last executing test programs: 5m53.512126924s ago: executing program 32 (id=274): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = ioctl$auto_NS_GET_PID_FROM_PIDNS(0xffffffffffffffff, 0x8004b706, &(0x7f0000000000)=0x4) socket(0x2b, 0x1, 0x401) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) read$auto(r1, 0x0, 0x1d) close_range$auto(0x2, 0xa, 0x0) r2 = socket(0x11, 0x80003, 0x200300) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_BTRFS_IOC_SCAN_DEV(0xffffffffffffffff, 0x50009404, &(0x7f0000000280)={@raw=0x1, "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"}) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001280)=ANY=[@ANYBLOB=')\x00\b\x00', @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x400c880) close_range$auto(0xffffffffffffffff, r0, 0xfffffeaf) r5 = fcntl$auto_F_UNLCK(0xffffffffffffffff, 0x3ff, 0x2) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="130040bd7000dddbdf250800000808007700090000000800610001000000"], 0x24}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) sendmsg$auto_NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2679cfc5df17e2dbe6e1b2de5e6d5194a8b7727d83d86a81341e012cde5be83c2bd81a0de7e408", @ANYRES16=r6, @ANYRESDEC=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4048004}, 0x20000011) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) clock_gettime$auto(0xb, 0x0) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(r8, 0x400c4d04, r8) 2m53.625250892s ago: executing program 0 (id=905): preadv$auto(0xffffffffffffffff, 0x0, 0xc, 0x9, 0x402) (async) madvise$auto(0x110c230000, 0x8031ca, 0x9) (async) madvise$auto(0x110d230000, 0x1, 0x3) (async) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/netfs/requests\x00', 0x40080, 0x0) pread64$auto(r2, 0x0, 0x8100000041, 0x413e) mremap$auto(0xfffff000, 0x20004, 0x8, 0x7, 0x1001ff002) waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000040)={@siginfo_0_0={0x2, 0x8, 0xf8, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000280)="79ca6170c72c9b5affac767c0127e58e38f3f407303ed544651fc514ea2bf3a8d8ec1b5efc99d62cbb8043d4582607afd440f400a4fdcd74a0d6cc759ee437d05a5a149e70f79615cb36ed421aea340b2fe6"}}}, 0x20f5, &(0x7f0000000440)={{0x0, 0x7e}, {0x8, 0x2}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x8000000000000001, 0x1, 0x3, 0x3, 0x501, 0xfff, 0x0, 0x3, 0x3, 0xc, 0xfffffffffffffffb}) (async) madvise$auto(0x0, 0x2003f2, 0x15) (async) ioctl$auto_CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000000)={0x7, 0x3, 0x7, 0x2, 0x3ff, 0x7fffffff, "9b2189083b030000000d933475a77466", 0x7, 0x5, 0x9, 0x4, 0x2, 0xb, 0x2}) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r3 = eventfd$auto(0x4) (async) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r4, 0xaf01, 0x5) ioctl$auto(r4, 0x4008af20, r3) r5 = prctl$auto_PR_SCHED_CORE_SHARE_TO(0x7, 0x2, 0xffffffffffffffff, 0x8000000000000000, 0x200) read$auto_proc_sys_file_operations_proc_sysctl(r5, &(0x7f0000000080)=""/197, 0xc5) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0xdc5e, 0x4, 0x300000000000) (async) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) setsockopt$auto(0x3, 0x85, 0x26, 0x0, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8080, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 2m51.956385274s ago: executing program 0 (id=913): unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x402, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) mmap$auto(0x4, 0x400008, 0xd7, 0x9b72, 0xffffffffffffffff, 0x6) read$auto(0xffffffffffffffff, 0x0, 0x2008080) unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/memmap/2/type\x00', 0x18b740, 0x0) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112dbab029ed13881d2f2c7ba2eb01c3db79f77fdc2bb50c64a925009dff4cd1aca925c57100112d88f73348a54396800ed598a0e5500d7c0cbb6b1e91d", 0x40000000001243}, 0x4, 0x0) ioctl$auto(r1, 0x400454ca, 0x38) ioctl$auto_TUNSETTXFILTER(r1, 0x400454d1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/112, 0x70) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) mmap$auto(0x0, 0x2020006, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x408000, 0x110, 0x8}, 0x18) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x1, 0x717e, 0x0, 0x7, 0xf6b, 0xd, 0x2, 0x4080001, 0x4, 0x1ffffffffffd, 0x224a, 0xfffffffffffffffe, 0x7, 0x6, 0x7f, 0x3fb, 0x1, 0x1, 0x4, 0x200, 0x9, 0x84, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, [0x56, 0x1, 0x0, 0x401, 0x0, 0x0, 0x0, 0xffffffff80000000, 0x0, 0x100, 0xfffffffffffffffe, 0x4, 0x0, 0x1, 0x8, 0x4, 0x400, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x14, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffffffffffc, 0x83, 0x1, 0x6, 0x0, 0xa5ce, 0x7, 0x6, 0xffffffffffffffff, 0x3, 0x1000000000000]}, 0x1fe, 0xd) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffffffffffd03, &(0x7f00000001c0)) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r4 = epoll_create$auto(0x3) capset$auto(0x0, 0x0) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/snd_dummy.0/sound/card0/controlC0/dev\x00', 0x0, 0x0) read$auto(r5, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4044001) 2m49.217295355s ago: executing program 0 (id=921): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x26, 0x80000, 0x0) r0 = socket(0x2, 0x800, 0x4) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) mmap$auto(0x0, 0x2020009, 0xd, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x101000, 0x0) r2 = fcntl$auto(0x8000000000000001, 0x5, 0x8) r3 = io_uring_setup$auto(0x86, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000180)={0x45, 0x1, "653205013ce56c521f22f4eb25e475e06975fe25d57e89b2d1e7de9dc1e5ed7d74a5687a29a5aa8eb4ee773ccf40a3892af99ede4ffed5daac03c6166fb6b8dcd06771d3c4"}, 0xb8e3) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000000), 0x82c00, 0x0) ioctl$auto(r1, 0x541e, 0xfffffffffffff4e0) io_uring_register$auto_IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000000100)="fd86ff507fb717addcf4ce4abc6cffdb6d5a0c0a0ef81b0753d3d81920f6b75890e035c2f5e562b3d2735b0b8b682c15eebc823418", 0x200) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001280)='/dev/v4l-subdev0\x00', 0x101000, 0x0) ioctl$auto(r2, 0xc1205647, r3) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1f, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, 0x0, 0xc0, 0x0) capset$auto(&(0x7f0000000000)={0x38, 0xffffffffffffffff}, &(0x7f0000000080)={0x1ff, 0xd2e4, 0x4}) pidfd_open$auto(r4, 0xd8a8) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0xffffffffffffffff, 0x20005, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x200, 0x3, 0xeb1, 0xfffffffffffffffa, 0xbc99) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_l2tp(0x0, r2) connect$auto(0x3, 0x0, 0x54) 2m49.122290287s ago: executing program 2 (id=923): socket(0x3, 0x800, 0x1000) mmap$auto(0x0, 0x400008, 0x1, 0x9b72, 0x2, 0x0) io_uring_setup$auto(0x5a, 0x0) close_range$auto(0x0, 0x5, 0x0) r0 = pipe$auto(0x0) r1 = epoll_create$auto(0x1) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0x0, 0x80000932, 0x6, 0xffffffffffff5a17, 0x401, 0x8003) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = bpf$auto(0x24, 0xffffffffffffffff, 0x2) r3 = socket(0x10, 0x2, 0x4) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="25210100", @ANYRESOCT, @ANYRESHEX], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xb06af94d6e0b076) close_range$auto(0xffffffffffffffff, r0, 0x8) socket(0x10, 0x2, 0x14) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001200c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0xc0081) read$auto(0x3, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/loop10\x00', 0x40000, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x600347, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) 2m47.881016145s ago: executing program 2 (id=926): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_ETHTOOL_MSG_PSE_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="0100243d700000000000000300d9fe488d953ec81d96450d3cbbe3cdf3403902aa05fd04c1e66e43e35f998b7a4e8dacd1e98add70abe8a6d468fac5528e2f8c8e368b5d48c76c5c301021ba76c84c52b1d366cf189d9e6782339c232d4c726e2035e702a5e461720ff04c16399deaaf39cba5ed8c32102fd3eee892883b02e97b6013b3fc05e161cef6edd60c067f079efd3e2e1bc349d1b6d66cf08611b945da915f8d4d2fd785bdfc"], 0x18}, 0x1, 0x0, 0x0, 0x4000050}, 0x40d8) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cmdline\x00', 0x400, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB='1\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c0) r0 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x3, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r2 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci4/hci4:201\x00', 0x400, 0x0) preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000000}, 0x3, 0x40000000003, 0x4, 0x2a) r3 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto_ftrace_subsystem_filter_fops_trace_events(r3, &(0x7f0000000140)="8f0447fef2afea7e35a0274f508a73119aff3bc0528f45fd27fea1bb4baa95f757cf9e57a14e04353736f4a23ce2a531c678ed7d6d28d43aaea2a69abe3e93453380adf35653f5875227ce319330afe5e4cc7601a8eccbb3729f9869ca35edaf6343e41fe91304ef53273ed0cc2dfe7bfe60f2c9fa95fc93cc906a80aec437a39cd0672a169c151550a062a76e472626", 0x90) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r5 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/personality\x00', 0x2, 0x0) read$auto_proc_single_file_operations_base(r5, &(0x7f0000000040)=""/228, 0xe4) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r4, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) sendmmsg$auto(r0, &(0x7f00000004c0)={{&(0x7f00000002c0)="5b759101af64567a52ae9b7b2d2cc87a51402e3ee5dfeb06a214ff55770f8ef68d53f54be80e605dd6053122cfbc830acce06eb99a89cf6c50bec128d271d3c459bfea5c06864d03192d11562df900581777f5f69e33d090627cdefb70b8c7f1cec73f8f0269185c72bc17f9bcbbabe38d3b5e67b17c3197912e723c6f68f10da5e6ca2b759e8f0275832013c0e6", 0x51, &(0x7f0000000440)={&(0x7f0000000380)="fddd458fb0743527094405c3bb6069c412a78842d7db4801bd312c02c499677a143e79965f094fa56c565e375a8551567f7233bc61e1227e2097b26eea8b39073e34a5b19a8574f442cab9437fd5f91d9206010333e3f8a15c8afb39770d9134beaac53c52ce9ed475c9944a883e2b2dbd39923c9689053a22d1c3da0b6ed07c0c9935298a2595665b73a15bbbc73908b3", 0x1}, 0x7, &(0x7f0000000480), 0x0, 0xa70}}, 0x1, 0xeb) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44080}, 0x40000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb3, 0x401, 0x7ffc) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="24021600", @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf250200000008000300000000000500040000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="72010000", @ANYRESHEX], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x40008c5}, 0x84000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0x7fffffff}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{0x0, 0x1f00, &(0x7f0000000500)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r6 = inotify_init1$auto(0xa277) read$auto_vmwgfx_driver_fops_vmwgfx_drv(r6, &(0x7f0000000000)=""/20, 0x14) 2m47.830877378s ago: executing program 0 (id=927): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/fcloop/ctl/add_local_port\x00', 0x208401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto_proc_timers_operations_base(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x10001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2) socket(0xa, 0x801, 0x84) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004280)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="010025bd7000fcdbdf250400"], 0xe4}, 0x1, 0x0, 0x0, 0x2000c8c8}, 0x4048000) fanotify_init$auto(0x5, 0x0) io_uring_setup$auto(0xf00, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4004) socketpair$auto(0x4004, 0x8, 0x7, 0x0) socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x72, 0x0, 0xc) 2m47.438154862s ago: executing program 2 (id=928): mmap$auto(0x0, 0x20007, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0x6a) ioctl$auto_BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000000000)=0x7298) write$auto(0x3, 0x0, 0x7fffffff) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) setrlimit$auto(0x1000000007, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000140)='-$!\x00\xfa\xef\t\xa4\xe9\xb2r\x8cQ \xa6\xb7v\x93\xb6\b\xba\xfe\x1e\xab\xe7KC6z\x1a\xf0\x83~\xcd\x9a\x83\b\xb6\xb2\xd6PR\xbe\xec\xea\t\xde.\xc6%\x16\xc8\\\xb2\xe86\xe1\x84k\xa8\x02\xcb\xc9 \x1flY\xcb\xfa\xd9\xe0\xb8\x93\x12\xbc\xcf\xc2\'\x90\x9d\x1c\xb0\x1d\xb8\x80\xb4V\x9c\xf6J\xe8\"\xef@\xcd t\xe8\xe9Ip\xa74\x82\xb0\x9a\xecj\x9f\x8f\x9a\xe22\x8e\xce1\x9d\x0fW\xe7\xfb\"[\x17\x83\xfc}\xc7\xab\x93\xe4\x1ekP1\x01\bB\xbf*a\x93\xbd\xa7\xc8', 0x5, 0x4) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="f4ffffff", @ANYBLOB="01002b"], 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x4001090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x21, 0x80802, 0x7) r2 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r3 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r3, 0x0, 0x401006, 0x4015, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={0x0, 0x1590}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 2m45.715515931s ago: executing program 2 (id=931): r0 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x100000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x2, 0x2, 0x0) unshare$auto(0x40000080) r2 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f0000000240), 0x2042, 0x0) io_uring_register$auto_IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000280)="d272ec58182f42b8a617d71d9c307d0bc16a25df3168de4ad83b758b9316eb6dd8278540bb67a6991e3d5bd51a3b646180d493c2908f0f0bb4a85eb7fd4441f9db1b72b7d569642f", 0x8) ioctl$auto(0xffffffffffffffff, 0x4b3a, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000340), r1) sendmsg$auto_OVS_METER_CMD_FEATURES(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x20, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x9}, @OVS_METER_ATTR_CLEAR={0x4}]}, 0x2f}, 0x1, 0x0, 0x0, 0x2000080}, 0x4) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) r6 = socket(0x2, 0x3, 0x100) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000080), 0xffffffffffffffff) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xc2b80, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_genetlink_get_family_id$auto_thermal(0x0, r6) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r6, 0x0, 0x4040005) r7 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r7, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f00000004c0)="5959e7488ae601000000000008", 0xe7}, 0x8, &(0x7f0000000180), 0x5, 0x2}, 0x5}, 0x2, 0x100) r8 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r9 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000100), r1) sendmsg$auto_CTRL_CMD_GETFAMILY2(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r9, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x44014) ioctl$auto_LOOP_CTL_ADD(r8, 0x4c80, r0) 2m44.149587727s ago: executing program 0 (id=936): read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socket(0x2, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x407b2, r1, @relative_fd=r1, 0x80}, 0x9) socket(0x10, 0x2, 0x0) mmap$auto(0x40000000, 0x400009, 0xdf, 0x19, 0x2, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/netfs/requests\x00', 0x40080, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r1) sendmsg$auto_NL80211_CMD_GET_MPP(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000125bd7000fbdbdf256b0000000800420000000000040073e5040029000000000005002900020000000600eb0004000000060043010600000005001301020000000800a400020000001a00fe00a6c1adfa13aec37189bddf5b02981817491e382a923f0000"], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0x2a901, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0xc0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2401, 0x0) io_uring_setup$auto(0x2, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0xe0400, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) 2m43.862396172s ago: executing program 2 (id=937): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f00000000c0)={{&(0x7f0000000140)="5ff474a4e5d789da4367715d2f540b0351bd947332e394bd7c7af5a1cd99da991bd9864b68855054443c242a9218fdb9ec7d8a42b242deb7e2aa2042ad92d3d4f718050b8d76399d67c12a", 0x12, 0x0, 0xa, 0x0, 0x1f, 0xfffffffd}, 0xffdf}, 0x4, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) socket(0x2, 0x801, 0x106) r1 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x2140, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x286a00, 0x0) r2 = openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) getsockopt$auto(r1, 0x84, 0x7c, 0x0, &(0x7f0000000000)=0x7ffe) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram5/queue/discard_granularity\x00', 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) mmap$auto(0x0, 0x80000000003240, 0x6, 0x11, r2, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xebe, 0xffffffffffffffff, 0x6) r3 = socket(0x15, 0x5, 0x0) getsockopt$auto(r3, 0x114, 0x2719, 0xfffffffffffffffc, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/040/001\x00', 0x228000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) 2m42.744889777s ago: executing program 0 (id=940): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x94) r0 = socket(0x2, 0x801, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(r0, &(0x7f0000000080)=@xdp={0x2c, 0x4, 0x0, 0xb}, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000425bd7004fedbdfbb4faebe77"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = prctl$auto_PR_SET_MM_START_STACK(0x9, 0x5, 0x0, 0xd, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf250200000008000100070000000800030085000000ee1a3c6264d3db7cf6795158a1ac8560a66f31bdb824887895f5d4fb7d2423782b4e3284b1adc162dc733caebb1be8543b4d54cc4457a6fa7d4c700d37bbb60508007cb42be7d52cc4d7c75d3f0fe46ca9fc01"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) sendmsg$auto_NFSD_CMD_LISTENER_GET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x20010090) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f0000000740)={&(0x7f0000000e40)=ANY=[@ANYBLOB="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"/311, @ANYRES16=r4, @ANYBLOB="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"], 0x664}}, 0x401) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x63a640, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getpgid$auto(0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) r5 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) read$auto_rng_chrdev_ops_core(r5, &(0x7f0000000040)=""/23, 0x17) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) 2m42.648907863s ago: executing program 2 (id=941): fcntl$auto(0x2, 0x401, 0x80000001) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x801, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r0 = prctl$auto_PR_SET_MM_START_STACK(0x9, 0x5, 0x0, 0xd, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf250200000008000100070000000800030085000000ee1a3c6264d3db7cf6795158a1ac8560a66f31bdb824887895f5d4fb7d2423782b4e3284b1adc162dc733caebb1be8543b4d54cc4457a6fa7d4c700d37bbb60508007cb42be7d52cc4d7c75d3f0fe46ca9fc01"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)={0x540, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x98, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x49, 0x1, "fc15acd5b771c79fd2dc24b9d144105fd8f3e20dcb22de4c4853856eb9668c8aa532417747ccac3df1a5f1e896ac9cc0f973cad1119d4a9a7fe8ee5fa3e8fdf13a531925e6"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '/\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x12, 0x2, '/dev/pts/ptmx\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x12, 0x2, '/dev/pts/ptmx\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x10, 0x2, '{).\\[+}.^%#\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x280, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x91, 0x1, "c7ec2daa063026cd8b252681c161f79f91de0c16e7f4066726e2374b52943a027c3a1867bfb8d94af9df2f3cfc158f558e9c8291795004628f9bedd861a793c874b98d92af22a60137f2d87e6be5a473390405fda8ad10bb054012a623d334f53c40b6042a0a86013f1b853e7b8251ef9e8ea4d7aa820cc9ebabacba3797a4d0dcdc2fa9974f6a32fa54e8c8f1"}, @NFSD_A_SOCK_ADDR={0x73, 0x1, "022b63a0beaef5e711a69f58da0b0ba16c2cdec2901fa0903e81f727c9234bd005d315fa14814294ff4d42899b5470d94a068f00937c9ac5642a3d135c35a121265009375db3ee3f8992cc3d0e22471b9afc3ba6d9312afadb59a9d5b2f9b6e361cfc8cb7be89af5a981f8bc3e3fd3"}, @NFSD_A_SOCK_ADDR={0x67, 0x1, "f1f3573092dd1ae7c30486a21bd1e05dee12228a1fb21172271ca3185b80145b2a03c93387732f5b0a0ba83e30bd9e9152b92d5f29c9deb5e9678fdae648a67b7885162119f151fc40583ae5f654acfafee902e46e63d3f4f66fa2ad398d7f05c12302"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x12, 0x2, '/dev/pts/ptmx\x00'}, @NFSD_A_SOCK_ADDR={0x6, 0x1, "3501"}, @NFSD_A_SOCK_ADDR={0xd7, 0x1, "7d6dce6342ae29454a9adb498b4007e034e466357b249439d512f7cd94fcefd8df59e266b5991c6cdf6dfa95c7475653fbfc652100e413759a20b6d8eb7bb15c7a579969ca8ef2b9383b1fac751baf1e55134c4072a31d69ef8861eea0e2da4137d451d55e89ba10ced204e786ad7ed6b713c06a7d1092a9238b4647e77c7623c1199bdd95e68b0615d0f6ead589b52b41c136e73b0aba1d28e3bb8739e030b66954977b01f6b4f5c2494bdd492778c5f3a9d78bf72da4edab39e8163ff198abde69c4863ddd8854add4d4c69f5e831f28ecfd"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, '-/@+\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0xa, 0x2, '#:u-*\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0xc, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x7, 0x2, '!(\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x1e0, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x60, 0x1, "407ba2664b1381a01044f70c4435c91393eff55d1f3ba9e42df760c91b5f01dfbb3c1f629cc72d4603f4219461ae3aff4bf4ec48b1537ea0a7a3a12842e0f8c1cdebe9843ef63aef1088e74cd54763cbe10ac453db902599a41aa1d9"}, @NFSD_A_SOCK_TRANSPORT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @NFSD_A_SOCK_ADDR={0xf6, 0x1, "045cce43018600541d2362cf3f7aaa64356dbef2d59e299ff0a9fb47b0d1cf591db6fc9734bde65c6b2fb695eb3b5fa884551992496e23227214bcfe11df54cd8f203172a62903cd53d9673c31f0e6c460193337dc71579142379a9355f3c1d5258bf8f7d0b242168745b14b8699b25d894814a33478124dc66146288300b151410e27d59b5814e72891b6657f883453dbf1fc55bd63dfd30a2fcb13ddce7d897b6c7f8d65cb72071f5ba14d9aae712ce1755e6aa9797c279b11fcc9fbfaf84189d3e97f976ee6a63ee0718b0bbc5ae6dc52d7a69697af8cee1b64411d2ec04c04ea51cb6e8d7bd30b582bf16572dba0248b"}, @NFSD_A_SOCK_ADDR={0x5f, 0x1, "987507b32cbaea08ff59b3be4651c2000c1b44fa18e84eab130441e2b89ca7b62c099f142cbad243ce00fcb0ac0dd9484c66c4ab6605e51b9a8f5a19002346484a0c1190d6230fb17de3dfd3a217402709f8c13bd5c9f215380c30"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x13, 0x2, '!-$%)\x18.:/[}\\-\x8b\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x28, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x12, 0x2, '/dev/pts/ptmx\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0xe, 0x2, '[.)(}.-/}\x00'}]}]}, 0x540}}, 0x24004045) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getpgid$auto(0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) r4 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) read$auto_rng_chrdev_ops_core(r4, &(0x7f0000000040)=""/23, 0x17) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) 2m27.317400065s ago: executing program 33 (id=940): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x94) r0 = socket(0x2, 0x801, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(r0, &(0x7f0000000080)=@xdp={0x2c, 0x4, 0x0, 0xb}, 0x0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000425bd7004fedbdfbb4faebe77"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = prctl$auto_PR_SET_MM_START_STACK(0x9, 0x5, 0x0, 0xd, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf250200000008000100070000000800030085000000ee1a3c6264d3db7cf6795158a1ac8560a66f31bdb824887895f5d4fb7d2423782b4e3284b1adc162dc733caebb1be8543b4d54cc4457a6fa7d4c700d37bbb60508007cb42be7d52cc4d7c75d3f0fe46ca9fc01"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) sendmsg$auto_NFSD_CMD_LISTENER_GET(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x20010090) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200004}, 0xc, &(0x7f0000000740)={&(0x7f0000000e40)=ANY=[@ANYBLOB="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"/311, @ANYRES16=r4, @ANYBLOB="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"], 0x664}}, 0x401) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x63a640, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getpgid$auto(0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) r5 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) read$auto_rng_chrdev_ops_core(r5, &(0x7f0000000040)=""/23, 0x17) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) 2m27.267117746s ago: executing program 34 (id=941): fcntl$auto(0x2, 0x401, 0x80000001) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x801, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r0 = prctl$auto_PR_SET_MM_START_STACK(0x9, 0x5, 0x0, 0xd, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf250200000008000100070000000800030085000000ee1a3c6264d3db7cf6795158a1ac8560a66f31bdb824887895f5d4fb7d2423782b4e3284b1adc162dc733caebb1be8543b4d54cc4457a6fa7d4c700d37bbb60508007cb42be7d52cc4d7c75d3f0fe46ca9fc01"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)={0x540, r2, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SOCK_ADDR={0x98, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x49, 0x1, "fc15acd5b771c79fd2dc24b9d144105fd8f3e20dcb22de4c4853856eb9668c8aa532417747ccac3df1a5f1e896ac9cc0f973cad1119d4a9a7fe8ee5fa3e8fdf13a531925e6"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x6, 0x2, '/\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x12, 0x2, '/dev/pts/ptmx\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x12, 0x2, '/dev/pts/ptmx\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x5, 0x2, '\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0x10, 0x2, '{).\\[+}.^%#\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x280, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x91, 0x1, "c7ec2daa063026cd8b252681c161f79f91de0c16e7f4066726e2374b52943a027c3a1867bfb8d94af9df2f3cfc158f558e9c8291795004628f9bedd861a793c874b98d92af22a60137f2d87e6be5a473390405fda8ad10bb054012a623d334f53c40b6042a0a86013f1b853e7b8251ef9e8ea4d7aa820cc9ebabacba3797a4d0dcdc2fa9974f6a32fa54e8c8f1"}, @NFSD_A_SOCK_ADDR={0x73, 0x1, "022b63a0beaef5e711a69f58da0b0ba16c2cdec2901fa0903e81f727c9234bd005d315fa14814294ff4d42899b5470d94a068f00937c9ac5642a3d135c35a121265009375db3ee3f8992cc3d0e22471b9afc3ba6d9312afadb59a9d5b2f9b6e361cfc8cb7be89af5a981f8bc3e3fd3"}, @NFSD_A_SOCK_ADDR={0x67, 0x1, "f1f3573092dd1ae7c30486a21bd1e05dee12228a1fb21172271ca3185b80145b2a03c93387732f5b0a0ba83e30bd9e9152b92d5f29c9deb5e9678fdae648a67b7885162119f151fc40583ae5f654acfafee902e46e63d3f4f66fa2ad398d7f05c12302"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x12, 0x2, '/dev/pts/ptmx\x00'}, @NFSD_A_SOCK_ADDR={0x6, 0x1, "3501"}, @NFSD_A_SOCK_ADDR={0xd7, 0x1, "7d6dce6342ae29454a9adb498b4007e034e466357b249439d512f7cd94fcefd8df59e266b5991c6cdf6dfa95c7475653fbfc652100e413759a20b6d8eb7bb15c7a579969ca8ef2b9383b1fac751baf1e55134c4072a31d69ef8861eea0e2da4137d451d55e89ba10ced204e786ad7ed6b713c06a7d1092a9238b4647e77c7623c1199bdd95e68b0615d0f6ead589b52b41c136e73b0aba1d28e3bb8739e030b66954977b01f6b4f5c2494bdd492778c5f3a9d78bf72da4edab39e8163ff198abde69c4863ddd8854add4d4c69f5e831f28ecfd"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x9, 0x2, '-/@+\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0xa, 0x2, '#:u-*\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0xc, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x7, 0x2, '!(\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x1e0, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_ADDR={0x60, 0x1, "407ba2664b1381a01044f70c4435c91393eff55d1f3ba9e42df760c91b5f01dfbb3c1f629cc72d4603f4219461ae3aff4bf4ec48b1537ea0a7a3a12842e0f8c1cdebe9843ef63aef1088e74cd54763cbe10ac453db902599a41aa1d9"}, @NFSD_A_SOCK_TRANSPORT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @NFSD_A_SOCK_ADDR={0xf6, 0x1, "045cce43018600541d2362cf3f7aaa64356dbef2d59e299ff0a9fb47b0d1cf591db6fc9734bde65c6b2fb695eb3b5fa884551992496e23227214bcfe11df54cd8f203172a62903cd53d9673c31f0e6c460193337dc71579142379a9355f3c1d5258bf8f7d0b242168745b14b8699b25d894814a33478124dc66146288300b151410e27d59b5814e72891b6657f883453dbf1fc55bd63dfd30a2fcb13ddce7d897b6c7f8d65cb72071f5ba14d9aae712ce1755e6aa9797c279b11fcc9fbfaf84189d3e97f976ee6a63ee0718b0bbc5ae6dc52d7a69697af8cee1b64411d2ec04c04ea51cb6e8d7bd30b582bf16572dba0248b"}, @NFSD_A_SOCK_ADDR={0x5f, 0x1, "987507b32cbaea08ff59b3be4651c2000c1b44fa18e84eab130441e2b89ca7b62c099f142cbad243ce00fcb0ac0dd9484c66c4ab6605e51b9a8f5a19002346484a0c1190d6230fb17de3dfd3a217402709f8c13bd5c9f215380c30"}, @NFSD_A_SOCK_TRANSPORT_NAME={0x13, 0x2, '!-$%)\x18.:/[}\\-\x8b\x00'}]}, @NFSD_A_SERVER_SOCK_ADDR={0x28, 0x1, 0x0, 0x1, [@NFSD_A_SOCK_TRANSPORT_NAME={0x12, 0x2, '/dev/pts/ptmx\x00'}, @NFSD_A_SOCK_TRANSPORT_NAME={0xe, 0x2, '[.)(}.-/}\x00'}]}]}, 0x540}}, 0x24004045) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getpgid$auto(0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0xe0180, 0x0) r4 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) read$auto_rng_chrdev_ops_core(r4, &(0x7f0000000040)=""/23, 0x17) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) 2m13.26459835s ago: executing program 6 (id=997): socket(0xa, 0x2, 0x0) mmap$auto(0x10000000000002, 0x4000000000001004, 0xaa4, 0x400000eb2, 0xffffffffffffffff, 0xfffffffffffffff9) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb2, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) ioctl$auto_BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000140)={@raw, 0x2, 0x0, 0x929, 0xe5c1, 0x7cd, "abfd2e69df26f540a1d748ceff20c3ed69a359d46ed201e13aea69af"}) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000001c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7t\b\x00w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x8c)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\x14&\x99?