][T14979] RAX: ffffffffffffffda RBX: 00007fdef4215fa0 RCX: 00007fdef3f9ce59 [ 767.214926][T14979] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 767.214942][T14979] RBP: 00007fdef4032d6f R08: 0000000000000000 R09: 0000000000000000 [ 767.214958][T14979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.214973][T14979] R13: 00007fdef4216038 R14: 00007fdef4215fa0 R15: 00007ffc4df44cf8 [ 767.215004][T14979] [ 767.701678][T14983] FAULT_INJECTION: forcing a failure. [ 767.701678][T14983] name failslab, interval 1, probability 0, space 0, times 0 [ 767.715420][T14983] CPU: 0 UID: 0 PID: 14983 Comm: syz.0.1685 Tainted: G L syzkaller #0 PREEMPT(full) [ 767.715460][T14983] Tainted: [L]=SOFTLOCKUP [ 767.715470][T14983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 767.715486][T14983] Call Trace: [ 767.715495][T14983] [ 767.715504][T14983] dump_stack_lvl+0x100/0x190 [ 767.715553][T14983] should_fail_ex.cold+0x5/0xa [ 767.715585][T14983] should_failslab+0xc2/0x120 [ 767.715616][T14983] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 767.715658][T14983] ? __d_alloc+0x34/0xa40 [ 767.715697][T14983] __d_alloc+0x34/0xa40 [ 767.715730][T14983] ? __pfx_stack_trace_save+0x10/0x10 [ 767.715767][T14983] d_alloc_parallel+0x111/0x14e0 [ 767.715795][T14983] ? kasan_save_stack+0x3f/0x50 [ 767.715819][T14983] ? kasan_save_stack+0x30/0x50 [ 767.715843][T14983] ? kasan_save_free_info+0x3b/0x70 [ 767.715879][T14983] ? link_path_walk+0x161f/0x1cc0 [ 767.715908][T14983] ? __pfx_d_alloc_parallel+0x10/0x10 [ 767.715937][T14983] ? lockdep_init_map_type+0x5c/0x250 [ 767.715980][T14983] ? lockdep_init_map_type+0x5c/0x250 [ 767.716025][T14983] __lookup_slow+0x193/0x460 [ 767.716064][T14983] ? __pfx___lookup_slow+0x10/0x10 [ 767.716127][T14983] lookup_slow+0x50/0x70 [ 767.716165][T14983] link_path_walk+0x1377/0x1cc0 [ 767.716202][T14983] path_openat+0x1be/0x31a0 [ 767.716232][T14983] ? kasan_save_stack+0x3f/0x50 [ 767.716255][T14983] ? kasan_save_stack+0x30/0x50 [ 767.716289][T14983] ? kasan_save_track+0x14/0x30 [ 767.716314][T14983] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 767.716363][T14983] ? __pfx_path_openat+0x10/0x10 [ 767.716406][T14983] do_file_open+0x20e/0x430 [ 767.716440][T14983] ? __pfx_do_file_open+0x10/0x10 [ 767.716482][T14983] ? __pfx_kfree_link+0x10/0x10 [ 767.716517][T14983] ? alloc_fd+0x476/0x790 [ 767.716550][T14983] ? do_getname+0x191/0x390 [ 767.716589][T14983] do_sys_openat2+0x10d/0x1e0 [ 767.716668][T14983] ? __pfx_do_sys_openat2+0x10/0x10 [ 767.716709][T14983] ? ksys_semctl.constprop.0+0x14e/0x2e0 [ 767.716825][T14983] __x64_sys_openat+0x12d/0x210 [ 767.716866][T14983] ? __pfx___x64_sys_openat+0x10/0x10 [ 767.716912][T14983] ? rcu_is_watching+0x12/0xc0 [ 767.716944][T14983] do_syscall_64+0x115/0x840 [ 767.716980][T14983] ? clear_bhb_loop+0x40/0x90 [ 767.717011][T14983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.717037][T14983] RIP: 0033:0x7ff79ad5d68e [ 767.717059][T14983] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 767.717085][T14983] RSP: 002b:00007ff79bc07ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 767.717109][T14983] RAX: ffffffffffffffda RBX: 00007ff79bc086c0 RCX: 00007ff79ad5d68e [ 767.717127][T14983] RDX: 0000000000000002 RSI: 00007ff79bc07f90 RDI: ffffffffffffff9c [ 767.717143][T14983] RBP: 00007ff79ae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 767.717158][T14983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.717173][T14983] R13: 00007ff79b016128 R14: 00007ff79b016090 R15: 00007ffc198b2ea8 [ 767.717205][T14983] [ 769.426540][T15012] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 769.521569][T15012] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 769.674071][T14997] netlink: 346 bytes leftover after parsing attributes in process `syz.4.1686'. [ 769.735288][T15014] smpboot: CPU 1 is now offline [ 769.781693][T15014] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 771.267394][T15030] FAULT_INJECTION: forcing a failure. [ 771.267394][T15030] name failslab, interval 1, probability 0, space 0, times 0 [ 771.333710][T15030] CPU: 0 UID: 0 PID: 15030 Comm: syz.0.1695 Tainted: G L syzkaller #0 PREEMPT(full) [ 771.333751][T15030] Tainted: [L]=SOFTLOCKUP [ 771.333759][T15030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 771.333775][T15030] Call Trace: [ 771.333784][T15030] [ 771.333794][T15030] dump_stack_lvl+0x100/0x190 [ 771.333843][T15030] should_fail_ex.cold+0x5/0xa [ 771.333875][T15030] should_failslab+0xc2/0x120 [ 771.333905][T15030] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 771.333947][T15030] ? __d_alloc+0x34/0xa40 [ 771.333995][T15030] __d_alloc+0x34/0xa40 [ 771.334028][T15030] ? security_inode_alloc+0xcf/0x2c0 [ 771.334060][T15030] d_alloc_pseudo+0x1c/0xc0 [ 771.334084][T15030] alloc_file_pseudo+0xcf/0x230 [ 771.334124][T15030] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 771.334163][T15030] ? security_inode_init_security_anon+0x7b/0x230 [ 771.334200][T15030] __do_sys_memfd_secret+0x11d/0x3d0 [ 771.334235][T15030] do_syscall_64+0x115/0x840 [ 771.334271][T15030] ? clear_bhb_loop+0x40/0x90 [ 771.334301][T15030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.334336][T15030] RIP: 0033:0x7ff79ad9ce59 [ 771.334356][T15030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.334382][T15030] RSP: 002b:00007ff79bc29028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 771.334407][T15030] RAX: ffffffffffffffda RBX: 00007ff79b015fa0 RCX: 00007ff79ad9ce59 [ 771.334430][T15030] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 771.334446][T15030] RBP: 00007ff79ae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 771.334461][T15030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 771.334477][T15030] R13: 00007ff79b016038 R14: 00007ff79b015fa0 R15: 00007ffc198b2ea8 [ 771.334508][T15030] [ 771.670135][T15031] FAULT_INJECTION: forcing a failure. [ 771.670135][T15031] name failslab, interval 1, probability 0, space 0, times 0 [ 771.683533][T15031] CPU: 0 UID: 0 PID: 15031 Comm: syz.4.1696 Tainted: G L syzkaller #0 PREEMPT(full) [ 771.683578][T15031] Tainted: [L]=SOFTLOCKUP [ 771.683588][T15031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 771.683606][T15031] Call Trace: [ 771.683618][T15031] [ 771.683631][T15031] dump_stack_lvl+0x100/0x190 [ 771.683686][T15031] should_fail_ex.cold+0x5/0xa [ 771.683728][T15031] should_failslab+0xc2/0x120 [ 771.683762][T15031] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 771.683845][T15031] ? __d_alloc+0x34/0xa40 [ 771.683891][T15031] __d_alloc+0x34/0xa40 [ 771.683927][T15031] ? __pfx_stack_trace_save+0x10/0x10 [ 