\xe6\xe5I\xe2\xae,\x95k \x97\x18VBAo', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdd, 0x9b72, 0xffffffffffffffff, 0x8001) mbind$auto(0x100, 0x2091d2, 0x2, 0x0, 0xa, 0x2) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100002, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r2 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r2, &(0x7f00000002c0)=""/190, 0xfffffe39) 2m12.126181227s ago: executing program 6 (id=1037): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000400", @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf2511000000180001801400020076657468315f6d616376746170000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) (async) fstat$auto(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0xa3, 0x0, 0xee01, 0x0, 0x6, 0x0, 0xd, 0x0, 0xfffffffffffffff8, 0xad74, 0x1ff, 0x8000, 0x4, 0x5}) shmctl$auto(0xffff3fbf, 0x6, &(0x7f0000000500)={{0xbeaa, 0xee00, 0xffffffffffffffff, 0xf40, 0x4, 0x3, 0x5}, 0x80a3, 0xd, 0x800, 0x4, @raw=0xa9, @inferred, 0x4, 0x0, &(0x7f0000000140)="1f1ee0051ddbbb699d8a015330577c76d88d300fabe30558018695b78a323d0609d0b2e20645a54ff4055b9d0200b829d79142a5e8b25be16348a25bde15269afbd4be2e5082e47cd4", &(0x7f0000000400)="5c1e419beca5512d864301a1f2f45373a1144344df457f5d20c31aa36aba49cfc37b1ae1f833999f7ca2596c7a1f79d1e5a9a92168eee3286096c5724a31ce1504a7506af0978e73dcc1accc686e4eef237959464deb9ed01951599ee0d8648f6e2ac56469c013423927d9f3c50c846eecca0475ed96ce44add140a6cc0a02bd8dfbf03080c5a9d931bb7295be46b77359ba2a5296d36c711a4d52dc1a4796b24af0308d9261f858aacfa44d9245d0653d8a61ba9c46320e4f81b188946655fea058ddaff4bf4b9acaeeb2c2c9c4755f0494096e7c089a34f126f156cf72b2f417476ebac8dd6ad03d40"}) (async) msgctl$auto_IPC_INFO(0x7f, 0x3, &(0x7f0000000600)={{0x200, 0xee00, 0xee01, 0x9, 0x2, 0x7, 0xff80}, &(0x7f0000000580)=0xa, &(0x7f00000005c0)=0xc, 0xffff, 0x1e9, 0x9, 0x3, 0x3, 0x78d9, 0x8d, 0x5, @inferred=0xffffffffffffffff, @raw=0xffffffff}) (async) gettid() (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'veth0_to_team\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000380), r2) sendmsg$auto_BATADV_CMD_SET_MESH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, r4, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xcf70}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x140080e1) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) gettid() (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x74bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008801}, 0x20008810) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'batadv0\x00'}) r8 = syz_clone3(0x0, 0x0) prctl$auto(0x3e, 0x1ff, r8, 0xffffffffffffffff, 0x4000006) msgctl$auto_IPC_INFO(0x7de, 0x3, &(0x7f0000000780)={{0x6fa, 0xee00, 0x0, 0x0, 0xc0000, 0x7, 0x4}, &(0x7f0000000700)=0x7, &(0x7f0000000740)=0x4, 0x101, 0xfff, 0x2, 0x0, 0x6, 0x5, 0xff, 0x3, @raw=0x80000001, @inferred=0xffffffffffffffff}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x8000, 0x0) (async) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket(0xa, 0x1, 0x84) (async) mmap$auto(0x0, 0x400008, 0xdf, 0xfffffffffffff2da, 0x2, 0x7ffc) 2m11.724923079s ago: executing program 6 (id=1041): io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x101, 0x103) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x4, 0x2, 0xeb1, 0x401, 0x1) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x7, 0x734f, 0x37, 0x67f, 0x1ffde, 0x7, 0x3, 0x8, 0xd, 0x3, 0x1, 0x2091, 0x83ad, 0x9, 0x6, 0x6, 0x81, 0x4, 0x1cd7, 0x7, 0x2000, 0x203, 0x0, 0x84, 0xfffffffffffffffa, 0x0, 0x0, 0x2, 0x101, [0x0, 0x0, 0x8003, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xa04, 0x0, 0xfffffffffffffffc, 0x3, 0x4, 0x202, 0x0, 0x9, 0x4, 0x3ffffffc, 0x0, 0x7, 0x0, 0x2, 0x7ff, 0x0, 0x0, 0x3, 0x40000000000000, 0x200, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x3c3, 0x0, 0x2]}, 0x1fe, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) mmap$auto(0x0, 0x4, 0x4000000000df, 0x78, 0xffffffffffffffff, 0x300000000000) r2 = socketcall$auto(0xffe, 0x0) close_range$auto(0x2, 0xa, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001200), 0xe0300, 0x0) ioctl$auto_BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000100)={@inferred, 0x0, 0x0, @unused, @subvolid=0x6000}) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x4008ae61, r2) kexec_load$auto(0x7, 0x2, &(0x7f0000001140)={@buf=&(0x7f0000001100)="748d33c70b69", 0x800c000, 0x4800c000, 0x81000000}, 0x4) sysfs$auto(0x2, 0x23, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(r3, 0xffffffffffffffff, 0x0) r4 = clone$auto(0xc9, 0x8, 0x0, 0x0, 0x4) setpriority$auto_PRIO_PGRP(0x1, r4, 0x1) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000440)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00', &(0x7f0000000140)='nfsd\x00', 0x1010000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) 2m11.060201137s ago: executing program 6 (id=1043): mmap$auto(0x3ff, 0x3, 0x3, 0x18, 0xffffffffffffffff, 0x0) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async, rerun: 32) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) mmap$auto(0x6, 0x28009, 0x4000000000df, 0xeb6, r0, 0x8000) (async, rerun: 64) r1 = io_uring_setup$auto(0x1, 0x0) (rerun: 64) mmap$auto(0x2, 0x8001, 0x4000000200dc, 0x40eb1, r1, 0x300000000000) (async) unshare$auto(0x40000080) (async) close_range$auto(0x2, 0x8, 0x0) (async) semctl$auto(0xa, 0x1, 0x1, 0xde) (async) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmsg$auto_OVS_FLOW_CMD_SET(r2, 0x0, 0x10) (async, rerun: 64) readv$auto(r0, &(0x7f00000001c0)={0x0, 0x1003}, 0x800000000400003) (async, rerun: 64) rseq$auto(0x0, 0x584, 0x1, 0x2) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf2512e233da08000300", @ANYRES32], 0x24}, 0x1, 0x1400, 0x0, 0x80}, 0x20000084) (async) socket(0x11, 0x80003, 0x300) bpf$auto_BPF_PROG_BIND_MAP(0x23, &(0x7f0000000240)=@bpf_attr_3={0x5, 0x1, 0x6, 0x6, 0x9032, 0x0, 0x9, 0x4, 0x47, "217d105d6ffb4dbabbbbedbf8650089a", 0x0, 0x3ff, 0xffffffffffffffff, 0x6, 0xa89f, 0x1, 0x4, 0xffffffffffffffff, 0x6, 0x5, @attach_btf_obj_fd=r2, 0x3ff, 0x8, 0x1, 0x1, 0x3, 0xffffffffffffffff, r4}, 0x80) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab83, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/event1\x00', 0x41040, 0x0) (async, rerun: 32) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x305201, 0x0) (rerun: 32) close_range$auto(0x2, 0x8, 0x2) (async) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0xa2401, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video69\x00', 0x101, 0x0) (async) ioctl$auto(0x3, 0xae41, r5) 2m10.789155983s ago: executing program 6 (id=1044): mmap$auto(0x0, 0x400006, 0x6, 0x9b72, 0x2, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='nfsd\x00', 0x8, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/modalias\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/195, 0xc3) sendmsg$auto_ETHTOOL_MSG_MM_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_MM_VERIFY_TIME={0x8, 0x9, 0x3ff}, @ETHTOOL_A_MM_VERIFY_ENABLED={0x5}, @ETHTOOL_A_MM_TX_MIN_FRAG_SIZE={0x8, 0x5, 0xfffffff8}, @ETHTOOL_A_MM_PMAC_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40) r3 = socketcall$auto(0xffe, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/notify_on_release\x00', 0x101042, 0x0) write$auto(r4, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) pipe2$auto(0x0, 0x80) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1643, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x4020ae76, r3) 2m10.217215429s ago: executing program 6 (id=1049): mmap$auto(0x7b2c, 0x0, 0xe2, 0x15, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x145, 0x0, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x11, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x2df, 0x500, 0x81, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x7fffffffffffffff}}) io_uring_enter$auto(0x3, 0x0, 0x3, 0xb, 0x0, 0x18) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/irq/4/effective_affinity\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x9, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf2503000000040008000c00018008001600", @ANYRES32=0x0, @ANYBLOB="c60da39fa317a6b1842354945a520f14eb7d5d8d22dc9998fc550cb3d2390ca134986d62b681a4c7127a3dd6034c32e29973a2bb3a12d0edf27b59df9d5249baa64f589f18f1c7e4e10b7d3abac849277c2eb58352b785c6c1e15dfba9391a29621dbcd7da8a3772f1"], 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x800) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, 0x0, 0x1b, 0x70bd26, 0x25dfdbfe, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r6}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590822ad9"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) ioctl$auto(r5, 0x4008af03, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) 1m54.883538951s ago: executing program 35 (id=1049): mmap$auto(0x7b2c, 0x0, 0xe2, 0x15, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x145, 0x0, 0xfffffffffffffffd) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x11, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x2df, 0x500, 0x81, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x7fffffffffffffff}}) io_uring_enter$auto(0x3, 0x0, 0x3, 0xb, 0x0, 0x18) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/irq/4/effective_affinity\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x9, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf2503000000040008000c00018008001600", @ANYRES32=0x0, @ANYBLOB="c60da39fa317a6b1842354945a520f14eb7d5d8d22dc9998fc550cb3d2390ca134986d62b681a4c7127a3dd6034c32e29973a2bb3a12d0edf27b59df9d5249baa64f589f18f1c7e4e10b7d3abac849277c2eb58352b785c6c1e15dfba9391a29621dbcd7da8a3772f1"], 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x800) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x40, 0x0, 0x1b, 0x70bd26, 0x25dfdbfe, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r6}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590822ad9"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) ioctl$auto(r5, 0x4008af03, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x84) 1m13.820884737s ago: executing program 4 (id=1247): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0xa, 0x5, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/erofs/features/fragments\x00', 0x115801, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002980)=""/4075, 0xfeb) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01032cb57000fbdbdf250a00000f0600010018"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r3 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000040), r1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000100), 0xffffffffffffffff) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) socket(0x15, 0x5, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r7 = socket(0xa, 0x801, 0x84) getsockopt$auto(r7, 0x84, 0xc, 0x0, 0x0) r8 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) ioctl$auto_I2C_SMBUS(r8, 0x720, 0x0) sendmsg$auto_NBD_CMD_CONNECT(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000040)={0x3c, r6, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x3c}, 0x1, 0x1000000, 0x0, 0x4}, 0x8880) wait4$auto(r4, 0x0, 0x8, 0x0) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r1, &(0x7f0000002700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000026c0)={&(0x7f00000005c0)={0x608, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NCSI_ATTR_DATA={0x2a9, 0x5, "e47f2a0f2ac8b2f1f3458062b9bfa5f1b8336a9a170a9f04e5b91c300eae1926e1f18a8a1f5b41fb3cc5f3110f63a5ebbe3aeed42a09f2616eb44fe3fdc2263d7a3e940b0e2630b013497bc606b89e2e178cc701c1c5a5e5b56efd77fbc9ae3a2cff2a29fa27ebf0aa30c6b54d5b8298eb3d82e13f9e36aae9cf94c9d67ef3eba9fc60f5e99cf4fd0b80c606a7f143824d58b6d6dd03bd856bdac6e22fe814fb30cfe4124838aa336d457a6a8f85f6cde221058b7cf7a3e5b1699be48e2cb8262e841df6e296ae229a8a99bcb5d13c86ee454fc96650616faf2e9952e6e9bfe1cb67c41b4ac2bbfd86d3b8f6f9433cffec25b43cb5793b137eaf77e45d2e9dc3ce07b617a1a744fdfa087c89ec777f1de8186bbdf1b1c802973a4654523d9bd8f677178ae7e63d125fdfd357346ec4a2416723927aedd1cf930ec97e4fe4b6076d0e5f62c772bb67a2ab2e421d2c0da5c9904fb1d10b30cace30e70eb5619dfed47f84f767be1025354add8dcf59809eb7985913001cbd4afcdf3ad49956d5a37ea5d926ab0060af07661844371c040d49252d9b6ee0dbd5d70d6d6bee03265a49ec298761dbc209c04f0438474070ef6e3f17e9aab9ec1bf8ebeb599926ef9602d83a59c911b2409fb5f9795cb717b07d6b0f920df47d5346d53e08f1561013b2d527edf09c1743ccd10f86eeb65ad5ebacd5f498ca5cb62bc2e4c3651c7d5a7c6185a641d0b32e9b7091aeffbcbec792cdfdebcc83ca417468af6eb778259df834bdab0c06e50ef8e702c72f096b3cb3ab7870498c4382f769ff1c8eceb53e495173bbf7ff66bbed84ff3ea851f0c07fe77e4b6b43f8a234d68cf27c9d11f125f49f7a7a84fd23104e92a1cd5a5255313e199b0106c2f6de527bec3be97f61904223796e4217f910f0f149383e4194de6c7a042f9e61cf64564a16065d5a7e4bdd313cc1"}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x1ff}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x1}, @NCSI_ATTR_PACKAGE_LIST={0x4}, @NCSI_ATTR_PACKAGE_LIST={0x331, 0x2, 0x0, 0x1, [@typed={0x8, 0xcb, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xde, 0x87, 0x0, 0x1, [@nested={0x4, 0x168}, @generic="bf85f1b59be6907c1e589e9fffab301cf5377ff7b4439a51ae7c874ef08ff2dc0ab396a6ef68ef2bcd154aac935fa8cc46a735c84e35abf83aa0cb58eed68f7e88d76f255e5e29c1655d203ad0f1ea43f9b899058366d545b32e41bb51b8dc056c623b1f4078cbea8d9c084e95a2c342afc43b597629a4f801a47fd60475e7e08e2b88fa57f770c816a2ab35c1e27bd6f0e9237815ad1a945c29f93ddec4e0d84b8ebbda4ff061455a63e652a956f2c74f12a459bddd278f9694c739f69b3d75804b6d5ee591dd255b598b02bfef6783480d64356310"]}, @generic="a5820c39c52454907dcc7f0b7dcaf8c28e9c79c25be9f40c8c98649621739ef745c6ceb2b57d398b99d48db36be08b94af33d741f5fdc6a9f994133f4f90135b8be40cf12be9b090f9cd96c74a5c6ecd8114a551198ee8433f7d11664d9f42866d99be420a8bd8dc10", @nested={0x1dc, 0x5e, 0x0, 0x1, [@generic="602256ecd2addad48c7b7a1b0108c12d6d41fb873901838e890be5c71b9f8f251e2bb7557b79f881aad4b6f7e81a58d9b19c5ba62e4b7378d644636891ff5aa5051db4ed80e74e0d19cecc2366779cf51ff07924ca8fdb8de4110bebad0aa861730e85ac071c8e9b62fe3e7f866bfd35eb2f258824cb89c464944d9b44ceb30b61d0dd62cf61c504eb17fb4486dce4283ef490bbd463d839ef8fb90cab9f3e3710cbc8a51bdc45a5b99beed991821e6af213b3949a2728d982a392e3e084962076ebee65e95c1afe9e0adcd111422bdd902c8dee9c8fd2784aa372d8b17a40cc3cea", @generic, @generic="b18be3baf048ada1b2d0a8df540348ee226a15c43d976e92ebb250519513ef8c644ecabc0c40add4df48e06c45971138d4d7a66433b4ae226af94fde2f5ff90228df26ccabe5bb68b6387102639f8169b95eabeab7776065c5c61dcfc441274d018c93d59846fc59f0123d141459ef557a652fafdb14f1622dbb7dcbf1c4901f75b95fa8e0d9341e", @generic="a0c7da31c63746ae77b5ecb7fcfe5c9035ab1633b22b4de571b7366f09b922dd0b6491f8624e4671858c1357f32958a01d4c9881eaf142e0531cbd40f16542c631f32da9d6f785c95e858227f469eb313f3356ad85eb", @nested={0x4, 0x136}, @generic, @typed={0x14, 0x161, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x608}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) readahead$auto(0xffffffffffffffff, 0x2, 0x10001) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000380), r1) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) 1m12.659304789s ago: executing program 4 (id=1250): unshare$auto(0x40000080) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) (async) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) getsockopt$auto_SO_MEMINFO(r1, 0x9, 0x37, &(0x7f0000000000)='*.:\x00', 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(r2, r0, 0x0) (async) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r4) ioctl$auto(r1, 0x1, r1) (async) r5 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/max_mmu_rmap_size\x00', 0x42, 0x0) write$auto(r5, &(0x7f0000000180)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\xe5\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\xb2^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dT\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xdc*\x1dV', 0x5) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x2, 0x0, [{0x400000f1, 0x400, 0x6}]}) (async) unshare$auto(0x80000000) 1m12.645920696s ago: executing program 1 (id=1251): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC1\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000001c0)={0x0, 0x8, 0x5, @raw=0x80, 0x0, "5059d005d689f01a18c00f29b5fa494a0200f0fced42bcfab54dc63a1562e39e060000007c7fd574bccc61a93bf6de84233c"}) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/ieee80211/phy0/statistics/dot11ACKFailureCount\x00', 0x2240, 0x0) mmap$auto(0x9, 0xffff, 0x0, 0x7fffffffffffffff, r1, 0x5) r2 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x10000100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x10101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r2, 0x14, 0x0, 0x9) r4 = ioctl$auto_NS_GET_OWNER_UID(r2, 0xb704, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r1, 0x0, 0x0) bind$auto(r1, &(0x7f0000000080)=@l2tp={0x2, 0x0, @loopback}, 0x8) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000004c0), r3) fcntl$getown(r0, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000500)={'veth1_to_bridge\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'dummy0\x00'}) sendmsg$auto_ETHTOOL_MSG_FEC_SET(r3, &(0x7f0000000800)={&(0x7f0000000100), 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x14, r5, 0x4, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x4050) r6 = prctl$auto_SECCOMP_MODE_STRICT(0x8, 0x1, 0xffffffffffffffff, 0x1, 0x8001) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r6, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20001b}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf25630000000c009900000000000000000008000500090000004f65656ab9e3337ef668d4c12057328237e51142d6f4f290b26e9d25f519a1e9dab5236cdf637782a4fc1ace200e5397ac6b046978340116c8524f1c9b0d6bd607976f008806bf823017cf002be78075dd22e0b47eb98950ce77d76537c6540c8d984422cb42dc9b53ce5944f82828f49b113fdedfd8ddc210dcf037a6c9799b6a7656c43579695a341d831138a02debad168a270c5d8499fd5a58ca656b138394028166dd29016b16"], 0x28}, 0x1, 0x0, 0x0, 0x20000840}, 0x48000) io_uring_register$auto_IORING_REGISTER_PBUF_STATUS(r2, 0x1a, &(0x7f00000003c0)="f77a636191f75438ed3832f67cbbf4eebc75fe27a69e50363a4c3b010dc485d6f1359e964cce4cc87cb035202f8f706319723c8418ca91c3736a02f9bf316d80caf1fe28008540b2e846b513dcb7ae2a89f23859555f893e642c83c316ebd339c6388301671690f162e9f3ec2898f8a37bce152d1d94631c5335b0a36b2c171851b59dcf2e6f283529de83bc32aca38dcde0dfea2cda654ec2ffb217505d528e488784fe78b32c8e136fe8d33f9f72d389e16bb450c8b0dc22fc831ee55f4634bf20c608bd47fd04fc6d9ebff80502d0c5a025183a", 0x9) setsockopt$auto_SO_ATTACH_FILTER(r1, 0x3ff, 0x1a, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/statistics/dot11ACKFailureCount\x00', 0x7) 1m11.942349741s ago: executing program 1 (id=1254): r0 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x100000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x2, 0x2, 0x0) unshare$auto(0x40000080) r2 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f0000000240), 0x2042, 0x0) io_uring_register$auto_IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000280)="d272ec58182f42b8a617d71d9c307d0bc16a25df3168de4ad83b758b9316eb6dd8278540bb67a6991e3d5bd51a3b646180d493c2908f0f0bb4a85eb7fd4441f9db1b72b7d569642f", 0x8) ioctl$auto(0xffffffffffffffff, 0x4b3a, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000340), r1) sendmsg$auto_OVS_METER_CMD_FEATURES(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x20, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x9}, @OVS_METER_ATTR_CLEAR={0x4}]}, 0x2f}, 0x1, 0x0, 0x0, 0x2000080}, 0x4) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000080), 0xffffffffffffffff) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xc2b80, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_genetlink_get_family_id$auto_thermal(0x0, 0xffffffffffffffff) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(0xffffffffffffffff, 0x0, 0x4040005) rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f0000000000)={@siginfo_0_0={0xf5, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_int=0x81, 0x1}}}) r6 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r6, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f00000004c0)="5959e7488ae601000000000008", 0xe7}, 0x8, &(0x7f0000000180), 0x5, 0x2}, 0x5}, 0x2, 0x100) r7 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r8 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000100), r1) sendmsg$auto_CTRL_CMD_GETFAMILY2(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r8, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x44014) ioctl$auto_LOOP_CTL_ADD(r7, 0x4c80, r0) 1m10.446197188s ago: executing program 4 (id=1259): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) write$auto(r0, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) ioperm$auto(0x8, 0x6, 0xffffffff) mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000) 1m10.01040973s ago: executing program 4 (id=1260): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0xa, 0x5, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/erofs/features/fragments\x00', 0x115801, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002980)=""/4075, 0xfeb) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01032cb57000fbdbdf250a00000f0600010018"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r3 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000040), r1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000100), 0xffffffffffffffff) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) socket(0x15, 0x5, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r7 = socket(0xa, 0x801, 0x84) getsockopt$auto(r7, 0x84, 0xc, 0x0, 0x0) r8 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) ioctl$auto_I2C_SMBUS(r8, 0x720, 0x0) sendmsg$auto_NBD_CMD_CONNECT(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000040)={0x3c, r6, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="00003fff"]}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x3c}, 0x1, 0x1000000, 0x0, 0x4}, 0x8880) wait4$auto(r4, 0x0, 0x8, 0x0) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r1, &(0x7f0000002700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000026c0)={&(0x7f00000005c0)={0x608, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NCSI_ATTR_DATA={0x2a9, 0x5, "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"}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x1ff}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x1}, @NCSI_ATTR_PACKAGE_LIST={0x4}, @NCSI_ATTR_PACKAGE_LIST={0x331, 0x2, 0x0, 0x1, [@typed={0x8, 0xcb, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xde, 0x87, 0x0, 0x1, [@nested={0x4, 0x168}, @generic="bf85f1b59be6907c1e589e9fffab301cf5377ff7b4439a51ae7c874ef08ff2dc0ab396a6ef68ef2bcd154aac935fa8cc46a735c84e35abf83aa0cb58eed68f7e88d76f255e5e29c1655d203ad0f1ea43f9b899058366d545b32e41bb51b8dc056c623b1f4078cbea8d9c084e95a2c342afc43b597629a4f801a47fd60475e7e08e2b88fa57f770c816a2ab35c1e27bd6f0e9237815ad1a945c29f93ddec4e0d84b8ebbda4ff061455a63e652a956f2c74f12a459bddd278f9694c739f69b3d75804b6d5ee591dd255b598b02bfef6783480d64356310"]}, @generic="a5820c39c52454907dcc7f0b7dcaf8c28e9c79c25be9f40c8c98649621739ef745c6ceb2b57d398b99d48db36be08b94af33d741f5fdc6a9f994133f4f90135b8be40cf12be9b090f9cd96c74a5c6ecd8114a551198ee8433f7d11664d9f42866d99be420a8bd8dc10", @nested={0x1dc, 0x5e, 0x0, 0x1, [@generic="602256ecd2addad48c7b7a1b0108c12d6d41fb873901838e890be5c71b9f8f251e2bb7557b79f881aad4b6f7e81a58d9b19c5ba62e4b7378d644636891ff5aa5051db4ed80e74e0d19cecc2366779cf51ff07924ca8fdb8de4110bebad0aa861730e85ac071c8e9b62fe3e7f866bfd35eb2f258824cb89c464944d9b44ceb30b61d0dd62cf61c504eb17fb4486dce4283ef490bbd463d839ef8fb90cab9f3e3710cbc8a51bdc45a5b99beed991821e6af213b3949a2728d982a392e3e084962076ebee65e95c1afe9e0adcd111422bdd902c8dee9c8fd2784aa372d8b17a40cc3cea", @generic, @generic="b18be3baf048ada1b2d0a8df540348ee226a15c43d976e92ebb250519513ef8c644ecabc0c40add4df48e06c45971138d4d7a66433b4ae226af94fde2f5ff90228df26ccabe5bb68b6387102639f8169b95eabeab7776065c5c61dcfc441274d018c93d59846fc59f0123d141459ef557a652fafdb14f1622dbb7dcbf1c4901f75b95fa8e0d9341e", @generic="a0c7da31c63746ae77b5ecb7fcfe5c9035ab1633b22b4de571b7366f09b922dd0b6491f8624e4671858c1357f32958a01d4c9881eaf142e0531cbd40f16542c631f32da9d6f785c95e858227f469eb313f3356ad85eb", @nested={0x4, 0x136}, @generic, @typed={0x14, 0x161, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x608}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) readahead$auto(0xffffffffffffffff, 0x2, 0x10001) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000380), r1) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) 1m9.789994868s ago: executing program 1 (id=1262): unshare$auto(0x40000080) unshare$auto(0x40000080) unshare$auto(0x101) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8a241, 0x0) bpf$auto(0x5, 0x0, 0x39) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.5/usb19/19-0:1.0/usb19-port6/quirks\x00', 0x62181, 0x0) io_uring_register$auto_IORING_REGISTER_ZCRX_IFQ(0xffffffffffffffff, 0x20, &(0x7f00000000c0)="3547478e561780d7cb7eec066bbd52d20249298b4c4efebd75efe6d06a0c784d3f2f6106854ec7304805dc576fbf0c6c1cf734291ad6", 0x7) writev$auto(r0, 0x0, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x10001) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) futex$auto(0x0, 0xa, 0xf, 0x0, 0x0, 0x8) writev$auto(r2, &(0x7f0000000240)={0x0, 0x7}, 0x2) mmap$auto(0x0, 0x1cbec0fc00, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x8) clock_nanosleep$auto(0xb, 0xa000001c, 0x0, 0xffffffffffffffff) write$auto(r2, &(0x7f0000000100)='//\xf2\x02\xaa\xf3npn\xbdu\xa2\xbd\xb2\b\x11c5\xcf\x93\x14\x1b\xca\xbd\x1e\x93\xe5\xf5\x166\x00\xe0\xe2]\x82\xfa\xe3_\'\xcfys\x92$,Ag\xca\xa77\x8b\x05\x15\x8b\x15\xb5%\xf5\"\x13\xc8s\xaa\x00\x00\x00\x00\x00\x00\x00\x00\xd1\x98e7\xb3}v\ae~\xed\xc1v\xc6\xde\xca%\xcf\x00\xdfq8}\xa3\xda\x8cP\xef^-`\xd6\xf1\xa7\x9d~\xc4\xfb\x90\xdb \xb2>o\xb1\f\xfeM\xa9k3C\x88-f\xfc\xfeW\x13\xe5\x03~\xe2\xf6e\xbdu/YwW\xf5\x8fE\xc5\xda\xf0\xbf\xe5\xeaiJX\xde\xc5Tm\xa55\xe5\x9f\x87F\xc8\xf1\x9c\xdd\xec&\x89\xa8\xbf\x92\x00\xa8K\xc1\x03\xf7Yt\x8f\x0fS\xb4\xdc\xd18\xc5\x89P\x88f\x00\xc3\xdf\xb4\x81CG\x8c\xcdy\x12)n\xaa\x14\xef\x9a\xae\xd3v\x17S\xe6\x8e\xd7\xe0\xeb\\\xae\xba\xc3\x1c+M\xcc', 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x3e, 0x0) 1m9.024045184s ago: executing program 4 (id=1264): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:03.0/subsystem_vendor\x00', 0x28200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/234, 0xea) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0x5d, 0x0) r3 = socket(0x6, 0x1, 0x84) close_range$auto(r3, 0xfffffffffffff000, 0xfff) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd=r1, 0x3, 0x8, @uprobe_multi={0x81, 0x800000000001ff, 0x3d7c, 0x0, 0x0, 0x4}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) r4 = socket(0x10, 0x3, 0x9) sendmsg$auto_NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000005304"], 0x5f}, 0x1, 0x0, 0x0, 0x400400d4}, 0x40) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) 1m7.769599441s ago: executing program 4 (id=1266): mmap$auto(0x0, 0x20009, 0x7, 0x400000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r0, 0x15, 0x0, 0x9) r1 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x7fffffffffffffff, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) madvise$auto(0x0, 0x1010001, 0x100000003) r2 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0x0, &(0x7f0000000140)='\\!:\x00', 0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r3, 0xffffffffffdffe00, &(0x7f0000000140)) lseek$auto(r2, 0x7, 0x2) madvise$auto(0x1000, 0x400050, 0x9) ioprio_set$auto(0x3, 0x400000000000, 0x72e2f0a) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) munmap$auto(0x8000, 0xffffffff) recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) mmap$auto(0xb, 0xe5, 0x1, 0x15, r1, 0x101) getsockopt$auto_SO_TXTIME(r1, 0x81, 0x3d, &(0x7f0000000000)='!}\x00', &(0x7f0000000040)=0xc22c) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1m7.766700146s ago: executing program 1 (id=1274): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8020080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x23c, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@MACSEC_ATTR_OFFLOAD={0xbf, 0x9, 0x0, 0x1, [@generic="33d87adec41f0ea9df1f7f1ace12f19f36a133eb68b35b92068241bcab467c05cf36007dc914463ca053d415a1a7a53a336af0aca407e3ad1fe3c7746db1295fc1f4d8b9a166d4457c4a0fe764f5cbf8a129401f2be1e0aa13623e600ed453dd81757d6e6d6706245a143c72956a89c3cc882710227edf7f07d8c8e1576090476919ba192287d73230a42fde5e23eebc8f555bdf1ce140c5ed0989ccafd6e12cf47bc90127f74629bd8412923d75f0622de975fc5f200a80d8f458"]}, @MACSEC_ATTR_RXSC_CONFIG={0x166, 0x2, 0x0, 0x1, [@typed={0xc, 0x14e, 0x0, 0x0, @u64=0x4}, @generic="a06e44010d2c9c919494e31ab833b16729d55f275cebcb280d3bae76c65d69e4189b4c187e5b35bdcbc4bb2125a6aa1daf5cb1289a1f6b139335d2b717d4754ce03e782b28d86bd8697e6420883463cc8c4d72deaaffbe612cb1812f85a8a0c66e465173e8b5b1b2f8737da261cd926d6a3d22d7d1e196a360b323e1f11825d3c3534d54bc2397988076f44b2d4f0037b9de62705ff8e718c0c36017e877b4b8e3aae3f033f7325a1c94ddb6657cf2779936fc76e0fcb51ec597c63e9c5e240812e39931060d8adb6a4948302e4f646ad99b3407ad5b45758f22e0bfb0df201d571717730032c8", @generic="a6e9f54fa3960727bbfa28825506e8e10716d14b4c9de56772ea34cd76836537d45f368387c1478a35d0b0b215e09c91737a029e93fd181b59736c7f28ae74f40a7455cef5b093498fa702cef0993abeb587d8b4408861f3d64d894a1be15ae7818d57ae79058b48ac7777886449d7"]}]}, 0x23c}}, 0x4000001) (async) mmap$auto(0x0, 0x0, 0xfffffffffffffff3, 0x15, r0, 0xffff) (async, rerun: 64) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000380), r0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'veth1_to_bridge\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x84, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7fff}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000004}, 0x5) fsconfig$auto_SHMEM_HUGE_ADVISE(r0, 0x1, &(0x7f0000000540)='\x00', &(0x7f0000000580)="a1636c75959ebb9fac4c6855a6f71a5dfe4012a09c29033b41b26afad683b86aacf2699928dbc248c3f8e69bcfd906c7b154d6486aebb83a0bbd6826c313961973d049baa3141af9deba97448fcbf05bce5ad7876ae56cff84e1c6b7cadc8f14e83050fd24ac9967cdd4e80a900607faa23cd3a37fb29da8634deedc391371d2df2ab39c346974ab94176f111b4f317d8196003cbcc1c7a7da559a8f85bd7e1cfb871fa7dfde864379ee609d508305512045150fc1baa44030b7143a09c33116500e0806910d1bd90fb71a6b6329083183eb75dc0d99d97e4736b5dfab50ea38486eb4", 0x3) (async) r4 = socket$auto(0xffff, 0x4, 0x3) ioctl$auto_USBDEVFS_REAPURBNDELAY32(r4, 0x4004550d, &(0x7f0000000680)=0x3ff) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000700), r0) sendmsg$auto_IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8241008}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r5, 0x400, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) (async) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000840), r4) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000980)={&(0x7f0000000800), 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xac, r6, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_CNTDWN_OFFS_PRESP={0x90, 0xbb, "a22b2498b34b282172899a4c482b2dac141a80af0bfaf7cbc20e3a810963547a5195837ce79f0a5fd7bc889bc990fc29a55c99d7e82077f51cb25ffa64e39dc46a06a2d423cd28989d06d0535d2c5216a9784288c2aeea5112d197590520e40798e18760d12621d61a0ed892825caf3f83c48776ade253fe9f1b3c497f052a34c0af78b04003ab2dbe1d5b8a"}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x4}]}, 0xac}}, 0x4000000) (async, rerun: 32) mmap$auto(0xa, 0x0, 0x0, 0x11, r0, 0x8001) (async, rerun: 32) ioctl$auto_rfkill_fops_core(r4, 0x8, &(0x7f00000009c0)="03f3a7db92fd80c64a89c96a6d09ced4925e882d9f3f2a3a15c810002e8e5e09cc0d1e2b9ac5973fbec4c1f447a6d49eb5f80b9e5921cc8bcd6446463f3f929206c06502548ba7178504337fffecaf8fdcbd828deaca96f193a47775411de4b474f26a67c390956ccdcfcd240e367f4c6e66d155c5d0cd430d50609e701780b8e498aab95501d1dfc2525266390a309d0485e1988f167600a804ae78bf0da44b14") (async) ioctl$auto_XFS_IOC_SWAPEXT(r4, 0xc0c0586d, &(0x7f0000000a80)={0x8000000000000000, @inferred=r0, @inferred=r4, 0x8, 0x4, '\x00', {0x2, 0xff, 0x5, 0xffffffffffffffff, 0x0, 0x4eec, 0x2, 0x5bc, {0x2, 0x6c}, {0x1ff, 0xffffffff}, {0x7, 0x1}, 0x101, 0x1000, 0x0, 0xc, 0x80000001, 0x6be, 0x7, 0x8c, 0x7, 0x1, '\x00', 0x6, 0x400, 0x5, 0xb}}) (async) shmctl$auto_SHM_INFO(0x3, 0xe, &(0x7f0000001bc0)={{0x34, 0xee01, 0xee01, 0x200, 0x6, 0x9, 0xfc01}, 0xf92, 0x9, 0x5, 0x9, @inferred=0xffffffffffffffff, @raw=0x101, 0x2, 0x0, &(0x7f0000000b40)="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", &(0x7f0000001b40)="f2c70f580297036627ac9977698c62cfa098b101f80b55e347f7e2e206fb718a40a9ac8e71b692737524f75522dd76bfb5fe7999bffe4df1e28d07119990c264c38a44c455dda08a99e6cfcdcb6d"}) setreuid$auto(r8, r9) (async, rerun: 32) r11 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000001c40)='/dev/ram4\x00', 0x40000, 0x0) (rerun: 32) shmctl$auto_SHM_STAT_ANY(0x10001, 0xf, &(0x7f0000001d80)={{0x7ff, r9, r10, 0x10, 0x2, 0x16, 0x7ff}, 0x8, 0x40, 0x5, 0x5, @raw=0x2, @raw=0x8, 0x3, 0x0, &(0x7f0000001c80)="61b41253a66d53ab435fb98e2b4b9050813d17185de98e4e68b3e27652ab5b1ea2498b631efccb47c09f8b96cd86c924875c499f4c0cf007e7052789e89ae59ac08e1aaa9444bc6d953c0dd963db955c3b9f735ebb585dc6a9f47760467aeb5097a2dbbd7a5281360f37c6485fe43444af4a64ec17a5ca00aa", &(0x7f0000001d00)="333fb11085b51b87ab57e3a54d12a4c940e016199f085c35c06d085cb5c761bbd4051d7345eff03bea67c9a5bf506a791a2bfed09c482aecda38aa94d16590807deea2d909cc518cc6b3c053bb0447a4da41488886dd185c7cfc3f82c21a067a7c4a18c1"}) (async) r12 = epoll_create$auto(0xc00a) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000001e00), r7) (async) ioctl$auto_FIOCLEX(r12, 0x5451, 0x8001) (async) setsockopt$auto_SO_CNX_ADVICE(r11, 0x57e4c002, 0x35, &(0x7f0000001e40)='veth0_to_team\x00', 0x9) mount$auto(&(0x7f0000001e80)='veth0_vlan\x00', &(0x7f0000001ec0)='./file0\x00', &(0x7f0000001f00)='ethtool\x00', 0x1, &(0x7f0000001f40)="e1a6") ioctl$auto_EVIOCRMFF(r12, 0x40044581, &(0x7f0000001f80)=0x9) r13 = socketcall$auto_SYS_SOCKETPAIR(0x8, &(0x7f0000001fc0)=0x6) ioctl$auto_SNDCTL_TMR_CONTINUE(r13, 0x5404, &(0x7f0000002000)="c22bc2d96e2ee6ec754355f19c8a49de4a2dfb108c1c97c88c111eb371f6c47ac12a051387a82f6196904f3819b0a36f83e15ae571e8179601548607167e9bd23832cd4ad0a130dbab22c7b970862fbca011d28ecd714724467ef68762d757be341acec45ae47e680a2e1e059e662767b1434cca0bf0929088f9923e67d08a9b5056fc1c4f4465f13f7ea2e460fcca611fdebf1024bb90") (async) sendmsg$auto_GTP_CMD_GETPDP(r0, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x6c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x9cf}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}, @GTPA_TID={0xc, 0x3, 0x68de}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_O_TEI={0x8, 0x9, 0x7}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400d0}, 0x24000000) 1m7.562296258s ago: executing program 1 (id=1268): r0 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x100000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x2, 0x2, 0x0) unshare$auto(0x40000080) r2 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f0000000240), 0x2042, 0x0) io_uring_register$auto_IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000280)="d272ec58182f42b8a617d71d9c307d0bc16a25df3168de4ad83b758b9316eb6dd8278540bb67a6991e3d5bd51a3b646180d493c2908f0f0bb4a85eb7fd4441f9db1b72b7d569642f", 0x8) ioctl$auto(0xffffffffffffffff, 0x4b3a, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000340), r1) sendmsg$auto_OVS_METER_CMD_FEATURES(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x20, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x9}, @OVS_METER_ATTR_CLEAR={0x4}]}, 0x2f}, 0x1, 0x0, 0x0, 0x2000080}, 0x4) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) r6 = socket(0x2, 0x3, 0x100) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000080), 0xffffffffffffffff) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xc2b80, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_genetlink_get_family_id$auto_thermal(0x0, r6) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r6, 0x0, 0x4040005) rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f0000000000)={@siginfo_0_0={0xf5, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_int=0x81, 0x1}}}) r7 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r7, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f00000004c0)="5959e7488ae601000000000008", 0xe7}, 0x8, &(0x7f0000000180), 0x5, 0x2}, 0x5}, 0x2, 0x100) r8 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r9 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000100), r1) sendmsg$auto_CTRL_CMD_GETFAMILY2(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r9, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x44014) ioctl$auto_LOOP_CTL_ADD(r8, 0x4c80, r0) 1m6.575123678s ago: executing program 1 (id=1270): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x20842, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)="ad28da89aaa74814ba5470a20120b39348582b8a7cdb00fb40ef0eb2") mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x102, 0x0) ioctl$auto_SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840) madvise$auto(0x110c230000, 0x1, 0x9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, r3, 0x8000) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) capget$auto(&(0x7f0000000040)={0x7, 0xffffffffffffffff}, 0x0) r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r5, 0x41015500, &(0x7f00000011c0)={"44cb9bf73ee4f7d17375d0a20200fc097204973ce5c568f45cf3a37f00073e797cd85f52c60300259f0f496b584d7480859a383753a492b262cd2e665fea37decc05000020000000001eee4def7500006344c1b5ba8cd74d78b58200000000001000000001000004000000004000", "780700e6cfac240fa640711402b4c630bc5601fb47fa2955a8f7ff3993c0f4f3a6e054fed14a933119c64d9d923ef32ce561acad10f499213cd61be3b68dcaf3e5f074ce961d6a33c481d540e5282df56757d500", 0x5}) ioctl$auto_USB_RAW_IOCTL_RUN(r5, 0x5501, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r6, &(0x7f0000000240)={0x0, 0x5}, 0xa) mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000) 52.40839485s ago: executing program 36 (id=1266): mmap$auto(0x0, 0x20009, 0x7, 0x400000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r0, 0x15, 0x0, 0x9) r1 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x7fffffffffffffff, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) madvise$auto(0x0, 0x1010001, 0x100000003) r2 = openat$auto_null_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fsconfig$auto_SHMEM_HUGE_DENY(0xffffffffffffffff, 0x0, &(0x7f0000000140)='\\!:\x00', 0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r3, 0xffffffffffdffe00, &(0x7f0000000140)) lseek$auto(r2, 0x7, 0x2) madvise$auto(0x1000, 0x400050, 0x9) ioprio_set$auto(0x3, 0x400000000000, 0x72e2f0a) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/error_log\x00', 0xb01, 0x0) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) munmap$auto(0x8000, 0xffffffff) recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) mmap$auto(0xb, 0xe5, 0x1, 0x15, r1, 0x101) getsockopt$auto_SO_TXTIME(r1, 0x81, 0x3d, &(0x7f0000000000)='!}\x00', &(0x7f0000000040)=0xc22c) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 51.061290059s ago: executing program 37 (id=1270): openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x20842, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)="ad28da89aaa74814ba5470a20120b39348582b8a7cdb00fb40ef0eb2") mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x102, 0x0) ioctl$auto_SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pagetypeinfo\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840) madvise$auto(0x110c230000, 0x1, 0x9) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, r3, 0x8000) select$auto(0x8, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/usb_storage/parameters/delay_use\x00', 0x181942, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) capget$auto(&(0x7f0000000040)={0x7, 0xffffffffffffffff}, 0x0) r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_INIT(r5, 0x41015500, &(0x7f00000011c0)={"44cb9bf73ee4f7d17375d0a20200fc097204973ce5c568f45cf3a37f00073e797cd85f52c60300259f0f496b584d7480859a383753a492b262cd2e665fea37decc05000020000000001eee4def7500006344c1b5ba8cd74d78b58200000000001000000001000004000000004000", "780700e6cfac240fa640711402b4c630bc5601fb47fa2955a8f7ff3993c0f4f3a6e054fed14a933119c64d9d923ef32ce561acad10f499213cd61be3b68dcaf3e5f074ce961d6a33c481d540e5282df56757d500", 0x5}) ioctl$auto_USB_RAW_IOCTL_RUN(r5, 0x5501, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r6, &(0x7f0000000240)={0x0, 0x5}, 0xa) mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x100000000) 50.79870644s ago: executing program 5 (id=1323): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) write$auto(r0, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) ioperm$auto(0x8, 0x6, 0xffffffff) mremap$auto(0x200000000000, 0x4, 0x4, 0x3, 0x103000000) 50.085943083s ago: executing program 5 (id=1325): r0 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x100000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x2, 0x2, 0x0) unshare$auto(0x40000080) r2 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f0000000240), 0x2042, 0x0) io_uring_register$auto_IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000280)="d272ec58182f42b8a617d71d9c307d0bc16a25df3168de4ad83b758b9316eb6dd8278540bb67a6991e3d5bd51a3b646180d493c2908f0f0bb4a85eb7fd4441f9db1b72b7d569642f", 0x8) ioctl$auto(0xffffffffffffffff, 0x4b3a, 0x1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000340), r1) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) r5 = socket(0x2, 0x3, 0x100) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000080), 0xffffffffffffffff) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xc2b80, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_genetlink_get_family_id$auto_thermal(0x0, r5) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_FLUSH(r5, 0x0, 0x4040005) rt_sigqueueinfo$auto(0x0, 0x4, &(0x7f0000000000)={@siginfo_0_0={0xf5, 0x14, 0x7e73, @_timer={0x0, 0x80000001, @sival_int=0x81, 0x1}}}) r6 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r6, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f00000004c0)="5959e7488ae601000000000008", 0xe7}, 0x8, &(0x7f0000000180), 0x5, 0x2}, 0x5}, 0x2, 0x100) r7 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r8 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000100), r1) sendmsg$auto_CTRL_CMD_GETFAMILY2(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r8, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x44014) ioctl$auto_LOOP_CTL_ADD(r7, 0x4c80, r0) 48.104506s ago: executing program 5 (id=1329): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) timer_settime$auto(0x0, 0x5, &(0x7f00000000c0)={{0x8, 0x10004}, {0x9, 0x800000010}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0x3, 0x0, [{0x277, 0x3}]}) socketpair$auto(0x1e, 0x5, 0xfffffffe, 0x0) r3 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x12}}, 0x54) getsockopt$auto(r3, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x4bb) madvise$auto(0x0, 0xffffffffffff0005, 0x19) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x4002, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) madvise$auto(0x0, 0x2003f0, 0x15) 47.651004206s ago: executing program 5 (id=1330): setxattrat$auto(0xffffffffffffffff, 0x0, 0x1000, 0x0, 0x0, 0x10) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) ioctl$auto(0x3, 0x80085617, 0x38) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="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", 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(r1, 0x5101, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) splice$auto(r0, &(0x7f0000000340)=0x6, r0, &(0x7f0000000380)=0x9, 0x10000, 0x6) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000029c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r2, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000002a00)={0x2c, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_FEC_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x400000, 0x8, 0x5, 0x7, 0x6, 0x1f2, 0x9, 0xec, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x400]}, 0x0, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') madvise$auto(0xffffffff, 0x6d, 0x4) 46.326453047s ago: executing program 5 (id=1332): mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x5, 0x3, 0x3fda, 0x8, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/pci0000:00/0000:00:03.0/subsystem_vendor\x00', 0x28200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/234, 0xea) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) io_uring_setup$auto(0x5d, 0x0) r3 = socket(0x6, 0x1, 0x84) close_range$auto(r3, 0xfffffffffffff000, 0xfff) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd=r1, 0x3, 0x8, @uprobe_multi={0x81, 0x800000000001ff, 0x3d7c, 0x0, 0x0, 0x4}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) r4 = socket(0x10, 0x3, 0x9) sendmsg$auto_NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000005304"], 0x5f}, 0x1, 0x0, 0x0, 0x400400d4}, 0x40) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) 44.77743881s ago: executing program 5 (id=1334): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) (async) madvise$auto(0x8, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x8, 0x4, 0x6) (async) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x7) (async) r1 = pidfd_open$auto(0x1, 0x0) newfstatat$auto(r1, &(0x7f00000003c0)=':,\x00', &(0x7f00000004c0)={0x0, 0x2, 0x8, 0x5, 0xee01, 0xee01, 0x0, 0x1, 0x4, 0x9a05, 0xffff, 0xd47, 0xe, 0x101, 0x0, 0x9, 0x80000001}, 0xfffffffe) (async, rerun: 64) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(r0, 0x6, &(0x7f00000005c0)={@siginfo_0_0={0x5b, 0x1000, 0xe8a, @_sigpoll={0x0, r0}}}, 0x2) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) socket(0x10, 0x2, 0xc) (async) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="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", 0x2f8) (async) ioctl$auto_SNDCTL_SEQ_SYNC(r2, 0x5101, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/neigh/wg0/base_reachable_time_ms\x00', 0x88502, 0x0) bpf$auto_BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=@bpf_attr_1={r3, 0x1, @value=0x7fffffff, 0x1}, 0xfc2) (async) socket$nl_generic(0x10, 0x3, 0x10) msgsnd$auto(0xc92, &(0x7f00000001c0)={0x7, 0xef}, 0x6, 0x200) r5 = open_tree_attr$auto(r4, &(0x7f0000000400)=':,\x00', 0xcdd, &(0x7f0000000580)={0x10, 0x6, 0x2, @inferred=r2}, 0xcd) setsockopt$auto_SO_MAX_PACING_RATE(r5, 0x1, 0x2f, &(0x7f0000000340)='\x8fbn\xdc\xe4\xe7O\x8d\xa5F\xe6z\xbe\x8e^\xfe\xc4[33_]\x10\xf7b\xef\x99\x165u5JE\x01\"\x83\x91#,\x81\x03\xe3\x8d\xa2\x17\'$5Y\xa8\x9a`\xabn\x1e\xc9\x06~\xa0\x85)T_\xb3e\x9fQ\x02\x1e\x04O_f\x9d\xacA6\x01\bJOJ?F\xc1s\xf8s\x1bP\xfbn\x11h\xbc|\xecc\xdb\xea\xda\x18\x05\"D3\x03\x00'/119, 0x8) (async) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card0/pcm0p/sub4/status\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000000100)=""/184, 0xb8) (async) write$auto(r3, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/hid/drivers/elo/new_id\x00', 0x24a420, 0x0) (async, rerun: 32) r8 = socket(0xa, 0x5, 0x84) (rerun: 32) mmap$auto(0x0, 0x40000000bdb, 0x20df, 0xeb1, 0x401, 0x7ffe) (async) io_uring_setup$auto(0x101, 0x0) getsockopt$auto(r8, 0x84, 0x80, 0x0, 0x0) (async) write$auto(r7, &(0x7f0000000000)='9\x00d\t\x00\x00\x00\x00\x00\x00\x00(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x1) 29.39749697s ago: executing program 38 (id=1334): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) (async) madvise$auto(0x8, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x8, 0x4, 0x6) (async) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x7) (async) r1 = pidfd_open$auto(0x1, 0x0) newfstatat$auto(r1, &(0x7f00000003c0)=':,\x00', &(0x7f00000004c0)={0x0, 0x2, 0x8, 0x5, 0xee01, 0xee01, 0x0, 0x1, 0x4, 0x9a05, 0xffff, 0xd47, 0xe, 0x101, 0x0, 0x9, 0x80000001}, 0xfffffffe) (async, rerun: 64) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(r0, 0x6, &(0x7f00000005c0)={@siginfo_0_0={0x5b, 0x1000, 0xe8a, @_sigpoll={0x0, r0}}}, 0x2) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) socket(0x10, 0x2, 0xc) (async) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="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", 0x2f8) (async) ioctl$auto_SNDCTL_SEQ_SYNC(r2, 0x5101, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/neigh/wg0/base_reachable_time_ms\x00', 0x88502, 0x0) bpf$auto_BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=@bpf_attr_1={r3, 0x1, @value=0x7fffffff, 0x1}, 0xfc2) (async) socket$nl_generic(0x10, 0x3, 0x10) msgsnd$auto(0xc92, &(0x7f00000001c0)={0x7, 0xef}, 0x6, 0x200) r5 = open_tree_attr$auto(r4, &(0x7f0000000400)=':,\x00', 0xcdd, &(0x7f0000000580)={0x10, 0x6, 0x2, @inferred=r2}, 0xcd) setsockopt$auto_SO_MAX_PACING_RATE(r5, 0x1, 0x2f, &(0x7f0000000340)='\x8fbn\xdc\xe4\xe7O\x8d\xa5F\xe6z\xbe\x8e^\xfe\xc4[33_]\x10\xf7b\xef\x99\x165u5JE\x01\"\x83\x91#,\x81\x03\xe3\x8d\xa2\x17\'$5Y\xa8\x9a`\xabn\x1e\xc9\x06~\xa0\x85)T_\xb3e\x9fQ\x02\x1e\x04O_f\x9d\xacA6\x01\bJOJ?F\xc1s\xf8s\x1bP\xfbn\x11h\xbc|\xecc\xdb\xea\xda\x18\x05\"D3\x03\x00'/119, 0x8) (async) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/card0/pcm0p/sub4/status\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000000100)=""/184, 0xb8) (async) write$auto(r3, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/hid/drivers/elo/new_id\x00', 0x24a420, 0x0) (async, rerun: 32) r8 = socket(0xa, 0x5, 0x84) (rerun: 32) mmap$auto(0x0, 0x40000000bdb, 0x20df, 0xeb1, 0x401, 0x7ffe) (async) io_uring_setup$auto(0x101, 0x0) getsockopt$auto(r8, 0x84, 0x80, 0x0, 0x0) (async) write$auto(r7, &(0x7f0000000000)='9\x00d\t\x00\x00\x00\x00\x00\x00\x00(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x1) 10.037883252s ago: executing program 8 (id=1416): syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x44, 0x0, 0x0}, 0x58) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x2, 0x7b2, 0x1, @relative_fd=0x2, 0x80}, 0x96) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(r0, 0x0, 0x10007c) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) timer_settime$auto(0x0, 0x801, &(0x7f0000000000)={{0xa6, 0x7}, {0x0, 0x3}}, 0x0) mmap$auto(0x800000, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mseal$auto(0x0, 0x200, 0x1000010003) madvise$auto(0x0, 0x2003ec, 0x14) sync_file_range$auto(0xffffffffffffffff, 0x1, 0xa31e, 0x7) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) mmap$auto(0x0, 0x838, 0x3, 0xeb1, 0xfffffffffffffffa, 0xa83c) io_uring_setup$auto(0xf00, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x29, 0x2, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) setsockopt$auto_SO_DEBUG(r2, 0x6, 0x1, 0x0, 0xda3) write$auto(r1, 0x0, 0xa5e) timer_create$auto(0x9, 0x0, 0x0) 9.190849405s ago: executing program 8 (id=1419): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0xa, 0x5, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/erofs/features/fragments\x00', 0x115801, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002980)=""/4075, 0xfeb) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01032cb57000fbdbdf250a00000f0600010018"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r3 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000040), r1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000100), 0xffffffffffffffff) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) socket(0x15, 0x5, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r7 = socket(0xa, 0x801, 0x84) getsockopt$auto(r7, 0x84, 0xc, 0x0, 0x0) r8 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) ioctl$auto_I2C_SMBUS(r8, 0x720, 0x0) sendmsg$auto_NBD_CMD_CONNECT(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000040)={0x3c, r6, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x3c}, 0x1, 0x1000000, 0x0, 0x4}, 0x8880) wait4$auto(r4, 0x0, 0x8, 0x0) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r1, &(0x7f0000002700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000026c0)={&(0x7f00000005c0)={0x608, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NCSI_ATTR_DATA={0x2a9, 0x5, "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"}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x1ff}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x1}, @NCSI_ATTR_PACKAGE_LIST={0x4}, @NCSI_ATTR_PACKAGE_LIST={0x331, 0x2, 0x0, 0x1, [@typed={0x8, 0xcb, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xde, 0x87, 0x0, 0x1, [@nested={0x4, 0x168}, @generic="bf85f1b59be6907c1e589e9fffab301cf5377ff7b4439a51ae7c874ef08ff2dc0ab396a6ef68ef2bcd154aac935fa8cc46a735c84e35abf83aa0cb58eed68f7e88d76f255e5e29c1655d203ad0f1ea43f9b899058366d545b32e41bb51b8dc056c623b1f4078cbea8d9c084e95a2c342afc43b597629a4f801a47fd60475e7e08e2b88fa57f770c816a2ab35c1e27bd6f0e9237815ad1a945c29f93ddec4e0d84b8ebbda4ff061455a63e652a956f2c74f12a459bddd278f9694c739f69b3d75804b6d5ee591dd255b598b02bfef6783480d64356310"]}, @generic="a5820c39c52454907dcc7f0b7dcaf8c28e9c79c25be9f40c8c98649621739ef745c6ceb2b57d398b99d48db36be08b94af33d741f5fdc6a9f994133f4f90135b8be40cf12be9b090f9cd96c74a5c6ecd8114a551198ee8433f7d11664d9f42866d99be420a8bd8dc10", @nested={0x1dc, 0x5e, 0x0, 0x1, [@generic="602256ecd2addad48c7b7a1b0108c12d6d41fb873901838e890be5c71b9f8f251e2bb7557b79f881aad4b6f7e81a58d9b19c5ba62e4b7378d644636891ff5aa5051db4ed80e74e0d19cecc2366779cf51ff07924ca8fdb8de4110bebad0aa861730e85ac071c8e9b62fe3e7f866bfd35eb2f258824cb89c464944d9b44ceb30b61d0dd62cf61c504eb17fb4486dce4283ef490bbd463d839ef8fb90cab9f3e3710cbc8a51bdc45a5b99beed991821e6af213b3949a2728d982a392e3e084962076ebee65e95c1afe9e0adcd111422bdd902c8dee9c8fd2784aa372d8b17a40cc3cea", @generic, @generic="b18be3baf048ada1b2d0a8df540348ee226a15c43d976e92ebb250519513ef8c644ecabc0c40add4df48e06c45971138d4d7a66433b4ae226af94fde2f5ff90228df26ccabe5bb68b6387102639f8169b95eabeab7776065c5c61dcfc441274d018c93d59846fc59f0123d141459ef557a652fafdb14f1622dbb7dcbf1c4901f75b95fa8e0d9341e", @generic="a0c7da31c63746ae77b5ecb7fcfe5c9035ab1633b22b4de571b7366f09b922dd0b6491f8624e4671858c1357f32958a01d4c9881eaf142e0531cbd40f16542c631f32da9d6f785c95e858227f469eb313f3356ad85eb", @nested={0x4, 0x136}, @generic, @typed={0x14, 0x161, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x608}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) readahead$auto(0xffffffffffffffff, 0x2, 0x10001) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000380), r1) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) 7.601111863s ago: executing program 3 (id=1424): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES64, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20008891}, 0x4) r0 = socket(0x10, 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/mm/ksm/advisor_max_cpu\x00', 0x420a00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000340)=""/4096, 0x1000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) r2 = prctl$auto_PR_SET_MM_BRK(0x7, 0x7, 0x0, 0x80000001, 0x7) ioctl$auto_FS_IOC_RESVSP64(r2, 0x4030582a, 0x3) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c01, &(0x7f00000002c0)={0x0, 0xf}, 0xd, 0x0, 0x0, 0x7}, 0x7}, 0x5, 0x0) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) getsockopt$auto_SO_DOMAIN(r0, 0x75, 0x27, &(0x7f00000000c0)=',#\x00', &(0x7f00000001c0)=0x5302) 7.489844159s ago: executing program 8 (id=1426): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) clock_gettime$auto(0x6, &(0x7f0000000000)={0x5}) write$auto_fops_init_pkru_pkeys(0xffffffffffffffff, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/lockd/parameters/nlm_timeout\x00', 0x105042, 0x0) write$auto(r1, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) sendmmsg$auto(r0, 0x0, 0x8, 0x311) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) select$auto(0x7, &(0x7f0000000080)={[0x4, 0xfffffffffffffffd, 0x7, 0x3, 0xc, 0x6, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x203, 0xd3, 0x1]}, 0x0, 0x0, 0x0) capset$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000006c0)={{0x0, 0x5ac, &(0x7f00000000c0)={0x0, 0x49}, 0x2, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x1ef) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/smbd_max_receive_size\x00', 0x103742, 0x0) r2 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) prctl$auto(0x23, 0x3, 0x2009, 0x0, 0x0) socket(0xa, 0x3, 0x0) landlock_restrict_self$auto(r2, 0xb) get_robust_list$auto(0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x18dd01, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x1) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) unshare$auto(0x40000080) unshare$auto(0x40000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) mmap$auto(0x0, 0x7, 0x5, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto(0x6, 0x1, 0x25, 0xfffffffffffffffe, 0x0) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x4000000) 7.375001959s ago: executing program 3 (id=1427): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) ustat$auto(0x801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/gid_map\x00', 0x86, 0x0) pread64$auto(r0, 0x0, 0x4, 0x85) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) r1 = socket(0xa, 0x3, 0x3a) ioctl$auto(r1, 0x8936, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/ext4/sda1/first_error_time\x00', 0xe80, 0x0) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000140), 0xffffffffffffffff) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = io_uring_setup$auto(0x3, 0x0) ioctl$auto_VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x5) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80) sysfs$auto(0x2, 0x6, 0x400000000000003) socketcall$auto_SYS_GETSOCKOPT(0xf, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r3 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r3, 0x0, 0x80, 0x0, 0x0) setsockopt$auto(0x3, 0x4, 0x1, 0x0, 0x3) sysfs$auto(0x2, 0x23, 0x0) fsopen$auto(0x0, 0x1) r4 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmsg$auto_SMC_NETLINK_DUMP_UEID(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc8, r4, 0x2, 0x70bd27, 0x25dfdbfd, {}, "08d0b4a8fc80245a38ec0abbcafd4b66e869efa42399a50d4954032caa8b429353fec25a0aafe2bcaa145ab95be5d4ef618d1bf7f2804ade796462a0f7fb8c653e69f4ce5688320dade2e78e4999a0a2d01ba0abe03d7ddb6e966813bcca8bd7a80f581a4d9cf5c2683301fd606db2337b99bbf97b9e8239c892a50d6a7b122eabcaa65ff064bc970c50fb2a0174126723c835799daa8fe42e466dc37e198a8c2b3d5dcd42fc11ea5f03a11fa9ef9ad697a26f"}, 0xc8}, 0x1, 0x0, 0x0, 0x20004004}, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) socket(0x2, 0x2, 0x1) 6.963076738s ago: executing program 3 (id=1429): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x6, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x2001fffc) r1 = openat$auto_vrr_range_fops_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/dri/vkms/Virtual-1/vrr_range\x00', 0x800, 0x0) read$auto_vrr_range_fops_(r1, &(0x7f0000000180)=""/85, 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x40081) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001640), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="82fed9da18000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf256d00000004002a00"], 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) r4 = wait4$auto(0xffffffffffffffff, &(0x7f0000000080)=0x7, 0x80000001, &(0x7f0000000280)={{0x2, 0x7}, {0x9, 0x400}, 0x10000, 0x7, 0x100000001, 0x2, 0x80, 0xfffffffffffff801, 0x6, 0x1, 0x100000000, 0x9, 0x8, 0x8, 0x4, 0x1}) sendmsg$auto_NL80211_CMD_SET_CQM(r0, &(0x7f000000a240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f000000a200)={&(0x7f000000a280)={0xcec, r2, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_MAC_HINT={0xe, 0xc8, "9f62528f1003312e23cf"}, @NL80211_ATTR_MLO_LINKS={0xcc0, 0x138, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7d, 0xbe, "c4794f65f44c8e66cca81318e0445ccba06e59312255cf4423b95e59d61d2984c850e3a8f148775cc96e461cd7f7198e64286587e58146b5274901347c21ead666ead611ce44a7d9c2db49157e870edaa731520352b3619f524ff7a40a3aa3f46ed4a55cf0c484d332acc5b41da71210c808f3f3c8d90e1988"}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x5}]}, {0x23c, 0x0, 0x0, 0x1, [@NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "c34ca1"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e23}, @NL80211_ATTR_EMA_RNR_ELEMS={0x213, 0x145, 0x0, 0x1, [@typed={0x4, 0xb4}, @generic="3c144559e4f50bf47f371eba39b5cefe53a708056cd1104bb25ae398e53ba78d2664017bbaeca743d5528f58dd55f97f7ae71b223fe0ebbbb568d014fc68dc06d1b470565077406e5ab29248142a7a9077c5e0f11f05f98a02c44eec9f69bf66dd580a816902409a5357f6", @nested={0xd3, 0x11, 0x0, 0x1, [@nested={0x4, 0xba}, @nested={0x4, 0x14f}, @typed={0x8, 0x84, 0x0, 0x0, @pid=r4}, @generic="ac7e80680ddb3a21dd756140fa8209a2a96365f1dfbddd7cb88cd534f215de15030e8804325d9baee25d93e49b7cbd941c28da25d4004e2b0742d72e394ebe855f6e4aefebac12c0c0b308ce596419b2fd4ac4d196911b7d3c2eaebeb96e3e642eab5d60fd0ac66b65fc7aefde80f557d3a49b0e5fe57ae5ca95391a7e46cf6b49a83c752baba6762dc306c9a034b61b8e36274913b576cb4f2aae994e55dbb94f753f1ea5750ee63b40e1d95956e26f8cddfba936ef95c35d014d9523910d"]}, @nested={0xc9, 0x56, 0x0, 0x1, [@generic="9866f83c82e08983d2cb7e0d6ed417d314fc1fe2814ea914a99341da903942f0556c93c74a856d52509e3eadf871a9ad79769832ba7a967be5bbddb7dedd6df4", @generic="013e7a9a8fe36d6e20ed476aab76a16bd702534d8f4bba1ec75a2a3923e0ad18db7cd2e08b685fa646305b379b9233a341", @nested={0x4, 0x2e}, @nested={0x4, 0x84}, @typed={0x8, 0xcc, 0x0, 0x0, @pid}, @typed={0x34, 0x24, 0x0, 0x0, @binary="6101edd5190539fb373c5da5a452317d5ae684147d0a0f8f69add74b52c3a42c3cac4149b492d957a0083b14a9dd0b52"}, @nested={0x4, 0xb9}, @nested={0x4, 0x98}, @nested={0x4, 0x2e}, @nested={0x4, 0x105}]}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, {0x3b0, 0x0, 0x0, 0x1, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0xca}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_IE_ASSOC_RESP={0x399, 0x80, "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"}]}, {0x28c, 0x0, 0x0, 0x1, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x10}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "5cb5034c024abde6661081a869e4515d2108eac2058412849b27"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xd, 0x13, "869527164f3966c8c3"}, @NL80211_ATTR_IE_PROBE_RESP={0x24e, 0x7f, "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"}]}, {0x3b8, 0x0, 0x0, 0x1, [@NL80211_ATTR_HT_CAPABILITY={0x3ab, 0x1f, "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"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}]}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}]}, 0xcec}, 0x1, 0x0, 0x0, 0x800d808}, 0x20040871) write$auto(0x3, 0x0, 0x100000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r5, 0x5646, r5) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) write$auto(r6, &(0x7f0000000100)='%U{\fb\x00aU\xca\xc9:\xcfZ', 0xffffffff) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) read$auto(0x3, 0x0, 0x80) mmap$auto(0x1, 0x22, 0x4000000000df, 0xeb1, r6, 0x7f) gettid() socket(0x10, 0x2, 0x0) brk$auto(0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) migrate_pages$auto(0x0, 0x74, &(0x7f0000000780)=0x8000000000000001, &(0x7f00000007c0)=0x1) timer_gettime$auto(0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) 6.655471224s ago: executing program 7 (id=1431): socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x400008, 0x4, 0x9b72, 0xffffffffffffffff, 0x8000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0xe7a, 0x34f, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x0, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x6a) r2 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001180)='/dev/input/mice\x00', 0x1a1382, 0x0) writev$auto(r2, &(0x7f0000000100)={&(0x7f0000000140), 0x7111}, 0x8) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000040)) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000080)) madvise$auto(0x0, 0x8000000000000001, 0x15) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) 5.438640933s ago: executing program 8 (id=1433): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x96}, 0x7, 0x3, 0x5, 0x2a) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nbd10\x00', 0x44102, 0x0) r1 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$auto_NVRAM_SETCKS(r1, 0x7041, 0x0) close_range$auto(r0, 0xffffffffffffffff, 0x3) socket(0x28, 0x800, 0xe83) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x8b2bfbd013cb3912, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x2, 0x400008, 0x0, 0x100000011, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x9, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0) ppoll$auto(&(0x7f0000000040)={0xffffffffffffffff, 0x4, 0xa7}, 0x1c, &(0x7f0000000140)={0x0, 0xa0e}, 0x0, 0x8) read$auto(r2, 0x0, 0xfffffdeb) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000600)='/sys/kernel/mm/lru_gen/enabled\x00', 0x2062, 0x0) sendfile$auto(0x3, r2, 0x0, 0x400000000006) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sr0\x00', 0x8ee46, 0x0) mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000001c0), 0x141f42, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000200)='/dev/usbmon37\x00', 0x420480, 0x0) mmap$auto(0x100000003, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x27ffe) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D1\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x4, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) 4.501539039s ago: executing program 9 (id=1435): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0xa, 0x5, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/erofs/features/fragments\x00', 0x115801, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002980)=""/4075, 0xfeb) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01032cb57000fbdbdf250a00000f0600010018"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r3 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000040), r1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000100), 0xffffffffffffffff) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) socket(0x15, 0x5, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r7 = socket(0xa, 0x801, 0x84) getsockopt$auto(r7, 0x84, 0xc, 0x0, 0x0) r8 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) ioctl$auto_I2C_SMBUS(r8, 0x720, 0x0) sendmsg$auto_NBD_CMD_CONNECT(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000040)={0x3c, r6, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x3c}, 0x1, 0x1000000, 0x0, 0x4}, 0x8880) wait4$auto(r4, 0x0, 0x8, 0x0) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r1, &(0x7f0000002700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000026c0)={&(0x7f00000005c0)={0x608, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NCSI_ATTR_DATA={0x2a9, 0x5, "e47f2a0f2ac8b2f1f3458062b9bfa5f1b8336a9a170a9f04e5b91c300eae1926e1f18a8a1f5b41fb3cc5f3110f63a5ebbe3aeed42a09f2616eb44fe3fdc2263d7a3e940b0e2630b013497bc606b89e2e178cc701c1c5a5e5b56efd77fbc9ae3a2cff2a29fa27ebf0aa30c6b54d5b8298eb3d82e13f9e36aae9cf94c9d67ef3eba9fc60f5e99cf4fd0b80c606a7f143824d58b6d6dd03bd856bdac6e22fe814fb30cfe4124838aa336d457a6a8f85f6cde221058b7cf7a3e5b1699be48e2cb8262e841df6e296ae229a8a99bcb5d13c86ee454fc96650616faf2e9952e6e9bfe1cb67c41b4ac2bbfd86d3b8f6f9433cffec25b43cb5793b137eaf77e45d2e9dc3ce07b617a1a744fdfa087c89ec777f1de8186bbdf1b1c802973a4654523d9bd8f677178ae7e63d125fdfd357346ec4a2416723927aedd1cf930ec97e4fe4b6076d0e5f62c772bb67a2ab2e421d2c0da5c9904fb1d10b30cace30e70eb5619dfed47f84f767be1025354add8dcf59809eb7985913001cbd4afcdf3ad49956d5a37ea5d926ab0060af07661844371c040d49252d9b6ee0dbd5d70d6d6bee03265a49ec298761dbc209c04f0438474070ef6e3f17e9aab9ec1bf8ebeb599926ef9602d83a59c911b2409fb5f9795cb717b07d6b0f920df47d5346d53e08f1561013b2d527edf09c1743ccd10f86eeb65ad5ebacd5f498ca5cb62bc2e4c3651c7d5a7c6185a641d0b32e9b7091aeffbcbec792cdfdebcc83ca417468af6eb778259df834bdab0c06e50ef8e702c72f096b3cb3ab7870498c4382f769ff1c8eceb53e495173bbf7ff66bbed84ff3ea851f0c07fe77e4b6b43f8a234d68cf27c9d11f125f49f7a7a84fd23104e92a1cd5a5255313e199b0106c2f6de527bec3be97f61904223796e4217f910f0f149383e4194de6c7a042f9e61cf64564a16065d5a7e4bdd313cc1"}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x1ff}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x1}, @NCSI_ATTR_PACKAGE_LIST={0x4}, @NCSI_ATTR_PACKAGE_LIST={0x331, 