771.683969][T15031] d_alloc_parallel+0x111/0x14e0 [ 771.684001][T15031] ? kasan_save_stack+0x3f/0x50 [ 771.684028][T15031] ? kasan_save_stack+0x30/0x50 [ 771.684055][T15031] ? kasan_save_free_info+0x3b/0x70 [ 771.684102][T15031] ? link_path_walk+0x161f/0x1cc0 [ 771.684135][T15031] ? __pfx_d_alloc_parallel+0x10/0x10 [ 771.684168][T15031] ? lockdep_init_map_type+0x5c/0x250 [ 771.684216][T15031] ? lockdep_init_map_type+0x5c/0x250 [ 771.684268][T15031] __lookup_slow+0x193/0x460 [ 771.684318][T15031] ? __pfx___lookup_slow+0x10/0x10 [ 771.684391][T15031] lookup_slow+0x50/0x70 [ 771.684433][T15031] link_path_walk+0x1377/0x1cc0 [ 771.684474][T15031] path_openat+0x1be/0x31a0 [ 771.684507][T15031] ? kasan_save_stack+0x3f/0x50 [ 771.684533][T15031] ? kasan_save_stack+0x30/0x50 [ 771.684559][T15031] ? kasan_save_track+0x14/0x30 [ 771.684586][T15031] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 771.684639][T15031] ? __pfx_path_openat+0x10/0x10 [ 771.684686][T15031] do_file_open+0x20e/0x430 [ 771.684724][T15031] ? __pfx_do_file_open+0x10/0x10 [ 771.684771][T15031] ? __pfx_kfree_link+0x10/0x10 [ 771.684816][T15031] ? alloc_fd+0x476/0x790 [ 771.684853][T15031] ? do_getname+0x191/0x390 [ 771.684897][T15031] do_sys_openat2+0x10d/0x1e0 [ 771.684941][T15031] ? __pfx_do_sys_openat2+0x10/0x10 [ 771.684987][T15031] ? ksys_semctl.constprop.0+0x14e/0x2e0 [ 771.685028][T15031] __x64_sys_openat+0x12d/0x210 [ 771.685073][T15031] ? __pfx___x64_sys_openat+0x10/0x10 [ 771.685123][T15031] ? rcu_is_watching+0x12/0xc0 [ 771.685159][T15031] do_syscall_64+0x115/0x840 [ 771.685200][T15031] ? clear_bhb_loop+0x40/0x90 [ 771.685234][T15031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.685264][T15031] RIP: 0033:0x7f995ad5d68e [ 771.685288][T15031] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 771.685318][T15031] RSP: 002b:00007f9958fedec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 771.685345][T15031] RAX: ffffffffffffffda RBX: 00007f9958fee6c0 RCX: 00007f995ad5d68e [ 771.685365][T15031] RDX: 0000000000000002 RSI: 00007f9958fedf90 RDI: ffffffffffffff9c [ 771.685383][T15031] RBP: 00007f995ae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 771.685400][T15031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 771.685417][T15031] R13: 00007f995b016038 R14: 00007f995b015fa0 R15: 00007fffca9a4298 [ 771.685452][T15031] [ 772.066239][T15033] random: crng reseeded on system resumption [ 772.533088][T15041] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 772.613827][T15041] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 772.836050][T15043] smpboot: CPU 1 is now offline [ 772.876299][T15043] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 775.020389][ T6567] Bluetooth: hci1: command 0x0406 tx timeout [ 776.478442][T15080] random: crng reseeded on system resumption [ 776.592516][T15080] Restarting kernel threads ... [ 776.682494][T15080] Done restarting kernel threads. [ 779.973161][T15099] netlink: 322 bytes leftover after parsing attributes in process `syz.1.1708'. [ 781.174956][T15114] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 781.260799][T15114] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 781.470480][T15116] smpboot: CPU 1 is now offline [ 781.523445][T15116] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 785.664794][T15136] Process accounting resumed [ 786.449852][ T6567] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 786.481951][ T6567] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 786.493051][ T6567] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 786.506788][ T6567] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 786.525790][ T6567] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 788.608029][ T6567] Bluetooth: hci13: command tx timeout [ 789.223185][T11048] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 789.252529][T11048] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 789.261827][T11048] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 789.272551][T11048] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 789.283082][T11048] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 790.687973][T11048] Bluetooth: hci13: command tx timeout [ 791.280479][T15153] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.324102][T15153] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.378556][T15153] bridge_slave_0: entered allmulticast mode [ 791.407850][T11048] Bluetooth: hci14: command tx timeout [ 791.449771][T15153] bridge_slave_0: entered promiscuous mode [ 791.522594][T15153] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.601270][T15153] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.646338][T15153] bridge_slave_1: entered allmulticast mode [ 791.722600][T15153] bridge_slave_1: entered promiscuous mode [ 791.960631][T15204] FAULT_INJECTION: forcing a failure. [ 791.960631][T15204] name fail_futex, interval 1, probability 0, space 0, times 0 [ 792.088371][T15153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.202129][T15153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.325980][T15204] CPU: 0 UID: 0 PID: 15204 Comm: syz.1.1724 Tainted: G L syzkaller #0 PREEMPT(full) [ 792.326019][T15204] Tainted: [L]=SOFTLOCKUP [ 792.326028][T15204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 792.326044][T15204] Call Trace: [ 792.326052][T15204] [ 792.326071][T15204] dump_stack_lvl+0x100/0x190 [ 792.326121][T15204] should_fail_ex.cold+0x5/0xa [ 792.326153][T15204] get_futex_key+0x1d2/0x1510 [ 792.326201][T15204] ? __pfx_get_futex_key+0x10/0x10 [ 792.326239][T15204] ? futex_hash+0x2ad/0x370 [ 792.326282][T15204] ? __sys_bpf+0x173/0x4b90 [ 792.326309][T15204] futex_wake+0xea/0x530 [ 792.326337][T15204] ? __pfx___sys_bpf+0x10/0x10 [ 792.326360][T15204] ? __pfx_futex_wait+0x10/0x10 [ 792.326391][T15204] ? __pfx_futex_wake+0x10/0x10 [ 792.326434][T15204] do_futex+0x32b/0x350 [ 792.326461][T15204] ? __pfx_do_futex+0x10/0x10 [ 792.326494][T15204] __x64_sys_futex+0x34f/0x4d0 [ 792.326523][T15204] ? __pfx___x64_sys_futex+0x10/0x10 [ 792.326549][T15204] ? ksys_write+0x1ac/0x250 [ 792.326583][T15204] ? rcu_is_watching+0x12/0xc0 [ 792.326615][T15204] do_syscall_64+0x115/0x840 [ 792.326651][T15204] ? clear_bhb_loop+0x40/0x90 [ 792.326682][T15204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.326708][T15204] RIP: 0033:0x7fe79d19ce59 [ 792.326729][T15204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.326755][T15204] RSP: 002b:00007fe79e0420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 792.326779][T15204] RAX: ffffffffffffffda RBX: 00007fe79d416098 RCX: 00007fe79d19ce59 [ 