0x2, 0x0, 0x1, [@typed={0x8, 0xcb, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xde, 0x87, 0x0, 0x1, [@nested={0x4, 0x168}, @generic="bf85f1b59be6907c1e589e9fffab301cf5377ff7b4439a51ae7c874ef08ff2dc0ab396a6ef68ef2bcd154aac935fa8cc46a735c84e35abf83aa0cb58eed68f7e88d76f255e5e29c1655d203ad0f1ea43f9b899058366d545b32e41bb51b8dc056c623b1f4078cbea8d9c084e95a2c342afc43b597629a4f801a47fd60475e7e08e2b88fa57f770c816a2ab35c1e27bd6f0e9237815ad1a945c29f93ddec4e0d84b8ebbda4ff061455a63e652a956f2c74f12a459bddd278f9694c739f69b3d75804b6d5ee591dd255b598b02bfef6783480d64356310"]}, @generic="a5820c39c52454907dcc7f0b7dcaf8c28e9c79c25be9f40c8c98649621739ef745c6ceb2b57d398b99d48db36be08b94af33d741f5fdc6a9f994133f4f90135b8be40cf12be9b090f9cd96c74a5c6ecd8114a551198ee8433f7d11664d9f42866d99be420a8bd8dc10", @nested={0x1dc, 0x5e, 0x0, 0x1, [@generic="602256ecd2addad48c7b7a1b0108c12d6d41fb873901838e890be5c71b9f8f251e2bb7557b79f881aad4b6f7e81a58d9b19c5ba62e4b7378d644636891ff5aa5051db4ed80e74e0d19cecc2366779cf51ff07924ca8fdb8de4110bebad0aa861730e85ac071c8e9b62fe3e7f866bfd35eb2f258824cb89c464944d9b44ceb30b61d0dd62cf61c504eb17fb4486dce4283ef490bbd463d839ef8fb90cab9f3e3710cbc8a51bdc45a5b99beed991821e6af213b3949a2728d982a392e3e084962076ebee65e95c1afe9e0adcd111422bdd902c8dee9c8fd2784aa372d8b17a40cc3cea", @generic, @generic="b18be3baf048ada1b2d0a8df540348ee226a15c43d976e92ebb250519513ef8c644ecabc0c40add4df48e06c45971138d4d7a66433b4ae226af94fde2f5ff90228df26ccabe5bb68b6387102639f8169b95eabeab7776065c5c61dcfc441274d018c93d59846fc59f0123d141459ef557a652fafdb14f1622dbb7dcbf1c4901f75b95fa8e0d9341e", @generic="a0c7da31c63746ae77b5ecb7fcfe5c9035ab1633b22b4de571b7366f09b922dd0b6491f8624e4671858c1357f32958a01d4c9881eaf142e0531cbd40f16542c631f32da9d6f785c95e858227f469eb313f3356ad85eb", @nested={0x4, 0x136}, @generic, @typed={0x14, 0x161, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x608}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) readahead$auto(0xffffffffffffffff, 0x2, 0x10001) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000380), r1) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) 4.375628309s ago: executing program 7 (id=1436): r0 = mq_open$auto(0x0, 0x7e, 0x9, 0x0) mq_notify$auto(r0, &(0x7f0000000180)={@sival_ptr=0x0, @inferred=r0, 0x0, @_sigev_thread={0x0, 0x0}}) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x401, 0x0) mmap$auto(0xfffffffffffffffc, 0x400008, 0x401, 0x10009b72, 0xc, 0x1ff) writev$auto(0x4, 0x0, 0x1) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) copy_file_range$auto(0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffff9, 0xffffffffffffffff, 0x0, 0x8000000000000002, 0x0) r3 = socket(0x1a, 0x3, 0x9) connect$auto(r1, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r3) sendmsg$auto_NL80211_CMD_FRAME(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000004", @ANYRES16=r4, @ANYBLOB="090027bd7000fedbdf253b0000000c007a800800b300", @ANYRES32=0x0, @ANYBLOB="0500180102000000"], 0x28}, 0x1, 0x0, 0x0, 0x10008000}, 0x40004) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) mremap$auto(0x1ff000, 0x8, 0x843, 0x3, 0xfffff000) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x2, 0x0) ioctl$auto_EVIOCGMASK(r5, 0x80104592, &(0x7f0000000000)={0x11, 0x800004, 0x8}) write$auto(r5, 0x0, 0x47ffffdf2) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, 0x0, 0x8000, 0x1}, 0x8}, 0x1, 0x9) ioctl$auto_BLKPG2(r2, 0x1269, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x7, 0x400000000020009, 0x4000000000df, 0xeb1, r1, 0x7dfd) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) r6 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x782, 0x0) read$auto_transaction_log_fops_(r6, &(0x7f0000000100)=""/3, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 4.035474011s ago: executing program 8 (id=1437): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0xfffffffffffffff7, 0x0, 0x5, 0x10, r1, 0x2) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) ioctl$auto_USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) mbind$auto(0x0, 0x40000000001, 0x4, 0x0, 0x80000007, 0x2) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x15, 0x5, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bond0/bonding/slaves\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000000000)="2dc2f4045de01fe67fa93d2c44e76f", 0xf) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0xfffffdb2) socket(0xa, 0x801, 0x84) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) setfsuid$auto(0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000200)=0x89) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) mremap$auto(0x772, 0x6, 0x7, 0x8000, 0x100000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x123801, 0x0) 3.835268279s ago: executing program 9 (id=1438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002e40), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000003500)={&(0x7f0000002e80)={0x18, r1, 0x211, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x810) (async) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000003500)={&(0x7f0000002e80)={0x18, r1, 0x211, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x810) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/memory.swappiness\x00', 0x181082, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/hugetlb.1GB.max_usage_in_bytes\x00', 0x1002, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/hugetlb.1GB.max_usage_in_bytes\x00', 0x1002, 0x0) read$auto(r3, &(0x7f0000000040)='%]!@.,\xcd[+]%!*,]&', 0x6) sendfile$auto(r2, r2, 0x0, 0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) 3.642780086s ago: executing program 7 (id=1439): r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(r0, 0x0, 0x10, 0x0, 0x17) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x102, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async, rerun: 32) clock_settime$auto(0xfffffffb, &(0x7f00000000c0)={0xfffffffffffffff7, 0x5}) (rerun: 32) madvise$auto(0x400000, 0x6, 0x15) syz_genetlink_get_family_id$auto_nlbl_calipso(&(0x7f00000000c0), r1) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) fcntl$auto(0x8000000000000001, 0x5, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000240), r0) (async) r5 = gettid() rt_sigqueueinfo$auto_SIGCONT(r5, 0x12, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40001400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x34, r4, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0xffffffff}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r5}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x9}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x8eb8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44}, 0x4) (async, rerun: 32) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) (rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (rerun: 64) r8 = ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async, rerun: 64) ioctl$auto_USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f00000002c0)={0xb, 0x2, 0x5, 0x6, &(0x7f0000000100)="98510fc6855848a7fa4534f0d6e20765e90129966354eb286c43b1adf710cb7babd694fdf407c1727b11ec51b0454710fc0df108b693363486aa02eaa269f684ef3d419482c839ae3a0215515f5904846ccda33f1b2ffc99c55e0a95f37a4a77d89333d318d14cf1e57d6664d51fa8b9c589711192a49a794799b4c3baed06035c45c85f255af4286e328bff23a499d9d5bee102e8f25d2f8eff914882acbd5988538e02d1126b58c8c4585e780393cf1f292b", 0x100, 0x9, 0x80, @stream_id=0xffff8000, 0x9, 0x1c0000, &(0x7f0000000200)="6d50eaceb8b25585c12898e37b1c22c46073c91a633dd912", [{0x8, 0x2, 0x7}]}) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x89b0, &(0x7f0000000140)={'bridge0\x00'}) (async, rerun: 32) ioctl$auto(0x3, 0xae41, r3) (async, rerun: 32) ioctl$auto_KVM_CREATE_VM(r6, 0xae80, 0x0) (async) ioctl$auto_SOUND_MIXER_READ_RECMASK2(r8, 0x80044dfd, &(0x7f0000000440)) 3.478705893s ago: executing program 3 (id=1440): timer_create$auto_CLOCK_TAI(0xb, 0x0, &(0x7f0000000fc0)=0xa) mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) ioctl$auto(0xffffffffffffffff, 0x5646, 0xffffffffffffffff) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000280)=""/40, 0x28) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x890) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) io_uring_setup$auto(0x6, 0x0) bind$auto(0x3, 0x0, 0x6a) unshare$auto(0x40000080) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x2f8) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1b, 0x0, 0x4, 0x5, 0x7) madvise$auto(0x3, 0xffffffbfffff0005, 0x19) faccessat$auto(0xffffffffffffffff, 0x0, 0x4) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91pds\x1c\xb2J\x99\x00:\x00!\r>\x94f\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcd\x01\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xb6\x00\x00\x00\x00\x00\x00', 0x48, 0x7) ioctl$auto_SNDCTL_SEQ_PANIC(r0, 0x5111, 0x0) madvise$auto(0x6, 0x5, 0x3ff) r1 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) 3.39286048s ago: executing program 9 (id=1441): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002840)='/sys/devices/virtual/net/bond0/bonding/ad_user_port_key\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002880)=""/226, 0xe2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x6, 0x0, 0xffffffffffffffff, 0x3, 0x4) (async) r1 = prctl$auto(0x6, 0x0, 0xffffffffffffffff, 0x3, 0x4) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000140), r1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) (async) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) madvise$auto(0x74, 0xffffffffffff0009, 0x80) unlinkat$auto(r2, 0x0, 0x3) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cpu/0/msr\x00', 0x8142, 0x0) (async) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cpu/0/msr\x00', 0x8142, 0x0) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/oom_adj\x00', 0x12dec0, 0x0) socket(0x15, 0x5, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/modules\x00', 0x88400, 0x0) io_uring_setup$auto(0xc, 0x0) socket(0x9, 0x5, 0x0) (async) socket(0x9, 0x5, 0x0) pipe2$auto(0x0, 0x80) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) (async) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0xc8e03, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0xa, 0x801, 0x84) (async) r4 = socket(0xa, 0x801, 0x84) getsockopt$auto(r4, 0x84, 0x82, 0x0, 0x0) (async) getsockopt$auto(r4, 0x84, 0x82, 0x0, 0x0) ioctl$auto(0x3, 0x40106f52, r3) ioctl$auto_MON_IOCT_RING_SIZE(r2, 0x9204, 0x0) (async) ioctl$auto_MON_IOCT_RING_SIZE(r2, 0x9204, 0x0) pwritev2$auto(r2, &(0x7f0000000100)={&(0x7f0000000000)="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", 0x1000000006}, 0x0, 0xfff, 0x1, 0xa750) 3.20028649s ago: executing program 7 (id=1442): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kmsg\x00', 0x20d00, 0x0) read$auto_proc_oom_adj_operations_base(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r4) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd70fcfbdbdf2512000000180001801400020076657468315f746f5f626f6e640000000800070001000000"], 0x34}, 0x1, 0x0, 0x0, 0xf2b0dd16cfb63227}, 0x800) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r1, &(0x7f00000013c0)={&(0x7f0000000080), 0xc, &(0x7f0000001380)={&(0x7f0000001500)=ANY=[@ANYBLOB="bc0000007ddb9bde88303dfc991130c52793215f6490452282e58ec30d038b677dbcba099aa826", @ANYRES16=r5, @ANYBLOB="010029bd7000fddbdf251d0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="600001801400020070696d72656730000000000000000000140002007866726d30000000000000000000000008000300df00000008000300010000001400020070696d72656731000000000000000000080003000200000008000100", @ANYRES32=r3, @ANYBLOB="200001801400020076657468305f6d61637674617000000008000100", @ANYRES32=r3, @ANYBLOB="1c00018008000100", @ANYRES32=r3, @ANYBLOB="080003000800000008000100", @ANYRES32=r3, @ANYBLOB], 0xbc}, 0x1, 0x0, 0x0, 0x24000044}, 0x10) unshare$auto(0x40000080) sendmsg$auto_KSMBD_EVENT_LOGOUT_REQUEST(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdc01, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x400c8b0) mmap$auto(0x0, 0x200001, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) r6 = getpid() process_vm_readv$auto(r6, &(0x7f0000000000)={0x0, 0x1002}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0xfe, 0x0) r7 = socket(0xa, 0x2, 0x0) setsockopt$auto(r7, 0x29, 0x30, 0x0, 0x56b) ioprio_get$auto(0x3, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r0, 0x13, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WIPHY_NAME={0xc, 0x2, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) shmctl$auto_SHM_INFO(0x0, 0xe, &(0x7f0000001240)={{0xfff, 0xffffffffffffffff, 0xee01, 0xc6, 0xa, 0x7, 0x7}, 0x5, 0xad61, 0x219c, 0x2, @raw=0x4, @raw=0x5, 0x644, 0x0, &(0x7f00000001c0)="93dd9832761d7efb958d40cf71852aa9f850dd4ee013533facda51cc23668897ca66e0805fc9b3a5e003a943b3347c31cca6b8dc0899b486c12b21f4d978784a212e7910651b5825bc765b9fae99f38b96c0dbc29a24845941", &(0x7f0000000240)="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"}) socket(0x2, 0x80002, 0x73) socket(0x2, 0x801, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.max.depth\x00', 0x20681, 0x0) capset$auto(&(0x7f0000000280)={0x2, 0xffffffffffffffff}, &(0x7f00000002c0)={0x69, 0x7}) 2.241630395s ago: executing program 9 (id=1443): bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@bpf_attr_3={0x6, 0xb4ac, 0x1, 0x5b7, 0x7fe8, 0x9, 0x8622, 0x0, 0x5, "bb7c944d1902ccdb035eba86d79f428b", 0x0, 0xa, 0xffffffffffffffff, 0x19fb8016, 0x7fb, 0x9, 0x6, 0x1, 0x8, 0xfb, @attach_btf_obj_fd, 0xfffffffc, 0x7f, 0x9, 0x5, 0x8}, 0x21) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi22\x00', 0x100, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x10001, 0xdf, 0x9b71, 0xffffffffffffffff, 0x0) socket(0x1f, 0xa, 0x10e) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x40200, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x40080, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) fsopen$auto(&(0x7f0000000380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x1000) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x9, 0xd3e, 0x780, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0x7]}, 0x0) r1 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) r2 = setfsuid$auto(0xee01) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0x5, 0x0) r3 = pipe$auto(0x0) write$auto(0x1, 0x0, 0x80000000) vmsplice$auto(r3, &(0x7f0000000000)={0x0, 0x4000005}, 0x6, 0x8) setresuid$auto(0x0, 0x0, r2) fchdir$auto(r1) mkdir$auto(&(0x7f0000000040)='./cgroup\x00', 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/cgroup.type\x00', 0x103042, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) 1.550663381s ago: executing program 7 (id=1444): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0xfff6, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22ac2, 0x0) write$auto(r1, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) socket(0xa, 0x3, 0x3b) bpf$auto(0xfffff011, &(0x7f0000000000)=@bpf_attr_1={r0, 0xa8cf, @value, 0x1}, 0xa3) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x5f4b, 0x52, &(0x7f00000000c0)='!,^\x00', &(0x7f0000000100)=0x1) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e12b7ac1ff01f7ffffff00"}, 0x58) exit$auto(0x8) ioperm$auto(0x8, 0x6, 0xffffffff) io_uring_setup$auto(0x1d48, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), r2) sendmsg$auto_TIPC_NL_MEDIA_GET(r3, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="010026bd700058dbdd250b00000004000580"], 0x18}, 0x1, 0x0, 0x0, 0x240088d4}, 0x2000c880) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r5 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0xffffffffffffff82, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x1ac}}, 0x40000) r7 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = landlock_create_ruleset$auto(&(0x7f00000002c0)={0xdaa2, 0x40000002, 0x2}, 0x6, 0xffffffff) landlock_restrict_self$auto(r8, 0x3) semctl$auto(0x80, 0x8, 0x83f, 0x7) r9 = open(&(0x7f0000000000)='./file0\x00', 0x8100, 0x84) ftruncate$auto(r9, 0xa0) ioctl$auto_dma_heap_fops_dma_heap(r7, 0xffffffffffdffe00, &(0x7f0000000140)='+') bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)=@info={r7, 0x6}, 0x6) recvmmsg$auto(r6, &(0x7f0000000140)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x7fff}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r5, 0x0, 0xffffff4b) 1.229460084s ago: executing program 9 (id=1445): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:03.0/enable\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/4096, 0x1000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi22\x00', 0x100, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) faccessat$auto(r1, &(0x7f0000000080)='./file1\x00', 0x80000001) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) socket(0xa, 0x3, 0x100) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x9, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) 1.00966701s ago: executing program 8 (id=1446): read$auto(0xffffffffffffffff, 0x0, 0x10001) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0x12623717, 0x13, 0x2, 0x20000000008000) (async, rerun: 64) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 32) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/pci/drivers/pcie_mp2_amd/remove_id\x00', 0x40000, 0x0) (rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x17, r1, 0x8001) (async) mmap$auto(0x8, 0x810004, 0x3, 0x8000000008011, 0x3, 0x8000) (async) preadv2$auto(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14bb02, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x80, 0x9b, 0x8000000008012, r1, 0x8000) (async, rerun: 32) r3 = socket(0xa, 0x3, 0x3b) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r4, @new_prog_fd=0x4, 0x4, @old_map_fd=r5}, 0xa3) (async) bpf$auto(0x3, &(0x7f00000001c0)=@link_update={r0, @new_prog_fd=r2, 0x8, @old_map_fd=r3}, 0xc) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) socket(0x22, 0x3, 0x0) (async, rerun: 32) ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff) (async, rerun: 32) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (rerun: 32) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x904769aa015ceb55, 0x0) write$auto(r6, &(0x7f0000000100)='/dev/audio1\x00\xf6\x89\t\xb6t\xae\x12Q\x15E O\xd8\x8d/\xd9\x13\v_\xbcTd\xe0DS\xef?f\xf1ou\xa4W&^\x80\xb2}\x96K\x16*\xa0\x10[8\xa3\x86\x9a3\xc1\xf7\x89x; 4\x8d,U\xa2\xd8\xd5\xfd\xf8\xd8\xb0\xe0W\xad\xe7\x05l*\xc5Z\x8d\xc88}n\x81\tK\x00\x12\xae\xff\xe5\xf1\xb5w\x81$\xd4\xca\xbe&\x195\xc1\xda>\x8c\x89P\xa1\xdb\xb4g9E\xc8\x92\xf6m\x1c\x9b\xebAzeI\xcb\x16f\xc0@\x978x\xbe\x15\'\xc6d}\xc2\xd3\x9f\xc5F8\x15f\x90\xa2\x84', 0x6051) readv$auto(0x3, 0x0, 0x1) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) 784.564234ms ago: executing program 3 (id=1447): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0xa, 0x5, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/erofs/features/fragments\x00', 0x115801, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002980)=""/4075, 0xfeb) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01032cb57000fbdbdf250a00000f0600010018"], 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r3 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000040), r1) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000100), 0xffffffffffffffff) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) socket(0x15, 0x5, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r7 = socket(0xa, 0x801, 0x84) getsockopt$auto(r7, 0x84, 0xc, 0x0, 0x0) r8 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) ioctl$auto_I2C_SMBUS(r8, 0x720, 0x0) sendmsg$auto_NBD_CMD_CONNECT(r5, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000040)={0x3c, r6, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x3c}, 0x1, 0x1000000, 0x0, 0x4}, 0x8880) wait4$auto(r4, 0x0, 0x8, 0x0) sendmsg$auto_NCSI_CMD_SET_CHANNEL_MASK(r1, &(0x7f0000002700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000026c0)={&(0x7f00000005c0)={0x608, r3, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NCSI_ATTR_DATA={0x2a9, 0x5, "e47f2a0f2ac8b2f1f3458062b9bfa5f1b8336a9a170a9f04e5b91c300eae1926e1f18a8a1f5b41fb3cc5f3110f63a5ebbe3aeed42a09f2616eb44fe3fdc2263d7a3e940b0e2630b013497bc606b89e2e178cc701c1c5a5e5b56efd77fbc9ae3a2cff2a29fa27ebf0aa30c6b54d5b8298eb3d82e13f9e36aae9cf94c9d67ef3eba9fc60f5e99cf4fd0b80c606a7f143824d58b6d6dd03bd856bdac6e22fe814fb30cfe4124838aa336d457a6a8f85f6cde221058b7cf7a3e5b1699be48e2cb8262e841df6e296ae229a8a99bcb5d13c86ee454fc96650616faf2e9952e6e9bfe1cb67c41b4ac2bbfd86d3b8f6f9433cffec25b43cb5793b137eaf77e45d2e9dc3ce07b617a1a744fdfa087c89ec777f1de8186bbdf1b1c802973a4654523d9bd8f677178ae7e63d125fdfd357346ec4a2416723927aedd1cf930ec97e4fe4b6076d0e5f62c772bb67a2ab2e421d2c0da5c9904fb1d10b30cace30e70eb5619dfed47f84f767be1025354add8dcf59809eb7985913001cbd4afcdf3ad49956d5a37ea5d926ab0060af07661844371c040d49252d9b6ee0dbd5d70d6d6bee03265a49ec298761dbc209c04f0438474070ef6e3f17e9aab9ec1bf8ebeb599926ef9602d83a59c911b2409fb5f9795cb717b07d6b0f920df47d5346d53e08f1561013b2d527edf09c1743ccd10f86eeb65ad5ebacd5f498ca5cb62bc2e4c3651c7d5a7c6185a641d0b32e9b7091aeffbcbec792cdfdebcc83ca417468af6eb778259df834bdab0c06e50ef8e702c72f096b3cb3ab7870498c4382f769ff1c8eceb53e495173bbf7ff66bbed84ff3ea851f0c07fe77e4b6b43f8a234d68cf27c9d11f125f49f7a7a84fd23104e92a1cd5a5255313e199b0106c2f6de527bec3be97f61904223796e4217f910f0f149383e4194de6c7a042f9e61cf64564a16065d5a7e4bdd313cc1"}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x1ff}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x1}, @NCSI_ATTR_PACKAGE_LIST={0x4}, @NCSI_ATTR_PACKAGE_LIST={0x331, 0x2, 0x0, 0x1, [@typed={0x8, 0xcb, 0x0, 0x0, @ipv4=@broadcast}, @nested={0xde, 0x87, 0x0, 0x1, [@nested={0x4, 0x168}, @generic="bf85f1b59be6907c1e589e9fffab301cf5377ff7b4439a51ae7c874ef08ff2dc0ab396a6ef68ef2bcd154aac935fa8cc46a735c84e35abf83aa0cb58eed68f7e88d76f255e5e29c1655d203ad0f1ea43f9b899058366d545b32e41bb51b8dc056c623b1f4078cbea8d9c084e95a2c342afc43b597629a4f801a47fd60475e7e08e2b88fa57f770c816a2ab35c1e27bd6f0e9237815ad1a945c29f93ddec4e0d84b8ebbda4ff061455a63e652a956f2c74f12a459bddd278f9694c739f69b3d75804b6d5ee591dd255b598b02bfef6783480d64356310"]}, @generic="a5820c39c52454907dcc7f0b7dcaf8c28e9c79c25be9f40c8c98649621739ef745c6ceb2b57d398b99d48db36be08b94af33d741f5fdc6a9f994133f4f90135b8be40cf12be9b090f9cd96c74a5c6ecd8114a551198ee8433f7d11664d9f42866d99be420a8bd8dc10", @nested={0x1dc, 0x5e, 0x0, 0x1, [@generic="602256ecd2addad48c7b7a1b0108c12d6d41fb873901838e890be5c71b9f8f251e2bb7557b79f881aad4b6f7e81a58d9b19c5ba62e4b7378d644636891ff5aa5051db4ed80e74e0d19cecc2366779cf51ff07924ca8fdb8de4110bebad0aa861730e85ac071c8e9b62fe3e7f866bfd35eb2f258824cb89c464944d9b44ceb30b61d0dd62cf61c504eb17fb4486dce4283ef490bbd463d839ef8fb90cab9f3e3710cbc8a51bdc45a5b99beed991821e6af213b3949a2728d982a392e3e084962076ebee65e95c1afe9e0adcd111422bdd902c8dee9c8fd2784aa372d8b17a40cc3cea", @generic, @generic="b18be3baf048ada1b2d0a8df540348ee226a15c43d976e92ebb250519513ef8c644ecabc0c40add4df48e06c45971138d4d7a66433b4ae226af94fde2f5ff90228df26ccabe5bb68b6387102639f8169b95eabeab7776065c5c61dcfc441274d018c93d59846fc59f0123d141459ef557a652fafdb14f1622dbb7dcbf1c4901f75b95fa8e0d9341e", @generic="a0c7da31c63746ae77b5ecb7fcfe5c9035ab1633b22b4de571b7366f09b922dd0b6491f8624e4671858c1357f32958a01d4c9881eaf142e0531cbd40f16542c631f32da9d6f785c95e858227f469eb313f3356ad85eb", @nested={0x4, 0x136}, @generic, @typed={0x14, 0x161, 0x0, 0x0, @ipv6=@loopback}]}]}]}, 0x608}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) readahead$auto(0xffffffffffffffff, 0x2, 0x10001) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000380), r1) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) 124.875182ms ago: executing program 3 (id=1448): mmap$auto(0x5, 0x2000d, 0x8000000000000001, 0x100800ebf, 0x40000000000a1, 0x4da) ioctl$auto_BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000140)={@raw, 0x2, 0x0, 0x929, 0xe5c1, 0x7cd, "37fd59d46ed201e13aea69af00"}) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x200000000000, 0x20009, 0x4000000000df, 0xebe, 0x401, 0xc) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000001c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7t\b\x00w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x8c)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\x14&\x99?\xe6\xe5I\xe2\xae,\x95k \x97\x18VBAo', 0x100000a3d9) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x7fffffffffffffff, 0x6, 0xffffffff, 0x2000016, r0, 0x1) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100002, 0x9, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x7fffffff, 0x1, 0x2}) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001080)='/sys/devices/virtual/tty/ptmx/uevent\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/4070, 0xfe6) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) keyctl$auto(0x1f, 0xffffffffffffffff, 0x6, 0xee00, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) r4 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r4, &(0x7f00000002c0)=""/190, 0xfffffe39) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@ethernet={0x6, @local}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) 124.647536ms ago: executing program 7 (id=1449): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x6, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x2001fffc) r1 = openat$auto_vrr_range_fops_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/dri/vkms/Virtual-1/vrr_range\x00', 0x800, 0x0) read$auto_vrr_range_fops_(r1, &(0x7f0000000180)=""/85, 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x40081) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001640), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="82fed9da18000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf256d00000004002a00"], 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) r4 = wait4$auto(0xffffffffffffffff, &(0x7f0000000080)=0x7, 0x80000001, &(0x7f0000000280)={{0x2, 0x7}, {0x9, 0x400}, 0x10000, 0x7, 0x100000001, 0x2, 0x80, 0xfffffffffffff801, 0x6, 0x1, 0x100000000, 0x9, 0x8, 0x8, 0x4, 0x1}) sendmsg$auto_NL80211_CMD_SET_CQM(r0, &(0x7f000000a240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f000000a200)={&(0x7f000000a280)={0xcec, r2, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_MAC_HINT={0xe, 0xc8, "9f62528f1003312e23cf"}, @NL80211_ATTR_MLO_LINKS={0xcc0, 0x138, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7d, 0xbe, "c4794f65f44c8e66cca81318e0445ccba06e59312255cf4423b95e59d61d2984c850e3a8f148775cc96e461cd7f7198e64286587e58146b5274901347c21ead666ead611ce44a7d9c2db49157e870edaa731520352b3619f524ff7a40a3aa3f46ed4a55cf0c484d332acc5b41da71210c808f3f3c8d90e1988"}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x5}]}, {0x23c, 0x0, 0x0, 0x1, [@NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "c34ca1"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e23}, @NL80211_ATTR_EMA_RNR_ELEMS={0x213, 0x145, 0x0, 0x1, [@typed={0x4, 0xb4}, @generic="3c144559e4f50bf47f371eba39b5cefe53a708056cd1104bb25ae398e53ba78d2664017bbaeca743d5528f58dd55f97f7ae71b223fe0ebbbb568d014fc68dc06d1b470565077406e5ab29248142a7a9077c5e0f11f05f98a02c44eec9f69bf66dd580a816902409a5357f6", @nested={0xd3, 0x11, 0x0, 0x1, [@nested={0x4, 0xba}, @nested={0x4, 0x14f}, @typed={0x8, 0x84, 0x0, 0x0, @pid=r4}, @generic="ac7e80680ddb3a21dd756140fa8209a2a96365f1dfbddd7cb88cd534f215de15030e8804325d9baee25d93e49b7cbd941c28da25d4004e2b0742d72e394ebe855f6e4aefebac12c0c0b308ce596419b2fd4ac4d196911b7d3c2eaebeb96e3e642eab5d60fd0ac66b65fc7aefde80f557d3a49b0e5fe57ae5ca95391a7e46cf6b49a83c752baba6762dc306c9a034b61b8e36274913b576cb4f2aae994e55dbb94f753f1ea5750ee63b40e1d95956e26f8cddfba936ef95c35d014d9523910d"]}, @nested={0xc9, 0x56, 0x0, 0x1, [@generic="9866f83c82e08983d2cb7e0d6ed417d314fc1fe2814ea914a99341da903942f0556c93c74a856d52509e3eadf871a9ad79769832ba7a967be5bbddb7dedd6df4", @generic="013e7a9a8fe36d6e20ed476aab76a16bd702534d8f4bba1ec75a2a3923e0ad18db7cd2e08b685fa646305b379b9233a341", @nested={0x4, 0x2e}, @nested={0x4, 0x84}, @typed={0x8, 0xcc, 0x0, 0x0, @pid}, @typed={0x34, 0x24, 0x0, 0x0, @binary="6101edd5190539fb373c5da5a452317d5ae684147d0a0f8f69add74b52c3a42c3cac4149b492d957a0083b14a9dd0b52"}, @nested={0x4, 0xb9}, @nested={0x4, 0x98}, @nested={0x4, 0x2e}, @nested={0x4, 0x105}]}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, {0x3b0, 0x0, 0x0, 0x1, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0xca}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_IE_ASSOC_RESP={0x399, 0x80, "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"}]}, {0x28c, 0x0, 0x0, 0x1, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x10}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "5cb5034c024abde6661081a869e4515d2108eac2058412849b27"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xd, 0x13, "869527164f3966c8c3"}, @NL80211_ATTR_IE_PROBE_RESP={0x24e, 0x7f, "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"}]}, {0x3b8, 0x0, 0x0, 0x1, [@NL80211_ATTR_HT_CAPABILITY={0x3ab, 0x1f, "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"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}]}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}]}, 0xcec}, 0x1, 0x0, 0x0, 0x800d808}, 0x20040871) write$auto(0x3, 0x0, 0x100000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r5, 0x5646, r5) r6 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) write$auto(r6, &(0x7f0000000100)='%U{\fb\x00aU\xca\xc9:\xcfZ', 0xffffffff) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) read$auto(0x3, 0x0, 0x80) mmap$auto(0x1, 0x22, 0x4000000000df, 0xeb1, r6, 0x7f) gettid() socket(0x10, 0x2, 0x0) brk$auto(0x1) madvise$auto(0x0, 0xffffffffffff0001, 0x15) migrate_pages$auto(0x0, 0x74, &(0x7f0000000780)=0x8000000000000001, &(0x7f00000007c0)=0x1) timer_gettime$auto(0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) 0s ago: executing program 9 (id=1450): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x11, 0x80003, 0x300) sysfs$auto(0x2, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x845) connect$auto(0x3, &(0x7f0000000000), 0x55) r1 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1e, &(0x7f0000000000), 0x1) setsockopt$auto(r1, 0x7, 0xec9, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x100000000000028, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) recvmmsg$auto(r0, 0x0, 0x10001, 0x0, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = open(0x0, 0x595002, 0x408) mmap$auto(0x2, 0x4, 0x80008, 0x12, 0x2, 0x100000008000) r4 = prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x8, 0x1, 0xffffffffffffffff, 0x200, 0xc6c5) mmap$auto(0x0, 0x0, 0x3, 0x8000000000000011, r4, 0x8000) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x81, 0x8000000000001, 0xa}, 0xb, 0x0) landlock_restrict_self$auto(r5, 0x8) read$auto_drm_edid_fops_drm_debugfs(r3, &(0x7f0000000040)=""/71, 0x47) waitid$auto(0x9, r4, &(0x7f0000002240)={@_si_pad}, 0x7, &(0x7f00000022c0)={{0xd126, 0x8}, {0x6, 0x8}, 0x848e, 0x3, 0x10, 0x9, 0x4, 0x8000, 0xdcba, 0x7, 0x2, 0x7, 0x88, 0xfffffffffffffff8, 0xe5, 0x3}) kernel console output (not intermixed with test programs): ULT_INJECTION: forcing a failure. [ 480.530112][T12166] name failslab, interval 1, probability 0, space 0, times 0 [ 480.869275][T12166] CPU: 1 UID: 0 PID: 12166 Comm: syz.5.1226 Tainted: G L syzkaller #0 PREEMPT(full) [ 480.869324][T12166] Tainted: [L]=SOFTLOCKUP [ 480.869335][T12166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 480.869355][T12166] Call Trace: [ 480.869364][T12166] [ 480.869376][T12166] dump_stack_lvl+0x100/0x190 [ 480.869438][T12166] should_fail_ex.cold+0x5/0xa [ 480.869480][T12166] should_failslab+0xc2/0x120 [ 480.869520][T12166] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 480.869573][T12166] ? vm_area_dup+0x27/0x8e0 [ 480.869619][T12166] ? mas_prev+0x9b/0xf0 [ 480.869685][T12166] vm_area_dup+0x27/0x8e0 [ 480.869736][T12166] copy_vma+0x643/0xac0 [ 480.869793][T12166] ? __pfx_copy_vma+0x10/0x10 [ 480.869858][T12166] ? __lock_acquire+0x4a5/0x2630 [ 480.869942][T12166] copy_vma_and_data+0x1cf/0x7c0 [ 480.870000][T12166] ? __pfx_copy_vma_and_data+0x10/0x10 [ 480.870070][T12166] ? __vma_start_write+0x17f/0x280 [ 480.870118][T12166] ? __pfx___vma_start_write+0x10/0x10 [ 480.870176][T12166] move_vma+0x574/0x1920 [ 480.870234][T12166] ? __pfx_move_vma+0x10/0x10 [ 480.870289][T12166] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 480.870331][T12166] ? cap_mmap_addr+0x4b/0x120 [ 480.870361][T12166] ? bpf_lsm_mmap_addr+0x9/0x30 [ 480.870389][T12166] ? security_mmap_addr+0x71/0x1e0 [ 480.870437][T12166] ? __get_unmapped_area+0x255/0x3e0 [ 480.870481][T12166] ? vrm_set_new_addr+0x204/0x290 [ 480.870536][T12166] mremap_to+0x234/0x4c0 [ 480.870585][T12166] ? mas_walk+0x6ef/0x9b0 [ 480.870634][T12166] ? __pfx_mremap_to+0x10/0x10 [ 480.870694][T12166] ? check_prep_vma+0x912/0xe60 [ 480.870751][T12166] __do_sys_mremap+0x88c/0x1850 [ 480.870819][T12166] ? __pfx___do_sys_mremap+0x10/0x10 [ 480.870916][T12166] ? rcu_is_watching+0x12/0xc0 [ 480.870960][T12166] do_syscall_64+0x115/0x840 [ 480.871005][T12166] ? clear_bhb_loop+0x40/0x90 [ 480.871046][T12166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.871080][T12166] RIP: 0033:0x7faa3599ce59 [ 480.871105][T12166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.871136][T12166] RSP: 002b:00007faa368b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 480.871165][T12166] RAX: ffffffffffffffda RBX: 00007faa35c15fa0 RCX: 00007faa3599ce59 [ 480.871185][T12166] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 480.871203][T12166] RBP: 00007faa368b5090 R08: 0000000100000000 R09: 0000000000000000 [ 480.871222][T12166] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 480.871241][T12166] R13: 00007faa35c16038 R14: 00007faa35c15fa0 R15: 00007ffc02758988 [ 480.871282][T12166] [ 481.937042][T12187] FAULT_INJECTION: forcing a failure. [ 481.937042][T12187] name fail_futex, interval 1, probability 0, space 0, times 0 [ 481.951324][T12187] CPU: 0 UID: 0 PID: 12187 Comm: syz.7.1229 Tainted: G L syzkaller #0 PREEMPT(full) [ 481.951373][T12187] Tainted: [L]=SOFTLOCKUP [ 481.951384][T12187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 481.951403][T12187] Call Trace: [ 481.951413][T12187] [ 481.951428][T12187] dump_stack_lvl+0x100/0x190 [ 481.951489][T12187] should_fail_ex.cold+0x5/0xa [ 481.951525][T12187] ? rcu_is_watching+0x12/0xc0 [ 481.951566][T12187] get_futex_key+0x1d2/0x1510 [ 481.951623][T12187] ? __pfx_get_futex_key+0x10/0x10 [ 481.951676][T12187] ? find_held_lock+0x2b/0x80 [ 481.951714][T12187] ? debug_objects_fill_pool+0x49d/0x5a0 [ 481.951756][T12187] ? debug_objects_fill_pool+0x49d/0x5a0 [ 481.951803][T12187] futex_wait_setup+0x83/0x510 [ 481.951863][T12187] __futex_wait+0x19f/0x300 [ 481.951908][T12187] ? __pfx___futex_wait+0x10/0x10 [ 481.951955][T12187] ? __pfx_futex_wake_mark+0x10/0x10 [ 481.952002][T12187] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 481.952035][T12187] ? __hrtimer_setup+0x208/0x330 [ 481.952072][T12187] ? ktime_add_safe+0x60/0x70 [ 481.952109][T12187] futex_wait+0xe6/0x370 [ 481.952149][T12187] ? __pfx_futex_wait+0x10/0x10 [ 481.952197][T12187] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 481.952244][T12187] do_futex+0x1ef/0x350 [ 481.952278][T12187] ? __pfx_do_futex+0x10/0x10 [ 481.952311][T12187] ? ktime_get+0x22c/0x320 [ 481.952356][T12187] ? lockdep_hardirqs_on+0x78/0x100 [ 481.952408][T12187] __x64_sys_futex+0x34f/0x4d0 [ 481.952448][T12187] ? __pfx___x64_sys_futex+0x10/0x10 [ 481.952491][T12187] ? rcu_is_watching+0x12/0xc0 [ 481.952532][T12187] do_syscall_64+0x115/0x840 [ 481.952577][T12187] ? clear_bhb_loop+0x40/0x90 [ 481.952618][T12187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.952652][T12187] RIP: 0033:0x7efeaad9ce59 [ 481.952679][T12187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.952712][T12187] RSP: 002b:00007fff08cbc9c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 481.952743][T12187] RAX: ffffffffffffffda RBX: 0000000000075a5a RCX: 00007efeaad9ce59 [ 481.952764][T12187] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efeab015fac [ 481.952811][T12187] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 481.952830][T12187] R10: 00007fff08cbcad0 R11: 0000000000000246 R12: 00007fff08cbcaf0 [ 481.952849][T12187] R13: 00007efeab015fac R14: 0000000000075a8c R15: 00007fff08cbcad0 [ 481.952905][T12187] [ 482.291946][T12190] FAULT_INJECTION: forcing a failure. [ 482.291946][T12190] name failslab, interval 1, probability 0, space 0, times 0 [ 482.312735][T12190] CPU: 0 UID: 0 PID: 12190 Comm: syz.4.1231 Tainted: G L syzkaller #0 PREEMPT(full) [ 482.312783][T12190] Tainted: [L]=SOFTLOCKUP [ 482.312794][T12190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 482.312812][T12190] Call Trace: [ 482.312832][T12190] [ 482.312844][T12190] dump_stack_lvl+0x100/0x190 [ 482.312904][T12190] should_fail_ex.cold+0x5/0xa [ 482.312945][T12190] should_failslab+0xc2/0x120 [ 482.312990][T12190] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 482.313041][T12190] ? security_file_alloc+0x34/0x2c0 [ 482.313084][T12190] ? trace_kmem_cache_alloc+0xd5/0x100 [ 482.313129][T12190] security_file_alloc+0x34/0x2c0 [ 482.313173][T12190] init_file+0x95/0x480 [ 482.313218][T12190] alloc_empty_file+0x79/0x1c0 [ 482.313268][T12190] path_openat+0xe8/0x31a0 [ 482.313308][T12190] ? kasan_save_stack+0x3f/0x50 [ 482.313339][T12190] ? kasan_save_stack+0x30/0x50 [ 482.313370][T12190] ? kasan_save_track+0x14/0x30 [ 482.313402][T12190] ? __kasan_slab_alloc+0x89/0x90 [ 482.313436][T12190] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 482.313487][T12190] ? do_getname+0x35/0x390 [ 482.313534][T12190] ? do_sys_openat2+0xc5/0x1e0 [ 482.313583][T12190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.313623][T12190] ? __pfx_path_openat+0x10/0x10 [ 482.313679][T12190] do_file_open+0x20e/0x430 [ 482.313722][T12190] ? __pfx_do_file_open+0x10/0x10 [ 482.313792][T12190] ? alloc_fd+0x476/0x790 [ 482.313843][T12190] ? do_getname+0x191/0x390 [ 482.313895][T12190] do_sys_openat2+0x10d/0x1e0 [ 482.313943][T12190] ? __pfx_do_sys_openat2+0x10/0x10 [ 482.313996][T12190] ? __pfx_load_fixmap_gdt+0x10/0x10 [ 482.314048][T12190] __x64_sys_openat+0x12d/0x210 [ 482.314088][T12190] ? __pfx___x64_sys_openat+0x10/0x10 [ 482.314127][T12190] ? trace_kmalloc+0xe3/0x110 [ 482.314161][T12190] ? rcu_is_watching+0x12/0xc0 [ 482.314195][T12190] do_syscall_64+0x115/0x840 [ 482.314231][T12190] ? clear_bhb_loop+0x40/0x90 [ 482.314262][T12190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.314288][T12190] RIP: 0033:0x7fddc235d68e [ 482.314310][T12190] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 482.314338][T12190] RSP: 002b:00007fddc332bf98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 482.314364][T12190] RAX: ffffffffffffffda RBX: 00007fddc332c6c0 RCX: 00007fddc235d68e [ 482.314382][T12190] RDX: 0000000000000002 RSI: 00007fddc2432676 RDI: ffffffffffffff9c [ 482.314398][T12190] RBP: 00007fddc2432d6f R08: 0000000000000000 R09: 0000000000000000 [ 482.314414][T12190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.314429][T12190] R13: 00007fddc2616038 R14: 00007fddc2615fa0 R15: 00007fffd883d978 [ 482.314463][T12190] [ 482.624755][T12194] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.1232'. [ 482.635421][T12194] FAULT_INJECTION: forcing a failure. [ 482.635421][T12194] name failslab, interval 1, probability 0, space 0, times 0 [ 482.648246][T12194] CPU: 0 UID: 0 PID: 12194 Comm: syz.1.1232 Tainted: G L syzkaller #0 PREEMPT(full) [ 482.648298][T12194] Tainted: [L]=SOFTLOCKUP [ 482.648311][T12194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 482.648331][T12194] Call Trace: [ 482.648342][T12194] [ 482.648355][T12194] dump_stack_lvl+0x100/0x190 [ 482.648430][T12194] should_fail_ex.cold+0x5/0xa [ 482.648483][T12194] should_failslab+0xc2/0x120 [ 482.648548][T12194] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 482.648604][T12194] ? anon_vma_clone+0x2ba/0xcd0 [ 482.648659][T12194] anon_vma_clone+0x2ba/0xcd0 [ 482.648716][T12194] copy_vma+0x6ed/0xac0 [ 482.648776][T12194] ? __pfx_copy_vma+0x10/0x10 [ 482.648852][T12194] ? __lock_acquire+0x4a5/0x2630 [ 482.648937][T12194] copy_vma_and_data+0x1cf/0x7c0 [ 482.648997][T12194] ? __pfx_copy_vma_and_data+0x10/0x10 [ 482.649077][T12194] ? __vma_start_write+0x17f/0x280 [ 482.649127][T12194] ? __pfx___vma_start_write+0x10/0x10 [ 482.649187][T12194] move_vma+0x574/0x1920 [ 482.649247][T12194] ? __pfx_move_vma+0x10/0x10 [ 482.649303][T12194] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 482.649348][T12194] ? cap_mmap_addr+0x4b/0x120 [ 482.649379][T12194] ? bpf_lsm_mmap_addr+0x9/0x30 [ 482.649411][T12194] ? security_mmap_addr+0x71/0x1e0 [ 482.649457][T12194] ? __get_unmapped_area+0x255/0x3e0 [ 482.649505][T12194] ? vrm_set_new_addr+0x204/0x290 [ 482.649564][T12194] mremap_to+0x234/0x4c0 [ 482.649617][T12194] ? mas_walk+0x6ef/0x9b0 [ 482.649662][T12194] ? __pfx_mremap_to+0x10/0x10 [ 482.649713][T12194] ? check_prep_vma+0x912/0xe60 [ 482.649773][T12194] __do_sys_mremap+0x88c/0x1850 [ 482.649922][T12194] ? __pfx___do_sys_mremap+0x10/0x10 [ 482.649982][T12194] ? do_futex+0x192/0x350 [ 482.650018][T12194] ? __pfx_do_futex+0x10/0x10 [ 482.650086][T12194] ? rcu_is_watching+0x12/0xc0 [ 482.650133][T12194] do_syscall_64+0x115/0x840 [ 482.650180][T12194] ? clear_bhb_loop+0x40/0x90 [ 482.650222][T12194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.650258][T12194] RIP: 0033:0x7f2b80f9ce59 [ 482.650286][T12194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.650322][T12194] RSP: 002b:00007f2b81d9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 482.650356][T12194] RAX: ffffffffffffffda RBX: 00007f2b81215fa0 RCX: 00007f2b80f9ce59 [ 482.650378][T12194] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 482.650399][T12194] RBP: 00007f2b81032d6f R08: 0000000100000000 R09: 0000000000000000 [ 482.650419][T12194] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 482.650439][T12194] R13: 00007f2b81216038 R14: 00007f2b81215fa0 R15: 00007fff3d23d6c8 [ 482.650482][T12194] [ 483.117079][T12200] FAULT_INJECTION: forcing a failure. [ 483.117079][T12200] name failslab, interval 1, probability 0, space 0, times 0 [ 483.212409][T12200] CPU: 1 UID: 0 PID: 12200 Comm: syz.4.1234 Tainted: G L syzkaller #0 PREEMPT(full) [ 483.212463][T12200] Tainted: [L]=SOFTLOCKUP [ 483.212474][T12200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 483.212499][T12200] Call Trace: [ 483.212507][T12200] [ 483.212516][T12200] dump_stack_lvl+0x100/0x190 [ 483.212564][T12200] should_fail_ex.cold+0x5/0xa [ 483.212594][T12200] should_failslab+0xc2/0x120 [ 483.212624][T12200] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 483.212663][T12200] ? __pmd_alloc+0xbf/0x950 [ 483.212699][T12200] __pmd_alloc+0xbf/0x950 [ 483.212743][T12200] move_page_tables+0x2f7c/0x4610 [ 483.212785][T12200] ? __pfx_copy_vma+0x10/0x10 [ 483.212834][T12200] ? __pfx_move_page_tables+0x10/0x10 [ 483.212894][T12200] copy_vma_and_data+0x25c/0x7c0 [ 483.212936][T12200] ? __pfx_copy_vma_and_data+0x10/0x10 [ 483.212987][T12200] ? __vma_start_write+0x17f/0x280 [ 483.213022][T12200] ? __pfx___vma_start_write+0x10/0x10 [ 483.213064][T12200] move_vma+0x574/0x1920 [ 483.213107][T12200] ? __pfx_move_vma+0x10/0x10 [ 483.213152][T12200] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 483.213184][T12200] ? cap_mmap_addr+0x4b/0x120 [ 483.213207][T12200] ? bpf_lsm_mmap_addr+0x9/0x30 [ 483.213233][T12200] ? security_mmap_addr+0x71/0x1e0 [ 483.213266][T12200] ? __get_unmapped_area+0x255/0x3e0 [ 483.213299][T12200] ? vrm_set_new_addr+0x204/0x290 [ 483.213340][T12200] mremap_to+0x234/0x4c0 [ 483.213376][T12200] ? mas_walk+0x6ef/0x9b0 [ 483.213409][T12200] ? __pfx_mremap_to+0x10/0x10 [ 483.213446][T12200] ? check_prep_vma+0x912/0xe60 [ 483.213491][T12200] __do_sys_mremap+0x88c/0x1850 [ 483.213540][T12200] ? __pfx___do_sys_mremap+0x10/0x10 [ 483.213584][T12200] ? do_futex+0x192/0x350 [ 483.213609][T12200] ? __pfx_do_futex+0x10/0x10 [ 483.213641][T12200] ? __x64_sys_futex+0x34f/0x4d0 [ 483.213677][T12200] ? rcu_is_watching+0x12/0xc0 [ 483.213708][T12200] do_syscall_64+0x115/0x840 [ 483.213754][T12200] ? clear_bhb_loop+0x40/0x90 [ 483.213783][T12200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.213809][T12200] RIP: 0033:0x7fddc239ce59 [ 483.213829][T12200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.213853][T12200] RSP: 002b:00007fddc332c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 483.213875][T12200] RAX: ffffffffffffffda RBX: 00007fddc2615fa0 RCX: 00007fddc239ce59 [ 483.213891][T12200] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 483.213906][T12200] RBP: 00007fddc2432d6f R08: 0000000100000000 R09: 0000000000000000 [ 483.213920][T12200] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 483.213934][T12200] R13: 00007fddc2616038 R14: 00007fddc2615fa0 R15: 00007fffd883d978 [ 483.213964][T12200] [ 484.260016][T11016] block nbd38: Receive control failed (result -32) [ 484.427930][T12214] FAULT_INJECTION: forcing a failure. [ 484.427930][T12214] name failslab, interval 1, probability 0, space 0, times 0 [ 484.453283][T12214] CPU: 0 UID: 0 PID: 12214 Comm: syz.7.1237 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.453332][T12214] Tainted: [L]=SOFTLOCKUP [ 484.453342][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 484.453361][T12214] Call Trace: [ 484.453371][T12214] [ 484.453383][T12214] dump_stack_lvl+0x100/0x190 [ 484.453443][T12214] should_fail_ex.cold+0x5/0xa [ 484.453484][T12214] ? tomoyo_realpath_from_path+0xb6/0x690 [ 484.453532][T12214] should_failslab+0xc2/0x120 [ 484.453570][T12214] __kmalloc_noprof+0xe0/0x850 [ 484.453620][T12214] ? kfree+0x1dd/0x6c0 [ 484.453673][T12214] tomoyo_realpath_from_path+0xb6/0x690 [ 484.453728][T12214] tomoyo_check_open_permission+0x2af/0x3c0 [ 484.453770][T12214] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 484.453827][T12214] ? hook_file_open+0x24e/0x7a0 [ 484.453888][T12214] ? lock_acquire+0x1b1/0x370 [ 484.453952][T12214] tomoyo_file_open+0x6b/0x90 [ 484.453985][T12214] security_file_open+0xb5/0x1e0 [ 484.454034][T12214] do_dentry_open+0x588/0x14d0 [ 484.454085][T12214] vfs_open+0x82/0x3f0 [ 484.454138][T12214] path_openat+0x208c/0x31a0 [ 484.454192][T12214] ? __pfx_path_openat+0x10/0x10 [ 484.454256][T12214] do_file_open+0x20e/0x430 [ 484.454301][T12214] ? __pfx_do_file_open+0x10/0x10 [ 484.454356][T12214] ? __pfx_kfree_link+0x10/0x10 [ 484.454401][T12214] ? alloc_fd+0x476/0x790 [ 484.454445][T12214] ? do_getname+0x191/0x390 [ 484.454498][T12214] do_sys_openat2+0x10d/0x1e0 [ 484.454548][T12214] ? __pfx_do_sys_openat2+0x10/0x10 [ 484.454615][T12214] __x64_sys_openat+0x12d/0x210 [ 484.454667][T12214] ? __pfx___x64_sys_openat+0x10/0x10 [ 484.454715][T12214] ? ksys_write+0x1ac/0x250 [ 484.454758][T12214] ? rcu_is_watching+0x12/0xc0 [ 484.454801][T12214] do_syscall_64+0x115/0x840 [ 484.454846][T12214] ? clear_bhb_loop+0x40/0x90 [ 484.454885][T12214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.454918][T12214] RIP: 0033:0x7efeaad5d68e [ 484.454944][T12214] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 484.454977][T12214] RSP: 002b:00007efeabd16f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 484.455008][T12214] RAX: ffffffffffffffda RBX: 00007efeabd176c0 RCX: 00007efeaad5d68e [ 484.455030][T12214] RDX: 0000000000000002 RSI: 00007efeaae32676 RDI: ffffffffffffff9c [ 484.455050][T12214] RBP: 00007efeaae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 484.455069][T12214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 484.455086][T12214] R13: 00007efeab016038 R14: 00007efeab015fa0 R15: 00007fff08cbc868 [ 484.455128][T12214] [ 484.773461][T12214] ERROR: Out of memory at tomoyo_realpath_from_path. [ 484.786962][T12214] FAULT_INJECTION: forcing a failure. [ 484.786962][T12214] name failslab, interval 1, probability 0, space 0, times 0 [ 484.832534][T12214] CPU: 1 UID: 0 PID: 12214 Comm: syz.7.1237 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.832592][T12214] Tainted: [L]=SOFTLOCKUP [ 484.832604][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 484.832621][T12214] Call Trace: [ 484.832630][T12214] [ 484.832642][T12214] dump_stack_lvl+0x100/0x190 [ 484.832704][T12214] should_fail_ex.cold+0x5/0xa [ 484.832745][T12214] should_failslab+0xc2/0x120 [ 484.832785][T12214] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 484.832836][T12214] ? anon_vma_clone+0x2ba/0xcd0 [ 484.832887][T12214] anon_vma_clone+0x2ba/0xcd0 [ 484.832958][T12214] copy_vma+0x6ed/0xac0 [ 484.833017][T12214] ? __pfx_copy_vma+0x10/0x10 [ 484.833088][T12214] ? __lock_acquire+0x4a5/0x2630 [ 484.833186][T12214] copy_vma_and_data+0x1cf/0x7c0 [ 484.833245][T12214] ? __pfx_copy_vma_and_data+0x10/0x10 [ 484.833316][T12214] ? __vma_start_write+0x17f/0x280 [ 484.833362][T12214] ? __pfx___vma_start_write+0x10/0x10 [ 484.833420][T12214] move_vma+0x574/0x1920 [ 484.833480][T12214] ? __pfx_move_vma+0x10/0x10 [ 484.833536][T12214] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 484.833579][T12214] ? cap_mmap_addr+0x4b/0x120 [ 484.833612][T12214] ? bpf_lsm_mmap_addr+0x9/0x30 [ 484.833641][T12214] ? security_mmap_addr+0x71/0x1e0 [ 484.833684][T12214] ? __get_unmapped_area+0x255/0x3e0 [ 484.833730][T12214] ? vrm_set_new_addr+0x204/0x290 [ 484.833786][T12214] mremap_to+0x234/0x4c0 [ 484.833835][T12214] ? mas_walk+0x6ef/0x9b0 [ 484.833877][T12214] ? __pfx_mremap_to+0x10/0x10 [ 484.833923][T12214] ? check_prep_vma+0x912/0xe60 [ 484.833981][T12214] __do_sys_mremap+0x88c/0x1850 [ 484.834050][T12214] ? __pfx___do_sys_mremap+0x10/0x10 [ 484.834154][T12214] ? rcu_is_watching+0x12/0xc0 [ 484.834197][T12214] do_syscall_64+0x115/0x840 [ 484.834243][T12214] ? clear_bhb_loop+0x40/0x90 [ 484.834282][T12214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.834314][T12214] RIP: 0033:0x7efeaad9ce59 [ 484.834340][T12214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.834373][T12214] RSP: 002b:00007efeabd17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 484.834404][T12214] RAX: ffffffffffffffda RBX: 00007efeab015fa0 RCX: 00007efeaad9ce59 [ 484.834426][T12214] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 484.834446][T12214] RBP: 00007efeabd17090 R08: 0000000100000000 R09: 0000000000000000 [ 484.834466][T12214] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 484.834485][T12214] R13: 00007efeab016038 R14: 00007efeab015fa0 R15: 00007fff08cbc868 [ 484.834527][T12214] [ 486.227984][T12242] FAULT_INJECTION: forcing a failure. [ 486.227984][T12242] name failslab, interval 1, probability 0, space 0, times 0 [ 486.254279][T12242] CPU: 0 UID: 0 PID: 12242 Comm: syz.4.1242 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.254334][T12242] Tainted: [L]=SOFTLOCKUP [ 486.254347][T12242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 486.254368][T12242] Call Trace: [ 486.254380][T12242] [ 486.254393][T12242] dump_stack_lvl+0x100/0x190 [ 486.254457][T12242] should_fail_ex.cold+0x5/0xa [ 486.254501][T12242] should_failslab+0xc2/0x120 [ 486.254543][T12242] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 486.254600][T12242] ? security_inode_alloc+0x3b/0x2c0 [ 486.254640][T12242] ? lockdep_init_map_type+0x5c/0x250 [ 486.254713][T12242] security_inode_alloc+0x3b/0x2c0 [ 486.254755][T12242] inode_init_always_gfp+0xc77/0xfb0 [ 486.254811][T12242] alloc_inode+0x8e/0x250 [ 486.254869][T12242] new_inode+0x22/0x1c0 [ 486.254928][T12242] shmem_get_inode+0x1e3/0xfb0 [ 486.254981][T12242] ? __pfx_shmem_get_inode+0x10/0x10 [ 486.255046][T12242] __shmem_file_setup+0x382/0x460 [ 486.255098][T12242] ? __pfx___shmem_file_setup+0x10/0x10 [ 486.255151][T12242] ? vm_area_alloc+0x1f/0x160 [ 486.255208][T12242] shmem_zero_setup+0x96/0x1b0 [ 486.255249][T12242] __mmap_region+0x2509/0x2dd0 [ 486.255311][T12242] ? __pfx___mmap_region+0x10/0x10 [ 486.255399][T12242] ? __lock_acquire+0x4a5/0x2630 [ 486.255455][T12242] ? do_raw_spin_unlock+0x145/0x1e0 [ 486.255495][T12242] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 486.255559][T12242] ? find_held_lock+0x2b/0x80 [ 486.255602][T12242] ? rcu_is_watching+0x12/0xc0 [ 486.255667][T12242] ? rcu_is_watching+0x12/0xc0 [ 486.255708][T12242] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 486.255753][T12242] ? lockdep_hardirqs_on+0x78/0x100 [ 486.255868][T12242] mmap_region+0x35d/0x620 [ 486.255904][T12242] ? rcu_is_watching+0x12/0xc0 [ 486.255942][T12242] ? __pfx_mmap_region+0x10/0x10 [ 486.255979][T12242] ? cap_mmap_addr+0x4b/0x120 [ 486.256011][T12242] ? bpf_lsm_mmap_addr+0x9/0x30 [ 486.256042][T12242] ? security_mmap_addr+0x71/0x1e0 [ 486.256087][T12242] ? __get_unmapped_area+0x255/0x3e0 [ 486.256135][T12242] do_mmap+0xc63/0x12f0 [ 486.256184][T12242] ? __pfx_do_mmap+0x10/0x10 [ 486.256228][T12242] ? __pfx_down_write_killable+0x10/0x10 [ 486.256269][T12242] vm_mmap_pgoff+0x29e/0x470 [ 486.256322][T12242] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 486.256370][T12242] ? do_futex+0x192/0x350 [ 486.256406][T12242] ? __pfx_do_futex+0x10/0x10 [ 486.256447][T12242] ksys_mmap_pgoff+0xe4/0x610 [ 486.256489][T12242] ? __x64_sys_futex+0x358/0x4d0 [ 486.256527][T12242] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 486.256568][T12242] ? xfd_validate_state+0x129/0x190 [ 486.256601][T12242] ? ksys_write+0x1ac/0x250 [ 486.256654][T12242] __x64_sys_mmap+0x125/0x190 [ 486.256697][T12242] do_syscall_64+0x115/0x840 [ 486.256746][T12242] ? clear_bhb_loop+0x40/0x90 [ 486.256788][T12242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.256824][T12242] RIP: 0033:0x7fddc239ce59 [ 486.256853][T12242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.256887][T12242] RSP: 002b:00007fddc332c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 486.256920][T12242] RAX: ffffffffffffffda RBX: 00007fddc2615fa0 RCX: 00007fddc239ce59 [ 486.256943][T12242] RDX: 00000000000000df RSI: 0000000004020009 RDI: 0000000000000000 [ 486.256963][T12242] RBP: 00007fddc2432d6f R08: 0000000000000401 R09: 0000000000000000 [ 486.256984][T12242] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 486.257004][T12242] R13: 00007fddc2616038 R14: 00007fddc2615fa0 R15: 00007fffd883d978 [ 486.257049][T12242] [ 487.284892][T12227] Process accounting resumed [ 487.418989][T12262] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 487.512066][T12267] FAULT_INJECTION: forcing a failure. [ 487.512066][T12267] name failslab, interval 1, probability 0, space 0, times 0 [ 487.542863][T12267] CPU: 0 UID: 0 PID: 12267 Comm: syz.5.1248 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.542928][T12267] Tainted: [L]=SOFTLOCKUP [ 487.542941][T12267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 487.542964][T12267] Call Trace: [ 487.542975][T12267] [ 487.542989][T12267] dump_stack_lvl+0x100/0x190 [ 487.543057][T12267] should_fail_ex.cold+0x5/0xa [ 487.543104][T12267] should_failslab+0xc2/0x120 [ 487.543147][T12267] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 487.543203][T12267] ? anon_vma_clone+0x2ba/0xcd0 [ 487.543258][T12267] anon_vma_clone+0x2ba/0xcd0 [ 487.543318][T12267] copy_vma+0x6ed/0xac0 [ 487.543379][T12267] ? __pfx_copy_vma+0x10/0x10 [ 487.543449][T12267] ? __lock_acquire+0x4a5/0x2630 [ 487.543559][T12267] copy_vma_and_data+0x1cf/0x7c0 [ 487.543620][T12267] ? __pfx_copy_vma_and_data+0x10/0x10 [ 487.543696][T12267] ? __vma_start_write+0x17f/0x280 [ 487.543745][T12267] ? __pfx___vma_start_write+0x10/0x10 [ 487.543806][T12267] move_vma+0x574/0x1920 [ 487.543869][T12267] ? __pfx_move_vma+0x10/0x10 [ 487.543940][T12267] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 487.543989][T12267] ? cap_mmap_addr+0x4b/0x120 [ 487.544027][T12267] ? bpf_lsm_mmap_addr+0x9/0x30 [ 487.544060][T12267] ? security_mmap_addr+0x71/0x1e0 [ 487.544107][T12267] ? __get_unmapped_area+0x255/0x3e0 [ 487.544155][T12267] ? vrm_set_new_addr+0x204/0x290 [ 487.544213][T12267] mremap_to+0x234/0x4c0 [ 487.544264][T12267] ? mas_walk+0x6ef/0x9b0 [ 487.544310][T12267] ? __pfx_mremap_to+0x10/0x10 [ 487.544363][T12267] ? check_prep_vma+0x912/0xe60 [ 487.544426][T12267] __do_sys_mremap+0x88c/0x1850 [ 487.544494][T12267] ? __pfx___do_sys_mremap+0x10/0x10 [ 487.544556][T12267] ? do_futex+0x192/0x350 [ 487.544592][T12267] ? __pfx_do_futex+0x10/0x10 [ 487.544657][T12267] ? rcu_is_watching+0x12/0xc0 [ 487.544703][T12267] do_syscall_64+0x115/0x840 [ 487.544751][T12267] ? clear_bhb_loop+0x40/0x90 [ 487.544795][T12267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.544831][T12267] RIP: 0033:0x7faa3599ce59 [ 487.544860][T12267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.544906][T12267] RSP: 002b:00007faa368b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 487.544941][T12267] RAX: ffffffffffffffda RBX: 00007faa35c15fa0 RCX: 00007faa3599ce59 [ 487.544966][T12267] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 487.544988][T12267] RBP: 00007faa35a32d6f R08: 0000000100000000 R09: 0000000000000000 [ 487.545009][T12267] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 487.545031][T12267] R13: 00007faa35c16038 R14: 00007faa35c15fa0 R15: 00007ffc02758988 [ 487.545076][T12267] [ 488.036944][ T6359] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 3583 with max blocks 1 with error 117 [ 488.051561][ T6359] EXT4-fs (sda1): This should not happen!! Data will be lost [ 488.051561][ T6359] [ 488.264823][T11016] block nbd39: Receive control failed (result -32) [ 488.423280][T11016] block nbd40: Receive control failed (result -32) [ 488.748896][T12288] FAULT_INJECTION: forcing a failure. [ 488.748896][T12288] name failslab, interval 1, probability 0, space 0, times 0 [ 488.791871][T12288] CPU: 1 UID: 0 PID: 12288 Comm: syz.5.1252 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.791911][T12288] Tainted: [L]=SOFTLOCKUP [ 488.791920][T12288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 488.791935][T12288] Call Trace: [ 488.791943][T12288] [ 488.791953][T12288] dump_stack_lvl+0x100/0x190 [ 488.792001][T12288] should_fail_ex.cold+0x5/0xa [ 488.792032][T12288] should_failslab+0xc2/0x120 [ 488.792063][T12288] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 488.792103][T12288] ? vm_area_dup+0x27/0x8e0 [ 488.792138][T12288] ? mas_next_range+0x9b/0xf0 [ 488.792182][T12288] vm_area_dup+0x27/0x8e0 [ 488.792219][T12288] copy_vma+0x643/0xac0 [ 488.792306][T12288] ? __pfx_copy_vma+0x10/0x10 [ 488.792365][T12288] ? __lock_acquire+0x4a5/0x2630 [ 488.792420][T12288] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 488.792458][T12288] copy_vma_and_data+0x1cf/0x7c0 [ 488.792502][T12288] ? __pfx_copy_vma_and_data+0x10/0x10 [ 488.792554][T12288] ? __vma_start_write+0x17f/0x280 [ 488.792589][T12288] ? __pfx___vma_start_write+0x10/0x10 [ 488.792633][T12288] move_vma+0x574/0x1920 [ 488.792677][T12288] ? __pfx_move_vma+0x10/0x10 [ 488.792719][T12288] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 488.792772][T12288] ? cap_mmap_addr+0x4b/0x120 [ 488.792803][T12288] ? bpf_lsm_mmap_addr+0x9/0x30 [ 488.792843][T12288] ? security_mmap_addr+0x71/0x1e0 [ 488.792877][T12288] ? __get_unmapped_area+0x255/0x3e0 [ 488.792917][T12288] ? vrm_set_new_addr+0x204/0x290 [ 488.792959][T12288] mremap_to+0x234/0x4c0 [ 488.792996][T12288] ? mas_walk+0x6ef/0x9b0 [ 488.793034][T12288] ? __pfx_mremap_to+0x10/0x10 [ 488.793081][T12288] __do_sys_mremap+0x88c/0x1850 [ 488.793130][T12288] ? __pfx___do_sys_mremap+0x10/0x10 [ 488.793176][T12288] ? do_futex+0x192/0x350 [ 488.793202][T12288] ? __pfx_do_futex+0x10/0x10 [ 488.793275][T12288] ? __x64_sys_futex+0x34f/0x4d0 [ 488.793319][T12288] ? rcu_is_watching+0x12/0xc0 [ 488.793356][T12288] do_syscall_64+0x115/0x840 [ 488.793392][T12288] ? clear_bhb_loop+0x40/0x90 [ 488.793422][T12288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.793448][T12288] RIP: 0033:0x7faa3599ce59 [ 488.793469][T12288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.793495][T12288] RSP: 002b:00007faa368b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 488.793519][T12288] RAX: ffffffffffffffda RBX: 00007faa35c15fa0 RCX: 00007faa3599ce59 [ 488.793536][T12288] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000000000000000 [ 488.793551][T12288] RBP: 00007faa35a32d6f R08: 0000000100000000 R09: 0000000000000000 [ 488.793567][T12288] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 488.793582][T12288] R13: 00007faa35c16038 R14: 00007faa35c15fa0 R15: 00007ffc02758988 [ 488.793614][T12288] [ 489.335648][T12297] FAULT_INJECTION: forcing a failure. [ 489.335648][T12297] name failslab, interval 1, probability 0, space 0, times 0 [ 489.348483][T12297] CPU: 1 UID: 0 PID: 12297 Comm: syz.5.1255 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.348535][T12297] Tainted: [L]=SOFTLOCKUP [ 489.348547][T12297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 489.348566][T12297] Call Trace: [ 489.348578][T12297] [ 489.348590][T12297] dump_stack_lvl+0x100/0x190 [ 489.348656][T12297] should_fail_ex.cold+0x5/0xa [ 489.348700][T12297] should_failslab+0xc2/0x120 [ 489.348743][T12297] __kmalloc_cache_noprof+0x7a/0x6f0 [ 489.348793][T12297] ? proc_thread_self_get_link+0x1a6/0x210 [ 489.348843][T12297] proc_thread_self_get_link+0x1a6/0x210 [ 489.348888][T12297] pick_link+0xac2/0x13c0 [ 489.348922][T12297] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 489.348970][T12297] step_into_slowpath+0x9ba/0xf90 [ 489.349015][T12297] ? __pfx_step_into_slowpath+0x10/0x10 [ 489.349060][T12297] ? lookup_fast+0x2da/0x600 [ 489.349100][T12297] path_openat+0xf95/0x31a0 [ 489.349157][T12297] ? __pfx_path_openat+0x10/0x10 [ 489.349217][T12297] do_file_open+0x20e/0x430 [ 489.349264][T12297] ? __pfx_do_file_open+0x10/0x10 [ 489.349347][T12297] ? alloc_fd+0x476/0x790 [ 489.349394][T12297] ? do_getname+0x191/0x390 [ 489.349449][T12297] do_sys_openat2+0x10d/0x1e0 [ 489.349503][T12297] ? __pfx_do_sys_openat2+0x10/0x10 [ 489.349572][T12297] __x64_sys_openat+0x12d/0x210 [ 489.349626][T12297] ? __pfx___x64_sys_openat+0x10/0x10 [ 489.349679][T12297] ? ksys_write+0x1ac/0x250 [ 489.349723][T12297] ? rcu_is_watching+0x12/0xc0 [ 489.349768][T12297] do_syscall_64+0x115/0x840 [ 489.349818][T12297] ? clear_bhb_loop+0x40/0x90 [ 489.349861][T12297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.349896][T12297] RIP: 0033:0x7faa3595d68e [ 489.349925][T12297] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 489.349962][T12297] RSP: 002b:00007faa368b4ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 489.349999][T12297] RAX: ffffffffffffffda RBX: 00007faa368b56c0 RCX: 00007faa3595d68e [ 489.350023][T12297] RDX: 0000000000000002 RSI: 00007faa368b4f90 RDI: ffffffffffffff9c [ 489.350051][T12297] RBP: 00007faa35a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 489.350073][T12297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.350093][T12297] R13: 00007faa35c16038 R14: 00007faa35c15fa0 R15: 00007ffc02758988 [ 489.350138][T12297] [ 489.874493][T12300] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 490.324653][T12300] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 490.789128][T12318] FAULT_INJECTION: forcing a failure. [ 490.789128][T12318] name failslab, interval 1, probability 0, space 0, times 0 [ 490.810277][T12318] CPU: 1 UID: 0 PID: 12318 Comm: syz.4.1259 Tainted: G L syzkaller #0 PREEMPT(full) [ 490.810335][T12318] Tainted: [L]=SOFTLOCKUP [ 490.810348][T12318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 490.810369][T12318] Call Trace: [ 490.810381][T12318] [ 490.810394][T12318] dump_stack_lvl+0x100/0x190 [ 490.810458][T12318] should_fail_ex.cold+0x5/0xa [ 490.810502][T12318] should_failslab+0xc2/0x120 [ 490.810544][T12318] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 490.810611][T12318] ? anon_vma_clone+0x2ba/0xcd0 [ 490.810667][T12318] anon_vma_clone+0x2ba/0xcd0 [ 490.810728][T12318] copy_vma+0x6ed/0xac0 [ 490.810789][T12318] ? __pfx_copy_vma+0x10/0x10 [ 490.810857][T12318] ? __lock_acquire+0x4a5/0x2630 [ 490.810942][T12318] copy_vma_and_data+0x1cf/0x7c0 [ 490.811007][T12318] ? __pfx_copy_vma_and_data+0x10/0x10 [ 490.811079][T12318] ? __vma_start_write+0x17f/0x280 [ 490.811130][T12318] ? __pfx___vma_start_write+0x10/0x10 [ 490.811191][T12318] move_vma+0x574/0x1920 [ 490.811253][T12318] ? __pfx_move_vma+0x10/0x10 [ 490.811312][T12318] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 490.811359][T12318] ? cap_mmap_addr+0x4b/0x120 [ 