792.326796][T15204] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe79d41609c [ 792.326812][T15204] RBP: 00007fe79d416090 R08: 0000000000000001 R09: 0000000000000000 [ 792.326827][T15204] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 792.326842][T15204] R13: 00007fe79d416128 R14: 00007ffe3adf8350 R15: 00007ffe3adf8438 [ 792.326874][T15204] [ 792.910477][T11048] Bluetooth: hci13: command tx timeout [ 793.500271][T11048] Bluetooth: hci14: command tx timeout [ 794.657787][T15153] team0: Port device team_slave_0 added [ 794.749982][T15153] team0: Port device team_slave_1 added [ 794.927128][ T6567] Bluetooth: hci13: command tx timeout [ 795.252394][T15153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.314026][T15153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.510937][T15153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.569388][ T6567] Bluetooth: hci14: command tx timeout [ 795.680271][T15153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.733264][T15153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.905909][T15153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.725908][T15153] hsr_slave_0: entered promiscuous mode [ 796.759060][T15153] hsr_slave_1: entered promiscuous mode [ 796.802484][T15153] debugfs: 'hsr0' already exists in 'hsr' [ 796.833882][T15153] Cannot create hsr debugfs directory [ 797.647340][ T6567] Bluetooth: hci14: command tx timeout [ 798.582135][T15179] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.614700][T15179] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.653139][T15179] bridge_slave_0: entered allmulticast mode [ 798.717649][T15179] bridge_slave_0: entered promiscuous mode [ 798.735489][T15232] KVM: debugfs: duplicate directory 15232-3 [ 798.810451][T15179] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.850785][T15179] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.910653][T15179] bridge_slave_1: entered allmulticast mode [ 798.962310][T15179] bridge_slave_1: entered promiscuous mode [ 799.775243][T15153] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.093878][T15240] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 800.205459][T15240] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 800.307343][T15179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.373487][T15242] smpboot: CPU 1 is now offline [ 800.422406][T15179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.716023][T15179] team0: Port device team_slave_0 added [ 800.820746][T15153] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.040673][T15179] team0: Port device team_slave_1 added [ 801.315043][T15153] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.760569][T15153] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.989131][T15179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.021072][T15179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.114471][T15179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.231208][T15179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.307834][T15179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.456421][T15179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.189448][T15179] hsr_slave_0: entered promiscuous mode [ 803.232135][T15179] hsr_slave_1: entered promiscuous mode [ 803.280648][T15179] debugfs: 'hsr0' already exists in 'hsr' [ 803.313158][T15179] Cannot create hsr debugfs directory [ 804.337867][T15153] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 804.410530][T15153] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 804.450652][T15153] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 804.568611][T15153] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 804.984952][T15153] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 805.104239][T15153] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 805.743612][T15250] Bluetooth: hci6: command 0x0406 tx timeout [ 805.750260][T15250] Bluetooth: hci5: command 0x0406 tx timeout [ 805.781273][T15258] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.086371][T15153] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 806.133822][T15153] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 806.914013][T15179] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.463253][T15179] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.604912][T15274] random: crng reseeded on system resumption [ 807.754952][T15179] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.037786][T15179] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.252979][T15153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.643628][T15153] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.719028][T11791] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.726271][T11791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.794259][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.812678][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.987245][T11791] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.994479][T11791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 809.199013][T15283] FAULT_INJECTION: forcing a failure. [ 809.199013][T15283] name failslab, interval 1, probability 0, space 0, times 0 [ 809.199054][T15283] CPU: 0 UID: 0 PID: 15283 Comm: syz.0.1736 Tainted: G L syzkaller #0 PREEMPT(full) [ 809.199089][T15283] Tainted: [L]=SOFTLOCKUP [ 809.199098][T15283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 809.199113][T15283] Call Trace: [ 809.199125][T15283] [ 809.199135][T15283] dump_stack_lvl+0x100/0x190 [ 809.199184][T15283] should_fail_ex.cold+0x5/0xa [ 809.199216][T15283] should_failslab+0xc2/0x120 [ 809.199248][T15283] __kmalloc_cache_noprof+0x7a/0x6f0 [ 809.199285][T15283] ? device_create_groups_vargs+0x8a/0x270 [ 809.199317][T15283] ? __lock_acquire+0x4a5/0x2630 [ 809.199360][T15283] device_create_groups_vargs+0x8a/0x270 [ 809.199393][T15283] device_create+0xed/0x130 [ 809.199429][T15283] ? __pfx_device_create+0x10/0x10 [ 809.199460][T15283] ? is_console_locked+0x9/0x20 [ 809.199496][T15283] ? con_is_visible+0x65/0x150 [ 809.199520][T15283] ? csi_J+0x57e/0xad0 [ 809.199555][T15283] vcs_make_sysfs+0x32/0x80 [ 809.199581][T15283] vc_allocate+0x539/0x880 [ 809.199612][T15283] ? __pfx_vc_allocate+0x10/0x10 [ 809.199651][T15283] con_install+0xa1/0x620 [ 809.199684][T15283] ? __pfx_con_install+0x10/0x10 [ 809.199721][T15283] ? __pfx_con_install+0x10/0x10 [ 809.199753][T15283] tty_init_dev.part.0+0x9e/0x470 [ 809.199792][T15283] tty_open+0xa63/0xfa0 [ 809.199831][T15283] ? __pfx_tty_open+0x10/0x10 [ 809.199863][T15283] ? chrdev_open+0x10b/0x6a0 [ 809.199894][T15283] ? chrdev_open+0x10b/0x6a0 [ 