490.811392][T12318] ? bpf_lsm_mmap_addr+0x9/0x30 [ 490.811425][T12318] ? security_mmap_addr+0x71/0x1e0 [ 490.811473][T12318] ? __get_unmapped_area+0x255/0x3e0 [ 490.811521][T12318] ? vrm_set_new_addr+0x204/0x290 [ 490.811590][T12318] mremap_to+0x234/0x4c0 [ 490.811644][T12318] ? mas_walk+0x6ef/0x9b0 [ 490.811691][T12318] ? __pfx_mremap_to+0x10/0x10 [ 490.811746][T12318] ? check_prep_vma+0x912/0xe60 [ 490.811810][T12318] __do_sys_mremap+0x88c/0x1850 [ 490.811881][T12318] ? __pfx___do_sys_mremap+0x10/0x10 [ 490.811944][T12318] ? do_futex+0x192/0x350 [ 490.811982][T12318] ? __pfx_do_futex+0x10/0x10 [ 490.812049][T12318] ? rcu_is_watching+0x12/0xc0 [ 490.812096][T12318] do_syscall_64+0x115/0x840 [ 490.812145][T12318] ? clear_bhb_loop+0x40/0x90 [ 490.812187][T12318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.812223][T12318] RIP: 0033:0x7fddc239ce59 [ 490.812252][T12318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.812288][T12318] RSP: 002b:00007fddc332c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 490.812324][T12318] RAX: ffffffffffffffda RBX: 00007fddc2615fa0 RCX: 00007fddc239ce59 [ 490.812347][T12318] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 490.812369][T12318] RBP: 00007fddc2432d6f R08: 0000000100000000 R09: 0000000000000000 [ 490.812389][T12318] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 490.812409][T12318] R13: 00007fddc2616038 R14: 00007fddc2615fa0 R15: 00007fffd883d978 [ 490.812453][T12318] [ 492.873340][T12354] FAULT_INJECTION: forcing a failure. [ 492.873340][T12354] name failslab, interval 1, probability 0, space 0, times 0 [ 492.904350][T12354] CPU: 0 UID: 0 PID: 12354 Comm: syz.7.1265 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.904404][T12354] Tainted: [L]=SOFTLOCKUP [ 492.904416][T12354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 492.904436][T12354] Call Trace: [ 492.904447][T12354] [ 492.904463][T12354] dump_stack_lvl+0x100/0x190 [ 492.904527][T12354] should_fail_ex.cold+0x5/0xa [ 492.904569][T12354] ? group_cpus_evenly+0x195/0x660 [ 492.904613][T12354] should_failslab+0xc2/0x120 [ 492.904653][T12354] __kmalloc_noprof+0xe0/0x850 [ 492.904714][T12354] group_cpus_evenly+0x195/0x660 [ 492.904763][T12354] ? __pfx_group_cpus_evenly+0x10/0x10 [ 492.904822][T12354] blk_mq_map_queues+0x9d/0x430 [ 492.904875][T12354] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 492.904921][T12354] ? rcu_is_watching+0x12/0xc0 [ 492.904969][T12354] ? trace_kmalloc+0xe3/0x110 [ 492.905007][T12354] ? __kasan_kmalloc+0xaa/0xb0 [ 492.905047][T12354] blk_mq_update_queue_map+0x305/0x3a0 [ 492.905095][T12354] blk_mq_alloc_tag_set+0x660/0x1330 [ 492.905131][T12354] ? idr_alloc+0x37/0x130 [ 492.905193][T12354] loop_add+0x3b7/0xb60 [ 492.905239][T12354] ? __pfx_loop_add+0x10/0x10 [ 492.905317][T12354] ? find_held_lock+0x2b/0x80 [ 492.905360][T12354] ? __fget_files+0x215/0x3d0 [ 492.905405][T12354] loop_control_ioctl+0xae/0x620 [ 492.905455][T12354] ? __pfx_loop_control_ioctl+0x10/0x10 [ 492.905511][T12354] ? __pfx_loop_control_ioctl+0x10/0x10 [ 492.905563][T12354] __x64_sys_ioctl+0x18e/0x210 [ 492.905600][T12354] do_syscall_64+0x115/0x840 [ 492.905649][T12354] ? clear_bhb_loop+0x40/0x90 [ 492.905690][T12354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.905724][T12354] RIP: 0033:0x7efeaad9ce59 [ 492.905753][T12354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.905788][T12354] RSP: 002b:00007efeabcf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.905822][T12354] RAX: ffffffffffffffda RBX: 00007efeab016090 RCX: 00007efeaad9ce59 [ 492.905846][T12354] RDX: 0000000000000075 RSI: 0000000000004c80 RDI: 000000000000000a [ 492.905866][T12354] RBP: 00007efeaae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 492.905887][T12354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.905907][T12354] R13: 00007efeab016128 R14: 00007efeab016090 R15: 00007fff08cbc868 [ 492.905950][T12354] [ 493.227986][ T30] audit: type=1107 audit(1780279071.231:20): pid=12345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='0' [ 493.240704][ T30] audit: type=1107 audit(1780279071.251:21): pid=12345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='0' [ 493.957766][T12373] FAULT_INJECTION: forcing a failure. [ 493.957766][T12373] name failslab, interval 1, probability 0, space 0, times 0 [ 493.970782][T12373] CPU: 1 UID: 0 PID: 12373 Comm: syz.1.1268 Tainted: G L syzkaller #0 PREEMPT(full) [ 493.970834][T12373] Tainted: [L]=SOFTLOCKUP [ 493.970846][T12373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 493.970867][T12373] Call Trace: [ 493.970880][T12373] [ 493.970893][T12373] dump_stack_lvl+0x100/0x190 [ 493.970957][T12373] should_fail_ex.cold+0x5/0xa [ 493.971010][T12373] ? group_cpus_evenly+0xec/0x660 [ 493.971052][T12373] should_failslab+0xc2/0x120 [ 493.971091][T12373] __kmalloc_noprof+0xe0/0x850 [ 493.971155][T12373] group_cpus_evenly+0xec/0x660 [ 493.971202][T12373] ? __pfx_group_cpus_evenly+0x10/0x10 [ 493.971261][T12373] blk_mq_map_queues+0x9d/0x430 [ 493.971313][T12373] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 493.971357][T12373] ? rcu_is_watching+0x12/0xc0 [ 493.971395][T12373] ? trace_kmalloc+0xe3/0x110 [ 493.971433][T12373] ? __kasan_kmalloc+0xaa/0xb0 [ 493.971489][T12373] blk_mq_update_queue_map+0x305/0x3a0 [ 493.971537][T12373] blk_mq_alloc_tag_set+0x660/0x1330 [ 493.971573][T12373] ? idr_alloc+0x37/0x130 [ 493.971635][T12373] loop_add+0x3b7/0xb60 [ 493.971680][T12373] ? __pfx_loop_add+0x10/0x10 [ 493.971749][T12373] ? find_held_lock+0x2b/0x80 [ 493.971789][T12373] ? __fget_files+0x215/0x3d0 [ 493.971833][T12373] loop_control_ioctl+0xae/0x620 [ 493.971881][T12373] ? __pfx_loop_control_ioctl+0x10/0x10 [ 493.971933][T12373] ? __pfx_loop_control_ioctl+0x10/0x10 [ 493.971982][T12373] __x64_sys_ioctl+0x18e/0x210 [ 493.972020][T12373] do_syscall_64+0x115/0x840 [ 493.972068][T12373] ? clear_bhb_loop+0x40/0x90 [ 493.972110][T12373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.972146][T12373] RIP: 0033:0x7f2b80f9ce59 [ 493.972174][T12373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.972211][T12373] RSP: 002b:00007f2b81d7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 493.972244][T12373] RAX: ffffffffffffffda RBX: 00007f2b81216090 RCX: 00007f2b80f9ce59 [ 493.972266][T12373] RDX: 00000000000005a4 RSI: 0000000000004c80 RDI: 000000000000000a [ 493.972288][T12373] RBP: 00007f2b81032d6f R08: 0000000000000000 R09: 0000000000000000 [ 493.972309][T12373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.972329][T12373] R13: 00007f2b81216128 R14: 00007f2b81216090 R15: 00007fff3d23d6c8 [ 493.972388][T12373] [ 494.682616][T12377] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 495.032383][T12380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.092754][T12380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.156702][ T6359] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 3516 with max blocks 67 with error 117 [ 495.192613][ T6359] EXT4-fs (sda1): This should not happen!! Data will be lost [ 495.192613][ T6359] [ 495.926528][T11016] block nbd41: Receive control failed (result -32) [ 496.471116][T12412] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 496.488142][T12412] PCI: Can't parse resource_alignment parameter: e‚C/ˆ¼†¡÷OVèGŽDf8—Ø=ó¤Ö¶ÓáÎ2|ùó:ht™3éœ [ 497.014507][T12425] FAULT_INJECTION: forcing a failure. [ 497.014507][T12425] name failslab, interval 1, probability 0, space 0, times 0 [ 497.053512][T12425] CPU: 1 UID: 0 PID: 12425 Comm: syz.7.1280 Tainted: G L syzkaller #0 PREEMPT(full) [ 497.053566][T12425] Tainted: [L]=SOFTLOCKUP [ 497.053576][T12425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 497.053591][T12425] Call Trace: [ 497.053599][T12425] [ 497.053609][T12425] dump_stack_lvl+0x100/0x190 [ 497.053655][T12425] should_fail_ex.cold+0x5/0xa [ 497.053686][T12425] should_failslab+0xc2/0x120 [ 497.053716][T12425] __kmalloc_node_noprof+0xe6/0x850 [ 497.053757][T12425] ? blk_mq_alloc_tag_set+0x477/0x1330 [ 497.053782][T12425] ? __raw_spin_lock_init+0x3a/0x110 [ 497.053815][T12425] blk_mq_alloc_tag_set+0x477/0x1330 [ 497.053840][T12425] ? idr_alloc+0xdd/0x130 [ 497.053875][T12425] ? __pfx_idr_alloc+0x10/0x10 [ 497.053917][T12425] loop_add+0x3b7/0xb60 [ 497.053951][T12425] ? __pfx_loop_add+0x10/0x10 [ 497.054026][T12425] ? find_held_lock+0x2b/0x80 [ 497.054068][T12425] ? __fget_files+0x215/0x3d0 [ 497.054114][T12425] loop_control_ioctl+0xae/0x620 [ 497.054149][T12425] ? __pfx_loop_control_ioctl+0x10/0x10 [ 497.054188][T12425] ? __pfx_loop_control_ioctl+0x10/0x10 [ 497.054224][T12425] __x64_sys_ioctl+0x18e/0x210 [ 497.054250][T12425] do_syscall_64+0x115/0x840 [ 497.054285][T12425] ? clear_bhb_loop+0x40/0x90 [ 497.054314][T12425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.054340][T12425] RIP: 0033:0x7efeaad9ce59 [ 497.054360][T12425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.054385][T12425] RSP: 002b:00007efeabcf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 497.054409][T12425] RAX: ffffffffffffffda RBX: 00007efeab016090 RCX: 00007efeaad9ce59 [ 497.054426][T12425] RDX: 0000000000000096 RSI: 0000000000004c80 RDI: 000000000000000a [ 497.054441][T12425] RBP: 00007efeaae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 497.054457][T12425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 497.054472][T12425] R13: 00007efeab016128 R14: 00007efeab016090 R15: 00007fff08cbc868 [ 497.054503][T12425] [ 498.561381][T12446] random: crng reseeded on system resumption [ 498.585097][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1286'. [ 498.763138][T12453] hub 1-0:1.0: USB hub found [ 498.772741][T12453] hub 1-0:1.0: 1 port detected [ 501.581841][T12500] FAULT_INJECTION: forcing a failure. [ 501.581841][T12500] name failslab, interval 1, probability 0, space 0, times 0 [ 501.598446][T12500] CPU: 0 UID: 0 PID: 12500 Comm: syz.7.1296 Tainted: G L syzkaller #0 PREEMPT(full) [ 501.598495][T12500] Tainted: [L]=SOFTLOCKUP [ 501.598504][T12500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 501.598519][T12500] Call Trace: [ 501.598528][T12500] [ 501.598538][T12500] dump_stack_lvl+0x100/0x190 [ 501.598585][T12500] should_fail_ex.cold+0x5/0xa [ 501.598617][T12500] should_failslab+0xc2/0x120 [ 501.598684][T12500] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 501.598724][T12500] ? ptlock_alloc+0x1f/0x70 [ 501.598762][T12500] ? __lock_acquire+0x4a5/0x2630 [ 501.598805][T12500] ptlock_alloc+0x1f/0x70 [ 501.598840][T12500] pte_alloc_one+0x82/0x3d0 [ 501.598874][T12500] __pte_alloc+0x6d/0x380 [ 501.598901][T12500] ? __pfx___pte_alloc+0x10/0x10 [ 501.598931][T12500] ? do_raw_spin_lock+0x128/0x260 [ 501.598957][T12500] ? find_held_lock+0x2b/0x80 [ 501.598990][T12500] do_anonymous_page+0x13c6/0x2050 [ 501.599032][T12500] ? __pmd_alloc+0x3fb/0x950 [ 501.599066][T12500] __handle_mm_fault+0x1d2c/0x2a00 [ 501.599109][T12500] ? mt_find+0x45e/0x8e0 [ 501.599147][T12500] ? __pfx___handle_mm_fault+0x10/0x10 [ 501.599183][T12500] ? __pfx_mt_find+0x10/0x10 [ 501.599242][T12500] handle_mm_fault+0x37b/0xa30 [ 501.599292][T12500] __get_user_pages+0x1178/0x32a0 [ 501.599334][T12500] ? __pfx___get_user_pages+0x10/0x10 [ 501.599374][T12500] populate_vma_page_range+0x267/0x3f0 [ 501.599414][T12500] ? __pfx_populate_vma_page_range+0x10/0x10 [ 501.599447][T12500] ? __pfx_find_vma_intersection+0x10/0x10 [ 501.599479][T12500] ? do_mmap+0x93f/0x12f0 [ 501.599512][T12500] __mm_populate+0x107/0x3a0 [ 501.599546][T12500] ? __pfx___mm_populate+0x10/0x10 [ 501.599582][T12500] ? up_write+0x28c/0x4f0 [ 501.599610][T12500] vm_mmap_pgoff+0x37f/0x470 [ 501.599646][T12500] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 501.599680][T12500] ? do_futex+0x192/0x350 [ 501.599706][T12500] ? __pfx_do_futex+0x10/0x10 [ 501.599737][T12500] ksys_mmap_pgoff+0xe4/0x610 [ 501.599770][T12500] ? __x64_sys_futex+0x358/0x4d0 [ 501.599797][T12500] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 501.599826][T12500] ? xfd_validate_state+0x129/0x190 [ 501.599850][T12500] ? ksys_write+0x1ac/0x250 [ 501.599921][T12500] __x64_sys_mmap+0x125/0x190 [ 501.599951][T12500] do_syscall_64+0x115/0x840 [ 501.599987][T12500] ? clear_bhb_loop+0x40/0x90 [ 501.600018][T12500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.600045][T12500] RIP: 0033:0x7efeaad9ce59 [ 501.600065][T12500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.600089][T12500] RSP: 002b:00007efeabd17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 501.600112][T12500] RAX: ffffffffffffffda RBX: 00007efeab015fa0 RCX: 00007efeaad9ce59 [ 501.600129][T12500] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 501.600144][T12500] RBP: 00007efeaae32d6f R08: 0000000000000007 R09: 0000000000028000 [ 501.600160][T12500] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 501.600176][T12500] R13: 00007efeab016038 R14: 00007efeab015fa0 R15: 00007fff08cbc868 [ 501.600207][T12500] [ 501.920394][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.926901][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.093209][T12504] FAULT_INJECTION: forcing a failure. [ 502.093209][T12504] name failslab, interval 1, probability 0, space 0, times 0 [ 502.106413][T12504] CPU: 0 UID: 0 PID: 12504 Comm: syz.5.1297 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.106476][T12504] Tainted: [L]=SOFTLOCKUP [ 502.106488][T12504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 502.106508][T12504] Call Trace: [ 502.106519][T12504] [ 502.106532][T12504] dump_stack_lvl+0x100/0x190 [ 502.106603][T12504] should_fail_ex.cold+0x5/0xa [ 502.106654][T12504] should_failslab+0xc2/0x120 [ 502.106718][T12504] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 502.106846][T12504] ? __pmd_alloc+0xbf/0x950 [ 502.106900][T12504] __pmd_alloc+0xbf/0x950 [ 502.106954][T12504] move_page_tables+0x2f7c/0x4610 [ 502.107056][T12504] ? __pfx_copy_vma+0x10/0x10 [ 502.107127][T12504] ? __pfx_move_page_tables+0x10/0x10 [ 502.107234][T12504] copy_vma_and_data+0x25c/0x7c0 [ 502.107296][T12504] ? __pfx_copy_vma_and_data+0x10/0x10 [ 502.107370][T12504] ? __vma_start_write+0x17f/0x280 [ 502.107421][T12504] ? __pfx___vma_start_write+0x10/0x10 [ 502.107484][T12504] move_vma+0x574/0x1920 [ 502.107547][T12504] ? __pfx_move_vma+0x10/0x10 [ 502.107606][T12504] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 502.107651][T12504] ? cap_mmap_addr+0x4b/0x120 [ 502.107684][T12504] ? bpf_lsm_mmap_addr+0x9/0x30 [ 502.107716][T12504] ? security_mmap_addr+0x71/0x1e0 [ 502.107761][T12504] ? __get_unmapped_area+0x255/0x3e0 [ 502.107809][T12504] ? vrm_set_new_addr+0x204/0x290 [ 502.107866][T12504] mremap_to+0x234/0x4c0 [ 502.107918][T12504] ? mas_walk+0x6ef/0x9b0 [ 502.107965][T12504] ? __pfx_mremap_to+0x10/0x10 [ 502.108018][T12504] ? check_prep_vma+0x912/0xe60 [ 502.108080][T12504] __do_sys_mremap+0x88c/0x1850 [ 502.108149][T12504] ? __pfx___do_sys_mremap+0x10/0x10 [ 502.108269][T12504] ? do_futex+0x192/0x350 [ 502.108311][T12504] ? __pfx_do_futex+0x10/0x10 [ 502.108360][T12504] ? __x64_sys_futex+0x34f/0x4d0 [ 502.108413][T12504] ? rcu_is_watching+0x12/0xc0 [ 502.108462][T12504] do_syscall_64+0x115/0x840 [ 502.108509][T12504] ? clear_bhb_loop+0x40/0x90 [ 502.108553][T12504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.108589][T12504] RIP: 0033:0x7faa3599ce59 [ 502.108618][T12504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.108654][T12504] RSP: 002b:00007faa368b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 502.108687][T12504] RAX: ffffffffffffffda RBX: 00007faa35c15fa0 RCX: 00007faa3599ce59 [ 502.108711][T12504] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000001000 [ 502.108731][T12504] RBP: 00007faa35a32d6f R08: 0000000100000000 R09: 0000000000000000 [ 502.108753][T12504] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 502.108773][T12504] R13: 00007faa35c16038 R14: 00007faa35c15fa0 R15: 00007ffc02758988 [ 502.108817][T12504] [ 503.332531][T12526] FAULT_INJECTION: forcing a failure. [ 503.332531][T12526] name fail_futex, interval 1, probability 0, space 0, times 0 [ 503.349149][T12526] CPU: 1 UID: 0 PID: 12526 Comm: syz.7.1302 Tainted: G L syzkaller #0 PREEMPT(full) [ 503.349201][T12526] Tainted: [L]=SOFTLOCKUP [ 503.349213][T12526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 503.349231][T12526] Call Trace: [ 503.349243][T12526] [ 503.349255][T12526] dump_stack_lvl+0x100/0x190 [ 503.349314][T12526] should_fail_ex.cold+0x5/0xa [ 503.349356][T12526] get_futex_key+0x1d2/0x1510 [ 503.349421][T12526] ? __pfx_get_futex_key+0x10/0x10 [ 503.349472][T12526] ? lock_acquire+0x1b1/0x370 [ 503.349534][T12526] futex_wake+0xea/0x530 [ 503.349577][T12526] ? __pfx_futex_wake+0x10/0x10 [ 503.349618][T12526] ? exit_mm_release+0x19/0x30 [ 503.349684][T12526] do_futex+0x32b/0x350 [ 503.349718][T12526] ? __pfx_do_futex+0x10/0x10 [ 503.349748][T12526] ? __might_fault+0xc5/0x140 [ 503.349810][T12526] mm_release+0x24a/0x2f0 [ 503.349849][T12526] do_exit+0x707/0x2af0 [ 503.349905][T12526] ? __pfx_do_exit+0x10/0x10 [ 503.349964][T12526] ? do_raw_spin_lock+0x128/0x260 [ 503.350006][T12526] ? find_held_lock+0x2b/0x80 [ 503.350045][T12526] ? get_signal+0x7e5/0x2210 [ 503.350089][T12526] do_group_exit+0xd5/0x2a0 [ 503.350141][T12526] get_signal+0x20ff/0x2210 [ 503.350207][T12526] ? __pfx_get_signal+0x10/0x10 [ 503.350252][T12526] ? do_futex+0x192/0x350 [ 503.350289][T12526] arch_do_signal_or_restart+0x91/0x7a0 [ 503.350340][T12526] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 503.350403][T12526] ? rcu_is_watching+0x12/0xc0 [ 503.350447][T12526] exit_to_user_mode_loop+0x98/0x670 [ 503.350498][T12526] ? rcu_is_watching+0x12/0xc0 [ 503.350540][T12526] do_syscall_64+0x652/0x840 [ 503.350586][T12526] ? clear_bhb_loop+0x40/0x90 [ 503.350630][T12526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.350672][T12526] RIP: 0033:0x7efeaad9ce59 [ 503.350700][T12526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.350734][T12526] RSP: 002b:00007efeabd170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 503.350765][T12526] RAX: fffffffffffffe00 RBX: 00007efeab015fa8 RCX: 00007efeaad9ce59 [ 503.350787][T12526] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efeab015fa8 [ 503.350806][T12526] RBP: 00007efeab015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 503.350825][T12526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 503.350844][T12526] R13: 00007efeab016038 R14: 00007fff08cbc780 R15: 00007fff08cbc868 [ 503.350886][T12526] [ 503.613902][T12517] Process accounting resumed [ 504.022354][T12532] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 504.808184][T12546] FAULT_INJECTION: forcing a failure. [ 504.808184][T12546] name fail_futex, interval 1, probability 0, space 0, times 0 [ 504.858737][T12546] CPU: 1 UID: 0 PID: 12546 Comm: syz.7.1307 Tainted: G L syzkaller #0 PREEMPT(full) [ 504.858794][T12546] Tainted: [L]=SOFTLOCKUP [ 504.858808][T12546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 504.858829][T12546] Call Trace: [ 504.858840][T12546] [ 504.858854][T12546] dump_stack_lvl+0x100/0x190 [ 504.858920][T12546] should_fail_ex.cold+0x5/0xa [ 504.858964][T12546] get_futex_key+0x1d2/0x1510 [ 504.859028][T12546] ? __pfx_get_futex_key+0x10/0x10 [ 504.859086][T12546] ? trace_pid_list_is_set+0x22c/0x390 [ 504.859139][T12546] futex_wait_setup+0x83/0x510 [ 504.859195][T12546] __futex_wait+0x19f/0x300 [ 504.859243][T12546] ? __pfx___futex_wait+0x10/0x10 [ 504.859287][T12546] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 504.859342][T12546] ? __pfx_futex_wake_mark+0x10/0x10 [ 504.859394][T12546] ? find_held_lock+0x2b/0x80 [ 504.859449][T12546] ? futex_wake+0x456/0x530 [ 504.859503][T12546] futex_wait+0xe6/0x370 [ 504.859549][T12546] ? __pfx_futex_wait+0x10/0x10 [ 504.859615][T12546] do_futex+0x1ef/0x350 [ 504.859652][T12546] ? __pfx_do_futex+0x10/0x10 [ 504.859688][T12546] ? __pfx___might_resched+0x10/0x10 [ 504.859725][T12546] ? blkcg_maybe_throttle_current+0x5e8/0xeb0 [ 504.859782][T12546] ? _raw_spin_unlock_irq+0x23/0x50 [ 504.859833][T12546] __x64_sys_futex+0x34f/0x4d0 [ 504.859874][T12546] ? __pfx___x64_sys_futex+0x10/0x10 [ 504.859908][T12546] ? exit_to_user_mode_loop+0xf3/0x670 [ 504.859961][T12546] ? rcu_is_watching+0x12/0xc0 [ 504.859999][T12546] ? exit_to_user_mode_loop+0xf3/0x670 [ 504.860057][T12546] ? rcu_is_watching+0x12/0xc0 [ 504.860106][T12546] do_syscall_64+0x115/0x840 [ 504.860157][T12546] ? clear_bhb_loop+0x40/0x90 [ 504.860202][T12546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.860238][T12546] RIP: 0033:0x7efeaad9ce59 [ 504.860266][T12546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.860301][T12546] RSP: 002b:00007efeabd170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 504.860341][T12546] RAX: ffffffffffffffda RBX: 00007efeab015fa8 RCX: 00007efeaad9ce59 [ 504.860365][T12546] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efeab015fa8 [ 504.860387][T12546] RBP: 00007efeab015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 504.860407][T12546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.860436][T12546] R13: 00007efeab016038 R14: 00007fff08cbc780 R15: 00007fff08cbc868 [ 504.860480][T12546] [ 507.493322][T12578] FAULT_INJECTION: forcing a failure. [ 507.493322][T12578] name failslab, interval 1, probability 0, space 0, times 0 [ 507.510563][T12578] CPU: 0 UID: 0 PID: 12578 Comm: syz.7.1312 Tainted: G L syzkaller #0 PREEMPT(full) [ 507.510616][T12578] Tainted: [L]=SOFTLOCKUP [ 507.510629][T12578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 507.510649][T12578] Call Trace: [ 507.510661][T12578] [ 507.510674][T12578] dump_stack_lvl+0x100/0x190 [ 507.510751][T12578] should_fail_ex.cold+0x5/0xa [ 507.510800][T12578] should_failslab+0xc2/0x120 [ 507.510841][T12578] __kmalloc_cache_node_noprof+0x7d/0x770 [ 507.510880][T12578] ? blk_mq_init_tags+0x8c/0x300 [ 507.510927][T12578] blk_mq_init_tags+0x8c/0x300 [ 507.510969][T12578] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 507.511013][T12578] ? blk_mq_update_queue_map+0x227/0x3a0 [ 507.511061][T12578] blk_mq_alloc_tag_set+0x848/0x1330 [ 507.511113][T12578] loop_add+0x3b7/0xb60 [ 507.511159][T12578] ? __pfx_loop_add+0x10/0x10 [ 507.511229][T12578] ? find_held_lock+0x2b/0x80 [ 507.511272][T12578] ? __fget_files+0x215/0x3d0 [ 507.511316][T12578] loop_control_ioctl+0xae/0x620 [ 507.511362][T12578] ? __pfx_loop_control_ioctl+0x10/0x10 [ 507.511415][T12578] ? __pfx_loop_control_ioctl+0x10/0x10 [ 507.511466][T12578] __x64_sys_ioctl+0x18e/0x210 [ 507.511503][T12578] do_syscall_64+0x115/0x840 [ 507.511551][T12578] ? clear_bhb_loop+0x40/0x90 [ 507.511593][T12578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.511629][T12578] RIP: 0033:0x7efeaad9ce59 [ 507.511657][T12578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.511692][T12578] RSP: 002b:00007efeabcf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 507.511734][T12578] RAX: ffffffffffffffda RBX: 00007efeab016090 RCX: 00007efeaad9ce59 [ 507.511759][T12578] RDX: 00000000000000d1 RSI: 0000000000004c80 RDI: 000000000000000a [ 507.511780][T12578] RBP: 00007efeaae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 507.511801][T12578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.511823][T12578] R13: 00007efeab016128 R14: 00007efeab016090 R15: 00007fff08cbc868 [ 507.511867][T12578] [ 507.512044][T12578] blk-mq: reduced tag depth (128 -> 64) [ 507.882385][T12582] FAULT_INJECTION: forcing a failure. [ 507.882385][T12582] name fail_futex, interval 1, probability 0, space 0, times 0 [ 507.899046][T12582] CPU: 1 UID: 0 PID: 12582 Comm: syz.5.1314 Tainted: G L syzkaller #0 PREEMPT(full) [ 507.899099][T12582] Tainted: [L]=SOFTLOCKUP [ 507.899115][T12582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 507.899135][T12582] Call Trace: [ 507.899146][T12582] [ 507.899159][T12582] dump_stack_lvl+0x100/0x190 [ 507.899222][T12582] should_fail_ex.cold+0x5/0xa [ 507.899266][T12582] get_futex_key+0x1d2/0x1510 [ 507.899327][T12582] ? __pfx_get_futex_key+0x10/0x10 [ 507.899398][T12582] futex_wait_setup+0x83/0x510 [ 507.899453][T12582] __futex_wait+0x19f/0x300 [ 507.899500][T12582] ? __pfx___futex_wait+0x10/0x10 [ 507.899550][T12582] ? __pfx_futex_wake_mark+0x10/0x10 [ 507.899607][T12582] ? futex_hash+0x2ad/0x370 [ 507.899663][T12582] ? futex_hash+0x141/0x370 [ 507.899739][T12582] futex_wait+0xe6/0x370 [ 507.899782][T12582] ? __pfx_futex_wait+0x10/0x10 [ 507.899837][T12582] ? ksys_write+0x190/0x250 [ 507.899876][T12582] ? __pfx___do_sys_mremap+0x10/0x10 [ 507.899939][T12582] do_futex+0x1ef/0x350 [ 507.899977][T12582] ? __pfx_do_futex+0x10/0x10 [ 507.900013][T12582] ? find_held_lock+0x2b/0x80 [ 507.900056][T12582] ? rcu_read_unlock+0x17/0x60 [ 507.900099][T12582] ? rcu_read_unlock+0x17/0x60 [ 507.900147][T12582] __x64_sys_futex+0x34f/0x4d0 [ 507.900189][T12582] ? __pfx___x64_sys_futex+0x10/0x10 [ 507.900234][T12582] ? rcu_is_watching+0x12/0xc0 [ 507.900277][T12582] do_syscall_64+0x115/0x840 [ 507.900326][T12582] ? clear_bhb_loop+0x40/0x90 [ 507.900368][T12582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.900403][T12582] RIP: 0033:0x7faa3599ce59 [ 507.900430][T12582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.900465][T12582] RSP: 002b:00007faa368b50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 507.900497][T12582] RAX: ffffffffffffffda RBX: 00007faa35c15fa8 RCX: 00007faa3599ce59 [ 507.900521][T12582] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faa35c15fa8 [ 507.900542][T12582] RBP: 00007faa35c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 507.900562][T12582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.900583][T12582] R13: 00007faa35c16038 R14: 00007ffc027588a0 R15: 00007ffc02758988 [ 507.900627][T12582] [ 508.836784][T12595] FAULT_INJECTION: forcing a failure. [ 508.836784][T12595] name failslab, interval 1, probability 0, space 0, times 0 [ 508.850574][T12593] sd 0:0:1:0: PR command failed: 1026 [ 508.860807][T12593] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 508.868647][T12595] CPU: 1 UID: 0 PID: 12595 Comm: syz.5.1317 Tainted: G L syzkaller #0 PREEMPT(full) [ 508.868704][T12595] Tainted: [L]=SOFTLOCKUP [ 508.868718][T12595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 508.868739][T12595] Call Trace: [ 508.868751][T12595] [ 508.868765][T12595] dump_stack_lvl+0x100/0x190 [ 508.868833][T12595] should_fail_ex.cold+0x5/0xa [ 508.868876][T12595] ? udpv6_init_sock+0x24e/0x450 [ 508.868910][T12595] should_failslab+0xc2/0x120 [ 508.868952][T12595] __kmalloc_noprof+0xe0/0x850 [ 508.869005][T12595] ? lockdep_init_map_type+0x5c/0x250 [ 508.869067][T12595] udpv6_init_sock+0x24e/0x450 [ 508.869102][T12595] ? __pfx_udpv6_init_sock+0x10/0x10 [ 508.869144][T12595] inet6_create+0xb21/0x12b0 [ 508.869191][T12595] ? inet6_create+0x7f/0x12b0 [ 508.869238][T12595] __sock_create+0x339/0x860 [ 508.869291][T12595] __sys_socket+0x14d/0x260 [ 508.869340][T12595] ? __pfx___sys_socket+0x10/0x10 [ 508.869387][T12595] ? ksys_write+0x1ac/0x250 [ 508.869436][T12595] __x64_sys_socket+0x72/0xb0 [ 508.869483][T12595] ? lockdep_hardirqs_on+0x78/0x100 [ 508.869533][T12595] do_syscall_64+0x115/0x840 [ 508.869580][T12595] ? clear_bhb_loop+0x40/0x90 [ 508.869634][T12595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.869670][T12595] RIP: 0033:0x7faa3599ce59 [ 508.869699][T12595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.869732][T12595] RSP: 002b:00007faa368b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 508.869767][T12595] RAX: ffffffffffffffda RBX: 00007faa35c15fa0 RCX: 00007faa3599ce59 [ 508.869790][T12595] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 080000000000000a [ 508.869810][T12595] RBP: 00007faa35a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 508.869831][T12595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 508.869851][T12595] R13: 00007faa35c16038 R14: 00007faa35c15fa0 R15: 00007ffc02758988 [ 508.869895][T12595] [ 509.154614][T12593] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 509.454475][ T5639] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 509.472937][ T5639] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 509.482763][ T5639] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 509.498733][ T5639] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 509.506891][ T5639] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 510.255582][T12622] netlink: 138 bytes leftover after parsing attributes in process `syz.5.1321'. [ 510.483122][T11016] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 510.498607][T11016] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 510.517808][T11016] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 510.526158][T11016] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 510.534274][T11016] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 510.600167][T12628] FAULT_INJECTION: forcing a failure. [ 510.600167][T12628] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 510.671794][T12628] CPU: 1 UID: 0 PID: 12628 Comm: syz.5.1323 Tainted: G L syzkaller #0 PREEMPT(full) [ 510.671846][T12628] Tainted: [L]=SOFTLOCKUP [ 510.671858][T12628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 510.671878][T12628] Call Trace: [ 510.671889][T12628] [ 510.671903][T12628] dump_stack_lvl+0x100/0x190 [ 510.671978][T12628] should_fail_ex.cold+0x5/0xa [ 510.672020][T12628] ? prepare_alloc_pages+0x16d/0x5f0 [ 510.672069][T12628] should_fail_alloc_page+0xeb/0x140 [ 510.672112][T12628] prepare_alloc_pages+0x1f0/0x5f0 [ 510.672162][T12628] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 510.672223][T12628] ? __pfx___up_read+0x10/0x10 [ 510.672257][T12628] ? validate_mm+0x261/0x4e0 [ 510.672305][T12628] ? validate_mm+0x261/0x4e0 [ 510.672356][T12628] ? mas_find+0x2dd/0x740 [ 510.672409][T12628] ? validate_mm+0x392/0x4e0 [ 510.672460][T12628] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 510.672535][T12628] ? vma_iter_store_overwrite+0x392/0x650 [ 510.672596][T12628] ? vma_link+0x5ee/0x8d0 [ 510.672645][T12628] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 510.672695][T12628] ? policy_nodemask+0xed/0x4f0 [ 510.672738][T12628] alloc_pages_mpol+0x1fb/0x540 [ 510.672781][T12628] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 510.672833][T12628] alloc_pages_noprof+0x1a/0x160 [ 510.672881][T12628] __pmd_alloc+0x3b/0x950 [ 510.672929][T12628] move_page_tables+0x2f7c/0x4610 [ 510.672999][T12628] ? __pfx_copy_vma+0x10/0x10 [ 510.673069][T12628] ? __pfx_move_page_tables+0x10/0x10 [ 510.673145][T12628] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 510.673195][T12628] copy_vma_and_data+0x25c/0x7c0 [ 510.673255][T12628] ? __pfx_copy_vma_and_data+0x10/0x10 [ 510.673327][T12628] ? __vma_start_write+0x17f/0x280 [ 510.673374][T12628] ? __pfx___vma_start_write+0x10/0x10 [ 510.673433][T12628] move_vma+0x574/0x1920 [ 510.673493][T12628] ? __pfx_move_vma+0x10/0x10 [ 510.673551][T12628] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 510.673597][T12628] ? cap_mmap_addr+0x4b/0x120 [ 510.673630][T12628] ? bpf_lsm_mmap_addr+0x9/0x30 [ 510.673661][T12628] ? security_mmap_addr+0x71/0x1e0 [ 510.673707][T12628] ? __get_unmapped_area+0x255/0x3e0 [ 510.673754][T12628] ? vrm_set_new_addr+0x204/0x290 [ 510.673812][T12628] mremap_to+0x234/0x4c0 [ 510.673863][T12628] ? mas_walk+0x6ef/0x9b0 [ 510.673908][T12628] ? __pfx_mremap_to+0x10/0x10 [ 510.673974][T12628] ? check_prep_vma+0x912/0xe60 [ 510.674035][T12628] __do_sys_mremap+0x88c/0x1850 [ 510.674101][T12628] ? __pfx___do_sys_mremap+0x10/0x10 [ 510.674163][T12628] ? do_futex+0x192/0x350 [ 510.674199][T12628] ? __pfx_do_futex+0x10/0x10 [ 510.674263][T12628] ? rcu_is_watching+0x12/0xc0 [ 510.674305][T12628] do_syscall_64+0x115/0x840 [ 510.674352][T12628] ? clear_bhb_loop+0x40/0x90 [ 510.674394][T12628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.674437][T12628] RIP: 0033:0x7faa3599ce59 [ 510.674465][T12628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.674499][T12628] RSP: 002b:00007faa368b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 510.674533][T12628] RAX: ffffffffffffffda RBX: 00007faa35c15fa0 RCX: 00007faa3599ce59 [ 510.674556][T12628] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 510.674577][T12628] RBP: 00007faa35a32d6f R08: 0000000103000000 R09: 0000000000000000 [ 510.674597][T12628] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 510.674616][T12628] R13: 00007faa35c16038 R14: 00007faa35c15fa0 R15: 00007ffc02758988 [ 510.674660][T12628] [ 