809.199932][T15283] ? __pfx_tty_open+0x10/0x10 [ 809.199965][T15283] chrdev_open+0x234/0x6a0 [ 809.199996][T15283] ? __pfx_apparmor_file_open+0x10/0x10 [ 809.200024][T15283] ? __pfx_chrdev_open+0x10/0x10 [ 809.200057][T15283] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 809.200097][T15283] do_dentry_open+0x6ab/0x14d0 [ 809.200127][T15283] ? __pfx_chrdev_open+0x10/0x10 [ 809.200166][T15283] vfs_open+0x82/0x3f0 [ 809.200206][T15283] path_openat+0x208c/0x31a0 [ 809.200248][T15283] ? __pfx_path_openat+0x10/0x10 [ 809.200291][T15283] do_file_open+0x20e/0x430 [ 809.200325][T15283] ? __pfx_do_file_open+0x10/0x10 [ 809.200377][T15283] ? alloc_fd+0x476/0x790 [ 809.200527][T15283] ? do_getname+0x191/0x390 [ 809.200579][T15283] do_sys_openat2+0x10d/0x1e0 [ 809.200620][T15283] ? __pfx_do_sys_openat2+0x10/0x10 [ 809.200661][T15283] ? __fget_files+0x21f/0x3d0 [ 809.200697][T15283] __x64_sys_openat+0x12d/0x210 [ 809.200916][T15283] ? __pfx___x64_sys_openat+0x10/0x10 [ 809.200966][T15283] ? rcu_is_watching+0x12/0xc0 [ 809.201000][T15283] do_syscall_64+0x115/0x840 [ 809.201039][T15283] ? clear_bhb_loop+0x40/0x90 [ 809.201071][T15283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.201097][T15283] RIP: 0033:0x7ff79ad9ce59 [ 809.201120][T15283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.201145][T15283] RSP: 002b:00007ff79bc08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 809.201169][T15283] RAX: ffffffffffffffda RBX: 00007ff79b016090 RCX: 00007ff79ad9ce59 [ 809.201186][T15283] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 809.201201][T15283] RBP: 00007ff79ae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 809.201216][T15283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 809.201232][T15283] R13: 00007ff79b016128 R14: 00007ff79b016090 R15: 00007ffc198b2ea8 [ 809.201263][T15283] [ 810.475016][T11791] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.806647][T15179] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 810.818845][T15179] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 810.819837][T15179] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 810.855413][T11048] Bluetooth: hci7: command 0x0406 tx timeout [ 810.881105][T15179] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 810.992737][T15179] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 810.995652][T15179] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 811.211069][T11791] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.251204][T15179] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 811.294701][T15179] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 811.626006][T11791] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.910623][T11791] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.702694][T15179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.137756][T15179] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.279466][T11791] bridge_slave_1: left allmulticast mode [ 813.305044][T11791] bridge_slave_1: left promiscuous mode [ 813.353535][T11791] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.444378][T11791] bridge_slave_0: left allmulticast mode [ 813.481599][T11791] bridge_slave_0: left promiscuous mode [ 813.520898][T11791] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.542725][T15319] FAULT_INJECTION: forcing a failure. [ 813.542725][T15319] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 813.612614][T15319] CPU: 0 UID: 0 PID: 15319 Comm: syz.0.1740 Tainted: G L syzkaller #0 PREEMPT(full) [ 813.612653][T15319] Tainted: [L]=SOFTLOCKUP [ 813.612666][T15319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 813.612680][T15319] Call Trace: [ 813.612689][T15319] [ 813.612698][T15319] dump_stack_lvl+0x100/0x190 [ 813.612746][T15319] should_fail_ex.cold+0x5/0xa [ 813.612773][T15319] ? prepare_alloc_pages+0x16d/0x5f0 [ 813.612807][T15319] should_fail_alloc_page+0xeb/0x140 [ 813.612839][T15319] prepare_alloc_pages+0x1f0/0x5f0 [ 813.612887][T15319] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 813.612935][T15319] ? __lock_acquire+0x4a5/0x2630 [ 813.612978][T15319] ? __lock_acquire+0x4a5/0x2630 [ 813.613016][T15319] ? __css_rstat_updated+0x1ce/0x5a0 [ 813.613055][T15319] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 813.613100][T15319] ? do_raw_spin_lock+0x128/0x260 [ 813.613127][T15319] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 813.613154][T15319] ? find_held_lock+0x2b/0x80 [ 813.613192][T15319] ? __lock_acquire+0x4a5/0x2630 [ 813.613234][T15319] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 813.613271][T15319] ? policy_nodemask+0xed/0x4f0 [ 813.613303][T15319] alloc_pages_mpol+0x1fb/0x540 [ 813.613333][T15319] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 813.613364][T15319] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 813.613393][T15319] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 813.613423][T15319] folio_alloc_mpol_noprof+0x36/0x260 [ 813.613459][T15319] shmem_alloc_folio+0x135/0x160 [ 813.613495][T15319] shmem_alloc_and_add_folio+0x371/0xd40 [ 813.613543][T15319] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 813.613592][T15319] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 813.613624][T15319] shmem_get_folio_gfp+0x6ab/0x1900 [ 813.613654][T15319] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 813.613679][T15319] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 813.613705][T15319] ? lockdep_hardirqs_on+0x78/0x100 [ 813.613745][T15319] shmem_fault+0x1f9/0xa20 [ 813.613767][T15319] ? __lock_acquire+0x4a5/0x2630 [ 813.613805][T15319] ? __pfx_shmem_fault+0x10/0x10 [ 813.613829][T15319] ? __up_read+0x2c1/0x6e0 [ 813.613865][T15319] ? __pfx_filemap_map_pages+0x10/0x10 [ 813.613903][T15319] __do_fault+0x10b/0x440 [ 813.613926][T15319] ? find_held_lock+0x2b/0x80 [ 813.613957][T15319] do_fault+0x2db/0x1750 [ 813.613992][T15319] __handle_mm_fault+0x187d/0x2a00 [ 813.614032][T15319] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 813.614062][T15319] ? __pfx___handle_mm_fault+0x10/0x10 [ 813.614101][T15319] ? pte_offset_map_lock+0x174/0x320 [ 813.614129][T15319] ? find_held_lock+0x2b/0x80 [ 813.614167][T15319] ? follow_page_pte+0x4d0/0x13f0 [ 813.614203][T15319] handle_mm_fault+0x37b/0xa30 [ 813.614245][T15319] __get_user_pages+0x1178/0x32a0 [ 813.614282][T15319] ? down_read_killable+0x307/0x4b0 [ 813.614307][T15319] ? __pfx___get_user_pages+0x10/0x10 [ 813.614346][T15319] faultin_page_range+0x1f1/0x9e0 [ 813.614383][T15319] madvise_do_behavior+0x354/0x510 [ 813.614420][T15319] ? __pfx_madvise_do_behavior+0x10/0x10 [ 813.614469][T15319] do_madvise+0x195/0x240 [ 813.614500][T15319] ? __pfx_do_madvise+0x10/0x10 [ 813.614531][T15319] ? do_futex+0x192/0x350 [ 813.614588][T15319] __x64_sys_madvise+0xa9/0x110 [ 813.614620][T15319] ? lockdep_hardirqs_on+0x78/0x100 [ 813.614654][T15319] do_syscall_64+0x115/0x840 [ 813.614688][T15319] ? clear_bhb_loop+0x40/0x90 [ 813.614717][T15319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.614741][T15319] RIP: 0033:0x7ff79ad9ce59 [ 813.614761][T15319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.614784][T15319] RSP: 002b:00007ff79bc29028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 813.614807][T15319] RAX: ffffffffffffffda RBX: 00007ff79b015fa0 RCX: 00007ff79ad9ce59 [ 813.614822][T15319] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 813.614837][T15319] RBP: 00007ff79ae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 813.614852][T15319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 813.614866][T15319] R13: 00007ff79b016038 R14: 00007ff79b015fa0 R15: 00007ffc198b2ea8 [ 813.614896][T15319] [ 814.591767][T15334] netlink: 322 bytes leftover after parsing attributes in process `syz.1.1742'. [ 814.899993][T15340] random: crng reseeded on system resumption [ 814.949003][T15340] Restarting kernel threads ... [ 814.960649][T15340] Done restarting kernel threads. [ 815.400923][T11791] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 815.438492][T11791] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 815.460026][T11791] bond0 (unregistering): Released all slaves [ 815.643101][T15153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.713656][T11786] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.720884][T11786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 815.944920][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 816.011230][T11785] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.018504][T11785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 816.309475][T11791] hsr_slave_0: left promiscuous mode [ 816.330450][T11791] hsr_slave_1: left promiscuous mode [ 816.348199][T11791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 816.366742][T11791] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 816.383013][T11791] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 816.402249][T11791] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 816.444641][T11791] veth1_macvtap: left promiscuous mode [ 816.461848][T11791] veth0_macvtap: left promiscuous mode [ 816.472032][T11791] veth1_vlan: left promiscuous mode [ 816.483410][T11791] veth0_vlan: left promiscuous mode [ 816.612449][ T6567] Bluetooth: hci8: command 0x0406 tx timeout [ 817.225588][T11791] team0 (unregistering): Port device team_slave_1 removed [ 817.273001][T11791] team0 (unregistering): Port device team_slave_0 removed [ 817.631166][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 817.834415][T15179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 818.049962][T15153] veth0_vlan: entered promiscuous mode [ 818.158706][T15153] veth1_vlan: entered promiscuous mode [ 818.387287][T15153] veth0_macvtap: entered promiscuous mode [ 818.463367][T15153] veth1_macvtap: entered promiscuous mode [ 818.634824][T15153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.755833][T15153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 818.871378][T11785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.925013][T11785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.121911][T11785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.168116][T11785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.115279][T11795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.184245][T11795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.584581][T11785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 820.640024][T11785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 821.071405][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3 [ 821.146023][T15179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.177300][T15380] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 821.738129][T15421] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1748'. [ 822.208858][ T31] INFO: task syz.4.1550:13768 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 822.258947][ T31] Tainted: G L syzkaller #0 [ 822.315570][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 822.376975][ T31] task:syz.4.1550 state:D stack:27528 pid:13768 tgid:13767 ppid:13461 task_flags:0x400140 flags:0x00080002 [ 822.449688][ T31] Call Trace: [ 822.473334][ T31] [ 822.492134][ T31] __schedule+0x1295/0x67a0 [ 822.519188][ T31] ? __pfx___schedule+0x10/0x10 [ 822.554171][ T31] ? find_held_lock+0x2b/0x80 [ 822.589702][ T31] ? schedule+0x2bf/0x390 [ 822.644214][ T31] schedule+0xdd/0x390 [ 822.692065][ T31] schedule_preempt_disabled+0x13/0x30 [ 822.750861][ T31] __mutex_lock+0xced/0x1b10 [ 822.812018][ T31] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 822.877420][ T31] ? __nla_validate_parse+0x1e7/0x28b0 [ 822.904741][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 822.925222][ T31] ? net_generic+0xea/0x2a0 [ 822.953480][ T31] ? net_generic+0xea/0x2a0 [ 822.974609][ T31] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 823.002072][ T31] nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 823.038932][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 823.064837][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 823.101018][ T31] ? genl_get_cmd+0x3e7/0x760 [ 823.130120][ T31] ? bpf_lsm_capable+0x9/0x10 [ 823.159795][ T31] ? security_capable+0x80/0x260 [ 823.196792][ T31] genl_rcv_msg+0x560/0x800 [ 823.217293][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 823.259273][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 823.278332][ T31] netlink_rcv_skb+0x159/0x420 [ 823.299360][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 823.335222][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 823.366096][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 823.400057][ T31] genl_rcv+0x28/0x40 [ 823.428258][ T31] netlink_unicast+0x585/0x850 [ 823.440464][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 823.465383][ T31] netlink_sendmsg+0x8b0/0xda0 [ 823.503087][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 823.529718][ T31] ? __import_iovec+0x1d2/0x640 [ 823.555899][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 823.583390][ T31] ____sys_sendmsg+0x9e1/0xb70 [ 823.601052][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 823.623255][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 823.631402][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 