511.556133][T11016] Bluetooth: hci7: command tx timeout [ 511.606294][T12644] FAULT_INJECTION: forcing a failure. [ 511.606294][T12644] name failslab, interval 1, probability 0, space 0, times 0 [ 511.654704][T12644] CPU: 1 UID: 0 PID: 12644 Comm: syz.5.1325 Tainted: G L syzkaller #0 PREEMPT(full) [ 511.654748][T12644] Tainted: [L]=SOFTLOCKUP [ 511.654757][T12644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 511.654773][T12644] Call Trace: [ 511.654781][T12644] [ 511.654791][T12644] dump_stack_lvl+0x100/0x190 [ 511.654839][T12644] should_fail_ex.cold+0x5/0xa [ 511.654871][T12644] should_failslab+0xc2/0x120 [ 511.654900][T12644] __kmalloc_node_noprof+0xe6/0x850 [ 511.654941][T12644] ? blk_mq_alloc_tag_set+0x57a/0x1330 [ 511.654966][T12644] ? rt_mutex_debug_task_free+0x1a0/0x1e0 [ 511.654998][T12644] blk_mq_alloc_tag_set+0x57a/0x1330 [ 511.655023][T12644] ? idr_alloc+0x37/0x130 [ 511.655068][T12644] loop_add+0x3b7/0xb60 [ 511.655101][T12644] ? __pfx_loop_add+0x10/0x10 [ 511.655151][T12644] ? find_held_lock+0x2b/0x80 [ 511.655180][T12644] ? __fget_files+0x215/0x3d0 [ 511.655213][T12644] loop_control_ioctl+0xae/0x620 [ 511.655248][T12644] ? __pfx_loop_control_ioctl+0x10/0x10 [ 511.655286][T12644] ? __pfx_loop_control_ioctl+0x10/0x10 [ 511.655330][T12644] __x64_sys_ioctl+0x18e/0x210 [ 511.655357][T12644] do_syscall_64+0x115/0x840 [ 511.655392][T12644] ? clear_bhb_loop+0x40/0x90 [ 511.655422][T12644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.655448][T12644] RIP: 0033:0x7faa3599ce59 [ 511.655468][T12644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.655493][T12644] RSP: 002b:00007faa36894028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 511.655517][T12644] RAX: ffffffffffffffda RBX: 00007faa35c16090 RCX: 00007faa3599ce59 [ 511.655537][T12644] RDX: 000000000000017f RSI: 0000000000004c80 RDI: 000000000000000a [ 511.655553][T12644] RBP: 00007faa35a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 511.655569][T12644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.655613][T12644] R13: 00007faa35c16128 R14: 00007faa35c16090 R15: 00007ffc02758988 [ 511.655657][T12644] [ 512.367540][T12606] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.375385][T12606] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.382713][T12606] bridge_slave_0: entered allmulticast mode [ 512.392752][T12606] bridge_slave_0: entered promiscuous mode [ 512.417923][T12606] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.425548][T12606] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.432832][T12606] bridge_slave_1: entered allmulticast mode [ 512.444909][T12606] bridge_slave_1: entered promiscuous mode [ 512.530427][T12606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.547440][T12606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.630412][T12662] FAULT_INJECTION: forcing a failure. [ 512.630412][T12662] name failslab, interval 1, probability 0, space 0, times 0 [ 512.644979][T12662] CPU: 0 UID: 0 PID: 12662 Comm: syz.7.1327 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.645049][T12662] Tainted: [L]=SOFTLOCKUP [ 512.645064][T12662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 512.645109][T12662] Call Trace: [ 512.645128][T12662] [ 512.645142][T12662] dump_stack_lvl+0x100/0x190 [ 512.645238][T12662] should_fail_ex.cold+0x5/0xa [ 512.645297][T12662] should_failslab+0xc2/0x120 [ 512.645347][T12662] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 512.645408][T12662] ? security_file_alloc+0x34/0x2c0 [ 512.645456][T12662] ? trace_kmem_cache_alloc+0xd5/0x100 [ 512.645508][T12662] security_file_alloc+0x34/0x2c0 [ 512.645556][T12662] init_file+0x95/0x480 [ 512.645607][T12662] alloc_empty_file+0x79/0x1c0 [ 512.645667][T12662] path_openat+0xe8/0x31a0 [ 512.645710][T12662] ? kasan_save_stack+0x3f/0x50 [ 512.645743][T12662] ? kasan_save_stack+0x30/0x50 [ 512.645777][T12662] ? kasan_save_track+0x14/0x30 [ 512.645810][T12662] ? __kasan_slab_alloc+0x89/0x90 [ 512.645847][T12662] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 512.645923][T12662] ? do_getname+0x35/0x390 [ 512.645971][T12662] ? do_sys_openat2+0xc5/0x1e0 [ 512.646024][T12662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.646066][T12662] ? __pfx_path_openat+0x10/0x10 [ 512.646125][T12662] do_file_open+0x20e/0x430 [ 512.646173][T12662] ? __pfx_do_file_open+0x10/0x10 [ 512.646248][T12662] ? alloc_fd+0x476/0x790 [ 512.646303][T12662] ? do_getname+0x191/0x390 [ 512.646358][T12662] do_sys_openat2+0x10d/0x1e0 [ 512.646414][T12662] ? __pfx_do_sys_openat2+0x10/0x10 [ 512.646470][T12662] ? rcu_read_unlock+0x17/0x60 [ 512.646513][T12662] ? rcu_read_unlock+0x17/0x60 [ 512.646566][T12662] __x64_sys_openat+0x12d/0x210 [ 512.646630][T12662] ? __pfx___x64_sys_openat+0x10/0x10 [ 512.646681][T12662] ? trace_kmalloc+0xe3/0x110 [ 512.646727][T12662] ? rcu_is_watching+0x12/0xc0 [ 512.646773][T12662] do_syscall_64+0x115/0x840 [ 512.646823][T12662] ? clear_bhb_loop+0x40/0x90 [ 512.646865][T12662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.646901][T12662] RIP: 0033:0x7efeaad9ce59 [ 512.646930][T12662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.646965][T12662] RSP: 002b:00007efeabd17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 512.646998][T12662] RAX: ffffffffffffffda RBX: 00007efeab015fa0 RCX: 00007efeaad9ce59 [ 512.647022][T12662] RDX: 000000000000b480 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 512.647045][T12662] RBP: 00007efeaae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 512.647070][T12662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.647091][T12662] R13: 00007efeab016038 R14: 00007efeab015fa0 R15: 00007fff08cbc868 [ 512.647135][T12662] [ 512.945743][T11016] Bluetooth: hci8: command tx timeout [ 512.976820][T12606] team0: Port device team_slave_0 added [ 513.038107][T12606] team0: Port device team_slave_1 added [ 513.110588][T12606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.117669][T12606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.143752][T12606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.158207][T12606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.165416][T12606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.192083][T12606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.294787][T12606] hsr_slave_0: entered promiscuous mode [ 513.304697][T12606] hsr_slave_1: entered promiscuous mode [ 513.314568][T12606] debugfs: 'hsr0' already exists in 'hsr' [ 513.320419][T12606] Cannot create hsr debugfs directory [ 513.634132][T11016] Bluetooth: hci7: command tx timeout [ 514.208362][T12625] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.226924][T12625] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.236800][T12625] bridge_slave_0: entered allmulticast mode [ 514.262137][T12625] bridge_slave_0: entered promiscuous mode [ 514.323068][T12625] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.332819][T12625] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.342186][T12625] bridge_slave_1: entered allmulticast mode [ 514.350521][T12625] bridge_slave_1: entered promiscuous mode [ 514.483395][T12625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.549508][T12625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.805622][T12625] team0: Port device team_slave_0 added [ 514.843802][T12625] team0: Port device team_slave_1 added [ 514.967874][T12625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.976379][T12625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.004391][T11016] Bluetooth: hci8: command tx timeout [ 515.005038][T12625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.042543][T12625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.054289][T12625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.085211][T12625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.099424][T12606] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 515.116545][T12606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 515.146767][T12606] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 515.170005][T12606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 515.179951][T12606] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 515.204907][T12606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 515.253773][T12689] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 515.271316][T12606] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 515.302225][T12606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 515.412704][T12625] hsr_slave_0: entered promiscuous mode [ 515.442648][T12625] hsr_slave_1: entered promiscuous mode [ 515.463310][T12625] debugfs: 'hsr0' already exists in 'hsr' [ 515.492321][T12625] Cannot create hsr debugfs directory [ 515.714219][T11016] Bluetooth: hci7: command tx timeout [ 515.999791][ T30] audit: type=1107 audit(1780279094.021:22): pid=12687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='0' [ 516.053297][ T30] audit: type=1107 audit(1780279094.061:23): pid=12687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='0' [ 516.421272][T12606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.702379][T12606] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.729121][ T6352] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.736388][ T6352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.759392][ T6352] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.766656][ T6352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.777263][T12625] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 516.792295][T12625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 516.803123][T12625] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 516.816217][T12625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 516.824525][T12625] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 516.840725][T12625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 516.855711][T12625] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 516.867694][T12625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 517.079179][T11016] Bluetooth: hci8: command tx timeout [ 517.145986][T12625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.146247][T12714] FAULT_INJECTION: forcing a failure. [ 517.146247][T12714] name fail_futex, interval 1, probability 0, space 0, times 0 [ 517.197724][T12625] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.205226][T12714] CPU: 1 UID: 0 PID: 12714 Comm: syz.7.1335 Tainted: G L syzkaller #0 PREEMPT(full) [ 517.205274][T12714] Tainted: [L]=SOFTLOCKUP [ 517.205284][T12714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 517.205303][T12714] Call Trace: [ 517.205313][T12714] [ 517.205334][T12714] dump_stack_lvl+0x100/0x190 [ 517.205397][T12714] should_fail_ex.cold+0x5/0xa [ 517.205440][T12714] get_futex_key+0x295/0x1510 [ 517.205524][T12714] ? __pfx_get_futex_key+0x10/0x10 [ 517.205580][T12714] ? lock_acquire+0x1b1/0x370 [ 517.205647][T12714] futex_wake+0xea/0x530 [ 517.205692][T12714] ? __pfx_futex_wake+0x10/0x10 [ 517.205733][T12714] ? exit_mm_release+0x19/0x30 [ 517.205792][T12714] do_futex+0x32b/0x350 [ 517.205827][T12714] ? __pfx_do_futex+0x10/0x10 [ 517.205858][T12714] ? __might_fault+0xc5/0x140 [ 517.205919][T12714] mm_release+0x24a/0x2f0 [ 517.205970][T12714] do_exit+0x707/0x2af0 [ 517.206026][T12714] ? __pfx_do_exit+0x10/0x10 [ 517.206073][T12714] ? do_raw_spin_lock+0x128/0x260 [ 517.206108][T12714] ? find_held_lock+0x2b/0x80 [ 517.206146][T12714] ? get_signal+0x7e5/0x2210 [ 517.206188][T12714] do_group_exit+0xd5/0x2a0 [ 517.206241][T12714] get_signal+0x20ff/0x2210 [ 517.206294][T12714] ? __pfx_get_signal+0x10/0x10 [ 517.206352][T12714] ? do_futex+0x192/0x350 [ 517.206388][T12714] arch_do_signal_or_restart+0x91/0x7a0 [ 517.206438][T12714] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 517.206500][T12714] ? rcu_is_watching+0x12/0xc0 [ 517.206544][T12714] exit_to_user_mode_loop+0x98/0x670 [ 517.206596][T12714] ? rcu_is_watching+0x12/0xc0 [ 517.206639][T12714] do_syscall_64+0x652/0x840 [ 517.206685][T12714] ? clear_bhb_loop+0x40/0x90 [ 517.206726][T12714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.206769][T12714] RIP: 0033:0x7efeaad9ce59 [ 517.206797][T12714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.206829][T12714] RSP: 002b:00007efeabd170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 517.206861][T12714] RAX: fffffffffffffe00 RBX: 00007efeab015fa8 RCX: 00007efeaad9ce59 [ 517.206882][T12714] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efeab015fa8 [ 517.206902][T12714] RBP: 00007efeab015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 517.206922][T12714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.206942][T12714] R13: 00007efeab016038 R14: 00007fff08cbc780 R15: 00007fff08cbc868 [ 517.206983][T12714] [ 517.298153][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.473274][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.546855][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.554233][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.795956][ T5639] Bluetooth: hci7: command tx timeout [ 518.382370][T12606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.656059][T12625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.155015][ T5639] Bluetooth: hci8: command tx timeout [ 519.262342][T12606] veth0_vlan: entered promiscuous mode [ 519.325508][T12606] veth1_vlan: entered promiscuous mode [ 519.379705][T12625] veth0_vlan: entered promiscuous mode [ 519.427965][T12625] veth1_vlan: entered promiscuous mode [ 519.468903][T12606] veth0_macvtap: entered promiscuous mode [ 519.485096][T12606] veth1_macvtap: entered promiscuous mode [ 519.531511][T12625] veth0_macvtap: entered promiscuous mode [ 519.572448][T12606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.581392][T12625] veth1_macvtap: entered promiscuous mode [ 519.620820][T12606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.652650][T12625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.671399][ T6361] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.681817][ T6361] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.695259][ T6361] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.705169][ T6361] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.720992][T12625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.777176][ T8882] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.787084][ T8882] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.827714][ T8882] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.856708][ T8882] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.096191][ T6361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.130578][ T6361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.277717][ T8882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.289403][ T8882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.342020][ T8882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.361030][ T8882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.467350][ T8879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.487947][ T8879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.472140][T12794] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 522.472140][T12794] program syz.9.1343 not setting count and/or reply_len properly [ 522.549707][T12799] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1343'. [ 522.700936][T12799] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.9.1343: iget: checksum invalid [ 522.752223][T12799] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 522.804471][T12799] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.9.1343: iget: checksum invalid [ 522.850108][T12799] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 522.888750][T12799] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.9.1343: iget: checksum invalid [ 522.950423][T12799] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 522.995236][T12799] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.9.1343: iget: checksum invalid [ 523.046557][T12799] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 523.066418][T12799] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 523.094096][T12799] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 523.748820][T12825] netlink: 342 bytes leftover after parsing attributes in process `syz.7.1350'. [ 523.769839][T12826] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 524.912808][T12842] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 525.301284][T12849] futex_wake_op: syz.8.1355 tries to shift op by -2048; fix this program [ 525.326852][T12849] 0x000000000001-0x000000020000 : "" [ 525.501337][ T8879] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 925 with max blocks 7 with error 117 [ 525.531809][ T8879] EXT4-fs (sda1): This should not happen!! Data will be lost [ 525.531809][ T8879] [ 525.609921][T12849] ftl_cs: FTL header corrupt! [ 526.859565][T12863] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 527.129879][T12869] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 527.570546][T12877] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 529.997353][T12914] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 530.157571][T12914] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 530.261861][T12917] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 530.700058][T12922] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 530.833499][T12919] FAULT_INJECTION: forcing a failure. [ 530.833499][T12919] name failslab, interval 1, probability 0, space 0, times 0 [ 530.847548][T12919] CPU: 1 UID: 0 PID: 12919 Comm: syz.8.1367 Tainted: G L syzkaller #0 PREEMPT(full) [ 530.847618][T12919] Tainted: [L]=SOFTLOCKUP [ 530.847631][T12919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 530.847652][T12919] Call Trace: [ 530.847665][T12919] [ 530.847679][T12919] dump_stack_lvl+0x100/0x190 [ 530.847744][T12919] should_fail_ex.cold+0x5/0xa [ 530.847786][T12919] should_failslab+0xc2/0x120 [ 530.847832][T12919] __kmalloc_cache_noprof+0x7a/0x6f0 [ 530.847882][T12919] ? alloc_fs_context+0x57/0xf40 [ 530.847939][T12919] alloc_fs_context+0x57/0xf40 [ 530.847996][T12919] mq_init_ns+0x16e/0x820 [ 530.848038][T12919] copy_ipcs+0x3dd/0x7e0 [ 530.848080][T12919] create_new_namespaces+0x20a/0xac0 [ 530.848124][T12919] ? security_capable+0x80/0x260 [ 530.848172][T12919] unshare_nsproxy_namespaces+0xf2/0x220 [ 530.848220][T12919] ksys_unshare+0x438/0xab0 [ 530.848273][T12919] ? __pfx_ksys_unshare+0x10/0x10 [ 530.848320][T12919] ? xfd_validate_state+0x129/0x190 [ 530.848368][T12919] __x64_sys_unshare+0x31/0x40 [ 530.848417][T12919] do_syscall_64+0x115/0x840 [ 530.848466][T12919] ? clear_bhb_loop+0x40/0x90 [ 530.848510][T12919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.848547][T12919] RIP: 0033:0x7f6689d9ce59 [ 530.848576][T12919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.848611][T12919] RSP: 002b:00007f668abe5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 530.848646][T12919] RAX: ffffffffffffffda RBX: 00007f668a015fa0 RCX: 00007f6689d9ce59 [ 530.848669][T12919] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 530.848689][T12919] RBP: 00007f6689e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 530.848710][T12919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.848730][T12919] R13: 00007f668a016038 R14: 00007f668a015fa0 R15: 00007ffc85bff7c8 [ 530.848774][T12919] [ 532.097965][T12936] FAULT_INJECTION: forcing a failure. [ 532.097965][T12936] name fail_futex, interval 1, probability 0, space 0, times 0 [ 532.129009][T12936] CPU: 1 UID: 0 PID: 12936 Comm: syz.8.1371 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.129047][T12936] Tainted: [L]=SOFTLOCKUP [ 532.129056][T12936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 532.129070][T12936] Call Trace: [ 532.129079][T12936] [ 532.129088][T12936] dump_stack_lvl+0x100/0x190 [ 532.129134][T12936] should_fail_ex.cold+0x5/0xa [ 532.129165][T12936] get_futex_key+0xf78/0x1510 [ 532.129208][T12936] ? __pfx_get_futex_key+0x10/0x10 [ 532.129249][T12936] ? lock_acquire+0x1b1/0x370 [ 532.129294][T12936] futex_wake+0xea/0x530 [ 532.129326][T12936] ? __pfx_futex_wake+0x10/0x10 [ 532.129355][T12936] ? exit_mm_release+0x19/0x30 [ 532.129398][T12936] do_futex+0x32b/0x350 [ 532.129435][T12936] ? __pfx_do_futex+0x10/0x10 [ 532.129458][T12936] ? __might_fault+0xc5/0x140 [ 532.129502][T12936] mm_release+0x24a/0x2f0 [ 532.129531][T12936] do_exit+0x707/0x2af0 [ 532.129571][T12936] ? __pfx_do_exit+0x10/0x10 [ 532.129606][T12936] ? do_raw_spin_lock+0x128/0x260 [ 532.129631][T12936] ? find_held_lock+0x2b/0x80 [ 532.129660][T12936] ? get_signal+0x7e5/0x2210 [ 532.129691][T12936] do_group_exit+0xd5/0x2a0 [ 532.129729][T12936] get_signal+0x20ff/0x2210 [ 532.129768][T12936] ? __pfx_get_signal+0x10/0x10 [ 532.129799][T12936] ? do_futex+0x192/0x350 [ 532.129826][T12936] arch_do_signal_or_restart+0x91/0x7a0 [ 532.129863][T12936] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 532.129909][T12936] ? rcu_is_watching+0x12/0xc0 [ 532.129941][T12936] exit_to_user_mode_loop+0x98/0x670 [ 532.129980][T12936] ? rcu_is_watching+0x12/0xc0 [ 532.130009][T12936] do_syscall_64+0x652/0x840 [ 532.130043][T12936] ? clear_bhb_loop+0x40/0x90 [ 532.130072][T12936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.130097][T12936] RIP: 0033:0x7f6689d9ce59 [ 532.130116][T12936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.130140][T12936] RSP: 002b:00007f668abe50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 532.130163][T12936] RAX: fffffffffffffe00 RBX: 00007f668a015fa8 RCX: 00007f6689d9ce59 [ 532.130179][T12936] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f668a015fa8 [ 532.130194][T12936] RBP: 00007f668a015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 532.130208][T12936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.130223][T12936] R13: 00007f668a016038 R14: 00007ffc85bff6e0 R15: 00007ffc85bff7c8 [ 532.130255][T12936] [ 532.547465][T11016] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 532.560233][T11016] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 532.674967][T11016] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 532.687552][T11016] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 532.695931][T11016] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 534.755338][T11016] Bluetooth: hci9: command tx timeout [ 535.842518][T12940] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.860013][T12940] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.881846][T12940] bridge_slave_0: entered allmulticast mode [ 535.919343][T12940] bridge_slave_0: entered promiscuous mode [ 535.980872][T12940] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.002088][T12940] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.020737][T12940] bridge_slave_1: entered allmulticast mode [ 536.030235][T12940] bridge_slave_1: entered promiscuous mode [ 536.200281][T12940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 536.240849][T12940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.304636][ T30] audit: type=1800 audit(8277292043.750:24): pid=13003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1379" name="dbroot" dev="configfs" ino=55774 res=0 errno=0 [ 536.457843][T13007] FAULT_INJECTION: forcing a failure. [ 536.457843][T13007] name failslab, interval 1, probability 0, space 0, times 0 [ 536.511945][T13007] CPU: 1 UID: 0 PID: 13007 Comm: syz.9.1380 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.511997][T13007] Tainted: [L]=SOFTLOCKUP [ 536.512006][T13007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 536.512022][T13007] Call Trace: [ 536.512031][T13007] [ 536.512042][T13007] dump_stack_lvl+0x100/0x190 [ 536.512089][T13007] should_fail_ex.cold+0x5/0xa [ 536.512122][T13007] should_failslab+0xc2/0x120 [ 536.512160][T13007] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 536.512200][T13007] ? __pmd_alloc+0xbf/0x950 [ 536.512238][T13007] __pmd_alloc+0xbf/0x950 [ 536.512292][T13007] move_page_tables+0x2f7c/0x4610 [ 536.512334][T13007] ? __pfx_copy_vma+0x10/0x10 [ 536.512383][T13007] ? __pfx_move_page_tables+0x10/0x10 [ 536.512455][T13007] copy_vma_and_data+0x25c/0x7c0 [ 536.512499][T13007] ? __pfx_copy_vma_and_data+0x10/0x10 [ 536.512551][T13007] ? __vma_start_write+0x17f/0x280 [ 536.512586][T13007] ? __pfx___vma_start_write+0x10/0x10 [ 536.512629][T13007] move_vma+0x574/0x1920 [ 536.512686][T13007] ? __pfx_move_vma+0x10/0x10 [ 536.512729][T13007] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 536.512761][T13007] ? cap_mmap_addr+0x4b/0x120 [ 536.512785][T13007] ? bpf_lsm_mmap_addr+0x9/0x30 [ 536.512807][T13007] ? security_mmap_addr+0x71/0x1e0 [ 536.512840][T13007] ? __get_unmapped_area+0x255/0x3e0 [ 536.512874][T13007] ? vrm_set_new_addr+0x204/0x290 [ 536.512915][T13007] mremap_to+0x234/0x4c0 [ 536.512956][T13007] ? mas_walk+0x6ef/0x9b0 [ 536.512989][T13007] ? __pfx_mremap_to+0x10/0x10 [ 536.513027][T13007] ? check_prep_vma+0x912/0xe60 [ 536.513072][T13007] __do_sys_mremap+0x88c/0x1850 [ 536.513122][T13007] ? __pfx___do_sys_mremap+0x10/0x10 [ 536.513173][T13007] ? do_futex+0x192/0x350 [ 536.513199][T13007] ? __pfx_do_futex+0x10/0x10 [ 536.513233][T13007] ? __x64_sys_futex+0x34f/0x4d0 [ 536.513307][T13007] ? rcu_is_watching+0x12/0xc0 [ 536.513341][T13007] do_syscall_64+0x115/0x840 [ 536.513376][T13007] ? clear_bhb_loop+0x40/0x90 [ 536.513430][T13007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.513465][T13007] RIP: 0033:0x7f6f2db9ce59 [ 536.513486][T13007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.513511][T13007] RSP: 002b:00007f6f2e9db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 536.513536][T13007] RAX: ffffffffffffffda RBX: 00007f6f2de15fa0 RCX: 00007f6f2db9ce59 [ 536.513553][T13007] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 536.513568][T13007] RBP: 00007f6f2dc32d6f R08: 0000000100001000 R09: 0000000000000000 [ 536.513584][T13007] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 536.513599][T13007] R13: 00007f6f2de16038 R14: 00007f6f2de15fa0 R15: 00007ffe22fa6328 [ 536.513631][T13007] [ 536.834702][T11016] Bluetooth: hci9: command tx timeout [ 536.924204][T12940] team0: Port device team_slave_0 added [ 536.935823][T12940] team0: Port device team_slave_1 added [ 536.963486][T12940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.970758][T12940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 536.997026][T12940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 537.010568][T12940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.017852][T12940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.045615][T12940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.093480][T12940] hsr_slave_0: entered promiscuous mode [ 537.106610][T12940] hsr_slave_1: entered promiscuous mode [ 537.113179][T12940] debugfs: 'hsr0' already exists in 'hsr' [ 537.128665][T12940] Cannot create hsr debugfs directory [ 537.232670][T13013] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 538.923472][T11016] Bluetooth: hci9: command tx timeout [ 539.143362][T12940] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.461038][T12940] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.634574][T11016] Bluetooth: hci5: command 0x0406 tx timeout [ 539.643593][T11014] Bluetooth: hci3: command 0x0406 tx timeout [ 539.833223][T12940] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.159356][T12940] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.994553][ T5639] Bluetooth: hci9: command tx timeout [ 541.703763][T12940] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 541.721797][T12940] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 541.730625][T12940] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 541.783738][T12940] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 541.803901][T12940] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 541.838148][T12940] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 541.861054][T12940] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 541.883203][T12940] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 542.185596][T13054] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 542.297733][T12940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.351013][T12940] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.406815][ T8884] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.414285][ T8884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.505271][ T6357] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.512522][ T6357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.931365][T13059] block2mtd: illegal erase size [ 543.554309][ T5639] block nbd42: Receive control failed (result -32) [ 543.630522][T13075] futex_wake_op: syz.7.1393 tries to shift op by -2048; fix this program [ 543.644832][T13075] futex_wake_op: syz.7.1393 tries to shift op by -2048; fix this program [ 543.754796][T13075] 0x000000000001-0x000000020000 : "" [ 544.032227][T13075] ftl_cs: FTL header corrupt! [ 545.396000][T12940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.748779][T12940] veth0_vlan: entered promiscuous mode [ 545.893148][T12940] veth1_vlan: entered promiscuous mode [ 546.049581][T12940] veth0_macvtap: entered promiscuous mode [ 546.063781][T12940] veth1_macvtap: entered promiscuous mode [ 546.097625][T12940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.160977][T12940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.241624][ T8884] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.285942][ T8884] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.369382][ T8884] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.414581][ T8884] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 547.168164][ T6351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.193663][ T6351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.307997][ T6361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.335009][ T6361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.502981][T13126] vivid-007: ================= START STATUS ================= [ 547.544116][T13126] vivid-007: Generate PTS: true [ 547.632411][T13126] vivid-007: Generate SCR: true [ 547.640486][T13126] tpg source WxH: 320x240 (Y'CbCr) [ 547.647865][T13126] tpg field: 1 [ 547.651493][T13126] tpg crop: (0,0)/320x240 [ 547.656698][T13126] tpg compose: (0,0)/320x240 [ 547.661397][T13126] tpg colorspace: 8 [ 547.682882][T13126] tpg transfer function: 0/0 [ 547.705732][T13126] tpg Y'CbCr encoding: 0/0 [ 547.735382][T13126] tpg quantization: 0/0 [ 547.763608][T13126] tpg RGB range: 0/2 [ 547.781023][T13126] vivid-007: ================== END STATUS ================== [ 548.455847][T13148] bond0: invalid ARP target specified [ 549.884304][T13163] FAULT_INJECTION: forcing a failure. [ 549.884304][T13163] name failslab, interval 1, probability 0, space 0, times 0 [ 549.911886][T13163] CPU: 0 UID: 0 PID: 13163 Comm: syz.3.1412 Tainted: G L syzkaller #0 PREEMPT(full) [ 549.911941][T13163] Tainted: [L]=SOFTLOCKUP [ 549.911953][T13163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 549.911973][T13163] Call Trace: [ 549.911995][T13163] [ 549.912009][T13163] dump_stack_lvl+0x100/0x190 [ 549.912075][T13163] should_fail_ex.cold+0x5/0xa [ 549.912119][T13163] should_failslab+0xc2/0x120 [ 549.912163][T13163] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 549.912221][T13163] ? __pmd_alloc+0xbf/0x950 [ 549.912275][T13163] __pmd_alloc+0xbf/0x950 [ 549.912323][T13163] move_page_tables+0x2f7c/0x4610 [ 549.912383][T13163] ? __pfx_copy_vma+0x10/0x10 [ 549.912452][T13163] ? __pfx_move_page_tables+0x10/0x10 [ 549.912545][T13163] copy_vma_and_data+0x25c/0x7c0 [ 549.912635][T13163] ? __pfx_copy_vma_and_data+0x10/0x10 [ 549.912712][T13163] ? __vma_start_write+0x17f/0x280 [ 549.912758][T13163] ? __pfx___vma_start_write+0x10/0x10 [ 549.912807][T13163] move_vma+0x574/0x1920 [ 549.912865][T13163] ? __pfx_move_vma+0x10/0x10 [ 549.912936][T13163] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 549.912981][T13163] ? cap_mmap_addr+0x4b/0x120 [ 549.913015][T13163] ? bpf_lsm_mmap_addr+0x9/0x30 [ 549.913064][T13163] ? security_mmap_addr+0x71/0x1e0 [ 549.913110][T13163] ? __get_unmapped_area+0x255/0x3e0 [ 549.913156][T13163] ? vrm_set_new_addr+0x204/0x290 [ 549.913213][T13163] mremap_to+0x234/0x4c0 [ 549.913264][T13163] ? mas_walk+0x6ef/0x9b0 [ 549.913316][T13163] ? __pfx_mremap_to+0x10/0x10 [ 549.913374][T13163] ? check_prep_vma+0x912/0xe60 [ 549.913434][T13163] __do_sys_mremap+0x88c/0x1850 [ 549.913509][T13163] ? __pfx___do_sys_mremap+0x10/0x10 [ 549.913573][T13163] ? do_futex+0x192/0x350 [ 549.913610][T13163] ? __pfx_do_futex+0x10/0x10 [ 549.913659][T13163] ? __x64_sys_futex+0x34f/0x4d0 [ 549.913712][T13163] ? rcu_is_watching+0x12/0xc0 [ 549.913760][T13163] do_syscall_64+0x115/0x840 [ 549.913833][T13163] ? clear_bhb_loop+0x40/0x90 [ 549.913877][T13163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.913948][T13163] RIP: 0033:0x7fe63af9ce59 [ 549.913979][T13163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.914038][T13163] RSP: 002b:00007fe63bf15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 549.914125][T13163] RAX: ffffffffffffffda RBX: 00007fe63b215fa0 RCX: 00007fe63af9ce59 [ 549.914148][T13163] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 549.914191][T13163] RBP: 00007fe63b032d6f R08: 0000000102000000 R09: 0000000000000000 [ 549.914243][T13163] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 549.914265][T13163] R13: 00007fe63b216038 R14: 00007fe63b215fa0 R15: 00007ffe9a80c298 [ 549.914347][T13163] [ 550.243856][T13165] FAULT_INJECTION: forcing a failure. [ 550.243856][T13165] name failslab, interval 1, probability 0, space 0, times 0 [ 550.257661][T13165] CPU: 0 UID: 0 PID: 13165 Comm: syz.8.1413 Tainted: G L syzkaller #0 PREEMPT(full) [ 550.257714][T13165] Tainted: [L]=SOFTLOCKUP [ 550.257727][T13165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 550.257749][T13165] Call Trace: [ 550.257760][T13165] [ 550.257774][T13165] dump_stack_lvl+0x100/0x190 [ 550.257840][T13165] should_fail_ex.cold+0x5/0xa [ 550.257888][T13165] should_failslab+0xc2/0x120 [ 550.257943][T13165] __kvmalloc_node_noprof+0xfa/0xa00 [ 550.257977][T13165] ? open_substream+0x311/0x9b0 [ 550.258030][T13165] open_substream+0x311/0x9b0 [ 550.258073][T13165] ? lockdep_hardirqs_on+0x78/0x100 [ 550.258118][T13165] rawmidi_open_priv+0x595/0x6f0 [ 550.258170][T13165] snd_rawmidi_open+0x4c9/0xba0 [ 550.258223][T13165] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 550.258273][T13165] ? __pfx_default_wake_function+0x10/0x10 [ 550.258315][T13165] ? kobject_get_unless_zero+0x156/0x200 [ 550.258367][T13165] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 550.258413][T13165] snd_open+0x201/0x450 [ 550.258454][T13165] ? __pfx_snd_open+0x10/0x10 [ 550.258491][T13165] chrdev_open+0x234/0x6a0 [ 550.258527][T13165] ? __pfx_apparmor_file_open+0x10/0x10 [ 550.258560][T13165] ? __pfx_chrdev_open+0x10/0x10 [ 550.258599][T13165] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 550.258646][T13165] do_dentry_open+0x6ab/0x14d0 [ 550.258681][T13165] ? __pfx_chrdev_open+0x10/0x10 [ 550.258724][T13165] vfs_open+0x82/0x3f0 [ 550.258771][T13165] path_openat+0x208c/0x31a0 [ 550.258819][T13165] ? __pfx_path_openat+0x10/0x10 [ 550.258868][T13165] do_file_open+0x20e/0x430 [ 550.258908][T13165] ? __pfx_do_file_open+0x10/0x10 [ 550.258975][T13165] ? alloc_fd+0x476/0x790 [ 550.259014][T13165] ? do_getname+0x191/0x390 [ 550.259060][T13165] do_sys_openat2+0x10d/0x1e0 [ 550.259107][T13165] ? __pfx_do_sys_openat2+0x10/0x10 [ 550.259165][T13165] __x64_sys_openat+0x12d/0x210 [ 550.259212][T13165] ? __pfx___x64_sys_openat+0x10/0x10 [ 550.259265][T13165] ? rcu_is_watching+0x12/0xc0 [ 550.259303][T13165] do_syscall_64+0x115/0x840 [ 550.259345][T13165] ? clear_bhb_loop+0x40/0x90 [ 550.259381][T13165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.259411][T13165] RIP: 0033:0x7f6689d9ce59 [ 550.259437][T13165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.259466][T13165] RSP: 002b:00007f668abe5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 550.259495][T13165] RAX: ffffffffffffffda RBX: 00007f668a015fa0 RCX: 00007f6689d9ce59 [ 550.259515][T13165] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 550.259534][T13165] RBP: 00007f6689e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 550.259553][T13165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.259571][T13165] R13: 00007f668a016038 R14: 00007f668a015fa0 R15: 00007ffc85bff7c8 [ 550.259620][T13165] [ 551.075762][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055657000: rx timeout, send abort [ 551.088776][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888055657000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 551.398801][T13175] ubi0: attaching mtd0 [ 551.500991][T13175] ubi0: scanning is finished [ 551.521354][T13175] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 551.599868][T13174] random: crng reseeded on system resumption [ 552.050579][T13175] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 552.663733][T13184] FAULT_INJECTION: forcing a failure. [ 552.663733][T13184] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 552.701613][T13184] CPU: 0 UID: 0 PID: 13184 Comm: syz.7.1418 Tainted: G L syzkaller #0 PREEMPT(full) [ 552.701666][T13184] Tainted: [L]=SOFTLOCKUP [ 552.701679][T13184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 552.701698][T13184] Call Trace: [ 552.701710][T13184] [ 552.701722][T13184] dump_stack_lvl+0x100/0x190 [ 552.701790][T13184] should_fail_ex.cold+0x5/0xa [ 552.701825][T13184] ? prepare_alloc_pages+0x16d/0x5f0 [ 552.701873][T13184] should_fail_alloc_page+0xeb/0x140 [ 552.701917][T13184] prepare_alloc_pages+0x1f0/0x5f0 [ 552.701968][T13184] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 552.702027][T13184] ? __lock_acquire+0x4a5/0x2630 [ 552.702088][T13184] ? __lock_acquire+0x4a5/0x2630 [ 552.702148][T13184] ? __lock_acquire+0x4a5/0x2630 [ 552.702197][T13184] ? __css_rstat_updated+0x1ce/0x5a0 [ 552.702251][T13184] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 552.702333][T13184] ? do_raw_spin_lock+0x128/0x260 [ 552.702371][T13184] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 552.702414][T13184] ? find_held_lock+0x2b/0x80 [ 552.702469][T13184] ? __lock_acquire+0x4a5/0x2630 [ 552.702522][T13184] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 552.702574][T13184] ? policy_nodemask+0xed/0x4f0 [ 552.702631][T13184] alloc_pages_mpol+0x1fb/0x540 [ 552.702675][T13184] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 552.702716][T13184] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 552.702752][T13184] ? __folio_batch_add_and_move+0x5e5/0xc60 [ 552.702792][T13184] folio_alloc_mpol_noprof+0x36/0x260 [ 552.702843][T13184] shmem_alloc_folio+0x135/0x160 [ 552.702893][T13184] shmem_alloc_and_add_folio+0x371/0xd40 [ 552.702959][T13184] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 552.703019][T13184] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 552.703065][T13184] shmem_get_folio_gfp+0x6ab/0x1900 [ 552.703109][T13184] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 552.703144][T13184] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 552.703179][T13184] ? lockdep_hardirqs_on+0x78/0x100 [ 552.703234][T13184] shmem_fault+0x1f9/0xa20 [ 552.703265][T13184] ? __lock_acquire+0x4a5/0x2630 [ 552.703318][T13184] ? __pfx_shmem_fault+0x10/0x10 [ 552.703351][T13184] ? __up_read+0x2c1/0x6e0 [ 552.703404][T13184] ? __pfx_filemap_map_pages+0x10/0x10 [ 552.703456][T13184] __do_fault+0x10b/0x440 [ 552.703489][T13184] ? find_held_lock+0x2b/0x80 [ 552.703534][T13184] do_fault+0x2db/0x1750 [ 552.703582][T13184] __handle_mm_fault+0x187d/0x2a00 [ 552.703649][T13184] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 552.703692][T13184] ? __pfx___handle_mm_fault+0x10/0x10 [ 552.703747][T13184] ? pte_offset_map_lock+0x174/0x320 [ 552.703787][T13184] ? find_held_lock+0x2b/0x80 [ 552.703841][T13184] ? follow_page_pte+0x4d0/0x13f0 [ 552.703892][T13184] handle_mm_fault+0x37b/0xa30 [ 552.703952][T13184] __get_user_pages+0x1178/0x32a0 [ 552.704003][T13184] ? down_read_killable+0x307/0x4b0 [ 552.704043][T13184] ? __pfx___get_user_pages+0x10/0x10 [ 552.704094][T13184] faultin_page_range+0x1f1/0x9e0 [ 552.704146][T13184] madvise_do_behavior+0x354/0x510 [ 552.704196][T13184] ? __pfx_madvise_do_behavior+0x10/0x10 [ 552.704264][T13184] do_madvise+0x195/0x240 [ 552.704307][T13184] ? __pfx_do_madvise+0x10/0x10 [ 552.704352][T13184] ? do_futex+0x192/0x350 [ 552.704424][T13184] __x64_sys_madvise+0xa9/0x110 [ 552.704471][T13184] ? lockdep_hardirqs_on+0x78/0x100 [ 552.704523][T13184] do_syscall_64+0x115/0x840 [ 552.704570][T13184] ? clear_bhb_loop+0x40/0x90 [ 552.704620][T13184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.704657][T13184] RIP: 0033:0x7efeaad9ce59 [ 552.704684][T13184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.704717][T13184] RSP: 002b:00007efeabd17028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 552.704749][T13184] RAX: ffffffffffffffda RBX: 00007efeab015fa0 RCX: 00007efeaad9ce59 [ 552.704771][T13184] RDX: 0000000000000017 RSI: ffffffffffff0005 RDI: 0000000000000000 [ 552.704792][T13184] RBP: 00007efeaae32d6f R08: 0000000000000000 R09: 0000000000000000 [ 552.704812][T13184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.704832][T13184] R13: 00007efeab016038 R14: 00007efeab015fa0 R15: 00007fff08cbc868 [ 552.704876][T13184] [ 553.134041][T13203] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1421'. [ 553.173477][T13208] FAULT_INJECTION: forcing a failure. [ 553.173477][T13208] name failslab, interval 1, probability 0, space 0, times 0 [ 553.203242][T13203] hsr_slave_0 (unregistering): left promiscuous mode [ 553.251569][T13208] CPU: 1 UID: 0 PID: 13208 Comm: syz.3.1422 Tainted: G L syzkaller #0 PREEMPT(full) [ 553.251625][T13208] Tainted: [L]=SOFTLOCKUP [ 553.251639][T13208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 553.251659][T13208] Call Trace: [ 553.251671][T13208] [ 553.251685][T13208] dump_stack_lvl+0x100/0x190 [ 553.251751][T13208] should_fail_ex.cold+0x5/0xa [ 553.251795][T13208] should_failslab+0xc2/0x120 [ 553.251841][T13208] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 553.251904][T13208] ? __pmd_alloc+0xbf/0x950 [ 553.251962][T13208] __pmd_alloc+0xbf/0x950 [ 553.252011][T13208] move_page_tables+0x2f7c/0x4610 [ 553.252073][T13208] ? __pfx_copy_vma+0x10/0x10 [ 553.252146][T13208] ? __pfx_move_page_tables+0x10/0x10 [ 553.252243][T13208] copy_vma_and_data+0x25c/0x7c0 [ 553.252303][T13208] ? __pfx_copy_vma_and_data+0x10/0x10 [ 553.252377][T13208] ? __vma_start_write+0x17f/0x280 [ 553.252427][T13208] ? __pfx___vma_start_write+0x10/0x10 [ 553.252490][T13208] move_vma+0x574/0x1920 [ 553.252551][T13208] ? __pfx_move_vma+0x10/0x10 [ 553.252612][T13208] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 553.252658][T13208] ? cap_mmap_addr+0x4b/0x120 [ 553.252692][T13208] ? bpf_lsm_mmap_addr+0x9/0x30 [ 553.252724][T13208] ? security_mmap_addr+0x71/0x1e0 [ 553.252770][T13208] ? __get_unmapped_area+0x255/0x3e0 [ 553.252817][T13208] ? vrm_set_new_addr+0x204/0x290 [ 553.252877][T13208] mremap_to+0x234/0x4c0 [ 553.252928][T13208] ? mas_walk+0x6ef/0x9b0 [ 553.252975][T13208] ? __pfx_mremap_to+0x10/0x10 [ 553.253029][T13208] ? check_prep_vma+0x912/0xe60 [ 553.253094][T13208] __do_sys_mremap+0x88c/0x1850 [ 553.253172][T13208] ? __pfx___do_sys_mremap+0x10/0x10 [ 553.253236][T13208] ? do_futex+0x192/0x350 [ 553.253273][T13208] ? __pfx_do_futex+0x10/0x10 [ 553.253320][T13208] ? __x64_sys_futex+0x34f/0x4d0 [ 553.253372][T13208] ? rcu_is_watching+0x12/0xc0 [ 553.253418][T13208] do_syscall_64+0x115/0x840 [ 553.253468][T13208] ? clear_bhb_loop+0x40/0x90 [ 553.253509][T13208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.253546][T13208] RIP: 0033:0x7fe63af9ce59 [ 553.253574][T13208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.253607][T13208] RSP: 002b:00007fe63bf15028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 553.253639][T13208] RAX: ffffffffffffffda RBX: 00007fe63b215fa0 RCX: 00007fe63af9ce59 [ 553.253663][T13208] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 553.253683][T13208] RBP: 00007fe63b032d6f R08: 0000000107000000 R09: 0000000000000000 [ 553.253704][T13208] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 553.253723][T13208] R13: 00007fe63b216038 R14: 00007fe63b215fa0 R15: 00007ffe9a80c298 [ 553.253767][T13208] [ 553.595263][ T5639] block nbd43: Receive control failed (result -32) [ 555.182851][T13251] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 555.190921][T13246] FAULT_INJECTION: forcing a failure. [ 555.190921][T13246] name failslab, interval 1, probability 0, space 0, times 0 [ 555.212027][T13246] CPU: 1 UID: 0 PID: 13246 Comm: syz.9.1432 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.212086][T13246] Tainted: [L]=SOFTLOCKUP [ 555.212098][T13246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 555.212250][T13246] Call Trace: [ 555.212264][T13246] [ 555.212278][T13246] dump_stack_lvl+0x100/0x190 [ 555.212344][T13246] should_fail_ex.cold+0x5/0xa [ 555.212388][T13246] should_failslab+0xc2/0x120 [ 555.212430][T13246] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 555.212483][T13246] ? security_inode_alloc+0x3b/0x2c0 [ 555.212549][T13246] ? lockdep_init_map_type+0x5c/0x250 [ 555.212604][T13246] security_inode_alloc+0x3b/0x2c0 [ 555.212639][T13246] inode_init_always_gfp+0xc77/0xfb0 [ 555.212681][T13246] alloc_inode+0x8e/0x250 [ 555.212727][T13246] sock_alloc+0x44/0x280 [ 555.212758][T13246] ? security_socket_create+0x7f/0x250 [ 555.212790][T13246] __sock_create+0xc2/0x860 [ 555.212836][T13246] __sys_socket+0x14d/0x260 [ 555.212878][T13246] ? __pfx___sys_socket+0x10/0x10 [ 555.212917][T13246] ? trace_kmalloc+0xe3/0x110 [ 555.212960][T13246] __x64_sys_socket+0x72/0xb0 [ 555.213001][T13246] ? lockdep_hardirqs_on+0x78/0x100 [ 555.213044][T13246] do_syscall_64+0x115/0x840 [ 555.213085][T13246] ? clear_bhb_loop+0x40/0x90 [ 555.213123][T13246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.213154][T13246] RIP: 0033:0x7f6f2db9ce59 [ 555.213180][T13246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.213209][T13246] RSP: 002b:00007f6f2e9db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 555.213239][T13246] RAX: ffffffffffffffda RBX: 00007f6f2de15fa0 RCX: 00007f6f2db9ce59 [ 555.213264][T13246] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 555.213282][T13246] RBP: 00007f6f2dc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 555.213300][T13246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.213318][T13246] R13: 00007f6f2de16038 R14: 00007f6f2de15fa0 R15: 00007ffe22fa6328 [ 555.213356][T13246] [ 555.213420][T13246] net_ratelimit: 196 callbacks suppressed [ 555.213448][T13246] socket: no more sockets [ 555.503725][T13245] vivid-007: ================= START STATUS ================= [ 555.579339][T13245] vivid-007: Generate PTS: true [ 555.638894][T13245] vivid-007: Generate SCR: true [ 555.717135][T13245] tpg source WxH: 320x240 (Y'CbCr) [ 555.790262][T13245] tpg field: 1 [ 555.831426][T13245] tpg crop: (0,0)/320x240 [ 555.865185][T13245] tpg compose: (0,0)/320x240 [ 555.888176][T13245] tpg colorspace: 8 [ 555.899062][T13245] tpg transfer function: 0/0 [ 555.945783][T13245] tpg Y'CbCr encoding: 0/0 [ 555.981061][T13245] tpg quantization: 0/0 [ 556.001671][T13245] tpg RGB range: 0/2 [ 556.001707][T13245] vivid-007: ================== END STATUS ================== [ 556.288457][T13262] FAULT_INJECTION: forcing a failure. [ 556.288457][T13262] name failslab, interval 1, probability 0, space 0, times 0 [ 556.321931][T13262] CPU: 1 UID: 0 PID: 13262 Comm: syz.9.1434 Tainted: G L syzkaller #0 PREEMPT(full) [ 556.322016][T13262] Tainted: [L]=SOFTLOCKUP [ 556.322030][T13262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 556.322053][T13262] Call Trace: [ 556.322065][T13262] [ 556.322080][T13262] dump_stack_lvl+0x100/0x190 [ 556.322148][T13262] should_fail_ex.cold+0x5/0xa [ 556.322193][T13262] should_failslab+0xc2/0x120 [ 556.322237][T13262] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 556.322304][T13262] ? anon_vma_clone+0x2ba/0xcd0 [ 556.322362][T13262] anon_vma_clone+0x2ba/0xcd0 [ 556.322425][T13262] __split_vma+0x51f/0xda0 [ 556.322485][T13262] ? __pfx___split_vma+0x10/0x10 [ 556.322551][T13262] ? do_raw_spin_lock+0x128/0x260 [ 556.322603][T13262] vms_gather_munmap_vmas+0x1d2/0x1720 [ 556.322668][T13262] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 556.322725][T13262] ? do_raw_spin_unlock+0x145/0x1e0 [ 556.322765][T13262] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 556.322835][T13262] ? debug_object_assert_init+0x1c4/0x300 [ 556.322887][T13262] ? do_raw_spin_lock+0x128/0x260 [ 556.322926][T13262] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 556.322974][T13262] ? find_held_lock+0x2b/0x80 [ 556.323024][T13262] do_vmi_align_munmap+0x287/0x5f0 [ 556.323087][T13262] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 556.323143][T13262] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 556.323244][T13262] do_vmi_munmap+0x1f8/0x3e0 [ 556.323306][T13262] do_munmap+0xba/0x100 [ 556.323350][T13262] ? __pfx_do_munmap+0x10/0x10 [ 556.323418][T13262] mremap_to+0x2b3/0x4c0 [ 556.323470][T13262] ? mas_walk+0x6ef/0x9b0 [ 556.323516][T13262] ? __pfx_mremap_to+0x10/0x10 [ 556.323568][T13262] ? check_prep_vma+0x912/0xe60 [ 556.323626][T13262] __do_sys_mremap+0x88c/0x1850 [ 556.323692][T13262] ? __pfx___do_sys_mremap+0x10/0x10 [ 556.323753][T13262] ? do_futex+0x192/0x350 [ 556.323789][T13262] ? __pfx_do_futex+0x10/0x10 [ 556.323836][T13262] ? __x64_sys_futex+0x34f/0x4d0 [ 556.323887][T13262] ? rcu_is_watching+0x12/0xc0 [ 556.323933][T13262] do_syscall_64+0x115/0x840 [ 556.323990][T13262] ? clear_bhb_loop+0x40/0x90 [ 556.324032][T13262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.324067][T13262] RIP: 0033:0x7f6f2db9ce59 [ 556.324097][T13262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.324132][T13262] RSP: 002b:00007f6f2e9db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 556.324167][T13262] RAX: ffffffffffffffda RBX: 00007f6f2de15fa0 RCX: 00007f6f2db9ce59 [ 556.324190][T13262] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 556.324212][T13262] RBP: 00007f6f2dc32d6f R08: 0000200000001000 R09: 0000000000000000 [ 556.324233][T13262] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 556.324254][T13262] R13: 00007f6f2de16038 R14: 00007f6f2de15fa0 R15: 00007ffe22fa6328 [ 556.324298][T13262] [ 557.034554][T13272] futex_wake_op: syz.7.1436 tries to shift op by -2048; fix this program [ 557.209056][ T5639] block nbd44: Receive control failed (result -32) [ 557.901023][ T5639] Bluetooth: hci9: unexpected subevent 0x01 length: 123 > 18 [ 558.403674][T13277] bond0: option slaves: interface -Âô]àæ©=,Dço does not exist! [ 559.957366][ T50] Bluetooth: hci9: command 0x2016 tx timeout [ 560.942940][ T50] block nbd45: Receive control failed (result -32) [ 561.235357][ T31] INFO: task syz.0.940:10735 blocked for more than 143 seconds. [ 561.260833][ T31] Tainted: G L syzkaller #0 [ 561.282399][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 561.346097][ T31] task:syz.0.940 state:D stack:28136 pid:10735 tgid:10731 ppid:5634 task_flags:0x400140 flags:0x00080002 [ 561.395306][ T31] Call Trace: [ 561.417858][ T31] [ 561.437306][ T31] __schedule+0x1295/0x67a0 [ 561.455605][ T31] ? __pfx___schedule+0x10/0x10 [ 561.468300][ T31] ? find_held_lock+0x2b/0x80 [ 561.485035][ T31] ? schedule+0x2bf/0x390 [ 561.490566][ T31] schedule+0xdd/0x390 [ 561.505770][ T31] schedule_preempt_disabled+0x13/0x30 [ 561.534196][ T31] __mutex_lock+0xced/0x1b10 [ 561.555716][ T31] ? nfsd_nl_listener_get_doit+0x13e/0x7b0 [ 561.574222][ T31] ? __kmalloc_node_track_caller_noprof+0x321/0x850 [ 561.581090][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 561.586406][ T31] ? kmalloc_reserve+0xf9/0x350 [ 561.591352][ T31] ? skb_put+0x138/0x180 [ 561.596126][ T31] ? __nlmsg_put+0x152/0x1c0 [ 561.601447][ T31] ? nfsd_nl_listener_get_doit+0x13e/0x7b0 [ 561.608210][ T31] nfsd_nl_listener_get_doit+0x13e/0x7b0 [ 561.632280][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 561.649927][ T31] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 561.685800][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 561.720604][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 561.738326][ T31] ? genl_get_cmd+0x3e7/0x760 [ 561.752435][ T31] ? __dev_queue_xmit+0xa10/0x4950 [ 561.759149][ T31] ? __radix_tree_lookup+0x217/0x2b0 [ 561.770398][ T31] genl_rcv_msg+0x560/0x800 [ 561.782747][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 561.799088][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 561.825921][ T31] netlink_rcv_skb+0x159/0x420 [ 561.841839][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 561.857859][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 561.876409][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 561.903372][ T31] genl_rcv+0x28/0x40 [ 561.924179][ T31] netlink_unicast+0x585/0x850 [ 561.950877][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 561.996487][ T31] netlink_sendmsg+0x8b0/0xda0 [ 562.017727][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 562.036352][ T50] Bluetooth: hci9: command 0x2016 tx timeout [ 562.049699][ T31] ? __import_iovec+0x1d2/0x640 [ 562.057002][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 562.075379][ T31] ____sys_sendmsg+0x9e1/0xb70 [ 562.097871][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 562.131844][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 562.156904][ T31] ? kasan_quarantine_put+0x104/0x240 [ 562.186156][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 562.202159][T13345] vivid-007: ================= START STATUS ================= [ 562.214456][T13345] vivid-007: Generate PTS: true [ 562.221679][ T31] ___sys_sendmsg+0x190/0x1e0 [ 562.258860][T13345] vivid-007: Generate SCR: true [ 562.266055][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 562.275042][ T31] ? tomoyo_path_number_perm+0x188/0x580 [ 562.281508][ T31] __sys_sendmsg+0x170/0x220 [ 562.288624][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 562.296325][ T31] ? kcov_ioctl+0x16a/0x720 [ 562.301141][ T31] ? rcu_is_watching+0x12/0xc0 [ 562.305722][T13345] tpg source WxH: 320x240 (Y'CbCr) [ 562.312610][ T31] ? kcov_ioctl+0x16a/0x720 [ 562.319860][ T31] ? rcu_is_watching+0x12/0xc0 [ 562.324923][ T31] do_syscall_64+0x115/0x840 [ 562.336404][T13345] tpg field: 1 [ 562.339979][ T31] ? clear_bhb_loop+0x40/0x90 [ 562.345988][T13345] tpg crop: (0,0)/320x240 [ 562.350551][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.358192][ T31] RIP: 0033:0x7fc26419ce59 [ 562.363330][T13345] tpg compose: (0,0)/320x240 [ 562.370200][ T31] RSP: 002b:00007fc2650d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.380367][ T31] RAX: ffffffffffffffda RBX: 00007fc264416090 RCX: 00007fc26419ce59 [ 562.388985][T13345] tpg colorspace: 8 [ 562.396581][ T31] RDX: 0000000020010090 RSI: 0000200000000380 RDI: 0000000000000004 [ 562.407018][ T31] RBP: 00007fc264232d6f R08: 0000000000000000 R09: 0000000000000000 [ 562.417723][T13345] tpg transfer function: 0/0 [ 562.423138][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.441013][T13345] tpg Y'CbCr encoding: 0/0 [ 562.446866][ T31] R13: 00007fc264416128 R14: 00007fc264416090 R15: 00007ffe09153578 [ 562.456919][T13345] tpg quantization: 0/0 [ 562.461758][ T31] [ 562.466878][ T31] [ 562.466878][ T31] Showing all locks held in the system: [ 562.477283][T13345] tpg RGB range: 0/2 [ 562.489433][ T31] 1 lock held by khungtaskd/31: [ 562.507433][T13345] vivid-007: ================== END STATUS ================== [ 562.519495][ T31] #0: ffffffff8e7e53e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 562.552343][ T31] 4 locks held by kworker/u9:3/5639: [ 562.564333][ T31] #0: ffff888035215140 ((wq_completion)hci9){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 562.583772][ T31] #1: ffffc9000419fd08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 562.597903][ T31] #2: ffff888053e68ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 562.617894][ T31] #3: ffff888053e680b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x141/0xb20 [ 562.643582][ T31] 3 locks held by kworker/0:4/5727: [ 562.656866][ T31] #0: ffff88813fe57140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 562.678757][ T31] #1: ffffc9000450fd08 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 562.705304][ T31] #2: ffffffff8e7f0df8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 562.724413][ T31] 4 locks held by kworker/u8:11/6352: [ 562.740327][ T31] #0: ffff8880b843b420 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 562.766304][ T31] #1: ffff88805e4a6008 (&____s->seqcount#15){.-.-}-{0:0}, at: trace_ignore_this_task+0xbc/0x100 [ 562.785332][ T31] #2: ffff8880b8426358 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x6e7/0xca0 [ 562.802593][ T31] #3: ffffffff9b36c450 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x144/0x490 [ 562.822751][ T31] 2 locks held by syz-executor/7510: [ 562.834455][ T31] #0: ffff88807a6040d8 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 562.858828][ T31] #1: ffffffff8ec62260 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 562.876837][ T31] 2 locks held by kworker/u8:28/8882: [ 562.889125][ T31] #0: ffff88801f3bf140 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 562.911722][ T31] #1: ffffc90006a17d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 562.945449][ T31] 3 locks held by kworker/u8:30/8884: [ 562.951021][ T31] #0: ffff88801c6a6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 562.973444][ T31] #1: ffffc900069afd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 563.007603][ T31] #2: ffffffff8e7f0df8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 563.027502][ T31] 2 locks held by syz.0.940/10735: [ 563.048032][ T31] #0: ffffffff906b4748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 563.059971][ T31] #1: ffffffff8ec62260 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x13e/0x7b0 [ 563.070408][ T31] 2 locks held by syz.2.941/10734: [ 563.076227][ T31] #0: ffffffff906b4748 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 563.084854][ T31] #1: ffffffff8ec62260 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x8c8/0x1100 [ 563.101294][ T31] 2 locks held by syz-executor/11009: [ 563.106922][ T31] #0: ffff888053bba0d8 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 563.118548][ T31] #1: ffffffff8ec62260 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 563.128554][ T31] 2 locks held by syz-executor/11011: [ 563.135850][ T31] #0: ffff88802ac940d8 (&type->s_umount_key#55){+.+.}-{4:4}, at: deactivate_super+0xdf/0x110 [ 563.149653][ T31] #1: ffffffff8ec62260 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_shutdown_threads+0x5b/0xf0 [ 563.162018][ T31] 3 locks held by syz.1.1270/12384: [ 563.167764][ T31] #0: ffff88802be7a630 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 563.177215][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.183620][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.184554][ T31] #1: ffff888026960410 (sb_writers#3){.+.+}-{0:0}, at: do_writev+0x13e/0x340 [ 563.220819][ T31] #2: ffffffff8ec62260 (nfsd_mutex){+.+.}-{4:4}, at: expkey_flush+0x18/0x90 [ 563.259568][ T31] 2 locks held by syz.8.1446/13321: [ 563.276949][ T31] 1 lock held by syz.7.1449/13334: [ 563.285289][ T31] #0: ffff888036f11bb8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1f5/0x470 [ 563.312003][ T31] 2 locks held by syz.7.1449/13335: [ 563.330475][ T31] 1 lock held by syz.7.1449/13342: [ 563.337352][ T31] #0: ffff88805989c360 (sk_lock-AF_INET){+.+.}-{0:0}, at: sk_setsockopt+0x237c/0x5c40 [ 563.364179][ T31] 1 lock held by syz.7.1449/13345: [ 563.372113][ T31] #0: ffff88805989c360 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_recvmsg+0x11d/0x630 [ 563.394539][ T31] 1 lock held by syz.7.1449/13351: [ 563.399879][ T31] #0: ffffffff8e7f0f28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 563.424180][ T31] 2 locks held by syz.9.1450/13344: [ 563.429491][ T31] #0: ffff88805c2a1f00 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 563.443043][ T31] #1: ffffffff8e7f0f28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 563.466622][ T31] 1 lock held by syz.9.1450/13346: [ 563.477480][ T31] #0: ffff88801db3b1f0 (&sig->exec_update_lock){++++}-{4:4}, at: landlock_restrict_sibling_threads+0x1ea/0x1490 [ 563.504140][ T31] [ 563.522399][ T31] ============================================= [ 563.522399][ T31] [ 563.536190][ T31] NMI backtrace for cpu 1 [ 563.536220][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 563.536263][ T31] Tainted: [L]=SOFTLOCKUP [ 563.536275][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 563.536295][ T31] Call Trace: [ 563.536305][ T31] [ 563.536319][ T31] dump_stack_lvl+0x100/0x190 [ 563.536380][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 563.536420][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 563.536456][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 563.536498][ T31] sys_info+0x141/0x190 [ 563.536527][ T31] watchdog+0xcb1/0x1030 [ 563.536580][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 563.536626][ T31] ? __pfx_watchdog+0x10/0x10 [ 563.536674][ T31] ? __kthread_parkme+0x18c/0x230 [ 563.536721][ T31] ? kthread+0x13a/0x450 [ 563.536768][ T31] ? __pfx_watchdog+0x10/0x10 [ 563.536820][ T31] kthread+0x370/0x450 [ 563.536868][ T31] ? __pfx_kthread+0x10/0x10 [ 563.536921][ T31] ret_from_fork+0x72b/0xd50 [ 563.536956][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 563.536993][ T31] ? __switch_to+0x800/0x1100 [ 563.537037][ T31] ? __switch_to_asm+0x39/0x70 [ 563.537079][ T31] ? __pfx_kthread+0x10/0x10 [ 563.537130][ T31] ret_from_fork_asm+0x1a/0x30 [ 563.537196][ T31] [ 563.537208][ T31] Sending NMI from CPU 1 to CPUs 0: [ 563.686775][ C0] NMI backtrace for cpu 0 [ 563.686800][ C0] CPU: 0 UID: 0 PID: 13338 Comm: syz.9.1450 Tainted: G L syzkaller #0 PREEMPT(full) [ 563.686838][ C0] Tainted: [L]=SOFTLOCKUP [ 563.686848][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 563.686864][ C0] RIP: 0033:0x7f6f2da714c7 [ 563.686887][ C0] Code: 03 14 ef 80 3d 01 69 3a 00 00 49 89 d6 48 89 d3 74 28 25 ff 0f 00 00 83 f0 3d 8d 04 c0 89 c3 c1 eb 04 31 c3 69 db 2d eb d4 27 <89> d8 c1 e8 0f 31 c3 81 e3 ff 0f 00 00 48 31 d3 80 3d 6a 0b 3a 00 [ 563.686913][ C0] RSP: 002b:00007ffe22fa6370 EFLAGS: 00000a83 [ 563.686935][ C0] RAX: 0000000000002934 RBX: 00000000bf65f95b RCX: ffffffff82b754f5 [ 563.686953][ C0] RDX: ffffffff82b753f2 RSI: ffffffff82b754f5 RDI: 00007f6f2d5ff008 [ 563.686971][ C0] RBP: 0000000000002736 R08: 00007f6f2de00000 R09: 00007f6f2de02000 [ 563.686988][ C0] R10: 0000000082b754f9 R11: 0000000000000015 R12: 00007f6f2de16038 [ 563.687004][ C0] R13: 0000000000042392 R14: ffffffff82b753f2 R15: 00007f6f2e945720 [ 563.687022][ C0] FS: 0000555566699500 GS: 0000000000000000 [ 563.948672][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 563.955625][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 563.966468][ T31] Tainted: [L]=SOFTLOCKUP [ 563.970846][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 563.980955][ T31] Call Trace: [ 563.984287][ T31] [ 563.987268][ T31] dump_stack_lvl+0x100/0x190 [ 563.992044][ T31] vpanic+0x552/0x970 [ 563.996097][ T31] ? __pfx_vpanic+0x10/0x10 [ 564.000679][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 564.006907][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 564.013141][ T31] panic+0xd1/0xe0 [ 564.016933][ T31] ? __pfx_panic+0x10/0x10 [ 564.021417][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 564.027655][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 564.033901][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 564.040123][ T31] ? watchdog.cold+0x1ec/0x234 [ 564.044952][ T31] ? watchdog+0xcc1/0x1030 [ 564.049462][ T31] watchdog.cold+0x1fd/0x234 [ 564.054135][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 564.060015][ T31] ? __pfx_watchdog+0x10/0x10 [ 564.064789][ T31] ? __kthread_parkme+0x18c/0x230 [ 564.069889][ T31] ? kthread+0x13a/0x450 [ 564.074207][ T31] ? __pfx_watchdog+0x10/0x10 [ 564.078953][ T31] kthread+0x370/0x450 [ 564.083101][ T31] ? __pfx_kthread+0x10/0x10 [ 564.087770][ T31] ret_from_fork+0x72b/0xd50 [ 564.092440][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 564.097619][ T31] ? __switch_to+0x800/0x1100 [ 564.102374][ T31] ? __switch_to_asm+0x39/0x70 [ 564.107221][ T31] ? __pfx_kthread+0x10/0x10 [ 564.111901][ T31] ret_from_fork_asm+0x1a/0x30 [ 564.116796][ T31] [ 564.120045][ T31] Kernel Offset: disabled [ 564.124399][ T31] Rebooting in 86400 seconds..