823.655626][ T31] ___sys_sendmsg+0x190/0x1e0 [ 823.665388][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 823.679452][ T31] __sys_sendmsg+0x170/0x220 [ 823.691897][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 823.706995][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 823.718643][ T31] ? rcu_is_watching+0x12/0xc0 [ 823.730308][ T31] do_syscall_64+0x115/0x840 [ 823.747481][ T31] ? clear_bhb_loop+0x40/0x90 [ 823.756480][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.763712][ T31] RIP: 0033:0x7fbf1519ce59 [ 823.768839][ T31] RSP: 002b:00007fbf160bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.780098][ T31] RAX: ffffffffffffffda RBX: 00007fbf15415fa0 RCX: 00007fbf1519ce59 [ 823.791928][ T31] RDX: 000000000000c840 RSI: 0000200000000480 RDI: 0000000000000003 [ 823.801607][ T31] RBP: 00007fbf15232d6f R08: 0000000000000000 R09: 0000000000000000 [ 823.811369][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.822171][ T31] R13: 00007fbf15416038 R14: 00007fbf15415fa0 R15: 00007ffd7b5a0f38 [ 823.832907][ T31] [ 823.954631][ T31] INFO: task syz.2.1555:13822 blocked for more than 145 seconds. [ 823.987001][ T31] Tainted: G L syzkaller #0 [ 824.010604][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 824.045044][ T31] task:syz.2.1555 state:D stack:27528 pid:13822 tgid:13821 ppid:5639 task_flags:0x400140 flags:0x00080002 [ 824.103390][ T31] Call Trace: [ 824.114843][ T31] [ 824.126483][ T31] __schedule+0x1295/0x67a0 [ 824.154138][T13449] NFSD: Failed to start, no listeners configured. [ 824.189055][ T31] ? __pfx___schedule+0x10/0x10 [ 824.211538][ T31] ? find_held_lock+0x2b/0x80 [ 824.230357][ T31] ? schedule+0x2bf/0x390 [ 824.250747][ T31] schedule+0xdd/0x390 [ 824.260578][ T31] schedule_preempt_disabled+0x13/0x30 [ 824.286106][ T31] __mutex_lock+0xced/0x1b10 [ 824.316938][ T31] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 824.325849][ T31] ? __nla_validate_parse+0x1e7/0x28b0 [ 824.348616][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 824.370087][ T31] ? net_generic+0xea/0x2a0 [ 824.384897][ T31] ? net_generic+0xea/0x2a0 [ 824.402669][ T31] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 824.426962][ T31] nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 824.456896][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 824.464992][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 824.502547][ T31] ? genl_get_cmd+0x3e7/0x760 [ 824.529767][ T31] ? bpf_lsm_capable+0x9/0x10 [ 824.539052][ T31] ? security_capable+0x80/0x260 [ 824.556931][ T31] genl_rcv_msg+0x560/0x800 [ 824.561834][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 824.572863][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 824.587600][ T31] netlink_rcv_skb+0x159/0x420 [ 824.597160][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 824.612826][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 824.626943][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 824.639450][ T31] genl_rcv+0x28/0x40 [ 824.647999][ T31] netlink_unicast+0x585/0x850 [ 824.658648][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 824.675337][ T31] netlink_sendmsg+0x8b0/0xda0 [ 824.688285][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 824.695016][ T31] ? __import_iovec+0x1d2/0x640 [ 824.706897][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 824.728552][ T31] ____sys_sendmsg+0x9e1/0xb70 [ 824.740049][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 824.759372][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 824.764744][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 824.787087][ T31] ? try_to_wake_up+0x5f6/0x1900 [ 824.795242][ T31] ___sys_sendmsg+0x190/0x1e0 [ 824.807581][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 824.826987][ T31] ? futex_private_hash_put+0x107/0x1c0 [ 824.836525][ T31] __sys_sendmsg+0x170/0x220 [ 824.849062][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 824.854979][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 824.861372][ T31] ? rcu_is_watching+0x12/0xc0 [ 824.866200][ T31] do_syscall_64+0x115/0x840 [ 824.873951][ T31] ? clear_bhb_loop+0x40/0x90 [ 824.882401][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.888616][ T31] RIP: 0033:0x7fa8f419ce59 [ 824.893091][ T31] RSP: 002b:00007fa8f50ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 824.901968][ T31] RAX: ffffffffffffffda RBX: 00007fa8f4415fa0 RCX: 00007fa8f419ce59 [ 824.910583][ T31] RDX: 000000000000c840 RSI: 0000200000000480 RDI: 0000000000000003 [ 824.920828][ T31] RBP: 00007fa8f4232d6f R08: 0000000000000000 R09: 0000000000000000 [ 824.929740][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 824.945275][ T31] R13: 00007fa8f4416038 R14: 00007fa8f4415fa0 R15: 00007ffca6557008 [ 824.954736][ T31] [ 825.015398][ T5296] 8021q: adding VLAN 0 to HW filter on device eth4 [ 825.047154][ T31] INFO: task syz.3.1556:13827 blocked for more than 146 seconds. [ 825.093962][ T31] Tainted: G L syzkaller #0 [ 825.121785][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 825.134235][ T31] task:syz.3.1556 state:D stack:27528 pid:13827 tgid:13825 ppid:5638 task_flags:0x400140 flags:0x00080002 [ 825.149768][ T31] Call Trace: [ 825.153142][ T31] [ 825.156092][ T31] __schedule+0x1295/0x67a0 [ 825.161821][ T31] ? __pfx___schedule+0x10/0x10 [ 825.166782][ T31] ? find_held_lock+0x2b/0x80 [ 825.181697][ T31] ? schedule+0x2bf/0x390 [ 825.191760][ T31] schedule+0xdd/0x390 [ 825.196012][ T31] schedule_preempt_disabled+0x13/0x30 [ 825.202025][ T31] __mutex_lock+0xced/0x1b10 [ 825.206715][ T31] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 825.215160][ T31] ? __nla_validate_parse+0x1e7/0x28b0 [ 825.221226][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 825.227820][ T31] ? net_generic+0xea/0x2a0 [ 825.232403][ T31] ? net_generic+0xea/0x2a0 [ 825.237765][ T31] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 825.243671][ T31] nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 825.260363][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 825.266720][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 825.273507][ T31] ? genl_get_cmd+0x3e7/0x760 [ 825.278485][ T31] ? bpf_lsm_capable+0x9/0x10 [ 825.283210][ T31] ? security_capable+0x80/0x260 [ 825.296041][ T31] genl_rcv_msg+0x560/0x800 [ 825.301214][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 825.306309][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 825.312867][ T31] netlink_rcv_skb+0x159/0x420 [ 825.320433][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 825.326718][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 825.335120][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 825.340784][ T31] genl_rcv+0x28/0x40 [ 825.344857][ T31] netlink_unicast+0x585/0x850 [ 825.353010][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 825.358933][ T31] netlink_sendmsg+0x8b0/0xda0 [ 825.364618][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.372160][ T31] ? __import_iovec+0x1d2/0x640 [ 825.377364][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 825.383070][ T31] ____sys_sendmsg+0x9e1/0xb70 [ 825.388463][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.402740][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 825.411204][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 825.416769][ T31] ___sys_sendmsg+0x190/0x1e0 [ 825.421896][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 825.431045][ T31] __sys_sendmsg+0x170/0x220 [ 825.435719][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 825.441521][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 825.446579][ T31] ? rcu_is_watching+0x12/0xc0 [ 825.451879][ T31] do_syscall_64+0x115/0x840 [ 825.459317][ T31] ? clear_bhb_loop+0x40/0x90 [ 825.464065][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.471227][ T31] RIP: 0033:0x7ff3b219ce59 [ 825.475723][ T31] RSP: 002b:00007ff3b30e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 825.485717][ T31] RAX: ffffffffffffffda RBX: 00007ff3b2415fa0 RCX: 00007ff3b219ce59 [ 825.497791][ T31] RDX: 000000000000c840 RSI: 0000200000000480 RDI: 0000000000000003 [ 825.505828][ T31] RBP: 00007ff3b2232d6f R08: 0000000000000000 R09: 0000000000000000 [ 825.518751][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 825.527143][ T31] R13: 00007ff3b2416038 R14: 00007ff3b2415fa0 R15: 00007ffda5aa55e8 [ 825.536438][ T31] [ 825.560376][ T31] INFO: task syz.5.1561:13869 blocked for more than 146 seconds. [ 825.619975][ T31] Tainted: G L syzkaller #0 [ 825.638687][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 825.666977][ T31] task:syz.5.1561 state:D stack:27528 pid:13869 tgid:13868 ppid:13600 task_flags:0x400140 flags:0x00080002 [ 825.700793][ T31] Call Trace: [ 825.704251][ T31] [ 825.707772][ T31] __schedule+0x1295/0x67a0 [ 825.717139][ T31] ? __pfx___schedule+0x10/0x10 [ 825.728836][ T31] ? find_held_lock+0x2b/0x80 [ 825.742628][ T31] ? schedule+0x2bf/0x390 [ 825.759010][ T31] schedule+0xdd/0x390 [ 825.766705][ T31] schedule_preempt_disabled+0x13/0x30 [ 825.778647][ T31] __mutex_lock+0xced/0x1b10 [ 825.788654][ T31] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 825.802267][ T31] ? __nla_validate_parse+0x1e7/0x28b0 [ 825.817135][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 825.827266][ T31] ? net_generic+0xea/0x2a0 [ 825.840361][ T31] ? net_generic+0xea/0x2a0 [ 825.856980][ T31] ? nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 825.870137][ T31] nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 825.898184][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 825.918178][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 825.936978][ T31] ? genl_get_cmd+0x3e7/0x760 [ 825.943093][ T31] ? bpf_lsm_capable+0x9/0x10 [ 825.952841][ T31] ? security_capable+0x80/0x260 [ 825.963934][ T31] genl_rcv_msg+0x560/0x800 [ 825.971417][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 825.976539][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 825.986189][ T31] netlink_rcv_skb+0x159/0x420 [ 825.991298][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 825.996430][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 826.002636][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 826.011692][ T31] genl_rcv+0x28/0x40 [ 826.015796][ T31] netlink_unicast+0x585/0x850 [ 826.021224][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 826.026593][ T31] netlink_sendmsg+0x8b0/0xda0 [ 826.033087][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 826.038830][ T31] ? __import_iovec+0x1d2/0x640 [ 826.045176][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 826.066028][ T31] ____sys_sendmsg+0x9e1/0xb70 [ 826.076613][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 826.083300][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 826.091552][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 826.097344][ T31] ___sys_sendmsg+0x190/0x1e0 [ 826.102119][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 826.111254][ T31] __sys_sendmsg+0x170/0x220 [ 826.115957][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 826.121565][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 826.126568][ T31] ? rcu_is_watching+0x12/0xc0 [ 826.135687][ T31] do_syscall_64+0x115/0x840 [ 826.141748][ T31] ? clear_bhb_loop+0x40/0x90 [ 826.148058][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.154053][ T31] RIP: 0033:0x7fd29e39ce59 [ 826.158971][ T31] RSP: 002b:00007fd29f1c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 826.169128][ T31] RAX: ffffffffffffffda RBX: 00007fd29e615fa0 RCX: 00007fd29e39ce59 [ 826.182532][ T31] RDX: 000000000000c840 RSI: 0000200000000480 RDI: 0000000000000004 [ 826.191608][ T31] RBP: 00007fd29e432d6f R08: 0000000000000000 R09: 0000000000000000 [ 826.202039][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.217743][ T31] R13: 00007fd29e616038 R14: 00007fd29e615fa0 R15: 00007ffefeed89d8 [ 826.225808][ T31] [ 826.288821][ T31] [ 826.288821][ T31] Showing all locks held in the system: [ 826.342061][ T31] 1 lock held by khungtaskd/31: [ 826.355969][ T31] #0: ffffffff8e7e53e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 826.369672][ T31] 1 lock held by dhcpcd/5296: [ 826.374414][ T31] #0: ffffffff906062e0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 826.386151][ T31] 3 locks held by kworker/u10:7/6366: [ 826.392733][ T31] #0: ffff88803368e140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 826.404246][ T31] #1: ffffc90005377d08 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 826.426778][ T31] #2: ffffffff906062e0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11f/0x1360 [ 826.437597][ T31] 2 locks held by getty/7078: [ 826.442335][ T31] #0: ffff888037d090a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 826.454312][ T31] #1: ffffc900038d52e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 826.465730][ T31] 3 locks held by kworker/u10:30/11787: [ 826.471773][ T31] #0: ffff88813fe94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 826.486883][ T31] #1: ffffc9000359fd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 826.498443][ T31] #2: ffffffff906062e0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 826.508050][ T31] 4 locks held by kworker/u10:38/11795: [ 826.513656][ T31] #0: ffff88801c6a6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 826.533939][ T31] #1: ffffc9000345fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 826.545191][ T31] #2: ffffffff905ed588 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 826.556188][ T31] #3: ffffffff906062e0 (rtnl_mutex){+.+.}-{4:4}, at: cfg80211_pernet_exit+0x17/0x120 [ 826.566481][ T31] 2 locks held by syz.0.1513/13449: [ 826.572224][ T31] #0: ffffffff906b4748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 826.582900][ T31] #1: ffffffff8ec62260 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 826.595098][ T31] 2 locks held by syz.4.1550/13768: [ 826.600650][ T31] #0: ffffffff906b4748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 826.609404][ T31] #1: ffffffff8ec62260 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 826.623017][ T31] 2 locks held by syz.2.1555/13822: [ 826.628552][ T31] #0: ffffffff906b4748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 826.643051][ T31] #1: ffffffff8ec62260 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 826.654313][ T31] 2 locks held by syz.3.1556/13827: [ 826.661038][ T31] #0: ffffffff906b4748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 826.669623][ T31] #1: ffffffff8ec62260 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 826.680385][ T31] 2 locks held by syz.5.1561/13869: [ 826.688531][ T31] #0: ffffffff906b4748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 826.698863][ T31] #1: ffffffff8ec62260 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 826.709340][ T31] 2 locks held by syz-executor/14062: [ 826.714750][ T31] #0: ffff8880537c40d8 (&type->s_umount_key#53){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 826.729031][ T31] #1: ffffffff8ec62260 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 826.738995][ T31] 2 locks held by syz.8.1569/14162: [ 826.744234][ T31] #0: ffffffff906b4748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 826.761579][ T31] #1: ffffffff8ec62260 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 826.773608][ T31] 2 locks held by syz.6.1592/14206: [ 826.780126][ T31] #0: ffffffff906b4748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 826.791212][ T31] #1: ffffffff8ec62260 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 826.802723][ T31] 2 locks held by syz.7.1606/14286: [ 826.809597][ T31] #0: ffffffff906b4748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 826.818133][ T31] #1: ffffffff8ec62260 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 826.831790][ T31] 2 locks held by syz-executor/14291: [ 826.837494][ T31] #0: ffffffff906062e0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 826.846549][ T31] #1: ffffffff8e7f0f28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 826.862652][ T31] 2 locks held by syz.2.1693/15020: [ 826.870733][ T31] #0: ffffffff906b4748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 826.879629][ T31] #1: ffffffff8ec62260 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 826.892307][ T31] 1 lock held by syz-executor/15179: [ 826.898555][ T31] #0: ffffffff906062e0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 826.908709][ T31] 1 lock held by syz.0.1746/15378: [ 826.913882][ T31] #0: ffffffff906062e0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 826.924486][ T31] 2 locks held by syz.3.1717/15411: [ 826.934310][ T31] #0: ffffffff905ed588 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 826.944335][ T31] #1: ffffffff906062e0 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 826.983742][ T31] [ 826.992592][ T31] ============================================= [ 826.992592][ T31] [ 827.041115][ T31] NMI backtrace for cpu 0 [ 827.041138][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 827.041174][ T31] Tainted: [L]=SOFTLOCKUP [ 827.041183][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 827.041200][ T31] Call Trace: [ 827.041209][ T31] [ 827.041221][ T31] dump_stack_lvl+0x100/0x190 [ 827.041269][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 827.041297][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 827.041322][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 827.041354][ T31] sys_info+0x141/0x190 [ 827.041375][ T31] watchdog+0xcb1/0x1030 [ 827.041414][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 827.041449][ T31] ? __pfx_watchdog+0x10/0x10 [ 827.041483][ T31] ? __kthread_parkme+0x18c/0x230 [ 827.041517][ T31] ? kthread+0x13a/0x450 [ 827.041550][ T31] ? __pfx_watchdog+0x10/0x10 [ 827.041581][ T31] kthread+0x370/0x450 [ 827.041616][ T31] ? __pfx_kthread+0x10/0x10 [ 827.041653][ T31] ret_from_fork+0x72b/0xd50 [ 827.041679][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 827.041705][ T31] ? __switch_to+0x800/0x1100 [ 827.041766][ T31] ? __switch_to_asm+0x39/0x70 [ 827.041796][ T31] ? __pfx_kthread+0x10/0x10 [ 827.041833][ T31] ret_from_fork_asm+0x1a/0x30 [ 827.041883][ T31] [ 827.487897][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 827.494801][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 827.505509][ T31] Tainted: [L]=SOFTLOCKUP [ 827.509908][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 827.519974][ T31] Call Trace: [ 827.523262][ T31] [ 827.526205][ T31] dump_stack_lvl+0x100/0x190 [ 827.530937][ T31] vpanic+0x552/0x970 [ 827.534965][ T31] ? __pfx_vpanic+0x10/0x10 [ 827.539504][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 827.545732][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 827.552082][ T31] panic+0xd1/0xe0 [ 827.555833][ T31] ? __pfx_panic+0x10/0x10 [ 827.560269][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 827.566442][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 827.572617][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 827.578809][ T31] ? watchdog.cold+0x1ec/0x234 [ 827.583595][ T31] ? watchdog+0xcc1/0x1030 [ 827.588061][ T31] watchdog.cold+0x1fd/0x234 [ 827.592677][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 827.598513][ T31] ? __pfx_watchdog+0x10/0x10 [ 827.603218][ T31] ? __kthread_parkme+0x18c/0x230 [ 827.608453][ T31] ? kthread+0x13a/0x450 [ 827.612726][ T31] ? __pfx_watchdog+0x10/0x10 [ 827.617478][ T31] kthread+0x370/0x450 [ 827.621607][ T31] ? __pfx_kthread+0x10/0x10 [ 827.626248][ T31] ret_from_fork+0x72b/0xd50 [ 827.630907][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 827.636050][ T31] ? __switch_to+0x800/0x1100 [ 827.640754][ T31] ? __switch_to_asm+0x39/0x70 [ 827.645560][ T31] ? __pfx_kthread+0x10/0x10 [ 827.650181][ T31] ret_from_fork_asm+0x1a/0x30 [ 827.654995][ T31] [ 827.658112][ T31] Kernel Offset: disabled [ 827.662474][ T31] Rebooting in 86400 seconds..